Function at 0x10046bd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10082310
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x158
mov eax, dword [0x100b6018]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x154], ecx
mov esi, dword [0x100b9cf4]
mov edi, esi
mov eax, dword [ebx + 8]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xbc], edi
mov eax, dword [edi + 0x1b98]
mov byte [eax + 0x8c], 1
mov eax, dword [edi + 0x1b98]
mov dword [ebp - 0x118], eax
cmp byte [eax + 0x8f], 0
jne 0x100470fa
mov edx, dword [ebx + 0x14]
mov ecx, edx
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0xd8], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0xe8], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0x15c], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x138], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0xd8], 0
mov dword [ebp - 0x114], ecx
je 0x10046cc8
call fcn.100250b0
mov esi, dword [0x100b9cf4]
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax + 0xc4]
xor edx, edx
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x154]
call fcn.10018780
add esp, 4
mov dword [ebp - 0xdc], eax
cmp dword [esi + 0x1bd0], eax
jne 0x10046cfc
mov dword [esi + 0x1bd4], eax
cmp dword [esi + 0x1c0c], eax
jne 0x10046d0b
mov byte [esi + 0x1c10], 1
cmp dword [esi + 0x1bb8], eax
jne 0x10046d2f
push ecx
push dword [ebp - 0x154]
mov edx, 0xb
mov ecx, eax
call fcn.1002aff0
mov esi, dword [0x100b9cf4]
add esp, 8
mov eax, dword [ebp - 0x154]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x10046d56
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x10046d56
cmp dl, 0x23
jne 0x10046d50
cmp byte [ecx + 1], dl
je 0x10046d56
inc ecx
cmp ecx, 0xffffffff
jb 0x10046d40
movss xmm1, dword [0x100aeb7c]
movss xmm0, dword [esi + 0x1934]
movss dword [ebp - 0x158], xmm1
cmp eax, ecx
jne 0x10046d7f
xorps xmm3, xmm3
movss dword [ebp - 0x168], xmm3
jmp 0x10046dd1
push 0
push ecx
push eax
push ecx
mov ecx, dword [esi + 0x1930]
lea eax, [ebp - 0x144]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.1003ab10
movss xmm0, dword [ebp - 0x144]
xorps xmm3, xmm3
addss xmm0, dword [0x100ae990]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x168], xmm0
movss xmm0, dword [ebp - 0x140]
cmp byte [ebp - 0xd8], 0
je 0x10046dea
movss xmm0, dword [edi + 0x1934]
mulss xmm0, dword [0x100aea6c]
test byte [esi + 0x1c24], 1
movss xmm1, dword [edi + 0x1558]
mov eax, dword [esi + 0x1b98]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x10046e16
movss xmm0, dword [esi + 0x1c28]
jmp 0x10046e1e
movss xmm0, dword [eax + 0x17c]
comiss xmm3, xmm0
jbe 0x10046e5d
cmp dword [eax + 0x168], 0
movss xmm1, dword [eax + 0x204]
jne 0x10046e3d
cmp dword [esi + 0x1f1c], 0
je 0x10046e45
movss xmm1, dword [eax + 0x1d4]
subss xmm1, dword [eax + 0xd0]
addss xmm1, xmm0
movss xmm0, dword [0x100ae998]
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x144]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.10024fd0
movss xmm1, dword [ebp - 0x168]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x10046e9b
movaps xmm2, xmm1
addss xmm2, dword [edi + 0x156c]
jmp 0x10046e9e
xorps xmm2, xmm2
mov esi, dword [ebp - 0x118]
lea ecx, [ebp - 0x12c]
movss xmm5, dword [ebp - 0x144]
addss xmm2, xmm5
movss dword [ebp - 0x13c], xmm5
mov dword [ebp - 0x104], esi
movss xmm4, dword [esi + 0xd4]
movss xmm3, dword [esi + 0xd0]
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x140]
addss xmm2, xmm3
movss dword [ebp - 0xc4], xmm3
movaps xmm1, xmm3
movss dword [ebp - 0xf8], xmm4
addss xmm1, xmm5
movss dword [ebp - 0x54], xmm3
movss dword [ebp - 0x50], xmm4
movss dword [ebp - 0x48], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x1c], xmm2
subss xmm2, xmm3
movss dword [ebp - 0x4c], xmm1
movss xmm1, dword [edi + 0x1558]
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x18], xmm0
subss xmm0, xmm4
movss dword [ebp - 0x20], xmm4
movss dword [ebp - 0x12c], xmm2
movss dword [ebp - 0x128], xmm0
call fcn.10024ac0
cmp byte [ebp - 0xd8], 0
je 0x10047187
mov edx, dword [ebp - 0xdc]
lea eax, [ebp - 0x54]
push 0x100
push eax
lea ecx, [ebp - 0x24]
call fcn.10024bf0
add esp, 8
test al, al
je 0x100470f5
mov eax, dword [edi + 0x1c40]
movss xmm0, dword [ebp - 0xc4]
movss dword [esi + 0xd0], xmm0
movss xmm0, dword [ebp - 0xf8]
movss dword [esi + 0xd4], xmm0
mov esi, dword [0x100b9cf4]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x28], 3
movups xmm0, xmmword [esi + 0x1610]
lea ecx, [esi + 0x1cd4]
movups xmmword [ebp - 0x24], xmm0
call fcn.1002b8e0
movups xmm0, xmmword [edi + 0x1650]
lea eax, [ebp - 0x130]
mov dword [ebp - 0x130], 7
push eax
movups xmmword [esi + 0x1610], xmm0
mov esi, dword [0x100b9cf4]
movss xmm0, dword [edi + 0x155c]
movss dword [ebp - 0xc4], xmm0
movss xmm0, dword [esi + 0x1544]
lea ecx, [esi + 0x1ce0]
movss dword [ebp - 0x12c], xmm0
call fcn.1002b820
movss xmm0, dword [ebp - 0xc4]
lea eax, [ebp - 0x130]
movss dword [esi + 0x1544], xmm0
mov esi, dword [0x100b9cf4]
movss xmm0, dword [edi + 0x1560]
movss dword [ebp - 0xc4], xmm0
push eax
movss xmm0, dword [esi + 0x1548]
lea ecx, [esi + 0x1ce0]
mov dword [ebp - 0x130], 8
movss dword [ebp - 0x12c], xmm0
call fcn.1002b820
movss xmm0, dword [ebp - 0xc4]
lea eax, [ebp - 0x12c]
movss xmm1, dword [ebp - 0x4c]
subss xmm1, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x154]
movss dword [esi + 0x1548], xmm0
movss xmm0, dword [ebp - 0x48]
subss xmm0, dword [ebp - 0x50]
mov esi, dword [ebp - 0xdc]
mov edx, esi
push 4
push 1
push eax
movss dword [ebp - 0x12c], xmm1
movss dword [ebp - 0x128], xmm0
call fcn.1001ef40
add esp, 0xc
mov byte [ebp - 0xea], al
mov ecx, 2
call fcn.100192c0
mov eax, 1
mov ecx, eax
call fcn.10019270
cmp byte [ebp - 0xea], 0
jne 0x1004711a
call fcn.1001f1e0
call fcn.100251e0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1007dbea
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov edx, dword [edi + 0x1b98]
mov dword [ebp - 0x104], edx
movsx ecx, word [edx + 0x122]
mov eax, dword [edx + 0x11c]
bts ecx, eax
mov word [edx + 0x122], cx
movss xmm0, dword [edi + 0x1554]
addss xmm0, dword [edx + 0xd0]
movss dword [edx + 0xd0], xmm0
movss xmm0, dword [edi + 0x1558]
addss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [ebp - 0x144]
subss xmm0, dword [edx + 0x80]
movss dword [ebp - 0x13c], xmm0
jmp 0x100471c0
test dword [ebx + 0x14], 0x10000000
mov esi, dword [ebp - 0xdc]
jne 0x100471b4
lea eax, [ebp - 0x54]
mov edx, esi
push 0x100
push eax
lea ecx, [ebp - 0x24]
call fcn.10024bf0
add esp, 8
test al, al
je 0x100470fa
mov eax, dword [edi + 0x1c40]
mov dword [ebp - 0xf0], eax
mov edx, esi
lea ecx, [ebp - 0x54]
call fcn.1001ae50
mov byte [ebp - 0xb5], al
mov edx, edi
test al, al
je 0x100471e0
mov dword [edx + 0x1e88], 1
mov ecx, dword [0x100b9cf4]
xor eax, eax
cmp dword [ecx + 0x1fac], esi
lea edi, [ecx + 0x1fac]
cmovne edi, eax
mov eax, dword [ebp - 0xf0]
shr eax, 8
and al, 1
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0xf0], eax
mov eax, dword [edx + 0x1bd0]
cmp eax, esi
je 0x1004723a
cmp dword [edx + 0x1d58], esi
je 0x10047231
cmp dword [edx + 0x1d4c], esi
jne 0x1004723a
cmp dword [edx + 0x1d78], 2
jne 0x1004723a
mov byte [ebp - 0xc0], 1
jmp 0x10047241
mov byte [ebp - 0xc0], 0
cmp byte [ebp - 0xb5], 0
je 0x1004725a
cmp byte [edx + 0x3e0], 0
mov byte [ebp - 0xbf], 1
jne 0x10047261
mov byte [ebp - 0xbf], 0
cmp byte [ebp - 0xd8], 0
je 0x100472d3
test edi, edi
je 0x100472d3
test eax, eax
jne 0x100472d3
mov eax, dword [ebp - 0x104]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10018780
mov ecx, dword [0x100b9cf4]
mov esi, eax
add esp, 4
cmp dword [ecx + 0x1bb8], esi
jne 0x100472bc
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, esi
call fcn.1002aff0
add esp, 8
mov edx, dword [ebp - 0xbc]
cmp dword [edx + 0x1c0c], esi
jne 0x100472d3
mov byte [ebp - 0xbd], 1
jmp 0x100472f3
mov eax, dword [ebp - 0xd8]
mov byte [ebp - 0xbd], 0
test al, al
je 0x10047369
mov byte [ebp - 0xbd], 0
test edi, edi
je 0x10047369
mov eax, dword [ebp - 0x104]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10018780
mov ecx, dword [0x100b9cf4]
mov esi, eax
add esp, 4
cmp dword [ecx + 0x1bb8], esi
jne 0x1004733d
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, esi
call fcn.1002aff0
add esp, 8
mov edx, dword [ebp - 0xbc]
cmp dword [edx + 0x1bd0], esi
jne 0x10047363
mov cl, 1
mov byte [ebp - 0xd1], 0
mov byte [ebp - 0xb6], cl
mov byte [ebp - 0xe4], 0
jmp 0x10047383
mov eax, dword [ebp - 0xd8]
xor cl, cl
mov byte [ebp - 0xd1], 0
mov byte [ebp - 0xe4], 0
mov byte [ebp - 0xb6], cl
test al, al
je 0x1004739e
mov eax, dword [ebp - 0x104]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [ebp - 0xd8]
movss dword [ebp - 0x158], xmm0
jmp 0x100473a6
xor cl, cl
mov byte [ebp - 0xb6], cl
test edi, edi
je 0x100473b5
xor al, 1
cmp byte [edi + 0x53], al
je 0x100473b5
mov al, 1
jmp 0x100473b7
xor al, al
cmp byte [ebp - 0xbf], 0
mov byte [ebp - 0xbe], al
jne 0x100473f4
cmp byte [ebp - 0xbd], 0
jne 0x100473f4
cmp byte [ebp - 0xc0], 0
jne 0x100473f4
cmp byte [ebp - 0xf0], 0
jne 0x100473f4
mov byte [ebp - 0xbd], 0
test cl, cl
jne 0x100473fb
mov byte [ebp - 0xc9], cl
jmp 0x10047410
mov byte [ebp - 0xbd], 1
mov ecx, dword [ebp - 0xdc]
mov byte [ebp - 0xc9], 1
cmp dword [edx + 0x1bd0], ecx
jne 0x10047418
test al, al
je 0x1004767d
mov ecx, dword [ebp - 0xe0]
lea edi, [edx + 0x1fac]
mov dword [ebp - 0xf4], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10047437
mov eax, dword [edi + 0x28]
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, eax
jle 0x10047474
test eax, eax
je 0x1004745d
cdq
sub eax, edx
lea edx, [edi + 0x24]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10047465
mov ecx, 8
lea edx, [edi + 0x24]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.1002bc70
push esi
push dword [ebp - 0xe0]
mov dword [edi + 0x24], esi
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebx + 0xc]
lea eax, [edi + 0xc]
mov esi, dword [eax + 4]
inc edx
add esp, 0xc
mov dword [ebp - 0xc8], edx
cmp edx, esi
jle 0x100474d2
test esi, esi
je 0x100474b4
mov eax, esi
cdq
sub eax, edx
mov edx, dword [ebp - 0xc8]
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x100474b9
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.1002bce0
mov edx, dword [ebp - 0xc8]
lea eax, [edi + 0xc]
mov dword [eax], edx
mov ecx, dword [edi + 0x1c]
test ecx, ecx
jns 0x100474f4
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.1002bc70
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebp - 0xe0]
dec ecx
mov dword [edi + 0x18], 0
mov edx, dword [edi + 0x14]
mov esi, edx
mov byte [edi + 0x30], 0
mov dword [ebp - 0xc8], edx
lea ecx, [edx + ecx*2]
cmp edx, ecx
jae 0x1004756c
mov edi, eax
nop dword [eax]
cmp byte [edi], 0
je 0x1004755a
push 0
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.10018a60
mov edx, dword [ebp - 0xc8]
add edi, eax
mov eax, dword [ebp - 0xc4]
add esp, 4
test eax, eax
je 0x1004755a
mov word [esi], ax
add esi, 2
mov eax, dword [ebx + 0xc]
dec eax
lea eax, [edx + eax*2]
cmp esi, eax
jb 0x10047520
mov dword [ebp - 0xd0], edi
mov edi, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0xe0]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
sar esi, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xdc]
mov dword [edi + 4], esi
cmp dword [edi], eax
jne 0x100475b6
cmp byte [ebp - 0xbe], cl
jne 0x100475b6
cmp dword [edi + 0x3c], esi
mov ecx, esi
mov dl, 1
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], esi
mov dword [edi + 0x3c], ecx
mov ecx, esi
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], esi
cmovl esi, dword [edi + 0x44]
mov dword [edi + 0x44], esi
jmp 0x100475fa
mov dword [edi], eax
xor dl, dl
mov al, byte [ebp - 0xd8]
xor al, 1
mov dword [edi + 0x38], ecx
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], ecx
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov word [edi + 0x51], 1
mov dword [edi + 0x58], ecx
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], ecx
cmp byte [ebp - 0xd8], 0
mov dword [edi + 0x40], ecx
jne 0x1004766a
mov eax, dword [ebp - 0xe4]
mov ecx, 1
test byte [ebx + 0x14], 0x10
movzx eax, al
cmovne eax, ecx
cmp byte [ebp - 0xc0], 0
mov dword [ebp - 0xe4], eax
je 0x10047643
test dl, dl
je 0x1004763d
mov eax, dword [ebp - 0xbc]
test byte [eax + 0x1d5c], 4
jne 0x10047643
mov byte [ebp - 0xe4], cl
cmp byte [ebp - 0xf0], 0
jne 0x10047664
cmp byte [ebp - 0xbf], 0
je 0x1004766a
mov eax, dword [ebp - 0xbc]
cmp byte [eax + 0xfc], 0
je 0x1004766a
mov byte [ebp - 0xe4], cl
test dword [ebx + 0x14], 0x2000
mov edx, dword [ebp - 0xbc]
je 0x1004767d
mov byte [edi + 0x48], 1
mov esi, dword [ebp - 0xdc]
cmp dword [edx + 0x1bd0], esi
je 0x1004773e
cmp byte [ebp - 0xbd], 0
je 0x10047736
mov edx, dword [ebp - 0x118]
mov ecx, esi
call fcn.1001abe0
call fcn.10026910
mov ecx, edx
call fcn.10024260
mov edx, dword [ebp - 0xbc]
mov eax, dword [edx + 0x1be4]
or eax, 3
cmp byte [ebp - 0xd8], 0
mov dword [edx + 0x1be4], eax
jne 0x100476d9
test byte [ebx + 0x14], 0x80
je 0x100476e2
or eax, 0xc
mov dword [edx + 0x1be4], eax
mov eax, dword [edx + 0x1bf0]
or dword [edx + 0x1be8], 2
or eax, 0x180
cmp byte [ebp - 0xd8], 0
mov ecx, dword [edx + 0x1bf4]
mov dword [edx + 0x1bf0], eax
mov dword [edx + 0x1bf4], ecx
je 0x1004771e
or eax, 0x60
mov dword [edx + 0x1bf4], ecx
mov dword [edx + 0x1bf0], eax
test dword [ebx + 0x14], 0x440
je 0x10047736
or eax, 1
mov dword [edx + 0x1bf4], ecx
mov dword [edx + 0x1bf0], eax
cmp dword [edx + 0x1bd0], esi
jne 0x1004777b
test edi, edi
jne 0x1004774d
call fcn.1001acb0
mov edx, dword [ebp - 0xbc]
cmp dword [edx + 0x1bd0], esi
jne 0x1004777b
cmp byte [edx + 0x3e0], 0
je 0x10047788
cmp byte [ebp - 0xc9], 0
jne 0x10047788
cmp byte [ebp - 0xbd], 0
jne 0x10047788
mov byte [ebp - 0xd1], 1
mov cl, 1
jmp 0x1004778e
test edi, edi
je 0x1004778c
cmp byte [ebp - 0xb6], 0
je 0x1004778c
mov cl, 1
jmp 0x1004778e
xor cl, cl
mov byte [ebp - 0xca], cl
test edi, edi
je 0x100477b4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x100477a9
cmp byte [ebp - 0xe4], 0
je 0x100477b4
test cl, cl
je 0x100477b4
mov ecx, 1
jmp 0x100477b6
xor cl, cl
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x150], ecx
mov byte [ebp - 0xe9], cl
mov byte [ebp - 0xea], 0
mov byte [ebp - 0xbd], 0
test al, al
je 0x100478fb
test edi, edi
je 0x100478fb
cmp byte [ebp - 0xca], 0
jne 0x100477f7
test cl, cl
je 0x10047908
mov ecx, dword [ebx + 0xc]
mov eax, dword [edi + 0x10]
lea esi, [ecx + 1]
cmp esi, eax
jle 0x10047831
test eax, eax
je 0x10047817
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x1004781f
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.1002bce0
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebp - 0xe0]
mov dword [edi + 0xc], esi
mov edx, dword [edi + 0x14]
mov esi, edx
mov dword [ebp - 0xc8], edx
lea ecx, [edx + ecx*2]
cmp edx, ecx
jae 0x1004789b
mov edi, eax
nop
cmp byte [edi], 0
je 0x10047889
push 0
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.10018a60
mov edx, dword [ebp - 0xc8]
add edi, eax
mov eax, dword [ebp - 0xc4]
add esp, 4
test eax, eax
je 0x10047889
mov ecx, dword [ebx + 0xc]
mov word [esi], ax
add esi, 2
lea eax, [edx + ecx*2]
cmp esi, eax
jb 0x10047850
mov dword [ebp - 0xd0], edi
mov edi, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0xe0]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
mov edx, dword [ebp - 0xbc]
sar esi, 1
cmp dword [edi + 0x3c], esi
mov ecx, esi
mov dword [edi + 4], esi
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], esi
mov dword [edi + 0x3c], ecx
mov ecx, esi
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], esi
mov dword [edi + 8], eax
cmovl esi, dword [edi + 0x44]
movzx eax, byte [ebp - 0xe9]
cmp ecx, esi
mov dword [edi + 0x40], ecx
mov ecx, 0
cmovne ecx, eax
mov dword [edi + 0x44], esi
mov esi, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x150], ecx
cmp byte [ebp - 0xca], 0
jne 0x10047910
test cl, cl
jne 0x10047910
cmp dword [edx + 0x1bd0], esi
jne 0x10047924
test al, al
jne 0x10047924
test edi, edi
je 0x10047924
mov byte [ebp - 0xe9], 1
cmp byte [edi + 0x30], al
jne 0x1004792b
mov byte [ebp - 0xe9], 0
cmp byte [ebp - 0x15c], 0
je 0x100479be
mov edx, dword [edx + 0x1930]
cmp dword [edx + 0x14], 0x2a
ja 0x10047949
mov esi, dword [edx + 0x2c]
jmp 0x10047968
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x1004795f
mov esi, dword [edx + 0x2c]
jmp 0x10047968
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea esi, [eax + ecx*8]
mov eax, dword [edx + 0x10]
mov edx, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xbc]
add ecx, 0x2e28
mov dword [ecx + 0x10], eax
mov eax, dword [edx + 0x1930]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [edx + 0x1930]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [edx + 0x1930]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [edx + 0x1930]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov dword [ecx + 0x2c], esi
mov eax, dword [esi + 4]
mov dword [ecx + 0xc], eax
call fcn.10024530
mov esi, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x118], 0
cmp dword [esi + 0x1bd0], edx
jne 0x10047e0c
mov eax, dword [edi + 8]
mov dword [ebp - 0x118], eax
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x34], eax
mov eax, dword [ebx + 0x14]
mov dword [edi + 0xe70], eax
mov byte [edi + 0xe6e], 0
mov dword [edi + 0xe74], 0
mov dword [edi + 0xe78], 0
mov ah, byte [esi + 0xec]
test ah, ah
mov dword [esi + 0x31bc], 1
sete al
cmp byte [ebp - 0xd8], 0
mov byte [esi + 0x1bdd], al
movss xmm7, dword [esi + 0xe4]
subss xmm7, dword [ebp - 0x54]
subss xmm7, dword [esi + 0x1554]
addss xmm7, dword [edi + 0x38]
je 0x10047a69
mov ecx, dword [ebp - 0x104]
movss xmm2, dword [esi + 0xe8]
subss xmm2, dword [ecx + 0xd4]
jmp 0x10047a79
movss xmm2, dword [esi + 0x1934]
mulss xmm2, dword [0x100ae940]
cmp byte [ebp - 0xe4], 0
mov dl, byte [esi + 0xb1]
mov byte [ebp - 0xb6], dl
jne 0x10047bfe
mov cl, byte [ebp - 0xb5]
test cl, cl
je 0x10047aac
test dl, dl
jne 0x10047b1a
cmp byte [esi + 0x3e5], dl
jne 0x10047bfe
mov edx, dword [ebp - 0xbc]
lea esi, [edi + 0xe6d]
mov al, byte [esi]
cmp byte [edx + 0x3e0], 0
je 0x10047b74
test al, al
jne 0x10047b74
test cl, cl
je 0x10047b0d
cmp byte [edi + 0x53], al
je 0x10047aec
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.100451d0
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.10045510
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, esi
mov esi, dword [ebp - 0xbc]
jmp 0x10047c1f
cmp byte [esi + 0x3e5], 0
je 0x10047aac
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.100458f0
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x60000d
call fcn.100458f0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
lea ecx, [edi + 0xe6d]
jmp 0x10047c1f
mov ecx, esi
test ah, ah
je 0x10047c1d
test al, al
jne 0x10047c1d
movss xmm0, dword [edx + 0x370]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10047bab
movss xmm0, dword [edx + 0x374]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10047c1d
cmp byte [edi + 0x53], 0
je 0x10047bc5
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.100451d0
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x10047bd3
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.10045510
mov dword [edi + 0x44], eax
mov ecx, esi
mov esi, dword [ebp - 0xbc]
mov dword [edi + 0x3c], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
jmp 0x10047c1f
mov eax, dword [edi + 4]
lea ecx, [edi + 0xe6d]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [ecx], 1
jmp 0x10047c25
mov esi, edx
mov dl, byte [ebp - 0xb6]
cmp byte [ecx], 0
je 0x10047c36
cmp byte [esi + 0xec], 0
jne 0x10047c36
mov byte [ecx], 0
cmp byte [esi + 0xfc], 0
je 0x10047c48
cmp byte [esi + 0xfe], 0
je 0x10047c55
test dl, dl
je 0x10047c5e
cmp byte [esi + 0xff], 0
je 0x10047c5e
mov byte [ebp - 0xb5], 1
jmp 0x10047c65
mov byte [ebp - 0xb5], 0
mov edx, dword [ebx + 0x14]
test edx, 0x400
je 0x10047ead
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x10047ead
call fcn.1001ed90
mov ecx, dword [ebp - 0xe8]
test al, al
mov al, byte [ebp - 0xb5]
je 0x10047d34
test al, al
jne 0x10047d34
cmp byte [esi + 0xfd], al
jne 0x10047d34
test cl, cl
jne 0x10047d34
mov ecx, dword [esi + 0x1514]
mov eax, dword [esi + 0x150c]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x10047ce0
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x10047d28
cmp ecx, edx
jb 0x10047cd0
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xc8]
push 2
sub esp, 8
mov dword [ebp - 0xc8], 9
call fcn.100469f0
add esp, 0xc
test al, al
je 0x10047d28
push dword [ebp - 0xc8]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.100458f0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xe8]
mov al, byte [ebp - 0xb5]
mov edx, dword [ebx + 0x14]
add esi, 0x150c
mov dword [ebp - 0xc4], esi
cmp dword [esi], 0
jle 0x10047e06
test al, al
jne 0x10047de1
test cl, cl
jne 0x10047de1
cmp byte [ebp - 0xc0], cl
jne 0x10047de1
mov ecx, dword [ebp - 0xbc]
xor esi, esi
mov eax, dword [ecx + 0x1514]
movzx eax, word [eax + esi*2]
mov dword [ebp - 0xc8], eax
cmp eax, 9
jne 0x10047d8e
cmp byte [ecx + 0xfd], 0
jne 0x10047dcf
push 2
sub esp, 8
lea ecx, [ebp - 0xc8]
call fcn.100469f0
add esp, 0xc
test al, al
je 0x10047dc9
push dword [ebp - 0xc8]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.100458f0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebx + 0x14]
inc esi
cmp esi, dword [ecx + 0x150c]
jl 0x10047d70
mov esi, dword [ebp - 0xc4]
mov ecx, dword [esi + 4]
test ecx, ecx
jns 0x10047e00
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.1002bce0
mov dword [esi], 0
mov esi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xdc]
xor dl, dl
mov byte [ebp - 0xb5], dl
cmp dword [esi + 0x1bd0], eax
jne 0x10048a1f
cmp byte [esi + 0x1bdc], dl
jne 0x10048a1f
cmp byte [ebp - 0xd1], dl
jne 0x10048a1f
movss xmm0, dword [ebp - 0x140]
mov ecx, 1
subss xmm0, dword [esi + 0x1558]
divss xmm0, dword [esi + 0x1934]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
mov eax, dword [ebp - 0xbc]
mov dword [edi + 0x4c], ecx
xor esi, esi
mov dword [ebp - 0xc8], ecx
mov ecx, 0x400000
cmp byte [eax + 0xfd], dl
mov dh, byte [eax + 0xb1]
cmovne esi, ecx
mov byte [ebp - 0x119], dh
test dh, dh
je 0x10047ebe
mov ecx, dword [eax + 0x37c]
mov dword [ebp - 0xf0], ecx
cmp ecx, 0xa
jne 0x10047ebe
mov byte [ebp - 0xc9], 1
jmp 0x10047ed5
mov al, byte [ebp - 0xb5]
mov ecx, dword [ebp - 0xe8]
jmp 0x10047d37
mov ecx, dword [eax + 0x37c]
mov dword [ebp - 0xf0], ecx
mov byte [ebp - 0xc9], 0
test dh, dh
je 0x10047f03
cmp byte [eax + 0xff], 0
mov dl, byte [eax + 0xfe]
mov byte [ebp - 0xc0], dl
je 0x10047f16
cmp byte [eax + 0xfc], 0
jne 0x10047f16
test dl, dl
jne 0x10047f16
mov byte [ebp - 0xbf], 1
cmp ecx, 8
jmp 0x10047f3c
mov dl, byte [eax + 0xfc]
mov byte [ebp - 0xc9], 0
mov dword [ebp - 0xf0], ecx
mov byte [ebp - 0xc0], dl
mov byte [ebp - 0xbf], 0
test dh, dh
je 0x10047f2c
cmp ecx, 8
jmp 0x10047f3c
cmp ecx, 1
mov byte [ebp - 0xc0], dl
mov byte [ebp - 0xbf], 0
sete al
mov byte [ebp - 0xb6], al
test al, al
je 0x10047f69
mov eax, dword [0x100b9cf4]
mov eax, dword [eax + 0x80]
test eax, eax
js 0x10047f69
mov ecx, eax
call fcn.1001ed90
test al, al
jne 0x10047f83
mov ecx, dword [ebp - 0xf0]
cmp ecx, 2
jne 0x10047faf
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x10047faf
call fcn.1001ed90
test al, al
je 0x10047faf
cmp byte [ebp - 0xe8], 0
jne 0x10047faf
cmp byte [ebp - 0x15c], 0
jne 0x10047faf
cmp byte [ebp - 0xd8], 0
je 0x10047fa6
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x10047faf
mov byte [ebp - 0xbe], 1
jmp 0x10047fb6
mov byte [ebp - 0xbe], 0
cmp byte [ebp - 0xb6], 0
je 0x10047fd4
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x10047fd4
call fcn.1001ed90
test al, al
jne 0x10047ff2
cmp dword [ebp - 0xf0], 1
jne 0x10048015
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10048015
call fcn.1001ed90
test al, al
je 0x10048015
cmp byte [ebp - 0x15c], 0
jne 0x10048015
cmp byte [ebp - 0xd8], 0
je 0x1004800c
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x10048015
mov byte [ebp - 0x11b], 1
jmp 0x1004801c
mov byte [ebp - 0x11b], 0
cmp byte [ebp - 0xb6], 0
je 0x1004803a
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x1004803a
call fcn.1001ed90
test al, al
jne 0x10048058
cmp dword [ebp - 0xf0], 2
jne 0x10048068
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10048068
call fcn.1001ed90
test al, al
je 0x10048068
cmp byte [ebp - 0xe8], 0
mov byte [ebp - 0x11a], 1
je 0x1004806f
mov byte [ebp - 0x11a], 0
mov dl, byte [ebp - 0xb6]
test dl, dl
je 0x100480b2
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x100480b2
call fcn.1001ed90
test al, al
je 0x100480ac
cmp byte [ebp - 0xe8], 0
jne 0x100480ac
cmp byte [ebp - 0x138], 0
je 0x100480ac
mov byte [ebp - 0x11c], 1
jmp 0x100480bd
mov dl, byte [ebp - 0xb6]
mov byte [ebp - 0x11c], 0
test dl, dl
je 0x100480d5
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x100480d5
call fcn.1001ed90
test al, al
jne 0x100480f6
cmp byte [ebp - 0xc9], 0
je 0x1004810f
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x1004810f
call fcn.1001ed90
test al, al
je 0x1004810f
cmp byte [ebp - 0xe8], 0
jne 0x1004810f
cmp byte [ebp - 0x138], 0
mov byte [ebp - 0xf9], 1
jne 0x10048116
mov byte [ebp - 0xf9], 0
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x1004812b
call fcn.1001ed90
test al, al
jne 0x10048140
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x10048149
call fcn.1001ed90
test al, al
je 0x10048149
mov byte [ebp - 0xc9], 1
jmp 0x10048150
mov byte [ebp - 0xc9], 0
mov edx, 1
xor ecx, ecx
call fcn.10027740
xorps xmm5, xmm5
comiss xmm0, xmm5
jbe 0x10048179
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x64]
test ecx, ecx
js 0x10048192
call fcn.1001ed90
test al, al
je 0x10048192
mov edx, 1
lea ecx, [edx + 1]
call fcn.10027740
comiss xmm0, xmm5
mov byte [ebp - 0x10d], 0
jbe 0x10048199
mov byte [ebp - 0x10d], 1
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x100481ae
call fcn.1001ed90
test al, al
jne 0x100481c8
mov eax, 1
mov edx, eax
mov ecx, eax
call fcn.10027740
comiss xmm0, xmm5
mov byte [ebp - 0x11d], 0
jbe 0x100481cf
mov byte [ebp - 0x11d], 1
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x1004822a
call fcn.1001ed90
test al, al
je 0x1004822a
cmp byte [ebp - 0xbf], 0
je 0x10048204
mov eax, 0x200004
lea edx, [edi + 0x3c]
or esi, eax
mov ecx, edi
push esi
call fcn.100458f0
jmp 0x100489e2
cmp byte [ebp - 0xc0], 0
lea edx, [edi + 0x3c]
mov ecx, 0x20000c
mov eax, 0x200000
cmovne eax, ecx
mov ecx, edi
or esi, eax
push esi
call fcn.100458f0
jmp 0x100489e2
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x10048285
call fcn.1001ed90
test al, al
je 0x10048285
cmp byte [ebp - 0xbf], 0
je 0x1004825f
mov eax, 0x200005
lea edx, [edi + 0x3c]
or esi, eax
mov ecx, edi
push esi
call fcn.100458f0
jmp 0x100489e2
cmp byte [ebp - 0xc0], 0
lea edx, [edi + 0x3c]
mov ecx, 0x20000d
mov eax, 0x200001
cmovne eax, ecx
mov ecx, edi
or esi, eax
push esi
call fcn.100458f0
jmp 0x100489e2
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x10048303
call fcn.1001ed90
test al, al
je 0x10048303
cmp byte [ebp - 0xd8], 0
je 0x10048303
mov eax, dword [ebp - 0xbc]
cmp byte [eax + 0xfc], 0
je 0x100482e3
mov ecx, dword [ebp - 0x104]
mov esi, eax
movss xmm0, dword [ecx + 0x5c]
subss xmm0, dword [esi + 0x1934]
maxss xmm0, xmm5
movss dword [ecx + 0x6c], xmm0
mov dword [ecx + 0x74], 0
mov dword [ecx + 0x7c], 0
jmp 0x100489fc
movzx eax, byte [ebp - 0xbf]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200002]
or eax, esi
push eax
call fcn.100458f0
jmp 0x100489e2
mov ecx, dword [0x100b9cf4]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
js 0x1004837f
call fcn.1001ed90
test al, al
je 0x1004837f
cmp byte [ebp - 0xd8], 0
je 0x1004837f
mov eax, dword [ebp - 0xbc]
cmp byte [eax + 0xfc], 0
je 0x1004835f
mov ecx, dword [ebp - 0x104]
mov esi, dword [ebp - 0xbc]
mov eax, dword [0x100b9cf4]
movss xmm0, dword [ecx + 0x5c]
addss xmm0, dword [esi + 0x1934]
mov eax, dword [eax + 0x1b98]
minss xmm0, dword [eax + 0x64]
jmp 0x100482cb
movzx eax, byte [ebp - 0xbf]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200003]
or eax, esi
push eax
call fcn.100458f0
jmp 0x100489e2
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x48]
test ecx, ecx
js 0x100483f4
call fcn.1001ed90
test al, al
je 0x100483f4
cmp byte [ebp - 0xd8], 0
je 0x100483f4
or esi, 0x20000e
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.100458f0
movd xmm0, dword [ebp - 0xc8]
add esp, 4
mov esi, dword [ebp - 0xbc]
movss xmm1, dword [ebp - 0x158]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1934]
subss xmm1, xmm0
movss dword [ebp - 0x158], xmm1
jmp 0x100489fc
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
js 0x10048465
call fcn.1001ed90
test al, al
je 0x10048465
cmp byte [ebp - 0xd8], 0
je 0x10048465
or esi, 0x20000f
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.100458f0
movd xmm0, dword [ebp - 0xc8]
add esp, 4
mov esi, dword [ebp - 0xbc]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1934]
addss xmm0, dword [ebp - 0x158]
movss dword [ebp - 0x158], xmm0
jmp 0x100489fc
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x100484a7
call fcn.1001ed90
test al, al
je 0x100484a7
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov eax, esi
or esi, 0x200004
or eax, 0x200006
cmp byte [ecx + 0xfc], 0
mov ecx, edi
cmovne esi, eax
push esi
call fcn.100458f0
jmp 0x100489e2
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x100484e9
call fcn.1001ed90
test al, al
je 0x100484e9
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov eax, esi
or esi, 0x200005
or eax, 0x200007
cmp byte [ecx + 0xfc], 0
mov ecx, edi
cmovne esi, eax
push esi
call fcn.100458f0
jmp 0x100489e2
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x1004851d
call fcn.1001ed90
test al, al
je 0x1004851d
cmp byte [ebp - 0xe8], 0
jne 0x1004851d
or esi, 0x200008
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.100458f0
jmp 0x100489e2
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x100485c2
call fcn.1001ed90
test al, al
je 0x100485c2
cmp byte [ebp - 0xe8], 0
jne 0x100485c2
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x100485ac
cmp byte [ebp - 0xc0], 0
je 0x1004855f
push 0x60000c
jmp 0x1004858e
cmp byte [ebp - 0x119], 0
je 0x100485ac
mov eax, dword [ebp - 0xbc]
cmp byte [eax + 0xff], 0
je 0x100485ac
cmp byte [eax + 0xfe], 0
jne 0x100485ac
cmp byte [eax + 0xfc], 0
jne 0x100485ac
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.100458f0
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
or esi, 0x200009
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.100458f0
jmp 0x100489e2
cmp byte [ebp - 0xc9], 0
je 0x10048668
mov edx, dword [ebx + 0x14]
mov eax, edx
mov esi, dword [ebp - 0xbc]
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xd8], 0
je 0x100485f6
mov cl, byte [esi + 0xfc]
test al, al
je 0x10048609
test cl, cl
jne 0x1004860d
mov byte [ebp - 0xd1], 1
mov byte [ebp - 0xbd], 1
jmp 0x100489fc
test cl, cl
jne 0x100485f6
cmp byte [ebp - 0xe8], 0
jne 0x100489fc
push 2
sub esp, 8
mov dword [ebp - 0xc8], 0xa
lea ecx, [ebp - 0xc8]
call fcn.100469f0
add esp, 0xc
test al, al
je 0x100489fc
push dword [ebp - 0xc8]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.100458f0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x100489fc
cmp byte [ebp - 0x10d], 0
je 0x10048684
mov byte [ebp - 0xd1], 1
mov byte [ebp - 0xbd], 1
jmp 0x100489f6
cmp byte [ebp - 0x11d], 0
je 0x100486a0
mov esi, dword [ebp - 0xbc]
mov dl, 1
mov byte [ebp - 0xd1], dl
jmp 0x10048a02
mov al, byte [ebp - 0x11c]
test al, al
jne 0x100489c3
cmp byte [ebp - 0xf9], al
jne 0x100489c3
cmp byte [ebp - 0xb6], al
je 0x100486f0
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x100486f0
call fcn.1001ed90
test al, al
je 0x100486f0
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
jmp 0x100489ef
mov al, byte [ebp - 0xbe]
test al, al
jne 0x100488a3
cmp byte [ebp - 0x11b], al
jne 0x100488a3
cmp byte [ebp - 0x11a], al
je 0x100489f6
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0xd0]
test ecx, ecx
je 0x1004873b
push dword [eax + 0xd8]
call ecx
mov esi, eax
add esp, 4
test esi, esi
jne 0x10048740
jmp 0x100489f6
mov esi, 0x100a2bf8
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10048745
mov eax, dword [0x100b9cf4]
sub ecx, edx
test eax, eax
je 0x1004875d
inc dword [eax + 0x36c]
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
add esp, 4
mov dword [ebp - 0x108], eax
cmp byte [esi], 0
mov dword [ebp - 0xc8], 0
je 0x100487e6
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0xd0]
call fcn.10018a60
add esp, 4
add esi, eax
cmp dword [ebp - 0xd0], 0
je 0x100487d4
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xd0]
push 5
sub esp, 8
call fcn.100469f0
add esp, 0xc
test al, al
je 0x100487cf
mov ecx, dword [ebp - 0x108]
mov ax, word [ebp - 0xd0]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10048786
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xc8], edi
mov edi, dword [ebp - 0xf4]
mov esi, dword [ebp - 0xc8]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x1004887f
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebp - 0xc8], edx
mov edx, dword [edi + 0x40]
cmp edx, dword [edi + 0x44]
je 0x10048830
cmp edx, ecx
jle 0x10048817
mov dword [edi + 0x40], ecx
mov edx, ecx
cmp dword [edi + 0x44], ecx
jle 0x10048825
mov dword [edi + 0x44], ecx
mov dword [ebp - 0xc8], ecx
cmp edx, dword [ebp - 0xc8]
jne 0x10048830
mov dword [edi + 0x3c], edx
cmp dword [edi + 0x3c], ecx
jle 0x10048838
mov dword [edi + 0x3c], ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10045860
mov edx, dword [edi + 0x3c]
mov ecx, edi
push esi
push dword [ebp - 0x108]
call fcn.100453d0
add esp, 8
test al, al
je 0x10048872
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push esi
push 0
call fcn.100466e0
add esp, 8
mov byte [edi + 0x52], 0
add dword [edi + 0x3c], esi
mov eax, dword [ebp - 0x108]
mov byte [edi + 0xe6c], 1
test eax, eax
je 0x10048893
mov ecx, dword [0x100b9cf4]
test ecx, ecx
je 0x10048893
dec dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
add esp, 4
jmp 0x100489f6
mov esi, dword [ebp - 0xbc]
cmp dword [esi + 0xd4], 0
je 0x1004897f
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x100488ca
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x100488cf
mov ecx, dword [edi + 4]
xor esi, esi
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0x138], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.10018cf0
mov ecx, dword [0x100b9cf4]
inc eax
mov dword [ebp - 0xc4], eax
test ecx, ecx
je 0x10048900
inc dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0xf8], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x138]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.10018c80
mov eax, dword [0x100b9cf4]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x1004895a
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x100b9cf4]
add esp, 8
test esi, esi
je 0x10048968
test eax, eax
je 0x10048968
dec dword [eax + 0x36c]
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
call eax
mov esi, dword [ebp - 0xbc]
add esp, 4
mov al, byte [ebp - 0xbe]
test al, al
je 0x100489fc
mov eax, dword [edi + 0x40]
lea esi, [edi + 0x3c]
cmp eax, dword [edi + 0x44]
jne 0x100489a5
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [esi], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0x100489f6
mov edx, esi
mov ecx, edi
call fcn.10045860
mov byte [esi + 0x16], 0
jmp 0x100489f6
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.100458f0
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov esi, dword [ebp - 0xbc]
mov dl, byte [ebp - 0xb5]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x10048a17
cmp byte [ebp - 0xca], 0
je 0x10048a17
mov al, 1
jmp 0x10048a19
xor al, al
or byte [ebp - 0x150], al
mov eax, dword [ebp - 0xdc]
cmp dword [esi + 0x1bd0], eax
jne 0x100491df
xor ecx, ecx
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0x100], ecx
test dl, dl
je 0x10048cb9
cmp byte [ebp - 0xe8], cl
jne 0x10048ca1
mov esi, dword [edi + 0x2c]
mov ecx, esi
mov eax, dword [ebp - 0xe0]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10048a82
test dl, dl
je 0x10048a7e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10048a82
add eax, 2
add ecx, 2
test dl, dl
jne 0x10048a62
xor eax, eax
jmp 0x10048a87
sbb eax, eax
or eax, 1
test eax, eax
je 0x10048ca1
mov eax, dword [edi + 0x24]
xor ecx, ecx
dec eax
mov dword [ebp - 0x130], ecx
xor edx, edx
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], edx
mov dword [ebp - 4], edx
test eax, eax
jle 0x10048bf5
mov edi, dword [ebp - 0xe4]
add esi, eax
xor eax, eax
mov dword [ebp - 0xd0], eax
test esi, esi
je 0x10048adc
cmp edi, esi
jae 0x10048b06
cmp byte [edi], 0
je 0x10048b06
push esi
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.10018a60
add edi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xd0]
je 0x10048b06
inc eax
jmp 0x10048ace
mov edi, dword [ebp - 0xf4]
lea ecx, [eax + 1]
mov dword [ebp - 0xc8], ecx
test ecx, ecx
jle 0x10048b67
mov edx, 8
mov eax, ecx
cmp ecx, edx
cmovl eax, edx
mov dword [ebp - 0xc4], eax
test eax, eax
jle 0x10048b67
mov ecx, dword [0x100b9cf4]
test ecx, ecx
je 0x10048b3f
inc dword [ecx + 0x36c]
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, eax
add esp, 4
mov dword [ebp - 0x128], edx
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [ebp - 0xc8]
jmp 0x10048b69
xor edx, edx
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0xc4], eax
mov eax, edx
lea edx, [ecx - 1]
mov dword [ebp - 0xd0], eax
lea edx, [eax + edx*2]
mov dword [ebp - 0xf8], edx
cmp eax, edx
jae 0x10048bf0
mov edi, dword [ebp - 0xc4]
nop dword [eax]
test esi, esi
je 0x10048ba8
cmp edi, esi
jae 0x10048be4
cmp byte [edi], 0
je 0x10048be4
push esi
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.10018a60
mov ecx, dword [ebp - 0xc4]
add edi, eax
mov eax, dword [ebp - 0xd0]
add esp, 4
test ecx, ecx
je 0x10048be4
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xd0], eax
cmp eax, dword [ebp - 0xf8]
jb 0x10048ba0
mov edi, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xc8]
xor edx, edx
mov word [eax], dx
mov esi, dword [edi + 4]
lea eax, [ecx - 1]
mov ecx, dword [ebp - 0x100]
xor edx, edx
test ecx, ecx
lea ecx, [edi + 0x5c]
cmovle eax, edx
push eax
push esi
mov dword [ebp - 0xc4], eax
call fcn.100466e0
mov edx, eax
add esp, 8
test edx, edx
je 0x10048c40
xor ecx, ecx
test esi, esi
jle 0x10048c40
nop word [eax + eax]
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [edx + ecx*2], ax
inc ecx
cmp ecx, esi
jl 0x10048c30
push dword [edi + 4]
xor edx, edx
mov ecx, edi
call fcn.10045370
mov esi, dword [ebp - 0xc4]
add esp, 4
test esi, esi
jle 0x10048c77
push esi
push dword [ebp - 0x128]
xor edx, edx
mov ecx, edi
call fcn.100453d0
add esp, 8
test al, al
je 0x10048c77
mov dword [edi + 0x3c], esi
mov byte [edi + 0x52], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x128]
test ecx, ecx
je 0x10048ca1
mov eax, dword [0x100b9cf4]
test eax, eax
je 0x10048c97
dec dword [eax + 0x36c]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp byte [ebp - 0xbd], 0
mov eax, dword [ebx + 0x14]
je 0x100490cd
test al, 0x20
je 0x100490cd
cmp byte [ebp - 0xe8], 0
jne 0x10048d1b
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea esi, [eax*4 + 1]
mov eax, dword [ecx + 4]
cmp esi, eax
jle 0x10048d07
test eax, eax
je 0x10048ced
cdq
sub eax, edx
lea edx, [edi + 0x18]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10048cf5
mov ecx, 8
lea edx, [edi + 0x18]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.1002bc70
lea ecx, [edi + 0x18]
mov dword [ecx], esi
mov edx, esi
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.10018c80
add esp, 8
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x1004907f
xor esi, esi
test dl, 0x40
je 0x10048d52
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x10048d52
call fcn.1001ed90
mov edx, dword [ebx + 0x14]
test al, al
je 0x10048d52
mov esi, 0x40
xor eax, eax
jmp 0x10048dc5
test dl, dl
jns 0x10048d9a
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x10048d78
call fcn.1001ed90
mov edx, dword [ebx + 0x14]
test al, al
je 0x10048d78
mov esi, 0x80
lea eax, [esi - 0x7d]
jmp 0x10048dc5
mov eax, dword [0x100b9cf4]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x10048d9a
call fcn.1001ed90
mov edx, dword [ebx + 0x14]
test al, al
je 0x10048d9a
mov esi, 0x80
lea eax, [esi - 0x7c]
jmp 0x10048dc5
test edx, 0x80000
je 0x10048db2
cmp byte [edi + 0xe6e], 0
je 0x10048db2
mov esi, 0x80000
jmp 0x10048dc0
test edx, 0x100
mov eax, 0x100
cmovne esi, eax
mov eax, 0x16
test esi, esi
je 0x1004907f
mov dword [ebp - 0x74], eax
xor ecx, ecx
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x70], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x84], esi
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x68], eax
mov eax, dword [edi + 0x3c]
mov word [ebp - 0x63], cx
mov byte [ebp - 0x61], cl
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], ecx
lea edx, [esi + eax*2]
mov byte [ebp - 0x64], cl
mov ecx, esi
mov dword [ebp - 0x78], 0
call fcn.10018cf0
mov ecx, dword [ebp - 0xf4]
mov edi, eax
mov dword [ebp - 0x60], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10018cf0
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10018cf0
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x84]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0x64]
add esp, 4
mov edx, dword [ebp - 0x60]
mov byte [ebp - 0xbe], al
cmp edx, edi
jne 0x10048e70
test al, al
je 0x10048ecb
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xd0], eax
test edi, edi
je 0x10048e86
cmp esi, edi
jae 0x10048eb0
cmp byte [esi], 0
je 0x10048eb0
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.10018a60
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xd0]
je 0x10048eb0
inc eax
jmp 0x10048e78
mov edi, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x60]
mov dword [edi + 0x3c], eax
mov al, byte [ebp - 0xbe]
mov byte [edi + 0xe6c], 1
jmp 0x10048ed1
mov edi, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0xf8]
jne 0x10048ee0
test al, al
je 0x10048f35
cmp ecx, edx
jne 0x10048ee9
mov eax, dword [edi + 0x3c]
jmp 0x10048f32
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xd0], eax
test edi, edi
je 0x10048eff
cmp esi, edi
jae 0x10048f29
cmp byte [esi], 0
je 0x10048f29
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.10018a60
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xd0]
je 0x10048f29
inc eax
jmp 0x10048ef1
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0xf4]
mov dword [edi + 0x40], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0xc8]
jne 0x10048f4d
cmp byte [ebp - 0xbe], 0
je 0x1004907f
cmp eax, ecx
jne 0x10048f56
mov eax, dword [edi + 0x40]
jmp 0x10048f9c
mov esi, dword [ebp - 0x70]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xd0], eax
test edi, edi
je 0x10048f6c
cmp esi, edi
jae 0x10048f96
cmp byte [esi], 0
je 0x10048f96
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.10018a60
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xd0]
je 0x10048f96
inc eax
jmp 0x10048f5e
mov edi, dword [ebp - 0xf4]
cmp byte [ebp - 0xbe], 0
mov dword [edi + 0x44], eax
je 0x1004907f
mov esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x118]
cmp esi, ecx
jle 0x10048ffb
cmp byte [ebp - 0x114], 0
je 0x10048ffb
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x10048ff8
test eax, eax
je 0x10048fe1
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10048fe9
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.1002bce0
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0x70]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0xc4], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0xc8], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0xf8], eax
cmp ecx, eax
jae 0x10049063
mov edi, dword [ebp - 0xc4]
cmp byte [edi], 0
je 0x10049057
push 0
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.10018a60
add edi, eax
add esp, 4
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x10049057
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0xf8]
jb 0x10049026
mov edi, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xc8]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x6c]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
cmp byte [ebp - 0xe8], 0
jne 0x100490ca
mov esi, dword [edi + 0x20]
mov eax, esi
mov ecx, dword [ebp - 0xe0]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100490b3
test dl, dl
je 0x100490af
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100490b3
add eax, 2
add ecx, 2
test dl, dl
jne 0x10049093
xor eax, eax
jmp 0x100490b8
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x100490cd
mov ecx, dword [edi + 8]
mov dword [ebp - 0xe4], esi
jmp 0x100490d3
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0xe4]
test edx, edx
je 0x100491b5
cmp byte [ebp - 0x114], 0
je 0x1004917d
mov dword [ebp - 0xb0], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xa0], eax
lea eax, [ecx + 1]
cmp dword [ebx + 0xc], eax
movlpd qword [ebp - 0xa8], xmm0
cmovge eax, dword [ebx + 0xc]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
movlpd qword [ebp - 0x94], xmm0
movlpd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0xb4], 0x40000
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xac], 0
call eax
mov esi, dword [ebp - 0x98]
add esp, 4
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0xe0], eax
lea ecx, [esi - 1]
cmp dword [ebp - 0x9c], ecx
cmovl ecx, dword [ebp - 0x9c]
jmp 0x10049180
mov esi, dword [ebx + 0xc]
lea eax, [ecx + 1]
cmp eax, esi
cmovl esi, eax
cmp esi, 1
jb 0x100491ae
jbe 0x100491a3
lea eax, [esi - 1]
push eax
push edx
push dword [ebp - 0xe0]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
add esp, 0xc
mov eax, dword [ebp - 0xe0]
mov byte [esi + eax - 1], 0
mov byte [ebp - 0xea], 1
mov esi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xdc]
mov dword [edi + 0xe70], 0
mov dword [edi + 0xe74], 0
mov dword [edi + 0xe78], 0
cmp byte [ebp - 0xd1], 0
je 0x100491f5
cmp dword [esi + 0x1bd0], eax
jne 0x100491f5
call fcn.1001acb0
mov edx, dword [ebp - 0xd8]
test dl, dl
jne 0x100492be
mov edx, dword [ebp - 0xdc]
lea ecx, [ebp - 0x54]
push 1
call fcn.10019ef0
movss xmm1, dword [0x100ae998]
add esp, 4
mov ecx, 7
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call fcn.10019190
movss xmm2, dword [esi + 0x155c]
mov dl, 1
mov ecx, eax
call fcn.10019ce0
movss xmm5, dword [ebp - 0x54]
add esp, 0x10
movss xmm3, dword [ebp - 0x50]
movaps xmm0, xmm5
addss xmm0, dword [esi + 0x1554]
movss xmm4, dword [ebp - 0x13c]
movaps xmm2, xmm5
mov edx, dword [ebp - 0xd8]
addss xmm2, xmm4
movaps xmm1, xmm3
movss dword [ebp - 0x44], xmm5
addss xmm1, dword [ebp - 0x140]
movss dword [ebp - 0x12c], xmm0
movaps xmm0, xmm3
addss xmm0, dword [esi + 0x1558]
movss dword [ebp - 0x40], xmm3
movss dword [ebp - 0xc4], xmm2
movss dword [ebp - 0x3c], xmm2
movss dword [ebp - 0x114], xmm1
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x128], xmm0
jmp 0x10049327
movss xmm0, dword [ebp - 0x54]
movss xmm1, dword [ebp - 0x50]
movaps xmm2, xmm0
movss xmm4, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x104]
addss xmm2, xmm4
movss dword [ebp - 0x40], xmm1
addss xmm1, dword [ebp - 0x140]
movss dword [ebp - 0x44], xmm0
mov eax, dword [ecx + 0xd0]
mov ecx, dword [ecx + 0xd4]
movaps xmm0, xmm2
movss dword [ebp - 0xc4], xmm0
movss dword [ebp - 0x3c], xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x114], xmm0
movss dword [ebp - 0x38], xmm0
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], ecx
cmp byte [ebp - 0xe9], 0
lea eax, [ebp - 0x12c]
movss xmm0, dword [eax]
xorps xmm6, xmm6
movss dword [ebp - 0xf0], xmm0
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x10c], eax
movss dword [ebp - 0x118], xmm1
movss dword [ebp - 0xd0], xmm2
movss dword [ebp - 0x138], xmm0
movss dword [ebp - 0xc8], xmm6
je 0x10049388
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xe0], ecx
jmp 0x1004938e
mov ecx, dword [ebp - 0xe0]
cmp byte [ebp - 0xca], 0
jne 0x10049755
cmp byte [ebp - 0x150], 0
jne 0x10049755
test dl, dl
je 0x10049409
mov eax, dword [ebp - 0xe0]
xor ecx, ecx
mov dl, byte [eax]
lea edi, [eax + 1]
test dl, dl
je 0x100493d2
nop dword [eax]
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x100493c0
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0xdc], edi
cmp al, 0xa
je 0x100493e5
cmp al, 0xd
je 0x100493e5
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x1934]
movss dword [ebp - 0xc8], xmm0
movaps xmm0, xmm4
movss dword [ebp - 0x138], xmm0
jmp 0x1004944d
mov eax, dword [ebp - 0xdc]
cmp dword [esi + 0x1bd0], eax
jne 0x1004941e
mov edi, dword [edi + 8]
add edi, ecx
jmp 0x10049438
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049421
mov edi, dword [ebp - 0xe0]
sub ecx, edx
add edi, ecx
mov ecx, dword [ebp - 0xe0]
mov eax, edi
mov dword [ebp - 0xdc], edi
sub eax, ecx
cmp eax, 0x200000
jge 0x100495be
movss xmm1, dword [0x100ae998]
xor ecx, ecx
call fcn.10019190
cmp byte [ebp - 0xd8], 0
lea edx, [ebp - 0x44]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xc4], 0
cmovne edx, dword [ebp - 0xc4]
test dword [ebp - 0xd0], 0xff000000
mov esi, dword [eax + 0x240]
mov eax, dword [ebp - 0xbc]
mov edi, dword [eax + 0x1930]
movss xmm2, dword [eax + 0x1934]
mov eax, dword [ebp - 0xdc]
mov ecx, eax
je 0x100495b2
test eax, eax
jne 0x100494df
mov ecx, dword [ebp - 0xe0]
lea eax, [ecx + 1]
mov dword [ebp - 0xc4], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100494c8
sub ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xe0]
add ecx, eax
jmp 0x100494e5
mov eax, dword [ebp - 0xe0]
cmp eax, ecx
je 0x100495b2
test edi, edi
jne 0x100494f7
mov eax, dword [esi + 0x2c]
mov edi, dword [eax + 8]
ucomiss xmm2, dword [0x100ae8bc]
lahf
test ah, 0x44
jp 0x1004950c
mov eax, dword [esi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [esi + 0x60]
movups xmmword [ebp - 0x14c], xmm0
test edx, edx
je 0x1004957a
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x14c]
comiss xmm0, xmm1
jae 0x10049534
movss dword [ebp - 0x14c], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x148]
comiss xmm0, xmm1
jae 0x1004954e
movss dword [ebp - 0x148], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x144]
ja 0x10049564
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x140]
ja 0x1004957a
movss dword [ebp - 0x140], xmm0
mov eax, dword [ebp - 0x10c]
test edx, edx
push dword [eax + 4]
push dword [eax]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x14c]
push ecx
push dword [ebp - 0xe0]
mov ecx, edi
push eax
push dword [ebp - 0xd0]
push esi
call fcn.1003ae20
mov esi, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xdc]
cmp byte [ebp - 0x15c], 0
je 0x100495cc
call fcn.100245f0
cmp byte [ebp - 0xd8], 0
je 0x10049680
mov ecx, dword [0x100b9cf4]
movss xmm1, dword [ebp - 0xc8]
addss xmm1, dword [esi + 0x1558]
movss xmm4, dword [ebp - 0x138]
mov eax, dword [ecx + 0x1b98]
movss dword [ebp - 0x144], xmm4
movss dword [ebp - 0x140], xmm1
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1b98]
cmp byte [eax + 0x8f], 0
jne 0x10049676
movss xmm0, dword [eax + 0xd4]
lea ecx, [ebp - 0x144]
movss xmm3, dword [eax + 0xd0]
movaps xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x24], xmm3
movss xmm1, dword [0x100aeba0]
addss xmm4, xmm3
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x1c], xmm4
call fcn.10024ac0
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x24]
call fcn.10024bf0
add esp, 8
call fcn.1001f1e0
call fcn.100251e0
cmp byte [esi + 0x2f64], 0
je 0x100496bd
cmp byte [ebp - 0x15c], 0
jne 0x100496bd
mov eax, dword [0x100b9cf4]
lea ecx, [ebp - 0x34]
mov edx, dword [ebp - 0xe0]
push edi
mov dword [eax + 0x2f7c], 0x100aaab4
mov dword [eax + 0x2f80], 0x100a2c6c
call fcn.1002a100
add esp, 4
movss xmm0, dword [ebp - 0x168]
comiss xmm0, dword [0x100ae8bc]
jbe 0x10049716
movss xmm0, dword [ebp - 0x4c]
xor edx, edx
addss xmm0, dword [esi + 0x156c]
mov ecx, dword [ebp - 0x154]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [esi + 0x1558]
movss dword [ebp - 0x140], xmm0
push dword [ebp - 0x140]
push dword [ebp - 0x144]
push 1
call fcn.10019340
add esp, 0xc
mov dl, byte [ebp - 0xea]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x10049740
test ecx, 0x8000000
jne 0x10049740
mov eax, dword [0x100b9cf4]
or dword [eax + 0x1c40], 4
mov word [eax + 0x1be0], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0xbd]
cmovne eax, ecx
jmp 0x100470fc
mov eax, dword [edi + 8]
xor edx, edx
mov dword [ebp - 0x160], eax
xorps xmm7, xmm7
add eax, ecx
movss dword [ebp - 0xf8], xmm0
mov ecx, dword [edi + 0x14]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x134], 0xfffffc18
mov dword [ebp - 0x100], 0xfffffc18
cmp byte [ebp - 0xca], dl
je 0x100497c4
mov eax, dword [edi + 0x3c]
or esi, 0xffffffff
mov dword [ebp - 0x134], esi
lea eax, [ecx + eax*2]
mov dword [ebp - 0x124], eax
lea edx, [esi + 2]
cmp byte [ebp - 0x150], 0
je 0x100497f7
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0xe4]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x100], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x108], eax
mov esi, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xd8]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
test si, si
mov dword [ebp - 0x10c], eax
mov esi, dword [ebp - 0x134]
je 0x10049893
mov edi, dword [ebp - 0xe4]
movzx esi, word [edi]
mov edi, dword [ebp - 0x134]
nop dword [eax]
cmp si, 0xa
jne 0x1004986d
inc eax
mov dword [ebp - 0x10c], eax
cmp edi, 0xffffffff
jne 0x10049851
cmp ecx, dword [ebp - 0x124]
jb 0x10049851
dec edx
mov edi, eax
test edx, edx
jle 0x10049881
cmp dword [ebp - 0x100], 0xffffffff
jne 0x1004986d
cmp ecx, dword [ebp - 0x108]
jb 0x1004986d
dec edx
mov dword [ebp - 0x100], eax
test edx, edx
jle 0x10049881
movzx eax, word [ecx + 2]
add ecx, 2
mov esi, eax
test ax, ax
mov eax, dword [ebp - 0x10c]
jne 0x10049830
mov dword [ebp - 0x134], edi
mov edi, dword [ebp - 0xf4]
mov esi, dword [ebp - 0x134]
mov edx, dword [ebp - 0xe4]
inc eax
cmp esi, 0xffffffff
mov dword [ebp - 0x10c], eax
mov ecx, eax
cmovne ecx, esi
mov esi, dword [ebp - 0x124]
mov dword [ebp - 0x134], ecx
mov ecx, dword [ebp - 0x100]
cmp ecx, 0xffffffff
cmove ecx, eax
mov dword [ebp - 0x100], ecx
mov ecx, esi
cmp esi, edx
jbe 0x100498de
nop dword [eax]
cmp word [ecx - 2], 0xa
je 0x100498de
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x100498d0
mov eax, dword [0x100b9cf4]
movaps xmm1, xmm0
movaps xmm4, xmm0
mov edx, dword [eax + 0x1930]
movss xmm2, dword [eax + 0x1934]
divss xmm2, dword [edx + 0x10]
cmp ecx, esi
jae 0x1004994b
mov edi, dword [ebp - 0x124]
movzx eax, word [ecx]
add ecx, 2
mov esi, eax
cmp eax, 0xa
jne 0x1004991c
maxss xmm1, xmm4
movaps xmm4, xmm0
jmp 0x10049941
cmp esi, 0xd
je 0x10049941
mov esi, eax
cmp esi, dword [edx]
jge 0x10049931
mov eax, dword [edx + 8]
movss xmm0, dword [eax + esi*4]
jmp 0x10049936
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm4, xmm0
xorps xmm0, xmm0
cmp ecx, edi
jb 0x10049906
mov edi, dword [ebp - 0xf4]
cmp dword [ebp - 0x100], 0
maxss xmm4, xmm1
movd xmm5, dword [ebp - 0x134]
mov ecx, dword [ebp - 0xbc]
cvtdq2ps xmm5, xmm5
movss xmm3, dword [ecx + 0x1934]
mulss xmm5, xmm3
movss dword [ebp - 0x164], xmm4
movss dword [ebp - 0x128], xmm5
jl 0x10049a28
mov eax, dword [ebp - 0x108]
mov ecx, eax
mov esi, dword [ebp - 0xe4]
cmp eax, esi
jbe 0x100499b4
nop dword [eax + eax]
cmp word [ecx - 2], 0xa
je 0x100499ae
add ecx, 0xfffffffe
cmp ecx, esi
ja 0x100499a0
mov eax, dword [ebp - 0x108]
movaps xmm1, xmm0
movaps xmm7, xmm0
cmp ecx, eax
jae 0x10049a07
mov edi, dword [ebp - 0x108]
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0xa
jne 0x100499d8
maxss xmm1, xmm7
movaps xmm7, xmm0
jmp 0x100499fd
cmp eax, 0xd
je 0x100499fd
mov esi, eax
cmp esi, dword [edx]
jge 0x100499ed
mov eax, dword [edx + 8]
movss xmm0, dword [eax + esi*4]
jmp 0x100499f2
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm7, xmm0
xorps xmm0, xmm0
cmp ecx, edi
jb 0x100499c4
mov edi, dword [ebp - 0xf4]
movd xmm0, dword [ebp - 0x100]
maxss xmm7, xmm1
mov ecx, dword [ebp - 0xbc]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm3
movss dword [ebp - 0xf8], xmm0
mov edx, dword [ebp - 0xd8]
test dl, dl
je 0x10049a5e
movd xmm6, dword [ebp - 0x10c]
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm3
movss xmm3, dword [ebp - 0x13c]
movaps xmm0, xmm3
movss dword [ebp - 0xc8], xmm6
movss dword [ebp - 0x138], xmm0
jmp 0x10049a66
movss xmm3, dword [ebp - 0x13c]
cmp byte [ebp - 0xca], 0
je 0x10049b84
cmp byte [edi + 0xe6c], 0
je 0x10049b84
test dword [ebx + 0x14], 0x1000
jne 0x10049ad5
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm3
comiss xmm2, xmm4
mulss xmm0, dword [0x100ae918]
movaps xmm1, xmm4
subss xmm3, dword [ecx + 0x1554]
jbe 0x10049ac6
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x10049adc
subss xmm1, xmm3
comiss xmm1, xmm2
jb 0x10049adc
addss xmm0, xmm1
jmp 0x10049ab4
mov dword [edi + 0x38], 0
xorps xmm2, xmm2
test dl, dl
je 0x10049b70
movss xmm3, dword [ebp - 0x158]
movaps xmm0, xmm5
subss xmm0, dword [ecx + 0x1934]
movss xmm4, dword [ebp - 0x140]
comiss xmm3, xmm0
jbe 0x10049b10
xorps xmm3, xmm3
maxss xmm3, xmm0
jmp 0x10049b2c
movaps xmm0, xmm5
subss xmm0, xmm4
comiss xmm0, xmm3
jb 0x10049b2c
movss xmm3, dword [ecx + 0x1558]
addss xmm3, xmm3
addss xmm3, xmm0
comiss xmm2, xmm3
movss xmm1, dword [ecx + 0x1558]
jbe 0x10049b3e
xorps xmm1, xmm1
jmp 0x10049b52
addss xmm1, xmm1
addss xmm1, xmm6
subss xmm1, xmm4
maxss xmm1, xmm2
minss xmm1, xmm3
mov eax, dword [ebp - 0x104]
movss xmm0, dword [eax + 0x5c]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
movss dword [eax + 0x5c], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0xf0], xmm0
cmp byte [ebp - 0x150], 0
movss xmm5, dword [edi + 0x38]
movss dword [ebp - 0x10c], xmm5
je 0x10049e92
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0xe4]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xca], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0xe4]
lea eax, [eax + edx*2]
mov dword [ebp - 0x124], eax
je 0x10049bd9
movss xmm1, dword [0x100ae998]
jmp 0x10049be1
movss xmm1, dword [0x100ae948]
mov ecx, 0x2f
call fcn.10019190
cmp byte [ebp - 0xd8], 0
mov dword [ebp - 0x134], eax
je 0x10049c0a
xorps xmm0, xmm0
xorps xmm6, xmm6
movss dword [ebp - 0x13c], xmm0
jmp 0x10049c25
movss xmm0, dword [0x100ae9f0]
movss xmm6, dword [0x100aeba0]
movss dword [ebp - 0x13c], xmm0
xorps xmm0, xmm0
movss xmm3, dword [ebp - 0x30]
addss xmm3, dword [ebp - 0xf8]
movss xmm4, dword [ebp - 0xf0]
movss xmm5, dword [ebp - 0x10c]
addss xmm7, xmm4
mov ecx, dword [ebp - 0x124]
movss dword [ebp - 0x108], xmm6
subss xmm3, xmm0
subss xmm7, xmm5
movss dword [ebp - 0xf8], xmm3
cmp esi, ecx
jae 0x10049e9a
movss xmm4, dword [ebp - 0x114]
mov edi, dword [ebp - 0xbc]
nop word [eax + eax]
movss xmm5, dword [edi + 0x1934]
movaps xmm0, xmm4
addss xmm0, xmm5
comiss xmm3, xmm0
ja 0x10049e84
movss xmm0, dword [ebp - 0x50]
comiss xmm0, xmm3
jbe 0x10049cc9
cmp esi, ecx
jae 0x10049e4e
nop word [eax + eax]
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x10049e4e
cmp esi, ecx
jb 0x10049cb0
jmp 0x10049e4e
mov eax, dword [0x100b9cf4]
xorps xmm0, xmm0
xorps xmm4, xmm4
xorps xmm1, xmm1
mov edx, dword [eax + 0x1930]
movss xmm2, dword [eax + 0x1934]
divss xmm2, dword [edx + 0x10]
cmp esi, ecx
jae 0x10049d36
nop
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x10049d29
cmp eax, 0xd
je 0x10049d23
mov ecx, eax
cmp ecx, dword [edx]
jge 0x10049d10
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x10049d15
movss xmm0, dword [edx + 0xc]
mov ecx, dword [ebp - 0x124]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, ecx
jb 0x10049cf0
jmp 0x10049d33
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x10049d6f
mov eax, dword [edi + 0x1930]
cmp dword [eax], 0x20
jle 0x10049d57
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x10049d5c
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x100ae940]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [ebp - 0x13c]
addss xmm1, xmm7
addss xmm7, dword [0x100ae8bc]
movss xmm4, dword [ebp - 0x114]
addss xmm0, xmm3
movaps xmm2, xmm6
subss xmm2, xmm5
movss xmm5, dword [ebp - 0xc4]
minss xmm1, xmm5
maxss xmm7, dword [ebp - 0x54]
minss xmm0, xmm4
addss xmm2, xmm3
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x24], xmm7
comiss xmm0, dword [ebp - 0x50]
maxss xmm2, dword [ebp - 0x50]
movss dword [ebp - 0x18], xmm0
movss dword [ebp - 0x20], xmm2
jbe 0x10049e4e
comiss xmm4, xmm2
jbe 0x10049e4e
comiss xmm1, dword [ebp - 0x54]
jbe 0x10049e4e
comiss xmm5, xmm7
jbe 0x10049e4e
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x1c]
push dword [ebp - 0x134]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 0x240]
call fcn.10036710
movss xmm0, dword [ebp - 0xd0]
movss xmm3, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x124]
movss dword [ebp - 0xd0], xmm0
movss xmm0, dword [ebp - 0x118]
movss dword [ebp - 0xf0], xmm3
movss xmm3, dword [ebp - 0xf8]
movss dword [ebp - 0x118], xmm0
movss xmm7, dword [ebp - 0xf0]
movss xmm5, dword [ebp - 0x10c]
movss xmm6, dword [ebp - 0x108]
subss xmm7, xmm5
addss xmm3, dword [edi + 0x1934]
movss dword [ebp - 0xf8], xmm3
cmp esi, ecx
jb 0x10049c80
jmp 0x10049e8c
movss xmm5, dword [ebp - 0x10c]
mov edi, dword [ebp - 0xf4]
movss xmm4, dword [ebp - 0xf0]
cmp byte [ebp - 0xd8], 0
jne 0x10049eb3
cmp dword [ebp - 0x160], 0x200000
jge 0x1004a110
mov eax, dword [0x100b9cf4]
xorps xmm6, xmm6
movups xmm2, xmmword [eax + 0x15e0]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1518]
movups xmmword [ebp - 0x24], xmm2
jbe 0x10049edf
xorps xmm0, xmm0
jmp 0x10049eeb
movss xmm0, dword [0x100ae998]
minss xmm0, xmm2
movss xmm2, dword [0x100aeb04]
movss xmm7, dword [0x100ae940]
movss xmm3, dword [ebp - 0x20]
comiss xmm6, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x10049f16
xorps xmm0, xmm0
jmp 0x10049f22
movss xmm0, dword [0x100ae998]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x1c]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x10049f42
xorps xmm0, xmm0
jmp 0x10049f4e
movss xmm0, dword [0x100ae998]
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x10049f69
xorps xmm0, xmm0
jmp 0x10049f75
movss xmm0, dword [0x100ae998]
minss xmm0, xmm1
mov esi, dword [ebp - 0xbc]
subss xmm4, xmm5
mov edx, dword [ebp - 0xdc]
mulss xmm0, xmm2
mov dword [ebp - 0x114], edx
mov edx, dword [esi + 0x1930]
movss xmm2, dword [esi + 0x1934]
addss xmm0, xmm7
mov dword [ebp - 0xc4], edx
lea edx, [ebp - 0x44]
mov dword [ebp - 0x160], 0
movss dword [ebp - 0x144], xmm4
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
shl eax, 0x18
subss xmm0, xmm6
or eax, ecx
mov ecx, dword [ebp - 0x104]
cmp byte [ebp - 0xd8], 0
mov dword [ebp - 0x124], eax
cmovne edx, dword [ebp - 0x160]
mov ecx, dword [ecx + 0x240]
mov dword [ebp - 0xf8], ecx
movss dword [ebp - 0x140], xmm0
test eax, 0xff000000
je 0x1004a119
cmp dword [ebp - 0xdc], 0
jne 0x1004a043
mov ecx, dword [ebp - 0xe0]
lea eax, [ecx + 1]
mov dword [ebp - 0x160], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004a020
sub ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0xe0]
add eax, ecx
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x114], eax
jmp 0x1004a049
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xe0], eax
je 0x1004a119
cmp dword [esi + 0x1930], 0
jne 0x1004a06a
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xc4], eax
ucomiss xmm2, xmm6
lahf
test ah, 0x44
jp 0x1004a07b
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x24], xmm0
test edx, edx
je 0x1004a0ce
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x1004a09a
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x20]
comiss xmm0, xmm1
jae 0x1004a0ae
movss dword [ebp - 0x20], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x1c]
ja 0x1004a0be
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x18]
ja 0x1004a0ce
movss dword [ebp - 0x18], xmm0
push dword [ebp - 0x140]
test edx, edx
mov edx, dword [ebp - 0x114]
push dword [ebp - 0x144]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x24]
push edx
push dword [ebp - 0xe0]
push eax
push dword [ebp - 0x124]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.1003ae20
jmp 0x1004a116
mov esi, dword [ebp - 0xbc]
xorps xmm6, xmm6
cmp byte [ebp - 0xca], 0
je 0x100495b8
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0xb2], 0
je 0x1004a167
comiss xmm6, xmm0
jae 0x1004a167
movss xmm1, dword [0x100ae9ac]
call fcn.100070d0
movss xmm1, dword [0x100ae96c]
comiss xmm1, xmm0
jae 0x1004a167
xor cl, cl
jmp 0x1004a169
mov cl, 1
movss xmm0, dword [ebp - 0x164]
movss xmm6, dword [0x100ae998]
addss xmm0, dword [ebp - 0x34]
subss xmm0, dword [ebp - 0x10c]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x128]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x100ae8bc]
movss dword [ebp - 0x164], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x24], xmm1
addss xmm4, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0x1c], xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x128], xmm0
movaps xmm2, xmm0
movaps xmm3, xmm0
subss xmm2, dword [esi + 0x1934]
subss xmm3, dword [0x100ae9d0]
addss xmm2, dword [0x100ae940]
movss dword [ebp - 0x18], xmm3
movss dword [ebp - 0x20], xmm2
test cl, cl
je 0x1004a289
comiss xmm3, dword [ebp - 0x50]
jbe 0x1004a289
movss xmm5, dword [ebp - 0x118]
comiss xmm5, xmm2
jbe 0x1004a289
comiss xmm4, dword [ebp - 0x54]
jbe 0x1004a289
movss xmm2, dword [ebp - 0xd0]
comiss xmm2, xmm1
jbe 0x1004a289
sub esp, 8
movss dword [ebp - 0x144], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x140], xmm3
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.10019190
add esp, 4
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 0x240]
call fcn.10036510
movss xmm1, dword [ebp - 0x164]
movss xmm0, dword [ebp - 0x128]
movss xmm6, dword [0x100ae998]
cmp byte [ebp - 0xe8], 0
jne 0x100495b8
subss xmm0, dword [esi + 0x1934]
subss xmm1, xmm6
movss dword [esi + 0x2f10], xmm0
movss dword [esi + 0x2f0c], xmm1
jmp 0x100495b8