Function at 0x470eb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fbb9c
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1e8
mov eax, dword [0x686bb0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x144], esi
cmp dword [esi + 0x458], 0
jge 0x470f71
test byte [esi + 4], 2
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x198], 0xffffffff
lea ecx, [esi + 0x40]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
push eax
mov dword [ebp - 0x19c], 0x1b00d9
je 0x470f62
mov dword [ebp - 0x19c], 0x20002
call fcn.00474fe0
mov eax, dword [esi + 0x40]
dec eax
mov dword [esi + 0x458], eax
cmp dword [esi + 0x45c], 0
jge 0x470fdf
test byte [esi + 4], 4
jne 0x470fdf
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x198], 0xffffffff
push eax
lea ecx, [esi + 0x40]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x19c], 0x400041
call fcn.00474fe0
mov eax, dword [esi + 0x40]
dec eax
mov dword [esi + 0x45c], eax
mov ecx, esi
mov dword [esi + 8], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
call fcn.004706e0
xor eax, eax
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 4], eax
xor edi, edi
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x1c0], edi
mov byte [ebp - 4], 1
lea edx, [eax + 8]
mov ecx, dword [esi + 0x4c]
mov dword [ebp - 0x148], ecx
test ecx, ecx
jle 0x4710c3
cmp ecx, edx
mov eax, ecx
cmovl eax, edx
mov dword [ebp - 0x120], eax
test eax, eax
jle 0x4710c3
mov ecx, dword [0x6d4050]
test ecx, ecx
je 0x47108b
inc dword [ecx + 0x374]
push dword [0x6d4048]
imul eax, eax, 0xc4
push eax
call fcn.004490d0
mov ecx, dword [ebp - 0x120]
add esp, 8
mov dword [ebp - 0x1e4], ecx
mov edx, 8
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1e8], ecx
mov ecx, dword [esi + 0x34]
mov dword [ebp - 0x134], ecx
test ecx, ecx
jle 0x47112d
cmp ecx, 8
mov eax, ecx
cmovl eax, edx
mov dword [ebp - 0x120], eax
test eax, eax
jle 0x47112d
mov ecx, dword [0x6d4050]
test ecx, ecx
je 0x4710f8
inc dword [ecx + 0x374]
push dword [0x6d4048]
lea eax, [eax + eax*2]
shl eax, 3
push eax
call fcn.004490d0
mov ecx, dword [ebp - 0x134]
mov edi, eax
mov eax, dword [ebp - 0x120]
add esp, 8
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x1c0], edi
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c8], ecx
imul ecx, dword [ebp - 0x148], 0xc4
push ecx
push 0
push dword [ebp - 0x14c]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x134]
add esp, 0xc
lea eax, [eax + eax*2]
shl eax, 3
push eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x128], 0
cmp dword [esi + 0x4c], 0
jle 0x4712c7
mov edx, dword [ebp - 0x14c]
xor eax, eax
add edx, 0xa4
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x11c], edx
mov ecx, dword [esi + 0x54]
mov dword [edx - 4], 0xffffffff
add ecx, eax
xor edx, edx
mov dword [ebp - 0x140], ecx
cmp dword [esi + 0x34], edx
jle 0x4718bd
or eax, 0xffffffff
cmp eax, 0xffffffff
jne 0x4711e9
mov eax, dword [ebp - 0x140]
mov ecx, dword [esi + 0x3c]
mov eax, dword [eax + 0x74]
cmp eax, dword [ecx + edx*4]
mov eax, dword [ebp - 0x11c]
jne 0x4711d7
mov dword [eax - 4], edx
mov eax, edx
jmp 0x4711da
mov eax, dword [eax - 4]
inc edx
cmp edx, dword [esi + 0x34]
jl 0x4711b4
cmp eax, 0xffffffff
je 0x4718bd
mov eax, dword [ebp - 0x140]
mov esi, dword [eax]
mov ecx, esi
mov edx, dword [eax + 0xc]
call fcn.0046d3f0
mov ecx, dword [ebp - 0x11c]
mov edx, esi
add ecx, 0xffffff5c
push eax
mov dword [ebp - 0x120], ecx
call fcn.00467320
add esp, 4
test eax, eax
je 0x4718bd
mov eax, dword [ebp - 0x120]
mov esi, 0x674e0c
mov edx, dword [ebp - 0x11c]
mov eax, dword [eax + 0xa0]
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x124], ecx
mov eax, dword [eax + 0x30]
test eax, eax
cmovne esi, eax
mov dword [edx - 8], esi
cmp word [esi], 0
je 0x471278
movzx eax, word [esi + 2]
test ax, ax
je 0x471272
mov ecx, eax
cmp dword [edx], ecx
cmovge ecx, dword [edx]
add esi, 4
mov dword [edx], ecx
cmp word [esi], 0
jne 0x471257
mov ecx, dword [ebp - 0x124]
mov esi, dword [ebp - 0x124]
inc dword [edi + ecx*8]
mov ecx, dword [edx]
mov eax, dword [ebp - 0x138]
cmp dword [edi + esi*8 + 4], ecx
cmovge ecx, dword [edi + esi*8 + 4]
add edx, 0xc4
mov dword [edi + esi*8 + 4], ecx
add eax, 0x78
mov ecx, dword [ebp - 0x128]
mov esi, dword [ebp - 0x144]
inc ecx
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x138], eax
cmp ecx, dword [esi + 0x4c]
jl 0x471194
mov eax, dword [ebp - 0x148]
xor esi, esi
mov dword [ebp - 0x130], esi
test eax, eax
jle 0x471602
mov edx, dword [ebp - 0x14c]
add edx, 0xa8
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x11c], edx
mov eax, dword [edx - 8]
lea esi, [edx + 4]
mov ecx, esi
lea edi, [eax + eax*2]
mov eax, dword [edx - 4]
add eax, 0x20
mov dword [ebp - 0x140], edi
sar eax, 5
push eax
call fcn.00465a60
mov eax, dword [esi]
mov ecx, dword [ebp - 0x11c]
shl eax, 2
push eax
push 0
push dword [ecx + 0xc]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x154]
add esp, 0xc
cmp dword [eax + edi*8 + 0xc], 0
lea esi, [eax + edi*8]
jne 0x471365
mov eax, dword [eax + edi*8 + 4]
lea ecx, [esi + 0xc]
add eax, 0x20
sar eax, 5
push eax
call fcn.00465a60
mov eax, dword [esi + 0xc]
shl eax, 2
push eax
push 0
push dword [esi + 0x14]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x158], eax
movzx ecx, word [eax]
test cx, cx
je 0x471454
movzx eax, word [eax + 2]
test ax, ax
je 0x471454
movzx edi, cx
cmp edi, eax
ja 0x471439
nop dword [eax + eax]
mov eax, dword [ebp - 0x140]
mov ecx, edi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov esi, edi
mov ecx, dword [ebp - 0x154]
sar esi, 5
mov dword [ebp - 0x120], edx
mov eax, dword [ecx + eax*8 + 0x14]
test dword [eax + esi*4], edx
jne 0x471420
mov ecx, dword [ebp - 0x11c]
mov edx, edi
add ecx, 0xffffff58
call fcn.00467830
mov edx, dword [ebp - 0x11c]
test eax, eax
je 0x471426
inc dword [edx]
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x154]
inc dword [ecx + eax*8 + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x120]
mov edx, dword [ebp - 0x154]
or dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x140]
mov eax, dword [edx + eax*8 + 0x14]
or dword [eax + esi*4], ecx
inc dword [ebp - 0x130]
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x158]
inc edi
movzx eax, word [eax + 2]
cmp edi, eax
jbe 0x4713a0
mov eax, dword [ebp - 0x158]
add eax, 4
mov dword [ebp - 0x158], eax
movzx ecx, word [eax]
test cx, cx
jne 0x471380
add edx, 0xc4
sub dword [ebp - 0x124], 1
mov dword [ebp - 0x11c], edx
jne 0x4712f5
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
add ecx, 0xc0
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x138], eax
nop dword [eax + eax]
mov esi, dword [ecx - 0x18]
cmp esi, dword [ecx - 4]
jle 0x471511
mov eax, dword [0x6d4050]
test eax, eax
je 0x4714a7
inc dword [eax + 0x374]
push dword [0x6d4048]
lea eax, [esi*4]
push eax
call fcn.004490d0
mov ecx, dword [ebp - 0x11c]
add esp, 8
mov edi, eax
mov edx, dword [ecx]
test edx, edx
je 0x47150c
mov ecx, dword [ecx - 8]
shl ecx, 2
push ecx
push edx
push edi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x11c]
add esp, 0xc
mov ecx, dword [eax]
test ecx, ecx
je 0x4714f7
mov eax, dword [0x6d4050]
test eax, eax
je 0x4714f7
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
mov ecx, dword [ebp - 0x11c]
add esp, 8
mov dword [ecx], edi
mov dword [ecx - 4], esi
mov esi, dword [ecx - 0xc]
mov eax, dword [ecx - 0x14]
mov dword [ebp - 0x124], esi
lea eax, [esi + eax*4]
mov dword [ebp - 0x15c], eax
cmp esi, eax
jae 0x47159d
xor edx, edx
mov dword [ebp - 0x128], edx
mov eax, dword [esi]
mov dword [ebp - 0x13c], eax
test eax, eax
je 0x471583
xor edi, edi
mov esi, 1
test eax, esi
je 0x471575
and edx, 0xffffffe0
lea eax, [ebp - 0x120]
add edx, edi
add ecx, 0xfffffff8
push eax
mov dword [ebp - 0x120], edx
call fcn.00464ff0
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x128]
inc edi
rol esi, 1
cmp edi, 0x20
jb 0x471545
mov esi, dword [ebp - 0x124]
add esi, 4
add edx, 0x20
mov dword [ebp - 0x124], esi
mov dword [ebp - 0x128], edx
cmp esi, dword [ebp - 0x15c]
jb 0x471532
mov edx, dword [ecx - 0xc]
test edx, edx
je 0x4715dd
mov eax, dword [0x6d4050]
mov dword [ecx - 0x10], 0
mov dword [ecx - 0x14], 0
test eax, eax
je 0x4715c1
dec dword [eax + 0x374]
push dword [0x6d4048]
push edx
call fcn.004490f0
mov ecx, dword [ebp - 0x11c]
add esp, 8
mov dword [ecx - 0xc], 0
add ecx, 0xc4
sub dword [ebp - 0x138], 1
mov dword [ebp - 0x11c], ecx
jne 0x471490
mov edi, dword [ebp - 0x154]
mov esi, dword [ebp - 0x130]
cmp dword [ebp - 0x134], 0
jle 0x471672
mov esi, dword [ebp - 0x134]
lea eax, [edi + 0x14]
mov dword [ebp - 0x124], eax
nop word [eax + eax]
mov ecx, dword [eax]
test ecx, ecx
je 0x47165e
mov dword [eax - 4], 0
mov dword [eax - 8], 0
mov eax, dword [0x6d4050]
test eax, eax
je 0x471643
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
mov eax, dword [ebp - 0x124]
add esp, 8
mov dword [eax], 0
add eax, 0x18
mov dword [ebp - 0x124], eax
sub esi, 1
jne 0x471620
mov esi, dword [ebp - 0x130]
test edi, edi
je 0x4716b6
mov eax, dword [0x6d4050]
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0x1c8], 0
test eax, eax
je 0x471699
dec dword [eax + 0x374]
push dword [0x6d4048]
push edi
call fcn.004490f0
add esp, 8
xor eax, eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1cc], 0
xor eax, eax
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1ec], eax
push esi
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 3
call fcn.00474e60
test esi, esi
jle 0x471757
cmp esi, 8
mov edi, esi
mov eax, 8
cmovl edi, eax
test edi, edi
jle 0x471757
mov eax, dword [0x6d4050]
test eax, eax
je 0x47172a
inc dword [eax + 0x374]
push dword [0x6d4048]
lea eax, [edi*8]
sub eax, edi
shl eax, 2
push eax
call fcn.004490d0
add esp, 8
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f0], edi
mov ecx, dword [ebp - 0x1d4]
mov eax, dword [ebp - 0x1cc]
shl ecx, 4
push ecx
push 0
push eax
mov dword [ebp - 0x1f4], esi
mov dword [ebp - 0x140], eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi*8]
sub eax, esi
shl eax, 2
push eax
push 0
push dword [ebp - 0x158]
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x148]
xor esi, esi
xor eax, eax
mov dword [ebp - 0x138], esi
xor ecx, ecx
mov dword [ebp - 0x134], eax
add esp, 0xc
mov dword [ebp - 0x130], ecx
test edx, edx
jle 0x471bc1
mov edi, dword [ebp - 0x14c]
add edi, 0x98
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x120], edx
nop
mov edx, dword [edi + 0x10]
test edx, edx
je 0x471ba1
add dword [ebp - 0x134], edx
add dword [ebp - 0x130], edx
shl eax, 4
add eax, dword [ebp - 0x140]
mov dword [edi - 4], eax
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx + eax*4]
mov eax, dword [ebp - 0x144]
mov dword [edi], ecx
mov edx, dword [eax + 0x54]
add edx, dword [ebp - 0x124]
mov dword [ebp - 0x11c], edx
mov eax, dword [edx + 0x10]
mov dword [edi - 0x1c], eax
mov eax, dword [edi + 0x28]
mov dword [edi - 0x14], eax
mov eax, dword [edi + 0x20]
mov dword [edi - 0x18], 0
mov dword [edi - 0x10], eax
mov dword [edi - 0xc], ecx
mov al, byte [edx + 0x14]
mov byte [edi - 8], al
mov al, byte [edx + 0x18]
mov byte [edi - 7], al
movss xmm1, dword [edx + 0x10]
comiss xmm1, dword [0x676f50]
jbe 0x4718c9
mov esi, dword [ebp - 0x128]
mov eax, 0x100
mov edi, dword [edi - 0x7c]
cwde
mov esi, dword [esi - 0x94]
movzx ecx, byte [edi + esi + 6]
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edi + esi + 7]
add cx, ax
mov eax, 0x100
movsx edx, cx
movzx ecx, byte [edi + esi + 4]
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edi + esi + 5]
mov edi, dword [ebp - 0x128]
mov esi, dword [ebp - 0x138]
add cx, ax
movsx eax, cx
sub eax, edx
movd xmm0, eax
jmp 0x4718ef
mov byte [ebp - 0x129], 0
jmp 0x472680
mov ecx, dword [edi - 0x84]
mov eax, dword [edi - 0x94]
xorps xmm1, xmmword [0x6774d0]
movzx edx, byte [ecx + eax + 0x13]
movzx eax, byte [ecx + eax + 0x12]
shl eax, 8
add edx, eax
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mov eax, dword [ebp - 0x144]
mov eax, dword [eax + 0x10]
divss xmm1, xmm0
mov dword [ebp - 0x150], eax
xor eax, eax
mov dword [ebp - 0x15c], eax
movss dword [ebp - 0x13c], xmm1
cmp dword [edi + 0x20], eax
jle 0x471b95
mov dword [ebp - 0x128], eax
mov edx, dword [edi + 0x28]
lea ecx, [edi - 0x98]
mov edx, dword [edx + eax*4]
call fcn.00467830
mov ecx, dword [ebp - 0x11c]
mov edx, eax
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x1bc], 0
movd xmm0, dword [ecx + 0x14]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x1b4], xmm0
movd xmm0, dword [ecx + 0x18]
lea ecx, [ebp - 0x1d8]
push ecx
cvtdq2ps xmm0, xmm0
lea ecx, [ebp - 0x1dc]
push ecx
lea ecx, [ebp - 0x1bc]
push ecx
lea ecx, [ebp - 0x174]
mulss xmm0, xmm1
push ecx
lea ecx, [edi - 0x98]
movss dword [ebp - 0x17c], xmm0
call fcn.00467c50
add esp, 0x10
test eax, eax
jne 0x4719ba
mov dword [ebp - 0x174], eax
xor esi, esi
mov dword [ebp - 0x17c], eax
jmp 0x471afe
xorps xmm0, xmm0
sub esp, 8
cvtsi2ss xmm0, dword [ebp - 0x174]
mulss xmm0, dword [ebp - 0x1b4]
addss xmm0, dword [0x676f50]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x170], xmm0
fld qword [ebp - 0x170]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
fstp qword [ebp - 0x170]
movsd xmm0, qword [ebp - 0x170]
xorps xmm1, xmm1
cvtpd2ps xmm0, xmm0
cvttss2si eax, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [ebp - 0x1d8]
mov dword [ebp - 0x168], eax
mulss xmm0, dword [ebp - 0x17c]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [ebp - 0x178], xmm0
fld qword [ebp - 0x178]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
fstp qword [ebp - 0x178]
movsd xmm0, qword [ebp - 0x178]
cvtpd2ps xmm0, xmm0
cvttss2si eax, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [ebp - 0x1dc]
mov dword [ebp - 0x174], eax
mulss xmm0, dword [ebp - 0x1b4]
addss xmm0, dword [0x676f50]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x1b8], xmm0
fld qword [ebp - 0x1b8]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp qword [ebp - 0x1b8]
movsd xmm0, qword [ebp - 0x1b8]
xorps xmm1, xmm1
cvtpd2ps xmm0, xmm0
cvttss2si esi, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [ebp - 0x1bc]
mulss xmm0, dword [ebp - 0x17c]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [ebp - 0x180], xmm0
fld qword [ebp - 0x180]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp qword [ebp - 0x180]
movsd xmm0, qword [ebp - 0x180]
add esp, 8
cvtpd2ps xmm0, xmm0
cvttss2si eax, xmm0
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x150]
sub esi, eax
mov eax, dword [ebp - 0x11c]
movzx edx, cx
mov ecx, dword [ebp - 0x128]
add esi, edx
dec si
movss xmm1, dword [ebp - 0x13c]
add si, word [eax + 0x14]
dec dx
mov eax, dword [edi - 4]
mov word [ecx + eax + 4], si
mov eax, dword [ebp - 0x11c]
mov esi, dword [ebp - 0x138]
mov cx, word [eax + 0x18]
sub cx, word [ebp - 0x174]
add cx, word [ebp - 0x17c]
mov eax, dword [edi - 4]
add cx, dx
mov edx, dword [ebp - 0x128]
mov word [edx + eax + 6], cx
mov eax, dword [edi - 4]
movzx ecx, word [edx + eax + 6]
movzx eax, word [edx + eax + 4]
add edx, 0x10
imul ecx, eax
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x15c], eax
add esi, ecx
mov dword [ebp - 0x138], esi
cmp eax, dword [edi + 0x20]
jl 0x471924
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x130]
add dword [ebp - 0x124], 0x78
add edi, 0xc4
sub dword [ebp - 0x120], 1
mov dword [ebp - 0x128], edi
jne 0x4717e0
movd xmm0, esi
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x471bda
sqrtsd xmm0, xmm0
jmp 0x471bdf
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov esi, dword [ebp - 0x144]
cvtsd2ss xmm0, xmm0
mov eax, dword [esi + 0xc]
mov dword [esi + 0x20], 0
cvttss2si ecx, xmm0
inc ecx
test eax, eax
jg 0x471c37
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x6770b8]
jb 0x471c13
mov eax, 0x1000
jmp 0x471c37
comiss xmm0, dword [0x6770b4]
jb 0x471c23
mov eax, 0x800
jmp 0x471c37
comiss xmm0, dword [0x6770a8]
mov eax, 0x200
mov ecx, 0x400
cmovae eax, ecx
push 0x2c
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1ac]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esi + 0x10]
add esp, 0xc
mov dword [ebp - 0x13c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x120], eax
mov eax, dword [0x6d4050]
test eax, eax
je 0x471c6e
inc dword [eax + 0x374]
push dword [0x6d4048]
push 0x30
call fcn.004490d0
mov ecx, dword [0x6d4050]
mov edi, eax
mov eax, dword [ebp - 0x120]
add esp, 8
sub eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x150], eax
test ecx, ecx
je 0x471ca8
inc dword [ecx + 0x374]
push dword [0x6d4048]
shl eax, 3
push eax
call fcn.004490d0
add esp, 8
test edi, edi
je 0x471d42
test eax, eax
je 0x471d2a
mov edx, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x1a4], edx
mov dword [ebp - 0x19c], edx
mov edx, dword [ebp - 0x150]
push edx
push eax
mov dword [ebp - 0x184], eax
mov eax, 0x8000
sub eax, ecx
mov dword [ebp - 0x198], ecx
push eax
mov ecx, edi
mov dword [ebp - 0x1a8], edi
mov dword [ebp - 0x190], 1
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0x194], 0
call fcn.004664f0
add esp, 0xc
jmp 0x471d71
mov eax, dword [0x6d4050]
test eax, eax
je 0x471d39
dec dword [eax + 0x374]
push dword [0x6d4048]
push edi
jmp 0x471d5d
test eax, eax
je 0x471d65
mov ecx, dword [0x6d4050]
test ecx, ecx
je 0x471d56
dec dword [ecx + 0x374]
push dword [0x6d4048]
push eax
call fcn.004490f0
add esp, 8
mov edi, dword [ebp - 0x1a8]
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x168], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x170]
push dword [esi + 0x40]
call fcn.00474e60
mov eax, dword [ebp - 0x170]
mov edx, dword [ebp - 0x168]
mov dword [ebp - 0x120], eax
shl eax, 4
push eax
push 0
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp dword [esi + 0x40], 0
jle 0x471dff
mov edx, dword [ebp - 0x168]
xor ecx, ecx
add edx, 6
xor edi, edi
mov eax, dword [esi + 0x48]
lea ecx, [ecx + 0x1c]
inc edi
lea edx, [edx + 0x10]
movzx eax, word [ecx + eax - 0x1c]
mov word [edx - 0x12], ax
mov eax, dword [esi + 0x48]
movzx eax, word [eax + ecx - 0x1a]
mov word [edx - 0x10], ax
cmp edi, dword [esi + 0x40]
jl 0x471dd5
mov edi, dword [ebp - 0x11c]
push dword [ebp - 0x170]
mov edx, dword [ebp - 0x168]
mov ecx, edi
call fcn.004669a0
mov eax, dword [ebp - 0x170]
add esp, 4
test eax, eax
jle 0x471e77
mov edx, dword [ebp - 0x168]
xor edi, edi
add edx, 0xa
nop word [eax + eax]
cmp dword [edx + 2], 0
je 0x471e66
mov eax, dword [esi + 0x48]
movzx ecx, word [edx - 2]
mov word [eax + edi + 4], cx
mov eax, dword [esi + 0x48]
movzx ecx, word [edx]
mov word [eax + edi + 6], cx
movzx eax, word [edx]
movzx ecx, word [edx - 4]
add ecx, eax
mov eax, dword [ebp - 0x120]
cmp dword [esi + 0x20], ecx
cmovge ecx, dword [esi + 0x20]
mov dword [esi + 0x20], ecx
add edi, 0x1c
add edx, 0x10
sub eax, 1
mov dword [ebp - 0x120], eax
jne 0x471e30
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x168]
test eax, eax
je 0x471ea4
mov ecx, dword [0x6d4050]
test ecx, ecx
je 0x471e95
dec dword [ecx + 0x374]
push dword [0x6d4048]
push eax
call fcn.004490f0
add esp, 8
mov byte [ebp - 4], 3
mov edi, dword [ebp - 0x148]
test edi, edi
jle 0x471f3f
mov edi, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
add edi, 0xa8
mov dword [ebp - 0x13c], eax
nop
mov eax, dword [edi]
test eax, eax
je 0x471f2a
mov edx, dword [edi - 0x14]
mov ecx, dword [ebp - 0x11c]
push eax
call fcn.004669a0
xor ecx, ecx
add esp, 4
mov dword [ebp - 0x120], ecx
cmp dword [edi], ecx
jle 0x471f2a
xor edx, edx
mov eax, dword [edi - 0x14]
cmp dword [eax + edx + 0xc], 0
je 0x471f1c
movzx ecx, word [eax + edx + 0xa]
movzx eax, word [eax + edx + 6]
add ecx, eax
cmp dword [esi + 0x20], ecx
cmovge ecx, dword [esi + 0x20]
mov dword [esi + 0x20], ecx
mov ecx, dword [ebp - 0x120]
inc ecx
add edx, 0x10
mov dword [ebp - 0x120], ecx
cmp ecx, dword [edi]
jl 0x471ef6
add edi, 0xc4
sub dword [ebp - 0x13c], 1
jne 0x471ed0
mov edi, dword [ebp - 0x148]
test byte [esi + 4], 1
mov eax, dword [esi + 0x20]
jne 0x471f6d
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movss xmm1, dword [0x676fe8]
lea ecx, [eax + 1]
mov eax, dword [esi + 0x1c]
movaps xmm2, xmm1
mov dword [esi + 0x20], ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
imul ecx, eax
divss xmm1, xmm0
mov eax, dword [0x6d4050]
movss dword [esi + 0x24], xmm2
movss dword [esi + 0x28], xmm1
test eax, eax
je 0x471fb3
inc dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490d0
mov ecx, dword [esi + 0x1c]
imul ecx, dword [esi + 0x20]
mov dword [esi + 0x14], eax
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esi + 0x14]
add esp, 0x14
mov dword [ebp - 0x188], eax
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x1a0], eax
test edi, edi
jle 0x4721d0
mov ecx, dword [ebp - 0x14c]
xor eax, eax
mov dword [ebp - 0x13c], eax
mov edx, edi
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x15c], edi
nop dword [eax + eax]
mov edi, dword [esi + 0x54]
add edi, eax
cmp dword [ecx + 0xa8], 0
je 0x4721a4
push dword [ecx + 0x94]
lea eax, [ecx + 0x7c]
mov edx, ecx
push ecx
push eax
lea ecx, [ebp - 0x1ac]
call fcn.0046cf40
movss xmm1, dword [edi + 0x44]
add esp, 0xc
ucomiss xmm1, dword [0x676fe8]
movss dword [ebp - 0x150], xmm1
lahf
test ah, 0x44
jnp 0x472188
xor edi, edi
nop dword [eax]
movd xmm0, edi
mov eax, edi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x6774b0]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
call fcn.005f8a50
movss xmm1, dword [ebp - 0x150]
mov edx, 0xff
cmp eax, edx
movzx ecx, al
cmovbe edx, ecx
mov byte [ebp + edi - 0x118], dl
inc edi
cmp edi, 0x100
jb 0x472060
mov eax, dword [ebp - 0x11c]
xor ecx, ecx
mov dword [ebp - 0x124], ecx
mov edx, dword [eax + 0x94]
cmp dword [eax + 0xa8], ecx
jle 0x472188
lea eax, [edx + 6]
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x128], eax
nop word [eax + eax]
cmp dword [eax + 6], 0
je 0x47216c
mov ecx, dword [esi + 0x1c]
movzx edx, word [eax + 4]
movzx edi, word [eax]
movzx esi, word [eax - 2]
movzx eax, word [eax + 2]
imul edx, ecx
mov dword [ebp - 0x120], ecx
mov ecx, dword [ebp - 0x144]
add edx, dword [ecx + 0x14]
add edx, eax
test edi, edi
je 0x472158
mov eax, dword [ebp - 0x120]
nop word [eax + eax]
xor ecx, ecx
test esi, esi
je 0x472149
nop word [eax + eax]
movzx eax, byte [ecx + edx]
mov al, byte [ebp + eax - 0x118]
mov byte [ecx + edx], al
inc ecx
cmp ecx, esi
jl 0x472130
mov eax, dword [ebp - 0x120]
dec edi
add edx, eax
test edi, edi
jg 0x472120
mov esi, dword [ebp - 0x144]
jmp 0x47215a
mov esi, ecx
mov edx, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x128]
inc ecx
add eax, 0x10
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x128], eax
cmp ecx, dword [edx + 0xa8]
jl 0x4720e0
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x15c]
mov dword [ecx + 0x94], 0
add eax, 0x78
add ecx, 0xc4
sub edx, 1
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x15c], edx
jne 0x472010
mov edi, dword [ebp - 0x1a8]
jmp 0x4721d6
mov edi, dword [ebp - 0x11c]
cmp dword [ebp - 0x184], 0
je 0x4721ee
mov eax, dword [0x6d4050]
test eax, eax
je 0x4721ee
dec dword [eax + 0x374]
push dword [0x6d4048]
push dword [ebp - 0x184]
call fcn.004490f0
add esp, 8
test edi, edi
je 0x472215
mov eax, dword [0x6d4050]
test eax, eax
je 0x472215
dec dword [eax + 0x374]
push dword [0x6d4048]
push edi
call fcn.004490f0
mov ecx, dword [ebp - 0x140]
add esp, 8
test ecx, ecx
je 0x47226e
mov eax, dword [0x6d4050]
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d4], 0
test eax, eax
je 0x472251
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x1cc], ecx
mov eax, dword [ebp - 0x148]
test eax, eax
jle 0x472614
mov ecx, dword [ebp - 0x14c]
xor edx, edx
add ecx, 4
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x134], eax
nop dword [eax]
cmp dword [ecx + 0xa4], 0
je 0x472579
mov edi, dword [ecx + 0x18]
xorps xmm3, xmm3
mov eax, dword [esi + 0x54]
mov esi, dword [ecx]
add eax, edx
mov dword [ebp - 0x130], eax
mov eax, dword [eax + 0x74]
movzx ecx, byte [edi + esi + 6]
movzx edx, byte [edi + esi + 7]
mov dword [ebp - 0x124], eax
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
add dx, cx
movzx ecx, byte [edi + esi + 4]
movsx eax, dx
movzx edx, byte [edi + esi + 5]
mov dword [ebp - 0x150], eax
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
mov edi, dword [ebp - 0x124]
add dx, cx
movsx ecx, dx
mov edx, dword [ebp - 0x150]
mov eax, ecx
sub eax, edx
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mov ecx, dword [ebp - 0x130]
movd xmm0, eax
mov eax, dword [ebp - 0x130]
cvtdq2ps xmm0, xmm0
movss xmm2, dword [eax + 0x10]
xor eax, eax
divss xmm2, xmm0
comiss xmm1, xmm3
mulss xmm1, xmm2
seta al
lea eax, [eax*2 - 1]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movd xmm1, edx
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
xor eax, eax
comiss xmm1, xmm3
cvtdq2ps xmm0, xmm0
seta al
cmp byte [ecx + 0x3c], 0
mulss xmm1, xmm2
lea eax, [eax*2 - 1]
movss dword [ebp - 0x150], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
cvttss2si esi, xmm0
jne 0x4723d6
mov ecx, edi
call fcn.00472db0
mov ecx, dword [ebp - 0x130]
movss xmm0, dword [ebp - 0x150]
movd xmm1, esi
cvtdq2ps xmm1, xmm1
mov eax, dword [ecx + 0x10]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0x144]
mov dword [edi + 0x30], eax
xor eax, eax
mov dword [edi + 0x34], ecx
movss dword [edi + 0x44], xmm0
movss dword [edi + 0x48], xmm1
jmp 0x4723df
movzx eax, word [edi + 0x38]
movss xmm0, dword [edi + 0x44]
addss xmm0, dword [0x676fa8]
inc eax
mov esi, dword [ebp - 0x144]
mov word [edi + 0x38], ax
xor edx, edx
movss xmm7, dword [ecx + 0x28]
movss dword [ebp - 0x168], xmm7
cvttss2si eax, xmm0
mov dword [ebp - 0x120], edx
movd xmm6, eax
cvtdq2ps xmm6, xmm6
addss xmm6, dword [ecx + 0x2c]
mov ecx, dword [ebp - 0x128]
movss dword [ebp - 0x150], xmm6
cmp dword [ecx + 0xa4], edx
jle 0x47256d
xor edi, edi
nop dword [eax]
nop word [eax + eax]
movd xmm0, dword [esi + 0x1c]
sub esp, 0x20
movss xmm1, dword [0x676fe8]
mov eax, dword [ecx + 0xbc]
mov ecx, dword [ecx + 0x94]
movss xmm3, dword [0x676fe8]
cvtdq2ps xmm0, xmm0
mov edx, dword [eax + edx*4]
movzx eax, word [edi + ecx]
divss xmm1, xmm0
movd xmm0, dword [esi + 0x20]
cvtdq2ps xmm0, xmm0
movd xmm5, eax
movzx eax, word [edi + ecx + 2]
divss xmm3, xmm0
movss xmm0, dword [edi + ecx + 0x10]
movd xmm4, eax
movzx eax, word [edi + ecx + 4]
cvtdq2ps xmm5, xmm5
movd xmm2, eax
movzx eax, word [edi + ecx + 6]
cvtdq2ps xmm2, xmm2
mulss xmm5, xmm1
mulss xmm2, xmm1
movss dword [esp + 0x1c], xmm0
movss xmm0, dword [edi + ecx + 0x18]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm4, xmm4
mulss xmm1, xmm3
mulss xmm4, xmm3
movss dword [esp + 0x18], xmm1
xorps xmm1, xmm1
addss xmm0, xmm1
movss xmm3, dword [edi + ecx + 8]
movss dword [esp + 0x14], xmm2
addss xmm3, xmm1
movss dword [esp + 0x10], xmm4
movss dword [esp + 0xc], xmm5
addss xmm0, xmm6
addss xmm3, xmm7
movss dword [esp + 8], xmm0
movss xmm0, dword [edi + ecx + 0x14]
addss xmm0, xmm1
addss xmm0, xmm7
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + ecx + 0xc]
mov ecx, dword [ebp - 0x124]
addss xmm0, xmm1
addss xmm0, xmm6
movss dword [esp], xmm0
push edx
push dword [ebp - 0x130]
call fcn.00473310
mov edx, dword [ebp - 0x120]
add edi, 0x1c
mov ecx, dword [ebp - 0x128]
inc edx
movss xmm6, dword [ebp - 0x150]
movss xmm7, dword [ebp - 0x168]
mov dword [ebp - 0x120], edx
cmp edx, dword [ecx + 0xa4]
jl 0x472440
mov eax, dword [ebp - 0x134]
mov edx, dword [ebp - 0x138]
add ecx, 0xc4
add edx, 0x78
sub eax, 1
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x134], eax
jne 0x4722a0
mov edi, dword [ebp - 0x14c]
add edi, 0xb4
nop dword [eax]
mov byte [ebp - 4], 6
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4725d9
mov eax, dword [0x6d4050]
test eax, eax
je 0x4725ca
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [edi]
test ecx, ecx
je 0x472601
mov eax, dword [0x6d4050]
test eax, eax
je 0x4725f2
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov byte [ebp - 4], 3
add edi, 0xc4
sub dword [ebp - 0x148], 1
jne 0x4725b0
mov ecx, esi
call fcn.00472760
mov byte [ebp - 0x129], 1
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x158]
test ecx, ecx
je 0x47264e
mov eax, dword [0x6d4050]
test eax, eax
je 0x47263f
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x140]
test ecx, ecx
je 0x47267a
mov eax, dword [0x6d4050]
test eax, eax
je 0x47266b
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov edi, dword [ebp - 0x154]
mov byte [ebp - 4], 0xa
test edi, edi
je 0x4726a6
mov eax, dword [0x6d4050]
test eax, eax
je 0x472697
dec dword [eax + 0x374]
push dword [0x6d4048]
push edi
call fcn.004490f0
add esp, 8
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x14c]
test eax, eax
je 0x4726d6
mov ecx, dword [0x6d4050]
test ecx, ecx
je 0x4726c7
dec dword [ecx + 0x374]
push dword [0x6d4048]
push eax
call fcn.004490f0
add esp, 8
mov al, byte [ebp - 0x129]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005f7bd4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret