Function at 0x40dcc0
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x188
mov eax, dword [0x447040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebx + 8]
push esi
mov esi, dword [0x4474b8]
push edi
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xe0], esi
call fcn.0040af00
mov edi, eax
mov dword [ebp - 0x108], eax
test edi, edi
mov dword [ebp - 0xe8], edi
sete byte [ebp - 0xec]
test eax, eax
jne 0x40dd42
mov edx, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x100]
call fcn.0040b200
mov edi, eax
mov dword [ebp - 0xe8], eax
mov ecx, dword [esi + 0x4000]
cmp ecx, dword [edi + 8]
jne 0x40dd4e
int3
mov ecx, dword [ebp - 0xc0]
mov eax, ecx
and eax, 0x30200
cmp eax, 0x30200
jne 0x40dd6b
or ecx, 6
mov dword [ebp - 0xc0], ecx
cmp dword [esi + 0x3fdc], 0
mov edx, dword [esi + 0x3f70]
mov eax, dword [edi + 0x24c]
mov dword [ebp - 0xfc], edx
mov dword [ebp - 0xf8], eax
jne 0x40dd99
cmp byte [esi + 0x3f7d], 0
je 0x40dd99
mov al, 1
jmp 0x40dd9b
xor al, al
mov byte [edi + 0xc3], al
lea eax, [edx - 1]
cmp dword [ebp - 0xf8], eax
setl al
mov byte [ebp - 0xc5], al
test ecx, 0x4000000
je 0x40de05
mov edx, dword [ebp - 0xe0]
mov eax, dword [esi + 0x4ab4]
mov edx, dword [edx + 0x4ab0]
lea esi, [eax + eax*4]
mov eax, dword [edi + 0x84]
cmp edi, dword [edx + esi*8 + 4]
setne cl
cmp eax, dword [edx + esi*8]
mov esi, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xfc]
setne al
or cl, al
mov al, byte [ebp - 0xc5]
or al, cl
mov ecx, dword [ebp - 0xc0]
mov byte [ebp - 0xc5], al
mov byte [edi + 0xc1], al
test al, al
je 0x40de24
or byte [edi + 0xe0], 8
or byte [edi + 0xe1], 8
or byte [edi + 0xe2], 8
cmp dword [ebp - 0xf8], edx
je 0x40de9e
mov dl, byte [ebp - 0xec]
push ecx
mov ecx, edi
call fcn.0040af50
mov edx, dword [ebp - 0xc0]
add esp, 4
mov dword [edi + 0xc], edx
test dword [esi + 0x49f0], 0x100
je 0x40de5a
mov eax, dword [esi + 0x4a28]
jmp 0x40de5c
xor eax, eax
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xfc]
mov dword [edi + 0x24c], eax
xor eax, eax
movsd xmm0, qword [esi + 0x3f68]
cvtpd2ps xmm0, xmm0
mov word [edi + 0xcc], ax
movss dword [edi + 0x250], xmm0
movzx eax, word [esi + 0x3ff4]
inc dword [esi + 0x3ff4]
mov word [edi + 0xce], ax
jmp 0x40dea7
mov edx, dword [edi + 0xc]
mov dword [ebp - 0xc0], edx
mov eax, dword [esi + 0x3fdc]
test eax, eax
jne 0x40deb5
xor ecx, ecx
jmp 0x40dec2
imul ecx, eax, 0x68
mov eax, dword [esi + 0x3fe4]
mov ecx, dword [eax + ecx - 0x68]
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xdc], ecx
cmp eax, dword [ebp - 0xfc]
je 0x40dee5
mov eax, edx
and eax, 0x5000000
neg eax
sbb eax, eax
and eax, ecx
jmp 0x40deeb
mov eax, dword [edi + 0x30c]
cmp dword [edi + 0xf4], 0
mov dword [ebp - 0xf0], eax
lea eax, [edi + 0xf4]
jne 0x40df26
cmp dword [eax + 4], 0
jne 0x40df15
push 8
mov ecx, eax
call fcn.0041b8f0
lea eax, [edi + 0xf4]
mov edx, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [edi + 8]
mov dword [ecx + edx*4], eax
inc dword [edi + 0xf4]
lea ecx, [ebp - 0xb4]
mov dword [esi + 0x4004], edi
call fcn.00401310
test dword [ebp - 0xc0], 0x2000000
xorps xmm0, xmm0
mov eax, dword [esi + 0x4004]
movups xmmword [ebp - 0x64], xmm0
mov word [ebp - 0x54], 0
movups xmm0, xmmword [esi + 0x49a0]
movzx eax, word [eax + 0xf4]
mov word [ebp - 0x64], ax
movzx eax, word [esi + 0x4a60]
mov word [ebp - 0x62], ax
movzx eax, word [esi + 0x4a6c]
movups xmmword [ebp - 0xb4], xmm0
mov word [ebp - 0x60], ax
movups xmm0, xmmword [esi + 0x49b0]
movzx eax, word [esi + 0x4a78]
mov word [ebp - 0x5e], ax
movzx eax, word [esi + 0x4a84]
movups xmmword [ebp - 0xa4], xmm0
mov word [ebp - 0x5c], ax
movups xmm0, xmmword [esi + 0x49c0]
movzx eax, word [esi + 0x4a9c]
mov word [ebp - 0x5a], ax
movzx eax, word [esi + 0x4a90]
movups xmmword [ebp - 0x94], xmm0
mov word [ebp - 0x58], ax
movups xmm0, xmmword [esi + 0x49d0]
movzx eax, word [esi + 0x4ab4]
mov word [ebp - 0x56], ax
movzx eax, word [esi + 0x5030]
movups xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0xb8], edi
movups xmm0, xmmword [esi + 0x49e0]
mov word [ebp - 0x54], ax
movups xmmword [ebp - 0x74], xmm0
je 0x40e012
test dword [esi + 0x4960], 0x400
mov byte [ebp - 0x52], 1
jne 0x40e016
mov byte [ebp - 0x52], 0
mov edi, dword [esi + 0x3fdc]
lea eax, [esi + 0x3fdc]
mov esi, dword [eax + 4]
mov dword [ebp - 0xc4], eax
cmp edi, esi
jne 0x40e05f
inc edi
test esi, esi
je 0x40e047
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [ebp - 0xc4]
sar ecx, 1
add ecx, esi
jmp 0x40e04c
mov ecx, 8
cmp ecx, edi
cmovg edi, ecx
mov ecx, eax
push edi
call fcn.0041c0c0
mov eax, dword [ebp - 0xc4]
imul edi, dword [eax], 0x68
lea esi, [ebp - 0xb8]
mov ecx, 0x1a
add edi, dword [eax + 8]
rep movsd dword es:[edi], dword [esi]
inc dword [eax]
mov ecx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xe0]
test ecx, 0x10000000
je 0x40e08e
inc dword [esi + 0x4fa0]
mov eax, dword [ebp - 0xf8]
mov edi, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xfc]
je 0x40e166
mov edx, dword [ebp - 0xf0]
mov dword [edi + 0x30c], edx
mov dword [edi + 0x320], edi
mov dword [edi + 0x31c], edi
mov dword [edi + 0x318], edi
mov dword [edi + 0x314], edi
test edx, edx
je 0x40e118
mov eax, ecx
and eax, 0x3000000
cmp eax, 0x1000000
jne 0x40e0e8
mov eax, dword [edx + 0x314]
mov dword [edi + 0x314], eax
test ecx, 0x4000000
je 0x40e0fc
mov eax, dword [edx + 0x318]
mov dword [edi + 0x318], eax
test ecx, 0x8000000
jne 0x40e118
test ecx, 0x5000000
je 0x40e118
mov eax, dword [edx + 0x31c]
mov dword [edi + 0x31c], eax
test dword [edi + 0x10], 0x100
je 0x40e147
mov edx, edi
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edx + 0x30c]
mov edx, eax
mov dword [edi + 0x320], eax
test dword [edx + 0x10], 0x100
jne 0x40e130
mov edx, dword [ebp - 0xdc]
mov eax, ecx
and eax, 0x1000000
mov dword [edi + 0x310], edx
neg eax
sbb eax, eax
and eax, edx
mov dword [edi + 0x324], eax
test dword [edi + 0x10], 0x100
je 0x40e177
mov eax, dword [esi + 0x495c]
jmp 0x40e17a
mov eax, dword [edi + 8]
mov ecx, dword [0x4474b8]
mov dword [ebp - 0xc4], eax
lea edx, [ecx + 0x4a84]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0xd0], edx
mov eax, dword [ecx + 0x4004]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 8]
mov dword [ebp - 0xcc], eax
cmp dword [edx], ecx
jne 0x40e1e1
test ecx, ecx
je 0x40e1c0
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp - 0xd0]
sar eax, 1
add eax, ecx
jmp 0x40e1c5
mov eax, 8
mov ecx, dword [edx]
inc ecx
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edx
call fcn.0041bff0
mov edi, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xd0]
mov eax, dword [edx]
mov ecx, dword [edx + 8]
mov esi, dword [ebp - 0xc4]
mov dword [ecx + eax*8], esi
mov esi, dword [ebp - 0xcc]
mov dword [ecx + eax*8 + 4], esi
mov ecx, dword [ebp - 0x24]
inc dword [edx]
test dword [ebp - 0xc0], 0x4000000
mov esi, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xc4]
mov dword [ecx + 0x495c], eax
mov eax, dword [esi + 0x495c]
mov dword [edi + 0x364], eax
je 0x40e2ed
mov eax, dword [esi + 0x4ab4]
mov edx, dword [esi + 0x4ab0]
mov dword [ebp - 0xd0], edx
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0xdc]
mov dword [edx + ecx*8 + 4], edi
mov dword [ebp - 0xc4], ecx
mov eax, dword [eax + 0x158]
mov dword [edx + ecx*8 + 0xc], eax
lea edx, [esi + 0x4ab4]
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov dword [ebp - 0xcc], eax
cmp ecx, eax
jne 0x40e2a0
inc ecx
test eax, eax
je 0x40e288
cdq
sub eax, edx
lea edx, [esi + 0x4ab4]
sar eax, 1
add eax, dword [ebp - 0xcc]
jmp 0x40e28d
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edx
call fcn.0041bf20
lea edx, [esi + 0x4ab4]
mov eax, dword [edx]
mov edi, dword [ebp - 0xc4]
mov esi, dword [ebp - 0xd0]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 8]
movups xmm0, xmmword [esi + edi*8]
movups xmmword [eax + ecx*8], xmm0
movups xmm0, xmmword [esi + edi*8 + 0x10]
movups xmmword [eax + ecx*8 + 0x10], xmm0
movq xmm0, qword [esi + edi*8 + 0x20]
movq qword [eax + ecx*8 + 0x20], xmm0
mov eax, edi
mov edi, dword [ebp - 0xe8]
mov ecx, esi
inc dword [edx]
mov esi, dword [ebp - 0xe0]
mov eax, dword [ecx + eax*8]
mov dword [edi + 0x84], eax
test byte [esi + 0x49f0], 1
mov byte [ebp - 0xb9], 0
mov byte [ebp - 0xbb], 0
mov byte [ebp - 0xba], 0
je 0x40e3af
mov dl, byte [edi + 0xe0]
mov ecx, dword [esi + 0x49f4]
movsx eax, dl
test ecx, eax
setne byte [ebp - 0xb9]
test ecx, eax
je 0x40e39e
movss xmm1, dword [esi + 0x4a0c]
movss xmm0, dword [esi + 0x4a08]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
comiss xmm0, dword [0x44418c]
jbe 0x40e39e
mov eax, dword [esi + 0x4a00]
mov ecx, dword [esi + 0x4a04]
mov dword [edi + 0xe8], ecx
mov dword [edi + 0xe4], eax
mov eax, dword [esi + 0x4a08]
mov ecx, dword [esi + 0x4a0c]
mov dword [edi + 0xf0], ecx
mov dword [edi + 0xec], eax
mov eax, dword [edi + 0xe0]
movzx ecx, dl
and eax, 0xffffff00
and ecx, 0xf1
or ecx, eax
mov dword [edi + 0xe0], ecx
jmp 0x40e3af
push ecx
lea edx, [esi + 0x4a00]
mov ecx, edi
call fcn.00411000
add esp, 4
test byte [esi + 0x49f0], 2
xorps xmm1, xmm1
je 0x40e45a
mov cl, byte [edi + 0xe1]
movsx eax, cl
and eax, dword [esi + 0x49f8]
je 0x40e3e6
movss xmm0, dword [esi + 0x4a10]
comiss xmm0, xmm1
jbe 0x40e3e6
mov byte [ebp - 0xbb], 1
jmp 0x40e3f1
mov byte [ebp - 0xbb], 0
test eax, eax
je 0x40e407
movss xmm0, dword [esi + 0x4a14]
comiss xmm0, xmm1
jbe 0x40e40e
mov byte [ebp - 0xba], 1
jmp 0x40e415
mov byte [ebp - 0xbb], 0
mov byte [ebp - 0xba], 0
test byte [edi + 0x10], 4
je 0x40e429
test cl, 4
jne 0x40e429
mov eax, dword [edi + 0x28]
mov dword [esi + 0x4a10], eax
test byte [edi + 0x10], 8
je 0x40e441
test byte [edi + 0xe1], 4
jne 0x40e441
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x4a14], eax
push dword [esi + 0x49f8]
lea edx, [esi + 0x4a10]
mov ecx, edi
call fcn.00411160
add esp, 4
xorps xmm1, xmm1
test byte [esi + 0x49f0], 0x80
je 0x40e4a1
movss xmm0, dword [esi + 0x4a20]
comiss xmm0, xmm1
jb 0x40e482
movss dword [edi + 0x98], xmm0
mov dword [edi + 0xa0], 0
movss xmm0, dword [esi + 0x4a24]
comiss xmm0, xmm1
jb 0x40e4a1
movss dword [edi + 0x9c], xmm0
mov dword [edi + 0xa4], 0
test byte [esi + 0x49f0], 4
je 0x40e4be
mov eax, dword [esi + 0x4a18]
mov ecx, dword [esi + 0x4a1c]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], ecx
jmp 0x40e4da
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0xfc]
je 0x40e4da
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
test byte [esi + 0x49f0], 8
je 0x40e527
mov ecx, dword [esi + 0x49fc]
mov dl, byte [esi + 0x4a2c]
test ecx, ecx
je 0x40e4fe
movsx eax, byte [edi + 0xe2]
test ecx, eax
je 0x40e527
movzx ecx, byte [edi + 0xe2]
mov eax, dword [edi + 0xe0]
and ecx, 0xf1
shl ecx, 0x10
and eax, 0xff00ffff
or ecx, eax
mov byte [edi + 0xbd], dl
mov dword [edi + 0xe0], ecx
test byte [esi + 0x49f0], 0x20
je 0x40e539
xor edx, edx
mov ecx, edi
call fcn.00410ca0
mov dl, byte [edi + 0xc1]
test dl, dl
je 0x40e558
and byte [edi + 0xe0], 0xf7
and byte [edi + 0xe1], 0xf7
and byte [edi + 0xe2], 0xf7
mov ecx, dword [0x4474b8]
mov byte [edi + 0xc0], 0
test dword [ecx + 0x49f0], 0x200
je 0x40e60f
mov eax, dword [ecx + 0x4a54]
test al, 1
je 0x40e60f
test dl, dl
jne 0x40e60f
cmp byte [edi + 0xc2], dl
jne 0x40e60f
test al, 2
je 0x40e5c5
mov eax, dword [ecx + 0x4008]
test eax, eax
je 0x40e5c5
mov eax, dword [eax + 0x314]
cmp dword [edi + 0x314], eax
je 0x40e60f
cmp dword [eax + 0x314], edi
je 0x40e60f
cmp eax, edi
je 0x40e60f
mov eax, dword [eax + 0x310]
test eax, eax
jne 0x40e5b7
test byte [ecx + 0x4a54], 4
je 0x40e5fe
mov eax, dword [ecx + 0x4ad8]
test eax, eax
je 0x40e5fe
mov eax, dword [eax + 0x314]
cmp dword [edi + 0x314], eax
je 0x40e60f
cmp dword [eax + 0x314], edi
je 0x40e60f
nop
cmp eax, edi
je 0x40e60f
mov eax, dword [eax + 0x310]
test eax, eax
jne 0x40e5f0
mov dword [edi + 0x278], 0
mov byte [edi + 0xc0], 1
cmp byte [ebp - 0x52], 0
je 0x40e6b6
cmp dword [edi + 0x314], edi
jne 0x40e6b6
mov ecx, dword [0x4474b8]
mov dword [ebp - 0xdc], ecx
mov eax, dword [ecx + 0x502c]
and dword [ecx + 0x4960], 0xfffffbff
mov dword [ecx + 0x38c8], eax
add ecx, 0x4a90
mov dword [ebp - 0xc4], ecx
mov edx, dword [ecx]
mov eax, dword [ecx + 4]
cmp edx, eax
jne 0x40e68d
inc edx
mov dword [ebp - 0xcc], edx
test eax, eax
je 0x40e677
cdq
sub eax, edx
mov edx, dword [ebp - 0xcc]
sar eax, 1
add eax, dword [ecx + 4]
jmp 0x40e67c
mov eax, 8
cmp eax, edx
cmovg edx, eax
push edx
call fcn.0041b8f0
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 0x4960]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0xc4]
inc dword [eax]
mov eax, dword [ebp - 0xdc]
inc word [eax + 0x5030]
mov eax, dword [ebp - 0xf8]
mov dword [esi + 0x4004], 0
cmp eax, dword [ebp - 0xfc]
je 0x410347
cmp byte [edi + 0xc0], 0
jne 0x410350
mov eax, dword [ebp - 0xc0]
and eax, 0x3000000
mov byte [edi + 0xba], 1
cmp dword [ebp - 0x104], 0
mov dword [ebp - 0xdc], eax
mov al, byte [edi + 0xdd]
mov byte [ebp - 0xf1], al
setne al
mov byte [edi + 0xc5], al
mov dword [edi + 0x224], 0xff7fffff
mov dword [edi + 0x228], 0xff7fffff
mov dword [edi + 0x22c], 0x7f7fffff
mov dword [edi + 0x230], 0x7f7fffff
mov eax, dword [edi + 0xf8]
cmp eax, 1
jge 0x40e779
test eax, eax
je 0x40e75c
cdq
sub eax, edx
lea edx, [edi + 0xf4]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x40e767
mov ecx, 8
lea edx, [edi + 0xf4]
mov eax, 1
cmp ecx, eax
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041b8f0
mov dword [edi + 0xf4], 1
mov ecx, dword [edi + 0x278]
call fcn.004245a0
cmp byte [edi + 0x370], 0
mov dword [edi + 0x1a4], 0xffffffff
je 0x40e7e4
mov ecx, dword [edi + 0x278]
push dword [edi + 0x368]
add ecx, 0xc
mov byte [edi + 0x370], 0
call fcn.0041bce0
mov ecx, dword [edi + 0x278]
push dword [edi + 0x36c]
add ecx, 0x18
call fcn.0041bac0
mov dword [edi + 0x36c], 0
mov dword [edi + 0x368], 0
cmp dword [esi + 0x4cac], 0
je 0x40e954
test dword [edi + 0xc], 0x20000
jne 0x40e954
cmp dword [ebp - 0x108], 0
je 0x40e954
mov eax, dword [edi + 4]
mov ecx, eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x100]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e840
test dl, dl
je 0x40e83c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e840
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e820
xor eax, eax
jmp 0x40e845
sbb eax, eax
or eax, 1
test eax, eax
je 0x40e954
mov ecx, dword [ebp - 0x100]
mov edx, dword [edi + 0x78]
mov dword [ebp - 0xd0], edx
lea eax, [ecx + 1]
mov dword [ebp - 0xcc], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40e865
sub ecx, dword [ebp - 0xcc]
lea eax, [ecx + 1]
mov dword [ebp - 0xd8], eax
cmp edx, eax
jae 0x40e933
mov edx, dword [ebp - 0xc4]
test edx, edx
je 0x40e90c
mov ecx, dword [0x4474b8]
test ecx, ecx
je 0x40e90c
mov eax, dword [ecx + 0x3f70]
mov dword [ebp - 0xd0], eax
movsx eax, word [ecx + 0x520c]
mov esi, dword [ebp - 0xd0]
add eax, 0xa42
cmp dword [ecx + eax*8], esi
mov esi, dword [ebp - 0xe0]
lea eax, [ecx + eax*8]
je 0x40e902
movsx eax, word [ecx + 0x520c]
inc eax
mov dword [ebp - 0xcc], 6
cdq
idiv dword [ebp - 0xcc]
movzx eax, dx
mov edx, dword [ebp - 0xd0]
mov word [ecx + 0x520c], ax
cwde
add eax, 0xa42
lea eax, [ecx + eax*8]
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xc4]
inc word [eax + 6]
inc dword [ecx + 0x5208]
push edx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [ebp - 0xd8]
add esp, 4
call fcn.00407d20
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xd0], eax
push eax
push dword [ebp - 0x100]
push dword [ebp - 0xc4]
call sub.VCRUNTIME140.dll_memcpy
mov dword [edi + 4], eax
add esp, 0xc
mov eax, dword [ebp - 0xd0]
mov dword [edi + 0x78], eax
lea eax, [edi + 0x38]
mov ecx, edi
push eax
lea edx, [edi + 0x30]
call fcn.0040b5e0
mov al, byte [edi + 0xdc]
add esp, 4
test al, al
jle 0x40e977
dec al
mov byte [edi + 0xdc], al
mov al, byte [edi + 0xdd]
test al, al
jle 0x40e989
dec al
mov byte [edi + 0xdd], al
mov al, byte [edi + 0xde]
test al, al
jle 0x40e99b
dec al
mov byte [edi + 0xde], al
cmp dword [ebp - 0x108], 0
mov al, byte [ebp - 0xbb]
mov cl, byte [ebp - 0xba]
jne 0x40e9bf
test al, al
je 0x40e9b8
test cl, cl
jne 0x40e9bf
mov byte [edi + 0xdd], 1
cmp byte [ebp - 0xc5], 0
mov edx, dword [ebp - 0xc0]
je 0x40ea22
test edx, 0x6000000
je 0x40ea22
mov byte [edi + 0xdd], 1
test dl, 0x40
je 0x40ea22
test al, al
jne 0x40e9f4
mov dword [edi + 0x28], 0
mov dword [edi + 0x20], 0
test cl, cl
jne 0x40ea06
mov dword [edi + 0x2c], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov ecx, dword [0x4474b8]
mov dword [ebp - 0xc4], ecx
mov eax, dword [ecx + 0x4ad4]
mov eax, dword [eax]
mov dword [edi + 0x14], eax
mov dword [ebp - 0xe4], eax
mov dword [ecx + 0x4004], edi
mov eax, dword [edi + 0x1a4]
cmp eax, 0xffffffff
je 0x40ea5b
shl eax, 9
add eax, dword [ecx + 0x4da4]
jmp 0x40ea5d
xor eax, eax
mov dword [ecx + 0x4d84], eax
mov dword [ecx + 0x3d5c], 0x3f800000
mov dword [ebp - 0xd8], eax
mov eax, dword [edi]
movss xmm0, dword [eax + 0x3d54]
mov eax, dword [edi + 0x30c]
mulss xmm0, dword [edi + 0x270]
test eax, eax
je 0x40ea97
mulss xmm0, dword [eax + 0x270]
cmp dword [ebp - 0xd8], 0
mov eax, dword [ecx + 0x3d4c]
movss dword [ecx + 0x3d6c], xmm0
movss dword [ecx + 0x3d50], xmm0
divss xmm0, dword [eax + 0x10]
movss dword [ecx + 0x3d70], xmm0
movss dword [ecx + 0x3d58], xmm0
jne 0x40ead8
cmp dword [edi + 0x1a0], 0
jne 0x40ead8
mov al, 1
jmp 0x40eada
xor al, al
mov byte [edi + 0x160], al
test edx, 0x1000000
je 0x40eaf2
movss xmm0, dword [esi + 0x38f8]
jmp 0x40eb14
test edx, 0x6000000
je 0x40eb0c
test edx, 0x8000000
jne 0x40eb0c
movss xmm0, dword [esi + 0x3900]
jmp 0x40eb14
movss xmm0, dword [esi + 0x38dc]
movss dword [edi + 0x54], xmm0
xorps xmm1, xmm1
mov eax, dword [esi + 0x38d0]
mov ecx, dword [esi + 0x38d4]
mov dword [edi + 0x48], eax
mov eax, edx
and eax, 0x5000000
mov dword [edi + 0x4c], ecx
cmp eax, 0x1000000
jne 0x40eb6c
test byte [edi + 0x10], 2
jne 0x40eb6c
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x40eb6c
test edx, 0x400
je 0x40eb5d
movss xmm0, dword [esi + 0x38d4]
jmp 0x40eb60
xorps xmm0, xmm0
mov dword [edi + 0x48], 0
movss dword [edi + 0x4c], xmm0
movss xmm0, dword [edi + 0x48]
maxss xmm0, dword [esi + 0x3914]
maxss xmm0, dword [esi + 0x4a4c]
movss dword [edi + 0x164], xmm0
movss xmm3, dword [esi + 0x4a50]
movss dword [edi + 0x168], xmm3
test dl, 1
je 0x40eba3
xorps xmm2, xmm2
jmp 0x40ebb7
movss xmm2, dword [esi + 0x3908]
addss xmm2, xmm2
addss xmm2, dword [esi + 0x3d50]
movss dword [edi + 0x58], xmm2
test edx, 0x400
je 0x40ebde
movss xmm0, dword [esi + 0x3908]
addss xmm3, dword [esi + 0x3d50]
addss xmm0, xmm0
addss xmm3, xmm0
jmp 0x40ebe1
xorps xmm3, xmm3
cmp byte [ebp - 0xbb], 0
mov eax, dword [ebp - 0xec]
movss dword [edi + 0x5c], xmm3
mov byte [ebp - 0xd0], al
je 0x40ec10
movss xmm0, dword [edi + 0x40]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40ec10
mov byte [ebp - 0xec], 1
cmp byte [ebp - 0xba], 0
je 0x40ec2e
movss xmm0, dword [edi + 0x44]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40ec2e
mov byte [ebp - 0xd0], 1
test dl, 0x21
jne 0x40ed5b
movss xmm0, dword [edi + 0x18]
movaps xmm3, xmm0
movss xmm4, dword [edi + 0x1c]
addss xmm3, dword [edi + 0x28]
addss xmm2, dword [edi + 0x1c]
mov edx, dword [ebp - 0xc4]
cmp dword [esi + 0x4008], edi
jne 0x40ed0b
cmp dword [esi + 0x4048], 0
jne 0x40ed0b
cmp dword [esi + 0x404c], 0
jne 0x40ed0b
cmp dword [esi + 0x4060], 0
jne 0x40ed0b
mov eax, dword [edx + 0x4004]
movss xmm5, dword [edx + 0x392c]
movss xmm7, dword [edx + 0xac]
maxss xmm0, dword [eax + 0x224]
maxss xmm4, dword [eax + 0x228]
minss xmm3, dword [eax + 0x22c]
minss xmm2, dword [eax + 0x230]
subss xmm0, xmm5
comiss xmm7, xmm0
jb 0x40ed0b
movss xmm0, dword [edx + 0x3930]
movss xmm6, dword [edx + 0xb0]
subss xmm4, xmm0
comiss xmm6, xmm4
jb 0x40ed0b
addss xmm5, xmm3
comiss xmm5, xmm7
jbe 0x40ed0b
addss xmm0, xmm2
comiss xmm0, xmm6
jbe 0x40ed0b
cmp word [esi + 0x2ada], 2
jne 0x40ed0b
cmp dword [edx + 0x4780], 0xffffffff
jne 0x40ed0b
mov byte [edi + 0xbe], 1
cmp byte [edi + 0xbe], 0
je 0x40ed62
mov cl, byte [edi + 0xbd]
test cl, cl
sete al
test cl, cl
mov byte [edi + 0xbd], al
mov ecx, 1
mov eax, dword [ebp - 0xd0]
movzx eax, al
cmovne eax, ecx
test dword [edi + 0xc], 0x100
mov dword [ebp - 0xd0], eax
jne 0x40ed62
comiss xmm1, dword [edx + 0x50d4]
jb 0x40ed62
mov eax, dword [edx + 0x1c]
mov dword [edx + 0x50d4], eax
jmp 0x40ed62
mov byte [edi + 0xbd], 0
movss xmm0, dword [edi + 0xb0]
lea eax, [edi + 0x38]
movss dword [ebp - 0xd8], xmm0
lea ecx, [ebp - 0x2c]
movss xmm0, dword [edi + 0xb4]
mov edx, edi
movss dword [ebp - 0xd4], xmm0
movss xmm0, dword [edi + 0x5c]
addss xmm0, dword [edi + 0x58]
push eax
mov byte [edi + 0xbe], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x68], 0
movss dword [edi + 0x64], xmm0
mov dword [edi + 0x6c], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
call fcn.0040b710
add esp, 4
test byte [ebp - 0xc0], 0x40
je 0x40ee21
cmp byte [edi + 0xbd], 0
jne 0x40ee21
cmp byte [ebp - 0xbb], 0
jne 0x40edfe
movss xmm0, dword [ebp - 0x2c]
movss dword [edi + 0x28], xmm0
mov byte [ebp - 0xec], 1
cmp byte [ebp - 0xba], 0
jne 0x40eed0
movss xmm0, dword [ebp - 0x28]
movss dword [edi + 0x2c], xmm0
mov byte [ebp - 0xd0], 1
jmp 0x40eed0
mov al, byte [edi + 0xd2]
test al, al
jg 0x40ee38
cmp byte [edi + 0xd3], 0
jle 0x40eed0
cmp byte [ebp - 0xbb], 0
jne 0x40ee6b
test al, al
jle 0x40ee6b
cmp byte [edi + 0xd4], 0
je 0x40ee5a
movss xmm0, dword [edi + 0x28]
maxss xmm0, dword [ebp - 0x2c]
jmp 0x40ee5f
movss xmm0, dword [ebp - 0x2c]
movss dword [edi + 0x28], xmm0
mov byte [ebp - 0xec], 1
cmp byte [ebp - 0xba], 0
jne 0x40eea3
cmp byte [edi + 0xd3], 0
jle 0x40eea3
cmp byte [edi + 0xd4], 0
je 0x40ee92
movss xmm0, dword [edi + 0x2c]
maxss xmm0, dword [ebp - 0x28]
jmp 0x40ee97
movss xmm0, dword [ebp - 0x28]
movss dword [edi + 0x2c], xmm0
mov byte [ebp - 0xd0], 1
cmp byte [edi + 0xbd], 0
jne 0x40eed0
test dword [edi + 0xc], 0x100
mov ecx, dword [0x4474b8]
jne 0x40eed0
xorps xmm0, xmm0
comiss xmm0, dword [ecx + 0x50d4]
jb 0x40eed0
mov eax, dword [ecx + 0x1c]
mov dword [ecx + 0x50d4], eax
lea esi, [edi + 0x28]
mov edx, edi
push esi
lea ecx, [ebp - 0x160]
call fcn.0040b430
add esp, 4
cmp byte [edi + 0xbd], 0
movss xmm3, dword [eax]
movss xmm1, dword [eax + 4]
mov eax, dword [ebp - 0xc0]
movss dword [esi], xmm3
movss dword [esi + 4], xmm1
je 0x40ef2b
test eax, 0x1000000
jne 0x40ef2b
movss xmm2, dword [edi + 0x18]
movss xmm1, dword [edi + 0x58]
addss xmm2, xmm3
addss xmm1, dword [edi + 0x1c]
subss xmm2, dword [edi + 0x18]
subss xmm1, dword [edi + 0x1c]
jmp 0x40ef2e
movaps xmm2, xmm3
cmp byte [ebp - 0xc5], 0
movss dword [edi + 0x20], xmm2
movss dword [edi + 0x24], xmm1
je 0x40ef8b
and eax, 0xc000000
mov dword [edi + 0xd8], 0xffffffff
cmp eax, 0x4000000
jne 0x40ef8b
cmp byte [ebp - 0xb9], 0
jne 0x40ef8b
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x4ab4]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x4abc]
movss xmm0, dword [eax + ecx*8 - 0x10]
movss xmm1, dword [eax + ecx*8 - 0xc]
movss dword [edi + 0x18], xmm0
movss dword [edi + 0x1c], xmm1
mov edx, dword [ebp - 0xc0]
test edx, 0x1000000
je 0x40f03a
mov esi, dword [ebp - 0xf0]
mov ax, word [esi + 0x190]
lea ecx, [esi + 0x190]
mov word [edi + 0xcc], ax
mov eax, dword [ecx + 4]
cmp dword [ecx], eax
jne 0x40eff7
mov edx, dword [ecx]
inc edx
mov dword [ebp - 0xcc], edx
test eax, eax
je 0x40efdb
cdq
sub eax, edx
mov edx, dword [ebp - 0xcc]
sar eax, 1
add eax, dword [ecx + 4]
jmp 0x40efe0
mov eax, 8
cmp eax, edx
cmovg edx, eax
push edx
call fcn.0041b8f0
mov edx, dword [ebp - 0xc0]
lea ecx, [esi + 0x190]
mov ecx, dword [ecx]
mov eax, dword [esi + 0x198]
mov dword [eax + ecx*4], edi
inc dword [esi + 0x190]
mov al, byte [ebp - 0xb9]
mov ecx, dword [ebp - 0xdc]
test edx, 0x4000000
jne 0x40f046
test al, al
jne 0x40f046
cmp ecx, 0x3000000
je 0x40f046
mov eax, dword [esi + 0x100]
mov ecx, dword [esi + 0x104]
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], ecx
mov ecx, dword [ebp - 0xdc]
mov al, byte [ebp - 0xb9]
movss xmm1, dword [edi + 0xe4]
ucomiss xmm1, dword [0x4442a0]
lahf
test ah, 0x44
jnp 0x40f0b2
cmp byte [edi + 0xdd], 0
jne 0x40f0b2
movss xmm0, dword [edi + 0x20]
lea edx, [ebp - 0x148]
mulss xmm0, dword [edi + 0xec]
mov ecx, edi
push 0
subss xmm1, xmm0
movss xmm0, dword [edi + 0xe8]
movss dword [ebp - 0x148], xmm1
movss xmm1, dword [edi + 0x24]
mulss xmm1, dword [edi + 0xf0]
subss xmm0, xmm1
movss dword [ebp - 0x144], xmm0
call fcn.00411000
add esp, 4
jmp 0x40f112
test edx, 0x10000000
je 0x40f0c2
lea ecx, [ebp - 0x168]
jmp 0x40f0f8
test edx, 0x4000000
je 0x40f0de
test al, al
jne 0x40f0de
cmp byte [ebp - 0xf1], al
jle 0x40f0de
lea ecx, [ebp - 0x170]
jmp 0x40f0f8
test edx, 0x2000000
je 0x40f118
test al, al
jne 0x40f118
cmp ecx, 0x3000000
je 0x40f118
lea ecx, [ebp - 0x178]
mov edx, edi
call fcn.00415000
movss xmm1, dword [eax + 4]
movss xmm0, dword [eax]
movss dword [edi + 0x18], xmm0
movss dword [edi + 0x1c], xmm1
mov edx, dword [ebp - 0xc0]
cmp byte [ebp - 0xb9], 0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe0]
movss xmm7, dword [eax + 0x18]
movss xmm6, dword [eax + 0x1c]
addss xmm7, dword [eax + 0x20]
addss xmm6, dword [eax + 0x24]
movss xmm0, dword [eax + 8]
movss xmm1, dword [eax + 0xc]
movaps xmm5, xmm0
movss xmm3, dword [ecx + 0x399c]
movaps xmm4, xmm1
movss xmm2, dword [ecx + 0x3998]
maxss xmm3, dword [ecx + 0x39a4]
maxss xmm2, dword [ecx + 0x39a0]
addss xmm5, dword [eax + 0x10]
addss xmm4, dword [eax + 0x14]
movss dword [ebp - 0x40], xmm0
subss xmm6, xmm3
movss dword [ebp - 0x3c], xmm1
addss xmm3, dword [eax + 0x1c]
subss xmm7, xmm2
movss dword [ebp - 0x38], xmm5
addss xmm2, dword [eax + 0x18]
movss dword [ebp - 0x34], xmm4
movss dword [ebp - 0x44], xmm6
movss dword [ebp - 0x4c], xmm3
movss dword [ebp - 0x48], xmm7
movss dword [ebp - 0x50], xmm2
jne 0x40f222
test edx, 0x1000000
jne 0x40f222
subss xmm5, xmm0
xorps xmm0, xmm0
comiss xmm5, xmm0
jbe 0x40f222
subss xmm4, xmm1
comiss xmm4, xmm0
jbe 0x40f222
mov eax, dword [0x4474b8]
movss xmm0, dword [edi + 0x24]
cmp byte [eax + 0x4c], 0
je 0x40f1ed
test byte [edi + 0xc], 1
jne 0x40f1ed
movss xmm0, dword [edi + 0x58]
subss xmm2, dword [edi + 0x20]
subss xmm3, xmm0
movss xmm0, dword [edi + 0x1c]
comiss xmm3, xmm0
ja 0x40f207
movaps xmm3, xmm6
minss xmm3, xmm0
movss xmm0, dword [edi + 0x18]
comiss xmm2, xmm0
ja 0x40f218
movaps xmm2, xmm7
minss xmm2, xmm0
movss dword [edi + 0x18], xmm2
movss dword [edi + 0x1c], xmm3
cvttss2si eax, dword [edi + 0x18]
movd xmm1, eax
cvttss2si eax, dword [edi + 0x1c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
movss dword [edi + 0x18], xmm1
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x1c], xmm0
test edx, 0x1000000
je 0x40f256
movss xmm2, dword [ecx + 0x38f4]
jmp 0x40f276
mov eax, edx
and eax, 0xc000000
cmp eax, 0x4000000
jne 0x40f26e
movss xmm2, dword [ecx + 0x38fc]
jmp 0x40f276
movss xmm2, dword [ecx + 0x38d8]
xor al, al
movss dword [edi + 0x50], xmm2
mov dword [ebp - 0xc4], eax
cmp byte [ebp - 0xc5], al
je 0x40f2bb
test edx, 0x1000
jne 0x40f2bb
test edx, 0x4000000
je 0x40f2a4
mov byte [ebp - 0xc4], 1
jmp 0x40f2bb
test edx, 0x3000000
movzx eax, al
mov esi, 1
cmove eax, esi
mov dword [ebp - 0xc4], eax
mov eax, edx
mov dword [ebp - 0x30], 0xffffffff
and eax, 0x5000000
mov dword [ebp - 0x24], 0xffffffff
xorps xmm0, xmm0
movaps xmmword [ebp - 0x20], xmm0
cmp eax, 0x1000000
jne 0x40f2e2
xor eax, eax
jmp 0x40f2eb
xor eax, eax
cmp byte [ecx + 0x4b], al
setne al
inc eax
cmp byte [edi + 0xbd], 0
movss xmm1, dword [ecx + 0x3d50]
addss xmm2, dword [0x444204]
movaps xmm0, xmm1
mov dword [ebp - 0xcc], eax
mulss xmm1, dword [0x4441ac]
mulss xmm0, dword [0x444208]
addss xmm2, xmm1
maxss xmm0, xmm2
cvttss2si esi, xmm0
jne 0x40f384
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x2c]
call fcn.0040b970
add esp, 0x14
test eax, eax
je 0x40f378
mov ecx, dword [ebp - 0xec]
test al, 1
mov edx, 1
movzx ecx, cl
cmovne ecx, edx
test al, 2
mov eax, dword [ebp - 0xd0]
movzx eax, al
cmovne eax, edx
mov dword [ebp - 0xec], ecx
mov byte [ebp - 0xd0], al
mov edx, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xe0]
cmp byte [edi + 0xbd], 0
mov al, byte [ebp - 0x30]
mov byte [edi + 0xc6], al
mov al, byte [ebp - 0x24]
mov byte [edi + 0xc7], al
jne 0x40f4fe
cmp dword [ebp - 0x108], 0
movss xmm0, dword [edi + 0x6c]
addss xmm0, dword [edi + 0x64]
movss xmm4, dword [edi + 0x1ec]
movss xmm5, dword [edi + 0x1f0]
subss xmm4, dword [edi + 0x1e4]
subss xmm5, dword [edi + 0x1e8]
movss xmm2, dword [edi + 0x2c]
movss xmm6, dword [edi + 0x28]
subss xmm2, xmm0
xorps xmm0, xmm0
addss xmm4, dword [ebp - 0xd8]
addss xmm5, dword [ebp - 0xd4]
jne 0x40f3ff
xorps xmm3, xmm3
xorps xmm1, xmm1
jmp 0x40f41b
movss xmm3, dword [edi + 0x48]
movss xmm1, dword [edi + 0x4c]
addss xmm3, xmm3
addss xmm1, xmm1
addss xmm3, dword [edi + 0x30]
addss xmm1, dword [edi + 0x34]
cmp byte [ebp - 0xec], 0
jne 0x40f427
movaps xmm6, xmm4
mov eax, dword [ebp - 0xd0]
test al, al
jne 0x40f434
movaps xmm2, xmm5
test edx, 0x4000
jne 0x40f44a
comiss xmm1, xmm2
jbe 0x40f446
test dl, 8
je 0x40f44a
xor al, al
jmp 0x40f44c
mov al, 1
mov byte [ebp - 0xb9], al
mov byte [edi + 0xb9], al
test edx, 0x8000
jne 0x40f49a
test al, al
je 0x40f46e
movss xmm4, dword [ecx + 0x393c]
jmp 0x40f471
xorps xmm4, xmm4
subss xmm6, xmm4
comiss xmm3, xmm6
jbe 0x40f48e
mov eax, edx
and eax, 0x808
cmp eax, 0x800
mov al, byte [ebp - 0xb9]
je 0x40f49a
mov byte [edi + 0xb8], 0
xorps xmm1, xmm1
jmp 0x40f4cb
mov byte [edi + 0xb8], 1
test al, al
jne 0x40f4c3
subss xmm2, dword [ecx + 0x393c]
comiss xmm1, xmm2
jbe 0x40f4bb
test dl, 8
jne 0x40f4bb
mov al, 1
jmp 0x40f4bd
xor al, al
mov byte [edi + 0xb9], al
movss xmm1, dword [ecx + 0x393c]
test al, al
je 0x40f4d7
movss xmm0, dword [ecx + 0x393c]
movss dword [edi + 0xb0], xmm0
addss xmm0, dword [edi + 0x68]
movss dword [edi + 0xb4], xmm1
movss dword [edi + 0x68], xmm0
movaps xmm0, xmm1
addss xmm0, dword [edi + 0x6c]
movss dword [edi + 0x6c], xmm0
mov eax, edx
and eax, 0x5000000
cmp eax, 0x1000000
jne 0x40f525
cmp dword [ebp - 0xdc], 0x3000000
je 0x40f525
mov eax, dword [ebp - 0xf0]
add eax, 0x224
jmp 0x40f528
lea eax, [ebp - 0x40]
movups xmm0, xmmword [eax]
mov eax, edx
movss xmm6, dword [edi + 0x1c]
and eax, 0x401
movss xmm5, dword [edi + 0x18]
movaps xmm1, xmm6
movss xmm3, dword [edi + 0x20]
movaps xmm2, xmm5
movss xmm4, dword [edi + 0x24]
addss xmm3, xmm5
movss dword [ebp - 0x120], xmm5
addss xmm4, xmm6
addss xmm1, dword [edi + 0x58]
addss xmm2, dword [edi + 0x28]
movups xmmword [ebp - 0x130], xmm0
movaps xmm0, xmm6
movss dword [ebp - 0x11c], xmm0
movss dword [ebp - 0x114], xmm1
movss dword [ebp - 0x118], xmm2
movss dword [edi + 0x1d4], xmm5
movss dword [edi + 0x1d8], xmm6
movss dword [edi + 0x1dc], xmm3
movss dword [edi + 0x1e0], xmm4
movss xmm0, dword [edi + 0x1d4]
movss xmm4, dword [ebp - 0x130]
movss xmm5, dword [ebp - 0x12c]
maxss xmm0, xmm4
maxss xmm6, xmm5
movss dword [edi + 0x1d4], xmm0
movss dword [edi + 0x1d8], xmm6
movss xmm0, dword [edi + 0x1e0]
movss xmm1, dword [edi + 0x1dc]
minss xmm0, dword [ebp - 0x124]
minss xmm1, dword [ebp - 0x128]
movss dword [edi + 0x1e0], xmm0
movss dword [edi + 0x1dc], xmm1
movss xmm6, dword [edi + 0x18]
movss xmm7, dword [edi + 0x1c]
movaps xmm3, xmm6
movaps xmm0, xmm7
addss xmm6, dword [edi + 0x20]
addss xmm7, dword [edi + 0x24]
addss xmm0, dword [edi + 0x64]
addss xmm3, dword [edi + 0x60]
subss xmm6, dword [edi + 0x68]
subss xmm7, dword [edi + 0x6c]
movss dword [ebp - 0xe4], xmm0
movss dword [edi + 0x1e4], xmm3
movss dword [edi + 0x1e8], xmm0
movss dword [edi + 0x1ec], xmm6
movss dword [edi + 0x1f0], xmm7
cmp eax, 1
jne 0x40f66a
movss xmm1, dword [edi + 0x54]
jmp 0x40f672
movss xmm1, dword [ecx + 0x3910]
movss xmm0, dword [edi + 0x54]
xorps xmm2, xmm2
mulss xmm0, dword [0x4441cc]
addss xmm3, dword [0x4441cc]
movss dword [ebp - 0xd8], xmm0
addss xmm3, xmm0
comiss xmm3, xmm2
cvttss2si eax, xmm3
mov dword [ebp - 0xd4], eax
jae 0x40f6c2
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jnp 0x40f6bc
cvttss2si eax, xmm3
dec eax
jmp 0x40f6c2
mov eax, dword [ebp - 0xd4]
movss xmm3, dword [ebp - 0xe4]
addss xmm3, dword [0x4441cc]
mulss xmm1, dword [0x4441cc]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm1, xmm3
movss dword [edi + 0x1f4], xmm0
comiss xmm1, xmm2
cvttss2si eax, xmm1
mov dword [ebp - 0xd4], eax
jae 0x40f719
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40f713
cvttss2si eax, xmm1
dec eax
jmp 0x40f719
mov eax, dword [ebp - 0xd4]
movss xmm1, dword [ebp - 0xd8]
subss xmm6, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm6, xmm2
cvttss2si eax, xmm6
movss dword [edi + 0x1f8], xmm0
mov dword [ebp - 0xd4], eax
jae 0x40f760
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm6
lahf
test ah, 0x44
jnp 0x40f75a
cvttss2si eax, xmm6
dec eax
jmp 0x40f760
mov eax, dword [ebp - 0xd4]
subss xmm7, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm7, xmm2
cvttss2si eax, xmm7
movss dword [edi + 0x1fc], xmm0
mov dword [ebp - 0xd4], eax
jae 0x40f79f
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm7
lahf
test ah, 0x44
jnp 0x40f799
cvttss2si eax, xmm7
dec eax
jmp 0x40f79f
mov eax, dword [ebp - 0xd4]
movss xmm6, dword [ebp - 0x124]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x200], xmm0
movss xmm0, dword [edi + 0x1f8]
comiss xmm5, xmm0
jbe 0x40f7c8
movaps xmm1, xmm5
jmp 0x40f7cf
movaps xmm1, xmm6
minss xmm1, xmm0
movss xmm3, dword [edi + 0x1f4]
comiss xmm4, xmm3
movss xmm7, dword [ebp - 0x128]
jbe 0x40f7e9
movaps xmm0, xmm4
jmp 0x40f7f0
movaps xmm0, xmm7
minss xmm0, xmm3
movss dword [edi + 0x1f4], xmm0
movss dword [edi + 0x1f8], xmm1
movss xmm0, dword [edi + 0x200]
comiss xmm5, xmm0
ja 0x40f814
movaps xmm5, xmm6
minss xmm5, xmm0
movss xmm0, dword [edi + 0x1fc]
comiss xmm4, xmm0
ja 0x40f828
movaps xmm4, xmm7
minss xmm4, xmm0
movss dword [edi + 0x1fc], xmm4
movss dword [edi + 0x200], xmm5
movss xmm0, dword [edi + 0x20]
comiss xmm0, xmm2
jbe 0x40f854
test edx, 0x2000040
jne 0x40f854
mulss xmm0, dword [0x4441d4]
jmp 0x40f864
movss xmm0, dword [ecx + 0x3d50]
mulss xmm0, dword [0x444258]
cvttss2si eax, xmm0
mov edx, edi
lea ecx, [ebp - 0x180]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x254], xmm0
movss xmm1, dword [edi + 0x48]
movss xmm0, dword [edi + 0x1ec]
addss xmm1, xmm1
subss xmm0, dword [edi + 0x1e4]
addss xmm1, dword [edi + 0x30]
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
movss dword [edi + 0x90], xmm0
movss xmm1, dword [edi + 0x4c]
movss xmm0, dword [edi + 0x1f0]
addss xmm1, xmm1
subss xmm0, dword [edi + 0x1e8]
addss xmm1, dword [edi + 0x34]
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
movss dword [edi + 0x94], xmm0
call fcn.004143e0
mov edx, dword [ebp - 0xe0]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
movss dword [edi + 0x88], xmm0
movss dword [edi + 0x8c], xmm1
mov dword [edi + 0x98], 0x7f7fffff
mov dword [edi + 0x9c], 0x7f7fffff
mov dword [edi + 0x74], 0
mov dword [edi + 0x70], 0
mov eax, dword [edx + 0x3d4c]
mov ecx, dword [edi + 0x278]
mov dword [ebp - 0xd0], ecx
add ecx, 0x7c
mov dword [ebp - 0xe4], ecx
mov eax, dword [eax + 0x30]
mov edx, dword [ecx]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd8], eax
mov eax, dword [ecx + 4]
cmp edx, eax
jne 0x40f988
inc edx
mov dword [ebp - 0xd4], edx
test eax, eax
je 0x40f972
cdq
sub eax, edx
mov edx, dword [ebp - 0xd4]
sar eax, 1
add eax, dword [ecx + 4]
jmp 0x40f977
mov eax, 8
cmp eax, edx
cmovg edx, eax
push edx
call fcn.0041b8f0
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx]
mov eax, dword [ecx + 8]
mov edi, dword [ebp - 0xd8]
mov dword [eax + edx*4], edi
mov eax, edi
inc dword [ecx]
mov ecx, dword [ebp - 0xd0]
mov dword [ecx + 0x54], eax
call fcn.004249e0
mov ecx, dword [0x4474b8]
movss xmm0, dword [ebp - 0x130]
movss xmm1, dword [ebp - 0x12c]
mov edi, dword [ebp - 0xe8]
mov eax, dword [ecx + 0x4004]
movss dword [ebp - 0x40], xmm0
maxss xmm0, dword [ebp - 0x128]
movss dword [ebp - 0x3c], xmm1
maxss xmm1, dword [ebp - 0x124]
mov byte [eax + 0xbc], 1
mov eax, dword [ecx + 0x4004]
mov dword [ebp - 0xd0], eax
movss dword [ebp - 0x38], xmm0
movss dword [ebp - 0x34], xmm1
mov eax, dword [eax + 0x278]
mov edx, dword [eax + 0x70]
lea ecx, [eax + 0x70]
mov dword [ebp - 0xd8], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0xe4], ecx
cmp edx, eax
jne 0x40fa51
inc edx
mov dword [ebp - 0xd4], edx
test eax, eax
je 0x40fa3b
cdq
sub eax, edx
mov edx, dword [ebp - 0xd4]
sar eax, 1
add eax, dword [ecx + 4]
jmp 0x40fa40
mov eax, 8
cmp eax, edx
cmovg edx, eax
push edx
call fcn.0041c330
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ecx]
mov edx, dword [ecx + 8]
add eax, eax
movaps xmm0, xmmword [ebp - 0x40]
movups xmmword [edx + eax*8], xmm0
inc dword [ecx]
mov ecx, dword [ebp - 0xd8]
movups xmmword [ecx + 0x44], xmm0
call fcn.00424940
mov edx, dword [ebp - 0xd0]
mov byte [ebp - 0xba], 0
mov eax, dword [edx + 0x278]
mov ecx, dword [eax + 0x70]
mov eax, dword [eax + 0x78]
add ecx, ecx
movss xmm0, dword [eax + ecx*8 - 0xc]
movss xmm1, dword [eax + ecx*8 - 8]
movss xmm2, dword [eax + ecx*8 - 4]
mov eax, dword [eax + ecx*8 - 0x10]
mov dword [edx + 0x224], eax
mov eax, dword [ebp - 0xc0]
movss dword [edx + 0x228], xmm0
and eax, 0x5000000
movss dword [edx + 0x22c], xmm1
movss dword [edx + 0x230], xmm2
cmp eax, 0x1000000
jne 0x40fb96
cmp dword [ebp - 0xdc], 0x3000000
je 0x40fb96
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax + 0x190]
cmp ecx, 2
jl 0x40fb52
mov eax, dword [eax + 0x198]
mov eax, dword [eax + ecx*4 - 8]
test eax, eax
je 0x40fb52
movss xmm5, dword [eax + 0x1c]
movss xmm7, dword [eax + 0x18]
movaps xmm0, xmm5
addss xmm0, dword [eax + 0x24]
movss xmm6, dword [edi + 0x18]
movaps xmm3, xmm7
movss xmm2, dword [edi + 0x1c]
movaps xmm4, xmm6
addss xmm3, dword [eax + 0x20]
addss xmm4, dword [edi + 0x20]
comiss xmm0, dword [edi + 0x1c]
addss xmm2, dword [edi + 0x24]
jbe 0x40fb52
comiss xmm2, xmm5
jbe 0x40fb52
comiss xmm3, xmm6
jbe 0x40fb52
comiss xmm4, xmm7
mov byte [ebp - 0xb9], 1
ja 0x40fb59
mov byte [ebp - 0xb9], 0
mov edx, dword [edi + 0x278]
mov eax, dword [edx]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 8]
cmp dword [eax + ecx*8 - 0xc], 0
jne 0x40fb96
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + 0x278]
cmp dword [eax + 0x18], 0
je 0x40fb96
cmp byte [ebp - 0xb9], 0
jne 0x40fb96
mov byte [ebp - 0xba], 1
mov dword [edi + 0x278], eax
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x4ca4]
test ecx, ecx
jne 0x40fbac
mov ecx, dword [eax + 0x4ad8]
cmp byte [ebp - 0xc4], 0
jne 0x40fbd0
test ecx, ecx
je 0x40fbc7
mov eax, dword [edi + 0x31c]
cmp eax, dword [ecx + 0x31c]
je 0x40fbd0
mov byte [ebp - 0xd8], 0
jmp 0x40fbd7
mov byte [ebp - 0xd8], 1
movd xmm0, esi
lea eax, [ebp - 0x20]
push ecx
cvtdq2ps xmm0, xmm0
lea edx, [ebp - 0x120]
movss dword [esp], xmm0
push eax
push dword [ebp - 0xcc]
push ecx
push dword [ebp - 0xd8]
mov ecx, edi
call fcn.0040cfb0
add esp, 0x14
cmp byte [ebp - 0xba], 0
je 0x40fc1a
lea eax, [edi + 0x27c]
mov dword [edi + 0x278], eax
mov ecx, dword [ebp - 0xc0]
xorps xmm4, xmm4
movss xmm5, dword [edi + 0x40]
mov edx, ecx
shr edx, 3
not dl
and dl, 1
ucomiss xmm5, xmm4
lahf
test ah, 0x44
jnp 0x40fc45
movss dword [ebp - 0xcc], xmm5
jmp 0x40fc89
movss xmm0, dword [edi + 0x48]
mov eax, ecx
movss xmm1, dword [edi + 0x20]
addss xmm0, xmm0
and eax, 0x808
subss xmm1, xmm0
movss xmm0, dword [edi + 0x68]
addss xmm0, dword [edi + 0x60]
subss xmm1, xmm0
cmp eax, 0x800
jne 0x40fc7a
movss xmm0, dword [edi + 0x30]
jmp 0x40fc7d
xorps xmm0, xmm0
maxss xmm0, xmm1
movss dword [ebp - 0xcc], xmm0
movss xmm6, dword [edi + 0x44]
ucomiss xmm6, xmm4
lahf
test ah, 0x44
jnp 0x40fc9c
movaps xmm7, xmm6
jmp 0x40fcce
movss xmm0, dword [edi + 0x4c]
movss xmm1, dword [edi + 0x24]
addss xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [edi + 0x6c]
addss xmm0, dword [edi + 0x64]
subss xmm1, xmm0
test dl, dl
je 0x40fcc7
movss xmm7, dword [edi + 0x34]
jmp 0x40fcca
xorps xmm7, xmm7
maxss xmm7, xmm1
movss xmm0, dword [edi + 0x48]
movss xmm2, dword [edi + 0x88]
movss xmm1, dword [edi + 0x1e4]
movss dword [ebp - 0xd4], xmm0
subss xmm1, xmm2
maxss xmm0, dword [edi + 0x54]
movss dword [ebp - 0xdc], xmm2
ucomiss xmm5, xmm4
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [edi + 0x204], xmm2
movss xmm0, dword [edi + 0x8c]
movss xmm1, dword [edi + 0x4c]
movss dword [ebp - 0xe8], xmm0
movss xmm0, dword [edi + 0x1e8]
subss xmm0, dword [ebp - 0xe8]
movss dword [ebp - 0xe4], xmm1
maxss xmm1, dword [edi + 0x54]
addss xmm2, dword [ebp - 0xcc]
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
lahf
movss dword [edi + 0x208], xmm0
addss xmm7, xmm0
movss dword [edi + 0x20c], xmm2
movss xmm2, dword [ebp - 0xd4]
movss dword [edi + 0x210], xmm7
movss xmm7, dword [ebp - 0xe4]
movups xmm0, xmmword [edi + 0x204]
movups xmmword [edi + 0x214], xmm0
movss xmm1, dword [edi + 0x18]
movss xmm0, dword [edi + 0x60]
movss dword [ebp - 0xd0], xmm1
movss dword [ebp - 0xd8], xmm0
subss xmm1, dword [ebp - 0xdc]
addss xmm1, xmm2
addss xmm1, xmm0
movss dword [edi + 0x234], xmm1
movss xmm3, dword [edi + 0x1c]
movss xmm0, dword [edi + 0x64]
movss dword [ebp - 0xd4], xmm3
movss dword [ebp - 0xcc], xmm0
subss xmm3, dword [ebp - 0xe8]
addss xmm3, xmm7
addss xmm3, xmm0
movss dword [edi + 0x238], xmm3
test ah, 0x44
jp 0x40fe24
movss xmm5, dword [edi + 0x20]
movaps xmm0, xmm2
addss xmm0, xmm2
subss xmm5, xmm0
movss xmm0, dword [ebp - 0xd8]
addss xmm0, dword [edi + 0x68]
subss xmm5, xmm0
ucomiss xmm6, xmm4
addss xmm5, xmm1
lahf
movss dword [edi + 0x23c], xmm5
movss xmm5, dword [ebp - 0xcc]
test ah, 0x44
jp 0x40fe5d
movss xmm6, dword [edi + 0x24]
movaps xmm0, xmm7
addss xmm0, xmm7
subss xmm6, xmm0
movaps xmm0, xmm5
addss xmm0, dword [edi + 0x6c]
subss xmm6, xmm0
movss xmm1, dword [ebp - 0xd8]
addss xmm3, xmm6
movss xmm6, dword [ebp - 0xdc]
lea ecx, [edi + 0x16c]
movaps xmm0, xmm1
mov esi, dword [ebp - 0xe0]
addss xmm0, xmm2
movss dword [edi + 0x240], xmm3
movss xmm3, dword [ebp - 0xd0]
cvtps2pd xmm3, xmm3
subss xmm0, xmm6
movss dword [edi + 0x144], xmm0
cvtps2pd xmm0, xmm2
mov dword [edi + 0x14c], 0
mov dword [edi + 0x148], 0
movss xmm2, dword [ebp - 0xd4]
addsd xmm3, xmm0
cvtps2pd xmm0, xmm6
cvtps2pd xmm2, xmm2
subsd xmm3, xmm0
cvtps2pd xmm0, xmm1
addsd xmm3, xmm0
cvtps2pd xmm0, xmm7
addsd xmm3, qword [0x444180]
addsd xmm2, xmm0
movss xmm0, dword [ebp - 0xe8]
cvtps2pd xmm0, xmm0
subsd xmm2, xmm0
cvtps2pd xmm0, xmm5
addsd xmm2, xmm0
cvtpd2ps xmm0, xmm3
cvtpd2ps xmm1, xmm2
movss dword [edi + 0x110], xmm0
movss dword [edi + 0x114], xmm1
movss xmm0, dword [edi + 0x110]
cvtps2pd xmm0, xmm0
subsd xmm3, xmm0
movss xmm0, dword [edi + 0x114]
cvtps2pd xmm0, xmm0
cvtpd2ps xmm1, xmm3
subsd xmm2, xmm0
movss dword [edi + 0x150], xmm1
cvtpd2ps xmm0, xmm2
movss dword [edi + 0x154], xmm0
movss xmm1, dword [edi + 0x110]
movss xmm0, dword [edi + 0x114]
movss dword [edi + 0x100], xmm1
movss dword [edi + 0x104], xmm0
movss dword [edi + 0x108], xmm1
movss dword [edi + 0x10c], xmm0
movss dword [edi + 0x118], xmm1
movss dword [edi + 0x11c], xmm0
movss dword [edi + 0x120], xmm1
movss dword [edi + 0x124], xmm0
mov dword [edi + 0x130], 0
mov dword [edi + 0x134], 0
mov dword [edi + 0x128], 0
mov dword [edi + 0x12c], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x138], 0
mov word [edi + 0x140], 0
mov dword [edi + 0x158], 0
mov ax, word [edi + 0x15e]
mov word [edi + 0x15c], ax
mov dword [edi + 0x15e], 0x10000
movss xmm0, dword [edi + 0x94]
comiss xmm0, xmm4
seta al
cmp byte [ebp - 0xc5], 0
mov byte [edi + 0x162], al
lea eax, [ecx + 0x12]
mov byte [edi + 0x163], 0
movss xmm1, dword [esi + 0x3914]
mov dword [ebp - 0xcc], eax
je 0x41003f
xorps xmm0, xmm0
movq qword [eax], xmm0
jmp 0x410045
mov dword [ebp - 0xcc], eax
cvttss2si eax, xmm1
push ecx
mov word [ecx + 8], ax
call fcn.00438cf0
mov eax, dword [ebp - 0xcc]
xorps xmm0, xmm0
movq qword [eax], xmm0
mov eax, dword [edi + 0x170]
mov dword [edi + 0x16c], eax
lea eax, [edi + 0x190]
mov dword [edi + 0x170], 0
mov dword [edi + 0x188], 0
mov dword [edi + 0x18c], 0
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x4100b9
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x190]
call fcn.0041b8f0
lea eax, [edi + 0x190]
mov dword [eax], 0
lea eax, [edi + 0x258]
mov dword [edi + 0x19c], eax
mov eax, dword [ebp - 0xf0]
mov dword [edi + 0x1a0], 0
mov dword [edi + 0x1a8], 1
test eax, eax
je 0x4100f1
mov eax, dword [eax + 0x1a8]
jmp 0x4100f6
mov eax, 1
mov dword [edi + 0x1ac], eax
mov eax, dword [edi + 0x254]
mov dword [edi + 0x1b4], eax
lea eax, [edi + 0x1bc]
mov dword [edi + 0x1b8], 0xbf800000
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x410141
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x1bc]
call fcn.0041b8f0
lea eax, [edi + 0x1bc]
mov dword [eax], 0
lea eax, [edi + 0x1c8]
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x410176
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x1c8]
call fcn.0041b8f0
lea eax, [edi + 0x1c8]
test dword [ebp - 0xc0], 0x8000000
mov dword [eax], 0
je 0x410253
mov edx, dword [0x4474b8]
xorps xmm0, xmm0
movss xmm5, dword [0x444204]
movss xmm2, dword [edx + 0x3d28]
comiss xmm0, xmm2
jbe 0x4101af
xorps xmm1, xmm1
jmp 0x4101b6
movaps xmm1, xmm5
minss xmm1, xmm2
movss xmm2, dword [0x444280]
movss xmm3, dword [0x4441cc]
movss xmm4, dword [edx + 0x3d2c]
comiss xmm0, xmm4
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
jbe 0x4101e4
xorps xmm1, xmm1
jmp 0x4101eb
movaps xmm1, xmm5
minss xmm1, xmm4
movss xmm4, dword [edx + 0x3d30]
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si eax, xmm1
shl eax, 8
or ecx, eax
comiss xmm0, xmm4
jbe 0x41020e
xorps xmm1, xmm1
jmp 0x410215
movaps xmm1, xmm5
minss xmm1, xmm4
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si eax, xmm1
movss xmm1, dword [edx + 0x3d34]
shl eax, 0x10
or ecx, eax
comiss xmm0, xmm1
jbe 0x410238
xorps xmm5, xmm5
jmp 0x41023c
minss xmm5, xmm1
mulss xmm5, xmm2
addss xmm5, xmm3
cvttss2si eax, xmm5
shl eax, 0x18
or eax, ecx
mov dword [edi + 0x1b0], eax
mov al, byte [edi + 0xd2]
test al, al
jle 0x410265
dec al
mov byte [edi + 0xd2], al
mov al, byte [edi + 0xd3]
test al, al
jle 0x410277
dec al
mov byte [edi + 0xd3], al
cmp byte [ebp - 0xc4], 0
je 0x41029d
mov edx, 2
mov ecx, edi
call fcn.00410ca0
cmp edi, dword [esi + 0x4ad8]
jne 0x41029d
xor dl, dl
mov ecx, edi
call fcn.00416170
test byte [ebp - 0xc0], 1
jne 0x41030c
movss xmm0, dword [ebp - 0x120]
lea edx, [ebp - 0x158]
addss xmm0, dword [edi + 0x54]
push dword [ebp - 0x104]
mov ecx, edi
push dword [ebp - 0x100]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [ebp - 0x11c]
movss dword [ebp - 0x154], xmm0
movss xmm0, dword [ebp - 0x118]
subss xmm0, dword [edi + 0x54]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x114]
movss dword [ebp - 0x14c], xmm0
call fcn.0040d590
add esp, 8
xor eax, eax
lea edx, [ebp - 0x120]
mov ecx, edi
mov dword [edi + 0x244], eax
call fcn.00410840
mov eax, dword [esi + 0x4964]
test eax, eax
je 0x41047f
cmp dword [edi + 8], eax
je 0x41033d
cmp dword [edi + 0x7c], eax
jne 0x41047f
call fcn.0041a990
jmp 0x41047f
cmp byte [edi + 0xc0], 0
je 0x41039b
mov byte [edi + 0xba], 1
mov edx, dword [edi + 0x198]
mov eax, dword [edi + 0x190]
lea eax, [edx + eax*4]
mov dword [ebp - 0xd4], eax
cmp edx, eax
je 0x41039b
mov ecx, dword [edx]
cmp byte [ecx + 0xc2], 0
jne 0x410394
mov byte [ecx + 0xc0], 1
mov byte [ecx + 0xba], 1
call fcn.0040dc70
mov eax, dword [ebp - 0xd4]
add edx, 4
cmp edx, eax
jne 0x410370
mov ecx, dword [0x4474b8]
mov dword [ecx + 0x4004], edi
mov edx, dword [edi + 0x1a4]
cmp edx, 0xffffffff
je 0x4103bd
shl edx, 9
add edx, dword [ecx + 0x4da4]
jmp 0x4103bf
xor edx, edx
mov dword [ecx + 0x4d84], edx
mov dword [ecx + 0x3d5c], 0x3f800000
mov eax, dword [edi]
movss xmm0, dword [eax + 0x3d54]
mov eax, dword [edi + 0x30c]
mulss xmm0, dword [edi + 0x270]
test eax, eax
je 0x4103f3
mulss xmm0, dword [eax + 0x270]
mov eax, dword [ecx + 0x3d4c]
movss dword [ecx + 0x3d6c], xmm0
movss dword [ecx + 0x3d50], xmm0
divss xmm0, dword [eax + 0x10]
movss dword [ecx + 0x3d70], xmm0
movss dword [ecx + 0x3d58], xmm0
test edx, edx
jne 0x41042e
cmp dword [edi + 0x1a0], edx
jne 0x41042e
mov al, 1
jmp 0x410430
xor al, al
mov byte [edi + 0x160], al
lea edx, [ebp - 0x140]
movss xmm0, dword [edi + 0x18]
mov ecx, edi
movss xmm1, dword [edi + 0x58]
movaps xmm2, xmm0
addss xmm2, dword [edi + 0x28]
addss xmm1, dword [edi + 0x1c]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [edi + 0x1c]
movss dword [ebp - 0x13c], xmm0
movss dword [ebp - 0x138], xmm2
movss dword [ebp - 0x134], xmm1
call fcn.00410840
cmp byte [edi + 0xc0], 0
jne 0x410602
mov ecx, dword [0x4474b8]
mov eax, dword [ecx + 0x4004]
mov byte [eax + 0xbc], 1
mov eax, dword [ecx + 0x4004]
movss xmm1, dword [edi + 0x1f4]
movss xmm0, dword [edi + 0x1f8]
movss xmm3, dword [edi + 0x1fc]
movss xmm2, dword [edi + 0x200]
mov dword [ebp - 0xcc], eax
mov eax, dword [eax + 0x278]
mov dword [ebp - 0x104], eax
movss dword [ebp - 0x120], xmm1
movss dword [ebp - 0x11c], xmm0
movups xmm4, xmmword [eax + 0x44]
comiss xmm4, xmm1
movaps xmmword [ebp - 0x140], xmm4
jbe 0x410502
movaps xmm1, xmm4
movss dword [ebp - 0x120], xmm1
movss xmm4, dword [ebp - 0x13c]
comiss xmm4, xmm0
jbe 0x41051a
movaps xmm0, xmm4
movss dword [ebp - 0x11c], xmm0
movss xmm4, dword [ebp - 0x138]
comiss xmm3, xmm4
jbe 0x41052a
movaps xmm3, xmm4
movss xmm4, dword [ebp - 0x134]
comiss xmm2, xmm4
jbe 0x41053a
movaps xmm2, xmm4
mov edx, dword [eax + 0x70]
lea ecx, [eax + 0x70]
mov eax, dword [ecx + 4]
maxss xmm1, xmm3
mov dword [ebp - 0xe4], ecx
maxss xmm0, xmm2
movss dword [ebp - 0x118], xmm1
movss dword [ebp - 0x114], xmm0
cmp edx, eax
jne 0x410596
inc edx
mov dword [ebp - 0xd4], edx
test eax, eax
je 0x410580
cdq
sub eax, edx
mov edx, dword [ebp - 0xd4]
sar eax, 1
add eax, dword [ecx + 4]
jmp 0x410585
mov eax, 8
cmp eax, edx
cmovg edx, eax
push edx
call fcn.0041c330
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ecx]
mov edx, dword [ecx + 8]
add eax, eax
movaps xmm0, xmmword [ebp - 0x120]
movups xmmword [edx + eax*8], xmm0
inc dword [ecx]
mov ecx, dword [ebp - 0x104]
movups xmmword [ecx + 0x44], xmm0
call fcn.00424940
mov edx, dword [ebp - 0xcc]
mov eax, dword [edx + 0x278]
mov ecx, dword [eax + 0x70]
mov eax, dword [eax + 0x78]
shl ecx, 4
movss xmm0, dword [ecx + eax - 0xc]
movss xmm1, dword [ecx + eax - 8]
movss xmm2, dword [ecx + eax - 4]
mov eax, dword [ecx + eax - 0x10]
mov dword [edx + 0x224], eax
movss dword [edx + 0x228], xmm0
movss dword [edx + 0x22c], xmm1
movss dword [edx + 0x230], xmm2
mov eax, dword [ebp - 0xf8]
mov byte [edi + 0xbc], 0
inc word [edi + 0xc8]
mov dword [esi + 0x49f0], 0
cmp eax, dword [ebp - 0xfc]
je 0x4107af
cmp byte [edi + 0xc0], 0
jne 0x4107a8
mov eax, dword [ebp - 0xc0]
and eax, 0x11000000
cmp eax, 0x1000000
jne 0x41070c
test dword [edi + 0x10], 0x100
je 0x41067d
cmp byte [esi + 0x4b24], 0
je 0x41067d
mov eax, dword [esi + 0x4ad8]
test eax, eax
je 0x41067d
mov eax, dword [eax + 0x320]
cmp eax, dword [edi + 0x320]
jne 0x41067d
mov al, 1
jmp 0x41067f
xor al, al
cmp byte [esi + 0x5140], 0
jne 0x4106d0
test al, al
jne 0x4106d0
movss xmm0, dword [edi + 0x1d4]
comiss xmm0, dword [edi + 0x1dc]
jae 0x4106ae
movss xmm0, dword [edi + 0x1d8]
comiss xmm0, dword [edi + 0x1e0]
jb 0x4106d0
cmp byte [edi + 0xd2], 0
jg 0x4106c9
cmp byte [edi + 0xd3], 0
jg 0x4106c9
mov byte [edi + 0xdc], 1
jmp 0x4106d0
mov byte [edi + 0xdd], 1
mov eax, dword [ebp - 0xf0]
test eax, eax
je 0x41070c
cmp byte [eax + 0xbd], 0
jne 0x4106ec
cmp byte [eax + 0xdc], 0
jle 0x4106f3
mov byte [edi + 0xdc], 1
cmp byte [eax + 0xbd], 0
jne 0x410705
cmp byte [eax + 0xdd], 0
jle 0x41070c
mov byte [edi + 0xdd], 1
xorps xmm0, xmm0
comiss xmm0, dword [esi + 0x38c8]
jb 0x41071f
mov byte [edi + 0xdc], 1
cmp byte [edi + 0xdc], 0
jg 0x41073f
cmp byte [edi + 0xdd], 0
jg 0x41073f
xor cl, cl
cmp byte [edi + 0xde], cl
jg 0x410741
xor al, al
jmp 0x410743
mov cl, 1
mov al, 1
mov byte [edi + 0xc2], al
mov al, byte [edi + 0xdf]
test al, al
jle 0x410766
dec al
mov byte [edi + 0xdf], al
mov eax, dword [edi + 0xc]
or eax, 0x30200
mov dword [edi + 0xc], eax
xor al, al
cmp byte [edi + 0xbd], al
jne 0x41077c
cmp byte [edi + 0xba], al
je 0x41077c
test cl, cl
je 0x4107a0
cmp byte [edi + 0xd2], 0
jg 0x4107a0
cmp byte [edi + 0xd3], 0
jg 0x4107a0
cmp byte [edi + 0xdd], 0
mov ecx, 1
movzx eax, al
cmovle eax, ecx
mov byte [edi + 0xbf], al
jmp 0x4107af
mov byte [edi + 0xbf], 1
cmp byte [edi + 0xc3], 0
jne 0x410815
cmp byte [esi + 0x6a], 0
je 0x4107c7
cmp dword [ebp - 0x108], 0
je 0x4107dc
cmp byte [esi + 0x6b], 0
je 0x410815
movsx eax, byte [esi + 0x51ac]
cmp eax, dword [esi + 0x3fdc]
jne 0x410815
mov al, byte [edi + 0xd2]
test al, al
jle 0x4107ee
inc al
mov byte [edi + 0xd2], al
mov al, byte [edi + 0xd3]
test al, al
jle 0x410800
inc al
mov byte [edi + 0xd3], al
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043bca4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp byte [edi + 0xbf], 0
mov ecx, dword [ebp - 4]
sete al
xor ecx, ebp
pop edi
pop esi
call fcn.0043bca4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret