Function at 0x435f90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43bde0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x158
mov eax, dword [0x445040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x158], ecx
mov edi, dword [0x4456c4]
mov esi, edi
mov eax, dword [ebx + 8]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x114], 0x20
mov eax, dword [esi + 0x1ba8]
mov dword [ebp - 0xe8], esi
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1ba8]
mov dword [ebp - 0xf4], eax
cmp byte [eax + 0x8f], 0
jne 0x4364e8
mov edx, dword [ebx + 0x14]
mov ecx, edx
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0xd4], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0xe4], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0x160], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x128], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0xd4], 0
mov dword [ebp - 0x118], ecx
je 0x436092
call fcn.00418120
mov edi, dword [0x4456c4]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0xc4]
xor edx, edx
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x158]
call fcn.0040c5c0
add esp, 4
mov dword [ebp - 0xd8], eax
cmp dword [edi + 0x1be0], eax
jne 0x4360c6
mov dword [edi + 0x1be4], eax
cmp dword [edi + 0x1c1c], eax
jne 0x4360d5
mov byte [edi + 0x1c20], 1
cmp dword [edi + 0x1bc8], eax
jne 0x4360f9
push ecx
push dword [ebp - 0x158]
mov edx, 0xb
mov ecx, eax
call fcn.0041dd20
mov edi, dword [0x4456c4]
add esp, 8
mov eax, dword [ebp - 0x158]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x43611c
mov dl, byte [ecx]
test dl, dl
je 0x43611c
cmp dl, 0x23
jne 0x436116
cmp byte [ecx + 1], dl
je 0x43611c
inc ecx
cmp ecx, 0xffffffff
jb 0x436106
movss xmm1, dword [0x442d58]
movss xmm0, dword [edi + 0x1944]
movss dword [ebp - 0x15c], xmm1
cmp eax, ecx
jne 0x436145
xorps xmm3, xmm3
movss dword [ebp - 0x164], xmm3
jmp 0x436196
push ecx
push ecx
push eax
push ecx
mov ecx, dword [edi + 0x1940]
lea eax, [ebp - 0x148]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.0042d1b0
movss xmm0, dword [ebp - 0x148]
xorps xmm3, xmm3
addss xmm0, dword [0x442cb0]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x144]
cmp byte [ebp - 0xd4], 0
je 0x4361af
movss xmm0, dword [esi + 0x1944]
mulss xmm0, dword [0x442d0c]
test byte [edi + 0x1c34], 1
movss xmm1, dword [esi + 0x1568]
mov eax, dword [edi + 0x1ba8]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x4361db
movss xmm0, dword [edi + 0x1c38]
jmp 0x4361e3
movss xmm0, dword [eax + 0x178]
comiss xmm3, xmm0
jbe 0x436222
cmp dword [eax + 0x168], 0
movss xmm1, dword [eax + 0x200]
jne 0x436202
cmp dword [edi + 0x1f60], 0
je 0x43620a
movss xmm1, dword [eax + 0x1d0]
subss xmm1, dword [eax + 0xd0]
addss xmm1, xmm0
movss xmm0, dword [0x442cb8]
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x148]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.00418040
movss xmm1, dword [ebp - 0x164]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x436260
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x157c]
jmp 0x436263
xorps xmm2, xmm2
mov edi, dword [ebp - 0xf4]
lea ecx, [ebp - 0x138]
movss xmm0, dword [ebp - 0x144]
movss xmm5, dword [ebp - 0x148]
addss xmm2, xmm5
movss dword [ebp - 0x154], xmm5
movss xmm4, dword [edi + 0xd4]
movaps xmm1, xmm5
movss xmm3, dword [edi + 0xd0]
addss xmm0, xmm4
addss xmm1, xmm3
movss dword [ebp - 0xbc], xmm3
movss dword [ebp - 0xec], xmm4
addss xmm2, xmm3
movss dword [ebp - 0x54], xmm3
movss dword [ebp - 0x50], xmm4
movss dword [ebp - 0x48], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x4c], xmm1
movss xmm1, dword [esi + 0x1568]
movss dword [ebp - 0x1c], xmm2
subss xmm2, xmm3
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x18], xmm0
subss xmm0, xmm4
movss dword [ebp - 0x20], xmm4
mov dword [ebp - 0x11c], edi
movss dword [ebp - 0x138], xmm2
movss dword [ebp - 0x134], xmm0
call fcn.00417c70
cmp byte [ebp - 0xd4], 0
je 0x436577
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0x24]
call fcn.00417da0
add esp, 8
test al, al
je 0x4364e3
mov eax, dword [esi + 0x1c50]
movss xmm0, dword [ebp - 0xbc]
mov esi, dword [0x4456c4]
movss dword [edi + 0xd0], xmm0
movss xmm0, dword [ebp - 0xec]
movss dword [edi + 0xd4], xmm0
movups xmm0, xmmword [esi + 0x1620]
mov dword [ebp - 0x120], eax
lea ecx, [esi + 0x1ce4]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 3
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.0041e5c0
mov edi, dword [ebp - 0xe8]
lea eax, [ebp - 0x13c]
push eax
mov dword [ebp - 0x13c], 7
movups xmm0, xmmword [edi + 0x1660]
movups xmmword [esi + 0x1620], xmm0
mov esi, dword [0x4456c4]
movss xmm0, dword [edi + 0x156c]
movss dword [ebp - 0xbc], xmm0
movss xmm0, dword [esi + 0x1554]
lea ecx, [esi + 0x1cf0]
movss dword [ebp - 0x138], xmm0
call fcn.0041e500
movss xmm0, dword [ebp - 0xbc]
lea eax, [ebp - 0x13c]
movss dword [esi + 0x1554], xmm0
mov esi, dword [0x4456c4]
movss xmm0, dword [edi + 0x1570]
movss dword [ebp - 0xbc], xmm0
push eax
movss xmm0, dword [esi + 0x1558]
lea ecx, [esi + 0x1cf0]
mov dword [ebp - 0x13c], 8
movss dword [ebp - 0x138], xmm0
call fcn.0041e500
movss xmm0, dword [ebp - 0xbc]
lea eax, [ebp - 0x138]
movss xmm1, dword [ebp - 0x4c]
sub esp, 8
subss xmm1, dword [ebp - 0x54]
mov edx, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x158]
movss dword [esi + 0x1558], xmm0
movss xmm0, dword [ebp - 0x48]
subss xmm0, dword [ebp - 0x50]
push eax
movss dword [ebp - 0x138], xmm1
movss dword [ebp - 0x134], xmm0
call fcn.00412150
add esp, 0xc
mov byte [ebp - 0xdd], al
mov ecx, 2
call fcn.0040cd10
mov esi, dword [0x4456c4]
mov ecx, dword [esi + 0x1ce4]
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x1cec]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, 0x15f
shl eax, 4
add eax, esi
movups xmmword [eax], xmm0
dec dword [esi + 0x1ce4]
cmp byte [ebp - 0xdd], 0
jne 0x436508
call fcn.00412320
call fcn.00418250
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043a4f6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x1ba8]
mov dword [ebp - 0x11c], edx
movsx ecx, word [edx + 0x122]
mov eax, dword [edx + 0x11c]
bts ecx, eax
mov word [edx + 0x122], cx
movss xmm0, dword [esi + 0x1564]
addss xmm0, dword [edx + 0xd0]
movss dword [edx + 0xd0], xmm0
movss xmm0, dword [esi + 0x1568]
addss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [ebp - 0x148]
subss xmm0, dword [edx + 0x80]
movss dword [ebp - 0x154], xmm0
jmp 0x4365ae
test dword [ebx + 0x14], 0x10000000
jne 0x4365a2
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0x24]
call fcn.00417da0
add esp, 8
test al, al
je 0x4364e8
mov eax, dword [esi + 0x1c50]
mov dword [ebp - 0x120], eax
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
call fcn.0040e170
mov dl, al
mov byte [ebp - 0xed], dl
test dl, dl
je 0x4365d2
mov dword [esi + 0x1ebc], 1
mov edi, dword [0x4456c4]
xor eax, eax
mov ecx, dword [ebp - 0xd8]
add edi, 0x1ff0
cmp dword [edi], ecx
cmovne edi, eax
mov eax, dword [ebp - 0x120]
shr eax, 8
and al, 1
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x120], eax
mov eax, dword [esi + 0x1be0]
cmp eax, ecx
je 0x43662e
cmp dword [esi + 0x1d68], ecx
je 0x436625
cmp dword [esi + 0x1d5c], ecx
jne 0x43662e
cmp dword [esi + 0x1d84], 2
jne 0x43662e
mov byte [ebp - 0xc5], 1
jmp 0x436635
mov byte [ebp - 0xc5], 0
test dl, dl
je 0x436649
cmp byte [esi + 0x3e0], 0
mov byte [ebp - 0xb8], 1
jne 0x436650
mov byte [ebp - 0xb8], 0
cmp byte [ebp - 0xd4], 0
je 0x4366c6
test edi, edi
je 0x4366c6
test eax, eax
jne 0x4366c6
mov eax, dword [ebp - 0x11c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.0040c5c0
mov ecx, dword [0x4456c4]
add esp, 4
mov dword [ebp - 0xbc], eax
cmp dword [ecx + 0x1bc8], eax
jne 0x4366b5
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.0041dd20
mov eax, dword [ebp - 0xbc]
add esp, 8
cmp dword [esi + 0x1c1c], eax
jne 0x4366c6
mov byte [ebp - 0xb6], 1
jmp 0x4366e6
mov eax, dword [ebp - 0xd4]
mov byte [ebp - 0xb6], 0
test al, al
je 0x436760
mov byte [ebp - 0xb6], 0
test edi, edi
je 0x436760
mov eax, dword [ebp - 0x11c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.0040c5c0
mov ecx, dword [0x4456c4]
add esp, 4
mov dword [ebp - 0xbc], eax
cmp dword [ecx + 0x1bc8], eax
jne 0x43673a
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.0041dd20
mov eax, dword [ebp - 0xbc]
add esp, 8
cmp dword [esi + 0x1be0], eax
jne 0x43675a
mov cl, 1
mov byte [ebp - 0xcd], 0
mov byte [ebp - 0xb7], cl
mov byte [ebp - 0xcc], 0
jmp 0x43677a
mov eax, dword [ebp - 0xd4]
xor cl, cl
mov byte [ebp - 0xcd], 0
mov byte [ebp - 0xcc], 0
mov byte [ebp - 0xb7], cl
test al, al
je 0x436795
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [ebp - 0xd4]
movss dword [ebp - 0x15c], xmm0
jmp 0x43679d
xor cl, cl
mov byte [ebp - 0xb7], cl
test edi, edi
je 0x4367ac
xor al, 1
cmp byte [edi + 0x53], al
je 0x4367ac
mov al, 1
jmp 0x4367ae
xor al, al
cmp byte [ebp - 0xb8], 0
mov byte [ebp - 0xc6], al
mov dword [ebp - 0xec], 1
jne 0x4367f5
cmp byte [ebp - 0xb6], 0
jne 0x4367f5
cmp byte [ebp - 0xc5], 0
jne 0x4367f5
cmp byte [ebp - 0x120], 0
jne 0x4367f5
mov byte [ebp - 0xb6], 0
test cl, cl
jne 0x4367fc
mov byte [ebp - 0xc8], cl
jmp 0x436811
mov byte [ebp - 0xb6], 1
mov edx, dword [ebp - 0xd8]
mov byte [ebp - 0xc8], 1
cmp dword [esi + 0x1be0], edx
jne 0x436819
test al, al
je 0x436ab3
mov ecx, dword [ebp - 0xdc]
lea edi, [esi + 0x1ff0]
mov dword [ebp - 0x10c], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436838
mov eax, dword [edi + 0x28]
sub ecx, edx
lea edx, [ecx + 1]
mov dword [ebp - 0xc4], edx
cmp edx, eax
jle 0x436882
test eax, eax
je 0x436867
cdq
sub eax, edx
mov edx, dword [ebp - 0xc4]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x28]
jmp 0x43686c
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x24]
push eax
call fcn.0041e950
mov edx, dword [ebp - 0xc4]
push edx
push dword [ebp - 0xdc]
mov dword [edi + 0x24], edx
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [edi + 0x10]
add esp, 0xc
cmp eax, 0x21
jge 0x4368cc
test eax, eax
je 0x4368b2
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x4368ba
mov ecx, 8
lea edx, [edi + 0xc]
mov eax, 0x21
cmp ecx, eax
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041e9c0
lea eax, [edi + 0x18]
mov dword [edi + 0xc], 0x21
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x4368f9
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.0041e950
lea eax, [edi + 0x18]
mov dword [eax], 0
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x100], ecx
add ecx, 0x3e
mov byte [edi + 0x30], 0
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xc0], edx
cmp edx, ecx
jae 0x436984
mov esi, eax
nop dword [eax]
cmp byte [esi], 0
je 0x436978
push 0
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.0040c870
mov edx, dword [ebp - 0xc0]
add esi, eax
mov eax, dword [ebp - 0xbc]
add esp, 4
mov dword [ebp - 0xf8], esi
test eax, eax
je 0x436978
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x100]
add eax, 0x3e
mov dword [ebp - 0xc0], edx
cmp edx, eax
jb 0x436930
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0xdc]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x100]
sar edx, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xd8]
mov dword [edi + 4], edx
cmp dword [edi], eax
jne 0x4369e0
cmp byte [ebp - 0xc6], cl
jne 0x4369e0
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov byte [ebp - 0xdd], 1
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
cmovl edx, dword [edi + 0x44]
mov cl, byte [ebp - 0xdd]
mov dword [edi + 0x44], edx
jmp 0x436a43
mov dword [edi], eax
xor cl, cl
mov al, byte [ebp - 0xd4]
xor al, 1
mov dword [edi + 0x38], 0
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], 0
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x3c], 0
mov word [edi + 0x51], 1
mov dword [edi + 0x58], 0
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], 0
cmp byte [ebp - 0xd4], 0
mov edx, dword [ebx + 0x14]
jne 0x436aa7
mov eax, dword [ebp - 0xcc]
test dl, 0x10
movzx eax, al
cmovne eax, dword [ebp - 0xec]
cmp byte [ebp - 0xc5], 0
mov dword [ebp - 0xcc], eax
je 0x436a85
test cl, cl
je 0x436a7e
test byte [esi + 0x1d6c], 4
jne 0x436a85
mov byte [ebp - 0xcc], 1
cmp byte [ebp - 0x120], 0
jne 0x436aa0
cmp byte [ebp - 0xb8], 0
je 0x436aa7
cmp byte [esi + 0xfc], 0
je 0x436aa7
mov byte [ebp - 0xcc], 1
test edx, 0x2000
je 0x436ab3
mov byte [edi + 0x48], 1
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
je 0x436b72
cmp byte [ebp - 0xb6], 0
je 0x436b6a
mov edx, dword [ebp - 0xf4]
call fcn.0040df60
call fcn.004195c0
mov ecx, edx
call fcn.004173f0
mov eax, dword [esi + 0x1bf4]
mov edx, dword [ebx + 0x14]
or eax, 3
cmp byte [ebp - 0xd4], 0
mov dword [esi + 0x1bf4], eax
jne 0x436b08
test dl, dl
jns 0x436b11
or eax, 0xc
mov dword [esi + 0x1bf4], eax
mov eax, dword [esi + 0x1c00]
or dword [esi + 0x1bf8], 2
or eax, 0x180
cmp byte [ebp - 0xd4], 0
mov ecx, dword [esi + 0x1c04]
mov dword [esi + 0x1c00], eax
mov dword [esi + 0x1c04], ecx
je 0x436b4d
or eax, 0x60
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
test edx, 0x440
je 0x436b64
or eax, 1
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
jne 0x436baf
test edi, edi
jne 0x436b81
call fcn.0040e030
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
jne 0x436baf
cmp byte [esi + 0x3e0], 0
je 0x436bbc
cmp byte [ebp - 0xc8], 0
jne 0x436bbc
cmp byte [ebp - 0xb6], 0
jne 0x436bbc
mov byte [ebp - 0xcd], 1
mov dl, 1
jmp 0x436bc2
test edi, edi
je 0x436bc0
cmp byte [ebp - 0xb7], 0
je 0x436bc0
mov dl, 1
jmp 0x436bc2
xor dl, dl
mov byte [ebp - 0xc7], dl
test edi, edi
je 0x436be8
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x436bdd
cmp byte [ebp - 0xcc], 0
je 0x436be8
test dl, dl
je 0x436be8
mov edx, 1
jmp 0x436bea
xor dl, dl
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x108], edx
mov byte [ebp - 0xee], dl
mov byte [ebp - 0xdd], 0
mov byte [ebp - 0xb6], 0
test al, al
je 0x436d42
test edi, edi
je 0x436d42
cmp byte [ebp - 0xc7], 0
jne 0x436c2b
test dl, dl
je 0x436d4f
mov ecx, dword [edi + 0x10]
lea eax, [edi + 0xc]
cmp ecx, 0x21
jge 0x436c61
test ecx, ecx
je 0x436c45
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x436c4a
mov eax, 8
cmp eax, 0x21
mov ecx, 0x21
cmovg ecx, eax
push ecx
lea ecx, [edi + 0xc]
call fcn.0041e9c0
lea eax, [edi + 0xc]
mov dword [eax], 0x21
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x100], ecx
add ecx, 0x40
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xc0], edx
cmp edx, ecx
jae 0x436ce4
mov esi, eax
nop dword [eax]
cmp byte [esi], 0
je 0x436cd8
push 0
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.0040c870
mov edx, dword [ebp - 0xc0]
add esi, eax
mov eax, dword [ebp - 0xbc]
add esp, 4
mov dword [ebp - 0xf8], esi
test eax, eax
je 0x436cd8
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x100]
add eax, 0x40
mov dword [ebp - 0xc0], edx
cmp edx, eax
jb 0x436c90
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0xdc]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x100]
sar edx, 1
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov dword [edi + 4], edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 8], eax
cmovl edx, dword [edi + 0x44]
movzx eax, byte [ebp - 0xee]
cmp ecx, edx
mov dword [edi + 0x44], edx
mov edx, 0
cmovne edx, eax
mov dword [edi + 0x40], ecx
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x108], edx
cmp byte [ebp - 0xc7], 0
jne 0x436d57
test dl, dl
jne 0x436d57
cmp dword [esi + 0x1be0], ecx
jne 0x436d6b
test al, al
jne 0x436d6b
test edi, edi
je 0x436d6b
mov byte [ebp - 0xee], 1
cmp byte [edi + 0x30], al
jne 0x436d72
mov byte [ebp - 0xee], 0
cmp byte [ebp - 0x160], 0
je 0x436e05
mov edx, dword [esi + 0x1940]
cmp dword [edx + 0x14], 0x2a
ja 0x436d90
mov eax, dword [edx + 0x2c]
jmp 0x436daf
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x436da6
mov eax, dword [edx + 0x2c]
jmp 0x436daf
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*8]
mov dword [ebp - 0xc0], eax
lea ecx, [esi + 0x2e64]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0xc0]
mov dword [ecx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
call fcn.004176c0
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xf8], 0
cmp dword [esi + 0x1be0], ecx
jne 0x437469
mov eax, dword [edi + 8]
mov edx, dword [ebx + 0x14]
mov byte [edi + 0xe6e], 0
mov dword [edi + 0x34], 0x20
mov dword [edi + 0xe70], edx
cmp byte [esi + 0xec], 0
mov dword [ebp - 0xf8], eax
sete al
mov dword [esi + 0x31f8], 1
cmp byte [ebp - 0xd4], 0
mov byte [esi + 0x1bed], al
movss xmm7, dword [esi + 0xe4]
subss xmm7, dword [ebp - 0x54]
subss xmm7, dword [esi + 0x1564]
addss xmm7, dword [edi + 0x38]
je 0x436e96
mov eax, dword [ebp - 0x11c]
movss xmm2, dword [esi + 0xe8]
subss xmm2, dword [eax + 0xd4]
jmp 0x436ea6
movss xmm2, dword [esi + 0x1944]
mulss xmm2, dword [0x442c80]
cmp byte [ebp - 0xcc], 0
mov cl, byte [esi + 0xb1]
mov byte [ebp - 0xb8], cl
je 0x436edb
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6d], 1
jmp 0x437279
mov al, byte [ebp - 0xed]
test al, al
je 0x43719b
cmp word [esi + 0x3ea], 2
jb 0x43719b
cmp byte [esi + 0xfd], 0
jne 0x43719b
cmp byte [edi + 0x53], 0
je 0x436f1e
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00434520
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.00434890
lea edx, [edi + 0x3c]
mov dword [ebp - 0xc4], eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov byte [edx + 0x16], 0
movzx ecx, word [esi + 0x3ea]
sub ecx, 2
test cl, 1
jne 0x43710a
test eax, eax
je 0x436f69
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0xc4]
cmp word [eax + ecx*2 - 2], 0xa
je 0x436f69
xor cl, cl
jmp 0x436f6b
mov cl, 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x436f77
test cl, cl
jne 0x436f9a
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00434c70
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x436fb8
mov eax, dword [edi + 0x44]
cmp dword [edi + 0x40], eax
jne 0x436fb5
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
jmp 0x436fb8
mov dword [edi + 0x3c], eax
mov ecx, dword [edi + 0x3c]
mov edx, dword [edi + 4]
inc ecx
cmp ecx, edx
jge 0x4370cb
mov eax, dword [edi + 0xe70]
and eax, 0x8000
mov dword [ebp - 0xc4], 0x3000
mov dword [ebp - 0xbc], eax
test eax, eax
jne 0x4370c0
test ecx, ecx
jle 0x4370c9
mov eax, dword [edi + 0x14]
movzx eax, word [eax + ecx*2 - 2]
cmp eax, 0x20
je 0x4370b4
cmp eax, 9
je 0x4370b4
cmp ax, word [ebp - 0xc4]
je 0x4370b4
cmp eax, 0x2c
je 0x4370b4
cmp eax, 0x3b
je 0x4370b4
cmp eax, 0x28
je 0x4370b4
cmp eax, 0x29
je 0x4370b4
cmp eax, 0x7b
je 0x4370b4
cmp eax, 0x7d
je 0x4370b4
cmp eax, 0x5b
je 0x4370b4
cmp eax, 0x5d
je 0x4370b4
cmp eax, 0x7c
je 0x4370b4
cmp eax, 0xa
je 0x4370b4
cmp eax, 0xd
je 0x4370b4
mov eax, dword [edi + 0x14]
movzx eax, word [eax + ecx*2]
cmp eax, 0x20
je 0x4370ad
cmp eax, 9
je 0x4370ad
cmp ax, word [ebp - 0xc4]
je 0x4370ad
cmp eax, 0x2c
je 0x4370ad
cmp eax, 0x3b
je 0x4370ad
cmp eax, 0x28
je 0x4370ad
cmp eax, 0x29
je 0x4370ad
cmp eax, 0x7b
je 0x4370ad
cmp eax, 0x7d
je 0x4370ad
cmp eax, 0x5b
je 0x4370ad
cmp eax, 0x5d
je 0x4370ad
cmp eax, 0x7c
je 0x4370ad
cmp eax, 0xa
je 0x4370ad
cmp eax, 0xd
jne 0x4370b4
mov eax, 1
jmp 0x4370b6
xor eax, eax
test eax, eax
jne 0x4370c9
mov eax, dword [ebp - 0xbc]
inc ecx
cmp ecx, edx
jl 0x436fe2
cmp ecx, edx
mov eax, dword [edi + 4]
cmovg ecx, edx
mov edx, ecx
mov dword [edi + 0x3c], ecx
mov dword [edi + 0x44], ecx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
je 0x4370f9
cmp ecx, eax
jle 0x4370e9
mov dword [edi + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x4370f2
mov dword [edi + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x4370f9
mov dword [edi + 0x3c], ecx
cmp dword [edi + 0x3c], eax
jle 0x437266
mov dword [edi + 0x3c], eax
jmp 0x437266
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0xc4]
push 0x200004
movzx esi, word [eax + ecx*2]
mov ecx, edi
call fcn.00434c70
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600005
call fcn.00434c70
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600001
call fcn.00434c70
add esp, 4
cmp esi, 0xa
je 0x437189
cmp byte [ebp - 0xd4], 0
je 0x437189
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov esi, dword [ebp - 0xe8]
mov byte [edi + 0xe6c], 0
jmp 0x437266
cmp byte [esi + 0x3e0], 0
je 0x4371e8
cmp byte [edi + 0xe6d], 0
jne 0x4371e8
test al, al
je 0x437279
cmp byte [edi + 0x53], 0
je 0x4371cf
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00434520
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.00434890
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
jmp 0x437266
cmp byte [esi + 0xec], 0
je 0x437279
cmp byte [edi + 0xe6d], 0
jne 0x437282
movss xmm0, dword [esi + 0x370]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x437227
movss xmm0, dword [esi + 0x374]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x437279
cmp byte [edi + 0x53], 0
je 0x437241
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00434520
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x43724f
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.00434890
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0xe6c], 1
mov cl, byte [ebp - 0xb8]
mov edx, dword [ebx + 0x14]
mov dword [edi + 0xe68], 0xbe99999a
cmp byte [edi + 0xe6d], 0
je 0x437292
cmp byte [esi + 0xec], 0
jne 0x437292
mov byte [edi + 0xe6d], 0
cmp byte [esi + 0xfc], 0
je 0x4372a4
cmp byte [esi + 0xfe], 0
je 0x4372b1
test cl, cl
je 0x4372ba
cmp byte [esi + 0xff], 0
je 0x4372ba
mov byte [ebp - 0xb5], 1
jmp 0x4372c1
mov byte [ebp - 0xb5], 0
test edx, 0x400
je 0x437502
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x437502
call fcn.00412090
mov ecx, dword [ebp - 0xe4]
test al, al
mov al, byte [ebp - 0xb5]
je 0x437384
test al, al
jne 0x437384
cmp byte [esi + 0xfd], al
jne 0x437384
test cl, cl
jne 0x437384
mov ecx, dword [esi + 0x1524]
mov eax, dword [esi + 0x151c]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x437330
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x437378
cmp ecx, edx
jb 0x437320
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xc4]
push 2
sub esp, 8
mov dword [ebp - 0xc4], 9
call fcn.00435db0
add esp, 0xc
test al, al
je 0x437378
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00434c70
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xe4]
mov al, byte [ebp - 0xb5]
mov edx, dword [ebx + 0x14]
cmp dword [esi + 0x151c], 0
jle 0x437469
test al, al
jne 0x437431
test cl, cl
jne 0x437431
cmp byte [ebp - 0xc5], cl
jne 0x437431
xor ecx, ecx
mov dword [ebp - 0xc0], ecx
nop dword [eax + eax]
mov eax, dword [esi + 0x1524]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0xc4], eax
cmp eax, 9
jne 0x4373de
cmp byte [esi + 0xfd], 0
jne 0x43741f
push 2
sub esp, 8
lea ecx, [ebp - 0xc4]
call fcn.00435db0
add esp, 0xc
test al, al
je 0x437419
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00434c70
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebx + 0x14]
inc ecx
mov dword [ebp - 0xc0], ecx
cmp ecx, dword [esi + 0x151c]
jl 0x4373c0
mov ecx, dword [esi + 0x1520]
lea eax, [esi + 0x151c]
test ecx, ecx
jns 0x437463
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x151c]
call fcn.0041e9c0
lea eax, [esi + 0x151c]
mov dword [eax], 0
mov edx, dword [ebp - 0xd8]
xor cl, cl
mov byte [ebp - 0xb5], cl
cmp dword [esi + 0x1be0], edx
jne 0x437fe8
cmp byte [esi + 0x1bec], cl
jne 0x437fe8
cmp byte [ebp - 0xcd], cl
jne 0x437fe8
movss xmm0, dword [ebp - 0x144]
mov ecx, 1
subss xmm0, dword [esi + 0x1568]
divss xmm0, dword [esi + 0x1944]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
xor eax, eax
mov dword [edi + 0x4c], ecx
cmp byte [esi + 0xfd], al
mov dword [ebp - 0xc4], ecx
mov ecx, 0x400000
cmovne eax, ecx
mov dword [ebp - 0xcc], eax
mov al, byte [esi + 0xb1]
mov byte [ebp - 0x12d], al
test al, al
je 0x437513
cmp dword [esi + 0x37c], 0xa
jne 0x437513
mov byte [ebp - 0xc8], 1
jmp 0x43751e
mov al, byte [ebp - 0xb5]
mov ecx, dword [ebp - 0xe4]
jmp 0x437387
mov byte [ebp - 0xc8], 0
test al, al
je 0x437549
cmp byte [esi + 0xff], 0
mov al, byte [esi + 0xfe]
mov byte [ebp - 0xb8], al
je 0x43755c
cmp byte [esi + 0xfc], 0
jne 0x43755c
test al, al
jne 0x43755c
mov byte [ebp - 0xc5], 1
jmp 0x437563
mov al, byte [esi + 0xfc]
mov byte [ebp - 0xb8], al
mov byte [ebp - 0xc8], 0
mov byte [ebp - 0xc5], 0
cmp byte [esi + 0xb1], 0
mov ecx, dword [esi + 0x37c]
je 0x437577
cmp ecx, 8
jmp 0x43757a
cmp ecx, 1
sete al
mov byte [ebp - 0xb7], al
test al, al
je 0x4375a7
mov eax, dword [0x4456c4]
mov eax, dword [eax + 0x80]
test eax, eax
js 0x4375a7
mov ecx, eax
call fcn.00412090
test al, al
jne 0x4375c1
mov ecx, dword [esi + 0x37c]
cmp ecx, 2
jne 0x4375ed
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x4375ed
call fcn.00412090
test al, al
je 0x4375ed
cmp byte [ebp - 0xe4], 0
jne 0x4375ed
cmp byte [ebp - 0x160], 0
jne 0x4375ed
cmp byte [ebp - 0xd4], 0
je 0x4375e4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x4375ed
mov byte [ebp - 0xc6], 1
jmp 0x4375f4
mov byte [ebp - 0xc6], 0
cmp byte [ebp - 0xb7], 0
je 0x437612
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x437612
call fcn.00412090
test al, al
jne 0x437630
cmp dword [esi + 0x37c], 1
jne 0x437653
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x437653
call fcn.00412090
test al, al
je 0x437653
cmp byte [ebp - 0x160], 0
jne 0x437653
cmp byte [ebp - 0xd4], 0
je 0x43764a
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x437653
mov byte [ebp - 0x123], 1
jmp 0x43765a
mov byte [ebp - 0x123], 0
cmp byte [ebp - 0xb7], 0
je 0x437678
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x437678
call fcn.00412090
test al, al
jne 0x437696
cmp dword [esi + 0x37c], 2
jne 0x4376a6
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x4376a6
call fcn.00412090
test al, al
je 0x4376a6
cmp byte [ebp - 0xe4], 0
mov byte [ebp - 0xed], 1
je 0x4376ad
mov byte [ebp - 0xed], 0
mov dl, byte [ebp - 0xb7]
test dl, dl
je 0x4376f0
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x4376f0
call fcn.00412090
test al, al
je 0x4376ea
cmp byte [ebp - 0xe4], 0
jne 0x4376ea
cmp byte [ebp - 0x128], 0
je 0x4376ea
mov byte [ebp - 0x122], 1
jmp 0x4376fb
mov dl, byte [ebp - 0xb7]
mov byte [ebp - 0x122], 0
test dl, dl
je 0x437713
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x437713
call fcn.00412090
test al, al
jne 0x437734
cmp byte [ebp - 0xc8], 0
je 0x43774d
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x43774d
call fcn.00412090
test al, al
je 0x43774d
cmp byte [ebp - 0xe4], 0
jne 0x43774d
cmp byte [ebp - 0x128], 0
mov byte [ebp - 0x101], 1
jne 0x437754
mov byte [ebp - 0x101], 0
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x437769
call fcn.00412090
test al, al
jne 0x43777e
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x437787
call fcn.00412090
test al, al
je 0x437787
mov byte [ebp - 0xc8], 1
jmp 0x43778e
mov byte [ebp - 0xc8], 0
mov edx, 1
xor ecx, ecx
call fcn.0041a630
xorps xmm5, xmm5
comiss xmm0, xmm5
jbe 0x4377b7
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x64]
test ecx, ecx
js 0x4377d0
call fcn.00412090
test al, al
je 0x4377d0
mov edx, 1
lea ecx, [edx + 1]
call fcn.0041a630
comiss xmm0, xmm5
mov byte [ebp - 0x124], 0
jbe 0x4377d7
mov byte [ebp - 0x124], 1
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x4377ec
call fcn.00412090
test al, al
jne 0x437806
mov eax, 1
mov edx, eax
mov ecx, eax
call fcn.0041a630
comiss xmm0, xmm5
mov byte [ebp - 0x121], 0
jbe 0x43780d
mov byte [ebp - 0x121], 1
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x43785e
call fcn.00412090
test al, al
je 0x43785e
cmp byte [ebp - 0xc5], 0
je 0x437832
mov eax, 0x200004
jmp 0x437846
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0xb8], 0
cmovne eax, ecx
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, eax
push ecx
mov ecx, edi
call fcn.00434c70
jmp 0x437fab
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x43788d
call fcn.00412090
test al, al
je 0x43788d
cmp byte [ebp - 0xc5], 0
je 0x437883
mov eax, 0x200005
jmp 0x437846
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x43783c
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x437907
call fcn.00412090
test al, al
je 0x437907
cmp byte [ebp - 0xd4], 0
je 0x437907
cmp byte [esi + 0xfc], 0
je 0x4378e3
mov edx, dword [ebp - 0x11c]
movss xmm0, dword [edx + 0x5c]
subss xmm0, dword [esi + 0x1944]
mov dword [edx + 0x74], 0
mov dword [edx + 0x7c], 0
maxss xmm0, xmm5
movss dword [edx + 0x6c], xmm0
jmp 0x437fbf
movzx eax, byte [ebp - 0xc5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200002]
or eax, dword [ebp - 0xcc]
push eax
call fcn.00434c70
jmp 0x437fab
mov ecx, dword [0x4456c4]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
js 0x43798e
call fcn.00412090
test al, al
je 0x43798e
cmp byte [ebp - 0xd4], 0
je 0x43798e
cmp byte [esi + 0xfc], 0
je 0x43796a
mov ecx, dword [ebp - 0x11c]
movss xmm0, dword [esi + 0x1944]
mov eax, dword [0x4456c4]
addss xmm0, dword [ecx + 0x5c]
mov eax, dword [eax + 0x1ba8]
minss xmm0, dword [eax + 0x64]
mov dword [ecx + 0x74], 0
mov dword [ecx + 0x7c], 0
movss dword [ecx + 0x6c], xmm0
jmp 0x437fbf
movzx eax, byte [ebp - 0xc5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200003]
or eax, dword [ebp - 0xcc]
push eax
call fcn.00434c70
jmp 0x437fab
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x48]
test ecx, ecx
js 0x437a00
call fcn.00412090
test al, al
je 0x437a00
cmp byte [ebp - 0xd4], 0
je 0x437a00
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x20000e
push ecx
mov ecx, edi
call fcn.00434c70
movd xmm0, dword [ebp - 0xc4]
movss xmm1, dword [ebp - 0x15c]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
subss xmm1, xmm0
movss dword [ebp - 0x15c], xmm1
jmp 0x437fbc
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
js 0x437a6e
call fcn.00412090
test al, al
je 0x437a6e
cmp byte [ebp - 0xd4], 0
je 0x437a6e
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x20000f
push ecx
mov ecx, edi
call fcn.00434c70
movd xmm0, dword [ebp - 0xc4]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
addss xmm0, dword [ebp - 0x15c]
movss dword [ebp - 0x15c], xmm0
jmp 0x437fbc
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x437ab0
call fcn.00412090
test al, al
je 0x437ab0
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200004
or eax, 0x200006
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00434c70
jmp 0x437fab
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x437af2
call fcn.00412090
test al, al
je 0x437af2
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200005
or eax, 0x200007
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00434c70
jmp 0x437fab
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x437b2c
call fcn.00412090
test al, al
je 0x437b2c
cmp byte [ebp - 0xe4], 0
jne 0x437b2c
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x200008
push ecx
mov ecx, edi
call fcn.00434c70
jmp 0x437fab
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x437bcd
call fcn.00412090
test al, al
je 0x437bcd
cmp byte [ebp - 0xe4], 0
jne 0x437bcd
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x437bb1
cmp byte [ebp - 0xb8], 0
je 0x437b6a
push 0x60000c
jmp 0x437b93
cmp byte [ebp - 0x12d], 0
je 0x437bb1
cmp byte [esi + 0xff], 0
je 0x437bb1
cmp byte [esi + 0xfe], 0
jne 0x437bb1
cmp byte [esi + 0xfc], 0
jne 0x437bb1
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00434c70
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x200009
push ecx
mov ecx, edi
call fcn.00434c70
jmp 0x437fab
cmp byte [ebp - 0xc8], 0
je 0x437c44
mov edx, dword [ebx + 0x14]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xd4], 0
je 0x437c4d
mov cl, byte [esi + 0xfc]
test al, al
je 0x437bf9
test cl, cl
je 0x437c4d
jmp 0x437bfd
test cl, cl
jne 0x437c4d
cmp byte [ebp - 0xe4], 0
jne 0x437fbf
push 2
sub esp, 8
mov dword [ebp - 0xc4], 0xa
lea ecx, [ebp - 0xc4]
call fcn.00435db0
add esp, 0xc
test al, al
je 0x437fbf
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00434c70
jmp 0x437fab
cmp byte [ebp - 0x124], 0
je 0x437c60
mov byte [ebp - 0xcd], 1
mov byte [ebp - 0xb6], 1
jmp 0x437fbf
cmp byte [ebp - 0x121], 0
je 0x437c76
mov cl, 1
mov byte [ebp - 0xcd], cl
jmp 0x437fc5
mov al, byte [ebp - 0x122]
test al, al
jne 0x437f8c
cmp byte [ebp - 0x101], al
jne 0x437f8c
cmp byte [ebp - 0xb7], al
je 0x437ccd
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x437ccd
call fcn.00412090
test al, al
je 0x437ccd
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
jmp 0x437fbf
mov al, byte [ebp - 0xc6]
test al, al
jne 0x437e7d
cmp byte [ebp - 0x123], al
jne 0x437e7d
cmp byte [ebp - 0xed], al
je 0x437fbf
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0xd0]
test ecx, ecx
je 0x437d18
push dword [eax + 0xd8]
call ecx
mov esi, eax
add esp, 4
test esi, esi
jne 0x437d1d
jmp 0x437fbf
mov esi, 0x44273e
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437d22
mov eax, dword [0x4456c4]
sub ecx, edx
test eax, eax
je 0x437d3a
inc dword [eax + 0x36c]
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
add esp, 4
mov dword [ebp - 0xfc], eax
cmp byte [esi], 0
mov dword [ebp - 0xc4], 0
je 0x437dc3
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0xc0]
call fcn.0040c870
add esp, 4
add esi, eax
cmp dword [ebp - 0xc0], 0
je 0x437db1
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xc0]
push 5
sub esp, 8
call fcn.00435db0
add esp, 0xc
test al, al
je 0x437dac
mov ecx, dword [ebp - 0xfc]
mov ax, word [ebp - 0xc0]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x437d63
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xc4], edi
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xc4]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x437e5c
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebp - 0xc4], edx
mov edx, dword [edi + 0x40]
cmp edx, dword [edi + 0x44]
je 0x437e0d
cmp edx, ecx
jle 0x437df4
mov dword [edi + 0x40], ecx
mov edx, ecx
cmp dword [edi + 0x44], ecx
jle 0x437e02
mov dword [edi + 0x44], ecx
mov dword [ebp - 0xc4], ecx
cmp edx, dword [ebp - 0xc4]
jne 0x437e0d
mov dword [edi + 0x3c], edx
cmp dword [edi + 0x3c], ecx
jle 0x437e15
mov dword [edi + 0x3c], ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00434be0
mov edx, dword [edi + 0x3c]
mov ecx, edi
push esi
push dword [ebp - 0xfc]
call fcn.00434740
add esp, 8
test al, al
je 0x437e4f
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push esi
push 0
call fcn.00435ac0
add esp, 8
mov byte [edi + 0x52], 0
add dword [edi + 0x3c], esi
mov eax, dword [ebp - 0xfc]
mov byte [edi + 0xe6c], 1
test eax, eax
je 0x437e70
mov ecx, dword [0x4456c4]
test ecx, ecx
je 0x437e70
dec dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
jmp 0x437fbc
cmp dword [esi + 0xd4], 0
je 0x437f4d
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x437e9e
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x437ea3
mov ecx, dword [edi + 4]
xor esi, esi
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x128], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.0040cb00
mov ecx, dword [0x4456c4]
inc eax
mov dword [ebp - 0xbc], eax
test ecx, ecx
je 0x437ed4
inc dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xec], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x128]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.0040ca90
mov eax, dword [0x4456c4]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x437f2e
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x4456c4]
add esp, 8
test esi, esi
je 0x437f3c
test eax, eax
je 0x437f3c
dec dword [eax + 0x36c]
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
call eax
mov al, byte [ebp - 0xc6]
add esp, 4
test al, al
je 0x437fbf
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x437f6d
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x437fbf
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00434be0
mov byte [edi + 0x52], 0
jmp 0x437fbf
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.00434c70
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
add esp, 4
mov cl, byte [ebp - 0xb5]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x437fda
cmp byte [ebp - 0xc7], 0
je 0x437fda
mov al, 1
jmp 0x437fdc
xor al, al
or byte [ebp - 0x108], al
mov esi, dword [ebp - 0xe8]
xor eax, eax
mov dword [ebp - 0x110], 0
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], eax
jne 0x4387fe
test cl, cl
je 0x4382b5
cmp byte [ebp - 0xe4], 0
jne 0x43829d
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebp - 0xdc]
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x438050
test dl, dl
je 0x43804c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x438050
add eax, 2
add ecx, 2
test dl, dl
jne 0x438030
xor eax, eax
jmp 0x438055
sbb eax, eax
or eax, 1
test eax, eax
je 0x43829d
mov eax, dword [edi + 0x24]
xor edx, edx
mov ecx, dword [edi + 0x2c]
dec eax
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0x134], edx
mov dword [ebp - 4], edx
test eax, eax
jle 0x4381e2
lea edi, [eax + ecx]
mov esi, ecx
xor eax, eax
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x4380a8
cmp esi, edi
jae 0x4380d2
cmp byte [esi], 0
je 0x4380d2
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.0040c870
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x4380d2
inc eax
jmp 0x43809a
mov edi, dword [ebp - 0x10c]
lea edx, [eax + 1]
mov esi, dword [ebp - 0xe8]
mov dword [ebp - 0xc4], edx
test edx, edx
jle 0x438135
mov ecx, 8
mov eax, edx
cmp edx, ecx
cmovl eax, ecx
mov dword [ebp - 0xbc], eax
test eax, eax
jle 0x438135
mov ecx, dword [0x4456c4]
test ecx, ecx
je 0x438111
inc dword [ecx + 0x36c]
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [ebp - 0xbc]
add esp, 4
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x138], ecx
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x110]
add ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0xc0], eax
lea ecx, [eax - 2]
lea ecx, [ecx + edx*2]
mov dword [ebp - 0x128], ecx
cmp eax, ecx
jae 0x4381d7
mov esi, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xec]
test edi, edi
je 0x438189
cmp esi, edi
jae 0x4381c5
cmp byte [esi], 0
je 0x4381c5
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.0040c870
mov ecx, dword [ebp - 0xbc]
add esi, eax
mov eax, dword [ebp - 0xc0]
add esp, 4
test ecx, ecx
je 0x4381c5
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xc0], eax
cmp eax, dword [ebp - 0x128]
jb 0x438181
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xc4]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0xcc]
lea ecx, [edx - 1]
xor edx, edx
test eax, eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xbc], eax
cmovle ecx, edx
push ecx
mov dword [ebp - 0xc4], ecx
lea ecx, [edi + 0x5c]
push eax
call fcn.00435ac0
add esp, 8
mov dword [ebp - 0xec], eax
test eax, eax
je 0x438236
mov edx, dword [ebp - 0xbc]
xor ecx, ecx
test edx, edx
jle 0x438236
mov esi, eax
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, edx
jl 0x438220
mov esi, dword [ebp - 0xe8]
push dword [edi + 4]
xor edx, edx
mov ecx, edi
call fcn.004346e0
mov eax, dword [ebp - 0xc4]
add esp, 4
test eax, eax
jle 0x438273
push eax
push dword [ebp - 0x134]
xor edx, edx
mov ecx, edi
call fcn.00434740
add esp, 8
test al, al
je 0x438273
mov eax, dword [ebp - 0xc4]
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov ecx, dword [ebp - 0x134]
test ecx, ecx
je 0x438296
mov eax, dword [0x4456c4]
test eax, eax
je 0x43828c
dec dword [eax + 0x36c]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xb6], 0
mov eax, dword [ebx + 0x14]
je 0x4386f2
test al, 0x20
je 0x4386f2
cmp byte [ebp - 0xe4], 0
jne 0x438322
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0xc4], edx
cmp edx, eax
jle 0x438310
test eax, eax
je 0x4382f2
cdq
sub eax, edx
mov edx, dword [ebp - 0xc4]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1c]
jmp 0x4382f7
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x18]
push eax
call fcn.0041e950
mov edx, dword [ebp - 0xc4]
lea ecx, [edi + 0x18]
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.0040ca90
add esp, 8
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x4386a3
test dl, 0x40
je 0x43835a
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x43835a
call fcn.00412090
mov edx, dword [ebx + 0x14]
test al, al
je 0x43835a
mov eax, 0x40
xor ecx, ecx
jmp 0x4383d2
test dl, dl
jns 0x4383a2
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x438380
call fcn.00412090
mov edx, dword [ebx + 0x14]
test al, al
je 0x438380
mov eax, 0x80
lea ecx, [eax - 0x7d]
jmp 0x4383d2
mov eax, dword [0x4456c4]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x4383a2
call fcn.00412090
mov edx, dword [ebx + 0x14]
test al, al
je 0x4383a2
mov eax, 0x80
lea ecx, [eax - 0x7c]
jmp 0x4383d2
test edx, 0x80000
je 0x4383ba
cmp byte [edi + 0xe6e], 0
je 0x4383ba
mov eax, 0x80000
jmp 0x4383cd
test edx, 0x100
mov ecx, pe_nt_image_headers32
mov eax, 0
cmovne eax, ecx
mov ecx, 0x16
test eax, eax
je 0x4386a3
xor esi, esi
mov dword [ebp - 0x84], eax
cmp byte [ebp - 0xe4], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x78], 0
mov word [ebp - 0x63], si
mov byte [ebp - 0x61], 0
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], esi
jne 0x438409
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x70], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x68], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x74], ecx
mov ecx, esi
mov byte [ebp - 0x64], 0
lea edx, [esi + eax*2]
call fcn.0040cb00
mov ecx, dword [ebp - 0x10c]
mov edi, eax
mov dword [ebp - 0x60], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.0040cb00
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.0040cb00
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x84]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0x64]
add esp, 4
mov edx, dword [ebp - 0x60]
mov byte [ebp - 0xc6], al
cmp edx, edi
jne 0x43848e
test al, al
je 0x4384e9
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x4384a4
cmp esi, edi
jae 0x4384ce
cmp byte [esi], 0
je 0x4384ce
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.0040c870
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x4384ce
inc eax
jmp 0x438496
mov edi, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x60]
mov dword [edi + 0x3c], eax
mov al, byte [ebp - 0xc6]
mov byte [edi + 0xe6c], 1
jmp 0x4384ef
mov edi, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0xec]
jne 0x4384fe
test al, al
je 0x438553
cmp ecx, edx
jne 0x438507
mov eax, dword [edi + 0x3c]
jmp 0x438550
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x43851d
cmp esi, edi
jae 0x438547
cmp byte [esi], 0
je 0x438547
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.0040c870
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x438547
inc eax
jmp 0x43850f
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x10c]
mov dword [edi + 0x40], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0xc4]
jne 0x43856b
cmp byte [ebp - 0xc6], 0
je 0x43869d
cmp eax, ecx
jne 0x438574
mov eax, dword [edi + 0x40]
jmp 0x4385ba
mov esi, dword [ebp - 0x70]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x43858a
cmp esi, edi
jae 0x4385b4
cmp byte [esi], 0
je 0x4385b4
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.0040c870
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x4385b4
inc eax
jmp 0x43857c
mov edi, dword [ebp - 0x10c]
cmp byte [ebp - 0xc6], 0
mov dword [edi + 0x44], eax
je 0x43869d
mov esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xf8]
cmp esi, ecx
jle 0x438619
cmp byte [ebp - 0x118], 0
je 0x438619
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x438616
test eax, eax
je 0x4385ff
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x438607
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041e9c0
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0x70]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0xbc], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0xc4], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0xec], eax
cmp ecx, eax
jae 0x438681
mov edi, dword [ebp - 0xbc]
cmp byte [edi], 0
je 0x438675
push 0
mov edx, edi
lea ecx, [ebp - 0xbc]
call fcn.0040c870
add edi, eax
add esp, 4
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x438675
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0xec]
jb 0x438644
mov edi, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0xc4]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x6c]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
mov esi, dword [ebp - 0xe8]
cmp byte [ebp - 0xe4], 0
jne 0x4386ef
mov ecx, dword [ebp - 0xdc]
mov eax, dword [edi + 0x20]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4386d5
test dl, dl
je 0x4386d1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4386d5
add eax, 2
add ecx, 2
test dl, dl
jne 0x4386b5
xor eax, eax
jmp 0x4386da
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x4386f2
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0x110], ecx
mov ecx, dword [edi + 8]
jmp 0x4386f8
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x110]
mov dword [edi + 0xe70], 0
test edx, edx
je 0x4387f8
cmp byte [ebp - 0x118], 0
je 0x4387b1
mov dword [ebp - 0xb0], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xa0], eax
lea eax, [ecx + 1]
mov dword [ebp - 0x9c], ecx
mov ecx, 0x20
cmp eax, ecx
movlpd qword [ebp - 0xa8], xmm0
movlpd qword [ebp - 0x94], xmm0
cmovle eax, ecx
movlpd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
mov dword [ebp - 0xb4], 0x40000
mov dword [ebp - 0xac], 0
call eax
mov ecx, dword [ebp - 0x98]
add esp, 4
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x114], ecx
dec ecx
cmp dword [ebp - 0x9c], ecx
mov dword [ebp - 0xdc], eax
cmovl ecx, dword [ebp - 0x9c]
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x114]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x114], ecx
cmp ecx, 1
jb 0x4387f1
jbe 0x4387e6
lea eax, [ecx - 1]
push eax
push edx
push dword [ebp - 0xdc]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebp - 0x114]
add esp, 0xc
mov eax, dword [ebp - 0xdc]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0xdd], 1
mov eax, dword [ebp - 0xd8]
cmp byte [ebp - 0xcd], 0
je 0x438814
cmp dword [esi + 0x1be0], eax
jne 0x438814
call fcn.0040e030
mov edx, dword [ebp - 0xd4]
test dl, dl
jne 0x4388e9
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
push 1
call fcn.0040d2b0
movss xmm1, dword [0x442cb8]
add esp, 4
mov ecx, 7
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call fcn.0040cc30
movss xmm2, dword [esi + 0x156c]
mov dl, 1
mov ecx, eax
call fcn.0040d190
movss xmm4, dword [ebp - 0x54]
add esp, 0x10
movss xmm2, dword [ebp - 0x50]
movaps xmm0, xmm4
addss xmm0, dword [esi + 0x1564]
mov edx, dword [ebp - 0xd4]
movaps xmm3, xmm4
addss xmm3, dword [ebp - 0x154]
movaps xmm1, xmm2
movss dword [ebp - 0x44], xmm4
addss xmm1, dword [ebp - 0x144]
movss dword [ebp - 0x138], xmm0
movaps xmm0, xmm2
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0xbc], xmm3
movss dword [ebp - 0x3c], xmm3
movss dword [ebp - 0xc0], xmm3
movss xmm3, dword [ebp - 0x154]
movss dword [ebp - 0x40], xmm2
movss dword [ebp - 0x100], xmm1
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x134], xmm0
jmp 0x43895d
movss xmm1, dword [ebp - 0x54]
movss xmm3, dword [ebp - 0x154]
movaps xmm2, xmm1
movss xmm0, dword [ebp - 0x50]
addss xmm2, xmm3
mov ecx, dword [ebp - 0x11c]
movss dword [ebp - 0x44], xmm1
movss dword [ebp - 0x40], xmm0
mov eax, dword [ecx + 0xd0]
movaps xmm1, xmm2
mov ecx, dword [ecx + 0xd4]
movss dword [ebp - 0xbc], xmm1
movss dword [ebp - 0x3c], xmm1
movaps xmm1, xmm0
addss xmm1, dword [ebp - 0x144]
movss dword [ebp - 0xc0], xmm2
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
movaps xmm0, xmm1
movss dword [ebp - 0x100], xmm0
movss dword [ebp - 0x38], xmm0
cmp byte [ebp - 0xee], 0
lea eax, [ebp - 0x138]
movss xmm0, dword [eax]
xorps xmm5, xmm5
movss dword [ebp - 0x120], xmm0
xorps xmm6, xmm6
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0xf4], eax
movss dword [ebp - 0xf8], xmm1
movss dword [ebp - 0x128], xmm0
movss dword [ebp - 0xc4], xmm5
je 0x4389b9
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xdc], ecx
jmp 0x4389bf
mov ecx, dword [ebp - 0xdc]
cmp byte [ebp - 0xc7], 0
jne 0x438bf9
cmp byte [ebp - 0x108], 0
jne 0x438bf9
test dl, dl
je 0x438a3f
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
mov dl, byte [eax]
lea edi, [eax + 1]
test dl, dl
je 0x438a02
nop
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x4389f0
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0xcc], edi
cmp al, 0xa
je 0x438a15
cmp al, 0xd
je 0x438a15
inc ecx
mov edx, dword [ebp - 0xcc]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x1944]
movss dword [ebp - 0xc4], xmm0
movaps xmm0, xmm3
movss dword [ebp - 0x128], xmm0
jmp 0x438a83
mov eax, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], eax
jne 0x438a54
mov edx, dword [edi + 8]
add edx, ecx
jmp 0x438a6e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438a57
sub ecx, edx
mov edx, dword [ebp - 0xdc]
add edx, ecx
mov ecx, dword [ebp - 0xdc]
mov eax, edx
mov dword [ebp - 0xcc], edx
sub eax, ecx
cmp eax, 0x200000
jge 0x4397b2
movss xmm1, dword [0x442cb8]
xor ecx, ecx
call fcn.0040cc30
cmp byte [ebp - 0xd4], 0
mov ecx, edx
movss xmm2, dword [esi + 0x1944]
lea edx, [ebp - 0x44]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xbc], 0
cmovne edx, dword [ebp - 0xbc]
test dword [ebp - 0xc0], 0xff000000
mov edi, dword [eax + 0x23c]
mov eax, dword [esi + 0x1940]
mov dword [ebp - 0xf8], eax
je 0x4397b2
cmp dword [ebp - 0xcc], 0
jne 0x438b19
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + 1]
mov dword [ebp - 0xbc], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438b00
sub ecx, dword [ebp - 0xbc]
add ecx, dword [ebp - 0xdc]
mov eax, dword [esi + 0x1940]
cmp dword [ebp - 0xdc], ecx
je 0x4397b2
test eax, eax
jne 0x438b35
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xf8], eax
ucomiss xmm2, dword [0x442c40]
lahf
test ah, 0x44
jp 0x438b4a
mov eax, dword [edi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [edi + 0x60]
movups xmmword [ebp - 0x150], xmm0
test edx, edx
je 0x438bb8
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x150]
comiss xmm0, xmm1
jae 0x438b72
movss dword [ebp - 0x150], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x14c]
comiss xmm0, xmm1
jae 0x438b8c
movss dword [ebp - 0x14c], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x148]
ja 0x438ba2
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x144]
ja 0x438bb8
movss dword [ebp - 0x144], xmm0
mov eax, dword [ebp - 0xf4]
test edx, edx
push dword [eax + 4]
push dword [eax]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x150]
push ecx
push dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xf8]
push eax
push dword [ebp - 0xc0]
push edi
call fcn.0042d360
jmp 0x4397b2
mov eax, dword [edi + 8]
xor edx, edx
add eax, ecx
movss dword [ebp - 0xec], xmm6
xorps xmm7, xmm7
mov ecx, dword [edi + 0x14]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x118], 0xfffffc18
mov dword [ebp - 0x110], 0xfffffc18
cmp byte [ebp - 0xc7], dl
je 0x438c65
mov eax, dword [edi + 0x3c]
mov edx, 1
mov dword [ebp - 0x118], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x114], eax
cmp byte [ebp - 0x108], 0
je 0x438c98
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0xd8]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x110], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xfc], eax
mov esi, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xd4]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
test si, si
mov esi, dword [ebp - 0xe8]
je 0x438d3d
mov esi, dword [ebp - 0xd8]
mov edi, dword [ebp - 0x118]
movzx eax, word [esi]
xor esi, esi
nop
cmp ax, 0xa
jne 0x438d0b
inc esi
cmp edi, 0xffffffff
jne 0x438cef
cmp ecx, dword [ebp - 0x114]
jb 0x438cef
dec edx
mov dword [ebp - 0x118], esi
test edx, edx
jle 0x438d25
cmp dword [ebp - 0x110], 0xffffffff
jne 0x438d0b
cmp ecx, dword [ebp - 0xfc]
jb 0x438d0b
dec edx
mov dword [ebp - 0x110], esi
test edx, edx
jle 0x438d25
movzx eax, word [ecx + 2]
add ecx, 2
mov edi, eax
mov dword [ebp - 0xf4], edi
mov edi, dword [ebp - 0x118]
test ax, ax
jne 0x438cd0
mov edi, dword [ebp - 0x10c]
mov dword [ebp - 0xf4], esi
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x110]
inc eax
cmp dword [ebp - 0x118], 0xffffffff
mov edx, eax
mov dword [ebp - 0xf4], eax
cmovne edx, dword [ebp - 0x118]
cmp ecx, 0xffffffff
mov dword [ebp - 0x12c], edx
mov edx, dword [ebp - 0xd8]
cmove ecx, eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x110], ecx
mov ecx, eax
cmp eax, edx
jbe 0x438d8e
nop
cmp word [ecx - 2], 0xa
je 0x438d8e
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x438d80
movaps xmm1, xmm6
mov eax, dword [0x4456c4]
movaps xmm3, xmm6
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x114]
jae 0x438e08
mov edi, dword [ebp - 0x114]
mov esi, edx
nop dword [eax]
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x438dd6
maxss xmm1, xmm3
movaps xmm3, xmm6
jmp 0x438df8
cmp edx, 0xd
je 0x438df8
mov edx, eax
cmp edx, dword [esi]
jge 0x438deb
mov eax, dword [esi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x438df0
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
cmp ecx, edi
jb 0x438dc0
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
cmp dword [ebp - 0x110], 0
maxss xmm3, xmm1
movd xmm4, dword [ebp - 0x12c]
movss xmm0, dword [esi + 0x1944]
cvtdq2ps xmm4, xmm4
movss dword [ebp - 0x118], xmm3
mulss xmm4, xmm0
movss dword [ebp - 0x134], xmm4
jl 0x438f03
mov eax, dword [ebp - 0xfc]
mov ecx, eax
mov edx, dword [ebp - 0xd8]
cmp eax, edx
jbe 0x438e60
cmp word [ecx - 2], 0xa
je 0x438e60
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x438e52
movaps xmm1, xmm6
mov eax, dword [0x4456c4]
movaps xmm7, xmm6
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0xfc]
jae 0x438ed8
mov esi, dword [ebp - 0xfc]
mov edi, edx
nop
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x438ea6
maxss xmm1, xmm7
movaps xmm7, xmm6
jmp 0x438ec8
cmp edx, 0xd
je 0x438ec8
mov edx, eax
cmp edx, dword [edi]
jge 0x438ebb
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x438ec0
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm7, xmm0
cmp ecx, esi
jb 0x438e90
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
movd xmm3, dword [ebp - 0x110]
maxss xmm7, xmm1
movss xmm0, dword [esi + 0x1944]
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm0
movss dword [ebp - 0xec], xmm3
movss xmm3, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xd4]
movss xmm1, dword [ebp - 0x154]
test cl, cl
je 0x438f37
movd xmm5, dword [ebp - 0xf4]
cvtdq2ps xmm5, xmm5
mulss xmm5, xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x128], xmm0
movss dword [ebp - 0xc4], xmm5
cmp byte [ebp - 0xc7], 0
je 0x43905e
cmp byte [edi + 0xe6c], 0
je 0x43905e
test dword [ebx + 0x14], 0x1000
jne 0x438fb2
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm1
comiss xmm2, xmm3
subss xmm1, dword [esi + 0x1564]
mulss xmm0, dword [0x442c6c]
movss dword [ebp - 0x154], xmm1
movaps xmm1, xmm3
jbe 0x438f8f
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x438fa0
subss xmm1, dword [ebp - 0x154]
comiss xmm1, xmm2
jb 0x438fb9
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x438fb9
mov dword [edi + 0x38], 0
test cl, cl
je 0x43904a
movss xmm2, dword [ebp - 0x15c]
movaps xmm0, xmm4
subss xmm0, dword [esi + 0x1944]
movss xmm3, dword [ebp - 0x144]
comiss xmm2, xmm0
jbe 0x438fea
movaps xmm2, xmm6
maxss xmm2, xmm0
jmp 0x439006
movaps xmm0, xmm4
subss xmm0, xmm3
comiss xmm0, xmm2
jb 0x439006
movss xmm2, dword [esi + 0x1568]
addss xmm2, xmm2
addss xmm2, xmm0
comiss xmm6, xmm2
movss xmm1, dword [esi + 0x1568]
jbe 0x439018
movaps xmm1, xmm6
jmp 0x43902c
addss xmm1, xmm1
addss xmm1, xmm5
subss xmm1, xmm3
maxss xmm1, xmm6
minss xmm1, xmm2
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x5c]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
movss dword [eax + 0x5c], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x120], xmm0
cmp byte [ebp - 0x108], 0
movss xmm5, dword [edi + 0x38]
movss dword [ebp - 0xfc], xmm5
je 0x43936d
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0xd8]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xc7], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0xd8]
lea edx, [eax + edx*2]
mov dword [ebp - 0x108], edx
je 0x4390b3
movss xmm1, dword [0x442cb8]
jmp 0x4390bb
movss xmm1, dword [0x442c84]
mov ecx, 0x2f
call fcn.0040cc30
cmp byte [ebp - 0xd4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x12c], eax
je 0x4390df
xorps xmm5, xmm5
xorps xmm6, xmm6
jmp 0x4390ef
movss xmm5, dword [0x442d68]
movss xmm6, dword [0x442ce8]
movss xmm3, dword [ebp - 0x30]
movss xmm4, dword [ebp - 0x120]
movss dword [ebp - 0x114], xmm6
addss xmm7, xmm4
movss dword [ebp - 0xf4], xmm5
addss xmm3, dword [ebp - 0xec]
subss xmm7, dword [ebp - 0xfc]
subss xmm3, xmm0
movss dword [ebp - 0xec], xmm3
cmp esi, edx
jae 0x4393c0
movss xmm4, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xe8]
mov edi, dword [ebp - 0x12c]
nop dword [eax + eax]
movaps xmm0, xmm4
addss xmm0, dword [ecx + 0x1944]
comiss xmm3, xmm0
ja 0x439356
movss xmm0, dword [ebp - 0x50]
comiss xmm0, xmm3
jbe 0x43918f
cmp esi, edx
jae 0x43931e
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x43931e
cmp esi, edx
jb 0x439176
jmp 0x43931e
xorps xmm0, xmm0
mov eax, dword [0x4456c4]
xorps xmm4, xmm4
xorps xmm1, xmm1
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp esi, dword [ebp - 0x108]
jae 0x439202
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x4391ef
cmp ecx, 0xd
je 0x4391e5
cmp ecx, dword [edx]
jge 0x4391d8
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x4391dd
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, dword [ebp - 0x108]
jb 0x4391b8
jmp 0x4391f9
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
mov ecx, dword [ebp - 0xe8]
xorps xmm0, xmm0
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x43923b
mov eax, dword [ecx + 0x1940]
cmp dword [eax], 0x20
jle 0x439223
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x439228
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x442c80]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm4, dword [ebp - 0x100]
addss xmm1, xmm7
addss xmm7, dword [0x442c40]
movaps xmm2, xmm5
movaps xmm0, xmm6
subss xmm2, dword [ecx + 0x1944]
movss xmm6, dword [ebp - 0xbc]
addss xmm0, xmm3
minss xmm1, xmm6
maxss xmm7, dword [ebp - 0x54]
addss xmm2, xmm3
minss xmm0, xmm4
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x24], xmm7
maxss xmm2, dword [ebp - 0x50]
comiss xmm0, dword [ebp - 0x50]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x18], xmm0
jbe 0x439318
comiss xmm4, xmm2
jbe 0x439318
comiss xmm1, dword [ebp - 0x54]
jbe 0x439318
comiss xmm6, xmm7
jbe 0x439318
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x1c]
push edi
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x23c]
call fcn.004294c0
movss xmm0, dword [ebp - 0xc0]
movss xmm3, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xe8]
movss dword [ebp - 0xc0], xmm0
movss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x120], xmm3
movss xmm3, dword [ebp - 0xec]
movss dword [ebp - 0xf8], xmm0
mov edx, dword [ebp - 0x108]
movss xmm7, dword [ebp - 0x120]
movss xmm5, dword [ebp - 0xf4]
movss xmm6, dword [ebp - 0x114]
addss xmm3, dword [ecx + 0x1944]
subss xmm7, dword [ebp - 0xfc]
movss dword [ebp - 0xec], xmm3
cmp esi, edx
jb 0x439150
movss xmm5, dword [ebp - 0xfc]
xorps xmm6, xmm6
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
movss xmm4, dword [ebp - 0x120]
cmp byte [ebp - 0xd4], 0
mov edx, dword [ebp - 0xcc]
jne 0x439397
mov eax, edx
sub eax, dword [ebp - 0xdc]
cmp eax, 0x200000
jge 0x4395f5
mov eax, dword [0x4456c4]
movups xmm2, xmmword [eax + 0x15f0]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1528]
movups xmmword [ebp - 0x24], xmm2
jbe 0x4393d3
movaps xmm0, xmm6
jmp 0x4393df
movss xmm5, dword [ebp - 0xfc]
xorps xmm6, xmm6
mov esi, dword [ebp - 0xe8]
jmp 0x439375
movss xmm0, dword [0x442cb8]
minss xmm0, xmm2
movss xmm2, dword [0x442d38]
movss xmm7, dword [0x442c80]
movss xmm3, dword [ebp - 0x20]
comiss xmm6, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x43940a
movaps xmm0, xmm6
jmp 0x439416
movss xmm0, dword [0x442cb8]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x1c]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x439436
movaps xmm0, xmm6
jmp 0x439442
movss xmm0, dword [0x442cb8]
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x43945d
movaps xmm0, xmm6
jmp 0x439469
movss xmm0, dword [0x442cb8]
minss xmm0, xmm1
mulss xmm0, xmm2
subss xmm4, xmm5
mov dword [ebp - 0x100], edx
mov edx, dword [esi + 0x1940]
movss xmm2, dword [esi + 0x1944]
addss xmm0, xmm7
mov dword [ebp - 0xbc], edx
lea edx, [ebp - 0x44]
mov dword [ebp - 0x12c], 0
movss dword [ebp - 0x148], xmm4
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
shl eax, 0x18
subss xmm0, xmm6
or eax, ecx
mov ecx, dword [ebp - 0x11c]
cmp byte [ebp - 0xd4], 0
mov dword [ebp - 0xf4], eax
cmovne edx, dword [ebp - 0x12c]
mov ecx, dword [ecx + 0x23c]
mov dword [ebp - 0xec], ecx
movss dword [ebp - 0x144], xmm0
test eax, 0xff000000
je 0x4395f5
cmp dword [ebp - 0xcc], 0
jne 0x43952a
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + 1]
mov dword [ebp - 0x12c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439507
sub ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0xdc]
add eax, ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x100], eax
jmp 0x439530
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0xdc], eax
je 0x4395f5
cmp dword [esi + 0x1940], 0
jne 0x439551
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xbc], eax
ucomiss xmm2, xmm6
lahf
test ah, 0x44
jp 0x439562
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x24], xmm0
test edx, edx
je 0x4395b5
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x439581
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x20]
comiss xmm0, xmm1
jae 0x439595
movss dword [ebp - 0x20], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x1c]
ja 0x4395a5
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x18]
ja 0x4395b5
movss dword [ebp - 0x18], xmm0
push dword [ebp - 0x144]
test edx, edx
mov edx, dword [ebp - 0x100]
push dword [ebp - 0x148]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x24]
push edx
push dword [ebp - 0xdc]
push eax
push dword [ebp - 0xf4]
push ecx
mov ecx, dword [ebp - 0xbc]
call fcn.0042d360
cmp byte [ebp - 0xc7], 0
je 0x4397b2
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0xb2], 0
je 0x439667
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x439667
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x148], xmm0
fld qword [ebp - 0x148]
fld qword [0x442ce0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x442ca4]
fstp qword [ebp - 0x148]
movsd xmm1, qword [ebp - 0x148]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x439667
xor cl, cl
jmp 0x439669
mov cl, 1
movss xmm0, dword [ebp - 0x118]
movss xmm6, dword [0x442cb8]
addss xmm0, dword [ebp - 0x34]
subss xmm0, dword [ebp - 0xfc]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x134]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x442c40]
movss dword [ebp - 0x12c], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x24], xmm1
addss xmm4, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0x1c], xmm4
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [ebp - 0x134], xmm2
movaps xmm0, xmm2
movaps xmm3, xmm2
subss xmm0, dword [esi + 0x1944]
subss xmm3, dword [0x442cd0]
addss xmm0, dword [0x442c80]
movss dword [ebp - 0x18], xmm3
movss dword [ebp - 0x20], xmm0
test cl, cl
je 0x43978d
comiss xmm3, dword [ebp - 0x50]
jbe 0x43978d
movss xmm5, dword [ebp - 0xf8]
comiss xmm5, xmm0
jbe 0x43978d
comiss xmm4, dword [ebp - 0x54]
jbe 0x43978d
movss xmm0, dword [ebp - 0xc0]
comiss xmm0, xmm1
jbe 0x43978d
sub esp, 8
movss dword [ebp - 0x148], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x144], xmm3
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.0040cc30
add esp, 4
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x23c]
call fcn.004292c0
movss xmm1, dword [ebp - 0x12c]
movss xmm2, dword [ebp - 0x134]
movss xmm6, dword [0x442cb8]
cmp byte [ebp - 0xe4], 0
jne 0x4397b2
subss xmm2, dword [esi + 0x1944]
subss xmm1, xmm6
movss dword [esi + 0x2f4c], xmm2
movss dword [esi + 0x2f48], xmm1
cmp byte [ebp - 0x160], 0
je 0x4397c0
call fcn.00417780
cmp byte [ebp - 0xd4], 0
je 0x439874
mov ecx, dword [0x4456c4]
movss xmm1, dword [ebp - 0xc4]
addss xmm1, dword [esi + 0x1568]
movss xmm4, dword [ebp - 0x128]
mov eax, dword [ecx + 0x1ba8]
movss dword [ebp - 0x148], xmm4
movss dword [ebp - 0x144], xmm1
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1ba8]
cmp byte [eax + 0x8f], 0
jne 0x43986a
movss xmm0, dword [eax + 0xd4]
lea ecx, [ebp - 0x148]
movss xmm3, dword [eax + 0xd0]
movaps xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x24], xmm3
movss xmm1, dword [0x442d68]
addss xmm4, xmm3
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x1c], xmm4
call fcn.00417c70
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x24]
call fcn.00417da0
add esp, 8
call fcn.00412320
call fcn.00418250
cmp byte [esi + 0x2fa0], 0
je 0x4398b6
cmp byte [ebp - 0x160], 0
jne 0x4398b6
mov eax, dword [0x4456c4]
lea ecx, [ebp - 0x34]
push dword [ebp - 0xcc]
mov edx, dword [ebp - 0xdc]
mov dword [eax + 0x2fb8], 0x442bd4
mov dword [eax + 0x2fbc], 0x442bd0
call fcn.0041cf00
add esp, 4
movss xmm0, dword [ebp - 0x164]
comiss xmm0, dword [0x442c40]
jbe 0x43990f
movss xmm0, dword [ebp - 0x4c]
xor edx, edx
addss xmm0, dword [esi + 0x157c]
mov ecx, dword [ebp - 0x158]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0x144], xmm0
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push 1
call fcn.0040cd90
add esp, 0xc
mov dl, byte [ebp - 0xdd]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x439939
test ecx, 0x8000000
jne 0x439939
mov eax, dword [0x4456c4]
or dword [eax + 0x1c50], 4
mov word [eax + 0x1bf0], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0xb6]
cmovne eax, ecx
jmp 0x4364ea