Function at 0x446e40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x3f8
movsd xmm3, qword [0x4bfd20]
mov eax, ecx
xor ecx, ecx
mov dword [esp + 0x48], eax
push esi
xorps xmm1, xmm1
mov dword [esp + 0xd8], edx
mov esi, eax
mov dword [esp + 0x50], 0
movsx eax, byte [eax]
movapd xmm2, xmm1
mov dword [esp + 0xa8], 0
mov dword [esp + 0x44], ecx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], ecx
movsd qword [esp + 0x6c], xmm1
movsd qword [esp + 0xc], xmm2
mov dword [esp + 0x14], esi
movsd qword [esp + 0x5c], xmm3
push edi
cmp eax, 0x2d
ja 0x446ef3
jmp 0x446ec0
movzx eax, byte [eax + 0x4482b4]
jmp dword [eax*4 + 0x4482a0]
mov al, byte [esi]
mov byte [esp + 0x4f], al
cmp al, 0x30
jne 0x446f1d
mov dword [esp + 0x40], 1
inc esi
cmp byte [esi], 0x30
je 0x446f05
mov al, byte [esi]
mov dword [esp + 0x18], esi
mov byte [esp + 0x4f], al
test al, al
je 0x44827b
movsx edi, byte [esp + 0x4f]
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x58], esi
xor edx, edx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x28], eax
cmp edi, 0x30
jl 0x446f7e
lea ecx, [ecx]
cmp edi, 0x39
jg 0x446f7a
cmp eax, 9
jge 0x446f55
lea eax, [edx - 6]
lea eax, [edx + eax*4]
lea edx, [edi + eax*2]
jmp 0x446f63
cmp eax, 0x10
jge 0x446f67
lea eax, [ecx - 6]
lea eax, [ecx + eax*4]
lea ecx, [edi + eax*2]
mov eax, dword [esp + 0x28]
movsx edi, byte [esi + 1]
inc esi
inc eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x28], eax
cmp edi, 0x30
jge 0x446f40
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
mov eax, esi
sub eax, dword [esp + 0x58]
mov dword [esp + 0x38], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x28]
cmp edi, 0x2e
jne 0x4470bd
movsx edi, byte [esi + 1]
inc esi
mov eax, esi
mov dword [esp + 0x2c], esi
sub eax, dword [esp + 0x58]
mov dword [esp + 0x38], eax
mov dword [esp + 0x88], eax
sub eax, dword [esp + 0x84]
mov dword [esp + 0x48], eax
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], esi
test eax, eax
jne 0x447023
cmp edi, 0x30
jne 0x447007
xor eax, eax
lea ebx, [ebx]
movsx edi, byte [esi + 1]
inc esi
inc eax
mov dword [esp + 0x18], esi
cmp edi, 0x30
je 0x446ff0
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], esi
lea eax, [edi - 0x31]
cmp eax, 8
ja 0x4470b9
mov eax, dword [esp + 0x30]
mov dword [esp + 0x34], eax
xor eax, eax
mov dword [esp + 0x58], esi
jmp 0x447033
lea eax, [edi - 0x30]
cmp eax, 9
ja 0x4470b5
mov eax, dword [esp + 0x30]
inc eax
sub edi, 0x30
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], edi
je 0x4470a3
add dword [esp + 0x34], eax
cmp eax, 1
jle 0x447079
mov esi, dword [esp + 0x28]
lea edi, [eax - 1]
mov eax, esi
inc esi
cmp eax, 9
jge 0x447060
lea edx, [edx + edx*4]
add edx, edx
jmp 0x44706a
cmp esi, 0x10
jg 0x44706a
lea ecx, [ecx + ecx*4]
add ecx, ecx
dec edi
jne 0x447051
mov edi, dword [esp + 0x20]
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
inc dword [esp + 0x28]
cmp eax, 9
jge 0x44708e
lea eax, [edx + edx*4]
lea edx, [edi + eax*2]
jmp 0x44709b
cmp dword [esp + 0x28], 0x10
jg 0x44709b
lea eax, [ecx + ecx*4]
lea ecx, [edi + eax*2]
mov dword [esp + 0x30], 0
movsx edi, byte [esi + 1]
inc esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x18], esi
jmp 0x447023
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x20], 0
cmp edi, 0x65
je 0x4470d3
cmp edi, 0x45
jne 0x4471be
test eax, eax
jne 0x4470e7
cmp dword [esp + 0x30], eax
jne 0x4470e7
cmp dword [esp + 0x40], eax
je case.0x447202.74
movsx edi, byte [esi + 1]
mov dword [esp + 0x50], esi
mov eax, edi
inc esi
mov dword [esp + 0x2c], 0
mov dword [esp + 0x18], esi
sub eax, 0x2b
je 0x447110
sub eax, 2
jne 0x447119
mov dword [esp + 0x2c], 1
movsx edi, byte [esi + 1]
inc esi
mov dword [esp + 0x18], esi
lea eax, [edi - 0x30]
cmp eax, 9
ja 0x4471b6
cmp edi, 0x30
jne 0x44713e
lea ebx, [ebx]
movsx edi, byte [esi + 1]
inc esi
cmp edi, 0x30
je 0x447130
mov dword [esp + 0x18], esi
lea eax, [edi - 0x31]
cmp eax, 8
ja 0x4471b2
mov dword [esp + 0x5c], esi
lea eax, [edi - 0x30]
movsx edi, byte [esi + 1]
inc esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], esi
cmp edi, 0x30
jl 0x447184
mov ecx, eax
cmp edi, 0x39
jg 0x44717c
inc esi
lea ecx, [ecx + ecx*4]
lea ecx, [ecx - 0x18]
mov dword [esp + 0x18], esi
lea ecx, [edi + ecx*2]
movsx edi, byte [esi]
cmp edi, 0x30
jge 0x447161
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x24]
mov eax, esi
sub eax, dword [esp + 0x5c]
cmp eax, 8
jg 0x44719a
mov eax, dword [esp + 0x20]
cmp eax, 0x4e1f
jle 0x4471a3
mov eax, 0x4e1f
mov dword [esp + 0x20], eax
cmp dword [esp + 0x2c], 0
je 0x4471be
neg eax
mov dword [esp + 0x20], eax
jmp 0x4471be
xor eax, eax
jmp 0x4471c2
mov esi, dword [esp + 0x50]
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x28], 0
jne 0x4472ca
cmp dword [esp + 0x30], 0
jne 0x44827b
cmp dword [esp + 0x40], 0
jne 0x44827b
mov eax, dword [esp + 0x48]
test eax, eax
jne case.0x447202.74
add edi, 0xffffffb7
cmp edi, 0x25
ja case.0x447202.74
movzx eax, byte [edi + 0x4482f0]
jmp dword [eax*4 + 0x4482e4]
mov edx, 0x6e
mov edi, 0x4bb45d
movsx ecx, byte [esi + 1]
inc esi
lea eax, [ecx - 0x41]
cmp eax, 0x19
ja 0x447223
add ecx, 0x20
cmp ecx, edx
jne case.0x447202.74
movsx edx, byte [edi]
inc edi
test edx, edx
jne 0x447213
mov eax, esi
lea ecx, [esp + 0x18]
mov edx, str.inity
mov dword [esp + 0x18], eax
call fcn.00446810
mov esi, dword [esp + 0x18]
test eax, eax
jne 0x447250
inc esi
mov dword [esp + 0x14], 0x7ff00000
mov dword [esp + 0x10], 0
movsd xmm2, qword [esp + 0x10]
jmp 0x44827b
mov edx, 0x61
mov edi, 0x4bb44d
movsx ecx, byte [esi + 1]
inc esi
lea eax, [ecx - 0x41]
cmp eax, 0x19
ja 0x447285
add ecx, 0x20
cmp ecx, edx
jne case.0x447202.74
movsx edx, byte [edi]
inc edi
test edx, edx
jne 0x447275
inc esi
mov dword [esp + 0x14], 0x7ff80000
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], edx
cmp byte [esi], 0x28
jne 0x447260
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
call fcn.00446850
movsd xmm2, qword [esp + 0x10]
jmp 0x448277
mov esi, dword [esp + 0x50]
xor eax, eax
jmp 0x44827f
sub eax, dword [esp + 0x34]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x20], eax
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x1c]
test eax, eax
movd xmm2, edx
cmove eax, edi
mov dword [esp + 0x1c], eax
mov eax, 0x10
cmp edi, eax
cvtdq2pd xmm2, xmm2
cmovl eax, edi
mov dword [esp + 0x50], eax
mov eax, edx
shr eax, 0x1f
addsd xmm2, qword [eax*8 + 0x4bfd10]
mov eax, dword [esp + 0x50]
movsd qword [esp + 0x40], xmm2
movsd qword [esp + 0x10], xmm2
cmp eax, 9
jle 0x44735d
movsd xmm1, qword [eax*8 + 0x4bb330]
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
mulsd xmm1, xmm2
addsd xmm0, qword [ecx*8 + 0x4bfd10]
addsd xmm1, xmm0
movaps xmm2, xmm1
movsd xmm1, qword [esp + 0x70]
movsd qword [esp + 0x40], xmm2
movsd qword [esp + 0x10], xmm2
mov eax, dword [esp + 0x20]
cmp edi, 0xf
jg 0x4473d6
test eax, eax
je 0x44827b
jle 0x4473be
cmp eax, 0x16
jg 0x44738a
movsd xmm0, qword [eax*8 + 0x4bb378]
mulsd xmm0, xmm2
movaps xmm2, xmm0
jmp 0x44827b
mov ecx, 0xf
sub ecx, edi
lea eax, [ecx + 0x16]
cmp dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
jg 0x4473d6
movsd xmm0, qword [ecx*8 + 0x4bb378]
sub eax, ecx
mulsd xmm0, xmm2
mulsd xmm0, qword [eax*8 + 0x4bb378]
movaps xmm2, xmm0
jmp 0x44827b
cmp eax, 0xffffffea
jl 0x4473d6
shl eax, 3
mov ecx, 0x4bb378
sub ecx, eax
divsd xmm2, qword [ecx]
jmp 0x44827b
sub eax, dword [esp + 0x50]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x2c], ecx
mov dword [esp + 0xa8], ecx
test eax, eax
jle 0x4474ab
mov ecx, eax
and ecx, 0xf
je 0x44740e
movsd xmm0, qword [ecx*8 + 0x4bb378]
mulsd xmm0, xmm2
movaps xmm2, xmm0
movsd qword [esp + 0x10], xmm2
and eax, 0xfffffff0
je 0x4475a7
cmp eax, 0x134
jg 0x447f23
sar eax, 4
xor ecx, ecx
cmp eax, 1
jle 0x44744b
lea esp, [esp]
test al, 1
je 0x447443
mulsd xmm2, qword [ecx*8 + 0x4bb350]
movsd qword [esp + 0x10], xmm2
sar eax, 1
inc ecx
cmp eax, 1
jg 0x447430
movsd xmm0, qword [ecx*8 + 0x4bb350]
sub dword [esp + 0x14], 0x3500000
mulsd xmm0, qword [esp + 0x10]
movsd qword [esp + 0x10], xmm0
mov eax, dword [esp + 0x14]
mov ecx, eax
and ecx, 0x7ff00000
cmp ecx, 0x7ca00000
ja 0x447f23
cmp ecx, 0x7c900000
jbe 0x44749d
mov dword [esp + 0x14], 0x7fefffff
mov dword [esp + 0x10], 0xffffffff
jmp 0x4475a7
add eax, 0x3500000
mov dword [esp + 0x14], eax
jmp 0x4475a7
jns 0x4475a7
neg eax
mov ecx, eax
and ecx, 0xf
je 0x4474cf
divsd xmm2, qword [ecx*8 + 0x4bb378]
movsd qword [esp + 0x40], xmm2
movsd qword [esp + 0x10], xmm2
sar eax, 4
test eax, eax
je 0x4475a7
cmp eax, 0x20
jge 0x448171
test al, 0x10
mov dword [esp + 0x5c], 0x6a
mov ecx, 0
cmovne ecx, dword [esp + 0x5c]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0xa8], ecx
test eax, eax
jle 0x447531
mov ecx, 0x4bb320
jmp 0x447510
test al, 1
je 0x44751e
mulsd xmm2, qword [ecx]
movsd qword [esp + 0x10], xmm2
sar eax, 1
add ecx, 8
test eax, eax
jg 0x447510
mov ecx, dword [esp + 0x2c]
movsd qword [esp + 0x40], xmm2
test ecx, ecx
je 0x447593
mov eax, dword [esp + 0x14]
mov ecx, 0x6b
shr eax, 0x14
and eax, 0x7ff
sub ecx, eax
test ecx, ecx
jle 0x447593
cmp ecx, 0x20
jl 0x447582
mov dword [esp + 0x10], 0
cmp ecx, 0x35
jl 0x44756e
mov dword [esp + 0x14], 0x3700000
movsd xmm0, qword [esp + 0x10]
jmp 0x447599
add ecx, 0xffffffe0
or eax, 0xffffffff
shl eax, cl
and dword [esp + 0x14], eax
movsd xmm0, qword [esp + 0x10]
jmp 0x447599
or eax, 0xffffffff
shl eax, cl
and dword [esp + 0x10], eax
movsd xmm0, qword [esp + 0x10]
jmp 0x447599
movsd xmm0, qword [esp + 0x40]
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jnp 0x448171
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], esi
cmp edi, 0x28
jle 0x44767f
mov eax, 0x12
mov ecx, eax
cmp esi, eax
jge 0x4475d3
mov eax, dword [esp + 0x48]
add eax, ecx
mov edi, dword [esp + 0x84]
mov esi, dword [esp + 0x58]
mov edi, edi
dec eax
cmp eax, dword [esp + 0x38]
jg 0x4475ee
cmp eax, edi
jl 0x4475ee
lea eax, [edi - 1]
cmp byte [eax + esi], 0x30
jne 0x4475f7
dec ecx
jmp 0x4475e0
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
sub edi, ecx
add dword [esp + 0x20], edi
cmp esi, ecx
mov edi, ecx
cmovg esi, ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], esi
cmp ecx, 9
jge 0x44767f
xor edx, edx
xor esi, esi
cmp dword [esp + 0x1c], edx
jle 0x44764a
mov edi, dword [esp + 0x1c]
jmp 0x447630
mov eax, dword [esp + 0x58]
lea edx, [edx + edx*4]
lea edx, [edx - 0x18]
movsx ecx, byte [esi + eax]
inc esi
lea edx, [ecx + edx*2]
cmp esi, edi
jl 0x447630
mov edi, dword [esp + 0x28]
cmp esi, edi
jge 0x44767b
mov eax, dword [esp + 0x38]
add eax, dword [esp + 0x58]
sub edi, esi
mov dword [esp + 0x38], edi
mov edi, eax
mov dword [esp + 0x5c], eax
dec dword [esp + 0x38]
lea edx, [edx + edx*4]
movsx eax, byte [edi]
lea edx, [edx - 0x18]
lea edi, [edi + 1]
lea edx, [eax + edx*2]
jne 0x447662
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
push dword [esp + 0x48]
mov ecx, dword [esp + 0x5c]
push edx
push edi
mov edx, esi
call fcn.00445c20
movsd xmm0, qword [0x4bfc50]
mov ecx, eax
movsd qword [esp + 0x13c], xmm0
add esp, 0xc
movsd xmm0, qword [0x4bfc40]
movsd qword [esp + 0xc0], xmm0
movsd xmm0, qword [0x4bfc30]
movsd qword [esp + 0xd0], xmm0
movsd xmm0, qword [0x4bfcf0]
movsd qword [esp + 0x118], xmm0
movsd xmm0, qword [0x4bfcb8]
movsd qword [esp + 0x120], xmm0
movsd xmm0, qword [0x4bfc10]
movsd qword [esp + 0x138], xmm0
movsd xmm0, qword [0x4bfc28]
movsd qword [esp + 0x110], xmm0
movsd xmm0, qword [0x4bfc38]
mov dword [esp + 0x50], ecx
movsd qword [esp + 0x128], xmm0
mov ecx, dword [ecx + 4]
mov esi, 1
call fcn.00445a40
mov edx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
mov ecx, dword [edx + 0x10]
lea ecx, [ecx*4 + 8]
push ecx
lea ecx, [edx + 0xc]
push ecx
lea ecx, [eax + 0xc]
push ecx
call fcn.00481c00
add esp, 0xc
lea eax, [esp + 0xe8]
lea edx, [esp + 0x5c]
lea ecx, [esp + 0x10]
push eax
call fcn.00446620
add esp, 4
mov dword [esp + 0x30], eax
mov ecx, esi
call fcn.00445dc0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x20]
test eax, eax
js 0x44778a
xor edx, edx
mov dword [esp + 0x40], eax
xor esi, esi
jmp 0x447798
mov edx, eax
xor ecx, ecx
neg edx
mov dword [esp + 0x40], ecx
mov esi, edx
xor eax, eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x38], esi
test ecx, ecx
js 0x4477b0
add esi, ecx
mov dword [esp + 0x38], esi
jmp 0x4477b6
sub eax, ecx
mov dword [esp + 0x24], eax
sub ecx, dword [esp + 0x2c]
mov dword [esp + 0x34], esi
mov esi, dword [esp + 0xe8]
lea eax, [esi - 1]
add eax, ecx
cmp eax, 0xfffffc02
jge 0x4477d9
add ecx, 0x433
jmp 0x4477e0
mov ecx, 0x36
sub ecx, esi
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x2c]
add esi, ecx
add eax, ecx
mov ecx, dword [esp + 0x24]
add ecx, eax
cmp esi, ecx
mov dword [esp + 0x24], ecx
mov eax, ecx
cmovl eax, esi
cmp eax, dword [esp + 0x34]
cmovg eax, dword [esp + 0x34]
test eax, eax
jle 0x447816
sub ecx, eax
sub esi, eax
sub dword [esp + 0x34], eax
mov dword [esp + 0x24], ecx
test edx, edx
jle 0x447997
mov ecx, dword [esp + 0x1c]
call fcn.00445fa0
mov edx, dword [esp + 0x30]
mov ecx, eax
mov dword [esp + 0x1c], eax
call fcn.00445e60
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x38], eax
test ecx, ecx
je 0x44798f
cmp dword [ecx + 4], 7
jle 0x447864
push ecx
call fcn.0047b62c
mov eax, dword [esp + 0x3c]
add esp, 4
mov ecx, eax
mov dword [esp + 0x30], ecx
jmp 0x44799b
mov eax, dword [esp + 0x54]
test al, 1
je 0x44787f
and eax, 0xfffffffe
lea ecx, [esp + 0x140]
mov dword [esp + 0x54], eax
call fcn.004373e0
mov eax, dword [0x4d8e78]
test eax, 0xfffffffe
jne 0x4478de
mov ecx, 1
xor eax, eax
mov edx, 0x4d8e78
lock cmpxchg dword [edx], ecx
test eax, eax
je 0x4478c4
mov eax, dword [0x4d8e78]
cmp eax, 1
jne 0x4478de
lea esp, [esp]
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4d8e78]
cmp eax, 1
je 0x4478b0
jmp 0x4478de
push 0x7d0
push 0x4d8e7c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov dword [0x4d8e78], 0x4d8e7c
mov eax, dword [0x4d8e78]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [esp + 0x30]
mov ecx, dword [edx + 4]
mov eax, dword [ecx*4 + 0x4d8cb0]
mov dword [edx], eax
mov eax, dword [esp + 0x54]
mov dword [ecx*4 + 0x4d8cb0], edx
test al, 2
je 0x44791c
and eax, 0xfffffffd
lea ecx, [esp + 0x2a0]
mov dword [esp + 0x54], eax
call fcn.004373e0
mov eax, dword [0x4d8e78]
test eax, 0xfffffffe
jne 0x447974
mov ecx, 1
xor eax, eax
mov edx, 0x4d8e78
lock cmpxchg dword [edx], ecx
test eax, eax
je 0x44795a
mov eax, dword [0x4d8e78]
cmp eax, 1
jne 0x447974
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4d8e78]
cmp eax, 1
je 0x447946
jmp 0x447974
push 0x7d0
push 0x4d8e7c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov dword [0x4d8e78], 0x4d8e7c
mov eax, dword [0x4d8e78]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
mov ecx, eax
mov dword [esp + 0x30], ecx
jmp 0x44799b
mov ecx, dword [esp + 0x30]
test esi, esi
jle 0x4479ae
mov edx, esi
call fcn.00446150
mov esi, eax
mov dword [esp + 0x30], esi
jmp 0x4479b2
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
test eax, eax
jle 0x4479cb
mov edx, eax
call fcn.00445fa0
mov ecx, eax
mov dword [esp + 0x48], ecx
mov eax, dword [esp + 0x24]
test eax, eax
jle 0x4479e0
mov edx, eax
call fcn.00446150
mov ecx, eax
mov dword [esp + 0x48], ecx
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x4479fb
mov ecx, dword [esp + 0x1c]
mov edx, eax
call fcn.00446150
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x1c], eax
mov edx, ecx
mov ecx, esi
call fcn.00446360
mov ecx, eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
mov edx, dword [ecx + 0xc]
mov esi, dword [ecx + 0x10]
mov dword [ecx + 0xc], 0
mov ecx, esi
mov eax, dword [eax + 0x10]
mov dword [esp + 0x34], edx
mov dword [esp + 0x90], edx
mov dword [esp + 0x38], esi
sub ecx, eax
jne 0x447a77
mov edx, dword [esp + 0x1c]
lea ecx, [eax - 1]
mov esi, dword [esp + 0x24]
add esi, 0x14
lea ecx, [esi + ecx*4]
lea edx, [edx + eax*4]
mov eax, dword [ecx]
add edx, 0x10
cmp eax, dword [edx]
jne 0x447a65
cmp ecx, esi
jbe 0x447afd
mov eax, dword [ecx - 4]
sub ecx, 4
sub edx, 4
cmp eax, dword [edx]
je 0x447a50
mov eax, dword [ecx]
cmp eax, dword [edx]
sbb ecx, ecx
and ecx, 0xfffffffe
inc ecx
mov edx, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
cmp dword [esp + 0x9c], edi
jle 0x447a88
test ecx, ecx
jle 0x447f0b
test ecx, ecx
js 0x448081
je 0x447f4f
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0xec]
call fcn.004464c0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0xcc]
movapd xmm1, xmm0
movsd qword [esp + 0xb0], xmm1
call fcn.004464c0
mov eax, dword [esp + 0x1c]
movsd qword [esp + 0xb8], xmm0
sub esi, dword [eax + 0x10]
shl esi, 5
sub esi, dword [esp + 0xcc]
add esi, dword [esp + 0xec]
test esi, esi
jle 0x447b04
shl esi, 0x14
add dword [esp + 0xb4], esi
movsd xmm1, qword [esp + 0xb0]
jmp 0x447b1a
xor ecx, ecx
jmp 0x447a6f
imul eax, esi, 0xfff00000
add dword [esp + 0xbc], eax
movsd xmm0, qword [esp + 0xb8]
divsd xmm1, xmm0
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x34]
movsd xmm0, qword [esp + 0x130]
comisd xmm0, xmm1
jb 0x447c55
test edx, edx
je 0x447b4c
movsd xmm2, qword [esp + 0xc0]
movapd xmm1, xmm2
jmp 0x447b89
mov ecx, dword [esp + 0x10]
test ecx, ecx
jne 0x447c31
test eax, 0xfffff
jne 0x447c3e
movsd xmm0, qword [esp + 0xc0]
comisd xmm0, xmm1
jbe 0x447c23
movsd xmm1, qword [esp + 0xd0]
movapd xmm2, xmm1
xorpd xmm2, xmmword [esp + 0x60]
mov esi, eax
and esi, 0x7ff00000
cmp esi, 0x7fe00000
jne 0x447c84
movsd xmm0, qword [esp + 0x10]
sub eax, 0x3500000
mov dword [esp + 0x14], eax
and eax, 0x7ff00000
sub eax, 0x3400000
movsd qword [esp + 0x78], xmm0
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], 0
movsd xmm0, qword [esp + 0x100]
mulsd xmm0, xmm2
addsd xmm0, qword [esp + 0x10]
movsd qword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x14]
mov eax, ecx
and eax, 0x7ff00000
cmp eax, 0x7ca00000
jb 0x447c6f
cmp dword [esp + 0x7c], 0x7fefffff
jne 0x447c0e
cmp dword [esp + 0x78], 0xffffffff
je 0x447f1f
mov dword [esp + 0x14], 0x7fefffff
mov dword [esp + 0x10], 0xffffffff
jmp 0x447da4
mulsd xmm1, qword [esp + 0xd0]
jmp 0x447b7f
cmp ecx, 1
jne 0x447c3e
test eax, eax
je 0x44814f
movsd xmm1, qword [esp + 0xc0]
movsd xmm2, qword [esp + 0x118]
jmp 0x447b89
mulsd xmm1, qword [esp + 0xd0]
test edx, edx
je 0x447b7f
movapd xmm2, xmm1
jmp 0x447b89
add ecx, 0x3500000
mov dword [esp + 0x14], ecx
movsd xmm0, qword [esp + 0x10]
jmp 0x447d30
cmp dword [esp + 0x2c], 0
je 0x447cfb
cmp esi, 0x6a00000
ja 0x447cfb
movsd xmm0, qword [esp + 0x120]
comisd xmm0, xmm1
jb 0x447cdb
movapd xmm0, xmm1
call fcn.0049d431
mov edx, dword [esp + 0x34]
test eax, eax
mov ecx, 1
cmove eax, ecx
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x4bfd10]
movapd xmm2, xmm1
test edx, edx
jne 0x447cdb
xorpd xmm2, xmmword [esp + 0x60]
mov eax, 0x6b00000
movsd qword [esp + 0xe0], xmm2
sub eax, esi
add dword [esp + 0xe4], eax
movsd xmm2, qword [esp + 0xe0]
lea eax, [esi - 0x3400000]
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], eax
movsd xmm0, qword [esp + 0xf0]
mulsd xmm0, xmm2
addsd xmm0, qword [esp + 0x10]
movsd qword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x14]
movsd qword [esp + 0x40], xmm0
cmp dword [esp + 0x9c], edi
jne 0x447da4
cmp dword [esp + 0x2c], 0
jne 0x447da4
mov eax, ecx
and eax, 0x7ff00000
cmp esi, eax
jne 0x447da4
cvttsd2si eax, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm1, xmm0
test edx, edx
jne 0x447d82
cmp dword [esp + 0x10], edx
jne 0x447d82
test ecx, 0xfffff
jne 0x447d82
movsd xmm0, qword [esp + 0x138]
comisd xmm0, xmm1
jmp 0x447d9e
movsd xmm0, qword [esp + 0x110]
comisd xmm0, xmm1
ja 0x4481c2
comisd xmm1, xmmword [esp + 0x128]
ja 0x4481c2
mov esi, dword [esp + 0x30]
test esi, esi
je 0x447ee7
cmp dword [esi + 4], 7
jle 0x447dc4
push esi
call fcn.0047b62c
add esp, 4
jmp 0x447ee7
mov eax, dword [esp + 0x54]
test al, 4
je 0x447ddf
and eax, 0xfffffffb
lea ecx, [esp + 0x1f0]
mov dword [esp + 0x54], eax
call fcn.004373e0
mov eax, dword [0x4d8e78]
test eax, 0xfffffffe
jne 0x447e3e
mov ecx, 1
xor eax, eax
mov edx, 0x4d8e78
lock cmpxchg dword [edx], ecx
test eax, eax
je 0x447e24
mov eax, dword [0x4d8e78]
cmp eax, 1
jne 0x447e3e
lea esp, [esp]
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4d8e78]
cmp eax, 1
je 0x447e10
jmp 0x447e3e
push 0x7d0
push 0x4d8e7c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov dword [0x4d8e78], 0x4d8e7c
mov eax, dword [0x4d8e78]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 4]
mov eax, dword [ecx*4 + 0x4d8cb0]
mov dword [esi], eax
mov eax, dword [esp + 0x54]
mov dword [ecx*4 + 0x4d8cb0], esi
test al, 8
je 0x447e78
and eax, 0xfffffff7
lea ecx, [esp + 0x350]
mov dword [esp + 0x54], eax
call fcn.004373e0
mov eax, dword [0x4d8e78]
test eax, 0xfffffffe
jne 0x447ed0
mov ecx, 1
xor eax, eax
mov edx, 0x4d8e78
lock cmpxchg dword [edx], ecx
test eax, eax
je 0x447eb6
mov eax, dword [0x4d8e78]
cmp eax, 1
jne 0x447ed0
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4d8e78]
cmp eax, 1
je 0x447ea2
jmp 0x447ed0
push 0x7d0
push 0x4d8e7c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov dword [0x4d8e78], 0x4d8e7c
mov eax, dword [0x4d8e78]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x48]
call fcn.00445b00
mov ecx, dword [esp + 0x1c]
call fcn.00445b00
mov ecx, dword [esp + 0x24]
call fcn.00445b00
mov ecx, dword [esp + 0x50]
jmp 0x447721
test edx, edx
jne 0x4481b6
mov dword [esp + 0x9c], edi
jmp 0x448089
mov esi, dword [esp + 0x18]
call fcn.0047f65f
movsd xmm3, qword [esp + 0x60]
mov dword [esp + 0x14], 0x7ff00000
mov dword [esp + 0x10], 0
movsd xmm2, qword [esp + 0x10]
mov dword [eax], 0x22
jmp 0x44827b
mov esi, dword [esp + 0x14]
test edx, edx
mov edx, dword [esp + 0x10]
je 0x447fba
mov eax, esi
and eax, 0xfffff
cmp eax, 0xfffff
jne 0x447fca
cmp dword [esp + 0x2c], 0
je 0x447f8f
mov eax, esi
and eax, 0x7ff00000
cmp eax, 0x6a00000
ja 0x447f8f
shr eax, 0x14
mov ecx, 0x6b
sub ecx, eax
or eax, 0xffffffff
shl eax, cl
jmp 0x447f92
or eax, 0xffffffff
cmp edx, eax
jne 0x447fca
and esi, 0x7ff00000
mov dword [esp + 0x10], 0
add esi, 0x100000
mov dword [esp + 0x90], 0
jmp 0x4481b2
test esi, 0xfffff
jne 0x447fca
test edx, edx
je 0x448133
test dl, 1
je 0x4481b6
mov ecx, dword [esp + 0x34]
and esi, 0x7ff00000
sub esi, 0x3400000
test ecx, ecx
je 0x448027
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], 0
movsd xmm0, qword [esp + 0x108]
addsd xmm0, qword [esp + 0x10]
movsd qword [esp + 0x40], xmm0
movsd qword [esp + 0x10], xmm0
mov eax, 1
sub eax, ecx
mov dword [esp + 0x90], eax
jmp 0x4481c2
movsd xmm0, qword [esp + 0x10]
movsd xmm1, qword [esp + 0x70]
mov dword [esp + 0xfc], esi
mov dword [esp + 0xf8], 0
subsd xmm0, qword [esp + 0xf8]
ucomisd xmm0, xmm1
movsd qword [esp + 0x40], xmm0
movsd qword [esp + 0x10], xmm0
lahf
test ah, 0x44
jp 0x448014
cmp dword [esp + 0x9c], edi
jle 0x44816b
mov dword [esp + 0xac], 1
jmp 0x4481c2
test edx, edx
jne 0x4481b6
cmp dword [esp + 0x10], 0
jne 0x4481b6
mov esi, dword [esp + 0x14]
test esi, 0xfffff
jne 0x4481b6
mov eax, esi
and eax, 0x7ff00000
cmp eax, 0x6b00000
jbe 0x4481b6
mov ecx, dword [esp + 0x24]
cmp dword [ecx + 0x14], 0
jne 0x4480ca
cmp dword [ecx + 0x10], 1
jle 0x4481b6
mov edx, 1
call fcn.00446150
mov ecx, eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [ecx + 0x10]
sub eax, edx
jne 0x44812b
lea eax, [ecx + 0x14]
lea ecx, [edx - 1]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x1c]
add eax, 0x10
lea edx, [eax + edx*4]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x448121
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
add eax, 0x14
cmp ecx, eax
jbe 0x4481b6
mov eax, dword [ecx - 4]
sub ecx, 4
sub edx, 4
cmp eax, dword [edx]
je 0x448101
mov eax, dword [ecx]
cmp eax, dword [edx]
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
jle 0x4481b6
cmp dword [esp + 0x2c], 0
je 0x44819d
mov eax, esi
and eax, 0x7ff00000
cmp eax, 0x6b00000
jg 0x44819d
cmp eax, 0x3700000
jg 0x4481b6
cmp dword [esp + 0x9c], edi
jle 0x448165
mov dword [esp + 0xac], 1
jmp 0x4481b6
movsd xmm1, qword [esp + 0x70]
mov esi, dword [esp + 0x18]
jmp 0x448177
movsd xmm1, qword [esp + 0x70]
movapd xmm0, xmm1
movsd qword [esp + 0x40], xmm0
call fcn.0047f65f
movsd xmm2, qword [esp + 0x40]
movsd xmm3, qword [esp + 0x60]
mov dword [eax], 0x22
jmp 0x44827b
and esi, 0x7ff00000
mov dword [esp + 0x10], 0xffffffff
dec esi
or esi, 0xfffff
mov dword [esp + 0x14], esi
movsd xmm0, qword [esp + 0x10]
movsd qword [esp + 0x40], xmm0
mov ecx, dword [esp + 0x30]
call fcn.00445b00
mov ecx, dword [esp + 0x48]
call fcn.00445b00
mov ecx, dword [esp + 0x1c]
call fcn.00445b00
mov ecx, dword [esp + 0x50]
call fcn.00445b00
mov ecx, dword [esp + 0x24]
call fcn.00445b00
cmp dword [esp + 0x9c], edi
jle 0x44821f
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x14]
call fcn.00446b70
mov eax, dword [esp + 0xac]
add esp, 4
movsd xmm2, qword [esp + 0x10]
jmp 0x448229
movsd xmm2, qword [esp + 0x40]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x448271
mov dword [esp + 0x7c], 0x39500000
mov dword [esp + 0x78], 0
movsd xmm0, qword [esp + 0x78]
mulsd xmm0, xmm2
movaps xmm2, xmm0
movsd qword [esp + 0x10], xmm2
test dword [esp + 0x14], 0x7ff00000
movsd qword [esp + 0x40], xmm2
jne 0x448271
call fcn.0047f65f
movsd xmm2, qword [esp + 0x40]
mov dword [eax], 0x22
movsd xmm3, qword [esp + 0x60]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xdc]
test ecx, ecx
je 0x44828c
mov dword [ecx], esi
test eax, eax
je 0x448294
xorpd xmm2, xmm3
pop edi
movapd xmm0, xmm2
pop esi
mov esp, ebp
pop ebp
ret