Function at 0x422780
Capabilities:
Access peb ldr_data
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x507fec
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x218
mov eax, dword [0x5a8314]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
mov esi, dword [ebx + 0xc]
mov dword [ebp - 0x164], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x208], eax
mov eax, dword [ebx + 0x20]
push esi
mov dword [ebp - 0x160], esi
mov dword [ebp - 0x1e4], eax
call fcn.0041c230
add esp, 4
mov dword [esi + 8], 0
mov ecx, esi
mov dword [esi + 0x30], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x38], 0
mov dword [esi + 0x3c], 0
mov dword [esi + 0x40], 0
call fcn.0041b520
xor ecx, ecx
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x1f0], ecx
xor eax, eax
mov dword [ebp - 4], ecx
mov dword [ebp - 0x1d0], ecx
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x1cc], eax
mov edi, dword [esi + 0x5c]
lea eax, [ecx + 8]
mov byte [ebp - 4], 1
mov dword [ebp - 0x198], edi
test edi, edi
jle 0x4228bf
cmp edi, eax
mov esi, edi
cmovl esi, eax
test esi, esi
jle 0x4228b9
imul eax, esi, 0x54
push eax
call fcn.0040da70
mov dword [ebp - 0x18c], eax
add esp, 4
mov dword [ebp - 0x1f0], eax
mov eax, 8
mov dword [ebp - 0x1f4], esi
mov esi, dword [ebp - 0x160]
mov dword [ebp - 0x1f8], edi
mov edi, dword [esi + 0x44]
mov dword [ebp - 0x158], edi
test edi, edi
jle 0x422905
cmp edi, 8
mov esi, edi
cmovl esi, eax
test esi, esi
jle 0x4228ff
lea eax, [esi + esi*2]
shl eax, 3
push eax
call fcn.0040da70
add esp, 4
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1d0], esi
mov esi, dword [ebp - 0x160]
imul ecx, dword [ebp - 0x198], 0x54
mov dword [ebp - 0x1d4], edi
push ecx
push 0
push dword [ebp - 0x18c]
call fcn.004df370
lea eax, [edi + edi*2]
shl eax, 3
push eax
push 0
push dword [ebp - 0x184]
call fcn.004df370
add esp, 0x18
mov dword [ebp - 0x17c], 0
cmp dword [esi + 0x5c], 0
jle 0x422a6e
mov edi, dword [ebp - 0x18c]
xor eax, eax
mov dword [ebp - 0x16c], eax
add edi, 0x34
jmp 0x422962
mov esi, ecx
mov ecx, dword [esi + 0x64]
xor edx, edx
add ecx, eax
mov dword [edi - 4], 0xffffffff
mov dword [ebp - 0x178], ecx
cmp dword [esi + 0x44], edx
jle 0x422d28
or esi, 0xffffffff
mov eax, esi
cmp esi, 0xffffffff
jne 0x4229b5
mov eax, dword [ebp - 0x160]
or esi, esi
mov ecx, dword [eax + 0x4c]
mov eax, dword [ebp - 0x178]
mov eax, dword [eax + 0x74]
cmp eax, dword [ecx + edx*4]
jne 0x4229a7
mov dword [edi - 4], edx
mov esi, edx
mov ecx, dword [ebp - 0x160]
inc edx
mov eax, esi
cmp edx, dword [ecx + 0x44]
jl 0x422982
cmp eax, 0xffffffff
je 0x422d28
push dword [ebx + 0x10]
mov esi, dword [ebp - 0x178]
lea ecx, [edi - 0x34]
push esi
push dword [ebp - 0x164]
call fcn.00423be0
test al, al
je 0x422d28
mov eax, dword [edi - 4]
mov edx, dword [esi + 0x30]
lea eax, [eax + eax*2]
mov dword [ebp - 0x188], eax
test edx, edx
jne 0x4229fe
mov ecx, dword [ebp - 0x160]
call fcn.0041bb90
mov edx, eax
mov dword [edi - 8], edx
cmp word [edx], 0
je 0x422a22
movzx eax, word [edx + 2]
test ax, ax
je 0x422a22
mov ecx, eax
cmp dword [edi], ecx
cmovge ecx, dword [edi]
add edx, 4
mov dword [edi], ecx
cmp word [edx], 0
jne 0x422a07
mov esi, dword [ebp - 0x184]
mov edx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x16c]
inc dword [esi + edx*8]
mov ecx, dword [edi]
cmp dword [esi + edx*8 + 4], ecx
cmovge ecx, dword [esi + edx*8 + 4]
add eax, 0x78
mov dword [esi + edx*8 + 4], ecx
add edi, 0x54
mov esi, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x160]
inc esi
mov dword [ebp - 0x17c], esi
mov dword [ebp - 0x16c], eax
cmp esi, dword [ecx + 0x5c]
jl 0x422960
mov eax, dword [ebp - 0x198]
xor esi, esi
mov dword [ebp - 0x174], esi
test eax, eax
jle 0x422e2f
mov edx, dword [ebp - 0x18c]
add edx, 0x38
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x168], edx
nop dword [eax]
mov eax, dword [edx - 8]
lea esi, [edx + 4]
mov ecx, esi
lea edi, [eax + eax*2]
mov eax, dword [edx - 4]
add eax, 0x20
mov dword [ebp - 0x170], edi
sar eax, 5
push eax
call fcn.00423de0
mov eax, dword [esi]
shl eax, 2
push eax
mov eax, dword [ebp - 0x168]
push 0
push dword [eax + 0xc]
call fcn.004df370
mov eax, dword [ebp - 0x184]
add esp, 0xc
cmp dword [eax + edi*8 + 0xc], 0
lea esi, [eax + edi*8]
jne 0x422b10
mov eax, dword [eax + edi*8 + 4]
lea ecx, [esi + 0xc]
add eax, 0x20
sar eax, 5
push eax
call fcn.00423de0
mov eax, dword [esi + 0xc]
shl eax, 2
push eax
push 0
push dword [esi + 0x14]
call fcn.004df370
add esp, 0xc
mov edx, dword [ebp - 0x168]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x190], eax
cmp word [eax], 0
je 0x422c01
nop dword [eax]
movzx ecx, word [eax + 2]
test cx, cx
je 0x422c01
movzx edi, word [eax]
cmp edi, ecx
ja 0x422be8
nop dword [eax + eax]
mov eax, dword [ebp - 0x170]
mov ecx, edi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov esi, edi
mov ecx, dword [ebp - 0x184]
sar esi, 5
mov dword [ebp - 0x164], edx
mov eax, dword [ecx + eax*8 + 0x14]
test dword [eax + esi*4], edx
jne 0x422bcf
mov eax, dword [ebp - 0x168]
push edi
push dword [eax - 0x20]
call fcn.0043cf70
mov edx, dword [ebp - 0x168]
add esp, 8
test eax, eax
je 0x422bd5
inc dword [edx]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x184]
inc dword [ecx + eax*8 + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x184]
or dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x170]
mov eax, dword [edx + eax*8 + 0x14]
or dword [eax + esi*4], ecx
inc dword [ebp - 0x174]
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x190]
inc edi
movzx eax, word [eax + 2]
cmp edi, eax
jle 0x422b50
mov eax, dword [ebp - 0x190]
add eax, 4
mov dword [ebp - 0x190], eax
cmp word [eax], 0
jne 0x422b30
add edx, 0x54
sub dword [ebp - 0x178], 1
mov dword [ebp - 0x168], edx
jne 0x422aa0
mov esi, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x198]
add esi, 0x4c
mov dword [ebp - 0x16c], eax
nop dword [eax]
mov ecx, dword [esi - 0x14]
mov dword [ebp - 0x188], ecx
cmp ecx, dword [esi]
jle 0x422c93
lea eax, [ecx*8]
sub eax, ecx
shl eax, 2
push eax
call fcn.0040da70
add esp, 4
mov dword [ebp - 0x164], eax
cmp dword [esi + 4], 0
je 0x422c88
mov ecx, dword [esi - 4]
lea edx, [ecx*8]
sub edx, ecx
shl edx, 2
push edx
push dword [esi + 4]
push eax
call fcn.004dedf0
push dword [esi + 4]
call fcn.0040daa0
mov eax, dword [ebp - 0x164]
add esp, 0x10
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x188]
mov dword [esi], eax
mov edx, dword [esi - 8]
mov ecx, dword [esi - 0x10]
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x17c], edx
lea eax, [edx + ecx*4]
mov dword [ebp - 0x1a4], eax
cmp edx, eax
jae 0x422df2
mov eax, dword [edx]
mov dword [ebp - 0x164], eax
test eax, eax
je 0x422ddd
xor edi, edi
mov dword [ebp - 0x170], edi
nop
mov eax, 1
mov ecx, edi
shl eax, cl
test dword [ebp - 0x164], eax
je 0x422dcd
mov ecx, dword [esi]
mov eax, edx
sub eax, dword [ebp - 0x178]
xorps xmm0, xmm0
shl eax, 3
and eax, 0xffffffe0
movq qword [ebp - 0x214], xmm0
add eax, edi
movzx eax, ax
mov dword [ebp - 0x210], eax
mov eax, dword [esi - 4]
cmp eax, ecx
jne 0x422d9b
lea edi, [eax + 1]
test ecx, ecx
je 0x422d34
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x422d39
mov byte [ebp - 0x159], 0
jmp 0x423b7f
mov eax, 8
cmp eax, edi
cmovg edi, eax
cmp edi, ecx
jle 0x422d95
lea eax, [edi*8]
sub eax, edi
shl eax, 2
push eax
call fcn.0040da70
add esp, 4
mov dword [ebp - 0x188], eax
cmp dword [esi + 4], 0
je 0x422d8d
mov ecx, dword [esi - 4]
lea edx, [ecx*8]
sub edx, ecx
shl edx, 2
push edx
push dword [esi + 4]
push eax
call fcn.004dedf0
push dword [esi + 4]
call fcn.0040daa0
mov eax, dword [ebp - 0x188]
add esp, 0x10
mov dword [esi + 4], eax
xorps xmm0, xmm0
mov dword [esi], edi
mov edi, dword [ebp - 0x170]
mov eax, dword [esi - 4]
mov edx, dword [ebp - 0x17c]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [esi + 4]
movups xmmword [eax + ecx*4], xmm0
movq xmm0, qword [ebp - 0x214]
movq qword [eax + ecx*4 + 0x10], xmm0
mov dword [eax + ecx*4 + 0x18], 0
inc dword [esi - 4]
inc edi
mov dword [ebp - 0x170], edi
cmp edi, 0x20
jb 0x422cd0
add edx, 4
mov dword [ebp - 0x17c], edx
cmp edx, dword [ebp - 0x1a4]
jb 0x422cb6
mov eax, dword [esi - 8]
test eax, eax
je 0x422e17
push eax
mov dword [esi - 0xc], 0
mov dword [esi - 0x10], 0
call fcn.0040daa0
add esp, 4
mov dword [esi - 8], 0
add esi, 0x54
sub dword [ebp - 0x16c], 1
jne 0x422c30
mov esi, dword [ebp - 0x174]
jmp 0x422e37
xor esi, esi
mov dword [ebp - 0x174], esi
cmp dword [ebp - 0x158], 0
jle 0x422e81
mov edi, dword [ebp - 0x184]
mov esi, dword [ebp - 0x158]
add edi, 0x14
nop
mov eax, dword [edi]
test eax, eax
je 0x422e73
push eax
mov dword [edi - 4], 0
mov dword [edi - 8], 0
call fcn.0040daa0
add esp, 4
mov dword [edi], 0
add edi, 0x18
sub esi, 1
jne 0x422e50
mov esi, dword [ebp - 0x174]
mov eax, dword [ebp - 0x184]
test eax, eax
je 0x422eb6
push eax
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d4], 0
call fcn.0040daa0
add esp, 4
xor eax, eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x1cc], eax
xor eax, eax
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x1fc], eax
mov byte [ebp - 4], 6
test esi, esi
jle 0x422f11
cmp esi, 8
mov edi, esi
mov ecx, 8
cmovl edi, ecx
test edi, edi
jle 0x422f11
mov eax, edi
shl eax, 4
push eax
call fcn.0040da70
add esp, 4
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x200], edi
mov dword [ebp - 0x204], esi
shl esi, 4
push esi
push 0
push eax
call fcn.004df370
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x11c], 0
push 0x40000
mov byte [ebp - 4], 7
call fcn.0040da70
push 0x20
mov esi, eax
call fcn.0040da70
movss xmm1, dword [0x50acdc]
mov ecx, 1
mov dword [ebp - 0x1ac], eax
add esp, 0x14
mov dword [ebp - 0x11c], eax
mov edx, 8
mov dword [eax], esi
xor eax, eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x124], ecx
mov ecx, dword [ebp - 0x198]
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x1b0], eax
test ecx, ecx
jle 0x42356e
mov edi, dword [ebp - 0x18c]
xor edx, edx
mov esi, dword [ebp - 0x160]
add edi, 0x1c
mov dword [ebp - 0x188], edx
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x164], ecx
mov ecx, dword [esi + 0x64]
add ecx, edx
mov edx, dword [edi + 0x1c]
test edx, edx
je 0x42353b
mov eax, dword [ebp - 0x1b0]
add dword [ebp - 0x1b0], edx
shl eax, 4
add eax, dword [ebp - 0x178]
mov dword [edi + 0xc], eax
movss xmm0, dword [ecx + 0x44]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x42302a
push ecx
lea eax, [ebp - 0x118]
movss dword [esp], xmm0
push eax
mov byte [ebp - 0x17d], 1
call fcn.0041c3e0
add esp, 8
jmp 0x423031
mov byte [ebp - 0x17d], 0
cmp dword [edi + 0x2c], 0
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c0], 0
jle 0x42353b
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x190], esi
mov dword [ebp - 0x1a4], ecx
nop
mov eax, dword [edi + 0x34]
add eax, ecx
mov dword [ebp - 0x1a8], eax
push dword [eax + 0x14]
push dword [edi - 4]
call fcn.0043cf70
add esp, 8
test eax, eax
je 0x423507
push dword [edi + 4]
push eax
push dword [edi - 4]
call fcn.0043d850
add esp, 0xc
test eax, eax
jne 0x423507
test byte [edi], 0x20
mov ecx, dword [edi - 4]
mov esi, dword [ecx + 0x54]
je 0x4230af
push esi
call fcn.00447680
mov ecx, dword [edi - 4]
add esp, 4
test byte [edi], 0x40
je 0x4230c0
push esi
call fcn.00447780
mov ecx, dword [edi - 4]
add esp, 4
lea eax, [esi + 0x18]
test eax, eax
je 0x423501
mov esi, dword [ecx + 0x54]
lea eax, [ebp - 0x158]
push eax
push esi
call fcn.00444d00
add esp, 8
test dword [edi], 0x100
je 0x4230ff
push 1
push 0
push dword [0x5a98d0]
lea eax, [ebp - 0x158]
push eax
call fcn.00445130
add esp, 0x10
push 1
push 0
push dword [edi + 8]
lea eax, [ebp - 0x158]
push eax
call fcn.00444e90
add esp, 0x10
test eax, eax
je 0x423123
mov ecx, dword [ebp - 0x1a8]
xor edi, edi
jmp 0x42317c
mov edx, dword [ebp - 0x1a8]
mov edi, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x170]
add edi, 0x1c
mov eax, dword [edi + 4]
mov dword [edx], eax
mov eax, dword [edi]
mov dword [edx + 4], eax
mov eax, dword [ecx - 4]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x64]
mov dword [edx + 8], eax
mov eax, dword [ecx - 4]
mov ecx, edx
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x68]
neg eax
mov dword [ecx + 0xc], eax
mov eax, dword [esi + 0x40]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ecx + 0x10], xmm0
mov eax, dword [ecx]
imul eax, dword [ecx + 4]
mov dword [ebp - 0x16c], edi
mov dword [ebp - 0x194], eax
add eax, dword [ebp - 0x1b8]
cmp eax, 0x40000
jle 0x42327f
push 0x40000
mov dword [ebp - 0x1b8], 0
call fcn.0040da70
mov edx, dword [ebp - 0x174]
mov ecx, eax
mov eax, dword [ebp - 0x120]
add esp, 4
mov dword [ebp - 0x19c], ecx
cmp edx, eax
jne 0x42325b
lea esi, [edx + 1]
test eax, eax
je 0x4231e8
cdq
sub eax, edx
mov edx, dword [ebp - 0x120]
sar eax, 1
add eax, edx
jmp 0x4231f3
mov edx, dword [ebp - 0x120]
mov eax, 8
cmp eax, esi
cmovg esi, eax
cmp esi, edx
jle 0x42325b
lea eax, [esi*4]
push eax
call fcn.0040da70
mov edx, dword [ebp - 0x1ac]
add esp, 4
mov dword [ebp - 0x1a0], eax
test edx, edx
je 0x423241
mov ecx, dword [ebp - 0x174]
shl ecx, 2
push ecx
push edx
push eax
call fcn.004dedf0
push dword [ebp - 0x1ac]
call fcn.0040daa0
mov eax, dword [ebp - 0x1a0]
add esp, 0x10
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x11c], eax
mov eax, esi
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x174]
mov edx, dword [ebp - 0x1ac]
mov dword [edx + eax*4], ecx
inc eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x124], eax
jmp 0x42328b
mov eax, dword [ebp - 0x174]
mov edx, dword [ebp - 0x1ac]
mov esi, dword [edx + eax*4 - 4]
lea eax, [ebp - 0x118]
mov edx, dword [ebp - 0x1b8]
add esi, edx
add edx, dword [ebp - 0x194]
mov dword [ecx + 0x18], esi
mov ecx, dword [ecx]
mov dword [ebp - 0x194], ecx
mov ecx, dword [edi + 4]
mov dword [ebp - 0x1b8], edx
xor edx, edx
cmp byte [ebp - 0x17d], dl
mov dword [ebp - 0x1bc], ecx
mov ecx, dword [ebp - 0x16c]
cmove eax, edx
mov edx, dword [edi]
mov edi, dword [edi + 0xc]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ecx + 8]
movzx ecx, byte [ecx + 0x12]
sub ecx, 1
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x19c], ecx
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c4], esi
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x1b4], edi
je 0x4233d8
sub dword [ebp - 0x19c], 1
jne 0x4234a5
test eax, eax
jne 0x42335b
test edx, edx
je 0x4234a5
nop dword [eax]
push ecx
push edi
push esi
call fcn.004dedf0
add edi, dword [ebp - 0x16c]
add esp, 0xc
add esi, dword [ebp - 0x194]
sub dword [ebp - 0x168], 1
mov ecx, dword [ebp - 0x1bc]
jne 0x423330
jmp 0x4234a5
test edx, edx
je 0x4234a5
mov eax, dword [ebp - 0x194]
nop dword [eax]
test ecx, ecx
je 0x4233b4
mov edx, dword [ebp - 0x1bc]
mov ecx, esi
sub edi, esi
mov esi, dword [ebp - 0x1a0]
movzx eax, byte [edi + ecx]
lea ecx, [ecx + 1]
mov al, byte [eax + esi]
mov byte [ecx - 1], al
sub edx, 1
jne 0x423384
mov esi, dword [ebp - 0x1c4]
mov edi, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x194]
add edi, dword [ebp - 0x16c]
add esi, eax
sub edx, 1
mov dword [ebp - 0x1b4], edi
mov dword [ebp - 0x1c4], esi
mov dword [ebp - 0x168], edx
jne 0x423370
jmp 0x4234a5
test eax, eax
je 0x4233f8
mov cl, byte [eax]
mov al, byte [eax + 0xff]
mov byte [ebp - 0x17e], cl
mov ecx, dword [ebp - 0x1bc]
mov byte [ebp - 0x17f], al
jmp 0x423406
mov byte [ebp - 0x17e], 0
mov byte [ebp - 0x17f], 0xff
test edx, edx
je 0x4234a5
mov eax, dword [ebp - 0x168]
xor edx, edx
mov byte [ebp - 0x159], 0
test ecx, ecx
je 0x423478
mov esi, edx
and esi, 7
jne 0x423430
mov al, byte [edi]
mov byte [ebp - 0x159], al
cmp byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x17f]
movzx ecx, byte [ebp - 0x17e]
cmovl ecx, eax
mov eax, dword [ebp - 0x1c4]
shl byte [ebp - 0x159], 1
mov byte [edx + eax], cl
inc edx
mov ecx, dword [ebp - 0x1bc]
lea eax, [edi + 1]
test esi, esi
cmovne eax, edi
mov edi, eax
cmp edx, ecx
jb 0x423421
mov esi, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x168]
mov edi, dword [ebp - 0x1b4]
add edi, dword [ebp - 0x16c]
add esi, dword [ebp - 0x194]
sub eax, 1
mov dword [ebp - 0x1b4], edi
mov dword [ebp - 0x1c4], esi
mov dword [ebp - 0x168], eax
jne 0x423414
mov edi, dword [ebp - 0x170]
mov esi, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1c8]
movzx edx, ax
mov eax, dword [edi + 0xc]
movzx ecx, word [esi]
mov edi, dword [ebp - 0x190]
add cx, dx
mov word [eax + edi + 4], cx
mov edi, dword [ebp - 0x170]
movzx ecx, word [esi + 4]
mov esi, dword [ebp - 0x190]
add cx, dx
mov eax, dword [edi + 0xc]
mov word [eax + esi + 6], cx
mov eax, dword [edi + 0xc]
movzx ecx, word [eax + esi + 6]
movzx eax, word [eax + esi + 4]
imul ecx, eax
add dword [ebp - 0x17c], ecx
jmp 0x423507
mov esi, dword [ebp - 0x190]
mov eax, dword [ebp - 0x1c0]
add esi, 0x10
mov ecx, dword [ebp - 0x1a4]
inc eax
add ecx, 0x1c
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x190], esi
cmp eax, dword [edi + 0x2c]
jl 0x423060
mov esi, dword [ebp - 0x160]
mov edx, dword [ebp - 0x188]
add edi, 0x54
movss xmm1, dword [0x50acdc]
add edx, 0x78
sub dword [ebp - 0x164], 1
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x188], edx
jne 0x422fd6
mov eax, dword [ebp - 0x17c]
movd xmm0, eax
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x423587
sqrtsd xmm0, xmm0
jmp 0x42358c
call fcn.004e7d20
mov edi, dword [ebp - 0x160]
cvtsd2ss xmm0, xmm0
mov esi, dword [edi + 0xc]
mov dword [edi + 0x30], 0
cvttss2si eax, xmm0
inc eax
test esi, esi
jg 0x4235e4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x56ce68]
jb 0x4235c0
mov esi, 0x1000
jmp 0x4235e4
comiss xmm0, dword [0x56ce64]
jb 0x4235d0
mov esi, 0x800
jmp 0x4235e4
comiss xmm0, dword [0x56ce60]
mov esi, 0x200
mov eax, 0x400
cmovae esi, eax
mov dword [edi + 0x2c], esi
xor eax, eax
sub esi, dword [edi + 0x10]
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 4], 8
test esi, esi
jle 0x423641
cmp esi, 8
mov edi, esi
mov ecx, 8
cmovl edi, ecx
test edi, edi
jle 0x42363b
lea eax, [edi*8]
push eax
call fcn.0040da70
add esp, 4
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1dc], edi
mov edi, dword [ebp - 0x160]
push esi
push eax
push 0x8000
push dword [edi + 0x2c]
lea eax, [ebp - 0x154]
mov dword [ebp - 0x1e0], esi
push eax
call fcn.00423e60
lea eax, [ebp - 0x154]
push eax
push edi
call fcn.0041c440
mov eax, dword [ebp - 0x198]
add esp, 0x1c
test eax, eax
jle 0x4236f0
mov esi, dword [ebp - 0x18c]
add esi, 0x38
mov dword [ebp - 0x164], eax
mov eax, dword [esi]
test eax, eax
je 0x4236de
push eax
push dword [esi - 0x10]
lea eax, [ebp - 0x154]
push eax
call fcn.004223d0
xor edi, edi
add esp, 0xc
cmp dword [esi], edi
jle 0x4236de
xor edx, edx
nop word [eax + eax]
mov eax, dword [esi - 0x10]
cmp dword [eax + edx + 0xc], 0
je 0x4236d6
movzx ecx, word [eax + edx + 0xa]
movzx eax, word [eax + edx + 6]
add ecx, eax
mov eax, dword [ebp - 0x160]
cmp dword [eax + 0x30], ecx
cmovge ecx, dword [eax + 0x30]
mov dword [eax + 0x30], ecx
inc edi
add edx, 0x10
cmp edi, dword [esi]
jl 0x4236b0
add esi, 0x54
sub dword [ebp - 0x164], 1
jne 0x423686
mov edi, dword [ebp - 0x160]
test byte [edi + 4], 1
mov eax, dword [edi + 0x30]
jne 0x42371e
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movss xmm2, dword [0x50acdc]
lea ecx, [eax + 1]
mov eax, dword [edi + 0x2c]
movaps xmm1, xmm2
mov dword [edi + 0x30], ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
imul eax, ecx
divss xmm1, xmm0
push eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x34], xmm1
divss xmm2, xmm0
movss dword [edi + 0x38], xmm2
call fcn.0040da70
mov ecx, dword [edi + 0x2c]
imul ecx, dword [edi + 0x30]
mov dword [edi + 0x24], eax
push ecx
push 0
push eax
call fcn.004df370
mov ecx, dword [ebp - 0x198]
add esp, 0x10
test ecx, ecx
jle 0x423a66
mov esi, dword [ebp - 0x18c]
xor eax, eax
add esi, 8
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x16c], esi
mov dword [ebp - 0x1b0], ecx
nop dword [eax]
cmp dword [esi + 0x30], 0
je 0x423a45
mov edi, dword [edi + 0x64]
sub esp, 8
movss xmm0, dword [esi]
add edi, eax
movss xmm1, dword [esi - 4]
mov dword [ebp - 0x1a8], edi
movss dword [esp + 4], xmm0
mov eax, dword [edi + 0x74]
movss dword [esp], xmm1
push edi
push eax
push dword [ebp - 0x160]
mov dword [ebp - 0x1c0], eax
call fcn.0041ce60
mov eax, dword [ebp - 0x1c0]
add esp, 0x14
movss xmm0, dword [edi + 0x28]
movss dword [ebp - 0x194], xmm0
movss xmm0, dword [eax + 0x4c]
addss xmm0, dword [0x50a5c8]
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, dword [ebp - 0x160]
cvtdq2ps xmm0, xmm0
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x1c8], eax
addss xmm0, dword [edi + 0x2c]
xor edi, edi
mov dword [ebp - 0x1a0], edi
movss dword [ebp - 0x1b4], xmm0
cmp dword [esi + 0x30], edi
jle 0x423a2c
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x19c], eax
nop dword [eax]
mov edx, dword [esi + 0x48]
add edx, eax
mov eax, dword [esi + 0x20]
add eax, ecx
mov dword [ebp - 0x190], edx
cmp word [eax + 4], 0
jne 0x423872
cmp word [eax + 6], 0
je 0x423a04
movzx edi, word [eax + 8]
movzx eax, word [eax + 0xa]
add eax, dword [ebp - 0x1c8]
mov ecx, dword [edx]
add edi, dword [ebp - 0x1c8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x164], ecx
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x1b8], edi
mov esi, dword [eax + 0x2c]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x170], esi
imul esi, dword [ebp - 0x1a4]
mov dword [ebp - 0x188], eax
add esi, dword [ecx + 0x24]
mov ecx, dword [ebp - 0x164]
add esi, edi
mov edi, dword [edx + 4]
test edi, edi
jle 0x423901
push ecx
push eax
push esi
call fcn.004dedf0
mov eax, dword [ebp - 0x188]
dec edi
mov ecx, dword [ebp - 0x164]
add esp, 0xc
add esi, dword [ebp - 0x170]
add eax, ecx
mov dword [ebp - 0x188], eax
test edi, edi
jg 0x4238d1
mov edx, dword [ebp - 0x190]
movd xmm0, dword [edx + 8]
sub esp, 0x24
mov eax, dword [edx]
mov edi, dword [ebp - 0x160]
mov esi, dword [ebp - 0x1b8]
mov ecx, dword [edx + 4]
cvtdq2ps xmm0, xmm0
movd xmm1, dword [edi + 0x2c]
addss xmm0, dword [ebp - 0x194]
movd xmm6, eax
add eax, esi
cvtdq2ps xmm6, xmm6
movss dword [ebp - 0x164], xmm0
addss xmm6, xmm0
movd xmm2, eax
movd xmm0, dword [edi + 0x30]
mov edi, dword [ebp - 0x1a4]
cvtdq2ps xmm1, xmm1
lea eax, [ecx + edi]
movd xmm4, esi
cvtdq2ps xmm4, xmm4
cvtdq2ps xmm2, xmm2
movd xmm7, dword [edx + 0xc]
divss xmm4, xmm1
divss xmm2, xmm1
cvtdq2ps xmm0, xmm0
movd xmm1, eax
movd xmm3, edi
cvtdq2ps xmm1, xmm1
movzx eax, word [edx + 0x14]
cvtdq2ps xmm3, xmm3
divss xmm1, xmm0
divss xmm3, xmm0
movss xmm0, dword [edx + 0x10]
cvtdq2ps xmm7, xmm7
movd xmm5, ecx
addss xmm7, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x1c0]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [ebp - 0x164]
cvtdq2ps xmm5, xmm5
movss dword [esp + 0x1c], xmm1
movss dword [esp + 0x18], xmm2
addss xmm5, xmm7
movss dword [esp + 0x14], xmm3
movss dword [esp + 0x10], xmm4
movss dword [esp + 0xc], xmm5
movss dword [esp + 8], xmm6
movss dword [esp + 4], xmm7
movss dword [esp], xmm0
push eax
push dword [ebp - 0x1a8]
call fcn.004184c0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x19c]
inc edi
add eax, 0x1c
mov dword [ebp - 0x1a0], edi
add ecx, 0x10
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x17c], ecx
cmp edi, dword [esi + 0x30]
jl 0x423850
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x1b0]
mov edi, dword [ebp - 0x160]
mov dword [esi + 0x20], 0
add esi, 0x54
add eax, 0x78
sub ecx, 1
mov dword [ebp - 0x16c], esi
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1b0], ecx
jne 0x4237a0
mov edi, dword [ebp - 0x174]
xor esi, esi
test edi, edi
jle 0x423a88
mov eax, dword [ebp - 0x1ac]
push dword [eax + esi*4]
call fcn.0040daa0
inc esi
add esp, 4
cmp esi, edi
jl 0x423a72
mov edi, dword [ebp - 0x198]
test edi, edi
jle 0x423ae9
mov esi, dword [ebp - 0x18c]
add esi, 0x18
nop dword [eax + eax]
mov eax, dword [esi + 0x38]
mov byte [ebp - 4], 9
test eax, eax
je 0x423ab4
push eax
call fcn.0040daa0
add esp, 4
mov eax, dword [esi + 0x2c]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x423ac8
push eax
call fcn.0040daa0
add esp, 4
mov eax, dword [esi]
mov byte [ebp - 4], 8
test eax, eax
je 0x423ae1
push eax
call fcn.0043cb10
add esp, 4
mov dword [esi], 0
add esi, 0x54
sub edi, 1
jne 0x423aa0
mov esi, dword [ebp - 0x160]
push esi
call fcn.0041bde0
add esp, 4
mov ecx, esi
push 0x7fffffff
push 0x7fffffff
push 0
push 0
call fcn.0041d370
push dword [ebp - 0x1e4]
mov ecx, esi
push dword [ebp - 0x208]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
call fcn.0041baf0
mov ecx, esi
call fcn.0041d350
mov byte [ebp - 0x159], 1
mov eax, dword [ebp - 0x1d8]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x423b51
push eax
call fcn.0040daa0
add esp, 4
mov eax, dword [ebp - 0x1ac]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x423b68
push eax
call fcn.0040daa0
add esp, 4
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x423b7f
push eax
call fcn.0040daa0
add esp, 4
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x423b96
push eax
call fcn.0040daa0
add esp, 4
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 4], 0xf
test eax, eax
je 0x423bb0
push eax
call fcn.0040daa0
add esp, 4
mov al, byte [ebp - 0x159]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00496b5c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret