Function at 0x100741a0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008192d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x180
mov eax, dword [0x1008b040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x188], ecx
mov edi, dword [0x10116ebc]
mov eax, dword [ebx + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [edi + 0x3e28]
mov byte [eax + 0x90], 1
mov eax, dword [edi + 0x3e28]
mov dword [ebp - 0x150], eax
cmp byte [eax + 0x93], 0
jne 0x100747a4
mov edx, dword [ebx + 0x14]
mov esi, edi
mov ecx, edx
mov dword [ebp - 0x128], esi
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0x11c], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0x134], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0x18c], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x14c], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0x11c], 0
mov dword [ebp - 0x17c], ecx
je 0x10074298
call fcn.10039d10
mov edi, dword [0x10116ebc]
mov eax, dword [ebp - 0x150]
mov ecx, dword [eax + 0xc8]
xor edx, edx
mov eax, dword [eax + 0xd0]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x188]
call fcn.1002af80
add esp, 4
mov dword [ebp - 0x114], eax
cmp dword [edi + 0x3e48], eax
jne 0x100742e2
push ecx
push dword [ebp - 0x188]
mov edx, 0xb
mov ecx, eax
call fcn.100418d0
mov edi, dword [0x10116ebc]
add esp, 8
mov eax, dword [ebp - 0x188]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x10074306
nop
mov dl, byte [ecx]
test dl, dl
je 0x10074306
cmp dl, 0x23
jne 0x10074300
cmp byte [ecx + 1], dl
je 0x10074306
inc ecx
cmp ecx, 0xffffffff
jb 0x100742f0
movss xmm1, dword [0x1008580c]
xorps xmm3, xmm3
movss xmm0, dword [edi + 0x3bb4]
movss dword [ebp - 0x174], xmm1
cmp eax, ecx
jne 0x1007432f
movss dword [ebp - 0x190], xmm3
jmp 0x10074380
push ecx
push ecx
push eax
push ecx
mov ecx, dword [edi + 0x3bb0]
lea eax, [ebp - 0x110]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.10052940
movss xmm0, dword [ebp - 0x110]
xorps xmm3, xmm3
addss xmm0, dword [0x10085700]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x190], xmm0
movss xmm0, dword [ebp - 0x10c]
cmp byte [ebp - 0x11c], 0
je 0x10074399
movss xmm0, dword [esi + 0x3bb4]
mulss xmm0, dword [0x10085768]
test byte [edi + 0x4674], 1
movss xmm1, dword [esi + 0x37d8]
mov eax, dword [edi + 0x3e28]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x100743c5
movss xmm0, dword [edi + 0x4678]
jmp 0x100743cd
movss xmm0, dword [eax + 0x184]
comiss xmm3, xmm0
movss xmm3, dword [0x10085708]
jbe 0x1007440f
cmp dword [eax + 0x174], 0
movss xmm1, dword [eax + 0x20c]
jne 0x100743f4
cmp dword [edi + 0x49bc], 0
je 0x100743fc
movss xmm1, dword [eax + 0x1dc]
subss xmm1, dword [eax + 0xd4]
addss xmm1, xmm0
movaps xmm0, xmm3
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x110]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.10039c30
movss xmm1, dword [ebp - 0x190]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x1007444d
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x37ec]
jmp 0x10074450
xorps xmm2, xmm2
mov edi, dword [ebp - 0x150]
lea eax, [ebp - 0x84]
movss xmm0, dword [ebp - 0x110]
movss xmm5, dword [ebp - 0x10c]
addss xmm2, xmm0
movss dword [ebp - 0x184], xmm0
movss xmm3, dword [edi + 0xd4]
movss xmm4, dword [edi + 0xd8]
movaps xmm1, xmm3
addss xmm1, xmm0
movss dword [ebp - 0x104], xmm3
movaps xmm0, xmm4
movss dword [ebp - 0xfc], xmm4
addss xmm0, xmm5
movss dword [ebp - 0x178], xmm5
push 0x3c
push 0
movss dword [ebp - 0x8c], xmm1
movaps xmm1, xmm4
addss xmm1, xmm5
movss dword [ebp - 0x94], xmm3
movss dword [ebp - 0x88], xmm0
movaps xmm0, xmm3
addss xmm0, xmm2
movss dword [ebp - 0x90], xmm4
push eax
movss dword [ebp - 0x28], xmm3
movss dword [ebp - 0x158], xmm1
movss dword [ebp - 0x24], xmm4
movss dword [ebp - 0x10c], xmm0
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x1c], xmm1
mov dword [ebp - 0x154], edi
call sub.VCRUNTIME140.dll_memset
movss xmm1, dword [ebp - 0x158]
lea ecx, [ebp - 0x110]
movss xmm0, dword [ebp - 0x10c]
add esp, 0xc
subss xmm1, dword [ebp - 0xfc]
subss xmm0, dword [ebp - 0x104]
movss dword [ebp - 0x10c], xmm1
movss xmm1, dword [esi + 0x37d8]
movss dword [ebp - 0x110], xmm0
call fcn.10039850
cmp byte [ebp - 0x11c], 0
je 0x10074833
mov edx, dword [ebp - 0x114]
lea eax, [ebp - 0x94]
push 0x400
push eax
lea ecx, [ebp - 0x28]
call fcn.10039a00
add esp, 8
test al, al
je 0x1007479f
movups xmm0, xmmword [esi + 0x4688]
mov eax, dword [esi + 0x4690]
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x2c]
movups xmmword [ebp - 0x84], xmm0
push eax
movups xmm0, xmmword [esi + 0x4698]
mov dword [ebp - 0x2c], 3
movups xmmword [ebp - 0x74], xmm0
movups xmm0, xmmword [esi + 0x46a8]
movups xmmword [ebp - 0x64], xmm0
movq xmm0, qword [esi + 0x46b8]
mov esi, dword [0x10116ebc]
movq qword [ebp - 0x54], xmm0
movss xmm0, dword [ebp - 0x104]
movss dword [edi + 0xd4], xmm0
movss xmm0, dword [ebp - 0xfc]
lea ecx, [esi + 0x4724]
movss dword [edi + 0xd8], xmm0
movups xmm0, xmmword [esi + 0x3890]
movups xmmword [ebp - 0x28], xmm0
call fcn.10042040
mov edi, dword [ebp - 0x128]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], 7
movups xmm0, xmmword [edi + 0x38d0]
movups xmmword [esi + 0x3890], xmm0
mov esi, dword [0x10116ebc]
movss xmm0, dword [edi + 0x37dc]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [esi + 0x37c4]
lea ecx, [esi + 0x4730]
movss dword [ebp - 0x20], xmm0
call fcn.10041f80
movss xmm0, dword [ebp - 0x10c]
lea eax, [ebp - 0x24]
movss dword [esi + 0x37c4], xmm0
mov esi, dword [0x10116ebc]
movss xmm0, dword [edi + 0x37e0]
movss dword [ebp - 0x10c], xmm0
push eax
movss xmm0, dword [esi + 0x37c8]
lea ecx, [esi + 0x4730]
mov dword [ebp - 0x24], 8
movss dword [ebp - 0x20], xmm0
call fcn.10041f80
movss xmm0, dword [ebp - 0x10c]
lea eax, [ebp - 0x24]
movss dword [esi + 0x37c8], xmm0
mov esi, dword [0x10116ebc]
push eax
mov dword [ebp - 0x24], 2
movss xmm1, dword [esi + 0x37a0]
lea ecx, [esi + 0x4730]
movss xmm0, dword [esi + 0x37a4]
movss dword [ebp - 0x20], xmm1
movss dword [ebp - 0x1c], xmm0
call fcn.10041f80
movss xmm1, dword [ebp - 0x8c]
lea eax, [ebp - 0x110]
movss xmm0, dword [ebp - 0x88]
subss xmm1, dword [ebp - 0x94]
subss xmm0, dword [ebp - 0x90]
mov edx, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x188]
push 4
push 1
push eax
mov dword [esi + 0x37a0], 0
mov dword [esi + 0x37a4], 0
movss dword [ebp - 0x110], xmm1
movss dword [ebp - 0x10c], xmm0
call fcn.100324d0
add esp, 0xc
mov byte [ebp - 0x135], al
mov ecx, 3
call fcn.1002b980
mov esi, dword [0x10116ebc]
mov ecx, dword [esi + 0x4724]
cmp ecx, 1
jl 0x10074791
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x472c]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, 0x386
shl eax, 4
add eax, esi
movups xmmword [eax], xmm0
dec dword [esi + 0x4724]
cmp byte [ebp - 0x135], 0
jne 0x100747c4
call fcn.10032790
call fcn.10039e40
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1007e2f7
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x3e28]
mov dword [ebp - 0x154], edx
movsx ecx, word [edx + 0x132]
mov eax, dword [edx + 0x12c]
bts ecx, eax
movss xmm0, dword [edx + 0xd4]
mov word [edx + 0x132], cx
addss xmm0, dword [esi + 0x37d4]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [esi + 0x37d8]
addss xmm0, dword [edx + 0xd8]
movss dword [edx + 0xd8], xmm0
movss xmm0, dword [ebp - 0x184]
subss xmm0, dword [edx + 0x84]
movss dword [ebp - 0x184], xmm0
jmp 0x1007486d
test dword [ebx + 0x14], 0x10000000
jne 0x10074861
mov edx, dword [ebp - 0x114]
lea eax, [ebp - 0x94]
push 0x400
push eax
lea ecx, [ebp - 0x28]
call fcn.10039a00
add esp, 8
test al, al
je 0x100747a4
mov eax, dword [esi + 0x4690]
mov dword [ebp - 0x13c], eax
mov edx, dword [ebp - 0x114]
lea ecx, [ebp - 0x94]
call fcn.1002dce0
mov cl, al
mov byte [ebp - 0x137], cl
test cl, cl
je 0x10074894
mov dword [esi + 0x4918], 1
mov edx, dword [ebp - 0x114]
mov edi, dword [0x10116ebc]
test edx, edx
je 0x100748b4
add edi, 0x4a5c
mov dword [ebp - 0x144], edi
cmp dword [edi], edx
je 0x100748bc
xor edi, edi
mov dword [ebp - 0x144], edi
mov eax, dword [ebp - 0x13c]
shr eax, 8
and al, 1
mov dword [ebp - 0x13c], eax
mov eax, dword [esi + 0x3e60]
cmp eax, edx
je 0x100748f9
cmp dword [esi + 0x47ac], edx
je 0x100748f0
cmp dword [esi + 0x47a0], edx
jne 0x100748f9
cmp dword [esi + 0x47c8], 2
jne 0x100748f9
mov byte [ebp - 0x106], 1
jmp 0x10074900
mov byte [ebp - 0x106], 0
test cl, cl
je 0x10074914
cmp byte [esi + 0x36f8], 0
mov byte [ebp - 0xf6], 1
jne 0x1007491b
mov byte [ebp - 0xf6], 0
cmp byte [ebp - 0x11c], 0
je 0x100749bd
test edi, edi
je 0x100749bd
test eax, eax
jne 0x100749bd
mov eax, dword [ebp - 0x154]
xor edx, edx
mov dword [ebp - 0x160], 0x43532336
mov dword [ebp - 0x15c], 0x4c4c4f52
mov word [ebp - 0x158], 0x59
mov ecx, dword [eax + 0xc8]
mov eax, dword [eax + 0xd0]
push dword [eax + ecx*4 - 4]
lea ecx, [ebp - 0x15f]
call fcn.1002af80
mov ecx, dword [0x10116ebc]
add esp, 4
mov dword [ebp - 0x10c], eax
cmp dword [ecx + 0x3e48], eax
jne 0x100749ac
push ecx
lea ecx, [ebp - 0x15f]
mov edx, 0xb
push ecx
mov ecx, eax
call fcn.100418d0
mov eax, dword [ebp - 0x10c]
add esp, 8
cmp dword [esi + 0x3e88], eax
jne 0x100749bd
mov byte [ebp - 0xfd], 1
jmp 0x100749e1
mov eax, dword [ebp - 0x11c]
mov byte [ebp - 0xfd], 0
test al, al
je 0x10074a8e
mov byte [ebp - 0xfd], 0
test edi, edi
je 0x10074a8e
mov eax, dword [ebp - 0x154]
xor edx, edx
mov dword [ebp - 0x160], 0x43532336
mov dword [ebp - 0x15c], 0x4c4c4f52
mov word [ebp - 0x158], 0x59
mov ecx, dword [eax + 0xc8]
mov eax, dword [eax + 0xd0]
push dword [eax + ecx*4 - 4]
lea ecx, [ebp - 0x15f]
call fcn.1002af80
mov ecx, dword [0x10116ebc]
add esp, 4
mov dword [ebp - 0x10c], eax
cmp dword [ecx + 0x3e48], eax
jne 0x10074a55
push ecx
lea ecx, [ebp - 0x15f]
mov edx, 0xb
push ecx
mov ecx, eax
call fcn.100418d0
mov eax, dword [ebp - 0x10c]
add esp, 8
cmp dword [esi + 0x3e60], eax
mov eax, dword [ebp - 0x11c]
jne 0x10074a8e
mov edx, dword [ebp - 0x154]
mov cl, 1
mov byte [ebp - 0xf5], cl
mov byte [ebp - 0xf8], 0
mov byte [ebp - 0x118], 0
movss xmm0, dword [edx + 0x60]
movss dword [ebp - 0x174], xmm0
jmp 0x10074ac5
xor cl, cl
mov byte [ebp - 0xf8], 0
mov byte [ebp - 0x118], 0
mov byte [ebp - 0xf5], cl
test al, al
je 0x10074abd
mov edx, dword [ebp - 0x154]
movss xmm0, dword [edx + 0x60]
movss dword [ebp - 0x174], xmm0
jmp 0x10074ac5
xor cl, cl
mov byte [ebp - 0xf5], cl
test edi, edi
je 0x10074ad4
xor al, 1
cmp byte [edi + 0x53], al
je 0x10074ad4
mov al, 1
jmp 0x10074ad6
xor al, al
cmp byte [ebp - 0xf6], 0
mov byte [ebp - 0x107], al
jne 0x10074b13
cmp byte [ebp - 0xfd], 0
jne 0x10074b13
cmp byte [ebp - 0x106], 0
jne 0x10074b13
cmp byte [ebp - 0x13c], 0
jne 0x10074b13
mov byte [ebp - 0xfd], 0
test cl, cl
jne 0x10074b1a
mov byte [ebp - 0x105], cl
jmp 0x10074b2f
mov byte [ebp - 0xfd], 1
mov ecx, dword [ebp - 0x114]
mov byte [ebp - 0x105], 1
cmp dword [esi + 0x3e60], ecx
jne 0x10074b37
test al, al
je 0x10074e2f
mov ecx, dword [ebp - 0x130]
lea edi, [esi + 0x4a5c]
mov dword [ebp - 0x144], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10074b56
mov eax, dword [edi + 0x28]
sub ecx, edx
mov dword [ebp - 0x10c], ecx
lea edx, [ecx + 1]
mov dword [ebp - 0x104], edx
cmp edx, eax
jle 0x10074ba6
test eax, eax
je 0x10074b8b
cdq
sub eax, edx
mov edx, dword [ebp - 0x104]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x28]
jmp 0x10074b90
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x24]
push eax
call fcn.10042750
mov edx, dword [ebp - 0x104]
push edx
push dword [ebp - 0x130]
mov dword [edi + 0x24], edx
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x114]
add esp, 0xc
cmp dword [edi], eax
jne 0x10074bfd
cmp byte [ebp - 0x107], 0
jne 0x10074bfd
mov eax, dword [ebp - 0x10c]
mov byte [ebp - 0xf7], 1
cmp dword [edi + 8], eax
jne 0x10074bfd
cmp byte [edi + 0x30], 0
je 0x10074c04
push eax
push dword [ebp - 0x130]
push dword [edi + 0x20]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x10074c04
mov byte [ebp - 0xf7], 0
mov edx, dword [ebx + 0xc]
mov ecx, dword [ebp - 0x114]
inc edx
mov dword [edi], ecx
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x104], edx
cmp edx, eax
jle 0x10074c4e
test eax, eax
je 0x10074c33
cdq
sub eax, edx
mov edx, dword [ebp - 0x104]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x10]
jmp 0x10074c38
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.100427c0
mov edx, dword [ebp - 0x104]
lea eax, [edi + 0x18]
mov dword [edi + 0xc], edx
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x10074c77
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.10042750
lea eax, [edi + 0x18]
mov esi, dword [ebx + 0xc]
mov dword [eax], 0
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0xfc], ecx
lea ecx, [ecx + esi*2]
mov byte [edi + 0x30], 0
mov esi, dword [ebp - 0x128]
add ecx, 0xfffffffe
mov dword [ebp - 0x158], eax
cmp edx, ecx
jae 0x10074d13
mov edi, dword [ebx + 0xc]
mov esi, eax
cmp byte [esi], 0
je 0x10074d01
push 0
mov edx, esi
lea ecx, [ebp - 0x10c]
call fcn.1002b220
mov edx, dword [ebp - 0xfc]
add esi, eax
mov eax, dword [ebp - 0x10c]
add esp, 4
mov dword [ebp - 0x158], esi
test eax, eax
je 0x10074d01
mov ecx, dword [ebp - 0x140]
mov word [edx], ax
lea eax, [edi - 1]
add edx, 2
mov dword [ebp - 0xfc], edx
lea eax, [ecx + eax*2]
cmp edx, eax
jb 0x10074cb6
mov edi, dword [ebp - 0x144]
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x130]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x140]
mov cl, byte [ebp - 0xf7]
sar edx, 1
mov dword [edi + 4], edx
mov dword [edi + 8], eax
test cl, cl
je 0x10074d60
cmp dword [edi + 0x3c], edx
mov ecx, edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
cmovl edx, dword [edi + 0x44]
mov cl, byte [ebp - 0xf7]
mov dword [edi + 0x44], edx
jmp 0x10074dc1
mov al, byte [ebp - 0x11c]
xor al, 1
mov dword [edi + 0x38], 0
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], 0
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x3c], 0
mov word [edi + 0x51], 1
mov dword [edi + 0x58], 0
mov byte [edi + 0x50], 0
mov byte [edi + 0x53], al
mov byte [edi + 0x48], 0
mov dword [edi + 0x4c], 0
cmp byte [ebp - 0x11c], 0
jne 0x10074e22
mov eax, dword [ebp - 0x118]
mov edx, 1
test byte [ebx + 0x14], 0x10
movzx eax, al
cmovne eax, edx
cmp byte [ebp - 0x106], 0
mov dword [ebp - 0x118], eax
je 0x10074e01
test cl, cl
je 0x10074dfb
test byte [esi + 0x47b0], 4
jne 0x10074e01
mov byte [ebp - 0x118], dl
cmp byte [ebp - 0x13c], 0
jne 0x10074e1c
cmp byte [ebp - 0xf6], 0
je 0x10074e22
cmp byte [esi + 0xdd0], 0
je 0x10074e22
mov byte [ebp - 0x118], dl
test dword [ebx + 0x14], 0x2000
je 0x10074e2f
mov byte [edi + 0x48], 1
mov edx, dword [ebp - 0x114]
cmp dword [esi + 0x3e60], edx
je 0x10074e85
cmp byte [ebp - 0xfd], 0
je 0x10074e79
mov edx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x114]
call fcn.1002d8b0
mov edx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x114]
call fcn.1003b7d0
mov ecx, dword [ebp - 0x150]
call fcn.10038150
mov edx, dword [ebp - 0x114]
cmp dword [esi + 0x3e60], edx
jne 0x10074fb9
cmp byte [ebp - 0xf6], 0
je 0x10074ea3
mov ecx, 0x281
call fcn.1002a3d0
mov dword [eax + 4], edx
mov dword [eax], edx
mov word [eax + 8], 0
mov eax, dword [esi + 0x465c]
or eax, 3
cmp byte [ebp - 0x11c], 0
mov dword [esi + 0x465c], eax
jne 0x10074ec2
mov ecx, dword [ebx + 0x14]
test cl, cl
jns 0x10074ecb
or eax, 0xc
mov dword [esi + 0x465c], eax
mov ecx, 0x20e
call fcn.1002a3d0
mov ecx, 0x26c
mov dword [eax + 4], edx
mov dword [eax], edx
mov word [eax + 8], 0
call fcn.1002a3d0
mov ecx, 0x207
mov dword [eax + 4], edx
mov dword [eax], edx
mov word [eax + 8], 0
call fcn.1002a3d0
mov ecx, 0x208
mov dword [eax + 4], edx
mov dword [eax], edx
mov word [eax + 8], 0
call fcn.1002a3d0
cmp byte [ebp - 0x11c], 0
mov dword [eax + 4], edx
mov dword [eax], edx
mov word [eax + 8], 0
je 0x10074f52
mov ecx, 0x205
call fcn.1002a3d0
mov ecx, 0x206
mov dword [eax + 4], edx
mov dword [eax], edx
mov word [eax + 8], 0
call fcn.1002a3d0
mov dword [eax + 4], edx
mov dword [eax], edx
mov word [eax + 8], 0
test dword [ebx + 0x14], 0x440
je 0x10074f70
mov ecx, 0x200
call fcn.1002a3d0
mov dword [eax + 4], edx
mov dword [eax], edx
mov word [eax + 8], 0
cmp dword [esi + 0x3e60], edx
jne 0x10074fb9
test edi, edi
jne 0x10074f8b
xor edx, edx
xor ecx, ecx
call fcn.1002d8b0
mov edx, dword [ebp - 0x114]
cmp dword [esi + 0x3e60], edx
jne 0x10074fb9
cmp byte [esi + 0x36f8], 0
je 0x10074fd2
cmp byte [ebp - 0x105], 0
jne 0x10074fd2
cmp byte [ebp - 0xfd], 0
jne 0x10074fd2
mov byte [ebp - 0xf8], 1
mov cl, 1
jmp 0x10074fde
mov al, byte [ebp - 0xf8]
test edi, edi
je 0x10074fd6
cmp byte [ebp - 0xf5], 0
mov byte [ebp - 0xf8], al
je 0x10074fd6
mov cl, 1
jmp 0x10074fde
xor cl, cl
mov byte [ebp - 0xf8], al
mov byte [ebp - 0xf5], cl
test edi, edi
je 0x10075004
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x10074ff9
cmp byte [ebp - 0x118], 0
je 0x10075004
test cl, cl
je 0x10075004
mov ecx, 1
jmp 0x10075006
xor cl, cl
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x120], ecx
mov byte [ebp - 0x136], cl
mov byte [ebp - 0x135], 0
mov byte [ebp - 0x107], 0
test al, al
je 0x1007516d
test edi, edi
je 0x1007516d
cmp byte [ebp - 0xf5], 0
jne 0x10075047
test cl, cl
je 0x1007517a
mov ecx, dword [ebx + 0xc]
mov eax, dword [edi + 0x10]
inc ecx
mov dword [ebp - 0x104], ecx
cmp ecx, eax
jle 0x10075087
test eax, eax
je 0x10075068
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x10]
jmp 0x1007506d
mov ecx, 8
mov eax, dword [ebp - 0x104]
cmp ecx, eax
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.100427c0
mov ecx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x130]
mov dword [edi + 0xc], ecx
dec ecx
mov edx, dword [edi + 0x14]
mov esi, edx
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x104], edx
mov dword [ebp - 0xfc], edx
lea ecx, [esi + ecx*2]
cmp esi, ecx
mov dword [ebp - 0x140], ecx
mov esi, dword [ebp - 0x128]
jae 0x1007510f
mov esi, eax
nop dword [eax]
cmp byte [esi], 0
je 0x10075103
push 0
mov edx, esi
lea ecx, [ebp - 0x10c]
call fcn.1002b220
mov edx, dword [ebp - 0xfc]
add esi, eax
mov eax, dword [ebp - 0x10c]
add esp, 4
mov dword [ebp - 0x158], esi
test eax, eax
je 0x10075103
mov word [edx], ax
add edx, 2
mov dword [ebp - 0xfc], edx
cmp edx, dword [ebp - 0x140]
jb 0x100750c0
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x130]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x104]
sar edx, 1
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov dword [edi + 4], edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 8], eax
cmovl edx, dword [edi + 0x44]
movzx eax, byte [ebp - 0x136]
cmp ecx, edx
mov dword [edi + 0x40], ecx
mov ecx, 0
cmovne ecx, eax
mov dword [edi + 0x44], edx
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x120], ecx
cmp byte [ebp - 0xf5], 0
jne 0x10075182
test cl, cl
jne 0x10075182
cmp dword [esi + 0x3e60], edx
jne 0x10075196
test al, al
jne 0x10075196
test edi, edi
je 0x10075196
mov byte [ebp - 0x136], 1
cmp byte [edi + 0x30], al
jne 0x1007519d
mov byte [ebp - 0x136], 0
cmp byte [ebp - 0x18c], 0
je 0x10075230
mov edx, dword [esi + 0x3bb0]
cmp dword [edx + 0x14], 0x2a
ja 0x100751bb
mov eax, dword [edx + 0x2c]
jmp 0x100751da
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x100751d1
mov eax, dword [edx + 0x2c]
jmp 0x100751da
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*8]
mov dword [ebp - 0xfc], eax
lea ecx, [esi + 0x58d0]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x3bb0]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [esi + 0x3bb0]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0x3bb0]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [esi + 0x3bb0]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0xfc]
mov dword [ecx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
call fcn.10038390
mov ecx, dword [ebp - 0x114]
movss xmm1, dword [ebp - 0x94]
movss xmm0, dword [0x100856cc]
mov dword [ebp - 0x16c], 0
movss dword [ebp - 0x150], xmm1
cmp dword [esi + 0x3e60], ecx
jne 0x100757b0
mov eax, dword [edi + 8]
mov edx, dword [ebx + 0x14]
mov byte [edi + 0xe6e], 0
mov dword [edi + 0xe70], edx
mov dword [ebp - 0x16c], eax
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x34], eax
cmp byte [esi + 0xdc0], 0
mov dword [esi + 0x5bac], 1
sete al
cmp byte [ebp - 0x11c], 0
mov byte [esi + 0x3e6d], al
movss xmm7, dword [esi + 0xdb8]
subss xmm7, xmm1
subss xmm7, dword [esi + 0x37d4]
addss xmm7, dword [edi + 0x38]
je 0x100752d7
mov eax, dword [ebp - 0x154]
movss xmm2, dword [esi + 0xdbc]
subss xmm2, dword [eax + 0xd8]
jmp 0x100752e3
movss xmm2, dword [esi + 0x3bb4]
mulss xmm2, xmm0
cmp byte [ebp - 0x118], 0
mov al, byte [esi + 0x61]
mov byte [ebp - 0xf7], al
je 0x10075315
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6d], 1
jmp 0x100755f0
mov cl, byte [ebp - 0x137]
test cl, cl
je 0x100754ca
cmp word [esi + 0x3702], 2
jb 0x100754ca
cmp byte [esi + 0xdd1], 0
jne 0x100754ca
cmp byte [edi + 0x53], 0
je 0x10075358
push 0
mov edx, edi
lea ecx, [ebp - 0x30]
call fcn.10072200
movss xmm2, dword [ebp - 0x24]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.10072620
lea edx, [edi + 0x3c]
mov dword [ebp - 0x104], eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov byte [edx + 0x16], 0
movzx ecx, word [esi + 0x3702]
sub ecx, 2
test cl, 1
jne 0x10075439
test eax, eax
je 0x100753a3
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0x104]
cmp word [eax + ecx*2 - 2], 0xa
je 0x100753a3
xor cl, cl
jmp 0x100753a5
mov cl, 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x100753b1
test cl, cl
jne 0x100753d4
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10072a50
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x100753f2
mov eax, dword [edi + 0x44]
cmp dword [edi + 0x40], eax
jne 0x100753ef
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
jmp 0x100753f2
mov dword [edi + 0x3c], eax
mov edx, dword [edi + 0x3c]
mov ecx, edi
call fcn.100723c0
mov dword [edi + 0x3c], eax
mov dword [edi + 0x44], eax
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 4]
cmp ecx, edx
je 0x10075428
cmp ecx, eax
jle 0x10075418
mov dword [edi + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x10075421
mov dword [edi + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x10075428
mov dword [edi + 0x3c], ecx
cmp dword [edi + 0x3c], eax
jle 0x100755e3
mov dword [edi + 0x3c], eax
jmp 0x100755e3
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0x104]
push 0x200004
movzx esi, word [eax + ecx*2]
mov ecx, edi
call fcn.10072a50
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600005
call fcn.10072a50
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600001
call fcn.10072a50
add esp, 4
cmp esi, 0xa
je 0x100754b8
cmp byte [ebp - 0x11c], 0
je 0x100754b8
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov esi, dword [ebp - 0x128]
mov byte [edi + 0xe6c], 0
jmp 0x100755e3
cmp byte [esi + 0x36f8], 0
je 0x10075565
cmp byte [edi + 0xe6d], 0
jne 0x10075565
test cl, cl
je 0x100755f6
cmp byte [esi + 0xdd1], 0
je 0x10075532
cmp byte [edi + 0x53], 0
je 0x1007550f
push 0
mov edx, edi
lea ecx, [ebp - 0x30]
call fcn.10072200
movss xmm2, dword [ebp - 0x24]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x1007551d
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.10072620
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
jmp 0x100755e3
cmp byte [edi + 0x53], 0
je 0x1007554c
push 0
mov edx, edi
lea ecx, [ebp - 0x30]
call fcn.10072200
movss xmm2, dword [ebp - 0x24]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.10072620
mov dword [edi + 0x40], eax
mov byte [edi + 0x52], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
jmp 0x100755e3
cmp byte [esi + 0xdc0], 0
je 0x100755f6
cmp byte [edi + 0xe6d], 0
jne 0x100755ff
movss xmm0, dword [esi + 0xb4]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100755a4
movss xmm0, dword [esi + 0xb8]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100755f6
cmp byte [edi + 0x53], 0
je 0x100755be
push 0
mov edx, edi
lea ecx, [ebp - 0x30]
call fcn.10072200
movss xmm2, dword [ebp - 0x24]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x100755cc
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.10072620
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0xe6c], 1
mov edx, dword [ebx + 0x14]
mov dword [edi + 0xe68], 0xbe99999a
mov al, byte [ebp - 0xf7]
cmp byte [edi + 0xe6d], 0
je 0x1007560f
cmp byte [esi + 0xdc0], 0
jne 0x1007560f
mov byte [edi + 0xe6d], 0
cmp byte [esi + 0xdd0], 0
je 0x10075621
cmp byte [esi + 0xdd2], 0
je 0x1007562e
test al, al
je 0x10075637
cmp byte [esi + 0xdd3], 0
je 0x10075637
mov byte [ebp - 0xf6], 1
jmp 0x1007563e
mov byte [ebp - 0xf6], 0
test edx, 0x400
je 0x10075876
push 1
xor edx, edx
mov ecx, 0x200
call fcn.10038bc0
mov ecx, dword [ebp - 0x134]
add esp, 4
test al, al
mov al, byte [ebp - 0xf6]
je 0x100756cf
test al, al
jne 0x100756cf
cmp byte [esi + 0xdd1], al
jne 0x100756cf
mov edx, dword [ebx + 0x14]
test cl, cl
jne 0x100756d2
push 2
sub esp, 8
mov dword [ebp - 0x104], 9
lea ecx, [ebp - 0x104]
call fcn.10073df0
add esp, 0xc
test al, al
je 0x100756c3
push dword [ebp - 0x104]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10072a50
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0x134]
mov al, byte [ebp - 0xf6]
mov edx, dword [ebx + 0x14]
cmp dword [esi + 0x3770], 0
jle 0x100757b0
test al, al
jne 0x10075778
test cl, cl
jne 0x10075778
cmp byte [ebp - 0x106], cl
jne 0x10075778
xor ecx, ecx
mov dword [ebp - 0xfc], ecx
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esi + 0x3778]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0x104], eax
cmp eax, 9
je 0x10075766
push 2
sub esp, 8
lea ecx, [ebp - 0x104]
call fcn.10073df0
add esp, 0xc
test al, al
je 0x10075760
push dword [ebp - 0x104]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10072a50
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ebx + 0x14]
inc ecx
mov dword [ebp - 0xfc], ecx
cmp ecx, dword [esi + 0x3770]
jl 0x10075710
mov ecx, dword [esi + 0x3774]
lea eax, [esi + 0x3770]
test ecx, ecx
jns 0x100757aa
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x3770]
call fcn.100427c0
lea eax, [esi + 0x3770]
mov dword [eax], 0
mov eax, dword [ebp - 0x114]
xor cl, cl
cmp dword [esi + 0x3e60], eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [ebp - 0x140], eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov byte [ebp - 0xf6], cl
mov dword [ebp - 0x158], eax
jne 0x1007645e
cmp byte [esi + 0x3e6c], cl
jne 0x1007645e
cmp byte [ebp - 0xf8], cl
jne 0x1007645e
movss xmm0, dword [ebp - 0x178]
mov ecx, 1
subss xmm0, dword [esi + 0x37d8]
divss xmm0, dword [esi + 0x3bb4]
cvttss2si eax, xmm0
cmp eax, 1
cmovge ecx, eax
xor eax, eax
mov dword [edi + 0x4c], ecx
cmp byte [esi + 0xdd1], al
mov dword [ebp - 0x104], ecx
mov ecx, 0x400000
cmovne eax, ecx
mov dword [ebp - 0x118], eax
mov al, byte [esi + 0x61]
mov byte [ebp - 0x165], al
test al, al
je 0x10075887
cmp byte [esi + 0xdd3], 0
mov al, byte [esi + 0xdd2]
mov byte [ebp - 0x106], al
je 0x10075893
cmp byte [esi + 0xdd0], 0
jne 0x10075893
test al, al
jne 0x10075893
mov byte [ebp - 0xf7], 1
jmp 0x1007589a
mov al, byte [ebp - 0xf6]
mov ecx, dword [ebp - 0x134]
jmp 0x100756d2
mov al, byte [esi + 0xdd0]
mov byte [ebp - 0x106], al
mov byte [ebp - 0xf7], 0
mov edx, dword [ebp - 0x114]
mov ecx, 0x1239
push 0x101
call fcn.100396c0
add esp, 4
test al, al
jne 0x100758d2
mov edx, dword [ebp - 0x114]
mov ecx, 0x220a
push 0x101
call fcn.100396c0
add esp, 4
test al, al
je 0x100758fe
cmp byte [ebp - 0x134], 0
jne 0x100758fe
cmp byte [ebp - 0x18c], 0
jne 0x100758fe
cmp byte [ebp - 0x11c], 0
je 0x100758f5
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x100758fe
mov byte [ebp - 0xfd], 1
jmp 0x10075905
mov byte [ebp - 0xfd], 0
mov edx, dword [ebp - 0x114]
mov ecx, 0x1224
push 0x100
call fcn.100396c0
add esp, 4
test al, al
jne 0x1007593d
mov edx, dword [ebp - 0x114]
mov ecx, 0x1209
push 0x100
call fcn.100396c0
add esp, 4
test al, al
je 0x10075960
cmp byte [ebp - 0x18c], 0
jne 0x10075960
cmp byte [ebp - 0x11c], 0
je 0x10075957
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x10075960
mov byte [ebp - 0x16d], 1
jmp 0x10075967
mov byte [ebp - 0x16d], 0
mov edx, dword [ebp - 0x114]
mov ecx, 0x1237
push 0x101
call fcn.100396c0
add esp, 4
test al, al
jne 0x1007599f
mov edx, dword [ebp - 0x114]
mov ecx, 0x2209
push 0x101
call fcn.100396c0
add esp, 4
test al, al
je 0x100759af
cmp byte [ebp - 0x134], 0
mov byte [ebp - 0x137], 1
je 0x100759b6
mov byte [ebp - 0x137], 0
mov edx, dword [ebp - 0x114]
mov ecx, 0x123b
push 0x101
call fcn.100396c0
add esp, 4
test al, al
je 0x100759ed
cmp byte [ebp - 0x134], 0
jne 0x100759ed
cmp byte [ebp - 0x14c], 0
je 0x100759ed
mov byte [ebp - 0x167], 1
jmp 0x100759f5
xor al, al
mov byte [ebp - 0x167], al
mov edx, dword [ebp - 0x114]
mov ecx, 0x123a
push 0x101
call fcn.100396c0
add esp, 4
test al, al
jne 0x10075a35
cmp byte [ebp - 0x165], al
je 0x10075a4e
mov edx, dword [ebp - 0x114]
mov ecx, 0x323b
push 0x101
call fcn.100396c0
add esp, 4
test al, al
je 0x10075a4e
cmp byte [ebp - 0x134], 0
jne 0x10075a4e
cmp byte [ebp - 0x14c], 0
mov byte [ebp - 0x168], 1
jne 0x10075a55
mov byte [ebp - 0x168], 0
mov edx, dword [ebp - 0x114]
mov ecx, 0x1222
push 0x100
call fcn.100396c0
add esp, 4
mov byte [ebp - 0x15], al
test byte [esi + 8], 2
je 0x10075a83
test byte [esi + 0xc], 1
mov byte [ebp - 0x121], 1
jne 0x10075a8a
mov byte [ebp - 0x121], 0
push 1
xor edx, edx
mov ecx, 0x20d
call fcn.10038bc0
add esp, 4
test al, al
jne 0x10075abb
push 1
xor edx, edx
mov ecx, 0x267
call fcn.10038bc0
add esp, 4
mov byte [ebp - 0x166], 0
test al, al
je 0x10075ac2
mov byte [ebp - 0x166], 1
cmp byte [ebp - 0x121], 0
je 0x10075afe
push 0
xor edx, edx
mov ecx, 0x26e
call fcn.10038bc0
add esp, 4
test al, al
jne 0x10075af5
push 0
xor edx, edx
mov ecx, 0x26d
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075afe
mov byte [ebp - 0x105], 1
jmp 0x10075b05
mov byte [ebp - 0x105], 0
mov edx, dword [ebp - 0x114]
mov ecx, 0x20e
push 0x101
call fcn.100396c0
add esp, 4
test al, al
jne 0x10075b47
cmp byte [ebp - 0x121], al
je 0x10075b3e
push 0
xor edx, edx
mov ecx, 0x26c
call fcn.10038bc0
add esp, 4
test al, al
jne 0x10075b47
mov byte [ebp - 0x121], 0
jmp 0x10075b4e
mov byte [ebp - 0x121], 1
push 1
xor edx, edx
mov ecx, 0x201
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075bb3
cmp byte [ebp - 0xf7], 0
je 0x10075b73
mov eax, 0x200004
jmp 0x10075b87
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0x106], 0
cmovne eax, ecx
mov ecx, dword [ebp - 0x118]
or ecx, eax
push ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10072a50
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x1007642c
push 1
xor edx, edx
mov ecx, 0x202
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075be2
cmp byte [ebp - 0xf7], 0
je 0x10075bd8
mov eax, 0x200005
jmp 0x10075b87
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x10075b7d
push 1
xor edx, edx
mov ecx, 0x203
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075c58
cmp byte [ebp - 0x11c], 0
je 0x10075c58
cmp byte [esi + 0xdd0], 0
je 0x10075c3e
mov eax, dword [ebp - 0x154]
xorps xmm1, xmm1
movss xmm0, dword [eax + 0x60]
subss xmm0, dword [esi + 0x3bb4]
mov dword [eax + 0x78], 0
mov dword [eax + 0x80], 0
maxss xmm0, xmm1
movss dword [eax + 0x70], xmm0
jmp 0x1007642c
movzx eax, byte [ebp - 0xf7]
lea eax, [eax*4 + 0x200002]
or eax, dword [ebp - 0x118]
push eax
jmp 0x10075b90
push 1
xor edx, edx
mov ecx, 0x204
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075cd7
cmp byte [ebp - 0x11c], 0
je 0x10075cd7
cmp byte [esi + 0xdd0], 0
je 0x10075cbd
movss xmm0, dword [esi + 0x3bb4]
mov esi, dword [ebp - 0x154]
mov eax, dword [0x10116ebc]
addss xmm0, dword [esi + 0x60]
mov eax, dword [eax + 0x3e28]
minss xmm0, dword [eax + 0x68]
mov dword [esi + 0x78], 0
mov dword [esi + 0x80], 0
movss dword [esi + 0x70], xmm0
jmp 0x1007642c
movzx eax, byte [ebp - 0xf7]
lea eax, [eax*4 + 0x200003]
or eax, dword [ebp - 0x118]
push eax
jmp 0x10075b90
push 1
xor edx, edx
mov ecx, 0x205
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075d4c
cmp byte [ebp - 0x11c], 0
je 0x10075d4c
mov ecx, dword [ebp - 0x118]
lea edx, [edi + 0x3c]
or ecx, 0x20000e
push ecx
mov ecx, edi
call fcn.10072a50
movd xmm0, dword [ebp - 0x104]
add esp, 4
movss xmm1, dword [ebp - 0x174]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x3bb4]
subss xmm1, xmm0
movss dword [ebp - 0x174], xmm1
jmp 0x1007642c
push 1
xor edx, edx
mov ecx, 0x206
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075dbd
cmp byte [ebp - 0x11c], 0
je 0x10075dbd
mov ecx, dword [ebp - 0x118]
lea edx, [edi + 0x3c]
or ecx, 0x20000f
push ecx
mov ecx, edi
call fcn.10072a50
movd xmm0, dword [ebp - 0x104]
add esp, 4
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x3bb4]
addss xmm0, dword [ebp - 0x174]
movss dword [ebp - 0x174], xmm0
jmp 0x1007642c
push 1
xor edx, edx
mov ecx, 0x207
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075df4
mov ecx, dword [ebp - 0x118]
mov eax, ecx
or eax, 0x200006
or ecx, 0x200004
cmp byte [esi + 0xdd0], 0
cmovne ecx, eax
jmp 0x10075b8f
push 1
xor edx, edx
mov ecx, 0x208
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075e2b
mov ecx, dword [ebp - 0x118]
mov eax, ecx
or eax, 0x200007
or ecx, 0x200005
cmp byte [esi + 0xdd0], 0
cmovne ecx, eax
jmp 0x10075b8f
push 1
xor edx, edx
mov ecx, 0x20a
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075e63
cmp byte [ebp - 0x134], 0
jne 0x10075e63
cmp byte [ebp - 0xfd], 0
jne 0x10075e63
mov ecx, dword [ebp - 0x118]
or ecx, 0x200008
jmp 0x10075b8f
push 1
xor edx, edx
mov ecx, 0x20b
call fcn.10038bc0
add esp, 4
test al, al
je 0x10075ef1
cmp byte [ebp - 0x134], 0
jne 0x10075ef1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x10075ee0
cmp byte [ebp - 0x106], 0
je 0x10075e99
push 0x60000c
jmp 0x10075ec2
cmp byte [ebp - 0x165], 0
je 0x10075ee0
cmp byte [esi + 0xdd3], 0
je 0x10075ee0
cmp byte [esi + 0xdd2], 0
jne 0x10075ee0
cmp byte [esi + 0xdd0], 0
jne 0x10075ee0
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10072a50
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov ecx, dword [ebp - 0x118]
or ecx, 0x200009
jmp 0x10075b8f
cmp byte [ebp - 0x166], 0
mov cl, byte [ebp - 0x105]
jne 0x10076398
test cl, cl
jne 0x10076398
cmp byte [ebp - 0x121], cl
je 0x10075f62
test dword [ebx + 0x14], 0x100000
je 0x10075f45
mov eax, dword [edi + 8]
test eax, eax
jg 0x10075f37
mov byte [ebp - 0x120], cl
mov byte [ebp - 0xf5], cl
mov byte [ebp - 0xf8], 1
setg cl
mov byte [ebp - 0xf6], cl
jmp 0x10076432
mov cl, 1
xor dl, dl
xor ch, ch
mov byte [ebp - 0xf6], cl
mov byte [ebp - 0xf8], cl
mov byte [ebp - 0xf5], ch
jmp 0x1007643e
mov al, byte [ebp - 0x167]
test al, al
jne 0x10076360
cmp byte [ebp - 0x168], al
jne 0x10076360
cmp byte [ebp - 0x15], al
je 0x10075fa1
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
jmp 0x1007642c
mov al, byte [ebp - 0xfd]
test al, al
jne 0x100761dc
cmp byte [ebp - 0x16d], al
jne 0x100761dc
cmp byte [ebp - 0x137], al
je 0x1007642c
mov edx, dword [0x10116ebc]
mov eax, dword [edx + 0x80]
test eax, eax
je 0x10075ff4
push dword [edx + 0x88]
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x1007642c
mov edx, dword [0x10116ebc]
jmp 0x10075ff9
mov esi, 0x10082712
mov ecx, esi
lea eax, [ecx + 1]
mov dword [ebp - 0x10c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10076004
sub ecx, dword [ebp - 0x10c]
test edx, edx
je 0x1007601b
inc dword [edx + 0xb0]
lea eax, [ecx*2 + 2]
push eax
call dword [ebp - 0x158]
mov ecx, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x13c], eax
cmp byte [esi], al
je 0x100760a8
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0xfc]
call fcn.1002b220
add esp, 4
add esi, eax
cmp dword [ebp - 0xfc], 0
je 0x10076090
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xfc]
push 4
sub esp, 8
call fcn.10073df0
add esp, 0xc
test al, al
je 0x1007608b
mov ecx, dword [ebp - 0x148]
mov ax, word [ebp - 0xfc]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10076042
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x13c], edi
mov edi, dword [ebp - 0x144]
mov eax, dword [ebp - 0x13c]
xor edx, edx
mov word [ecx + eax*2], dx
test eax, eax
jle 0x100761ba
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
mov edx, dword [edi + 4]
mov dword [ebp - 0x104], edx
cmp eax, ecx
je 0x100760e2
cmp eax, edx
jle 0x100760d2
mov dword [edi + 0x40], edx
mov eax, edx
cmp ecx, edx
jle 0x100760db
mov dword [edi + 0x44], edx
mov ecx, edx
cmp eax, ecx
jne 0x100760e2
mov dword [edi + 0x3c], eax
mov edx, dword [edi + 0x3c]
cmp edx, dword [ebp - 0x104]
jle 0x100760f6
mov edx, dword [ebp - 0x104]
mov dword [edi + 0x3c], edx
mov esi, dword [edi + 4]
mov dword [ebp - 0x12c], esi
cmp eax, ecx
je 0x10076126
cmp eax, esi
jle 0x1007610c
mov eax, esi
mov dword [edi + 0x40], eax
cmp ecx, dword [ebp - 0x12c]
jle 0x1007611d
mov ecx, dword [ebp - 0x12c]
mov dword [edi + 0x44], ecx
cmp eax, ecx
jne 0x10076126
mov dword [edi + 0x3c], eax
mov edx, eax
cmp edx, dword [ebp - 0x12c]
jle 0x10076137
mov edx, dword [ebp - 0x12c]
mov dword [edi + 0x3c], edx
cmp eax, ecx
je 0x10076170
lea edx, [edi + 0x3c]
jge 0x10076153
sub ecx, eax
push ecx
push eax
mov ecx, edi
call fcn.10072900
mov edx, dword [edi + 0x40]
mov dword [edi + 0x44], edx
jmp 0x10076164
sub eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.10072900
mov edx, dword [edi + 0x44]
mov dword [edi + 0x40], edx
lea eax, [edi + 0x3c]
add esp, 8
mov dword [eax], edx
mov byte [edi + 0x52], 0
push dword [ebp - 0x13c]
mov ecx, edi
push dword [ebp - 0x148]
call fcn.100724d0
add esp, 8
test al, al
je 0x100761ad
push dword [ebp - 0x13c]
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push 0
call fcn.10073870
mov eax, dword [ebp - 0x13c]
add esp, 8
add dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov ecx, dword [ebp - 0x148]
mov byte [edi + 0xe6c], 1
test ecx, ecx
je 0x100761cd
mov eax, dword [0x10116ebc]
test eax, eax
je 0x100761cd
dec dword [eax + 0xb0]
push ecx
call dword [ebp - 0x140]
add esp, 4
jmp 0x1007642c
cmp dword [esi + 0x84], 0
je 0x100762b6
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x100761fd
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x10076202
mov ecx, dword [edi + 4]
xor esi, esi
mov al, byte [ebp - 0xf8]
mov byte [ebp - 0xf8], al
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0xfc], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.1002b4c0
mov ecx, dword [0x10116ebc]
inc eax
mov dword [ebp - 0x10c], eax
test ecx, ecx
je 0x1007623f
inc dword [ecx + 0xb0]
push eax
call dword [ebp - 0x158]
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x10c]
mov dword [ebp - 0x14c], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0xfc]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.1002b450
mov eax, dword [0x10116ebc]
add esp, 8
mov ecx, dword [eax + 0x84]
test ecx, ecx
je 0x10076298
push esi
push dword [eax + 0x88]
call ecx
mov eax, dword [0x10116ebc]
add esp, 8
test esi, esi
je 0x100762a6
test eax, eax
je 0x100762a6
dec dword [eax + 0xb0]
push esi
call dword [ebp - 0x140]
mov al, byte [ebp - 0xfd]
add esp, 4
test al, al
je 0x1007642c
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x100762da
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x1007642c
mov edx, dword [edi + 4]
cmp eax, edx
jle 0x100762fb
mov dword [edi + 0x40], edx
mov eax, edx
cmp ecx, edx
jle 0x10076304
mov dword [edi + 0x44], edx
mov ecx, edx
cmp eax, ecx
jne 0x1007630b
mov dword [edi + 0x3c], eax
cmp dword [edi + 0x3c], edx
jle 0x10076313
mov dword [edi + 0x3c], edx
cmp eax, ecx
je 0x10076357
lea edx, [edi + 0x3c]
jge 0x1007633e
sub ecx, eax
push ecx
push eax
mov ecx, edi
call fcn.10072900
mov eax, dword [edi + 0x40]
lea ecx, [edi + 0x3c]
mov dword [edi + 0x44], eax
add esp, 8
mov dword [ecx], eax
mov byte [edi + 0x52], 0
jmp 0x1007642c
sub eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.10072900
mov eax, dword [edi + 0x44]
lea ecx, [edi + 0x3c]
mov dword [edi + 0x40], eax
add esp, 8
mov dword [ecx], eax
mov byte [edi + 0x52], 0
jmp 0x1007642c
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.10072a50
mov eax, dword [edi + 0x3c]
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
jmp 0x1007642c
mov edx, dword [ebx + 0x14]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0x11c], 0
je 0x100763bb
test cl, cl
jne 0x100763bb
test al, al
je 0x100763e7
cmp byte [esi + 0xdd0], cl
jne 0x100763f0
cmp byte [esi + 0x64], 0
mov byte [ebp - 0x107], 1
je 0x10076425
cmp byte [ebp - 0x11c], 0
jne 0x10076425
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
jmp 0x1007642c
cmp byte [esi + 0xdd0], 0
jne 0x100763bb
cmp byte [ebp - 0x134], 0
jne 0x1007642c
push 2
sub esp, 8
mov dword [ebp - 0x104], 0xa
lea ecx, [ebp - 0x104]
call fcn.10073df0
add esp, 0xc
test al, al
je 0x1007642c
push dword [ebp - 0x104]
jmp 0x10075b90
mov byte [ebp - 0xf8], 1
mov cl, byte [ebp - 0xf6]
mov edx, dword [ebp - 0x120]
mov ch, byte [ebp - 0xf5]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x1007644e
test ch, ch
je 0x1007644e
mov al, 1
jmp 0x10076450
xor al, al
mov esi, dword [ebp - 0x128]
or dl, al
mov dword [ebp - 0x120], edx
xor eax, eax
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x114]
cmp dword [esi + 0x3e60], eax
jne 0x10076826
cmp byte [ebp - 0x134], 0
jne 0x1007670d
test cl, cl
je 0x100766a9
test dword [ebx + 0x14], 0x100000
je 0x100764c9
xor eax, eax
mov dword [ebp - 0x12c], 0x10082712
push eax
mov dword [ebp - 0x118], eax
lea edx, [edi + 0x3c]
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.10073d30
add esp, 8
jmp 0x100766a9
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebp - 0x130]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100764f2
test dl, dl
je 0x100764ee
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100764f2
add eax, 2
add ecx, 2
test dl, dl
jne 0x100764d2
xor eax, eax
jmp 0x100764f7
sbb eax, eax
or eax, 1
test eax, eax
je 0x100766a9
mov ecx, dword [edi + 0x24]
xor eax, eax
mov edx, dword [edi + 0x2c]
dec ecx
mov dword [ebp - 0x12c], edx
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], eax
test ecx, ecx
jle 0x10076671
lea edi, [ecx + edx]
mov esi, edx
mov dword [ebp - 0xfc], eax
test edi, edi
je 0x10076543
cmp esi, edi
jae 0x1007656d
cmp byte [esi], 0
je 0x1007656d
push edi
mov edx, esi
lea ecx, [ebp - 0x10c]
call fcn.1002b220
add esi, eax
add esp, 4
cmp dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0xfc]
je 0x1007656d
inc eax
jmp 0x10076535
mov edi, dword [ebp - 0x144]
lea edx, [eax + 1]
mov esi, dword [ebp - 0x128]
mov dword [ebp - 0x104], edx
test edx, edx
jle 0x100765ca
mov ecx, 8
mov eax, edx
cmp edx, ecx
cmovl eax, ecx
mov dword [ebp - 0x10c], eax
test eax, eax
jle 0x100765ca
mov ecx, dword [0x10116ebc]
test ecx, ecx
je 0x100765ac
inc dword [ecx + 0xb0]
add eax, eax
push eax
call dword [ebp - 0x158]
mov ecx, dword [ebp - 0x10c]
add esp, 4
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x12c]
add ecx, dword [ebp - 0x118]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0xfc], eax
lea ecx, [eax - 2]
lea ecx, [ecx + edx*2]
mov dword [ebp - 0x14c], ecx
cmp eax, ecx
jae 0x10076666
mov esi, dword [ebp - 0x10c]
mov edi, dword [ebp - 0x158]
test edi, edi
je 0x10076618
cmp esi, edi
jae 0x10076654
cmp byte [esi], 0
je 0x10076654
push edi
mov edx, esi
lea ecx, [ebp - 0x10c]
call fcn.1002b220
mov ecx, dword [ebp - 0x10c]
add esi, eax
mov eax, dword [ebp - 0xfc]
add esp, 4
test ecx, ecx
je 0x10076654
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xfc], eax
cmp eax, dword [ebp - 0x14c]
jb 0x10076610
mov edi, dword [ebp - 0x144]
mov esi, dword [ebp - 0x128]
mov edx, dword [ebp - 0x104]
xor ecx, ecx
dec edx
mov word [eax], cx
mov eax, dword [ebp - 0x1c]
jmp 0x10076673
xor edx, edx
push edx
push eax
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10073d30
add esp, 8
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x100766a2
mov eax, dword [0x10116ebc]
test eax, eax
je 0x10076698
dec dword [eax + 0xb0]
push ecx
call dword [ebp - 0x140]
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x104], edx
cmp edx, eax
jle 0x100766fb
test eax, eax
je 0x100766dd
cdq
sub eax, edx
mov edx, dword [ebp - 0x104]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1c]
jmp 0x100766e2
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x18]
push eax
call fcn.10042750
mov edx, dword [ebp - 0x104]
lea ecx, [edi + 0x18]
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.1002b450
add esp, 8
cmp byte [ebp - 0xf6], 0
je 0x100768a7
cmp byte [ebp - 0x107], 0
je 0x1007672e
mov eax, dword [ebx + 0x14]
test al, 0x20
jne 0x100768aa
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 0x12c]
test edx, edx
je 0x10076820
cmp byte [ebp - 0x17c], 0
je 0x100767e2
mov eax, dword [ebx + 0x14]
xorps xmm0, xmm0
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xe0], eax
lea eax, [ecx + 1]
cmp dword [ebx + 0xc], eax
movlpd qword [ebp - 0xe8], xmm0
cmovge eax, dword [ebx + 0xc]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xf4]
push eax
xor eax, eax
movlpd qword [ebp - 0xd4], xmm0
movlpd qword [ebp - 0xcc], xmm0
mov dword [ebp - 0xf4], 0x40000
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xec], 0
call eax
mov eax, dword [ebp - 0xe0]
add esp, 4
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebx + 0xc], eax
lea ecx, [eax - 1]
cmp dword [ebp - 0xdc], ecx
cmovl ecx, dword [ebp - 0xdc]
lea eax, [ecx + 1]
mov ecx, dword [ebx + 0xc]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebx + 0xc], ecx
cmp ecx, 1
jb 0x10076819
jbe 0x1007680e
lea eax, [ecx - 1]
push eax
push edx
push dword [ebp - 0x130]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebx + 0xc]
add esp, 0xc
mov eax, dword [ebp - 0x130]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0x135], 1
mov eax, dword [ebp - 0x114]
cmp byte [ebp - 0xf8], 0
je 0x10076840
cmp dword [esi + 0x3e60], eax
jne 0x10076840
xor edx, edx
xor ecx, ecx
call fcn.1002d8b0
mov eax, dword [ebp - 0x11c]
movss xmm3, dword [0x100857e4]
test al, al
jne 0x10076dff
mov edx, dword [ebp - 0x114]
lea ecx, [ebp - 0x94]
push 1
call fcn.1002c910
mov eax, dword [0x10116ebc]
xorps xmm3, xmm3
movss xmm6, dword [0x10085708]
add esp, 4
movups xmm2, xmmword [eax + 0x38d0]
comiss xmm3, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x3798]
movups xmmword [ebp - 0x28], xmm2
jbe 0x10076cd6
xorps xmm0, xmm0
jmp 0x10076cdd
mov eax, dword [ebx + 0x14]
test eax, 0x801c0
je 0x10076c82
test al, 0x40
je 0x100768e0
push 1
xor edx, edx
mov ecx, 0x200
call fcn.10038bc0
add esp, 4
test al, al
je 0x100768dd
mov eax, 0x40
mov ecx, 0x200
jmp 0x10076952
mov eax, dword [ebx + 0x14]
test al, al
jns 0x10076929
push 1
xor edx, edx
mov ecx, 0x203
call fcn.10038bc0
add esp, 4
test al, al
je 0x10076905
mov eax, 0x80
mov ecx, 0x203
jmp 0x10076952
push 1
xor edx, edx
mov ecx, 0x204
call fcn.10038bc0
add esp, 4
test al, al
je 0x10076926
mov eax, 0x80
mov ecx, 0x204
jmp 0x10076952
mov eax, dword [ebx + 0x14]
test eax, 0x80000
je 0x10076940
cmp byte [edi + 0xe6e], 0
je 0x10076940
mov eax, 0x80000
jmp 0x10076950
test eax, 0x100
je 0x10076c82
mov eax, 0x100
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0xc4], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xb8], 0
mov word [ebp - 0xa3], dx
mov byte [ebp - 0xa1], dl
mov dword [ebp - 0xbc], edx
cmp byte [ebp - 0x134], dl
jne 0x10076991
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov dword [ebp - 0xb0], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0xac], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0xa8], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0xb4], ecx
mov ecx, esi
mov byte [ebp - 0xa4], dl
lea edx, [esi + eax*2]
call fcn.1002b4c0
mov ecx, dword [ebp - 0x144]
mov edi, eax
mov dword [ebp - 0xa0], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.1002b4c0
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x144]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.1002b4c0
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xc4]
push eax
xor eax, eax
call eax
mov dl, byte [ebp - 0xa4]
add esp, 4
mov eax, dword [ebp - 0xa0]
mov byte [ebp - 0x105], dl
cmp eax, edi
jne 0x10076a33
test dl, dl
je 0x10076a94
mov esi, dword [ebp - 0xb0]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xfc], eax
test edi, edi
je 0x10076a4c
cmp esi, edi
jae 0x10076a76
cmp byte [esi], 0
je 0x10076a76
push edi
mov edx, esi
lea ecx, [ebp - 0x10c]
call fcn.1002b220
add esi, eax
add esp, 4
cmp dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0xfc]
je 0x10076a76
inc eax
jmp 0x10076a3e
mov edi, dword [ebp - 0x144]
mov dl, byte [ebp - 0x105]
mov dword [edi + 0x3c], eax
mov eax, dword [ebp - 0xa0]
mov byte [edi + 0xe6c], 1
jmp 0x10076a9a
mov edi, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [ebp - 0x104]
jne 0x10076aac
test dl, dl
je 0x10076b0d
cmp ecx, eax
jne 0x10076ab5
mov eax, dword [edi + 0x3c]
jmp 0x10076b04
mov esi, dword [ebp - 0xb0]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xfc], eax
test edi, edi
je 0x10076ace
cmp esi, edi
jae 0x10076af8
cmp byte [esi], 0
je 0x10076af8
push edi
mov edx, esi
lea ecx, [ebp - 0x10c]
call fcn.1002b220
add esi, eax
add esp, 4
cmp dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0xfc]
je 0x10076af8
inc eax
jmp 0x10076ac0
mov ecx, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x144]
mov dl, byte [ebp - 0x105]
mov dword [edi + 0x40], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x158]
jne 0x10076b23
test dl, dl
je 0x10076c7c
cmp eax, ecx
jne 0x10076b2c
mov eax, dword [edi + 0x40]
jmp 0x10076b75
mov esi, dword [ebp - 0xb0]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xfc], eax
test edi, edi
je 0x10076b45
cmp esi, edi
jae 0x10076b6f
cmp byte [esi], 0
je 0x10076b6f
push edi
mov edx, esi
lea ecx, [ebp - 0x10c]
call fcn.1002b220
add esi, eax
add esp, 4
cmp dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0xfc]
je 0x10076b6f
inc eax
jmp 0x10076b37
mov edi, dword [ebp - 0x144]
cmp byte [ebp - 0x105], 0
mov dword [edi + 0x44], eax
je 0x10076c7c
push dword [ebp - 0xac]
mov edx, dword [ebp - 0xb0]
mov ecx, edi
call fcn.10073ff0
mov esi, dword [ebp - 0xac]
add esp, 4
mov ecx, dword [ebp - 0x16c]
cmp esi, ecx
jle 0x10076bed
cmp byte [ebp - 0x17c], 0
je 0x10076bed
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x10076bea
test eax, eax
je 0x10076bd3
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10076bdb
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.100427c0
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0xb0]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0x10c], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0xfc], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x104], eax
cmp ecx, eax
jae 0x10076c5d
mov edi, dword [ebp - 0x10c]
nop dword [eax + eax]
cmp byte [edi], 0
je 0x10076c51
push 0
mov edx, edi
lea ecx, [ebp - 0x10c]
call fcn.1002b220
add edi, eax
add esp, 4
mov eax, dword [ebp - 0x10c]
test eax, eax
je 0x10076c51
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0x104]
jb 0x10076c20
mov edi, dword [ebp - 0x144]
mov ecx, dword [ebp - 0xfc]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0xac]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
mov esi, dword [ebp - 0x128]
cmp byte [ebp - 0x134], 0
jne 0x1007672e
mov ecx, dword [ebp - 0x130]
mov eax, dword [edi + 0x20]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076cb8
test dl, dl
je 0x10076cb4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076cb8
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076c98
xor eax, eax
jmp 0x10076cbd
sbb eax, eax
or eax, 1
test eax, eax
je 0x1007672e
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [edi + 8]
jmp 0x10076734
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm5, dword [0x100857e4]
movss xmm4, dword [0x100856cc]
movss xmm2, dword [ebp - 0x24]
comiss xmm3, xmm2
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si edx, xmm0
jbe 0x10076d08
xorps xmm0, xmm0
jmp 0x10076d0f
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm2, dword [ebp - 0x20]
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 8
or edx, eax
comiss xmm3, xmm2
jbe 0x10076d2f
xorps xmm0, xmm0
jmp 0x10076d36
movaps xmm0, xmm6
minss xmm0, xmm2
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x10
or edx, eax
comiss xmm3, xmm1
jbe 0x10076d51
xorps xmm0, xmm0
jmp 0x10076d58
movaps xmm0, xmm6
minss xmm0, xmm1
push dword [ebp - 0x88]
movss xmm2, dword [esi + 0x37dc]
push dword [ebp - 0x8c]
mulss xmm0, xmm5
push dword [ebp - 0x90]
push dword [ebp - 0x94]
addss xmm0, xmm4
cvttss2si ecx, xmm0
shl ecx, 0x18
or ecx, edx
mov dl, 1
call fcn.1002c220
movss xmm0, dword [ebp - 0x150]
add esp, 0x10
movss xmm2, dword [ebp - 0x90]
movaps xmm1, xmm0
movss xmm4, dword [ebp - 0x184]
movaps xmm7, xmm2
addss xmm7, dword [ebp - 0x178]
movss xmm3, dword [0x100857e4]
addss xmm1, xmm4
mov eax, dword [ebp - 0x11c]
movss dword [ebp - 0x48], xmm0
movss dword [ebp - 0x44], xmm2
movss dword [ebp - 0x3c], xmm7
movss dword [ebp - 0x158], xmm1
movss dword [ebp - 0x40], xmm1
movaps xmm1, xmm0
addss xmm1, dword [esi + 0x37d4]
movaps xmm0, xmm2
addss xmm0, dword [esi + 0x37d8]
jmp 0x10076e63
movss xmm5, dword [ebp - 0x150]
movss xmm1, dword [ebp - 0x90]
movaps xmm0, xmm5
movss xmm4, dword [ebp - 0x184]
movaps xmm7, xmm1
addss xmm7, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x154]
addss xmm0, xmm4
movss dword [ebp - 0x48], xmm5
movss dword [ebp - 0x44], xmm1
movss dword [ebp - 0x150], xmm5
movss dword [ebp - 0x3c], xmm7
movss dword [ebp - 0x40], xmm0
movss xmm1, dword [ecx + 0xd4]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [ecx + 0xd8]
cmp byte [ebp - 0x136], 0
xorps xmm6, xmm6
movss dword [ebp - 0x18], xmm1
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x34], xmm0
movss dword [ebp - 0x104], xmm6
movss dword [ebp - 0xfc], xmm6
je 0x10076e99
mov edx, dword [edi + 0x20]
mov dword [ebp - 0x130], edx
jmp 0x10076e9f
mov edx, dword [ebp - 0x130]
cmp byte [ebp - 0xf5], 0
jne 0x10077056
cmp byte [ebp - 0x120], 0
jne 0x10077056
test al, al
je 0x10076f19
mov edi, dword [ebp - 0x130]
xor ecx, ecx
mov dl, byte [edx]
inc edi
test dl, dl
je 0x10076ee2
nop dword [eax]
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x10076ed0
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0x13c], edi
cmp al, 0xa
je 0x10076ef5
cmp al, 0xd
je 0x10076ef5
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x3bb4]
movss dword [ebp - 0xfc], xmm0
movaps xmm0, xmm4
movss dword [ebp - 0x104], xmm0
jmp 0x10076f5a
mov eax, dword [ebp - 0x114]
cmp dword [esi + 0x3e60], eax
jne 0x10076f2e
mov edi, dword [edi + 8]
add edi, edx
jmp 0x10076f45
mov ecx, edx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10076f33
sub ecx, edx
mov edx, dword [ebp - 0x130]
lea edi, [edx + ecx]
mov eax, edi
mov dword [ebp - 0x13c], edi
sub eax, edx
cmp eax, 0x200000
jge 0x10077c91
mov eax, dword [0x10116ebc]
movss xmm5, dword [0x10085708]
movups xmm2, xmmword [eax + 0x3860]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x3798]
movups xmmword [ebp - 0x28], xmm2
jbe 0x10076f8b
movaps xmm0, xmm6
jmp 0x10076f92
movaps xmm0, xmm5
minss xmm0, xmm2
movss xmm4, dword [0x100856cc]
movss xmm2, dword [ebp - 0x24]
comiss xmm6, xmm2
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si edx, xmm0
jbe 0x10076fb5
movaps xmm0, xmm6
jmp 0x10076fbc
movaps xmm0, xmm5
minss xmm0, xmm2
movss xmm2, dword [ebp - 0x20]
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 8
or edx, eax
comiss xmm6, xmm2
jbe 0x10076fdc
movaps xmm0, xmm6
jmp 0x10076fe3
movaps xmm0, xmm5
minss xmm0, xmm2
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x10
or edx, eax
comiss xmm6, xmm1
jbe 0x10076ffe
movaps xmm5, xmm6
jmp 0x10077002
minss xmm5, xmm1
mulss xmm5, xmm3
lea eax, [ebp - 0x48]
movss xmm2, dword [esi + 0x3bb4]
addss xmm5, xmm4
cvttss2si ecx, xmm5
shl ecx, 0x18
or ecx, edx
xor edx, edx
cmp byte [ebp - 0x11c], dl
cmovne eax, edx
push eax
push ecx
mov dword [esp], edx
lea eax, [ebp - 0x38]
push edi
push dword [ebp - 0x130]
push ecx
push eax
mov eax, dword [ebp - 0x154]
push dword [esi + 0x3bb0]
mov ecx, dword [eax + 0x248]
call fcn.1004d010
jmp 0x10077c91
mov eax, dword [edi + 8]
xorps xmm3, xmm3
mov ecx, dword [edi + 0x14]
add eax, edx
xor edx, edx
mov dword [ebp - 0x13c], eax
xorps xmm5, xmm5
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x14c], 0xfffffc18
mov dword [ebp - 0x12c], 0xfffffc18
cmp byte [ebp - 0xf5], dl
je 0x100770bd
mov eax, dword [edi + 0x3c]
mov edx, 1
mov dword [ebp - 0x14c], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x16c], eax
cmp byte [ebp - 0x120], 0
je 0x100770f0
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0x118]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x12c], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x11c]
movzx eax, al
add edx, eax
xor eax, eax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x118]
movzx eax, word [eax]
mov esi, eax
mov dword [ebp - 0x10c], esi
mov esi, dword [ebp - 0x128]
test ax, ax
je 0x1007718b
mov edi, dword [ebp - 0x14c]
xor esi, esi
movzx eax, ax
nop word [eax + eax]
cmp ax, 0xa
jne 0x10077167
inc esi
cmp edi, 0xffffffff
jne 0x1007714b
cmp ecx, dword [ebp - 0x16c]
jb 0x1007714b
dec edx
mov edi, esi
test edx, edx
jle 0x10077173
cmp dword [ebp - 0x12c], 0xffffffff
jne 0x10077167
cmp ecx, dword [ebp - 0x148]
jb 0x10077167
dec edx
mov dword [ebp - 0x12c], esi
test edx, edx
jle 0x10077173
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
jne 0x10077130
mov dword [ebp - 0x14c], edi
mov edi, dword [ebp - 0x144]
mov dword [ebp - 0x140], esi
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x12c]
inc eax
cmp dword [ebp - 0x14c], 0xffffffff
mov edx, eax
mov dword [ebp - 0x140], eax
cmovne edx, dword [ebp - 0x14c]
cmp ecx, 0xffffffff
mov dword [ebp - 0x17c], edx
mov edx, dword [ebp - 0x118]
cmove ecx, eax
mov dword [ebp - 0x12c], ecx
mov ecx, dword [ebp - 0x16c]
cmp ecx, edx
jbe 0x100771de
cmp word [ecx - 2], 0xa
je 0x100771de
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x100771d0
movaps xmm4, xmm6
mov eax, dword [0x10116ebc]
movaps xmm1, xmm6
movss dword [ebp - 0x14c], xmm4
mov edx, dword [eax + 0x3bb0]
movss xmm2, dword [eax + 0x3bb4]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x16c]
jae 0x10077272
mov esi, dword [ebp - 0x16c]
mov edi, edx
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0xa
jne 0x10077228
maxss xmm4, xmm1
movaps xmm1, xmm6
jmp 0x1007724a
cmp eax, 0xd
je 0x1007724a
mov edx, eax
cmp edx, dword [edi]
jge 0x1007723d
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x10077242
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp ecx, esi
jb 0x10077214
comiss xmm1, xmm4
mov edi, dword [ebp - 0x144]
mov esi, dword [ebp - 0x128]
movss dword [ebp - 0x14c], xmm4
jbe 0x10077272
movaps xmm4, xmm1
movss dword [ebp - 0x14c], xmm1
cmp dword [ebp - 0x12c], 0
movd xmm1, dword [ebp - 0x17c]
movss xmm0, dword [esi + 0x3bb4]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movss dword [ebp - 0x10c], xmm1
jl 0x10077355
mov ecx, dword [ebp - 0x148]
mov edx, dword [ebp - 0x118]
cmp ecx, edx
jbe 0x100772be
nop
cmp word [ecx - 2], 0xa
je 0x100772be
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x100772b0
movaps xmm3, xmm6
mov eax, dword [0x10116ebc]
movaps xmm1, xmm6
mov edx, dword [eax + 0x3bb0]
movss xmm2, dword [eax + 0x3bb4]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x148]
jae 0x1007733e
mov esi, dword [ebp - 0x148]
mov edi, edx
nop dword [eax]
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0xa
jne 0x10077304
maxss xmm3, xmm1
movaps xmm1, xmm6
jmp 0x10077326
cmp eax, 0xd
je 0x10077326
mov edx, eax
cmp edx, dword [edi]
jge 0x10077319
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x1007731e
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp ecx, esi
jb 0x100772f0
comiss xmm1, xmm3
mov edi, dword [ebp - 0x144]
mov esi, dword [ebp - 0x128]
jbe 0x1007733e
movaps xmm3, xmm1
movd xmm5, dword [ebp - 0x12c]
movss xmm0, dword [esi + 0x3bb4]
cvtdq2ps xmm5, xmm5
mulss xmm5, xmm0
mov ecx, dword [ebp - 0x11c]
test cl, cl
je 0x1007738b
movd xmm1, dword [ebp - 0x140]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movss dword [ebp - 0xfc], xmm1
movss xmm1, dword [ebp - 0x184]
movaps xmm0, xmm1
movss dword [ebp - 0x104], xmm0
jmp 0x10077393
movss xmm1, dword [ebp - 0x184]
cmp byte [ebp - 0xf5], 0
je 0x100774f5
cmp byte [edi + 0xe6c], 0
je 0x100774f5
test dword [ebx + 0x14], 0x1000
jne 0x1007740e
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm1
comiss xmm2, xmm4
subss xmm1, dword [esi + 0x37d4]
mulss xmm0, dword [0x100856b8]
movss dword [ebp - 0x184], xmm1
movaps xmm1, xmm4
jbe 0x100773eb
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x100773fc
subss xmm1, dword [ebp - 0x184]
comiss xmm1, xmm2
jb 0x10077415
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x10077415
mov dword [edi + 0x38], 0
test cl, cl
je 0x100774c5
movss xmm4, dword [ebp - 0x10c]
movss xmm7, dword [ebp - 0x174]
movaps xmm0, xmm4
subss xmm0, dword [esi + 0x3bb4]
comiss xmm7, xmm0
jbe 0x10077446
movaps xmm7, xmm6
maxss xmm7, xmm0
jmp 0x10077479
movss xmm2, dword [esi + 0x37d8]
movaps xmm0, xmm4
movss xmm1, dword [ebp - 0x178]
addss xmm2, xmm2
subss xmm1, xmm2
subss xmm0, xmm1
comiss xmm0, xmm7
jb 0x10077479
movaps xmm7, xmm4
subss xmm7, dword [ebp - 0x178]
addss xmm7, xmm2
comiss xmm6, xmm7
movss xmm1, dword [esi + 0x37d8]
addss xmm1, xmm1
addss xmm1, dword [ebp - 0xfc]
subss xmm1, dword [ebp - 0x178]
maxss xmm1, xmm6
jbe 0x100774a3
movaps xmm1, xmm6
jmp 0x100774a7
minss xmm1, xmm7
mov eax, dword [ebp - 0x154]
movss xmm0, dword [eax + 0x60]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x34], xmm0
movss dword [eax + 0x60], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x40]
movss xmm7, dword [ebp - 0x3c]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [ebp - 0x48]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0x18], xmm0
cmp byte [ebp - 0x120], 0
movss xmm4, dword [edi + 0x38]
movss dword [ebp - 0x148], xmm4
je 0x100778b7
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0x118]
movss xmm4, dword [0x10085708]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xf5], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0x118]
lea edx, [eax + edx*2]
mov dword [ebp - 0x140], edx
je 0x1007754d
movaps xmm1, xmm4
jmp 0x10077555
movss xmm1, dword [0x100856d4]
mov eax, dword [0x10116ebc]
movups xmm2, xmmword [eax + 0x3b50]
mulss xmm1, dword [eax + 0x3798]
comiss xmm6, xmm2
movaps xmm0, xmm2
shufps xmm0, xmm2, 0xff
movups xmmword [ebp - 0x28], xmm2
mulss xmm1, xmm0
jbe 0x10077582
movaps xmm0, xmm6
jmp 0x10077589
movaps xmm0, xmm4
minss xmm0, xmm2
movss xmm4, dword [0x100857e4]
movss xmm2, dword [ebp - 0x24]
comiss xmm6, xmm2
mulss xmm0, xmm4
addss xmm0, dword [0x100856cc]
cvttss2si ecx, xmm0
jbe 0x100775b0
movaps xmm0, xmm6
jmp 0x100775bc
movss xmm0, dword [0x10085708]
minss xmm0, xmm2
movss xmm2, dword [ebp - 0x20]
mulss xmm0, xmm4
addss xmm0, dword [0x100856cc]
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm2
jbe 0x100775e0
movaps xmm0, xmm6
jmp 0x100775ec
movss xmm0, dword [0x10085708]
minss xmm0, xmm2
movss xmm2, dword [0x100856cc]
mulss xmm0, xmm4
addss xmm0, xmm2
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x1007760f
movaps xmm0, xmm6
jmp 0x1007761b
movss xmm0, dword [0x10085708]
minss xmm0, xmm1
mulss xmm0, xmm4
addss xmm0, xmm2
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x174], eax
test cl, cl
je 0x1007764e
movss dword [ebp - 0x16c], xmm6
movss dword [ebp - 0x17c], xmm6
jmp 0x1007766e
movss xmm0, dword [0x10085824]
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [0x10085730]
movss dword [ebp - 0x17c], xmm0
movss xmm4, dword [ebp - 0x34]
addss xmm4, xmm5
addss xmm3, dword [ebp - 0x18]
subss xmm4, xmm6
subss xmm3, dword [ebp - 0x148]
movss dword [ebp - 0x178], xmm4
cmp esi, edx
jae 0x100778a9
mov ecx, dword [ebp - 0x128]
mov edi, dword [ebp - 0x174]
nop dword [eax]
nop dword [eax + eax]
movaps xmm0, xmm7
addss xmm0, dword [ecx + 0x3bb4]
comiss xmm4, xmm0
ja 0x1007789d
movss xmm0, dword [ebp - 0x44]
comiss xmm0, xmm4
jbe 0x100776ef
cmp esi, edx
jae 0x10077878
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x10077878
cmp esi, edx
jb 0x100776d6
jmp 0x1007789d
mov eax, dword [0x10116ebc]
movaps xmm5, xmm6
movaps xmm1, xmm6
mov edx, dword [eax + 0x3bb0]
movss xmm2, dword [eax + 0x3bb4]
mov dword [ebp - 0x174], edx
divss xmm2, dword [edx + 0x10]
mov edx, dword [ebp - 0x140]
cmp esi, edx
jae 0x10077769
nop dword [eax]
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x1007775f
cmp eax, 0xd
je 0x10077759
mov edx, eax
mov eax, dword [ebp - 0x174]
cmp edx, dword [eax]
jge 0x10077746
mov eax, dword [eax + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x1007774b
movss xmm0, dword [eax + 0xc]
mov edx, dword [ebp - 0x140]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, edx
jb 0x10077720
jmp 0x10077769
movaps xmm5, xmm6
maxss xmm5, xmm1
movaps xmm1, xmm6
maxss xmm1, xmm5
comiss xmm6, xmm1
jb 0x100777a2
mov eax, dword [ecx + 0x3bb0]
cmp dword [eax], 0x20
jle 0x1007778a
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x1007778f
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x100856cc]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm2, dword [ebp - 0x16c]
addss xmm1, xmm3
subss xmm2, dword [ecx + 0x3bb4]
movss xmm0, dword [ebp - 0x17c]
addss xmm3, xmm6
movss xmm5, dword [ebp - 0x158]
addss xmm0, xmm4
minss xmm1, xmm5
addss xmm2, xmm4
maxss xmm3, dword [ebp - 0x150]
minss xmm0, xmm7
movss dword [ebp - 0x20], xmm1
maxss xmm2, dword [ebp - 0x44]
movss dword [ebp - 0x28], xmm3
comiss xmm0, dword [ebp - 0x44]
movss dword [ebp - 0x24], xmm2
movss dword [ebp - 0x1c], xmm0
jbe 0x10077878
comiss xmm7, xmm2
jbe 0x10077878
comiss xmm1, dword [ebp - 0x150]
jbe 0x10077878
comiss xmm5, xmm3
jbe 0x10077878
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x20]
push edi
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x248]
call fcn.1004c980
movss xmm0, dword [ebp - 0x40]
xorps xmm6, xmm6
movss xmm4, dword [ebp - 0x38]
movss xmm7, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x140]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [ebp - 0x48]
movss dword [ebp - 0x18], xmm4
movss xmm4, dword [ebp - 0x178]
movss dword [ebp - 0x150], xmm0
movss xmm3, dword [ebp - 0x18]
addss xmm4, dword [ecx + 0x3bb4]
subss xmm3, dword [ebp - 0x148]
movss dword [ebp - 0x178], xmm4
cmp esi, edx
jb 0x100776b0
mov edi, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x11c]
mov esi, dword [ebp - 0x128]
movss xmm4, dword [ebp - 0x148]
test cl, cl
jne 0x100778d2
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x130]
cmp eax, 0x200000
jge 0x100779fe
mov eax, dword [0x10116ebc]
movss xmm7, dword [0x10085708]
movups xmm2, xmmword [eax + 0x3860]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x3798]
movups xmmword [ebp - 0x28], xmm2
jbe 0x10077903
movaps xmm0, xmm6
jmp 0x1007790a
movaps xmm0, xmm7
minss xmm0, xmm2
movss xmm3, dword [0x100857e4]
movss xmm5, dword [0x100856cc]
movss xmm2, dword [ebp - 0x24]
comiss xmm6, xmm2
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si edx, xmm0
jbe 0x10077935
movaps xmm0, xmm6
jmp 0x1007793c
movaps xmm0, xmm7
minss xmm0, xmm2
movss xmm2, dword [ebp - 0x20]
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 8
or edx, eax
comiss xmm6, xmm2
jbe 0x1007795c
movaps xmm0, xmm6
jmp 0x10077963
movaps xmm0, xmm7
minss xmm0, xmm2
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or edx, eax
comiss xmm6, xmm1
jbe 0x1007797e
movaps xmm0, xmm6
jmp 0x10077985
movaps xmm0, xmm7
minss xmm0, xmm1
mulss xmm0, xmm3
lea eax, [ebp - 0x48]
movss xmm2, dword [esi + 0x3bb4]
addss xmm0, xmm5
cvttss2si ecx, xmm0
movss xmm0, dword [ebp - 0x18]
shl ecx, 0x18
subss xmm0, xmm4
or ecx, edx
xor edx, edx
cmp byte [ebp - 0x11c], dl
cmovne eax, edx
push eax
push ecx
mov dword [esp], edx
lea eax, [ebp - 0x180]
push dword [ebp - 0x13c]
movss dword [ebp - 0x180], xmm0
push dword [ebp - 0x130]
movss xmm0, dword [ebp - 0x34]
push ecx
push eax
mov eax, dword [ebp - 0x154]
subss xmm0, xmm6
push dword [esi + 0x3bb0]
mov ecx, dword [eax + 0x248]
movss dword [ebp - 0x17c], xmm0
call fcn.1004d010
cmp byte [ebp - 0xf5], 0
je 0x10077c91
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0x63], 0
je 0x10077a6d
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x10077a6d
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x180], xmm0
fld qword [ebp - 0x180]
fld qword [0x10085728]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x100856f0]
fstp qword [ebp - 0x180]
movsd xmm1, qword [ebp - 0x180]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x10077a6d
xor cl, cl
jmp 0x10077a6f
mov cl, 1
movss xmm1, dword [ebp - 0x14c]
xorps xmm6, xmm6
movss xmm0, dword [ebp - 0x34]
movss xmm7, dword [0x100856cc]
addss xmm1, dword [ebp - 0x38]
addss xmm0, dword [ebp - 0x10c]
subss xmm1, dword [ebp - 0x148]
subss xmm0, xmm6
cvttss2si eax, xmm1
movd xmm1, eax
cvttss2si eax, xmm0
movss xmm0, dword [0x10085708]
cvtdq2ps xmm1, xmm1
movd xmm3, eax
movss dword [ebp - 0x10c], xmm1
movaps xmm5, xmm1
movss dword [ebp - 0x28], xmm1
addss xmm5, xmm0
cvtdq2ps xmm3, xmm3
movss dword [ebp - 0x20], xmm5
movss dword [ebp - 0x17c], xmm3
movaps xmm2, xmm3
movaps xmm4, xmm3
subss xmm2, dword [esi + 0x3bb4]
subss xmm4, dword [0x10085718]
addss xmm2, xmm7
movss dword [ebp - 0x1c], xmm4
movss dword [ebp - 0x24], xmm2
test cl, cl
je 0x10077c59
comiss xmm4, dword [ebp - 0x44]
jbe 0x10077c59
movss xmm0, dword [ebp - 0x3c]
comiss xmm0, xmm2
jbe 0x10077c51
comiss xmm5, dword [ebp - 0x48]
jbe 0x10077c51
movss xmm0, dword [ebp - 0x40]
comiss xmm0, xmm1
jbe 0x10077c51
mov eax, dword [0x10116ebc]
movups xmm3, xmmword [eax + 0x3860]
comiss xmm6, xmm3
movaps xmm2, xmm3
shufps xmm2, xmm3, 0xff
mulss xmm2, dword [eax + 0x3798]
movups xmmword [ebp - 0x164], xmm3
jbe 0x10077b67
xorps xmm0, xmm0
jmp 0x10077b73
movss xmm0, dword [0x10085708]
minss xmm0, xmm3
movss xmm5, dword [0x100857e4]
movss xmm3, dword [ebp - 0x160]
comiss xmm6, xmm3
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x10077b99
xorps xmm0, xmm0
jmp 0x10077ba5
movss xmm0, dword [0x10085708]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x15c]
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x10077bc8
xorps xmm0, xmm0
jmp 0x10077bd4
movss xmm0, dword [0x10085708]
minss xmm0, xmm3
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm2
jbe 0x10077bef
xorps xmm0, xmm0
jmp 0x10077bfb
movss xmm0, dword [0x10085708]
minss xmm0, xmm2
mulss xmm0, xmm5
push ecx
mov dword [esp], 0x3f800000
movss dword [ebp - 0x15c], xmm1
addss xmm0, xmm7
movss dword [ebp - 0x158], xmm4
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x248]
call fcn.1004c850
movss xmm1, dword [ebp - 0x10c]
movss xmm3, dword [ebp - 0x17c]
movss xmm0, dword [0x10085708]
cmp byte [ebp - 0x134], 0
jne 0x10077c91
subss xmm1, xmm0
mov byte [esi + 0x59b4], 1
movss xmm0, dword [esi + 0x3bb4]
subss xmm3, xmm0
movss dword [esi + 0x59c0], xmm0
movss dword [esi + 0x59b8], xmm1
movss dword [esi + 0x59bc], xmm3
cmp byte [ebp - 0x18c], 0
je 0x10077c9f
call fcn.100384d0
cmp byte [ebp - 0x11c], 0
je 0x10077db7
mov ecx, dword [0x10116ebc]
movss xmm1, dword [ebp - 0xfc]
addss xmm1, dword [esi + 0x37d8]
movss xmm0, dword [ebp - 0x104]
mov eax, dword [ecx + 0x3e28]
movss dword [ebp - 0x110], xmm0
movss dword [ebp - 0x10c], xmm1
mov byte [eax + 0x90], 1
mov eax, dword [ecx + 0x3e28]
cmp byte [eax + 0x93], 0
jne 0x10077d4c
movss xmm3, dword [eax + 0xd4]
lea ecx, [ebp - 0x110]
movaps xmm4, xmm3
movss dword [ebp - 0x28], xmm3
addss xmm4, xmm0
movss xmm0, dword [eax + 0xd8]
movaps xmm2, xmm0
movss dword [ebp - 0x24], xmm0
addss xmm2, xmm1
movss xmm1, dword [0x10085824]
movss dword [ebp - 0x20], xmm4
movss dword [ebp - 0x1c], xmm2
call fcn.10039850
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x28]
call fcn.10039a00
add esp, 8
mov esi, dword [esi + 0x466c]
mov eax, esi
mov edi, dword [ebp - 0x128]
or eax, 0x401
mov dword [edi + 0x466c], eax
call fcn.10032790
mov eax, dword [edi + 0x4690]
mov ecx, dword [ebp - 0x7c]
and eax, 0x80
or ecx, eax
mov dword [edi + 0x466c], esi
mov dword [ebp - 0x10c], ecx
call fcn.10039e40
mov esi, edi
cmp dword [esi + 0x4688], 0
jne 0x10077db7
mov eax, dword [ebp - 0x114]
mov dword [esi + 0x4688], eax
mov eax, dword [ebp - 0x80]
mov dword [esi + 0x468c], eax
mov eax, dword [ebp - 0x10c]
mov dword [esi + 0x4690], eax
cmp byte [esi + 0x5a1c], 0
je 0x10077dfa
cmp byte [ebp - 0x18c], 0
jne 0x10077dfa
mov eax, dword [0x10116ebc]
lea ecx, [ebp - 0x17]
push dword [ebp - 0x13c]
mov edx, dword [ebp - 0x130]
mov dword [eax + 0x5a34], ecx
lea ecx, [ebp - 0x113]
mov dword [eax + 0x5a38], ecx
lea ecx, [ebp - 0x38]
call fcn.100403a0
add esp, 4
movss xmm0, dword [ebp - 0x190]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x10077e58
movss xmm0, dword [ebp - 0x8c]
xor edx, edx
addss xmm0, dword [esi + 0x37ec]
mov ecx, dword [ebp - 0x188]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [ebp - 0x90]
addss xmm0, dword [esi + 0x37d8]
movss dword [ebp - 0x10c], xmm0
push dword [ebp - 0x10c]
push dword [ebp - 0x110]
push 1
call fcn.1002ba10
add esp, 0xc
mov dl, byte [ebp - 0x135]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x10077e82
test ecx, 0x8000000
jne 0x10077e82
mov eax, dword [0x10116ebc]
or dword [eax + 0x4690], 4
mov word [eax + 0x3e70], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0x107]
cmovne eax, ecx
jmp 0x100747a6