Function at 0x466a80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61d2a7
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x218
mov eax, dword [0x6efb00]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov dword [ebp - 0x164], esi
mov dword [ebp - 0x1a4], ecx
mov ecx, esi
call fcn.00464220
mov ecx, dword [esi + 0x1c]
mov edx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [esi + 4], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x38], 0
mov dword [ebp - 0x18c], edx
test ecx, ecx
je 0x466b35
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x466b29
dec dword [eax + 0xb4]
push ecx
call edx
mov edx, dword [ebp - 0x18c]
add esp, 4
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x466b51
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x466b4b
dec dword [eax + 0xb4]
push ecx
call edx
add esp, 4
xor eax, eax
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov byte [esi + 0x19], 0
mov byte [ebp - 0x15d], 0
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 4], eax
xor edi, edi
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x1c8], edi
mov byte [ebp - 4], 1
mov ecx, dword [esi + 0x54]
mov edx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov dword [ebp - 0x1a0], ecx
mov dword [ebp - 0x174], 8
mov dword [ebp - 0x180], edx
test ecx, ecx
jle 0x466c13
cmp ecx, 8
mov eax, ecx
cmovl eax, dword [ebp - 0x174]
mov dword [ebp - 0x168], eax
test eax, eax
jle 0x466c13
mov ecx, dword [0x7ca4d8]
test ecx, ecx
je 0x466be6
inc dword [ecx + 0xb4]
imul eax, eax, 0x54
push eax
call edx
mov ecx, dword [ebp - 0x168]
add esp, 4
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x1d8], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1dc], ecx
mov ecx, dword [esi + 0x3c]
mov dword [ebp - 0x178], ecx
test ecx, ecx
jle 0x466c78
cmp ecx, 8
mov eax, ecx
cmovl eax, dword [ebp - 0x174]
mov dword [ebp - 0x168], eax
test eax, eax
jle 0x466c78
mov ecx, dword [0x7ca4d8]
test ecx, ecx
je 0x466c4c
inc dword [ecx + 0xb4]
lea eax, [eax + eax*2]
shl eax, 3
push eax
call edx
mov ecx, dword [ebp - 0x178]
mov edi, eax
mov eax, dword [ebp - 0x168]
add esp, 4
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x1c8], edi
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1d0], ecx
imul ecx, dword [ebp - 0x1a0], 0x54
push ecx
push 0
push dword [ebp - 0x190]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x178]
add esp, 0xc
lea eax, [eax + eax*2]
shl eax, 3
push eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x184], 0
cmp dword [esi + 0x54], 0
jle 0x466e07
mov esi, dword [ebp - 0x190]
xor edx, edx
mov ecx, dword [ebp - 0x164]
add esi, 0x34
mov dword [ebp - 0x188], edx
mov dword [ebp - 0x194], esi
nop
mov eax, dword [ecx + 0x5c]
add eax, edx
mov dword [esi - 4], 0xffffffff
xor edx, edx
mov dword [ebp - 0x174], eax
cmp dword [ecx + 0x3c], edx
jle 0x466e77
mov edi, dword [ebp - 0x194]
or esi, 0xffffffff
mov ecx, esi
cmp esi, 0xffffffff
jne 0x466d39
mov ecx, dword [ebp - 0x164]
or esi, esi
mov eax, dword [eax + 0x74]
mov ecx, dword [ecx + 0x44]
cmp eax, dword [ecx + edx*4]
jne 0x466d25
mov dword [edi - 4], edx
mov esi, edx
mov eax, dword [ebp - 0x164]
inc edx
mov ecx, esi
cmp edx, dword [eax + 0x3c]
mov eax, dword [ebp - 0x174]
jl 0x466d06
mov edi, dword [ebp - 0x198]
cmp ecx, 0xffffffff
je 0x466e77
push dword [ebx + 8]
mov esi, dword [ebp - 0x194]
push eax
push dword [ebp - 0x1a4]
lea ecx, [esi - 0x34]
call fcn.00466070
test al, al
je 0x466e77
mov ecx, dword [ebp - 0x174]
mov edx, 0x6e4e98
mov eax, dword [ecx + 0x40]
shr eax, 8
and al, 1
or byte [ebp - 0x15d], al
mov eax, dword [esi - 4]
lea eax, [eax + eax*2]
mov dword [ebp - 0x168], eax
mov eax, dword [ecx + 0x30]
test eax, eax
cmovne edx, eax
mov dword [esi - 8], edx
cmp word [edx], 0
je 0x466dbb
nop
movzx eax, word [edx + 2]
test ax, ax
je 0x466dbb
mov ecx, eax
cmp dword [esi], ecx
cmovge ecx, dword [esi]
add edx, 4
mov dword [esi], ecx
cmp word [edx], 0
jne 0x466da0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x184]
inc dword [edi + edx*8]
mov ecx, dword [esi]
cmp dword [edi + edx*8 + 4], ecx
cmovge ecx, dword [edi + edx*8 + 4]
inc eax
mov dword [edi + edx*8 + 4], ecx
add esi, 0x54
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x188]
add edx, 0x78
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x188], edx
cmp eax, dword [ecx + 0x54]
jl 0x466ce0
mov eax, dword [ebp - 0x1a0]
xor esi, esi
mov dword [ebp - 0x170], esi
test eax, eax
jle 0x467224
mov edx, dword [ebp - 0x190]
add edx, 0x44
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x17c], edx
mov eax, dword [edx - 0x14]
mov ecx, dword [edx - 0x10]
add ecx, 0x20
sar ecx, 5
lea esi, [eax + eax*2]
mov dword [ebp - 0x1a4], ecx
mov eax, dword [edx - 4]
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x168], eax
cmp ecx, eax
jle 0x466ec5
test eax, eax
je 0x466e83
cdq
sub eax, edx
mov edx, dword [ebp - 0x17c]
sar eax, 1
add eax, dword [ebp - 0x168]
mov dword [ebp - 0x174], eax
jmp 0x466e8d
mov byte [ebp - 0x15d], 0
jmp 0x46806b
mov dword [ebp - 0x174], 8
cmp dword [ebp - 0x174], ecx
lea eax, [edx - 8]
mov dword [ebp - 0x184], eax
mov eax, ecx
cmovg eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x184]
push eax
call fcn.0045dbd0
mov edx, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x184]
jmp 0x466ec8
lea eax, [edx - 8]
mov dword [eax], ecx
lea eax, [ecx*4]
push eax
push 0
push dword [edx]
call sub.VCRUNTIME140.dll_memset
lea ecx, [esi*8 + 0xc]
add esp, 0xc
add ecx, edi
mov dword [ebp - 0x174], ecx
cmp dword [ecx], 0
jne 0x466f51
mov esi, dword [edi + esi*8 + 4]
mov eax, dword [ecx + 4]
add esi, 0x20
sar esi, 5
mov dword [ebp - 0x168], eax
cmp esi, eax
jle 0x466f3a
test eax, eax
je 0x466f1c
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, dword [ebp - 0x168]
jmp 0x466f21
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, dword [ebp - 0x174]
push eax
call fcn.0045dbd0
mov ecx, dword [ebp - 0x174]
lea eax, [esi*4]
mov dword [ecx], esi
push eax
push 0
push dword [ecx + 8]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x17c]
mov eax, dword [edx - 0x18]
mov dword [ebp - 0x1ac], eax
cmp word [eax], 0
je 0x467047
nop word [eax + eax]
movzx ecx, word [eax + 2]
test cx, cx
je 0x467041
movzx edi, word [eax]
cmp edi, ecx
ja 0x467028
nop dword [eax + eax]
mov eax, dword [ebp - 0x194]
mov ecx, edi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov esi, edi
mov ecx, dword [ebp - 0x198]
sar esi, 5
mov dword [ebp - 0x168], edx
mov eax, dword [ecx + eax*8 + 0x14]
test dword [eax + esi*4], edx
jne 0x46700f
mov eax, dword [ebp - 0x17c]
push edi
push dword [eax - 0x2c]
call fcn.00485650
mov edx, dword [ebp - 0x17c]
add esp, 8
test eax, eax
je 0x467015
inc dword [edx - 0xc]
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x198]
inc dword [ecx + eax*8 + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x168]
mov edx, dword [ebp - 0x198]
or dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x194]
mov eax, dword [edx + eax*8 + 0x14]
or dword [eax + esi*4], ecx
inc dword [ebp - 0x170]
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x1ac]
inc edi
movzx eax, word [eax + 2]
cmp edi, eax
jle 0x466f90
mov eax, dword [ebp - 0x1ac]
add eax, 4
mov dword [ebp - 0x1ac], eax
cmp word [eax], 0
jne 0x466f70
mov edi, dword [ebp - 0x198]
add edx, 0x54
sub dword [ebp - 0x188], 1
mov dword [ebp - 0x17c], edx
jne 0x466e32
mov esi, dword [ebp - 0x190]
mov eax, dword [ebp - 0x1a0]
add esi, 0x50
mov dword [ebp - 0x184], esi
mov dword [ebp - 0x188], eax
mov edi, dword [esi - 0x18]
cmp edi, dword [esi - 4]
jle 0x4670e5
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x46708f
inc dword [eax + 0xb4]
mov eax, edi
shl eax, 5
push eax
call dword [ebp - 0x180]
mov edx, dword [esi]
add esp, 4
mov dword [ebp - 0x168], eax
test edx, edx
je 0x4670e0
mov ecx, dword [esi - 8]
shl ecx, 5
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [esi]
add esp, 0xc
test ecx, ecx
je 0x4670d0
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x4670d0
dec dword [eax + 0xb4]
push ecx
call dword [ebp - 0x18c]
mov eax, dword [ebp - 0x168]
add esp, 4
mov dword [esi], eax
mov dword [esi - 4], edi
mov ecx, dword [esi - 0xc]
mov edx, ecx
mov eax, dword [esi - 0x14]
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x174], ecx
lea eax, [ecx + eax*4]
mov dword [ebp - 0x1b8], eax
cmp ecx, eax
jae 0x4671cb
nop word [eax + eax]
mov eax, dword [edx]
mov dword [ebp - 0x168], eax
test eax, eax
je 0x4671b6
xor edi, edi
mov eax, 1
mov ecx, edi
shl eax, cl
test dword [ebp - 0x168], eax
je 0x4671ac
mov ecx, dword [esi - 8]
mov eax, edx
sub eax, dword [ebp - 0x1a4]
xorps xmm0, xmm0
shl eax, 3
and eax, 0xffffffe0
add eax, edi
movzx eax, ax
movups xmmword [ebp - 0x208], xmm0
mov dword [ebp - 0x200], eax
mov eax, dword [esi - 4]
cmp ecx, eax
jne 0x46718b
inc ecx
test eax, eax
je 0x46716f
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi - 4]
jmp 0x467174
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
lea ecx, [esi - 8]
call fcn.00468210
mov edx, dword [ebp - 0x174]
xorps xmm0, xmm0
mov eax, dword [esi - 8]
mov ecx, dword [esi]
shl eax, 5
movups xmmword [ecx + eax], xmm0
movups xmm0, xmmword [ebp - 0x208]
movups xmmword [ecx + eax + 0x10], xmm0
inc dword [esi - 8]
mov esi, dword [ebp - 0x184]
inc edi
cmp edi, 0x20
jb 0x467122
add edx, 4
mov dword [ebp - 0x174], edx
cmp edx, dword [ebp - 0x1b8]
jb 0x467110
mov ecx, dword [esi - 0xc]
test ecx, ecx
je 0x467200
mov eax, dword [0x7ca4d8]
mov dword [esi - 0x10], 0
mov dword [esi - 0x14], 0
test eax, eax
je 0x4671ef
dec dword [eax + 0xb4]
push ecx
call dword [ebp - 0x18c]
add esp, 4
mov dword [esi - 0xc], 0
add esi, 0x54
sub dword [ebp - 0x188], 1
mov dword [ebp - 0x184], esi
jne 0x467078
mov edi, dword [ebp - 0x198]
mov esi, dword [ebp - 0x170]
jmp 0x46722c
xor esi, esi
mov dword [ebp - 0x170], esi
cmp dword [ebp - 0x178], 0
jle 0x46729f
mov esi, dword [ebp - 0x18c]
lea eax, [edi + 0x14]
mov edi, dword [ebp - 0x178]
mov dword [ebp - 0x174], eax
nop word [eax + eax]
mov ecx, dword [eax]
test ecx, ecx
je 0x467285
mov dword [eax - 4], 0
mov dword [eax - 8], 0
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x467273
dec dword [eax + 0xb4]
push ecx
call esi
mov eax, dword [ebp - 0x174]
add esp, 4
mov dword [eax], 0
add eax, 0x18
mov dword [ebp - 0x174], eax
sub edi, 1
jne 0x467250
mov edi, dword [ebp - 0x198]
mov esi, dword [ebp - 0x170]
test edi, edi
je 0x4672de
mov eax, dword [0x7ca4d8]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1d0], 0
test eax, eax
je 0x4672c6
dec dword [eax + 0xb4]
push edi
call dword [ebp - 0x18c]
add esp, 4
xor eax, eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x1c8], eax
xor eax, eax
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x1f0], eax
test esi, esi
jle 0x46733c
cmp esi, 8
mov edi, esi
mov ecx, 8
cmovl edi, ecx
test edi, edi
jle 0x46733c
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x46731a
inc dword [eax + 0xb4]
lea eax, [edi + edi*2]
shl eax, 3
push eax
call dword [ebp - 0x180]
add esp, 4
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1f4], edi
lea ecx, [esi + esi*2]
mov dword [ebp - 0x1f8], esi
shl ecx, 3
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov edi, dword [ebp - 0x180]
mov byte [ebp - 4], 7
mov eax, dword [0x7ca4d8]
push 0x40000
test eax, eax
je 0x467386
inc dword [eax + 0xb4]
call edi
mov esi, eax
add esp, 4
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x46739c
inc dword [eax + 0xb4]
push 0x20
call edi
movss xmm0, dword [0x6e6a00]
xor ecx, ecx
mov dword [ebp - 0x194], eax
xor edi, edi
mov dword [ebp - 0x11c], eax
add esp, 4
mov dword [eax], esi
mov eax, 1
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x120], 8
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x1b0], edi
test eax, eax
jle 0x467731
mov esi, dword [ebp - 0x190]
xor edx, edx
mov dword [ebp - 0x1c0], eax
add esi, 0x48
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x19c], edx
nop
mov ecx, dword [eax + 0x5c]
add ecx, edx
cmp dword [esi - 0x10], 0
je 0x4676fe
mov edx, dword [ebp - 0x174]
lea eax, [edi + edi*2]
add edi, dword [esi - 0x10]
mov dword [ebp - 0x1b0], edi
lea eax, [edx + eax*8]
mov dword [esi - 0x20], eax
movss xmm1, dword [ecx + 0x44]
ucomiss xmm1, xmm0
movss dword [ebp - 0x168], xmm1
lahf
test ah, 0x44
jnp 0x4674a0
mov byte [ebp - 0x169], 1
xor edi, edi
movd xmm0, edi
mov eax, edi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x6e6f30]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
call fcn.00619f00
movss xmm1, dword [ebp - 0x168]
mov edx, 0xff
cmp eax, edx
movzx ecx, al
cmovbe edx, ecx
mov byte [ebp + edi - 0x118], dl
inc edi
cmp edi, 0x100
jb 0x467456
jmp 0x4674a7
mov byte [ebp - 0x169], 0
cmp dword [esi], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1bc], 0
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x188], eax
jle 0x4676f8
xor ecx, ecx
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x1a8], ecx
nop dword [eax + eax]
mov edi, dword [esi + 8]
add edi, ecx
push dword [edi + 0x18]
push dword [esi - 0x30]
call fcn.00485650
add esp, 8
test eax, eax
je 0x4676cd
push dword [esi - 0x28]
push eax
push dword [esi - 0x30]
call fcn.00486020
add esp, 0xc
test eax, eax
jne 0x4676cd
test byte [esi - 0x2c], 0x20
mov eax, dword [esi - 0x30]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x184], eax
je 0x467533
push eax
call fcn.0048d2e0
mov eax, dword [ebp - 0x184]
add esp, 4
test byte [esi - 0x2c], 0x40
je 0x467542
push eax
call fcn.0048d3d0
add esp, 4
mov eax, dword [ebp - 0x184]
add eax, 0x18
je 0x4676cd
mov eax, dword [esi - 0x30]
push dword [esi - 0x24]
mov eax, dword [eax + 0x54]
push eax
mov dword [ebp - 0x168], eax
call fcn.00488340
add esp, 8
test eax, eax
jne 0x4676cd
mov eax, dword [esi - 0x30]
mov ecx, dword [eax + 0x54]
mov eax, dword [ecx + 0x50]
add ecx, 0x4c
mov dword [edi], eax
mov dword [ebp - 0x1b8], ecx
mov eax, dword [ecx]
mov dword [edi + 4], eax
mov eax, dword [esi - 0x30]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x64]
mov dword [edi + 8], eax
mov eax, dword [esi - 0x30]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x68]
neg eax
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x168]
mov eax, dword [eax + 0x40]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x10], xmm0
cmp byte [ecx + 0x12], 7
sete al
mov byte [edi + 0x14], al
test ecx, ecx
je 0x4676cd
mov eax, dword [edi + 4]
imul eax, dword [edi]
mov edx, dword [ebp - 0x178]
shl eax, 2
mov dword [ebp - 0x1a4], eax
add eax, edx
cmp eax, 0x40000
jle 0x467655
xor eax, eax
mov dword [ebp - 0x178], eax
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x46760f
inc dword [eax + 0xb4]
push 0x40000
call dword [ebp - 0x180]
add esp, 4
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x168]
lea ecx, [ebp - 0x124]
push eax
call fcn.0045dd20
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x178]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1ac], ecx
jmp 0x467661
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x1ac]
mov ecx, dword [eax + ecx*4 - 4]
lea eax, [ebp - 0x118]
add ecx, edx
add edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x178], edx
xor edx, edx
cmp byte [ebp - 0x169], dl
mov dword [edi + 0x1c], ecx
cmove eax, edx
push eax
push dword [edi]
push ecx
push dword [ebp - 0x1b8]
call fcn.00466270
mov edx, dword [ebp - 0x170]
mov eax, dword [esi - 0x20]
mov ecx, dword [edi]
add ecx, dword [ebp - 0x188]
mov dword [eax + edx + 4], ecx
mov eax, dword [esi - 0x20]
mov ecx, dword [edi + 4]
add ecx, dword [ebp - 0x188]
mov dword [eax + edx + 8], ecx
mov ecx, dword [esi - 0x20]
mov eax, dword [ecx + edx + 8]
imul eax, dword [ecx + edx + 4]
add dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x1a8]
inc eax
add dword [ebp - 0x170], 0x18
add ecx, 0x20
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1a8], ecx
cmp eax, dword [esi]
jl 0x4674e0
mov eax, dword [ebp - 0x164]
mov edx, dword [ebp - 0x19c]
add esi, 0x54
movss xmm0, dword [0x6e6a00]
add edx, 0x78
sub dword [ebp - 0x1c0], 1
mov edi, dword [ebp - 0x1b0]
mov dword [ebp - 0x19c], edx
jne 0x467410
mov ecx, dword [ebp - 0x17c]
movd xmm0, ecx
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x46774a
sqrtsd xmm0, xmm0
jmp 0x46774f
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov eax, dword [ebp - 0x164]
cvtsd2ss xmm0, xmm0
mov edi, dword [eax + 8]
mov dword [eax + 0x28], 0
cvttss2si ecx, xmm0
inc ecx
test edi, edi
jg 0x4677a7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x6e6b04]
jb 0x467783
mov edi, 0x1000
jmp 0x4677a7
comiss xmm0, dword [0x6e6b00]
jb 0x467793
mov edi, 0x800
jmp 0x4677a7
comiss xmm0, dword [0x6e6af4]
mov edi, 0x200
mov ecx, 0x400
cmovae edi, ecx
mov ecx, eax
mov dword [ecx + 0x24], edi
xor ecx, ecx
sub edi, dword [eax + 0xc]
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], ecx
test edi, edi
jle 0x467809
cmp edi, 8
mov esi, edi
mov edx, 8
cmovl esi, edx
test esi, esi
jle 0x467809
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x4677e5
inc dword [eax + 0xb4]
lea eax, [esi + esi*2]
shl eax, 2
push eax
call dword [ebp - 0x180]
mov ecx, eax
mov dword [ebp - 0x1e8], esi
mov eax, dword [ebp - 0x164]
add esp, 4
mov dword [ebp - 0x1e4], ecx
mov edx, dword [eax + 0x24]
sub edx, dword [eax + 0xc]
push edi
push ecx
mov ecx, 0x8000
mov dword [ebp - 0x1ec], edi
sub ecx, dword [eax + 0xc]
push ecx
lea ecx, [ebp - 0x15c]
call fcn.00466710
xor edx, edx
add esp, 0xc
mov dword [ebp - 0x170], edx
mov eax, dword [ebp - 0x164]
mov edi, dword [eax + 0x48]
mov dword [ebp - 0x168], edi
test edi, edi
jle 0x467882
cmp edi, 8
mov eax, edi
mov ecx, 8
cmovl eax, ecx
test eax, eax
jle 0x467882
mov ecx, dword [0x7ca4d8]
test ecx, ecx
je 0x46786a
inc dword [ecx + 0xb4]
lea eax, [eax + eax*2]
shl eax, 3
push eax
call dword [ebp - 0x180]
mov edx, eax
add esp, 4
mov dword [ebp - 0x170], edx
lea ecx, [edi + edi*2]
shl ecx, 3
push ecx
push 0
push edx
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x164]
xor esi, esi
add esp, 0xc
cmp dword [eax + 0x48], esi
jle 0x4678d8
mov edx, dword [ebp - 0x170]
xor ecx, ecx
add edx, 8
mov edi, eax
nop
mov eax, dword [edi + 0x50]
lea ecx, [ecx + 0x1c]
inc esi
lea edx, [edx + 0x18]
movzx eax, word [ecx + eax - 0x1c]
mov dword [edx - 0x1c], eax
mov eax, dword [edi + 0x50]
movzx eax, word [ecx + eax - 0x1a]
mov dword [edx - 0x18], eax
cmp esi, dword [edi + 0x48]
jl 0x4678b0
mov edi, dword [ebp - 0x168]
mov edx, dword [ebp - 0x170]
lea ecx, [ebp - 0x15c]
push edi
call fcn.0045efb0
add esp, 4
test edi, edi
jle 0x467949
mov edx, dword [ebp - 0x170]
xor esi, esi
add edx, 0x10
nop dword [eax]
cmp dword [edx + 4], 0
je 0x46793e
mov eax, dword [ebp - 0x164]
movzx ecx, word [edx - 4]
mov eax, dword [eax + 0x50]
mov word [esi + eax + 4], cx
mov eax, dword [ebp - 0x164]
movzx ecx, word [edx]
mov eax, dword [eax + 0x50]
mov word [esi + eax + 6], cx
mov eax, dword [ebp - 0x164]
mov ecx, dword [edx - 8]
add ecx, dword [edx]
cmp dword [eax + 0x28], ecx
cmovge ecx, dword [eax + 0x28]
mov dword [eax + 0x28], ecx
add esi, 0x1c
add edx, 0x18
sub edi, 1
jne 0x467900
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x46796d
mov ecx, dword [0x7ca4d8]
test ecx, ecx
je 0x467963
dec dword [ecx + 0xb4]
push eax
call dword [ebp - 0x18c]
add esp, 4
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x1a0]
test eax, eax
jle 0x4679e6
mov esi, dword [ebp - 0x190]
add esi, 0x38
mov dword [ebp - 0x1b0], eax
nop word [eax + eax]
mov eax, dword [esi]
test eax, eax
je 0x4679da
mov edx, dword [esi - 0x10]
lea ecx, [ebp - 0x15c]
push eax
call fcn.004668a0
xor edi, edi
add esp, 4
cmp dword [esi], edi
jle 0x4679da
xor edx, edx
mov eax, dword [esi - 0x10]
cmp dword [edx + eax + 0x14], 0
je 0x4679d2
mov ecx, dword [edx + eax + 0x10]
add ecx, dword [edx + eax + 8]
mov eax, dword [ebp - 0x164]
cmp dword [eax + 0x28], ecx
cmovge ecx, dword [eax + 0x28]
mov dword [eax + 0x28], ecx
inc edi
add edx, 0x18
cmp edi, dword [esi]
jl 0x4679b0
add esi, 0x54
sub dword [ebp - 0x1b0], 1
jne 0x467990
mov edi, dword [ebp - 0x164]
test byte [edi], 1
mov eax, dword [edi + 0x28]
jne 0x467a19
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
mov esi, dword [edi + 0x24]
inc eax
movss xmm2, dword [0x6e6a00]
movaps xmm1, xmm2
mov dword [edi + 0x28], eax
movd xmm0, esi
cvtdq2ps xmm0, xmm0
imul esi, eax
cmp byte [ebp - 0x15d], 0
divss xmm1, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov eax, dword [0x7ca4d8]
movss dword [edi + 0x2c], xmm1
divss xmm2, xmm0
movss dword [edi + 0x30], xmm2
je 0x467a75
shl esi, 2
test eax, eax
je 0x467a69
inc dword [eax + 0xb4]
push esi
call dword [ebp - 0x180]
mov dword [edi + 0x20], eax
jmp 0x467a89
test eax, eax
je 0x467a7f
inc dword [eax + 0xb4]
push esi
call dword [ebp - 0x180]
mov dword [edi + 0x1c], eax
add esp, 4
push esi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x1a0]
xor al, al
add esp, 0xc
mov byte [ebp - 0x169], al
test ecx, ecx
jle 0x467ee8
mov eax, dword [ebp - 0x190]
xor edx, edx
add eax, 8
mov dword [ebp - 0x1a4], edx
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x168], ecx
nop dword [eax + eax]
cmp dword [eax + 0x30], 0
je 0x467ec1
mov ecx, dword [edi + 0x5c]
movss xmm0, dword [eax - 4]
add ecx, edx
movss dword [ebp - 0x1b8], xmm0
movss xmm0, dword [eax]
mov dword [ebp - 0x1b0], ecx
cmp byte [ecx + 0x3c], 0
mov edx, dword [ecx + 0x74]
mov dword [ebp - 0x1c0], edx
movss dword [ebp - 0x1b4], xmm0
lea esi, [edx + 0x38]
lea edi, [edx + 0x50]
jne 0x467b56
mov ecx, edx
call fcn.00464750
mov edx, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1b0]
movss xmm0, dword [ebp - 0x1b8]
mov eax, dword [ecx + 0x10]
mov dword [edx + 0x10], eax
xor eax, eax
movss dword [edi], xmm0
movss xmm0, dword [ebp - 0x1b4]
mov word [esi], ax
mov eax, dword [ebp - 0x164]
mov dword [edx + 0x34], ecx
mov dword [edx + 0x30], eax
movss dword [edx + 0x54], xmm0
movss xmm0, dword [edi]
addss xmm0, dword [0x6e69c0]
inc word [esi]
mov edi, dword [ebp - 0x164]
movss xmm2, dword [ecx + 0x28]
movss dword [ebp - 0x180], xmm2
cvttss2si eax, xmm0
mov esi, dword [edi + 0xc]
mov dword [ebp - 0x170], esi
mov dword [ebp - 0x1b8], 0
movd xmm1, eax
mov eax, dword [ebp - 0x184]
cvtdq2ps xmm1, xmm1
cmp dword [eax + 0x30], 0
addss xmm1, dword [ecx + 0x2c]
movss dword [ebp - 0x17c], xmm1
jle 0x467eae
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x188], edx
mov edi, dword [eax + 0x48]
mov eax, dword [eax + 0x20]
add edi, edx
add eax, ecx
cmp dword [eax + 4], 0
jne 0x467bdd
cmp dword [eax + 8], 0
je 0x467e72
mov edx, dword [eax + 0xc]
sub esp, 0x20
movd xmm0, dword [edi + 8]
add edx, esi
mov esi, dword [eax + 0x10]
mov eax, dword [edi]
add esi, dword [ebp - 0x170]
movd xmm7, dword [edi + 0xc]
mov ecx, dword [edi + 4]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x19c], esi
mov esi, dword [ebp - 0x164]
mov dword [ebp - 0x178], edx
movd xmm6, eax
add eax, edx
addss xmm0, xmm2
movd xmm4, edx
cvtdq2ps xmm7, xmm7
cvtdq2ps xmm6, xmm6
addss xmm7, xmm1
movss dword [ebp - 0x1b4], xmm0
movd xmm1, dword [esi + 0x24]
addss xmm6, xmm0
movd xmm0, dword [esi + 0x28]
mov esi, dword [ebp - 0x19c]
cvtdq2ps xmm1, xmm1
movd xmm2, eax
lea eax, [ecx + esi]
cvtdq2ps xmm4, xmm4
cvtdq2ps xmm2, xmm2
divss xmm4, xmm1
divss xmm2, xmm1
movd xmm1, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [edi + 0x18]
movd xmm3, esi
cvtdq2ps xmm1, xmm1
mov esi, dword [ebp - 0x1c0]
cvtdq2ps xmm3, xmm3
divss xmm1, xmm0
divss xmm3, xmm0
movss xmm0, dword [edi + 0x10]
movd xmm5, ecx
mov ecx, esi
cvtdq2ps xmm5, xmm5
movss dword [esp + 0x1c], xmm0
movss dword [esp + 0x18], xmm1
addss xmm5, xmm7
movss dword [esp + 0x14], xmm2
movss dword [esp + 0x10], xmm3
movss xmm3, dword [ebp - 0x1b4]
movss dword [esp + 0xc], xmm4
movss dword [esp + 8], xmm5
movss dword [esp + 4], xmm6
movss dword [esp], xmm7
push eax
push dword [ebp - 0x1b0]
call fcn.00464e40
cmp byte [edi + 0x14], 0
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x28]
lea eax, [eax + eax*4]
je 0x467cf1
or dword [ecx + eax*8 - 0x28], 1
mov byte [ebp - 0x169], 1
mov eax, dword [ebp - 0x164]
mov edx, dword [edi + 0x1c]
mov ecx, dword [edi]
mov dword [ebp - 0x1a8], edx
mov esi, dword [eax + 0x24]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x1b4], esi
imul esi, dword [ebp - 0x19c]
mov dword [ebp - 0x19c], 0
add esi, dword [ebp - 0x178]
test eax, eax
je 0x467db1
add eax, esi
cmp dword [edi + 4], 0
mov dword [ebp - 0x178], eax
jle 0x467e5c
lea esi, [ecx*4]
mov dword [ebp - 0x1c4], esi
lea esi, [edx + 3]
mov dword [ebp - 0x1a8], esi
xor edx, edx
test ecx, ecx
jle 0x467d82
nop dword [eax + eax]
mov ecx, dword [ebp - 0x178]
lea esi, [esi + 4]
mov al, byte [esi - 4]
mov byte [edx + ecx], al
inc edx
mov ecx, dword [edi]
cmp edx, ecx
jl 0x467d60
mov eax, dword [ebp - 0x178]
mov esi, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x19c]
add eax, dword [ebp - 0x1b4]
inc edx
add esi, dword [ebp - 0x1c4]
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x1a8], esi
cmp edx, dword [edi + 4]
jl 0x467d55
jmp 0x467e5c
cmp dword [edi + 4], 0
mov eax, dword [ebp - 0x164]
mov eax, dword [eax + 0x20]
lea eax, [eax + esi*4]
mov dword [ebp - 0x178], eax
jle 0x467e5c
mov esi, dword [ebp - 0x1b4]
shl esi, 2
mov dword [ebp - 0x1b4], esi
lea esi, [ecx*4]
mov dword [ebp - 0x1e0], esi
nop dword [eax]
xor esi, esi
test ecx, ecx
jle 0x467e32
mov edx, eax
mov eax, dword [ebp - 0x1a8]
sub eax, dword [ebp - 0x178]
mov dword [ebp - 0x1c4], eax
nop word [eax + eax]
mov eax, dword [edx + eax]
lea edx, [edx + 4]
mov dword [edx - 4], eax
inc esi
mov ecx, dword [edi]
mov eax, dword [ebp - 0x1c4]
cmp esi, ecx
jl 0x467e10
mov eax, dword [ebp - 0x178]
mov edx, dword [ebp - 0x1a8]
mov esi, dword [ebp - 0x19c]
add eax, dword [ebp - 0x1b4]
inc esi
add edx, dword [ebp - 0x1e0]
mov dword [ebp - 0x19c], esi
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x1a8], edx
cmp esi, dword [edi + 4]
jl 0x467df0
mov esi, dword [ebp - 0x170]
movss xmm2, dword [ebp - 0x180]
movss xmm1, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x184]
inc ecx
add dword [ebp - 0x188], 0x20
add dword [ebp - 0x1bc], 0x18
mov edx, dword [ebp - 0x188]
cmp ecx, dword [eax + 0x30]
mov dword [ebp - 0x1b8], ecx
mov ecx, dword [ebp - 0x1bc]
jl 0x467bc3
mov edi, dword [ebp - 0x164]
mov edx, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x168]
mov dword [eax + 0x20], 0
add eax, 0x54
add edx, 0x78
sub ecx, 1
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x1a4], edx
mov dword [ebp - 0x168], ecx
jne 0x467ad0
mov al, byte [ebp - 0x169]
xor esi, esi
mov byte [edi + 0x19], al
cmp dword [ebp - 0x1ac], esi
jle 0x467f2f
mov edi, dword [ebp - 0x194]
nop dword [eax + eax]
mov ecx, dword [edi + esi*4]
test ecx, ecx
je 0x467f16
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x467f16
dec dword [eax + 0xb4]
push ecx
call dword [ebp - 0x18c]
inc esi
add esp, 4
cmp esi, dword [ebp - 0x1ac]
jl 0x467f00
mov edi, dword [ebp - 0x164]
mov eax, dword [ebp - 0x1a0]
test eax, eax
jle 0x467fab
mov esi, dword [ebp - 0x190]
mov edi, dword [ebp - 0x18c]
add esi, 0x18
mov ecx, dword [esi + 0x38]
test ecx, ecx
je 0x467f64
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x467f5e
dec dword [eax + 0xb4]
push ecx
call edi
add esp, 4
mov ecx, dword [esi + 0x2c]
test ecx, ecx
je 0x467f80
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x467f7a
dec dword [eax + 0xb4]
push ecx
call edi
add esp, 4
mov byte [ebp - 4], 8
mov eax, dword [esi]
test eax, eax
je 0x467f99
push eax
call fcn.004851a0
add esp, 4
mov dword [esi], 0
add esi, 0x54
sub dword [ebp - 0x1a0], 1
jne 0x467f48
mov edi, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x190]
test ecx, ecx
je 0x467ff4
mov eax, dword [0x7ca4d8]
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1dc], 0
test eax, eax
je 0x467fd8
dec dword [eax + 0xb4]
mov esi, dword [ebp - 0x18c]
push ecx
call esi
add esp, 4
xor eax, eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1d4], eax
jmp 0x467ffa
mov esi, dword [ebp - 0x18c]
mov ecx, edi
call fcn.004643d0
mov byte [ebp - 0x15d], 1
mov ecx, dword [ebp - 0x1e4]
test ecx, ecx
je 0x468027
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x468021
dec dword [eax + 0xb4]
push ecx
call esi
add esp, 4
mov ecx, dword [ebp - 0x194]
test ecx, ecx
je 0x468046
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x468040
dec dword [eax + 0xb4]
push ecx
call esi
add esp, 4
mov ecx, dword [ebp - 0x174]
test ecx, ecx
je 0x468065
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x46805f
dec dword [eax + 0xb4]
push ecx
call esi
add esp, 4
mov edi, dword [ebp - 0x198]
test edi, edi
je 0x46808c
mov eax, dword [0x7ca4d8]
test eax, eax
je 0x46807e
dec dword [eax + 0xb4]
mov esi, dword [ebp - 0x18c]
push edi
call esi
add esp, 4
jmp 0x468092
mov esi, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x4680b2
mov ecx, dword [0x7ca4d8]
test ecx, ecx
je 0x4680ac
dec dword [ecx + 0xb4]
push eax
call esi
add esp, 4
mov al, byte [ebp - 0x15d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006193d7
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret