Function at 0x100476f6
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x17c
mov eax, dword [0x1005b040]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
mov ebx, ecx
push esi
push edi
xor edi, edi
mov dword [esp + 0x28], ebx
cmp dword [ebx + 0x58], edi
jge 0x1004773c
test byte [ebx + 4], 2
jne 0x1004772f
push 0x1b
push 0xd9
jmp 0x10047733
push 2
push 2
push ecx
call fcn.100475a3
mov dword [ebx + 0x58], eax
xorps xmm0, xmm0
mov dword [ebx + 8], edi
mov ecx, ebx
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x1c], edi
movups xmmword [ebx + 0x24], xmm0
call fcn.10047074
mov esi, edi
mov ecx, edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
mov dword [esp + 0x44], ecx
cmp dword [ebx + 0x4c], edi
jle 0x100477d0
mov dword [esp + 0x40], edi
mov eax, dword [ebx + 0x54]
mov edx, dword [eax + edi + 0x30]
test edx, edx
jne 0x10047780
mov edx, 0x10056678
mov dword [eax + edi + 0x30], edx
xor eax, eax
cmp word [edx], ax
je 0x100477bd
mov ebx, dword [esp + 0x10]
xor edi, edi
movzx eax, word [edx + 2]
test ax, ax
je 0x100477a9
mov ecx, eax
inc esi
movzx eax, word [edx]
add edx, 4
sub ecx, eax
add esi, ecx
inc ebx
cmp word [edx], di
jne 0x1004778d
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0xc], esi
inc ecx
add edi, 0x74
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], edi
cmp ecx, dword [ebx + 0x4c]
jl 0x1004776c
xor edi, edi
mov edx, dword [ebx + 0xc]
test edx, edx
jg 0x10047806
cmp esi, 0x3e8
mov eax, 0x400
mov edx, 0x200
cmovg edx, eax
cmp esi, 0x7d0
mov eax, 0x800
cmovg edx, eax
cmp esi, 0xfa0
mov eax, 0x1000
cmovg edx, eax
push 0xa
pop ecx
mov dword [ebx + 0x20], edi
xor eax, eax
lea edi, [esp + 0x54]
mov dword [ebx + 0x1c], edx
rep stosd dword es:[edi], eax
push ecx
push dword [ebx + 0x10]
push ecx
push ecx
push edx
lea ecx, [esp + 0x68]
call fcn.10042181
add esp, 0x14
test eax, eax
jne 0x10047835
xor al, al
jmp 0x1004821d
mov edx, dword [esp + 0x58]
xor ecx, ecx
lea eax, [ecx + 1]
mov dword [esp + 0x20], eax
lea eax, [ecx + 1]
mov ecx, ebx
mov dword [esp + 0x24], eax
call fcn.10048232
imul ecx, dword [ebx + 0x4c], 0x8c
call fcn.100203ba
mov ecx, eax
xor eax, eax
mov edi, eax
mov dword [esp + 0x4c], ecx
cmp dword [ebx + 0x4c], eax
jle 0x100478bc
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], ecx
mov edx, dword [ebx + 0x54]
mov esi, dword [edx + eax]
mov ecx, esi
mov edx, dword [edx + eax + 0xc]
call fcn.1003e6c9
mov edx, esi
mov esi, dword [esp + 0x40]
push eax
mov ecx, esi
call fcn.1003e800
pop ecx
test eax, eax
je 0x10047acf
mov eax, dword [esp + 0x44]
inc edi
add eax, 0x74
add esi, 0x8c
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], esi
cmp edi, dword [ebx + 0x4c]
jl 0x10047873
mov esi, dword [esp + 0xc]
xor eax, eax
imul esi, esi, 0x1c
mov dword [esp + 0x2c], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x50], eax
mov ecx, esi
call fcn.100203ba
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xc]
shl eax, 4
mov ecx, eax
mov dword [esp + 0xc], eax
call fcn.100203ba
imul edi, dword [esp + 0x10], 0x18
mov dword [esp + 0x48], eax
mov ecx, edi
call fcn.100203ba
push esi
xor esi, esi
mov dword [esp + 0x48], eax
push esi
push dword [esp + 0x48]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push dword [esp + 0xc]
push esi
push dword [esp + 0x50]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push edi
xor edi, edi
push edi
push dword [esp + 0x4c]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x30], edi
cmp dword [ebx + 0x4c], edi
jle 0x10047c04
mov edx, dword [esp + 0x20]
mov ecx, edi
mov edi, dword [esp + 0x4c]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x18], ecx
mov eax, dword [ebx + 0x54]
add eax, ecx
xor ecx, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], ecx
mov eax, dword [eax + 0x30]
mov dword [esp + 0x10], eax
movzx eax, word [eax]
mov ebx, eax
mov dword [esp + 0xc], ebx
test ax, ax
je 0x100479bc
movzx eax, ax
mov ebx, ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
movzx eax, word [eax + 2]
test ax, ax
je 0x100479b4
mov ecx, eax
movzx eax, dx
sub ecx, eax
mov eax, dword [esp + 0x10]
add eax, 4
inc ecx
add ebx, ecx
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x34]
inc ecx
movzx edx, word [eax]
mov dword [esp + 0x34], ecx
test dx, dx
jne 0x10047985
mov edx, dword [esp + 0x20]
mov dword [esp + 0x38], ebx
imul eax, dword [esp + 0x50], 0x18
add dword [esp + 0x50], ecx
mov dword [edi + 0x88], ecx
add eax, dword [esp + 0x44]
mov dword [esp + 0x10], eax
mov dword [edi + 0x84], eax
xor eax, eax
mov dword [esp + 0xc], eax
test ecx, ecx
jle 0x10047a5b
mov ebx, dword [esp + 0x34]
mov ecx, eax
mov dword [esp + 0x10], eax
mov esi, dword [edi + 0x84]
add esi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
add dword [esp + 0x10], 0x18
mov edx, dword [eax + 0x30]
mov eax, dword [eax + 0x10]
mov dword [esi], eax
movzx eax, word [edx + ecx*4]
mov dword [esi + 4], eax
movzx ecx, word [edx + ecx*4 + 2]
mov eax, dword [esp + 0xc]
movzx eax, word [edx + eax*4]
mov edx, dword [esp + 0x2c]
sub ecx, eax
imul eax, edx, 0x1c
inc ecx
add edx, ecx
mov dword [esi + 0xc], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x2c], edx
add eax, dword [esp + 0x40]
inc ecx
mov dword [esi + 0x10], eax
mov dword [esp + 0xc], ecx
cmp ecx, ebx
jl 0x100479ed
mov eax, dword [edi + 0x84]
mov ecx, dword [edi + 0x88]
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
add dword [esp + 0x3c], ebx
mov dword [edi + 0x80], ebx
mov ebx, dword [esp + 0x14]
shl eax, 4
add eax, dword [esp + 0x48]
mov dword [edi + 0x7c], eax
cmp dword [ebx + 0x14], 8
push eax
cmovbe edx, dword [ebx + 0x14]
mov dword [esp + 0x70], edx
mov edx, ebx
push ecx
push dword [esp + 0x18]
lea ecx, [esp + 0x60]
cmp dword [edx + 0x18], 8
cmovbe esi, dword [edx + 0x18]
mov edx, edi
mov dword [esp + 0x7c], esi
call fcn.100426ab
mov ebx, dword [esp + 0x34]
mov esi, eax
xor eax, eax
mov dword [esp + 0x1c], esi
add esp, 0xc
mov dword [esp + 0x14], eax
mov edx, eax
mov dword [esp + 0x34], edx
cmp dword [edi + 0x88], eax
jle 0x10047b6a
mov ebx, eax
jmp 0x10047af4
xor eax, eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x10047ae5
dec dword [0x101087e8]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
pop ecx
jmp 0x1004782e
xor eax, eax
mov ecx, eax
xor esi, esi
mov eax, dword [edi + 0x84]
mov dword [esp + 0x38], ecx
cmp dword [ebx + eax + 0xc], esi
jle 0x10047b52
mov esi, dword [esp + 0x14]
shl esi, 4
mov edx, dword [ebx + eax + 4]
add edx, ecx
mov ecx, edi
call fcn.1003ebcc
test eax, eax
jne 0x10047b32
mov eax, dword [edi + 0x7c]
xor ecx, ecx
mov word [esi + eax + 6], cx
mov eax, dword [edi + 0x7c]
mov word [esi + eax + 4], cx
mov ecx, dword [esp + 0x38]
add esi, 0x10
mov eax, dword [edi + 0x84]
inc ecx
inc dword [esp + 0x14]
mov dword [esp + 0x38], ecx
cmp ecx, dword [ebx + eax + 0xc]
jl 0x10047b0f
mov edx, dword [esp + 0x34]
inc edx
add ebx, 0x18
mov dword [esp + 0x34], edx
cmp edx, dword [edi + 0x88]
jl 0x10047af2
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x10]
mov edx, dword [edi + 0x7c]
mov ecx, dword [esp + 0x58]
push esi
call fcn.1003e1b6
pop ecx
test esi, esi
jle 0x10047bbe
xor ecx, ecx
mov edx, ecx
mov eax, dword [edi + 0x7c]
cmp word [edx + eax + 4], cx
jne 0x10047b95
cmp word [edx + eax + 6], cx
jne 0x10047b95
mov dword [edx + eax + 0xc], ecx
mov eax, dword [edi + 0x7c]
cmp dword [edx + eax + 0xc], ecx
je 0x10047bb6
movzx ecx, word [edx + eax + 0xa]
movzx eax, word [edx + eax + 6]
add ecx, eax
cmp dword [ebx + 0x20], ecx
cmovge ecx, dword [ebx + 0x20]
mov dword [ebx + 0x20], ecx
xor ecx, ecx
add edx, 0x10
sub esi, 1
jne 0x10047b80
mov eax, dword [esp + 0x30]
add edi, 0x8c
mov ecx, dword [esp + 0x18]
inc eax
add ecx, 0x74
mov dword [esp + 0x30], eax
mov dword [esp + 0x18], ecx
cmp eax, dword [ebx + 0x4c]
jge 0x10047bf2
mov esi, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], edx
jmp 0x1004794c
mov eax, dword [esp + 0x70]
xor edi, edi
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x20], eax
test byte [ebx + 4], 1
mov eax, dword [ebx + 0x20]
jne 0x10047c32
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movd xmm0, dword [ebx + 0x1c]
inc eax
movss xmm1, dword [0x1005672c]
cvtdq2ps xmm0, xmm0
inc dword [0x101087e8]
mov dword [ebx + 0x20], eax
movaps xmm2, xmm1
divss xmm2, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
imul eax, dword [ebx + 0x1c]
divss xmm1, xmm0
push eax
movss dword [ebx + 0x24], xmm2
movss dword [ebx + 0x28], xmm1
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
pop ecx
mov ecx, dword [ebx + 0x20]
imul ecx, dword [ebx + 0x1c]
mov dword [ebx + 0x14], eax
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebx + 0x14]
add esp, 0xc
mov dword [esp + 0x74], eax
mov eax, dword [ebx + 0x20]
mov dword [esp + 0x60], eax
mov dword [esp + 0x30], edi
cmp dword [ebx + 0x4c], edi
jle 0x10047e16
mov eax, dword [esp + 0x20]
mov edx, edi
mov edi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
sub edi, 0xffffff80
mov dword [esp + 0x2c], edx
mov dword [esp + 0x14], edi
mov esi, dword [ebx + 0x54]
push dword [edi - 4]
add esi, edx
lea edx, [edi - 0x80]
push dword [edi + 8]
push dword [edi + 4]
cmp dword [esi + 0x14], 8
cmovbe eax, dword [esi + 0x14]
cmp dword [esi + 0x18], 8
mov dword [esp + 0x78], eax
cmovbe ecx, dword [esi + 0x18]
mov dword [esp + 0x7c], ecx
lea ecx, [esp + 0x60]
call fcn.1004283a
movss xmm1, dword [esi + 0x44]
add esp, 0xc
ucomiss xmm1, dword [0x1005672c]
movss dword [esp + 0x18], xmm1
lahf
test ah, 0x44
jnp 0x10047ddf
xor eax, eax
mov ebx, 0xff
mov esi, eax
movd xmm0, esi
mov eax, esi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10057200]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
call fcn.1004d840
movss xmm1, dword [esp + 0x18]
cmp eax, ebx
movzx ecx, al
cmova ecx, ebx
mov byte [esp + esi + 0x80], cl
inc esi
cmp esi, 0x100
jb 0x10047d17
mov eax, dword [edi]
mov ecx, dword [edi - 4]
mov ebx, dword [esp + 0x28]
shl eax, 4
add eax, ecx
cmp ecx, eax
je 0x10047ddf
xor eax, eax
cmp dword [ecx + 0xc], eax
je 0x10047dcc
movzx eax, word [ecx + 4]
movzx edx, word [ecx + 8]
mov dword [esp + 0x3c], eax
movzx eax, word [ecx + 0xa]
imul eax, dword [esp + 0x64]
add eax, dword [esp + 0x74]
add edx, eax
movzx eax, word [ecx + 6]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10047dcc
mov ebx, dword [esp + 0x3c]
xor edi, edi
mov esi, edi
test ebx, ebx
je 0x10047dbb
movzx eax, byte [esi + edx]
mov al, byte [esp + eax + 0x80]
mov byte [esi + edx], al
inc esi
cmp esi, ebx
jl 0x10047da4
mov eax, dword [esp + 0x18]
add edx, dword [esp + 0x64]
dec eax
mov dword [esp + 0x18], eax
test eax, eax
jg 0x10047d9e
mov edi, dword [esp + 0x14]
mov eax, dword [edi]
add ecx, 0x10
shl eax, 4
add eax, dword [edi - 4]
cmp ecx, eax
jne 0x10047d6a
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
xor eax, eax
mov dword [edi - 4], eax
add edx, 0x74
mov eax, dword [esp + 0x30]
add edi, 0x8c
inc eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], edi
cmp eax, dword [ebx + 0x4c]
jge 0x10047e14
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
jmp 0x10047cbd
xor edi, edi
cmp dword [esp + 0x78], 0
je 0x10047e23
dec dword [0x101087e8]
push dword [esp + 0x78]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
mov eax, dword [esp + 0x5c]
pop ecx
test eax, eax
je 0x10047e3e
dec dword [0x101087e8]
push eax
call esi
mov eax, dword [esp + 0x4c]
pop ecx
test eax, eax
je 0x10047e50
dec dword [0x101087e8]
push eax
call esi
pop ecx
mov dword [esp + 0x38], edi
cmp dword [ebx + 0x4c], edi
jle 0x100481de
mov eax, dword [esp + 0x4c]
mov ecx, edi
add eax, 4
mov dword [esp + 0x34], ecx
mov dword [esp + 0x24], eax
mov esi, dword [ebx + 0x54]
add esi, ecx
mov dword [esp + 0x14], esi
mov dl, byte [esi + 0x3c]
mov ecx, dword [esi + 0x70]
mov dword [esp + 0x48], ecx
mov byte [esp + 0x1f], dl
test dl, dl
je 0x10047e9d
call fcn.1004864e
mov al, byte [esi + 0x3c]
mov byte [esp + 0x1f], al
mov eax, dword [esp + 0x24]
movss xmm1, dword [esi + 0x10]
lea ecx, [eax - 4]
call fcn.10040866
mov esi, dword [esp + 0x24]
movss dword [esp + 0x30], xmm0
mov edi, dword [esi + 0x18]
mov esi, dword [esi]
lea ecx, [esi + 4]
add ecx, edi
call fcn.1003e5ae
cwde
lea ecx, [esi + 6]
add ecx, edi
mov dword [esp + 0x18], eax
call fcn.1003e5ae
cmp byte [esp + 0x1f], 0
mov edi, dword [esp + 0x48]
cwde
mov dword [esp + 0x2c], eax
jne 0x10047f6a
mov ecx, edi
call fcn.100485f5
mov esi, dword [esp + 0x14]
xorps xmm3, xmm3
movd xmm1, dword [esp + 0x18]
cvtdq2ps xmm1, xmm1
push 1
mov eax, dword [esi + 0x10]
mov dword [edi], eax
or eax, 0xffffffff
pop ecx
mov dword [edi + 0x40], esi
comiss xmm1, xmm3
mov dword [edi + 0x44], ebx
mulss xmm1, dword [esp + 0x30]
cmova eax, ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movd xmm1, dword [esp + 0x2c]
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
or eax, 0xffffffff
comiss xmm1, xmm3
mulss xmm1, dword [esp + 0x30]
cvtdq2ps xmm0, xmm0
cmova eax, ecx
movss dword [edi + 0x48], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x4c], xmm0
jmp 0x10047f6e
mov esi, dword [esp + 0x14]
movss xmm0, dword [edi + 0x48]
xor ecx, ecx
addss xmm0, dword [0x10056700]
inc word [edi + 0x3e]
movss xmm1, dword [esi + 0x28]
movss dword [esp + 0x7c], xmm1
mov dword [esp + 0x30], ecx
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x24]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [esi + 0x2c]
movss dword [esp + 0x10], xmm0
cmp dword [eax + 0x84], ecx
jle 0x100481b2
mov edx, ecx
mov dword [esp + 0x2c], ecx
mov ecx, dword [eax + 0x80]
add ecx, edx
xor edx, edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0xc], edx
cmp dword [ecx + 0xc], edx
jle 0x10048192
xor eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [ecx + 0x10]
xor ebx, ebx
add eax, dword [esp + 0x20]
mov dword [esp + 0x50], eax
cmp word [eax], bx
mov ebx, dword [esp + 0x28]
jne 0x1004801b
xor edi, edi
cmp word [eax + 4], di
mov edi, dword [esp + 0x48]
jne 0x1004801b
xor esi, esi
cmp word [eax + 2], si
mov esi, dword [esp + 0x14]
jne 0x1004801b
xor edx, edx
cmp word [eax + 6], dx
mov edx, dword [esp + 0xc]
je 0x1004817b
mov ebx, dword [ecx + 4]
add ebx, edx
cmp byte [esi + 0x3c], 0
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x28]
je 0x10048049
push dword [esp + 0x18]
mov ecx, edi
call fcn.10048989
mov ecx, dword [esp + 0x3c]
test eax, eax
jne 0x10048177
mov eax, dword [esp + 0x50]
movss xmm0, dword [eax + 0x10]
movss xmm7, dword [esi + 0x34]
comiss xmm7, xmm0
ja 0x10048061
movss xmm7, dword [esi + 0x38]
minss xmm7, xmm0
ucomiss xmm0, xmm7
movaps xmm6, xmm1
lahf
test ah, 0x44
jnp 0x10048091
cmp byte [esi + 0x1c], 0
movaps xmm6, xmm7
subss xmm6, xmm0
mulss xmm6, dword [0x10056700]
je 0x1004808d
cvttss2si eax, xmm6
movd xmm6, eax
cvtdq2ps xmm6, xmm6
addss xmm6, xmm1
movd xmm0, dword [ebx + 0x1c]
sub esp, 0x1c
movss xmm3, dword [0x1005672c]
mov ecx, dword [ecx + 0x10]
add ecx, dword [esp + 0x3c]
movss xmm2, dword [0x1005672c]
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx]
movss dword [esp + 0x18], xmm7
divss xmm3, xmm0
movd xmm0, dword [ebx + 0x20]
cvtdq2ps xmm0, xmm0
movd xmm5, eax
movzx eax, word [ecx + 2]
divss xmm2, xmm0
movd xmm4, eax
movzx eax, word [ecx + 4]
cvtdq2ps xmm4, xmm4
movd xmm1, eax
movzx eax, word [ecx + 6]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm4, xmm2
mulss xmm0, xmm2
movss xmm2, dword [ecx + 8]
mulss xmm1, xmm3
movss dword [esp + 0x14], xmm0
movss xmm0, dword [ecx + 0x18]
movss dword [esp + 0x10], xmm1
movss dword [esp + 0xc], xmm4
xorps xmm4, xmm4
addss xmm0, xmm4
cvtdq2ps xmm5, xmm5
addss xmm0, dword [esp + 0x2c]
mulss xmm5, xmm3
addss xmm2, xmm4
movss xmm3, dword [ecx + 0xc]
addss xmm3, xmm4
movss dword [esp + 8], xmm5
movss dword [esp + 4], xmm0
addss xmm2, xmm6
movss xmm0, dword [ecx + 0x14]
mov ecx, edi
addss xmm0, xmm4
addss xmm3, dword [esp + 0x2c]
addss xmm0, xmm6
movss dword [esp], xmm0
push dword [esp + 0x34]
call fcn.10048845
movss xmm1, dword [esp + 0x7c]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xc]
add dword [esp + 0x20], 0x1c
inc edx
mov dword [esp + 0xc], edx
cmp edx, dword [ecx + 0xc]
jl 0x10047fdd
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
inc ecx
add edx, 0x18
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], edx
cmp ecx, dword [eax + 0x84]
jl 0x10047fbc
mov edi, dword [esp + 0x38]
add eax, 0x8c
mov ecx, dword [esp + 0x34]
inc edi
add ecx, 0x74
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ecx
mov dword [esp + 0x24], eax
cmp edi, dword [ebx + 0x4c]
jl 0x10047e72
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [esp + 0x40]
test eax, eax
je 0x100481ec
dec dword [0x101087e8]
push eax
call esi
mov eax, dword [esp + 0x48]
pop ecx
test eax, eax
je 0x100481fe
dec dword [0x101087e8]
push eax
call esi
mov eax, dword [esp + 0x50]
pop ecx
test eax, eax
je 0x10048210
dec dword [0x101087e8]
push eax
call esi
pop ecx
mov ecx, ebx
call fcn.10048420
mov al, 1
mov ecx, dword [esp + 0x184]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10049956
mov esp, ebp
pop ebp
ret