Function at 0x4a9520
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x574caf
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x59ad00]
xor eax, esp
mov dword [esp + 0x270], eax
push ebx
push esi
push edi
mov eax, dword [0x59ad00]
xor eax, esp
push eax
lea eax, [esp + 0x2b8]
mov dword fs:[0], eax
xorps xmm0, xmm0
mov edi, dword [ebp + 8]
xor ebx, ebx
mov eax, 1
mov esi, ecx
movsd qword [esp + 0xcc], xmm0
movsd qword [esp + 0xc4], xmm0
movsd qword [esp + 0xbc], xmm0
movsd qword [esp + 0x7c], xmm0
movsd qword [esp + 0x74], xmm0
movsd qword [esp + 0xfc], xmm0
movsd qword [esp + 0xf4], xmm0
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x2c0], ebx
movsd qword [esp + 0xec], xmm0
movsd qword [esp + 0xe4], xmm0
movsd qword [esp + 0xdc], xmm0
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x44], ebx
movsd xmm0, qword [esi + 0x40]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esi + 0x30]
lea ecx, [esp + 0x1e4]
mov byte [esp + 0x2d0], al
mov dword [esp + 0x204], ebx
mov dword [esp + 0x23c], ebx
movsd qword [esp], xmm0
call fcn.004bb790
movsd xmm0, qword [esi + 0x48]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esi + 0x38]
lea ecx, [esp + 0x1e4]
movsd qword [esp], xmm0
call fcn.004bb790
mov eax, dword [esi]
mov edx, dword [eax + 0x68]
push 1
lea ecx, [esp + 0x210]
push ecx
mov ecx, esi
call edx
movsd xmm0, qword [esp + 0x21c]
mov eax, dword [esi]
mov edx, dword [eax + 0x58]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x21c]
mov ecx, esi
movsd qword [esp], xmm0
call edx
movsd xmm0, qword [esp + 0x224]
mov eax, dword [esi]
mov edx, dword [eax + 0x5c]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x224]
mov ecx, esi
movsd qword [esp], xmm0
call edx
cmp dword [edi + 0xc], 0x31
movsd xmm0, qword [edi + 0x10]
movsd qword [esp + 0x104], xmm0
movsd xmm0, qword [edi + 0x18]
movsd qword [esp + 0x6c], xmm0
mov dword [esp + 0x40], ebx
lea ecx, [esp + 0x54]
jne 0x4a9c17
mov ebx, dword [edi + 0x54]
push ebx
mov dword [esp + 0x38], ebx
call fcn.00401b40
push ebx
lea ecx, [esp + 0x48]
call fcn.00401b40
xorps xmm0, xmm0
mov al, byte [edi + 0x41]
mov ecx, edi
mov byte [esp + 0x3e], 1
mov byte [esp + 0x3f], 1
movsd qword [esp + 0xb4], xmm0
movsd qword [esp + 0xac], xmm0
mov byte [esp + 0x67], al
call fcn.004bbb80
cmp dword [edi + 0x54], 0
mov byte [esp + 0x66], al
jle 0x4a9727
mov ecx, dword [edi + 0x48]
movsd xmm0, qword [ecx + 0x10]
jmp 0x4a972a
xorps xmm0, xmm0
mov edx, dword [edi]
mov edx, dword [edx + 0x50]
sub esp, 8
lea eax, [esp + 0x8c]
movsd qword [esp], xmm0
push eax
mov ecx, edi
call edx
lea eax, [ebx - 1]
mov dword [esp + 0x40], eax
cmp eax, dword [edi + 0x54]
jge 0x4a9761
test eax, eax
js 0x4a9761
mov ecx, dword [edi + 0x48]
lea eax, [eax + eax*2]
movsd xmm0, qword [ecx + eax*8 + 0x10]
jmp 0x4a9764
xorps xmm0, xmm0
mov edx, dword [edi]
mov edx, dword [edx + 0x50]
sub esp, 8
lea eax, [esp + 0x17c]
movsd qword [esp], xmm0
push eax
mov ecx, edi
call edx
cmp byte [esp + 0x66], 0
je 0x4a9847
lea ecx, [esp + 0x84]
call fcn.004733c0
fstp st(0)
lea ecx, [esp + 0x174]
call fcn.004733c0
fstp st(0)
cmp byte [esp + 0x67], 0
jne 0x4a97cd
lea eax, [esp + 0x174]
push eax
lea ecx, [esp + 0x88]
call fcn.00472e60
fabs
fld qword [0x57b718]
fcompi st(1)
fstp st(0)
jbe 0x4a9847
movsd xmm0, qword [esp + 0x174]
addsd xmm0, qword [esp + 0x84]
movsd qword [esp + 0x164], xmm0
movsd xmm0, qword [esp + 0x17c]
addsd xmm0, qword [esp + 0x8c]
lea ecx, [esp + 0x164]
movsd qword [esp + 0x16c], xmm0
call fcn.004733c0
fstp st(0)
movsd xmm0, qword [esp + 0x164]
movsd xmm1, qword [esp + 0x16c]
movq qword [esp + 0x174], xmm0
movq qword [esp + 0x17c], xmm1
movq qword [esp + 0x84], xmm0
movq qword [esp + 0x8c], xmm1
xor ebx, ebx
cmp dword [esp + 0x34], ebx
jle 0x4a9a9d
push ebx
lea ecx, [esp + 0x168]
push ecx
mov ecx, edi
call fcn.004c1410
movq xmm0, qword [eax]
mov edx, dword [esi]
mov edx, dword [edx + 0x80]
movq qword [esp + 0x74], xmm0
movq xmm0, qword [eax + 8]
sub esp, 8
movq qword [esp + 0x84], xmm0
xorps xmm0, xmm0
movsd qword [esp], xmm0
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x118]
push ecx
mov ecx, esi
movsd qword [esp + 0x124], xmm0
movsd qword [esp + 0x11c], xmm0
movsd qword [esp + 0x13c], xmm0
movsd qword [esp + 0x134], xmm0
movsd qword [esp + 0x12c], xmm0
movsd qword [esp + 0x154], xmm0
movsd qword [esp + 0x14c], xmm0
movsd qword [esp + 0x144], xmm0
movsd qword [esp + 0x16c], xmm0
movsd qword [esp + 0x164], xmm0
movsd qword [esp + 0x15c], xmm0
call edx
mov ecx, dword [esp + 0x54]
movq xmm0, qword [esp + 0x11c]
movq xmm1, qword [esp + 0x124]
movq xmm2, qword [esp + 0x12c]
lea eax, [ebx + ebx*2]
add eax, eax
add eax, eax
add eax, eax
movq qword [eax + ecx], xmm0
movq qword [eax + ecx + 8], xmm1
mov dword [esp + 0x38], eax
movq qword [eax + ecx + 0x10], xmm2
test ebx, ebx
jne 0x4a9960
movq xmm0, qword [esp + 0x84]
movq qword [esp + 0xf4], xmm0
movq xmm0, qword [esp + 0x8c]
jmp 0x4a99c9
cmp ebx, dword [esp + 0x40]
jne 0x4a9983
movq xmm0, qword [esp + 0x174]
movq qword [esp + 0xf4], xmm0
movq xmm0, qword [esp + 0x17c]
jmp 0x4a99c9
cmp ebx, dword [edi + 0x54]
jge 0x4a999b
test ebx, ebx
js 0x4a999b
mov edx, dword [edi + 0x48]
mov eax, dword [esp + 0x38]
movsd xmm0, qword [edx + eax + 0x10]
jmp 0x4a999e
xorps xmm0, xmm0
mov edx, dword [edi]
mov edx, dword [edx + 0x50]
sub esp, 8
lea eax, [esp + 0x204]
movsd qword [esp], xmm0
push eax
mov ecx, edi
call edx
movq xmm0, qword [eax]
movq qword [esp + 0xf4], xmm0
movq xmm0, qword [eax + 8]
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x38]
lea edx, [esp + 0x74]
push edx
lea ecx, [esp + 0xf8]
push ecx
push eax
mov ecx, esi
movq qword [esp + 0x108], xmm0
call fcn.004a12d0
test al, al
jne 0x4a9a0f
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x38]
xorps xmm0, xmm0
movsd qword [eax + edx], xmm0
movsd qword [eax + edx + 8], xmm0
movsd qword [eax + edx + 0x10], xmm0
movsd xmm1, qword [esp + 0x7c]
movsd xmm2, qword [esp + 0x74]
test ebx, ebx
je 0x4a9a75
cmp byte [esp + 0x3e], 0
movsd xmm0, qword [0x57e398]
je 0x4a9a4e
movapd xmm3, xmm2
subsd xmm3, qword [esp + 0xac]
andpd xmm3, xmmword [0x57ca30]
comisd xmm3, xmm0
jbe 0x4a9a4e
mov byte [esp + 0x3e], 0
cmp byte [esp + 0x3f], 0
je 0x4a9a75
movapd xmm3, xmm1
subsd xmm3, qword [esp + 0xb4]
andpd xmm3, xmmword [0x57ca30]
comisd xmm3, xmm0
jbe 0x4a9a75
mov byte [esp + 0x3f], 0
inc ebx
movsd qword [esp + 0xac], xmm2
movsd qword [esp + 0xb4], xmm1
cmp ebx, dword [esp + 0x34]
jl 0x4a9853
cmp byte [esp + 0x3e], 0
je 0x4a9b42
xor ebx, ebx
push ebx
lea ecx, [esp + 0xb0]
push ecx
mov ecx, edi
call fcn.004c1410
mov edx, dword [esp + 0x40]
push edx
lea eax, [esp + 0x168]
push eax
mov ecx, edi
call fcn.004c1410
movsd xmm0, qword [esp + 0xac]
mov edx, dword [esi]
mov edx, dword [edx + 0x90]
movsd qword [esp + 0x264], xmm0
movsd xmm0, qword [esp + 0xb4]
push 1
lea eax, [esp + 0x268]
movsd qword [esp + 0x270], xmm0
movsd xmm0, qword [esp + 0x170]
