Function at 0x428260
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xc8
mov eax, dword [0x510140]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x513c00]
push edi
mov edi, dword [ebx + 0x10]
mov dword [ebp - 0xb4], ecx
mov eax, dword [esi + 0x19f8]
mov dword [ebp - 0x84], esi
mov byte [eax + 0x7c], 1
mov eax, dword [esi + 0x19f8]
mov dword [ebp - 0x9c], eax
cmp byte [eax + 0x7f], 0
jne 0x42a188
mov ecx, dword [eax + 0xbc]
xor edx, edx
mov eax, dword [eax + 0xc4]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0xb4]
call fcn.00406000
add esp, 4
mov dword [ebp - 0x54], eax
cmp dword [esi + 0x1a2c], eax
jne 0x4282ee
mov dword [esi + 0x1a30], eax
cmp dword [esi + 0x1a64], eax
jne 0x4282fd
mov byte [esi + 0x1a68], 1
mov eax, dword [ebp - 0xb4]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x428326
nop word [eax + eax]
mov dl, byte [ecx]
test dl, dl
je 0x428326
cmp dl, 0x23
jne 0x428320
cmp byte [ecx + 1], dl
je 0x428326
inc ecx
cmp ecx, 0xffffffff
jb 0x428310
movss xmm0, dword [esi + 0x18c8]
cmp eax, ecx
jne 0x42833f
xorps xmm5, xmm5
movss dword [ebp - 0xb8], xmm5
jmp 0x428395
movss xmm3, dword [0x50576c]
movaps xmm2, xmm0
push ecx
push ecx
push eax
push ecx
mov ecx, dword [esi + 0x18c4]
lea eax, [ebp - 0x98]
mov dword [esp], 0xbf800000
push eax
call fcn.00422920
movss xmm0, dword [ebp - 0x98]
xorps xmm5, xmm5
addss xmm0, dword [0x5056cc]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0xb8], xmm0
movss xmm0, dword [ebp - 0x94]
test byte [esi + 0x1ad0], 1
movss xmm6, dword [esi + 0x154c]
movss xmm7, dword [edi]
movaps xmm3, xmm6
movss xmm2, dword [edi + 4]
addss xmm3, xmm6
mov ecx, dword [esi + 0x19f8]
movss dword [ebp - 0xa4], xmm7
movss dword [ebp - 0x68], xmm2
addss xmm3, xmm0
je 0x4283d7
movss xmm0, dword [esi + 0x1ad4]
jmp 0x4283df
movss xmm0, dword [ecx + 0x1a8]
comiss xmm5, xmm0
jbe 0x428417
mov eax, ecx
cmp dword [eax + 0x190], 0
movss xmm1, dword [eax + 0x244]
je 0x4283ff
movss xmm1, dword [eax + 0x224]
subss xmm1, dword [ecx + 0xc8]
addss xmm1, xmm0
movss xmm0, dword [0x5056d0]
maxss xmm0, xmm1
comiss xmm5, xmm7
cvttss2si eax, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
movd xmm4, eax
cvtdq2ps xmm4, xmm4
ja 0x428432
comiss xmm5, xmm2
jbe 0x428453
cmp dword [ecx + 0x190], 0
movss xmm0, dword [ecx + 0x244]
movss xmm1, dword [ecx + 0x248]
je 0x428453
movss xmm0, dword [ecx + 0x224]
movss xmm2, dword [0x5056fc]
ucomiss xmm7, xmm5
lahf
test ah, 0x44
jp 0x428471
movaps xmm7, xmm4
movss dword [ebp - 0xa4], xmm7
jmp 0x42849a
comiss xmm5, xmm7
jbe 0x42849a
subss xmm0, dword [ecx + 0xc8]
addss xmm7, xmm0
comiss xmm2, xmm7
movss dword [ebp - 0xa4], xmm7
jb 0x42849a
movaps xmm7, xmm2
movss dword [ebp - 0xa4], xmm2
movss xmm0, dword [ebp - 0x68]
ucomiss xmm0, xmm5
lahf
test ah, 0x44
jp 0x4284b2
movaps xmm2, xmm3
movss dword [ebp - 0x68], xmm2
jmp 0x4284de
comiss xmm5, xmm0
jbe 0x4284db
subss xmm1, dword [ecx + 0xcc]
addss xmm0, xmm1
comiss xmm2, xmm0
movss dword [ebp - 0x68], xmm0
jb 0x4284d4
movss dword [ebp - 0x68], xmm2
jmp 0x4284de
movss xmm2, dword [ebp - 0x68]
jmp 0x4284de
movaps xmm2, xmm0
movss xmm0, dword [ebp - 0xb8]
comiss xmm0, xmm5
jbe 0x4284f6
movaps xmm5, xmm0
addss xmm5, dword [esi + 0x1560]
mov eax, dword [ebp - 0x9c]
lea ecx, [ebp - 0x98]
movss xmm3, dword [eax + 0xcc]
movss xmm4, dword [eax + 0xc8]
movaps xmm0, xmm3
addss xmm0, xmm2
movss dword [ebp - 0x40], xmm4
movaps xmm2, xmm7
movss dword [ebp - 0x3c], xmm3
addss xmm2, xmm5
movss dword [ebp - 0x28], xmm4
movaps xmm1, xmm4
movss dword [ebp - 0x24], xmm3
addss xmm1, xmm7
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0x68]
addss xmm2, xmm4
addss xmm0, xmm3
movss dword [ebp - 0x38], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x20], xmm2
subss xmm2, xmm4
movss dword [ebp - 0x1c], xmm0
subss xmm0, xmm3
movss dword [ebp - 0x98], xmm2
movss dword [ebp - 0x94], xmm0
call fcn.00407ce0
mov edi, dword [ebp - 0x54]
lea eax, [ebp - 0x40]
push eax
mov edx, edi
lea ecx, [ebp - 0x28]
call fcn.00407e10
add esp, 4
test al, al
je 0x42a188
mov edx, edi
lea ecx, [ebp - 0x40]
call fcn.004080b0
mov byte [ebp - 0x47], al
test al, al
je 0x4285b3
mov dword [esi + 0x1d84], 1
mov ecx, dword [ebp - 0x54]
lea eax, [esi + 0x1e54]
xor edx, edx
mov edi, eax
cmp dword [eax], ecx
cmovne edi, edx
mov edx, ecx
mov dword [ebp - 0x88], edi
mov edi, dword [ebp - 0x9c]
mov ecx, edi
call fcn.00408310
test al, al
je 0x42860f
cmp dword [esi + 0x1c30], edi
jne 0x42860f
mov ecx, dword [esi + 0x1c38]
cmp ecx, dword [edi + 0x19c]
jne 0x42860f
mov byte [ebp - 0x43], 1
mov byte [ebp - 0x4b], 0
cmp byte [ebp - 0x47], 0
je 0x428621
cmp byte [esi + 0x3d8], 0
je 0x428621
mov dl, 1
jmp 0x428623
mov byte [ebp - 0x43], 0
test al, al
je 0x4285f8
mov byte [ebp - 0x4b], 1
mov byte [ebp - 0x43], 0
jmp 0x4285fc
xor dl, dl
mov ecx, dword [esi + 0x1a2c]
mov edi, dword [ebp - 0x88]
mov byte [ebp - 0x48], dl
cmp ecx, dword [ebp - 0x54]
je 0x428669
mov edi, dword [ebp - 0x54]
cmp dword [esi + 0x1b38], edi
mov edi, dword [ebp - 0x88]
je 0x428662
mov edi, dword [ebp - 0x54]
cmp dword [esi + 0x1b2c], edi
mov edi, dword [ebp - 0x88]
jne 0x428669
cmp dword [esi + 0x1b4c], 3
jne 0x428669
mov ah, 1
mov byte [ebp - 0x50], ah
jmp 0x42866f
mov byte [ebp - 0x50], 0
xor ah, ah
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x46], ah
mov dword [ebp - 0x7c], 1
test al, al
jne 0x428691
test dl, dl
jne 0x428691
test ah, ah
jne 0x428691
mov byte [ebp - 0x41], al
jmp 0x428885
mov al, 1
mov dword [ebp - 0x88], edi
mov byte [ebp - 0x41], al
cmp ecx, dword [ebp - 0x54]
je 0x428885
mov ecx, 0x513e40
mov dword [esi + 0x2cb4], 0xbe99999a
lea edi, [esi + 0x1e54]
mov dword [ebp - 0x88], edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4286c3
mov eax, dword [edi + 0x28]
sub ecx, edx
lea edx, [ecx + 1]
mov dword [ebp - 0x58], edx
cmp edx, eax
jle 0x428704
test eax, eax
je 0x4286ec
cdq
sub eax, edx
mov edx, dword [ebp - 0x58]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x28]
jmp 0x4286f1
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x24]
push eax
call fcn.00415530
mov edx, dword [ebp - 0x58]
push edx
mov dword [edi + 0x24], edx
push 0x513e40
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [edi + 0x10]
add esp, 0xc
cmp eax, 0x41
jge 0x42874d
test eax, eax
je 0x428733
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x42873b
mov ecx, 8
lea edx, [edi + 0xc]
mov eax, 0x41
cmp ecx, eax
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.004155a0
lea eax, [edi + 0x18]
mov dword [edi + 0xc], 0x41
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x42877a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.00415530
lea eax, [edi + 0x18]
mov dword [eax], 0
mov eax, 0x513e40
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov dword [ebp - 0x60], ecx
add ecx, 0x7e
mov byte [edi + 0x30], 0
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x6c], edx
cmp edx, ecx
jae 0x4287e6
mov esi, eax
cmp byte [esi], 0
je 0x4287dd
push 0
mov edx, esi
lea ecx, [ebp - 0x74]
call fcn.00406370
mov edx, dword [ebp - 0x6c]
add esi, eax
mov eax, dword [ebp - 0x74]
add esp, 4
mov dword [ebp - 0x58], esi
test eax, eax
je 0x4287dd
cmp eax, 0xffff
ja 0x4287d3
mov word [edx], ax
add edx, 2
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x60]
add eax, 0x7e
cmp edx, eax
jb 0x4287a0
mov esi, dword [ebp - 0x84]
mov eax, dword [ebp - 0x58]
xor ecx, ecx
sub eax, 0x513e40
mov word [edx], cx
sub edx, dword [ebp - 0x60]
sar edx, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x54]
mov dword [edi + 4], edx
cmp dword [edi], eax
jne 0x428823
cmp dword [edi + 0x3c], edx
mov ecx, edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
cmovl edx, dword [edi + 0x44]
mov dword [edi + 0x44], edx
jmp 0x428866
mov edx, dword [ebp - 0x50]
cmp byte [ebp - 0x43], cl
movzx edx, dl
cmovne edx, dword [ebp - 0x7c]
mov dword [edi], eax
mov dword [edi + 0x38], ecx
mov dword [edi + 0xe52], 0x630000
mov dword [edi + 0xe58], ecx
mov dword [edi + 0xe5c], 0x3e7
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov dword [edi + 0x48], 0x10000
mov dword [edi + 0x50], ecx
mov byte [edi + 0x4c], 1
mov dword [ebp - 0x50], edx
cmp byte [ebp - 0x4b], 0
mov dword [edi + 0x40], ecx
jne 0x42887e
cmp byte [ebp - 0x48], 0
je 0x428882
cmp byte [esi + 0x100], 0
je 0x428882
mov byte [ebp - 0x50], 1
mov al, byte [ebp - 0x41]
mov ecx, dword [ebp - 0x54]
cmp dword [esi + 0x1a2c], ecx
je 0x4288da
test al, al
je 0x4288d2
mov edx, dword [ebp - 0x9c]
call fcn.00407c00
call fcn.00411400
mov ecx, edx
call fcn.0040fc80
or dword [esi + 0x1a40], 3
or dword [esi + 0x1a44], 2
mov eax, dword [esi + 0x1a4c]
or dword [esi + 0x1a48], 0x180
mov ecx, dword [ebp - 0x54]
mov dword [esi + 0x1a4c], eax
cmp dword [esi + 0x1a2c], ecx
jne 0x428910
test edi, edi
jne 0x4288ea
xor edx, edx
xor ecx, ecx
call fcn.00407c00
mov ecx, dword [ebp - 0x54]
cmp dword [esi + 0x1a2c], ecx
jne 0x428910
cmp byte [esi + 0x3d8], 0
je 0x42890c
mov eax, dword [ebp - 0x5c]
cmp byte [ebp - 0x41], 0
movzx eax, al
cmove eax, dword [ebp - 0x7c]
mov dword [ebp - 0x5c], eax
mov dl, 1
jmp 0x428912
xor dl, dl
mov byte [ebp - 0x4a], dl
test edi, edi
je 0x42892f
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x42892f
test dl, dl
je 0x42892f
mov byte [ebp - 0x44], 1
mov byte [ebp - 0x45], 0
jmp 0x42894a
mov byte [ebp - 0x45], 0
mov byte [ebp - 0x44], 0
test dl, dl
jne 0x428946
mov byte [ebp - 0x44], dl
cmp dword [esi + 0x1a2c], ecx
jne 0x428954
test edi, edi
je 0x428954
cmp byte [edi + 0x30], 0
mov byte [ebp - 0x7e], 1
jne 0x428958
mov byte [ebp - 0x7e], 0
cmp dword [esi + 0x1a2c], ecx
jne 0x428c58
mov dword [edi + 0x34], 0x40
mov dword [edi + 0xe68], 0
mov dword [edi + 0xe6c], 0
mov dword [edi + 0xe70], 0
cmp byte [esi + 0xf0], 0
movss xmm2, dword [esi + 0x18c8]
mulss xmm2, dword [0x5056a4]
sete al
cmp byte [ebp - 0x50], 0
mov byte [esi + 0x1a39], al
mov dword [esi + 0x2fcc], 1
movss xmm7, dword [esi + 0xe8]
subss xmm7, dword [ebp - 0x40]
mov al, byte [esi + 0xb1]
mov byte [ebp - 0x41], al
subss xmm7, dword [esi + 0x1548]
addss xmm7, dword [edi + 0x38]
jne 0x428b3d
mov cl, byte [ebp - 0x47]
test cl, cl
je 0x4289f7
test al, al
jne 0x428a59
cmp byte [esi + 0x3dd], al
jne 0x428b3d
cmp byte [esi + 0x3d8], 0
je 0x428ab3
cmp byte [edi + 0xe65], 0
jne 0x428ab3
test cl, cl
je 0x428b5b
cmp byte [edi + 0x4c], 0
je 0x428a33
push 0
mov edx, edi
lea ecx, [ebp - 0x30]
call fcn.00426a80
movss xmm2, dword [ebp - 0x24]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.00426db0
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x4b], 0
mov dword [edi + 0xe60], 0xbe99999a
jmp 0x428b58
cmp byte [esi + 0x3dd], 0
je 0x4289f7
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00427190
add esp, 4
mov byte [edi + 0xe64], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe60], 0xbe99999a
mov ecx, edi
push 0x60000d
call fcn.00427190
mov esi, dword [ebp - 0x84]
add esp, 4
mov byte [edi + 0xe64], 1
mov dword [edi + 0xe60], 0xbe99999a
jmp 0x428b58
cmp byte [esi + 0xf0], 0
je 0x428b5b
cmp byte [edi + 0xe65], 0
jne 0x428b64
movss xmm0, dword [esi + 0x378]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x428af2
movss xmm0, dword [esi + 0x37c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x428b5b
cmp byte [edi + 0x4c], 0
je 0x428b0c
push 0
mov edx, edi
lea ecx, [ebp - 0x30]
call fcn.00426a80
movss xmm2, dword [ebp - 0x24]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x428b1a
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.00426db0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov dword [edi + 0xe60], 0xbe99999a
mov byte [edi + 0xe64], 1
jmp 0x428b58
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x4b], 0
mov byte [edi + 0xe65], 1
mov al, byte [ebp - 0x41]
cmp byte [edi + 0xe65], 0
je 0x428b74
cmp byte [esi + 0xf0], 0
jne 0x428b74
mov byte [edi + 0xe65], 0
cmp byte [esi + 0x100], 0
je 0x428b86
cmp byte [esi + 0x102], 0
je 0x428b93
test al, al
je 0x428b97
cmp byte [esi + 0x103], 0
je 0x428b97
mov al, 1
jmp 0x428b99
xor al, al
cmp dword [esi + 0x1500], 0
jle 0x428c55
test al, al
jne 0x428c1d
cmp byte [ebp - 0x46], al
jne 0x428c1d
xor ecx, ecx
mov dword [ebp - 0x58], ecx
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esi + 0x1508]
movzx ecx, word [eax + ecx*2]
cmp ecx, 9
jne 0x428bd8
cmp byte [esi + 0x101], 0
jne 0x428c0e
cmp ecx, 0x20
jb 0x428c0e
cmp ecx, 0x7f
je 0x428c0e
lea eax, [ecx - 0xe000]
cmp eax, 0x18ff
jbe 0x428c0e
push ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00427190
add esp, 4
mov byte [edi + 0xe64], 1
mov dword [edi + 0xe60], 0xbe99999a
mov ecx, dword [ebp - 0x58]
inc ecx
mov dword [ebp - 0x58], ecx
cmp ecx, dword [esi + 0x1500]
jl 0x428bc0
mov ecx, dword [esi + 0x1504]
lea eax, [esi + 0x1500]
test ecx, ecx
jns 0x428c4f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x1500]
call fcn.004155a0
lea eax, [esi + 0x1500]
mov dword [eax], 0
mov ecx, dword [ebp - 0x54]
xor dl, dl
mov byte [ebp - 0x42], dl
cmp dword [esi + 0x1a2c], ecx
jne 0x429463
cmp byte [esi + 0x1a38], dl
jne 0x429463
cmp byte [ebp - 0x5c], dl
jne 0x429463
mov cl, byte [esi + 0x101]
xor eax, eax
test cl, cl
mov edx, 0x400000
cmovne eax, edx
mov dl, byte [esi + 0xb1]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x61], dl
test dl, dl
je 0x428ced
cmp byte [esi + 0x103], 0
je 0x428cb9
cmp byte [esi + 0x100], 0
jne 0x428cb9
mov eax, 1
jmp 0x428cbb
xor eax, eax
test eax, eax
jne 0x428cff
xor ah, ah
mov byte [ebp - 0x41], ah
test dl, dl
je 0x428d10
cmp byte [esi + 0x103], 0
je 0x428d10
test cl, cl
je 0x428d10
cmp byte [esi + 0x100], 0
jne 0x428d10
cmp byte [esi + 0x102], 0
jne 0x428d10
mov byte [ebp - 0x48], 1
jmp 0x428d18
cmp byte [esi + 0x100], 0
je 0x428cbf
cmp byte [esi + 0x103], 0
jne 0x428cbf
cmp byte [esi + 0x102], 0
jne 0x428cbf
test cl, cl
jne 0x428cbf
mov ah, 1
jmp 0x428cc1
mov byte [ebp - 0x48], 0
test dl, dl
je 0x428d79
cmp byte [esi + 0x103], 0
mov dl, byte [esi + 0x102]
mov byte [ebp - 0x49], dl
je 0x428d83
cmp byte [esi + 0x100], 0
jne 0x428d83
test dl, dl
jne 0x428d83
mov cl, byte [esi + 0x100]
mov byte [ebp - 0x46], 1
cmp byte [esi + 0x101], 0
mov byte [ebp - 0x43], 0
je 0x428dd5
mov byte [ebp - 0x43], 0
test cl, cl
jne 0x428dd5
mov byte [ebp - 0x43], cl
cmp byte [esi + 0x102], cl
jne 0x428dd5
mov byte [ebp - 0x43], cl
cmp byte [esi + 0x103], cl
jne 0x428dd5
mov byte [ebp - 0x47], 1
mov byte [ebp - 0x43], cl
jmp 0x428dd9
mov dl, byte [esi + 0x100]
mov byte [ebp - 0x48], 0
mov cl, byte [esi + 0x100]
mov al, dl
mov byte [ebp - 0x49], al
mov byte [ebp - 0x46], 0
test cl, cl
je 0x428d41
cmp byte [esi + 0x101], 0
mov byte [ebp - 0x49], al
mov byte [ebp - 0x46], 0
jne 0x428d41
cmp byte [esi + 0x102], 0
mov byte [ebp - 0x49], al
mov byte [ebp - 0x46], 0
jne 0x428d41
cmp byte [esi + 0x103], 0
mov byte [ebp - 0x49], al
mov byte [ebp - 0x46], 0
jne 0x428d41
mov byte [ebp - 0x43], 1
mov byte [ebp - 0x49], al
mov byte [ebp - 0x46], 0
mov byte [ebp - 0x47], 0
test ah, ah
mov eax, dword [0x513c00]
je 0x428dfa
mov ecx, dword [eax + 0x80]
test ecx, ecx
js 0x428dfa
call fcn.0040b260
test al, al
jne 0x428e10
mov eax, dword [0x513c00]
cmp byte [ebp - 0x47], 0
je 0x428e16
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x428e16
call fcn.0040b260
test al, al
je 0x428e16
mov byte [ebp - 0x4b], 1
jmp 0x428e1a
mov byte [ebp - 0x4b], 0
cmp byte [ebp - 0x41], 0
mov eax, dword [0x513c00]
je 0x428e3a
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x428e3a
call fcn.0040b260
test al, al
jne 0x428e50
mov eax, dword [0x513c00]
cmp byte [ebp - 0x43], 0
je 0x428e56
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x428e56
call fcn.0040b260
test al, al
je 0x428e56
mov byte [ebp - 0x43], 1
jmp 0x428e5a
mov byte [ebp - 0x43], 0
cmp byte [ebp - 0x41], 0
mov eax, dword [0x513c00]
je 0x428e7a
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x428e7a
call fcn.0040b260
test al, al
jne 0x428e90
mov eax, dword [0x513c00]
cmp byte [ebp - 0x47], 0
je 0x428e96
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x428e96
call fcn.0040b260
test al, al
je 0x428e96
mov byte [ebp - 0x7d], 1
jmp 0x428e9a
mov byte [ebp - 0x7d], 0
mov dl, byte [ebp - 0x41]
test dl, dl
je 0x428ec2
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x428ec2
call fcn.0040b260
test al, al
je 0x428ebf
mov byte [ebp - 0x47], 1
jmp 0x428eca
mov dl, byte [ebp - 0x41]
mov byte [ebp - 0x47], 0
test dl, dl
je 0x428ee2
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x428ee7
call fcn.0040b260
test al, al
jne 0x428f00
mov eax, dword [0x513c00]
cmp byte [ebp - 0x48], 0
je 0x428f06
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x428f06
call fcn.0040b260
test al, al
je 0x428f06
mov byte [ebp - 0x48], 1
jmp 0x428f0a
mov byte [ebp - 0x48], 0
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x428f66
call fcn.0040b260
test al, al
je 0x428f61
cmp byte [ebp - 0x46], 0
je 0x428f3d
mov ecx, 0x200004
lea edx, [edi + 0x3c]
or ecx, dword [ebp - 0x50]
push ecx
mov ecx, edi
call fcn.00427190
jmp 0x42942c
mov ecx, 0x200000
mov eax, 0x20000c
cmp byte [ebp - 0x49], 0
lea edx, [edi + 0x3c]
cmovne ecx, eax
or ecx, dword [ebp - 0x50]
push ecx
mov ecx, edi
call fcn.00427190
jmp 0x42942c
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x428fa3
call fcn.0040b260
test al, al
je 0x428f9e
cmp byte [ebp - 0x46], 0
je 0x428f94
mov ecx, 0x200005
lea edx, [edi + 0x3c]
or ecx, dword [ebp - 0x50]
push ecx
mov ecx, edi
call fcn.00427190
jmp 0x42942c
mov ecx, 0x200001
lea eax, [ecx + 0xc]
jmp 0x428f47
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x428fe2
call fcn.0040b260
test al, al
je 0x428fdd
mov ecx, dword [ebp - 0x50]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200004
or eax, 0x200006
cmp byte [esi + 0x100], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00427190
jmp 0x42942c
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x429021
call fcn.0040b260
test al, al
je 0x42901c
mov ecx, dword [ebp - 0x50]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200005
or eax, 0x200007
cmp byte [esi + 0x100], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00427190
jmp 0x42942c
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x42904e
call fcn.0040b260
test al, al
je 0x429049
mov eax, dword [ebp - 0x50]
lea edx, [edi + 0x3c]
or eax, 0x200008
mov ecx, edi
push eax
call fcn.00427190
jmp 0x42942c
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x4290d4
call fcn.0040b260
test al, al
je 0x4290cf
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x4290b7
cmp byte [ebp - 0x49], 0
je 0x429073
push 0x60000c
jmp 0x429099
cmp byte [ebp - 0x61], 0
je 0x4290b7
cmp byte [esi + 0x103], 0
je 0x4290b7
cmp byte [esi + 0x102], 0
jne 0x4290b7
cmp byte [esi + 0x100], 0
jne 0x4290b7
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00427190
mov dword [edi + 0xe60], 0xbe99999a
add esp, 4
mov byte [edi + 0xe64], 1
mov eax, dword [ebp - 0x50]
lea edx, [edi + 0x3c]
or eax, 0x200009
mov ecx, edi
push eax
call fcn.00427190
jmp 0x42942c
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x4290e9
call fcn.0040b260
test al, al
jne 0x4290f9
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x429107
call fcn.0040b260
test al, al
je 0x429102
mov byte [ebp - 0x5c], 1
jmp 0x429440
mov eax, dword [0x513c00]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x429126
call fcn.0040b260
test al, al
je 0x429121
mov dl, 1
mov byte [ebp - 0x5c], dl
jmp 0x429443
mov eax, dword [0x513c00]
mov cl, byte [ebp - 0x47]
test cl, cl
jne 0x42940d
cmp byte [ebp - 0x48], cl
jne 0x42940d
cmp byte [ebp - 0x41], cl
je 0x429168
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x429168
call fcn.0040b260
test al, al
je 0x429168
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x4b], 0
jmp 0x429439
mov al, byte [ebp - 0x4b]
test al, al
jne 0x429304
cmp byte [ebp - 0x43], al
jne 0x429304
cmp byte [ebp - 0x7d], al
je 0x429440
mov ecx, dword [0x513c00]
mov eax, dword [ecx + 0xd0]
test eax, eax
je 0x4291b2
push dword [ecx + 0xd8]
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x429440
mov ecx, dword [0x513c00]
jmp 0x4291b7
mov esi, 0x4b591e
mov edx, esi
lea eax, [edx + 1]
mov dword [ebp - 0x74], eax
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x4291c0
sub edx, dword [ebp - 0x74]
test ecx, ecx
je 0x4291d4
inc dword [ecx + 0x374]
lea eax, [edx*2 + 2]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x50], eax
cmp byte [esi], al
je 0x429248
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0x74]
call fcn.00406370
mov ecx, dword [ebp - 0x74]
add esp, 4
add esi, eax
test ecx, ecx
je 0x429239
cmp ecx, 0x20
jb 0x429234
cmp ecx, 0x7f
je 0x429234
lea eax, [ecx - 0xe000]
cmp eax, 0x18ff
jbe 0x429234
cmp ecx, 0xffff
ja 0x429234
mov eax, dword [ebp - 0x6c]
mov word [eax + edi*2], cx
inc edi
cmp byte [esi], 0
jne 0x4291f5
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x50], edi
mov edi, dword [ebp - 0x88]
mov eax, dword [ebp - 0x50]
xor edx, edx
mov word [ecx + eax*2], dx
test eax, eax
jle 0x4292e2
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 4]
cmp ecx, edx
je 0x42927c
cmp ecx, eax
jle 0x42926c
mov dword [edi + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x429275
mov dword [edi + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x42927c
mov dword [edi + 0x3c], ecx
cmp dword [edi + 0x3c], eax
jle 0x429284
mov dword [edi + 0x3c], eax
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00427100
push dword [ebp - 0x50]
mov edx, dword [edi + 0x3c]
mov ecx, edi
push dword [ebp - 0x6c]
call fcn.00426c60
add esp, 8
test al, al
je 0x4292c4
push dword [ebp - 0x50]
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x54]
push 0
call fcn.00427f70
mov eax, dword [ebp - 0x50]
add esp, 8
add dword [edi + 0x3c], eax
mov byte [edi + 0x4b], 0
jmp 0x4292d8
movzx eax, word [edi + 0xe52]
test ax, ax
je 0x4292d8
dec eax
mov word [edi + 0xe52], ax
mov ecx, dword [ebp - 0x6c]
mov byte [edi + 0xe64], 1
test ecx, ecx
je 0x4292f5
mov eax, dword [0x513c00]
test eax, eax
je 0x4292f5
dec dword [eax + 0x374]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
jmp 0x429440
cmp dword [esi + 0xd4], 0
je 0x4293ce
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x429325
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x42932a
mov ecx, dword [edi + 4]
xor esi, esi
mov al, byte [ebp - 0x44]
mov byte [ebp - 0x44], al
mov al, byte [ebp - 0x45]
mov byte [ebp - 0x45], al
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x60], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.00406630
lea ecx, [eax + 1]
mov eax, dword [0x513c00]
mov dword [ebp - 0x74], ecx
test eax, eax
je 0x42935f
inc dword [eax + 0x374]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x60]
lea ecx, [esi + ecx*2]
push ecx
lea ecx, [esi + eax*2]
mov esi, dword [ebp - 0x90]
push ecx
mov ecx, esi
call fcn.00406500
mov eax, dword [0x513c00]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x4293b3
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x513c00]
add esp, 8
test esi, esi
je 0x4293c1
test eax, eax
je 0x4293c1
dec dword [eax + 0x374]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov al, byte [ebp - 0x4b]
add esp, 4
test al, al
je 0x429440
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x4293ee
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x4b], 0
mov byte [edi + 0xe64], 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x429440
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00427100
mov byte [edi + 0x4b], 0
jmp 0x429440
movzx eax, cl
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.00427190
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe60], 0xbe99999a
add esp, 4
mov byte [edi + 0xe64], 1
mov dl, byte [ebp - 0x42]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x429455
cmp byte [ebp - 0x4a], 0
je 0x429455
mov al, 1
jmp 0x429457
xor al, al
or byte [ebp - 0x44], al
mov esi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x54]
mov dh, byte [ebp - 0x45]
cmp dword [esi + 0x1a2c], ecx
jne 0x4295b5
test dl, dl
je 0x4294b9
mov eax, dword [edi + 0x2c]
mov ecx, eax
mov dword [ebp - 0x58], eax
mov eax, 0x513e40
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4294a3
test dl, dl
je 0x42949f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4294a3
add eax, 2
add ecx, 2
test dl, dl
jne 0x429483
xor eax, eax
jmp 0x4294a8
sbb eax, eax
or eax, 1
test eax, eax
je 0x429594
mov eax, dword [edi + 0x24]
dec eax
jmp 0x429557
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x58], edx
cmp edx, eax
jle 0x429502
test eax, eax
je 0x4294e7
cdq
sub eax, edx
mov edx, dword [ebp - 0x58]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1c]
jmp 0x4294ec
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x18]
push eax
call fcn.00415530
mov edx, dword [ebp - 0x58]
lea ecx, [edi + 0x18]
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.00406500
mov eax, dword [edi + 0x20]
add esp, 8
mov dword [ebp - 0x58], eax
mov ecx, 0x513e40
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x429540
test dl, dl
je 0x42953c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x429540
add eax, 2
add ecx, 2
test dl, dl
jne 0x429520
xor eax, eax
jmp 0x429545
sbb eax, eax
or eax, 1
mov cl, byte [ebp - 0x45]
mov byte [ebp - 0x45], cl
test eax, eax
je 0x429594
mov eax, dword [edi + 8]
mov dh, cl
mov byte [ebp - 0x45], dh
mov edx, dword [ebp - 0x58]
test edx, edx
je 0x429594
inc eax
mov ecx, 0x40
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x74], ecx
cmp ecx, 1
jb 0x429590
jbe 0x429589
lea eax, [ecx - 1]
push eax
push edx
push 0x513e40
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebp - 0x74]
add esp, 0xc
mov byte [ecx + 0x513e3f], 0
mov byte [ebp - 0x45], 1
mov ecx, dword [ebp - 0x54]
mov dword [edi + 0xe68], 0
mov dword [edi + 0xe6c], 0
mov dword [edi + 0xe70], 0
cmp byte [ebp - 0x5c], 0
je 0x4295cc
cmp dword [esi + 0x1a2c], ecx
jne 0x4295cc
xor edx, edx
xor ecx, ecx
call fcn.00407c00
mov edx, dword [ebp - 0x54]
lea ecx, [ebp - 0x40]
push 1
call fcn.00406ff0
movss xmm1, dword [0x5056d0]
add esp, 4
mov ecx, 7
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call fcn.00406790
movss xmm2, dword [esi + 0x1550]
mov dl, 1
mov ecx, eax
call fcn.00406cc0
movss xmm0, dword [ebp - 0x68]
add esp, 0x10
cmp byte [ebp - 0x7e], 0
movss xmm6, dword [ebp - 0x3c]
movss xmm4, dword [ebp - 0xa4]
addss xmm0, xmm6
movss xmm5, dword [ebp - 0x40]
movaps xmm7, xmm4
addss xmm5, dword [esi + 0x1548]
addss xmm7, dword [ebp - 0x40]
movss dword [ebp - 0x68], xmm0
movaps xmm0, xmm6
addss xmm0, dword [esi + 0x154c]
movss dword [ebp - 0x6c], xmm5
movss dword [ebp - 0x58], xmm7
movss dword [ebp - 0x98], xmm5
movss dword [ebp - 0xc4], xmm5
movss dword [ebp - 0x94], xmm0
movss dword [ebp - 0xc0], xmm0
je 0x42967e
mov ecx, dword [edi + 0x20]
jmp 0x429683
mov ecx, 0x513e40
cmp byte [ebp - 0x4a], 0
mov dword [ebp - 0x5c], ecx
jne 0x4297f6
cmp byte [ebp - 0x44], 0
jne 0x4297f6
mov eax, dword [ebp - 0x54]
cmp dword [esi + 0x1a2c], eax
jne 0x4296ac
mov edi, dword [edi + 8]
add edi, ecx
jmp 0x4296c1
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4296b0
mov edi, dword [ebp - 0x5c]
sub ecx, edx
add edi, ecx
mov ecx, dword [ebp - 0x5c]
mov eax, edi
mov dword [ebp - 0x50], edi
sub eax, ecx
cmp eax, 0x200000
jge 0x42a0da
movss xmm1, dword [0x5056d0]
xor ecx, ecx
call fcn.00406790
mov edx, dword [ebp - 0x9c]
mov ecx, dword [esi + 0x18c4]
movss xmm2, dword [esi + 0x18c8]
mov dword [ebp - 0x74], eax
mov edx, dword [edx + 0x278]
mov dword [ebp - 0x58], ecx
test eax, 0xff000000
je 0x42a0da
test edi, edi
jne 0x42972e
mov ecx, dword [ebp - 0x5c]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x429717
mov eax, dword [ebp - 0x5c]
sub ecx, edi
lea edi, [eax + ecx]
mov ecx, dword [esi + 0x18c4]
jmp 0x429731
mov eax, dword [ebp - 0x5c]
cmp eax, edi
je 0x42a0da
test ecx, ecx
jne 0x429746
mov eax, dword [edx + 0x28]
mov eax, dword [eax + 8]
mov dword [ebp - 0x58], eax
ucomiss xmm2, dword [0x505664]
lahf
test ah, 0x44
jp 0x42975b
mov eax, dword [edx + 0x28]
movss xmm2, dword [eax + 0xc]
mov ecx, dword [edx + 0x40]
mov eax, dword [edx + 0x48]
movss xmm1, dword [ebp - 0x40]
shl ecx, 4
movups xmm0, xmmword [ecx + eax - 0x10]
comiss xmm0, xmm1
movaps xmmword [ebp - 0xb0], xmm0
jae 0x429782
movss dword [ebp - 0xb0], xmm1
movss xmm0, dword [ebp - 0xac]
movss xmm5, dword [ebp - 0x3c]
comiss xmm0, xmm5
jae 0x42979c
movss dword [ebp - 0xac], xmm5
comiss xmm7, dword [ebp - 0xa8]
ja 0x4297ad
movss dword [ebp - 0xa8], xmm7
movss xmm0, dword [ebp - 0x68]
comiss xmm0, dword [ebp - 0xa4]
ja 0x4297c3
movss dword [ebp - 0xa4], xmm0
push dword [ebp - 0x94]
lea eax, [ebp - 0xb0]
push dword [ebp - 0x98]
push 1
push ecx
mov ecx, dword [ebp - 0x58]
mov dword [esp], 0
push edi
mov edi, dword [ebp - 0x5c]
push edi
push eax
push dword [ebp - 0x74]
push edx
call fcn.00422ad0
jmp 0x42a0dd
mov eax, dword [edi + 8]
xor edx, edx
add eax, ecx
mov dword [ebp - 0x8c], 0
xorps xmm0, xmm0
mov ecx, dword [edi + 0x14]
xorps xmm7, xmm7
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x90], ecx
movss dword [ebp - 0xa4], xmm0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x60], 0xfffffc18
mov dword [ebp - 0x54], 0xfffffc18
cmp byte [ebp - 0x4a], dl
je 0x429853
mov eax, dword [edi + 0x3c]
mov edx, 1
mov dword [ebp - 0x60], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x8c], eax
cmp byte [ebp - 0x44], 0
je 0x429877
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [edi + 0x14]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x54], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [edi + 0x14]
mov dword [ebp - 0x7c], eax
mov esi, dword [ebp - 0x90]
xor eax, eax
movzx esi, word [esi]
test si, si
mov esi, dword [ebp - 0x84]
je 0x4298e8
mov esi, dword [ebp - 0x90]
movzx edi, word [esi]
xor esi, esi
cmp di, 0xa
jne 0x4298c8
inc esi
cmp dword [ebp - 0x60], 0xffffffff
jne 0x4298b5
cmp ecx, dword [ebp - 0x8c]
jb 0x4298b5
dec edx
mov dword [ebp - 0x60], esi
test edx, edx
jle 0x4298d6
cmp dword [ebp - 0x54], 0xffffffff
jne 0x4298c8
cmp ecx, dword [ebp - 0x7c]
jb 0x4298c8
dec edx
mov dword [ebp - 0x54], esi
test edx, edx
jle 0x4298d6
movzx eax, word [ecx + 2]
add ecx, 2
mov edi, eax
test ax, ax
jne 0x429898
mov edi, dword [ebp - 0x88]
mov dword [ebp - 0x74], esi
mov esi, dword [ebp - 0x84]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x54]
inc eax
cmp dword [ebp - 0x60], 0xffffffff
mov edx, eax
cmovne edx, dword [ebp - 0x60]
cmp ecx, 0xffffffff
mov dword [ebp - 0x90], edx
mov edx, dword [edi + 0x14]
cmove ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x54], ecx
mov ecx, eax
cmp eax, edx
jbe 0x429922
cmp word [ecx - 2], 0xa
je 0x429922
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x429914
movaps xmm1, xmm0
mov eax, dword [0x513c00]
movaps xmm3, xmm0
mov edx, dword [eax + 0x18c4]
movss xmm2, dword [eax + 0x18c8]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x8c]
jae 0x42999b
mov esi, dword [ebp - 0x8c]
mov edi, edx
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x429966
maxss xmm1, xmm3
movaps xmm3, xmm0
jmp 0x42998b
cmp edx, 0xd
je 0x42998b
mov edx, eax
cmp edx, dword [edi]
jge 0x42997b
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x429980
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
xorps xmm0, xmm0
cmp ecx, esi
jb 0x429950
mov edi, dword [ebp - 0x88]
mov esi, dword [ebp - 0x84]
cmp dword [ebp - 0x54], 0
maxss xmm3, xmm1
movd xmm0, dword [ebp - 0x90]
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0xbc], xmm3
mulss xmm0, dword [esi + 0x18c8]
movss dword [ebp - 0x8c], xmm0
jl 0x429a78
mov eax, dword [ebp - 0x7c]
mov ecx, eax
mov edx, dword [edi + 0x14]
cmp eax, edx
jbe 0x4299e6
cmp word [ecx - 2], 0xa
je 0x4299e6
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x4299d8
xorps xmm0, xmm0
mov eax, dword [0x513c00]
xorps xmm1, xmm1
xorps xmm7, xmm7
mov edx, dword [eax + 0x18c4]
movss xmm2, dword [eax + 0x18c8]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x7c]
jae 0x429a5c
mov esi, dword [ebp - 0x7c]
mov edi, edx
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x429a27
maxss xmm1, xmm7
movaps xmm7, xmm0
jmp 0x429a4c
cmp edx, 0xd
je 0x429a4c
mov edx, eax
cmp edx, dword [edi]
jge 0x429a3c
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x429a41
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm7, xmm0
xorps xmm0, xmm0
cmp ecx, esi
jb 0x429a11
mov edi, dword [ebp - 0x88]
mov esi, dword [ebp - 0x84]
movd xmm0, dword [ebp - 0x54]
maxss xmm7, xmm1
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x18c8]
movss dword [ebp - 0xa4], xmm0
cmp byte [ebp - 0x4a], 0
je 0x429ad0
cmp byte [edi + 0xe64], 0
je 0x429ad0
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm4
comiss xmm2, xmm3
mulss xmm0, dword [0x505690]
movaps xmm1, xmm3
jbe 0x429aac
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
jmp 0x429ab9
subss xmm1, xmm4
comiss xmm1, xmm2
jb 0x429ac9
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
mov byte [edi + 0xe64], 0
cmp byte [ebp - 0x44], 0
movss xmm4, dword [edi + 0x38]
movss dword [ebp - 0x7c], xmm4
je 0x429d3e
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [edi + 0x14]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0x4a], 0
lea esi, [esi + eax*2]
mov eax, dword [edi + 0x14]
lea edx, [eax + edx*2]
mov dword [ebp - 0x60], edx
je 0x429b13
movss xmm1, dword [0x5056d0]
jmp 0x429b1b
movss xmm1, dword [0x5056a8]
mov ecx, 0x2a
call fcn.00406790
movss xmm4, dword [ebp - 0xa4]
movss xmm5, dword [ebp - 0x6c]
mov dword [ebp - 0x74], eax
addss xmm7, xmm5
addss xmm4, dword [ebp - 0x94]
subss xmm7, dword [ebp - 0x7c]
subss xmm4, dword [0x505664]
movss dword [ebp - 0xa4], xmm4
cmp esi, edx
jae 0x429d2e
movss xmm0, dword [ebp - 0x68]
mov edi, eax
mov ecx, dword [ebp - 0x84]
nop dword [eax + eax]
addss xmm0, dword [ecx + 0x18c8]
comiss xmm4, xmm0
ja 0x429d28
movss xmm6, dword [ebp - 0x3c]
comiss xmm6, xmm4
jbe 0x429bac
cmp esi, edx
jae 0x429d03
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x429d03
cmp esi, edx
jb 0x429b93
jmp 0x429d28
mov eax, dword [0x513c00]
xorps xmm0, xmm0
xorps xmm3, xmm3
xorps xmm1, xmm1
mov edx, dword [eax + 0x18c4]
movss xmm2, dword [eax + 0x18c8]
mov dword [ebp - 0x74], edx
divss xmm2, dword [edx + 0x10]
mov edx, dword [ebp - 0x60]
cmp esi, edx
jae 0x429c20
movzx eax, word [esi]
add esi, 2
mov edx, eax
cmp eax, 0xa
je 0x429c10
cmp edx, 0xd
je 0x429c07
mov eax, dword [ebp - 0x74]
cmp edx, dword [eax]
jge 0x429bfa
mov eax, dword [eax + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x429bff
movss xmm0, dword [eax + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
mov edx, dword [ebp - 0x60]
cmp esi, edx
jb 0x429bd7
jmp 0x429c1d
mov edx, dword [ebp - 0x60]
xorps xmm3, xmm3
maxss xmm3, xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
maxss xmm1, xmm3
comiss xmm0, xmm1
jb 0x429c59
mov eax, dword [ecx + 0x18c4]
cmp dword [eax], 0x20
jle 0x429c41
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x429c46
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x5056a4]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm2, dword [0x505778]
addss xmm1, xmm7
subss xmm2, dword [ecx + 0x18c8]
addss xmm7, dword [0x505664]
movss xmm3, dword [ebp - 0x58]
movaps xmm0, xmm4
addss xmm0, dword [0x5056ec]
minss xmm1, xmm3
addss xmm2, xmm4
maxss xmm7, dword [ebp - 0x40]
minss xmm0, dword [ebp - 0x68]
movss dword [ebp - 0x20], xmm1
maxss xmm2, xmm6
movss dword [ebp - 0x28], xmm7
movss dword [ebp - 0x1c], xmm0
comiss xmm0, xmm6
movss xmm0, dword [ebp - 0x68]
movss dword [ebp - 0x24], xmm2
jbe 0x429d08
comiss xmm0, xmm2
jbe 0x429d08
comiss xmm1, dword [ebp - 0x40]
jbe 0x429d08
comiss xmm3, xmm7
jbe 0x429d08
push 0xf
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x20]
push edi
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + 0x278]
call fcn.0041f370
movss xmm4, dword [ebp - 0xa4]
movss xmm5, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x60]
movss xmm0, dword [ebp - 0x68]
movaps xmm7, xmm5
addss xmm4, dword [ecx + 0x18c8]
subss xmm7, dword [ebp - 0x7c]
movss dword [ebp - 0xa4], xmm4
cmp esi, edx
jb 0x429b70
mov edi, dword [ebp - 0x88]
mov esi, dword [ebp - 0x84]
movss xmm6, dword [ebp - 0x3c]
movss xmm4, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x50]
xorps xmm7, xmm7
sub eax, dword [ebp - 0x5c]
cmp eax, 0x200000
jge 0x429f5e
mov eax, dword [0x513c00]
movups xmm1, xmmword [eax + 0x15c4]
comiss xmm7, xmm1
movaps xmm2, xmm1
movaps xmmword [ebp - 0x30], xmm1
shufps xmm2, xmm1, 0xff
mulss xmm2, dword [eax + 0x1510]
jbe 0x429d7b
xorps xmm0, xmm0
jmp 0x429d87
movss xmm0, dword [0x5056d0]
minss xmm0, xmm1
movss xmm1, dword [0x505748]
movss xmm3, dword [ebp - 0x2c]
comiss xmm7, xmm3
mulss xmm0, xmm1
addss xmm0, dword [0x5056a4]
cvttss2si ecx, xmm0
jbe 0x429dae
xorps xmm0, xmm0
jmp 0x429dba
movss xmm0, dword [0x5056d0]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x28]
mulss xmm0, xmm1
addss xmm0, dword [0x5056a4]
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm7, xmm3
jbe 0x429dde
xorps xmm0, xmm0
jmp 0x429dea
movss xmm0, dword [0x5056d0]
minss xmm0, xmm3
movss xmm3, dword [0x5056a4]
mulss xmm0, xmm1
addss xmm0, xmm3
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm7, xmm2
jbe 0x429e0d
xorps xmm0, xmm0
jmp 0x429e19
movss xmm0, dword [0x5056d0]
minss xmm0, xmm2
mov eax, dword [ebp - 0x9c]
mov edi, dword [esi + 0x18c4]
mulss xmm0, xmm1
mov dword [ebp - 0x90], edi
movss xmm2, dword [esi + 0x18c8]
mov edi, dword [ebp - 0x88]
addss xmm0, xmm3
cvttss2si edx, xmm0
movaps xmm0, xmm5
subss xmm0, xmm4
shl edx, 0x18
or edx, ecx
mov ecx, dword [eax + 0x278]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x74], eax
movss dword [ebp - 0xa8], xmm0
movss xmm0, dword [ebp - 0x94]
subss xmm0, xmm7
movss dword [ebp - 0xa4], xmm0
test edx, 0xff000000
je 0x429f5e
test eax, eax
jne 0x429eaa
mov ecx, dword [ebp - 0x5c]
lea eax, [ecx + 1]
mov dword [ebp - 0x74], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x429e95
sub ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x5c]
add eax, ecx
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x5c], eax
je 0x429f5e
cmp dword [esi + 0x18c4], 0
jne 0x429ec8
mov eax, dword [ecx + 0x28]
mov eax, dword [eax + 8]
mov dword [ebp - 0x90], eax
ucomiss xmm2, xmm7
lahf
test ah, 0x44
jp 0x429ed9
mov eax, dword [ecx + 0x28]
movss xmm2, dword [eax + 0xc]
mov eax, dword [ebp - 0x60]
mov ecx, dword [ecx + 0x40]
movss xmm1, dword [ebp - 0x40]
shl ecx, 4
mov eax, dword [eax + 0x48]
movups xmm0, xmmword [ecx + eax - 0x10]
comiss xmm0, xmm1
movaps xmmword [ebp - 0x30], xmm0
jae 0x429efd
movss dword [ebp - 0x30], xmm1
movss xmm0, dword [ebp - 0x2c]
comiss xmm0, xmm6
jae 0x429f0c
movss dword [ebp - 0x2c], xmm6
movss xmm0, dword [ebp - 0x58]
comiss xmm0, dword [ebp - 0x28]
ja 0x429f1c
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [ebp - 0x68]
comiss xmm0, dword [ebp - 0x24]
ja 0x429f2c
movss dword [ebp - 0x24], xmm0
push dword [ebp - 0xa4]
lea eax, [ebp - 0x30]
push dword [ebp - 0xa8]
push 1
push ecx
mov ecx, dword [ebp - 0x90]
mov dword [esp], 0
push dword [ebp - 0x74]
push dword [ebp - 0x5c]
push eax
push edx
push dword [ebp - 0x60]
call fcn.00422ad0
xorps xmm7, xmm7
cmp byte [ebp - 0x4a], 0
je 0x42a0da
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe60]
movss dword [edi + 0xe60], xmm0
cmp byte [esi + 0xb2], 0
je 0x429fbe
comiss xmm7, xmm0
jae 0x429fbe
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x78], xmm0
fld qword [ebp - 0x78]
fld qword [0x5056e0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x5056c4]
fstp qword [ebp - 0x78]
movsd xmm1, qword [ebp - 0x78]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x429fbe
xor al, al
jmp 0x429fc0
mov al, 1
movss xmm3, dword [ebp - 0x8c]
movss xmm4, dword [ebp - 0x6c]
movss xmm6, dword [0x5056d0]
addss xmm3, dword [ebp - 0x94]
addss xmm4, dword [ebp - 0xbc]
subss xmm3, dword [0x505664]
subss xmm4, dword [ebp - 0x7c]
movss dword [ebp - 0x8c], xmm3
movaps xmm0, xmm3
movss dword [ebp - 0x6c], xmm4
movaps xmm2, xmm4
movss dword [ebp - 0x28], xmm4
movaps xmm1, xmm3
addss xmm2, xmm6
subss xmm0, dword [esi + 0x18c8]
subss xmm1, dword [0x5056dc]
movss dword [ebp - 0x20], xmm2
addss xmm0, dword [0x5056a4]
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x24], xmm0
test al, al
je 0x42a0be
comiss xmm1, dword [ebp - 0x3c]
jbe 0x42a0be
movss xmm5, dword [ebp - 0x68]
comiss xmm5, xmm0
jbe 0x42a0be
comiss xmm2, dword [ebp - 0x40]
jbe 0x42a0be
movss xmm0, dword [ebp - 0x58]
comiss xmm0, xmm4
jbe 0x42a0be
sub esp, 8
movss dword [ebp - 0x94], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x98], xmm4
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.00406790
add esp, 4
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + 0x278]
call fcn.0041f170
movss xmm3, dword [ebp - 0x8c]
movss xmm4, dword [ebp - 0x6c]
movss xmm6, dword [0x5056d0]
subss xmm3, dword [esi + 0x18c8]
subss xmm4, xmm6
movss dword [esi + 0x2d70], xmm3
movss dword [esi + 0x2d6c], xmm4
mov edi, dword [ebp - 0x5c]
cmp byte [esi + 0x2da8], 0
je 0x42a0f9
push dword [ebp - 0x50]
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.00414080
add esp, 4
movss xmm0, dword [ebp - 0xb8]
comiss xmm0, dword [0x505664]
jbe 0x42a152
movss xmm0, dword [ebp - 0x38]
xor edx, edx
addss xmm0, dword [esi + 0x1560]
mov ecx, dword [ebp - 0xb4]
movss dword [ebp - 0x98], xmm0
movss xmm0, dword [ebp - 0x3c]
addss xmm0, dword [esi + 0x154c]
movss dword [ebp - 0x94], xmm0
push dword [ebp - 0x94]
push dword [ebp - 0x98]
push 1
call fcn.00406870
add esp, 0xc
mov al, byte [ebp - 0x45]
test al, al
je 0x42a18a
mov ecx, dword [0x513c00]
mov word [ecx + 0x1a3b], 0x101
mov ecx, dword [ecx + 0x19f8]
or dword [ecx + 0x110], 4
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a1871
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
xor al, al
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.004a1871
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret