Function at 0x42c0d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4320c0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x150
mov eax, dword [0x43a040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x150], ecx
mov edi, dword [0x43a6d0]
mov esi, edi
mov eax, dword [ebx + 8]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xd4], esi
mov eax, dword [esi + 0x1ba8]
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1ba8]
mov dword [ebp - 0xf8], eax
cmp byte [eax + 0x8f], 0
jne 0x42c621
mov edx, dword [ebx + 0x14]
mov ecx, edx
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0xc8], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0xd8], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0x158], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x140], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0xc8], 0
mov dword [ebp - 0x138], ecx
je 0x42c1c8
call fcn.0040fa30
mov edi, dword [0x43a6d0]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 0xc4]
xor edx, edx
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x150]
call fcn.00404270
add esp, 4
mov dword [ebp - 0xcc], eax
cmp dword [edi + 0x1be0], eax
jne 0x42c1fc
mov dword [edi + 0x1be4], eax
cmp dword [edi + 0x1c1c], eax
jne 0x42c20b
mov byte [edi + 0x1c20], 1
cmp dword [edi + 0x1bc8], eax
jne 0x42c22f
push ecx
push dword [ebp - 0x150]
mov edx, 0xb
mov ecx, eax
call fcn.004153b0
mov edi, dword [0x43a6d0]
add esp, 8
mov eax, dword [ebp - 0x150]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x42c256
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x42c256
cmp dl, 0x23
jne 0x42c250
cmp byte [ecx + 1], dl
je 0x42c256
inc ecx
cmp ecx, 0xffffffff
jb 0x42c240
movss xmm1, dword [0x437df8]
movss xmm0, dword [edi + 0x1944]
movss dword [ebp - 0x14c], xmm1
cmp eax, ecx
jne 0x42c27f
xorps xmm3, xmm3
movss dword [ebp - 0x15c], xmm3
jmp 0x42c2d0
push ecx
push ecx
push eax
push ecx
mov ecx, dword [edi + 0x1940]
lea eax, [ebp - 0x128]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.004242c0
movss xmm0, dword [ebp - 0x128]
xorps xmm3, xmm3
addss xmm0, dword [0x437d4c]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x15c], xmm0
movss xmm0, dword [ebp - 0x124]
cmp byte [ebp - 0xc8], 0
je 0x42c2e9
movss xmm0, dword [esi + 0x1944]
mulss xmm0, dword [0x437dac]
test byte [edi + 0x1c34], 1
movss xmm1, dword [esi + 0x1568]
mov eax, dword [edi + 0x1ba8]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x42c315
movss xmm0, dword [edi + 0x1c38]
jmp 0x42c31d
movss xmm0, dword [eax + 0x178]
comiss xmm3, xmm0
jbe 0x42c35c
cmp dword [eax + 0x168], 0
movss xmm1, dword [eax + 0x200]
jne 0x42c33c
cmp dword [edi + 0x1f60], 0
je 0x42c344
movss xmm1, dword [eax + 0x1d0]
subss xmm1, dword [eax + 0xd0]
addss xmm1, xmm0
movss xmm0, dword [0x437d54]
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x128]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.0040f950
movss xmm1, dword [ebp - 0x15c]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x42c39a
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x157c]
jmp 0x42c39d
xorps xmm2, xmm2
mov edi, dword [ebp - 0xf8]
lea ecx, [ebp - 0x110]
movss xmm5, dword [ebp - 0x128]
addss xmm2, xmm5
movss dword [ebp - 0x144], xmm5
mov dword [ebp - 0x100], edi
movss xmm4, dword [edi + 0xd4]
movss xmm3, dword [edi + 0xd0]
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x124]
addss xmm2, xmm3
movss dword [ebp - 0xb4], xmm3
movaps xmm1, xmm3
movss dword [ebp - 0xe8], xmm4
addss xmm1, xmm5
movss dword [ebp - 0x44], xmm3
movss dword [ebp - 0x40], xmm4
movss dword [ebp - 0x38], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x124]
movss dword [ebp - 0x1c], xmm2
subss xmm2, xmm3
movss dword [ebp - 0x3c], xmm1
movss xmm1, dword [esi + 0x1568]
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x18], xmm0
subss xmm0, xmm4
movss dword [ebp - 0x20], xmm4
movss dword [ebp - 0x110], xmm2
movss dword [ebp - 0x10c], xmm0
call fcn.0040f590
cmp byte [ebp - 0xc8], 0
je 0x42c6b0
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0x44]
push 0x100
push eax
lea ecx, [ebp - 0x24]
call fcn.0040f6c0
add esp, 8
test al, al
je 0x42c61c
mov eax, dword [esi + 0x1c50]
movss xmm0, dword [ebp - 0xb4]
mov esi, dword [0x43a6d0]
movss dword [edi + 0xd0], xmm0
movss xmm0, dword [ebp - 0xe8]
movss dword [edi + 0xd4], xmm0
movups xmm0, xmmword [esi + 0x1620]
mov dword [ebp - 0x104], eax
lea ecx, [esi + 0x1ce4]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 3
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.00415c50
mov edi, dword [ebp - 0xd4]
lea eax, [ebp - 0x114]
push eax
mov dword [ebp - 0x114], 7
movups xmm0, xmmword [edi + 0x1660]
movups xmmword [esi + 0x1620], xmm0
mov esi, dword [0x43a6d0]
movss xmm0, dword [edi + 0x156c]
movss dword [ebp - 0xb4], xmm0
movss xmm0, dword [esi + 0x1554]
lea ecx, [esi + 0x1cf0]
movss dword [ebp - 0x110], xmm0
call fcn.00415b90
movss xmm0, dword [ebp - 0xb4]
lea eax, [ebp - 0x114]
movss dword [esi + 0x1554], xmm0
mov esi, dword [0x43a6d0]
movss xmm0, dword [edi + 0x1570]
movss dword [ebp - 0xb4], xmm0
push eax
movss xmm0, dword [esi + 0x1558]
lea ecx, [esi + 0x1cf0]
mov dword [ebp - 0x114], 8
movss dword [ebp - 0x110], xmm0
call fcn.00415b90
movss xmm0, dword [ebp - 0xb4]
lea eax, [ebp - 0x110]
movss xmm1, dword [ebp - 0x3c]
sub esp, 8
subss xmm1, dword [ebp - 0x44]
mov edx, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x150]
movss dword [esi + 0x1558], xmm0
movss xmm0, dword [ebp - 0x38]
subss xmm0, dword [ebp - 0x40]
push eax
movss dword [ebp - 0x110], xmm1
movss dword [ebp - 0x10c], xmm0
call fcn.00409d00
add esp, 0xc
mov byte [ebp - 0xcd], al
mov ecx, 2
call fcn.00404980
mov esi, dword [0x43a6d0]
mov ecx, dword [esi + 0x1ce4]
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x1cec]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, 0x15f
shl eax, 4
add eax, esi
movups xmmword [eax], xmm0
dec dword [esi + 0x1ce4]
cmp byte [ebp - 0xcd], 0
jne 0x42c641
call fcn.00409ed0
call fcn.0040fb60
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00430616
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x1ba8]
mov dword [ebp - 0x100], edx
movsx ecx, word [edx + 0x122]
mov eax, dword [edx + 0x11c]
bts ecx, eax
movss xmm0, dword [edx + 0xd0]
mov word [edx + 0x122], cx
addss xmm0, dword [esi + 0x1564]
movss dword [edx + 0xd0], xmm0
movss xmm0, dword [esi + 0x1568]
addss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [ebp - 0x128]
subss xmm0, dword [edx + 0x80]
movss dword [ebp - 0x144], xmm0
jmp 0x42c6e7
test dword [ebx + 0x14], 0x10000000
jne 0x42c6db
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0x44]
push 0x100
push eax
lea ecx, [ebp - 0x24]
call fcn.0040f6c0
add esp, 8
test al, al
je 0x42c621
mov eax, dword [esi + 0x1c50]
mov dword [ebp - 0x104], eax
mov edx, dword [ebp - 0xcc]
lea ecx, [ebp - 0x44]
call fcn.00405d80
mov dl, al
mov byte [ebp - 0xe2], dl
test dl, dl
je 0x42c70b
mov dword [esi + 0x1ebc], 1
mov edi, dword [0x43a6d0]
xor eax, eax
mov ecx, dword [ebp - 0xcc]
add edi, 0x1ff0
cmp dword [edi], ecx
cmovne edi, eax
mov eax, dword [ebp - 0x104]
shr eax, 8
and al, 1
mov dword [ebp - 0xec], edi
mov dword [ebp - 0x104], eax
mov eax, dword [esi + 0x1be0]
cmp eax, ecx
je 0x42c767
cmp dword [esi + 0x1d68], ecx
je 0x42c75e
cmp dword [esi + 0x1d5c], ecx
jne 0x42c767
cmp dword [esi + 0x1d84], 2
jne 0x42c767
mov byte [ebp - 0xb5], 1
jmp 0x42c76e
mov byte [ebp - 0xb5], 0
test dl, dl
je 0x42c782
cmp byte [esi + 0x3e0], 0
mov byte [ebp - 0xa7], 1
jne 0x42c789
mov byte [ebp - 0xa7], 0
cmp byte [ebp - 0xc8], 0
je 0x42c7ff
test edi, edi
je 0x42c7ff
test eax, eax
jne 0x42c7ff
mov eax, dword [ebp - 0x100]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.00404270
mov ecx, dword [0x43a6d0]
add esp, 4
mov dword [ebp - 0xb4], eax
cmp dword [ecx + 0x1bc8], eax
jne 0x42c7ee
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.004153b0
mov eax, dword [ebp - 0xb4]
add esp, 8
cmp dword [esi + 0x1c1c], eax
jne 0x42c7ff
mov byte [ebp - 0xa8], 1
jmp 0x42c81f
mov eax, dword [ebp - 0xc8]
mov byte [ebp - 0xa8], 0
test al, al
je 0x42c899
mov byte [ebp - 0xa8], 0
test edi, edi
je 0x42c899
mov eax, dword [ebp - 0x100]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.00404270
mov ecx, dword [0x43a6d0]
add esp, 4
mov dword [ebp - 0xb4], eax
cmp dword [ecx + 0x1bc8], eax
jne 0x42c873
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.004153b0
mov eax, dword [ebp - 0xb4]
add esp, 8
cmp dword [esi + 0x1be0], eax
jne 0x42c893
mov cl, 1
mov byte [ebp - 0xc1], 0
mov byte [ebp - 0xa6], cl
mov byte [ebp - 0xbc], 0
jmp 0x42c8b3
mov eax, dword [ebp - 0xc8]
xor cl, cl
mov byte [ebp - 0xc1], 0
mov byte [ebp - 0xbc], 0
mov byte [ebp - 0xa6], cl
test al, al
je 0x42c8ce
mov eax, dword [ebp - 0x100]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [ebp - 0xc8]
movss dword [ebp - 0x14c], xmm0
jmp 0x42c8d6
xor cl, cl
mov byte [ebp - 0xa6], cl
test edi, edi
je 0x42c8e5
xor al, 1
cmp byte [edi + 0x53], al
je 0x42c8e5
mov al, 1
jmp 0x42c8e7
xor al, al
cmp byte [ebp - 0xa7], 0
mov byte [ebp - 0xb6], al
mov dword [ebp - 0xe8], 1
jne 0x42c92e
cmp byte [ebp - 0xa8], 0
jne 0x42c92e
cmp byte [ebp - 0xb5], 0
jne 0x42c92e
cmp byte [ebp - 0x104], 0
jne 0x42c92e
mov byte [ebp - 0xa8], 0
test cl, cl
jne 0x42c935
mov byte [ebp - 0xb8], cl
jmp 0x42c94a
mov byte [ebp - 0xa8], 1
mov edx, dword [ebp - 0xcc]
mov byte [ebp - 0xb8], 1
cmp dword [esi + 0x1be0], edx
jne 0x42c952
test al, al
je 0x42cc0c
mov ecx, dword [ebp - 0xc0]
lea edi, [esi + 0x1ff0]
mov dword [ebp - 0xec], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42c971
mov eax, dword [edi + 0x28]
sub ecx, edx
lea edx, [ecx + 1]
mov dword [ebp - 0xb0], edx
cmp edx, eax
jle 0x42c9bb
test eax, eax
je 0x42c9a0
cdq
sub eax, edx
mov edx, dword [ebp - 0xb0]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x28]
jmp 0x42c9a5
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x24]
push eax
call fcn.00415fe0
mov edx, dword [ebp - 0xb0]
push edx
push dword [ebp - 0xc0]
mov dword [edi + 0x24], edx
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebx + 0xc]
add esp, 0xc
mov eax, dword [edi + 0x10]
inc edx
mov dword [ebp - 0xb0], edx
cmp edx, eax
jle 0x42ca12
test eax, eax
je 0x42c9f7
cdq
sub eax, edx
mov edx, dword [ebp - 0xb0]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x10]
jmp 0x42c9fc
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.00416050
mov edx, dword [ebp - 0xb0]
lea eax, [edi + 0x18]
mov dword [edi + 0xc], edx
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x42ca3b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.00415fe0
lea eax, [edi + 0x18]
mov esi, dword [ebx + 0xc]
mov dword [eax], 0
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xac], ecx
lea ecx, [ecx + esi*2]
mov byte [edi + 0x30], 0
mov esi, dword [ebp - 0xd4]
add ecx, 0xfffffffe
mov dword [ebp - 0xdc], eax
cmp edx, ecx
jae 0x42cadd
mov edi, dword [ebx + 0xc]
mov esi, eax
nop word [eax + eax]
cmp byte [esi], 0
je 0x42cacb
push 0
mov edx, esi
lea ecx, [ebp - 0xb4]
call fcn.00404520
mov edx, dword [ebp - 0xac]
add esi, eax
mov eax, dword [ebp - 0xb4]
add esp, 4
mov dword [ebp - 0xdc], esi
test eax, eax
je 0x42cacb
mov ecx, dword [ebp - 0xe0]
mov word [edx], ax
lea eax, [edi - 1]
add edx, 2
mov dword [ebp - 0xac], edx
lea eax, [ecx + eax*2]
cmp edx, eax
jb 0x42ca80
mov edi, dword [ebp - 0xec]
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xc0]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0xe0]
sar edx, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xcc]
mov dword [edi + 4], edx
cmp dword [edi], eax
jne 0x42cb39
cmp byte [ebp - 0xb6], cl
jne 0x42cb39
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov byte [ebp - 0xcd], 1
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
cmovl edx, dword [edi + 0x44]
mov cl, byte [ebp - 0xcd]
mov dword [edi + 0x44], edx
jmp 0x42cb9c
mov dword [edi], eax
xor cl, cl
mov al, byte [ebp - 0xc8]
xor al, 1
mov dword [edi + 0x38], 0
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], 0
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x3c], 0
mov word [edi + 0x51], 1
mov dword [edi + 0x58], 0
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], 0
cmp byte [ebp - 0xc8], 0
mov edx, dword [ebx + 0x14]
jne 0x42cc00
mov eax, dword [ebp - 0xbc]
test dl, 0x10
movzx eax, al
cmovne eax, dword [ebp - 0xe8]
cmp byte [ebp - 0xb5], 0
mov dword [ebp - 0xbc], eax
je 0x42cbde
test cl, cl
je 0x42cbd7
test byte [esi + 0x1d6c], 4
jne 0x42cbde
mov byte [ebp - 0xbc], 1
cmp byte [ebp - 0x104], 0
jne 0x42cbf9
cmp byte [ebp - 0xa7], 0
je 0x42cc00
cmp byte [esi + 0xfc], 0
je 0x42cc00
mov byte [ebp - 0xbc], 1
test edx, 0x2000
je 0x42cc0c
mov byte [edi + 0x48], 1
mov ecx, dword [ebp - 0xcc]
cmp dword [esi + 0x1be0], ecx
je 0x42cccb
cmp byte [ebp - 0xa8], 0
je 0x42ccc3
mov edx, dword [ebp - 0xf8]
call fcn.00405b70
call fcn.00410c80
mov ecx, edx
call fcn.0040ef10
mov eax, dword [esi + 0x1bf4]
mov edx, dword [ebx + 0x14]
or eax, 3
cmp byte [ebp - 0xc8], 0
mov dword [esi + 0x1bf4], eax
jne 0x42cc61
test dl, dl
jns 0x42cc6a
or eax, 0xc
mov dword [esi + 0x1bf4], eax
mov eax, dword [esi + 0x1c00]
or dword [esi + 0x1bf8], 2
or eax, 0x180
cmp byte [ebp - 0xc8], 0
mov ecx, dword [esi + 0x1c04]
mov dword [esi + 0x1c00], eax
mov dword [esi + 0x1c04], ecx
je 0x42cca6
or eax, 0x60
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
test edx, 0x440
je 0x42ccbd
or eax, 1
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
mov ecx, dword [ebp - 0xcc]
cmp dword [esi + 0x1be0], ecx
jne 0x42cd08
test edi, edi
jne 0x42ccda
call fcn.00405c40
mov ecx, dword [ebp - 0xcc]
cmp dword [esi + 0x1be0], ecx
jne 0x42cd08
cmp byte [esi + 0x3e0], 0
je 0x42cd15
cmp byte [ebp - 0xb8], 0
jne 0x42cd15
cmp byte [ebp - 0xa8], 0
jne 0x42cd15
mov byte [ebp - 0xc1], 1
mov dl, 1
jmp 0x42cd1b
test edi, edi
je 0x42cd19
cmp byte [ebp - 0xa6], 0
je 0x42cd19
mov dl, 1
jmp 0x42cd1b
xor dl, dl
mov byte [ebp - 0xb7], dl
test edi, edi
je 0x42cd41
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x42cd36
cmp byte [ebp - 0xbc], 0
je 0x42cd41
test dl, dl
je 0x42cd41
mov edx, 1
jmp 0x42cd43
xor dl, dl
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xf4], edx
mov byte [ebp - 0xe1], dl
mov byte [ebp - 0xcd], 0
mov byte [ebp - 0xa8], 0
test al, al
je 0x42cead
test edi, edi
je 0x42cead
cmp byte [ebp - 0xb7], 0
jne 0x42cd84
test dl, dl
je 0x42ceba
mov ecx, dword [ebx + 0xc]
mov eax, dword [edi + 0x10]
inc ecx
mov dword [ebp - 0xb0], ecx
cmp ecx, eax
jle 0x42cdc4
test eax, eax
je 0x42cda5
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x10]
jmp 0x42cdaa
mov ecx, 8
mov eax, dword [ebp - 0xb0]
cmp ecx, eax
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.00416050
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xc0]
mov dword [edi + 0xc], ecx
dec ecx
mov edx, dword [edi + 0x14]
mov esi, edx
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], edx
lea ecx, [esi + ecx*2]
cmp esi, ecx
mov dword [ebp - 0xe8], ecx
mov esi, dword [ebp - 0xd4]
jae 0x42ce4f
mov esi, eax
nop word [eax + eax]
cmp byte [esi], 0
je 0x42ce43
push 0
mov edx, esi
lea ecx, [ebp - 0xb4]
call fcn.00404520
mov edx, dword [ebp - 0xac]
add esi, eax
mov eax, dword [ebp - 0xb4]
add esp, 4
mov dword [ebp - 0xdc], esi
test eax, eax
je 0x42ce43
mov word [edx], ax
add edx, 2
mov dword [ebp - 0xac], edx
cmp edx, dword [ebp - 0xe8]
jb 0x42ce00
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xc0]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0xb0]
sar edx, 1
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov dword [edi + 4], edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 8], eax
cmovl edx, dword [edi + 0x44]
movzx eax, byte [ebp - 0xe1]
cmp ecx, edx
mov dword [edi + 0x44], edx
mov edx, 0
cmovne edx, eax
mov dword [edi + 0x40], ecx
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xf4], edx
cmp byte [ebp - 0xb7], 0
jne 0x42cec2
test dl, dl
jne 0x42cec2
cmp dword [esi + 0x1be0], ecx
jne 0x42ced6
test al, al
jne 0x42ced6
test edi, edi
je 0x42ced6
mov byte [ebp - 0xe1], 1
cmp byte [edi + 0x30], al
jne 0x42cedd
mov byte [ebp - 0xe1], 0
cmp byte [ebp - 0x158], 0
je 0x42cf70
mov edx, dword [esi + 0x1940]
cmp dword [edx + 0x14], 0x2a
ja 0x42cefb
mov eax, dword [edx + 0x2c]
jmp 0x42cf1a
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x42cf11
mov eax, dword [edx + 0x2c]
jmp 0x42cf1a
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*8]
mov dword [ebp - 0xac], eax
lea ecx, [esi + 0x2e64]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0xac]
mov dword [ecx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
call fcn.0040f1f0
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xdc], 0
cmp dword [esi + 0x1be0], ecx
jne 0x42d5d9
mov eax, dword [edi + 8]
mov edx, dword [ebx + 0x14]
mov byte [edi + 0xe6e], 0
mov dword [edi + 0xe70], edx
mov dword [ebp - 0xdc], eax
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x34], eax
cmp byte [esi + 0xec], 0
mov dword [esi + 0x31f8], 1
sete al
cmp byte [ebp - 0xc8], 0
mov byte [esi + 0x1bed], al
movss xmm7, dword [esi + 0xe4]
subss xmm7, dword [ebp - 0x44]
subss xmm7, dword [esi + 0x1564]
addss xmm7, dword [edi + 0x38]
je 0x42d000
mov eax, dword [ebp - 0x100]
movss xmm2, dword [esi + 0xe8]
subss xmm2, dword [eax + 0xd4]
jmp 0x42d010
movss xmm2, dword [esi + 0x1944]
mulss xmm2, dword [0x437d1c]
cmp byte [ebp - 0xbc], 0
mov cl, byte [esi + 0xb1]
mov byte [ebp - 0xa7], cl
je 0x42d045
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6d], 1
jmp 0x42d3e7
mov al, byte [ebp - 0xe2]
test al, al
je 0x42d309
cmp word [esi + 0x3ea], 2
jb 0x42d309
cmp byte [esi + 0xfd], 0
jne 0x42d309
cmp byte [edi + 0x53], 0
je 0x42d088
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.0042a660
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.0042a9d0
lea edx, [edi + 0x3c]
mov dword [ebp - 0xb0], eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov byte [edx + 0x16], 0
movzx ecx, word [esi + 0x3ea]
sub ecx, 2
test cl, 1
jne 0x42d278
test eax, eax
je 0x42d0d3
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0xb0]
cmp word [eax + ecx*2 - 2], 0xa
je 0x42d0d3
xor cl, cl
jmp 0x42d0d5
mov cl, 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x42d0e1
test cl, cl
jne 0x42d104
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.0042adb0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x42d122
mov eax, dword [edi + 0x44]
cmp dword [edi + 0x40], eax
jne 0x42d11f
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
jmp 0x42d122
mov dword [edi + 0x3c], eax
mov ecx, dword [edi + 0x3c]
mov edx, dword [edi + 4]
inc ecx
cmp ecx, edx
jge 0x42d239
mov eax, dword [edi + 0xe70]
and eax, 0x8000
mov dword [ebp - 0xb0], 0x3000
mov dword [ebp - 0xb4], eax
nop dword [eax]
test eax, eax
jne 0x42d22e
test ecx, ecx
jle 0x42d237
mov eax, dword [edi + 0x14]
movzx eax, word [eax + ecx*2 - 2]
cmp eax, 0x20
je 0x42d222
cmp eax, 9
je 0x42d222
cmp ax, word [ebp - 0xb0]
je 0x42d222
cmp eax, 0x2c
je 0x42d222
cmp eax, 0x3b
je 0x42d222
cmp eax, 0x28
je 0x42d222
cmp eax, 0x29
je 0x42d222
cmp eax, 0x7b
je 0x42d222
cmp eax, 0x7d
je 0x42d222
cmp eax, 0x5b
je 0x42d222
cmp eax, 0x5d
je 0x42d222
cmp eax, 0x7c
je 0x42d222
cmp eax, 0xa
je 0x42d222
cmp eax, 0xd
je 0x42d222
mov eax, dword [edi + 0x14]
movzx eax, word [eax + ecx*2]
cmp eax, 0x20
je 0x42d21b
cmp eax, 9
je 0x42d21b
cmp ax, word [ebp - 0xb0]
je 0x42d21b
cmp eax, 0x2c
je 0x42d21b
cmp eax, 0x3b
je 0x42d21b
cmp eax, 0x28
je 0x42d21b
cmp eax, 0x29
je 0x42d21b
cmp eax, 0x7b
je 0x42d21b
cmp eax, 0x7d
je 0x42d21b
cmp eax, 0x5b
je 0x42d21b
cmp eax, 0x5d
je 0x42d21b
cmp eax, 0x7c
je 0x42d21b
cmp eax, 0xa
je 0x42d21b
cmp eax, 0xd
jne 0x42d222
mov eax, 1
jmp 0x42d224
xor eax, eax
test eax, eax
jne 0x42d237
mov eax, dword [ebp - 0xb4]
inc ecx
cmp ecx, edx
jl 0x42d150
cmp ecx, edx
mov eax, dword [edi + 4]
cmovg ecx, edx
mov edx, ecx
mov dword [edi + 0x3c], ecx
mov dword [edi + 0x44], ecx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
je 0x42d267
cmp ecx, eax
jle 0x42d257
mov dword [edi + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x42d260
mov dword [edi + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x42d267
mov dword [edi + 0x3c], ecx
cmp dword [edi + 0x3c], eax
jle 0x42d3d4
mov dword [edi + 0x3c], eax
jmp 0x42d3d4
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0xb0]
push 0x200004
movzx esi, word [eax + ecx*2]
mov ecx, edi
call fcn.0042adb0
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600005
call fcn.0042adb0
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600001
call fcn.0042adb0
add esp, 4
cmp esi, 0xa
je 0x42d2f7
cmp byte [ebp - 0xc8], 0
je 0x42d2f7
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov esi, dword [ebp - 0xd4]
mov byte [edi + 0xe6c], 0
jmp 0x42d3d4
cmp byte [esi + 0x3e0], 0
je 0x42d356
cmp byte [edi + 0xe6d], 0
jne 0x42d356
test al, al
je 0x42d3e7
cmp byte [edi + 0x53], 0
je 0x42d33d
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.0042a660
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.0042a9d0
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
jmp 0x42d3d4
cmp byte [esi + 0xec], 0
je 0x42d3e7
cmp byte [edi + 0xe6d], 0
jne 0x42d3f0
movss xmm0, dword [esi + 0x370]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x42d395
movss xmm0, dword [esi + 0x374]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x42d3e7
cmp byte [edi + 0x53], 0
je 0x42d3af
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.0042a660
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x42d3bd
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.0042a9d0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0xe6c], 1
mov cl, byte [ebp - 0xa7]
mov edx, dword [ebx + 0x14]
mov dword [edi + 0xe68], 0xbe99999a
cmp byte [edi + 0xe6d], 0
je 0x42d400
cmp byte [esi + 0xec], 0
jne 0x42d400
mov byte [edi + 0xe6d], 0
cmp byte [esi + 0xfc], 0
je 0x42d412
cmp byte [esi + 0xfe], 0
je 0x42d41f
test cl, cl
je 0x42d428
cmp byte [esi + 0xff], 0
je 0x42d428
mov byte [ebp - 0xa5], 1
jmp 0x42d42f
mov byte [ebp - 0xa5], 0
test edx, 0x400
je 0x42d672
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x42d672
call fcn.00409c40
mov ecx, dword [ebp - 0xd8]
test al, al
mov al, byte [ebp - 0xa5]
je 0x42d4f4
test al, al
jne 0x42d4f4
cmp byte [esi + 0xfd], al
jne 0x42d4f4
test cl, cl
jne 0x42d4f4
mov ecx, dword [esi + 0x1524]
mov eax, dword [esi + 0x151c]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x42d4a0
nop
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x42d4e8
cmp ecx, edx
jb 0x42d490
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xb0]
push 2
sub esp, 8
mov dword [ebp - 0xb0], 9
call fcn.0042bef0
add esp, 0xc
test al, al
je 0x42d4e8
push dword [ebp - 0xb0]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.0042adb0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xd8]
mov al, byte [ebp - 0xa5]
mov edx, dword [ebx + 0x14]
cmp dword [esi + 0x151c], 0
jle 0x42d5d9
test al, al
jne 0x42d5a1
test cl, cl
jne 0x42d5a1
cmp byte [ebp - 0xb5], cl
jne 0x42d5a1
xor ecx, ecx
mov dword [ebp - 0xac], ecx
nop dword [eax + eax]
mov eax, dword [esi + 0x1524]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0xb0], eax
cmp eax, 9
jne 0x42d54e
cmp byte [esi + 0xfd], 0
jne 0x42d58f
push 2
sub esp, 8
lea ecx, [ebp - 0xb0]
call fcn.0042bef0
add esp, 0xc
test al, al
je 0x42d589
push dword [ebp - 0xb0]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.0042adb0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xac]
mov edx, dword [ebx + 0x14]
inc ecx
mov dword [ebp - 0xac], ecx
cmp ecx, dword [esi + 0x151c]
jl 0x42d530
mov ecx, dword [esi + 0x1520]
lea eax, [esi + 0x151c]
test ecx, ecx
jns 0x42d5d3
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x151c]
call fcn.00416050
lea eax, [esi + 0x151c]
mov dword [eax], 0
mov edx, dword [ebp - 0xcc]
xor cl, cl
mov byte [ebp - 0xa5], cl
cmp dword [esi + 0x1be0], edx
jne 0x42e158
cmp byte [esi + 0x1bec], cl
jne 0x42e158
cmp byte [ebp - 0xc1], cl
jne 0x42e158
movss xmm0, dword [ebp - 0x124]
mov ecx, 1
subss xmm0, dword [esi + 0x1568]
divss xmm0, dword [esi + 0x1944]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
xor eax, eax
mov dword [edi + 0x4c], ecx
cmp byte [esi + 0xfd], al
mov dword [ebp - 0xb0], ecx
mov ecx, 0x400000
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
mov al, byte [esi + 0xb1]
mov byte [ebp - 0x131], al
test al, al
je 0x42d683
cmp dword [esi + 0x37c], 0xa
jne 0x42d683
mov byte [ebp - 0xb8], 1
jmp 0x42d68e
mov al, byte [ebp - 0xa5]
mov ecx, dword [ebp - 0xd8]
jmp 0x42d4f7
mov byte [ebp - 0xb8], 0
test al, al
je 0x42d6b9
cmp byte [esi + 0xff], 0
mov al, byte [esi + 0xfe]
mov byte [ebp - 0xa7], al
je 0x42d6cc
cmp byte [esi + 0xfc], 0
jne 0x42d6cc
test al, al
jne 0x42d6cc
mov byte [ebp - 0xb5], 1
jmp 0x42d6d3
mov al, byte [esi + 0xfc]
mov byte [ebp - 0xa7], al
mov byte [ebp - 0xb8], 0
mov byte [ebp - 0xb5], 0
cmp byte [esi + 0xb1], 0
mov ecx, dword [esi + 0x37c]
je 0x42d6e7
cmp ecx, 8
jmp 0x42d6ea
cmp ecx, 1
sete al
mov byte [ebp - 0xa6], al
test al, al
je 0x42d717
mov eax, dword [0x43a6d0]
mov eax, dword [eax + 0x80]
test eax, eax
js 0x42d717
mov ecx, eax
call fcn.00409c40
test al, al
jne 0x42d731
mov ecx, dword [esi + 0x37c]
cmp ecx, 2
jne 0x42d75d
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x42d75d
call fcn.00409c40
test al, al
je 0x42d75d
cmp byte [ebp - 0xd8], 0
jne 0x42d75d
cmp byte [ebp - 0x158], 0
jne 0x42d75d
cmp byte [ebp - 0xc8], 0
je 0x42d754
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x42d75d
mov byte [ebp - 0xb6], 1
jmp 0x42d764
mov byte [ebp - 0xb6], 0
cmp byte [ebp - 0xa6], 0
je 0x42d782
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x42d782
call fcn.00409c40
test al, al
jne 0x42d7a0
cmp dword [esi + 0x37c], 1
jne 0x42d7c3
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x42d7c3
call fcn.00409c40
test al, al
je 0x42d7c3
cmp byte [ebp - 0x158], 0
jne 0x42d7c3
cmp byte [ebp - 0xc8], 0
je 0x42d7ba
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x42d7c3
mov byte [ebp - 0x13b], 1
jmp 0x42d7ca
mov byte [ebp - 0x13b], 0
cmp byte [ebp - 0xa6], 0
je 0x42d7e8
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x42d7e8
call fcn.00409c40
test al, al
jne 0x42d806
cmp dword [esi + 0x37c], 2
jne 0x42d816
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x42d816
call fcn.00409c40
test al, al
je 0x42d816
cmp byte [ebp - 0xd8], 0
mov byte [ebp - 0xe2], 1
je 0x42d81d
mov byte [ebp - 0xe2], 0
mov dl, byte [ebp - 0xa6]
test dl, dl
je 0x42d860
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x42d860
call fcn.00409c40
test al, al
je 0x42d85a
cmp byte [ebp - 0xd8], 0
jne 0x42d85a
cmp byte [ebp - 0x140], 0
je 0x42d85a
mov byte [ebp - 0x132], 1
jmp 0x42d86b
mov dl, byte [ebp - 0xa6]
mov byte [ebp - 0x132], 0
test dl, dl
je 0x42d883
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x42d883
call fcn.00409c40
test al, al
jne 0x42d8a4
cmp byte [ebp - 0xb8], 0
je 0x42d8bd
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x42d8bd
call fcn.00409c40
test al, al
je 0x42d8bd
cmp byte [ebp - 0xd8], 0
jne 0x42d8bd
cmp byte [ebp - 0x140], 0
mov byte [ebp - 0xed], 1
jne 0x42d8c4
mov byte [ebp - 0xed], 0
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x42d8d9
call fcn.00409c40
test al, al
jne 0x42d8ee
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x42d8f7
call fcn.00409c40
test al, al
je 0x42d8f7
mov byte [ebp - 0xb8], 1
jmp 0x42d8fe
mov byte [ebp - 0xb8], 0
mov edx, 1
xor ecx, ecx
call fcn.00411cc0
xorps xmm5, xmm5
comiss xmm0, xmm5
jbe 0x42d927
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x64]
test ecx, ecx
js 0x42d940
call fcn.00409c40
test al, al
je 0x42d940
mov edx, 1
lea ecx, [edx + 1]
call fcn.00411cc0
comiss xmm0, xmm5
mov byte [ebp - 0x13a], 0
jbe 0x42d947
mov byte [ebp - 0x13a], 1
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x42d95c
call fcn.00409c40
test al, al
jne 0x42d976
mov eax, 1
mov edx, eax
mov ecx, eax
call fcn.00411cc0
comiss xmm0, xmm5
mov byte [ebp - 0x139], 0
jbe 0x42d97d
mov byte [ebp - 0x139], 1
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x42d9ce
call fcn.00409c40
test al, al
je 0x42d9ce
cmp byte [ebp - 0xb5], 0
je 0x42d9a2
mov eax, 0x200004
jmp 0x42d9b6
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0xa7], 0
cmovne eax, ecx
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
or ecx, eax
push ecx
mov ecx, edi
call fcn.0042adb0
jmp 0x42e11b
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x42d9fd
call fcn.00409c40
test al, al
je 0x42d9fd
cmp byte [ebp - 0xb5], 0
je 0x42d9f3
mov eax, 0x200005
jmp 0x42d9b6
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x42d9ac
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x42da77
call fcn.00409c40
test al, al
je 0x42da77
cmp byte [ebp - 0xc8], 0
je 0x42da77
cmp byte [esi + 0xfc], 0
je 0x42da53
mov edx, dword [ebp - 0x100]
movss xmm0, dword [edx + 0x5c]
subss xmm0, dword [esi + 0x1944]
mov dword [edx + 0x74], 0
mov dword [edx + 0x7c], 0
maxss xmm0, xmm5
movss dword [edx + 0x6c], xmm0
jmp 0x42e12f
movzx eax, byte [ebp - 0xb5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200002]
or eax, dword [ebp - 0xbc]
push eax
call fcn.0042adb0
jmp 0x42e11b
mov ecx, dword [0x43a6d0]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
js 0x42dafe
call fcn.00409c40
test al, al
je 0x42dafe
cmp byte [ebp - 0xc8], 0
je 0x42dafe
cmp byte [esi + 0xfc], 0
je 0x42dada
mov ecx, dword [ebp - 0x100]
movss xmm0, dword [esi + 0x1944]
mov eax, dword [0x43a6d0]
addss xmm0, dword [ecx + 0x5c]
mov eax, dword [eax + 0x1ba8]
minss xmm0, dword [eax + 0x64]
mov dword [ecx + 0x74], 0
mov dword [ecx + 0x7c], 0
movss dword [ecx + 0x6c], xmm0
jmp 0x42e12f
movzx eax, byte [ebp - 0xb5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200003]
or eax, dword [ebp - 0xbc]
push eax
call fcn.0042adb0
jmp 0x42e11b
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x48]
test ecx, ecx
js 0x42db70
call fcn.00409c40
test al, al
je 0x42db70
cmp byte [ebp - 0xc8], 0
je 0x42db70
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
or ecx, 0x20000e
push ecx
mov ecx, edi
call fcn.0042adb0
movd xmm0, dword [ebp - 0xb0]
movss xmm1, dword [ebp - 0x14c]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
subss xmm1, xmm0
movss dword [ebp - 0x14c], xmm1
jmp 0x42e12c
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
js 0x42dbde
call fcn.00409c40
test al, al
je 0x42dbde
cmp byte [ebp - 0xc8], 0
je 0x42dbde
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
or ecx, 0x20000f
push ecx
mov ecx, edi
call fcn.0042adb0
movd xmm0, dword [ebp - 0xb0]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
addss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x14c], xmm0
jmp 0x42e12c
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x42dc20
call fcn.00409c40
test al, al
je 0x42dc20
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200004
or eax, 0x200006
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.0042adb0
jmp 0x42e11b
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x42dc62
call fcn.00409c40
test al, al
je 0x42dc62
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200005
or eax, 0x200007
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.0042adb0
jmp 0x42e11b
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x42dc9c
call fcn.00409c40
test al, al
je 0x42dc9c
cmp byte [ebp - 0xd8], 0
jne 0x42dc9c
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
or ecx, 0x200008
push ecx
mov ecx, edi
call fcn.0042adb0
jmp 0x42e11b
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x42dd3d
call fcn.00409c40
test al, al
je 0x42dd3d
cmp byte [ebp - 0xd8], 0
jne 0x42dd3d
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x42dd21
cmp byte [ebp - 0xa7], 0
je 0x42dcda
push 0x60000c
jmp 0x42dd03
cmp byte [ebp - 0x131], 0
je 0x42dd21
cmp byte [esi + 0xff], 0
je 0x42dd21
cmp byte [esi + 0xfe], 0
jne 0x42dd21
cmp byte [esi + 0xfc], 0
jne 0x42dd21
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.0042adb0
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
or ecx, 0x200009
push ecx
mov ecx, edi
call fcn.0042adb0
jmp 0x42e11b
cmp byte [ebp - 0xb8], 0
je 0x42ddb4
mov edx, dword [ebx + 0x14]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xc8], 0
je 0x42ddbd
mov cl, byte [esi + 0xfc]
test al, al
je 0x42dd69
test cl, cl
je 0x42ddbd
jmp 0x42dd6d
test cl, cl
jne 0x42ddbd
cmp byte [ebp - 0xd8], 0
jne 0x42e12f
push 2
sub esp, 8
mov dword [ebp - 0xb0], 0xa
lea ecx, [ebp - 0xb0]
call fcn.0042bef0
add esp, 0xc
test al, al
je 0x42e12f
push dword [ebp - 0xb0]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.0042adb0
jmp 0x42e11b
cmp byte [ebp - 0x13a], 0
je 0x42ddd0
mov byte [ebp - 0xc1], 1
mov byte [ebp - 0xa8], 1
jmp 0x42e12f
cmp byte [ebp - 0x139], 0
je 0x42dde6
mov cl, 1
mov byte [ebp - 0xc1], cl
jmp 0x42e135
mov al, byte [ebp - 0x132]
test al, al
jne 0x42e0fc
cmp byte [ebp - 0xed], al
jne 0x42e0fc
cmp byte [ebp - 0xa6], al
je 0x42de3d
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x42de3d
call fcn.00409c40
test al, al
je 0x42de3d
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
jmp 0x42e12f
mov al, byte [ebp - 0xb6]
test al, al
jne 0x42dfed
cmp byte [ebp - 0x13b], al
jne 0x42dfed
cmp byte [ebp - 0xe2], al
je 0x42e12f
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0xd0]
test ecx, ecx
je 0x42de88
push dword [eax + 0xd8]
call ecx
mov esi, eax
add esp, 4
test esi, esi
jne 0x42de8d
jmp 0x42e12f
mov esi, 0x43781a
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42de92
mov eax, dword [0x43a6d0]
sub ecx, edx
test eax, eax
je 0x42deaa
inc dword [eax + 0x36c]
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
add esp, 4
mov dword [ebp - 0xe0], eax
cmp byte [esi], 0
mov dword [ebp - 0xb0], 0
je 0x42df33
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0xac]
call fcn.00404520
add esp, 4
add esi, eax
cmp dword [ebp - 0xac], 0
je 0x42df21
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xac]
push 5
sub esp, 8
call fcn.0042bef0
add esp, 0xc
test al, al
je 0x42df1c
mov ecx, dword [ebp - 0xe0]
mov ax, word [ebp - 0xac]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x42ded3
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xb0], edi
mov edi, dword [ebp - 0xec]
mov esi, dword [ebp - 0xb0]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x42dfcc
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebp - 0xb0], edx
mov edx, dword [edi + 0x40]
cmp edx, dword [edi + 0x44]
je 0x42df7d
cmp edx, ecx
jle 0x42df64
mov dword [edi + 0x40], ecx
mov edx, ecx
cmp dword [edi + 0x44], ecx
jle 0x42df72
mov dword [edi + 0x44], ecx
mov dword [ebp - 0xb0], ecx
cmp edx, dword [ebp - 0xb0]
jne 0x42df7d
mov dword [edi + 0x3c], edx
cmp dword [edi + 0x3c], ecx
jle 0x42df85
mov dword [edi + 0x3c], ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.0042ad20
mov edx, dword [edi + 0x3c]
mov ecx, edi
push esi
push dword [ebp - 0xe0]
call fcn.0042a880
add esp, 8
test al, al
je 0x42dfbf
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push esi
push 0
call fcn.0042bc00
add esp, 8
mov byte [edi + 0x52], 0
add dword [edi + 0x3c], esi
mov eax, dword [ebp - 0xe0]
mov byte [edi + 0xe6c], 1
test eax, eax
je 0x42dfe0
mov ecx, dword [0x43a6d0]
test ecx, ecx
je 0x42dfe0
dec dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
jmp 0x42e12c
cmp dword [esi + 0xd4], 0
je 0x42e0bd
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x42e00e
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x42e013
mov ecx, dword [edi + 4]
xor esi, esi
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0x140], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.00404770
mov ecx, dword [0x43a6d0]
inc eax
mov dword [ebp - 0xb4], eax
test ecx, ecx
je 0x42e044
inc dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ebp - 0xb4]
mov dword [ebp - 0xe8], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x140]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.00404700
mov eax, dword [0x43a6d0]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x42e09e
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x43a6d0]
add esp, 8
test esi, esi
je 0x42e0ac
test eax, eax
je 0x42e0ac
dec dword [eax + 0x36c]
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
call eax
mov al, byte [ebp - 0xb6]
add esp, 4
test al, al
je 0x42e12f
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x42e0dd
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x42e12f
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.0042ad20
mov byte [edi + 0x52], 0
jmp 0x42e12f
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.0042adb0
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
add esp, 4
mov cl, byte [ebp - 0xa5]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x42e14a
cmp byte [ebp - 0xb7], 0
je 0x42e14a
mov al, 1
jmp 0x42e14c
xor al, al
or byte [ebp - 0xf4], al
mov esi, dword [ebp - 0xd4]
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xcc]
cmp dword [esi + 0x1be0], eax
jne 0x42e95a
test cl, cl
je 0x42e425
cmp byte [ebp - 0xd8], 0
jne 0x42e40d
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebp - 0xc0]
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42e1c0
test dl, dl
je 0x42e1bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x42e1c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x42e1a0
xor eax, eax
jmp 0x42e1c5
sbb eax, eax
or eax, 1
test eax, eax
je 0x42e40d
mov eax, dword [edi + 0x24]
xor edx, edx
mov ecx, dword [edi + 0x2c]
dec eax
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x10c], edx
mov dword [ebp - 4], edx
test eax, eax
jle 0x42e352
lea edi, [eax + ecx]
mov esi, ecx
xor eax, eax
mov dword [ebp - 0xac], eax
test edi, edi
je 0x42e218
cmp esi, edi
jae 0x42e242
cmp byte [esi], 0
je 0x42e242
push edi
mov edx, esi
lea ecx, [ebp - 0xb4]
call fcn.00404520
add esi, eax
add esp, 4
cmp dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xac]
je 0x42e242
inc eax
jmp 0x42e20a
mov edi, dword [ebp - 0xec]
lea edx, [eax + 1]
mov esi, dword [ebp - 0xd4]
mov dword [ebp - 0xb0], edx
test edx, edx
jle 0x42e2a5
mov ecx, 8
mov eax, edx
cmp edx, ecx
cmovl eax, ecx
mov dword [ebp - 0xb4], eax
test eax, eax
jle 0x42e2a5
mov ecx, dword [0x43a6d0]
test ecx, ecx
je 0x42e281
inc dword [ecx + 0x36c]
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [ebp - 0xb4]
add esp, 4
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x110], ecx
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0xfc]
add ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0x114], edx
mov dword [ebp - 0xac], eax
lea ecx, [eax - 2]
lea ecx, [ecx + edx*2]
mov dword [ebp - 0x11c], ecx
cmp eax, ecx
jae 0x42e347
mov esi, dword [ebp - 0xb4]
mov edi, dword [ebp - 0xe8]
test edi, edi
je 0x42e2f9
cmp esi, edi
jae 0x42e335
cmp byte [esi], 0
je 0x42e335
push edi
mov edx, esi
lea ecx, [ebp - 0xb4]
call fcn.00404520
mov ecx, dword [ebp - 0xb4]
add esi, eax
mov eax, dword [ebp - 0xac]
add esp, 4
test ecx, ecx
je 0x42e335
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xac], eax
cmp eax, dword [ebp - 0x11c]
jb 0x42e2f1
mov edi, dword [ebp - 0xec]
mov esi, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xb0]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0xbc]
lea ecx, [edx - 1]
xor edx, edx
test eax, eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb4], eax
cmovle ecx, edx
push ecx
mov dword [ebp - 0xb0], ecx
lea ecx, [edi + 0x5c]
push eax
call fcn.0042bc00
add esp, 8
mov dword [ebp - 0xe8], eax
test eax, eax
je 0x42e3a6
mov edx, dword [ebp - 0xb4]
xor ecx, ecx
test edx, edx
jle 0x42e3a6
mov esi, eax
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, edx
jl 0x42e390
mov esi, dword [ebp - 0xd4]
push dword [edi + 4]
xor edx, edx
mov ecx, edi
call fcn.0042a820
mov eax, dword [ebp - 0xb0]
add esp, 4
test eax, eax
jle 0x42e3e3
push eax
push dword [ebp - 0x10c]
xor edx, edx
mov ecx, edi
call fcn.0042a880
add esp, 8
test al, al
je 0x42e3e3
mov eax, dword [ebp - 0xb0]
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov ecx, dword [ebp - 0x10c]
test ecx, ecx
je 0x42e406
mov eax, dword [0x43a6d0]
test eax, eax
je 0x42e3fc
dec dword [eax + 0x36c]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xa8], 0
mov eax, dword [ebx + 0x14]
je 0x42e85e
test al, 0x20
je 0x42e85e
cmp byte [ebp - 0xd8], 0
jne 0x42e492
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0xb0], edx
cmp edx, eax
jle 0x42e480
test eax, eax
je 0x42e462
cdq
sub eax, edx
mov edx, dword [ebp - 0xb0]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1c]
jmp 0x42e467
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x18]
push eax
call fcn.00415fe0
mov edx, dword [ebp - 0xb0]
lea ecx, [edi + 0x18]
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.00404700
add esp, 8
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x42e80f
test dl, 0x40
je 0x42e4c7
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x42e4c7
call fcn.00409c40
mov edx, dword [ebx + 0x14]
test al, al
je 0x42e4c7
mov eax, 0x40
xor ecx, ecx
jmp 0x42e53f
test dl, dl
jns 0x42e50f
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x42e4ed
call fcn.00409c40
mov edx, dword [ebx + 0x14]
test al, al
je 0x42e4ed
mov eax, 0x80
lea ecx, [eax - 0x7d]
jmp 0x42e53f
mov eax, dword [0x43a6d0]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x42e50f
call fcn.00409c40
mov edx, dword [ebx + 0x14]
test al, al
je 0x42e50f
mov eax, 0x80
lea ecx, [eax - 0x7c]
jmp 0x42e53f
test edx, 0x80000
je 0x42e527
cmp byte [edi + 0xe6e], 0
je 0x42e527
mov eax, 0x80000
jmp 0x42e53a
test edx, 0x100
mov ecx, 0x100
mov eax, 0
cmovne eax, ecx
mov ecx, 0x16
test eax, eax
je 0x42e80f
xor esi, esi
mov dword [ebp - 0x74], eax
cmp byte [ebp - 0xd8], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x68], 0
mov word [ebp - 0x53], si
mov byte [ebp - 0x51], 0
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], esi
jne 0x42e573
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x5c], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x58], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x64], ecx
mov ecx, esi
mov byte [ebp - 0x54], 0
lea edx, [esi + eax*2]
call fcn.00404770
mov ecx, dword [ebp - 0xec]
mov edi, eax
mov dword [ebp - 0x50], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.00404770
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xec]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.00404770
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x74]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0x54]
add esp, 4
mov edx, dword [ebp - 0x50]
mov byte [ebp - 0xb6], al
cmp edx, edi
jne 0x42e5f5
test al, al
je 0x42e650
mov esi, dword [ebp - 0x60]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xac], eax
test edi, edi
je 0x42e60b
cmp esi, edi
jae 0x42e635
cmp byte [esi], 0
je 0x42e635
push edi
mov edx, esi
lea ecx, [ebp - 0xb4]
call fcn.00404520
add esi, eax
add esp, 4
cmp dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xac]
je 0x42e635
inc eax
jmp 0x42e5fd
mov edi, dword [ebp - 0xec]
mov edx, dword [ebp - 0x50]
mov dword [edi + 0x3c], eax
mov al, byte [ebp - 0xb6]
mov byte [edi + 0xe6c], 1
jmp 0x42e656
mov edi, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [ebp - 0xe8]
jne 0x42e665
test al, al
je 0x42e6ba
cmp ecx, edx
jne 0x42e66e
mov eax, dword [edi + 0x3c]
jmp 0x42e6b7
mov esi, dword [ebp - 0x60]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xac], eax
test edi, edi
je 0x42e684
cmp esi, edi
jae 0x42e6ae
cmp byte [esi], 0
je 0x42e6ae
push edi
mov edx, esi
lea ecx, [ebp - 0xb4]
call fcn.00404520
add esi, eax
add esp, 4
cmp dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xac]
je 0x42e6ae
inc eax
jmp 0x42e676
mov ecx, dword [ebp - 0x4c]
mov edi, dword [ebp - 0xec]
mov dword [edi + 0x40], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x11c]
jne 0x42e6d2
cmp byte [ebp - 0xb6], 0
je 0x42e809
cmp eax, ecx
jne 0x42e6db
mov eax, dword [edi + 0x40]
jmp 0x42e721
mov esi, dword [ebp - 0x60]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xac], eax
test edi, edi
je 0x42e6f1
cmp esi, edi
jae 0x42e71b
cmp byte [esi], 0
je 0x42e71b
push edi
mov edx, esi
lea ecx, [ebp - 0xb4]
call fcn.00404520
add esi, eax
add esp, 4
cmp dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xac]
je 0x42e71b
inc eax
jmp 0x42e6e3
mov edi, dword [ebp - 0xec]
cmp byte [ebp - 0xb6], 0
mov dword [edi + 0x44], eax
je 0x42e809
mov esi, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xdc]
cmp esi, ecx
jle 0x42e780
cmp byte [ebp - 0x138], 0
je 0x42e780
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x42e77d
test eax, eax
je 0x42e766
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x42e76e
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.00416050
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0x60]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0xb4], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0x11c], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0xe8], eax
cmp ecx, eax
jae 0x42e7ed
mov edi, dword [ebp - 0xb4]
nop dword [eax + eax]
cmp byte [edi], 0
je 0x42e7e1
push 0
mov edx, edi
lea ecx, [ebp - 0xb4]
call fcn.00404520
add edi, eax
add esp, 4
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x42e7e1
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0xe8]
jb 0x42e7b0
mov edi, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x11c]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x5c]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
mov esi, dword [ebp - 0xd4]
cmp byte [ebp - 0xd8], 0
jne 0x42e85b
mov ecx, dword [ebp - 0xc0]
mov eax, dword [edi + 0x20]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42e841
test dl, dl
je 0x42e83d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x42e841
add eax, 2
add ecx, 2
test dl, dl
jne 0x42e821
xor eax, eax
jmp 0x42e846
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x42e85e
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xfc], ecx
mov ecx, dword [edi + 8]
jmp 0x42e864
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xfc]
mov dword [edi + 0xe70], 0
test edx, edx
je 0x42e954
cmp byte [ebp - 0x138], 0
je 0x42e916
mov dword [ebp - 0xa0], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x90], eax
lea eax, [ecx + 1]
cmp dword [ebx + 0xc], eax
movlpd qword [ebp - 0x98], xmm0
cmovge eax, dword [ebx + 0xc]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0xa4]
push eax
xor eax, eax
movlpd qword [ebp - 0x84], xmm0
movlpd qword [ebp - 0x7c], xmm0
mov dword [ebp - 0xa4], 0x40000
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x9c], 0
call eax
mov eax, dword [ebp - 0x90]
add esp, 4
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x88]
mov dword [ebx + 0xc], eax
lea ecx, [eax - 1]
cmp dword [ebp - 0x8c], ecx
cmovl ecx, dword [ebp - 0x8c]
lea eax, [ecx + 1]
mov ecx, dword [ebx + 0xc]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebx + 0xc], ecx
cmp ecx, 1
jb 0x42e94d
jbe 0x42e942
lea eax, [ecx - 1]
push eax
push edx
push dword [ebp - 0xc0]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebx + 0xc]
add esp, 0xc
mov eax, dword [ebp - 0xc0]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0xcd], 1
mov eax, dword [ebp - 0xcc]
cmp byte [ebp - 0xc1], 0
je 0x42e970
cmp dword [esi + 0x1be0], eax
jne 0x42e970
call fcn.00405c40
mov ecx, dword [ebp - 0xc8]
test cl, cl
jne 0x42ea35
mov edx, dword [ebp - 0xcc]
lea ecx, [ebp - 0x44]
push 1
call fcn.00404ee0
movss xmm1, dword [0x437d54]
add esp, 4
mov ecx, 7
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
call fcn.004048a0
movss xmm2, dword [esi + 0x156c]
mov dl, 1
mov ecx, eax
call fcn.00404dc0
movss xmm7, dword [ebp - 0x44]
add esp, 0x10
movss xmm2, dword [ebp - 0x40]
movaps xmm4, xmm7
addss xmm4, dword [ebp - 0x144]
mov ecx, dword [ebp - 0xc8]
movaps xmm1, xmm2
addss xmm1, dword [ebp - 0x124]
movaps xmm3, xmm7
movss dword [ebp - 0x24], xmm7
addss xmm3, dword [esi + 0x1564]
movaps xmm0, xmm2
movss dword [ebp - 0x154], xmm4
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0x1c], xmm4
movss dword [ebp - 0xb4], xmm4
movss xmm4, dword [ebp - 0x144]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0xac], xmm1
movss dword [ebp - 0x18], xmm1
jmp 0x42eaa1
movss xmm1, dword [ebp - 0x44]
movss xmm4, dword [ebp - 0x144]
movaps xmm2, xmm1
movss xmm0, dword [ebp - 0x40]
addss xmm2, xmm4
mov eax, dword [ebp - 0x100]
movss dword [ebp - 0x24], xmm1
movss dword [ebp - 0x20], xmm0
movss xmm3, dword [eax + 0xd0]
movaps xmm1, xmm2
movss dword [ebp - 0x154], xmm1
movss dword [ebp - 0x1c], xmm1
movaps xmm1, xmm0
addss xmm1, dword [ebp - 0x124]
movss dword [ebp - 0xb4], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0xac], xmm0
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [eax + 0xd4]
cmp byte [ebp - 0xe1], 0
xorps xmm5, xmm5
movss dword [ebp - 0x10c], xmm0
xorps xmm6, xmm6
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x110], xmm3
movss dword [ebp - 0x104], xmm3
movss dword [ebp - 0xe8], xmm1
movss dword [ebp - 0x34], xmm3
movss dword [ebp - 0x140], xmm0
movss dword [ebp - 0xb0], xmm5
je 0x42eaf8
mov edx, dword [edi + 0x20]
mov dword [ebp - 0xc0], edx
jmp 0x42eafe
mov edx, dword [ebp - 0xc0]
cmp byte [ebp - 0xb7], 0
jne 0x42ed2f
cmp byte [ebp - 0xf4], 0
jne 0x42ed2f
test cl, cl
je 0x42eb7f
mov edi, dword [ebp - 0xc0]
xor ecx, ecx
mov dl, byte [edx]
inc edi
test dl, dl
je 0x42eb42
nop dword [eax + eax]
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x42eb30
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0xbc], edi
cmp al, 0xa
je 0x42eb55
cmp al, 0xd
je 0x42eb55
inc ecx
mov edx, dword [ebp - 0xbc]
movaps xmm0, xmm4
movd xmm5, ecx
cvtdq2ps xmm5, xmm5
movss dword [ebp - 0x140], xmm0
mulss xmm5, dword [esi + 0x1944]
movss dword [ebp - 0xb0], xmm5
jmp 0x42ebc7
mov eax, dword [ebp - 0xcc]
cmp dword [esi + 0x1be0], eax
jne 0x42eb9a
mov edx, dword [edi + 8]
mov edi, dword [ebp - 0xc0]
add edx, edi
jmp 0x42ebb2
mov ecx, edx
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42eba0
mov edi, dword [ebp - 0xc0]
sub ecx, edx
lea edx, [edi + ecx]
mov eax, edx
mov dword [ebp - 0xbc], edx
sub eax, edi
cmp eax, 0x200000
jge 0x42f8df
movss xmm1, dword [0x437d54]
xor ecx, ecx
call fcn.004048a0
cmp byte [ebp - 0xc8], 0
mov ecx, edx
movss xmm2, dword [esi + 0x1944]
lea edx, [ebp - 0x24]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xb4], 0
cmovne edx, dword [ebp - 0xb4]
test dword [ebp - 0xac], 0xff000000
mov edi, dword [eax + 0x23c]
mov eax, dword [esi + 0x1940]
mov dword [ebp - 0xdc], eax
je 0x42f8d9
cmp dword [ebp - 0xbc], 0
jne 0x42ec5a
mov ecx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [ebp - 0xb4], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42ec41
sub ecx, dword [ebp - 0xb4]
add ecx, dword [ebp - 0xc0]
mov eax, dword [esi + 0x1940]
cmp dword [ebp - 0xc0], ecx
je 0x42f8d9
test eax, eax
jne 0x42ec76
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xdc], eax
ucomiss xmm2, dword [0x437cdc]
lahf
test ah, 0x44
jp 0x42ec8b
mov eax, dword [edi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [edi + 0x60]
movups xmmword [ebp - 0x130], xmm0
test edx, edx
je 0x42eced
movss xmm0, dword [ebp - 0x130]
maxss xmm0, dword [edx]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x12c]
maxss xmm0, dword [edx + 4]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [ebp - 0x128]
minss xmm0, dword [edx + 8]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [ebp - 0x124]
minss xmm0, dword [edx + 0xc]
movss dword [ebp - 0x124], xmm0
push dword [ebp - 0x10c]
test edx, edx
push dword [ebp - 0x110]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x130]
push ecx
push dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xdc]
push eax
push dword [ebp - 0xac]
push edi
call fcn.00424470
jmp 0x42f8d9
mov eax, dword [edi + 8]
xorps xmm7, xmm7
mov ecx, dword [edi + 0x14]
add eax, edx
xor edx, edx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xcc], ecx
movss dword [ebp - 0x148], xmm6
mov dword [ebp - 0x138], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xdc], 0xfffffc18
mov dword [ebp - 0xfc], 0xfffffc18
cmp byte [ebp - 0xb7], dl
je 0x42ed9b
mov eax, dword [edi + 0x3c]
mov edx, 1
mov dword [ebp - 0xdc], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x138], eax
cmp byte [ebp - 0xf4], 0
je 0x42edce
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0xcc]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0xfc], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xf8], eax
mov esi, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xc8]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
test si, si
mov dword [ebp - 0xe0], eax
mov esi, dword [ebp - 0xd4]
je 0x42ee67
mov edi, dword [ebp - 0xcc]
mov esi, dword [ebp - 0xdc]
movzx edi, word [edi]
cmp di, 0xa
jne 0x42ee41
inc eax
mov dword [ebp - 0xe0], eax
cmp esi, 0xffffffff
jne 0x42ee25
cmp ecx, dword [ebp - 0x138]
jb 0x42ee25
dec edx
mov esi, eax
test edx, edx
jle 0x42ee55
cmp dword [ebp - 0xfc], 0xffffffff
jne 0x42ee41
cmp ecx, dword [ebp - 0xf8]
jb 0x42ee41
dec edx
mov dword [ebp - 0xfc], eax
test edx, edx
jle 0x42ee55
movzx eax, word [ecx + 2]
add ecx, 2
mov edi, eax
test ax, ax
mov eax, dword [ebp - 0xe0]
jne 0x42ee04
mov edi, dword [ebp - 0xec]
mov dword [ebp - 0xdc], esi
mov esi, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xcc]
inc eax
cmp dword [ebp - 0xdc], 0xffffffff
mov ecx, eax
mov dword [ebp - 0xe0], eax
cmovne ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xfc]
cmp eax, 0xffffffff
mov dword [ebp - 0x10c], ecx
cmove eax, dword [ebp - 0xe0]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x138]
mov ecx, eax
cmp eax, edx
jbe 0x42eebe
nop dword [eax]
cmp word [ecx - 2], 0xa
je 0x42eebe
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x42eeb0
movaps xmm4, xmm6
mov eax, dword [0x43a6d0]
movaps xmm1, xmm6
movss dword [ebp - 0xdc], xmm4
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x138]
jae 0x42ef54
mov edi, dword [ebp - 0x138]
mov esi, edx
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x42ef0a
maxss xmm4, xmm1
movaps xmm1, xmm6
jmp 0x42ef2c
cmp edx, 0xd
je 0x42ef2c
mov edx, eax
cmp edx, dword [esi]
jge 0x42ef1f
mov eax, dword [esi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x42ef24
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp ecx, edi
jb 0x42eef4
comiss xmm1, xmm4
mov edi, dword [ebp - 0xec]
mov esi, dword [ebp - 0xd4]
movss dword [ebp - 0xdc], xmm4
jbe 0x42ef54
movaps xmm4, xmm1
movss dword [ebp - 0xdc], xmm1
cmp dword [ebp - 0xfc], 0
movd xmm3, dword [ebp - 0x10c]
movss xmm0, dword [esi + 0x1944]
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm0
movss dword [ebp - 0x11c], xmm3
jl 0x42f047
mov eax, dword [ebp - 0xf8]
mov ecx, eax
mov edx, dword [ebp - 0xcc]
cmp eax, edx
jbe 0x42efa0
cmp word [ecx - 2], 0xa
je 0x42efa0
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x42ef92
movaps xmm7, xmm6
mov eax, dword [0x43a6d0]
movaps xmm1, xmm6
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0xf8]
jae 0x42f020
mov esi, dword [ebp - 0xf8]
mov edi, edx
nop
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x42efe6
maxss xmm7, xmm1
movaps xmm1, xmm6
jmp 0x42f008
cmp edx, 0xd
je 0x42f008
mov edx, eax
cmp edx, dword [edi]
jge 0x42effb
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x42f000
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp ecx, esi
jb 0x42efd0
comiss xmm1, xmm7
mov edi, dword [ebp - 0xec]
mov esi, dword [ebp - 0xd4]
jbe 0x42f020
movaps xmm7, xmm1
movd xmm3, dword [ebp - 0xfc]
movss xmm0, dword [esi + 0x1944]
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm0
movss dword [ebp - 0x148], xmm3
movss xmm3, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0xc8]
movss xmm1, dword [ebp - 0x144]
test cl, cl
je 0x42f07b
movd xmm5, dword [ebp - 0xe0]
cvtdq2ps xmm5, xmm5
mulss xmm5, xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x140], xmm0
movss dword [ebp - 0xb0], xmm5
cmp byte [ebp - 0xb7], 0
je 0x42f1aa
cmp byte [edi + 0xe6c], 0
je 0x42f1aa
test dword [ebx + 0x14], 0x1000
jne 0x42f0f6
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm1
comiss xmm2, xmm4
subss xmm1, dword [esi + 0x1564]
mulss xmm0, dword [0x437d08]
movss dword [ebp - 0x144], xmm1
movaps xmm1, xmm4
jbe 0x42f0d3
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x42f0e4
subss xmm1, dword [ebp - 0x144]
comiss xmm1, xmm2
jb 0x42f0fd
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x42f0fd
mov dword [edi + 0x38], 0
test cl, cl
je 0x42f196
movss xmm2, dword [ebp - 0x14c]
movaps xmm0, xmm3
subss xmm0, dword [esi + 0x1944]
comiss xmm2, xmm0
jbe 0x42f12e
movss xmm3, dword [ebp - 0x124]
movaps xmm2, xmm6
maxss xmm2, xmm0
jmp 0x42f152
movaps xmm0, xmm3
movss xmm3, dword [ebp - 0x124]
subss xmm0, xmm3
comiss xmm0, xmm2
jb 0x42f152
movss xmm2, dword [esi + 0x1568]
addss xmm2, xmm2
addss xmm2, xmm0
comiss xmm6, xmm2
movss xmm1, dword [esi + 0x1568]
jbe 0x42f164
movaps xmm1, xmm6
jmp 0x42f178
addss xmm1, xmm1
addss xmm1, xmm5
subss xmm1, xmm3
maxss xmm1, xmm6
minss xmm1, xmm2
mov eax, dword [ebp - 0x100]
movss xmm0, dword [eax + 0x5c]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
movss dword [eax + 0x5c], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x104], xmm0
cmp byte [ebp - 0xf4], 0
movss xmm5, dword [edi + 0x38]
movss dword [ebp - 0xe0], xmm5
je 0x42f497
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0xcc]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xb7], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0xcc]
lea edx, [eax + edx*2]
mov dword [ebp - 0xf4], edx
je 0x42f1ff
movss xmm1, dword [0x437d54]
jmp 0x42f207
movss xmm1, dword [0x437d20]
mov ecx, 0x2f
call fcn.004048a0
cmp byte [ebp - 0xc8], 0
xorps xmm0, xmm0
mov dword [ebp - 0x10c], eax
je 0x42f22b
xorps xmm5, xmm5
xorps xmm6, xmm6
jmp 0x42f23b
movss xmm5, dword [0x437e08]
movss xmm6, dword [0x437d88]
movss xmm3, dword [ebp - 0x30]
movss dword [ebp - 0x138], xmm6
movss dword [ebp - 0xf8], xmm5
addss xmm3, dword [ebp - 0x148]
addss xmm7, dword [ebp - 0x104]
subss xmm3, xmm0
subss xmm7, dword [ebp - 0xe0]
movss dword [ebp - 0x148], xmm3
cmp esi, edx
jae 0x42f486
movss xmm4, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xd4]
mov edi, dword [ebp - 0x10c]
movaps xmm0, xmm4
addss xmm0, dword [ecx + 0x1944]
comiss xmm3, xmm0
ja 0x42f480
movss xmm0, dword [ebp - 0x40]
comiss xmm0, xmm3
jbe 0x42f2cf
cmp esi, edx
jae 0x42f448
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x42f448
cmp esi, edx
jb 0x42f2b6
jmp 0x42f448
xorps xmm0, xmm0
mov eax, dword [0x43a6d0]
xorps xmm4, xmm4
xorps xmm1, xmm1
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp esi, dword [ebp - 0xf4]
jae 0x42f342
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x42f32f
cmp ecx, 0xd
je 0x42f325
cmp ecx, dword [edx]
jge 0x42f318
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x42f31d
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, dword [ebp - 0xf4]
jb 0x42f2f8
jmp 0x42f339
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
mov ecx, dword [ebp - 0xd4]
xorps xmm0, xmm0
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x42f37b
mov eax, dword [ecx + 0x1940]
cmp dword [eax], 0x20
jle 0x42f363
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x42f368
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x437d1c]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm4, dword [ebp - 0xac]
addss xmm1, xmm7
addss xmm7, dword [0x437cdc]
movaps xmm2, xmm5
movaps xmm0, xmm6
subss xmm2, dword [ecx + 0x1944]
movss xmm6, dword [ebp - 0x154]
addss xmm0, xmm3
minss xmm1, xmm6
maxss xmm7, dword [ebp - 0x44]
addss xmm2, xmm3
minss xmm0, xmm4
movss dword [ebp - 0x128], xmm1
movss dword [ebp - 0x130], xmm7
maxss xmm2, dword [ebp - 0x40]
comiss xmm0, dword [ebp - 0x40]
movss dword [ebp - 0x12c], xmm2
movss dword [ebp - 0x124], xmm0
jbe 0x42f442
comiss xmm4, xmm2
jbe 0x42f442
comiss xmm1, dword [ebp - 0x44]
jbe 0x42f442
comiss xmm6, xmm7
jbe 0x42f442
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x128]
push edi
push eax
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 0x23c]
call fcn.004205c0
movss xmm3, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xd4]
movss dword [ebp - 0x104], xmm3
movss xmm3, dword [ebp - 0x148]
mov edx, dword [ebp - 0xf4]
movss xmm7, dword [ebp - 0x104]
movss xmm5, dword [ebp - 0xf8]
movss xmm6, dword [ebp - 0x138]
addss xmm3, dword [ecx + 0x1944]
subss xmm7, dword [ebp - 0xe0]
movss dword [ebp - 0x148], xmm3
cmp esi, edx
jb 0x42f290
mov edi, dword [ebp - 0xec]
mov esi, dword [ebp - 0xd4]
xorps xmm6, xmm6
movss xmm5, dword [ebp - 0xe0]
cmp byte [ebp - 0xc8], 0
mov edx, dword [ebp - 0xbc]
jne 0x42f4b9
mov eax, edx
sub eax, dword [ebp - 0xc0]
cmp eax, 0x200000
jge 0x42f720
mov eax, dword [0x43a6d0]
movss xmm7, dword [0x437d54]
movups xmm2, xmmword [eax + 0x15f0]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1528]
movups xmmword [ebp - 0x130], xmm2
jbe 0x42f4ed
movaps xmm0, xmm6
jmp 0x42f4f4
movaps xmm0, xmm7
minss xmm0, xmm2
movss xmm2, dword [0x437dd8]
movss xmm4, dword [0x437d1c]
movss xmm3, dword [ebp - 0x12c]
comiss xmm6, xmm3
mulss xmm0, xmm2
addss xmm0, xmm4
cvttss2si ecx, xmm0
jbe 0x42f522
movaps xmm0, xmm6
jmp 0x42f529
movaps xmm0, xmm7
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x128]
mulss xmm0, xmm2
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x42f54c
movaps xmm0, xmm6
jmp 0x42f553
movaps xmm0, xmm7
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x42f56e
movaps xmm0, xmm6
jmp 0x42f575
movaps xmm0, xmm7
minss xmm0, xmm1
mulss xmm0, xmm2
mov dword [ebp - 0xac], edx
mov edx, dword [esi + 0x1940]
movss xmm2, dword [esi + 0x1944]
addss xmm0, xmm4
mov dword [ebp - 0x154], edx
lea edx, [ebp - 0x24]
mov dword [ebp - 0x10c], 0
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x104]
subss xmm0, xmm5
shl eax, 0x18
or eax, ecx
mov ecx, dword [ebp - 0x100]
cmp byte [ebp - 0xc8], 0
mov dword [ebp - 0xf8], eax
cmovne edx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x23c]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [ebp - 0x30]
mov dword [ebp - 0x148], ecx
subss xmm0, xmm6
movss dword [ebp - 0x124], xmm0
test eax, 0xff000000
je 0x42f720
cmp dword [ebp - 0xbc], 0
jne 0x42f643
mov ecx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [ebp - 0x10c], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42f620
sub ecx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0xc0]
add eax, ecx
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0xac], eax
jmp 0x42f649
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xc0], eax
je 0x42f720
cmp dword [esi + 0x1940], 0
jne 0x42f66a
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x154], eax
ucomiss xmm2, xmm6
lahf
test ah, 0x44
jp 0x42f67b
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x118], xmm0
test edx, edx
je 0x42f6dd
movss xmm0, dword [ebp - 0x118]
maxss xmm0, dword [edx]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [ebp - 0x114]
maxss xmm0, dword [edx + 4]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [ebp - 0x110]
minss xmm0, dword [edx + 8]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [ebp - 0x10c]
minss xmm0, dword [edx + 0xc]
movss dword [ebp - 0x10c], xmm0
push dword [ebp - 0x124]
test edx, edx
mov edx, dword [ebp - 0xac]
push dword [ebp - 0x128]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x118]
push edx
push dword [ebp - 0xc0]
push eax
push dword [ebp - 0xf8]
push ecx
mov ecx, dword [ebp - 0x154]
call fcn.00424470
cmp byte [ebp - 0xb7], 0
je 0x42f8d9
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0xb2], 0
je 0x42f792
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x42f792
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x128], xmm0
fld qword [ebp - 0x128]
fld qword [0x437d80]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x437d40]
fstp qword [ebp - 0x128]
movsd xmm1, qword [ebp - 0x128]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x42f792
xor cl, cl
jmp 0x42f794
mov cl, 1
movss xmm0, dword [ebp - 0xdc]
movss xmm6, dword [0x437d54]
addss xmm0, dword [ebp - 0x34]
subss xmm0, dword [ebp - 0xe0]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x11c]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x437cdc]
movss dword [ebp - 0x10c], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x24], xmm1
addss xmm4, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0x1c], xmm4
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [ebp - 0x11c], xmm2
movaps xmm0, xmm2
movaps xmm3, xmm2
subss xmm0, dword [esi + 0x1944]
subss xmm3, dword [0x437d70]
addss xmm0, dword [0x437d1c]
movss dword [ebp - 0x18], xmm3
movss dword [ebp - 0x20], xmm0
test cl, cl
je 0x42f8b4
comiss xmm3, dword [ebp - 0x40]
jbe 0x42f8b4
movss xmm5, dword [ebp - 0xe8]
comiss xmm5, xmm0
jbe 0x42f8b4
comiss xmm4, dword [ebp - 0x44]
jbe 0x42f8b4
movss xmm0, dword [ebp - 0xb4]
comiss xmm0, xmm1
jbe 0x42f8b4
sub esp, 8
movss dword [ebp - 0x128], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x124], xmm3
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.004048a0
add esp, 4
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 0x23c]
call fcn.004203c0
movss xmm1, dword [ebp - 0x10c]
movss xmm2, dword [ebp - 0x11c]
movss xmm6, dword [0x437d54]
cmp byte [ebp - 0xd8], 0
jne 0x42f8d9
subss xmm2, dword [esi + 0x1944]
subss xmm1, xmm6
movss dword [esi + 0x2f4c], xmm2
movss dword [esi + 0x2f48], xmm1
mov edi, dword [ebp - 0xc0]
cmp byte [ebp - 0x158], 0
je 0x42f8ed
call fcn.0040f2b0
cmp byte [ebp - 0xc8], 0
je 0x42f99e
mov ecx, dword [0x43a6d0]
movss xmm1, dword [ebp - 0xb0]
addss xmm1, dword [esi + 0x1568]
movss xmm3, dword [ebp - 0x140]
mov eax, dword [ecx + 0x1ba8]
movss dword [ebp - 0x128], xmm3
movss dword [ebp - 0x124], xmm1
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1ba8]
cmp byte [eax + 0x8f], 0
jne 0x42f994
movss xmm0, dword [eax + 0xd4]
lea ecx, [ebp - 0x128]
movss xmm2, dword [eax + 0xd0]
addss xmm1, xmm0
addss xmm3, xmm2
movss dword [ebp - 0x24], xmm2
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x18], xmm1
movss xmm1, dword [0x437e08]
movss dword [ebp - 0x1c], xmm3
call fcn.0040f590
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x24]
call fcn.0040f6c0
add esp, 8
call fcn.00409ed0
call fcn.0040fb60
cmp byte [esi + 0x2fa0], 0
je 0x42f9dc
cmp byte [ebp - 0x158], 0
jne 0x42f9dc
mov eax, dword [0x43a6d0]
lea ecx, [ebp - 0x34]
push dword [ebp - 0xbc]
mov edx, edi
mov dword [eax + 0x2fb8], 0x437c9c
mov dword [eax + 0x2fbc], 0x437c98
call fcn.00414580
add esp, 4
movss xmm0, dword [ebp - 0x15c]
comiss xmm0, dword [0x437cdc]
jbe 0x42fa35
movss xmm0, dword [ebp - 0x3c]
xor edx, edx
addss xmm0, dword [esi + 0x157c]
mov ecx, dword [ebp - 0x150]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [ebp - 0x40]
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0x124], xmm0
push dword [ebp - 0x124]
push dword [ebp - 0x128]
push 1
call fcn.00404a00
add esp, 0xc
mov dl, byte [ebp - 0xcd]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x42fa5f
test ecx, 0x8000000
jne 0x42fa5f
mov eax, dword [0x43a6d0]
or dword [eax + 0x1c50], 4
mov word [eax + 0x1bf0], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0xa8]
cmovne eax, ecx
jmp 0x42c623