Function at 0x1005dd30
Capabilities:
Access peb ldr_data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011c2c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x1f0
push esi
push edi
mov edi, dword [ebx + 0xc]
push edi
call fcn.10078e10
add esp, 4
mov dword [edi + 4], 0
mov ecx, edi
mov dword [edi + 0x20], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
call fcn.10078950
xor edx, edx
mov byte [ebp - 0x11], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x84], edx
xor edi, edi
mov dword [ebp - 4], edx
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x78], edi
mov eax, dword [ebx + 0xc]
lea edx, [edi + 8]
mov byte [ebp - 4], 1
mov ecx, dword [eax + 0x4c]
mov dword [ebp - 0x50], ecx
test ecx, ecx
jle 0x1005de1f
cmp ecx, edx
mov esi, ecx
cmovl esi, edx
test esi, esi
jle 0x1005de1f
imul eax, esi, 0x54
push eax
call fcn.1006c030
mov ecx, dword [ebp - 0x50]
lea edx, [edi + 8]
mov dword [ebp - 0x40], eax
add esp, 4
mov dword [ebp - 0x84], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x88], esi
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x28], eax
test eax, eax
jle 0x1005de5b
cmp eax, 8
mov esi, eax
cmovl esi, edx
test esi, esi
jle 0x1005de5b
lea eax, [esi + esi*2]
shl eax, 3
push eax
call fcn.1006c030
mov ecx, dword [ebp - 0x50]
mov edi, eax
mov eax, dword [ebp - 0x28]
add esp, 4
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x7c], esi
mov esi, dword [ebp - 0x40]
imul ecx, ecx, 0x54
mov dword [ebp - 0x80], eax
push ecx
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x28]
lea eax, [eax + eax*2]
shl eax, 3
push eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebx + 0xc]
add esp, 0x18
mov dword [ebp - 0x2c], 0
cmp dword [edx + 0x4c], 0
jle 0x1005df97
xor ecx, ecx
add esi, 0x34
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x18], esi
mov eax, dword [edx + 0x54]
xor edx, edx
add eax, ecx
mov dword [esi - 4], 0xffffffff
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x34], eax
cmp dword [ecx + 0x34], edx
jle 0x1005e19f
mov edi, dword [ebp - 0x18]
or esi, 0xffffffff
mov ecx, esi
cmp esi, 0xffffffff
jne 0x1005deee
mov ecx, dword [ebx + 0xc]
or esi, esi
mov eax, dword [eax + 0x7c]
mov ecx, dword [ecx + 0x3c]
cmp eax, dword [ecx + edx*4]
jne 0x1005dee0
mov dword [edi - 4], edx
mov esi, edx
mov eax, dword [ebx + 0xc]
inc edx
mov ecx, esi
cmp edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x34]
jl 0x1005dec4
mov edi, dword [ebp - 0x3c]
cmp ecx, 0xffffffff
je 0x1005e19f
push dword [ebx + 0x10]
mov esi, dword [ebp - 0x18]
push eax
push dword [ebx + 8]
lea ecx, [esi - 0x34]
call fcn.1005ecd0
test al, al
je 0x1005e19f
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x40]
mov edx, dword [edx + 0x30]
shr eax, 8
and al, 1
or byte [ebp - 0x11], al
mov eax, dword [esi - 4]
lea eax, [eax + eax*2]
mov dword [ebp - 0x24], eax
test edx, edx
jne 0x1005df3c
mov ecx, dword [ebx + 0xc]
call fcn.100789e0
mov edx, eax
mov dword [esi - 8], edx
cmp word [edx], 0
je 0x1005df60
movzx eax, word [edx + 2]
test ax, ax
je 0x1005df60
mov ecx, eax
cmp dword [esi], ecx
cmovge ecx, dword [esi]
add edx, 4
mov dword [esi], ecx
cmp word [edx], 0
jne 0x1005df45
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
inc dword [edi + edx*8]
mov ecx, dword [esi]
cmp dword [edi + edx*8 + 4], ecx
cmovge ecx, dword [edi + edx*8 + 4]
inc eax
mov dword [edi + edx*8 + 4], ecx
add esi, 0x54
mov edx, dword [ebx + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, 0xffffff80
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x38], ecx
cmp eax, dword [edx + 0x4c]
jl 0x1005dea1
mov eax, dword [ebp - 0x50]
xor esi, esi
mov dword [ebp - 0x1c], esi
test eax, eax
jle 0x1005e26a
mov edx, dword [ebp - 0x40]
add edx, 0x38
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x20], edx
mov eax, dword [edx - 8]
lea esi, [edx + 4]
mov ecx, esi
lea edi, [eax + eax*2]
mov eax, dword [edx - 4]
add eax, 0x20
mov dword [ebp - 0x18], edi
sar eax, 5
push eax
call fcn.1005ef20
mov eax, dword [esi]
shl eax, 2
push eax
mov eax, dword [ebp - 0x20]
push 0
push dword [eax + 0xc]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x3c]
add esp, 0xc
cmp dword [eax + edi*8 + 0xc], 0
lea esi, [eax + edi*8]
jne 0x1005e01a
mov eax, dword [eax + edi*8 + 4]
lea ecx, [esi + 0xc]
add eax, 0x20
sar eax, 5
push eax
call fcn.1005ef20
mov eax, dword [esi + 0xc]
shl eax, 2
push eax
push 0
push dword [esi + 0x14]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x20]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x30], eax
cmp word [eax], 0
je 0x1005e0c4
nop dword [eax]
movzx ecx, word [eax + 2]
test cx, cx
je 0x1005e0c4
movzx edi, word [eax]
cmp edi, ecx
ja 0x1005e0b1
mov eax, dword [ebp - 0x18]
mov ecx, edi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov esi, edi
mov ecx, dword [ebp - 0x3c]
sar esi, 5
mov dword [ebp - 0x24], edx
mov eax, dword [ecx + eax*8 + 0x14]
test dword [eax + esi*4], edx
jne 0x1005e0a2
mov eax, dword [ebp - 0x20]
push edi
push dword [eax - 0x20]
call fcn.100b87d0
mov edx, dword [ebp - 0x20]
add esp, 8
test eax, eax
je 0x1005e0a5
inc dword [edx]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3c]
inc dword [ecx + eax*8 + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x3c]
or dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [edx + eax*8 + 0x14]
or dword [eax + esi*4], ecx
inc dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
inc edi
movzx eax, word [eax + 2]
cmp edi, eax
jle 0x1005e044
mov eax, dword [ebp - 0x30]
add eax, 4
mov dword [ebp - 0x30], eax
cmp word [eax], 0
jne 0x1005e030
add edx, 0x54
sub dword [ebp - 0x34], 1
mov dword [ebp - 0x20], edx
jne 0x1005dfb3
mov esi, dword [ebp - 0x40]
mov edx, dword [ebp - 0x50]
add esi, 0x4c
mov dword [ebp - 0x38], edx
mov eax, dword [esi - 0x14]
mov dword [ebp - 0x5c], eax
cmp eax, dword [esi]
jle 0x1005e124
shl eax, 5
push eax
call fcn.1006c030
mov edx, dword [esi + 4]
add esp, 4
mov dword [ebp - 0x24], eax
test edx, edx
je 0x1005e11c
mov ecx, dword [esi - 4]
shl ecx, 5
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [esi + 4]
call fcn.1006c060
mov eax, dword [ebp - 0x24]
add esp, 0x10
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x5c]
mov dword [esi], eax
mov edx, dword [esi - 8]
mov ecx, dword [esi - 0x10]
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x2c], edx
lea eax, [edx + ecx*4]
mov dword [ebp - 0x68], eax
cmp edx, eax
jae 0x1005e230
nop
mov eax, dword [edx]
mov dword [ebp - 0x24], eax
test eax, eax
je 0x1005e221
xor edi, edi
mov dword [ebp - 0x18], edi
mov eax, 1
mov ecx, edi
shl eax, cl
test dword [ebp - 0x24], eax
je 0x1005e214
mov ecx, dword [esi]
mov eax, edx
sub eax, dword [ebp - 0x34]
xorps xmm0, xmm0
shl eax, 3
and eax, 0xffffffe0
add eax, edi
movzx eax, ax
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xb4], eax
mov eax, dword [esi - 4]
cmp eax, ecx
jne 0x1005e1f5
lea edi, [eax + 1]
test ecx, ecx
je 0x1005e1a8
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1005e1ad
mov byte [ebp - 0x11], 0
jmp 0x1005ec89
mov eax, 8
cmp eax, edi
cmovg edi, eax
cmp edi, ecx
jle 0x1005e1f2
mov eax, edi
shl eax, 5
push eax
call fcn.1006c030
mov edx, dword [esi + 4]
add esp, 4
mov dword [ebp - 0x5c], eax
test edx, edx
je 0x1005e1ea
mov ecx, dword [esi - 4]
shl ecx, 5
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [esi + 4]
call fcn.1006c060
mov eax, dword [ebp - 0x5c]
add esp, 0x10
mov dword [esi + 4], eax
xorps xmm0, xmm0
mov dword [esi], edi
mov edi, dword [ebp - 0x18]
mov eax, dword [esi - 4]
mov ecx, dword [esi + 4]
mov edx, dword [ebp - 0x2c]
shl eax, 5
movups xmmword [ecx + eax], xmm0
movups xmm0, xmmword [ebp - 0xbc]
movups xmmword [ecx + eax + 0x10], xmm0
inc dword [esi - 4]
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x20
jb 0x1005e152
add edx, 4
mov dword [ebp - 0x2c], edx
cmp edx, dword [ebp - 0x68]
jb 0x1005e140
mov eax, dword [esi - 8]
test eax, eax
je 0x1005e255
push eax
mov dword [esi - 0xc], 0
mov dword [esi - 0x10], 0
call fcn.1006c060
add esp, 4
mov dword [esi - 8], 0
add esi, 0x54
sub dword [ebp - 0x38], 1
jne 0x1005e0e0
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x1c]
jmp 0x1005e26f
xor esi, esi
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x28], 0
jle 0x1005e2b1
mov esi, dword [ebp - 0x28]
lea eax, [edi + 0x14]
mov dword [ebp - 0x24], eax
mov edi, eax
mov eax, dword [edi]
test eax, eax
je 0x1005e2a3
push eax
mov dword [edi - 4], 0
mov dword [edi - 8], 0
call fcn.1006c060
add esp, 4
mov dword [edi], 0
add edi, 0x18
sub esi, 1
jne 0x1005e280
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x1c]
test edi, edi
je 0x1005e2d4
push edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
call fcn.1006c060
add esp, 4
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x78], eax
xor eax, eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 6
test esi, esi
jle 0x1005e329
cmp esi, 8
mov edi, esi
mov ecx, 8
cmovl edi, ecx
test edi, edi
jle 0x1005e329
mov eax, edi
shl eax, 4
push eax
call fcn.1006c030
add esp, 4
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xac], esi
shl esi, 4
push esi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x6c], eax
push 0x40000
mov byte [ebp - 4], 7
call fcn.1006c030
push 0x20
mov esi, eax
call fcn.1006c030
movss xmm1, dword [0x10122b78]
mov ecx, 1
mov dword [ebp - 0x60], eax
xor edi, edi
mov dword [ebp - 0x6c], eax
add esp, 0x14
mov dword [eax], esi
mov edx, 8
mov dword [ebp - 0x20], ecx
xor eax, eax
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], eax
test ecx, ecx
jle 0x1005e67a
mov esi, dword [ebp - 0x40]
xor edx, edx
add esi, 0x18
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x54], ecx
nop dword [eax]
mov ecx, dword [ebx + 0xc]
mov ecx, dword [ecx + 0x54]
add ecx, edx
mov edx, dword [esi + 0x20]
test edx, edx
je 0x1005e659
add dword [ebp - 0x18], edx
shl eax, 4
add eax, dword [ebp - 0x34]
mov dword [esi + 0x10], eax
movss xmm0, dword [ecx + 0x44]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1005e3f8
push ecx
lea eax, [ebp - 0x200]
movss dword [esp], xmm0
push eax
mov byte [ebp - 0x12], 1
call fcn.10078ee0
add esp, 8
jmp 0x1005e3fc
mov byte [ebp - 0x12], 0
cmp dword [esi + 0x30], 0
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x38], 0
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x58], eax
jle 0x1005e656
xor ecx, ecx
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x64], ecx
mov edi, dword [esi + 0x38]
add edi, ecx
push dword [edi + 0x18]
push dword [esi]
call fcn.100b87d0
add esp, 8
test eax, eax
je 0x1005e636
push dword [esi + 8]
push eax
push dword [esi]
call fcn.100b90e0
add esp, 0xc
test eax, eax
jne 0x1005e636
test byte [esi + 4], 0x20
mov ecx, dword [esi]
mov eax, dword [ecx + 0x54]
mov dword [ebp - 0x2c], eax
je 0x1005e46e
push eax
call fcn.100c05a0
mov ecx, dword [esi]
add esp, 4
mov eax, dword [ebp - 0x2c]
test byte [esi + 4], 0x40
je 0x1005e47f
push eax
call fcn.100c0690
mov ecx, dword [esi]
add esp, 4
mov eax, dword [ebp - 0x2c]
add eax, 0x18
je 0x1005e636
push dword [esi + 0xc]
mov eax, dword [ecx + 0x54]
push eax
mov dword [ebp - 0x24], eax
call fcn.100bb3e0
add esp, 8
test eax, eax
jne 0x1005e636
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
add eax, 0x4c
mov dword [ebp - 0x2c], eax
mov ecx, dword [eax + 4]
mov dword [edi], ecx
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [edi + 4], eax
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x64]
mov dword [edi + 8], eax
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x68]
neg eax
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x40]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
mov edx, dword [ebp - 0x28]
sar eax, 6
movd xmm0, eax
mov eax, dword [ebp - 0x2c]
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x10], xmm0
cmp byte [eax + 0x12], 7
sete al
mov byte [edi + 0x14], al
mov eax, dword [ebp - 0x44]
imul eax, ecx
shl eax, 2
mov dword [ebp - 0x44], eax
add eax, edx
cmp eax, 0x40000
jle 0x1005e5be
xor eax, eax
push 0x40000
mov dword [ebp - 0x28], eax
call fcn.1006c030
mov ecx, dword [ebp - 0x20]
add esp, 4
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x70]
cmp ecx, eax
jne 0x1005e5a9
inc ecx
test eax, eax
je 0x1005e54f
cdq
sub eax, edx
mov edx, dword [ebp - 0x70]
sar eax, 1
add eax, edx
jmp 0x1005e557
mov edx, dword [ebp - 0x70]
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov dword [ebp - 0x5c], ecx
cmp ecx, edx
jle 0x1005e5a6
lea eax, [ecx*4]
push eax
call fcn.1006c030
mov edx, dword [ebp - 0x60]
add esp, 4
mov dword [ebp - 0x24], eax
test edx, edx
je 0x1005e59a
mov ecx, dword [ebp - 0x20]
shl ecx, 2
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebp - 0x60]
push edx
call fcn.1006c060
mov eax, dword [ebp - 0x24]
add esp, 0x10
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x68]
mov dword [edx + ecx*4], eax
inc ecx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x74], ecx
jmp 0x1005e5c1
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + ecx*4 - 4]
lea eax, [ebp - 0x200]
add ecx, edx
add edx, dword [ebp - 0x44]
mov dword [ebp - 0x28], edx
xor edx, edx
cmp byte [ebp - 0x12], dl
mov dword [edi + 0x1c], ecx
cmove eax, edx
push eax
push dword [edi]
push ecx
push dword [ebp - 0x2c]
lea ecx, [esi - 0x18]
call fcn.1005d720
mov eax, dword [ebp - 0x58]
movzx ecx, word [edi]
movzx edx, ax
mov eax, dword [esi + 0x10]
add cx, dx
mov esi, dword [ebp - 0x30]
mov word [esi + eax + 4], cx
movzx ecx, word [edi + 4]
mov esi, dword [ebp - 0x4c]
add cx, dx
mov edx, dword [ebp - 0x30]
mov edi, dword [ebp - 0x1c]
mov eax, dword [esi + 0x10]
mov word [edx + eax + 6], cx
mov eax, dword [esi + 0x10]
movzx ecx, word [edx + eax + 6]
movzx eax, word [edx + eax + 4]
imul ecx, eax
add edi, ecx
mov dword [ebp - 0x1c], edi
jmp 0x1005e639
mov edi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x64]
inc eax
add dword [ebp - 0x30], 0x10
add ecx, 0x20
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x64], ecx
cmp eax, dword [esi + 0x30]
jl 0x1005e422
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x48]
add esi, 0x54
movss xmm1, dword [0x10122b78]
sub edx, 0xffffff80
sub dword [ebp - 0x54], 1
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], edx
jne 0x1005e3b0
movd xmm0, edi
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x1005e693
sqrtsd xmm0, xmm0
jmp 0x1005e698
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov edi, dword [ebx + 0xc]
cvtsd2ss xmm0, xmm0
mov esi, dword [edi + 8]
mov dword [edi + 0x20], 0
cvttss2si eax, xmm0
inc eax
test esi, esi
jg 0x1005e6ed
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x110bfe78]
jb 0x1005e6c9
mov esi, 0x1000
jmp 0x1005e6ed
comiss xmm0, dword [0x110bfe74]
jb 0x1005e6d9
mov esi, 0x800
jmp 0x1005e6ed
comiss xmm0, dword [0x110bfe70]
mov esi, 0x200
mov eax, 0x400
cmovae esi, eax
mov dword [edi + 0x1c], esi
xor eax, eax
sub esi, dword [edi + 0xc]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 8
test esi, esi
jle 0x1005e747
cmp esi, 8
mov edi, esi
mov ecx, 8
cmovl edi, ecx
test edi, edi
jle 0x1005e744
lea eax, [edi*8]
push eax
call fcn.1006c030
add esp, 4
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x94], edi
mov edi, dword [ebx + 0xc]
push esi
push eax
mov eax, dword [edi + 0x1c]
mov ecx, 0x8000
sub ecx, dword [edi + 0xc]
sub eax, dword [edi + 0xc]
push ecx
push eax
lea eax, [ebp - 0xfc]
mov dword [ebp - 0x98], esi
push eax
call fcn.1005f250
lea eax, [ebp - 0xfc]
push eax
push edi
call fcn.10078f40
mov eax, dword [ebp - 0x50]
add esp, 0x1c
test eax, eax
jle 0x1005e7e8
mov esi, dword [ebp - 0x40]
add esi, 0x38
mov dword [ebp - 0x54], eax
nop dword [eax + eax]
mov eax, dword [esi]
test eax, eax
je 0x1005e7dc
push eax
push dword [esi - 0x10]
lea eax, [ebp - 0xfc]
push eax
call fcn.1005f3d0
xor edi, edi
add esp, 0xc
cmp dword [esi], edi
jle 0x1005e7dc
xor edx, edx
mov eax, dword [esi - 0x10]
cmp dword [eax + edx + 0xc], 0
je 0x1005e7d4
movzx ecx, word [eax + edx + 0xa]
movzx eax, word [eax + edx + 6]
add ecx, eax
mov eax, dword [ebx + 0xc]
cmp dword [eax + 0x20], ecx
cmovge ecx, dword [eax + 0x20]
mov dword [eax + 0x20], ecx
inc edi
add edx, 0x10
cmp edi, dword [esi]
jl 0x1005e7b1
add esi, 0x54
sub dword [ebp - 0x54], 1
jne 0x1005e790
mov edi, dword [ebx + 0xc]
test byte [edi], 1
mov eax, dword [edi + 0x20]
jne 0x1005e815
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
mov esi, dword [edi + 0x1c]
inc eax
movss xmm2, dword [0x10122b78]
movaps xmm1, xmm2
mov dword [edi + 0x20], eax
movd xmm0, esi
cvtdq2ps xmm0, xmm0
imul esi, eax
cmp byte [ebp - 0x11], 0
divss xmm1, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x24], xmm1
divss xmm2, xmm0
movss dword [edi + 0x28], xmm2
je 0x1005e85e
shl esi, 2
push esi
call fcn.1006c030
mov dword [edi + 0x18], eax
jmp 0x1005e867
push esi
call fcn.1006c030
mov dword [edi + 0x14], eax
push esi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x50]
xor al, al
add esp, 0x10
mov byte [ebp - 0x12], al
test edx, edx
jle 0x1005eb8f
mov eax, dword [ebp - 0x40]
xor ecx, ecx
add eax, 8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], edx
cmp dword [eax + 0x30], 0
je 0x1005eb74
mov esi, dword [edi + 0x54]
sub esp, 8
movss xmm0, dword [eax]
add esi, ecx
movss xmm1, dword [eax - 4]
mov dword [ebp - 0x9c], esi
movss dword [esp + 4], xmm0
mov ecx, dword [esi + 0x7c]
movss dword [esp], xmm1
push esi
push ecx
push edi
mov dword [ebp - 0x54], ecx
call fcn.10079480
mov eax, dword [ebp - 0x54]
add esp, 0x14
movss xmm2, dword [esi + 0x28]
movss dword [ebp - 0x30], xmm2
mov dword [ebp - 0x68], 0
movss xmm0, dword [eax + 0x48]
addss xmm0, dword [0x10122b74]
cvttss2si eax, xmm0
movd xmm1, eax
mov eax, dword [ebp - 0x2c]
cvtdq2ps xmm1, xmm1
cmp dword [eax + 0x30], 0
addss xmm1, dword [esi + 0x2c]
mov esi, dword [edi + 0xc]
mov dword [ebp - 0x28], esi
movss dword [ebp - 0x18], xmm1
jle 0x1005eb67
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x38], edx
mov edi, dword [eax + 0x48]
mov eax, dword [eax + 0x20]
add edi, edx
add eax, ecx
cmp word [eax + 4], 0
jne 0x1005e940
cmp word [eax + 6], 0
je 0x1005eb43
movzx edx, word [eax + 8]
sub esp, 0x24
movd xmm0, dword [edi + 8]
add edx, esi
movzx esi, word [eax + 0xa]
mov eax, dword [edi]
add esi, dword [ebp - 0x28]
movd xmm7, dword [edi + 0xc]
mov ecx, dword [edi + 4]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x48], esi
mov esi, dword [ebx + 0xc]
mov dword [ebp - 0x4c], edx
movd xmm6, eax
add eax, edx
addss xmm0, xmm2
movd xmm4, edx
cvtdq2ps xmm7, xmm7
cvtdq2ps xmm6, xmm6
addss xmm7, xmm1
movss dword [ebp - 0x58], xmm0
movd xmm1, dword [esi + 0x1c]
addss xmm6, xmm0
movd xmm0, dword [esi + 0x20]
mov esi, dword [ebp - 0x48]
cvtdq2ps xmm1, xmm1
movd xmm2, eax
lea eax, [ecx + esi]
cvtdq2ps xmm4, xmm4
cvtdq2ps xmm2, xmm2
divss xmm4, xmm1
divss xmm2, xmm1
cvtdq2ps xmm0, xmm0
movd xmm1, eax
movd xmm3, esi
cvtdq2ps xmm1, xmm1
movzx eax, word [edi + 0x18]
mov esi, dword [ebp - 0x54]
cvtdq2ps xmm3, xmm3
divss xmm1, xmm0
divss xmm3, xmm0
movss xmm0, dword [edi + 0x10]
movd xmm5, ecx
mov ecx, esi
movss dword [esp + 0x20], xmm0
movss xmm0, dword [ebp - 0x58]
cvtdq2ps xmm5, xmm5
movss dword [esp + 0x1c], xmm1
movss dword [esp + 0x18], xmm2
addss xmm5, xmm7
movss dword [esp + 0x14], xmm3
movss dword [esp + 0x10], xmm4
movss dword [esp + 0xc], xmm5
movss dword [esp + 8], xmm6
movss dword [esp + 4], xmm7
movss dword [esp], xmm0
push eax
push dword [ebp - 0x9c]
call fcn.10076120
cmp byte [edi + 0x14], 0
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x28]
lea eax, [eax + eax*4]
je 0x1005ea41
or dword [ecx + eax*8 - 0x28], 1
mov byte [ebp - 0x12], 1
mov ecx, dword [ebx + 0xc]
mov esi, dword [edi + 0x1c]
mov edx, dword [edi]
mov dword [ebp - 0x1c], esi
mov eax, dword [ecx + 0x1c]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x58], eax
imul eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], 0
test ecx, ecx
je 0x1005eac6
add eax, ecx
add eax, dword [ebp - 0x4c]
cmp dword [edi + 4], 0
mov dword [ebp - 0x44], eax
jle 0x1005eb36
lea ecx, [edx*4]
mov dword [ebp - 0x4c], ecx
xor ecx, ecx
test edx, edx
jle 0x1005eaa9
add esi, 3
nop dword [eax]
mov edx, dword [ebp - 0x44]
lea esi, [esi + 4]
mov al, byte [esi - 4]
mov byte [ecx + edx], al
inc ecx
mov edx, dword [edi]
cmp ecx, edx
jl 0x1005ea90
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x48]
add eax, dword [ebp - 0x58]
inc ecx
add esi, dword [ebp - 0x4c]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x1c], esi
cmp ecx, dword [edi + 4]
jl 0x1005ea80
jmp 0x1005eb36
mov ecx, dword [ebp - 0x4c]
add ecx, eax
cmp dword [edi + 4], 0
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 0x18]
lea ecx, [eax + ecx*4]
mov dword [ebp - 0x44], ecx
jle 0x1005eb36
mov eax, dword [ebp - 0x58]
shl eax, 2
mov dword [ebp - 0x4c], eax
lea eax, [edx*4]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x1c]
xor esi, esi
test edx, edx
jle 0x1005eb1b
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x58], eax
mov eax, dword [eax + ecx]
lea ecx, [ecx + 4]
mov dword [ecx - 4], eax
inc esi
mov edx, dword [edi]
mov eax, dword [ebp - 0x58]
cmp esi, edx
jl 0x1005eb02
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x48]
add ecx, dword [ebp - 0x4c]
inc esi
add eax, dword [ebp - 0xa0]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x1c], eax
cmp esi, dword [edi + 4]
jl 0x1005eaf6
mov esi, dword [ebp - 0x28]
movss xmm2, dword [ebp - 0x30]
movss xmm1, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x2c]
inc ecx
add dword [ebp - 0x38], 0x20
add dword [ebp - 0x64], 0x10
mov edx, dword [ebp - 0x38]
cmp ecx, dword [eax + 0x30]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x64]
jl 0x1005e924
mov edi, dword [ebx + 0xc]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x24]
mov dword [eax + 0x20], 0
add eax, 0x54
sub ecx, 0xffffff80
sub edx, 1
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x24], edx
jne 0x1005e894
mov al, byte [ebp - 0x12]
mov byte [edi + 0x12], al
xor esi, esi
mov edi, dword [ebp - 0x20]
test edi, edi
jle 0x1005ebb3
nop dword [eax + eax]
mov eax, dword [ebp - 0x60]
push dword [eax + esi*4]
call fcn.1006c060
inc esi
add esp, 4
cmp esi, edi
jl 0x1005eba0
mov edi, dword [ebp - 0x50]
test edi, edi
jle 0x1005ec09
mov esi, dword [ebp - 0x40]
add esi, 0x18
mov eax, dword [esi + 0x38]
mov byte [ebp - 4], 9
test eax, eax
je 0x1005ebd4
push eax
call fcn.1006c060
add esp, 4
mov eax, dword [esi + 0x2c]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x1005ebe8
push eax
call fcn.1006c060
add esp, 4
mov eax, dword [esi]
mov byte [ebp - 4], 8
test eax, eax
je 0x1005ec01
push eax
call fcn.100b8320
add esp, 4
mov dword [esi], 0
add esi, 0x54
sub edi, 1
jne 0x1005ebc0
mov esi, dword [ebp - 0x40]
test esi, esi
je 0x1005ec38
push esi
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
call fcn.1006c060
add esp, 4
xor esi, esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x84], esi
push dword [ebx + 0xc]
call fcn.10078bc0
add esp, 4
mov byte [ebp - 0x11], 1
mov eax, dword [ebp - 0x90]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x1005ec5e
push eax
call fcn.1006c060
add esp, 4
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x1005ec72
push eax
call fcn.1006c060
add esp, 4
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x1005ec86
push eax
call fcn.1006c060
add esp, 4
mov edi, dword [ebp - 0x3c]
mov byte [ebp - 4], 0xe
test edi, edi
je 0x1005ec9a
push edi
call fcn.1006c060
add esp, 4
mov eax, dword [ebp - 0x40]
mov dword [ebp - 4], 0xf
test eax, eax
je 0x1005ecb1
push eax
call fcn.1006c060
add esp, 4
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0x11]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret