Function at 0x1003bb90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008044c
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1e0
mov eax, dword [0x1012ce80]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
mov dword [ebp - 0x140], esi
cmp dword [esi + 0x458], 0
jge 0x1003bc52
test byte [esi + 4], 2
lea eax, [ebp - 0x178]
mov dword [ebp - 0x174], 0xffffffff
lea ecx, [esi + 0x40]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
push eax
mov dword [ebp - 0x178], 0x1b00d9
je 0x1003bc43
mov dword [ebp - 0x178], 0x20002
call fcn.10040320
mov eax, dword [esi + 0x40]
dec eax
mov dword [esi + 0x458], eax
cmp dword [esi + 0x45c], 0
jge 0x1003bcc0
test byte [esi + 4], 4
jne 0x1003bcc0
lea eax, [ebp - 0x178]
mov dword [ebp - 0x174], 0xffffffff
push eax
lea ecx, [esi + 0x40]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x178], 0x400041
call fcn.10040320
mov eax, dword [esi + 0x40]
dec eax
mov dword [esi + 0x45c], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 8], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
test eax, eax
je 0x1003bd01
push eax
call fcn.1002e0b0
add esp, 4
mov eax, dword [esi + 0x18]
test eax, eax
je 0x1003bd11
push eax
call fcn.1002e0b0
add esp, 4
xor eax, eax
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1a4], eax
xor edi, edi
mov dword [ebp - 4], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x180], edi
mov ecx, dword [esi + 0x4c]
lea edx, [eax + 8]
mov byte [ebp - 4], 1
mov dword [ebp - 0x14c], ecx
test ecx, ecx
jle 0x1003bdb3
cmp ecx, edx
mov eax, ecx
cmovl eax, edx
mov dword [ebp - 0x124], eax
test eax, eax
jle 0x1003bdb3
imul eax, eax, 0xc4
push eax
call fcn.1002e080
mov ecx, dword [ebp - 0x124]
lea edx, [edi + 8]
mov dword [ebp - 0x1a8], ecx
add esp, 4
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1ac], ecx
mov ecx, dword [esi + 0x34]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x120], 0
test ecx, ecx
jle 0x1003be21
cmp ecx, 8
mov dword [ebp - 0x120], 0
mov eax, ecx
cmovl eax, edx
mov dword [ebp - 0x124], eax
test eax, eax
jle 0x1003be21
lea eax, [eax + eax*2]
shl eax, 3
push eax
call fcn.1002e080
mov ecx, dword [ebp - 0x128]
mov edi, eax
mov eax, dword [ebp - 0x124]
add esp, 4
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x188], ecx
imul ecx, dword [ebp - 0x14c], 0xc4
push ecx
push 0
push dword [ebp - 0x150]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x128]
lea eax, [eax + eax*2]
shl eax, 3
push eax
push 0
push dword [ebp - 0x120]
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
mov dword [ebp - 0x13c], 0
cmp dword [esi + 0x4c], 0
jle 0x1003bfd6
mov eax, dword [ebp - 0x150]
xor edx, edx
add eax, 0xa4
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x130], eax
nop dword [eax]
mov ecx, dword [esi + 0x54]
add ecx, edx
mov dword [eax - 4], 0xffffffff
xor edx, edx
mov dword [ebp - 0x120], ecx
cmp dword [esi + 0x34], edx
jle 0x1003c256
mov edi, dword [ebp - 0x140]
or esi, 0xffffffff
mov eax, esi
cmp esi, 0xffffffff
jne 0x1003bee3
mov eax, dword [ebp - 0x120]
or esi, esi
mov ecx, dword [edi + 0x3c]
mov eax, dword [eax + 0x74]
cmp eax, dword [ecx + edx*4]
jne 0x1003bedb
mov eax, dword [ebp - 0x130]
mov esi, edx
mov dword [eax - 4], edx
inc edx
mov eax, esi
cmp edx, dword [edi + 0x34]
jl 0x1003beb6
mov edi, dword [ebp - 0x154]
cmp eax, 0xffffffff
je 0x1003c256
mov eax, dword [ebp - 0x120]
push dword [eax + 0xc]
mov esi, dword [eax]
push esi
call fcn.10046df0
mov ecx, dword [ebp - 0x130]
push eax
add ecx, 0xffffff5c
push esi
push ecx
mov dword [ebp - 0x124], ecx
call fcn.10041150
add esp, 0x14
test eax, eax
je 0x1003c256
mov eax, dword [ebp - 0x124]
mov edx, 0x100cb2ac
mov esi, dword [ebp - 0x130]
mov eax, dword [eax + 0xa0]
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x148], ecx
mov eax, dword [eax + 0x30]
test eax, eax
cmovne edx, eax
mov dword [esi - 8], edx
cmp word [edx], 0
je 0x1003bf81
nop
movzx eax, word [edx + 2]
test ax, ax
je 0x1003bf7b
mov ecx, eax
cmp dword [esi], ecx
cmovge ecx, dword [esi]
add edx, 4
mov dword [esi], ecx
cmp word [edx], 0
jne 0x1003bf60
mov ecx, dword [ebp - 0x148]
mov edx, dword [ebp - 0x148]
inc dword [edi + ecx*8]
mov ecx, dword [esi]
mov eax, dword [ebp - 0x13c]
cmp dword [edi + edx*8 + 4], ecx
cmovge ecx, dword [edi + edx*8 + 4]
add esi, 0xc4
mov dword [ebp - 0x130], esi
inc eax
mov esi, dword [ebp - 0x140]
mov dword [edi + edx*8 + 4], ecx
mov edx, dword [ebp - 0x134]
add edx, 0x78
mov dword [ebp - 0x13c], eax
cmp eax, dword [esi + 0x4c]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x134], edx
jl 0x1003be90
mov eax, dword [ebp - 0x14c]
xor esi, esi
mov dword [ebp - 0x130], esi
test eax, eax
jle 0x1003c355
mov edx, dword [ebp - 0x150]
add edx, 0xa8
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x11c], edx
mov eax, dword [edx - 8]
lea esi, [edx + 4]
mov ecx, esi
lea edi, [eax + eax*2]
mov eax, dword [edx - 4]
add eax, 0x20
mov dword [ebp - 0x120], edi
sar eax, 5
push eax
call fcn.100405a0
mov eax, dword [esi]
shl eax, 2
push eax
mov eax, dword [ebp - 0x11c]
push 0
push dword [eax + 0xc]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x154]
add esp, 0xc
cmp dword [eax + edi*8 + 0xc], 0
lea esi, [eax + edi*8]
jne 0x1003c074
mov eax, dword [eax + edi*8 + 4]
lea ecx, [esi + 0xc]
add eax, 0x20
sar eax, 5
push eax
call fcn.100405a0
mov eax, dword [esi + 0xc]
shl eax, 2
push eax
push 0
push dword [esi + 0x14]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x12c], eax
cmp word [eax], 0
je 0x1003c164
nop dword [eax]
movzx ecx, word [eax + 2]
test cx, cx
je 0x1003c164
movzx edi, word [eax]
cmp edi, ecx
ja 0x1003c14b
nop dword [eax + eax]
mov eax, dword [ebp - 0x120]
mov ecx, edi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov esi, edi
mov ecx, dword [ebp - 0x154]
sar esi, 5
mov dword [ebp - 0x124], edx
mov eax, dword [ecx + eax*8 + 0x14]
test dword [eax + esi*4], edx
jne 0x1003c132
mov eax, dword [ebp - 0x11c]
add eax, 0xffffff58
push edi
push eax
call fcn.10046af0
mov edx, dword [ebp - 0x11c]
add esp, 8
test eax, eax
je 0x1003c138
inc dword [edx]
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x154]
inc dword [ecx + eax*8 + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x154]
or dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x120]
mov eax, dword [edx + eax*8 + 0x14]
or dword [eax + esi*4], ecx
inc dword [ebp - 0x130]
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x12c]
inc edi
movzx eax, word [eax + 2]
cmp edi, eax
jbe 0x1003c0b0
mov eax, dword [ebp - 0x12c]
add eax, 4
mov dword [ebp - 0x12c], eax
cmp word [eax], 0
jne 0x1003c090
add edx, 0xc4
sub dword [ebp - 0x148], 1
mov dword [ebp - 0x11c], edx
jne 0x1003c004
mov esi, dword [ebp - 0x150]
mov eax, dword [ebp - 0x14c]
add esi, 0xb8
mov dword [ebp - 0x120], eax
mov edi, dword [esi - 0x10]
cmp edi, dword [esi + 4]
jle 0x1003c1de
lea eax, [edi*4]
push eax
call fcn.1002e080
mov edx, dword [esi + 8]
add esp, 4
mov dword [ebp - 0x124], eax
test edx, edx
je 0x1003c1d8
mov ecx, dword [esi]
shl ecx, 2
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [esi + 8]
call fcn.1002e0b0
mov eax, dword [ebp - 0x124]
add esp, 0x10
mov dword [esi + 8], eax
mov dword [esi + 4], edi
mov ecx, dword [esi - 4]
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x13c], ecx
lea eax, [ecx + eax*4]
mov dword [ebp - 0x15c], eax
cmp ecx, eax
jae 0x1003c315
xor edx, edx
mov dword [ebp - 0x134], edx
mov eax, dword [ecx]
mov dword [ebp - 0x11c], eax
test eax, eax
je 0x1003c2f7
xor ecx, ecx
mov edi, 1
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x12c], edi
test edi, eax
je 0x1003c2d9
mov eax, edx
and eax, 0xffffffe0
add eax, ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x144], eax
mov eax, dword [esi]
cmp eax, ecx
jne 0x1003c2b7
lea edi, [eax + 1]
test ecx, ecx
je 0x1003c262
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1003c267
mov byte [ebp - 0x135], 0
jmp 0x1003d15a
mov eax, 8
cmp eax, edi
cmovg edi, eax
cmp edi, ecx
jle 0x1003c2b1
lea eax, [edi*4]
push eax
call fcn.1002e080
mov edx, dword [esi + 8]
add esp, 4
mov dword [ebp - 0x124], eax
test edx, edx
je 0x1003c2ab
mov ecx, dword [esi]
shl ecx, 2
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [esi + 8]
call fcn.1002e0b0
mov eax, dword [ebp - 0x124]
add esp, 0x10
mov dword [esi + 8], eax
mov dword [esi + 4], edi
mov edi, dword [ebp - 0x12c]
mov ecx, dword [esi]
mov eax, dword [esi + 8]
mov edx, dword [ebp - 0x144]
mov dword [eax + ecx*4], edx
inc dword [esi]
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x134]
inc ecx
rol edi, 1
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x12c], edi
cmp ecx, 0x20
jb 0x1003c226
mov ecx, dword [ebp - 0x13c]
add ecx, 4
add edx, 0x20
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x134], edx
cmp ecx, dword [ebp - 0x15c]
jb 0x1003c203
mov eax, dword [esi - 4]
test eax, eax
je 0x1003c33a
push eax
mov dword [esi - 8], 0
mov dword [esi - 0xc], 0
call fcn.1002e0b0
add esp, 4
mov dword [esi - 4], 0
add esi, 0xc4
sub dword [ebp - 0x120], 1
jne 0x1003c195
mov esi, dword [ebp - 0x130]
jmp 0x1003c35d
xor esi, esi
mov dword [ebp - 0x130], esi
cmp dword [ebp - 0x128], 0
jle 0x1003c3a6
mov edi, dword [ebp - 0x154]
mov esi, dword [ebp - 0x128]
add edi, 0x14
mov eax, dword [edi]
test eax, eax
je 0x1003c398
push eax
mov dword [edi - 4], 0
mov dword [edi - 8], 0
call fcn.1002e0b0
add esp, 4
mov dword [edi], 0
add edi, 0x18
sub esi, 1
jne 0x1003c375
mov esi, dword [ebp - 0x130]
mov eax, dword [ebp - 0x154]
test eax, eax
je 0x1003c3db
push eax
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
call fcn.1002e0b0
add esp, 4
xor eax, eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x180], eax
xor eax, eax
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 7
mov eax, 8
test esi, esi
jle 0x1003c452
cmp esi, eax
mov edi, esi
cmovl edi, eax
test edi, edi
jle 0x1003c452
mov eax, edi
shl eax, 4
push eax
call fcn.1002e080
mov dword [ebp - 0x130], eax
add esp, 4
mov dword [ebp - 0x18c], eax
mov eax, 8
mov dword [ebp - 0x190], edi
xor edi, edi
mov dword [ebp - 0x194], esi
test esi, esi
jle 0x1003c49d
cmp esi, 8
mov edi, esi
cmovl edi, eax
test edi, edi
jle 0x1003c49b
lea eax, [edi*8]
sub eax, edi
shl eax, 2
push eax
call fcn.1002e080
mov dword [ebp - 0x1b4], edi
add esp, 4
mov dword [ebp - 0x148], eax
mov edi, eax
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x15c], eax
jmp 0x1003c49d
xor edi, edi
mov ecx, esi
mov dword [ebp - 0x1b8], esi
shl ecx, 4
push ecx
push 0
push dword [ebp - 0x130]
call sub.VCRUNTIME140.dll_memset
lea eax, [esi*8]
sub eax, esi
shl eax, 2
push eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x14c]
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x11c], eax
add esp, 0x18
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], ecx
test edx, edx
jle 0x1003c799
mov esi, dword [ebp - 0x150]
xor edi, edi
add esi, 0x98
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x124], edx
mov edx, dword [esi + 0x10]
test edx, edx
je 0x1003c777
mov eax, dword [ebp - 0x12c]
add dword [ebp - 0x12c], edx
add dword [ebp - 0x128], edx
shl eax, 4
add eax, dword [ebp - 0x130]
mov dword [esi - 4], eax
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [ebp - 0x148]
lea ecx, [ecx + eax*4]
mov eax, dword [ebp - 0x140]
mov dword [esi], ecx
mov edx, dword [eax + 0x54]
mov eax, dword [edx + edi + 0x10]
add edx, edi
mov dword [esi - 0x1c], eax
mov eax, dword [esi + 0x28]
mov dword [esi - 0x14], eax
mov eax, dword [esi + 0x20]
mov dword [esi - 0x18], 0
mov dword [esi - 0x10], eax
mov dword [esi - 0xc], ecx
mov al, byte [edx + 0x14]
mov byte [esi - 8], al
mov al, byte [edx + 0x18]
mov byte [esi - 7], al
movss xmm1, dword [edx + 0x10]
comiss xmm1, dword [0x10085408]
mov dword [ebp - 0x13c], edx
jbe 0x1003c5f5
mov edi, dword [esi - 0x94]
mov eax, dword [esi - 0x7c]
movzx edx, byte [eax + edi + 7]
movzx ecx, byte [eax + edi + 6]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
add dx, cx
mov ecx, dword [ebp - 0x120]
movsx esi, dx
mov eax, dword [ecx - 0x7c]
movzx edx, byte [eax + edi + 5]
movzx ecx, byte [eax + edi + 4]
mov eax, 0x100
mov edi, dword [ebp - 0x134]
cwde
movsx ecx, cx
imul ecx, eax
add dx, cx
movsx eax, dx
sub eax, esi
mov esi, dword [ebp - 0x120]
movd xmm0, eax
jmp 0x1003c61b
mov ecx, dword [esi - 0x84]
mov eax, dword [esi - 0x94]
xorps xmm1, xmmword [0x10084130]
movzx edx, byte [ecx + eax + 0x12]
movzx eax, byte [ecx + eax + 0x13]
shl edx, 8
add edx, eax
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mov eax, dword [ebp - 0x140]
xor ecx, ecx
mov dword [ebp - 0x120], ecx
mov eax, dword [eax + 0x10]
divss xmm1, xmm0
movss dword [ebp - 0x144], xmm1
cmp dword [esi + 0x20], ecx
jle 0x1003c76b
movzx eax, ax
lea edx, [esi - 0x98]
mov ecx, eax
mov dword [ebp - 0x158], eax
xor edi, edi
mov dword [ebp - 0x19c], ecx
mov ecx, edi
nop
mov eax, dword [esi + 0x28]
push dword [eax + ecx*4]
push edx
call fcn.10046af0
add esp, 8
lea ecx, [ebp - 0x1a0]
push ecx
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0x17c]
push ecx
lea ecx, [ebp - 0x198]
push ecx
mov ecx, dword [ebp - 0x13c]
sub esp, 0x10
movd xmm0, dword [ecx + 0x18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mulss xmm0, xmm1
movss dword [esp + 4], xmm0
movd xmm0, dword [ecx + 0x14]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [esp], xmm0
push eax
lea eax, [esi - 0x98]
push eax
call fcn.10046e80
mov edx, dword [ebp - 0x13c]
lea edi, [edi + 0x10]
mov ecx, dword [ebp - 0x15c]
add esp, 0x28
sub ecx, dword [ebp - 0x198]
mov eax, dword [esi - 4]
dec cx
add cx, word [edx + 0x14]
add cx, word [ebp - 0x19c]
movss xmm1, dword [ebp - 0x144]
mov word [eax + edi - 0xc], cx
mov ecx, dword [ebp - 0x1a0]
sub ecx, dword [ebp - 0x17c]
add ecx, dword [ebp - 0x158]
mov eax, dword [esi - 4]
dec cx
add cx, word [edx + 0x18]
lea edx, [esi - 0x98]
mov word [eax + edi - 0xa], cx
mov eax, dword [esi - 4]
movzx ecx, word [eax + edi - 0xa]
movzx eax, word [eax + edi - 0xc]
imul ecx, eax
mov eax, dword [ebp - 0x11c]
add eax, ecx
mov ecx, dword [ebp - 0x120]
inc ecx
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x120], ecx
cmp ecx, dword [esi + 0x20]
jl 0x1003c660
mov edi, dword [ebp - 0x134]
jmp 0x1003c771
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x128]
add esi, 0xc4
add edi, 0x78
sub dword [ebp - 0x124], 1
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x134], edi
jne 0x1003c512
movd xmm0, eax
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x1003c7b2
sqrtsd xmm0, xmm0
jmp 0x1003c7b7
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov edi, dword [ebp - 0x140]
cvtsd2ss xmm0, xmm0
mov eax, dword [edi + 0xc]
mov dword [edi + 0x20], 0
cvttss2si ecx, xmm0
inc ecx
test eax, eax
jg 0x1003c80f
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x100cb2e0]
jb 0x1003c7eb
mov eax, 0x1000
jmp 0x1003c80f
comiss xmm0, dword [0x100cb2dc]
jb 0x1003c7fb
mov eax, 0x800
jmp 0x1003c80f
comiss xmm0, dword [0x100cb2d8]
mov eax, 0x200
mov ecx, 0x400
cmovae eax, ecx
push 0x2c
mov dword [edi + 0x1c], eax
lea eax, [ebp - 0x1e4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x144], eax
mov eax, dword [edi + 0x1c]
push 0x30
mov dword [ebp - 0x124], eax
call fcn.1002e080
mov esi, eax
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x144]
mov dword [ebp - 0x11c], esi
mov dword [ebp - 0x158], eax
lea ecx, [eax*8]
push ecx
call fcn.1002e080
add esp, 0x14
test esi, esi
je 0x1003c8d4
test eax, eax
je 0x1003c8d1
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x1d4], ecx
mov ecx, dword [ebp - 0x158]
push ecx
push eax
mov dword [ebp - 0x1bc], eax
mov eax, 0x8000
sub eax, edx
mov dword [ebp - 0x1e0], esi
push eax
push ecx
push esi
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x1cc], 0
call fcn.10046790
add esp, 0x14
jmp 0x1003c8ed
push esi
jmp 0x1003c8d9
test eax, eax
je 0x1003c8e1
push eax
call fcn.1002e0b0
add esp, 4
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x11c], eax
xor eax, eax
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1e8], eax
mov esi, dword [edi + 0x40]
mov byte [ebp - 4], 8
mov dword [ebp - 0x120], esi
test esi, esi
jle 0x1003c943
cmp esi, 8
mov ecx, esi
mov edx, 8
cmovl ecx, edx
test ecx, ecx
jle 0x1003c943
shl ecx, 4
push ecx
call fcn.1002e080
add esp, 4
mov dword [ebp - 0x128], eax
mov ecx, esi
shl ecx, 4
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp dword [edi + 0x40], 0
jle 0x1003c991
mov edx, dword [ebp - 0x128]
xor ecx, ecx
add edx, 6
xor esi, esi
mov eax, dword [edi + 0x48]
lea ecx, [ecx + 0x1c]
inc esi
lea edx, [edx + 0x10]
movzx eax, word [ecx + eax - 0x1c]
mov word [edx - 0x12], ax
mov eax, dword [edi + 0x48]
movzx eax, word [ecx + eax - 0x1a]
mov word [edx - 0x10], ax
cmp esi, dword [edi + 0x40]
jl 0x1003c967
mov esi, dword [ebp - 0x120]
push esi
push dword [ebp - 0x128]
push dword [ebp - 0x11c]
call fcn.10046900
add esp, 0xc
test esi, esi
jle 0x1003ca07
mov edx, dword [ebp - 0x128]
xor esi, esi
mov eax, dword [ebp - 0x120]
add edx, 0xa
nop dword [eax + eax]
cmp dword [edx + 2], 0
je 0x1003c9f6
mov ecx, dword [edi + 0x48]
movzx eax, word [edx - 2]
mov word [esi + ecx + 4], ax
mov ecx, dword [edi + 0x48]
movzx eax, word [edx]
mov word [esi + ecx + 6], ax
movzx eax, word [edx]
movzx ecx, word [edx - 4]
add ecx, eax
mov eax, dword [ebp - 0x120]
cmp dword [edi + 0x20], ecx
cmovge ecx, dword [edi + 0x20]
mov dword [edi + 0x20], ecx
add esi, 0x1c
add edx, 0x10
sub eax, 1
mov dword [ebp - 0x120], eax
jne 0x1003c9c0
mov eax, dword [ebp - 0x128]
mov byte [ebp - 4], 9
test eax, eax
je 0x1003ca1e
push eax
call fcn.1002e0b0
add esp, 4
mov esi, dword [ebp - 0x14c]
mov byte [ebp - 4], 7
test esi, esi
jle 0x1003cab9
mov esi, dword [ebp - 0x150]
mov eax, dword [ebp - 0x14c]
add esi, 0xa8
mov dword [ebp - 0x144], eax
mov eax, dword [esi]
test eax, eax
je 0x1003caa4
push eax
push dword [esi - 0x14]
push dword [ebp - 0x11c]
call fcn.10046900
xor ecx, ecx
add esp, 0xc
mov dword [ebp - 0x124], ecx
cmp dword [esi], ecx
jle 0x1003caa4
xor edx, edx
nop
mov eax, dword [esi - 0x14]
cmp dword [edx + eax + 0xc], 0
je 0x1003ca96
movzx ecx, word [edx + eax + 0xa]
movzx eax, word [edx + eax + 6]
add ecx, eax
cmp dword [edi + 0x20], ecx
cmovge ecx, dword [edi + 0x20]
mov dword [edi + 0x20], ecx
mov ecx, dword [ebp - 0x124]
inc ecx
add edx, 0x10
mov dword [ebp - 0x124], ecx
cmp ecx, dword [esi]
jl 0x1003ca70
add esi, 0xc4
sub dword [ebp - 0x144], 1
jne 0x1003ca48
mov esi, dword [ebp - 0x14c]
test byte [edi + 4], 1
mov eax, dword [edi + 0x20]
jne 0x1003cae7
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movss xmm1, dword [0x10084148]
lea ecx, [eax + 1]
mov eax, dword [edi + 0x1c]
movaps xmm2, xmm1
mov dword [edi + 0x20], ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
imul eax, ecx
divss xmm2, xmm0
push eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x24], xmm2
divss xmm1, xmm0
movss dword [edi + 0x28], xmm1
call fcn.1002e080
mov ecx, dword [edi + 0x20]
imul ecx, dword [edi + 0x1c]
mov dword [edi + 0x14], eax
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x14]
add esp, 0x10
mov dword [ebp - 0x1c0], eax
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x1d8], eax
test esi, esi
jle 0x1003cd3a
mov ecx, dword [ebp - 0x150]
xor eax, eax
mov dword [ebp - 0x144], eax
mov edx, esi
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x13c], esi
mov esi, dword [edi + 0x54]
add esi, eax
cmp dword [ecx + 0xa8], 0
je 0x1003cd04
push dword [ecx + 0x94]
lea eax, [ecx + 0x7c]
push 1
push eax
push ecx
lea eax, [ebp - 0x1e4]
push eax
call fcn.100473e0
movss xmm1, dword [esi + 0x44]
add esp, 0x14
ucomiss xmm1, dword [0x10084148]
movss dword [ebp - 0x158], xmm1
lahf
test ah, 0x44
jnp 0x1003cce8
xor esi, esi
nop
movd xmm0, esi
mov eax, esi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x100856b0]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
call fcn.1007d580
movss xmm1, dword [ebp - 0x158]
mov edx, 0xff
cmp eax, edx
movzx ecx, al
cmovbe edx, ecx
mov byte [ebp + esi - 0x118], dl
inc esi
cmp esi, 0x100
jb 0x1003cbc0
mov ecx, dword [ebp - 0x11c]
xor eax, eax
mov dword [ebp - 0x134], eax
mov edx, dword [ecx + 0x94]
cmp dword [ecx + 0xa8], eax
jle 0x1003ccee
lea ecx, [edx + 6]
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x12c], ecx
nop word [eax + eax]
cmp dword [ecx + 6], 0
je 0x1003cccc
mov edx, dword [edi + 0x1c]
movzx eax, word [ecx + 4]
movzx edi, word [ecx]
movzx esi, word [ecx - 2]
movzx ecx, word [ecx + 2]
mov dword [ebp - 0x124], edx
imul edx, eax
mov eax, dword [ebp - 0x140]
add edx, dword [eax + 0x14]
add edx, ecx
test edi, edi
je 0x1003ccb8
mov eax, dword [ebp - 0x124]
nop word [eax + eax]
xor ecx, ecx
test esi, esi
je 0x1003cca9
nop word [eax + eax]
movzx eax, byte [ecx + edx]
mov al, byte [ebp + eax - 0x118]
mov byte [ecx + edx], al
inc ecx
cmp ecx, esi
jl 0x1003cc90
mov eax, dword [ebp - 0x124]
dec edi
add edx, eax
test edi, edi
jg 0x1003cc80
mov edi, dword [ebp - 0x140]
jmp 0x1003ccba
mov edi, eax
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x12c]
inc eax
add ecx, 0x10
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x12c], ecx
cmp eax, dword [edx + 0xa8]
jl 0x1003cc40
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x144]
mov edx, dword [ebp - 0x13c]
mov dword [ecx + 0x94], 0
add eax, 0x78
add ecx, 0xc4
sub edx, 1
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x13c], edx
jne 0x1003cb70
mov eax, dword [ebp - 0x1e0]
mov esi, dword [ebp - 0x14c]
mov dword [ebp - 0x11c], eax
push dword [ebp - 0x1bc]
call fcn.1002e0b0
push dword [ebp - 0x11c]
call fcn.1002e0b0
mov eax, dword [ebp - 0x130]
add esp, 8
test eax, eax
je 0x1003cd88
push eax
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x194], 0
call fcn.1002e0b0
add esp, 4
xor eax, eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x18c], eax
test esi, esi
jle 0x1003d11c
mov ecx, dword [ebp - 0x150]
xor edx, edx
add ecx, 4
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x120], ecx
mov eax, esi
mov dword [ebp - 0x13c], esi
nop
cmp dword [ecx + 0xa4], 0
je 0x1003d09f
mov esi, dword [ecx + 0x18]
xorps xmm4, xmm4
mov eax, dword [edi + 0x54]
add eax, edx
mov edx, dword [ecx]
mov dword [ebp - 0x128], eax
mov eax, dword [eax + 0x74]
movzx ecx, byte [esi + edx + 6]
mov dword [ebp - 0x12c], eax
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + edx + 7]
add cx, ax
mov eax, 0x100
movsx edi, cx
movzx ecx, byte [esi + edx + 4]
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + edx + 5]
mov edx, dword [ebp - 0x12c]
add cx, ax
movsx ecx, cx
mov eax, ecx
sub eax, edi
movd xmm2, ecx
lea ecx, [edx + 0x44]
cvtdq2ps xmm2, xmm2
mov dword [ebp - 0x134], ecx
mov ecx, dword [ebp - 0x128]
movd xmm0, eax
mov eax, dword [ebp - 0x128]
cvtdq2ps xmm0, xmm0
movss xmm3, dword [eax + 0x10]
xor eax, eax
divss xmm3, xmm0
comiss xmm2, xmm4
movaps xmm0, xmm3
mulss xmm0, xmm2
seta al
lea eax, [eax*2 - 1]
movd xmm1, eax
xor eax, eax
cvtdq2ps xmm1, xmm1
addss xmm1, xmm0
cvttss2si esi, xmm1
movd xmm1, edi
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm4
mulss xmm3, xmm1
seta al
cmp byte [ecx + 0x3c], 0
lea eax, [eax*2 - 1]
movd xmm0, eax
lea eax, [edx + 0x38]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x124], eax
addss xmm0, xmm3
cvttss2si edi, xmm0
jne 0x1003cefd
mov ecx, edx
call fcn.1003b250
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x12c]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov eax, dword [ecx + 0x10]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x124]
mov dword [edx + 0x34], ecx
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x128]
mov dword [edx + 0x30], eax
mov eax, dword [ebp - 0x134]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x124]
movd xmm0, edi
cvtdq2ps xmm0, xmm0
movss dword [edx + 0x48], xmm0
mov edx, dword [ebp - 0x134]
inc word [eax]
movss xmm7, dword [ecx + 0x28]
mov edi, dword [ebp - 0x140]
movss xmm0, dword [edx]
xor edx, edx
addss xmm0, dword [0x1008410c]
movss dword [ebp - 0x17c], xmm7
mov dword [ebp - 0x124], edx
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
addss xmm6, dword [ecx + 0x2c]
mov ecx, dword [ebp - 0x120]
movss dword [ebp - 0x158], xmm6
cmp dword [ecx + 0xa4], edx
jle 0x1003d093
xor esi, esi
nop dword [eax]
movd xmm0, dword [edi + 0x1c]
sub esp, 0x24
movss xmm1, dword [0x10084148]
mov eax, dword [ecx + 0xbc]
mov ecx, dword [ecx + 0x94]
movss xmm3, dword [0x10084148]
cvtdq2ps xmm0, xmm0
mov edx, dword [eax + edx*4]
movzx eax, word [ecx + esi]
divss xmm1, xmm0
movd xmm0, dword [edi + 0x20]
cvtdq2ps xmm0, xmm0
movd xmm5, eax
movzx eax, word [ecx + esi + 2]
divss xmm3, xmm0
movss xmm0, dword [ecx + esi + 0x10]
movd xmm4, eax
movzx eax, word [ecx + esi + 4]
cvtdq2ps xmm5, xmm5
movd xmm2, eax
movzx eax, word [ecx + esi + 6]
cvtdq2ps xmm2, xmm2
movss dword [esp + 0x20], xmm0
movss xmm0, dword [ecx + esi + 0x18]
mulss xmm5, xmm1
mulss xmm2, xmm1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm4, xmm4
mulss xmm1, xmm3
mulss xmm4, xmm3
movss dword [esp + 0x1c], xmm1
xorps xmm1, xmm1
addss xmm0, xmm1
movss dword [esp + 0x18], xmm2
movss dword [esp + 0x14], xmm4
movss dword [esp + 0x10], xmm5
addss xmm0, xmm6
movss dword [esp + 0xc], xmm0
movss xmm0, dword [ecx + esi + 0x14]
addss xmm0, xmm1
addss xmm0, xmm7
movss dword [esp + 8], xmm0
movss xmm0, dword [ecx + esi + 0xc]
addss xmm0, xmm1
addss xmm0, xmm6
movss dword [esp + 4], xmm0
movss xmm0, dword [ecx + esi + 8]
mov ecx, dword [ebp - 0x12c]
addss xmm0, xmm1
addss xmm0, xmm7
movss dword [esp], xmm0
push edx
push dword [ebp - 0x128]
call fcn.10039460
mov edx, dword [ebp - 0x124]
add esi, 0x1c
mov ecx, dword [ebp - 0x120]
inc edx
movss xmm6, dword [ebp - 0x158]
movss xmm7, dword [ebp - 0x17c]
mov dword [ebp - 0x124], edx
cmp edx, dword [ecx + 0xa4]
jl 0x1003cf60
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x11c]
add ecx, 0xc4
add edx, 0x78
sub eax, 1
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x13c], eax
jne 0x1003cdb0
mov esi, dword [ebp - 0x14c]
test esi, esi
jle 0x1003d11c
mov esi, dword [ebp - 0x150]
mov edi, dword [ebp - 0x14c]
add esi, 0xb4
nop
mov eax, dword [esi + 0xc]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x1003d0f4
push eax
call fcn.1002e0b0
add esp, 4
mov eax, dword [esi]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x1003d107
push eax
call fcn.1002e0b0
add esp, 4
add esi, 0xc4
mov byte [ebp - 4], 7
sub edi, 1
jne 0x1003d0e0
mov edi, dword [ebp - 0x140]
push edi
call fcn.1003b610
add esp, 4
mov byte [ebp - 0x135], 1
mov eax, dword [ebp - 0x148]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x1003d143
push eax
call fcn.1002e0b0
add esp, 4
mov eax, dword [ebp - 0x130]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x1003d15a
push eax
call fcn.1002e0b0
add esp, 4
mov eax, dword [ebp - 0x154]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x1003d171
push eax
call fcn.1002e0b0
add esp, 4
mov eax, dword [ebp - 0x150]
mov dword [ebp - 4], 0xf
test eax, eax
je 0x1003d18b
push eax
call fcn.1002e0b0
add esp, 4
mov al, byte [ebp - 0x135]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1007d39e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret