Function at 0x40d7f0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x28
push esi
push edi
mov edi, dword [0x542698]
mov dword [esp + 0xc], edi
mov edx, dword [edi + 0x5ab8]
lea eax, [edi + 0x5ac0]
sub edx, 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], edx
js 0x40d8a0
lea eax, [edx + edx*4]
shl eax, 2
mov dword [esp + 0x14], eax
nop dword [eax]
mov ecx, dword [edi + 0x5ac0]
cmp dword [ecx + eax + 4], 7
jne 0x40d888
mov esi, ecx
sub ecx, esi
add ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea eax, [ecx + ecx*4]
lea edx, [esi + eax*4]
mov eax, dword [edi + 0x5ab8]
sub eax, ecx
lea eax, [eax + eax*4]
lea eax, [eax*4 - 0x14]
push eax
lea eax, [edx + 0x14]
push eax
push edx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [esp + 0x20]
add esp, 0xc
dec dword [edi + 0x5ab8]
mov edx, dword [esp + 0x18]
dec edx
sub eax, 0x14
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], eax
test edx, edx
jns 0x40d830
lea eax, [edi + 0x5ac0]
jmp 0x40d8a4
mov dword [esp + 0x1c], eax
xor esi, esi
cmp dword [edi + 0x5ab8], esi
jle 0x40d8e0
xor ecx, ecx
mov dword [esp + 0x18], ecx
mov eax, dword [eax]
add eax, ecx
cmp dword [eax + 4], 0
jne 0x40d8cc
push eax
mov eax, dword [eax + 0xc]
push edi
call eax
mov ecx, dword [esp + 0x20]
add esp, 8
mov eax, dword [esp + 0x1c]
inc esi
add ecx, 0x14
mov dword [esp + 0x18], ecx
cmp esi, dword [edi + 0x5ab8]
jl 0x40d8b4
mov esi, dword [0x542698]
cmp byte [esi + 0x4a], 0
je 0x40d8f6
test byte [esi + 0xc], 2
jne 0x40d8f6
mov byte [esi + 0x4a], 0
cmp byte [esi + 0x5a81], 0
lea eax, [esi + 0x20]
jne 0x40d961
mov ecx, dword [eax]
test ecx, ecx
je 0x40d95a
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push eax
call fcn.00409f70
mov ecx, eax
add esp, 8
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x40d957
mov edx, dword [esp + 0x18]
test edx, edx
je 0x40d939
call fcn.0041d1e0
mov ecx, dword [esp + 0x14]
mov eax, dword [0x542698]
test eax, eax
je 0x40d948
dec dword [eax + 0xac]
push dword [0x54269c]
push ecx
call fcn.00409220
add esp, 8
lea eax, [esi + 0x20]
mov byte [esi + 0x5a81], 1
movss xmm0, dword [esi + 0x5a84]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x40d9fc
subss xmm0, dword [esi + 0x18]
comiss xmm1, xmm0
movss dword [esi + 0x5a84], xmm0
jb 0x40d9fc
mov eax, dword [eax]
mov dword [esp + 0x14], eax
test eax, eax
je 0x40d9eb
mov eax, dword [0x542698]
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], 0
mov dword [eax + 0x5a84], 0
call fcn.0041d400
mov ecx, dword [esp + 0x14]
mov edx, 0x53f348
mov dword [esp + 0x10], eax
call fcn.00409e60
mov dword [esp + 0x14], eax
test eax, eax
je 0x40d9f2
push eax
push dword [esp + 0x1c]
push 1
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push dword [esp + 0x24]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
jmp 0x40d9f2
mov byte [esi + 0x94], 1
mov dword [esi + 0x5a84], 0
movss xmm0, dword [edi + 0x18]
xor eax, eax
inc dword [edi + 0x3df8]
cvtps2pd xmm0, xmm0
mov byte [edi + 0x3e04], 1
mov word [edi + 0x5a46], ax
mov dword [edi + 0x3e6c], eax
addsd xmm0, qword [edi + 0x3df0]
movsd qword [edi + 0x3df0], xmm0
mov ecx, dword [edi + 0x5a58]
test ecx, ecx
jns 0x40da56
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x5a54]
call fcn.0041e840
mov dword [edi + 0x5a54], 0
mov ecx, 0x3c
mov eax, dword [edi + 0x5c68]
movss xmm1, dword [edi + 0x18]
movaps xmm0, xmm1
subss xmm0, dword [edi + eax*4 + 0x5b78]
addss xmm0, dword [edi + 0x5c70]
movss dword [edi + 0x5c70], xmm0
movss dword [edi + eax*4 + 0x5b78], xmm1
mov eax, dword [edi + 0x5c68]
inc eax
movss xmm1, dword [edi + 0x5c70]
cdq
idiv ecx
mov eax, dword [edi + 0x5c6c]
movss xmm0, dword [0x53f828]
inc eax
cmp eax, ecx
mov dword [edi + 0x5c68], edx
movss dword [esp + 8], xmm0
cmovl ecx, eax
comiss xmm1, dword [0x53f700]
mov dword [edi + 0x5c6c], ecx
jbe 0x40daed
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss xmm0, dword [0x53f788]
divss xmm0, xmm1
movss dword [edi + 0x98], xmm0
mov ecx, dword [edi + 0x3e20]
test ecx, ecx
jns 0x40db1b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x3e1c]
call fcn.0041ef00
mov dword [edi + 0x3e1c], 0
mov cl, byte [edi + 0x46]
call fcn.00416fe0
mov esi, dword [0x542698]
mov eax, dword [esi + 0x47f8]
mov edx, dword [eax]
mov dword [edx], 5
mov dword [edx + 4], 0
mov dword [edx + 8], 0
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
mov dword [edx + 0xc], eax
mov dword [edx + 0x10], ecx
cmp dword [esi + 0x47f0], 0
jle 0x40dc3f
xor edi, edi
nop word [eax + eax]
mov eax, dword [esi + 0x47f8]
xorps xmm2, xmm2
mov edx, dword [eax + edi*4]
inc edi
mov eax, dword [edx + 0x8c]
mov ecx, dword [edx + 0x90]
mov dword [edx + 0x7c], eax
mov eax, dword [edx + 0x94]
mov dword [edx + 0x80], ecx
mov ecx, dword [edx + 0x98]
mov dword [edx + 0x84], eax
mov dword [edx + 0x88], ecx
mov dword [edx + 0x94], 0
mov dword [edx + 0x98], 0
mov dword [edx + 0x8c], 0
mov dword [edx + 0x90], 0
movss xmm0, dword [edx + 0x80]
addss xmm0, dword [edx + 8]
movss xmm1, dword [edx + 0x7c]
addss xmm1, dword [edx + 4]
movss dword [edx + 0x18], xmm0
movss xmm0, dword [edx + 0xc]
movss dword [edx + 0x14], xmm1
xorps xmm1, xmm1
subss xmm0, dword [edx + 0x7c]
addss xmm0, dword [edx + 0x84]
maxss xmm2, xmm0
movss xmm0, dword [edx + 0x10]
subss xmm0, dword [edx + 0x80]
addss xmm0, dword [edx + 0x88]
movss dword [edx + 0x1c], xmm2
maxss xmm1, xmm0
movss dword [edx + 0x20], xmm1
cmp edi, dword [esi + 0x47f0]
jl 0x40db70
mov edi, dword [esp + 0xc]
mov eax, dword [edi + 0x2c]
mov byte [eax + 0x10], 1
mov ecx, dword [esi + 0x38]
test ecx, ecx
jne 0x40dc55
mov eax, dword [esi + 0x2c]
mov eax, dword [eax + 0x44]
mov ecx, dword [eax]
call fcn.004152c0
movss xmm7, dword [esp + 8]
movss xmm4, dword [0x53f840]
movaps xmm6, xmm7
mov edx, dword [edi + 0x47f0]
movaps xmm5, xmm4
test edx, edx
jle 0x40dcc4
mov ecx, dword [edi + 0x47f8]
nop
mov eax, dword [ecx]
movss xmm3, dword [eax + 4]
comiss xmm7, xmm3
movss xmm2, dword [eax + 8]
movaps xmm0, xmm3
addss xmm0, dword [eax + 0xc]
movaps xmm1, xmm2
addss xmm1, dword [eax + 0x10]
jbe 0x40dca4
movaps xmm7, xmm3
comiss xmm6, xmm2
jbe 0x40dcac
movaps xmm6, xmm2
comiss xmm0, xmm4
jbe 0x40dcb4
movaps xmm4, xmm0
comiss xmm1, xmm5
jbe 0x40dcbc
movaps xmm5, xmm1
add ecx, 4
sub edx, 1
jne 0x40dc80
mov eax, dword [edi + 0x3854]
movss xmm1, dword [edi + 0x3858]
movss dword [esp + 0x20], xmm7
movss dword [esp + 0x24], xmm6
movss dword [esp + 0x28], xmm4
movss dword [esp + 0x2c], xmm5
movups xmm0, xmmword [esp + 0x20]
mov dword [edi + 0x3bf8], eax
movups xmmword [edi + 0x3c00], xmm0
movss xmm0, dword [edi + 0x3bfc]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40ddf9
movss dword [edi + 0x3bfc], xmm1
xor esi, esi
nop dword [eax + eax]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
test esi, esi
je 0x40ddb2
movss xmm1, dword [edi + 0x3bfc]
minss xmm1, xmm0
divss xmm1, xmm0
movss xmm0, dword [0x53f788]
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_acos_precise
movss xmm1, dword [0x53f7ac]
sub esp, 8
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp + 0x28], xmm0
fld qword [esp + 0x28]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
add esp, 8
cvtpd2ps xmm0, xmm0
cvttss2si eax, xmm0
inc eax
cdq
sub eax, edx
and eax, 0xfffffffe
cmp eax, 4
jge 0x40dda3
mov eax, 4
jmp 0x40ddb7
cmp eax, 0x200
mov ecx, 0x200
cmovg eax, ecx
jmp 0x40ddb7
mov eax, 0x30
mov byte [esi + edi + 0x3da4], al
inc esi
cmp esi, 0x40
jl 0x40dd20
movsd xmm0, qword [0x53f798]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
movss xmm1, dword [0x53f788]
cvtsd2ss xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [edi + 0x3bfc]
divss xmm0, xmm1
movss dword [edi + 0x3da0], xmm0
xor edx, edx
mov dword [edi + 0x3c10], 0
cmp byte [edi + 0x3850], dl
je 0x40de1c
mov dword [edi + 0x3c10], 1
mov edx, 1
cmp byte [edi + 0x3851], 0
mov ecx, edx
je 0x40de3e
mov eax, dword [edi + 0x3bdc]
mov eax, dword [eax + 0x30]
test byte [eax], 4
jne 0x40de3e
or ecx, 2
mov dword [edi + 0x3c10], ecx
cmp byte [edi + 0x3852], 0
je 0x40de50
or ecx, 4
mov dword [edi + 0x3c10], ecx
test byte [edi + 0xc], 8
je 0x40de5f
or ecx, 8
mov dword [edi + 0x3c10], ecx
xor esi, esi
cmp dword [edi + 0x47f0], esi
jle 0x40de92
nop dword [eax]
mov eax, dword [edi + 0x47f8]
push 0x2c
push 0
mov eax, dword [eax + esi*4]
add eax, 0x38
push eax
call sub.VCRUNTIME140.dll_memset
inc esi
add esp, 0xc
cmp esi, dword [edi + 0x47f0]
jl 0x40de70
cmp byte [edi + 0x4994], 0
je 0x40decc
mov eax, dword [edi + 0x49ac]
cmp eax, dword [edi + 0x3ec4]
jne 0x40decc
mov ecx, dword [0x542698]
cmp dword [ecx + 0x3ec4], eax
jne 0x40debd
mov dword [ecx + 0x3ec8], eax
cmp dword [ecx + 0x3eec], eax
jne 0x40decc
mov byte [ecx + 0x3ef0], 1
cmp dword [edi + 0x3eb4], 0
lea eax, [edi + 0x3eb0]
mov ecx, dword [eax]
jne 0x40dee9
mov dword [edi + 0x3ebc], 0
jmp 0x40def9
mov edx, ecx
mov esi, eax
test ecx, ecx
je 0x40df07
cmp dword [edi + 0x3ec4], ecx
jne 0x40df07
mov dword [edi + 0x3ec0], 0
mov edx, ecx
mov esi, eax
movss xmm1, dword [edi + 0x18]
test edx, edx
je 0x40df3e
movaps xmm0, xmm1
addss xmm0, dword [edi + 0x3ebc]
movss dword [edi + 0x3ebc], xmm0
cmp dword [edi + 0x3ec4], edx
je 0x40df3e
movaps xmm0, xmm1
addss xmm0, dword [edi + 0x3ec0]
movss dword [edi + 0x3ec0], xmm0
mov eax, dword [edi + 0x3ec4]
movaps xmm2, xmm1
mov dword [edi + 0x3eb4], edx
mov dword [esi], 0
mov word [edi + 0x3eb8], 0
test eax, eax
je 0x40df94
cmp dword [edi + 0x3ec8], eax
je 0x40df94
cmp dword [edi + 0x3eec], eax
jne 0x40df94
test byte [edi + 0x5b1c], 1
je 0x40df86
push str.NewFrame__:_ClearActiveID___because_it_isnt_marked_alive_anymore__n
call fcn.0041dce0
add esp, 4
xor edx, edx
xor ecx, ecx
call fcn.0040ca80
movss xmm2, dword [edi + 0x18]
mov esi, dword [edi + 0x3ec4]
test esi, esi
je 0x40dfb1
movaps xmm0, xmm2
addss xmm0, dword [edi + 0x3ecc]
movss dword [edi + 0x3ecc], xmm0
mov eax, dword [edi + 0x3ee0]
addss xmm2, dword [edi + 0x3efc]
mov dword [edi + 0x3ef4], eax
mov al, byte [edi + 0x3ed4]
mov byte [edi + 0x3ef1], al
mov eax, dword [edi + 0x59cc]
movss dword [edi + 0x3efc], xmm2
mov dword [edi + 0x3eec], esi
mov dword [edi + 0x3ec8], 0
mov byte [edi + 0x3ed5], 0
mov byte [edi + 0x3ef0], 0
mov byte [edi + 0x3ed0], 0
test eax, eax
je 0x40e016
cmp esi, eax
je 0x40e016
mov dword [edi + 0x59cc], 0
test esi, esi
jne 0x40e035
mov dword [edi + 0x46c8], esi
mov dword [edi + 0x46c0], esi
mov byte [edi + 0x46c4], 0
mov dword [edi + 0x46c8], esi
jmp 0x40e05e
mov eax, dword [edi + 0x46c8]
test eax, eax
je 0x40e05e
test al, 2
je 0x40e05e
mov ecx, dword [0x542698]
mov edx, 0x20e
call fcn.00409160
mov dword [eax + 4], esi
mov dword [eax], esi
mov word [eax + 8], 0
mov ecx, dword [edi + 0x4abc]
mov eax, edi
mov dword [esp + 0x10], 0x3bc8
mov edx, 0x4ad8
mov esi, edi
test ecx, ecx
je 0x40e092
movss xmm0, dword [edi + 0x4ad8]
comiss xmm0, dword [edi + 0x3bc8]
jb 0x40e09c
mov dword [edi + 0x4acc], ecx
jmp 0x40e09c
mov dword [edi + 0x4acc], 0
cmp dword [edi + 0x3e7c], 0
je 0x40e0c5
movss xmm0, dword [edx + eax]
mov eax, dword [esp + 0x10]
comiss xmm0, dword [eax + esi]
jb 0x40e0cf
mov eax, dword [edi + 0x3e7c]
mov eax, dword [eax + 8]
mov dword [edi + 0x4ad0], eax
jmp 0x40e0cf
mov dword [edi + 0x4ad0], 0
movss xmm0, dword [edi + 0x4ac4]
mov dword [edi + 0x4ac0], ecx
test ecx, ecx
je 0x40e0fa
addss xmm0, dword [edi + 0x18]
mov dword [edi + 0x4abc], 0
movss dword [edi + 0x4ac4], xmm0
jmp 0x40e13a
comiss xmm0, dword [0x53f700]
jbe 0x40e144
movss xmm1, dword [edi + 0x18]
movss xmm0, dword [0x53f740]
movaps xmm2, xmm1
addss xmm2, dword [edi + 0x4ac8]
addss xmm1, xmm1
movss dword [edi + 0x4ac8], xmm2
maxss xmm0, xmm1
comiss xmm2, xmm0
jb 0x40e144
mov dword [edi + 0x4ac4], 0
mov dword [edi + 0x4ac8], 0
mov eax, dword [edi + 0x49f8]
mov dword [edi + 0x49fc], eax
mov dword [edi + 0x49f8], 0
mov dword [edi + 0x49f4], 0x7f7fffff
mov word [edi + 0x4995], 0
mov dword [edi + 0x4a04], 0
call fcn.00415df0
call fcn.0041a090
call fcn.004162b0
call fcn.0040d560
mov esi, dword [0x542698]
mov ecx, dword [esi + 0x3e84]
test ecx, ecx
je 0x40e24c
mov eax, dword [esi + 0x3ec4]
mov dword [esi + 0x3ec8], eax
cmp dword [esi + 0x3eec], eax
jne 0x40e1ba
mov byte [esi + 0x3ef0], 1
cmp byte [esi + 0xdc0], 0
mov eax, dword [ecx + 0x300]
mov dword [esp + 0x18], eax
je 0x40e240
lea eax, [esi + 0xdb8]
mov ecx, eax
test eax, eax
jne 0x40e1df
lea ecx, [esi + 0xdb8]
movss xmm0, dword [ecx]
movss xmm1, dword [0x53f83c]
comiss xmm0, xmm1
movss xmm2, dword [ecx + 4]
jb 0x40e240
comiss xmm2, xmm1
jb 0x40e240
movss xmm0, dword [eax]
lea edx, [esp + 0x20]
subss xmm0, dword [esi + 0x3ed8]
mov ecx, dword [esp + 0x18]
push 1
movss dword [esp + 0x24], xmm0
movss xmm0, dword [eax + 4]
subss xmm0, dword [esi + 0x3edc]
movss dword [esp + 0x28], xmm0
call fcn.00415380
mov ecx, dword [esi + 0x3e84]
add esp, 4
xor edx, edx
call fcn.00414ee0
jmp 0x40e288
mov dword [esi + 0x3e84], 0
jmp 0x40e27f
mov ecx, dword [esi + 0x3ee0]
test ecx, ecx
je 0x40e288
mov eax, dword [esi + 0x3ec4]
cmp dword [ecx + 0x70], eax
jne 0x40e288
mov dword [esi + 0x3ec8], eax
cmp dword [esi + 0x3eec], eax
jne 0x40e276
mov byte [esi + 0x3ef0], 1
cmp byte [esi + 0xdc0], 0
jne 0x40e288
xor edx, edx
xor ecx, ecx
call fcn.0040ca80
mov eax, dword [0x542698]
mov edx, dword [eax + 0x47d4]
sub edx, 1
js 0x40e2be
mov eax, dword [eax + 0x47dc]
lea ecx, [edx + edx*4]
lea eax, [eax + ecx*8]
add eax, 4
mov ecx, dword [eax]
test ecx, ecx
je 0x40e2b6
test dword [ecx + 0xc], 0x8000000
jne 0x40e2d8
sub eax, 0x28
sub edx, 1
jns 0x40e2a7
cmp dword [edi + 0x4968], 0
je 0x40e2f7
movss xmm0, dword [edi + 0x4978]
comiss xmm0, dword [0x53f700]
jbe 0x40e2f7
movss xmm1, dword [edi + 0x18]
mulss xmm1, dword [0x53f7bc]
addss xmm1, dword [edi + 0x4990]
minss xmm1, dword [0x53f788]
jmp 0x40e318
movss xmm0, dword [edi + 0x18]
mulss xmm0, dword [0x53f7c8]
movss xmm1, dword [edi + 0x4990]
subss xmm1, xmm0
maxss xmm1, dword [0x53f700]
movss dword [edi + 0x4990], xmm1
movups xmm0, xmmword [edi + 0x5a60]
mov dword [edi + 0x4ad4], 0
mov dword [edi + 0x5c7c], 0xffffffff
mov dword [edi + 0x5c78], 0xffffffff
mov dword [edi + 0x5c74], 0xffffffff
movups xmmword [edi + 0x5a70], xmm0
mov byte [edi + 0x5a60], 0
call fcn.00416740
cmp byte [edi + 0x3e07], 0
jne 0x40e390
movss xmm0, dword [edi + 0x4c]
xorps xmm1, xmm1
comiss xmm1, xmm0
ja 0x40e390
movsd xmm1, qword [edi + 0x3df0]
cvtpd2ps xmm1, xmm1
subss xmm1, xmm0
movss dword [esp + 8], xmm1
jmp 0x40e396
movss xmm1, dword [esp + 8]
xor ecx, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x3e30], ecx
je 0x40e568
nop dword [eax + eax]
mov eax, dword [edi + 0x3e38]
mov esi, dword [eax + ecx*4]
mov ax, word [esi + 0xb6]
mov cl, byte [esi + 0xaa]
mov word [esi + 0xb8], ax
xor eax, eax
mov byte [esi + 0xab], cl
mov byte [esi + 0xaa], 0
mov byte [esi + 0xac], 0
mov word [esi + 0xb6], ax
test cl, cl
jne 0x40e54d
cmp byte [esi + 0x358], al
jne 0x40e54d
comiss xmm1, dword [esi + 0x23c]
jbe 0x40e54d
mov ecx, dword [esi + 0x264]
mov byte [esi + 0x358], 1
mov eax, dword [ecx + 0x10]
mov dword [esi + 0x350], eax
mov eax, dword [ecx + 0x1c]
mov dword [esi + 0x354], eax
mov ecx, dword [esi + 0xec]
test ecx, ecx
je 0x40e470
mov eax, dword [0x542698]
mov dword [esi + 0xe8], 0
mov dword [esi + 0xe4], 0
test eax, eax
je 0x40e457
dec dword [eax + 0xac]
push dword [0x54269c]
push ecx
call fcn.00409220
add esp, 8
mov dword [esi + 0xec], 0
mov ecx, dword [esi + 0x264]
call fcn.00426db0
mov ecx, dword [esi + 0x188]
test ecx, ecx
je 0x40e4c1
mov eax, dword [0x542698]
mov dword [esi + 0x184], 0
mov dword [esi + 0x180], 0
test eax, eax
je 0x40e4a8
dec dword [eax + 0xac]
push dword [0x54269c]
push ecx
call fcn.00409220
add esp, 8
mov dword [esi + 0x188], 0
mov ecx, dword [esi + 0x1b0]
test ecx, ecx
je 0x40e507
mov eax, dword [0x542698]
mov dword [esi + 0x1ac], 0
mov dword [esi + 0x1a8], 0
test eax, eax
je 0x40e4ee
dec dword [eax + 0xac]
push dword [0x54269c]
push ecx
call fcn.00409220
add esp, 8
mov dword [esi + 0x1b0], 0
mov ecx, dword [esi + 0x1bc]
test ecx, ecx
je 0x40e54d
mov eax, dword [0x542698]
mov dword [esi + 0x1b8], 0
mov dword [esi + 0x1b4], 0
test eax, eax
je 0x40e534
dec dword [eax + 0xac]
push dword [0x54269c]
push ecx
call fcn.00409220
add esp, 8
mov dword [esi + 0x1bc], 0
mov ecx, dword [esp + 0x18]
movss xmm1, dword [esp + 8]
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, dword [edi + 0x3e30]
jne 0x40e3b0
xor ecx, ecx
mov dword [esp + 0x14], ecx
cmp dword [edi + 0x4a68], ecx
jle 0x40e6d7
xor edx, edx
xorps xmm1, xmm1
mov dword [esp + 0x10], edx
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edi + 0x4a70]
movss xmm0, dword [eax + ecx*4]
comiss xmm0, xmm1
jb 0x40e6bc
movss xmm2, dword [esp + 8]
comiss xmm2, xmm0
jbe 0x40e6bc
mov esi, dword [edi + 0x4a50]
mov eax, dword [0x542698]
add esi, edx
mov dword [esp + 0x18], eax
mov dword [esi + 0x198], 0
mov ecx, dword [esi + 0x194]
test ecx, ecx
je 0x40e60f
mov dword [esi + 0x190], 0
mov dword [esi + 0x18c], 0
test eax, eax
je 0x40e5f6
dec dword [eax + 0xac]
push dword [0x54269c]
push ecx
call fcn.00409220
add esp, 8
mov dword [esi + 0x194], 0
mov byte [esi + 0x1d9], 1
mov ecx, dword [esi + 0x15c]
test ecx, ecx
je 0x40e65c
mov eax, dword [0x542698]
mov dword [esi + 0x158], 0
mov dword [esi + 0x154], 0
test eax, eax
je 0x40e643
dec dword [eax + 0xac]
push dword [0x54269c]
push ecx
call fcn.00409220
add esp, 8
mov dword [esi + 0x15c], 0
xor edx, edx
mov byte [esi + 0x1e5], 1
cmp dword [esi + 0x40], edx
jle 0x40e685
xor ecx, ecx
or edi, 0xffffffff
nop
mov eax, dword [esi + 0x10]
lea ecx, [ecx + 0x70]
inc edx
mov word [ecx + eax - 0x20], di
cmp edx, dword [esi + 0x40]
jl 0x40e670
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
xorps xmm1, xmm1
sub esi, dword [eax + 0x4a50]
mov eax, 0x4325c53f
imul esi
mov eax, dword [esp + 0x18]
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
mov eax, dword [eax + 0x4a70]
add ecx, edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0xbf800000
mov ecx, dword [esp + 0x14]
inc ecx
add edx, 0x1e8
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
cmp ecx, dword [edi + 0x4a68]
jl 0x40e590
xor ecx, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x4a3c], ecx
jle 0x40e73d
xor esi, esi
xorps xmm1, xmm1
nop word [eax + eax]
mov eax, dword [edi + 0x4a44]
mov dword [esp + 0x14], eax
movss xmm0, dword [esi + eax + 4]
comiss xmm0, xmm1
jb 0x40e72d
movss xmm2, dword [esp + 8]
comiss xmm2, xmm0
jbe 0x40e72d
lea ecx, [eax + 0x10]
add ecx, esi
call fcn.0042a860
mov eax, dword [esp + 0x14]
xorps xmm1, xmm1
mov ecx, dword [esp + 0x18]
mov dword [esi + eax + 4], 0xbf800000
inc ecx
add esi, 0x68
mov dword [esp + 0x18], ecx
cmp ecx, dword [edi + 0x4a3c]
jl 0x40e6f0
cmp byte [edi + 0x3e07], 0
je 0x40e7dc
mov esi, dword [0x542698]
mov eax, dword [esi + 0x47c4]
test eax, eax
je 0x40e791
mov dword [esi + 0x47c0], 0
mov dword [esi + 0x47bc], 0
test esi, esi
je 0x40e778
dec dword [esi + 0xac]
push dword [0x54269c]
push eax
call fcn.00409220
add esp, 8
mov dword [esi + 0x47c4], 0
mov ecx, dword [esi + 0x47d0]
test ecx, ecx
je 0x40e7d7
mov eax, dword [0x542698]
mov dword [esi + 0x47cc], 0
mov dword [esi + 0x47c8], 0
test eax, eax
je 0x40e7be
dec dword [eax + 0xac]
push dword [0x54269c]
push ecx
call fcn.00409220
add esp, 8
mov dword [esi + 0x47d0], 0
call fcn.00430020
mov eax, dword [edi + 0x47fc]
mov byte [edi + 0x3e07], 0
test eax, eax
je 0x40e842
cmp byte [eax + 0xab], 0
jne 0x40e842
mov eax, dword [0x542698]
mov edx, dword [eax + 0x3e3c]
sub edx, 1
js 0x40e836
mov eax, dword [eax + 0x3e44]
lea esi, [eax + edx*4]
nop
mov ecx, dword [esi]
test ecx, ecx
je 0x40e82e
cmp byte [ecx + 0xab], 0
je 0x40e82e
mov eax, dword [ecx + 0xc]
and eax, 0x40200
cmp eax, 0x40200
jne 0x40e838
sub esi, 4
sub edx, 1
jns 0x40e810
xor ecx, ecx
mov edx, 1
call fcn.00414ee0
mov ecx, dword [edi + 0x3e58]
test ecx, ecx
jns 0x40e868
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x3e54]
call fcn.0041ee80
mov dword [edi + 0x3e54], 0
mov ecx, dword [edi + 0x47e4]
test ecx, ecx
jns 0x40e898
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x47e0]
call fcn.0041edf0
lea esi, [edi + 0x47bc]
mov dword [edi + 0x47e0], 0
mov ecx, dword [esi + 4]
test ecx, ecx
jns 0x40e8c7
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.0041e840
mov dword [esi], 0
cmp dword [esi + 4], 0
jne 0x40e8dc
push 8
mov ecx, esi
call fcn.0041e840
mov ecx, dword [esi]
mov eax, dword [esi + 8]
push 0
mov dword [eax + ecx*4], 0
lea ecx, [edi + 0x47c8]
inc dword [esi]
call fcn.0041e5e0
mov esi, dword [0x542698]
cmp byte [esi + 0x5b3f], 0
mov dword [esi + 0x5b44], 0
je 0x40eacb
mov eax, dword [esi + 0x3eb4]
xor edx, edx
push 1
mov ecx, 0x20e
mov dword [esp + 0x1c], eax
mov dword [esi + 0x4ad4], 7
call fcn.00415c00
add esp, 4
test al, al
je 0x40e944
mov byte [esi + 0x5b3f], 0
mov eax, dword [esi + 0xdd8]
xorps xmm1, xmm1
mov dword [esp + 8], eax
cmp eax, 0x3000
je 0x40e9aa
movzx ecx, byte [esi + 0x5b40]
cmp byte [ecx + esi + 0xdc0], 0
je 0x40e9aa
movss xmm0, dword [esi + ecx*4 + 0x3728]
comiss xmm1, xmm0
ja 0x40e9aa
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x40e9a6
add ecx, 0x281
xor edx, edx
call fcn.00417530
test al, al
je 0x40e9a6
mov eax, dword [esp + 0x18]
test eax, eax
je 0x40e9a6
mov dword [esi + 0x5b44], eax
mov byte [esi + 0x5b3f], 0
mov eax, dword [esp + 8]
xor ecx, ecx
mov edx, 0x3728
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
nop dword [eax]
cmp eax, 0x3000
jne 0x40ea0d
cmp byte [esi + ecx + 0xdc0], 0
je 0x40ea0d
movss xmm0, dword [esi + edx]
comiss xmm1, xmm0
ja 0x40ea0d
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x40ea09
add ecx, 0x281
xor edx, edx
call fcn.00417530
mov ecx, dword [esp + 0x10]
test al, al
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 8]
je 0x40ea0d
mov byte [esi + 0x5b40], cl
jmp 0x40ea0d
mov eax, dword [esp + 8]
add edx, 4
inc ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
cmp edx, 0x3734
jl 0x40e9c0
or dword [esi + 0x472c], 0x40
xor ecx, ecx
mov dword [esi + 0x4780], 0x3f333333
call fcn.004183c0
test al, al
je 0x40eac5
push dword [esp + 0x18]
push str.HoveredId:_0x_08X
call fcn.00430ce0
push str.Press_ESC_to_abort_picking.
call fcn.00430ce0
add esp, 0xc
mov dword [esp + 0x20], str.Left
cmp dword [esp + 8], 0x3000
mov dword [esp + 0x24], str.Right
mov dword [esp + 0x28], str.Middle
jne 0x40ea8d
push str.Remap_w__CtrlShift:_click_anywhere_to_select_new_mouse_button.
call fcn.00430ce0
add esp, 4
jmp 0x40eac0
movzx eax, byte [esi + 0x5b40]
xor ecx, ecx
cmp dword [esp + 0x18], ecx
push dword [esp + eax*4 + 0x20]
mov eax, 0x10
cmove ecx, eax
mov eax, dword [0x542698]
add eax, 0x3868
add eax, ecx
push str.Click__s_Button_to_break_in_debugger___remap_w__CtrlShift_
push eax
call fcn.00430db0
add esp, 0xc
call fcn.00414d80
mov esi, dword [0x542698]
lea eax, [esi + 0x3eac]
lea edx, [esi + 0x5b58]
mov dword [eax], 0
mov dword [esp + 0x10], eax
mov eax, dword [edx]
inc eax
mov dword [esp + 0x18], edx
cmp dword [esi + 0x3df8], eax
jne 0x40ebe0
mov eax, dword [esi + 0x3eb4]
mov dword [esp + 8], eax
test eax, eax
jne 0x40eb0c
mov eax, dword [esi + 0x3ec4]
mov dword [esp + 8], eax
cmp dword [edx + 8], eax
je 0x40eb67
lea ecx, [edx + 0xc]
mov dword [edx + 8], eax
mov dword [edx + 4], 0xffffffff
mov eax, dword [ecx + 4]
test eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x14], ecx
jge 0x40eb61
mov eax, dword [esp + 0x20]
xor ecx, ecx
cdq
sub eax, edx
sar eax, 1
add eax, dword [esp + 0x20]
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, dword [esp + 0x18]
call fcn.0041ef90
mov esi, dword [0x542698]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0
test eax, eax
je 0x40ebe0
mov eax, dword [edx + 4]
test eax, eax
js 0x40ebaa
mov ecx, eax
cmp eax, dword [edx + 0xc]
jge 0x40ebc1
mov edi, dword [edx + 0x14]
lea ecx, [eax + eax*8]
mov dword [esp + 0x20], edi
cmp byte [edi + ecx*8 + 5], 0
mov edi, dword [esp + 0xc]
jne 0x40eba6
mov edi, dword [esp + 0x20]
lea edx, [eax + eax*8]
mov ecx, eax
cmp byte [edi + edx*8 + 4], 2
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
jle 0x40ebc1
inc eax
mov dword [edx + 4], eax
mov ecx, eax
cmp eax, 0xffffffff
jne 0x40ebbd
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 8]
mov dword [ecx], eax
jmp 0x40ebe0
test ecx, ecx
js 0x40ebe0
cmp ecx, dword [edx + 0xc]
jge 0x40ebe0
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*8]
mov edx, dword [esp + 0x10]
mov eax, dword [eax + ecx*8]
mov dword [edx], eax
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 0x14]
inc byte [eax + ecx*8 + 4]
mov al, byte [edi + 0x5b3d]
test al, al
je 0x40ebfe
sub al, 1
mov byte [edi + 0x5b3d], al
jne 0x40ebfe
mov dword [edi + 0x46d4], 0
mov al, byte [edi + 0x5b3c]
test al, al
je 0x40ec2c
sub al, 1
mov byte [edi + 0x5b3c], al
jne 0x40ec2c
push str._Auto_disabled_ImGuiDebugLogFlags_EventClipper_to_avoid_spamming__n
call fcn.0041dce0
mov esi, dword [0x542698]
add esp, 4
and dword [edi + 0x5b1c], 0xffffffef
mov byte [edi + 0x3e05], 1
xor edx, edx
or dword [esi + 0x472c], 2
mov ecx, str.DebugDefault
push 0
mov dword [esi + 0x474c], 0x43c80000
mov dword [esi + 0x4750], 0x43c80000
mov dword [esi + 0x4734], 4
call fcn.00412a50
add esp, 4
cmp byte [edi + 0x65], 0
je 0x40eca4
mov cl, byte [edi + 0x5b3e]
cmp cl, 0xff
jne 0x40ec7e
xor edx, edx
jmp 0x40eca7
mov eax, dword [edi + 0x3df8]
and eax, 0x80000003
jns 0x40ec90
dec eax
or eax, 0xfffffffc
inc eax
neg eax
movsx ecx, cl
sbb eax, eax
inc eax
add eax, ecx
mov ecx, 0xa
cdq
idiv ecx
jmp 0x40eca7
or dl, 0xff
xor esi, esi
mov byte [edi + 0x5b3e], dl
cmp dword [edi + 0x5ab8], esi
jle 0x40ecec
xor ecx, ecx
mov dword [esp + 0x18], ecx
nop dword [eax]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
add eax, ecx
cmp dword [eax + 4], 1
jne 0x40ecdc
push eax
mov eax, dword [eax + 0xc]
push edi
call eax
mov ecx, dword [esp + 0x20]
add esp, 8
inc esi
add ecx, 0x14
mov dword [esp + 0x18], ecx
cmp esi, dword [edi + 0x5ab8]
jl 0x40ecc0
pop edi
pop esi
mov esp, ebp
pop ebp
ret