Function at 0x432660
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4384b0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x158
mov eax, dword [0x441040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x158], ecx
mov edi, dword [0x4416ac]
mov esi, edi
mov eax, dword [ebx + 8]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x114], 0x20
mov eax, dword [esi + 0x1ba8]
mov dword [ebp - 0xe8], esi
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1ba8]
mov dword [ebp - 0xf4], eax
cmp byte [eax + 0x8f], 0
jne 0x432bb8
mov edx, dword [ebx + 0x14]
mov ecx, edx
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0xd4], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0xe4], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0x160], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x128], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0xd4], 0
mov dword [ebp - 0x118], ecx
je 0x432762
call fcn.004147f0
mov edi, dword [0x4416ac]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0xc4]
xor edx, edx
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x158]
call fcn.00408c80
add esp, 4
mov dword [ebp - 0xd8], eax
cmp dword [edi + 0x1be0], eax
jne 0x432796
mov dword [edi + 0x1be4], eax
cmp dword [edi + 0x1c1c], eax
jne 0x4327a5
mov byte [edi + 0x1c20], 1
cmp dword [edi + 0x1bc8], eax
jne 0x4327c9
push ecx
push dword [ebp - 0x158]
mov edx, 0xb
mov ecx, eax
call fcn.0041a3f0
mov edi, dword [0x4416ac]
add esp, 8
mov eax, dword [ebp - 0x158]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x4327ec
mov dl, byte [ecx]
test dl, dl
je 0x4327ec
cmp dl, 0x23
jne 0x4327e6
cmp byte [ecx + 1], dl
je 0x4327ec
inc ecx
cmp ecx, 0xffffffff
jb 0x4327d6
movss xmm1, dword [0x43ed28]
movss xmm0, dword [edi + 0x1944]
movss dword [ebp - 0x15c], xmm1
cmp eax, ecx
jne 0x432815
xorps xmm3, xmm3
movss dword [ebp - 0x164], xmm3
jmp 0x432866
push ecx
push ecx
push eax
push ecx
mov ecx, dword [edi + 0x1940]
lea eax, [ebp - 0x148]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.00429880
movss xmm0, dword [ebp - 0x148]
xorps xmm3, xmm3
addss xmm0, dword [0x43ec80]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x144]
cmp byte [ebp - 0xd4], 0
je 0x43287f
movss xmm0, dword [esi + 0x1944]
mulss xmm0, dword [0x43ecdc]
test byte [edi + 0x1c34], 1
movss xmm1, dword [esi + 0x1568]
mov eax, dword [edi + 0x1ba8]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x4328ab
movss xmm0, dword [edi + 0x1c38]
jmp 0x4328b3
movss xmm0, dword [eax + 0x178]
comiss xmm3, xmm0
jbe 0x4328f2
cmp dword [eax + 0x168], 0
movss xmm1, dword [eax + 0x200]
jne 0x4328d2
cmp dword [edi + 0x1f60], 0
je 0x4328da
movss xmm1, dword [eax + 0x1d0]
subss xmm1, dword [eax + 0xd0]
addss xmm1, xmm0
movss xmm0, dword [0x43ec88]
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x148]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.00414710
movss xmm1, dword [ebp - 0x164]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x432930
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x157c]
jmp 0x432933
xorps xmm2, xmm2
mov edi, dword [ebp - 0xf4]
lea ecx, [ebp - 0x138]
movss xmm0, dword [ebp - 0x144]
movss xmm5, dword [ebp - 0x148]
addss xmm2, xmm5
movss dword [ebp - 0x154], xmm5
movss xmm4, dword [edi + 0xd4]
movaps xmm1, xmm5
movss xmm3, dword [edi + 0xd0]
addss xmm0, xmm4
addss xmm1, xmm3
movss dword [ebp - 0xbc], xmm3
movss dword [ebp - 0xec], xmm4
addss xmm2, xmm3
movss dword [ebp - 0x54], xmm3
movss dword [ebp - 0x50], xmm4
movss dword [ebp - 0x48], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x4c], xmm1
movss xmm1, dword [esi + 0x1568]
movss dword [ebp - 0x1c], xmm2
subss xmm2, xmm3
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x18], xmm0
subss xmm0, xmm4
movss dword [ebp - 0x20], xmm4
mov dword [ebp - 0x11c], edi
movss dword [ebp - 0x138], xmm2
movss dword [ebp - 0x134], xmm0
call fcn.00414340
cmp byte [ebp - 0xd4], 0
je 0x432c47
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0x24]
call fcn.00414470
add esp, 8
test al, al
je 0x432bb3
mov eax, dword [esi + 0x1c50]
movss xmm0, dword [ebp - 0xbc]
mov esi, dword [0x4416ac]
movss dword [edi + 0xd0], xmm0
movss xmm0, dword [ebp - 0xec]
movss dword [edi + 0xd4], xmm0
movups xmm0, xmmword [esi + 0x1620]
mov dword [ebp - 0x120], eax
lea ecx, [esi + 0x1ce4]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 3
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.0041ac90
mov edi, dword [ebp - 0xe8]
lea eax, [ebp - 0x13c]
push eax
mov dword [ebp - 0x13c], 7
movups xmm0, xmmword [edi + 0x1660]
movups xmmword [esi + 0x1620], xmm0
mov esi, dword [0x4416ac]
movss xmm0, dword [edi + 0x156c]
movss dword [ebp - 0xbc], xmm0
movss xmm0, dword [esi + 0x1554]
lea ecx, [esi + 0x1cf0]
movss dword [ebp - 0x138], xmm0
call fcn.0041abd0
movss xmm0, dword [ebp - 0xbc]
lea eax, [ebp - 0x13c]
movss dword [esi + 0x1554], xmm0
mov esi, dword [0x4416ac]
movss xmm0, dword [edi + 0x1570]
movss dword [ebp - 0xbc], xmm0
push eax
movss xmm0, dword [esi + 0x1558]
lea ecx, [esi + 0x1cf0]
mov dword [ebp - 0x13c], 8
movss dword [ebp - 0x138], xmm0
call fcn.0041abd0
movss xmm0, dword [ebp - 0xbc]
lea eax, [ebp - 0x138]
movss xmm1, dword [ebp - 0x4c]
sub esp, 8
subss xmm1, dword [ebp - 0x54]
mov edx, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x158]
movss dword [esi + 0x1558], xmm0
movss xmm0, dword [ebp - 0x48]
subss xmm0, dword [ebp - 0x50]
push eax
movss dword [ebp - 0x138], xmm1
movss dword [ebp - 0x134], xmm0
call fcn.0040e820
add esp, 0xc
mov byte [ebp - 0xdd], al
mov ecx, 2
call fcn.004093e0
mov esi, dword [0x4416ac]
mov ecx, dword [esi + 0x1ce4]
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x1cec]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, 0x15f
shl eax, 4
add eax, esi
movups xmmword [eax], xmm0
dec dword [esi + 0x1ce4]
cmp byte [ebp - 0xdd], 0
jne 0x432bd8
call fcn.0040e9f0
call fcn.00414920
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00436bc6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x1ba8]
mov dword [ebp - 0x11c], edx
movsx ecx, word [edx + 0x122]
mov eax, dword [edx + 0x11c]
bts ecx, eax
mov word [edx + 0x122], cx
movss xmm0, dword [esi + 0x1564]
addss xmm0, dword [edx + 0xd0]
movss dword [edx + 0xd0], xmm0
movss xmm0, dword [esi + 0x1568]
addss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [ebp - 0x148]
subss xmm0, dword [edx + 0x80]
movss dword [ebp - 0x154], xmm0
jmp 0x432c7e
test dword [ebx + 0x14], 0x10000000
jne 0x432c72
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0x24]
call fcn.00414470
add esp, 8
test al, al
je 0x432bb8
mov eax, dword [esi + 0x1c50]
mov dword [ebp - 0x120], eax
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
call fcn.0040a840
mov dl, al
mov byte [ebp - 0xed], dl
test dl, dl
je 0x432ca2
mov dword [esi + 0x1ebc], 1
mov edi, dword [0x4416ac]
xor eax, eax
mov ecx, dword [ebp - 0xd8]
add edi, 0x1ff0
cmp dword [edi], ecx
cmovne edi, eax
mov eax, dword [ebp - 0x120]
shr eax, 8
and al, 1
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x120], eax
mov eax, dword [esi + 0x1be0]
cmp eax, ecx
je 0x432cfe
cmp dword [esi + 0x1d68], ecx
je 0x432cf5
cmp dword [esi + 0x1d5c], ecx
jne 0x432cfe
cmp dword [esi + 0x1d84], 2
jne 0x432cfe
mov byte [ebp - 0xc5], 1
jmp 0x432d05
mov byte [ebp - 0xc5], 0
test dl, dl
je 0x432d19
cmp byte [esi + 0x3e0], 0
mov byte [ebp - 0xb8], 1
jne 0x432d20
mov byte [ebp - 0xb8], 0
cmp byte [ebp - 0xd4], 0
je 0x432d96
test edi, edi
je 0x432d96
test eax, eax
jne 0x432d96
mov eax, dword [ebp - 0x11c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.00408c80
mov ecx, dword [0x4416ac]
add esp, 4
mov dword [ebp - 0xbc], eax
cmp dword [ecx + 0x1bc8], eax
jne 0x432d85
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.0041a3f0
mov eax, dword [ebp - 0xbc]
add esp, 8
cmp dword [esi + 0x1c1c], eax
jne 0x432d96
mov byte [ebp - 0xb6], 1
jmp 0x432db6
mov eax, dword [ebp - 0xd4]
mov byte [ebp - 0xb6], 0
test al, al
je 0x432e30
mov byte [ebp - 0xb6], 0
test edi, edi
je 0x432e30
mov eax, dword [ebp - 0x11c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.00408c80
mov ecx, dword [0x4416ac]
add esp, 4
mov dword [ebp - 0xbc], eax
cmp dword [ecx + 0x1bc8], eax
jne 0x432e0a
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.0041a3f0
mov eax, dword [ebp - 0xbc]
add esp, 8
cmp dword [esi + 0x1be0], eax
jne 0x432e2a
mov cl, 1
mov byte [ebp - 0xcd], 0
mov byte [ebp - 0xb7], cl
mov byte [ebp - 0xcc], 0
jmp 0x432e4a
mov eax, dword [ebp - 0xd4]
xor cl, cl
mov byte [ebp - 0xcd], 0
mov byte [ebp - 0xcc], 0
mov byte [ebp - 0xb7], cl
test al, al
je 0x432e65
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [ebp - 0xd4]
movss dword [ebp - 0x15c], xmm0
jmp 0x432e6d
xor cl, cl
mov byte [ebp - 0xb7], cl
test edi, edi
je 0x432e7c
xor al, 1
cmp byte [edi + 0x53], al
je 0x432e7c
mov al, 1
jmp 0x432e7e
xor al, al
cmp byte [ebp - 0xb8], 0
mov byte [ebp - 0xc6], al
mov dword [ebp - 0xec], 1
jne 0x432ec5
cmp byte [ebp - 0xb6], 0
jne 0x432ec5
cmp byte [ebp - 0xc5], 0
jne 0x432ec5
cmp byte [ebp - 0x120], 0
jne 0x432ec5
mov byte [ebp - 0xb6], 0
test cl, cl
jne 0x432ecc
mov byte [ebp - 0xc8], cl
jmp 0x432ee1
mov byte [ebp - 0xb6], 1
mov edx, dword [ebp - 0xd8]
mov byte [ebp - 0xc8], 1
cmp dword [esi + 0x1be0], edx
jne 0x432ee9
test al, al
je 0x433183
mov ecx, dword [ebp - 0xdc]
lea edi, [esi + 0x1ff0]
mov dword [ebp - 0x10c], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432f08
mov eax, dword [edi + 0x28]
sub ecx, edx
lea edx, [ecx + 1]
mov dword [ebp - 0xc4], edx
cmp edx, eax
jle 0x432f52
test eax, eax
je 0x432f37
cdq
sub eax, edx
mov edx, dword [ebp - 0xc4]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x28]
jmp 0x432f3c
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x24]
push eax
call fcn.0041b020
mov edx, dword [ebp - 0xc4]
push edx
push dword [ebp - 0xdc]
mov dword [edi + 0x24], edx
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [edi + 0x10]
add esp, 0xc
cmp eax, 0x21
jge 0x432f9c
test eax, eax
je 0x432f82
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x432f8a
mov ecx, 8
lea edx, [edi + 0xc]
mov eax, 0x21
cmp ecx, eax
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041b090
lea eax, [edi + 0x18]
mov dword [edi + 0xc], 0x21
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x432fc9
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.0041b020
lea eax, [edi + 0x18]
mov dword [eax], 0
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x100], ecx
add ecx, 0x3e
mov byte [edi + 0x30], 0
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xc0], edx
cmp edx, ecx
jae 0x433054
mov esi, eax
nop dword [eax]
cmp byte [esi], 0
je 0x433048
push 0
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.00408f40
mov edx, dword [ebp - 0xc0]
add esi, eax
mov eax, dword [ebp - 0xbc]
add esp, 4
mov dword [ebp - 0xf8], esi
test eax, eax
je 0x433048
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x100]
add eax, 0x3e
mov dword [ebp - 0xc0], edx
cmp edx, eax
jb 0x433000
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0xdc]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x100]
sar edx, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xd8]
mov dword [edi + 4], edx
cmp dword [edi], eax
jne 0x4330b0
cmp byte [ebp - 0xc6], cl
jne 0x4330b0
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov byte [ebp - 0xdd], 1
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
cmovl edx, dword [edi + 0x44]
mov cl, byte [ebp - 0xdd]
mov dword [edi + 0x44], edx
jmp 0x433113
mov dword [edi], eax
xor cl, cl
mov al, byte [ebp - 0xd4]
xor al, 1
mov dword [edi + 0x38], 0
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], 0
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x3c], 0
mov word [edi + 0x51], 1
mov dword [edi + 0x58], 0
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], 0
cmp byte [ebp - 0xd4], 0
mov edx, dword [ebx + 0x14]
jne 0x433177
mov eax, dword [ebp - 0xcc]
test dl, 0x10
movzx eax, al
cmovne eax, dword [ebp - 0xec]
cmp byte [ebp - 0xc5], 0
mov dword [ebp - 0xcc], eax
je 0x433155
test cl, cl
je 0x43314e
test byte [esi + 0x1d6c], 4
jne 0x433155
mov byte [ebp - 0xcc], 1
cmp byte [ebp - 0x120], 0
jne 0x433170
cmp byte [ebp - 0xb8], 0
je 0x433177
cmp byte [esi + 0xfc], 0
je 0x433177
mov byte [ebp - 0xcc], 1
test edx, 0x2000
je 0x433183
mov byte [edi + 0x48], 1
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
je 0x433242
cmp byte [ebp - 0xb6], 0
je 0x43323a
mov edx, dword [ebp - 0xf4]
call fcn.0040a630
call fcn.00415c90
mov ecx, edx
call fcn.00413ac0
mov eax, dword [esi + 0x1bf4]
mov edx, dword [ebx + 0x14]
or eax, 3
cmp byte [ebp - 0xd4], 0
mov dword [esi + 0x1bf4], eax
jne 0x4331d8
test dl, dl
jns 0x4331e1
or eax, 0xc
mov dword [esi + 0x1bf4], eax
mov eax, dword [esi + 0x1c00]
or dword [esi + 0x1bf8], 2
or eax, 0x180
cmp byte [ebp - 0xd4], 0
mov ecx, dword [esi + 0x1c04]
mov dword [esi + 0x1c00], eax
mov dword [esi + 0x1c04], ecx
je 0x43321d
or eax, 0x60
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
test edx, 0x440
je 0x433234
or eax, 1
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
jne 0x43327f
test edi, edi
jne 0x433251
call fcn.0040a700
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
jne 0x43327f
cmp byte [esi + 0x3e0], 0
je 0x43328c
cmp byte [ebp - 0xc8], 0
jne 0x43328c
cmp byte [ebp - 0xb6], 0
jne 0x43328c
mov byte [ebp - 0xcd], 1
mov dl, 1
jmp 0x433292
test edi, edi
je 0x433290
cmp byte [ebp - 0xb7], 0
je 0x433290
mov dl, 1
jmp 0x433292
xor dl, dl
mov byte [ebp - 0xc7], dl
test edi, edi
je 0x4332b8
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x4332ad
cmp byte [ebp - 0xcc], 0
je 0x4332b8
test dl, dl
je 0x4332b8
mov edx, 1
jmp 0x4332ba
xor dl, dl
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x108], edx
mov byte [ebp - 0xee], dl
mov byte [ebp - 0xdd], 0
mov byte [ebp - 0xb6], 0
test al, al
je 0x433412
test edi, edi
je 0x433412
cmp byte [ebp - 0xc7], 0
jne 0x4332fb
test dl, dl
je 0x43341f
mov ecx, dword [edi + 0x10]
lea eax, [edi + 0xc]
cmp ecx, 0x21
jge 0x433331
test ecx, ecx
je 0x433315
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x43331a
mov eax, 8
cmp eax, 0x21
mov ecx, 0x21
cmovg ecx, eax
push ecx
lea ecx, [edi + 0xc]
call fcn.0041b090
lea eax, [edi + 0xc]
mov dword [eax], 0x21
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x100], ecx
add ecx, 0x40
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xc0], edx
cmp edx, ecx
jae 0x4333b4
mov esi, eax
nop dword [eax]
cmp byte [esi], 0
je 0x4333a8
push 0
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.00408f40
mov edx, dword [ebp - 0xc0]
add esi, eax
mov eax, dword [ebp - 0xbc]
add esp, 4
mov dword [ebp - 0xf8], esi
test eax, eax
je 0x4333a8
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x100]
add eax, 0x40
mov dword [ebp - 0xc0], edx
cmp edx, eax
jb 0x433360
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0xdc]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x100]
sar edx, 1
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov dword [edi + 4], edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 8], eax
cmovl edx, dword [edi + 0x44]
movzx eax, byte [ebp - 0xee]
cmp ecx, edx
mov dword [edi + 0x44], edx
mov edx, 0
cmovne edx, eax
mov dword [edi + 0x40], ecx
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x108], edx
cmp byte [ebp - 0xc7], 0
jne 0x433427
test dl, dl
jne 0x433427
cmp dword [esi + 0x1be0], ecx
jne 0x43343b
test al, al
jne 0x43343b
test edi, edi
je 0x43343b
mov byte [ebp - 0xee], 1
cmp byte [edi + 0x30], al
jne 0x433442
mov byte [ebp - 0xee], 0
cmp byte [ebp - 0x160], 0
je 0x4334d5
mov edx, dword [esi + 0x1940]
cmp dword [edx + 0x14], 0x2a
ja 0x433460
mov eax, dword [edx + 0x2c]
jmp 0x43347f
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x433476
mov eax, dword [edx + 0x2c]
jmp 0x43347f
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*8]
mov dword [ebp - 0xc0], eax
lea ecx, [esi + 0x2e64]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0xc0]
mov dword [ecx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
call fcn.00413d90
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xf8], 0
cmp dword [esi + 0x1be0], ecx
jne 0x433b39
mov eax, dword [edi + 8]
mov edx, dword [ebx + 0x14]
mov byte [edi + 0xe6e], 0
mov dword [edi + 0x34], 0x20
mov dword [edi + 0xe70], edx
cmp byte [esi + 0xec], 0
mov dword [ebp - 0xf8], eax
sete al
mov dword [esi + 0x31f8], 1
cmp byte [ebp - 0xd4], 0
mov byte [esi + 0x1bed], al
movss xmm7, dword [esi + 0xe4]
subss xmm7, dword [ebp - 0x54]
subss xmm7, dword [esi + 0x1564]
addss xmm7, dword [edi + 0x38]
je 0x433566
mov eax, dword [ebp - 0x11c]
movss xmm2, dword [esi + 0xe8]
subss xmm2, dword [eax + 0xd4]
jmp 0x433576
movss xmm2, dword [esi + 0x1944]
mulss xmm2, dword [0x43ec50]
cmp byte [ebp - 0xcc], 0
mov cl, byte [esi + 0xb1]
mov byte [ebp - 0xb8], cl
je 0x4335ab
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6d], 1
jmp 0x433949
mov al, byte [ebp - 0xed]
test al, al
je 0x43386b
cmp word [esi + 0x3ea], 2
jb 0x43386b
cmp byte [esi + 0xfd], 0
jne 0x43386b
cmp byte [edi + 0x53], 0
je 0x4335ee
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00430bf0
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.00430f60
lea edx, [edi + 0x3c]
mov dword [ebp - 0xc4], eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov byte [edx + 0x16], 0
movzx ecx, word [esi + 0x3ea]
sub ecx, 2
test cl, 1
jne 0x4337da
test eax, eax
je 0x433639
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0xc4]
cmp word [eax + ecx*2 - 2], 0xa
je 0x433639
xor cl, cl
jmp 0x43363b
mov cl, 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x433647
test cl, cl
jne 0x43366a
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431340
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x433688
mov eax, dword [edi + 0x44]
cmp dword [edi + 0x40], eax
jne 0x433685
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
jmp 0x433688
mov dword [edi + 0x3c], eax
mov ecx, dword [edi + 0x3c]
mov edx, dword [edi + 4]
inc ecx
cmp ecx, edx
jge 0x43379b
mov eax, dword [edi + 0xe70]
and eax, 0x8000
mov dword [ebp - 0xc4], 0x3000
mov dword [ebp - 0xbc], eax
test eax, eax
jne 0x433790
test ecx, ecx
jle 0x433799
mov eax, dword [edi + 0x14]
movzx eax, word [eax + ecx*2 - 2]
cmp eax, 0x20
je 0x433784
cmp eax, 9
je 0x433784
cmp ax, word [ebp - 0xc4]
je 0x433784
cmp eax, 0x2c
je 0x433784
cmp eax, 0x3b
je 0x433784
cmp eax, 0x28
je 0x433784
cmp eax, 0x29
je 0x433784
cmp eax, 0x7b
je 0x433784
cmp eax, 0x7d
je 0x433784
cmp eax, 0x5b
je 0x433784
cmp eax, 0x5d
je 0x433784
cmp eax, 0x7c
je 0x433784
cmp eax, 0xa
je 0x433784
cmp eax, 0xd
je 0x433784
mov eax, dword [edi + 0x14]
movzx eax, word [eax + ecx*2]
cmp eax, 0x20
je 0x43377d
cmp eax, 9
je 0x43377d
cmp ax, word [ebp - 0xc4]
je 0x43377d
cmp eax, 0x2c
je 0x43377d
cmp eax, 0x3b
je 0x43377d
cmp eax, 0x28
je 0x43377d
cmp eax, 0x29
je 0x43377d
cmp eax, 0x7b
je 0x43377d
cmp eax, 0x7d
je 0x43377d
cmp eax, 0x5b
je 0x43377d
cmp eax, 0x5d
je 0x43377d
cmp eax, 0x7c
je 0x43377d
cmp eax, 0xa
je 0x43377d
cmp eax, 0xd
jne 0x433784
mov eax, 1
jmp 0x433786
xor eax, eax
test eax, eax
jne 0x433799
mov eax, dword [ebp - 0xbc]
inc ecx
cmp ecx, edx
jl 0x4336b2
cmp ecx, edx
mov eax, dword [edi + 4]
cmovg ecx, edx
mov edx, ecx
mov dword [edi + 0x3c], ecx
mov dword [edi + 0x44], ecx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
je 0x4337c9
cmp ecx, eax
jle 0x4337b9
mov dword [edi + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x4337c2
mov dword [edi + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x4337c9
mov dword [edi + 0x3c], ecx
cmp dword [edi + 0x3c], eax
jle 0x433936
mov dword [edi + 0x3c], eax
jmp 0x433936
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0xc4]
push 0x200004
movzx esi, word [eax + ecx*2]
mov ecx, edi
call fcn.00431340
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600005
call fcn.00431340
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600001
call fcn.00431340
add esp, 4
cmp esi, 0xa
je 0x433859
cmp byte [ebp - 0xd4], 0
je 0x433859
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov esi, dword [ebp - 0xe8]
mov byte [edi + 0xe6c], 0
jmp 0x433936
cmp byte [esi + 0x3e0], 0
je 0x4338b8
cmp byte [edi + 0xe6d], 0
jne 0x4338b8
test al, al
je 0x433949
cmp byte [edi + 0x53], 0
je 0x43389f
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00430bf0
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.00430f60
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
jmp 0x433936
cmp byte [esi + 0xec], 0
je 0x433949
cmp byte [edi + 0xe6d], 0
jne 0x433952
movss xmm0, dword [esi + 0x370]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x4338f7
movss xmm0, dword [esi + 0x374]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x433949
cmp byte [edi + 0x53], 0
je 0x433911
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00430bf0
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x43391f
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.00430f60
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0xe6c], 1
mov cl, byte [ebp - 0xb8]
mov edx, dword [ebx + 0x14]
mov dword [edi + 0xe68], 0xbe99999a
cmp byte [edi + 0xe6d], 0
je 0x433962
cmp byte [esi + 0xec], 0
jne 0x433962
mov byte [edi + 0xe6d], 0
cmp byte [esi + 0xfc], 0
je 0x433974
cmp byte [esi + 0xfe], 0
je 0x433981
test cl, cl
je 0x43398a
cmp byte [esi + 0xff], 0
je 0x43398a
mov byte [ebp - 0xb5], 1
jmp 0x433991
mov byte [ebp - 0xb5], 0
test edx, 0x400
je 0x433bd2
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x433bd2
call fcn.0040e760
mov ecx, dword [ebp - 0xe4]
test al, al
mov al, byte [ebp - 0xb5]
je 0x433a54
test al, al
jne 0x433a54
cmp byte [esi + 0xfd], al
jne 0x433a54
test cl, cl
jne 0x433a54
mov ecx, dword [esi + 0x1524]
mov eax, dword [esi + 0x151c]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x433a00
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x433a48
cmp ecx, edx
jb 0x4339f0
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xc4]
push 2
sub esp, 8
mov dword [ebp - 0xc4], 9
call fcn.00432480
add esp, 0xc
test al, al
je 0x433a48
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431340
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xe4]
mov al, byte [ebp - 0xb5]
mov edx, dword [ebx + 0x14]
cmp dword [esi + 0x151c], 0
jle 0x433b39
test al, al
jne 0x433b01
test cl, cl
jne 0x433b01
cmp byte [ebp - 0xc5], cl
jne 0x433b01
xor ecx, ecx
mov dword [ebp - 0xc0], ecx
nop dword [eax + eax]
mov eax, dword [esi + 0x1524]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0xc4], eax
cmp eax, 9
jne 0x433aae
cmp byte [esi + 0xfd], 0
jne 0x433aef
push 2
sub esp, 8
lea ecx, [ebp - 0xc4]
call fcn.00432480
add esp, 0xc
test al, al
je 0x433ae9
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431340
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebx + 0x14]
inc ecx
mov dword [ebp - 0xc0], ecx
cmp ecx, dword [esi + 0x151c]
jl 0x433a90
mov ecx, dword [esi + 0x1520]
lea eax, [esi + 0x151c]
test ecx, ecx
jns 0x433b33
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x151c]
call fcn.0041b090
lea eax, [esi + 0x151c]
mov dword [eax], 0
mov edx, dword [ebp - 0xd8]
xor cl, cl
mov byte [ebp - 0xb5], cl
cmp dword [esi + 0x1be0], edx
jne 0x4346b8
cmp byte [esi + 0x1bec], cl
jne 0x4346b8
cmp byte [ebp - 0xcd], cl
jne 0x4346b8
movss xmm0, dword [ebp - 0x144]
mov ecx, 1
subss xmm0, dword [esi + 0x1568]
divss xmm0, dword [esi + 0x1944]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
xor eax, eax
mov dword [edi + 0x4c], ecx
cmp byte [esi + 0xfd], al
mov dword [ebp - 0xc4], ecx
mov ecx, 0x400000
cmovne eax, ecx
mov dword [ebp - 0xcc], eax
mov al, byte [esi + 0xb1]
mov byte [ebp - 0x12d], al
test al, al
je 0x433be3
cmp dword [esi + 0x37c], 0xa
jne 0x433be3
mov byte [ebp - 0xc8], 1
jmp 0x433bee
mov al, byte [ebp - 0xb5]
mov ecx, dword [ebp - 0xe4]
jmp 0x433a57
mov byte [ebp - 0xc8], 0
test al, al
je 0x433c19
cmp byte [esi + 0xff], 0
mov al, byte [esi + 0xfe]
mov byte [ebp - 0xb8], al
je 0x433c2c
cmp byte [esi + 0xfc], 0
jne 0x433c2c
test al, al
jne 0x433c2c
mov byte [ebp - 0xc5], 1
jmp 0x433c33
mov al, byte [esi + 0xfc]
mov byte [ebp - 0xb8], al
mov byte [ebp - 0xc8], 0
mov byte [ebp - 0xc5], 0
cmp byte [esi + 0xb1], 0
mov ecx, dword [esi + 0x37c]
je 0x433c47
cmp ecx, 8
jmp 0x433c4a
cmp ecx, 1
sete al
mov byte [ebp - 0xb7], al
test al, al
je 0x433c77
mov eax, dword [0x4416ac]
mov eax, dword [eax + 0x80]
test eax, eax
js 0x433c77
mov ecx, eax
call fcn.0040e760
test al, al
jne 0x433c91
mov ecx, dword [esi + 0x37c]
cmp ecx, 2
jne 0x433cbd
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x433cbd
call fcn.0040e760
test al, al
je 0x433cbd
cmp byte [ebp - 0xe4], 0
jne 0x433cbd
cmp byte [ebp - 0x160], 0
jne 0x433cbd
cmp byte [ebp - 0xd4], 0
je 0x433cb4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x433cbd
mov byte [ebp - 0xc6], 1
jmp 0x433cc4
mov byte [ebp - 0xc6], 0
cmp byte [ebp - 0xb7], 0
je 0x433ce2
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x433ce2
call fcn.0040e760
test al, al
jne 0x433d00
cmp dword [esi + 0x37c], 1
jne 0x433d23
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x433d23
call fcn.0040e760
test al, al
je 0x433d23
cmp byte [ebp - 0x160], 0
jne 0x433d23
cmp byte [ebp - 0xd4], 0
je 0x433d1a
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x433d23
mov byte [ebp - 0x123], 1
jmp 0x433d2a
mov byte [ebp - 0x123], 0
cmp byte [ebp - 0xb7], 0
je 0x433d48
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x433d48
call fcn.0040e760
test al, al
jne 0x433d66
cmp dword [esi + 0x37c], 2
jne 0x433d76
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x433d76
call fcn.0040e760
test al, al
je 0x433d76
cmp byte [ebp - 0xe4], 0
mov byte [ebp - 0xed], 1
je 0x433d7d
mov byte [ebp - 0xed], 0
mov dl, byte [ebp - 0xb7]
test dl, dl
je 0x433dc0
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x433dc0
call fcn.0040e760
test al, al
je 0x433dba
cmp byte [ebp - 0xe4], 0
jne 0x433dba
cmp byte [ebp - 0x128], 0
je 0x433dba
mov byte [ebp - 0x122], 1
jmp 0x433dcb
mov dl, byte [ebp - 0xb7]
mov byte [ebp - 0x122], 0
test dl, dl
je 0x433de3
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x433de3
call fcn.0040e760
test al, al
jne 0x433e04
cmp byte [ebp - 0xc8], 0
je 0x433e1d
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x433e1d
call fcn.0040e760
test al, al
je 0x433e1d
cmp byte [ebp - 0xe4], 0
jne 0x433e1d
cmp byte [ebp - 0x128], 0
mov byte [ebp - 0x101], 1
jne 0x433e24
mov byte [ebp - 0x101], 0
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x433e39
call fcn.0040e760
test al, al
jne 0x433e4e
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x433e57
call fcn.0040e760
test al, al
je 0x433e57
mov byte [ebp - 0xc8], 1
jmp 0x433e5e
mov byte [ebp - 0xc8], 0
mov edx, 1
xor ecx, ecx
call fcn.00416d00
xorps xmm5, xmm5
comiss xmm0, xmm5
jbe 0x433e87
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x64]
test ecx, ecx
js 0x433ea0
call fcn.0040e760
test al, al
je 0x433ea0
mov edx, 1
lea ecx, [edx + 1]
call fcn.00416d00
comiss xmm0, xmm5
mov byte [ebp - 0x124], 0
jbe 0x433ea7
mov byte [ebp - 0x124], 1
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x433ebc
call fcn.0040e760
test al, al
jne 0x433ed6
mov eax, 1
mov edx, eax
mov ecx, eax
call fcn.00416d00
comiss xmm0, xmm5
mov byte [ebp - 0x121], 0
jbe 0x433edd
mov byte [ebp - 0x121], 1
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x433f2e
call fcn.0040e760
test al, al
je 0x433f2e
cmp byte [ebp - 0xc5], 0
je 0x433f02
mov eax, 0x200004
jmp 0x433f16
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0xb8], 0
cmovne eax, ecx
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, eax
push ecx
mov ecx, edi
call fcn.00431340
jmp 0x43467b
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x433f5d
call fcn.0040e760
test al, al
je 0x433f5d
cmp byte [ebp - 0xc5], 0
je 0x433f53
mov eax, 0x200005
jmp 0x433f16
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x433f0c
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x433fd7
call fcn.0040e760
test al, al
je 0x433fd7
cmp byte [ebp - 0xd4], 0
je 0x433fd7
cmp byte [esi + 0xfc], 0
je 0x433fb3
mov edx, dword [ebp - 0x11c]
movss xmm0, dword [edx + 0x5c]
subss xmm0, dword [esi + 0x1944]
mov dword [edx + 0x74], 0
mov dword [edx + 0x7c], 0
maxss xmm0, xmm5
movss dword [edx + 0x6c], xmm0
jmp 0x43468f
movzx eax, byte [ebp - 0xc5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200002]
or eax, dword [ebp - 0xcc]
push eax
call fcn.00431340
jmp 0x43467b
mov ecx, dword [0x4416ac]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
js 0x43405e
call fcn.0040e760
test al, al
je 0x43405e
cmp byte [ebp - 0xd4], 0
je 0x43405e
cmp byte [esi + 0xfc], 0
je 0x43403a
mov ecx, dword [ebp - 0x11c]
movss xmm0, dword [esi + 0x1944]
mov eax, dword [0x4416ac]
addss xmm0, dword [ecx + 0x5c]
mov eax, dword [eax + 0x1ba8]
minss xmm0, dword [eax + 0x64]
mov dword [ecx + 0x74], 0
mov dword [ecx + 0x7c], 0
movss dword [ecx + 0x6c], xmm0
jmp 0x43468f
movzx eax, byte [ebp - 0xc5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200003]
or eax, dword [ebp - 0xcc]
push eax
call fcn.00431340
jmp 0x43467b
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x48]
test ecx, ecx
js 0x4340d0
call fcn.0040e760
test al, al
je 0x4340d0
cmp byte [ebp - 0xd4], 0
je 0x4340d0
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x20000e
push ecx
mov ecx, edi
call fcn.00431340
movd xmm0, dword [ebp - 0xc4]
movss xmm1, dword [ebp - 0x15c]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
subss xmm1, xmm0
movss dword [ebp - 0x15c], xmm1
jmp 0x43468c
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
js 0x43413e
call fcn.0040e760
test al, al
je 0x43413e
cmp byte [ebp - 0xd4], 0
je 0x43413e
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x20000f
push ecx
mov ecx, edi
call fcn.00431340
movd xmm0, dword [ebp - 0xc4]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
addss xmm0, dword [ebp - 0x15c]
movss dword [ebp - 0x15c], xmm0
jmp 0x43468c
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x434180
call fcn.0040e760
test al, al
je 0x434180
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200004
or eax, 0x200006
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00431340
jmp 0x43467b
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x4341c2
call fcn.0040e760
test al, al
je 0x4341c2
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200005
or eax, 0x200007
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00431340
jmp 0x43467b
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x4341fc
call fcn.0040e760
test al, al
je 0x4341fc
cmp byte [ebp - 0xe4], 0
jne 0x4341fc
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x200008
push ecx
mov ecx, edi
call fcn.00431340
jmp 0x43467b
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x43429d
call fcn.0040e760
test al, al
je 0x43429d
cmp byte [ebp - 0xe4], 0
jne 0x43429d
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x434281
cmp byte [ebp - 0xb8], 0
je 0x43423a
push 0x60000c
jmp 0x434263
cmp byte [ebp - 0x12d], 0
je 0x434281
cmp byte [esi + 0xff], 0
je 0x434281
cmp byte [esi + 0xfe], 0
jne 0x434281
cmp byte [esi + 0xfc], 0
jne 0x434281
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431340
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x200009
push ecx
mov ecx, edi
call fcn.00431340
jmp 0x43467b
cmp byte [ebp - 0xc8], 0
je 0x434314
mov edx, dword [ebx + 0x14]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xd4], 0
je 0x43431d
mov cl, byte [esi + 0xfc]
test al, al
je 0x4342c9
test cl, cl
je 0x43431d
jmp 0x4342cd
test cl, cl
jne 0x43431d
cmp byte [ebp - 0xe4], 0
jne 0x43468f
push 2
sub esp, 8
mov dword [ebp - 0xc4], 0xa
lea ecx, [ebp - 0xc4]
call fcn.00432480
add esp, 0xc
test al, al
je 0x43468f
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431340
jmp 0x43467b
cmp byte [ebp - 0x124], 0
je 0x434330
mov byte [ebp - 0xcd], 1
mov byte [ebp - 0xb6], 1
jmp 0x43468f
cmp byte [ebp - 0x121], 0
je 0x434346
mov cl, 1
mov byte [ebp - 0xcd], cl
jmp 0x434695
mov al, byte [ebp - 0x122]
test al, al
jne 0x43465c
cmp byte [ebp - 0x101], al
jne 0x43465c
cmp byte [ebp - 0xb7], al
je 0x43439d
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x43439d
call fcn.0040e760
test al, al
je 0x43439d
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
jmp 0x43468f
mov al, byte [ebp - 0xc6]
test al, al
jne 0x43454d
cmp byte [ebp - 0x123], al
jne 0x43454d
cmp byte [ebp - 0xed], al
je 0x43468f
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0xd0]
test ecx, ecx
je 0x4343e8
push dword [eax + 0xd8]
call ecx
mov esi, eax
add esp, 4
test esi, esi
jne 0x4343ed
jmp 0x43468f
mov esi, 0x43e70e
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4343f2
mov eax, dword [0x4416ac]
sub ecx, edx
test eax, eax
je 0x43440a
inc dword [eax + 0x36c]
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
add esp, 4
mov dword [ebp - 0xfc], eax
cmp byte [esi], 0
mov dword [ebp - 0xc4], 0
je 0x434493
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0xc0]
call fcn.00408f40
add esp, 4
add esi, eax
cmp dword [ebp - 0xc0], 0
je 0x434481
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xc0]
push 5
sub esp, 8
call fcn.00432480
add esp, 0xc
test al, al
je 0x43447c
mov ecx, dword [ebp - 0xfc]
mov ax, word [ebp - 0xc0]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x434433
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xc4], edi
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xc4]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x43452c
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebp - 0xc4], edx
mov edx, dword [edi + 0x40]
cmp edx, dword [edi + 0x44]
je 0x4344dd
cmp edx, ecx
jle 0x4344c4
mov dword [edi + 0x40], ecx
mov edx, ecx
cmp dword [edi + 0x44], ecx
jle 0x4344d2
mov dword [edi + 0x44], ecx
mov dword [ebp - 0xc4], ecx
cmp edx, dword [ebp - 0xc4]
jne 0x4344dd
mov dword [edi + 0x3c], edx
cmp dword [edi + 0x3c], ecx
jle 0x4344e5
mov dword [edi + 0x3c], ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.004312b0
mov edx, dword [edi + 0x3c]
mov ecx, edi
push esi
push dword [ebp - 0xfc]
call fcn.00430e10
add esp, 8
test al, al
je 0x43451f
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push esi
push 0
call fcn.00432190
add esp, 8
mov byte [edi + 0x52], 0
add dword [edi + 0x3c], esi
mov eax, dword [ebp - 0xfc]
mov byte [edi + 0xe6c], 1
test eax, eax
je 0x434540
mov ecx, dword [0x4416ac]
test ecx, ecx
je 0x434540
dec dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
jmp 0x43468c
cmp dword [esi + 0xd4], 0
je 0x43461d
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x43456e
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x434573
mov ecx, dword [edi + 4]
xor esi, esi
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x128], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.004091d0
mov ecx, dword [0x4416ac]
inc eax
mov dword [ebp - 0xbc], eax
test ecx, ecx
je 0x4345a4
inc dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xec], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x128]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.00409160
mov eax, dword [0x4416ac]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x4345fe
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x4416ac]
add esp, 8
test esi, esi
je 0x43460c
test eax, eax
je 0x43460c
dec dword [eax + 0x36c]
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
call eax
mov al, byte [ebp - 0xc6]
add esp, 4
test al, al
je 0x43468f
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x43463d
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x43468f
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.004312b0
mov byte [edi + 0x52], 0
jmp 0x43468f
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.00431340
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
add esp, 4
mov cl, byte [ebp - 0xb5]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x4346aa
cmp byte [ebp - 0xc7], 0
je 0x4346aa
mov al, 1
jmp 0x4346ac
xor al, al
or byte [ebp - 0x108], al
mov esi, dword [ebp - 0xe8]
xor eax, eax
mov dword [ebp - 0x110], 0
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], eax
jne 0x434ece
test cl, cl
je 0x434985
cmp byte [ebp - 0xe4], 0
jne 0x43496d
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebp - 0xdc]
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x434720
test dl, dl
je 0x43471c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x434720
add eax, 2
add ecx, 2
test dl, dl
jne 0x434700
xor eax, eax
jmp 0x434725
sbb eax, eax
or eax, 1
test eax, eax
je 0x43496d
mov eax, dword [edi + 0x24]
xor edx, edx
mov ecx, dword [edi + 0x2c]
dec eax
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0x134], edx
mov dword [ebp - 4], edx
test eax, eax
jle 0x4348b2
lea edi, [eax + ecx]
mov esi, ecx
xor eax, eax
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x434778
cmp esi, edi
jae 0x4347a2
cmp byte [esi], 0
je 0x4347a2
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.00408f40
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x4347a2
inc eax
jmp 0x43476a
mov edi, dword [ebp - 0x10c]
lea edx, [eax + 1]
mov esi, dword [ebp - 0xe8]
mov dword [ebp - 0xc4], edx
test edx, edx
jle 0x434805
mov ecx, 8
mov eax, edx
cmp edx, ecx
cmovl eax, ecx
mov dword [ebp - 0xbc], eax
test eax, eax
jle 0x434805
mov ecx, dword [0x4416ac]
test ecx, ecx
je 0x4347e1
inc dword [ecx + 0x36c]
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [ebp - 0xbc]
add esp, 4
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x138], ecx
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x110]
add ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0xc0], eax
lea ecx, [eax - 2]
lea ecx, [ecx + edx*2]
mov dword [ebp - 0x128], ecx
cmp eax, ecx
jae 0x4348a7
mov esi, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xec]
test edi, edi
je 0x434859
cmp esi, edi
jae 0x434895
cmp byte [esi], 0
je 0x434895
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.00408f40
mov ecx, dword [ebp - 0xbc]
add esi, eax
mov eax, dword [ebp - 0xc0]
add esp, 4
test ecx, ecx
je 0x434895
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xc0], eax
cmp eax, dword [ebp - 0x128]
jb 0x434851
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xc4]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0xcc]
lea ecx, [edx - 1]
xor edx, edx
test eax, eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xbc], eax
cmovle ecx, edx
push ecx
mov dword [ebp - 0xc4], ecx
lea ecx, [edi + 0x5c]
push eax
call fcn.00432190
add esp, 8
mov dword [ebp - 0xec], eax
test eax, eax
je 0x434906
mov edx, dword [ebp - 0xbc]
xor ecx, ecx
test edx, edx
jle 0x434906
mov esi, eax
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, edx
jl 0x4348f0
mov esi, dword [ebp - 0xe8]
push dword [edi + 4]
xor edx, edx
mov ecx, edi
call fcn.00430db0
mov eax, dword [ebp - 0xc4]
add esp, 4
test eax, eax
jle 0x434943
push eax
push dword [ebp - 0x134]
xor edx, edx
mov ecx, edi
call fcn.00430e10
add esp, 8
test al, al
je 0x434943
mov eax, dword [ebp - 0xc4]
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov ecx, dword [ebp - 0x134]
test ecx, ecx
je 0x434966
mov eax, dword [0x4416ac]
test eax, eax
je 0x43495c
dec dword [eax + 0x36c]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xb6], 0
mov eax, dword [ebx + 0x14]
je 0x434dc2
test al, 0x20
je 0x434dc2
cmp byte [ebp - 0xe4], 0
jne 0x4349f2
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0xc4], edx
cmp edx, eax
jle 0x4349e0
test eax, eax
je 0x4349c2
cdq
sub eax, edx
mov edx, dword [ebp - 0xc4]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1c]
jmp 0x4349c7
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x18]
push eax
call fcn.0041b020
mov edx, dword [ebp - 0xc4]
lea ecx, [edi + 0x18]
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.00409160
add esp, 8
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x434d73
test dl, 0x40
je 0x434a2a
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x434a2a
call fcn.0040e760
mov edx, dword [ebx + 0x14]
test al, al
je 0x434a2a
mov eax, 0x40
xor ecx, ecx
jmp 0x434aa2
test dl, dl
jns 0x434a72
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x434a50
call fcn.0040e760
mov edx, dword [ebx + 0x14]
test al, al
je 0x434a50
mov eax, 0x80
lea ecx, [eax - 0x7d]
jmp 0x434aa2
mov eax, dword [0x4416ac]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x434a72
call fcn.0040e760
mov edx, dword [ebx + 0x14]
test al, al
je 0x434a72
mov eax, 0x80
lea ecx, [eax - 0x7c]
jmp 0x434aa2
test edx, 0x80000
je 0x434a8a
cmp byte [edi + 0xe6e], 0
je 0x434a8a
mov eax, 0x80000
jmp 0x434a9d
test edx, 0x100
mov ecx, pe_nt_image_headers32
mov eax, 0
cmovne eax, ecx
mov ecx, 0x16
test eax, eax
je 0x434d73
xor esi, esi
mov dword [ebp - 0x84], eax
cmp byte [ebp - 0xe4], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x78], 0
mov word [ebp - 0x63], si
mov byte [ebp - 0x61], 0
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], esi
jne 0x434ad9
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x70], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x68], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x74], ecx
mov ecx, esi
mov byte [ebp - 0x64], 0
lea edx, [esi + eax*2]
call fcn.004091d0
mov ecx, dword [ebp - 0x10c]
mov edi, eax
mov dword [ebp - 0x60], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.004091d0
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.004091d0
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x84]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0x64]
add esp, 4
mov edx, dword [ebp - 0x60]
mov byte [ebp - 0xc6], al
cmp edx, edi
jne 0x434b5e
test al, al
je 0x434bb9
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x434b74
cmp esi, edi
jae 0x434b9e
cmp byte [esi], 0
je 0x434b9e
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.00408f40
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x434b9e
inc eax
jmp 0x434b66
mov edi, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x60]
mov dword [edi + 0x3c], eax
mov al, byte [ebp - 0xc6]
mov byte [edi + 0xe6c], 1
jmp 0x434bbf
mov edi, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0xec]
jne 0x434bce
test al, al
je 0x434c23
cmp ecx, edx
jne 0x434bd7
mov eax, dword [edi + 0x3c]
jmp 0x434c20
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x434bed
cmp esi, edi
jae 0x434c17
cmp byte [esi], 0
je 0x434c17
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.00408f40
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x434c17
inc eax
jmp 0x434bdf
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x10c]
mov dword [edi + 0x40], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0xc4]
jne 0x434c3b
cmp byte [ebp - 0xc6], 0
je 0x434d6d
cmp eax, ecx
jne 0x434c44
mov eax, dword [edi + 0x40]
jmp 0x434c8a
mov esi, dword [ebp - 0x70]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x434c5a
cmp esi, edi
jae 0x434c84
cmp byte [esi], 0
je 0x434c84
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.00408f40
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x434c84
inc eax
jmp 0x434c4c
mov edi, dword [ebp - 0x10c]
cmp byte [ebp - 0xc6], 0
mov dword [edi + 0x44], eax
je 0x434d6d
mov esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xf8]
cmp esi, ecx
jle 0x434ce9
cmp byte [ebp - 0x118], 0
je 0x434ce9
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x434ce6
test eax, eax
je 0x434ccf
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x434cd7
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041b090
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0x70]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0xbc], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0xc4], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0xec], eax
cmp ecx, eax
jae 0x434d51
mov edi, dword [ebp - 0xbc]
cmp byte [edi], 0
je 0x434d45
push 0
mov edx, edi
lea ecx, [ebp - 0xbc]
call fcn.00408f40
add edi, eax
add esp, 4
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x434d45
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0xec]
jb 0x434d14
mov edi, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0xc4]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x6c]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
mov esi, dword [ebp - 0xe8]
cmp byte [ebp - 0xe4], 0
jne 0x434dbf
mov ecx, dword [ebp - 0xdc]
mov eax, dword [edi + 0x20]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x434da5
test dl, dl
je 0x434da1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x434da5
add eax, 2
add ecx, 2
test dl, dl
jne 0x434d85
xor eax, eax
jmp 0x434daa
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x434dc2
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0x110], ecx
mov ecx, dword [edi + 8]
jmp 0x434dc8
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x110]
mov dword [edi + 0xe70], 0
test edx, edx
je 0x434ec8
cmp byte [ebp - 0x118], 0
je 0x434e81
mov dword [ebp - 0xb0], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xa0], eax
lea eax, [ecx + 1]
mov dword [ebp - 0x9c], ecx
mov ecx, 0x20
cmp eax, ecx
movlpd qword [ebp - 0xa8], xmm0
movlpd qword [ebp - 0x94], xmm0
cmovle eax, ecx
movlpd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
mov dword [ebp - 0xb4], 0x40000
mov dword [ebp - 0xac], 0
call eax
mov ecx, dword [ebp - 0x98]
add esp, 4
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x114], ecx
dec ecx
cmp dword [ebp - 0x9c], ecx
mov dword [ebp - 0xdc], eax
cmovl ecx, dword [ebp - 0x9c]
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x114]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x114], ecx
cmp ecx, 1
jb 0x434ec1
jbe 0x434eb6
lea eax, [ecx - 1]
push eax
push edx
push dword [ebp - 0xdc]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebp - 0x114]
add esp, 0xc
mov eax, dword [ebp - 0xdc]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0xdd], 1
mov eax, dword [ebp - 0xd8]
cmp byte [ebp - 0xcd], 0
je 0x434ee4
cmp dword [esi + 0x1be0], eax
jne 0x434ee4
call fcn.0040a700
mov edx, dword [ebp - 0xd4]
test dl, dl
jne 0x434fb9
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
push 1
call fcn.00409980
movss xmm1, dword [0x43ec88]
add esp, 4
mov ecx, 7
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call fcn.00409300
movss xmm2, dword [esi + 0x156c]
mov dl, 1
mov ecx, eax
call fcn.00409860
movss xmm4, dword [ebp - 0x54]
add esp, 0x10
movss xmm2, dword [ebp - 0x50]
movaps xmm0, xmm4
addss xmm0, dword [esi + 0x1564]
mov edx, dword [ebp - 0xd4]
movaps xmm3, xmm4
addss xmm3, dword [ebp - 0x154]
movaps xmm1, xmm2
movss dword [ebp - 0x44], xmm4
addss xmm1, dword [ebp - 0x144]
movss dword [ebp - 0x138], xmm0
movaps xmm0, xmm2
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0xbc], xmm3
movss dword [ebp - 0x3c], xmm3
movss dword [ebp - 0xc0], xmm3
movss xmm3, dword [ebp - 0x154]
movss dword [ebp - 0x40], xmm2
movss dword [ebp - 0x100], xmm1
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x134], xmm0
jmp 0x43502d
movss xmm1, dword [ebp - 0x54]
movss xmm3, dword [ebp - 0x154]
movaps xmm2, xmm1
movss xmm0, dword [ebp - 0x50]
addss xmm2, xmm3
mov ecx, dword [ebp - 0x11c]
movss dword [ebp - 0x44], xmm1
movss dword [ebp - 0x40], xmm0
mov eax, dword [ecx + 0xd0]
movaps xmm1, xmm2
mov ecx, dword [ecx + 0xd4]
movss dword [ebp - 0xbc], xmm1
movss dword [ebp - 0x3c], xmm1
movaps xmm1, xmm0
addss xmm1, dword [ebp - 0x144]
movss dword [ebp - 0xc0], xmm2
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
movaps xmm0, xmm1
movss dword [ebp - 0x100], xmm0
movss dword [ebp - 0x38], xmm0
cmp byte [ebp - 0xee], 0
lea eax, [ebp - 0x138]
movss xmm0, dword [eax]
xorps xmm5, xmm5
movss dword [ebp - 0x120], xmm0
xorps xmm6, xmm6
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0xf4], eax
movss dword [ebp - 0xf8], xmm1
movss dword [ebp - 0x128], xmm0
movss dword [ebp - 0xc4], xmm5
je 0x435089
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xdc], ecx
jmp 0x43508f
mov ecx, dword [ebp - 0xdc]
cmp byte [ebp - 0xc7], 0
jne 0x4352c9
cmp byte [ebp - 0x108], 0
jne 0x4352c9
test dl, dl
je 0x43510f
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
mov dl, byte [eax]
lea edi, [eax + 1]
test dl, dl
je 0x4350d2
nop
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x4350c0
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0xcc], edi
cmp al, 0xa
je 0x4350e5
cmp al, 0xd
je 0x4350e5
inc ecx
mov edx, dword [ebp - 0xcc]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x1944]
movss dword [ebp - 0xc4], xmm0
movaps xmm0, xmm3
movss dword [ebp - 0x128], xmm0
jmp 0x435153
mov eax, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], eax
jne 0x435124
mov edx, dword [edi + 8]
add edx, ecx
jmp 0x43513e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435127
sub ecx, edx
mov edx, dword [ebp - 0xdc]
add edx, ecx
mov ecx, dword [ebp - 0xdc]
mov eax, edx
mov dword [ebp - 0xcc], edx
sub eax, ecx
cmp eax, 0x200000
jge 0x435e82
movss xmm1, dword [0x43ec88]
xor ecx, ecx
call fcn.00409300
cmp byte [ebp - 0xd4], 0
mov ecx, edx
movss xmm2, dword [esi + 0x1944]
lea edx, [ebp - 0x44]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xbc], 0
cmovne edx, dword [ebp - 0xbc]
test dword [ebp - 0xc0], 0xff000000
mov edi, dword [eax + 0x23c]
mov eax, dword [esi + 0x1940]
mov dword [ebp - 0xf8], eax
je 0x435e82
cmp dword [ebp - 0xcc], 0
jne 0x4351e9
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + 1]
mov dword [ebp - 0xbc], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4351d0
sub ecx, dword [ebp - 0xbc]
add ecx, dword [ebp - 0xdc]
mov eax, dword [esi + 0x1940]
cmp dword [ebp - 0xdc], ecx
je 0x435e82
test eax, eax
jne 0x435205
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xf8], eax
ucomiss xmm2, dword [0x43ec10]
lahf
test ah, 0x44
jp 0x43521a
mov eax, dword [edi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [edi + 0x60]
movups xmmword [ebp - 0x150], xmm0
test edx, edx
je 0x435288
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x150]
comiss xmm0, xmm1
jae 0x435242
movss dword [ebp - 0x150], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x14c]
comiss xmm0, xmm1
jae 0x43525c
movss dword [ebp - 0x14c], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x148]
ja 0x435272
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x144]
ja 0x435288
movss dword [ebp - 0x144], xmm0
mov eax, dword [ebp - 0xf4]
test edx, edx
push dword [eax + 4]
push dword [eax]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x150]
push ecx
push dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xf8]
push eax
push dword [ebp - 0xc0]
push edi
call fcn.00429a30
jmp 0x435e82
mov eax, dword [edi + 8]
xor edx, edx
add eax, ecx
movss dword [ebp - 0xec], xmm6
xorps xmm7, xmm7
mov ecx, dword [edi + 0x14]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x118], 0xfffffc18
mov dword [ebp - 0x110], 0xfffffc18
cmp byte [ebp - 0xc7], dl
je 0x435335
mov eax, dword [edi + 0x3c]
mov edx, 1
mov dword [ebp - 0x118], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x114], eax
cmp byte [ebp - 0x108], 0
je 0x435368
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0xd8]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x110], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xfc], eax
mov esi, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xd4]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
test si, si
mov esi, dword [ebp - 0xe8]
je 0x43540d
mov esi, dword [ebp - 0xd8]
mov edi, dword [ebp - 0x118]
movzx eax, word [esi]
xor esi, esi
nop
cmp ax, 0xa
jne 0x4353db
inc esi
cmp edi, 0xffffffff
jne 0x4353bf
cmp ecx, dword [ebp - 0x114]
jb 0x4353bf
dec edx
mov dword [ebp - 0x118], esi
test edx, edx
jle 0x4353f5
cmp dword [ebp - 0x110], 0xffffffff
jne 0x4353db
cmp ecx, dword [ebp - 0xfc]
jb 0x4353db
dec edx
mov dword [ebp - 0x110], esi
test edx, edx
jle 0x4353f5
movzx eax, word [ecx + 2]
add ecx, 2
mov edi, eax
mov dword [ebp - 0xf4], edi
mov edi, dword [ebp - 0x118]
test ax, ax
jne 0x4353a0
mov edi, dword [ebp - 0x10c]
mov dword [ebp - 0xf4], esi
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x110]
inc eax
cmp dword [ebp - 0x118], 0xffffffff
mov edx, eax
mov dword [ebp - 0xf4], eax
cmovne edx, dword [ebp - 0x118]
cmp ecx, 0xffffffff
mov dword [ebp - 0x12c], edx
mov edx, dword [ebp - 0xd8]
cmove ecx, eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x110], ecx
mov ecx, eax
cmp eax, edx
jbe 0x43545e
nop
cmp word [ecx - 2], 0xa
je 0x43545e
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x435450
movaps xmm1, xmm6
mov eax, dword [0x4416ac]
movaps xmm3, xmm6
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x114]
jae 0x4354d8
mov edi, dword [ebp - 0x114]
mov esi, edx
nop dword [eax]
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x4354a6
maxss xmm1, xmm3
movaps xmm3, xmm6
jmp 0x4354c8
cmp edx, 0xd
je 0x4354c8
mov edx, eax
cmp edx, dword [esi]
jge 0x4354bb
mov eax, dword [esi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x4354c0
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
cmp ecx, edi
jb 0x435490
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
cmp dword [ebp - 0x110], 0
maxss xmm3, xmm1
movd xmm4, dword [ebp - 0x12c]
movss xmm0, dword [esi + 0x1944]
cvtdq2ps xmm4, xmm4
movss dword [ebp - 0x118], xmm3
mulss xmm4, xmm0
movss dword [ebp - 0x134], xmm4
jl 0x4355d3
mov eax, dword [ebp - 0xfc]
mov ecx, eax
mov edx, dword [ebp - 0xd8]
cmp eax, edx
jbe 0x435530
cmp word [ecx - 2], 0xa
je 0x435530
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x435522
movaps xmm1, xmm6
mov eax, dword [0x4416ac]
movaps xmm7, xmm6
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0xfc]
jae 0x4355a8
mov esi, dword [ebp - 0xfc]
mov edi, edx
nop
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x435576
maxss xmm1, xmm7
movaps xmm7, xmm6
jmp 0x435598
cmp edx, 0xd
je 0x435598
mov edx, eax
cmp edx, dword [edi]
jge 0x43558b
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x435590
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm7, xmm0
cmp ecx, esi
jb 0x435560
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
movd xmm3, dword [ebp - 0x110]
maxss xmm7, xmm1
movss xmm0, dword [esi + 0x1944]
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm0
movss dword [ebp - 0xec], xmm3
movss xmm3, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xd4]
movss xmm1, dword [ebp - 0x154]
test cl, cl
je 0x435607
movd xmm5, dword [ebp - 0xf4]
cvtdq2ps xmm5, xmm5
mulss xmm5, xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x128], xmm0
movss dword [ebp - 0xc4], xmm5
cmp byte [ebp - 0xc7], 0
je 0x43572e
cmp byte [edi + 0xe6c], 0
je 0x43572e
test dword [ebx + 0x14], 0x1000
jne 0x435682
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm1
comiss xmm2, xmm3
subss xmm1, dword [esi + 0x1564]
mulss xmm0, dword [0x43ec3c]
movss dword [ebp - 0x154], xmm1
movaps xmm1, xmm3
jbe 0x43565f
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x435670
subss xmm1, dword [ebp - 0x154]
comiss xmm1, xmm2
jb 0x435689
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x435689
mov dword [edi + 0x38], 0
test cl, cl
je 0x43571a
movss xmm2, dword [ebp - 0x15c]
movaps xmm0, xmm4
subss xmm0, dword [esi + 0x1944]
movss xmm3, dword [ebp - 0x144]
comiss xmm2, xmm0
jbe 0x4356ba
movaps xmm2, xmm6
maxss xmm2, xmm0
jmp 0x4356d6
movaps xmm0, xmm4
subss xmm0, xmm3
comiss xmm0, xmm2
jb 0x4356d6
movss xmm2, dword [esi + 0x1568]
addss xmm2, xmm2
addss xmm2, xmm0
comiss xmm6, xmm2
movss xmm1, dword [esi + 0x1568]
jbe 0x4356e8
movaps xmm1, xmm6
jmp 0x4356fc
addss xmm1, xmm1
addss xmm1, xmm5
subss xmm1, xmm3
maxss xmm1, xmm6
minss xmm1, xmm2
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x5c]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
movss dword [eax + 0x5c], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x120], xmm0
cmp byte [ebp - 0x108], 0
movss xmm5, dword [edi + 0x38]
movss dword [ebp - 0xfc], xmm5
je 0x435a3d
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0xd8]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xc7], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0xd8]
lea edx, [eax + edx*2]
mov dword [ebp - 0x108], edx
je 0x435783
movss xmm1, dword [0x43ec88]
jmp 0x43578b
movss xmm1, dword [0x43ec54]
mov ecx, 0x2f
call fcn.00409300
cmp byte [ebp - 0xd4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x12c], eax
je 0x4357af
xorps xmm5, xmm5
xorps xmm6, xmm6
jmp 0x4357bf
movss xmm5, dword [0x43ed38]
movss xmm6, dword [0x43ecb8]
movss xmm3, dword [ebp - 0x30]
movss xmm4, dword [ebp - 0x120]
movss dword [ebp - 0x114], xmm6
addss xmm7, xmm4
movss dword [ebp - 0xf4], xmm5
addss xmm3, dword [ebp - 0xec]
subss xmm7, dword [ebp - 0xfc]
subss xmm3, xmm0
movss dword [ebp - 0xec], xmm3
cmp esi, edx
jae 0x435a90
movss xmm4, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xe8]
mov edi, dword [ebp - 0x12c]
nop dword [eax + eax]
movaps xmm0, xmm4
addss xmm0, dword [ecx + 0x1944]
comiss xmm3, xmm0
ja 0x435a26
movss xmm0, dword [ebp - 0x50]
comiss xmm0, xmm3
jbe 0x43585f
cmp esi, edx
jae 0x4359ee
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x4359ee
cmp esi, edx
jb 0x435846
jmp 0x4359ee
xorps xmm0, xmm0
mov eax, dword [0x4416ac]
xorps xmm4, xmm4
xorps xmm1, xmm1
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp esi, dword [ebp - 0x108]
jae 0x4358d2
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x4358bf
cmp ecx, 0xd
je 0x4358b5
cmp ecx, dword [edx]
jge 0x4358a8
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x4358ad
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, dword [ebp - 0x108]
jb 0x435888
jmp 0x4358c9
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
mov ecx, dword [ebp - 0xe8]
xorps xmm0, xmm0
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x43590b
mov eax, dword [ecx + 0x1940]
cmp dword [eax], 0x20
jle 0x4358f3
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x4358f8
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x43ec50]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm4, dword [ebp - 0x100]
addss xmm1, xmm7
addss xmm7, dword [0x43ec10]
movaps xmm2, xmm5
movaps xmm0, xmm6
subss xmm2, dword [ecx + 0x1944]
movss xmm6, dword [ebp - 0xbc]
addss xmm0, xmm3
minss xmm1, xmm6
maxss xmm7, dword [ebp - 0x54]
addss xmm2, xmm3
minss xmm0, xmm4
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x24], xmm7
maxss xmm2, dword [ebp - 0x50]
comiss xmm0, dword [ebp - 0x50]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x18], xmm0
jbe 0x4359e8
comiss xmm4, xmm2
jbe 0x4359e8
comiss xmm1, dword [ebp - 0x54]
jbe 0x4359e8
comiss xmm6, xmm7
jbe 0x4359e8
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x1c]
push edi
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x23c]
call fcn.00425b90
movss xmm0, dword [ebp - 0xc0]
movss xmm3, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xe8]
movss dword [ebp - 0xc0], xmm0
movss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x120], xmm3
movss xmm3, dword [ebp - 0xec]
movss dword [ebp - 0xf8], xmm0
mov edx, dword [ebp - 0x108]
movss xmm7, dword [ebp - 0x120]
movss xmm5, dword [ebp - 0xf4]
movss xmm6, dword [ebp - 0x114]
addss xmm3, dword [ecx + 0x1944]
subss xmm7, dword [ebp - 0xfc]
movss dword [ebp - 0xec], xmm3
cmp esi, edx
jb 0x435820
movss xmm5, dword [ebp - 0xfc]
xorps xmm6, xmm6
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
movss xmm4, dword [ebp - 0x120]
cmp byte [ebp - 0xd4], 0
mov edx, dword [ebp - 0xcc]
jne 0x435a67
mov eax, edx
sub eax, dword [ebp - 0xdc]
cmp eax, 0x200000
jge 0x435cc5
mov eax, dword [0x4416ac]
movups xmm2, xmmword [eax + 0x15f0]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1528]
movups xmmword [ebp - 0x24], xmm2
jbe 0x435aa3
movaps xmm0, xmm6
jmp 0x435aaf
movss xmm5, dword [ebp - 0xfc]
xorps xmm6, xmm6
mov esi, dword [ebp - 0xe8]
jmp 0x435a45
movss xmm0, dword [0x43ec88]
minss xmm0, xmm2
movss xmm2, dword [0x43ed08]
movss xmm7, dword [0x43ec50]
movss xmm3, dword [ebp - 0x20]
comiss xmm6, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x435ada
movaps xmm0, xmm6
jmp 0x435ae6
movss xmm0, dword [0x43ec88]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x1c]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x435b06
movaps xmm0, xmm6
jmp 0x435b12
movss xmm0, dword [0x43ec88]
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x435b2d
movaps xmm0, xmm6
jmp 0x435b39
movss xmm0, dword [0x43ec88]
minss xmm0, xmm1
mulss xmm0, xmm2
subss xmm4, xmm5
mov dword [ebp - 0x100], edx
mov edx, dword [esi + 0x1940]
movss xmm2, dword [esi + 0x1944]
addss xmm0, xmm7
mov dword [ebp - 0xbc], edx
lea edx, [ebp - 0x44]
mov dword [ebp - 0x12c], 0
movss dword [ebp - 0x148], xmm4
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
shl eax, 0x18
subss xmm0, xmm6
or eax, ecx
mov ecx, dword [ebp - 0x11c]
cmp byte [ebp - 0xd4], 0
mov dword [ebp - 0xf4], eax
cmovne edx, dword [ebp - 0x12c]
mov ecx, dword [ecx + 0x23c]
mov dword [ebp - 0xec], ecx
movss dword [ebp - 0x144], xmm0
test eax, 0xff000000
je 0x435cc5
cmp dword [ebp - 0xcc], 0
jne 0x435bfa
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + 1]
mov dword [ebp - 0x12c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435bd7
sub ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0xdc]
add eax, ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x100], eax
jmp 0x435c00
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0xdc], eax
je 0x435cc5
cmp dword [esi + 0x1940], 0
jne 0x435c21
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xbc], eax
ucomiss xmm2, xmm6
lahf
test ah, 0x44
jp 0x435c32
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x24], xmm0
test edx, edx
je 0x435c85
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x435c51
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x20]
comiss xmm0, xmm1
jae 0x435c65
movss dword [ebp - 0x20], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x1c]
ja 0x435c75
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x18]
ja 0x435c85
movss dword [ebp - 0x18], xmm0
push dword [ebp - 0x144]
test edx, edx
mov edx, dword [ebp - 0x100]
push dword [ebp - 0x148]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x24]
push edx
push dword [ebp - 0xdc]
push eax
push dword [ebp - 0xf4]
push ecx
mov ecx, dword [ebp - 0xbc]
call fcn.00429a30
cmp byte [ebp - 0xc7], 0
je 0x435e82
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0xb2], 0
je 0x435d37
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x435d37
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x148], xmm0
fld qword [ebp - 0x148]
fld qword [0x43ecb0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x43ec74]
fstp qword [ebp - 0x148]
movsd xmm1, qword [ebp - 0x148]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x435d37
xor cl, cl
jmp 0x435d39
mov cl, 1
movss xmm0, dword [ebp - 0x118]
movss xmm6, dword [0x43ec88]
addss xmm0, dword [ebp - 0x34]
subss xmm0, dword [ebp - 0xfc]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x134]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x43ec10]
movss dword [ebp - 0x12c], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x24], xmm1
addss xmm4, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0x1c], xmm4
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [ebp - 0x134], xmm2
movaps xmm0, xmm2
movaps xmm3, xmm2
subss xmm0, dword [esi + 0x1944]
subss xmm3, dword [0x43eca0]
addss xmm0, dword [0x43ec50]
movss dword [ebp - 0x18], xmm3
movss dword [ebp - 0x20], xmm0
test cl, cl
je 0x435e5d
comiss xmm3, dword [ebp - 0x50]
jbe 0x435e5d
movss xmm5, dword [ebp - 0xf8]
comiss xmm5, xmm0
jbe 0x435e5d
comiss xmm4, dword [ebp - 0x54]
jbe 0x435e5d
movss xmm0, dword [ebp - 0xc0]
comiss xmm0, xmm1
jbe 0x435e5d
sub esp, 8
movss dword [ebp - 0x148], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x144], xmm3
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.00409300
add esp, 4
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x23c]
call fcn.00425990
movss xmm1, dword [ebp - 0x12c]
movss xmm2, dword [ebp - 0x134]
movss xmm6, dword [0x43ec88]
cmp byte [ebp - 0xe4], 0
jne 0x435e82
subss xmm2, dword [esi + 0x1944]
subss xmm1, xmm6
movss dword [esi + 0x2f4c], xmm2
movss dword [esi + 0x2f48], xmm1
cmp byte [ebp - 0x160], 0
je 0x435e90
call fcn.00413e50
cmp byte [ebp - 0xd4], 0
je 0x435f44
mov ecx, dword [0x4416ac]
movss xmm1, dword [ebp - 0xc4]
addss xmm1, dword [esi + 0x1568]
movss xmm4, dword [ebp - 0x128]
mov eax, dword [ecx + 0x1ba8]
movss dword [ebp - 0x148], xmm4
movss dword [ebp - 0x144], xmm1
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1ba8]
cmp byte [eax + 0x8f], 0
jne 0x435f3a
movss xmm0, dword [eax + 0xd4]
lea ecx, [ebp - 0x148]
movss xmm3, dword [eax + 0xd0]
movaps xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x24], xmm3
movss xmm1, dword [0x43ed38]
addss xmm4, xmm3
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x1c], xmm4
call fcn.00414340
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x24]
call fcn.00414470
add esp, 8
call fcn.0040e9f0
call fcn.00414920
cmp byte [esi + 0x2fa0], 0
je 0x435f86
cmp byte [ebp - 0x160], 0
jne 0x435f86
mov eax, dword [0x4416ac]
lea ecx, [ebp - 0x34]
push dword [ebp - 0xcc]
mov edx, dword [ebp - 0xdc]
mov dword [eax + 0x2fb8], 0x43eba4
mov dword [eax + 0x2fbc], 0x43eba0
call fcn.004195d0
add esp, 4
movss xmm0, dword [ebp - 0x164]
comiss xmm0, dword [0x43ec10]
jbe 0x435fdf
movss xmm0, dword [ebp - 0x4c]
xor edx, edx
addss xmm0, dword [esi + 0x157c]
mov ecx, dword [ebp - 0x158]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0x144], xmm0
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push 1
call fcn.00409460
add esp, 0xc
mov dl, byte [ebp - 0xdd]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x436009
test ecx, 0x8000000
jne 0x436009
mov eax, dword [0x4416ac]
or dword [eax + 0x1c50], 4
mov word [eax + 0x1bf0], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0xb6]
cmovne eax, ecx
jmp 0x432bba