push eax
mov ecx, esi
movsd qword [esp + 0x27c], xmm0
call edx
mov edi, dword [sym.imp.MSVCR100.dll_free]
mov esi, eax
mov eax, dword [esp + 0x44]
cmp eax, ebx
je 0x4a9b25
push eax
call edi
add esp, 4
mov eax, dword [esp + 0x54]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], ebx
cmp eax, ebx
je 0x4a9b3b
push eax
call edi
add esp, 4
mov eax, esi
jmp 0x4aad2d
cmp byte [esp + 0x3f], 0
je 0x4a9bb2
xor ebx, ebx
push ebx
lea eax, [esp + 0xb0]
push eax
mov ecx, edi
call fcn.004c1410
mov ecx, dword [esp + 0x40]
push ecx
lea edx, [esp + 0x168]
push edx
mov ecx, edi
call fcn.004c1410
movsd xmm0, qword [esp + 0xb4]
mov eax, dword [esi]
mov edx, dword [eax + 0x90]
movsd qword [esp + 0x264], xmm0
movsd xmm0, qword [esp + 0xac]
push ebx
lea ecx, [esp + 0x268]
movsd qword [esp + 0x270], xmm0
movsd xmm0, qword [esp + 0x168]
push ecx
jmp 0x4a9b02
cmp dword [esi + 0xc], 0x35
jne 0x4a9be7
movsd xmm0, qword [0x57b948]
mov ecx, dword [esp + 0x34]
sub esp, 8
movsd qword [esp], xmm0
lea eax, [esp + 0x5c]
push eax
push ecx
call fcn.00478780
add esp, 0x10
test eax, eax
je 0x4a9be7
mov dword [esp + 0x40], eax
jmp 0x4aac26
cmp dword [esi + 0xc], 0x39
lea ecx, [esp + 0x44]
setne dl
mov byte [esp + 0x60], dl
mov eax, dword [esp + 0x60]
push eax
mov eax, dword [esp + 0x38]
push ecx
lea edx, [esp + 0x5c]
push edx
push eax
call fcn.0047d360
add esp, 0x10
mov dword [esp + 0x40], eax
jmp 0x4aac26
push 0x32
mov dword [esp + 0x5c], 0xa
call fcn.00401b40
push 0x32
lea ecx, [esp + 0x48]
mov dword [esp + 0x4c], 0xa
call fcn.00401b40
movsd xmm0, qword [esp + 0x104]
ucomisd xmm0, qword [0x57e348]
lahf
test ah, 0x44
jnp 0x4aacaf
movsd xmm0, qword [esp + 0x6c]
ucomisd xmm0, qword [0x57e350]
lahf
test ah, 0x44
jnp 0x4aacaf
xor eax, eax
push 0x64
lea ecx, [esp + 0x88]
mov dword [esp + 0x90], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0x32
call fcn.00401a80
mov ecx, dword [esp + 0x84]
movsd xmm0, qword [esp + 0x6c]
mov ebx, 1
movsd qword [ecx], xmm0
cmp dword [edi + 0xc], 0xf
mov byte [esp + 0x2c0], 2
mov dword [esp + 0x60], ebx
jne 0x4a9e22
mov ecx, dword [edi + 0x50]
mov edx, dword [edi + 0x4c]
mov eax, dword [edi + 0x48]
shr ecx, 0xe
xor ebx, ebx
mov dword [esp + 0x68], edx
test cl, 1
jne 0x4a9df2
cmp eax, edx
jle 0x4a9df2
cmp eax, 0x12c
jge 0x4a9df2
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x50], ecx
inc edx
mov ecx, 1
mov dword [esp + 0x34], ecx
cmp edx, eax
jge 0x4a9da7
mov ecx, dword [esp + 0x50]
lea ecx, [ecx + edx*8 - 8]
sub eax, edx
add edx, eax
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x60], eax
mov dword [esp + 0xd8], edx
jmp 0x4a9d30
mov eax, dword [esp + 0x38]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
subsd xmm1, xmm0
comisd xmm1, xmmword [0x57b958]
jbe 0x4a9d99
mov eax, dword [esp + 0x68]
dec eax
cmp ecx, eax
jl 0x4a9d93
movsd qword [esp + 0xac], xmm0
cmp ebx, dword [esp + 0x8c]
jl 0x4a9d7d
lea ecx, [ebx + 1]
push ecx
lea ecx, [esp + 0x88]
call fcn.00401a80
mov edx, dword [esp + 0xd8]
mov eax, dword [esp + 0x84]
movsd xmm0, qword [esp + 0xac]
movsd qword [eax + ebx*8], xmm0
inc ebx
mov eax, dword [esp + 0x38]
xor ecx, ecx
add eax, 8
inc ecx
dec dword [esp + 0x60]
mov dword [esp + 0x38], eax
jne 0x4a9d30
mov eax, dword [esp + 0x68]
dec eax
cmp ecx, eax
jl 0x4a9df2
mov ecx, dword [esp + 0x50]
movsd xmm0, qword [ecx + edx*8 - 8]
movsd qword [esp + 0xac], xmm0
cmp ebx, dword [esp + 0x8c]
jl 0x4a9ddc
lea edx, [ebx + 1]
push edx
lea ecx, [esp + 0x88]
call fcn.00401a80
mov eax, dword [esp + 0x84]
movsd xmm0, qword [esp + 0xac]
movsd qword [eax + ebx*8], xmm0
inc ebx
cmp ebx, dword [esp + 0x8c]
jl 0x4a9e0b
lea ecx, [ebx + 1]
push ecx
lea ecx, [esp + 0x88]
call fcn.00401a80
mov edx, dword [esp + 0x84]
movsd xmm0, qword [esp + 0x6c]
movsd qword [edx + ebx*8], xmm0
inc ebx
mov dword [esp + 0x60], ebx
movsd xmm2, qword [esp + 0x104]
movsd qword [esp + 0x104], xmm2
mov dword [esp + 0x68], 0
test ebx, ebx
jle 0x4aac09
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x68]
movsd xmm0, qword [eax + ecx*8]
mov edx, dword [edi]
mov edx, dword [edx + 0x5c]
movsd qword [esp + 0x6c], xmm0
subsd xmm0, xmm2
lea eax, [esp + 0x94]
push eax
movapd xmm1, xmm0
mulsd xmm0, qword [0x57b920]
mulsd xmm1, qword [0x57b718]
lea ecx, [esp + 0xf8]
push ecx
lea eax, [esp + 0x7c]
movsd qword [esp + 0x204], xmm0
xorps xmm0, xmm0
push eax
mov ecx, edi
movsd qword [esp + 0xa8], xmm1
movsd qword [esp + 0xa0], xmm2
movsd qword [esp + 0x1a0], xmm0
movsd qword [esp + 0x198], xmm0
movsd qword [esp + 0x190], xmm0
movsd qword [esp + 0x1b8], xmm0
movsd qword [esp + 0x1b0], xmm0
movsd qword [esp + 0x1a8], xmm0
movsd qword [esp + 0x280], xmm0
movsd qword [esp + 0x278], xmm0
movsd qword [esp + 0x270], xmm0
call edx
xorps xmm0, xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x80]
sub esp, 8
movsd qword [esp], xmm0
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x118]
push edx
mov ecx, esi
movsd qword [esp + 0x124], xmm0
movsd qword [esp + 0x11c], xmm0
movsd qword [esp + 0x13c], xmm0
movsd qword [esp + 0x134], xmm0
movsd qword [esp + 0x12c], xmm0
movsd qword [esp + 0x154], xmm0
movsd qword [esp + 0x14c], xmm0
movsd qword [esp + 0x144], xmm0
movsd qword [esp + 0x16c], xmm0
movsd qword [esp + 0x164], xmm0
movsd qword [esp + 0x15c], xmm0
call eax
movq xmm0, qword [esp + 0x11c]
lea ecx, [esp + 0x74]
push ecx
movq qword [esp + 0xc0], xmm0
movq xmm0, qword [esp + 0x128]
lea edx, [esp + 0xf8]
push edx
lea eax, [esp + 0xe4]
movq qword [esp + 0xcc], xmm0
movq xmm0, qword [esp + 0x134]
push eax
mov ecx, esi
movq qword [esp + 0xd8], xmm0
call fcn.004a12d0
test al, al
jne 0x4a9ffa
xorps xmm0, xmm0
movsd qword [esp + 0xdc], xmm0
movsd qword [esp + 0xe4], xmm0
movsd qword [esp + 0xec], xmm0
cmp dword [esp + 0x4c], 0
jg 0x4aa00c
push 1
lea ecx, [esp + 0x48]
call fcn.00401b40
mov eax, dword [esp + 0x44]
movq xmm0, qword [esp + 0xdc]
movq qword [eax], xmm0
movq xmm0, qword [esp + 0xe4]
movq qword [eax + 8], xmm0
movq xmm0, qword [esp + 0xec]
movq qword [eax + 0x10], xmm0
cmp dword [esp + 0x5c], 0
jg 0x4aa04b
push 1
lea ecx, [esp + 0x58]
call fcn.00401b40
mov eax, dword [esp + 0x54]
movq xmm0, qword [esp + 0xbc]
movsd xmm3, qword [esp + 0x6c]
comisd xmm3, xmmword [esp + 0x104]
movq qword [eax], xmm0
movq xmm0, qword [esp + 0xc4]
movq qword [eax + 8], xmm0
movq xmm0, qword [esp + 0xcc]
movq qword [eax + 0x10], xmm0
mov dword [esp + 0x34], 1
jbe 0x4aaaf5
movapd xmm0, xmm3
subsd xmm0, qword [esp + 0x1fc]
movsd qword [esp + 0x164], xmm0
movsd xmm0, qword [ebp + 0xc]
mulsd xmm0, qword [0x57b718]
movsd qword [esp + 0xac], xmm0
mov ebx, 0x18
mov dword [esp + 0x50], 2
mov dword [esp + 0x38], 1
movsd xmm1, qword [esp + 0x9c]
nop
movd xmm0, dword [esp + 0x38]
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm1
movsd xmm1, qword [esp + 0x94]
addsd xmm0, xmm1
comisd xmm0, xmmword [esp + 0x164]
movsd qword [esp + 0xa4], xmm0
jbe 0x4aa11c
movapd xmm0, xmm3
movsd qword [esp + 0xa4], xmm0
mov edx, dword [edi]
mov edx, dword [edx + 0x4c]
sub esp, 8
movapd xmm2, xmm0
lea eax, [esp + 0x24c]
addsd xmm2, xmm1
mulsd xmm2, qword [0x57b6c0]
movsd qword [esp], xmm0
push eax
mov ecx, edi
movsd qword [esp + 0x1d8], xmm2
call edx
movq xmm0, qword [eax]
movq qword [esp + 0x74], xmm0
movq xmm0, qword [eax + 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x80]
sub esp, 8
movq qword [esp + 0x84], xmm0
xorps xmm0, xmm0
movsd qword [esp], xmm0
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x118]
push edx
mov ecx, esi
movsd qword [esp + 0x124], xmm0
movsd qword [esp + 0x11c], xmm0
movsd qword [esp + 0x13c], xmm0
movsd qword [esp + 0x134], xmm0
movsd qword [esp + 0x12c], xmm0
movsd qword [esp + 0x154], xmm0
movsd qword [esp + 0x14c], xmm0
movsd qword [esp + 0x144], xmm0
movsd qword [esp + 0x16c], xmm0
movsd qword [esp + 0x164], xmm0
movsd qword [esp + 0x15c], xmm0
call eax
movq xmm0, qword [esp + 0x11c]
mov edx, dword [edi]
mov edx, dword [edx + 0x4c]
movq qword [esp + 0x184], xmm0
movq xmm0, qword [esp + 0x124]
movq qword [esp + 0x18c], xmm0
movq xmm0, qword [esp + 0x12c]
sub esp, 8
movq qword [esp + 0x19c], xmm0
movsd xmm0, qword [esp + 0x1d4]
lea eax, [esp + 0x25c]
movsd qword [esp], xmm0
push eax
mov ecx, edi
call edx
movq xmm0, qword [eax]
movq qword [esp + 0x74], xmm0
movq xmm0, qword [eax + 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x80]
sub esp, 8
movq qword [esp + 0x84], xmm0
xorps xmm0, xmm0
movsd qword [esp], xmm0
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x118]
push edx
mov ecx, esi
movsd qword [esp + 0x124], xmm0
movsd qword [esp + 0x11c], xmm0
movsd qword [esp + 0x13c], xmm0
movsd qword [esp + 0x134], xmm0
movsd qword [esp + 0x12c], xmm0
movsd qword [esp + 0x154], xmm0
movsd qword [esp + 0x14c], xmm0
movsd qword [esp + 0x144], xmm0
movsd qword [esp + 0x16c], xmm0
movsd qword [esp + 0x164], xmm0
movsd qword [esp + 0x15c], xmm0
call eax
movq xmm0, qword [esp + 0x11c]
movq qword [esp + 0x19c], xmm0
movq xmm0, qword [esp + 0x124]
lea ecx, [esp + 0x184]
push ecx
lea edx, [esp + 0x1a0]
push edx
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x1c8]
push ecx
lea edx, [esp + 0x1c4]
movq qword [esp + 0x1b4], xmm0
movq xmm0, qword [esp + 0x13c]
push edx
movq qword [esp + 0x1c0], xmm0
call fcn.00480fa0
fst qword [esp + 0x188]
fld qword [0x57e370]
movsd xmm2, qword [0x57e370]
add esp, 0x14
fcompi st(1)
fstp st(0)
ja 0x4aa418
movsd xmm0, qword [esp + 0x1b4]
movsd xmm3, qword [0x57ca30]
movapd xmm1, xmm0
andpd xmm1, xmm3
comisd xmm2, xmm1
ja 0x4aa418
movsd xmm1, qword [esp + 0x1bc]
movapd xmm4, xmm1
andpd xmm4, xmm3
comisd xmm2, xmm4
ja 0x4aa418
movsd xmm3, qword [ebp + 0xc]
comisd xmm3, xmmword [esp + 0x174]
jbe 0x4aa3d3
movsd xmm3, qword [0x57cb70]
movapd xmm4, xmm1
mulsd xmm4, xmm3
comisd xmm0, xmm4
jbe 0x4aa3d3
mulsd xmm0, xmm3
comisd xmm1, xmm0
ja 0x4aa418
mov eax, dword [esp + 0x38]
cmp eax, 1
jg 0x4aa478
movsd xmm1, qword [esp + 0x9c]
mulsd xmm1, qword [0x57bdd0]
movsd xmm0, qword [esp + 0x1fc]
comisd xmm0, xmm1
movsd qword [esp + 0x9c], xmm1
ja 0x4aa620
movsd xmm3, qword [esp + 0x6c]
jmp 0x4aa0e0
movsd xmm3, qword [esp + 0x6c]
movsd xmm1, qword [esp + 0xa4]
movapd xmm0, xmm3
subsd xmm0, xmm2
comisd xmm1, xmm0
movq xmm0, qword [esp + 0x184]
jae 0x4aa6bb
inc dword [esp + 0x38]
movsd qword [esp + 0x264], xmm0
movq xmm0, qword [esp + 0x18c]
movsd qword [esp + 0x26c], xmm0
movq xmm0, qword [esp + 0x194]
movsd qword [esp + 0x274], xmm0
jmp 0x4aa0d6
movq xmm0, qword [esp + 0x264]
movsd xmm3, qword [esp + 0x6c]
movq qword [esp + 0xbc], xmm0
movq xmm0, qword [esp + 0x26c]
movq qword [esp + 0xc4], xmm0
movq xmm0, qword [esp + 0x274]
xorps xmm1, xmm1
dec eax
cvtsi2sd xmm1, eax
mulsd xmm1, qword [esp + 0x9c]
movq qword [esp + 0xcc], xmm0
movsd xmm0, qword [esp + 0x94]
addsd xmm0, xmm1
movsd qword [esp + 0x9c], xmm1
movapd xmm1, xmm3
subsd xmm1, xmm2
comisd xmm0, xmm1
movsd qword [esp + 0x94], xmm0
jb 0x4aa5f2
mov eax, dword [edi]
mov edx, dword [eax + 0x4c]
sub esp, 8
lea ecx, [esp + 0x23c]
movsd qword [esp], xmm3
push ecx
mov ecx, edi
movsd qword [esp + 0xa0], xmm3
movsd qword [esp + 0xb0], xmm3
call edx
movq xmm0, qword [eax]
movq qword [esp + 0x74], xmm0
movq xmm0, qword [eax + 8]
mov eax, dword [esi]
mov eax, dword [eax + 0x80]
sub esp, 8
movq qword [esp + 0x84], xmm0
xorps xmm0, xmm0
movsd qword [esp], xmm0
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x118]
push edx
mov ecx, esi
movsd qword [esp + 0x124], xmm0
movsd qword [esp + 0x11c], xmm0
movsd qword [esp + 0x13c], xmm0
movsd qword [esp + 0x134], xmm0
movsd qword [esp + 0x12c], xmm0
movsd qword [esp + 0x154], xmm0
movsd qword [esp + 0x14c], xmm0
movsd qword [esp + 0x144], xmm0
movsd qword [esp + 0x16c], xmm0
movsd qword [esp + 0x164], xmm0
movsd qword [esp + 0x15c], xmm0
call eax
movq xmm0, qword [esp + 0x11c]
movq qword [esp + 0xbc], xmm0
movq xmm0, qword [esp + 0x124]
movq qword [esp + 0xc4], xmm0
movq xmm0, qword [esp + 0x12c]
jmp 0x4aa6f1
movsd xmm2, qword [esp + 0xa4]
comisd xmm2, xmm1
jb 0x4aa6fa
subsd xmm3, xmm0
movsd qword [esp + 0xa4], xmm0
movsd qword [esp + 0x9c], xmm3
jmp 0x4aa6fa
movq xmm1, qword [esp + 0x184]
mulsd xmm0, qword [0x57c410]
movq qword [esp + 0xbc], xmm1
movq xmm1, qword [esp + 0x18c]
movq qword [esp + 0xc4], xmm1
movq xmm1, qword [esp + 0x194]
movq qword [esp + 0xcc], xmm1
movsd xmm1, qword [esp + 0x6c]
movsd qword [esp + 0x9c], xmm0
movsd xmm0, qword [esp + 0xa4]
movapd xmm3, xmm1
subsd xmm3, xmm2
comisd xmm0, xmm3
movsd qword [esp + 0x94], xmm0
jb 0x4aa6a1
movsd qword [esp + 0xa4], xmm1
movsd qword [esp + 0x94], xmm1
jmp 0x4aa6fa
comisd xmm0, xmmword [esp + 0x164]
jb 0x4aa6fa
subsd xmm1, xmm0
movsd qword [esp + 0x9c], xmm1
jmp 0x4aa6fa
movq qword [esp + 0xbc], xmm0
movq xmm0, qword [esp + 0x18c]
movq qword [esp + 0xc4], xmm0
movq xmm0, qword [esp + 0x194]
movsd qword [esp + 0xa4], xmm3
movsd qword [esp + 0x94], xmm3
movq qword [esp + 0xcc], xmm0
mov ecx, dword [esp + 0x34]
cmp ecx, dword [esp + 0x5c]
jl 0x4aa712
mov edx, dword [esp + 0x50]
push edx
lea ecx, [esp + 0x58]
call fcn.00401b40
mov eax, dword [esp + 0x54]
movq xmm0, qword [esp + 0xbc]
movq qword [eax + ebx], xmm0
movq xmm0, qword [esp + 0xc4]
movq qword [eax + ebx + 8], xmm0
movq xmm0, qword [esp + 0xcc]
movq qword [eax + ebx + 0x10], xmm0
mov edx, dword [edi]
mov edx, dword [edx + 0x5c]
lea eax, [esp + 0x94]
push eax
lea ecx, [esp + 0xf8]
push ecx
lea eax, [esp + 0x7c]
push eax
mov ecx, edi
call edx
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0xf8]
push ecx
lea edx, [esp + 0xe4]
push edx
mov ecx, esi
call fcn.004a12d0
test al, al
jne 0x4aa79e
xorps xmm0, xmm0
movsd qword [esp + 0xdc], xmm0
movsd qword [esp + 0xe4], xmm0
movsd qword [esp + 0xec], xmm0
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x4c]
jl 0x4aa7b6
mov ecx, dword [esp + 0x50]
push ecx
lea ecx, [esp + 0x48]
call fcn.00401b40
mov edx, dword [esp + 0x44]
movq xmm0, qword [esp + 0xdc]
movq qword [ebx + edx], xmm0
movq xmm0, qword [esp + 0xe4]
lea eax, [ebx + edx]
movq qword [eax + 8], xmm0
movq xmm0, qword [esp + 0xec]
movq qword [eax + 0x10], xmm0
mov eax, dword [esp + 0x54]
movsd xmm0, qword [esp + 0xac]
sub esp, 8
lea eax, [ebx + eax - 0x18]
movsd qword [esp], xmm0
push eax
lea ecx, [esp + 0xc8]
call fcn.00473c20
movsd xmm3, qword [esp + 0x6c]
test al, al
jne 0x4aaa15
mov eax, 1
add dword [esp + 0x34], eax
add dword [esp + 0x50], eax
add ebx, 0x18
comisd xmm3, xmmword [esp + 0xa4]
ja 0x4aa0ce
mov eax, dword [esp + 0x34]
cmp eax, 2
jne 0x4aaa94
mov eax, dword [edi]
addsd xmm3, qword [esp + 0x104]
mulsd xmm3, qword [0x57b6c0]
lea ecx, [esp + 0x1cc]
push ecx
lea edx, [esp + 0xf8]
push edx
mov edx, dword [eax + 0x5c]
lea ecx, [esp + 0x7c]
push ecx
mov ecx, edi
movsd qword [esp + 0x1d8], xmm3
call edx
xorps xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x270]
push ecx
mov ecx, esi
call fcn.004a0e60
movq xmm0, qword [eax]
movq qword [esp + 0x19c], xmm0
movq xmm0, qword [eax + 8]
movq qword [esp + 0x1a4], xmm0
movq xmm0, qword [eax + 0x10]
mov eax, dword [esp + 0x54]
mov ebx, 0x18
lea ecx, [eax + ebx]
push ecx
lea edx, [esp + 0x1a0]
push edx
push eax
lea eax, [esp + 0x1c8]
push eax
lea ecx, [esp + 0x1c4]
push ecx
movq qword [esp + 0x1c0], xmm0
call fcn.00480fa0
fld qword [esp + 0xc0]
fxch st(1)
add esp, 0x14
fcompi st(1)
fstp st(0)
jbe 0x4aaaf5
movsd xmm2, qword [esp + 0x1b4]
movsd xmm1, qword [0x57ca30]
movsd xmm0, qword [0x57e370]
andpd xmm2, xmm1
comisd xmm2, xmm0
jbe 0x4aaaf5
movsd xmm2, qword [esp + 0x1bc]
andpd xmm2, xmm1
comisd xmm2, xmm0
jbe 0x4aaaf5
mov edx, dword [esp + 0x54]
add edx, ebx
push edx
push 2
lea ecx, [esp + 0x5c]
call fcn.0045cab0
mov eax, dword [esp + 0x54]
movq xmm0, qword [esp + 0x19c]
movq qword [eax + ebx], xmm0
movq xmm0, qword [esp + 0x1a4]
movq qword [eax + ebx + 8], xmm0
movq xmm0, qword [esp + 0x1ac]
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0xf8]
movq qword [eax + ebx + 0x10], xmm0
push edx
lea eax, [esp + 0xe4]
push eax
mov ecx, esi
call fcn.004a12d0
test al, al
jne 0x4aa9c6
xorps xmm0, xmm0
movsd qword [esp + 0xdc], xmm0
movsd qword [esp + 0xe4], xmm0
movsd qword [esp + 0xec], xmm0
mov ecx, dword [esp + 0x44]
add ecx, ebx
push ecx
push 2
lea ecx, [esp + 0x4c]
call fcn.0045cab0
mov eax, dword [esp + 0x44]
movq xmm0, qword [esp + 0xdc]
movq qword [eax + ebx], xmm0
movq xmm0, qword [esp + 0xe4]
movq qword [eax + ebx + 8], xmm0
movq xmm0, qword [esp + 0xec]
movq qword [eax + ebx + 0x10], xmm0
mov dword [esp + 0x34], 3
jmp 0x4aaa96
movsd xmm1, qword [esp + 0x94]
movapd xmm0, xmm3
subsd xmm0, qword [0x57e370]
comisd xmm1, xmm0
jbe 0x4aa82b
mov eax, 1
cmp dword [esp + 0x34], eax
jle 0x4aa820
mov ecx, dword [esp + 0x54]
movq xmm0, qword [ebx + ecx]
movq qword [ebx + ecx - 0x18], xmm0
movq xmm0, qword [ebx + ecx + 8]
lea eax, [ebx + ecx]
movq qword [eax - 0x10], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [eax - 8], xmm0
mov edx, dword [esp + 0x44]
movq xmm0, qword [ebx + edx]
lea eax, [ebx + edx]
movq qword [eax - 0x18], xmm0
movq xmm0, qword [eax + 8]
movq qword [eax - 0x10], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [eax - 8], xmm0
jmp 0x4aa82b
jle 0x4aaaf5
cmp dword [esi + 0xc], 0x35
jne 0x4aaac6
movsd xmm0, qword [0x57b948]
mov ecx, dword [esp + 0x34]
sub esp, 8
movsd qword [esp], xmm0
lea eax, [esp + 0x5c]
push eax
push ecx
call fcn.00478780
add esp, 0x10
test eax, eax
jne 0x4aab4f
cmp dword [esi + 0xc], 0x39
lea ecx, [esp + 0x44]
setne dl
mov byte [esp + 0xd8], dl
mov eax, dword [esp + 0xd8]
push eax
mov eax, dword [esp + 0x38]
push ecx
lea edx, [esp + 0x5c]
push edx
push eax
call fcn.0047d360
add esp, 0x10
jmp 0x4aab4f
cmp dword [esi + 0xc], 0x35
jne 0x4aab21
movsd xmm0, qword [0x57b948]
mov edx, dword [esp + 0x34]
sub esp, 8
movsd qword [esp], xmm0
lea ecx, [esp + 0x5c]
push ecx
push edx
call fcn.00478780
add esp, 0x10
test eax, eax
jne 0x4aab4f
cmp dword [esi + 0xc], 0x39
push 0
setne al
mov byte [esp + 0x1cc], al
mov ecx, dword [esp + 0x1cc]
mov eax, dword [esp + 0x38]
push 0
push ecx
push 4
lea edx, [esp + 0x64]
push edx
push eax
call fcn.0047c710
add esp, 0x18
mov ebx, eax
test ebx, ebx
je 0x4aabe7
cmp dword [esp + 0x60], 1
jle 0x4aabaf
cmp dword [ebx + 0xc], 0x13
je 0x4aabaf
push 0xe0
call sub.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x38], eax
mov byte [esp + 0x2c0], 3
test eax, eax
je 0x4aab91
push ebx
mov ecx, eax
call fcn.00471690
mov dword [esp + 0x38], eax
jmp 0x4aab99
mov dword [esp + 0x38], 0
mov edx, dword [ebx]
mov eax, dword [edx]
push 1
mov ecx, ebx
mov byte [esp + 0x2c4], 2
call eax
mov ebx, dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
test ecx, ecx
jne 0x4aabbd
mov dword [esp + 0x40], ebx
jmp 0x4aabe7
mov edx, dword [ecx]
mov eax, dword [edx + 0x58]
push ebx
mov dword [esp + 0x3c], ecx
call eax
mov dword [esp + 0x40], eax
test ebx, ebx
je 0x4aabdb
mov edx, dword [ebx]
mov eax, dword [edx]
push 1
mov ecx, ebx
call eax
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov eax, dword [esp + 0x68]
movsd xmm2, qword [esp + 0x6c]
inc eax
movsd qword [esp + 0x104], xmm2
mov dword [esp + 0x68], eax
cmp eax, dword [esp + 0x60]
jl 0x4a9e44
mov eax, dword [esp + 0x84]
mov byte [esp + 0x2c0], 1
test eax, eax
je 0x4aac26
push eax
call dword [sym.imp.MSVCR100.dll_free]
add esp, 4
movsd xmm0, qword [esp + 0x1e4]
mov edx, dword [esi]
mov eax, dword [edx + 0x58]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x1e4]
mov ecx, esi
movsd qword [esp], xmm0
call eax
movsd xmm0, qword [esp + 0x1ec]
mov edx, dword [esi]
mov eax, dword [edx + 0x5c]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x1ec]
mov ecx, esi
movsd qword [esp], xmm0
call eax
mov eax, dword [esp + 0x44]
xor esi, esi
cmp eax, esi
je 0x4aac8c
push eax
call dword [sym.imp.MSVCR100.dll_free]
add esp, 4
mov eax, dword [esp + 0x54]
mov dword [esp + 0x44], esi
mov dword [esp + 0x4c], esi
cmp eax, esi
je 0x4aaca6
push eax
call dword [sym.imp.MSVCR100.dll_free]
add esp, 4
mov eax, dword [esp + 0x40]
jmp 0x4aad2d
movsd xmm0, qword [esp + 0x1e4]
mov edx, dword [esi]
mov eax, dword [edx + 0x58]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x1e4]
mov ecx, esi
movsd qword [esp], xmm0
call eax
movsd xmm0, qword [esp + 0x1ec]
mov edx, dword [esi]
mov eax, dword [edx + 0x5c]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x1ec]
mov ecx, esi
movsd qword [esp], xmm0
call eax
mov eax, dword [esp + 0x44]
mov esi, dword [sym.imp.MSVCR100.dll_free]
cmp eax, ebx
je 0x4aad15
push eax
call esi
add esp, 4
mov eax, dword [esp + 0x54]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], ebx
cmp eax, ebx
je 0x4aad2b
push eax
call esi
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x2b8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x270]
xor ecx, esp
call fcn.00551a8e
mov esp, ebp
pop ebp
ret 0xc