Function at 0x10035210
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004af20
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x198
mov eax, dword [0x10072040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x198], ecx
mov edi, dword [0x10072700]
mov esi, edi
mov eax, dword [ebx + 8]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x128], esi
mov eax, dword [esi + 0x3e28]
mov byte [eax + 0xa8], 1
mov eax, dword [esi + 0x3e28]
mov dword [ebp - 0x154], eax
cmp byte [eax + 0xab], 0
jne 0x100357fd
mov edx, dword [ebx + 0x14]
mov ecx, edx
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0x10c], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0x12c], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0x1a0], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x174], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0x10c], 0
mov dword [ebp - 0x158], ecx
je 0x10035308
call fcn.10011e10
mov edi, dword [0x10072700]
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0xe0]
xor edx, edx
mov eax, dword [eax + 0xe8]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x198]
call fcn.100035e0
add esp, 4
mov dword [ebp - 0x104], eax
cmp dword [edi + 0x3e5c], eax
jne 0x10035352
push ecx
push dword [ebp - 0x198]
mov edx, 0xb
mov ecx, eax
call fcn.100190f0
mov edi, dword [0x10072700]
add esp, 8
mov eax, dword [ebp - 0x198]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x10035376
nop
mov dl, byte [ecx]
test dl, dl
je 0x10035376
cmp dl, 0x23
jne 0x10035370
cmp byte [ecx + 1], dl
je 0x10035376
inc ecx
cmp ecx, 0xffffffff
jb 0x10035360
movss xmm1, dword [0x1006f388]
xorps xmm3, xmm3
movss xmm0, dword [edi + 0x3bb4]
movss dword [ebp - 0x184], xmm1
cmp eax, ecx
jne 0x1003539f
movss dword [ebp - 0x1a4], xmm3
jmp 0x100353f1
push 0
push ecx
push eax
push ecx
mov ecx, dword [edi + 0x3bb0]
lea eax, [ebp - 0x148]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.10029010
movss xmm0, dword [ebp - 0x148]
xorps xmm3, xmm3
addss xmm0, dword [0x1006f2a8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x1a4], xmm0
movss xmm0, dword [ebp - 0x144]
cmp byte [ebp - 0x10c], 0
je 0x1003540a
movss xmm0, dword [esi + 0x3bb4]
mulss xmm0, dword [0x1006f314]
test byte [edi + 0x4688], 1
movss xmm1, dword [esi + 0x37d8]
mov eax, dword [edi + 0x3e28]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x10035436
movss xmm0, dword [edi + 0x468c]
jmp 0x1003543e
movss xmm0, dword [eax + 0x19c]
comiss xmm3, xmm0
movss xmm3, dword [0x1006f2b0]
jbe 0x10035480
cmp dword [eax + 0x18c], 0
movss xmm1, dword [eax + 0x224]
jne 0x10035465
cmp dword [edi + 0x49d0], 0
je 0x1003546d
movss xmm1, dword [eax + 0x1f4]
subss xmm1, dword [eax + 0xec]
addss xmm1, xmm0
movaps xmm0, xmm3
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x148]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.10011d30
movss xmm1, dword [ebp - 0x1a4]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x100354be
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x37ec]
jmp 0x100354c1
xorps xmm2, xmm2
mov edi, dword [ebp - 0x154]
lea eax, [ebp - 0x80]
movss xmm6, dword [ebp - 0x144]
movss xmm5, dword [ebp - 0x148]
addss xmm2, xmm5
movss dword [ebp - 0x180], xmm5
movss xmm4, dword [edi + 0xf0]
movss xmm3, dword [edi + 0xec]
movaps xmm0, xmm4
addss xmm0, xmm6
movss dword [ebp - 0xf8], xmm3
movaps xmm1, xmm3
movss dword [ebp - 0x13c], xmm4
addss xmm2, xmm3
movss dword [ebp - 0x188], xmm6
addss xmm1, xmm5
movss dword [ebp - 0x90], xmm3
push 0x3c
movss dword [ebp - 0x84], xmm0
movaps xmm0, xmm4
addss xmm0, xmm6
movss dword [ebp - 0x8c], xmm4
push 0
push eax
movss dword [ebp - 0x88], xmm1
movss dword [ebp - 0xfc], xmm2
movss dword [ebp - 0x164], xmm0
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x20], xmm4
movss dword [ebp - 0x1c], xmm2
movss dword [ebp - 0x18], xmm0
mov dword [ebp - 0x15c], edi
call sub.VCRUNTIME140.dll_memset
movss xmm1, dword [ebp - 0x164]
lea ecx, [ebp - 0x148]
subss xmm1, dword [ebp - 0x13c]
movss xmm0, dword [ebp - 0xfc]
add esp, 0xc
subss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x144], xmm1
movss xmm1, dword [esi + 0x37d8]
movss dword [ebp - 0x148], xmm0
call fcn.10011860
cmp byte [ebp - 0x10c], 0
je 0x1003588c
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x90]
push 0x400
push eax
lea ecx, [ebp - 0x24]
call fcn.100119c0
add esp, 8
test al, al
je 0x100357f8
movups xmm0, xmmword [esi + 0x469c]
mov eax, dword [esi + 0x46a4]
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x28]
movups xmmword [ebp - 0x80], xmm0
push eax
movups xmm0, xmmword [esi + 0x46ac]
mov dword [ebp - 0x28], 3
movups xmmword [ebp - 0x70], xmm0
movups xmm0, xmmword [esi + 0x46bc]
movups xmmword [ebp - 0x60], xmm0
movq xmm0, qword [esi + 0x46cc]
mov esi, dword [0x10072700]
movq qword [ebp - 0x50], xmm0
movss xmm0, dword [ebp - 0xf8]
movss dword [edi + 0xec], xmm0
movss xmm0, dword [ebp - 0x13c]
lea ecx, [esi + 0x4738]
movss dword [edi + 0xf0], xmm0
movups xmm0, xmmword [esi + 0x3890]
movups xmmword [ebp - 0x24], xmm0
call fcn.10019860
mov edi, dword [ebp - 0x128]
lea eax, [ebp - 0x14c]
push eax
mov dword [ebp - 0x14c], 7
movups xmm0, xmmword [edi + 0x38d0]
movups xmmword [esi + 0x3890], xmm0
mov esi, dword [0x10072700]
movss xmm0, dword [edi + 0x37dc]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [esi + 0x37c4]
lea ecx, [esi + 0x4744]
movss dword [ebp - 0x148], xmm0
call fcn.100197a0
movss xmm0, dword [ebp - 0xfc]
lea eax, [ebp - 0x14c]
movss dword [esi + 0x37c4], xmm0
mov esi, dword [0x10072700]
movss xmm0, dword [edi + 0x37e0]
movss dword [ebp - 0xfc], xmm0
push eax
movss xmm0, dword [esi + 0x37c8]
lea ecx, [esi + 0x4744]
mov dword [ebp - 0x14c], 8
movss dword [ebp - 0x148], xmm0
call fcn.100197a0
movss xmm0, dword [ebp - 0xfc]
lea eax, [ebp - 0x14c]
movss dword [esi + 0x37c8], xmm0
mov esi, dword [0x10072700]
push eax
mov dword [ebp - 0x14c], 2
movss xmm1, dword [esi + 0x37a0]
lea ecx, [esi + 0x4744]
movss xmm0, dword [esi + 0x37a4]
movss dword [ebp - 0x148], xmm1
movss dword [ebp - 0x144], xmm0
call fcn.100197a0
movss xmm1, dword [ebp - 0x88]
lea eax, [ebp - 0x148]
movss xmm0, dword [ebp - 0x84]
sub esp, 8
subss xmm1, dword [ebp - 0x90]
subss xmm0, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x198]
push eax
mov dword [esi + 0x37a0], 0
mov dword [esi + 0x37a4], 0
movss dword [ebp - 0x148], xmm1
movss dword [ebp - 0x144], xmm0
call fcn.10009be0
add esp, 0xc
mov byte [ebp - 0x12d], al
mov ecx, 3
call fcn.100040f0
mov ecx, 1
call fcn.100040a0
cmp byte [ebp - 0x12d], 0
jne 0x1003581d
call fcn.10009db0
call fcn.10011f40
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10049481
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x3e28]
mov dword [ebp - 0x15c], edx
movsx ecx, word [edx + 0x14a]
mov eax, dword [edx + 0x144]
bts ecx, eax
movss xmm0, dword [edx + 0xec]
mov word [edx + 0x14a], cx
addss xmm0, dword [esi + 0x37d4]
movss dword [edx + 0xec], xmm0
movss xmm0, dword [esi + 0x37d8]
addss xmm0, dword [edx + 0xf0]
movss dword [edx + 0xf0], xmm0
movss xmm0, dword [ebp - 0x180]
subss xmm0, dword [edx + 0x9c]
movss dword [ebp - 0x180], xmm0
jmp 0x100358c6
test dword [ebx + 0x14], 0x10000000
jne 0x100358ba
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x90]
push 0x400
push eax
lea ecx, [ebp - 0x24]
call fcn.100119c0
add esp, 8
test al, al
je 0x100357fd
mov eax, dword [esi + 0x46a4]
mov dword [ebp - 0x16c], eax
mov edx, dword [ebp - 0x104]
lea ecx, [ebp - 0x90]
call fcn.10006cd0
mov cl, al
mov byte [ebp - 0x12f], cl
test cl, cl
je 0x100358ed
mov dword [esi + 0x492c], 1
mov edx, dword [ebp - 0x104]
mov edi, dword [0x10072700]
test edx, edx
je 0x1003590d
cmp dword [edi + 0x4a74], edx
jne 0x1003590d
add edi, 0x4a70
jmp 0x1003590f
xor edi, edi
mov eax, dword [ebp - 0x16c]
shr eax, 8
and al, 1
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x16c], eax
mov eax, dword [esi + 0x3e74]
cmp eax, edx
je 0x10035952
cmp dword [esi + 0x47c0], edx
je 0x10035949
cmp dword [esi + 0x47b4], edx
jne 0x10035952
cmp dword [esi + 0x47dc], 2
jne 0x10035952
mov byte [ebp - 0xfd], 1
jmp 0x10035959
mov byte [ebp - 0xfd], 0
test cl, cl
je 0x1003596d
cmp byte [esi + 0x36f8], 0
mov byte [ebp - 0xfe], 1
jne 0x10035974
mov byte [ebp - 0xfe], 0
cmp byte [ebp - 0x10c], 0
je 0x100359ea
test edi, edi
je 0x100359ea
test eax, eax
jne 0x100359ea
mov eax, dword [ebp - 0x15c]
xor edx, edx
mov ecx, dword [eax + 0xe0]
mov eax, dword [eax + 0xe8]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.100035e0
mov ecx, dword [0x10072700]
add esp, 4
mov dword [ebp - 0xfc], eax
cmp dword [ecx + 0x3e5c], eax
jne 0x100359d9
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.100190f0
mov eax, dword [ebp - 0xfc]
add esp, 8
cmp dword [esi + 0x3e9c], eax
jne 0x100359ea
mov byte [ebp - 0xf3], 1
jmp 0x10035a0e
mov eax, dword [ebp - 0x10c]
mov byte [ebp - 0xf3], 0
test al, al
je 0x10035a9b
mov byte [ebp - 0xf3], 0
test edi, edi
je 0x10035a9b
mov eax, dword [ebp - 0x15c]
xor edx, edx
mov ecx, dword [eax + 0xe0]
mov eax, dword [eax + 0xe8]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.100035e0
mov ecx, dword [0x10072700]
add esp, 4
mov dword [ebp - 0xfc], eax
cmp dword [ecx + 0x3e5c], eax
jne 0x10035a62
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.100190f0
mov eax, dword [ebp - 0xfc]
add esp, 8
cmp dword [esi + 0x3e74], eax
mov eax, dword [ebp - 0x10c]
jne 0x10035a9b
mov edx, dword [ebp - 0x15c]
mov cl, 1
mov byte [ebp - 0xf1], cl
mov byte [ebp - 0x105], 0
mov byte [ebp - 0x120], 0
movss xmm0, dword [edx + 0x78]
movss dword [ebp - 0x184], xmm0
jmp 0x10035ad2
xor cl, cl
mov byte [ebp - 0x105], 0
mov byte [ebp - 0x120], 0
mov byte [ebp - 0xf1], cl
test al, al
je 0x10035aca
mov edx, dword [ebp - 0x15c]
movss xmm0, dword [edx + 0x78]
movss dword [ebp - 0x184], xmm0
jmp 0x10035ad2
xor cl, cl
mov byte [ebp - 0xf1], cl
test edi, edi
je 0x10035ae1
xor al, 1
cmp byte [edi + 0x57], al
je 0x10035ae1
mov al, 1
jmp 0x10035ae3
xor al, al
cmp byte [ebp - 0xfe], 0
mov byte [ebp - 0x11b], al
jne 0x10035b20
cmp byte [ebp - 0xf3], 0
jne 0x10035b20
cmp byte [ebp - 0xfd], 0
jne 0x10035b20
cmp byte [ebp - 0x16c], 0
jne 0x10035b20
mov byte [ebp - 0xf3], 0
test cl, cl
jne 0x10035b27
mov byte [ebp - 0x11a], cl
jmp 0x10035b3c
mov byte [ebp - 0xf3], 1
mov ecx, dword [ebp - 0x104]
mov byte [ebp - 0x11a], 1
cmp dword [esi + 0x3e74], ecx
jne 0x10035b44
test al, al
je 0x10035e36
mov ecx, dword [ebp - 0x114]
lea edi, [esi + 0x4a70]
mov dword [ebp - 0x134], edi
mov dword [edi + 0xe6c], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035b63
mov eax, dword [edi + 0x2c]
sub ecx, edx
mov dword [ebp - 0xfc], ecx
lea edx, [ecx + 1]
mov dword [ebp - 0xf8], edx
cmp edx, eax
jle 0x10035bb3
test eax, eax
je 0x10035b98
cdq
sub eax, edx
mov edx, dword [ebp - 0xf8]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x2c]
jmp 0x10035b9d
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x28]
push eax
call fcn.10019e10
mov edx, dword [ebp - 0xf8]
push edx
push dword [ebp - 0x114]
mov dword [edi + 0x28], edx
push dword [edi + 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x104]
add esp, 0xc
cmp dword [edi + 4], eax
jne 0x10035c0b
cmp byte [ebp - 0x11b], 0
jne 0x10035c0b
mov eax, dword [ebp - 0xfc]
mov byte [ebp - 0xff], 1
cmp dword [edi + 0xc], eax
jne 0x10035c0b
cmp byte [edi + 0x34], 0
je 0x10035c12
push eax
push dword [ebp - 0x114]
push dword [edi + 0x24]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x10035c12
mov byte [ebp - 0xff], 0
mov edx, dword [ebx + 0xc]
mov ecx, dword [ebp - 0x104]
inc edx
mov dword [edi + 4], ecx
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xf8], edx
cmp edx, eax
jle 0x10035c5d
test eax, eax
je 0x10035c42
cdq
sub eax, edx
mov edx, dword [ebp - 0xf8]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x14]
jmp 0x10035c47
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x10]
push eax
call fcn.10019e80
mov edx, dword [ebp - 0xf8]
lea eax, [edi + 0x1c]
mov dword [edi + 0x10], edx
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x10035c86
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x1c]
call fcn.10019e10
lea eax, [edi + 0x1c]
mov esi, dword [ebx + 0xc]
mov dword [eax], 0
mov ecx, dword [edi + 0x18]
mov edx, ecx
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0xf8], ecx
lea ecx, [ecx + esi*2]
mov byte [edi + 0x34], 0
mov esi, dword [ebp - 0x128]
add ecx, 0xfffffffe
cmp edx, ecx
jae 0x10035d1a
mov edi, dword [ebx + 0xc]
mov esi, eax
nop
cmp byte [esi], 0
je 0x10035d02
push 0
mov edx, esi
lea ecx, [ebp - 0xfc]
call fcn.10003890
mov edx, dword [ebp - 0xf8]
add esi, eax
mov ax, word [ebp - 0xfc]
add esp, 4
mov ecx, dword [ebp - 0x140]
mov word [edx], ax
lea eax, [edi - 1]
add edx, 2
lea eax, [ecx + eax*2]
mov dword [ebp - 0xf8], edx
cmp edx, eax
jb 0x10035cc0
mov edi, dword [ebp - 0x134]
mov dword [ebp - 0x124], esi
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x114]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x140]
mov cl, byte [ebp - 0xff]
sar edx, 1
mov dword [edi + 8], edx
mov dword [edi + 0xc], eax
test cl, cl
je 0x10035d67
cmp dword [edi + 0x40], edx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x44]
cmp dword [edi + 0x48], edx
mov dword [edi + 0x44], ecx
cmovl edx, dword [edi + 0x48]
mov cl, byte [ebp - 0xff]
mov dword [edi + 0x48], edx
jmp 0x10035dc8
mov al, byte [ebp - 0x10c]
xor al, 1
mov dword [edi + 0x3c], 0
mov dword [edi + 0xe5e], 0x630000
mov dword [edi + 0xe64], 0
mov dword [edi + 0xe68], 0x3e7
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x40], 0
mov word [edi + 0x55], 1
mov dword [edi + 0x5c], 0
mov byte [edi + 0x54], 0
mov byte [edi + 0x57], al
mov byte [edi + 0x4c], 0
mov dword [edi + 0x50], 0
cmp byte [ebp - 0x10c], 0
jne 0x10035e29
mov eax, dword [ebp - 0x120]
mov edx, 1
test byte [ebx + 0x14], 0x10
movzx eax, al
cmovne eax, edx
cmp byte [ebp - 0xfd], 0
mov dword [ebp - 0x120], eax
je 0x10035e08
test cl, cl
je 0x10035e02
test byte [esi + 0x47c4], 4
jne 0x10035e08
mov byte [ebp - 0x120], dl
cmp byte [ebp - 0x16c], 0
jne 0x10035e23
cmp byte [ebp - 0xfe], 0
je 0x10035e29
cmp byte [esi + 0xdd0], 0
je 0x10035e29
mov byte [ebp - 0x120], dl
test dword [ebx + 0x14], 0x2000
je 0x10035e36
mov byte [edi + 0x4c], 1
mov cl, byte [esi + 0x61]
mov edx, dword [ebp - 0x104]
mov byte [ebp - 0xff], cl
cmp dword [esi + 0x3e74], edx
je 0x10035e9b
cmp byte [ebp - 0xf3], 0
je 0x10035e8f
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x104]
call fcn.10006ba0
mov edx, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x104]
call fcn.10013670
mov ecx, dword [ebp - 0x154]
call fcn.1000ef10
mov cl, byte [ebp - 0xff]
mov edx, dword [ebp - 0x104]
cmp dword [esi + 0x3e74], edx
jne 0x10035fe7
cmp byte [ebp - 0xfe], 0
je 0x10035ebe
mov eax, dword [0x10072700]
mov dword [eax + 0x44c0], edx
mov dword [eax + 0x44bc], edx
mov word [eax + 0x44c4], 0
mov eax, dword [esi + 0x4670]
or eax, 3
cmp byte [ebp - 0x10c], 0
mov dword [esi + 0x4670], eax
jne 0x10035edc
test byte [ebx + 0x14], 0x80
je 0x10035ee5
or eax, 0xc
mov dword [esi + 0x4670], eax
cmp byte [ebp - 0x10c], 0
mov eax, dword [0x10072700]
mov dword [eax + 0x3f08], edx
mov dword [eax + 0x3f04], edx
mov word [eax + 0x3f0c], 0
mov dword [eax + 0x3f14], edx
mov dword [eax + 0x3f10], edx
mov word [eax + 0x3f18], 0
je 0x10035f47
mov dword [eax + 0x3ef0], edx
mov dword [eax + 0x3eec], edx
mov word [eax + 0x3ef4], 0
mov dword [eax + 0x3efc], edx
mov dword [eax + 0x3ef8], edx
mov word [eax + 0x3f00], 0
test cl, cl
je 0x10035f7b
mov ecx, 0x4000
call fcn.10002ab0
mov edx, dword [ebp - 0x104]
lea ecx, [eax + eax*2]
mov eax, dword [0x10072700]
mov dword [eax + ecx*4 + 0x26b4], edx
mov dword [eax + ecx*4 + 0x26b0], edx
mov word [eax + ecx*4 + 0x26b8], 0
test dword [ebx + 0x14], 0x440
je 0x10035f9e
mov eax, dword [0x10072700]
mov dword [eax + 0x3eb4], edx
mov dword [eax + 0x3eb0], edx
mov word [eax + 0x3eb8], 0
cmp dword [esi + 0x3e74], edx
jne 0x10035fe7
test edi, edi
jne 0x10035fb9
xor edx, edx
xor ecx, ecx
call fcn.10006ba0
mov edx, dword [ebp - 0x104]
cmp dword [esi + 0x3e74], edx
jne 0x10035fe7
cmp byte [esi + 0x36f8], 0
je 0x10035ff4
cmp byte [ebp - 0x11a], 0
jne 0x10035ff4
cmp byte [ebp - 0xf3], 0
jne 0x10035ff4
mov byte [ebp - 0x105], 1
mov cl, 1
jmp 0x10035ffa
test edi, edi
je 0x10035ff8
cmp byte [ebp - 0xf1], 0
je 0x10035ff8
mov cl, 1
jmp 0x10035ffa
xor cl, cl
mov byte [ebp - 0xf2], cl
test edi, edi
je 0x10036020
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
jne 0x10036015
cmp byte [ebp - 0x120], 0
je 0x10036020
test cl, cl
je 0x10036020
mov ecx, 1
jmp 0x10036022
xor cl, cl
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x118], ecx
mov byte [ebp - 0x12e], cl
mov byte [ebp - 0x12d], 0
mov byte [ebp - 0x11b], 0
test al, al
je 0x1003617d
test edi, edi
je 0x1003617d
cmp byte [ebp - 0xf2], 0
jne 0x10036063
test cl, cl
je 0x1003618a
mov ecx, dword [ebx + 0xc]
mov eax, dword [edi + 0x14]
inc ecx
mov dword [ebp - 0xf8], ecx
cmp ecx, eax
jle 0x100360a3
test eax, eax
je 0x10036084
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x14]
jmp 0x10036089
mov ecx, 8
mov eax, dword [ebp - 0xf8]
cmp ecx, eax
cmovg eax, ecx
lea ecx, [edi + 0x10]
push eax
call fcn.10019e80
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x114]
mov dword [edi + 0x10], ecx
dec ecx
mov edx, dword [edi + 0x18]
mov esi, edx
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0xf8], edx
lea ecx, [esi + ecx*2]
cmp esi, ecx
mov dword [ebp - 0x164], ecx
mov esi, dword [ebp - 0x128]
jae 0x1003611f
mov esi, eax
cmp byte [esi], 0
je 0x1003610d
push 0
mov edx, esi
lea ecx, [ebp - 0xfc]
call fcn.10003890
mov edx, dword [ebp - 0xf8]
add esi, eax
mov ax, word [ebp - 0xfc]
add esp, 4
mov word [edx], ax
add edx, 2
mov dword [ebp - 0xf8], edx
cmp edx, dword [ebp - 0x164]
jb 0x100360d3
mov dword [ebp - 0x124], esi
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x114]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x13c]
sar edx, 1
cmp dword [edi + 0x40], edx
mov ecx, edx
mov dword [edi + 8], edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x44]
cmp dword [edi + 0x48], edx
mov dword [edi + 0xc], eax
cmovl edx, dword [edi + 0x48]
movzx eax, byte [ebp - 0x12e]
cmp ecx, edx
mov dword [edi + 0x44], ecx
mov ecx, 0
cmovne ecx, eax
mov dword [edi + 0x48], edx
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x118], ecx
cmp byte [ebp - 0xf2], 0
jne 0x10036192
test cl, cl
jne 0x10036192
cmp dword [esi + 0x3e74], edx
jne 0x100361a6
test al, al
jne 0x100361a6
test edi, edi
je 0x100361a6
mov byte [ebp - 0x12e], 1
cmp byte [edi + 0x34], al
jne 0x100361ad
mov byte [ebp - 0x12e], 0
cmp byte [ebp - 0x1a0], 0
je 0x10036240
mov edx, dword [esi + 0x3bb0]
cmp dword [edx + 0x14], 0x2a
ja 0x100361cb
mov eax, dword [edx + 0x2c]
jmp 0x100361ea
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x100361e1
mov eax, dword [edx + 0x2c]
jmp 0x100361ea
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x124], eax
lea ecx, [esi + 0x58e8]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x3bb0]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [esi + 0x3bb0]
mov eax, dword [eax + 0x50]
mov dword [ecx + 0x50], eax
mov eax, dword [esi + 0x3bb0]
mov eax, dword [eax + 0x54]
mov dword [ecx + 0x54], eax
mov eax, dword [esi + 0x3bb0]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [ecx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
call fcn.1000f250
mov edx, dword [ebp - 0x104]
movss xmm0, dword [ebp - 0x90]
movss xmm1, dword [0x1006f270]
mov dword [ebp - 0x140], 0
movss dword [ebp - 0x19c], xmm0
cmp dword [esi + 0x3e74], edx
jne 0x100367c0
mov eax, dword [edi + 0xc]
mov edx, dword [ebx + 0x14]
mov byte [edi + 0xe72], 0
mov dword [edi + 0xe74], edx
mov dword [ebp - 0x140], eax
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x38], eax
cmp byte [esi + 0xdc0], 0
mov dword [esi + 0x5be8], 1
sete al
cmp byte [ebp - 0x10c], 0
mov byte [esi + 0x3e81], al
movss xmm7, dword [esi + 0xdb8]
subss xmm7, xmm0
subss xmm7, dword [esi + 0x37d4]
addss xmm7, dword [edi + 0x3c]
je 0x100362e7
mov eax, dword [ebp - 0x15c]
movss xmm2, dword [esi + 0xdbc]
subss xmm2, dword [eax + 0xf0]
jmp 0x100362f3
movss xmm2, dword [esi + 0x3bb4]
mulss xmm2, xmm1
cmp byte [ebp - 0x120], 0
je 0x1003631c
mov eax, dword [edi + 8]
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], eax
mov dword [edi + 0x40], eax
mov byte [edi + 0x56], 0
mov byte [edi + 0xe71], 1
jmp 0x1003660c
mov al, byte [ebp - 0x12f]
test al, al
je 0x100364d1
cmp word [esi + 0x3702], 2
jb 0x100364d1
cmp byte [esi + 0xdd1], 0
jne 0x100364d1
cmp byte [edi + 0x57], 0
je 0x1003635f
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.10033450
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.100338c0
lea edx, [edi + 0x40]
mov dword [ebp - 0xf8], eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov byte [edx + 0x16], 0
movzx ecx, word [esi + 0x3702]
sub ecx, 2
test cl, 1
jne 0x10036440
test eax, eax
je 0x100363aa
mov eax, dword [edi + 0x18]
mov ecx, dword [ebp - 0xf8]
cmp word [eax + ecx*2 - 2], 0xa
je 0x100363aa
xor cl, cl
jmp 0x100363ac
mov cl, 1
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
jne 0x100363b8
test cl, cl
jne 0x100363db
push 0x20000c
lea edx, [edi + 0x40]
mov ecx, edi
call fcn.10033c90
add esp, 4
mov byte [edi + 0xe70], 1
mov dword [edi + 0xe6c], 0xbe99999a
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
jne 0x100363f9
mov eax, dword [edi + 0x48]
cmp dword [edi + 0x44], eax
jne 0x100363f6
mov eax, dword [edi + 0x40]
mov dword [edi + 0x48], eax
mov dword [edi + 0x44], eax
jmp 0x100363f9
mov dword [edi + 0x40], eax
mov edx, dword [edi + 0x40]
mov ecx, edi
call fcn.10033600
mov dword [edi + 0x40], eax
mov dword [edi + 0x48], eax
mov edx, dword [edi + 0x48]
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 8]
cmp ecx, edx
je 0x1003642f
cmp ecx, eax
jle 0x1003641f
mov dword [edi + 0x44], eax
mov ecx, eax
cmp edx, eax
jle 0x10036428
mov dword [edi + 0x48], eax
mov edx, eax
cmp ecx, edx
jne 0x1003642f
mov dword [edi + 0x40], ecx
cmp dword [edi + 0x40], eax
jle 0x100365ff
mov dword [edi + 0x40], eax
jmp 0x100365ff
mov eax, dword [edi + 0x18]
mov ecx, dword [ebp - 0xf8]
push 0x200004
movzx esi, word [eax + ecx*2]
mov ecx, edi
call fcn.10033c90
add esp, 4
mov byte [edi + 0xe70], 1
lea edx, [edi + 0x40]
mov dword [edi + 0xe6c], 0xbe99999a
mov ecx, edi
push 0x600005
call fcn.10033c90
add esp, 4
mov byte [edi + 0xe70], 1
lea edx, [edi + 0x40]
mov dword [edi + 0xe6c], 0xbe99999a
mov ecx, edi
push 0x600001
call fcn.10033c90
add esp, 4
cmp esi, 0xa
je 0x100364bf
cmp byte [ebp - 0x10c], 0
je 0x100364bf
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x48]
mov dword [edi + 0x44], eax
mov dword [edi + 0x48], ecx
mov dword [edi + 0x40], ecx
mov esi, dword [ebp - 0x128]
mov byte [edi + 0xe70], 0
jmp 0x100365ff
cmp byte [esi + 0x36f8], 0
je 0x10036581
cmp byte [edi + 0xe71], 0
jne 0x10036581
test al, al
je 0x1003660c
cmp byte [esi + 0xdd1], 0
je 0x10036542
cmp byte [edi + 0x57], 0
je 0x10036516
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.10033450
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
jne 0x10036524
mov eax, dword [edi + 0x40]
mov dword [edi + 0x44], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.100338c0
lea ecx, [edi + 0x48]
mov edx, edi
mov dword [ecx], eax
mov ecx, 0x40
mov dword [edx + ecx], eax
jmp 0x100365ff
cmp byte [edi + 0x57], 0
je 0x1003655c
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.10033450
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.100338c0
lea ecx, [edi + 0x48]
mov dword [edi + 0x44], eax
mov byte [edi + 0x56], 0
mov edx, edi
mov dword [ecx], eax
mov ecx, 0x40
mov dword [edx + ecx], eax
jmp 0x100365ff
cmp byte [esi + 0xdc0], 0
je 0x1003660c
cmp byte [edi + 0xe71], 0
jne 0x10036615
movss xmm0, dword [esi + 0xb4]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100365c0
movss xmm0, dword [esi + 0xb8]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1003660c
cmp byte [edi + 0x57], 0
je 0x100365da
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.10033450
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
jne 0x100365e8
mov eax, dword [edi + 0x40]
mov dword [edi + 0x44], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.100338c0
mov dword [edi + 0x48], eax
mov dword [edi + 0x40], eax
mov byte [edi + 0xe70], 1
mov edx, dword [ebx + 0x14]
mov dword [edi + 0xe6c], 0xbe99999a
cmp byte [edi + 0xe71], 0
je 0x10036625
cmp byte [esi + 0xdc0], 0
jne 0x10036625
mov byte [edi + 0xe71], 0
cmp byte [esi + 0xdd0], 0
je 0x10036637
cmp byte [esi + 0xdd2], 0
je 0x10036649
cmp byte [ebp - 0xff], 0
je 0x10036652
cmp byte [esi + 0xdd3], 0
je 0x10036652
mov byte [ebp - 0xf1], 1
jmp 0x10036659
mov byte [ebp - 0xf1], 0
test edx, 0x400
je 0x10036869
push 1
xor edx, edx
mov ecx, 0x200
call fcn.1000fc00
mov ecx, dword [ebp - 0x12c]
add esp, 4
test al, al
mov al, byte [ebp - 0xf1]
je 0x100366ea
test al, al
jne 0x100366ea
cmp byte [esi + 0xdd1], al
jne 0x100366ea
mov edx, dword [ebx + 0x14]
test cl, cl
jne 0x100366ed
push 2
sub esp, 8
mov dword [ebp - 0xf8], 9
lea ecx, [ebp - 0xf8]
call fcn.10034e70
add esp, 0xc
test al, al
je 0x100366de
push dword [ebp - 0xf8]
lea edx, [edi + 0x40]
mov ecx, edi
call fcn.10033c90
add esp, 4
mov byte [edi + 0xe70], 1
mov dword [edi + 0xe6c], 0xbe99999a
mov ecx, dword [ebp - 0x12c]
mov al, byte [ebp - 0xf1]
mov edx, dword [ebx + 0x14]
cmp dword [esi + 0x3770], 0
jle 0x100367c0
test al, al
jne 0x10036788
test cl, cl
jne 0x10036788
cmp byte [ebp - 0xfd], cl
jne 0x10036788
xor ecx, ecx
mov dword [ebp - 0x124], ecx
nop
mov eax, dword [esi + 0x3778]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0xf8], eax
cmp eax, 9
je 0x10036776
push 2
sub esp, 8
lea ecx, [ebp - 0xf8]
call fcn.10034e70
add esp, 0xc
test al, al
je 0x10036770
push dword [ebp - 0xf8]
lea edx, [edi + 0x40]
mov ecx, edi
call fcn.10033c90
add esp, 4
mov byte [edi + 0xe70], 1
mov dword [edi + 0xe6c], 0xbe99999a
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebx + 0x14]
inc ecx
mov dword [ebp - 0x124], ecx
cmp ecx, dword [esi + 0x3770]
jl 0x10036720
mov ecx, dword [esi + 0x3774]
lea eax, [esi + 0x3770]
test ecx, ecx
jns 0x100367ba
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x3770]
call fcn.10019e80
lea eax, [esi + 0x3770]
mov dword [eax], 0
mov eax, dword [ebp - 0x104]
xor dl, dl
mov byte [ebp - 0xf1], dl
cmp dword [esi + 0x3e74], eax
jne 0x1003739c
cmp byte [esi + 0x3e80], dl
jne 0x1003739c
cmp byte [ebp - 0x105], dl
jne 0x1003739c
movss xmm0, dword [ebp - 0x188]
mov ecx, 1
subss xmm0, dword [esi + 0x37d8]
divss xmm0, dword [esi + 0x3bb4]
cvttss2si eax, xmm0
cmp eax, 1
cmovge ecx, eax
xor eax, eax
mov dword [edi + 0x50], ecx
cmp byte [esi + 0xdd1], al
mov dword [ebp - 0xf8], ecx
mov ecx, 0x400000
cmovne eax, ecx
mov dword [ebp - 0x110], eax
cmp byte [ebp - 0xff], dl
je 0x1003687a
mov al, byte [esi + 0xdd2]
mov byte [ebp - 0xfe], al
cmp byte [esi + 0xdd3], dl
je 0x10036886
cmp byte [esi + 0xdd0], dl
jne 0x10036886
test al, al
jne 0x10036886
mov byte [ebp - 0xfd], 1
jmp 0x1003688d
mov al, byte [ebp - 0xf1]
mov ecx, dword [ebp - 0x12c]
jmp 0x100366ed
mov al, byte [esi + 0xdd0]
mov byte [ebp - 0xfe], al
mov byte [ebp - 0xfd], 0
mov edx, dword [ebp - 0x104]
mov ecx, 0xa39
push 1
call fcn.100116e0
add esp, 4
test al, al
jne 0x100368bf
mov edx, dword [ebp - 0x104]
mov ecx, 0x220a
push 1
call fcn.100116e0
add esp, 4
test al, al
je 0x100368eb
cmp byte [ebp - 0x12c], 0
jne 0x100368eb
cmp byte [ebp - 0x1a0], 0
jne 0x100368eb
cmp byte [ebp - 0x10c], 0
je 0x100368e2
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
je 0x100368eb
mov byte [ebp - 0xf3], 1
jmp 0x100368f2
mov byte [ebp - 0xf3], 0
mov edx, dword [ebp - 0x104]
mov ecx, 0xa24
push 0
call fcn.100116e0
add esp, 4
test al, al
jne 0x10036924
mov edx, dword [ebp - 0x104]
mov ecx, 0x1209
push 0
call fcn.100116e0
add esp, 4
test al, al
je 0x10036947
cmp byte [ebp - 0x1a0], 0
jne 0x10036947
cmp byte [ebp - 0x10c], 0
je 0x1003693e
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
je 0x10036947
mov byte [ebp - 0x170], 1
jmp 0x1003694e
mov byte [ebp - 0x170], 0
mov edx, dword [ebp - 0x104]
mov ecx, 0xa37
push 1
call fcn.100116e0
add esp, 4
test al, al
jne 0x10036980
mov edx, dword [ebp - 0x104]
mov ecx, 0x2209
push 1
call fcn.100116e0
add esp, 4
test al, al
je 0x10036990
cmp byte [ebp - 0x12c], 0
mov byte [ebp - 0x12f], 1
je 0x10036997
mov byte [ebp - 0x12f], 0
mov edx, dword [ebp - 0x104]
mov ecx, 0xa3b
push 1
call fcn.100116e0
add esp, 4
test al, al
je 0x100369cb
cmp byte [ebp - 0x12c], 0
jne 0x100369cb
cmp byte [ebp - 0x174], 0
je 0x100369cb
mov byte [ebp - 0x16e], 1
jmp 0x100369d3
xor al, al
mov byte [ebp - 0x16e], al
mov edx, dword [ebp - 0x104]
mov ecx, 0xa3a
push 1
call fcn.100116e0
add esp, 4
test al, al
jne 0x10036a0d
cmp byte [ebp - 0xff], al
je 0x10036a26
mov edx, dword [ebp - 0x104]
mov ecx, 0x2a3b
push 1
call fcn.100116e0
add esp, 4
test al, al
je 0x10036a26
cmp byte [ebp - 0x12c], 0
jne 0x10036a26
cmp byte [ebp - 0x174], 0
mov byte [ebp - 0x16f], 1
jne 0x10036a2d
mov byte [ebp - 0x16f], 0
mov edx, dword [ebp - 0x104]
mov ecx, 0xa22
push 0
call fcn.100116e0
add esp, 4
mov byte [ebp - 0x175], al
test byte [esi + 8], 2
je 0x10036a5b
test byte [esi + 0xc], 1
mov byte [ebp - 0x119], 1
jne 0x10036a62
mov byte [ebp - 0x119], 0
push 1
xor edx, edx
mov ecx, 0x20d
call fcn.1000fc00
add esp, 4
test al, al
jne 0x10036a93
push 1
xor edx, edx
mov ecx, 0x267
call fcn.1000fc00
add esp, 4
mov byte [ebp - 0x16d], 0
test al, al
je 0x10036a9a
mov byte [ebp - 0x16d], 1
cmp byte [ebp - 0x119], 0
je 0x10036ad6
push 0
xor edx, edx
mov ecx, 0x26e
call fcn.1000fc00
add esp, 4
test al, al
jne 0x10036acd
push 0
xor edx, edx
mov ecx, 0x26d
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036ad6
mov byte [ebp - 0x11a], 1
jmp 0x10036add
mov byte [ebp - 0x11a], 0
mov edx, dword [ebp - 0x104]
mov ecx, 0x20e
push 1
call fcn.100116e0
add esp, 4
test al, al
jne 0x10036b20
cmp byte [ebp - 0x119], al
je 0x10036b17
mov edx, dword [ebp - 0x104]
mov ecx, 0x26c
push 1
call fcn.100116e0
add esp, 4
test al, al
jne 0x10036b20
mov byte [ebp - 0x119], 0
jmp 0x10036b27
mov byte [ebp - 0x119], 1
push 1
xor edx, edx
mov ecx, 0x201
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036b8c
cmp byte [ebp - 0xfd], 0
je 0x10036b4c
mov eax, 0x200004
jmp 0x10036b60
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0xfe], 0
cmovne eax, ecx
mov ecx, dword [ebp - 0x110]
or ecx, eax
push ecx
lea edx, [edi + 0x40]
mov ecx, edi
call fcn.10033c90
add esp, 4
mov byte [edi + 0xe70], 1
mov dword [edi + 0xe6c], 0xbe99999a
jmp 0x1003736a
push 1
xor edx, edx
mov ecx, 0x202
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036bbb
cmp byte [ebp - 0xfd], 0
je 0x10036bb1
mov eax, 0x200005
jmp 0x10036b60
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x10036b56
push 1
xor edx, edx
mov ecx, 0x203
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036c38
cmp byte [ebp - 0x10c], 0
je 0x10036c38
cmp byte [esi + 0xdd0], 0
je 0x10036c1e
mov eax, dword [ebp - 0x15c]
movss xmm0, dword [eax + 0x78]
subss xmm0, dword [esi + 0x3bb4]
mov dword [eax + 0x90], 0
mov dword [eax + 0x98], 0
maxss xmm0, dword [0x1006f200]
movss dword [eax + 0x88], xmm0
jmp 0x1003736a
movzx eax, byte [ebp - 0xfd]
lea eax, [eax*4 + 0x200002]
or eax, dword [ebp - 0x110]
push eax
jmp 0x10036b69
push 1
xor edx, edx
mov ecx, 0x204
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036cc0
cmp byte [ebp - 0x10c], 0
je 0x10036cc0
cmp byte [esi + 0xdd0], 0
je 0x10036ca6
movss xmm0, dword [esi + 0x3bb4]
mov esi, dword [ebp - 0x15c]
mov eax, dword [0x10072700]
addss xmm0, dword [esi + 0x78]
mov eax, dword [eax + 0x3e28]
minss xmm0, dword [eax + 0x80]
mov dword [esi + 0x90], 0
mov dword [esi + 0x98], 0
movss dword [esi + 0x88], xmm0
jmp 0x1003736a
movzx eax, byte [ebp - 0xfd]
lea eax, [eax*4 + 0x200003]
or eax, dword [ebp - 0x110]
push eax
jmp 0x10036b69
push 1
xor edx, edx
mov ecx, 0x205
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036d35
cmp byte [ebp - 0x10c], 0
je 0x10036d35
mov ecx, dword [ebp - 0x110]
lea edx, [edi + 0x40]
or ecx, 0x20000e
push ecx
mov ecx, edi
call fcn.10033c90
movd xmm0, dword [ebp - 0xf8]
add esp, 4
movss xmm1, dword [ebp - 0x184]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe70], 1
mov dword [edi + 0xe6c], 0xbe99999a
mulss xmm0, dword [esi + 0x3bb4]
subss xmm1, xmm0
movss dword [ebp - 0x184], xmm1
jmp 0x1003736a
push 1
xor edx, edx
mov ecx, 0x206
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036da6
cmp byte [ebp - 0x10c], 0
je 0x10036da6
mov ecx, dword [ebp - 0x110]
lea edx, [edi + 0x40]
or ecx, 0x20000f
push ecx
mov ecx, edi
call fcn.10033c90
movd xmm0, dword [ebp - 0xf8]
add esp, 4
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe70], 1
mov dword [edi + 0xe6c], 0xbe99999a
mulss xmm0, dword [esi + 0x3bb4]
addss xmm0, dword [ebp - 0x184]
movss dword [ebp - 0x184], xmm0
jmp 0x1003736a
push 1
xor edx, edx
mov ecx, 0x207
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036ddd
mov ecx, dword [ebp - 0x110]
mov eax, ecx
or eax, 0x200006
or ecx, 0x200004
cmp byte [esi + 0xdd0], 0
cmovne ecx, eax
jmp 0x10036b68
push 1
xor edx, edx
mov ecx, 0x208
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036e14
mov ecx, dword [ebp - 0x110]
mov eax, ecx
or eax, 0x200007
or ecx, 0x200005
cmp byte [esi + 0xdd0], 0
cmovne ecx, eax
jmp 0x10036b68
push 1
xor edx, edx
mov ecx, 0x20a
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036e80
cmp byte [ebp - 0x12c], 0
jne 0x10036e80
cmp byte [ebp - 0xf3], 0
jne 0x10036e80
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
jne 0x10036e6f
cmp byte [ebp - 0xfe], 0
je 0x10036e6f
push 0x60000d
lea edx, [edi + 0x40]
mov ecx, edi
call fcn.10033c90
add esp, 4
mov byte [edi + 0xe70], 1
mov dword [edi + 0xe6c], 0xbe99999a
mov ecx, dword [ebp - 0x110]
or ecx, 0x200008
jmp 0x10036b68
push 1
xor edx, edx
mov ecx, 0x20b
call fcn.1000fc00
add esp, 4
test al, al
je 0x10036f12
cmp byte [ebp - 0x12c], 0
jne 0x10036f12
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
jne 0x10036f01
cmp byte [ebp - 0xfe], 0
je 0x10036eba
push 0x60000c
jmp 0x10036ee3
cmp byte [ebp - 0xff], 0
je 0x10036f01
cmp byte [esi + 0xdd3], 0
je 0x10036f01
cmp byte [esi + 0xdd2], 0
jne 0x10036f01
cmp byte [esi + 0xdd0], 0
jne 0x10036f01
push 0x600004
lea edx, [edi + 0x40]
mov ecx, edi
call fcn.10033c90
mov dword [edi + 0xe6c], 0xbe99999a
add esp, 4
mov byte [edi + 0xe70], 1
mov ecx, dword [ebp - 0x110]
or ecx, 0x200009
jmp 0x10036b68
cmp byte [ebp - 0x16d], 0
mov cl, byte [ebp - 0x11a]
jne 0x100372d6
test cl, cl
jne 0x100372d6
cmp byte [ebp - 0x119], cl
je 0x10036f83
test dword [ebx + 0x14], 0x100000
je 0x10036f66
mov eax, dword [edi + 0xc]
test eax, eax
jg 0x10036f58
mov byte [ebp - 0x118], cl
mov byte [ebp - 0xf2], cl
mov byte [ebp - 0x105], 1
setg dl
mov byte [ebp - 0xf1], dl
jmp 0x10037370
mov dl, 1
xor cl, cl
xor dh, dh
mov byte [ebp - 0xf1], dl
mov byte [ebp - 0x105], dl
mov byte [ebp - 0xf2], dh
jmp 0x1003737c
mov al, byte [ebp - 0x16e]
test al, al
jne 0x1003729e
cmp byte [ebp - 0x16f], al
jne 0x1003729e
cmp byte [ebp - 0x175], al
je 0x10036fc5
mov eax, dword [edi + 8]
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], eax
mov dword [edi + 0x40], eax
mov byte [edi + 0x56], 0
mov byte [edi + 0xe70], 1
jmp 0x1003736a
mov al, byte [ebp - 0xf3]
test al, al
jne 0x10037184
cmp byte [ebp - 0x170], al
jne 0x10037184
cmp byte [ebp - 0x12f], al
je 0x1003736a
mov edx, dword [0x10072700]
mov eax, dword [edx + 0x80]
test eax, eax
je 0x10037018
push dword [edx + 0x88]
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x1003736a
mov edx, dword [0x10072700]
jmp 0x1003701d
mov esi, 0x10069402
mov ecx, esi
lea eax, [ecx + 1]
mov dword [ebp - 0xfc], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037028
sub ecx, dword [ebp - 0xfc]
test edx, edx
je 0x1003703f
inc dword [edx + 0xb0]
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
add esp, 4
mov dword [ebp - 0x138], eax
cmp byte [esi], 0
mov dword [ebp - 0xf8], 0
je 0x100370c7
xor edi, edi
nop dword [eax + eax]
push 0
mov edx, esi
lea ecx, [ebp - 0xf8]
call fcn.10003890
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xf8]
add esp, 4
add esi, eax
push 4
sub esp, 8
call fcn.10034e70
add esp, 0xc
test al, al
je 0x100370b0
mov ecx, dword [ebp - 0x138]
mov ax, word [ebp - 0xf8]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10037070
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xf8], edi
mov edi, dword [ebp - 0x134]
mov esi, dword [ebp - 0xf8]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x10037160
mov edx, dword [edi + 0x48]
mov ecx, dword [edi + 8]
mov dword [ebp - 0xf8], edx
mov edx, dword [edi + 0x44]
cmp edx, dword [edi + 0x48]
je 0x10037111
cmp edx, ecx
jle 0x100370f8
mov dword [edi + 0x44], ecx
mov edx, ecx
cmp dword [edi + 0x48], ecx
jle 0x10037106
mov dword [edi + 0x48], ecx
mov dword [ebp - 0xf8], ecx
cmp edx, dword [ebp - 0xf8]
jne 0x10037111
mov dword [edi + 0x40], edx
cmp dword [edi + 0x40], ecx
jle 0x10037119
mov dword [edi + 0x40], ecx
lea edx, [edi + 0x40]
mov ecx, edi
call fcn.10033c00
mov edx, dword [edi + 0x40]
mov ecx, edi
push esi
push dword [ebp - 0x138]
call fcn.10033770
add esp, 8
test al, al
je 0x10037153
mov edx, dword [edi + 0x40]
lea ecx, [edi + 0x60]
push esi
push 0
call fcn.10034ae0
add esp, 8
mov byte [edi + 0x56], 0
add dword [edi + 0x40], esi
mov eax, dword [ebp - 0x138]
mov byte [edi + 0xe70], 1
test eax, eax
je 0x10037174
mov ecx, dword [0x10072700]
test ecx, ecx
je 0x10037174
dec dword [ecx + 0xb0]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
add esp, 4
jmp 0x1003736a
cmp dword [esi + 0x84], 0
je 0x10037254
mov ecx, dword [edi + 0x48]
mov eax, dword [edi + 0x44]
cmp eax, ecx
je 0x100371a5
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x100371aa
mov ecx, dword [edi + 8]
xor esi, esi
mov eax, dword [edi + 0x18]
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0x13c], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.10003b20
mov ecx, dword [0x10072700]
inc eax
mov dword [ebp - 0xfc], eax
test ecx, ecx
je 0x100371db
inc dword [ecx + 0xb0]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
mov esi, dword [edi + 0x18]
add esp, 4
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x164], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x13c]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.10003ab0
mov eax, dword [0x10072700]
add esp, 8
mov ecx, dword [eax + 0x84]
test ecx, ecx
je 0x10037235
push esi
push dword [eax + 0x88]
call ecx
mov eax, dword [0x10072700]
add esp, 8
test esi, esi
je 0x10037243
test eax, eax
je 0x10037243
dec dword [eax + 0xb0]
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
call eax
mov al, byte [ebp - 0xf3]
add esp, 4
test al, al
je 0x1003736a
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
jne 0x10037278
mov eax, dword [edi + 8]
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], eax
mov dword [edi + 0x40], eax
mov byte [edi + 0x56], 0
mov byte [edi + 0xe70], 1
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
je 0x1003736a
lea edx, [edi + 0x40]
mov ecx, edi
call fcn.10033c00
mov byte [edi + 0x56], 0
jmp 0x1003736a
movzx eax, al
lea edx, [edi + 0x40]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.10033c90
mov eax, dword [edi + 0x40]
add esp, 4
mov byte [edi + 0xe70], 1
mov dword [edi + 0xe6c], 0xbe99999a
mov dword [edi + 0x48], eax
mov dword [edi + 0x44], eax
jmp 0x1003736a
mov edx, dword [ebx + 0x14]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0x10c], 0
je 0x100372f9
test cl, cl
jne 0x100372f9
test al, al
je 0x10037325
cmp byte [esi + 0xdd0], cl
jne 0x1003732e
cmp byte [esi + 0x64], 0
mov byte [ebp - 0x11b], 1
je 0x10037363
cmp byte [ebp - 0x10c], 0
jne 0x10037363
mov eax, dword [edi + 8]
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], eax
mov dword [edi + 0x40], eax
mov byte [edi + 0x56], 0
jmp 0x1003736a
cmp byte [esi + 0xdd0], 0
jne 0x100372f9
cmp byte [ebp - 0x12c], 0
jne 0x1003736a
push 2
sub esp, 8
mov dword [ebp - 0xf8], 0xa
lea ecx, [ebp - 0xf8]
call fcn.10034e70
add esp, 0xc
test al, al
je 0x1003736a
push dword [ebp - 0xf8]
jmp 0x10036b69
mov byte [ebp - 0x105], 1
mov dl, byte [ebp - 0xf1]
mov ecx, dword [ebp - 0x118]
mov dh, byte [ebp - 0xf2]
mov eax, dword [edi + 0x44]
cmp eax, dword [edi + 0x48]
je 0x1003738c
test dh, dh
je 0x1003738c
mov al, 1
jmp 0x1003738e
xor al, al
mov esi, dword [ebp - 0x128]
or cl, al
mov dword [ebp - 0x118], ecx
mov eax, dword [ebp - 0x104]
xor ecx, ecx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x110], ecx
cmp dword [esi + 0x3e74], eax
jne 0x100377e6
cmp byte [ebp - 0x12c], cl
jne 0x100376cc
test dl, dl
je 0x10037668
test dword [ebx + 0x14], 0x100000
je 0x10037460
mov eax, dword [edi + 8]
xor edx, edx
push ecx
mov dword [ebp - 0x110], ecx
lea ecx, [edi + 0x60]
push eax
mov dword [ebp - 0x120], 0x10069402
mov dword [ebp - 0xfc], eax
call fcn.10034ae0
add esp, 8
mov dword [ebp - 0x164], eax
test eax, eax
je 0x10037437
mov edx, dword [ebp - 0xfc]
xor ecx, ecx
test edx, edx
jle 0x10037437
mov esi, eax
mov eax, dword [edi + 0x18]
mov ax, word [eax + ecx*2]
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, edx
jl 0x10037421
mov esi, dword [ebp - 0x128]
push dword [edi + 8]
xor edx, edx
mov ecx, edi
call fcn.10033710
add esp, 4
mov dword [edi + 0x48], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x40], 0
jmp 0x10037668
mov ecx, dword [edi + 0x30]
mov eax, dword [ebp - 0x114]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10037490
test dl, dl
je 0x1003748c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10037490
add eax, 2
add ecx, 2
test dl, dl
jne 0x10037470
xor eax, eax
jmp 0x10037495
sbb eax, eax
or eax, 1
test eax, eax
je 0x10037668
mov eax, dword [edi + 0x30]
xor edx, edx
mov ecx, dword [edi + 0x28]
mov dword [ebp - 0x120], eax
dec ecx
xor eax, eax
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x18c], edx
mov dword [ebp - 4], edx
test ecx, ecx
jle 0x1003761a
mov eax, dword [ebp - 0x120]
mov esi, eax
lea edi, [ecx + eax]
xor eax, eax
mov dword [ebp - 0xf8], eax
test edi, edi
je 0x100374f0
cmp esi, edi
jae 0x10037511
cmp byte [esi], 0
je 0x10037511
push edi
mov edx, esi
lea ecx, [ebp - 0x144]
call fcn.10003890
add esi, eax
add esp, 4
mov eax, dword [ebp - 0xf8]
inc eax
jmp 0x100374e2
mov edi, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x13c], eax
test eax, eax
jle 0x10037570
mov edx, 8
mov ecx, eax
cmp eax, edx
cmovl ecx, edx
mov dword [ebp - 0xfc], ecx
test ecx, ecx
jle 0x10037570
mov eax, dword [0x10072700]
test eax, eax
je 0x10037547
inc dword [eax + 0xb0]
lea eax, [ecx + ecx]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [ebp - 0xfc]
mov edx, eax
mov eax, dword [ebp - 0x13c]
add esp, 4
mov dword [ebp - 0x18c], edx
mov dword [ebp - 0x190], ecx
jmp 0x10037572
xor edx, edx
mov esi, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x110]
add ecx, esi
mov dword [ebp - 0xfc], esi
mov dword [ebp - 0x164], ecx
lea esi, [eax - 1]
mov ecx, edx
mov dword [ebp - 0x194], eax
mov dword [ebp - 0xf8], ecx
lea esi, [ecx + esi*2]
mov dword [ebp - 0x160], esi
cmp ecx, esi
jae 0x10037609
mov esi, dword [ebp - 0xfc]
mov edi, dword [ebp - 0x164]
test edi, edi
je 0x100375be
cmp esi, edi
jae 0x100375f7
cmp byte [esi], 0
je 0x100375f7
push edi
mov edx, esi
lea ecx, [ebp - 0xfc]
call fcn.10003890
mov ecx, dword [ebp - 0xf8]
add esi, eax
mov ax, word [ebp - 0xfc]
add esp, 4
mov word [ecx], ax
add ecx, 2
mov dword [ebp - 0xf8], ecx
cmp ecx, dword [ebp - 0x160]
jb 0x100375b6
mov edi, dword [ebp - 0x134]
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x18c]
xor esi, esi
mov word [ecx], si
mov esi, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0xfc], 0
test ecx, ecx
mov ecx, edi
cmovle eax, dword [ebp - 0xfc]
push eax
push edx
lea edx, [edi + 0x40]
call fcn.10034dd0
add esp, 8
mov eax, dword [ebp - 0x18c]
test eax, eax
je 0x10037661
mov ecx, dword [0x10072700]
test ecx, ecx
je 0x10037657
dec dword [ecx + 0xb0]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [edi + 0x10]
lea ecx, [edi + 0x1c]
mov byte [edi + 0x34], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0xf8], edx
cmp edx, eax
jle 0x100376ba
test eax, eax
je 0x1003769c
cdq
sub eax, edx
mov edx, dword [ebp - 0xf8]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x20]
jmp 0x100376a1
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x1c]
push eax
call fcn.10019e10
mov edx, dword [ebp - 0xf8]
lea ecx, [edi + 0x1c]
mov dword [ecx], edx
mov ecx, dword [edi + 0x24]
push 0
push dword [edi + 0x18]
call fcn.10003ab0
add esp, 8
cmp byte [ebp - 0xf1], 0
je 0x100378ed
cmp byte [ebp - 0x11b], 0
je 0x100376ee
mov edx, dword [ebx + 0x14]
test dl, 0x20
jne 0x100378f0
mov ecx, dword [ebp - 0x110]
mov edx, dword [ebp - 0x120]
test edx, edx
je 0x100377e0
cmp byte [ebp - 0x158], 0
je 0x100377a2
mov eax, dword [ebx + 0x14]
xorps xmm0, xmm0
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xdc], eax
lea eax, [ecx + 1]
cmp dword [ebx + 0xc], eax
movlpd qword [ebp - 0xe4], xmm0
cmovge eax, dword [ebx + 0xc]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xf0]
push eax
xor eax, eax
movlpd qword [ebp - 0xd0], xmm0
movlpd qword [ebp - 0xc8], xmm0
mov dword [ebp - 0xf0], 0x40000
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xe8], 0
call eax
mov eax, dword [ebp - 0xdc]
add esp, 4
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebx + 0xc], eax
lea ecx, [eax - 1]
cmp dword [ebp - 0xd8], ecx
cmovl ecx, dword [ebp - 0xd8]
lea eax, [ecx + 1]
mov ecx, dword [ebx + 0xc]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebx + 0xc], ecx
cmp ecx, 1
jb 0x100377d9
jbe 0x100377ce
lea eax, [ecx - 1]
push eax
push edx
push dword [ebp - 0x114]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebx + 0xc]
add esp, 0xc
mov eax, dword [ebp - 0x114]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0x12d], 1
mov eax, dword [ebp - 0x104]
cmp byte [ebp - 0x105], 0
je 0x10037800
cmp dword [esi + 0x3e74], eax
jne 0x10037800
xor edx, edx
xor ecx, ecx
call fcn.10006ba0
mov edx, dword [ebp - 0x10c]
test dl, dl
jne 0x10037d0e
mov edx, dword [ebp - 0x104]
lea ecx, [ebp - 0x90]
push 1
call fcn.10004cf0
movss xmm1, dword [0x1006f2b0]
add esp, 4
mov ecx, 7
push dword [ebp - 0x84]
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
push dword [ebp - 0x90]
call fcn.10003ef0
movss xmm2, dword [esi + 0x37dc]
mov dl, 1
mov ecx, eax
call fcn.10004ae0
movss xmm4, dword [ebp - 0x19c]
add esp, 0x10
movss xmm2, dword [ebp - 0x8c]
movaps xmm0, xmm4
addss xmm0, dword [esi + 0x37d4]
mov edx, dword [ebp - 0x10c]
movaps xmm3, xmm4
addss xmm3, dword [ebp - 0x180]
movaps xmm1, xmm2
movss dword [ebp - 0x44], xmm4
addss xmm1, dword [ebp - 0x188]
movss dword [ebp - 0x148], xmm0
movaps xmm0, xmm2
addss xmm0, dword [esi + 0x37d8]
movss dword [ebp - 0x164], xmm3
movss dword [ebp - 0x3c], xmm3
movss dword [ebp - 0x124], xmm3
movss xmm3, dword [ebp - 0x180]
movss dword [ebp - 0x40], xmm2
movss dword [ebp - 0x174], xmm1
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x144], xmm0
jmp 0x10037d88
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x10037cb7
test dl, 0x40
je 0x10037928
push 1
xor edx, edx
mov ecx, 0x200
call fcn.1000fc00
mov edx, dword [ebx + 0x14]
add esp, 4
test al, al
je 0x10037928
mov eax, 0x40
mov ecx, 0x200
jmp 0x100379a1
test dl, dl
jns 0x10037974
push 1
xor edx, edx
mov ecx, 0x203
call fcn.1000fc00
add esp, 4
test al, al
je 0x10037950
mov edx, dword [ebx + 0x14]
mov eax, 0x80
mov ecx, 0x203
jmp 0x100379a1
push 1
xor edx, edx
mov ecx, 0x204
call fcn.1000fc00
mov edx, dword [ebx + 0x14]
add esp, 4
test al, al
je 0x10037974
mov eax, 0x80
mov ecx, 0x204
jmp 0x100379a1
test edx, 0x80000
je 0x1003798c
cmp byte [edi + 0xe72], 0
je 0x1003798c
mov eax, 0x80000
jmp 0x1003799f
test edx, 0x100
mov ecx, pe_nt_image_headers32
mov eax, 0
cmovne eax, ecx
xor ecx, ecx
test eax, eax
je 0x10037cb7
xor esi, esi
mov dword [ebp - 0xc0], eax
cmp byte [ebp - 0x12c], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xb4], 0
mov word [ebp - 0x9f], si
mov byte [ebp - 0x9d], 0
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], esi
jne 0x100379e7
mov eax, dword [edi + 0x24]
mov esi, dword [edi + 0x18]
mov dword [ebp - 0xac], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xa8], eax
mov eax, dword [edi + 0x38]
mov dword [ebp - 0xa4], eax
mov eax, dword [edi + 0x40]
mov dword [ebp - 0xb0], ecx
mov ecx, esi
mov byte [ebp - 0xa0], 0
lea edx, [esi + eax*2]
call fcn.10003b20
mov ecx, dword [ebp - 0x134]
mov edi, eax
mov dword [ebp - 0x9c], edi
mov ecx, dword [ecx + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10003b20
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax + 0x48]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10003b20
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xc0]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0xa0]
add esp, 4
mov edx, dword [ebp - 0x9c]
mov byte [ebp - 0xf3], al
cmp edx, edi
jne 0x10037a8a
test al, al
je 0x10037ae2
mov esi, dword [ebp - 0xac]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xf8], eax
test edi, edi
je 0x10037aa3
cmp esi, edi
jae 0x10037ac4
cmp byte [esi], 0
je 0x10037ac4
push edi
mov edx, esi
lea ecx, [ebp - 0x144]
call fcn.10003890
add esi, eax
add esp, 4
mov eax, dword [ebp - 0xf8]
inc eax
jmp 0x10037a95
mov edi, dword [ebp - 0x134]
mov edx, dword [ebp - 0x9c]
mov dword [edi + 0x40], eax
mov al, byte [ebp - 0xf3]
mov byte [edi + 0xe70], 1
jmp 0x10037ae8
mov edi, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [ebp - 0xfc]
jne 0x10037afa
test al, al
je 0x10037b4c
cmp ecx, edx
jne 0x10037b03
mov eax, dword [edi + 0x40]
jmp 0x10037b49
mov esi, dword [ebp - 0xac]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xf8], eax
test edi, edi
je 0x10037b1c
cmp esi, edi
jae 0x10037b3d
cmp byte [esi], 0
je 0x10037b3d
push edi
mov edx, esi
lea ecx, [ebp - 0x144]
call fcn.10003890
add esi, eax
add esp, 4
mov eax, dword [ebp - 0xf8]
inc eax
jmp 0x10037b0e
mov ecx, dword [ebp - 0x98]
mov edi, dword [ebp - 0x134]
mov dword [edi + 0x44], eax
mov eax, dword [ebp - 0x94]
mov dl, byte [ebp - 0xf3]
cmp eax, dword [ebp - 0x164]
jne 0x10037b68
test dl, dl
je 0x10037cb1
cmp eax, ecx
jne 0x10037b71
mov eax, dword [edi + 0x44]
jmp 0x10037bb7
mov esi, dword [ebp - 0xac]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xf8], eax
test edi, edi
je 0x10037b8a
cmp esi, edi
jae 0x10037bab
cmp byte [esi], 0
je 0x10037bab
push edi
mov edx, esi
lea ecx, [ebp - 0x144]
call fcn.10003890
add esi, eax
add esp, 4
mov eax, dword [ebp - 0xf8]
inc eax
jmp 0x10037b7c
mov edi, dword [ebp - 0x134]
mov dl, byte [ebp - 0xf3]
mov dword [edi + 0x48], eax
test dl, dl
je 0x10037cb1
push dword [ebp - 0xa8]
mov edx, dword [ebp - 0xac]
mov ecx, edi
call fcn.10035070
mov esi, dword [ebp - 0xa8]
add esp, 4
mov ecx, dword [ebp - 0x140]
cmp esi, ecx
jle 0x10037c2a
cmp byte [ebp - 0x158], 0
je 0x10037c2a
mov eax, dword [edi + 0x14]
sub esi, ecx
add esi, dword [edi + 0x10]
cmp esi, eax
jle 0x10037c27
test eax, eax
je 0x10037c10
cdq
sub eax, edx
lea edx, [edi + 0x10]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10037c18
mov ecx, 8
lea edx, [edi + 0x10]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10019e80
mov dword [edi + 0x10], esi
mov eax, dword [ebp - 0xac]
mov ecx, dword [edi + 0x18]
mov esi, ecx
mov dword [ebp - 0xfc], eax
mov eax, dword [edi + 0x10]
dec eax
mov dword [ebp - 0x160], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x164], eax
cmp ecx, eax
jae 0x10037c92
mov edi, dword [ebp - 0xfc]
cmp byte [edi], 0
je 0x10037c86
push 0
mov edx, edi
lea ecx, [ebp - 0xfc]
call fcn.10003890
add edi, eax
add esp, 4
mov ax, word [ebp - 0xfc]
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0x164]
jb 0x10037c58
mov edi, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x160]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0xa8]
sar esi, 1
mov dword [edi + 8], esi
mov dword [edi + 0xc], eax
mov dword [edi + 0xe6c], 0xbe99999a
mov esi, dword [ebp - 0x128]
cmp byte [ebp - 0x12c], 0
jne 0x100376ee
mov ecx, dword [ebp - 0x114]
mov eax, dword [edi + 0x24]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10037cf0
test dl, dl
je 0x10037cec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10037cf0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10037cd0
xor eax, eax
jmp 0x10037cf5
sbb eax, eax
or eax, 1
test eax, eax
je 0x100376ee
mov ecx, dword [edi + 0x24]
mov dword [ebp - 0x120], ecx
mov ecx, dword [edi + 0xc]
jmp 0x100376f4
movss xmm1, dword [ebp - 0x19c]
movss xmm3, dword [ebp - 0x180]
movaps xmm2, xmm1
movss xmm0, dword [ebp - 0x8c]
addss xmm2, xmm3
mov ecx, dword [ebp - 0x15c]
movss dword [ebp - 0x44], xmm1
movss dword [ebp - 0x40], xmm0
mov eax, dword [ecx + 0xec]
movaps xmm1, xmm2
mov ecx, dword [ecx + 0xf0]
movss dword [ebp - 0x164], xmm1
movss dword [ebp - 0x3c], xmm1
movaps xmm1, xmm0
addss xmm1, dword [ebp - 0x188]
movss dword [ebp - 0x124], xmm2
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
movaps xmm0, xmm1
movss dword [ebp - 0x174], xmm0
movss dword [ebp - 0x38], xmm0
cmp byte [ebp - 0x12e], 0
lea eax, [ebp - 0x148]
movss xmm0, dword [eax]
xorps xmm5, xmm5
movss dword [ebp - 0x16c], xmm0
xorps xmm6, xmm6
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x140], xmm1
movss dword [ebp - 0x13c], xmm0
movss dword [ebp - 0xf8], xmm5
je 0x10037dde
mov ecx, dword [edi + 0x24]
mov dword [ebp - 0x114], ecx
jmp 0x10037de4
mov ecx, dword [ebp - 0x114]
cmp byte [ebp - 0xf2], 0
jne 0x10038018
cmp byte [ebp - 0x118], 0
jne 0x10038018
test dl, dl
je 0x10037e62
mov eax, dword [ebp - 0x114]
xor ecx, ecx
mov dl, byte [eax]
lea edi, [eax + 1]
test dl, dl
je 0x10037e25
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x10037e13
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0x110], edi
cmp al, 0xa
je 0x10037e38
cmp al, 0xd
je 0x10037e38
inc ecx
mov edx, dword [ebp - 0x110]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x3bb4]
movss dword [ebp - 0xf8], xmm0
movaps xmm0, xmm3
movss dword [ebp - 0x13c], xmm0
jmp 0x10037eac
mov eax, dword [ebp - 0x104]
cmp dword [esi + 0x3e74], eax
jne 0x10037e77
mov edx, dword [edi + 0xc]
add edx, ecx
jmp 0x10037e97
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037e80
sub ecx, edx
mov edx, dword [ebp - 0x114]
add edx, ecx
mov ecx, dword [ebp - 0x114]
mov eax, edx
mov dword [ebp - 0x110], edx
sub eax, ecx
cmp eax, 0x200000
jge 0x10038bed
movss xmm1, dword [0x1006f2b0]
xor ecx, ecx
call fcn.10003ef0
cmp byte [ebp - 0x10c], 0
mov ecx, edx
movss xmm2, dword [esi + 0x3bb4]
lea edx, [ebp - 0x44]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xfc], 0
cmovne edx, dword [ebp - 0xfc]
test dword [ebp - 0x124], 0xff000000
mov edi, dword [eax + 0x260]
mov eax, dword [esi + 0x3bb0]
mov dword [ebp - 0x140], eax
je 0x10038bed
cmp dword [ebp - 0x110], 0
jne 0x10037f3f
mov ecx, dword [ebp - 0x114]
lea eax, [ecx + 1]
mov dword [ebp - 0xfc], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037f26
sub ecx, dword [ebp - 0xfc]
add ecx, dword [ebp - 0x114]
mov eax, dword [esi + 0x3bb0]
cmp dword [ebp - 0x114], ecx
je 0x10038bed
test eax, eax
jne 0x10037f5b
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x140], eax
ucomiss xmm2, dword [0x1006f200]
lahf
test ah, 0x44
jp 0x10037f70
mov eax, dword [edi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [edi + 0x60]
movups xmmword [ebp - 0x150], xmm0
test edx, edx
je 0x10037fe0
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x150]
comiss xmm0, xmm1
jae 0x10037f98
movss dword [ebp - 0x150], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x14c]
comiss xmm0, xmm1
jae 0x10037fb2
movss dword [ebp - 0x14c], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x148]
ja 0x10037fc8
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x144]
ja 0x10037fde
movss dword [ebp - 0x144], xmm0
test edx, edx
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x150]
push ecx
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x140]
push eax
push dword [ebp - 0x124]
lea eax, [ebp - 0x34]
push eax
push edi
call fcn.10029310
jmp 0x10038bed
mov eax, dword [edi + 0xc]
xor edx, edx
add eax, ecx
movss dword [ebp - 0x160], xmm6
xorps xmm7, xmm7
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x18c], 0xfffffc18
mov dword [ebp - 0x154], 0xfffffc18
cmp byte [ebp - 0xf2], dl
je 0x10038084
mov eax, dword [edi + 0x40]
mov edx, 1
mov dword [ebp - 0x18c], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x17c], eax
cmp byte [ebp - 0x118], 0
je 0x100380b7
mov ecx, dword [edi + 0x48]
cmp dword [edi + 0x44], ecx
mov eax, dword [ebp - 0x120]
cmovl ecx, dword [edi + 0x44]
inc edx
mov dword [ebp - 0x154], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x138], eax
mov esi, dword [ebp - 0x120]
mov eax, dword [ebp - 0x10c]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
mov dword [ebp - 0xfc], esi
test si, si
mov esi, dword [ebp - 0x128]
je 0x10038160
mov eax, dword [ebp - 0xfc]
xor esi, esi
mov edi, dword [ebp - 0x18c]
movzx eax, ax
cmp ax, 0xa
jne 0x1003812e
inc esi
cmp edi, 0xffffffff
jne 0x10038112
cmp ecx, dword [ebp - 0x17c]
jb 0x10038112
dec edx
mov dword [ebp - 0x18c], esi
test edx, edx
jle 0x10038148
cmp dword [ebp - 0x154], 0xffffffff
jne 0x1003812e
cmp ecx, dword [ebp - 0x138]
jb 0x1003812e
dec edx
mov dword [ebp - 0x154], esi
test edx, edx
jle 0x10038148
movzx eax, word [ecx + 2]
add ecx, 2
mov edi, eax
mov dword [ebp - 0xfc], edi
mov edi, dword [ebp - 0x18c]
test ax, ax
jne 0x100380f3
mov edi, dword [ebp - 0x134]
mov dword [ebp - 0x158], esi
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x154]
inc eax
cmp dword [ebp - 0x18c], 0xffffffff
mov edx, eax
mov dword [ebp - 0x158], eax
cmovne edx, dword [ebp - 0x18c]
cmp ecx, 0xffffffff
mov dword [ebp - 0x18c], edx
mov edx, dword [ebp - 0x17c]
cmove ecx, eax
mov dword [ebp - 0x154], ecx
mov ecx, edx
cmp edx, dword [ebp - 0x120]
jbe 0x100381b9
mov edi, dword [ebp - 0x120]
cmp word [ecx - 2], 0xa
je 0x100381b3
add ecx, 0xfffffffe
cmp ecx, edi
ja 0x100381a5
mov edi, dword [ebp - 0x134]
mov eax, dword [esi + 0x3bb0]
movaps xmm1, xmm6
movss xmm2, dword [esi + 0x3bb4]
movaps xmm3, xmm6
divss xmm2, dword [eax + 0x10]
cmp ecx, edx
jae 0x1003821e
mov edi, eax
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x100381ee
maxss xmm1, xmm3
movaps xmm3, xmm6
jmp 0x10038210
cmp edx, 0xd
je 0x10038210
mov edx, eax
cmp edx, dword [edi]
jge 0x10038203
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x10038208
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
cmp ecx, dword [ebp - 0x17c]
jb 0x100381d8
mov edi, dword [ebp - 0x134]
cmp dword [ebp - 0x154], 0
maxss xmm3, xmm1
movd xmm4, dword [ebp - 0x18c]
movss xmm0, dword [esi + 0x3bb4]
cvtdq2ps xmm4, xmm4
movss dword [ebp - 0xfc], xmm3
mulss xmm4, xmm0
movss dword [ebp - 0x144], xmm4
jl 0x10038308
mov eax, dword [ebp - 0x138]
mov ecx, eax
mov edx, dword [ebp - 0x120]
cmp eax, edx
jbe 0x10038276
cmp word [ecx - 2], 0xa
je 0x10038276
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10038268
movaps xmm3, xmm0
mov eax, dword [esi + 0x3bb0]
movaps xmm1, xmm6
movaps xmm7, xmm6
divss xmm3, dword [eax + 0x10]
cmp ecx, dword [ebp - 0x138]
jae 0x100382dd
mov edi, eax
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x100382aa
maxss xmm1, xmm7
movaps xmm7, xmm6
jmp 0x100382cf
cmp edx, 0xd
je 0x100382cf
mov edx, eax
cmp edx, dword [edi]
jge 0x100382bf
mov eax, dword [edi + 8]
movss xmm2, dword [eax + edx*4]
jmp 0x100382c4
movss xmm2, dword [edi + 0xc]
movaps xmm0, xmm3
mulss xmm0, xmm2
addss xmm7, xmm0
cmp ecx, dword [ebp - 0x138]
jb 0x10038294
mov edi, dword [ebp - 0x134]
movd xmm3, dword [ebp - 0x154]
maxss xmm7, xmm1
movss xmm0, dword [esi + 0x3bb4]
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm0
movss dword [ebp - 0x160], xmm3
movss xmm3, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x10c]
movss xmm1, dword [ebp - 0x180]
test cl, cl
je 0x1003833c
movd xmm5, dword [ebp - 0x158]
cvtdq2ps xmm5, xmm5
mulss xmm5, xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x13c], xmm0
movss dword [ebp - 0xf8], xmm5
cmp byte [ebp - 0xf2], 0
je 0x1003847e
cmp byte [edi + 0xe70], 0
je 0x1003847e
test dword [ebx + 0x14], 0x1000
jne 0x100383b7
movss xmm2, dword [edi + 0x3c]
movaps xmm0, xmm1
comiss xmm2, xmm3
subss xmm1, dword [esi + 0x37d4]
mulss xmm0, dword [0x1006f25c]
movss dword [ebp - 0x180], xmm1
movaps xmm1, xmm3
jbe 0x10038394
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x100383a5
subss xmm1, dword [ebp - 0x180]
comiss xmm1, xmm2
jb 0x100383be
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x3c], xmm0
jmp 0x100383be
mov dword [edi + 0x3c], 0
test cl, cl
je 0x1003846a
movss xmm3, dword [ebp - 0x184]
movaps xmm0, xmm4
subss xmm0, dword [esi + 0x3bb4]
comiss xmm3, xmm0
jbe 0x100383ff
movaps xmm3, xmm6
maxss xmm3, xmm0
movss xmm0, dword [ebp - 0x188]
comiss xmm6, xmm3
movss xmm1, dword [esi + 0x37d8]
jbe 0x10038438
movaps xmm1, xmm6
jmp 0x1003844c
movss xmm2, dword [esi + 0x37d8]
movaps xmm0, xmm4
movss xmm1, dword [ebp - 0x188]
addss xmm2, xmm2
subss xmm1, xmm2
subss xmm0, xmm1
comiss xmm0, xmm3
jb 0x100383e5
movss xmm0, dword [ebp - 0x188]
movaps xmm3, xmm4
subss xmm3, xmm0
addss xmm3, xmm2
jmp 0x100383ed
addss xmm1, xmm1
addss xmm1, xmm5
subss xmm1, xmm0
maxss xmm1, xmm6
minss xmm1, xmm3
mov eax, dword [ebp - 0x15c]
movss xmm0, dword [eax + 0x78]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
movss dword [eax + 0x78], xmm1
mov byte [edi + 0xe70], 0
movss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x16c], xmm0
cmp byte [ebp - 0x118], 0
movss xmm5, dword [edi + 0x3c]
movss dword [ebp - 0x138], xmm5
je 0x100387a0
mov edx, dword [edi + 0x48]
mov eax, edx
mov ecx, dword [edi + 0x44]
cmp ecx, edx
mov esi, dword [ebp - 0x120]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xf2], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0x120]
lea edx, [eax + edx*2]
mov dword [ebp - 0x158], edx
je 0x100384d3
movss xmm1, dword [0x1006f2b0]
jmp 0x100384db
movss xmm1, dword [0x1006f278]
mov ecx, 0x2f
call fcn.10003ef0
mov ecx, dword [ebp - 0x10c]
xorps xmm0, xmm0
mov dword [ebp - 0x184], eax
test cl, cl
je 0x10038500
xorps xmm5, xmm5
xorps xmm6, xmm6
jmp 0x10038510
movss xmm5, dword [0x1006f3b0]
movss xmm6, dword [0x1006f2e0]
movss xmm3, dword [ebp - 0x30]
movss xmm4, dword [ebp - 0x16c]
movss dword [ebp - 0x18c], xmm6
addss xmm7, xmm4
movss dword [ebp - 0x17c], xmm5
addss xmm3, dword [ebp - 0x160]
subss xmm7, dword [ebp - 0x138]
subss xmm3, xmm0
movss dword [ebp - 0x160], xmm3
cmp esi, edx
jae 0x100387ee
movss xmm4, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x128]
mov edi, dword [ebp - 0x184]
nop dword [eax]
movss xmm2, dword [ecx + 0x3bb4]
movaps xmm0, xmm4
addss xmm0, xmm2
comiss xmm3, xmm0
ja 0x10038783
movss xmm0, dword [ebp - 0x8c]
comiss xmm0, xmm3
jbe 0x100385b9
cmp esi, edx
jae 0x1003874b
nop dword [eax]
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x1003874b
cmp esi, edx
jb 0x100385a0
jmp 0x1003874b
mov eax, dword [ecx + 0x3bb0]
xorps xmm0, xmm0
xorps xmm4, xmm4
xorps xmm1, xmm1
divss xmm2, dword [eax + 0x10]
cmp esi, edx
jae 0x10038623
movzx eax, word [esi]
add esi, 2
mov edx, eax
cmp eax, 0xa
je 0x10038610
cmp edx, 0xd
je 0x10038604
mov eax, dword [ecx + 0x3bb0]
cmp edx, dword [eax]
jge 0x100385f7
mov eax, dword [eax + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x100385fc
movss xmm0, dword [eax + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
mov edx, dword [ebp - 0x158]
cmp esi, edx
jb 0x100385d1
jmp 0x10038620
mov edx, dword [ebp - 0x158]
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x1003865c
mov eax, dword [ecx + 0x3bb0]
cmp dword [eax], 0x20
jle 0x10038644
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x10038649
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x1006f270]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm4, dword [ebp - 0x174]
addss xmm1, xmm7
addss xmm7, dword [0x1006f200]
movaps xmm2, xmm5
movaps xmm0, xmm6
subss xmm2, dword [ecx + 0x3bb4]
movss xmm6, dword [ebp - 0x164]
addss xmm0, xmm3
minss xmm1, xmm6
maxss xmm7, dword [ebp - 0x19c]
addss xmm2, xmm3
minss xmm0, xmm4
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x24], xmm7
maxss xmm2, dword [ebp - 0x8c]
comiss xmm0, dword [ebp - 0x8c]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x18], xmm0
jbe 0x1003874b
comiss xmm4, xmm2
jbe 0x1003874b
comiss xmm1, dword [ebp - 0x19c]
jbe 0x1003874b
comiss xmm6, xmm7
jbe 0x1003874b
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x1c]
push edi
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax + 0x260]
call fcn.10024d00
movss xmm0, dword [ebp - 0x124]
movss xmm3, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x158]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x16c], xmm3
movss xmm3, dword [ebp - 0x160]
movss dword [ebp - 0x140], xmm0
movss xmm7, dword [ebp - 0x16c]
movss xmm5, dword [ebp - 0x17c]
movss xmm6, dword [ebp - 0x18c]
addss xmm3, dword [ecx + 0x3bb4]
subss xmm7, dword [ebp - 0x138]
movss dword [ebp - 0x160], xmm3
cmp esi, edx
jb 0x10038570
movss xmm5, dword [ebp - 0x138]
xorps xmm6, xmm6
mov edi, dword [ebp - 0x134]
mov esi, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x10c]
movss xmm4, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x110]
test cl, cl
jne 0x100387c5
mov eax, edx
sub eax, dword [ebp - 0x114]
cmp eax, 0x200000
jge 0x10038a1e
mov eax, dword [0x10072700]
movups xmm2, xmmword [eax + 0x3860]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x3798]
movups xmmword [ebp - 0x24], xmm2
jbe 0x10038801
movaps xmm0, xmm6
jmp 0x1003880d
movss xmm5, dword [ebp - 0x138]
xorps xmm6, xmm6
mov esi, dword [ebp - 0x128]
jmp 0x100387a8
movss xmm0, dword [0x1006f2b0]
minss xmm0, xmm2
movss xmm2, dword [0x1006f354]
movss xmm7, dword [0x1006f270]
movss xmm3, dword [ebp - 0x20]
comiss xmm6, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x10038838
movaps xmm0, xmm6
jmp 0x10038844
movss xmm0, dword [0x1006f2b0]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x1c]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x10038864
movaps xmm0, xmm6
jmp 0x10038870
movss xmm0, dword [0x1006f2b0]
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x1003888b
movaps xmm0, xmm6
jmp 0x10038897
movss xmm0, dword [0x1006f2b0]
minss xmm0, xmm1
mulss xmm0, xmm2
subss xmm4, xmm5
mov dword [ebp - 0x174], edx
mov edx, dword [esi + 0x3bb0]
movss xmm2, dword [esi + 0x3bb4]
addss xmm0, xmm7
mov dword [ebp - 0x164], edx
lea edx, [ebp - 0x44]
mov dword [ebp - 0x160], 0
movss dword [ebp - 0x190], xmm4
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
shl eax, 0x18
subss xmm0, xmm6
or eax, ecx
mov ecx, dword [ebp - 0x15c]
cmp byte [ebp - 0x10c], 0
mov dword [ebp - 0x17c], eax
cmovne edx, dword [ebp - 0x160]
mov ecx, dword [ecx + 0x260]
mov dword [ebp - 0x158], ecx
movss dword [ebp - 0x18c], xmm0
test eax, 0xff000000
je 0x10038a1e
cmp dword [ebp - 0x110], 0
jne 0x10038958
mov ecx, dword [ebp - 0x114]
lea eax, [ecx + 1]
mov dword [ebp - 0x160], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10038935
sub ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x114]
add eax, ecx
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x174], eax
jmp 0x1003895e
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x114], eax
je 0x10038a1e
cmp dword [esi + 0x3bb0], 0
jne 0x1003897f
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x164], eax
ucomiss xmm2, xmm6
lahf
test ah, 0x44
jp 0x10038990
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x24], xmm0
test edx, edx
je 0x100389e5
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x100389af
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x20]
comiss xmm0, xmm1
jae 0x100389c3
movss dword [ebp - 0x20], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x1c]
ja 0x100389d3
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x18]
ja 0x100389e3
movss dword [ebp - 0x18], xmm0
test edx, edx
mov edx, dword [ebp - 0x174]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x24]
push edx
push dword [ebp - 0x114]
push eax
push dword [ebp - 0x17c]
lea eax, [ebp - 0x190]
push eax
push ecx
mov ecx, dword [ebp - 0x164]
call fcn.10029310
cmp byte [ebp - 0xf2], 0
je 0x10038bed
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe6c]
movss dword [edi + 0xe6c], xmm0
cmp byte [esi + 0x63], 0
je 0x10038a8d
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x10038a8d
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x168], xmm0
fld qword [ebp - 0x168]
fld qword [0x1006f2d8]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x1006f298]
fstp qword [ebp - 0x168]
movsd xmm1, qword [ebp - 0x168]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x10038a8d
xor cl, cl
jmp 0x10038a8f
mov cl, 1
movss xmm0, dword [ebp - 0xfc]
movss xmm6, dword [0x1006f2b0]
addss xmm0, dword [ebp - 0x34]
subss xmm0, dword [ebp - 0x138]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x144]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x1006f200]
movss dword [ebp - 0xfc], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x24], xmm1
addss xmm4, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0x1c], xmm4
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [ebp - 0x144], xmm2
movaps xmm0, xmm2
movaps xmm3, xmm2
subss xmm0, dword [esi + 0x3bb4]
subss xmm3, dword [0x1006f2cc]
addss xmm0, dword [0x1006f270]
movss dword [ebp - 0x18], xmm3
movss dword [ebp - 0x20], xmm0
test cl, cl
je 0x10038bb5
comiss xmm3, dword [ebp - 0x8c]
jbe 0x10038bb5
movss xmm5, dword [ebp - 0x140]
comiss xmm5, xmm0
jbe 0x10038bb5
comiss xmm4, dword [ebp - 0x19c]
jbe 0x10038bb5
movss xmm0, dword [ebp - 0x124]
comiss xmm0, xmm1
jbe 0x10038bb5
sub esp, 8
movss dword [ebp - 0x168], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x164], xmm3
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.10003ef0
add esp, 4
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax + 0x260]
call fcn.10024b00
movss xmm1, dword [ebp - 0xfc]
movss xmm2, dword [ebp - 0x144]
movss xmm6, dword [0x1006f2b0]
cmp byte [ebp - 0x12c], 0
jne 0x10038bed
movss xmm0, dword [esi + 0x3bb4]
subss xmm1, xmm6
subss xmm2, xmm0
mov byte [esi + 0x59d4], 1
movss dword [esi + 0x59e0], xmm0
movss dword [esi + 0x59d8], xmm1
movss dword [esi + 0x59dc], xmm2
cmp byte [ebp - 0x1a0], 0
je 0x10038bfb
call fcn.1000f310
cmp byte [ebp - 0x10c], 0
je 0x10038d10
mov ecx, dword [0x10072700]
movss xmm1, dword [ebp - 0xf8]
addss xmm1, dword [esi + 0x37d8]
movss xmm4, dword [ebp - 0x13c]
mov eax, dword [ecx + 0x3e28]
movss dword [ebp - 0x148], xmm4
movss dword [ebp - 0x144], xmm1
mov byte [eax + 0xa8], 1
mov eax, dword [ecx + 0x3e28]
cmp byte [eax + 0xab], 0
jne 0x10038ca5
movss xmm0, dword [eax + 0xf0]
lea ecx, [ebp - 0x148]
movss xmm3, dword [eax + 0xec]
movaps xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x24], xmm3
movss xmm1, dword [0x1006f3b0]
addss xmm4, xmm3
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x1c], xmm4
call fcn.10011860
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x24]
call fcn.100119c0
add esp, 8
mov esi, dword [esi + 0x4680]
mov eax, esi
mov edi, dword [ebp - 0x128]
or eax, 0x401
mov dword [edi + 0x4680], eax
call fcn.10009db0
mov eax, dword [edi + 0x46a4]
mov ecx, dword [ebp - 0x78]
and eax, 0x80
or ecx, eax
mov dword [edi + 0x4680], esi
mov dword [ebp - 0x144], ecx
call fcn.10011f40
mov esi, edi
cmp dword [esi + 0x469c], 0
jne 0x10038d10
mov eax, dword [ebp - 0x104]
mov dword [esi + 0x469c], eax
mov eax, dword [ebp - 0x7c]
mov dword [esi + 0x46a0], eax
mov eax, dword [ebp - 0x144]
mov dword [esi + 0x46a4], eax
cmp byte [esi + 0x5a58], 0
je 0x10038d52
cmp byte [ebp - 0x1a0], 0
jne 0x10038d52
mov eax, dword [0x10072700]
lea ecx, [ebp - 0x34]
push dword [ebp - 0x110]
mov edx, dword [ebp - 0x114]
mov dword [eax + 0x5a70], 0x1006e960
mov dword [eax + 0x5a74], 0x1006e95c
call fcn.10017e00
add esp, 4
movss xmm0, dword [ebp - 0x1a4]
comiss xmm0, dword [0x1006f200]
jbe 0x10038db1
movss xmm0, dword [ebp - 0x88]
xor edx, edx
addss xmm0, dword [esi + 0x37ec]
mov ecx, dword [ebp - 0x198]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [ebp - 0x8c]
addss xmm0, dword [esi + 0x37d8]
movss dword [ebp - 0x144], xmm0
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push 1
call fcn.10004180
add esp, 0xc
mov dl, byte [ebp - 0x12d]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x10038ddb
test ecx, 0x8000000
jne 0x10038ddb
mov eax, dword [0x10072700]
or dword [eax + 0x46a4], 4
mov word [eax + 0x3e84], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0x11b]
cmovne eax, ecx
jmp 0x100357ff