Function at 0x100352e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10092f20
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x160
mov eax, dword [0x100af380]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x168], ecx
mov esi, dword [0x100b06f0]
mov ecx, esi
mov eax, dword [ebx + 8]
mov edi, dword [ebx + 0x10]
mov dword [ebp - 0xf4], eax
mov eax, dword [ecx + 0x1b94]
mov dword [ebp - 0x118], 0x40
mov dword [ebp - 0xd4], ecx
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1b94]
mov dword [ebp - 0x148], eax
cmp byte [eax + 0x8f], 0
jne 0x10035721
mov ecx, dword [ebx + 0x14]
mov edx, ecx
mov dword [ebp - 0x100], ecx
shr dword [ebp - 0x100], 0xe
and byte [ebp - 0x100], 1
mov dword [ebp - 0x154], ecx
shr dword [ebp - 0x154], 0xf
and byte [ebp - 0x154], 1
shr ecx, 0x10
not cl
shr edx, 0x14
and ecx, 0xffffff01
and edx, 0xffffff01
mov dword [ebp - 0x11c], ecx
mov ecx, dword [ebx + 0x14]
shr ecx, 0x12
and ecx, 0xffffff01
mov dword [ebp - 0xec], edx
mov dword [ebp - 0x12c], ecx
test dl, dl
je 0x100353e5
call fcn.10010af0
mov esi, dword [0x100b06f0]
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 0xc0]
xor edx, edx
mov eax, dword [eax + 0xc8]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x168]
call fcn.10004e70
add esp, 4
mov dword [ebp - 0xe8], eax
cmp dword [esi + 0x1bc8], eax
jne 0x10035419
mov dword [esi + 0x1bcc], eax
cmp dword [esi + 0x1c04], eax
jne 0x10035428
mov byte [esi + 0x1c08], 1
mov eax, dword [ebp - 0x168]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x1003544b
mov dl, byte [ecx]
test dl, dl
je 0x1003544b
cmp dl, 0x23
jne 0x10035445
cmp byte [ecx + 1], dl
je 0x1003544b
inc ecx
cmp ecx, 0xffffffff
jb 0x10035435
movss xmm1, dword [0x100a4c80]
xorps xmm5, xmm5
movss xmm0, dword [esi + 0x1930]
movss dword [ebp - 0x158], xmm1
cmp eax, ecx
jne 0x10035474
movss dword [ebp - 0x16c], xmm5
jmp 0x100354c6
push 0
push ecx
push eax
push ecx
mov ecx, dword [esi + 0x192c]
lea eax, [ebp - 0x124]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.10024ec0
movss xmm0, dword [ebp - 0x124]
xorps xmm5, xmm5
addss xmm0, dword [0x100a4bac]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [ebp - 0x120]
cmp byte [ebp - 0xec], 0
movss xmm6, dword [edi]
movss xmm7, dword [edi + 4]
mov edi, dword [ebp - 0xd4]
movss dword [ebp - 0x140], xmm6
movss dword [ebp - 0x160], xmm7
je 0x100354fe
movss xmm0, dword [edi + 0x1930]
mulss xmm0, dword [0x100a4c20]
test byte [esi + 0x1c78], 1
movss xmm2, dword [edi + 0x1554]
mov ecx, dword [esi + 0x1b94]
addss xmm2, xmm2
addss xmm2, xmm0
je 0x10035527
movss xmm0, dword [esi + 0x1c7c]
jmp 0x1003552f
movss xmm0, dword [ecx + 0x1b4]
comiss xmm5, xmm0
movss xmm3, dword [0x100a4bb4]
jbe 0x10035571
cmp dword [ecx + 0x198], 0
movss xmm1, dword [ecx + 0x24c]
jne 0x10035556
cmp dword [esi + 0x1ecc], 0
je 0x1003555e
movss xmm1, dword [ecx + 0x21c]
subss xmm1, dword [ecx + 0xcc]
addss xmm1, xmm0
movaps xmm0, xmm3
maxss xmm0, xmm1
comiss xmm5, xmm6
mov edx, ecx
cvttss2si eax, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
movd xmm4, eax
cvtdq2ps xmm4, xmm4
ja 0x1003558e
comiss xmm5, xmm7
jbe 0x100355b8
cmp dword [ecx + 0x198], 0
movss xmm0, dword [ecx + 0x24c]
movss xmm1, dword [ecx + 0x250]
jne 0x100355b0
cmp dword [esi + 0x1ecc], 0
je 0x100355b8
movss xmm0, dword [ecx + 0x21c]
movss xmm3, dword [0x100a4c04]
ucomiss xmm6, xmm5
lahf
test ah, 0x44
jp 0x100355d6
movaps xmm6, xmm4
movss dword [ebp - 0x140], xmm6
jmp 0x100355ff
comiss xmm5, xmm6
jbe 0x100355ff
subss xmm0, dword [edx + 0xcc]
addss xmm6, xmm0
comiss xmm3, xmm6
movss dword [ebp - 0x140], xmm6
jb 0x100355ff
movaps xmm6, xmm3
movss dword [ebp - 0x140], xmm3
ucomiss xmm7, xmm5
lahf
test ah, 0x44
jp 0x10035615
movaps xmm7, xmm2
movss dword [ebp - 0x160], xmm7
jmp 0x1003563e
comiss xmm5, xmm7
jbe 0x1003563e
subss xmm1, dword [edx + 0xd0]
addss xmm7, xmm1
comiss xmm3, xmm7
movss dword [ebp - 0x160], xmm7
jb 0x1003563e
movaps xmm7, xmm3
movss dword [ebp - 0x160], xmm3
movss xmm0, dword [ebp - 0x16c]
comiss xmm0, xmm5
jbe 0x10035658
movaps xmm2, xmm0
addss xmm2, dword [edi + 0x1568]
jmp 0x1003565b
xorps xmm2, xmm2
cmp byte [ebp - 0xec], 0
movaps xmm0, xmm7
mov esi, dword [ebp - 0x148]
movaps xmm1, xmm6
mov dword [ebp - 0x134], esi
movss xmm4, dword [esi + 0xd0]
movss xmm3, dword [esi + 0xcc]
addss xmm0, xmm4
addss xmm1, xmm3
movss dword [ebp - 0x68], xmm3
movss dword [ebp - 0x64], xmm4
movss dword [ebp - 0x28], xmm3
movss dword [ebp - 0x24], xmm4
movss dword [ebp - 0x5c], xmm0
movaps xmm0, xmm6
addss xmm0, xmm2
movss dword [ebp - 0x60], xmm1
movaps xmm1, xmm4
addss xmm1, xmm7
addss xmm0, xmm3
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x20], xmm0
je 0x100358ef
mov edx, dword [ebp - 0xe8]
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
call fcn.100107c0
add esp, 4
test al, al
jne 0x10035741
movss xmm0, dword [ebp - 0x20]
lea ecx, [ebp - 0x124]
subss xmm0, dword [ebp - 0x28]
movss xmm1, dword [edi + 0x1554]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [ebp - 0x1c]
subss xmm0, dword [ebp - 0x24]
movss dword [ebp - 0x120], xmm0
call fcn.10010690
call fcn.10010c20
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100907a6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, dword [0x100b06f0]
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x44], 3
movups xmm0, xmmword [esi + 0x160c]
lea ecx, [esi + 0x1c8c]
movups xmmword [ebp - 0x40], xmm0
call fcn.10016410
movups xmm0, xmmword [edi + 0x164c]
lea eax, [ebp - 0x128]
mov dword [ebp - 0x128], 6
push eax
movups xmmword [esi + 0x160c], xmm0
mov esi, dword [0x100b06f0]
movss xmm0, dword [edi + 0x1558]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [esi + 0x1540]
lea ecx, [esi + 0x1c98]
movss dword [ebp - 0x124], xmm0
call fcn.10016350
movss xmm0, dword [ebp - 0x1c]
lea eax, [ebp - 0x128]
movss dword [esi + 0x1540], xmm0
mov esi, dword [0x100b06f0]
movss xmm0, dword [edi + 0x155c]
movss dword [ebp - 0x1c], xmm0
push eax
movss xmm0, dword [esi + 0x1544]
lea ecx, [esi + 0x1c98]
mov dword [ebp - 0x128], 7
movss dword [ebp - 0x124], xmm0
call fcn.10016350
movss xmm0, dword [ebp - 0x1c]
lea eax, [ebp - 0x124]
movss xmm1, dword [ebp - 0x60]
subss xmm1, dword [ebp - 0x68]
mov edx, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x168]
movss dword [esi + 0x1544], xmm0
movss xmm0, dword [ebp - 0x5c]
subss xmm0, dword [ebp - 0x64]
push 4
push 1
push eax
movss dword [ebp - 0x124], xmm1
movss dword [ebp - 0x120], xmm0
call fcn.1000afc0
add esp, 0xc
mov byte [ebp - 0xef], al
mov ecx, 2
call fcn.10005630
mov ecx, 1
call fcn.100055e0
cmp byte [ebp - 0xef], 0
jne 0x1003587e
call fcn.1000b1c0
jmp 0x1003571c
mov edx, dword [edi + 0x1b94]
mov esi, dword [ebp - 0x148]
mov dword [ebp - 0x134], edx
mov ecx, dword [edx + 0x148]
mov eax, dword [edx + 0x140]
bts ecx, eax
movss xmm0, dword [edx + 0xcc]
mov dword [edx + 0x148], ecx
addss xmm0, dword [edi + 0x1550]
movss dword [edx + 0xcc], xmm0
movss xmm0, dword [edi + 0x1554]
addss xmm0, dword [edx + 0xd0]
movss dword [edx + 0xd0], xmm0
movss xmm0, dword [ebp - 0x140]
subss xmm0, dword [edx + 0x80]
movss dword [ebp - 0x140], xmm0
jmp 0x10035937
subss xmm1, xmm4
subss xmm0, xmm3
lea ecx, [ebp - 0x124]
movss dword [ebp - 0x120], xmm1
movss xmm1, dword [edi + 0x1554]
movss dword [ebp - 0x124], xmm0
call fcn.10010690
mov edx, dword [ebp - 0xe8]
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
call fcn.100107c0
add esp, 4
test al, al
je 0x10035721
mov edx, dword [ebp - 0xe8]
lea ecx, [ebp - 0x68]
call fcn.100072c0
mov byte [ebp - 0xee], al
test al, al
je 0x10035959
mov dword [edi + 0x1e38], 1
mov edi, dword [0x100b06f0]
xor ecx, ecx
mov eax, dword [ebp - 0xe8]
add edi, 0x1f50
mov edx, eax
cmp dword [edi], eax
cmovne edi, ecx
mov ecx, esi
mov dword [ebp - 0xfc], edi
call fcn.10007540
mov edx, dword [ebp - 0xd4]
mov byte [ebp - 0xef], al
test al, al
je 0x10035a07
cmp dword [edx + 0x1e18], esi
jne 0x10035a07
mov ecx, dword [edx + 0x1e20]
cmp ecx, dword [esi + 0x1a8]
jne 0x10035a07
mov byte [ebp - 0xd5], 1
mov byte [ebp - 0xdd], 0
cmp byte [ebp - 0xee], 0
je 0x100359ce
cmp byte [edx + 0x3d8], 0
mov byte [ebp - 0xca], 1
jne 0x100359d5
mov byte [ebp - 0xca], 0
mov esi, dword [edx + 0x1bc8]
mov eax, dword [ebp - 0xe8]
cmp esi, eax
je 0x10035a22
cmp dword [edx + 0x1d10], eax
je 0x100359fe
cmp dword [edx + 0x1d04], eax
jne 0x10035a22
cmp dword [edx + 0x1d28], 2
jne 0x10035a22
mov byte [ebp - 0xc9], 1
jmp 0x10035a29
mov byte [ebp - 0xd5], 0
test al, al
je 0x100359ae
mov byte [ebp - 0xdd], 1
mov byte [ebp - 0xd5], 0
jmp 0x100359b5
mov byte [ebp - 0xc9], 0
mov eax, dword [ebp - 0xec]
test al, al
je 0x10035a7d
test edi, edi
je 0x10035a7d
test esi, esi
jne 0x10035a7d
mov eax, dword [ebp - 0x134]
xor edx, edx
mov ecx, dword [eax + 0xc0]
mov eax, dword [eax + 0xc8]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10004e70
mov ecx, dword [ebp - 0xd4]
add esp, 4
cmp dword [ecx + 0x1c04], eax
jne 0x10035a77
mov byte [ebp - 0xd7], 1
jmp 0x10035a93
mov eax, dword [ebp - 0xec]
mov byte [ebp - 0xd7], 0
test al, al
je 0x10035ac0
mov byte [ebp - 0xd7], 0
test edi, edi
je 0x10035ac0
mov eax, dword [ebp - 0x134]
xor edx, edx
mov ecx, dword [eax + 0xc0]
mov eax, dword [eax + 0xc8]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10004e70
add esp, 4
cmp esi, eax
jne 0x10035ac0
mov cl, 1
jmp 0x10035ac2
xor cl, cl
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xe8]
mov dl, byte [ebp - 0xc9]
mov byte [ebp - 0xd6], cl
mov byte [ebp - 0x101], 0
cmp dword [esi + 0x1bc8], eax
je 0x10035b06
test byte [ebx + 0x14], 0x10
jne 0x10035af3
test dl, dl
je 0x10035b06
mov eax, dword [ebp - 0xec]
test al, al
jne 0x10035b0c
mov byte [ebp - 0xf8], 1
jmp 0x10035b30
mov eax, dword [ebp - 0xec]
mov byte [ebp - 0xf8], 0
test al, al
je 0x10035b30
mov eax, dword [ebp - 0x134]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [ebp - 0xec]
movss dword [ebp - 0x158], xmm0
test edi, edi
je 0x10035b3f
xor al, 1
cmp byte [edi + 0x53], al
je 0x10035b3f
mov al, 1
jmp 0x10035b41
xor al, al
cmp byte [ebp - 0xef], 0
mov byte [ebp - 0xed], al
jne 0x10035b78
cmp byte [ebp - 0xca], 0
jne 0x10035b78
cmp byte [ebp - 0xd7], 0
jne 0x10035b78
test dl, dl
jne 0x10035b78
mov byte [ebp - 0xd7], dl
test cl, cl
jne 0x10035b7f
mov byte [ebp - 0xde], cl
jmp 0x10035b94
mov byte [ebp - 0xd7], 1
mov ecx, dword [ebp - 0xe8]
mov byte [ebp - 0xde], 1
cmp dword [esi + 0x1bc8], ecx
jne 0x10035b9c
test al, al
je 0x10035dc5
mov ecx, dword [ebp - 0xf4]
lea edi, [esi + 0x1f50]
mov dword [ebp - 0xfc], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035bc0
mov eax, dword [edi + 0x28]
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, eax
jle 0x10035bfd
test eax, eax
je 0x10035be6
cdq
sub eax, edx
lea edx, [edi + 0x24]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10035bee
mov ecx, 8
lea edx, [edi + 0x24]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10016850
push esi
push dword [ebp - 0xf4]
mov dword [edi + 0x24], esi
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [edi + 0x10]
lea eax, [edi + 0xc]
add esp, 0xc
cmp esi, 0x41
jge 0x10035c49
test esi, esi
je 0x10035c2e
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x10035c33
mov ecx, 8
mov eax, 0x41
cmp ecx, eax
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.100168c0
lea eax, [edi + 0xc]
mov dword [eax], 0x41
mov ecx, dword [edi + 0x1c]
test ecx, ecx
jns 0x10035c6f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.10016850
mov eax, dword [ebp - 0xf4]
mov dword [edi + 0x18], 0
mov edx, dword [edi + 0x14]
mov esi, edx
mov byte [edi + 0x30], 0
mov dword [ebp - 0xe4], edx
lea ecx, [edx + 0x7e]
cmp edx, ecx
jae 0x10035cd6
mov edi, eax
cmp byte [edi], 0
je 0x10035cc4
push 0
mov edx, edi
lea ecx, [ebp - 0x1c]
call fcn.10005120
mov edx, dword [ebp - 0xe4]
add edi, eax
mov eax, dword [ebp - 0x1c]
add esp, 4
test eax, eax
je 0x10035cc4
mov word [esi], ax
add esi, 2
lea eax, [edx + 0x7e]
cmp esi, eax
jb 0x10035c94
mov dword [ebp - 0xdc], edi
mov edi, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xf4]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
sar esi, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xe8]
mov dword [edi + 4], esi
cmp dword [edi], eax
jne 0x10035d21
cmp byte [ebp - 0xed], cl
jne 0x10035d21
cmp dword [edi + 0x3c], esi
mov ecx, esi
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], esi
mov dword [edi + 0x3c], ecx
mov ecx, esi
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], esi
mov dword [edi + 0x40], ecx
cmovl esi, dword [edi + 0x44]
mov dword [edi + 0x44], esi
jmp 0x10035d89
mov edx, dword [ebp - 0xec]
mov dword [edi], eax
mov al, dl
xor al, 1
mov dword [edi + 0x38], ecx
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], ecx
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x40], ecx
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov word [edi + 0x51], 1
mov dword [edi + 0x58], ecx
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], ecx
test dl, dl
jne 0x10035d8f
mov edx, dword [ebp - 0xf8]
mov eax, 1
cmp byte [ebp - 0xd5], cl
movzx edx, dl
cmovne edx, eax
mov dword [ebp - 0xf8], edx
mov edx, dword [ebp - 0xec]
test dword [ebx + 0x14], 0x2000
je 0x10035d9c
mov byte [edi + 0x48], 1
mov esi, dword [ebp - 0xd4]
test dl, dl
jne 0x10035dc5
cmp byte [ebp - 0xdd], dl
jne 0x10035dbe
cmp byte [ebp - 0xca], dl
je 0x10035dc5
cmp byte [esi + 0xfc], dl
je 0x10035dc5
mov byte [ebp - 0xf8], 1
mov ecx, dword [ebp - 0xe8]
cmp dword [esi + 0x1bc8], ecx
je 0x10035e80
cmp byte [ebp - 0xd7], 0
je 0x10035e78
mov edx, dword [ebp - 0x148]
call fcn.10007070
call fcn.100120f0
mov ecx, edx
call fcn.1000ff60
mov eax, dword [esi + 0x1bdc]
mov edx, dword [ebp - 0xec]
or eax, 3
mov dword [esi + 0x1bdc], eax
test dl, dl
jne 0x10035e1a
test byte [ebx + 0x14], 0x80
je 0x10035e23
or eax, 0xc
mov dword [esi + 0x1bdc], eax
mov eax, dword [esi + 0x1be8]
or dword [esi + 0x1be0], 2
or eax, 0x180
mov ecx, dword [esi + 0x1bec]
mov dword [esi + 0x1be8], eax
mov dword [esi + 0x1bec], ecx
test dl, dl
je 0x10035e5a
or eax, 0x60
mov dword [esi + 0x1bec], ecx
mov dword [esi + 0x1be8], eax
test dword [ebx + 0x14], 0x440
je 0x10035e72
or eax, 1
mov dword [esi + 0x1bec], ecx
mov dword [esi + 0x1be8], eax
mov ecx, dword [ebp - 0xe8]
cmp dword [esi + 0x1bc8], ecx
jne 0x10035ebd
test edi, edi
jne 0x10035e8f
call fcn.10007140
mov ecx, dword [ebp - 0xe8]
cmp dword [esi + 0x1bc8], ecx
jne 0x10035ebd
cmp byte [esi + 0x3d8], 0
je 0x10035eca
cmp byte [ebp - 0xde], 0
jne 0x10035eca
cmp byte [ebp - 0xd7], 0
jne 0x10035eca
mov byte [ebp - 0x101], 1
mov dl, 1
jmp 0x10035ed0
test edi, edi
je 0x10035ece
cmp byte [ebp - 0xd6], 0
je 0x10035ece
mov dl, 1
jmp 0x10035ed0
xor dl, dl
mov byte [ebp - 0xd6], dl
test edi, edi
je 0x10035eed
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x10035eed
test dl, dl
je 0x10035eed
mov edx, 1
jmp 0x10035eef
xor dl, dl
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x164], edx
mov byte [ebp - 0x111], dl
mov byte [ebp - 0xef], 0
mov byte [ebp - 0xed], 0
test al, al
je 0x10036026
test edi, edi
je 0x10036026
cmp byte [ebp - 0xd6], 0
jne 0x10035f30
test dl, dl
je 0x10036033
mov ecx, dword [edi + 0x10]
cmp ecx, 0x41
jge 0x10035f60
test ecx, ecx
je 0x10035f47
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x10035f4c
mov eax, 8
cmp eax, 0x41
mov ecx, 0x41
cmovg ecx, eax
push ecx
lea ecx, [edi + 0xc]
call fcn.100168c0
mov eax, dword [ebp - 0xf4]
mov dword [edi + 0xc], 0x41
mov edx, dword [edi + 0x14]
mov esi, edx
mov dword [ebp - 0xe4], edx
lea ecx, [edx + 0x80]
cmp edx, ecx
jae 0x10035fc9
mov edi, eax
cmp byte [edi], 0
je 0x10035fb7
push 0
mov edx, edi
lea ecx, [ebp - 0x1c]
call fcn.10005120
mov edx, dword [ebp - 0xe4]
add edi, eax
mov eax, dword [ebp - 0x1c]
add esp, 4
test eax, eax
je 0x10035fb7
mov word [esi], ax
add esi, 2
lea eax, [edx + 0x80]
cmp esi, eax
jb 0x10035f84
mov dword [ebp - 0xdc], edi
mov edi, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xf4]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
sar esi, 1
cmp dword [edi + 0x3c], esi
mov ecx, esi
mov dword [edi + 4], esi
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], esi
mov dword [edi + 0x3c], ecx
mov ecx, esi
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], esi
mov dword [edi + 8], eax
cmovl esi, dword [edi + 0x44]
xor edx, edx
movzx eax, byte [ebp - 0x111]
cmp ecx, esi
mov dword [edi + 0x40], ecx
mov ecx, dword [ebp - 0xe8]
cmovne edx, eax
mov eax, dword [ebp - 0x100]
mov dword [edi + 0x44], esi
mov esi, dword [ebp - 0xd4]
mov dword [ebp - 0x164], edx
cmp byte [ebp - 0xd6], 0
jne 0x1003603b
test dl, dl
jne 0x1003603b
cmp dword [esi + 0x1bc8], ecx
jne 0x1003604f
test al, al
jne 0x1003604f
test edi, edi
je 0x1003604f
mov byte [ebp - 0x111], 1
cmp byte [edi + 0x30], al
jne 0x10036056
mov byte [ebp - 0x111], 0
cmp byte [ebp - 0x154], 0
je 0x10036163
mov edx, dword [esi + 0x192c]
cmp dword [edx + 0x14], 0x2a
ja 0x10036074
mov ecx, dword [edx + 0x2c]
jmp 0x10036093
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x1003608a
mov ecx, dword [edx + 0x2c]
jmp 0x10036093
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea ecx, [eax + ecx*8]
mov eax, dword [edx + 0x10]
lea edi, [esi + 0x2dcc]
mov dword [edi + 0x10], eax
mov eax, dword [esi + 0x192c]
mov dword [ebp - 0x1c], edi
mov eax, dword [eax + 0x40]
mov dword [edi + 0x40], eax
mov eax, dword [esi + 0x192c]
mov eax, dword [eax + 0x44]
mov dword [edi + 0x44], eax
mov eax, dword [esi + 0x192c]
mov eax, dword [eax + 0x48]
mov dword [edi + 0x48], eax
mov eax, dword [esi + 0x192c]
mov esi, dword [0x100b06f0]
mov eax, dword [eax + 0x30]
mov dword [edi + 0x2c], ecx
mov dword [edi + 0x30], eax
mov eax, dword [ecx + 4]
mov ecx, edi
mov dword [edi + 0xc], eax
call fcn.10010180
lea eax, [ebp - 0x1c]
lea ecx, [esi + 0x1ca4]
push eax
call fcn.10016620
mov eax, dword [esi + 0x1b94]
mov edx, dword [eax + 0x288]
mov eax, dword [edi + 0x30]
lea esi, [edx + 0x48]
mov edi, dword [esi + 4]
mov ecx, dword [esi]
mov dword [ebp - 0x1c], edx
mov eax, dword [eax + 4]
mov dword [ebp - 0xe4], eax
cmp ecx, edi
jne 0x10036143
inc ecx
test edi, edi
je 0x1003612e
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10036133
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.100164d0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [esi]
mov eax, dword [esi + 8]
mov edi, dword [ebp - 0xe4]
mov dword [eax + ecx*4], edi
mov ecx, edx
inc dword [esi]
mov dword [edx + 0x70], edi
call fcn.1001f000
mov edi, dword [ebp - 0xfc]
mov edx, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xe8]
movss xmm0, dword [ebp - 0x68]
movss xmm1, dword [0x100a4b74]
mov dword [ebp - 0x110], 0
movss dword [ebp - 0x148], xmm0
cmp dword [edx + 0x1bc8], ecx
jne 0x10036617
mov eax, dword [edi + 8]
mov byte [edi + 0xe6e], 0
mov dword [edi + 0x34], 0x40
mov dword [edi + 0xe74], 0
mov dword [edi + 0xe78], 0
mov dword [ebp - 0x110], eax
mov eax, dword [ebx + 0x14]
mov dword [edi + 0xe70], eax
cmp byte [edx + 0xec], 0
mov dword [edx + 0x3114], 1
sete al
cmp byte [ebp - 0xec], 0
mov byte [edx + 0x1bd5], al
movss xmm7, dword [edx + 0xe4]
subss xmm7, xmm0
subss xmm7, dword [edx + 0x1550]
addss xmm7, dword [edi + 0x38]
je 0x10036222
mov eax, dword [ebp - 0x134]
movss xmm2, dword [edx + 0xe8]
subss xmm2, dword [eax + 0xd0]
jmp 0x1003622e
movss xmm2, dword [edx + 0x1930]
mulss xmm2, xmm1
cmp byte [ebp - 0xf8], 0
mov al, byte [edx + 0xb1]
mov byte [ebp - 0xd5], al
jne 0x100363b3
mov cl, byte [ebp - 0xee]
test cl, cl
je 0x10036261
test al, al
jne 0x100362c9
cmp byte [edx + 0x3dd], al
jne 0x100363b3
cmp byte [edx + 0x3d8], 0
je 0x10036323
cmp byte [edi + 0xe6d], 0
jne 0x10036323
test cl, cl
je 0x100363d4
cmp byte [edi + 0x53], 0
je 0x1003629d
push 0
mov edx, edi
lea ecx, [ebp - 0x48]
call fcn.10033730
movss xmm2, dword [ebp - 0x3c]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.10033a00
mov edx, dword [ebp - 0xd4]
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x100363ce
cmp byte [edx + 0x3dd], 0
je 0x10036261
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10033e30
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x60000d
call fcn.10033e30
mov edx, dword [ebp - 0xd4]
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x100363ce
cmp byte [edx + 0xec], 0
je 0x100363d4
cmp byte [edi + 0xe6d], 0
jne 0x100363dd
movss xmm0, dword [edx + 0x374]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10036362
movss xmm0, dword [edx + 0x378]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100363d4
cmp byte [edi + 0x53], 0
je 0x1003637c
push 0
mov edx, edi
lea ecx, [ebp - 0x48]
call fcn.10033730
movss xmm2, dword [ebp - 0x3c]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x1003638a
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.10033a00
mov edx, dword [ebp - 0xd4]
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
jmp 0x100363ce
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6d], 1
mov al, byte [ebp - 0xd5]
cmp byte [edi + 0xe6d], 0
je 0x100363ed
cmp byte [edx + 0xec], 0
jne 0x100363ed
mov byte [edi + 0xe6d], 0
cmp byte [edx + 0xfc], 0
je 0x100363ff
cmp byte [edx + 0xfe], 0
je 0x1003640c
test al, al
je 0x10036415
cmp byte [edx + 0xff], 0
je 0x10036415
mov byte [ebp - 0xca], 1
jmp 0x1003641c
mov byte [ebp - 0xca], 0
test dword [ebx + 0x14], 0x400
je 0x10036500
mov esi, dword [0x100b06f0]
mov dword [ebp - 0xd0], esi
mov ecx, dword [esi + 0x34]
test ecx, ecx
js 0x1003650c
call fcn.1000af00
mov edx, dword [ebp - 0xd4]
test al, al
mov al, byte [ebp - 0xca]
mov ecx, dword [ebp - 0x100]
je 0x10036518
test al, al
jne 0x10036518
cmp byte [edx + 0xfd], al
jne 0x10036518
test cl, cl
jne 0x10036518
mov ecx, dword [edx + 0x1510]
mov eax, dword [edx + 0x1508]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x100364a0
nop
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x100364f2
cmp ecx, edx
jb 0x10036490
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xe4]
sub esp, 8
mov dword [ebp - 0xe4], 9
call fcn.10035110
add esp, 8
test al, al
je 0x100364fa
push dword [ebp - 0xe4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10033e30
mov esi, dword [0x100b06f0]
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov dword [ebp - 0xd0], esi
mov edx, dword [ebp - 0xd4]
jmp 0x1003650c
mov edx, dword [ebp - 0xd4]
mov esi, dword [0x100b06f0]
mov dword [ebp - 0xd0], esi
mov al, byte [ebp - 0xca]
mov ecx, dword [ebp - 0x100]
cmp dword [edx + 0x1508], 0
jle 0x10036623
test al, al
jne 0x100365c5
test cl, cl
jne 0x100365c5
cmp byte [ebp - 0xc9], cl
jne 0x100365c5
xor esi, esi
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edx + 0x1510]
movzx eax, word [eax + esi*2]
mov dword [ebp - 0xe4], eax
cmp eax, 9
jne 0x1003656e
cmp byte [edx + 0xfd], 0
jne 0x100365b0
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xe4]
sub esp, 8
call fcn.10035110
add esp, 8
test al, al
je 0x100365aa
push dword [ebp - 0xe4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10033e30
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov edx, dword [ebp - 0xd4]
inc esi
cmp esi, dword [edx + 0x1508]
jl 0x10036550
mov esi, dword [0x100b06f0]
mov dword [ebp - 0xd0], esi
mov ecx, dword [edx + 0x150c]
lea eax, [edx + 0x1508]
mov dword [ebp - 0xe4], eax
test ecx, ecx
jns 0x1003660f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, dword [ebp - 0xe4]
call fcn.100168c0
mov esi, dword [0x100b06f0]
mov eax, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0xd0], esi
mov dword [eax], 0
jmp 0x10036623
mov esi, dword [0x100b06f0]
mov dword [ebp - 0xd0], esi
mov eax, dword [ebp - 0xe8]
xor cl, cl
cmp dword [edx + 0x1bc8], eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [ebp - 0x138], eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov byte [ebp - 0xc9], cl
mov dword [ebp - 0x15c], eax
jne 0x100372d5
cmp byte [edx + 0x1bd4], cl
jne 0x100372d5
cmp byte [ebp - 0x101], cl
jne 0x100372d5
movss xmm0, dword [ebp - 0x160]
mov ecx, 1
subss xmm0, dword [edx + 0x1554]
divss xmm0, dword [edx + 0x1930]
cvttss2si eax, xmm0
cmp eax, 1
cmovge ecx, eax
xor esi, esi
mov dword [edi + 0x4c], ecx
mov eax, 0x400000
cmp byte [edx + 0xfd], 0
mov dword [ebp - 0xe4], ecx
cmovne esi, eax
mov al, byte [edx + 0xb1]
mov byte [ebp - 0x141], al
test al, al
je 0x100366ce
cmp dword [edx + 0x37c], 0xa
jne 0x100366ce
mov byte [ebp - 0xde], 1
jmp 0x100366d9
mov byte [ebp - 0xde], 0
test al, al
je 0x10036704
cmp byte [edx + 0xff], 0
mov al, byte [edx + 0xfe]
mov byte [ebp - 0xd7], al
je 0x10036717
cmp byte [edx + 0xfc], 0
jne 0x10036717
test al, al
jne 0x10036717
mov byte [ebp - 0xd5], 1
jmp 0x1003671e
mov al, byte [edx + 0xfc]
mov byte [ebp - 0xd7], al
mov byte [ebp - 0xde], 0
mov byte [ebp - 0xd5], 0
cmp byte [edx + 0xb1], 0
mov eax, dword [edx + 0x37c]
je 0x10036732
cmp eax, 8
jmp 0x10036735
cmp eax, 1
sete al
mov byte [ebp - 0xca], al
test al, al
mov eax, dword [ebp - 0xd0]
je 0x10036767
mov ecx, dword [eax + 0x80]
test ecx, ecx
js 0x10036767
call fcn.1000af00
test al, al
jne 0x10036780
mov eax, dword [ebp - 0xd0]
mov edx, dword [ebp - 0xd4]
cmp dword [edx + 0x37c], 2
jne 0x100367ac
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x100367ac
call fcn.1000af00
test al, al
je 0x100367ac
cmp byte [ebp - 0x100], 0
jne 0x100367ac
cmp byte [ebp - 0x154], 0
jne 0x100367ac
cmp byte [ebp - 0xec], 0
je 0x100367a3
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x100367ac
mov byte [ebp - 0xdd], 1
jmp 0x100367b3
mov byte [ebp - 0xdd], 0
cmp byte [ebp - 0xca], 0
mov eax, dword [ebp - 0xd0]
je 0x100367d8
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x100367d8
call fcn.1000af00
test al, al
jne 0x100367f7
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd4]
cmp dword [ecx + 0x37c], 1
jne 0x1003681a
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x1003681a
call fcn.1000af00
test al, al
je 0x1003681a
cmp byte [ebp - 0x154], 0
jne 0x1003681a
cmp byte [ebp - 0xec], 0
je 0x10036811
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x1003681a
mov byte [ebp - 0x139], 1
jmp 0x10036821
mov byte [ebp - 0x139], 0
cmp byte [ebp - 0xca], 0
mov eax, dword [ebp - 0xd0]
je 0x10036846
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x10036846
call fcn.1000af00
test al, al
jne 0x10036865
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd4]
cmp dword [ecx + 0x37c], 2
jne 0x10036875
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10036875
call fcn.1000af00
test al, al
je 0x10036875
cmp byte [ebp - 0x100], 0
mov byte [ebp - 0x142], 1
je 0x1003687c
mov byte [ebp - 0x142], 0
mov dl, byte [ebp - 0xca]
test dl, dl
je 0x100368c0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x100368c0
call fcn.1000af00
test al, al
je 0x100368ba
cmp byte [ebp - 0x100], 0
jne 0x100368ba
cmp byte [ebp - 0x11c], 0
je 0x100368ba
mov byte [ebp - 0xee], 1
jmp 0x100368cb
mov dl, byte [ebp - 0xca]
mov byte [ebp - 0xee], 0
test dl, dl
je 0x100368e4
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x100368ea
call fcn.1000af00
test al, al
jne 0x10036906
mov eax, dword [ebp - 0xd0]
cmp byte [ebp - 0xde], 0
je 0x1003691f
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x1003691f
call fcn.1000af00
test al, al
je 0x1003691f
cmp byte [ebp - 0x100], 0
jne 0x1003691f
cmp byte [ebp - 0x11c], 0
mov byte [ebp - 0xde], 1
jne 0x10036926
mov byte [ebp - 0xde], 0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x100369c3
call fcn.1000af00
test al, al
je 0x100369bd
cmp byte [ebp - 0xd5], 0
je 0x10036950
mov eax, 0x200004
jmp 0x10036964
cmp byte [ebp - 0xd7], 0
mov eax, 0x200000
mov ecx, 0x20000c
cmovne eax, ecx
or eax, esi
push eax
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10033e30
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
add esp, 4
mov esi, dword [0x100b06f0]
mov dword [ebp - 0xd0], esi
mov edx, dword [ebp - 0xd4]
mov cl, byte [ebp - 0xc9]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x100372cd
cmp byte [ebp - 0xd6], 0
je 0x100372cd
mov al, 1
jmp 0x100372cf
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x10036a23
call fcn.1000af00
test al, al
je 0x10036a1d
cmp byte [ebp - 0xd5], 0
je 0x100369e3
mov eax, 0x200005
jmp 0x100369f7
cmp byte [ebp - 0xd7], 0
mov eax, 0x200001
mov ecx, 0x20000d
cmovne eax, ecx
or eax, esi
lea edx, [edi + 0x3c]
push eax
mov ecx, edi
call fcn.10033e30
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x10036985
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x10036a9c
call fcn.1000af00
test al, al
je 0x10036a96
cmp byte [ebp - 0xec], 0
je 0x10036a96
mov edx, dword [ebp - 0xd4]
cmp byte [edx + 0xfc], 0
je 0x10036a83
mov eax, dword [ebp - 0x134]
xorps xmm2, xmm2
movss xmm0, dword [eax + 0x5c]
subss xmm0, dword [edx + 0x1930]
mov dword [eax + 0x74], 0
mov dword [eax + 0x7c], 0
maxss xmm0, xmm2
movss dword [eax + 0x6c], xmm0
mov esi, dword [ebp - 0xd0]
jmp 0x10036997
movzx eax, byte [ebp - 0xd5]
lea eax, [eax*4 + 0x200002]
jmp 0x10036964
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x10036b19
call fcn.1000af00
test al, al
je 0x10036b13
cmp byte [ebp - 0xec], 0
je 0x10036b13
mov edx, dword [ebp - 0xd4]
cmp byte [edx + 0xfc], 0
je 0x10036b00
mov ecx, dword [ebp - 0x134]
movss xmm0, dword [edx + 0x1930]
mov esi, dword [ebp - 0xd0]
addss xmm0, dword [ecx + 0x5c]
mov eax, dword [esi + 0x1b94]
minss xmm0, dword [eax + 0x64]
mov dword [ecx + 0x74], 0
mov dword [ecx + 0x7c], 0
movss dword [ecx + 0x6c], xmm0
jmp 0x10036997
movzx eax, byte [ebp - 0xd5]
lea eax, [eax*4 + 0x200003]
jmp 0x10036964
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x48]
test ecx, ecx
js 0x10036b9f
call fcn.1000af00
test al, al
je 0x10036b99
cmp byte [ebp - 0xec], 0
je 0x10036b99
or esi, 0x20000e
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.10033e30
movd xmm0, dword [ebp - 0xe4]
add esp, 4
mov edx, dword [ebp - 0xd4]
movss xmm1, dword [ebp - 0x158]
mov esi, dword [0x100b06f0]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov dword [ebp - 0xd0], esi
mulss xmm0, dword [edx + 0x1930]
subss xmm1, xmm0
movss dword [ebp - 0x158], xmm1
jmp 0x10036997
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
js 0x10036c1d
call fcn.1000af00
test al, al
je 0x10036c17
cmp byte [ebp - 0xec], 0
je 0x10036c17
or esi, 0x20000f
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.10033e30
movd xmm0, dword [ebp - 0xe4]
add esp, 4
mov edx, dword [ebp - 0xd4]
mov esi, dword [0x100b06f0]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov dword [ebp - 0xd0], esi
mulss xmm0, dword [edx + 0x1930]
addss xmm0, dword [ebp - 0x158]
movss dword [ebp - 0x158], xmm0
jmp 0x10036997
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x10036c56
call fcn.1000af00
test al, al
je 0x10036c50
mov ecx, dword [ebp - 0xd4]
mov eax, esi
or eax, 0x200006
or esi, 0x200004
cmp byte [ecx + 0xfc], 0
cmovne esi, eax
push esi
jmp 0x10036967
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x10036c8f
call fcn.1000af00
test al, al
je 0x10036c89
mov ecx, dword [ebp - 0xd4]
mov eax, esi
or eax, 0x200007
or esi, 0x200005
cmp byte [ecx + 0xfc], 0
cmovne esi, eax
push esi
jmp 0x10036967
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x10036cba
call fcn.1000af00
test al, al
je 0x10036cb4
cmp byte [ebp - 0x100], 0
jne 0x10036cb4
or esi, 0x200008
push esi
jmp 0x10036967
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x10036d4c
call fcn.1000af00
test al, al
je 0x10036d4c
cmp byte [ebp - 0x100], 0
jne 0x10036d4c
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x10036d40
cmp byte [ebp - 0xd7], 0
je 0x10036cf3
push 0x60000c
jmp 0x10036d22
cmp byte [ebp - 0x141], 0
je 0x10036d40
mov eax, dword [ebp - 0xd4]
cmp byte [eax + 0xff], 0
je 0x10036d40
cmp byte [eax + 0xfe], 0
jne 0x10036d40
cmp byte [eax + 0xfc], 0
jne 0x10036d40
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.10033e30
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
or esi, 0x200009
push esi
jmp 0x10036967
mov esi, dword [ebp - 0xd0]
mov ecx, dword [esi + 0x68]
test ecx, ecx
js 0x10036d62
call fcn.1000af00
test al, al
jne 0x10036d76
mov ecx, dword [esi + 0x70]
test ecx, ecx
js 0x10036df0
call fcn.1000af00
test al, al
je 0x10036df0
mov eax, dword [ebx + 0x14]
mov edx, dword [ebp - 0xd4]
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xec], 0
je 0x10036d9b
mov cl, byte [edx + 0xfc]
test al, al
je 0x10036dae
test cl, cl
jne 0x10036db2
mov byte [ebp - 0x101], 1
mov byte [ebp - 0xed], 1
jmp 0x10036997
test cl, cl
jne 0x10036d9b
cmp byte [ebp - 0x100], 0
jne 0x10036997
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xe4]
sub esp, 8
mov dword [ebp - 0xe4], 0xa
call fcn.10035110
add esp, 8
test al, al
je 0x10036985
push dword [ebp - 0xe4]
jmp 0x10036967
mov ecx, dword [esi + 0x6c]
test ecx, ecx
js 0x10036e13
call fcn.1000af00
test al, al
je 0x10036e13
mov edx, dword [ebp - 0xd4]
mov cl, 1
mov byte [ebp - 0x101], cl
jmp 0x1003699d
mov al, byte [ebp - 0xee]
test al, al
jne 0x100372a9
cmp byte [ebp - 0xde], al
jne 0x100372a9
cmp byte [ebp - 0xca], al
je 0x10036e65
mov ecx, dword [esi + 0x74]
test ecx, ecx
js 0x10036e65
call fcn.1000af00
test al, al
je 0x10036e65
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
jmp 0x10036991
mov al, byte [ebp - 0xdd]
test al, al
jne 0x10037113
cmp byte [ebp - 0x139], al
jne 0x10037113
cmp byte [ebp - 0x142], al
je 0x10036991
mov eax, dword [esi + 0xd0]
test eax, eax
je 0x10036eb2
push dword [esi + 0xd8]
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x10036985
mov edx, dword [0x100b06f0]
jmp 0x10036ebd
mov edx, dword [ebp - 0xd0]
mov esi, 0x1009a64e
mov ecx, esi
lea eax, [ecx + 1]
mov dword [ebp - 0x1c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036ec5
sub ecx, dword [ebp - 0x1c]
test edx, edx
je 0x10036ed9
inc dword [edx + 0x370]
lea eax, [ecx*2 + 2]
push eax
call dword [ebp - 0x15c]
mov ecx, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x108], eax
cmp byte [esi], al
je 0x10036f64
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0xdc]
call fcn.10005120
add esp, 4
add esi, eax
cmp dword [ebp - 0xdc], 0
je 0x10036f4c
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xdc]
sub esp, 8
call fcn.10035110
add esp, 8
test al, al
je 0x10036f47
mov ecx, dword [ebp - 0x130]
mov ax, word [ebp - 0xdc]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10036f00
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x108], edi
mov edi, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x108]
xor edx, edx
mov word [ecx + eax*2], dx
test eax, eax
jle 0x100370f4
mov ecx, dword [edi + 0x44]
lea esi, [edi + 0x3c]
mov eax, dword [esi + 4]
mov edx, dword [edi + 4]
cmp eax, ecx
je 0x10036fd4
mov dword [ebp - 0x14c], eax
cmp eax, edx
jle 0x10036f99
mov eax, edx
mov dword [esi + 4], edx
mov dword [ebp - 0x14c], eax
jmp 0x10036f9f
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x10c], ecx
cmp ecx, edx
jle 0x10036fb6
mov ecx, edx
mov dword [esi + 8], edx
mov dword [ebp - 0x10c], ecx
jmp 0x10036fbc
mov ecx, dword [ebp - 0x10c]
mov edi, dword [ebp - 0x10c]
cmp dword [ebp - 0x14c], edi
jne 0x10036fd4
mov eax, dword [ebp - 0x14c]
mov ecx, edi
mov dword [esi], eax
mov edi, dword [esi]
cmp edi, edx
mov dword [ebp - 0xf8], edi
mov edi, dword [ebp - 0xfc]
jle 0x10036fee
mov dword [esi], edx
mov dword [ebp - 0xf8], edx
mov edx, dword [edi + 4]
cmp eax, ecx
je 0x10037055
mov dword [ebp - 0x14c], eax
cmp eax, edx
jle 0x1003700c
mov eax, edx
mov dword [esi + 4], edx
mov dword [ebp - 0x14c], eax
jmp 0x10037012
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x10c], ecx
cmp ecx, edx
jle 0x10037025
mov dword [esi + 8], edx
mov dword [ebp - 0x10c], edx
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0xf8], ecx
mov ecx, dword [ebp - 0x10c]
mov edi, ecx
cmp dword [ebp - 0x14c], edi
mov edi, dword [ebp - 0xfc]
jne 0x10037055
mov eax, dword [ebp - 0x14c]
mov dword [esi], eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], edx
jle 0x1003705f
mov dword [esi], edx
cmp eax, ecx
je 0x10037094
mov edx, esi
jge 0x1003707a
sub ecx, eax
push ecx
push eax
mov ecx, edi
call fcn.10033ce0
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
jmp 0x1003708b
sub eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.10033ce0
mov eax, dword [esi + 8]
mov dword [esi + 4], eax
mov dword [esi], eax
add esp, 8
mov byte [esi + 0x16], 0
push dword [ebp - 0x108]
mov edx, dword [esi]
mov ecx, edi
push dword [ebp - 0x130]
call fcn.100338b0
add esp, 8
test al, al
je 0x100370d3
push dword [ebp - 0x108]
mov edx, dword [esi]
lea ecx, [esi + 0x20]
push 0
call fcn.10034c50
mov eax, dword [ebp - 0x108]
add esp, 8
add dword [esi], eax
mov byte [esi + 0x16], 0
jmp 0x100370e7
movzx eax, word [esi + 0xe1e]
test ax, ax
je 0x100370e7
dec eax
mov word [esi + 0xe1e], ax
mov ecx, dword [ebp - 0x130]
mov byte [edi + 0xe6c], 1
test ecx, ecx
je 0x10037107
mov eax, dword [0x100b06f0]
test eax, eax
je 0x10037107
dec dword [eax + 0x370]
push ecx
call dword [ebp - 0x138]
jmp 0x10036982
mov edx, dword [ebp - 0xd4]
cmp dword [edx + 0xd4], 0
je 0x100371ff
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x10037140
mov edx, ecx
cmovge ecx, eax
cmovl edx, eax
mov dword [ebp - 0xdc], edx
jmp 0x1003714d
mov ecx, dword [edi + 4]
mov dword [ebp - 0xdc], 0
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xe4], ecx
lea edx, [eax + ecx*2]
mov ecx, dword [ebp - 0xdc]
lea ecx, [eax + ecx*2]
call fcn.10005350
inc eax
mov dword [ebp - 0x1c], eax
test esi, esi
je 0x10037175
inc dword [esi + 0x370]
push eax
call dword [ebp - 0x15c]
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0xdc]
lea ecx, [esi + ecx*2]
push ecx
lea ecx, [esi + eax*2]
mov esi, dword [ebp - 0x11c]
push ecx
mov ecx, esi
call fcn.10005280
mov eax, dword [0x100b06f0]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x100371cf
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x100b06f0]
add esp, 8
test esi, esi
je 0x100371dd
test eax, eax
je 0x100371dd
dec dword [eax + 0x370]
push esi
call dword [ebp - 0x138]
mov esi, dword [0x100b06f0]
add esp, 4
mov al, byte [ebp - 0xdd]
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0xd0], esi
test al, al
je 0x10036997
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x10037223
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x10036a78
mov edx, dword [edi + 4]
cmp eax, edx
jle 0x10037244
mov dword [edi + 0x40], edx
mov eax, edx
cmp ecx, edx
jle 0x1003724d
mov dword [edi + 0x44], edx
mov ecx, edx
cmp eax, ecx
jne 0x10037254
mov dword [edi + 0x3c], eax
cmp dword [edi + 0x3c], edx
jle 0x1003725c
mov dword [edi + 0x3c], edx
cmp eax, ecx
je 0x1003729a
lea edx, [edi + 0x3c]
jge 0x10037278
sub ecx, eax
push ecx
push eax
mov ecx, edi
call fcn.10033ce0
mov eax, dword [edi + 0x40]
mov dword [edi + 0x44], eax
jmp 0x10037289
sub eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.10033ce0
mov eax, dword [edi + 0x44]
mov dword [edi + 0x40], eax
mov dword [edi + 0x3c], eax
add esp, 8
mov eax, dword [0x100b06f0]
mov dword [ebp - 0xd0], eax
mov esi, dword [ebp - 0xd0]
mov byte [edi + 0x52], 0
jmp 0x10036991
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.10033e30
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
jmp 0x10036971
xor al, al
or byte [ebp - 0x164], al
mov eax, dword [ebp - 0xe8]
cmp dword [edx + 0x1bc8], eax
jne 0x10037b3b
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x108], 0
test cl, cl
je 0x100375ac
cmp byte [ebp - 0x100], 0
jne 0x10037594
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebp - 0xf4]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10037340
test dl, dl
je 0x1003733c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10037340
add eax, 2
add ecx, 2
test dl, dl
jne 0x10037320
xor eax, eax
jmp 0x10037345
sbb eax, eax
or eax, 1
test eax, eax
je 0x10037594
mov eax, dword [edi + 0x24]
xor edx, edx
mov ecx, dword [edi + 0x2c]
dec eax
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x120], edx
mov dword [ebp - 4], edx
test eax, eax
jle 0x10037493
lea edi, [eax + ecx]
mov esi, ecx
xor eax, eax
mov dword [ebp - 0xdc], eax
test edi, edi
je 0x10037398
cmp esi, edi
jae 0x100373bc
cmp byte [esi], 0
je 0x100373bc
push edi
mov edx, esi
lea ecx, [ebp - 0x1c]
call fcn.10005120
add esi, eax
add esp, 4
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0xdc]
je 0x100373bc
inc eax
jmp 0x1003738a
mov edi, dword [ebp - 0xfc]
lea edx, [eax + 1]
mov dword [ebp - 0xe4], edx
test edx, edx
jle 0x1003740e
mov eax, 8
mov esi, edx
cmp edx, eax
cmovl esi, eax
test esi, esi
jle 0x1003740e
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x100373ef
inc dword [eax + 0x370]
lea eax, [esi + esi]
push eax
call dword [ebp - 0x15c]
mov edx, dword [ebp - 0xe4]
add esp, 4
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x124], esi
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x108]
mov esi, dword [ebp - 0xf8]
add ecx, esi
mov dword [ebp - 0x1c], ecx
lea ecx, [eax - 2]
mov dword [ebp - 0x128], edx
lea ecx, [ecx + edx*2]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x11c], ecx
cmp eax, ecx
jae 0x1003748e
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x1003744c
cmp esi, edi
jae 0x10037482
cmp byte [esi], 0
je 0x10037482
push edi
mov edx, esi
lea ecx, [ebp - 0x1c]
call fcn.10005120
mov ecx, dword [ebp - 0x1c]
add esi, eax
mov eax, dword [ebp - 0xdc]
add esp, 4
test ecx, ecx
je 0x10037482
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0x11c]
jb 0x10037444
mov edi, dword [ebp - 0xfc]
mov edx, dword [ebp - 0xe4]
xor ecx, ecx
mov word [eax], cx
mov esi, dword [edi + 4]
lea eax, [edx - 1]
xor ecx, ecx
cmp dword [ebp - 0x108], ecx
cmovle eax, ecx
lea ecx, [edi + 0x5c]
push eax
push esi
xor edx, edx
mov dword [ebp - 0x1c], eax
call fcn.10034c50
mov edx, eax
add esp, 8
test edx, edx
je 0x100374d2
xor ecx, ecx
test esi, esi
jle 0x100374d2
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [edx + ecx*2], ax
inc ecx
cmp ecx, esi
jl 0x100374c2
mov ecx, dword [edi + 0x14]
mov eax, dword [edi + 4]
mov dword [ebp - 0xdc], ecx
mov byte [edi + 0xe6e], 1
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.10005350
sub dword [edi + 8], eax
mov dword [edi + 4], 0
movzx eax, word [esi]
add esi, 2
test ax, ax
je 0x1003752e
mov edi, dword [ebp - 0xdc]
nop word [eax + eax]
mov word [edi], ax
lea esi, [esi + 2]
movzx eax, word [esi - 2]
add edi, 2
test ax, ax
jne 0x10037510
mov dword [ebp - 0xdc], edi
mov edi, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
mov esi, dword [ebp - 0x1c]
mov word [eax], cx
test esi, esi
jle 0x1003755e
push esi
push dword [ebp - 0x120]
xor edx, edx
mov ecx, edi
call fcn.100338b0
add esp, 8
test al, al
je 0x1003755e
mov dword [edi + 0x3c], esi
mov byte [edi + 0x52], 0
mov ecx, dword [ebp - 0x120]
test ecx, ecx
je 0x10037581
mov eax, dword [0x100b06f0]
test eax, eax
je 0x10037577
dec dword [eax + 0x370]
push ecx
call dword [ebp - 0x138]
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100b06f0]
mov dword [ebp - 0xd0], esi
cmp byte [ebp - 0xed], 0
mov eax, dword [ebx + 0x14]
je 0x100379fd
test al, 0x20
je 0x100379fd
cmp byte [ebp - 0x100], 0
jne 0x10037627
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0xe4], edx
cmp edx, eax
jle 0x10037615
lea esi, [edi + 0x18]
test eax, eax
je 0x100375ec
cdq
sub eax, edx
mov edx, dword [ebp - 0xe4]
mov ecx, eax
sar ecx, 1
add ecx, dword [esi + 4]
jmp 0x100375f1
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
mov ecx, esi
push eax
call fcn.10016850
mov esi, dword [0x100b06f0]
lea ecx, [edi + 0x18]
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0xd0], esi
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.10005280
add esp, 8
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x100379a7
mov eax, dword [ebp - 0xd0]
xor esi, esi
test dl, 0x40
je 0x10037665
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x10037665
call fcn.1000af00
mov edx, dword [ebx + 0x14]
test al, al
je 0x1003765f
mov esi, 0x40
xor eax, eax
jmp 0x100376d4
mov eax, dword [ebp - 0xd0]
test dl, dl
jns 0x100376a9
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x1003768c
call fcn.1000af00
mov edx, dword [ebx + 0x14]
test al, al
je 0x10037686
mov esi, 0x80
lea eax, [esi - 0x7d]
jmp 0x100376d4
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x100376a9
call fcn.1000af00
mov edx, dword [ebx + 0x14]
test al, al
je 0x100376a9
mov esi, 0x80
lea eax, [esi - 0x7c]
jmp 0x100376d4
test edx, 0x80000
je 0x100376c1
cmp byte [edi + 0xe6e], 0
je 0x100376c1
mov esi, 0x80000
jmp 0x100376cf
test edx, 0x100
mov eax, pe_nt_image_headers32
cmovne esi, eax
mov eax, 0x16
test esi, esi
je 0x100379a1
mov dword [ebp - 0x88], eax
xor ecx, ecx
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x84], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x80], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x98], esi
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x7c], eax
mov eax, dword [edi + 0x3c]
mov word [ebp - 0x77], cx
mov byte [ebp - 0x75], cl
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x90], ecx
lea edx, [esi + eax*2]
mov byte [ebp - 0x78], cl
mov ecx, esi
mov dword [ebp - 0x8c], 0
call fcn.10005350
mov ecx, dword [ebp - 0xfc]
mov edi, eax
mov dword [ebp - 0x74], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10005350
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xfc]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10005350
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x98]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0x78]
add esp, 4
mov edx, dword [ebp - 0x74]
mov byte [ebp - 0xdd], al
cmp edx, edi
jne 0x1003778e
test al, al
je 0x100377e6
mov esi, dword [ebp - 0x84]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xdc], eax
test edi, edi
je 0x100377a7
cmp esi, edi
jae 0x100377cb
cmp byte [esi], 0
je 0x100377cb
push edi
mov edx, esi
lea ecx, [ebp - 0x1c]
call fcn.10005120
add esi, eax
add esp, 4
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0xdc]
je 0x100377cb
inc eax
jmp 0x10037799
mov esi, dword [ebp - 0xfc]
mov edx, dword [ebp - 0x74]
mov dword [esi + 0x3c], eax
mov al, byte [ebp - 0xdd]
mov byte [esi + 0xe6c], 1
jmp 0x100377ec
mov esi, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x70]
cmp ecx, dword [ebp - 0xe4]
jne 0x100377fb
test al, al
je 0x1003784d
cmp ecx, edx
jne 0x10037804
mov eax, dword [esi + 0x3c]
jmp 0x1003784a
mov edi, dword [ebp - 0x84]
xor eax, eax
lea esi, [ecx + edi]
mov dword [ebp - 0xdc], eax
test esi, esi
je 0x1003781d
cmp edi, esi
jae 0x10037841
cmp byte [edi], 0
je 0x10037841
push esi
mov edx, edi
lea ecx, [ebp - 0x1c]
call fcn.10005120
add edi, eax
add esp, 4
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0xdc]
je 0x10037841
inc eax
jmp 0x1003780f
mov ecx, dword [ebp - 0x70]
mov esi, dword [ebp - 0xfc]
mov dword [esi + 0x40], eax
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x11c]
jne 0x10037865
cmp byte [ebp - 0xdd], 0
je 0x10037993
cmp eax, ecx
jne 0x1003786e
mov eax, dword [esi + 0x40]
jmp 0x100378b1
mov edi, dword [ebp - 0x84]
lea esi, [eax + edi]
xor eax, eax
mov dword [ebp - 0xdc], eax
test esi, esi
je 0x10037887
cmp edi, esi
jae 0x100378ab
cmp byte [edi], 0
je 0x100378ab
push esi
mov edx, edi
lea ecx, [ebp - 0x1c]
call fcn.10005120
add edi, eax
add esp, 4
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0xdc]
je 0x100378ab
inc eax
jmp 0x10037879
mov esi, dword [ebp - 0xfc]
cmp byte [ebp - 0xdd], 0
mov dword [esi + 0x44], eax
je 0x10037993
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x110]
cmp ecx, edx
jle 0x10037912
cmp byte [ebp - 0x12c], 0
je 0x10037912
mov edi, dword [esi + 0xc]
mov eax, dword [esi + 0x10]
sub edi, edx
add edi, ecx
cmp edi, eax
jle 0x1003790f
test eax, eax
je 0x100378f8
cdq
sub eax, edx
lea edx, [esi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10037900
mov ecx, 8
lea edx, [esi + 0xc]
cmp ecx, edi
mov eax, edi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.100168c0
mov dword [esi + 0xc], edi
mov eax, dword [ebp - 0x84]
mov ecx, dword [esi + 0x14]
mov edi, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0xc]
dec eax
mov dword [ebp - 0x11c], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0xe4], eax
cmp ecx, eax
jae 0x10037977
mov esi, dword [ebp - 0x1c]
nop word [eax + eax]
cmp byte [esi], 0
je 0x1003796b
push 0
mov edx, esi
lea ecx, [ebp - 0x1c]
call fcn.10005120
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x1003796b
mov word [edi], ax
add edi, 2
cmp edi, dword [ebp - 0xe4]
jb 0x10037940
mov esi, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x11c]
xor eax, eax
mov word [edi], ax
sub edi, ecx
mov eax, dword [ebp - 0x80]
sar edi, 1
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov dword [esi + 0xe68], 0xbe99999a
mov esi, dword [0x100b06f0]
mov dword [ebp - 0xd0], esi
jmp 0x100379a7
mov esi, dword [ebp - 0xd0]
cmp byte [ebp - 0x100], 0
mov edi, dword [ebp - 0xfc]
jne 0x100379fa
mov ecx, dword [ebp - 0xf4]
mov eax, dword [edi + 0x20]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100379e0
test dl, dl
je 0x100379dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100379e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x100379c0
xor eax, eax
jmp 0x100379e5
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x100379fd
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xf8], ecx
mov ecx, dword [edi + 8]
jmp 0x10037a03
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 0xf8]
test edx, edx
je 0x10037b11
cmp byte [ebp - 0x12c], 0
je 0x10037abe
mov dword [ebp - 0xc4], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xb4], eax
lea eax, [ecx + 1]
mov dword [ebp - 0xb0], ecx
mov ecx, 0x40
cmp eax, ecx
movlpd qword [ebp - 0xbc], xmm0
movlpd qword [ebp - 0xa8], xmm0
cmovle eax, ecx
movlpd qword [ebp - 0xa0], xmm0
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0xc8]
push eax
xor eax, eax
mov dword [ebp - 0xc8], 0x40000
mov dword [ebp - 0xc0], 0
call eax
mov ecx, dword [ebp - 0xac]
add esp, 4
mov eax, dword [ebp - 0xb4]
mov esi, dword [0x100b06f0]
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x118], ecx
dec ecx
cmp dword [ebp - 0xb0], ecx
mov dword [ebp - 0xf4], eax
cmovl ecx, dword [ebp - 0xb0]
mov dword [ebp - 0xd0], esi
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x118]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x118], ecx
cmp ecx, 1
jb 0x10037b0a
jbe 0x10037aff
lea eax, [ecx - 1]
push eax
push edx
push dword [ebp - 0xf4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov esi, dword [0x100b06f0]
add esp, 0xc
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0xd0], esi
mov eax, dword [ebp - 0xf4]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0xef], 1
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xe8]
mov dword [edi + 0xe70], 0
mov dword [edi + 0xe74], 0
mov dword [edi + 0xe78], 0
cmp byte [ebp - 0x101], 0
je 0x10037b51
cmp dword [edx + 0x1bc8], eax
jne 0x10037b51
call fcn.10007140
cmp byte [ebp - 0xec], 0
jne 0x10037c3e
mov edx, dword [ebp - 0xe8]
lea ecx, [ebp - 0x68]
push 1
call fcn.100063c0
movss xmm1, dword [0x100a4bb4]
add esp, 4
mov ecx, 7
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call fcn.10005500
mov ecx, dword [ebp - 0xd4]
mov dl, 1
movss xmm2, dword [ecx + 0x1558]
mov ecx, eax
call fcn.100061b0
movss xmm7, dword [ebp - 0x148]
add esp, 0x10
mov edx, dword [ebp - 0xd4]
movaps xmm0, xmm7
movss xmm3, dword [ebp - 0x64]
movss xmm4, dword [ebp - 0x140]
movaps xmm1, xmm3
addss xmm1, dword [ebp - 0x160]
addss xmm0, dword [edx + 0x1550]
mov esi, dword [0x100b06f0]
movaps xmm2, xmm4
addss xmm2, xmm7
movss dword [ebp - 0x58], xmm7
movss dword [ebp - 0x54], xmm3
movss dword [ebp - 0x138], xmm1
movss dword [ebp - 0x124], xmm0
movaps xmm0, xmm3
addss xmm0, dword [edx + 0x1554]
movss dword [ebp - 0x1c], xmm2
movss dword [ebp - 0x50], xmm2
movss dword [ebp - 0x4c], xmm1
movss dword [ebp - 0xdc], xmm2
movss dword [ebp - 0x120], xmm0
movss dword [ebp - 0x15c], xmm1
mov dword [ebp - 0xd0], esi
jmp 0x10037cc1
movss xmm0, dword [ebp - 0x148]
movss xmm4, dword [ebp - 0x140]
movss xmm1, dword [ebp - 0x64]
movaps xmm3, xmm4
movss xmm2, dword [ebp - 0x160]
addss xmm3, xmm0
mov ecx, dword [ebp - 0x134]
addss xmm2, xmm1
mov edx, dword [ebp - 0xd4]
movss dword [ebp - 0x58], xmm0
movss dword [ebp - 0x54], xmm1
mov eax, dword [ecx + 0xcc]
movaps xmm0, xmm3
mov ecx, dword [ecx + 0xd0]
movss dword [ebp - 0x1c], xmm0
movss dword [ebp - 0x50], xmm0
movaps xmm0, xmm2
movss dword [ebp - 0xdc], xmm3
movss dword [ebp - 0x15c], xmm2
movss dword [ebp - 0x138], xmm0
movss dword [ebp - 0x4c], xmm0
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], ecx
cmp byte [ebp - 0x111], 0
lea eax, [ebp - 0x124]
movss xmm0, dword [eax + 4]
xorps xmm5, xmm5
movss xmm6, dword [eax]
movss dword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x14c], xmm6
movss dword [ebp - 0x30], xmm6
xorps xmm6, xmm6
mov dword [ebp - 0x110], eax
movss dword [ebp - 0x11c], xmm0
movss dword [ebp - 0xe4], xmm5
je 0x10037d15
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xf4], ecx
jmp 0x10037d1b
mov ecx, dword [ebp - 0xf4]
cmp byte [ebp - 0xd6], 0
jne 0x10037f33
cmp byte [ebp - 0x164], 0
jne 0x10037f33
cmp byte [ebp - 0xec], 0
je 0x10037d9f
mov eax, dword [ebp - 0xf4]
xor ecx, ecx
mov dl, byte [eax]
lea edi, [eax + 1]
test dl, dl
je 0x10037d62
nop
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x10037d50
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0xe8], edi
cmp al, 0xa
je 0x10037d75
cmp al, 0xd
je 0x10037d75
inc ecx
mov edx, dword [ebp - 0xd4]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edx + 0x1930]
movss dword [ebp - 0xe4], xmm0
movaps xmm0, xmm4
movss dword [ebp - 0x11c], xmm0
jmp 0x10037de7
mov eax, dword [ebp - 0xe8]
cmp dword [edx + 0x1bc8], eax
jne 0x10037db4
mov eax, dword [edi + 8]
add eax, ecx
jmp 0x10037dd4
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037db7
mov eax, dword [ebp - 0xf4]
sub ecx, edx
mov edx, dword [ebp - 0xd4]
add eax, ecx
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
sub eax, ecx
cmp eax, 0x200000
jge 0x10038aa9
movss xmm1, dword [0x100a4bb4]
xor ecx, ecx
call fcn.10005500
movss xmm2, dword [edx + 0x1930]
cmp byte [ebp - 0xec], 0
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x1c], 0
mov edi, dword [eax + 0x288]
mov eax, dword [edx + 0x192c]
lea edx, [ebp - 0x58]
cmovne edx, dword [ebp - 0x1c]
test dword [ebp - 0xdc], 0xff000000
mov dword [ebp - 0x12c], eax
je 0x10038aa9
test ecx, ecx
jne 0x10037e6d
mov ecx, dword [ebp - 0xf4]
lea eax, [ecx + 1]
mov dword [ebp - 0x1c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037e57
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0xf4], ecx
je 0x10038aa9
test eax, eax
jne 0x10037e85
mov eax, dword [edi + 0x2c]
mov esi, dword [eax + 8]
jmp 0x10037e8b
mov esi, dword [ebp - 0x12c]
ucomiss xmm2, dword [0x100a4b1c]
lahf
test ah, 0x44
jp 0x10037ea0
mov eax, dword [edi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [edi + 0x60]
movups xmmword [ebp - 0x28], xmm0
test edx, edx
je 0x10037ef3
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x28]
comiss xmm0, xmm1
jae 0x10037ebf
movss dword [ebp - 0x28], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x10037ed3
movss dword [ebp - 0x24], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x20]
ja 0x10037ee3
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x1c]
ja 0x10037ef3
movss dword [ebp - 0x1c], xmm0
mov eax, dword [ebp - 0x110]
test edx, edx
push dword [eax + 4]
push dword [eax]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x28]
push ecx
push dword [ebp - 0xf4]
mov ecx, esi
push eax
push dword [ebp - 0xdc]
push edi
call fcn.10025090
mov esi, dword [0x100b06f0]
jmp 0x10038aa9
mov eax, dword [edi + 8]
mov esi, 0xfffffc18
add eax, ecx
movss dword [ebp - 0x12c], xmm6
mov ecx, dword [edi + 0x14]
xor edx, edx
xorps xmm7, xmm7
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x110], esi
mov dword [ebp - 0x108], esi
cmp byte [ebp - 0xd6], dl
je 0x10037f99
mov eax, dword [edi + 0x3c]
or esi, 0xffffffff
mov dword [ebp - 0x110], esi
lea eax, [ecx + eax*2]
mov dword [ebp - 0x118], eax
lea edx, [esi + 2]
cmp byte [ebp - 0x164], 0
je 0x10037fcc
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0xf8]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x108], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0xec]
movzx eax, al
add edx, eax
xor eax, eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0xf8]
movzx eax, word [eax]
test ax, ax
je 0x10038058
mov edi, dword [ebp - 0x110]
mov esi, eax
cmp si, 0xa
jne 0x10038038
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp edi, 0xffffffff
jne 0x1003801c
cmp ecx, dword [ebp - 0x118]
jb 0x1003801c
dec edx
mov edi, eax
test edx, edx
jle 0x10038046
cmp dword [ebp - 0x108], 0xffffffff
jne 0x10038038
cmp ecx, dword [ebp - 0x130]
jb 0x10038038
dec edx
mov dword [ebp - 0x108], eax
test edx, edx
jle 0x10038046
movzx eax, word [ecx + 2]
add ecx, 2
mov esi, eax
test ax, ax
jne 0x10037ff5
mov dword [ebp - 0x110], edi
mov edi, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x110]
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0xf8]
inc eax
cmp esi, 0xffffffff
mov dword [ebp - 0x10c], eax
mov ecx, eax
cmovne ecx, esi
mov dword [ebp - 0x110], ecx
mov ecx, dword [ebp - 0x108]
cmp ecx, 0xffffffff
cmove ecx, eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x108], ecx
mov ecx, eax
cmp eax, edx
jbe 0x100380ab
cmp word [ecx - 2], 0xa
je 0x100380a5
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10038097
mov eax, dword [ebp - 0x118]
mov edx, dword [ebp - 0xd0]
movaps xmm1, xmm6
movaps xmm3, xmm6
mov esi, dword [edx + 0x192c]
movss xmm2, dword [edx + 0x1930]
divss xmm2, dword [esi + 0x10]
cmp ecx, eax
jae 0x1003811c
mov edi, dword [ebp - 0x118]
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x100380ea
maxss xmm1, xmm3
movaps xmm3, xmm6
jmp 0x1003810c
cmp edx, 0xd
je 0x1003810c
mov edx, eax
cmp edx, dword [esi]
jge 0x100380ff
mov eax, dword [esi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x10038104
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
cmp ecx, edi
jb 0x100380d4
mov edi, dword [ebp - 0xfc]
mov edx, dword [ebp - 0xd0]
cmp dword [ebp - 0x108], 0
maxss xmm3, xmm1
movd xmm4, dword [ebp - 0x110]
mov ecx, dword [ebp - 0xd4]
cvtdq2ps xmm4, xmm4
movss xmm0, dword [ecx + 0x1930]
mulss xmm4, xmm0
movss dword [ebp - 0x118], xmm3
movss dword [ebp - 0x120], xmm4
jl 0x1003821d
mov eax, dword [ebp - 0x130]
mov ecx, eax
mov esi, dword [ebp - 0xf8]
cmp eax, esi
jbe 0x10038184
nop dword [eax]
cmp word [ecx - 2], 0xa
je 0x1003817e
add ecx, 0xfffffffe
cmp ecx, esi
ja 0x10038170
mov eax, dword [ebp - 0x130]
mov esi, dword [edx + 0x192c]
movaps xmm2, xmm6
movss xmm3, dword [edx + 0x1930]
movaps xmm7, xmm6
divss xmm3, dword [esi + 0x10]
cmp ecx, eax
jae 0x100381ec
mov edi, dword [ebp - 0x130]
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x100381bd
maxss xmm2, xmm7
movaps xmm7, xmm6
jmp 0x100381e2
cmp edx, 0xd
je 0x100381e2
mov edx, eax
cmp edx, dword [esi]
jge 0x100381d2
mov eax, dword [esi + 8]
movss xmm1, dword [eax + edx*4]
jmp 0x100381d7
movss xmm1, dword [esi + 0xc]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm7, xmm0
cmp ecx, edi
jb 0x100381a7
mov edi, dword [ebp - 0xfc]
movd xmm3, dword [ebp - 0x108]
maxss xmm7, xmm2
mov ecx, dword [ebp - 0xd4]
cvtdq2ps xmm3, xmm3
movss xmm0, dword [ecx + 0x1930]
mulss xmm3, xmm0
movss dword [ebp - 0x12c], xmm3
movss xmm3, dword [ebp - 0x118]
mov edx, dword [ebp - 0xec]
movss xmm1, dword [ebp - 0x140]
test dl, dl
je 0x10038251
movd xmm5, dword [ebp - 0x10c]
cvtdq2ps xmm5, xmm5
mulss xmm5, xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x11c], xmm0
movss dword [ebp - 0xe4], xmm5
cmp byte [ebp - 0xd6], 0
je 0x10038378
cmp byte [edi + 0xe6c], 0
je 0x10038378
test dword [ebx + 0x14], 0x1000
jne 0x100382cc
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm1
comiss xmm2, xmm3
subss xmm1, dword [ecx + 0x1550]
mulss xmm0, dword [0x100a4b60]
movss dword [ebp - 0x140], xmm1
movaps xmm1, xmm3
jbe 0x100382a9
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x100382ba
subss xmm1, dword [ebp - 0x140]
comiss xmm1, xmm2
jb 0x100382d3
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x100382d3
mov dword [edi + 0x38], 0
test dl, dl
je 0x10038364
movss xmm2, dword [ebp - 0x158]
movaps xmm0, xmm4
subss xmm0, dword [ecx + 0x1930]
movss xmm3, dword [ebp - 0x160]
comiss xmm2, xmm0
jbe 0x10038304
movaps xmm2, xmm6
maxss xmm2, xmm0
jmp 0x10038320
movaps xmm0, xmm4
subss xmm0, xmm3
comiss xmm0, xmm2
jb 0x10038320
movss xmm2, dword [ecx + 0x1554]
addss xmm2, xmm2
addss xmm2, xmm0
comiss xmm6, xmm2
movss xmm1, dword [ecx + 0x1554]
jbe 0x10038332
movaps xmm1, xmm6
jmp 0x10038346
addss xmm1, xmm1
addss xmm1, xmm5
subss xmm1, xmm3
maxss xmm1, xmm6
minss xmm1, xmm2
mov eax, dword [ebp - 0x134]
movss xmm0, dword [eax + 0x5c]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0x2c], xmm0
movss dword [eax + 0x5c], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x14c], xmm0
cmp byte [ebp - 0x164], 0
movss xmm5, dword [edi + 0x38]
movss dword [ebp - 0x10c], xmm5
je 0x100386a2
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0xf8]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xd6], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0xf8]
lea eax, [eax + edx*2]
mov dword [ebp - 0x110], eax
je 0x100383cd
movss xmm1, dword [0x100a4bb4]
jmp 0x100383d5
movss xmm1, dword [0x100a4b78]
mov ecx, 0x2f
call fcn.10005500
cmp byte [ebp - 0xec], 0
xorps xmm0, xmm0
mov dword [ebp - 0xf8], eax
je 0x100383f9
xorps xmm5, xmm5
xorps xmm6, xmm6
jmp 0x10038409
movss xmm5, dword [0x100a4c90]
movss xmm6, dword [0x100a4be0]
movss xmm3, dword [ebp - 0x2c]
addss xmm3, dword [ebp - 0x12c]
addss xmm7, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x110]
movss dword [ebp - 0x158], xmm6
movss dword [ebp - 0x130], xmm5
subss xmm3, xmm0
subss xmm7, dword [ebp - 0x10c]
movss dword [ebp - 0x12c], xmm3
cmp esi, ecx
jae 0x10038697
movss xmm4, dword [ebp - 0x138]
mov edi, dword [ebp - 0xd0]
mov edx, dword [ebp - 0xd4]
nop dword [eax]
nop dword [eax + eax]
movaps xmm0, xmm4
addss xmm0, dword [edx + 0x1930]
comiss xmm3, xmm0
ja 0x1003868b
movss xmm0, dword [ebp - 0x64]
comiss xmm0, xmm3
jbe 0x100384af
cmp esi, ecx
jae 0x10038653
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x10038653
cmp esi, ecx
jb 0x10038496
jmp 0x10038653
mov edx, dword [edi + 0x192c]
xorps xmm0, xmm0
movss xmm2, dword [edi + 0x1930]
xorps xmm4, xmm4
xorps xmm1, xmm1
divss xmm2, dword [edx + 0x10]
cmp esi, ecx
jae 0x1003851c
nop
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x10038509
cmp ecx, 0xd
je 0x100384fd
cmp ecx, dword [edx]
jge 0x100384f0
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x100384f5
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
mov ecx, dword [ebp - 0x110]
cmp esi, ecx
jb 0x100384d0
jmp 0x10038519
mov ecx, dword [ebp - 0x110]
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
mov edx, dword [ebp - 0xd4]
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x1003855b
mov eax, dword [edx + 0x192c]
cmp dword [eax], 0x20
jle 0x10038543
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x10038548
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x100a4b74]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm4, dword [ebp - 0x138]
addss xmm1, xmm7
xorps xmm2, xmm2
movaps xmm0, xmm6
addss xmm7, xmm2
movaps xmm2, xmm5
subss xmm2, dword [edx + 0x1930]
movss xmm5, dword [ebp - 0x1c]
addss xmm0, xmm3
minss xmm1, xmm5
maxss xmm7, dword [ebp - 0x148]
addss xmm2, xmm3
minss xmm0, xmm4
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x40], xmm7
maxss xmm2, dword [ebp - 0x64]
comiss xmm0, dword [ebp - 0x64]
movss dword [ebp - 0x3c], xmm2
movss dword [ebp - 0x34], xmm0
jbe 0x10038653
comiss xmm4, xmm2
jbe 0x10038653
comiss xmm1, dword [ebp - 0x148]
jbe 0x10038653
comiss xmm5, xmm7
jbe 0x10038653
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x38]
push dword [ebp - 0xf8]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax + 0x288]
call fcn.100211a0
movss xmm0, dword [ebp - 0xdc]
movss xmm3, dword [ebp - 0x30]
mov edi, dword [0x100b06f0]
movss xmm4, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x110]
mov edx, dword [ebp - 0xd4]
movss dword [ebp - 0xdc], xmm0
movss xmm0, dword [ebp - 0x15c]
movss dword [ebp - 0x14c], xmm3
movss xmm3, dword [ebp - 0x12c]
movss dword [ebp - 0x15c], xmm0
movss xmm7, dword [ebp - 0x14c]
movss xmm5, dword [ebp - 0x130]
movss xmm6, dword [ebp - 0x158]
addss xmm3, dword [edx + 0x1930]
subss xmm7, dword [ebp - 0x10c]
movss dword [ebp - 0x12c], xmm3
cmp esi, ecx
jb 0x10038470
mov dword [ebp - 0xd0], edi
mov edi, dword [ebp - 0xfc]
movss xmm5, dword [ebp - 0x10c]
xorps xmm6, xmm6
cmp byte [ebp - 0xec], 0
mov edx, dword [ebp - 0xe8]
jne 0x100386c4
mov eax, edx
sub eax, dword [ebp - 0xf4]
cmp eax, 0x200000
jge 0x10038900
mov esi, dword [ebp - 0xd0]
movss xmm7, dword [0x100a4bb4]
movups xmm2, xmmword [esi + 0x15dc]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [esi + 0x1518]
movups xmmword [ebp - 0x40], xmm2
jbe 0x100386f6
movaps xmm0, xmm6
jmp 0x100386fd
movaps xmm0, xmm7
minss xmm0, xmm2
movss xmm2, dword [0x100a4c60]
movss xmm4, dword [0x100a4b74]
movss xmm3, dword [ebp - 0x3c]
comiss xmm6, xmm3
mulss xmm0, xmm2
addss xmm0, xmm4
cvttss2si ecx, xmm0
jbe 0x10038728
movaps xmm0, xmm6
jmp 0x1003872f
movaps xmm0, xmm7
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x38]
mulss xmm0, xmm2
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x1003874f
movaps xmm0, xmm6
jmp 0x10038756
movaps xmm0, xmm7
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x10038771
movaps xmm0, xmm6
jmp 0x10038778
movaps xmm0, xmm7
minss xmm0, xmm1
mulss xmm0, xmm2
mov dword [ebp - 0x138], edx
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], 0
addss xmm0, xmm4
movss xmm2, dword [edx + 0x1930]
lea edx, [ebp - 0x58]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x14c]
subss xmm0, xmm5
shl eax, 0x18
or eax, ecx
mov ecx, dword [ebp - 0x134]
cmp byte [ebp - 0xec], 0
mov dword [ebp - 0x110], eax
cmovne edx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x288]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x2c]
mov dword [ebp - 0x12c], ecx
subss xmm0, xmm6
movss dword [ebp - 0x14c], xmm0
test eax, 0xff000000
je 0x10038906
cmp dword [ebp - 0xe8], 0
jne 0x10038830
mov ecx, dword [ebp - 0xf4]
lea eax, [ecx + 1]
mov dword [ebp - 0x1c], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10038810
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xf4]
add eax, ecx
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x138], eax
jmp 0x10038836
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0xf4], eax
je 0x10038906
mov eax, dword [ebp - 0xd4]
mov esi, dword [eax + 0x192c]
test esi, esi
jne 0x10038858
mov eax, dword [ecx + 0x2c]
mov esi, dword [eax + 8]
ucomiss xmm2, xmm6
lahf
test ah, 0x44
jp 0x10038869
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x28], xmm0
test edx, edx
je 0x100388bc
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x28]
comiss xmm0, xmm1
jae 0x10038888
movss dword [ebp - 0x28], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x1003889c
movss dword [ebp - 0x24], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x20]
ja 0x100388ac
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x1c]
ja 0x100388bc
movss dword [ebp - 0x1c], xmm0
push dword [ebp - 0x14c]
test edx, edx
mov edx, dword [ebp - 0x138]
push dword [ebp - 0x150]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x28]
push edx
push dword [ebp - 0xf4]
push eax
push dword [ebp - 0x110]
push ecx
mov ecx, esi
call fcn.10025090
mov esi, dword [0x100b06f0]
jmp 0x10038906
mov esi, dword [ebp - 0xd0]
cmp byte [ebp - 0xd6], 0
je 0x10038aa9
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [eax + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
mov edi, eax
cmp byte [edi + 0xb2], 0
je 0x10038974
xorps xmm2, xmm2
comiss xmm2, xmm0
jae 0x10038974
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x20], xmm0
fld qword [ebp - 0x20]
fld qword [0x100a4bd8]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x100a4b9c]
fstp qword [ebp - 0x20]
movsd xmm1, qword [ebp - 0x20]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x10038974
xor al, al
jmp 0x10038976
mov al, 1
movss xmm0, dword [ebp - 0x2c]
movss xmm4, dword [ebp - 0x118]
movss xmm6, dword [0x100a4bb4]
addss xmm0, dword [ebp - 0x120]
addss xmm4, dword [ebp - 0x30]
subss xmm0, dword [0x100a4b1c]
subss xmm4, dword [ebp - 0x10c]
movss dword [ebp - 0x120], xmm0
movaps xmm1, xmm0
movss dword [ebp - 0x118], xmm4
movaps xmm3, xmm4
movss dword [ebp - 0x40], xmm4
movaps xmm2, xmm0
addss xmm3, xmm6
subss xmm1, dword [edi + 0x1930]
subss xmm2, dword [0x100a4bd0]
movss dword [ebp - 0x38], xmm3
addss xmm1, dword [0x100a4b74]
movss dword [ebp - 0x34], xmm2
movss dword [ebp - 0x3c], xmm1
test al, al
je 0x10038a84
comiss xmm2, dword [ebp - 0x64]
jbe 0x10038a84
movss xmm5, dword [ebp - 0x15c]
comiss xmm5, xmm1
jbe 0x10038a84
comiss xmm3, dword [ebp - 0x148]
jbe 0x10038a84
movss xmm1, dword [ebp - 0xdc]
comiss xmm1, xmm4
jbe 0x10038a84
sub esp, 8
movss dword [ebp - 0x20], xmm4
movaps xmm1, xmm6
movss dword [ebp - 0x1c], xmm2
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.10005500
add esp, 4
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax + 0x288]
call fcn.10020fa0
mov esi, dword [0x100b06f0]
movss xmm0, dword [ebp - 0x120]
movss xmm4, dword [ebp - 0x118]
movss xmm6, dword [0x100a4bb4]
cmp byte [ebp - 0x100], 0
jne 0x10038aa9
subss xmm0, dword [edi + 0x1930]
subss xmm4, xmm6
movss dword [edi + 0x2e84], xmm0
movss dword [edi + 0x2e80], xmm4
cmp byte [ebp - 0x154], 0
je 0x10038b1b
mov eax, dword [esi + 0x1b94]
mov edi, esi
mov ecx, dword [eax + 0x288]
mov edx, dword [ecx + 0x48]
sub edx, 1
mov dword [ecx + 0x48], edx
jne 0x10038acf
xor eax, eax
jmp 0x10038ad6
mov eax, dword [ecx + 0x50]
mov eax, dword [eax + edx*4 - 4]
mov dword [ecx + 0x70], eax
call fcn.1001f000
mov ecx, dword [esi + 0x1ca4]
sub ecx, 1
mov dword [esi + 0x1ca4], ecx
mov esi, dword [0x100b06f0]
jne 0x10038b0c
mov ecx, dword [esi + 0xa4]
test ecx, ecx
jne 0x10038b16
mov eax, dword [esi + 0x98]
mov eax, dword [eax + 0x3c]
mov ecx, dword [eax]
jmp 0x10038b16
mov eax, dword [edi + 0x1cac]
mov ecx, dword [eax + ecx*4 - 4]
call fcn.10010180
cmp byte [ebp - 0xec], 0
je 0x10038bd3
mov eax, dword [ebp - 0xd4]
movss xmm1, dword [ebp - 0xe4]
movss xmm4, dword [ebp - 0x11c]
movss dword [ebp - 0x124], xmm4
addss xmm1, dword [eax + 0x1554]
mov eax, dword [esi + 0x1b94]
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1b94]
movss dword [ebp - 0x120], xmm1
cmp byte [eax + 0x8f], 0
jne 0x10038bc3
movss xmm0, dword [eax + 0xd0]
lea ecx, [ebp - 0x124]
movss xmm3, dword [eax + 0xcc]
movaps xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x40], xmm3
movss xmm1, dword [0x100a4c90]
addss xmm4, xmm3
movss dword [ebp - 0x3c], xmm0
movss dword [ebp - 0x34], xmm2
movss dword [ebp - 0x38], xmm4
call fcn.10010690
push 0
xor edx, edx
lea ecx, [ebp - 0x40]
call fcn.100107c0
add esp, 4
call fcn.1000b1c0
call fcn.10010c20
mov esi, dword [0x100b06f0]
mov eax, dword [ebp - 0xd4]
cmp byte [eax + 0x2ed8], 0
je 0x10038c22
cmp byte [ebp - 0x154], 0
jne 0x10038c22
push dword [ebp - 0xe8]
mov edx, dword [ebp - 0xf4]
lea ecx, [ebp - 0x30]
mov dword [esi + 0x2ef0], 0x1009ec20
mov dword [esi + 0x2ef4], 0x1009ec1c
call fcn.100150d0
mov esi, dword [0x100b06f0]
add esp, 4
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [ebp - 0x16c]
comiss xmm0, dword [0x100a4b1c]
jbe 0x10038c81
movss xmm0, dword [ebp - 0x60]
xor edx, edx
addss xmm0, dword [eax + 0x1568]
mov ecx, dword [ebp - 0x168]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [ebp - 0x64]
addss xmm0, dword [eax + 0x1554]
movss dword [ebp - 0x120], xmm0
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push 1
call fcn.100056b0
mov esi, dword [0x100b06f0]
add esp, 0xc
mov dl, byte [ebp - 0xef]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x10038cac
test ecx, 0x200000
jne 0x10038cac
mov eax, dword [esi + 0x1b94]
mov word [esi + 0x1bd8], 0x101
or dword [eax + 0x11c], 4
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0xed]
cmovne eax, ecx
jmp 0x10035723