Function at 0x100469b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10083cd0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x150
mov eax, dword [0x100ba040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x154], ecx
mov edi, dword [0x100bdd64]
mov esi, edi
mov eax, dword [ebx + 8]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], esi
mov eax, dword [esi + 0x1b98]
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1b98]
mov dword [ebp - 0xf8], eax
cmp byte [eax + 0x8f], 0
jne 0x10046ee8
mov edx, dword [ebx + 0x14]
mov ecx, edx
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0xd4], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0xe8], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0x15c], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x124], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0xd4], 0
mov dword [ebp - 0x120], ecx
je 0x10046aa8
call fcn.10024c40
mov edi, dword [0x100bdd64]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 0xc4]
xor edx, edx
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x154]
call fcn.100182e0
add esp, 4
mov dword [ebp - 0xdc], eax
cmp dword [edi + 0x1bd0], eax
jne 0x10046adc
mov dword [edi + 0x1bd4], eax
cmp dword [edi + 0x1c0c], eax
jne 0x10046aeb
mov byte [edi + 0x1c10], 1
cmp dword [edi + 0x1bb8], eax
jne 0x10046b0f
push ecx
push dword [ebp - 0x154]
mov edx, 0xb
mov ecx, eax
call fcn.1002abe0
mov edi, dword [0x100bdd64]
add esp, 8
mov eax, dword [ebp - 0x154]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x10046b36
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x10046b36
cmp dl, 0x23
jne 0x10046b30
cmp byte [ecx + 1], dl
je 0x10046b36
inc ecx
cmp ecx, 0xffffffff
jb 0x10046b20
movss xmm1, dword [0x100b1c8c]
movss xmm0, dword [edi + 0x1934]
movss dword [ebp - 0x158], xmm1
cmp eax, ecx
jne 0x10046b5f
xorps xmm3, xmm3
movss dword [ebp - 0x160], xmm3
jmp 0x10046bb1
push 0
push ecx
push eax
push ecx
mov ecx, dword [edi + 0x1930]
lea eax, [ebp - 0x140]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.1003aa50
movss xmm0, dword [ebp - 0x140]
xorps xmm3, xmm3
addss xmm0, dword [0x100b1a70]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x160], xmm0
movss xmm0, dword [ebp - 0x13c]
cmp byte [ebp - 0xd4], 0
je 0x10046bca
movss xmm0, dword [esi + 0x1934]
mulss xmm0, dword [0x100b1b64]
test byte [edi + 0x1c24], 1
movss xmm1, dword [esi + 0x1558]
mov eax, dword [edi + 0x1b98]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x10046bf6
movss xmm0, dword [edi + 0x1c28]
jmp 0x10046bfe
movss xmm0, dword [eax + 0x17c]
comiss xmm3, xmm0
jbe 0x10046c3d
cmp dword [eax + 0x168], 0
movss xmm1, dword [eax + 0x204]
jne 0x10046c1d
cmp dword [edi + 0x1f1c], 0
je 0x10046c25
movss xmm1, dword [eax + 0x1d4]
subss xmm1, dword [eax + 0xd0]
addss xmm1, xmm0
movss xmm0, dword [0x100b1a78]
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x140]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.10024b60
movss xmm1, dword [ebp - 0x160]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x10046c7b
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x156c]
jmp 0x10046c7e
xorps xmm2, xmm2
mov edi, dword [ebp - 0xf8]
lea ecx, [ebp - 0x134]
movss xmm5, dword [ebp - 0x140]
addss xmm2, xmm5
movss dword [ebp - 0x150], xmm5
mov dword [ebp - 0x110], edi
movss xmm4, dword [edi + 0xd4]
movss xmm3, dword [edi + 0xd0]
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x13c]
addss xmm2, xmm3
movss dword [ebp - 0xc4], xmm3
movaps xmm1, xmm3
movss dword [ebp - 0xec], xmm4
addss xmm1, xmm5
movss dword [ebp - 0x54], xmm3
movss dword [ebp - 0x50], xmm4
movss dword [ebp - 0x48], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x1c], xmm2
subss xmm2, xmm3
movss dword [ebp - 0x4c], xmm1
movss xmm1, dword [esi + 0x1558]
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x18], xmm0
subss xmm0, xmm4
movss dword [ebp - 0x20], xmm4
mov dword [ebp - 0xf4], 1
movss dword [ebp - 0x134], xmm2
movss dword [ebp - 0x130], xmm0
call fcn.10024650
cmp byte [ebp - 0xd4], 0
je 0x10046f77
mov edx, dword [ebp - 0xdc]
lea eax, [ebp - 0x54]
push 0x100
push eax
lea ecx, [ebp - 0x24]
call fcn.10024780
add esp, 8
test al, al
je 0x10046ee3
mov eax, dword [esi + 0x1c40]
movss xmm0, dword [ebp - 0xc4]
mov esi, dword [0x100bdd64]
movss dword [edi + 0xd0], xmm0
movss xmm0, dword [ebp - 0xec]
movss dword [edi + 0xd4], xmm0
movups xmm0, xmmword [esi + 0x1610]
mov dword [ebp - 0x114], eax
lea ecx, [esi + 0x1cd4]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 3
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.1002b4e0
mov edi, dword [ebp - 0xe4]
lea eax, [ebp - 0x138]
push eax
mov dword [ebp - 0x138], 7
movups xmm0, xmmword [edi + 0x1650]
movups xmmword [esi + 0x1610], xmm0
mov esi, dword [0x100bdd64]
movss xmm0, dword [edi + 0x155c]
movss dword [ebp - 0xc4], xmm0
movss xmm0, dword [esi + 0x1544]
lea ecx, [esi + 0x1ce0]
movss dword [ebp - 0x134], xmm0
call fcn.1002b420
movss xmm0, dword [ebp - 0xc4]
lea eax, [ebp - 0x138]
movss dword [esi + 0x1544], xmm0
mov esi, dword [0x100bdd64]
movss xmm0, dword [edi + 0x1560]
movss dword [ebp - 0xc4], xmm0
push eax
movss xmm0, dword [esi + 0x1548]
lea ecx, [esi + 0x1ce0]
mov dword [ebp - 0x138], 8
movss dword [ebp - 0x134], xmm0
call fcn.1002b420
movss xmm0, dword [ebp - 0xc4]
lea eax, [ebp - 0x134]
movss xmm1, dword [ebp - 0x4c]
subss xmm1, dword [ebp - 0x54]
mov edx, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x154]
movss dword [esi + 0x1548], xmm0
movss xmm0, dword [ebp - 0x48]
subss xmm0, dword [ebp - 0x50]
push 4
push 1
push eax
movss dword [ebp - 0x134], xmm1
movss dword [ebp - 0x130], xmm0
call fcn.1001eac0
add esp, 0xc
mov byte [ebp - 0xd5], al
mov ecx, 2
call fcn.10018e20
mov eax, 1
mov ecx, eax
call fcn.10018dd0
cmp byte [ebp - 0xd5], 0
jne 0x10046f08
call fcn.1001ed60
call fcn.10024d70
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1007f5d0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x1b98]
mov dword [ebp - 0x110], edx
movsx ecx, word [edx + 0x122]
mov eax, dword [edx + 0x11c]
bts ecx, eax
mov word [edx + 0x122], cx
movss xmm0, dword [esi + 0x1554]
addss xmm0, dword [edx + 0xd0]
movss dword [edx + 0xd0], xmm0
movss xmm0, dword [esi + 0x1558]
addss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [ebp - 0x140]
subss xmm0, dword [edx + 0x80]
movss dword [ebp - 0x150], xmm0
jmp 0x10046fae
test dword [ebx + 0x14], 0x10000000
jne 0x10046fa2
mov edx, dword [ebp - 0xdc]
lea eax, [ebp - 0x54]
push 0x100
push eax
lea ecx, [ebp - 0x24]
call fcn.10024780
add esp, 8
test al, al
je 0x10046ee8
mov eax, dword [esi + 0x1c40]
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0xdc]
lea ecx, [ebp - 0x54]
call fcn.1001a9e0
mov dl, al
mov byte [ebp - 0xed], dl
test dl, dl
je 0x10046fd2
mov dword [esi + 0x1e88], 1
mov edi, dword [0x100bdd64]
xor eax, eax
mov ecx, dword [ebp - 0xdc]
add edi, 0x1fac
cmp dword [edi], ecx
cmovne edi, eax
mov eax, dword [ebp - 0x114]
shr eax, 8
and al, 1
mov dword [ebp - 0x100], edi
mov dword [ebp - 0x114], eax
mov eax, dword [esi + 0x1bd0]
cmp eax, ecx
je 0x1004702e
cmp dword [esi + 0x1d58], ecx
je 0x10047025
cmp dword [esi + 0x1d4c], ecx
jne 0x1004702e
cmp dword [esi + 0x1d78], 2
jne 0x1004702e
mov byte [ebp - 0xb7], 1
jmp 0x10047035
mov byte [ebp - 0xb7], 0
test dl, dl
je 0x10047049
cmp byte [esi + 0x3e0], 0
mov byte [ebp - 0xcd], 1
jne 0x10047050
mov byte [ebp - 0xcd], 0
cmp byte [ebp - 0xd4], 0
je 0x100470c6
test edi, edi
je 0x100470c6
test eax, eax
jne 0x100470c6
mov eax, dword [ebp - 0x110]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.100182e0
mov ecx, dword [0x100bdd64]
add esp, 4
mov dword [ebp - 0xc4], eax
cmp dword [ecx + 0x1bb8], eax
jne 0x100470b5
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.1002abe0
mov eax, dword [ebp - 0xc4]
add esp, 8
cmp dword [esi + 0x1c0c], eax
jne 0x100470c6
mov byte [ebp - 0xb8], 1
jmp 0x100470e6
mov eax, dword [ebp - 0xd4]
mov byte [ebp - 0xb8], 0
test al, al
je 0x10047160
mov byte [ebp - 0xb8], 0
test edi, edi
je 0x10047160
mov eax, dword [ebp - 0x110]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.100182e0
mov ecx, dword [0x100bdd64]
add esp, 4
mov dword [ebp - 0xc4], eax
cmp dword [ecx + 0x1bb8], eax
jne 0x1004713a
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.1002abe0
mov eax, dword [ebp - 0xc4]
add esp, 8
cmp dword [esi + 0x1bd0], eax
jne 0x1004715a
mov cl, 1
mov byte [ebp - 0xce], 0
mov byte [ebp - 0xb6], cl
mov byte [ebp - 0xcc], 0
jmp 0x1004717a
mov eax, dword [ebp - 0xd4]
xor cl, cl
mov byte [ebp - 0xce], 0
mov byte [ebp - 0xcc], 0
mov byte [ebp - 0xb6], cl
test al, al
je 0x10047195
mov eax, dword [ebp - 0x110]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [ebp - 0xd4]
movss dword [ebp - 0x158], xmm0
jmp 0x1004719d
xor cl, cl
mov byte [ebp - 0xb6], cl
test edi, edi
je 0x100471ac
xor al, 1
cmp byte [edi + 0x53], al
je 0x100471ac
mov al, 1
jmp 0x100471ae
xor al, al
cmp byte [ebp - 0xcd], 0
mov byte [ebp - 0xc5], al
jne 0x100471eb
cmp byte [ebp - 0xb8], 0
jne 0x100471eb
cmp byte [ebp - 0xb7], 0
jne 0x100471eb
cmp byte [ebp - 0x114], 0
jne 0x100471eb
mov byte [ebp - 0xb8], 0
test cl, cl
jne 0x100471f2
mov byte [ebp - 0xc7], cl
jmp 0x10047207
mov byte [ebp - 0xb8], 1
mov edx, dword [ebp - 0xdc]
mov byte [ebp - 0xc7], 1
cmp dword [esi + 0x1bd0], edx
jne 0x1004720f
test al, al
je 0x100474cc
mov ecx, dword [ebp - 0xe0]
lea edi, [esi + 0x1fac]
mov dword [ebp - 0x100], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10047230
mov eax, dword [edi + 0x28]
sub ecx, edx
lea edx, [ecx + 1]
mov dword [ebp - 0xbc], edx
cmp edx, eax
jle 0x1004727a
test eax, eax
je 0x1004725f
cdq
sub eax, edx
mov edx, dword [ebp - 0xbc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x28]
jmp 0x10047264
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x24]
push eax
call fcn.1002b870
mov edx, dword [ebp - 0xbc]
push edx
push dword [ebp - 0xe0]
mov dword [edi + 0x24], edx
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebx + 0xc]
add esp, 0xc
mov eax, dword [edi + 0x10]
inc edx
mov dword [ebp - 0xbc], edx
cmp edx, eax
jle 0x100472d1
test eax, eax
je 0x100472b6
cdq
sub eax, edx
mov edx, dword [ebp - 0xbc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x10]
jmp 0x100472bb
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.1002b8e0
mov edx, dword [ebp - 0xbc]
lea eax, [edi + 0x18]
mov dword [edi + 0xc], edx
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x100472fa
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.1002b870
lea eax, [edi + 0x18]
mov esi, dword [ebx + 0xc]
mov dword [eax], 0
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0xc0], ecx
lea ecx, [ecx + esi*2]
mov byte [edi + 0x30], 0
mov esi, dword [ebp - 0xe4]
add ecx, 0xfffffffe
mov dword [ebp - 0xfc], eax
cmp edx, ecx
jae 0x1004739d
mov edi, dword [ebx + 0xc]
mov esi, eax
nop dword [eax]
cmp byte [esi], 0
je 0x1004738b
push 0
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.100185c0
mov edx, dword [ebp - 0xc0]
add esi, eax
mov eax, dword [ebp - 0xc4]
add esp, 4
mov dword [ebp - 0xfc], esi
test eax, eax
je 0x1004738b
mov ecx, dword [ebp - 0x118]
mov word [edx], ax
lea eax, [edi - 1]
add edx, 2
mov dword [ebp - 0xc0], edx
lea eax, [ecx + eax*2]
cmp edx, eax
jb 0x10047340
mov edi, dword [ebp - 0x100]
mov esi, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0xe0]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x118]
sar edx, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xdc]
mov dword [edi + 4], edx
cmp dword [edi], eax
jne 0x100473f9
cmp byte [ebp - 0xc5], cl
jne 0x100473f9
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov byte [ebp - 0xd5], 1
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
cmovl edx, dword [edi + 0x44]
mov cl, byte [ebp - 0xd5]
mov dword [edi + 0x44], edx
jmp 0x1004745c
mov dword [edi], eax
xor cl, cl
mov al, byte [ebp - 0xd4]
xor al, 1
mov dword [edi + 0x38], 0
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], 0
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x3c], 0
mov word [edi + 0x51], 1
mov dword [edi + 0x58], 0
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], 0
cmp byte [ebp - 0xd4], 0
mov edx, dword [ebx + 0x14]
jne 0x100474c0
mov eax, dword [ebp - 0xcc]
test dl, 0x10
movzx eax, al
cmovne eax, dword [ebp - 0xf4]
cmp byte [ebp - 0xb7], 0
mov dword [ebp - 0xcc], eax
je 0x1004749e
test cl, cl
je 0x10047497
test byte [esi + 0x1d5c], 4
jne 0x1004749e
mov byte [ebp - 0xcc], 1
cmp byte [ebp - 0x114], 0
jne 0x100474b9
cmp byte [ebp - 0xcd], 0
je 0x100474c0
cmp byte [esi + 0xfc], 0
je 0x100474c0
mov byte [ebp - 0xcc], 1
test edx, 0x2000
je 0x100474cc
mov byte [edi + 0x48], 1
mov ecx, dword [ebp - 0xdc]
cmp dword [esi + 0x1bd0], ecx
je 0x1004758b
cmp byte [ebp - 0xb8], 0
je 0x10047583
mov edx, dword [ebp - 0xf8]
call fcn.1001a770
call fcn.10026510
mov ecx, edx
call fcn.10023df0
mov eax, dword [esi + 0x1be4]
mov edx, dword [ebx + 0x14]
or eax, 3
cmp byte [ebp - 0xd4], 0
mov dword [esi + 0x1be4], eax
jne 0x10047521
test dl, dl
jns 0x1004752a
or eax, 0xc
mov dword [esi + 0x1be4], eax
mov eax, dword [esi + 0x1bf0]
or dword [esi + 0x1be8], 2
or eax, 0x180
cmp byte [ebp - 0xd4], 0
mov ecx, dword [esi + 0x1bf4]
mov dword [esi + 0x1bf0], eax
mov dword [esi + 0x1bf4], ecx
je 0x10047566
or eax, 0x60
mov dword [esi + 0x1bf4], ecx
mov dword [esi + 0x1bf0], eax
test edx, 0x440
je 0x1004757d
or eax, 1
mov dword [esi + 0x1bf4], ecx
mov dword [esi + 0x1bf0], eax
mov ecx, dword [ebp - 0xdc]
cmp dword [esi + 0x1bd0], ecx
jne 0x100475c8
test edi, edi
jne 0x1004759a
call fcn.1001a840
mov ecx, dword [ebp - 0xdc]
cmp dword [esi + 0x1bd0], ecx
jne 0x100475c8
cmp byte [esi + 0x3e0], 0
je 0x100475d5
cmp byte [ebp - 0xc7], 0
jne 0x100475d5
cmp byte [ebp - 0xb8], 0
jne 0x100475d5
mov byte [ebp - 0xce], 1
mov dl, 1
jmp 0x100475db
test edi, edi
je 0x100475d9
cmp byte [ebp - 0xb6], 0
je 0x100475d9
mov dl, 1
jmp 0x100475db
xor dl, dl
mov byte [ebp - 0xc6], dl
test edi, edi
je 0x10047601
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x100475f6
cmp byte [ebp - 0xcc], 0
je 0x10047601
test dl, dl
je 0x10047601
mov edx, 1
jmp 0x10047603
xor dl, dl
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x108], edx
mov byte [ebp - 0xee], dl
mov byte [ebp - 0xd5], 0
mov byte [ebp - 0xb8], 0
test al, al
je 0x1004776d
test edi, edi
je 0x1004776d
cmp byte [ebp - 0xc6], 0
jne 0x10047644
test dl, dl
je 0x1004777a
mov ecx, dword [ebx + 0xc]
mov eax, dword [edi + 0x10]
inc ecx
mov dword [ebp - 0xbc], ecx
cmp ecx, eax
jle 0x10047684
test eax, eax
je 0x10047665
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x10]
jmp 0x1004766a
mov ecx, 8
mov eax, dword [ebp - 0xbc]
cmp ecx, eax
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.1002b8e0
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xe0]
mov dword [edi + 0xc], ecx
dec ecx
mov edx, dword [edi + 0x14]
mov esi, edx
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xc0], edx
lea ecx, [esi + ecx*2]
cmp esi, ecx
mov dword [ebp - 0xec], ecx
mov esi, dword [ebp - 0xe4]
jae 0x1004770f
mov esi, eax
nop word [eax + eax]
cmp byte [esi], 0
je 0x10047703
push 0
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.100185c0
mov edx, dword [ebp - 0xc0]
add esi, eax
mov eax, dword [ebp - 0xc4]
add esp, 4
mov dword [ebp - 0xfc], esi
test eax, eax
je 0x10047703
mov word [edx], ax
add edx, 2
mov dword [ebp - 0xc0], edx
cmp edx, dword [ebp - 0xec]
jb 0x100476c0
mov esi, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0xe0]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0xbc]
sar edx, 1
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov dword [edi + 4], edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 8], eax
cmovl edx, dword [edi + 0x44]
movzx eax, byte [ebp - 0xee]
cmp ecx, edx
mov dword [edi + 0x44], edx
mov edx, 0
cmovne edx, eax
mov dword [edi + 0x40], ecx
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x108], edx
cmp byte [ebp - 0xc6], 0
jne 0x10047782
test dl, dl
jne 0x10047782
cmp dword [esi + 0x1bd0], ecx
jne 0x10047796
test al, al
jne 0x10047796
test edi, edi
je 0x10047796
mov byte [ebp - 0xee], 1
cmp byte [edi + 0x30], al
jne 0x1004779d
mov byte [ebp - 0xee], 0
cmp byte [ebp - 0x15c], 0
je 0x10047830
mov edx, dword [esi + 0x1930]
cmp dword [edx + 0x14], 0x2a
ja 0x100477bb
mov eax, dword [edx + 0x2c]
jmp 0x100477da
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x100477d1
mov eax, dword [edx + 0x2c]
jmp 0x100477da
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*8]
mov dword [ebp - 0xc0], eax
lea ecx, [esi + 0x2e28]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x1930]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [esi + 0x1930]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0x1930]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [esi + 0x1930]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0xc0]
mov dword [ecx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
call fcn.100240c0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0xfc], 0
cmp dword [esi + 0x1bd0], ecx
jne 0x10047c79
mov eax, dword [edi + 8]
mov edx, dword [ebx + 0x14]
mov byte [edi + 0xe6e], 0
mov dword [edi + 0xe70], edx
mov dword [edi + 0xe74], 0
mov dword [edi + 0xe78], 0
mov dword [ebp - 0xfc], eax
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x34], eax
cmp byte [esi + 0xec], 0
mov dword [esi + 0x31bc], 1
sete al
cmp byte [ebp - 0xd4], 0
mov byte [esi + 0x1bdd], al
movss xmm7, dword [esi + 0xe4]
subss xmm7, dword [ebp - 0x54]
subss xmm7, dword [esi + 0x1554]
addss xmm7, dword [edi + 0x38]
je 0x100478d4
mov eax, dword [ebp - 0x110]
movss xmm2, dword [esi + 0xe8]
subss xmm2, dword [eax + 0xd4]
jmp 0x100478e4
movss xmm2, dword [esi + 0x1934]
mulss xmm2, dword [0x100b1a20]
cmp byte [ebp - 0xcc], 0
mov al, byte [esi + 0xb1]
mov byte [ebp - 0xb6], al
jne 0x10047a66
mov cl, byte [ebp - 0xed]
test cl, cl
je 0x10047917
test al, al
jne 0x1004797c
cmp byte [esi + 0x3e5], al
jne 0x10047a66
cmp byte [esi + 0x3e0], 0
je 0x100479d9
cmp byte [edi + 0xe6d], 0
jne 0x100479d9
test cl, cl
je 0x10047a87
cmp byte [edi + 0x53], 0
je 0x10047953
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.10044f60
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.100452b0
mov edx, dword [ebx + 0x14]
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x10047a81
cmp byte [esi + 0x3e5], 0
je 0x10047917
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10045690
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x60000d
call fcn.10045690
mov esi, dword [ebp - 0xe4]
add esp, 4
mov edx, dword [ebx + 0x14]
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x10047a81
cmp byte [esi + 0xec], 0
je 0x10047a87
cmp byte [edi + 0xe6d], 0
jne 0x10047a90
movss xmm0, dword [esi + 0x370]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10047a18
movss xmm0, dword [esi + 0x374]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10047a87
cmp byte [edi + 0x53], 0
je 0x10047a32
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.10044f60
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x10047a40
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.100452b0
mov edx, dword [ebx + 0x14]
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
jmp 0x10047a81
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6d], 1
mov al, byte [ebp - 0xb6]
cmp byte [edi + 0xe6d], 0
je 0x10047aa0
cmp byte [esi + 0xec], 0
jne 0x10047aa0
mov byte [edi + 0xe6d], 0
cmp byte [esi + 0xfc], 0
je 0x10047ab2
cmp byte [esi + 0xfe], 0
je 0x10047abf
test al, al
je 0x10047ac8
cmp byte [esi + 0xff], 0
je 0x10047ac8
mov byte [ebp - 0xb5], 1
jmp 0x10047acf
mov byte [ebp - 0xb5], 0
test edx, 0x400
je 0x10047d12
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x10047d12
call fcn.1001e910
mov ecx, dword [ebp - 0xe8]
test al, al
mov al, byte [ebp - 0xb5]
je 0x10047b94
test al, al
jne 0x10047b94
cmp byte [esi + 0xfd], al
jne 0x10047b94
test cl, cl
jne 0x10047b94
mov ecx, dword [esi + 0x1514]
mov eax, dword [esi + 0x150c]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x10047b40
nop
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x10047b88
cmp ecx, edx
jb 0x10047b30
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xbc]
push 2
sub esp, 8
mov dword [ebp - 0xbc], 9
call fcn.100467d0
add esp, 0xc
test al, al
je 0x10047b88
push dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10045690
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xe8]
mov al, byte [ebp - 0xb5]
mov edx, dword [ebx + 0x14]
cmp dword [esi + 0x150c], 0
jle 0x10047c79
test al, al
jne 0x10047c41
test cl, cl
jne 0x10047c41
cmp byte [ebp - 0xb7], cl
jne 0x10047c41
xor ecx, ecx
mov dword [ebp - 0xc0], ecx
nop dword [eax + eax]
mov eax, dword [esi + 0x1514]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0xbc], eax
cmp eax, 9
jne 0x10047bee
cmp byte [esi + 0xfd], 0
jne 0x10047c2f
push 2
sub esp, 8
lea ecx, [ebp - 0xbc]
call fcn.100467d0
add esp, 0xc
test al, al
je 0x10047c29
push dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10045690
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebx + 0x14]
inc ecx
mov dword [ebp - 0xc0], ecx
cmp ecx, dword [esi + 0x150c]
jl 0x10047bd0
mov ecx, dword [esi + 0x1510]
lea eax, [esi + 0x150c]
test ecx, ecx
jns 0x10047c73
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x150c]
call fcn.1002b8e0
lea eax, [esi + 0x150c]
mov dword [eax], 0
mov edx, dword [ebp - 0xdc]
xor cl, cl
mov byte [ebp - 0xb5], cl
cmp dword [esi + 0x1bd0], edx
jne 0x10048805
cmp byte [esi + 0x1bdc], cl
jne 0x10048805
cmp byte [ebp - 0xce], cl
jne 0x10048805
movss xmm0, dword [ebp - 0x13c]
mov ecx, 1
subss xmm0, dword [esi + 0x1558]
divss xmm0, dword [esi + 0x1934]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
xor eax, eax
mov dword [edi + 0x4c], ecx
cmp byte [esi + 0xfd], al
mov dword [ebp - 0xbc], ecx
mov ecx, 0x400000
cmovne eax, ecx
mov dword [ebp - 0xcc], eax
mov al, byte [esi + 0xb1]
mov byte [ebp - 0x129], al
test al, al
je 0x10047d23
cmp dword [esi + 0x37c], 0xa
jne 0x10047d23
mov byte [ebp - 0xc7], 1
jmp 0x10047d2e
mov al, byte [ebp - 0xb5]
mov ecx, dword [ebp - 0xe8]
jmp 0x10047b97
mov byte [ebp - 0xc7], 0
test al, al
je 0x10047d59
cmp byte [esi + 0xff], 0
mov al, byte [esi + 0xfe]
mov byte [ebp - 0xcd], al
je 0x10047d6c
cmp byte [esi + 0xfc], 0
jne 0x10047d6c
test al, al
jne 0x10047d6c
mov byte [ebp - 0xb6], 1
jmp 0x10047d73
mov al, byte [esi + 0xfc]
mov byte [ebp - 0xcd], al
mov byte [ebp - 0xc7], 0
mov byte [ebp - 0xb6], 0
cmp byte [esi + 0xb1], 0
mov edx, dword [esi + 0x37c]
je 0x10047d87
cmp edx, 8
jmp 0x10047d8a
cmp edx, 1
sete al
mov byte [ebp - 0xb7], al
test al, al
je 0x10047db5
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x80]
test ecx, ecx
js 0x10047db5
call fcn.1001e910
test al, al
jne 0x10047dcf
mov edx, dword [esi + 0x37c]
cmp edx, 2
jne 0x10047dfb
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x10047dfb
call fcn.1001e910
test al, al
je 0x10047dfb
cmp byte [ebp - 0xe8], 0
jne 0x10047dfb
cmp byte [ebp - 0x15c], 0
jne 0x10047dfb
cmp byte [ebp - 0xd4], 0
je 0x10047df2
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x10047dfb
mov byte [ebp - 0xc5], 1
jmp 0x10047e02
mov byte [ebp - 0xc5], 0
cmp byte [ebp - 0xb7], 0
je 0x10047e20
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x10047e20
call fcn.1001e910
test al, al
jne 0x10047e3e
cmp dword [esi + 0x37c], 1
jne 0x10047e61
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10047e61
call fcn.1001e910
test al, al
je 0x10047e61
cmp byte [ebp - 0x15c], 0
jne 0x10047e61
cmp byte [ebp - 0xd4], 0
je 0x10047e58
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x10047e61
mov byte [ebp - 0x11b], 1
jmp 0x10047e68
mov byte [ebp - 0x11b], 0
cmp byte [ebp - 0xb7], 0
je 0x10047e86
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x10047e86
call fcn.1001e910
test al, al
jne 0x10047ea4
cmp dword [esi + 0x37c], 2
jne 0x10047eb4
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10047eb4
call fcn.1001e910
test al, al
je 0x10047eb4
cmp byte [ebp - 0xe8], 0
mov byte [ebp - 0xed], 1
je 0x10047ebb
mov byte [ebp - 0xed], 0
mov dl, byte [ebp - 0xb7]
test dl, dl
je 0x10047efe
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x10047efe
call fcn.1001e910
test al, al
je 0x10047ef8
cmp byte [ebp - 0xe8], 0
jne 0x10047ef8
cmp byte [ebp - 0x124], 0
je 0x10047ef8
mov byte [ebp - 0x11a], 1
jmp 0x10047f09
mov dl, byte [ebp - 0xb7]
mov byte [ebp - 0x11a], 0
test dl, dl
je 0x10047f21
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x10047f21
call fcn.1001e910
test al, al
jne 0x10047f42
cmp byte [ebp - 0xc7], 0
je 0x10047f5b
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x10047f5b
call fcn.1001e910
test al, al
je 0x10047f5b
cmp byte [ebp - 0xe8], 0
jne 0x10047f5b
cmp byte [ebp - 0x124], 0
mov byte [ebp - 0x101], 1
jne 0x10047f62
mov byte [ebp - 0x101], 0
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x10047f77
call fcn.1001e910
test al, al
jne 0x10047f8c
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x10047f95
call fcn.1001e910
test al, al
je 0x10047f95
mov byte [ebp - 0xc7], 1
jmp 0x10047f9c
mov byte [ebp - 0xc7], 0
mov edx, 1
xor ecx, ecx
call fcn.10027340
xorps xmm5, xmm5
comiss xmm0, xmm5
jbe 0x10047fc5
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x64]
test ecx, ecx
js 0x10047fde
call fcn.1001e910
test al, al
je 0x10047fde
mov edx, 1
lea ecx, [edx + 1]
call fcn.10027340
comiss xmm0, xmm5
mov byte [ebp - 0x11c], 0
jbe 0x10047fe5
mov byte [ebp - 0x11c], 1
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x10047ffa
call fcn.1001e910
test al, al
jne 0x10048014
mov eax, 1
mov edx, eax
mov ecx, eax
call fcn.10027340
comiss xmm0, xmm5
mov byte [ebp - 0x119], 0
jbe 0x1004801b
mov byte [ebp - 0x119], 1
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x1004806c
call fcn.1001e910
test al, al
je 0x1004806c
cmp byte [ebp - 0xb6], 0
je 0x10048040
mov eax, 0x200004
jmp 0x10048054
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0xcd], 0
cmovne eax, ecx
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, eax
push ecx
mov ecx, edi
call fcn.10045690
jmp 0x100487c8
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x1004809b
call fcn.1001e910
test al, al
je 0x1004809b
cmp byte [ebp - 0xb6], 0
je 0x10048091
mov eax, 0x200005
jmp 0x10048054
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x1004804a
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x10048115
call fcn.1001e910
test al, al
je 0x10048115
cmp byte [ebp - 0xd4], 0
je 0x10048115
cmp byte [esi + 0xfc], 0
je 0x100480f1
mov edx, dword [ebp - 0x110]
movss xmm0, dword [edx + 0x5c]
subss xmm0, dword [esi + 0x1934]
mov dword [edx + 0x74], 0
mov dword [edx + 0x7c], 0
maxss xmm0, xmm5
movss dword [edx + 0x6c], xmm0
jmp 0x100487dc
movzx eax, byte [ebp - 0xb6]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200002]
or eax, dword [ebp - 0xcc]
push eax
call fcn.10045690
jmp 0x100487c8
mov ecx, dword [0x100bdd64]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
js 0x100481a0
call fcn.1001e910
test al, al
je 0x100481a0
cmp byte [ebp - 0xd4], 0
je 0x100481a0
cmp byte [esi + 0xfc], 0
je 0x1004817c
mov ecx, dword [ebp - 0x110]
movss xmm0, dword [esi + 0x1934]
mov eax, dword [0x100bdd64]
addss xmm0, dword [ecx + 0x5c]
mov eax, dword [eax + 0x1b98]
minss xmm0, dword [eax + 0x64]
mov dword [ecx + 0x74], 0
mov dword [ecx + 0x7c], 0
movss dword [ecx + 0x6c], xmm0
jmp 0x100487dc
movzx eax, byte [ebp - 0xb6]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200003]
or eax, dword [ebp - 0xcc]
push eax
call fcn.10045690
jmp 0x100487c8
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x48]
test ecx, ecx
js 0x10048212
call fcn.1001e910
test al, al
je 0x10048212
cmp byte [ebp - 0xd4], 0
je 0x10048212
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x20000e
push ecx
mov ecx, edi
call fcn.10045690
movd xmm0, dword [ebp - 0xbc]
movss xmm1, dword [ebp - 0x158]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1934]
subss xmm1, xmm0
movss dword [ebp - 0x158], xmm1
jmp 0x100487d9
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
js 0x10048280
call fcn.1001e910
test al, al
je 0x10048280
cmp byte [ebp - 0xd4], 0
je 0x10048280
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x20000f
push ecx
mov ecx, edi
call fcn.10045690
movd xmm0, dword [ebp - 0xbc]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1934]
addss xmm0, dword [ebp - 0x158]
movss dword [ebp - 0x158], xmm0
jmp 0x100487d9
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x100482c2
call fcn.1001e910
test al, al
je 0x100482c2
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200004
or eax, 0x200006
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.10045690
jmp 0x100487c8
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x10048304
call fcn.1001e910
test al, al
je 0x10048304
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200005
or eax, 0x200007
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.10045690
jmp 0x100487c8
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x1004833e
call fcn.1001e910
test al, al
je 0x1004833e
cmp byte [ebp - 0xe8], 0
jne 0x1004833e
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x200008
push ecx
mov ecx, edi
call fcn.10045690
jmp 0x100487c8
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x100483e3
call fcn.1001e910
test al, al
je 0x100483e3
cmp byte [ebp - 0xe8], 0
jne 0x100483e3
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x100483c7
cmp byte [ebp - 0xcd], 0
je 0x10048380
push 0x60000c
jmp 0x100483a9
cmp byte [ebp - 0x129], 0
je 0x100483c7
cmp byte [esi + 0xff], 0
je 0x100483c7
cmp byte [esi + 0xfe], 0
jne 0x100483c7
cmp byte [esi + 0xfc], 0
jne 0x100483c7
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10045690
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x200009
push ecx
mov ecx, edi
call fcn.10045690
jmp 0x100487c8
cmp byte [ebp - 0xc7], 0
je 0x1004845a
mov edx, dword [ebx + 0x14]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xd4], 0
je 0x10048463
mov cl, byte [esi + 0xfc]
test al, al
je 0x1004840f
test cl, cl
je 0x10048463
jmp 0x10048413
test cl, cl
jne 0x10048463
cmp byte [ebp - 0xe8], 0
jne 0x100487dc
push 2
sub esp, 8
mov dword [ebp - 0xbc], 0xa
lea ecx, [ebp - 0xbc]
call fcn.100467d0
add esp, 0xc
test al, al
je 0x100487dc
push dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10045690
jmp 0x100487c8
cmp byte [ebp - 0x11c], 0
je 0x10048476
mov byte [ebp - 0xce], 1
mov byte [ebp - 0xb8], 1
jmp 0x100487dc
cmp byte [ebp - 0x119], 0
je 0x1004848c
mov cl, 1
mov byte [ebp - 0xce], cl
jmp 0x100487e2
mov al, byte [ebp - 0x11a]
test al, al
jne 0x100487a9
cmp byte [ebp - 0x101], al
jne 0x100487a9
cmp byte [ebp - 0xb7], al
je 0x100484e3
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x100484e3
call fcn.1001e910
test al, al
je 0x100484e3
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
jmp 0x100487dc
mov al, byte [ebp - 0xc5]
test al, al
jne 0x1004869a
cmp byte [ebp - 0x11b], al
jne 0x1004869a
cmp byte [ebp - 0xed], al
je 0x100487dc
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0xd0]
test ecx, ecx
je 0x1004852e
push dword [eax + 0xd8]
call ecx
mov esi, eax
add esp, 4
test esi, esi
jne 0x10048533
jmp 0x100487dc
mov esi, 0x100a5be8
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10048538
mov eax, dword [0x100bdd64]
sub ecx, edx
test eax, eax
je 0x10048550
inc dword [eax + 0x36c]
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
add esp, 4
mov dword [ebp - 0xf4], eax
cmp byte [esi], 0
mov dword [ebp - 0xbc], 0
je 0x100485e0
xor edi, edi
nop dword [eax]
push 0
mov edx, esi
lea ecx, [ebp - 0xc0]
call fcn.100185c0
add esp, 4
add esi, eax
cmp dword [ebp - 0xc0], 0
je 0x100485ce
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xc0]
push 5
sub esp, 8
call fcn.100467d0
add esp, 0xc
test al, al
je 0x100485c9
mov ecx, dword [ebp - 0xf4]
mov ax, word [ebp - 0xc0]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10048580
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbc], edi
mov edi, dword [ebp - 0x100]
mov esi, dword [ebp - 0xbc]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x10048679
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebp - 0xbc], edx
mov edx, dword [edi + 0x40]
cmp edx, dword [edi + 0x44]
je 0x1004862a
cmp edx, ecx
jle 0x10048611
mov dword [edi + 0x40], ecx
mov edx, ecx
cmp dword [edi + 0x44], ecx
jle 0x1004861f
mov dword [edi + 0x44], ecx
mov dword [ebp - 0xbc], ecx
cmp edx, dword [ebp - 0xbc]
jne 0x1004862a
mov dword [edi + 0x3c], edx
cmp dword [edi + 0x3c], ecx
jle 0x10048632
mov dword [edi + 0x3c], ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10045600
mov edx, dword [edi + 0x3c]
mov ecx, edi
push esi
push dword [ebp - 0xf4]
call fcn.10045160
add esp, 8
test al, al
je 0x1004866c
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push esi
push 0
call fcn.100464e0
add esp, 8
mov byte [edi + 0x52], 0
add dword [edi + 0x3c], esi
mov eax, dword [ebp - 0xf4]
mov byte [edi + 0xe6c], 1
test eax, eax
je 0x1004868d
mov ecx, dword [0x100bdd64]
test ecx, ecx
je 0x1004868d
dec dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
jmp 0x100487d9
cmp dword [esi + 0xd4], 0
je 0x1004876a
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x100486bb
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x100486c0
mov ecx, dword [edi + 4]
xor esi, esi
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x124], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.10018850
mov ecx, dword [0x100bdd64]
inc eax
mov dword [ebp - 0xc4], eax
test ecx, ecx
je 0x100486f1
inc dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0xec], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x124]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.100187e0
mov eax, dword [0x100bdd64]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x1004874b
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x100bdd64]
add esp, 8
test esi, esi
je 0x10048759
test eax, eax
je 0x10048759
dec dword [eax + 0x36c]
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
call eax
mov al, byte [ebp - 0xc5]
add esp, 4
test al, al
je 0x100487dc
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x1004878a
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x100487dc
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10045600
mov byte [edi + 0x52], 0
jmp 0x100487dc
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.10045690
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
add esp, 4
mov cl, byte [ebp - 0xb5]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x100487f7
cmp byte [ebp - 0xc6], 0
je 0x100487f7
mov al, 1
jmp 0x100487f9
xor al, al
or byte [ebp - 0x108], al
mov esi, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xdc]
cmp dword [esi + 0x1bd0], eax
jne 0x10049013
xor eax, eax
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0xcc], eax
test cl, cl
je 0x10048ad5
cmp byte [ebp - 0xe8], al
jne 0x10048abd
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebp - 0xe0]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10048866
test dl, dl
je 0x10048862
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10048866
add eax, 2
add ecx, 2
test dl, dl
jne 0x10048846
xor eax, eax
jmp 0x1004886b
sbb eax, eax
or eax, 1
test eax, eax
je 0x10048abd
mov eax, dword [edi + 0x24]
xor edx, edx
mov ecx, dword [edi + 0x2c]
dec eax
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], edx
mov dword [ebp - 4], edx
test eax, eax
jle 0x100489f8
lea edi, [eax + ecx]
mov esi, ecx
xor eax, eax
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x100488be
cmp esi, edi
jae 0x100488e8
cmp byte [esi], 0
je 0x100488e8
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.100185c0
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc0]
je 0x100488e8
inc eax
jmp 0x100488b0
mov edi, dword [ebp - 0x100]
lea edx, [eax + 1]
mov esi, dword [ebp - 0xe4]
mov dword [ebp - 0xbc], edx
test edx, edx
jle 0x1004894b
mov ecx, 8
mov eax, edx
cmp edx, ecx
cmovl eax, ecx
mov dword [ebp - 0xc4], eax
test eax, eax
jle 0x1004894b
mov ecx, dword [0x100bdd64]
test ecx, ecx
je 0x10048927
inc dword [ecx + 0x36c]
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov dword [ebp - 0x130], eax
add esp, 4
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x134], ecx
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x10c]
add ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xc0], eax
lea ecx, [eax - 2]
lea ecx, [ecx + edx*2]
mov dword [ebp - 0x124], ecx
cmp eax, ecx
jae 0x100489ed
mov esi, dword [ebp - 0xc4]
mov edi, dword [ebp - 0xec]
test edi, edi
je 0x1004899f
cmp esi, edi
jae 0x100489db
cmp byte [esi], 0
je 0x100489db
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.100185c0
mov ecx, dword [ebp - 0xc4]
add esi, eax
mov eax, dword [ebp - 0xc0]
add esp, 4
test ecx, ecx
je 0x100489db
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xc0], eax
cmp eax, dword [ebp - 0x124]
jb 0x10048997
mov edi, dword [ebp - 0x100]
mov esi, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xbc]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0xcc]
lea ecx, [edx - 1]
xor edx, edx
test eax, eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xc4], eax
cmovle ecx, edx
push ecx
mov dword [ebp - 0xbc], ecx
lea ecx, [edi + 0x5c]
push eax
call fcn.100464e0
add esp, 8
mov dword [ebp - 0xec], eax
test eax, eax
je 0x10048a56
mov edx, dword [ebp - 0xc4]
xor ecx, ecx
test edx, edx
jle 0x10048a56
mov esi, eax
nop word [eax + eax]
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, edx
jl 0x10048a40
mov esi, dword [ebp - 0xe4]
push dword [edi + 4]
xor edx, edx
mov ecx, edi
call fcn.10045100
mov eax, dword [ebp - 0xbc]
add esp, 4
test eax, eax
jle 0x10048a93
push eax
push dword [ebp - 0x130]
xor edx, edx
mov ecx, edi
call fcn.10045160
add esp, 8
test al, al
je 0x10048a93
mov eax, dword [ebp - 0xbc]
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x130]
test ecx, ecx
je 0x10048abd
mov eax, dword [0x100bdd64]
test eax, eax
je 0x10048ab3
dec dword [eax + 0x36c]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp byte [ebp - 0xb8], 0
mov eax, dword [ebx + 0x14]
je 0x10048f00
test al, 0x20
je 0x10048f00
cmp byte [ebp - 0xe8], 0
jne 0x10048b42
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0xbc], edx
cmp edx, eax
jle 0x10048b30
test eax, eax
je 0x10048b12
cdq
sub eax, edx
mov edx, dword [ebp - 0xbc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1c]
jmp 0x10048b17
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x18]
push eax
call fcn.1002b870
mov edx, dword [ebp - 0xbc]
lea ecx, [edi + 0x18]
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.100187e0
add esp, 8
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x10048eb1
test dl, 0x40
je 0x10048b77
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x10048b77
call fcn.1001e910
mov edx, dword [ebx + 0x14]
test al, al
je 0x10048b77
mov eax, 0x40
xor ecx, ecx
jmp 0x10048bef
test dl, dl
jns 0x10048bbf
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x10048b9d
call fcn.1001e910
mov edx, dword [ebx + 0x14]
test al, al
je 0x10048b9d
mov eax, 0x80
lea ecx, [eax - 0x7d]
jmp 0x10048bef
mov eax, dword [0x100bdd64]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x10048bbf
call fcn.1001e910
mov edx, dword [ebx + 0x14]
test al, al
je 0x10048bbf
mov eax, 0x80
lea ecx, [eax - 0x7c]
jmp 0x10048bef
test edx, 0x80000
je 0x10048bd7
cmp byte [edi + 0xe6e], 0
je 0x10048bd7
mov eax, 0x80000
jmp 0x10048bea
test edx, 0x100
mov ecx, 0x100
mov eax, 0
cmovne eax, ecx
mov ecx, 0x16
test eax, eax
je 0x10048eb1
mov dword [ebp - 0x84], eax
xor esi, esi
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x70], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [edi + 0x34]
mov word [ebp - 0x63], si
mov dword [ebp - 0x7c], esi
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x68], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x74], ecx
mov ecx, esi
mov dword [ebp - 0x78], 0
lea edx, [esi + eax*2]
mov byte [ebp - 0x61], 0
mov byte [ebp - 0x64], 0
call fcn.10018850
mov ecx, dword [ebp - 0x100]
mov edi, eax
mov dword [ebp - 0x60], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10018850
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10018850
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x84]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0x64]
add esp, 4
mov edx, dword [ebp - 0x60]
mov byte [ebp - 0xc5], al
cmp edx, edi
jne 0x10048c9c
test al, al
je 0x10048cf7
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x10048cb2
cmp esi, edi
jae 0x10048cdc
cmp byte [esi], 0
je 0x10048cdc
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.100185c0
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc0]
je 0x10048cdc
inc eax
jmp 0x10048ca4
mov edi, dword [ebp - 0x100]
mov edx, dword [ebp - 0x60]
mov dword [edi + 0x3c], eax
mov al, byte [ebp - 0xc5]
mov byte [edi + 0xe6c], 1
jmp 0x10048cfd
mov edi, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0xec]
jne 0x10048d0c
test al, al
je 0x10048d61
cmp ecx, edx
jne 0x10048d15
mov eax, dword [edi + 0x3c]
jmp 0x10048d5e
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x10048d2b
cmp esi, edi
jae 0x10048d55
cmp byte [esi], 0
je 0x10048d55
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.100185c0
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc0]
je 0x10048d55
inc eax
jmp 0x10048d1d
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x100]
mov dword [edi + 0x40], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0xbc]
jne 0x10048d79
cmp byte [ebp - 0xc5], 0
je 0x10048eab
cmp eax, ecx
jne 0x10048d82
mov eax, dword [edi + 0x40]
jmp 0x10048dc8
mov esi, dword [ebp - 0x70]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x10048d98
cmp esi, edi
jae 0x10048dc2
cmp byte [esi], 0
je 0x10048dc2
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.100185c0
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc0]
je 0x10048dc2
inc eax
jmp 0x10048d8a
mov edi, dword [ebp - 0x100]
cmp byte [ebp - 0xc5], 0
mov dword [edi + 0x44], eax
je 0x10048eab
mov esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xfc]
cmp esi, ecx
jle 0x10048e27
cmp byte [ebp - 0x120], 0
je 0x10048e27
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x10048e24
test eax, eax
je 0x10048e0d
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10048e15
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.1002b8e0
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0x70]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0xc4], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0xbc], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0xec], eax
cmp ecx, eax
jae 0x10048e8f
mov edi, dword [ebp - 0xc4]
cmp byte [edi], 0
je 0x10048e83
push 0
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.100185c0
add edi, eax
add esp, 4
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x10048e83
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0xec]
jb 0x10048e52
mov edi, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xbc]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x6c]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
mov esi, dword [ebp - 0xe4]
cmp byte [ebp - 0xe8], 0
jne 0x10048efd
mov ecx, dword [ebp - 0xe0]
mov eax, dword [edi + 0x20]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10048ee3
test dl, dl
je 0x10048edf
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10048ee3
add eax, 2
add ecx, 2
test dl, dl
jne 0x10048ec3
xor eax, eax
jmp 0x10048ee8
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x10048f00
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0x10c], ecx
mov ecx, dword [edi + 8]
jmp 0x10048f06
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x10c]
test edx, edx
je 0x10048fef
cmp byte [ebp - 0x120], 0
je 0x10048fb1
mov dword [ebp - 0xb0], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xa0], eax
lea eax, [ecx + 1]
cmp dword [ebx + 0xc], eax
movlpd qword [ebp - 0xa8], xmm0
cmovge eax, dword [ebx + 0xc]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
movlpd qword [ebp - 0x94], xmm0
movlpd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0xb4], 0x40000
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xac], 0
call eax
mov eax, dword [ebp - 0xa0]
add esp, 4
mov edx, dword [ebp - 0x10c]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebx + 0xc], eax
lea ecx, [eax - 1]
cmp dword [ebp - 0x9c], ecx
cmovl ecx, dword [ebp - 0x9c]
lea eax, [ecx + 1]
mov ecx, dword [ebx + 0xc]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebx + 0xc], ecx
cmp ecx, 1
jb 0x10048fe8
jbe 0x10048fdd
lea eax, [ecx - 1]
push eax
push edx
push dword [ebp - 0xe0]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebx + 0xc]
add esp, 0xc
mov eax, dword [ebp - 0xe0]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0xd5], 1
mov eax, dword [ebp - 0xdc]
mov dword [edi + 0xe70], 0
mov dword [edi + 0xe74], 0
mov dword [edi + 0xe78], 0
cmp byte [ebp - 0xce], 0
je 0x10049029
cmp dword [esi + 0x1bd0], eax
jne 0x10049029
call fcn.1001a840
mov edx, dword [ebp - 0xd4]
test dl, dl
jne 0x100490f6
mov edx, dword [ebp - 0xdc]
lea ecx, [ebp - 0x54]
push 1
call fcn.10019a70
movss xmm1, dword [0x100b1a78]
add esp, 4
mov ecx, 7
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call fcn.10018cf0
movss xmm2, dword [esi + 0x155c]
mov dl, 1
mov ecx, eax
call fcn.10019860
movss xmm4, dword [ebp - 0x54]
add esp, 0x10
movss xmm3, dword [ebp - 0x50]
movaps xmm0, xmm4
addss xmm0, dword [esi + 0x1554]
mov edx, dword [ebp - 0xd4]
movaps xmm1, xmm3
addss xmm1, dword [ebp - 0x13c]
movaps xmm2, xmm4
movss dword [ebp - 0x40], xmm3
addss xmm2, dword [ebp - 0x150]
movss dword [ebp - 0x134], xmm0
movaps xmm0, xmm3
addss xmm0, dword [esi + 0x1558]
movss xmm3, dword [ebp - 0x150]
movss dword [ebp - 0x44], xmm4
movss dword [ebp - 0xc4], xmm2
movss dword [ebp - 0x3c], xmm2
movss dword [ebp - 0x118], xmm1
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x130], xmm0
jmp 0x1004915f
movss xmm0, dword [ebp - 0x54]
movss xmm1, dword [ebp - 0x50]
movaps xmm2, xmm0
movss xmm3, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x110]
addss xmm2, xmm3
movss dword [ebp - 0x40], xmm1
addss xmm1, dword [ebp - 0x13c]
movss dword [ebp - 0x44], xmm0
mov eax, dword [ecx + 0xd0]
mov ecx, dword [ecx + 0xd4]
movaps xmm0, xmm2
movss dword [ebp - 0xc4], xmm0
movss dword [ebp - 0x3c], xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x118], xmm0
movss dword [ebp - 0x38], xmm0
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], ecx
cmp byte [ebp - 0xee], 0
lea eax, [ebp - 0x134]
movss xmm0, dword [eax]
xorps xmm5, xmm5
movss dword [ebp - 0x114], xmm0
xorps xmm6, xmm6
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0xf8], eax
movss dword [ebp - 0xfc], xmm1
movss dword [ebp - 0xc0], xmm2
movss dword [ebp - 0x124], xmm0
movss dword [ebp - 0xbc], xmm5
je 0x100491c3
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xe0], ecx
jmp 0x100491c9
mov ecx, dword [ebp - 0xe0]
cmp byte [ebp - 0xc6], 0
jne 0x100493ff
cmp byte [ebp - 0x108], 0
jne 0x100493ff
test dl, dl
je 0x10049247
mov eax, dword [ebp - 0xe0]
xor ecx, ecx
mov dl, byte [eax]
lea edi, [eax + 1]
test dl, dl
je 0x1004920a
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x100491f8
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0xcc], edi
cmp al, 0xa
je 0x1004921d
cmp al, 0xd
je 0x1004921d
inc ecx
mov edx, dword [ebp - 0xcc]
movaps xmm0, xmm3
movd xmm5, ecx
cvtdq2ps xmm5, xmm5
movss dword [ebp - 0x124], xmm0
mulss xmm5, dword [esi + 0x1934]
movss dword [ebp - 0xbc], xmm5
jmp 0x1004928c
mov eax, dword [ebp - 0xdc]
cmp dword [esi + 0x1bd0], eax
jne 0x1004925c
mov edx, dword [edi + 8]
add edx, ecx
jmp 0x10049277
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049260
sub ecx, edx
mov edx, dword [ebp - 0xe0]
add edx, ecx
mov ecx, dword [ebp - 0xe0]
mov eax, edx
mov dword [ebp - 0xcc], edx
sub eax, ecx
cmp eax, 0x200000
jge 0x10049fbf
movss xmm1, dword [0x100b1a78]
xor ecx, ecx
call fcn.10018cf0
cmp byte [ebp - 0xd4], 0
mov ecx, edx
movss xmm2, dword [esi + 0x1934]
lea edx, [ebp - 0x44]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xc4], 0
cmovne edx, dword [ebp - 0xc4]
test dword [ebp - 0xc0], 0xff000000
mov edi, dword [eax + 0x240]
mov eax, dword [esi + 0x1930]
mov dword [ebp - 0xfc], eax
je 0x10049fbf
cmp dword [ebp - 0xcc], 0
jne 0x1004931f
mov ecx, dword [ebp - 0xe0]
lea eax, [ecx + 1]
mov dword [ebp - 0xc4], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049306
sub ecx, dword [ebp - 0xc4]
add ecx, dword [ebp - 0xe0]
mov eax, dword [esi + 0x1930]
cmp dword [ebp - 0xe0], ecx
je 0x10049fbf
test eax, eax
jne 0x1004933b
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xfc], eax
ucomiss xmm2, dword [0x100b19a4]
lahf
test ah, 0x44
jp 0x10049350
mov eax, dword [edi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [edi + 0x60]
movups xmmword [ebp - 0x148], xmm0
test edx, edx
je 0x100493be
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x148]
comiss xmm0, xmm1
jae 0x10049378
movss dword [ebp - 0x148], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x144]
comiss xmm0, xmm1
jae 0x10049392
movss dword [ebp - 0x144], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x140]
ja 0x100493a8
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x13c]
ja 0x100493be
movss dword [ebp - 0x13c], xmm0
mov eax, dword [ebp - 0xf8]
test edx, edx
push dword [eax + 4]
push dword [eax]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x148]
push ecx
push dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xfc]
push eax
push dword [ebp - 0xc0]
push edi
call fcn.1003ad60
jmp 0x10049fbf
mov eax, dword [edi + 8]
xor edx, edx
add eax, ecx
movss dword [ebp - 0xec], xmm6
xorps xmm7, xmm7
mov ecx, dword [edi + 0x14]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0xf8], 0xfffffc18
mov dword [ebp - 0x10c], 0xfffffc18
cmp byte [ebp - 0xc6], dl
je 0x1004946b
mov eax, dword [edi + 0x3c]
mov edx, 1
mov dword [ebp - 0xf8], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x14c], eax
cmp byte [ebp - 0x108], 0
je 0x1004949e
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0xdc]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x10c], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x120], eax
mov esi, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xd4]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
test si, si
mov dword [ebp - 0xf4], eax
mov esi, dword [ebp - 0xe4]
je 0x10049537
mov edi, dword [ebp - 0xdc]
movzx esi, word [edi]
mov edi, dword [ebp - 0xf8]
cmp si, 0xa
jne 0x10049511
inc eax
mov dword [ebp - 0xf4], eax
cmp edi, 0xffffffff
jne 0x100494f5
cmp ecx, dword [ebp - 0x14c]
jb 0x100494f5
dec edx
mov edi, eax
test edx, edx
jle 0x10049525
cmp dword [ebp - 0x10c], 0xffffffff
jne 0x10049511
cmp ecx, dword [ebp - 0x120]
jb 0x10049511
dec edx
mov dword [ebp - 0x10c], eax
test edx, edx
jle 0x10049525
movzx eax, word [ecx + 2]
add ecx, 2
mov esi, eax
test ax, ax
mov eax, dword [ebp - 0xf4]
jne 0x100494d4
mov esi, dword [ebp - 0xe4]
mov dword [ebp - 0xf8], edi
mov edi, dword [ebp - 0x100]
mov edx, dword [ebp - 0xdc]
inc eax
cmp dword [ebp - 0xf8], 0xffffffff
mov ecx, eax
mov dword [ebp - 0xf4], eax
cmovne ecx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x10c]
cmp eax, 0xffffffff
mov dword [ebp - 0x128], ecx
cmove eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x14c]
mov ecx, eax
cmp eax, edx
jbe 0x1004958e
nop dword [eax]
cmp word [ecx - 2], 0xa
je 0x1004958e
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10049580
movaps xmm1, xmm6
mov eax, dword [0x100bdd64]
movaps xmm3, xmm6
mov edx, dword [eax + 0x1930]
movss xmm2, dword [eax + 0x1934]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x14c]
jae 0x10049608
mov esi, dword [ebp - 0x14c]
mov edi, edx
nop dword [eax]
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x100495d6
maxss xmm1, xmm3
movaps xmm3, xmm6
jmp 0x100495f8
cmp edx, 0xd
je 0x100495f8
mov edx, eax
cmp edx, dword [edi]
jge 0x100495eb
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x100495f0
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
cmp ecx, esi
jb 0x100495c0
mov edi, dword [ebp - 0x100]
mov esi, dword [ebp - 0xe4]
cmp dword [ebp - 0x10c], 0
maxss xmm3, xmm1
movd xmm4, dword [ebp - 0x128]
movss xmm0, dword [esi + 0x1934]
cvtdq2ps xmm4, xmm4
movss dword [ebp - 0x14c], xmm3
mulss xmm4, xmm0
movss dword [ebp - 0x130], xmm4
jl 0x10049703
mov eax, dword [ebp - 0x120]
mov ecx, eax
mov edx, dword [ebp - 0xdc]
cmp eax, edx
jbe 0x10049660
cmp word [ecx - 2], 0xa
je 0x10049660
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10049652
movaps xmm1, xmm6
mov eax, dword [0x100bdd64]
movaps xmm7, xmm6
mov edx, dword [eax + 0x1930]
movss xmm2, dword [eax + 0x1934]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x120]
jae 0x100496d8
mov esi, dword [ebp - 0x120]
mov edi, edx
nop
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x100496a6
maxss xmm1, xmm7
movaps xmm7, xmm6
jmp 0x100496c8
cmp edx, 0xd
je 0x100496c8
mov edx, eax
cmp edx, dword [edi]
jge 0x100496bb
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x100496c0
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm7, xmm0
cmp ecx, esi
jb 0x10049690
mov edi, dword [ebp - 0x100]
mov esi, dword [ebp - 0xe4]
movd xmm3, dword [ebp - 0x10c]
maxss xmm7, xmm1
movss xmm0, dword [esi + 0x1934]
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm0
movss dword [ebp - 0xec], xmm3
movss xmm3, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0xd4]
movss xmm1, dword [ebp - 0x150]
test cl, cl
je 0x10049737
movd xmm5, dword [ebp - 0xf4]
cvtdq2ps xmm5, xmm5
mulss xmm5, xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x124], xmm0
movss dword [ebp - 0xbc], xmm5
cmp byte [ebp - 0xc6], 0
je 0x1004985e
cmp byte [edi + 0xe6c], 0
je 0x1004985e
test dword [ebx + 0x14], 0x1000
jne 0x100497b2
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm1
comiss xmm2, xmm3
subss xmm1, dword [esi + 0x1554]
mulss xmm0, dword [0x100b19fc]
movss dword [ebp - 0x150], xmm1
movaps xmm1, xmm3
jbe 0x1004978f
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x100497a0
subss xmm1, dword [ebp - 0x150]
comiss xmm1, xmm2
jb 0x100497b9
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x100497b9
mov dword [edi + 0x38], 0
test cl, cl
je 0x1004984a
movss xmm2, dword [ebp - 0x158]
movaps xmm0, xmm4
subss xmm0, dword [esi + 0x1934]
movss xmm3, dword [ebp - 0x13c]
comiss xmm2, xmm0
jbe 0x100497ea
movaps xmm2, xmm6
maxss xmm2, xmm0
jmp 0x10049806
movaps xmm0, xmm4
subss xmm0, xmm3
comiss xmm0, xmm2
jb 0x10049806
movss xmm2, dword [esi + 0x1558]
addss xmm2, xmm2
addss xmm2, xmm0
comiss xmm6, xmm2
movss xmm1, dword [esi + 0x1558]
jbe 0x10049818
movaps xmm1, xmm6
jmp 0x1004982c
addss xmm1, xmm1
addss xmm1, xmm5
subss xmm1, xmm3
maxss xmm1, xmm6
minss xmm1, xmm2
mov eax, dword [ebp - 0x110]
movss xmm0, dword [eax + 0x5c]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
movss dword [eax + 0x5c], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x114], xmm0
cmp byte [ebp - 0x108], 0
movss xmm5, dword [edi + 0x38]
movss dword [ebp - 0xf4], xmm5
je 0x10049b75
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0xdc]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xc6], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0xdc]
lea edx, [eax + edx*2]
mov dword [ebp - 0x108], edx
je 0x100498b3
movss xmm1, dword [0x100b1a78]
jmp 0x100498bb
movss xmm1, dword [0x100b1a28]
mov ecx, 0x2f
call fcn.10018cf0
cmp byte [ebp - 0xd4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x128], eax
je 0x100498df
xorps xmm5, xmm5
xorps xmm6, xmm6
jmp 0x100498ef
movss xmm5, dword [0x100b1cb0]
movss xmm6, dword [0x100b1ae8]
movss xmm3, dword [ebp - 0x30]
movss xmm4, dword [ebp - 0x114]
movss dword [ebp - 0x120], xmm6
addss xmm7, xmm4
movss dword [ebp - 0xf8], xmm5
addss xmm3, dword [ebp - 0xec]
subss xmm7, dword [ebp - 0xf4]
subss xmm3, xmm0
movss dword [ebp - 0xec], xmm3
cmp esi, edx
jae 0x10049bc8
movss xmm4, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xe4]
mov edi, dword [ebp - 0x128]
nop dword [eax + eax]
movaps xmm0, xmm4
addss xmm0, dword [ecx + 0x1934]
comiss xmm3, xmm0
ja 0x10049b5e
movss xmm0, dword [ebp - 0x50]
comiss xmm0, xmm3
jbe 0x1004998f
cmp esi, edx
jae 0x10049b26
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x10049b26
cmp esi, edx
jb 0x10049976
jmp 0x10049b26
xorps xmm0, xmm0
mov eax, dword [0x100bdd64]
xorps xmm4, xmm4
xorps xmm1, xmm1
mov edx, dword [eax + 0x1930]
movss xmm2, dword [eax + 0x1934]
divss xmm2, dword [edx + 0x10]
cmp esi, dword [ebp - 0x108]
jae 0x10049a02
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x100499ef
cmp ecx, 0xd
je 0x100499e5
cmp ecx, dword [edx]
jge 0x100499d8
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x100499dd
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, dword [ebp - 0x108]
jb 0x100499b8
jmp 0x100499f9
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
mov ecx, dword [ebp - 0xe4]
xorps xmm0, xmm0
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x10049a3b
mov eax, dword [ecx + 0x1930]
cmp dword [eax], 0x20
jle 0x10049a23
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x10049a28
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x100b1a20]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm4, dword [ebp - 0x118]
addss xmm1, xmm7
addss xmm7, dword [0x100b19a4]
movaps xmm2, xmm5
movaps xmm0, xmm6
subss xmm2, dword [ecx + 0x1934]
movss xmm5, dword [ebp - 0xc4]
addss xmm0, xmm3
minss xmm1, xmm5
maxss xmm7, dword [ebp - 0x54]
addss xmm2, xmm3
minss xmm0, xmm4
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x24], xmm7
maxss xmm2, dword [ebp - 0x50]
comiss xmm0, dword [ebp - 0x50]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x18], xmm0
jbe 0x10049b20
comiss xmm4, xmm2
jbe 0x10049b20
comiss xmm1, dword [ebp - 0x54]
jbe 0x10049b20
comiss xmm5, xmm7
jbe 0x10049b20
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x1c]
push edi
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax + 0x240]
call fcn.10036600
movss xmm0, dword [ebp - 0xc0]
movss xmm3, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xe4]
movss dword [ebp - 0xc0], xmm0
movss xmm0, dword [ebp - 0xfc]
movss dword [ebp - 0x114], xmm3
movss xmm3, dword [ebp - 0xec]
movss dword [ebp - 0xfc], xmm0
mov edx, dword [ebp - 0x108]
movss xmm7, dword [ebp - 0x114]
movss xmm5, dword [ebp - 0xf8]
movss xmm6, dword [ebp - 0x120]
addss xmm3, dword [ecx + 0x1934]
subss xmm7, dword [ebp - 0xf4]
movss dword [ebp - 0xec], xmm3
cmp esi, edx
jb 0x10049950
movss xmm5, dword [ebp - 0xf4]
xorps xmm6, xmm6
mov edi, dword [ebp - 0x100]
mov esi, dword [ebp - 0xe4]
movss xmm4, dword [ebp - 0x114]
cmp byte [ebp - 0xd4], 0
mov edx, dword [ebp - 0xcc]
jne 0x10049b9f
mov eax, edx
sub eax, dword [ebp - 0xe0]
cmp eax, 0x200000
jge 0x10049dfe
mov eax, dword [0x100bdd64]
movups xmm2, xmmword [eax + 0x15e0]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1518]
movups xmmword [ebp - 0x24], xmm2
jbe 0x10049bdb
movaps xmm0, xmm6
jmp 0x10049be7
movss xmm5, dword [ebp - 0xf4]
xorps xmm6, xmm6
mov esi, dword [ebp - 0xe4]
jmp 0x10049b7d
movss xmm0, dword [0x100b1a78]
minss xmm0, xmm2
movss xmm2, dword [0x100b1c08]
movss xmm7, dword [0x100b1a20]
movss xmm3, dword [ebp - 0x20]
comiss xmm6, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x10049c12
movaps xmm0, xmm6
jmp 0x10049c1e
movss xmm0, dword [0x100b1a78]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x1c]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x10049c3e
movaps xmm0, xmm6
jmp 0x10049c4a
movss xmm0, dword [0x100b1a78]
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x10049c65
movaps xmm0, xmm6
jmp 0x10049c71
movss xmm0, dword [0x100b1a78]
minss xmm0, xmm1
mulss xmm0, xmm2
subss xmm4, xmm5
mov dword [ebp - 0x118], edx
mov edx, dword [esi + 0x1930]
movss xmm2, dword [esi + 0x1934]
addss xmm0, xmm7
mov dword [ebp - 0xc4], edx
lea edx, [ebp - 0x44]
mov dword [ebp - 0x128], 0
movss dword [ebp - 0x140], xmm4
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
shl eax, 0x18
subss xmm0, xmm6
or eax, ecx
mov ecx, dword [ebp - 0x110]
cmp byte [ebp - 0xd4], 0
mov dword [ebp - 0xf8], eax
cmovne edx, dword [ebp - 0x128]
mov ecx, dword [ecx + 0x240]
mov dword [ebp - 0xec], ecx
movss dword [ebp - 0x13c], xmm0
test eax, 0xff000000
je 0x10049dfe
cmp dword [ebp - 0xcc], 0
jne 0x10049d33
mov ecx, dword [ebp - 0xe0]
lea eax, [ecx + 1]
mov dword [ebp - 0x128], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049d10
sub ecx, dword [ebp - 0x128]
mov eax, dword [ebp - 0xe0]
add eax, ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x118], eax
jmp 0x10049d39
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0xe0], eax
je 0x10049dfe
cmp dword [esi + 0x1930], 0
jne 0x10049d5a
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xc4], eax
ucomiss xmm2, xmm6
lahf
test ah, 0x44
jp 0x10049d6b
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x24], xmm0
test edx, edx
je 0x10049dbe
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x10049d8a
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x20]
comiss xmm0, xmm1
jae 0x10049d9e
movss dword [ebp - 0x20], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x1c]
ja 0x10049dae
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x18]
ja 0x10049dbe
movss dword [ebp - 0x18], xmm0
push dword [ebp - 0x13c]
test edx, edx
mov edx, dword [ebp - 0x118]
push dword [ebp - 0x140]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x24]
push edx
push dword [ebp - 0xe0]
push eax
push dword [ebp - 0xf8]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.1003ad60
cmp byte [ebp - 0xc6], 0
je 0x10049fbf
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0xb2], 0
je 0x10049e70
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x10049e70
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x140], xmm0
fld qword [ebp - 0x140]
fld qword [0x100b1ae0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x100b1a4c]
fstp qword [ebp - 0x140]
movsd xmm1, qword [ebp - 0x140]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x10049e70
xor cl, cl
jmp 0x10049e72
mov cl, 1
movss xmm0, dword [ebp - 0x14c]
movss xmm6, dword [0x100b1a78]
addss xmm0, dword [ebp - 0x34]
subss xmm0, dword [ebp - 0xf4]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x130]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x100b19a4]
movss dword [ebp - 0x128], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x24], xmm1
addss xmm4, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0x1c], xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x130], xmm0
movaps xmm2, xmm0
movaps xmm3, xmm0
subss xmm2, dword [esi + 0x1934]
subss xmm3, dword [0x100b1ab0]
addss xmm2, dword [0x100b1a20]
movss dword [ebp - 0x18], xmm3
movss dword [ebp - 0x20], xmm2
test cl, cl
je 0x10049f9a
comiss xmm3, dword [ebp - 0x50]
jbe 0x10049f9a
movss xmm5, dword [ebp - 0xfc]
comiss xmm5, xmm2
jbe 0x10049f9a
comiss xmm4, dword [ebp - 0x54]
jbe 0x10049f9a
movss xmm2, dword [ebp - 0xc0]
comiss xmm2, xmm1
jbe 0x10049f9a
sub esp, 8
movss dword [ebp - 0x140], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x13c], xmm3
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.10018cf0
add esp, 4
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax + 0x240]
call fcn.10036400
movss xmm1, dword [ebp - 0x128]
movss xmm0, dword [ebp - 0x130]
movss xmm6, dword [0x100b1a78]
cmp byte [ebp - 0xe8], 0
jne 0x10049fbf
subss xmm0, dword [esi + 0x1934]
subss xmm1, xmm6
movss dword [esi + 0x2f10], xmm0
movss dword [esi + 0x2f0c], xmm1
cmp byte [ebp - 0x15c], 0
je 0x10049fcd
call fcn.10024180
cmp byte [ebp - 0xd4], 0
je 0x1004a07e
mov ecx, dword [0x100bdd64]
movss xmm1, dword [ebp - 0xbc]
addss xmm1, dword [esi + 0x1558]
movss xmm3, dword [ebp - 0x124]
mov eax, dword [ecx + 0x1b98]
movss dword [ebp - 0x140], xmm3
movss dword [ebp - 0x13c], xmm1
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1b98]
cmp byte [eax + 0x8f], 0
jne 0x1004a074
movss xmm0, dword [eax + 0xd4]
lea ecx, [ebp - 0x140]
movss xmm2, dword [eax + 0xd0]
addss xmm1, xmm0
addss xmm3, xmm2
movss dword [ebp - 0x24], xmm2
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x18], xmm1
movss xmm1, dword [0x100b1cb0]
movss dword [ebp - 0x1c], xmm3
call fcn.10024650
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x24]
call fcn.10024780
add esp, 8
call fcn.1001ed60
call fcn.10024d70
cmp byte [esi + 0x2f64], 0
je 0x1004a0c0
cmp byte [ebp - 0x15c], 0
jne 0x1004a0c0
mov eax, dword [0x100bdd64]
lea ecx, [ebp - 0x34]
push dword [ebp - 0xcc]
mov edx, dword [ebp - 0xe0]
mov dword [eax + 0x2f7c], 0x100ada7c
mov dword [eax + 0x2f80], 0x100a5c5c
call fcn.10029cf0
add esp, 4
movss xmm0, dword [ebp - 0x160]
comiss xmm0, dword [0x100b19a4]
jbe 0x1004a119
movss xmm0, dword [ebp - 0x4c]
xor edx, edx
addss xmm0, dword [esi + 0x156c]
mov ecx, dword [ebp - 0x154]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [esi + 0x1558]
movss dword [ebp - 0x13c], xmm0
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
push 1
call fcn.10018ea0
add esp, 0xc
mov dl, byte [ebp - 0xd5]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x1004a143
test ecx, 0x8000000
jne 0x1004a143
mov eax, dword [0x100bdd64]
or dword [eax + 0x1c40], 4
mov word [eax + 0x1be0], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0xb8]
cmovne eax, ecx
jmp 0x10046eea