Function at 0x1004f580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f528c
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x208
mov eax, dword [0x1011e00c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov dword [ebp - 0x158], edi
mov dword [ebp - 0x164], ecx
mov ecx, edi
call fcn.1004c8a0
mov ecx, edi
mov dword [edi + 4], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
call fcn.1004a5d0
xor eax, eax
mov byte [ebp - 0x151], 0
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 4], eax
xor edi, edi
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x1bc], edi
mov eax, dword [ebp - 0x158]
mov byte [ebp - 4], 1
mov ecx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov dword [ebp - 0x160], 8
mov edx, dword [eax + 0x54]
mov dword [ebp - 0x194], edx
mov dword [ebp - 0x170], ecx
test edx, edx
jle 0x1004f6bd
cmp edx, 8
mov esi, edx
cmovl esi, dword [ebp - 0x160]
test esi, esi
jle 0x1004f6bd
mov eax, dword [0x101203a8]
test eax, eax
je 0x1004f690
inc dword [eax + 0xac]
imul eax, esi, 0x54
push eax
call ecx
mov ecx, dword [ebp - 0x170]
add esp, 4
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1d8], esi
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x17c], eax
test eax, eax
jle 0x1004f71b
cmp eax, 8
mov esi, eax
cmovl esi, dword [ebp - 0x160]
test esi, esi
jle 0x1004f71b
mov eax, dword [0x101203a8]
test eax, eax
je 0x1004f6ef
inc dword [eax + 0xac]
lea eax, [esi + esi*2]
shl eax, 3
push eax
call ecx
mov edx, dword [ebp - 0x194]
mov edi, eax
mov eax, dword [ebp - 0x17c]
add esp, 4
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1c0], esi
mov esi, dword [ebp - 0x190]
imul ecx, edx, 0x54
mov dword [ebp - 0x1c4], eax
push ecx
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x17c]
add esp, 0xc
lea eax, [eax + eax*2]
shl eax, 3
push eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x158]
add esp, 0xc
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x198], eax
cmp dword [edx + 0x54], 0
jle 0x1004f8ae
xor eax, eax
add esi, 0x34
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x188], esi
mov ecx, dword [edx + 0x5c]
xor edx, edx
add ecx, eax
mov dword [esi - 4], 0xffffffff
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x158]
cmp dword [ecx + 0x3c], edx
jle 0x1004f925
mov edi, dword [ebp - 0x188]
or esi, 0xffffffff
mov eax, esi
cmp esi, 0xffffffff
jne 0x1004f7dd
mov eax, dword [ebp - 0x174]
or esi, esi
mov ecx, dword [ecx + 0x44]
mov eax, dword [eax + 0x74]
cmp eax, dword [ecx + edx*4]
jne 0x1004f7cf
mov dword [edi - 4], edx
mov esi, edx
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, esi
cmp edx, dword [ecx + 0x3c]
jl 0x1004f7b0
mov edi, dword [ebp - 0x18c]
cmp eax, 0xffffffff
je 0x1004f925
push dword [ebx + 8]
mov esi, dword [ebp - 0x188]
push dword [ebp - 0x174]
push dword [ebp - 0x164]
lea ecx, [esi - 0x34]
call fcn.1004ecd0
test al, al
je 0x1004f925
mov ecx, dword [ebp - 0x174]
mov edx, 0x101163e0
mov eax, dword [ecx + 0x40]
shr eax, 8
and al, 1
or byte [ebp - 0x151], al
mov eax, dword [esi - 4]
lea eax, [eax + eax*2]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ecx + 0x30]
test eax, eax
cmovne edx, eax
mov dword [esi - 8], edx
cmp word [edx], 0
je 0x1004f862
movzx eax, word [edx + 2]
test ax, ax
je 0x1004f862
mov ecx, eax
cmp dword [esi], ecx
cmovge ecx, dword [esi]
add edx, 4
mov dword [esi], ecx
cmp word [edx], 0
jne 0x1004f847
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x16c]
inc dword [edi + edx*8]
mov ecx, dword [esi]
cmp dword [edi + edx*8 + 4], ecx
cmovge ecx, dword [edi + edx*8 + 4]
add esi, 0x54
mov dword [edi + edx*8 + 4], ecx
add eax, 0x78
mov ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x158]
inc ecx
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x16c], eax
cmp ecx, dword [edx + 0x54]
jl 0x1004f784
mov eax, dword [ebp - 0x194]
xor esi, esi
mov dword [ebp - 0x178], esi
test eax, eax
jle 0x1004fcd4
mov edx, dword [ebp - 0x190]
add edx, 0x44
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x168], edx
nop dword [eax]
mov eax, dword [edx - 0x14]
mov ecx, dword [edx - 0x10]
add ecx, 0x20
sar ecx, 5
lea esi, [eax + eax*2]
mov dword [ebp - 0x1a8], ecx
mov eax, dword [edx - 4]
mov dword [ebp - 0x174], esi
mov dword [ebp - 0x164], eax
cmp ecx, eax
jle 0x1004f973
test eax, eax
je 0x1004f931
cdq
sub eax, edx
mov edx, dword [ebp - 0x168]
sar eax, 1
add eax, dword [ebp - 0x164]
mov dword [ebp - 0x160], eax
jmp 0x1004f93b
mov byte [ebp - 0x151], 0
jmp 0x100509cb
mov dword [ebp - 0x160], 8
cmp dword [ebp - 0x160], ecx
lea eax, [edx - 8]
mov dword [ebp - 0x16c], eax
mov eax, ecx
cmovg eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x16c]
push eax
call fcn.1003f270
mov edx, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x16c]
jmp 0x1004f976
lea eax, [edx - 8]
mov dword [eax], ecx
lea eax, [ecx*4]
push eax
push 0
push dword [edx]
call sub.VCRUNTIME140.dll_memset
lea ecx, [esi*8 + 0xc]
add esp, 0xc
add ecx, edi
mov dword [ebp - 0x160], ecx
cmp dword [ecx], 0
jne 0x1004f9ff
mov esi, dword [edi + esi*8 + 4]
mov eax, dword [ecx + 4]
add esi, 0x20
sar esi, 5
mov dword [ebp - 0x164], eax
cmp esi, eax
jle 0x1004f9e8
test eax, eax
je 0x1004f9ca
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, dword [ebp - 0x164]
jmp 0x1004f9cf
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, dword [ebp - 0x160]
push eax
call fcn.1003f270
mov ecx, dword [ebp - 0x160]
lea eax, [esi*4]
mov dword [ecx], esi
push eax
push 0
push dword [ecx + 8]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x168]
mov eax, dword [edx - 0x18]
mov dword [ebp - 0x188], eax
cmp word [eax], 0
je 0x1004faf7
nop dword [eax + eax]
movzx ecx, word [eax + 2]
test cx, cx
je 0x1004faf1
movzx edi, word [eax]
cmp edi, ecx
ja 0x1004fad8
nop dword [eax + eax]
mov eax, dword [ebp - 0x174]
mov ecx, edi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov esi, edi
mov ecx, dword [ebp - 0x18c]
sar esi, 5
mov dword [ebp - 0x164], edx
mov eax, dword [ecx + eax*8 + 0x14]
test dword [eax + esi*4], edx
jne 0x1004fabf
mov eax, dword [ebp - 0x168]
push edi
push dword [eax - 0x2c]
call fcn.1009cb80
mov edx, dword [ebp - 0x168]
add esp, 8
test eax, eax
je 0x1004fac5
inc dword [edx - 0xc]
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x18c]
inc dword [ecx + eax*8 + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x18c]
or dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x174]
mov eax, dword [edx + eax*8 + 0x14]
or dword [eax + esi*4], ecx
inc dword [ebp - 0x178]
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x188]
inc edi
movzx eax, word [eax + 2]
cmp edi, eax
jle 0x1004fa40
mov eax, dword [ebp - 0x188]
add eax, 4
mov dword [ebp - 0x188], eax
cmp word [eax], 0
jne 0x1004fa20
mov edi, dword [ebp - 0x18c]
add edx, 0x54
sub dword [ebp - 0x19c], 1
mov dword [ebp - 0x168], edx
jne 0x1004f8e0
mov esi, dword [ebp - 0x190]
mov eax, dword [ebp - 0x194]
add esi, 0x50
mov dword [ebp - 0x174], esi
mov dword [ebp - 0x16c], eax
mov edi, dword [esi - 0x18]
cmp edi, dword [esi - 4]
jle 0x1004fb95
mov eax, dword [0x101203a8]
test eax, eax
je 0x1004fb3f
inc dword [eax + 0xac]
mov eax, edi
shl eax, 5
push eax
call dword [ebp - 0x170]
mov edx, dword [esi]
add esp, 4
mov dword [ebp - 0x164], eax
test edx, edx
je 0x1004fb90
mov ecx, dword [esi - 8]
shl ecx, 5
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [esi]
add esp, 0xc
test ecx, ecx
je 0x1004fb80
mov eax, dword [0x101203a8]
test eax, eax
je 0x1004fb80
dec dword [eax + 0xac]
push ecx
call dword [ebp - 0x198]
mov eax, dword [ebp - 0x164]
add esp, 4
mov dword [esi], eax
mov dword [esi - 4], edi
mov ecx, dword [esi - 0xc]
mov edx, ecx
mov eax, dword [esi - 0x14]
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x160], ecx
lea eax, [ecx + eax*4]
mov dword [ebp - 0x1b0], eax
cmp ecx, eax
jae 0x1004fc7b
nop word [eax + eax]
mov eax, dword [edx]
mov dword [ebp - 0x164], eax
test eax, eax
je 0x1004fc66
xor edi, edi
mov eax, 1
mov ecx, edi
shl eax, cl
test dword [ebp - 0x164], eax
je 0x1004fc5c
mov ecx, dword [esi - 8]
mov eax, edx
sub eax, dword [ebp - 0x1a8]
xorps xmm0, xmm0
shl eax, 3
and eax, 0xffffffe0
add eax, edi
movzx eax, ax
movups xmmword [ebp - 0x208], xmm0
mov dword [ebp - 0x200], eax
mov eax, dword [esi - 4]
cmp ecx, eax
jne 0x1004fc3b
inc ecx
test eax, eax
je 0x1004fc1f
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi - 4]
jmp 0x1004fc24
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
lea ecx, [esi - 8]
call fcn.10050b40
mov edx, dword [ebp - 0x160]
xorps xmm0, xmm0
mov eax, dword [esi - 8]
mov ecx, dword [ebp - 0x174]
shl eax, 5
add eax, dword [ecx]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x208]
movups xmmword [eax + 0x10], xmm0
inc dword [esi - 8]
mov esi, ecx
inc edi
cmp edi, 0x20
jb 0x1004fbd2
add edx, 4
mov dword [ebp - 0x160], edx
cmp edx, dword [ebp - 0x1b0]
jb 0x1004fbc0
mov ecx, dword [esi - 0xc]
test ecx, ecx
je 0x1004fcb0
mov eax, dword [0x101203a8]
mov dword [esi - 0x10], 0
mov dword [esi - 0x14], 0
test eax, eax
je 0x1004fc9f
dec dword [eax + 0xac]
push ecx
call dword [ebp - 0x198]
add esp, 4
mov dword [esi - 0xc], 0
add esi, 0x54
sub dword [ebp - 0x16c], 1
mov dword [ebp - 0x174], esi
jne 0x1004fb28
mov edi, dword [ebp - 0x18c]
mov esi, dword [ebp - 0x178]
jmp 0x1004fcdc
xor esi, esi
mov dword [ebp - 0x178], esi
cmp dword [ebp - 0x17c], 0
jle 0x1004fd4f
mov esi, dword [ebp - 0x198]
lea eax, [edi + 0x14]
mov edi, dword [ebp - 0x17c]
mov dword [ebp - 0x160], eax
nop word [eax + eax]
mov ecx, dword [eax]
test ecx, ecx
je 0x1004fd35
mov dword [eax - 4], 0
mov dword [eax - 8], 0
mov eax, dword [0x101203a8]
test eax, eax
je 0x1004fd23
dec dword [eax + 0xac]
push ecx
call esi
mov eax, dword [ebp - 0x160]
add esp, 4
mov dword [eax], 0
add eax, 0x18
mov dword [ebp - 0x160], eax
sub edi, 1
jne 0x1004fd00
mov edi, dword [ebp - 0x18c]
mov esi, dword [ebp - 0x178]
test edi, edi
je 0x1004fd8e
mov eax, dword [0x101203a8]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1c4], 0
test eax, eax
je 0x1004fd76
dec dword [eax + 0xac]
push edi
call dword [ebp - 0x198]
add esp, 4
xor eax, eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x1bc], eax
xor eax, eax
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1f0], eax
test esi, esi
jle 0x1004fdec
cmp esi, 8
mov edi, esi
mov ecx, 8
cmovl edi, ecx
test edi, edi
jle 0x1004fdec
mov eax, dword [0x101203a8]
test eax, eax
je 0x1004fdca
inc dword [eax + 0xac]
lea eax, [edi + edi*2]
shl eax, 3
push eax
call dword [ebp - 0x170]
add esp, 4
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1f4], edi
lea ecx, [esi + esi*2]
mov dword [ebp - 0x1f8], esi
shl ecx, 3
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], eax
mov edi, dword [ebp - 0x170]
mov byte [ebp - 4], 7
mov eax, dword [0x101203a8]
push 0x40000
test eax, eax
je 0x1004fe36
inc dword [eax + 0xac]
call edi
mov esi, eax
add esp, 4
mov eax, dword [0x101203a8]
test eax, eax
je 0x1004fe4c
inc dword [eax + 0xac]
push 0x20
call edi
movss xmm0, dword [0x10116f8c]
xor ecx, ecx
mov dword [ebp - 0x174], eax
xor edi, edi
mov dword [ebp - 0x1c8], eax
add esp, 4
mov dword [eax], esi
mov eax, 1
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1cc], 8
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x1a4], edi
test eax, eax
jle 0x100501e8
mov esi, dword [ebp - 0x190]
xor edx, edx
mov dword [ebp - 0x1b4], eax
add esi, 0x48
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x184], edx
nop
mov ecx, dword [eax + 0x5c]
add ecx, edx
cmp dword [esi - 0x10], 0
je 0x100501b5
mov edx, dword [ebp - 0x160]
lea eax, [edi + edi*2]
add edi, dword [esi - 0x10]
mov dword [ebp - 0x1a4], edi
lea eax, [edx + eax*8]
mov dword [esi - 0x20], eax
movss xmm1, dword [ecx + 0x44]
ucomiss xmm1, xmm0
movss dword [ebp - 0x164], xmm1
lahf
test ah, 0x44
jnp 0x1004ff50
mov byte [ebp - 0x159], 1
xor edi, edi
movd xmm0, edi
mov eax, edi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x101180c0]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
call fcn.100f3600
movss xmm1, dword [ebp - 0x164]
mov edx, 0xff
cmp eax, edx
movzx ecx, al
cmovbe edx, ecx
mov byte [ebp + edi - 0x118], dl
inc edi
cmp edi, 0x100
jb 0x1004ff06
jmp 0x1004ff57
mov byte [ebp - 0x159], 0
cmp dword [esi], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1ac], 0
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x19c], eax
jle 0x100501af
xor ecx, ecx
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x1a0], ecx
nop dword [eax + eax]
mov edi, dword [esi + 8]
add edi, ecx
push dword [edi + 0x18]
push dword [esi - 0x30]
call fcn.1009cb80
add esp, 8
test eax, eax
je 0x10050184
push dword [esi - 0x28]
push eax
push dword [esi - 0x30]
call fcn.1009d460
add esp, 0xc
test eax, eax
jne 0x10050184
test byte [esi - 0x2c], 0x20
mov eax, dword [esi - 0x30]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x16c], eax
je 0x1004ffe3
push eax
call fcn.100a40c0
mov eax, dword [ebp - 0x16c]
add esp, 4
test byte [esi - 0x2c], 0x40
je 0x1004fff2
push eax
call fcn.100a41c0
add esp, 4
mov eax, dword [ebp - 0x16c]
add eax, 0x18
je 0x10050184
mov eax, dword [esi - 0x30]
push dword [esi - 0x24]
mov eax, dword [eax + 0x54]
push eax
mov dword [ebp - 0x164], eax
call fcn.1009f740
add esp, 8
test eax, eax
jne 0x10050184
mov eax, dword [esi - 0x30]
mov eax, dword [eax + 0x54]
add eax, 0x4c
mov dword [ebp - 0x16c], eax
mov ecx, dword [eax + 4]
mov dword [edi], ecx
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
mov dword [edi + 4], eax
mov eax, dword [esi - 0x30]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x64]
mov dword [edi + 8], eax
mov eax, dword [esi - 0x30]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x68]
neg eax
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x164]
mov eax, dword [eax + 0x40]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
mov edx, dword [ebp - 0x17c]
sar eax, 6
movd xmm0, eax
mov eax, dword [ebp - 0x16c]
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x10], xmm0
cmp byte [eax + 0x12], 7
sete al
mov byte [edi + 0x14], al
mov eax, dword [ebp - 0x178]
imul eax, ecx
shl eax, 2
mov dword [ebp - 0x178], eax
add eax, edx
cmp eax, 0x40000
jle 0x1005010c
xor eax, eax
mov dword [ebp - 0x17c], eax
mov eax, dword [0x101203a8]
test eax, eax
je 0x100500c6
inc dword [eax + 0xac]
push 0x40000
call dword [ebp - 0x170]
add esp, 4
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x164]
lea ecx, [ebp - 0x1d0]
push eax
call fcn.1003f3c0
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1d0]
mov edx, dword [ebp - 0x17c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x188], ecx
jmp 0x10050118
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x188]
mov ecx, dword [eax + ecx*4 - 4]
lea eax, [ebp - 0x118]
add ecx, edx
add edx, dword [ebp - 0x178]
mov dword [ebp - 0x17c], edx
xor edx, edx
cmp byte [ebp - 0x159], dl
mov dword [edi + 0x1c], ecx
cmove eax, edx
push eax
push dword [edi]
push ecx
push dword [ebp - 0x16c]
call fcn.1004eed0
mov edx, dword [ebp - 0x168]
mov eax, dword [esi - 0x20]
mov ecx, dword [edi]
add ecx, dword [ebp - 0x19c]
mov dword [edx + eax + 4], ecx
mov eax, dword [esi - 0x20]
mov ecx, dword [edi + 4]
add ecx, dword [ebp - 0x19c]
mov dword [edx + eax + 8], ecx
mov ecx, dword [esi - 0x20]
mov eax, dword [edx + ecx + 8]
imul eax, dword [edx + ecx + 4]
add dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x1a0]
inc eax
add dword [ebp - 0x168], 0x18
add ecx, 0x20
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a0], ecx
cmp eax, dword [esi]
jl 0x1004ff90
mov eax, dword [ebp - 0x158]
mov edx, dword [ebp - 0x184]
add esi, 0x54
movss xmm0, dword [0x10116f8c]
add edx, 0x78
sub dword [ebp - 0x1b4], 1
mov edi, dword [ebp - 0x1a4]
mov dword [ebp - 0x184], edx
jne 0x1004fec0
mov ecx, dword [ebp - 0x180]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
call fcn.10001660
mov ecx, dword [ebp - 0x158]
cvttss2si eax, xmm0
mov edi, dword [ecx + 8]
mov dword [ecx + 0x28], 0
inc eax
test edi, edi
jg 0x10050248
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x10117118]
jb 0x10050224
mov edi, 0x1000
jmp 0x10050248
comiss xmm0, dword [0x10117114]
jb 0x10050234
mov edi, 0x800
jmp 0x10050248
comiss xmm0, dword [0x10117108]
mov edi, 0x200
mov eax, 0x400
cmovae edi, eax
mov dword [ecx + 0x24], edi
xor eax, eax
sub edi, dword [ecx + 0xc]
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 4], 8
test edi, edi
jle 0x100502aa
cmp edi, 8
mov esi, edi
mov edx, 8
cmovl esi, edx
test esi, esi
jle 0x100502aa
mov eax, dword [0x101203a8]
test eax, eax
je 0x10050288
inc dword [eax + 0xac]
lea eax, [esi + esi*2]
shl eax, 2
push eax
call dword [ebp - 0x170]
mov ecx, dword [ebp - 0x158]
add esp, 4
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e8], esi
mov esi, dword [ecx + 0xc]
mov ecx, 0x8000
push edi
mov dword [ebp - 0x1ec], edi
sub ecx, esi
mov edi, dword [ebp - 0x158]
push eax
push ecx
lea ecx, [ebp - 0x150]
mov edx, dword [edi + 0x24]
sub edx, esi
call fcn.1003fa20
add esp, 0xc
lea edx, [ebp - 0x150]
mov ecx, edi
call fcn.1004c390
mov eax, dword [ebp - 0x194]
test eax, eax
jle 0x1005035c
mov esi, dword [ebp - 0x190]
add esi, 0x38
mov dword [ebp - 0x1a4], eax
nop dword [eax]
mov eax, dword [esi]
test eax, eax
je 0x1005034a
mov edx, dword [esi - 0x10]
lea ecx, [ebp - 0x150]
push eax
call fcn.1004f3a0
xor edi, edi
add esp, 4
cmp dword [esi], edi
jle 0x1005034a
xor edx, edx
mov eax, dword [esi - 0x10]
cmp dword [edx + eax + 0x14], 0
je 0x10050342
mov ecx, dword [edx + eax + 0x10]
add ecx, dword [edx + eax + 8]
mov eax, dword [ebp - 0x158]
cmp dword [eax + 0x28], ecx
cmovge ecx, dword [eax + 0x28]
mov dword [eax + 0x28], ecx
inc edi
add edx, 0x18
cmp edi, dword [esi]
jl 0x10050320
add esi, 0x54
sub dword [ebp - 0x1a4], 1
jne 0x10050300
mov edi, dword [ebp - 0x158]
test byte [edi], 1
mov esi, dword [edi + 0x28]
jne 0x10050389
lea ecx, [esi - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov esi, ecx
sar esi, 0x10
or esi, ecx
mov eax, dword [edi + 0x24]
inc esi
movss xmm2, dword [0x10116f8c]
movaps xmm1, xmm2
mov dword [edi + 0x28], esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
imul esi, eax
cmp byte [ebp - 0x151], 0
divss xmm2, xmm0
mov eax, dword [0x101203a8]
movss dword [edi + 0x2c], xmm1
movss dword [edi + 0x30], xmm2
je 0x100503e5
shl esi, 2
test eax, eax
je 0x100503d9
inc dword [eax + 0xac]
push esi
call dword [ebp - 0x170]
mov dword [edi + 0x20], eax
jmp 0x100503f9
test eax, eax
je 0x100503ef
inc dword [eax + 0xac]
push esi
call dword [ebp - 0x170]
mov dword [edi + 0x1c], eax
add esp, 4
push esi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x194]
xor al, al
add esp, 0xc
mov byte [ebp - 0x159], al
test ecx, ecx
jle 0x1005084a
mov eax, dword [ebp - 0x190]
xor edx, edx
add eax, 8
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x164], ecx
nop dword [eax + eax]
cmp dword [eax + 0x30], 0
je 0x10050823
mov ecx, dword [edi + 0x5c]
movss xmm0, dword [eax - 4]
add ecx, edx
movss dword [ebp - 0x1b0], xmm0
movss xmm0, dword [eax]
mov dword [ebp - 0x1a4], ecx
cmp byte [ecx + 0x3c], 0
mov edx, dword [ecx + 0x74]
mov dword [ebp - 0x1b4], edx
movss dword [ebp - 0x184], xmm0
lea esi, [edx + 0x38]
lea edi, [edx + 0x50]
jne 0x100504c6
mov ecx, edx
call fcn.1004cd00
mov edx, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x1a4]
movss xmm0, dword [ebp - 0x1b0]
mov eax, dword [ecx + 0x10]
mov dword [edx + 0x10], eax
xor eax, eax
movss dword [edi], xmm0
movss xmm0, dword [ebp - 0x184]
mov word [esi], ax
mov eax, dword [ebp - 0x158]
mov dword [edx + 0x34], ecx
mov dword [edx + 0x30], eax
movss dword [edx + 0x54], xmm0
movss xmm0, dword [edi]
addss xmm0, dword [0x10116f48]
inc word [esi]
mov edi, dword [ebp - 0x158]
movss xmm2, dword [ecx + 0x28]
movss dword [ebp - 0x168], xmm2
cvttss2si eax, xmm0
mov esi, dword [edi + 0xc]
mov dword [ebp - 0x178], esi
mov dword [ebp - 0x1b0], 0
movd xmm1, eax
mov eax, dword [ebp - 0x16c]
cvtdq2ps xmm1, xmm1
cmp dword [eax + 0x30], 0
addss xmm1, dword [ecx + 0x2c]
movss dword [ebp - 0x17c], xmm1
jle 0x10050810
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x19c], edx
mov edi, dword [eax + 0x48]
mov eax, dword [eax + 0x20]
add edi, edx
add eax, ecx
cmp dword [eax + 4], 0
jne 0x1005054d
cmp dword [eax + 8], 0
je 0x100507d4
mov edx, dword [eax + 0xc]
sub esp, 0x20
movd xmm0, dword [edi + 8]
add edx, esi
mov esi, dword [eax + 0x10]
mov eax, dword [edi]
add esi, dword [ebp - 0x178]
movd xmm7, dword [edi + 0xc]
mov ecx, dword [edi + 4]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x184], esi
mov esi, dword [ebp - 0x158]
mov dword [ebp - 0x180], edx
movd xmm6, eax
add eax, edx
addss xmm0, xmm2
movd xmm4, edx
cvtdq2ps xmm7, xmm7
cvtdq2ps xmm6, xmm6
addss xmm7, xmm1
movss dword [ebp - 0x1a0], xmm0
movd xmm1, dword [esi + 0x24]
addss xmm6, xmm0
movd xmm0, dword [esi + 0x28]
mov esi, dword [ebp - 0x184]
cvtdq2ps xmm1, xmm1
movd xmm2, eax
lea eax, [ecx + esi]
cvtdq2ps xmm4, xmm4
cvtdq2ps xmm2, xmm2
divss xmm4, xmm1
divss xmm2, xmm1
movd xmm1, eax
cvtdq2ps xmm0, xmm0
movzx eax, word [edi + 0x18]
movd xmm3, esi
cvtdq2ps xmm1, xmm1
mov esi, dword [ebp - 0x1b4]
cvtdq2ps xmm3, xmm3
divss xmm1, xmm0
divss xmm3, xmm0
movss xmm0, dword [edi + 0x10]
movd xmm5, ecx
mov ecx, esi
cvtdq2ps xmm5, xmm5
movss dword [esp + 0x1c], xmm0
movss dword [esp + 0x18], xmm1
addss xmm5, xmm7
movss dword [esp + 0x14], xmm2
movss dword [esp + 0x10], xmm3
movss xmm3, dword [ebp - 0x1a0]
movss dword [esp + 0xc], xmm4
movss dword [esp + 8], xmm5
movss dword [esp + 4], xmm6
movss dword [esp], xmm7
push eax
push dword [ebp - 0x1a4]
call fcn.1004d3f0
cmp byte [edi + 0x14], 0
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x28]
lea eax, [eax + eax*4]
je 0x10050661
or dword [ecx + eax*8 - 0x28], 1
mov byte [ebp - 0x159], 1
mov edx, dword [ebp - 0x158]
mov esi, dword [edi + 0x1c]
mov ecx, dword [edi]
mov dword [ebp - 0x170], esi
mov eax, dword [edx + 0x24]
mov edx, eax
imul edx, dword [ebp - 0x184]
mov esi, dword [ebp - 0x158]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x184], 0
mov eax, dword [esi + 0x1c]
add edx, dword [ebp - 0x180]
mov esi, dword [ebp - 0x170]
test eax, eax
je 0x10050721
add eax, edx
cmp dword [edi + 4], 0
mov dword [ebp - 0x180], eax
jle 0x100507be
lea edx, [ecx*4]
mov dword [ebp - 0x1b8], edx
xor edx, edx
test ecx, ecx
jle 0x100506f2
add esi, 3
nop
mov ecx, dword [ebp - 0x180]
lea esi, [esi + 4]
mov al, byte [esi - 4]
mov byte [edx + ecx], al
inc edx
mov ecx, dword [edi]
cmp edx, ecx
jl 0x100506d0
mov eax, dword [ebp - 0x180]
mov esi, dword [ebp - 0x170]
mov edx, dword [ebp - 0x184]
add eax, dword [ebp - 0x1a0]
inc edx
add esi, dword [ebp - 0x1b8]
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x170], esi
cmp edx, dword [edi + 4]
jl 0x100506c6
jmp 0x100507be
cmp dword [edi + 4], 0
mov eax, dword [ebp - 0x158]
mov eax, dword [eax + 0x20]
lea edx, [eax + edx*4]
mov dword [ebp - 0x180], edx
jle 0x100507be
mov eax, dword [ebp - 0x1a0]
shl eax, 2
mov dword [ebp - 0x1a0], eax
lea eax, [ecx*4]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x170]
nop
xor esi, esi
test ecx, ecx
jle 0x10050794
sub eax, dword [ebp - 0x180]
mov dword [ebp - 0x1b8], eax
mov eax, dword [eax + edx]
lea edx, [edx + 4]
mov dword [edx - 4], eax
inc esi
mov ecx, dword [edi]
mov eax, dword [ebp - 0x1b8]
cmp esi, ecx
jl 0x10050772
mov eax, dword [ebp - 0x170]
mov edx, dword [ebp - 0x180]
mov esi, dword [ebp - 0x184]
add edx, dword [ebp - 0x1a0]
inc esi
add eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x184], esi
mov dword [ebp - 0x180], edx
mov dword [ebp - 0x170], eax
cmp esi, dword [edi + 4]
jl 0x10050760
mov esi, dword [ebp - 0x178]
movss xmm2, dword [ebp - 0x168]
movss xmm1, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x16c]
inc ecx
add dword [ebp - 0x19c], 0x20
add dword [ebp - 0x1ac], 0x18
mov edx, dword [ebp - 0x19c]
cmp ecx, dword [eax + 0x30]
mov dword [ebp - 0x1b0], ecx
mov ecx, dword [ebp - 0x1ac]
jl 0x10050533
mov edi, dword [ebp - 0x158]
mov edx, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x164]
mov dword [eax + 0x20], 0
add eax, 0x54
add edx, 0x78
sub ecx, 1
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x164], ecx
jne 0x10050440
mov al, byte [ebp - 0x159]
xor esi, esi
mov byte [edi + 0x19], al
cmp dword [ebp - 0x188], esi
jle 0x1005088f
mov edi, dword [ebp - 0x174]
nop dword [eax]
mov ecx, dword [edi + esi*4]
test ecx, ecx
je 0x10050876
mov eax, dword [0x101203a8]
test eax, eax
je 0x10050876
dec dword [eax + 0xac]
push ecx
call dword [ebp - 0x198]
inc esi
add esp, 4
cmp esi, dword [ebp - 0x188]
jl 0x10050860
mov edi, dword [ebp - 0x158]
mov eax, dword [ebp - 0x194]
test eax, eax
jle 0x1005090b
mov esi, dword [ebp - 0x190]
mov edi, dword [ebp - 0x198]
add esi, 0x18
mov ecx, dword [esi + 0x38]
test ecx, ecx
je 0x100508c4
mov eax, dword [0x101203a8]
test eax, eax
je 0x100508be
dec dword [eax + 0xac]
push ecx
call edi
add esp, 4
mov ecx, dword [esi + 0x2c]
test ecx, ecx
je 0x100508e0
mov eax, dword [0x101203a8]
test eax, eax
je 0x100508da
dec dword [eax + 0xac]
push ecx
call edi
add esp, 4
mov byte [ebp - 4], 8
mov eax, dword [esi]
test eax, eax
je 0x100508f9
push eax
call fcn.1009c720
add esp, 4
mov dword [esi], 0
add esi, 0x54
sub dword [ebp - 0x194], 1
jne 0x100508a8
mov edi, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x190]
test ecx, ecx
je 0x10050954
mov eax, dword [0x101203a8]
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1dc], 0
test eax, eax
je 0x10050938
dec dword [eax + 0xac]
mov esi, dword [ebp - 0x198]
push ecx
call esi
add esp, 4
xor eax, eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1d4], eax
jmp 0x1005095a
mov esi, dword [ebp - 0x198]
mov ecx, edi
call fcn.1004c970
mov byte [ebp - 0x151], 1
mov ecx, dword [ebp - 0x1e4]
test ecx, ecx
je 0x10050987
mov eax, dword [0x101203a8]
test eax, eax
je 0x10050981
dec dword [eax + 0xac]
push ecx
call esi
add esp, 4
mov ecx, dword [ebp - 0x174]
test ecx, ecx
je 0x100509a6
mov eax, dword [0x101203a8]
test eax, eax
je 0x100509a0
dec dword [eax + 0xac]
push ecx
call esi
add esp, 4
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x100509c5
mov eax, dword [0x101203a8]
test eax, eax
je 0x100509bf
dec dword [eax + 0xac]
push ecx
call esi
add esp, 4
mov edi, dword [ebp - 0x18c]
test edi, edi
je 0x100509ec
mov eax, dword [0x101203a8]
test eax, eax
je 0x100509de
dec dword [eax + 0xac]
mov esi, dword [ebp - 0x198]
push edi
call esi
add esp, 4
jmp 0x100509f2
mov esi, dword [ebp - 0x198]
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x10050a12
mov ecx, dword [0x101203a8]
test ecx, ecx
je 0x10050a0c
dec dword [ecx + 0xac]
push eax
call esi
add esp, 4
mov al, byte [ebp - 0x151]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100f238c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret