
16over9 data0xed0090 operand0x4886d5 candidate-start0x4886a5
004886a5: movsd dword ptr es:[edi], dword ptr [esi]
004886a6: pop es
004886a7: add dword ptr [edx + ebp*2], eax
004886aa: add byte ptr [edi], cl
004886ac: xchg esp, eax
004886ad: sar byte ptr [edx + 0xd], 0x8d
004886b4: dec esp
004886b5: and al, 0x1c
004886b7: push eax
004886b8: call 0xdcdb90
004886bd: cmp dword ptr [0x1083f38], 0
004886c4: push ecx
004886c5: mov edx, 0x5e4a1c37
004886ca: mov ecx, 0x154c0bc
004886cf: je 0x4886f4
004886d1: movss xmm0, dword ptr [0xed0090]
004886d9: divss xmm0, dword ptr [0x1083f3c]
004886e1: movss xmm1, dword ptr [0xec6e14]
004886e9: subss xmm1, xmm0
004886ed: movss dword ptr [esp], xmm1
004886f2: jmp 0x4886fc
004886f4: xorps xmm0, xmm0
004886f7: movss dword ptr [esp], xmm0
004886fc: call 0xdce050
00488701: cmp dword ptr [0x1083f40], 0
00488708: movss xmm0, dword ptr [0xec6fd4]
00488710: je 0x488717
00488712: movaps xmm1, xmm0
00488715: jmp 0x48871f
00488717: movss xmm1, dword ptr [0xec6e14]
0048871f: cmp dword ptr [0x1083f44], 0
00488726: jne 0x488730
00488728: movss xmm0, dword ptr [0xec6e14]
00488730: sub esp, 8
00488733: .byte 0xf3
00488734: .byte 0x0f

16over9 data0xed0090 operand0x55e643 candidate-start0x55e610
0055e610: push ebp
0055e611: mov ebp, esp
0055e613: and esp, 0xfffffff0
0055e616: sub esp, 0x20
0055e619: cmp byte ptr [ecx + 0x1d8], 0
0055e620: je 0x55e69b
0055e622: movss xmm2, dword ptr [ecx]
0055e626: comiss xmm2, dword ptr [0xf0fc08]
0055e62d: jbe 0x55e69b
0055e62f: movss xmm0, dword ptr [ecx + 0x200]
0055e637: subss xmm0, dword ptr [ecx + 0x1f0]
0055e63f: movss xmm1, dword ptr [0xed0090]
0055e647: push ecx
0055e648: mov edx, 1
0055e64d: shufps xmm0, xmm0, 0
0055e651: andps xmm0, xmmword ptr [0xf0d250]
0055e658: movaps xmmword ptr [esp + 4], xmm0
0055e65d: movss xmm0, dword ptr [ecx + 0x1f4]
0055e665: subss xmm0, dword ptr [ecx + 0x204]
0055e66d: shufps xmm0, xmm0, 0
0055e671: andps xmm0, xmmword ptr [0xf0d250]
0055e678: movaps xmmword ptr [esp + 0x14], xmm0
0055e67d: movss xmm0, dword ptr [esp + 4]
0055e683: divss xmm0, dword ptr [esp + 0x14]
0055e689: divss xmm1, xmm0
0055e68d: mulss xmm1, xmm2
0055e691: movss dword ptr [esp], xmm1
0055e696: call 0xd96870
0055e69b: mov esp, ebp
0055e69d: pop ebp
0055e69e: ret 
0055e69f: int3 
0055e6a0: push ebx
0055e6a1: .byte 0x8b
0055e6a2: pop esp

16over9 data0xed0090 operand0x5669ba candidate-start0x566970
00566970: push ebp
00566971: mov ebp, esp
00566973: and esp, 0xfffffff0
00566976: sub esp, 0x20
00566979: cmp byte ptr [esi + 0x1d8], 0
00566980: je 0x566a14
00566986: mov ecx, esi
00566988: call 0x55e610
0056698d: mov eax, dword ptr [ebp + 8]
00566990: cmp dword ptr [eax + 0x2f0], 0
00566997: jne 0x566a14
00566999: movss xmm1, dword ptr [esi]
0056699d: comiss xmm1, dword ptr [0xf0fc08]
005669a4: jbe 0x566a14
005669a6: movss xmm0, dword ptr [esi + 0x200]
005669ae: subss xmm0, dword ptr [esi + 0x1f0]
005669b6: movss xmm2, dword ptr [0xed0090]
005669be: push ecx
005669bf: mov edx, 1
005669c4: mov ecx, esi
005669c6: shufps xmm0, xmm0, 0
005669ca: andps xmm0, xmmword ptr [0xf0d250]
005669d1: movaps xmmword ptr [esp + 4], xmm0
005669d6: movss xmm0, dword ptr [esi + 0x1f4]
005669de: subss xmm0, dword ptr [esi + 0x204]
005669e6: shufps xmm0, xmm0, 0
005669ea: andps xmm0, xmmword ptr [0xf0d250]
005669f1: movaps xmmword ptr [esp + 0x14], xmm0
005669f6: movss xmm0, dword ptr [esp + 4]
005669fc: divss xmm0, dword ptr [esp + 0x14]
00566a02: divss xmm2, xmm0
00566a06: divss xmm1, xmm2
00566a0a: movss dword ptr [esp], xmm1
00566a0f: call 0xd96870
00566a14: mov esp, ebp
00566a16: pop ebp
00566a17: ret 4

16over9 data0xed0090 operand0x56e74d candidate-start0x56e4d0
0056e4d0: push ebp
0056e4d1: mov ebp, esp
0056e4d3: and esp, 0xfffffff0
0056e4d6: sub esp, 0x124
0056e4dc: mov ecx, dword ptr [0x10d2d40]
0056e4e2: push ebx
0056e4e3: mov ebx, dword ptr [ebp + 8]
0056e4e6: push esi
0056e4e7: push edi
0056e4e8: call 0x6a7d90
0056e4ed: cmp dword ptr [ebx + 0x124], 0
0056e4f4: movss xmm0, dword ptr [0xec6e14]
0056e4fc: movss dword ptr [esp + 0xac], xmm0
0056e505: xorps xmm0, xmm0
0056e508: movss dword ptr [esp + 0x7c], xmm0
0056e50e: movss dword ptr [esp + 0x8c], xmm0
0056e517: movss dword ptr [esp + 0x9c], xmm0
0056e520: movss dword ptr [esp + 0x74], xmm0
0056e526: movss dword ptr [esp + 0x78], xmm0
0056e52c: movss dword ptr [esp + 0x80], xmm0
0056e535: movss dword ptr [esp + 0x88], xmm0
0056e53e: movss dword ptr [esp + 0x90], xmm0
0056e547: movss dword ptr [esp + 0x94], xmm0
0056e550: movss xmm0, dword ptr [0xec6ff0]
0056e558: movss dword ptr [esp + 0x84], xmm0
0056e561: movss dword ptr [esp + 0x98], xmm0
0056e56a: je 0x56e5c1
0056e56c: lea ecx, [ebx + 0x130]
0056e572: call 0x55c7d0
0056e577: xorps xmm2, xmm2
0056e57a: movss xmm3, dword ptr [0xec6fd4]
0056e582: xorps xmm0, xmm0
0056e585: cvtsi2ss xmm0, eax
0056e589: mov eax, dword ptr [ebx + 0xc0]
0056e58f: movss xmm1, dword ptr [eax + 0x20]
0056e594: addss xmm1, dword ptr [ebx + 0x74]
0056e599: mulss xmm0, dword ptr [0xec90b0]
0056e5a1: movss dword ptr [esp + 0xa0], xmm2
0056e5aa: movss dword ptr [esp + 0xa4], xmm1
0056e5b3: movss dword ptr [esp + 0xa8], xmm2
0056e5bc: jmp 0x56e6b5
0056e5c1: mov ecx, dword ptr [0x10d2d40]
0056e5c7: call 0x55c7d0
0056e5cc: movss xmm1, dword ptr [0xf0d8f4]
0056e5d4: movss xmm3, dword ptr [0xec6fd4]
0056e5dc: xorps xmm2, xmm2
0056e5df: movss dword ptr [esp + 0xa0], xmm1
0056e5e8: movss xmm1, dword ptr [0xf09bf8]
0056e5f0: xorps xmm0, xmm0
0056e5f3: movss dword ptr [esp + 0xa4], xmm1
0056e5fc: cvtsi2ss xmm0, eax
0056e600: mulss xmm0, dword ptr [0xec90b0]
0056e608: divss xmm0, dword ptr [0x10d4258]
0056e610: movaps xmm1, xmm0
0056e613: mulss xmm1, xmm3
0056e617: mulss xmm1, dword ptr [0xec9490]
0056e61f: mulss xmm1, dword ptr [0xec704c]
0056e627: mulss xmm1, dword ptr [0xec948c]
0056e62f: comiss xmm2, xmm1
0056e632: jbe 0x56e63a
0056e634: subss xmm1, xmm3
0056e638: jmp 0x56e63e
0056e63a: addss xmm1, xmm3
0056e63e: movss dword ptr [esp + 0x1c], xmm1
0056e644: cvttss2si eax, dword ptr [esp + 0x1c]
0056e64a: xorps xmm1, xmm1
0056e64d: cvtsi2ss xmm1, eax
0056e651: movss dword ptr [esp + 0x18], xmm1
0056e657: cvttss2si eax, dword ptr [esp + 0x18]
0056e65d: xorps xmm1, xmm1
0056e660: cvtsi2ss xmm1, eax
0056e664: mulss xmm1, dword ptr [0xec6f80]
0056e66c: movss dword ptr [esp + 0x18], xmm1
0056e672: fld dword ptr [esp + 0x18]
0056e676: fsin 
0056e678: fstp dword ptr [esp + 0x1c]
0056e67c: movss xmm4, dword ptr [esp + 0x1c]
0056e682: movss dword ptr [esp + 0x6c], xmm1
0056e688: fld dword ptr [esp + 0x6c]
0056e68c: fcos 
0056e68e: fstp dword ptr [esp + 0x18]
0056e692: divss xmm4, dword ptr [esp + 0x18]
0056e698: movss xmm1, dword ptr [0xf0da34]
0056e6a0: divss xmm1, xmm4
0056e6a4: addss xmm1, dword ptr [0xec9470]
0056e6ac: movss dword ptr [esp + 0xa8], xmm1
0056e6b5: mulss xmm0, dword ptr [0xec9490]
0056e6bd: mulss xmm0, dword ptr [0xec704c]
0056e6c5: mulss xmm0, dword ptr [0xec948c]
0056e6cd: comiss xmm2, xmm0
0056e6d0: jbe 0x56e6d8
0056e6d2: subss xmm0, xmm3
0056e6d6: jmp 0x56e6dc
0056e6d8: addss xmm0, xmm3
0056e6dc: movss dword ptr [esp + 0x18], xmm0
0056e6e2: cvttss2si eax, dword ptr [esp + 0x18]
0056e6e8: mov ecx, dword ptr [0x10d2d40]
0056e6ee: push 1
0056e6f0: mov edx, eax
0056e6f2: call 0xd97140
0056e6f7: mov edx, dword ptr [0x10d2d40]
0056e6fd: lea eax, [esp + 0x40]
0056e701: lea ecx, [edx + 0x1f0]
0056e707: mov esi, eax
0056e709: sub ecx, esi
0056e70b: jmp 0x56e710
0056e70d: lea ecx, [ecx]
0056e710: mov esi, dword ptr [ecx + eax]
0056e713: mov dword ptr [eax], esi
0056e715: add eax, 4
0056e718: lea esi, [esp + 0x60]
0056e71c: cmp eax, esi
0056e71e: jb 0x56e710
0056e720: lea ecx, [edx + 0x210]
0056e726: lea eax, [esp + 0x20]
0056e72a: mov edx, eax
0056e72c: sub ecx, edx
0056e72e: mov edi, edi
0056e730: mov edx, dword ptr [ecx + eax]
0056e733: mov dword ptr [eax], edx
0056e735: add eax, 4
0056e738: lea edx, [esp + 0x40]
0056e73c: cmp eax, edx
0056e73e: jb 0x56e730
0056e740: call 0x6a79b0
0056e745: test eax, eax
0056e747: je 0x56e753
0056e749: movss xmm0, dword ptr [0xed0090]
0056e751: jmp 0x56e75b
0056e753: movss xmm0, dword ptr [0xee414c]
0056e75b: movss xmm2, dword ptr [esp + 0x50]
0056e761: mov eax, dword ptr [0x10d2d40]
0056e766: mulss xmm2, dword ptr [0xec704c]
0056e76e: divss xmm2, xmm0
0056e772: movss xmm0, dword ptr [esp + 0x44]
0056e778: or byte ptr [eax + 0x1dc], 0x38
0056e77f: and byte ptr [eax + 0x1dc], 0xfb
0056e786: mulss xmm0, dword ptr [0xec704c]
0056e78e: divss xmm2, xmm0
0056e792: lea edi, [eax + 0xc0]
0056e798: mov ecx, 0x10
0056e79d: lea esi, [esp + 0x70]
0056e7a1: movss dword ptr [esp + 0x70], xmm2
0056e7a7: rep movsd dword ptr es:[edi], dword ptr [esi]
0056e7a9: .byte 0x8b
0056e7aa: add eax, 0

16over9 data0xed0090 operand0x5d38e9 candidate-start0x5d37b0
005d37b0: push ebp
005d37b1: mov ebp, esp
005d37b3: and esp, 0xfffffff0
005d37b6: sub esp, 0x68
005d37b9: movdqa xmm2, xmmword ptr [0xf1bdb0]
005d37c1: push esi
005d37c2: mov esi, ecx
005d37c4: mov ecx, dword ptr [esi + 0x1f4]
005d37ca: mov eax, dword ptr [esi + 0x1f0]
005d37d0: mov dword ptr [esp + 0x30], ecx
005d37d4: mov ecx, dword ptr [esi + 0x200]
005d37da: movss xmm1, dword ptr [esp + 0x30]
005d37e0: push edi
005d37e1: mov edi, edx
005d37e3: mov edx, dword ptr [esi + 0x1f8]
005d37e9: mov dword ptr [esp + 0x30], eax
005d37ed: mov eax, dword ptr [esi + 0x1fc]
005d37f3: mov dword ptr [esp + 0x38], edx
005d37f7: mov edx, dword ptr [esi + 0x204]
005d37fd: mov dword ptr [esp + 0x40], ecx
005d3801: movss xmm0, dword ptr [esp + 0x40]
005d3807: subss xmm0, dword ptr [esp + 0x30]
005d380d: mov ecx, dword ptr [esi + 0x20c]
005d3813: mov dword ptr [esp + 0x44], edx
005d3817: subss xmm1, dword ptr [esp + 0x44]
005d381d: mov edx, dword ptr [esi + 0x210]
005d3823: movss dword ptr [esp + 0x1c], xmm0
005d3829: divss xmm0, xmm1
005d382d: mov dword ptr [esp + 0x3c], eax
005d3831: mov eax, dword ptr [esi + 0x208]
005d3837: mov dword ptr [esp + 0x48], eax
005d383b: mov eax, dword ptr [esi + 0x214]
005d3841: mov dword ptr [esp + 0x4c], ecx
005d3845: mov ecx, dword ptr [esi + 0x218]
005d384b: shufps xmm0, xmm0, 0
005d384f: mov dword ptr [esp + 0x50], edx
005d3853: mov edx, dword ptr [esi + 0x21c]
005d3859: mov dword ptr [esp + 0x54], eax
005d385d: mov eax, dword ptr [esi + 0x220]
005d3863: andps xmm0, xmm2
005d3866: movss dword ptr [esp + 0x18], xmm1
005d386c: movss xmm1, dword ptr [ebp + 8]
005d3871: divss xmm1, dword ptr [ebp + 0xc]
005d3876: movaps xmmword ptr [esp + 0x20], xmm0
005d387b: movss xmm0, dword ptr [esp + 0x20]
005d3881: mov dword ptr [esp + 0x58], ecx
005d3885: mov ecx, dword ptr [esi + 0x224]
005d388b: mov dword ptr [esp + 0x5c], edx
005d388f: mov edx, dword ptr [esi + 0x228]
005d3895: mov dword ptr [esp + 0x60], eax
005d3899: mov eax, dword ptr [esi + 0x22c]
005d389f: divss xmm0, xmm1
005d38a3: mov dword ptr [esp + 0x64], ecx
005d38a7: mov dword ptr [esp + 0x68], edx
005d38ab: mov dword ptr [esp + 0x6c], eax
005d38af: movss dword ptr [esp + 0x14], xmm0
005d38b5: call 0x6a79b0
005d38ba: movss xmm0, dword ptr [0xec6e14]
005d38c2: movss xmm1, dword ptr [esp + 0x14]
005d38c8: test eax, eax
005d38ca: jne 0x5d3927
005d38cc: comiss xmm0, xmm1
005d38cf: jbe 0x5d395c
005d38d5: movss xmm2, dword ptr [esp + 0x1c]
005d38db: movss xmm3, dword ptr [ebp + 8]
005d38e0: comiss xmm3, xmm2
005d38e3: jb 0x5d3927
005d38e5: movss xmm1, dword ptr [0xed0090]
005d38ed: movss xmm0, dword ptr [esp + 0x18]
005d38f3: mulss xmm0, xmm1
005d38f7: movss dword ptr [esp + 0x14], xmm1
005d38fd: movss xmm1, dword ptr [esp + 0x30]
005d3903: subss xmm0, xmm2
005d3907: mulss xmm0, dword ptr [0xec6fd4]
005d390f: subss xmm1, xmm0
005d3913: addss xmm0, dword ptr [esp + 0x40]
005d3919: movss dword ptr [esp + 0x30], xmm1
005d391f: movss dword ptr [esp + 0x40], xmm0
005d3925: jmp 0x5d399d
005d3927: comiss xmm0, xmm1
005d392a: jbe 0x5d395c
005d392c: subss xmm0, xmm1
005d3930: mulss xmm0, dword ptr [esp + 0x18]
005d3936: mulss xmm0, dword ptr [0xec6fd4]
005d393e: movss xmm1, dword ptr [esp + 0x34]
005d3944: subss xmm1, xmm0
005d3948: .byte 0xf3

16over9 data0xed0090 operand0xb0d34e candidate-start0xb0d230
00b0d230: mov edx, dword ptr [0x1364bc0]
00b0d236: lea ecx, [edx + 1]
00b0d239: cmp ecx, 4
00b0d23c: jg 0xb0d25c
00b0d23e: lea eax, [ecx + ecx*8]
00b0d241: lea eax, [eax*4 + 0x1364be8]
00b0d248: cmp dword ptr [eax], 0
00b0d24b: je 0xb0d25a
00b0d24d: add eax, 0x24
00b0d250: inc ecx
00b0d251: cmp eax, 0x1364c78
00b0d256: jle 0xb0d248
00b0d258: jmp 0xb0d25c
00b0d25a: mov edx, ecx
00b0d25c: test edx, edx
00b0d25e: jle 0xb0d26d
00b0d260: mov eax, edx
00b0d262: cmp edx, 4
00b0d265: jge 0xb0d275
00b0d267: mov dword ptr [0x1364bc0], eax
00b0d26c: ret 
00b0d26d: xor eax, eax
00b0d26f: mov dword ptr [0x1364bc0], eax
00b0d274: ret 
00b0d275: mov dword ptr [0x1364bc0], 4
00b0d27f: ret 
00b0d280: push ebp
00b0d281: mov ebp, esp
00b0d283: and esp, 0xfffffff0
00b0d286: sub esp, 0x4c4
00b0d28c: push ebx
00b0d28d: push esi
00b0d28e: mov esi, ecx
00b0d290: push edi
00b0d291: xor ecx, ecx
00b0d293: call 0xda3670
00b0d298: movzx ecx, word ptr [eax + 0x68]
00b0d29c: movzx edx, word ptr [eax + 0x6a]
00b0d2a0: movss xmm0, dword ptr [0xec6e14]
00b0d2a8: push 0
00b0d2aa: push 0
00b0d2ac: push 0
00b0d2ae: push 0
00b0d2b0: push ecx
00b0d2b1: mov dword ptr [esp + 0x34], ecx
00b0d2b5: mov dword ptr [esp + 0x38], edx
00b0d2b9: movss dword ptr [esp], xmm0
00b0d2be: call 0xdb3e20
00b0d2c3: mov edx, 1
00b0d2c8: mov ecx, eax
00b0d2ca: call 0xdb3d70
00b0d2cf: mov ecx, esi
00b0d2d1: call 0x5614d0
00b0d2d6: test eax, eax
00b0d2d8: jne 0xb0d47e
00b0d2de: mov eax, dword ptr [0x1364bc0]
00b0d2e3: lea eax, [eax + eax*8]
00b0d2e6: mov esi, 0xf789c0
00b0d2eb: lea ecx, [eax*4 + 0x1364bf8]
00b0d2f2: mov dword ptr [esp + 0x1c], esi
00b0d2f6: mov dword ptr [esp + 0x18], ecx
00b0d2fa: mov edx, dword ptr [esp + 0x18]
00b0d2fe: mov ebx, dword ptr [edx]
00b0d300: test ebx, ebx
00b0d302: je 0xb0d466
00b0d308: test byte ptr [ebx], 1
00b0d30b: je 0xb0d466
00b0d311: cmp dword ptr [0x1f98b94], 2
00b0d318: jne 0xb0d466
00b0d31e: mov ecx, 0x10
00b0d323: lea edi, [esp + 0x30]
00b0d327: rep movsd dword ptr es:[edi], dword ptr [esi]
00b0d329: xor ecx, ecx
00b0d32b: call 0xda3670
00b0d330: movzx ecx, word ptr [eax + 0x68]
00b0d334: movzx edx, word ptr [eax + 0x6a]
00b0d338: xorps xmm1, xmm1
00b0d33b: cvtsi2ss xmm1, ecx
00b0d33f: xorps xmm0, xmm0
00b0d342: cvtsi2ss xmm0, edx
00b0d346: divss xmm1, xmm0
00b0d34a: movss xmm0, dword ptr [0xed0090]
00b0d352: divss xmm0, xmm1
00b0d356: movaps xmm1, xmm0
00b0d359: mulss xmm1, dword ptr [esp + 0x40]
00b0d35f: movss dword ptr [esp + 0x40], xmm1
00b0d365: movss xmm1, dword ptr [esp + 0x48]
00b0d36b: divss xmm1, xmm0
00b0d36f: lea ecx, [esp + 0x2a0]
00b0d376: movss dword ptr [esp + 0x48], xmm1
00b0d37c: call 0xd96840
00b0d381: xor edx, edx
00b0d383: lea ecx, [esp + 0x70]
00b0d387: call 0xd98c60
00b0d38c: movss xmm0, dword ptr [esp + 0x60]
00b0d392: push ecx
00b0d393: movss dword ptr [esp], xmm0
00b0d398: lea eax, [esp + 0x54]
00b0d39c: push eax
00b0d39d: lea ecx, [esp + 0x48]
00b0d3a1: push ecx
00b0d3a2: lea edx, [esp + 0x3c]
00b0d3a6: lea ecx, [esp + 0x7c]
00b0d3aa: .byte 0xe8
00b0d3ab: loope 0xb0d33c
00b0d3ad: xchg edx, eax

16over9 data0xed0090 operand0xb2a164 candidate-start0xb2a100
00b2a100: push ebp
00b2a101: mov ebp, esp
00b2a103: and esp, 0xfffffff0
00b2a106: sub esp, 0x4b4
00b2a10c: cmp dword ptr [0x1fd6e20], 2
00b2a113: push ebx
00b2a114: push esi
00b2a115: push edi
00b2a116: mov ebx, ecx
00b2a118: jne 0xb2a279
00b2a11e: mov esi, dword ptr [ebp + 0x10]
00b2a121: test esi, esi
00b2a123: jne 0xb2a130
00b2a125: mov esi, ebx
00b2a127: shl esi, 6
00b2a12a: add esi, 0xf8f0f0
00b2a130: mov ecx, 0x10
00b2a135: lea edi, [esp + 0x20]
00b2a139: rep movsd dword ptr es:[edi], dword ptr [esi]
00b2a13b: test edx, edx
00b2a13d: je 0xb2a18b
00b2a13f: xor ecx, ecx
00b2a141: call 0xda3670
00b2a146: movzx ecx, word ptr [eax + 0x68]
00b2a14a: movzx edx, word ptr [eax + 0x6a]
00b2a14e: xorps xmm1, xmm1
00b2a151: cvtsi2ss xmm1, ecx
00b2a155: xorps xmm0, xmm0
00b2a158: cvtsi2ss xmm0, edx
00b2a15c: divss xmm1, xmm0
00b2a160: movss xmm0, dword ptr [0xed0090]
00b2a168: divss xmm0, xmm1
00b2a16c: movaps xmm1, xmm0
00b2a16f: mulss xmm1, dword ptr [esp + 0x30]
00b2a175: movss dword ptr [esp + 0x30], xmm1
00b2a17b: movss xmm1, dword ptr [esp + 0x38]
00b2a181: divss xmm1, xmm0
00b2a185: movss dword ptr [esp + 0x38], xmm1
00b2a18b: lea ecx, [esp + 0x290]
00b2a192: call 0xd96840
00b2a197: xor edx, edx
00b2a199: lea ecx, [esp + 0x60]
00b2a19d: call 0xd98c60
00b2a1a2: movss xmm0, dword ptr [esp + 0x50]
00b2a1a8: push ecx
00b2a1a9: movss dword ptr [esp], xmm0
00b2a1ae: lea eax, [esp + 0x44]
00b2a1b2: push eax
00b2a1b3: lea ecx, [esp + 0x38]
00b2a1b7: push ecx
00b2a1b8: lea edx, [esp + 0x2c]
00b2a1bc: lea ecx, [esp + 0x6c]
00b2a1c0: .byte 0xe8
00b2a1c1: retf 
00b2a1c2: .byte 0xc1
00b2a1c3: nop 

16over9 data0xed0090 operand0xc85ee5 candidate-start0xc85eb0
00c85eb0: mov eax, dword ptr [0x2028bd4]
00c85eb5: sub esp, 8
00c85eb8: cmp eax, 2
00c85ebb: je 0xc85ec6
00c85ebd: cmp eax, 3
00c85ec0: jne 0xc85f61
00c85ec6: call 0x48ba90
00c85ecb: xorps xmm0, xmm0
00c85ece: cvtsi2ss xmm0, eax
00c85ed2: movss dword ptr [esp], xmm0
00c85ed7: call 0x48bad0
00c85edc: movss xmm2, dword ptr [esp]
00c85ee1: movss xmm1, dword ptr [0xed0090]
00c85ee9: xorps xmm0, xmm0
00c85eec: cvtsi2ss xmm0, eax
00c85ef0: movaps xmm3, xmm2
00c85ef3: divss xmm3, xmm0
00c85ef7: comiss xmm3, xmm1
00c85efa: movss dword ptr [esp + 4], xmm0
00c85f00: jbe 0xc85f0d
00c85f02: mulss xmm0, xmm1
00c85f06: movss dword ptr [esp], xmm0
00c85f0b: jmp 0xc85f1e
00c85f0d: movaps xmm0, xmm2
00c85f10: mulss xmm0, dword ptr [0xfc20d8]
00c85f18: movss dword ptr [esp + 4], xmm0
00c85f1e: call 0x48b4b0
00c85f23: push 0
00c85f25: movss xmm0, dword ptr [esp + 8]
00c85f2b: push 1
00c85f2d: push 0
00c85f2f: push 0
00c85f31: push 0
00c85f33: push 0
00c85f35: push 0
00c85f37: push 1
00c85f39: push eax
00c85f3a: push 0
00c85f3c: push 0xc85e80
00c85f41: sub esp, 8
00c85f44: .byte 0xf3

9over16 data0xfc20d8 operand0xc85f14 candidate-start0xc85eb0
00c85eb0: mov eax, dword ptr [0x2028bd4]
00c85eb5: sub esp, 8
00c85eb8: cmp eax, 2
00c85ebb: je 0xc85ec6
00c85ebd: cmp eax, 3
00c85ec0: jne 0xc85f61
00c85ec6: call 0x48ba90
00c85ecb: xorps xmm0, xmm0
00c85ece: cvtsi2ss xmm0, eax
00c85ed2: movss dword ptr [esp], xmm0
00c85ed7: call 0x48bad0
00c85edc: movss xmm2, dword ptr [esp]
00c85ee1: movss xmm1, dword ptr [0xed0090]
00c85ee9: xorps xmm0, xmm0
00c85eec: cvtsi2ss xmm0, eax
00c85ef0: movaps xmm3, xmm2
00c85ef3: divss xmm3, xmm0
00c85ef7: comiss xmm3, xmm1
00c85efa: movss dword ptr [esp + 4], xmm0
00c85f00: jbe 0xc85f0d
00c85f02: mulss xmm0, xmm1
00c85f06: movss dword ptr [esp], xmm0
00c85f0b: jmp 0xc85f1e
00c85f0d: movaps xmm0, xmm2
00c85f10: mulss xmm0, dword ptr [0xfc20d8]
00c85f18: movss dword ptr [esp + 4], xmm0
00c85f1e: call 0x48b4b0
00c85f23: push 0
00c85f25: movss xmm0, dword ptr [esp + 8]
00c85f2b: push 1
00c85f2d: push 0
00c85f2f: push 0
00c85f31: push 0
00c85f33: push 0
00c85f35: push 0
00c85f37: push 1
00c85f39: push eax
00c85f3a: push 0
00c85f3c: push 0xc85e80
00c85f41: sub esp, 8
00c85f44: movss dword ptr [esp + 4], xmm0
00c85f4a: movss xmm0, dword ptr [esp + 0x34]
00c85f50: xor edx, edx
00c85f52: mov ecx, 0x2028be0
00c85f57: movss dword ptr [esp], xmm0
00c85f5c: call 0x5de460
00c85f61: add esp, 8
00c85f64: ret 
00c85f65: int3 
00c85f66: int3 
00c85f67: int3 
00c85f68: int3 
00c85f69: int3 
00c85f6a: int3 
00c85f6b: int3 
00c85f6c: int3 
00c85f6d: int3 
00c85f6e: int3 
00c85f6f: int3 
00c85f70: .byte 0x83
00c85f71: .byte 0x3d
00c85f72: mov ah, 0x8b

9over16 data0xfc20d8 operand0xd91a1b candidate-start0xd91920
00d91920: push ebp
00d91921: mov ebp, esp
00d91923: and esp, 0xfffffff0
00d91926: sub esp, 0x20
00d91929: movss xmm4, dword ptr [ebp + 8]
00d9192e: movss xmm2, dword ptr [0xec6e14]
00d91936: movss xmm0, xmm4
00d9193a: shufps xmm0, xmm0, 0
00d9193e: andps xmm0, xmmword ptr [0xfd0290]
00d91945: movaps xmmword ptr [esp + 0x10], xmm0
00d9194a: comiss xmm2, dword ptr [esp + 0x10]
00d9194f: jbe 0xd91959
00d91951: movss xmm3, dword ptr [esp + 0x10]
00d91957: jmp 0xd9195c
00d91959: movaps xmm3, xmm2
00d9195c: comiss xmm4, dword ptr [0xf0fc08]
00d91963: movaps xmm1, xmm3
00d91966: mulss xmm1, xmm3
00d9196a: movaps xmm0, xmm1
00d9196d: mulss xmm0, dword ptr [0xfd0320]
00d91975: addss xmm0, dword ptr [0xfd031c]
00d9197d: mulss xmm0, xmm1
00d91981: addss xmm0, dword ptr [0xfd0318]
00d91989: mulss xmm0, xmm1
00d9198d: addss xmm0, dword ptr [0xfd0314]
00d91995: mulss xmm0, xmm1
00d91999: addss xmm0, dword ptr [0xfd0310]
00d919a1: subss xmm2, xmm3
00d919a5: mulss xmm0, xmm1
00d919a9: addss xmm0, dword ptr [0xfd030c]
00d919b1: movaps xmm5, xmm2
00d919b4: mulss xmm5, dword ptr [0xfd0308]
00d919bc: addss xmm5, dword ptr [0xfd0304]
00d919c4: mulss xmm5, xmm2
00d919c8: addss xmm5, dword ptr [0xfd0300]
00d919d0: xorps xmm1, xmm1
00d919d3: mulss xmm5, xmm2
00d919d7: addss xmm5, dword ptr [0xfd02fc]
00d919df: movss xmm1, xmm2
00d919e3: sqrtss xmm1, xmm1
00d919e7: movaps xmmword ptr [esp + 0x10], xmm1
00d919ec: movss xmm1, dword ptr [0xec6fd0]
00d919f4: mulss xmm5, xmm2
00d919f8: addss xmm5, dword ptr [0xfd02f8]
00d91a00: mulss xmm5, dword ptr [esp + 0x10]
00d91a06: mulss xmm0, xmm4
00d91a0a: subss xmm1, xmm5
00d91a0e: jae 0xd91a17
00d91a10: xorps xmm1, xmmword ptr [0xec6fe0]
00d91a17: movss xmm2, dword ptr [0xfc20d8]
00d91a1f: comiss xmm2, xmm3
00d91a22: jb 0xd91a34
00d91a24: movss dword ptr [esp + 0xc], xmm0
00d91a2a: fld dword ptr [esp + 0xc]
00d91a2e: mov esp, ebp
00d91a30: pop ebp
00d91a31: ret 4
00d91a34: movss dword ptr [esp + 0xc], xmm1
00d91a3a: fld dword ptr [esp + 0xc]
00d91a3e: mov esp, ebp
00d91a40: pop ebp
00d91a41: ret 4
00d91a44: int3 
00d91a45: int3 
00d91a46: int3 
00d91a47: int3 
00d91a48: int3 
00d91a49: int3 
00d91a4a: int3 
00d91a4b: int3 
00d91a4c: int3 
00d91a4d: int3 
00d91a4e: int3 
00d91a4f: int3 
00d91a50: push ebp
00d91a51: mov ebp, esp
00d91a53: and esp, 0xfffffff0
00d91a56: sub esp, 0x20
00d91a59: movss xmm4, dword ptr [ebp + 8]
00d91a5e: movdqa xmm1, xmmword ptr [0xfd0290]
00d91a66: movss xmm0, xmm4
00d91a6a: shufps xmm0, xmm0, 0
00d91a6e: andps xmm0, xmm1
00d91a71: movss xmm1, dword ptr [0xec6e14]
00d91a79: .byte 0x0f
00d91a7a: .byte 0x29

9over16 data0xfc20d8 operand0xd91b57 candidate-start0xd91a50
00d91a50: push ebp
00d91a51: mov ebp, esp
00d91a53: and esp, 0xfffffff0
00d91a56: sub esp, 0x20
00d91a59: movss xmm4, dword ptr [ebp + 8]
00d91a5e: movdqa xmm1, xmmword ptr [0xfd0290]
00d91a66: movss xmm0, xmm4
00d91a6a: shufps xmm0, xmm0, 0
00d91a6e: andps xmm0, xmm1
00d91a71: movss xmm1, dword ptr [0xec6e14]
00d91a79: movaps xmmword ptr [esp + 0x10], xmm0
00d91a7e: comiss xmm1, dword ptr [esp + 0x10]
00d91a83: jbe 0xd91a8d
00d91a85: movss xmm2, dword ptr [esp + 0x10]
00d91a8b: jmp 0xd91a90
00d91a8d: movaps xmm2, xmm1
00d91a90: comiss xmm4, dword ptr [0xf0fc08]
00d91a97: movss xmm3, dword ptr [0xec6fd0]
00d91a9f: movaps xmm0, xmm2
00d91aa2: mulss xmm0, xmm2
00d91aa6: movaps xmm5, xmm0
00d91aa9: mulss xmm5, dword ptr [0xfd0320]
00d91ab1: addss xmm5, dword ptr [0xfd031c]
00d91ab9: mulss xmm5, xmm0
00d91abd: addss xmm5, dword ptr [0xfd0318]
00d91ac5: mulss xmm5, xmm0
00d91ac9: addss xmm5, dword ptr [0xfd0314]
00d91ad1: mulss xmm5, xmm0
00d91ad5: addss xmm5, dword ptr [0xfd0310]
00d91add: mulss xmm5, xmm0
00d91ae1: addss xmm5, dword ptr [0xfd030c]
00d91ae9: xorps xmm0, xmm0
00d91aec: subss xmm1, xmm2
00d91af0: movss xmm0, xmm1
00d91af4: sqrtss xmm0, xmm0
00d91af8: movaps xmmword ptr [esp + 0x10], xmm0
00d91afd: movaps xmm0, xmm1
00d91b00: mulss xmm0, dword ptr [0xfd0308]
00d91b08: addss xmm0, dword ptr [0xfd0304]
00d91b10: mulss xmm0, xmm1
00d91b14: addss xmm0, dword ptr [0xfd0300]
00d91b1c: mulss xmm0, xmm1
00d91b20: addss xmm0, dword ptr [0xfd02fc]
00d91b28: mulss xmm0, xmm1
00d91b2c: addss xmm0, dword ptr [0xfd02f8]
00d91b34: mulss xmm0, dword ptr [esp + 0x10]
00d91b3a: mulss xmm5, xmm4
00d91b3e: subss xmm3, xmm5
00d91b42: jae 0xd91b53
00d91b44: movss xmm1, dword ptr [0xec6fd4]
00d91b4c: subss xmm1, xmm0
00d91b50: movaps xmm0, xmm1
00d91b53: movss xmm1, dword ptr [0xfc20d8]
00d91b5b: comiss xmm1, xmm2
00d91b5e: jb 0xd91b70
00d91b60: movss dword ptr [esp + 0xc], xmm3
00d91b66: fld dword ptr [esp + 0xc]
00d91b6a: mov esp, ebp
00d91b6c: pop ebp
00d91b6d: ret 4
00d91b70: movss dword ptr [esp + 0xc], xmm0
00d91b76: fld dword ptr [esp + 0xc]
00d91b7a: mov esp, ebp
00d91b7c: pop ebp
00d91b7d: ret 4
00d91b80: push ebp
00d91b81: mov ebp, esp
00d91b83: and esp, 0xfffffff0
00d91b86: sub esp, 0x30
00d91b89: movaps xmmword ptr [esp + 0x20], xmm0
00d91b8e: movaps xmmword ptr [esp + 0x10], xmm1
00d91b93: movss xmm0, dword ptr [esp + 0x10]
00d91b99: mulss xmm0, dword ptr [0xec6fd4]
00d91ba1: mulss xmm0, dword ptr [0xfd0340]
00d91ba9: push ecx
00d91baa: lea ecx, [esp + 0x10]
00d91bae: movss dword ptr [esp], xmm0
00d91bb3: .byte 0xe8
00d91bb4: mov ah, bh
00d91bb6: .byte 0xff

9over16 data0xfc20d8 operand0xddc435 candidate-start0xddc0f0
00ddc0f0: push ebp
00ddc0f1: mov ebp, esp
00ddc0f3: and esp, 0xfffffff0
00ddc0f6: sub esp, 0xd4
00ddc0fc: push ebx
00ddc0fd: push esi
00ddc0fe: mov ebx, ecx
00ddc100: cmp dword ptr [ebx + 0xc], 0
00ddc104: push edi
00ddc105: mov edi, edx
00ddc107: je 0xddc115
00ddc109: mov eax, 1
00ddc10e: pop edi
00ddc10f: pop esi
00ddc110: pop ebx
00ddc111: mov esp, ebp
00ddc113: pop ebp
00ddc114: ret 
00ddc115: call 0xda3620
00ddc11a: cmp dword ptr [eax + 0x220a8], 0
00ddc121: jne 0xddc153
00ddc123: call 0x4dff60
00ddc128: mov esi, eax
00ddc12a: call 0xda3620
00ddc12f: mov dword ptr [eax + 0x220ac], esi
00ddc135: call 0xda3620
00ddc13a: mov dword ptr [eax + 0x220b0], 2
00ddc144: call 0xda3620
00ddc149: mov dword ptr [eax + 0x220a8], 1
00ddc153: call 0xda3620
00ddc158: cmp dword ptr [eax + 0x220ac], 0
00ddc15f: jne 0xddc179
00ddc161: mov edx, edi
00ddc163: mov ecx, ebx
00ddc165: call 0xddc0a0
00ddc16a: mov eax, 1
00ddc16f: mov dword ptr [ebx + 0xc], eax
00ddc172: pop edi
00ddc173: pop esi
00ddc174: pop ebx
00ddc175: mov esp, ebp
00ddc177: pop ebp
00ddc178: ret 
00ddc179: mov dword ptr [esp + 0x28], 0
00ddc181: call 0xda3620
00ddc186: cmp dword ptr [eax], 0
00ddc189: jle 0xddc194
00ddc18b: xor eax, eax
00ddc18d: pop edi
00ddc18e: pop esi
00ddc18f: pop ebx
00ddc190: mov esp, ebp
00ddc192: pop ebp
00ddc193: ret 
00ddc194: mov edx, edi
00ddc196: mov ecx, ebx
00ddc198: call 0xddc0a0
00ddc19d: push 0x20
00ddc19f: call 0xe1bbb6
00ddc1a4: mov esi, eax
00ddc1a6: mov dword ptr [esp + 0x34], esi
00ddc1aa: test esi, esi
00ddc1ac: je 0xddc59b
00ddc1b2: mov eax, dword ptr [esi]
00ddc1b4: mov ecx, dword ptr [eax + 0x10]
00ddc1b7: push esi
00ddc1b8: call ecx
00ddc1ba: cmp edi, eax
00ddc1bc: jae 0xddc593
00ddc1c2: mov edx, dword ptr [esi]
00ddc1c4: mov ecx, dword ptr [edx + 0x14]
00ddc1c7: lea eax, [ebx + 0x28]
00ddc1ca: push eax
00ddc1cb: push 0
00ddc1cd: push edi
00ddc1ce: push esi
00ddc1cf: call ecx
00ddc1d1: neg eax
00ddc1d3: sbb eax, eax
00ddc1d5: inc eax
00ddc1d6: mov dword ptr [ebx + 0x14], eax
00ddc1d9: mov edx, dword ptr [esi]
00ddc1db: lea eax, [ebx + 0x18]
00ddc1de: push eax
00ddc1df: mov eax, dword ptr [edx + 0x20]
00ddc1e2: push edi
00ddc1e3: push esi
00ddc1e4: call eax
00ddc1e6: test eax, eax
00ddc1e8: jne 0xddc1f3
00ddc1ea: mov dword ptr [ebx + 0x10], 1
00ddc1f1: jmp 0xddc1fa
00ddc1f3: mov dword ptr [ebx + 0x10], 0
00ddc1fa: mov dword ptr [esp + 0x38], ebx
00ddc1fe: mov dword ptr [esp + 0x28], 1
00ddc206: mov dword ptr [esp + 0x20], 0
00ddc20e: xor ecx, ecx
00ddc210: cmp dword ptr [esp + 0x20], 1
00ddc215: mov dword ptr [esp + 0x1c], 0xfd30c8
00ddc21d: sete cl
00ddc220: mov dword ptr [esp + 0x2c], ecx
00ddc224: mov edx, dword ptr [esp + 0x1c]
00ddc228: mov eax, dword ptr [edx]
00ddc22a: mov edx, dword ptr [eax*4 + 0xfd30b0]
00ddc231: mov ecx, dword ptr [esi]
00ddc233: mov ecx, dword ptr [ecx + 0x18]
00ddc236: mov dword ptr [esp + 0x40], eax
00ddc23a: mov eax, dword ptr [ebx + 8]
00ddc23d: push edx
00ddc23e: push eax
00ddc23f: push esi
00ddc240: call ecx
00ddc242: xor edi, edi
00ddc244: mov dword ptr [esp + 0x54], eax
00ddc248: mov dword ptr [esp + 0x30], edi
00ddc24c: test eax, eax
00ddc24e: jle 0xddc56b
00ddc254: mov ecx, dword ptr [esp + 0x40]
00ddc258: mov edx, dword ptr [esi]
00ddc25a: mov edx, dword ptr [edx + 0x1c]
00ddc25d: lea eax, [esp + 0x44]
00ddc261: push eax
00ddc262: mov eax, dword ptr [ecx*4 + 0xfd30b0]
00ddc269: mov ecx, dword ptr [ebx + 8]
00ddc26c: push edi
00ddc26d: push eax
00ddc26e: push ecx
00ddc26f: push esi
00ddc270: call edx
00ddc272: test eax, eax
00ddc274: jne 0xddc55c
00ddc27a: mov eax, dword ptr [ebx + 0x10]
00ddc27d: mov dword ptr [esp + 0x3c], eax
00ddc281: test eax, eax
00ddc283: je 0xddc2a9
00ddc285: mov eax, dword ptr [esp + 0x44]
00ddc289: cmp eax, dword ptr [ebx + 0x18]
00ddc28c: jne 0xddc2a9
00ddc28e: mov ecx, dword ptr [esp + 0x48]
00ddc292: cmp ecx, dword ptr [ebx + 0x1c]
00ddc295: jne 0xddc2a9
00ddc297: mov edx, dword ptr [esp + 0x4c]
00ddc29b: cmp edx, dword ptr [ebx + 0x20]
00ddc29e: jne 0xddc2a9
00ddc2a0: mov eax, dword ptr [esp + 0x50]
00ddc2a4: cmp eax, dword ptr [ebx + 0x24]
00ddc2a7: je 0xddc2b1
00ddc2a9: mov dword ptr [esp + 0x3c], 0
00ddc2b1: mov edi, 0xfd3054
00ddc2b6: mov dword ptr [esp + 0x14], 0xfd30b0
00ddc2be: mov dword ptr [esp + 0x18], edi
00ddc2c2: mov edx, dword ptr [esp + 0x2c]
00ddc2c6: mov eax, dword ptr [esp + 0x14]
00ddc2ca: mov ecx, dword ptr [esi]
00ddc2cc: mov ecx, dword ptr [ecx + 0x24]
00ddc2cf: push edx
00ddc2d0: mov edx, dword ptr [eax]
00ddc2d2: mov eax, dword ptr [esp + 0x44]
00ddc2d6: push edx
00ddc2d7: mov edx, dword ptr [eax*4 + 0xfd30b0]
00ddc2de: mov eax, dword ptr [ebx + 8]
00ddc2e1: push edx
00ddc2e2: push 1
00ddc2e4: push eax
00ddc2e5: push esi
00ddc2e6: call ecx
00ddc2e8: test eax, eax
00ddc2ea: jne 0xddc540
00ddc2f0: mov edx, dword ptr [esp + 0x48]
00ddc2f4: mov ecx, dword ptr [esp + 0x44]
00ddc2f8: mov dword ptr [esp + 0x68], edx
00ddc2fc: mov dword ptr [esp + 0x70], edx
00ddc300: mov edx, dword ptr [edi - 4]
00ddc303: mov dword ptr [esp + 0x64], ecx
00ddc307: mov dword ptr [esp + 0x6c], ecx
00ddc30b: mov ecx, dword ptr [edi]
00ddc30d: mov dword ptr [esp + 0x74], edx
00ddc311: mov edx, dword ptr [esp + 0x4c]
00ddc315: mov dword ptr [esp + 0x5c], eax
00ddc319: mov dword ptr [esp + 0x60], eax
00ddc31d: mov dword ptr [esp + 0x78], ecx
00ddc321: mov ecx, dword ptr [edi + 4]
00ddc324: mov dword ptr [esp + 0x7c], eax
00ddc328: mov dword ptr [esp + 0x80], eax
00ddc32f: mov dword ptr [esp + 0x84], edx
00ddc336: mov edx, dword ptr [edi + 8]
00ddc339: mov dword ptr [esp + 0x8c], eax
00ddc340: mov dword ptr [esp + 0x94], eax
00ddc347: mov dword ptr [esp + 0xa0], eax
00ddc34e: mov dword ptr [esp + 0xa4], eax
00ddc355: mov dword ptr [esp + 0xac], eax
00ddc35c: mov eax, dword ptr [esp + 0x3c]
00ddc360: mov dword ptr [esp + 0x90], ecx
00ddc367: mov ecx, dword ptr [esp + 0x2c]
00ddc36b: mov dword ptr [esp + 0x98], edx
00ddc372: mov edx, dword ptr [ebx + 8]
00ddc375: mov dword ptr [esp + 0xb0], eax
00ddc37c: mov eax, 0x80000000
00ddc381: mov dword ptr [esp + 0x58], 2
00ddc389: mov dword ptr [esp + 0x88], 1
00ddc394: mov dword ptr [esp + 0x9c], ecx
00ddc39b: mov dword ptr [esp + 0xa8], edx
00ddc3a2: mov dword ptr [esp + 0xb4], eax
00ddc3a9: mov dword ptr [esp + 0xb8], eax
00ddc3b0: mov dword ptr [esp + 0x24], 0xfd2fc4
00ddc3b8: mov dword ptr [esp + 0x10], 0xfd2f98
00ddc3c0: mov edx, dword ptr [esp + 0x10]
00ddc3c4: mov eax, dword ptr [edx]
00ddc3c6: mov edx, dword ptr [esp + 0x50]
00ddc3ca: mov ecx, dword ptr [esi]
00ddc3cc: mov ecx, dword ptr [ecx + 0x28]
00ddc3cf: push eax
00ddc3d0: mov eax, dword ptr [ebx + 8]
00ddc3d3: push 1
00ddc3d5: push 2
00ddc3d7: push edx
00ddc3d8: push 1
00ddc3da: push eax
00ddc3db: push esi
00ddc3dc: call ecx
00ddc3de: test eax, eax
00ddc3e0: jne 0xddc525
00ddc3e6: mov eax, dword ptr [esp + 0x10]
00ddc3ea: mov ecx, dword ptr [eax]
00ddc3ec: mov eax, dword ptr [esp + 0x14]
00ddc3f0: mov edx, dword ptr [esi]
00ddc3f2: mov edx, dword ptr [edx + 0x30]
00ddc3f5: push ecx
00ddc3f6: mov ecx, dword ptr [eax]
00ddc3f8: mov eax, dword ptr [esp + 0x54]
00ddc3fc: push ecx
00ddc3fd: mov ecx, dword ptr [ebx + 8]
00ddc400: push eax
00ddc401: push 1
00ddc403: push ecx
00ddc404: push esi
00ddc405: call edx
00ddc407: test eax, eax
00ddc409: jne 0xddc525
00ddc40f: movd xmm1, dword ptr [esp + 0x6c]
00ddc415: movd xmm0, dword ptr [esp + 0x70]
00ddc41b: mov eax, dword ptr [esp + 0x24]
00ddc41f: mov ecx, dword ptr [eax - 4]
00ddc422: mov edx, dword ptr [eax]
00ddc424: cvtdq2ps xmm0, xmm0
00ddc427: cvtdq2ps xmm1, xmm1
00ddc42a: divss xmm1, xmm0
00ddc42e: movaps xmm0, xmm1
00ddc431: mulss xmm0, dword ptr [0xfc20d8]
00ddc439: mulss xmm1, dword ptr [0xec6fc0]
00ddc441: subss xmm0, dword ptr [0xec6e14]
00ddc449: subss xmm1, dword ptr [0xec6e14]
00ddc451: mov dword ptr [esp + 0x7c], ecx
00ddc455: mov ecx, dword ptr [eax + 4]
00ddc458: mov dword ptr [esp + 0x80], edx
00ddc45f: mov edx, dword ptr [eax + 8]
00ddc462: shufps xmm0, xmm0, 0
00ddc466: andps xmm0, xmmword ptr [0xfd2f70]
00ddc46d: shufps xmm1, xmm1, 0
00ddc471: andps xmm1, xmmword ptr [0xfd2f70]
00ddc478: movaps xmmword ptr [esp + 0xc0], xmm0
00ddc480: movaps xmmword ptr [esp + 0xd0], xmm1
00ddc488: movss xmm0, dword ptr [esp + 0xd0]
00ddc491: .byte 0x0f
00ddc492: das 
00ddc493: .byte 0x84
00ddc494: .byte 0x24

9over16 data0xfc20d8 operand0xe0c0c2 candidate-start0xe0bdc0
00e0bdc0: sub esp, 0x28
00e0bdc3: push ebx
00e0bdc4: push ebp
00e0bdc5: push esi
00e0bdc6: mov ebp, ecx
00e0bdc8: push edi
00e0bdc9: lea ecx, [ebp + 0x4dc]
00e0bdcf: mov ebx, edx
00e0bdd1: call 0xda1c90
00e0bdd6: test ebx, ebx
00e0bdd8: je 0xe0be2b
00e0bdda: mov eax, dword ptr [ebx + 8]
00e0bddd: cmp eax, 3
00e0bde0: je 0xe0be19
00e0bde2: lea ecx, [ebp + 0x4d0]
00e0bde8: call 0xda1d90
00e0bded: lea ecx, [ebp + 0x4dc]
00e0bdf3: call 0xda1cb0
00e0bdf8: or edx, 0xffffffff
00e0bdfb: lea ecx, [ebp + 0x4d0]
00e0be01: call 0xda1d00
00e0be06: lea ecx, [ebp + 0x4dc]
00e0be0c: call 0xda1c90
00e0be11: mov ecx, dword ptr [ebx + 8]
00e0be14: cmp ecx, 3
00e0be17: jne 0xe0bde2
00e0be19: pop edi
00e0be1a: pop esi
00e0be1b: lea ecx, [ebp + 0x4dc]
00e0be21: pop ebp
00e0be22: pop ebx
00e0be23: add esp, 0x28
00e0be26: jmp 0xda1cb0
00e0be2b: mov edx, dword ptr [ebp + 0x500]
00e0be31: lea edi, [ebp + 0x500]
00e0be37: cmp edx, edi
00e0be39: je 0xe0be75
00e0be3b: jmp 0xe0be40
00e0be3d: lea ecx, [ecx]
00e0be40: lea ecx, [ebp + 0x4d0]
00e0be46: call 0xda1d90
00e0be4b: lea ecx, [ebp + 0x4dc]
00e0be51: call 0xda1cb0
00e0be56: or edx, 0xffffffff
00e0be59: lea ecx, [ebp + 0x4d0]
00e0be5f: call 0xda1d00
00e0be64: lea ecx, [ebp + 0x4dc]
00e0be6a: call 0xda1c90
00e0be6f: mov eax, dword ptr [edi]
00e0be71: cmp eax, edi
00e0be73: jne 0xe0be40
00e0be75: lea ecx, [ebp + 0x4dc]
00e0be7b: call 0xda1cb0
00e0be80: xor esi, esi
00e0be82: mov dword ptr [esp + 0x10], esi
00e0be86: mov dword ptr [esp + 0x14], esi
00e0be8a: mov dword ptr [esp + 0x18], esi
00e0be8e: lea edx, [esp + 0x10]
00e0be92: mov ecx, ebp
00e0be94: mov dword ptr [esp + 0x1c], 1
00e0be9c: call 0xe0e860
00e0bea1: lea edx, [esp + 0x10]
00e0bea5: mov ecx, ebp
00e0bea7: call 0xe0bdc0
00e0beac: mov ecx, dword ptr [esp + 0x18]
00e0beb0: test ecx, ecx
00e0beb2: je 0xe0beb8
00e0beb4: mov dword ptr [esp + 0x18], esi
00e0beb8: pop edi
00e0beb9: pop esi
00e0beba: pop ebp
00e0bebb: pop ebx
00e0bebc: add esp, 0x28
00e0bebf: ret 
00e0bec0: push ebp
00e0bec1: mov ebp, esp
00e0bec3: and esp, 0xfffffff8
00e0bec6: sub esp, 0xc
00e0bec9: push ebx
00e0beca: push esi
00e0becb: push edi
00e0becc: xor eax, eax
00e0bece: mov edi, ecx
00e0bed0: lea ecx, [edi + 0x538]
00e0bed6: mov dword ptr [esp + 0x10], eax
00e0beda: mov dword ptr [esp + 0x14], eax
00e0bede: mov dword ptr [esp + 0xc], eax
00e0bee2: call 0xdf4390
00e0bee7: mov esi, eax
00e0bee9: test esi, esi
00e0beeb: je 0xe0bf3b
00e0beed: mov ecx, dword ptr [esi + 0x28]
00e0bef0: test ecx, ecx
00e0bef2: je 0xe0bf16
00e0bef4: mov eax, dword ptr [edi + 0x848]
00e0befa: sub eax, ecx
00e0befc: cmp eax, -4
00e0beff: jle 0xe0bf16
00e0bf01: test eax, eax
00e0bf03: jg 0xe0bf16
00e0bf05: cmp dword ptr [esp + 0xc], 0
00e0bf0a: jne 0xe0bf10
00e0bf0c: mov dword ptr [esp + 0xc], esi
00e0bf10: lea edx, [esp + 0x10]
00e0bf14: jmp 0xe0bf23
00e0bf16: mov ecx, esi
00e0bf18: call 0xdbb090
00e0bf1d: lea edx, [edi + 0x540]
00e0bf23: mov ecx, esi
00e0bf25: call 0xdf4380
00e0bf2a: lea ecx, [edi + 0x538]
00e0bf30: call 0xdf4390
00e0bf35: mov esi, eax
00e0bf37: test esi, esi
00e0bf39: jne 0xe0beed
00e0bf3b: mov eax, dword ptr [esp + 0x10]
00e0bf3f: test eax, eax
00e0bf41: je 0xe0bf59
00e0bf43: mov ecx, dword ptr [esp + 0xc]
00e0bf47: mov edx, dword ptr [esp + 0x10]
00e0bf4b: push 0x24
00e0bf4d: push ecx
00e0bf4e: lea ecx, [edi + 0x538]
00e0bf54: call 0xe157d0
00e0bf59: pop edi
00e0bf5a: pop esi
00e0bf5b: pop ebx
00e0bf5c: mov esp, ebp
00e0bf5e: pop ebp
00e0bf5f: ret 
00e0bf60: push ebp
00e0bf61: mov ebp, esp
00e0bf63: and esp, 0xfffffff0
00e0bf66: sub esp, 0x34
00e0bf69: push ebx
00e0bf6a: push esi
00e0bf6b: mov esi, dword ptr [ebp + 8]
00e0bf6e: push edi
00e0bf6f: mov edi, dword ptr [esi + 8]
00e0bf72: add edi, -0x15
00e0bf75: mov ebx, 1
00e0bf7a: xor eax, eax
00e0bf7c: lea ecx, [ebx + 0xf]
00e0bf7f: cmp edi, 0x6b
00e0bf82: ja 0xe0c00a
00e0bf88: movzx edi, byte ptr [edi + 0xe0c1e0]
00e0bf8f: jmp dword ptr [edi*4 + 0xe0c1b8]
00e0bf96: mov dword ptr [esp + 0x10], eax
00e0bf9a: mov dword ptr [esp + 0xc], 0xf
00e0bfa2: jmp 0xe0c01a
00e0bfa4: mov dword ptr [esp + 0x10], ebx
00e0bfa8: mov dword ptr [esp + 0xc], 0xf
00e0bfb0: jmp 0xe0c01a
00e0bfb2: mov dword ptr [esp + 0x10], eax
00e0bfb6: mov dword ptr [esp + 0xc], ecx
00e0bfba: jmp 0xe0c01a
00e0bfbc: mov dword ptr [esp + 0x10], eax
00e0bfc0: jmp 0xe0c012
00e0bfc2: mov dword ptr [esp + 0x10], 2
00e0bfca: mov dword ptr [esp + 0xc], 0x1e
00e0bfd2: jmp 0xe0c01a
00e0bfd4: mov dword ptr [esp + 0x14], ebx
00e0bfd8: mov dword ptr [esp + 0x10], ecx
00e0bfdc: mov dword ptr [esp + 0xc], 0x30
00e0bfe4: jmp 0xe0c01e
00e0bfe6: mov dword ptr [esp + 0x10], ecx
00e0bfea: mov dword ptr [esp + 0xc], 0x30
00e0bff2: jmp 0xe0c01a
00e0bff4: mov dword ptr [esp + 0x14], ebx
00e0bff8: mov dword ptr [esp + 0x10], 0x20
00e0c000: mov dword ptr [esp + 0xc], 0x60
00e0c008: jmp 0xe0c01e
00e0c00a: mov dword ptr [esp + 0x10], 8
00e0c012: mov dword ptr [esp + 0xc], 0x18
00e0c01a: mov dword ptr [esp + 0x14], eax
00e0c01e: mov edi, dword ptr [esi + 0x28]
00e0c021: add edi, -0x47
00e0c024: cmp edi, 0xc
00e0c027: ja 0xe0c07a
00e0c029: jmp dword ptr [edi*4 + 0xe0c24c]
00e0c030: mov dword ptr [esp + 0x18], ebx
00e0c034: mov eax, 8
00e0c039: jmp 0xe0c07e
00e0c03b: mov dword ptr [esp + 0x18], eax
00e0c03f: mov eax, 8
00e0c044: jmp 0xe0c07e
00e0c046: mov dword ptr [esp + 0x18], eax
00e0c04a: mov eax, 4
00e0c04f: jmp 0xe0c07e
00e0c051: mov dword ptr [esp + 0x18], ebx
00e0c055: mov ecx, 0x20
00e0c05a: jmp 0xe0c083
00e0c05c: mov dword ptr [esp + 0x18], eax
00e0c060: mov ecx, 0x20
00e0c065: jmp 0xe0c083
00e0c067: mov dword ptr [esp + 0x18], eax
00e0c06b: jmp 0xe0c083
00e0c06d: mov dword ptr [esp + 0x18], eax
00e0c071: mov eax, ebx
00e0c073: mov ecx, 0xf
00e0c078: jmp 0xe0c083
00e0c07a: mov dword ptr [esp + 0x18], eax
00e0c07e: mov ecx, 0x18
00e0c083: mov ebx, dword ptr [esi]
00e0c085: mov edi, dword ptr [esi + 4]
00e0c088: mov dword ptr [esp + 0x1c], ebx
00e0c08c: cmp ebx, edi
00e0c08e: ja 0xe0c098
00e0c090: mov dword ptr [esp + 0x1c], edi
00e0c094: jae 0xe0c098
00e0c096: mov edi, ebx
00e0c098: mov ebx, dword ptr [esp + 0x1c]
00e0c09c: fild dword ptr [esp + 0x1c]
00e0c0a0: test ebx, ebx
00e0c0a2: jns 0xe0c0aa
00e0c0a4: fadd dword ptr [0xec74c8]
00e0c0aa: mov dword ptr [esp + 0x1c], edi
00e0c0ae: fild dword ptr [esp + 0x1c]
00e0c0b2: test edi, edi
00e0c0b4: jns 0xe0c0bc
00e0c0b6: fadd dword ptr [0xec74c8]
00e0c0bc: fdivp st(1)
00e0c0be: xor edi, edi
00e0c0c0: fld dword ptr [0xfc20d8]
00e0c0c6: fmul st(1)
00e0c0c8: fld1 
00e0c0ca: fsub st(1), st(0)
00e0c0cc: fxch st(1)
00e0c0ce: fstp dword ptr [esp + 0x1c]
00e0c0d2: movss xmm0, dword ptr [esp + 0x1c]
00e0c0d8: fxch st(1)
00e0c0da: fmul dword ptr [0xec6fc0]
00e0c0e0: shufps xmm0, xmm0, 0
00e0c0e4: andps xmm0, xmmword ptr [0xfdf1e0]
00e0c0eb: movaps xmmword ptr [esp + 0x30], xmm0
00e0c0f0: fsubrp st(1)
00e0c0f2: fstp dword ptr [esp + 0x1c]
00e0c0f6: movss xmm0, dword ptr [esp + 0x1c]
00e0c0fc: shufps xmm0, xmm0, 0
00e0c100: andps xmm0, xmmword ptr [0xfdf1e0]
00e0c107: movaps xmmword ptr [esp + 0x20], xmm0
00e0c10c: movss xmm0, dword ptr [esp + 0x20]
00e0c112: comiss xmm0, dword ptr [esp + 0x30]
00e0c117: mov dword ptr [esp + 0x1c], 1
00e0c11f: ja 0xe0c125
00e0c121: .byte 0x89

4over3 data0xee414c operand0x4dfb4b candidate-start0x4dfab0
004dfab0: sub esp, 8
004dfab3: push esi
004dfab4: push edi
004dfab5: mov edi, eax
004dfab7: xor esi, esi
004dfab9: lea esp, [esp]
004dfac0: mov eax, 1
004dfac5: mov ecx, esi
004dfac7: shl eax, cl
004dfac9: test dword ptr [edi + 0x1aac], eax
004dfacf: je 0x4dfaf0
004dfad1: mov eax, dword ptr [edi + 0x1ab4]
004dfad7: test eax, eax
004dfad9: je 0x4dfae5
004dfadb: mov edx, esi
004dfadd: mov ecx, edi
004dfadf: call eax
004dfae1: test eax, eax
004dfae3: je 0x4dfaf0
004dfae5: mov ecx, esi
004dfae7: call 0x55fe00
004dfaec: test eax, eax
004dfaee: jne 0x4dfb05
004dfaf0: inc esi
004dfaf1: cmp esi, 0xa
004dfaf4: jl 0x4dfac0
004dfaf6: pop edi
004dfaf7: mov ecx, 0x1c35800
004dfafc: pop esi
004dfafd: add esp, 8
004dfb00: jmp 0x699100
004dfb05: lea ecx, [esi + esi*2 + 0x1ad]
004dfb0c: add ecx, ecx
004dfb0e: movss xmm0, dword ptr [edi + ecx*8]
004dfb13: lea edx, [esi + esi*2]
004dfb16: add edx, edx
004dfb18: movss dword ptr [esp + 8], xmm0
004dfb1e: movss xmm0, dword ptr [edi + edx*8 + 0x1ad4]
004dfb27: push ebx
004dfb28: movss dword ptr [esp + 0x10], xmm0
004dfb2e: call 0xda3a90
004dfb33: movd xmm1, dword ptr [eax + 0x14]
004dfb38: movd xmm0, dword ptr [eax + 0x18]
004dfb3d: cvtdq2ps xmm0, xmm0
004dfb40: cvtdq2ps xmm1, xmm1
004dfb43: divss xmm1, xmm0
004dfb47: movss xmm0, dword ptr [0xee414c]
004dfb4f: divss xmm0, xmm1
004dfb53: movss xmm1, dword ptr [esp + 0xc]
004dfb59: subss xmm1, dword ptr [0xec6fd4]
004dfb61: mulss xmm0, xmm1
004dfb65: addss xmm0, dword ptr [0xec6fd4]
004dfb6d: xor edx, edx
004dfb6f: mov ecx, esi
004dfb71: movss dword ptr [esp + 0xc], xmm0
004dfb77: call 0x5875c0
004dfb7c: xor edx, edx
004dfb7e: mov ecx, esi
004dfb80: mov edi, eax
004dfb82: call 0x587650
004dfb87: mov ecx, esi
004dfb89: mov ebx, eax
004dfb8b: call 0xaa11b0
004dfb90: test eax, eax
004dfb92: je 0x4dfba8
004dfb94: test edi, 0x10000000
004dfb9a: jne 0x4dfba8
004dfb9c: test ebx, 0x10000000
004dfba2: jne 0x4dfba8
004dfba4: xor eax, eax
004dfba6: jmp 0x4dfbad
004dfba8: .byte 0xb8
004dfba9: add dword ptr [eax], eax

4over3 data0xee414c operand0x56e757 candidate-start0x56e4d0
0056e4d0: push ebp
0056e4d1: mov ebp, esp
0056e4d3: and esp, 0xfffffff0
0056e4d6: sub esp, 0x124
0056e4dc: mov ecx, dword ptr [0x10d2d40]
0056e4e2: push ebx
0056e4e3: mov ebx, dword ptr [ebp + 8]
0056e4e6: push esi
0056e4e7: push edi
0056e4e8: call 0x6a7d90
0056e4ed: cmp dword ptr [ebx + 0x124], 0
0056e4f4: movss xmm0, dword ptr [0xec6e14]
0056e4fc: movss dword ptr [esp + 0xac], xmm0
0056e505: xorps xmm0, xmm0
0056e508: movss dword ptr [esp + 0x7c], xmm0
0056e50e: movss dword ptr [esp + 0x8c], xmm0
0056e517: movss dword ptr [esp + 0x9c], xmm0
0056e520: movss dword ptr [esp + 0x74], xmm0
0056e526: movss dword ptr [esp + 0x78], xmm0
0056e52c: movss dword ptr [esp + 0x80], xmm0
0056e535: movss dword ptr [esp + 0x88], xmm0
0056e53e: movss dword ptr [esp + 0x90], xmm0
0056e547: movss dword ptr [esp + 0x94], xmm0
0056e550: movss xmm0, dword ptr [0xec6ff0]
0056e558: movss dword ptr [esp + 0x84], xmm0
0056e561: movss dword ptr [esp + 0x98], xmm0
0056e56a: je 0x56e5c1
0056e56c: lea ecx, [ebx + 0x130]
0056e572: call 0x55c7d0
0056e577: xorps xmm2, xmm2
0056e57a: movss xmm3, dword ptr [0xec6fd4]
0056e582: xorps xmm0, xmm0
0056e585: cvtsi2ss xmm0, eax
0056e589: mov eax, dword ptr [ebx + 0xc0]
0056e58f: movss xmm1, dword ptr [eax + 0x20]
0056e594: addss xmm1, dword ptr [ebx + 0x74]
0056e599: mulss xmm0, dword ptr [0xec90b0]
0056e5a1: movss dword ptr [esp + 0xa0], xmm2
0056e5aa: movss dword ptr [esp + 0xa4], xmm1
0056e5b3: movss dword ptr [esp + 0xa8], xmm2
0056e5bc: jmp 0x56e6b5
0056e5c1: mov ecx, dword ptr [0x10d2d40]
0056e5c7: call 0x55c7d0
0056e5cc: movss xmm1, dword ptr [0xf0d8f4]
0056e5d4: movss xmm3, dword ptr [0xec6fd4]
0056e5dc: xorps xmm2, xmm2
0056e5df: movss dword ptr [esp + 0xa0], xmm1
0056e5e8: movss xmm1, dword ptr [0xf09bf8]
0056e5f0: xorps xmm0, xmm0
0056e5f3: movss dword ptr [esp + 0xa4], xmm1
0056e5fc: cvtsi2ss xmm0, eax
0056e600: mulss xmm0, dword ptr [0xec90b0]
0056e608: divss xmm0, dword ptr [0x10d4258]
0056e610: movaps xmm1, xmm0
0056e613: mulss xmm1, xmm3
0056e617: mulss xmm1, dword ptr [0xec9490]
0056e61f: mulss xmm1, dword ptr [0xec704c]
0056e627: mulss xmm1, dword ptr [0xec948c]
0056e62f: comiss xmm2, xmm1
0056e632: jbe 0x56e63a
0056e634: subss xmm1, xmm3
0056e638: jmp 0x56e63e
0056e63a: addss xmm1, xmm3
0056e63e: movss dword ptr [esp + 0x1c], xmm1
0056e644: cvttss2si eax, dword ptr [esp + 0x1c]
0056e64a: xorps xmm1, xmm1
0056e64d: cvtsi2ss xmm1, eax
0056e651: movss dword ptr [esp + 0x18], xmm1
0056e657: cvttss2si eax, dword ptr [esp + 0x18]
0056e65d: xorps xmm1, xmm1
0056e660: cvtsi2ss xmm1, eax
0056e664: mulss xmm1, dword ptr [0xec6f80]
0056e66c: movss dword ptr [esp + 0x18], xmm1
0056e672: fld dword ptr [esp + 0x18]
0056e676: fsin 
0056e678: fstp dword ptr [esp + 0x1c]
0056e67c: movss xmm4, dword ptr [esp + 0x1c]
0056e682: movss dword ptr [esp + 0x6c], xmm1
0056e688: fld dword ptr [esp + 0x6c]
0056e68c: fcos 
0056e68e: fstp dword ptr [esp + 0x18]
0056e692: divss xmm4, dword ptr [esp + 0x18]
0056e698: movss xmm1, dword ptr [0xf0da34]
0056e6a0: divss xmm1, xmm4
0056e6a4: addss xmm1, dword ptr [0xec9470]
0056e6ac: movss dword ptr [esp + 0xa8], xmm1
0056e6b5: mulss xmm0, dword ptr [0xec9490]
0056e6bd: mulss xmm0, dword ptr [0xec704c]
0056e6c5: mulss xmm0, dword ptr [0xec948c]
0056e6cd: comiss xmm2, xmm0
0056e6d0: jbe 0x56e6d8
0056e6d2: subss xmm0, xmm3
0056e6d6: jmp 0x56e6dc
0056e6d8: addss xmm0, xmm3
0056e6dc: movss dword ptr [esp + 0x18], xmm0
0056e6e2: cvttss2si eax, dword ptr [esp + 0x18]
0056e6e8: mov ecx, dword ptr [0x10d2d40]
0056e6ee: push 1
0056e6f0: mov edx, eax
0056e6f2: call 0xd97140
0056e6f7: mov edx, dword ptr [0x10d2d40]
0056e6fd: lea eax, [esp + 0x40]
0056e701: lea ecx, [edx + 0x1f0]
0056e707: mov esi, eax
0056e709: sub ecx, esi
0056e70b: jmp 0x56e710
0056e70d: lea ecx, [ecx]
0056e710: mov esi, dword ptr [ecx + eax]
0056e713: mov dword ptr [eax], esi
0056e715: add eax, 4
0056e718: lea esi, [esp + 0x60]
0056e71c: cmp eax, esi
0056e71e: jb 0x56e710
0056e720: lea ecx, [edx + 0x210]
0056e726: lea eax, [esp + 0x20]
0056e72a: mov edx, eax
0056e72c: sub ecx, edx
0056e72e: mov edi, edi
0056e730: mov edx, dword ptr [ecx + eax]
0056e733: mov dword ptr [eax], edx
0056e735: add eax, 4
0056e738: lea edx, [esp + 0x40]
0056e73c: cmp eax, edx
0056e73e: jb 0x56e730
0056e740: call 0x6a79b0
0056e745: test eax, eax
0056e747: je 0x56e753
0056e749: movss xmm0, dword ptr [0xed0090]
0056e751: jmp 0x56e75b
0056e753: movss xmm0, dword ptr [0xee414c]
0056e75b: movss xmm2, dword ptr [esp + 0x50]
0056e761: mov eax, dword ptr [0x10d2d40]
0056e766: mulss xmm2, dword ptr [0xec704c]
0056e76e: divss xmm2, xmm0
0056e772: movss xmm0, dword ptr [esp + 0x44]
0056e778: or byte ptr [eax + 0x1dc], 0x38
0056e77f: and byte ptr [eax + 0x1dc], 0xfb
0056e786: mulss xmm0, dword ptr [0xec704c]
0056e78e: divss xmm2, xmm0
0056e792: lea edi, [eax + 0xc0]
0056e798: mov ecx, 0x10
0056e79d: lea esi, [esp + 0x70]
0056e7a1: movss dword ptr [esp + 0x70], xmm2
0056e7a7: rep movsd dword ptr es:[edi], dword ptr [esi]
0056e7a9: mov eax, dword ptr [ebx + 0xc0]
0056e7af: movss xmm0, dword ptr [esp + 0x50]
0056e7b5: .byte 0xf3
0056e7b6: .byte 0x0f

4over3 data0xee414c operand0x6a7c98 candidate-start0x6a7c50
006a7c50: push ecx
006a7c51: movss xmm0, dword ptr [ecx]
006a7c55: movss dword ptr [esp], xmm0
006a7c5a: call 0xda3a90
006a7c5f: xor edx, edx
006a7c61: mov dword ptr [0x1c3610c], edx
006a7c67: mov dword ptr [0x1c36110], edx
006a7c6d: cmp eax, edx
006a7c6f: je 0x6a7cab
006a7c71: mov ecx, dword ptr [eax + 0x10]
006a7c74: push ebx
006a7c75: xor ebx, ebx
006a7c77: cmp ecx, dword ptr [eax + 0xc]
006a7c7a: setg bl
006a7c7d: mov ecx, ebx
006a7c7f: mov dword ptr [0x1c36110], ecx
006a7c85: pop ebx
006a7c86: cmp dword ptr [eax + 0x34], edx
006a7c89: je 0x6a7cb0
006a7c8b: cmp ecx, edx
006a7c8d: jne 0x6a7cb0
006a7c8f: movss xmm0, dword ptr [esp]
006a7c94: mulss xmm0, dword ptr [0xee414c]
006a7c9c: mov dword ptr [0x1c3610c], 1
006a7ca6: movss dword ptr [esp], xmm0
006a7cab: fld dword ptr [esp]
006a7cae: pop ecx
006a7caf: ret 
006a7cb0: mov dword ptr [0x1c3610c], edx
006a7cb6: fld dword ptr [esp]
006a7cb9: pop ecx
006a7cba: ret 
006a7cbb: sbb ah, cl
006a7cbd: int3 
006a7cbe: int3 
006a7cbf: int3 
006a7cc0: push esi
006a7cc1: mov esi, ecx
006a7cc3: call 0xda3a90
006a7cc8: xor edx, edx
006a7cca: mov dword ptr [0x1c3610c], edx
006a7cd0: mov dword ptr [0x1c36110], edx
006a7cd6: cmp eax, edx
006a7cd8: je 0x6a7d18
006a7cda: mov ecx, dword ptr [eax + 0x10]
006a7cdd: push ebx
006a7cde: xor ebx, ebx
006a7ce0: cmp ecx, dword ptr [eax + 0xc]
006a7ce3: setg bl
006a7ce6: mov ecx, ebx
006a7ce8: mov dword ptr [0x1c36110], ecx
006a7cee: pop ebx
006a7cef: cmp dword ptr [eax + 0x34], edx
006a7cf2: je 0x6a7d12
006a7cf4: cmp ecx, edx
006a7cf6: jne 0x6a7d12

4over3 data0xee414c operand0x9b00fc candidate-start0x9affe0
009affe0: push ebp
009affe1: mov ebp, esp
009affe3: and esp, 0xfffffff0
009affe6: sub esp, 0x24
009affe9: push ebx
009affea: push esi
009affeb: push edi
009affec: mov edi, ecx
009affee: mov esi, dword ptr [edi + 0x18]
009afff1: mov eax, dword ptr [esi + 0xf0]
009afff7: and eax, 0x4000000
009afffc: xor ecx, ecx
009afffe: or eax, ecx
009b0000: je 0x9b001d
009b0002: mov ecx, esi
009b0004: call 0x9a8820
009b0009: cmp dword ptr [eax + 4], 0
009b000d: jne 0x9b001d
009b000f: mov ecx, esi
009b0011: call 0x9a8820
009b0016: mov dword ptr [eax + 4], 1
009b001d: call 0x8d72c0
009b0022: test eax, eax
009b0024: je 0x9b0133
009b002a: mov eax, dword ptr [esi + 0xf0]
009b0030: and eax, 0x4000000
009b0035: xor ecx, ecx
009b0037: or eax, ecx
009b0039: je 0x9b0133
009b003f: call 0x8da800
009b0044: mov esi, eax
009b0046: mov ecx, esi
009b0048: call 0x4c7650
009b004d: cmp eax, 1
009b0050: jne 0x9b0133
009b0056: mov ebx, dword ptr [edi + 0x20]
009b0059: mov ecx, esi
009b005b: call 0x8d7b40
009b0060: mov esi, eax
009b0062: lea edx, [esp + 0x10]
009b0066: mov ecx, esi
009b0068: call 0x8d7350
009b006d: movss xmm0, dword ptr [esp + 0x18]
009b0073: test esi, esi
009b0075: jne 0x9b0081
009b0077: subss xmm0, dword ptr [0xf4cea4]
009b007f: jmp 0x9b0089
009b0081: addss xmm0, dword ptr [0xf4cea4]
009b0089: movss xmm2, dword ptr [0xec98e8]
009b0091: movss dword ptr [esp + 0x18], xmm0
009b0097: movaps xmm1, xmmword ptr [ebx + 0x30]
009b009b: movaps xmmword ptr [esp + 0x20], xmm1
009b00a0: subss xmm0, dword ptr [esp + 0x28]
009b00a6: movss xmm1, dword ptr [esp + 0x20]
009b00ac: movss dword ptr [esp + 0x10], xmm1
009b00b2: movdqa xmm1, xmmword ptr [0xf4df70]
009b00ba: shufps xmm0, xmm0, 0
009b00be: andps xmm0, xmm1
009b00c1: movaps xmmword ptr [esp + 0x20], xmm0
009b00c6: movss xmm0, dword ptr [esp + 0x20]
009b00cc: subss xmm0, xmm2
009b00d0: shufps xmm0, xmm0, 0
009b00d4: andps xmm0, xmm1
009b00d7: movaps xmmword ptr [esp + 0x20], xmm0
009b00dc: comiss xmm2, dword ptr [esp + 0x20]
009b00e1: jbe 0x9b0133
009b00e3: movss xmm0, dword ptr [esp + 0x20]
009b00e9: xorps xmm0, xmmword ptr [0xec6fe0]
009b00f0: mulss xmm0, dword ptr [0xf4e1c0]
009b00f8: addss xmm0, dword ptr [0xee414c]
009b0100: movss xmm1, dword ptr [0xec6e14]
009b0108: comiss xmm0, xmm1
009b010b: ja 0x9b0115
009b010d: xorps xmm1, xmm1
009b0110: comiss xmm1, xmm0
009b0113: jbe 0x9b0118
009b0115: movaps xmm0, xmm1
009b0118: push 1
009b011a: push 0
009b011c: push ecx
009b011d: lea eax, [esp + 0x1c]
009b0121: movss dword ptr [esp], xmm0
009b0126: push eax
009b0127: mov edx, 1
009b012c: mov ecx, edi
009b012e: call 0x7ee4f0
009b0133: pop edi
009b0134: pop esi
009b0135: pop ebx
009b0136: mov esp, ebp
009b0138: pop ebp
009b0139: ret 
009b013a: int3 
009b013b: int3 
009b013c: int3 
009b013d: int3 
009b013e: int3 
009b013f: int3 
009b0140: mov eax, dword ptr [ecx + 0x18]
009b0143: and dword ptr [eax + 0xf0], 0xfdffffff
009b014d: and dword ptr [eax + 0x2c], 0xfffffffe
009b0151: push esi
009b0152: mov esi, dword ptr [eax + 0xf4]
009b0158: .byte 0x89
009b0159: mov al, 0xf4
009b015b: .byte 0x00

4over3 data0xee414c operand0xa5c740 candidate-start0xa5c720
00a5c720: sub esp, 0xc
00a5c723: mov ecx, edi
00a5c725: call 0xcc9aa0
00a5c72a: fsub dword ptr [0xec6fd0]
00a5c730: movss xmm1, dword ptr [0xed59c8]
00a5c738: fmul dword ptr [0xed59c8]
00a5c73e: fmul dword ptr [0xee414c]
00a5c744: fst dword ptr [esp]
00a5c747: fldz 
00a5c749: fcompi st(1)
00a5c74b: fstp st(0)
00a5c74d: jbe 0xa5c754
00a5c74f: xorps xmm0, xmm0
00a5c752: jmp 0xa5c761
00a5c754: movss xmm0, dword ptr [esp]
00a5c759: comiss xmm1, xmm0
00a5c75c: ja 0xa5c761
00a5c75e: movaps xmm0, xmm1
00a5c761: push ebx
00a5c762: push ebp
00a5c763: push esi
00a5c764: cvttss2si esi, xmm0
00a5c768: add esi, esi
00a5c76a: xor edx, edx
00a5c76c: mov ecx, edi
00a5c76e: add esi, esi
00a5c770: mov ebp, 4
00a5c775: call 0x604d50
00a5c77a: lea edx, [ebp - 3]
00a5c77d: mov ecx, edi
00a5c77f: mov ebx, eax
00a5c781: call 0x604d50
00a5c786: add eax, ebx
00a5c788: test eax, eax
00a5c78a: jle 0xa5c7db
00a5c78c: xorps xmm2, xmm2
00a5c78f: xorps xmm0, xmm0
00a5c792: cvtsi2ss xmm0, ebx
00a5c796: xorps xmm1, xmm1
00a5c799: cvtsi2ss xmm1, eax
00a5c79d: .byte 0xf3
00a5c79e: .byte 0x0f
00a5c79f: pop esi

4over3 data0xee414c operand0xb271c0 candidate-start0xb271a0
00b271a0: sub esp, 0x10
00b271a3: mov ecx, edi
00b271a5: call 0xcc9ac0
00b271aa: fsub dword ptr [0xec6fd0]
00b271b0: movss xmm1, dword ptr [0xed59c8]
00b271b8: fmul dword ptr [0xed59c8]
00b271be: fmul dword ptr [0xee414c]
00b271c4: fst dword ptr [esp + 4]
00b271c8: fldz 
00b271ca: fcompi st(1)
00b271cc: fstp st(0)
00b271ce: jbe 0xb271d5
00b271d0: xorps xmm0, xmm0
00b271d3: jmp 0xb271e3
00b271d5: movss xmm0, dword ptr [esp + 4]
00b271db: comiss xmm1, xmm0
00b271de: ja 0xb271e3
00b271e0: movaps xmm0, xmm1
00b271e3: movss xmm1, dword ptr [0xec704c]
00b271eb: push ebx
00b271ec: mulss xmm0, xmm1
00b271f0: push esi
00b271f1: movss dword ptr [esp + 8], xmm0
00b271f7: movss dword ptr [esp + 0xc], xmm1
00b271fd: call 0x60dcb0
00b27202: mov esi, eax
00b27204: test esi, esi
00b27206: je 0xb2733d
00b2720c: push 1
00b2720e: push 0x4e
00b27210: mov edx, edi
00b27212: mov ecx, esi
00b27214: call 0x609620
00b27219: call 0xe22fa0
00b2721e: push 1

4over3 data0xee414c operand0xc85c8b candidate-start0xc85b70
00c85b70: sub esp, 0x10
00c85b73: push ebp
00c85b74: push esi
00c85b75: mov ebp, edx
00c85b77: call 0x48ba90
00c85b7c: xorps xmm0, xmm0
00c85b7f: cvtsi2ss xmm0, eax
00c85b83: movss dword ptr [esp + 8], xmm0
00c85b89: call 0x48bad0
00c85b8e: movss xmm0, dword ptr [esp + 8]
00c85b94: mov esi, dword ptr [esp + 0x24]
00c85b98: mov ecx, dword ptr [esi + 0xc]
00c85b9b: xorps xmm1, xmm1
00c85b9e: cvtsi2ss xmm1, eax
00c85ba2: lea eax, [esp + 0x10]
00c85ba6: divss xmm0, xmm1
00c85baa: push eax
00c85bab: mov edx, 0x64d20921
00c85bb0: movss dword ptr [esp + 0xc], xmm0
00c85bb6: call 0x69e170
00c85bbb: test eax, eax
00c85bbd: je 0xc85c63
00c85bc3: lea ecx, [esp + 0xc]
00c85bc7: push ecx
00c85bc8: mov ecx, dword ptr [esi + 0xc]
00c85bcb: mov edx, 0x7573d691
00c85bd0: call 0x69e120
00c85bd5: test eax, eax
00c85bd7: je 0xc85c63
00c85bdd: mov ecx, dword ptr [esp + 0xc]
00c85be1: push edi
00c85be2: xor esi, esi
00c85be4: call 0xc6ddc0
00c85be9: mov edi, eax
00c85beb: test edi, edi
00c85bed: je 0xc85c4e
00c85bef: mov ecx, edi
00c85bf1: call 0xc6de10
00c85bf6: cmp eax, 2
00c85bf9: jne 0xc85c4e
00c85bfb: push ebx
00c85bfc: xor edx, edx
00c85bfe: mov ecx, edi
00c85c00: call 0xc6e2b0
00c85c05: lea edx, [esi + 1]
00c85c08: mov ecx, edi
00c85c0a: mov ebx, eax
00c85c0c: call 0xc6e2b0
00c85c11: mov ecx, dword ptr [esp + 0x18]
00c85c15: cmp ecx, 0x66d0def
00c85c1b: je 0xc85c44
00c85c1d: cmp ecx, 0xd1e4a3ee
00c85c23: jne 0xc85c4d
00c85c25: xor edx, edx
00c85c27: cmp ebx, eax
00c85c29: setg dl
00c85c2c: pop ebx
00c85c2d: pop edi
00c85c2e: mov eax, 1
00c85c33: mov esi, edx
00c85c35: neg esi
00c85c37: sbb esi, esi
00c85c39: mov dword ptr [ebp + 0x14], esi
00c85c3c: pop esi
00c85c3d: pop ebp
00c85c3e: add esp, 0x10
00c85c41: ret 0xc
00c85c44: xor ecx, ecx
00c85c46: cmp ebx, eax
00c85c48: setl cl
00c85c4b: mov esi, ecx
00c85c4d: pop ebx
00c85c4e: neg esi
00c85c50: sbb esi, esi
00c85c52: pop edi
00c85c53: mov dword ptr [ebp + 0x14], esi
00c85c56: pop esi
00c85c57: mov eax, 1
00c85c5c: pop ebp
00c85c5d: add esp, 0x10
00c85c60: ret 0xc
00c85c63: mov ecx, dword ptr [esi + 0xc]
00c85c66: lea edx, [esp + 0x14]
00c85c6a: push edx
00c85c6b: mov edx, 0xf976d8a2
00c85c70: call 0x69e120
00c85c75: test eax, eax
00c85c77: je 0xc85c98
00c85c79: mov eax, dword ptr [esp + 0x14]
00c85c7d: cmp eax, 1
00c85c80: jne 0xc85ca2
00c85c82: movss xmm0, dword ptr [esp + 8]
00c85c88: comiss xmm0, dword ptr [0xee414c]
00c85c8f: ja 0xc85cb5
00c85c91: mov dword ptr [ebp + 0x14], 0
00c85c98: pop esi
00c85c99: xor eax, eax
00c85c9b: pop ebp
00c85c9c: add esp, 0x10
00c85c9f: ret 0xc
00c85ca2: test eax, eax
00c85ca4: jne 0xc85c91
00c85ca6: movss xmm0, dword ptr [0xee414c]
00c85cae: comiss xmm0, dword ptr [esp + 8]
00c85cb3: jb 0xc85c91
00c85cb5: mov ecx, 0x2028be0
00c85cba: call 0x5de6b0
00c85cbf: mov esi, eax
00c85cc1: push esi
00c85cc2: mov edx, 0xb6e7ae40
00c85cc7: mov ecx, ebp
00c85cc9: call 0xdcd7a0
00c85cce: neg esi
00c85cd0: sbb esi, esi
00c85cd2: mov dword ptr [ebp + 0x14], esi
00c85cd5: pop esi
00c85cd6: xor eax, eax
00c85cd8: pop ebp
00c85cd9: add esp, 0x10
00c85cdc: ret 0xc
00c85cdf: int3 
00c85ce0: cmp dword ptr [0x2028bb4], 0
00c85ce7: jne 0xc85d13
00c85ce9: .byte 0xe8
00c85cea: .byte 0xf2

4over3 data0xee414c operand0xc85caa candidate-start0xc85b70
00c85b70: sub esp, 0x10
00c85b73: push ebp
00c85b74: push esi
00c85b75: mov ebp, edx
00c85b77: call 0x48ba90
00c85b7c: xorps xmm0, xmm0
00c85b7f: cvtsi2ss xmm0, eax
00c85b83: movss dword ptr [esp + 8], xmm0
00c85b89: call 0x48bad0
00c85b8e: movss xmm0, dword ptr [esp + 8]
00c85b94: mov esi, dword ptr [esp + 0x24]
00c85b98: mov ecx, dword ptr [esi + 0xc]
00c85b9b: xorps xmm1, xmm1
00c85b9e: cvtsi2ss xmm1, eax
00c85ba2: lea eax, [esp + 0x10]
00c85ba6: divss xmm0, xmm1
00c85baa: push eax
00c85bab: mov edx, 0x64d20921
00c85bb0: movss dword ptr [esp + 0xc], xmm0
00c85bb6: call 0x69e170
00c85bbb: test eax, eax
00c85bbd: je 0xc85c63
00c85bc3: lea ecx, [esp + 0xc]
00c85bc7: push ecx
00c85bc8: mov ecx, dword ptr [esi + 0xc]
00c85bcb: mov edx, 0x7573d691
00c85bd0: call 0x69e120
00c85bd5: test eax, eax
00c85bd7: je 0xc85c63
00c85bdd: mov ecx, dword ptr [esp + 0xc]
00c85be1: push edi
00c85be2: xor esi, esi
00c85be4: call 0xc6ddc0
00c85be9: mov edi, eax
00c85beb: test edi, edi
00c85bed: je 0xc85c4e
00c85bef: mov ecx, edi
00c85bf1: call 0xc6de10
00c85bf6: cmp eax, 2
00c85bf9: jne 0xc85c4e
00c85bfb: push ebx
00c85bfc: xor edx, edx
00c85bfe: mov ecx, edi
00c85c00: call 0xc6e2b0
00c85c05: lea edx, [esi + 1]
00c85c08: mov ecx, edi
00c85c0a: mov ebx, eax
00c85c0c: call 0xc6e2b0
00c85c11: mov ecx, dword ptr [esp + 0x18]
00c85c15: cmp ecx, 0x66d0def
00c85c1b: je 0xc85c44
00c85c1d: cmp ecx, 0xd1e4a3ee
00c85c23: jne 0xc85c4d
00c85c25: xor edx, edx
00c85c27: cmp ebx, eax
00c85c29: setg dl
00c85c2c: pop ebx
00c85c2d: pop edi
00c85c2e: mov eax, 1
00c85c33: mov esi, edx
00c85c35: neg esi
00c85c37: sbb esi, esi
00c85c39: mov dword ptr [ebp + 0x14], esi
00c85c3c: pop esi
00c85c3d: pop ebp
00c85c3e: add esp, 0x10
00c85c41: ret 0xc
00c85c44: xor ecx, ecx
00c85c46: cmp ebx, eax
00c85c48: setl cl
00c85c4b: mov esi, ecx
00c85c4d: pop ebx
00c85c4e: neg esi
00c85c50: sbb esi, esi
00c85c52: pop edi
00c85c53: mov dword ptr [ebp + 0x14], esi
00c85c56: pop esi
00c85c57: mov eax, 1
00c85c5c: pop ebp
00c85c5d: add esp, 0x10
00c85c60: ret 0xc
00c85c63: mov ecx, dword ptr [esi + 0xc]
00c85c66: lea edx, [esp + 0x14]
00c85c6a: push edx
00c85c6b: mov edx, 0xf976d8a2
00c85c70: call 0x69e120
00c85c75: test eax, eax
00c85c77: je 0xc85c98
00c85c79: mov eax, dword ptr [esp + 0x14]
00c85c7d: cmp eax, 1
00c85c80: jne 0xc85ca2
00c85c82: movss xmm0, dword ptr [esp + 8]
00c85c88: comiss xmm0, dword ptr [0xee414c]
00c85c8f: ja 0xc85cb5
00c85c91: mov dword ptr [ebp + 0x14], 0
00c85c98: pop esi
00c85c99: xor eax, eax
00c85c9b: pop ebp
00c85c9c: add esp, 0x10
00c85c9f: ret 0xc
00c85ca2: test eax, eax
00c85ca4: jne 0xc85c91
00c85ca6: movss xmm0, dword ptr [0xee414c]
00c85cae: comiss xmm0, dword ptr [esp + 8]
00c85cb3: jb 0xc85c91
00c85cb5: mov ecx, 0x2028be0
00c85cba: call 0x5de6b0
00c85cbf: mov esi, eax
00c85cc1: push esi
00c85cc2: mov edx, 0xb6e7ae40
00c85cc7: mov ecx, ebp
00c85cc9: call 0xdcd7a0
00c85cce: neg esi
00c85cd0: sbb esi, esi
00c85cd2: mov dword ptr [ebp + 0x14], esi
00c85cd5: pop esi
00c85cd6: xor eax, eax
00c85cd8: pop ebp
00c85cd9: add esp, 0x10
00c85cdc: ret 0xc
00c85cdf: int3 
00c85ce0: cmp dword ptr [0x2028bb4], 0
00c85ce7: jne 0xc85d13
00c85ce9: call 0xc762e0
00c85cee: test eax, eax
00c85cf0: je 0xc85d13
00c85cf2: call 0x4c4ad0
00c85cf7: test eax, eax
00c85cf9: je 0xc85d02
00c85cfb: xor ecx, ecx
00c85cfd: call 0x4c4a00
00c85d02: call 0x4dfc00
00c85d07: .byte 0xba
00c85d08: dec eax
00c85d09: .byte 0x20

3over4 data0xec6fc0 operand0x402d36 candidate-start0x402ce0
00402ce0: push ebp
00402ce1: mov ebp, esp
00402ce3: and esp, 0xfffffff0
00402ce6: sub esp, 0x48
00402ce9: movaps xmm1, xmmword ptr [0xec6f30]
00402cf0: push ebx
00402cf1: mov ebx, dword ptr [ebp + 0xc]
00402cf4: mov dword ptr [ebx], 0
00402cfa: mov dword ptr [edi], 0
00402d00: movaps xmm0, xmmword ptr [eax]
00402d03: push esi
00402d04: movaps xmmword ptr [esp + 0x30], xmm1
00402d09: call 0xd91d70
00402d0e: movdqa xmm1, xmmword ptr [0xec6f20]
00402d16: movaps xmmword ptr [esp + 0x10], xmm0
00402d1b: movss xmm0, dword ptr [esp + 0x14]
00402d21: shufps xmm0, xmm0, 0
00402d25: andps xmm0, xmm1
00402d28: movaps xmmword ptr [esp + 0x20], xmm0
00402d2d: movss xmm0, dword ptr [esp + 0x20]
00402d33: comiss xmm0, dword ptr [0xec6fc0]
00402d3a: movdqa xmmword ptr [esp + 0x40], xmm1
00402d40: ja 0x402dd6
00402d46: movss xmm0, dword ptr [esp + 0x18]
00402d4c: sub esp, 8
00402d4f: movss dword ptr [esp + 4], xmm0
00402d55: movss xmm0, dword ptr [esp + 0x18]
00402d5b: movss dword ptr [esp], xmm0
00402d60: call 0xd91670
00402d65: call 0xe22fa0
00402d6a: mov ecx, dword ptr [ebp + 8]
00402d6d: movaps xmm1, xmmword ptr [esp + 0x30]
00402d72: movaps xmm0, xmmword ptr [ecx]
00402d75: mov esi, eax
00402d77: call 0xd91d70
00402d7c: movaps xmmword ptr [esp + 0x10], xmm0
00402d81: movss xmm0, dword ptr [esp + 0x14]
00402d87: shufps xmm0, xmm0, 0
00402d8b: andps xmm0, xmmword ptr [esp + 0x40]
00402d90: movaps xmmword ptr [esp + 0x40], xmm0
00402d95: .byte 0xf3

3over4 data0xec6fc0 operand0x402d9e candidate-start0x402ce0
00402ce0: push ebp
00402ce1: mov ebp, esp
00402ce3: and esp, 0xfffffff0
00402ce6: sub esp, 0x48
00402ce9: movaps xmm1, xmmword ptr [0xec6f30]
00402cf0: push ebx
00402cf1: mov ebx, dword ptr [ebp + 0xc]
00402cf4: mov dword ptr [ebx], 0
00402cfa: mov dword ptr [edi], 0
00402d00: movaps xmm0, xmmword ptr [eax]
00402d03: push esi
00402d04: movaps xmmword ptr [esp + 0x30], xmm1
00402d09: call 0xd91d70
00402d0e: movdqa xmm1, xmmword ptr [0xec6f20]
00402d16: movaps xmmword ptr [esp + 0x10], xmm0
00402d1b: movss xmm0, dword ptr [esp + 0x14]
00402d21: shufps xmm0, xmm0, 0
00402d25: andps xmm0, xmm1
00402d28: movaps xmmword ptr [esp + 0x20], xmm0
00402d2d: movss xmm0, dword ptr [esp + 0x20]
00402d33: comiss xmm0, dword ptr [0xec6fc0]
00402d3a: movdqa xmmword ptr [esp + 0x40], xmm1
00402d40: ja 0x402dd6
00402d46: movss xmm0, dword ptr [esp + 0x18]
00402d4c: sub esp, 8
00402d4f: movss dword ptr [esp + 4], xmm0
00402d55: movss xmm0, dword ptr [esp + 0x18]
00402d5b: movss dword ptr [esp], xmm0
00402d60: call 0xd91670
00402d65: call 0xe22fa0
00402d6a: mov ecx, dword ptr [ebp + 8]
00402d6d: movaps xmm1, xmmword ptr [esp + 0x30]
00402d72: movaps xmm0, xmmword ptr [ecx]
00402d75: mov esi, eax
00402d77: call 0xd91d70
00402d7c: movaps xmmword ptr [esp + 0x10], xmm0
00402d81: movss xmm0, dword ptr [esp + 0x14]
00402d87: shufps xmm0, xmm0, 0
00402d8b: andps xmm0, xmmword ptr [esp + 0x40]
00402d90: movaps xmmword ptr [esp + 0x40], xmm0
00402d95: movss xmm0, dword ptr [esp + 0x40]
00402d9b: comiss xmm0, dword ptr [0xec6fc0]
00402da2: ja 0x402dd6
00402da4: movss xmm0, dword ptr [esp + 0x18]
00402daa: sub esp, 8
00402dad: movss dword ptr [esp + 4], xmm0
00402db3: movss xmm0, dword ptr [esp + 0x18]
00402db9: movss dword ptr [esp], xmm0
00402dbe: call 0xd91670
00402dc3: call 0xe22fa0
00402dc8: sub si, ax
00402dcb: movsx edx, si
00402dce: mov dword ptr [ebx], edx
00402dd0: mov dword ptr [edi], 1
00402dd6: pop esi
00402dd7: pop ebx
00402dd8: mov esp, ebp
00402dda: pop ebp
00402ddb: ret 8
00402dde: loop 0x402dac
00402de0: test byte ptr [esp + 0x10], 1
00402de5: je 0x402e9a
00402deb: mov dl, 0x10
00402ded: test byte ptr [eax + 0xc], dl
00402df0: jne 0x402e9a
00402df6: test byte ptr [ecx + 0xc], dl
00402df9: .byte 0x0f
00402dfa: .byte 0x85
00402dfb: wait 
00402dfc: add byte ptr [eax], al

3over4 data0xec6fc0 operand0x407f2e candidate-start0x407e70
00407e70: push ebp
00407e71: mov ebp, esp
00407e73: and esp, 0xfffffff0
00407e76: sub esp, 0x14
00407e79: push ebx
00407e7a: push esi
00407e7b: push edi
00407e7c: movaps xmm0, xmmword ptr [0xec6f00]
00407e83: mov eax, dword ptr [ecx + 0x20]
00407e86: mov esi, dword ptr [ecx + 8]
00407e89: movaps xmm1, xmmword ptr [esi + 0x200]
00407e90: movaps xmm4, xmmword ptr [esi + 0x230]
00407e97: movaps xmm5, xmmword ptr [esi + 0x210]
00407e9e: movaps xmm2, xmm0
00407ea1: shufps xmm2, xmm0, 0
00407ea5: mulps xmm1, xmm2
00407ea8: addps xmm4, xmm1
00407eab: movaps xmm1, xmmword ptr [esi + 0x220]
00407eb2: movaps xmm3, xmm0
00407eb5: shufps xmm3, xmm0, 0x55
00407eb9: mulps xmm5, xmm3
00407ebc: shufps xmm0, xmm0, 0xaa
00407ec0: addps xmm4, xmm5
00407ec3: mulps xmm1, xmm0
00407ec6: addps xmm1, xmm4
00407ec9: movaps xmm4, xmmword ptr [esi + 0x100]
00407ed0: mulps xmm4, xmm2
00407ed3: movaps xmm2, xmmword ptr [esi + 0x110]
00407eda: mulps xmm2, xmm3
00407edd: movaps xmm3, xmmword ptr [esi + 0x130]
00407ee4: mov edi, dword ptr [ecx + 0x18]
00407ee7: addps xmm3, xmm4
00407eea: addps xmm3, xmm2
00407eed: movaps xmm2, xmmword ptr [esi + 0x120]
00407ef4: mov esi, dword ptr [edi + 0xb4]
00407efa: lea edx, [edi + 0x90]
00407f00: mulps xmm2, xmm0
00407f03: xor ebx, ebx
00407f05: addps xmm2, xmm3
00407f08: jmp dword ptr [esi*4 + 0x407ff8]
00407f0f: mov ecx, dword ptr [ecx + 0x1c]
00407f12: test byte ptr [ecx + 0xc], 1
00407f16: je 0x407fc9
00407f1c: movaps xmm0, xmmword ptr [edx]
00407f1f: subps xmm0, xmm1
00407f22: sub esp, 8
00407f25: movaps xmmword ptr [esp + 0x18], xmm0
00407f2a: movss xmm0, dword ptr [0xec6fc0]
00407f32: lea edi, [edx + 0x10]
00407f35: movss dword ptr [esp + 4], xmm0
00407f3b: movaps xmmword ptr [edx], xmm1
00407f3e: movaps xmmword ptr [edi], xmm2
00407f41: movss xmm0, dword ptr [0xec6f10]
00407f49: movss dword ptr [esp], xmm0
00407f4e: lea ecx, [eax + 0x240]
00407f54: push eax
00407f55: lea esi, [esp + 0x1c]
00407f59: call 0x407d70
00407f5e: mov ebx, 1
00407f63: mov eax, ebx
00407f65: pop edi
00407f66: pop esi
00407f67: pop ebx
00407f68: mov esp, ebp
00407f6a: pop ebp
00407f6b: ret 
00407f6c: mov ecx, dword ptr [ecx + 0x1c]
00407f6f: test byte ptr [ecx + 0xc], 1
00407f73: je 0x407fc9
00407f75: movaps xmm0, xmmword ptr [edx + 0x10]
00407f79: subps xmm0, xmm2
00407f7c: sub esp, 8
00407f7f: movaps xmmword ptr [esp + 0x18], xmm0
00407f84: movss xmm0, dword ptr [0xec6fc0]
00407f8c: .byte 0xf3
00407f8d: .byte 0x0f

3over4 data0xec6fc0 operand0x407f88 candidate-start0x407e70
00407e70: push ebp
00407e71: mov ebp, esp
00407e73: and esp, 0xfffffff0
00407e76: sub esp, 0x14
00407e79: push ebx
00407e7a: push esi
00407e7b: push edi
00407e7c: movaps xmm0, xmmword ptr [0xec6f00]
00407e83: mov eax, dword ptr [ecx + 0x20]
00407e86: mov esi, dword ptr [ecx + 8]
00407e89: movaps xmm1, xmmword ptr [esi + 0x200]
00407e90: movaps xmm4, xmmword ptr [esi + 0x230]
00407e97: movaps xmm5, xmmword ptr [esi + 0x210]
00407e9e: movaps xmm2, xmm0
00407ea1: shufps xmm2, xmm0, 0
00407ea5: mulps xmm1, xmm2
00407ea8: addps xmm4, xmm1
00407eab: movaps xmm1, xmmword ptr [esi + 0x220]
00407eb2: movaps xmm3, xmm0
00407eb5: shufps xmm3, xmm0, 0x55
00407eb9: mulps xmm5, xmm3
00407ebc: shufps xmm0, xmm0, 0xaa
00407ec0: addps xmm4, xmm5
00407ec3: mulps xmm1, xmm0
00407ec6: addps xmm1, xmm4
00407ec9: movaps xmm4, xmmword ptr [esi + 0x100]
00407ed0: mulps xmm4, xmm2
00407ed3: movaps xmm2, xmmword ptr [esi + 0x110]
00407eda: mulps xmm2, xmm3
00407edd: movaps xmm3, xmmword ptr [esi + 0x130]
00407ee4: mov edi, dword ptr [ecx + 0x18]
00407ee7: addps xmm3, xmm4
00407eea: addps xmm3, xmm2
00407eed: movaps xmm2, xmmword ptr [esi + 0x120]
00407ef4: mov esi, dword ptr [edi + 0xb4]
00407efa: lea edx, [edi + 0x90]
00407f00: mulps xmm2, xmm0
00407f03: xor ebx, ebx
00407f05: addps xmm2, xmm3
00407f08: jmp dword ptr [esi*4 + 0x407ff8]
00407f0f: mov ecx, dword ptr [ecx + 0x1c]
00407f12: test byte ptr [ecx + 0xc], 1
00407f16: je 0x407fc9
00407f1c: movaps xmm0, xmmword ptr [edx]
00407f1f: subps xmm0, xmm1
00407f22: sub esp, 8
00407f25: movaps xmmword ptr [esp + 0x18], xmm0
00407f2a: movss xmm0, dword ptr [0xec6fc0]
00407f32: lea edi, [edx + 0x10]
00407f35: movss dword ptr [esp + 4], xmm0
00407f3b: movaps xmmword ptr [edx], xmm1
00407f3e: movaps xmmword ptr [edi], xmm2
00407f41: movss xmm0, dword ptr [0xec6f10]
00407f49: movss dword ptr [esp], xmm0
00407f4e: lea ecx, [eax + 0x240]
00407f54: push eax
00407f55: lea esi, [esp + 0x1c]
00407f59: call 0x407d70
00407f5e: mov ebx, 1
00407f63: mov eax, ebx
00407f65: pop edi
00407f66: pop esi
00407f67: pop ebx
00407f68: mov esp, ebp
00407f6a: pop ebp
00407f6b: ret 
00407f6c: mov ecx, dword ptr [ecx + 0x1c]
00407f6f: test byte ptr [ecx + 0xc], 1
00407f73: je 0x407fc9
00407f75: movaps xmm0, xmmword ptr [edx + 0x10]
00407f79: subps xmm0, xmm2
00407f7c: sub esp, 8
00407f7f: movaps xmmword ptr [esp + 0x18], xmm0
00407f84: movss xmm0, dword ptr [0xec6fc0]
00407f8c: movss dword ptr [esp + 4], xmm0
00407f92: movaps xmmword ptr [edx], xmm1
00407f95: movaps xmmword ptr [edx + 0x10], xmm2
00407f99: movss xmm0, dword ptr [0xec6f10]
00407fa1: movss dword ptr [esp], xmm0
00407fa6: mov edi, edx
00407fa8: lea ecx, [eax + 0x270]
00407fae: push eax
00407faf: lea edx, [edx + 0x10]
00407fb2: lea esi, [esp + 0x1c]
00407fb6: call 0x407d70
00407fbb: mov ebx, 1
00407fc0: mov eax, ebx
00407fc2: pop edi
00407fc3: pop esi
00407fc4: pop ebx
00407fc5: mov esp, ebp
00407fc7: pop ebp
00407fc8: ret 
00407fc9: mov dword ptr [edi + 0xb4], 1
00407fd3: movaps xmmword ptr [edi + 0xa0], xmm2
00407fda: xor eax, eax
00407fdc: movaps xmmword ptr [edi + 0x90], xmm1
00407fe3: .byte 0x89
00407fe4: .byte 0x87
00407fe5: .byte 0xbc
00407fe6: add byte ptr [eax], al

3over4 data0xec6fc0 operand0x44f497 candidate-start0x44f380
0044f380: push ebp
0044f381: mov ebp, esp
0044f383: and esp, 0xfffffff0
0044f386: sub esp, 0x1c
0044f389: push esi
0044f38a: mov esi, ecx
0044f38c: cmp dword ptr [esi + 0xa0], 0
0044f393: je 0x44f469
0044f399: mov eax, dword ptr [edx + 0x30]
0044f39c: cmp dword ptr [eax + 0x760], 0
0044f3a3: je 0x44f3ac
0044f3a5: add eax, 0x720
0044f3aa: jmp 0x44f3b1
0044f3ac: add eax, 0x140
0044f3b1: cmp dword ptr [esi + 0xa4], 0
0044f3b8: movaps xmm0, xmmword ptr [eax]
0044f3bb: subps xmm0, xmmword ptr [edx + 0x20]
0044f3bf: xorps xmm5, xmm5
0044f3c2: mulps xmm0, xmm0
0044f3c5: movaps xmm1, xmm0
0044f3c8: movhlps xmm0, xmm1
0044f3cb: addps xmm0, xmm1
0044f3ce: movaps xmm1, xmm0
0044f3d1: shufps xmm1, xmm0, 1
0044f3d5: addps xmm1, xmm0
0044f3d8: movaps xmmword ptr [esp + 0x10], xmm1
0044f3dd: movss xmm1, dword ptr [esp + 0x10]
0044f3e3: xorps xmm0, xmm0
0044f3e6: movss xmm0, xmm1
0044f3ea: sqrtss xmm0, xmm0
0044f3ee: movaps xmmword ptr [esp + 0x10], xmm0
0044f3f3: movss xmm0, dword ptr [esp + 0x10]
0044f3f9: movss dword ptr [esi + 0xbc], xmm0
0044f401: je 0x44f40b
0044f403: movss dword ptr [esi + 0xb8], xmm5
0044f40b: movss xmm3, dword ptr [esi + 0xb0]
0044f413: comiss xmm3, xmm5
0044f416: jbe 0x44f469
0044f418: movss xmm6, dword ptr [esi + 0xb4]
0044f420: comiss xmm6, xmm5
0044f423: jbe 0x44f469
0044f425: movss xmm4, dword ptr [esi + 0xac]
0044f42d: addss xmm4, dword ptr [ebp + 0xc]
0044f432: comiss xmm4, xmm6
0044f435: movss dword ptr [esi + 0xac], xmm4
0044f43d: jb 0x44f470
0044f43f: movss dword ptr [esi + 0xb0], xmm5
0044f447: movss dword ptr [esi + 0xac], xmm5
0044f44f: movss dword ptr [esi + 0xb4], xmm5
0044f457: mov dword ptr [esi + 0xa8], 0
0044f461: movss dword ptr [esi + 0xb8], xmm5
0044f469: pop esi
0044f46a: mov esp, ebp
0044f46c: pop ebp
0044f46d: ret 8
0044f470: movaps xmm0, xmm3
0044f473: comiss xmm5, xmm0
0044f476: jbe 0x44f47d
0044f478: movaps xmm0, xmm5
0044f47b: jmp 0x44f48a
0044f47d: movss xmm1, dword ptr [0xec6e14]
0044f485: comiss xmm1, xmm0
0044f488: jbe 0x44f48d
0044f48a: movaps xmm1, xmm0
0044f48d: movss xmm0, dword ptr [esp + 0x10]
0044f493: mulss xmm0, dword ptr [0xec6fc0]
0044f49b: movss xmm2, dword ptr [esp + 0x10]
0044f4a1: mulss xmm2, dword ptr [0xec7090]
0044f4a9: mov eax, dword ptr [esi + 0xa8]
0044f4af: mulss xmm0, xmm1
0044f4b3: mulss xmm2, xmm3
0044f4b7: movaps xmm1, xmm6
0044f4ba: mulss xmm1, dword ptr [0xec6fd4]
0044f4c2: movss dword ptr [esp + 0xc], xmm5
0044f4c8: movaps xmm3, xmm5
0044f4cb: jmp dword ptr [eax*4 + 0x44f5a4]
0044f4d2: movaps xmm3, xmm0
0044f4d5: movaps xmm0, xmm5
0044f4d8: movss xmm7, dword ptr [esp + 0xc]
0044f4de: comiss xmm3, xmm0
0044f4e1: jbe 0x44f535
0044f4e3: movaps xmm2, xmm3
0044f4e6: jmp 0x44f538
0044f4e8: comiss xmm1, xmm4
0044f4eb: jbe 0x44f4f2
0044f4ed: movaps xmm7, xmm5
0044f4f0: jmp 0x44f4f5
0044f4f2: movaps xmm7, xmm1
0044f4f5: .byte 0x0f
0044f4f6: das 

3over4 data0xec6fc0 operand0x499dde candidate-start0x499c60
00499c60: sub esp, 0x10
00499c63: push ebx
00499c64: push ebp
00499c65: mov ebp, dword ptr [edx + 4]
00499c68: push esi
00499c69: mov ebx, ecx
00499c6b: push edi
00499c6c: mov edi, dword ptr [edx]
00499c6e: mov ecx, ebp
00499c70: mov dword ptr [esp + 0x10], ebp
00499c74: call 0xcc9ac0
00499c79: fstp dword ptr [esp + 0x18]
00499c7d: mov edx, ebp
00499c7f: mov ecx, ebx
00499c81: call 0xa72be0
00499c86: mov esi, eax
00499c88: test esi, esi
00499c8a: jne 0x499cca
00499c8c: xor ebp, ebp
00499c8e: mov edi, edi
00499c90: mov ecx, ebp
00499c92: call 0xa63020
00499c97: mov esi, eax
00499c99: mov ecx, esi
00499c9b: call 0xa63160
00499ca0: test eax, eax
00499ca2: jne 0x499caf
00499ca4: inc ebp
00499ca5: cmp ebp, 0x3e8
00499cab: jl 0x499c90
00499cad: jmp 0x499cc6
00499caf: mov ecx, esi
00499cb1: call 0x9f8400
00499cb6: mov eax, dword ptr [esi + 4]
00499cb9: and eax, 0xffff8fff
00499cbe: or eax, 0x800
00499cc3: mov dword ptr [esi + 4], eax
00499cc6: mov ebp, dword ptr [esp + 0x10]
00499cca: cmp dword ptr [ebx + 0x14], ebp
00499ccd: jne 0x499cec
00499ccf: mov ecx, dword ptr [esi + 4]
00499cd2: and ecx, 0xfffcffff
00499cd8: or ecx, 0x8000
00499cde: mov dword ptr [esi + 4], ecx
00499ce1: mov edi, dword ptr [ebx + 0x78]
00499ce4: shr edi, 7
00499ce7: and edi, 7
00499cea: jmp 0x499cfe
00499cec: mov edx, dword ptr [esi + 4]
00499cef: and edx, 0xfffe7fff
00499cf5: or edx, 0x20000
00499cfb: mov dword ptr [esi + 4], edx
00499cfe: mov ecx, ebx
00499d00: call 0xa4e220
00499d05: movzx eax, ax
00499d08: cmp eax, 0xffff
00499d0d: jbe 0x499d14
00499d0f: mov eax, 0xffff
00499d14: mov ecx, ebp
00499d16: mov word ptr [esi], ax
00499d19: call 0xa4e240
00499d1e: movzx eax, al
00499d21: cmp eax, 0xff
00499d26: jbe 0x499d2d
00499d28: mov eax, 0xff
00499d2d: mov byte ptr [esi + 2], al
00499d30: mov eax, dword ptr [esi + 4]
00499d33: and edi, 7
00499d36: shl edi, 0x18
00499d39: and eax, 0xf8effbff
00499d3e: or edi, eax
00499d40: or edi, 0xc0000
00499d46: mov ecx, ebx
00499d48: mov dword ptr [esi + 4], edi
00499d4b: call 0xa6e230
00499d50: mov edi, dword ptr [esi + 4]
00499d53: xorps xmm0, xmm0
00499d56: cvtsi2ss xmm0, eax
00499d5a: shr edi, 0xf
00499d5d: movss dword ptr [esp + 0x10], xmm0
00499d63: and edi, 7
00499d66: call 0xa5a9a0
00499d6b: movss xmm1, dword ptr [esp + 0x10]
00499d71: xorps xmm0, xmm0
00499d74: cvtsi2ss xmm0, eax
00499d78: comiss xmm0, xmm1
00499d7b: jbe 0x499d85
00499d7d: movss dword ptr [esp + 0x14], xmm0
00499d83: jmp 0x499d8b
00499d85: movss dword ptr [esp + 0x14], xmm1
00499d8b: mov edx, edi
00499d8d: mov ecx, ebx
00499d8f: call 0xa63950
00499d94: movss xmm1, dword ptr [esp + 0x14]
00499d9a: xorps xmm0, xmm0
00499d9d: cvtsi2ss xmm0, eax
00499da1: comiss xmm0, xmm1
00499da4: jbe 0x499dae
00499da6: movss dword ptr [esp + 0x10], xmm1
00499dac: jmp 0x499db4
00499dae: movss dword ptr [esp + 0x10], xmm0
00499db4: movss xmm0, dword ptr [esp + 0x18]
00499dba: subss xmm0, dword ptr [0xec98c8]
00499dc2: mulss xmm0, dword ptr [0xed5a1c]
00499dca: mulss xmm0, dword ptr [0xed5a18]
00499dd2: movss xmm1, dword ptr [0xed5a14]
00499dda: movss xmm2, dword ptr [0xec6fc0]
00499de2: addss xmm0, xmm1
00499de6: comiss xmm2, xmm0
00499de9: jbe 0x499df6
00499deb: movaps xmm0, xmm2
00499dee: movss dword ptr [esp + 0x14], xmm0
00499df4: jmp 0x499e09
00499df6: comiss xmm1, xmm0
00499df9: jbe 0x499e03
00499dfb: movss dword ptr [esp + 0x14], xmm0
00499e01: jmp 0x499e09
00499e03: movss dword ptr [esp + 0x14], xmm1
00499e09: mov ecx, dword ptr [0x10e23b8]
00499e0f: call 0xd963d0
00499e14: mov ecx, eax
00499e16: call 0xd96410
00499e1b: fmul dword ptr [0xed5a10]
00499e21: mov edi, dword ptr [esi + 4]
00499e24: shr edi, 0xf
00499e27: fadd dword ptr [0xed5a0c]
00499e2d: and edi, 7
00499e30: fld dword ptr [esp + 0x10]
00499e34: fmul dword ptr [esp + 0x14]
00499e38: fmulp st(1)
00499e3a: fstp dword ptr [esp + 0x10]

3over4 data0xec6fc0 operand0x4f7066 candidate-start0x4f7040
004f7040: movss xmm1, dword ptr [0xee958c]
004f7048: mov eax, ecx
004f704a: mov ecx, dword ptr [eax + 0x1ac4]
004f7050: lea edx, [ecx + ecx*2]
004f7053: add edx, edx
004f7055: movss xmm0, dword ptr [eax + edx*8 + 0x1ad4]
004f705e: comiss xmm1, xmm0
004f7061: ja 0x4f70dd
004f7063: comiss xmm0, dword ptr [0xec6fc0]
004f706a: ja 0x4f70dd
004f706c: movss xmm2, dword ptr [0xee9588]
004f7074: lea ecx, [ecx + ecx*2 + 0x1ad]
004f707b: add ecx, ecx
004f707d: movss xmm0, dword ptr [eax + ecx*8]
004f7082: comiss xmm2, xmm0
004f7085: ja 0x4f70dd
004f7087: comiss xmm0, dword ptr [0xee9584]
004f708e: ja 0x4f70dd
004f7090: mov edx, dword ptr [eax + 0x1ac4]
004f7096: lea ecx, [edx + edx*2]
004f7099: add ecx, ecx
004f709b: movss xmm0, dword ptr [eax + ecx*8 + 0x1ad4]
004f70a4: subss xmm0, xmm1
004f70a8: mulss xmm0, dword ptr [0xee9580]
004f70b0: mulss xmm0, dword ptr [0xec7238]
004f70b8: lea edx, [edx + edx*2 + 0x1ad]
004f70bf: cvttss2si ecx, xmm0
004f70c3: .byte 0xf3
004f70c4: .byte 0x0f
004f70c5: .byte 0x10

3over4 data0xec6fc0 operand0x505f57 candidate-start0x505f4b
00505f4b: cdq 
00505f4c: rol dword ptr [ecx - 0x137c330a], 1
00505f52: or bl, dh
00505f54: movups xmm0, xmmword ptr [0xec6fc0]
00505f5b: movss xmm1, dword ptr [0xec6fd4]
00505f63: mov edx, ecx
00505f65: push esi
00505f66: shr edx, 0x18
00505f69: mov eax, edx
00505f6b: mov esi, 0xff
00505f70: xorps xmm2, xmm2
00505f73: sub esi, eax
00505f75: cvtsi2ss xmm2, esi
00505f79: mulss xmm2, xmm0
00505f7d: addss xmm2, xmm1
00505f81: movss dword ptr [esp + 4], xmm2
00505f87: cvttss2si eax, dword ptr [esp + 4]
00505f8d: add dl, al
00505f8f: mov byte ptr [esp + 7], dl
00505f93: mov edx, ecx
00505f95: shr edx, 0x10
00505f98: movzx eax, dl
00505f9b: mov esi, 0x14
00505fa0: xorps xmm2, xmm2
00505fa3: sub esi, eax
00505fa5: cvtsi2ss xmm2, esi
00505fa9: mulss xmm2, xmm0
00505fad: addss xmm2, xmm1
00505fb1: movss dword ptr [esp + 8], xmm2

3over4 data0xec6fc0 operand0x50e7fd candidate-start0x50e6f0
0050e6f0: sub esp, 0xfc
0050e6f6: push esi
0050e6f7: push edi
0050e6f8: push 0xe8
0050e6fd: lea eax, [esp + 0x20]
0050e701: push 0
0050e703: push eax
0050e704: mov dword ptr [esp + 0x1c], ecx
0050e708: mov dword ptr [esp + 0x20], 0
0050e710: mov dword ptr [esp + 0x24], 0
0050e718: call 0xe231d0
0050e71d: add esp, 0xc
0050e720: cmp dword ptr [0x15ff074], 2
0050e727: jne 0x50e75b
0050e729: mov ecx, dword ptr [0x15ff080]
0050e72f: mov esi, dword ptr [0x15ff078]
0050e735: push ecx
0050e736: call 0x50dc40
0050e73b: mov ecx, dword ptr [0x15ff078]
0050e741: mov dword ptr [0x15ff074], 1
0050e74b: call 0xcb9070
0050e750: mov ecx, dword ptr [0x15ff080]
0050e756: call 0xcb9070
0050e75b: push ebx
0050e75c: push ebp
0050e75d: call 0x491010
0050e762: xor esi, esi
0050e764: mov dword ptr [esp + 0x10], esi
0050e768: mov ecx, esi
0050e76a: call 0x48f1b0
0050e76f: mov ebx, eax
0050e771: mov ecx, ebx
0050e773: call 0xcc9ac0
0050e778: fst dword ptr [esp + 0x14]
0050e77c: fstp dword ptr [esp + esi*8 + 0x20]
0050e780: mov dword ptr [esp + esi*8 + 0x1c], ebx
0050e784: mov edi, esi
0050e786: test esi, esi
0050e788: jle 0x50e7cf
0050e78a: movss xmm0, dword ptr [esp + 0x14]
0050e790: lea ecx, [esp + esi*8 + 0x14]
0050e794: movss xmm1, dword ptr [ecx + 0xc]
0050e799: comiss xmm1, dword ptr [ecx + 4]
0050e79d: jbe 0x50e7cf
0050e79f: lea eax, [ecx + 8]
0050e7a2: mov edx, ecx
0050e7a4: lea esi, [ecx + 0x10]
0050e7a7: sub edx, eax
0050e7a9: lea esp, [esp]
0050e7b0: mov ebp, dword ptr [edx + eax]
0050e7b3: mov dword ptr [eax], ebp
0050e7b5: add eax, 4
0050e7b8: cmp eax, esi
0050e7ba: jb 0x50e7b0
0050e7bc: mov esi, dword ptr [esp + 0x10]
0050e7c0: mov dword ptr [ecx], ebx
0050e7c2: movss dword ptr [ecx + 4], xmm0
0050e7c7: dec edi
0050e7c8: sub ecx, 8
0050e7cb: test edi, edi
0050e7cd: jg 0x50e794
0050e7cf: inc esi
0050e7d0: mov dword ptr [esp + 0x10], esi
0050e7d4: cmp esi, 0x1e
0050e7d7: jl 0x50e768
0050e7d9: pop ebp
0050e7da: xor edi, edi
0050e7dc: pop ebx
0050e7dd: lea ecx, [ecx]
0050e7e0: mov esi, dword ptr [esp + edi*8 + 0x14]
0050e7e4: push 0
0050e7e6: push 1
0050e7e8: xor edx, edx
0050e7ea: mov ecx, esi
0050e7ec: call 0x6046c0
0050e7f1: test eax, eax
0050e7f3: jne 0x50e897
0050e7f9: movss xmm1, dword ptr [0xec6fc0]
0050e801: movss xmm2, dword ptr [0xec6fd0]
0050e809: xorps xmm0, xmm0
0050e80c: cvtsi2ss xmm0, edi
0050e810: mulss xmm0, dword ptr [0xec7050]
0050e818: mulss xmm0, dword ptr [0xec7080]
0050e820: addss xmm0, xmm1
0050e824: comiss xmm2, xmm0
0050e827: jbe 0x50e82e
0050e829: movaps xmm0, xmm2
0050e82c: jmp 0x50e836
0050e82e: comiss xmm1, xmm0
0050e831: ja 0x50e836
0050e833: movaps xmm0, xmm1
0050e836: mulss xmm0, dword ptr [0xeeda98]
0050e83e: xorps xmm1, xmm1
0050e841: comiss xmm1, xmm0
0050e844: jbe 0x50e850
0050e846: subss xmm0, dword ptr [0xec6fd4]
0050e84e: jmp 0x50e858
0050e850: addss xmm0, dword ptr [0xec6fd4]
0050e858: .byte 0xf3
0050e859: .byte 0x0f
0050e85a: .byte 0x11
0050e85b: inc esp
0050e85c: .byte 0x24

3over4 data0xec6fc0 operand0x560bb7 candidate-start0x560b50
00560b50: push ebx
00560b51: push edi
00560b52: call 0xd96860
00560b57: mov edx, edi
00560b59: mov ecx, eax
00560b5b: call 0xd98ec0
00560b60: fstp st(0)
00560b62: push esi
00560b63: call 0xd96860
00560b68: mov edx, esi
00560b6a: mov ecx, eax
00560b6c: call 0xd98ec0
00560b71: fstp st(0)
00560b73: call 0xd96860
00560b78: mov ebx, eax
00560b7a: test byte ptr [ebx + 0x1dc], 0x80
00560b81: je 0x560b8a
00560b83: mov ecx, ebx
00560b85: call 0xd96dd0
00560b8a: movd xmm2, dword ptr [ebx + 0x1c8]
00560b92: movd xmm1, dword ptr [ebx + 0x1cc]
00560b9a: movd xmm3, dword ptr [ebx + 0x1c0]
00560ba2: movss xmm4, dword ptr [edi]
00560ba6: cvtdq2ps xmm2, xmm2
00560ba9: movaps xmm0, xmm2
00560bac: cvtdq2ps xmm1, xmm1
00560baf: divss xmm0, xmm1
00560bb3: mulss xmm0, dword ptr [0xec6fc0]
00560bbb: cvtdq2ps xmm3, xmm3
00560bbe: subss xmm4, xmm3
00560bc2: movss xmm3, dword ptr [edi + 4]
00560bc7: divss xmm4, xmm2
00560bcb: movaps xmm1, xmm0
00560bce: subss xmm1, dword ptr [0xec6e14]
00560bd6: mulss xmm1, dword ptr [0xec6fd4]
00560bde: mulss xmm4, xmm0
00560be2: subss xmm4, xmm1
00560be6: movss dword ptr [edi], xmm4
00560bea: movd xmm2, dword ptr [ebx + 0x1c4]
00560bf2: cvtdq2ps xmm2, xmm2
00560bf5: subss xmm3, xmm2
00560bf9: movd xmm2, dword ptr [ebx + 0x1cc]
00560c01: cvtdq2ps xmm2, xmm2
00560c04: divss xmm3, xmm2
00560c08: movss dword ptr [edi + 4], xmm3
00560c0d: movd xmm2, dword ptr [ebx + 0x1c0]
00560c15: .byte 0xf3
00560c16: .byte 0x0f

3over4 data0xec6fc0 operand0x566b66 candidate-start0x566a20
00566a20: push ebp
00566a21: mov ebp, esp
00566a23: and esp, 0xfffffff0
00566a26: sub esp, 0x2c
00566a29: cmp dword ptr [edi + 0x2f0], 0
00566a30: push esi
00566a31: mov esi, eax
00566a33: je 0x566a54
00566a35: xor ecx, ecx
00566a37: call 0xda3670
00566a3c: movzx ecx, word ptr [eax + 0x68]
00566a40: movzx edx, word ptr [eax + 0x6a]
00566a44: xorps xmm0, xmm0
00566a47: xorps xmm1, xmm1
00566a4a: cvtsi2ss xmm0, ecx
00566a4e: cvtsi2ss xmm1, edx
00566a52: jmp 0x566a6a
00566a54: movd xmm0, dword ptr [edi + 0x2f8]
00566a5c: movd xmm1, dword ptr [edi + 0x2fc]
00566a64: cvtdq2ps xmm0, xmm0
00566a67: cvtdq2ps xmm1, xmm1
00566a6a: divss xmm0, xmm1
00566a6e: movss xmm1, dword ptr [0xec6e14]
00566a76: comiss xmm1, xmm0
00566a79: movss dword ptr [esp + 0xc], xmm0
00566a7f: jbe 0x566abb
00566a81: movss xmm0, dword ptr [0xf0d8f4]
00566a89: movss dword ptr [esp + 0x10], xmm0
00566a8f: movss xmm0, dword ptr [0xeca4c8]
00566a97: movss dword ptr [esp + 0x20], xmm0
00566a9d: movss xmm0, dword ptr [0xedb320]
00566aa5: movss dword ptr [esp + 0x14], xmm0
00566aab: movss xmm0, dword ptr [0xf0d8f0]
00566ab3: movss dword ptr [esp + 0x24], xmm0
00566ab9: jmp 0x566af1
00566abb: movss xmm1, dword ptr [0xf0d8f0]
00566ac3: movaps xmm2, xmm0
00566ac6: mulss xmm2, xmm1
00566aca: movss dword ptr [esp + 0x10], xmm2
00566ad0: movaps xmm2, xmm0
00566ad3: movss xmm0, dword ptr [0xedb320]
00566adb: mulss xmm2, xmm0
00566adf: movss dword ptr [esp + 0x20], xmm2
00566ae5: movss dword ptr [esp + 0x14], xmm0
00566aeb: movss dword ptr [esp + 0x24], xmm1
00566af1: xorps xmm0, xmm0
00566af4: movss xmm1, dword ptr [0xf0d8ec]
00566afc: lea edx, [esp + 0x10]
00566b00: mov ecx, esi
00566b02: movss dword ptr [esp + 0x18], xmm0
00566b08: movss dword ptr [esp + 0x28], xmm1
00566b0e: movss dword ptr [esp + 0x1c], xmm0
00566b14: movss dword ptr [esp + 0x2c], xmm0
00566b1a: call 0xd96980
00566b1f: movss xmm0, dword ptr [0xec6e14]
00566b27: comiss xmm0, dword ptr [esp + 0xc]
00566b2c: jbe 0x566bc9
00566b32: mov ecx, dword ptr [esi + 0x214]
00566b38: mov edx, dword ptr [esi + 0x218]
00566b3e: mov eax, dword ptr [esi + 0x210]
00566b44: mov dword ptr [esp + 0x14], ecx
00566b48: mov ecx, dword ptr [esi + 0x220]
00566b4e: mov dword ptr [esp + 0x18], edx
00566b52: mov edx, dword ptr [esi + 0x224]
00566b58: mov dword ptr [esp + 0x20], ecx
00566b5c: movss xmm2, dword ptr [esp + 0x20]
00566b62: mulss xmm2, dword ptr [0xec6fc0]
00566b6a: mov ecx, dword ptr [esi + 0x22c]
00566b70: mov dword ptr [esp + 0x24], edx
00566b74: movss xmm1, dword ptr [esp + 0x24]
00566b7a: mov dword ptr [esp + 0x10], eax
00566b7e: mov eax, dword ptr [esi + 0x21c]
00566b84: movaps xmm0, xmm1
00566b87: subss xmm0, xmm2
00566b8b: mulss xmm0, dword ptr [0xec6fd4]
00566b93: mov dword ptr [esp + 0x1c], eax
00566b97: mov eax, dword ptr [esi + 0x228]
00566b9d: mov dword ptr [esp + 0x2c], ecx
00566ba1: movaps xmm2, xmm0
00566ba4: addss xmm2, dword ptr [esp + 0x14]
00566baa: subss xmm1, xmm0
00566bae: lea edx, [esp + 0x10]
00566bb2: mov ecx, esi
00566bb4: mov dword ptr [esp + 0x28], eax
00566bb8: movss dword ptr [esp + 0x14], xmm2
00566bbe: movss dword ptr [esp + 0x24], xmm1
00566bc4: .byte 0xe8
00566bc5: .byte 0xe7

3over4 data0xec6fc0 operand0x68ea21 candidate-start0x68e920
0068e920: push ecx
0068e921: push esi
0068e922: push edi
0068e923: mov edi, ecx
0068e925: mov eax, dword ptr [edi]
0068e927: mov ecx, dword ptr [edi + 4]
0068e92a: mov esi, dword ptr [eax]
0068e92c: call 0x55e1e0
0068e931: fstp dword ptr [esp + 8]
0068e935: mov edx, dword ptr [0x1b58eb4]
0068e93b: xorps xmm3, xmm3
0068e93e: mov ecx, esi
0068e940: imul ecx, ecx, 0x2c
0068e943: cmp dword ptr [ecx + edx + 0x10], 0
0068e948: lea ecx, [ecx + edx + 0x10]
0068e94c: je 0x68ea31
0068e952: cmp esi, 0x1e
0068e955: je 0x68ea15
0068e95b: cmp esi, 0x2a
0068e95e: je 0x68ea15
0068e964: cmp esi, 0x10
0068e967: je 0x68ea15
0068e96d: cmp esi, 0xf
0068e970: je 0x68ea15
0068e976: movss xmm1, dword ptr [esp + 8]
0068e97c: movss xmm2, dword ptr [0xec6e14]
0068e984: ucomiss xmm1, xmm2
0068e987: lahf 
0068e988: test ah, 0x44
0068e98b: jp 0x68e997
0068e98d: movss xmm0, dword ptr [0xf1d8f8]
0068e995: jmp 0x68e9f7
0068e997: ucomiss xmm1, xmm3
0068e99a: lahf 
0068e99b: test ah, 0x44
0068e99e: jp 0x68e9aa
0068e9a0: movss xmm0, dword ptr [0xf1f950]
0068e9a8: jmp 0x68e9f7
0068e9aa: movss xmm0, dword ptr [0x1b58ea8]
0068e9b2: mulss xmm0, dword ptr [0xec704c]
0068e9ba: cmp dword ptr [0x1b58e40], esi
0068e9c0: jne 0x68e9da
0068e9c2: addss xmm0, xmm1
0068e9c6: comiss xmm0, dword ptr [0xf1f950]
0068e9cd: jb 0x68e9f7
0068e9cf: mov dword ptr [ecx], 0
0068e9d5: movaps xmm0, xmm2
0068e9d8: jmp 0x68e9f7
0068e9da: subss xmm1, xmm0
0068e9de: movaps xmm0, xmm1
0068e9e1: movss xmm1, dword ptr [0xf1d8f8]
0068e9e9: comiss xmm1, xmm0
0068e9ec: jb 0x68e9f7
0068e9ee: mov dword ptr [ecx], 0
0068e9f4: movaps xmm0, xmm3
0068e9f7: cmp dword ptr [0x1b58e84], 1
0068e9fe: jne 0x68ea03
0068ea00: movaps xmm0, xmm3
0068ea03: push ecx
0068ea04: mov ecx, dword ptr [edi + 4]
0068ea07: movss dword ptr [esp], xmm0
0068ea0c: call 0x566460
0068ea11: pop edi
0068ea12: pop esi
0068ea13: pop ecx
0068ea14: ret 
0068ea15: cmp dword ptr [0x1b58e40], esi
0068ea1b: jne 0x68ea27
0068ea1d: movss xmm0, dword ptr [0xec6fc0]
0068ea25: jmp 0x68e9f7
0068ea27: movss xmm0, dword ptr [0xec6fd4]
0068ea2f: jmp 0x68e9f7
0068ea31: cmp dword ptr [0x1b58e40], esi
0068ea37: jne 0x68e9f4
0068ea39: movss xmm0, dword ptr [0xec6e14]
0068ea41: cmp dword ptr [0x1b58ea4], esi
0068ea47: je 0x68e9f7
0068ea49: mov dword ptr [0x1b58ea4], esi
0068ea4f: jmp 0x68e9f7
0068ea51: int3 
0068ea52: int3 
0068ea53: int3 
0068ea54: int3 
0068ea55: int3 
0068ea56: int3 
0068ea57: int3 
0068ea58: int3 
0068ea59: int3 
0068ea5a: int3 
0068ea5b: int3 
0068ea5c: int3 
0068ea5d: int3 
0068ea5e: int3 
0068ea5f: int3 
0068ea60: cmp dword ptr [ecx + 0x10], 0
0068ea64: lea edx, [ecx + 0x10]
0068ea67: je 0x68ea77
0068ea69: mov eax, dword ptr [esp + 8]
0068ea6d: mov ecx, dword ptr [esp + 4]
0068ea71: push eax
0068ea72: call 0x686bb0
0068ea77: ret 8
0068ea7a: stosd dword ptr es:[edi], eax
0068ea7b: int3 
0068ea7c: int3 
0068ea7d: int3 
0068ea7e: int3 
0068ea7f: int3 
0068ea80: .byte 0x83

3over4 data0xec6fc0 operand0x6a7bf3 candidate-start0x6a7a00
006a7a00: push ebp
006a7a01: mov ebp, esp
006a7a03: and esp, 0xfffffff0
006a7a06: sub esp, 0x3c
006a7a09: push esi
006a7a0a: xor edx, edx
006a7a0c: mov esi, ecx
006a7a0e: call 0xd984d0
006a7a13: mov eax, dword ptr [esi + 0x1f0]
006a7a19: mov ecx, dword ptr [esi + 0x1f4]
006a7a1f: mov edx, dword ptr [esi + 0x1f8]
006a7a25: mov dword ptr [esp + 0x20], eax
006a7a29: mov eax, dword ptr [esi + 0x1fc]
006a7a2f: mov dword ptr [esp + 0x24], ecx
006a7a33: mov ecx, dword ptr [esi + 0x200]
006a7a39: mov dword ptr [esp + 0x28], edx
006a7a3d: mov edx, dword ptr [esi + 0x204]
006a7a43: mov dword ptr [esp + 0x2c], eax
006a7a47: mov eax, dword ptr [esi + 0x208]
006a7a4d: mov dword ptr [esp + 0x30], ecx
006a7a51: mov ecx, dword ptr [esi + 0x20c]
006a7a57: mov dword ptr [esp + 0x34], edx
006a7a5b: mov dword ptr [esp + 0x38], eax
006a7a5f: mov dword ptr [esp + 0x3c], ecx
006a7a63: call 0xda3a90
006a7a68: mov dword ptr [0x1c3610c], 0
006a7a72: mov dword ptr [0x1c36110], 0
006a7a7c: test eax, eax
006a7a7e: je 0x6a7ae3
006a7a80: mov edx, dword ptr [eax + 0x10]
006a7a83: xor ecx, ecx
006a7a85: cmp edx, dword ptr [eax + 0xc]
006a7a88: setg cl
006a7a8b: cmp dword ptr [eax + 0x34], 0
006a7a8f: mov dword ptr [0x1c36110], ecx
006a7a95: je 0x6a7ad9
006a7a97: test ecx, ecx
006a7a99: jne 0x6a7ad9
006a7a9b: movss xmm0, dword ptr [0xf20cc4]
006a7aa3: movss dword ptr [esp + 0x20], xmm0
006a7aa9: movss xmm0, dword ptr [0xf20908]
006a7ab1: movss dword ptr [esp + 0x24], xmm0
006a7ab7: movss xmm0, dword ptr [0xf0da3c]
006a7abf: movss dword ptr [esp + 0x30], xmm0
006a7ac5: movss xmm0, dword ptr [0xf20cc0]
006a7acd: mov dword ptr [0x1c3610c], 1
006a7ad7: jmp 0x6a7b15
006a7ad9: mov dword ptr [0x1c3610c], 0
006a7ae3: movss xmm0, dword ptr [0xf0d8f4]
006a7aeb: movss dword ptr [esp + 0x20], xmm0
006a7af1: movss xmm0, dword ptr [0xedb320]
006a7af9: movss dword ptr [esp + 0x24], xmm0
006a7aff: movss xmm0, dword ptr [0xeca4c8]
006a7b07: movss dword ptr [esp + 0x30], xmm0
006a7b0d: movss xmm0, dword ptr [0xf0d8f0]
006a7b15: lea edx, [esp + 0x20]
006a7b19: mov ecx, esi
006a7b1b: movss dword ptr [esp + 0x34], xmm0
006a7b21: call 0xd96980
006a7b26: test byte ptr [esi + 0x1dc], 8
006a7b2d: movss xmm0, dword ptr [esp + 0x30]
006a7b33: subss xmm0, dword ptr [esp + 0x20]
006a7b39: movss xmm2, dword ptr [0xec6fd4]
006a7b41: mulss xmm0, xmm2
006a7b45: movss dword ptr [esp + 0x10], xmm0
006a7b4b: movss xmm0, dword ptr [esp + 0x24]
006a7b51: subss xmm0, dword ptr [esp + 0x34]
006a7b57: mulss xmm0, xmm2
006a7b5b: movss dword ptr [esp + 0x14], xmm0
006a7b61: xorps xmm0, xmm0
006a7b64: movss dword ptr [esp + 0x18], xmm0
006a7b6a: movss xmm0, dword ptr [0xec6e14]
006a7b72: movss dword ptr [esp + 0x1c], xmm0
006a7b78: je 0x6a7b89
006a7b7a: mov ecx, esi
006a7b7c: call 0xd980a0
006a7b81: movss xmm2, dword ptr [0xec6fd4]
006a7b89: or byte ptr [esi + 0x1dc], 0x34
006a7b90: cmp dword ptr [0x1c36110], 0
006a7b97: movaps xmm0, xmmword ptr [esp + 0x10]
006a7b9c: movaps xmmword ptr [esi + 0xb0], xmm0
006a7ba3: je 0x6a7c43
006a7ba9: mov ecx, dword ptr [esi + 0x214]
006a7baf: mov edx, dword ptr [esi + 0x218]
006a7bb5: mov eax, dword ptr [esi + 0x210]
006a7bbb: mov dword ptr [esp + 0x24], ecx
006a7bbf: mov ecx, dword ptr [esi + 0x220]
006a7bc5: mov dword ptr [esp + 0x28], edx
006a7bc9: mov edx, dword ptr [esi + 0x224]
006a7bcf: mov dword ptr [esp + 0x30], ecx
006a7bd3: movss xmm0, dword ptr [esp + 0x30]
006a7bd9: mov ecx, dword ptr [esi + 0x22c]
006a7bdf: mov dword ptr [esp + 0x20], eax
006a7be3: subss xmm0, dword ptr [esp + 0x20]
006a7be9: mov eax, dword ptr [esi + 0x21c]
006a7bef: mulss xmm0, dword ptr [0xec6fc0]
006a7bf7: mov dword ptr [esp + 0x34], edx
006a7bfb: movss xmm1, dword ptr [esp + 0x34]
006a7c01: addss xmm1, dword ptr [esp + 0x24]
006a7c07: mulss xmm1, xmm2
006a7c0b: mulss xmm0, xmm2
006a7c0f: mov dword ptr [esp + 0x2c], eax
006a7c13: mov eax, dword ptr [esi + 0x228]
006a7c19: movaps xmm2, xmm1
006a7c1c: subss xmm2, xmm0
006a7c20: mov dword ptr [esp + 0x3c], ecx
006a7c24: addss xmm0, xmm1
006a7c28: lea edx, [esp + 0x20]
006a7c2c: mov ecx, esi
006a7c2e: mov dword ptr [esp + 0x38], eax
006a7c32: movss dword ptr [esp + 0x24], xmm2
006a7c38: movss dword ptr [esp + 0x34], xmm0
006a7c3e: call 0xd969b0
006a7c43: pop esi
006a7c44: mov esp, ebp
006a7c46: pop ebp
006a7c47: ret 
006a7c48: int3 
006a7c49: int3 
006a7c4a: int3 
006a7c4b: int3 
006a7c4c: int3 
006a7c4d: int3 
006a7c4e: int3 
006a7c4f: int3 
006a7c50: push ecx
006a7c51: .byte 0xf3
006a7c52: .byte 0x0f

3over4 data0xec6fc0 operand0x6a7d02 candidate-start0x6a7cc0
006a7cc0: push esi
006a7cc1: mov esi, ecx
006a7cc3: call 0xda3a90
006a7cc8: xor edx, edx
006a7cca: mov dword ptr [0x1c3610c], edx
006a7cd0: mov dword ptr [0x1c36110], edx
006a7cd6: cmp eax, edx
006a7cd8: je 0x6a7d18
006a7cda: mov ecx, dword ptr [eax + 0x10]
006a7cdd: push ebx
006a7cde: xor ebx, ebx
006a7ce0: cmp ecx, dword ptr [eax + 0xc]
006a7ce3: setg bl
006a7ce6: mov ecx, ebx
006a7ce8: mov dword ptr [0x1c36110], ecx
006a7cee: pop ebx
006a7cef: cmp dword ptr [eax + 0x34], edx
006a7cf2: je 0x6a7d12
006a7cf4: cmp ecx, edx
006a7cf6: jne 0x6a7d12
006a7cf8: movss xmm0, dword ptr [esp + 8]
006a7cfe: mulss xmm0, dword ptr [0xec6fc0]
006a7d06: mov dword ptr [0x1c3610c], 1
006a7d10: jmp 0x6a7d1e
006a7d12: mov dword ptr [0x1c3610c], edx
006a7d18: movss xmm0, dword ptr [esp + 8]
006a7d1e: push ecx
006a7d1f: mov edx, 1
006a7d24: mov ecx, esi
006a7d26: movss dword ptr [esp], xmm0
006a7d2b: call 0xd96870
006a7d30: pop esi
006a7d31: ret 4
006a7d34: int3 
006a7d35: int3 
006a7d36: int3 
006a7d37: int3 
006a7d38: int3 
006a7d39: int3 
006a7d3a: int3 
006a7d3b: int3 
006a7d3c: int3 
006a7d3d: int3 
006a7d3e: int3 
006a7d3f: int3 
006a7d40: mov eax, ecx
006a7d42: push ebx
006a7d43: mov ebx, edx
006a7d45: test eax, eax
006a7d47: je 0x6a7d84
006a7d49: test ebx, ebx
006a7d4b: je 0x6a7d84
006a7d4d: mov cl, byte ptr [ebx + 0x1dc]
006a7d53: and cl, 0xf7
006a7d56: or cl, 0x34
006a7d59: push esi
006a7d5a: mov byte ptr [ebx + 0x1dc], cl
006a7d60: push edi
006a7d61: .byte 0x8b

3over4 data0xec6fc0 operand0x6a7eaa candidate-start0x6a7d90
006a7d90: push ebp
006a7d91: mov ebp, esp
006a7d93: and esp, 0xfffffff0
006a7d96: sub esp, 0x28
006a7d99: push esi
006a7d9a: push edi
006a7d9b: xor edx, edx
006a7d9d: mov esi, ecx
006a7d9f: call 0xd98c60
006a7da4: cmp dword ptr [0x1c36110], 0
006a7dab: movss xmm0, dword ptr [esi]
006a7daf: movss dword ptr [esp + 0xc], xmm0
006a7db5: je 0x6a7ef0
006a7dbb: mov ecx, dword ptr [esi + 0x1f4]
006a7dc1: mov eax, dword ptr [esi + 0x1f0]
006a7dc7: mov edx, dword ptr [esi + 0x1f8]
006a7dcd: movss xmm0, dword ptr [0xf0d8f4]
006a7dd5: mov dword ptr [esp + 0x14], ecx
006a7dd9: mov ecx, dword ptr [esi + 0x200]
006a7ddf: mov dword ptr [esp + 0x10], eax
006a7de3: mov eax, dword ptr [esi + 0x1fc]
006a7de9: movss dword ptr [esp + 0x10], xmm0
006a7def: movss xmm0, dword ptr [0xedb320]
006a7df7: mov dword ptr [esp + 0x20], ecx
006a7dfb: mov ecx, dword ptr [esi + 0x20c]
006a7e01: mov dword ptr [esp + 0x18], edx
006a7e05: mov edx, dword ptr [esi + 0x204]
006a7e0b: movss dword ptr [esp + 0x14], xmm0
006a7e11: movss xmm0, dword ptr [0xeca4c8]
006a7e19: mov dword ptr [esp + 0x1c], eax
006a7e1d: mov eax, dword ptr [esi + 0x208]
006a7e23: mov dword ptr [esp + 0x24], edx
006a7e27: mov dword ptr [esp + 0x2c], ecx
006a7e2b: movss dword ptr [esp + 0x20], xmm0
006a7e31: movss xmm0, dword ptr [0xf0d8f0]
006a7e39: lea edx, [esp + 0x10]
006a7e3d: mov ecx, esi
006a7e3f: mov dword ptr [esp + 0x28], eax
006a7e43: movss dword ptr [esp + 0x24], xmm0
006a7e49: call 0xd96980
006a7e4e: mov eax, dword ptr [esi + 0x214]
006a7e54: mov ecx, dword ptr [esi + 0x218]
006a7e5a: mov edx, dword ptr [esi + 0x210]
006a7e60: mov dword ptr [esp + 0x14], eax
006a7e64: mov eax, dword ptr [esi + 0x220]
006a7e6a: mov dword ptr [esp + 0x10], edx
006a7e6e: mov edx, dword ptr [esi + 0x21c]
006a7e74: mov dword ptr [esp + 0x18], ecx
006a7e78: mov ecx, dword ptr [esi + 0x224]
006a7e7e: mov dword ptr [esp + 0x24], ecx
006a7e82: movss xmm1, dword ptr [esp + 0x24]
006a7e88: addss xmm1, dword ptr [esp + 0x14]
006a7e8e: mulss xmm1, dword ptr [0xec6fd4]
006a7e96: mov dword ptr [esp + 0x20], eax
006a7e9a: movss xmm0, dword ptr [esp + 0x20]
006a7ea0: subss xmm0, dword ptr [esp + 0x10]
006a7ea6: mulss xmm0, dword ptr [0xec6fc0]
006a7eae: mulss xmm0, dword ptr [0xec6fd4]
006a7eb6: mov eax, dword ptr [esi + 0x22c]
006a7ebc: mov dword ptr [esp + 0x1c], edx
006a7ec0: mov edx, dword ptr [esi + 0x228]
006a7ec6: movaps xmm2, xmm1
006a7ec9: subss xmm2, xmm0
006a7ecd: mov dword ptr [esp + 0x28], edx
006a7ed1: addss xmm0, xmm1
006a7ed5: lea edx, [esp + 0x10]
006a7ed9: mov ecx, esi
006a7edb: mov dword ptr [esp + 0x2c], eax
006a7edf: movss dword ptr [esp + 0x14], xmm2
006a7ee5: movss dword ptr [esp + 0x24], xmm0
006a7eeb: call 0xd969b0
006a7ef0: call 0xda3a90
006a7ef5: xor ecx, ecx
006a7ef7: mov edi, eax
006a7ef9: call 0xda3670
006a7efe: mov ecx, dword ptr [edi]
006a7f00: cmp ecx, 2
006a7f03: je 0x6a7f22
006a7f05: test ecx, ecx
006a7f07: jne 0x6a7f13
006a7f09: .byte 0xf3

3over4 data0xec6fc0 operand0x6bcaa0 candidate-start0x6bca00
006bca00: movss xmm0, dword ptr [0x1dee638]
006bca08: comiss xmm0, dword ptr [0xedbb70]
006bca0f: jb 0x6bca3c
006bca11: movss xmm1, dword ptr [0xf2bf68]
006bca19: comiss xmm1, xmm0
006bca1c: jb 0x6bca3c
006bca1e: cmp dword ptr [0x1dee5ec], 4
006bca25: jl 0x6bca36
006bca27: mov ecx, dword ptr [0x1dee620]
006bca2d: call 0x882370
006bca32: test eax, eax
006bca34: jg 0x6bca3c
006bca36: mov eax, 1
006bca3b: ret 
006bca3c: xor eax, eax
006bca3e: ret 
006bca3f: int3 
006bca40: sub esp, 8
006bca43: push esi
006bca44: push edi
006bca45: mov edi, dword ptr [esp + 0x18]
006bca49: mov eax, dword ptr [edi + 0xb0c]
006bca4f: lea esi, [eax*8]
006bca56: sub esi, eax
006bca58: lea esi, [esi*4 + 0x1dee6b4]
006bca5f: call 0x4120c0
006bca64: mov edx, 5
006bca69: mov ecx, eax
006bca6b: call 0x411f40
006bca70: test eax, eax
006bca72: je 0x6bcad2
006bca74: test byte ptr [esi + 0x18], 6
006bca78: jne 0x6bcad2
006bca7a: mov eax, dword ptr [edi + 0x18]
006bca7d: mov eax, dword ptr [eax + 0xf0]
006bca83: movss xmm0, dword ptr [esi + 0x10]
006bca88: and eax, 0x80
006bca8d: mov dword ptr [esp + 8], eax
006bca91: mov eax, 0
006bca96: je 0x6bca9c
006bca98: test eax, eax
006bca9a: je 0x6bcab7
006bca9c: movss xmm1, dword ptr [0xec6fc0]
006bcaa4: comiss xmm1, xmm0
006bcaa7: jbe 0x6bcad2
006bcaa9: fld dword ptr [0xec7090]
006bcaaf: pop edi
006bcab0: pop esi
006bcab1: add esp, 8
006bcab4: ret 8
006bcab7: movss xmm1, dword ptr [0xec7044]
006bcabf: comiss xmm1, xmm0
006bcac2: jbe 0x6bcad2
006bcac4: fld dword ptr [0xec7090]
006bcaca: pop edi
006bcacb: pop esi
006bcacc: add esp, 8
006bcacf: ret 8
006bcad2: fld dword ptr [0xec6ff0]
006bcad8: pop edi
006bcad9: pop esi
006bcada: add esp, 8
006bcadd: ret 8
006bcae0: sub esp, 8
006bcae3: push esi
006bcae4: mov esi, edx
006bcae6: mov dword ptr [esp + 4], esi
006bcaea: mov dword ptr [esp + 8], ecx
006bcaee: call 0x4120c0
006bcaf3: lea ecx, [eax + 1]
006bcaf6: mov edx, 5
006bcafb: call 0x411e60

3over4 data0xec6fc0 operand0x6d5990 candidate-start0x6d5970
006d5970: cmp esi, 2
006d5973: je 0x6d597e
006d5975: cmp esi, 4
006d5978: jl 0x6d5b00
006d597e: mov edx, dword ptr [0x1d95200]
006d5984: movss xmm2, dword ptr [0xec6fd4]
006d598c: movss xmm1, dword ptr [0xec6fc0]
006d5994: movss xmm4, dword ptr [0xec6e14]
006d599c: mov ecx, 0x1d951fc
006d59a1: sub ecx, 0x2c
006d59a4: mov eax, edx
006d59a6: sub eax, ecx
006d59a8: neg eax
006d59aa: sbb eax, eax
006d59ac: and eax, edx
006d59ae: je 0x6d5a44
006d59b4: mov ecx, dword ptr [eax + 0xb00]
006d59ba: mov edx, dword ptr [ecx + 0x34]
006d59bd: xorps xmm0, xmm0
006d59c0: shr edx, 0x11
006d59c3: and edx, 0x7f
006d59c6: cvtsi2ss xmm0, edx
006d59ca: mulss xmm0, dword ptr [0xf2cf88]
006d59d2: movaps xmm3, xmm0
006d59d5: subss xmm0, xmm2
006d59d9: mulss xmm0, dword ptr [0xec6fd0]
006d59e1: mulss xmm0, dword ptr [0xec704c]
006d59e9: addss xmm0, xmm1
006d59ed: comiss xmm1, xmm0

3over4 data0xec6fc0 operand0x6d5a30 candidate-start0x6d5970
006d5970: cmp esi, 2
006d5973: je 0x6d597e
006d5975: cmp esi, 4
006d5978: jl 0x6d5b00
006d597e: mov edx, dword ptr [0x1d95200]
006d5984: movss xmm2, dword ptr [0xec6fd4]
006d598c: movss xmm1, dword ptr [0xec6fc0]
006d5994: movss xmm4, dword ptr [0xec6e14]
006d599c: mov ecx, 0x1d951fc
006d59a1: sub ecx, 0x2c
006d59a4: mov eax, edx
006d59a6: sub eax, ecx
006d59a8: neg eax
006d59aa: sbb eax, eax
006d59ac: and eax, edx
006d59ae: je 0x6d5a44
006d59b4: mov ecx, dword ptr [eax + 0xb00]
006d59ba: mov edx, dword ptr [ecx + 0x34]
006d59bd: xorps xmm0, xmm0
006d59c0: shr edx, 0x11
006d59c3: and edx, 0x7f
006d59c6: cvtsi2ss xmm0, edx
006d59ca: mulss xmm0, dword ptr [0xf2cf88]
006d59d2: movaps xmm3, xmm0
006d59d5: subss xmm0, xmm2
006d59d9: mulss xmm0, dword ptr [0xec6fd0]
006d59e1: mulss xmm0, dword ptr [0xec704c]
006d59e9: addss xmm0, xmm1
006d59ed: comiss xmm1, xmm0
006d59f0: mulss xmm3, xmm2
006d59f4: addss xmm3, dword ptr [eax + 0x136c]
006d59fc: jbe 0x6d5a03
006d59fe: movaps xmm0, xmm1
006d5a01: jmp 0x6d5a0b
006d5a03: comiss xmm4, xmm0
006d5a06: ja 0x6d5a0b
006d5a08: movaps xmm0, xmm4
006d5a0b: comiss xmm0, xmm3
006d5a0e: ja 0x6d5a13
006d5a10: movaps xmm0, xmm3
006d5a13: mov edx, dword ptr [eax]
006d5a15: movss dword ptr [eax + 0x136c], xmm0
006d5a1d: mov ecx, eax
006d5a1f: mov eax, dword ptr [edx + 0xc]
006d5a22: call eax
006d5a24: movss xmm2, dword ptr [0xec6fd4]
006d5a2c: movss xmm1, dword ptr [0xec6fc0]
006d5a34: movss xmm4, dword ptr [0xec6e14]
006d5a3c: test eax, eax
006d5a3e: jne 0x6d59b4
006d5a44: mov edx, dword ptr [0x1d95210]
006d5a4a: mov ecx, 0x1d9520c
006d5a4f: sub ecx, 0x2c
006d5a52: mov eax, edx
006d5a54: sub eax, ecx
006d5a56: neg eax
006d5a58: sbb eax, eax
006d5a5a: and eax, edx
006d5a5c: je 0x6d5b00
006d5a62: jmp 0x6d5a88
006d5a64: jmp 0x6d5a70
006d5a66: lea esp, [esp]
006d5a6d: lea ecx, [ecx]
006d5a70: movss xmm2, dword ptr [0xec6fd4]
006d5a78: movss xmm1, dword ptr [0xec6fc0]
006d5a80: movss xmm4, dword ptr [0xec6e14]
006d5a88: mov ecx, dword ptr [eax + 0xb00]
006d5a8e: .byte 0x8b
006d5a8f: push ecx

3over4 data0xec6fc0 operand0x6d5a7c candidate-start0x6d5970
006d5970: cmp esi, 2
006d5973: je 0x6d597e
006d5975: cmp esi, 4
006d5978: jl 0x6d5b00
006d597e: mov edx, dword ptr [0x1d95200]
006d5984: movss xmm2, dword ptr [0xec6fd4]
006d598c: movss xmm1, dword ptr [0xec6fc0]
006d5994: movss xmm4, dword ptr [0xec6e14]
006d599c: mov ecx, 0x1d951fc
006d59a1: sub ecx, 0x2c
006d59a4: mov eax, edx
006d59a6: sub eax, ecx
006d59a8: neg eax
006d59aa: sbb eax, eax
006d59ac: and eax, edx
006d59ae: je 0x6d5a44
006d59b4: mov ecx, dword ptr [eax + 0xb00]
006d59ba: mov edx, dword ptr [ecx + 0x34]
006d59bd: xorps xmm0, xmm0
006d59c0: shr edx, 0x11
006d59c3: and edx, 0x7f
006d59c6: cvtsi2ss xmm0, edx
006d59ca: mulss xmm0, dword ptr [0xf2cf88]
006d59d2: movaps xmm3, xmm0
006d59d5: subss xmm0, xmm2
006d59d9: mulss xmm0, dword ptr [0xec6fd0]
006d59e1: mulss xmm0, dword ptr [0xec704c]
006d59e9: addss xmm0, xmm1
006d59ed: comiss xmm1, xmm0
006d59f0: mulss xmm3, xmm2
006d59f4: addss xmm3, dword ptr [eax + 0x136c]
006d59fc: jbe 0x6d5a03
006d59fe: movaps xmm0, xmm1
006d5a01: jmp 0x6d5a0b
006d5a03: comiss xmm4, xmm0
006d5a06: ja 0x6d5a0b
006d5a08: movaps xmm0, xmm4
006d5a0b: comiss xmm0, xmm3
006d5a0e: ja 0x6d5a13
006d5a10: movaps xmm0, xmm3
006d5a13: mov edx, dword ptr [eax]
006d5a15: movss dword ptr [eax + 0x136c], xmm0
006d5a1d: mov ecx, eax
006d5a1f: mov eax, dword ptr [edx + 0xc]
006d5a22: call eax
006d5a24: movss xmm2, dword ptr [0xec6fd4]
006d5a2c: movss xmm1, dword ptr [0xec6fc0]
006d5a34: movss xmm4, dword ptr [0xec6e14]
006d5a3c: test eax, eax
006d5a3e: jne 0x6d59b4
006d5a44: mov edx, dword ptr [0x1d95210]
006d5a4a: mov ecx, 0x1d9520c
006d5a4f: sub ecx, 0x2c
006d5a52: mov eax, edx
006d5a54: sub eax, ecx
006d5a56: neg eax
006d5a58: sbb eax, eax
006d5a5a: and eax, edx
006d5a5c: je 0x6d5b00
006d5a62: jmp 0x6d5a88
006d5a64: jmp 0x6d5a70
006d5a66: lea esp, [esp]
006d5a6d: lea ecx, [ecx]
006d5a70: movss xmm2, dword ptr [0xec6fd4]
006d5a78: movss xmm1, dword ptr [0xec6fc0]
006d5a80: movss xmm4, dword ptr [0xec6e14]
006d5a88: mov ecx, dword ptr [eax + 0xb00]
006d5a8e: mov edx, dword ptr [ecx + 0x34]
006d5a91: xorps xmm0, xmm0
006d5a94: shr edx, 0x11
006d5a97: and edx, 0x7f
006d5a9a: cvtsi2ss xmm0, edx
006d5a9e: mulss xmm0, dword ptr [0xf2cf88]
006d5aa6: movaps xmm3, xmm0
006d5aa9: subss xmm0, xmm2
006d5aad: mulss xmm0, dword ptr [0xec6fd0]
006d5ab5: mulss xmm0, dword ptr [0xec704c]
006d5abd: addss xmm0, xmm1
006d5ac1: comiss xmm1, xmm0
006d5ac4: mulss xmm3, xmm2
006d5ac8: addss xmm3, dword ptr [eax + 0x136c]
006d5ad0: jbe 0x6d5ad7
006d5ad2: movaps xmm0, xmm1
006d5ad5: jmp 0x6d5adf
006d5ad7: comiss xmm4, xmm0
006d5ada: ja 0x6d5adf

3over4 data0xec6fc0 operand0x6e36ed candidate-start0x6e3610
006e3610: push ebp
006e3611: mov ebp, esp
006e3613: and esp, 0xfffffff0
006e3616: sub esp, 0x14
006e3619: push ebx
006e361a: push esi
006e361b: push edi
006e361c: mov edi, ecx
006e361e: mov esi, dword ptr [edi + 0x3c]
006e3621: mov ebx, edx
006e3623: mov edx, dword ptr [0x11990e0]
006e3629: test esi, esi
006e362b: je 0x6e3652
006e362d: mov ecx, dword ptr [esi + 0x1680]
006e3633: test ecx, ecx
006e3635: jle 0x6e3652
006e3637: lea eax, [ecx + ecx*2]
006e363a: shl eax, 7
006e363d: add eax, esi
006e363f: nop 
006e3640: sub eax, 0x180
006e3645: dec ecx
006e3646: cmp dword ptr [eax], edx
006e3648: je 0x6e373b
006e364e: test ecx, ecx
006e3650: jg 0x6e3640
006e3652: mov ecx, edi
006e3654: call 0x6e2600
006e3659: movss xmm1, dword ptr [0xec6e14]
006e3661: xorps xmm0, xmm0
006e3664: mov esi, eax
006e3666: movss dword ptr [esi + 0x10], xmm1
006e366b: movss dword ptr [esi + 0x18], xmm1
006e3670: movss dword ptr [esi + 0x14], xmm0
006e3675: mov dword ptr [esi + 0x30], ebx
006e3678: movss dword ptr [esi + 0x1c], xmm0
006e367d: mov dword ptr [esi + 0x34], 1
006e3684: xor eax, eax
006e3686: mov dword ptr [esi + 0x2c], eax
006e3689: movss xmm1, dword ptr [0x146b618]
006e3691: movss dword ptr [esi + 0x20], xmm1
006e3696: mov ecx, dword ptr [edi + 0x4c]
006e3699: movaps xmm1, xmmword ptr [0x1dee5d0]
006e36a0: mov edx, dword ptr [ecx + 0x30]
006e36a3: movaps xmmword ptr [esp + 0x10], xmm1
006e36a8: movd xmm1, dword ptr [edx]
006e36ac: cvtdq2ps xmm1, xmm1
006e36af: mulss xmm1, dword ptr [esp + 0x18]
006e36b5: comiss xmm0, xmm1
006e36b8: jbe 0x6e372b
006e36ba: mov ecx, dword ptr [0x10e23b8]
006e36c0: call 0xd963d0
006e36c5: mov ecx, eax
006e36c7: call 0xd96410
006e36cc: fadd dword ptr [0xf2d12c]
006e36d2: fstp dword ptr [esi + 0x24]
006e36d5: mov ecx, dword ptr [0x10e23b8]
006e36db: call 0xd963d0
006e36e0: mov ecx, eax
006e36e2: mov dword ptr [esp + 0x14], edx
006e36e6: call 0xd96410
006e36eb: fld dword ptr [0xec6fc0]
006e36f1: fcompi st(1)
006e36f3: fstp st(0)
006e36f5: jbe 0x6e36fe
006e36f7: mov eax, 1
006e36fc: jmp 0x6e3700
006e36fe: xor eax, eax
006e3700: mov dword ptr [esi + 0x38], eax
006e3703: mov ecx, dword ptr [0x10e23b8]
006e3709: call 0xd963d0
006e370e: mov ecx, eax
006e3710: call 0xd96410
006e3715: fmul dword ptr [0xedac08]
006e371b: fadd dword ptr [0xee3c9c]
006e3721: fstp dword ptr [esi + 0x28]
006e3724: pop edi
006e3725: pop esi
006e3726: pop ebx
006e3727: mov esp, ebp
006e3729: pop ebp
006e372a: ret 
006e372b: movss xmm0, dword ptr [0xec74c4]
006e3733: movss dword ptr [esi + 0x24], xmm0
006e3738: mov dword ptr [esi + 0x38], eax
006e373b: pop edi
006e373c: pop esi
006e373d: pop ebx
006e373e: mov esp, ebp
006e3740: pop ebp
006e3741: ret 
006e3742: fmul st(4)
006e3744: int3 
006e3745: int3 
006e3746: int3 
006e3747: int3 
006e3748: int3 
006e3749: int3 
006e374a: int3 
006e374b: int3 
006e374c: int3 

3over4 data0xec6fc0 operand0x6e92bc candidate-start0x6e91f0
006e91f0: sub esp, 8
006e91f3: mov ecx, dword ptr [esi + 0x18]
006e91f6: mov eax, dword ptr [ecx + 0xf0]
006e91fc: mov ecx, dword ptr [ecx + 0xf4]
006e9202: mov edx, eax
006e9204: and edx, 0x40
006e9207: mov dword ptr [esp + 4], ecx
006e920b: mov dword ptr [esp], edx
006e920e: mov ecx, 0
006e9213: je 0x6e9219
006e9215: test ecx, ecx
006e9217: je 0x6e9266
006e9219: and eax, 0x80
006e921e: mov dword ptr [esp], eax
006e9221: mov eax, ecx
006e9223: je 0x6e9229
006e9225: test eax, eax
006e9227: je 0x6e9266
006e9229: mov eax, edi
006e922b: imul eax, eax, 0x34
006e922e: mov eax, dword ptr [eax + 0xf25b1c]
006e9234: test al, 0xc
006e9236: je 0x6e9266
006e9238: test al, 3
006e923a: jne 0x6e9245
006e923c: mov eax, 1
006e9241: add esp, 8
006e9244: ret 
006e9245: push esi
006e9246: call 0x6bd1f0
006e924b: movss xmm1, dword ptr [0xecffc8]
006e9253: comiss xmm1, xmm0
006e9256: ja 0x6e9266
006e9258: movzx ecx, byte ptr [edi + 0x6e92e0]
006e925f: jmp dword ptr [ecx*4 + 0x6e92d4]
006e9266: xor eax, eax
006e9268: add esp, 8
006e926b: ret 
006e926c: mov edx, dword ptr [esi + 0xb00]
006e9272: mov ecx, dword ptr [edx + 0x30]
006e9275: mov edx, 0x28
006e927a: call 0x6d5f00
006e927f: fstp dword ptr [esp]
006e9282: movss xmm0, dword ptr [esp]
006e9287: push ecx
006e9288: mov ecx, 0x10e23b8
006e928d: movss dword ptr [esp], xmm0
006e9292: call 0x41c330
006e9297: add esp, 8
006e929a: ret 
006e929b: mov ecx, dword ptr [esi + 0xb00]
006e92a1: call 0xcb0760
006e92a6: xorps xmm0, xmm0
006e92a9: sub eax, 0x19
006e92ac: cvtsi2ss xmm0, eax
006e92b0: mulss xmm0, dword ptr [0xf2d1d4]
006e92b8: mulss xmm0, dword ptr [0xec6fc0]
006e92c0: push ecx
006e92c1: mov ecx, 0x10e23b8
006e92c6: movss dword ptr [esp], xmm0
006e92cb: call 0x41c330
006e92d0: add esp, 8
006e92d3: ret 
006e92d4: wait 
006e92d5: xchg edx, eax
006e92d6: outsb dx, byte ptr [esi]
006e92d7: add byte ptr [esi - 0x6e], ah
006e92da: outsb dx, byte ptr [esi]
006e92db: add byte ptr [edx + edx*4 + 0x6e], ch
006e92df: add byte ptr [eax], al
006e92e1: add byte ptr [eax], al
006e92e3: add byte ptr [eax], al
006e92e5: add dword ptr [edx], eax
006e92e7: add byte ptr [eax], al
006e92e9: add byte ptr [eax], al
006e92eb: int3 
006e92ec: int3 
006e92ed: int3 
006e92ee: int3 
006e92ef: int3 
006e92f0: push esi
006e92f1: mov esi, edx
006e92f3: mov edx, dword ptr [0x1199ea8]
006e92f9: call 0x6e2600
006e92fe: xor ecx, ecx
006e9300: cmp eax, ecx
006e9302: je 0x6e932b
006e9304: xorps xmm0, xmm0
006e9307: mov dword ptr [eax + 0x2c], esi
006e930a: movss dword ptr [eax + 0x20], xmm0
006e930f: movss dword ptr [eax + 0x18], xmm0
006e9314: movss dword ptr [eax + 0x1c], xmm0
006e9319: mov dword ptr [eax + 0x10], ecx

3over4 data0xec6fc0 operand0x6eb7d9 candidate-start0x6eb3a0
006eb3a0: push ebp
006eb3a1: mov ebp, esp
006eb3a3: and esp, 0xfffffff0
006eb3a6: sub esp, 0xc8
006eb3ac: push ebx
006eb3ad: mov ebx, dword ptr [ebp + 8]
006eb3b0: push esi
006eb3b1: push 0x7c
006eb3b3: lea ecx, [edi + 0x29c]
006eb3b9: xor dl, dl
006eb3bb: call 0xd95820
006eb3c0: push 0x7c
006eb3c2: xor dl, dl
006eb3c4: lea ecx, [esp + 0x54]
006eb3c8: call 0xd95820
006eb3cd: test dword ptr [edi + 0x324], 0x2000
006eb3d7: je 0x6eb3e3
006eb3d9: movss xmm0, dword ptr [0xf2c0ec]
006eb3e1: jmp 0x6eb3eb
006eb3e3: movss xmm0, dword ptr [0xf2d118]
006eb3eb: mov ecx, dword ptr [0x1d95440]
006eb3f1: xorps xmm6, xmm6
006eb3f4: movss xmm7, dword ptr [0xec6e14]
006eb3fc: mov eax, 0x1d9543c
006eb401: sub eax, 0x24
006eb404: mov esi, ecx
006eb406: sub esi, eax
006eb408: neg esi
006eb40a: sbb esi, esi
006eb40c: and esi, ecx
006eb40e: movss dword ptr [esp + 0x1c], xmm0
006eb414: je 0x6eb77b
006eb41a: lea ebx, [ebx]
006eb420: movss xmm4, dword ptr [0xf1be18]
006eb428: movss xmm1, dword ptr [0xf2bd38]
006eb430: cmp esi, ebx
006eb432: je 0x6eb750
006eb438: mov ecx, dword ptr [esi + 0x74]
006eb43b: mov edx, 0x400
006eb440: cmp ecx, 1
006eb443: je 0x6eb492
006eb445: cmp ecx, 3
006eb448: jne 0x6eb497
006eb44a: mov eax, dword ptr [esi + 0x20]
006eb44d: movss xmm2, dword ptr [eax + 0x30]
006eb452: movaps xmm0, xmm2
006eb455: addss xmm0, xmm1
006eb459: subss xmm1, xmm2
006eb45d: comiss xmm1, xmm0
006eb460: jbe 0x6eb467
006eb462: movaps xmm3, xmm0
006eb465: jmp 0x6eb46a
006eb467: movaps xmm3, xmm1
006eb46a: movss xmm2, dword ptr [eax + 0x38]
006eb46f: movaps xmm0, xmm2
006eb472: movaps xmm1, xmm4
006eb475: addss xmm0, xmm4
006eb479: subss xmm1, xmm2
006eb47d: comiss xmm1, xmm0
006eb480: ja 0x6eb485
006eb482: movaps xmm0, xmm1
006eb485: comiss xmm0, xmm3
006eb488: jbe 0x6eb48d
006eb48a: movaps xmm0, xmm3
006eb48d: comiss xmm0, xmm6
006eb490: jb 0x6eb497
006eb492: mov edx, 0x200
006eb497: test dword ptr [edi + 0x324], edx
006eb49d: je 0x6eb750
006eb4a3: cmp ecx, 1
006eb4a6: jne 0x6eb4d1
006eb4a8: mov eax, dword ptr [esi]
006eb4aa: mov edx, dword ptr [eax + 0x20]
006eb4ad: mov ecx, esi
006eb4af: call edx
006eb4b1: movzx ecx, byte ptr [eax + 0x1287]
006eb4b8: and ecx, 0xf
006eb4bb: mov eax, 1
006eb4c0: shl eax, cl
006eb4c2: test dword ptr [edi + 0x328], eax
006eb4c8: je 0x6eb745
006eb4ce: xorps xmm6, xmm6
006eb4d1: mov ecx, dword ptr [esi + 0x20]
006eb4d4: movaps xmm0, xmmword ptr [ecx + 0x30]
006eb4d8: movaps xmmword ptr [esp + 0x30], xmm0
006eb4dd: mov edx, esi
006eb4df: lea ecx, [esp + 0x40]
006eb4e3: movss dword ptr [esp + 0x34], xmm6
006eb4e9: call 0x88f9b0
006eb4ee: fstp st(0)
006eb4f0: mov edx, dword ptr [ebp + 0xc]
006eb4f3: cmp dword ptr [edx + 0x24], 0
006eb4f7: je 0x6eb503
006eb4f9: movss xmm0, dword ptr [0xec7090]
006eb501: jmp 0x6eb50b
006eb503: movss xmm0, dword ptr [0xec708c]
006eb50b: movaps xmm2, xmmword ptr [esp + 0x30]
006eb510: movss xmm5, dword ptr [edi + 0x320]
006eb518: shufps xmm0, xmm0, 0
006eb51c: mulps xmm0, xmmword ptr [esp + 0x40]
006eb521: addps xmm2, xmm0
006eb524: subps xmm2, xmmword ptr [edi]
006eb527: movaps xmmword ptr [esp + 0x40], xmm0
006eb52c: movaps xmm1, xmm2
006eb52f: mulps xmm1, xmm2
006eb532: movaps xmm0, xmm1
006eb535: movhlps xmm0, xmm1
006eb538: addps xmm0, xmm1
006eb53b: movaps xmm1, xmm0
006eb53e: shufps xmm1, xmm0, 1
006eb542: addps xmm1, xmm0
006eb545: movaps xmmword ptr [esp + 0x20], xmm1
006eb54a: movss xmm1, dword ptr [esp + 0x1c]
006eb550: movaps xmm0, xmm5
006eb553: comiss xmm1, xmm0
006eb556: ja 0x6eb55b
006eb558: movaps xmm0, xmm1
006eb55b: movss xmm3, dword ptr [esp + 0x20]
006eb561: mulss xmm0, xmm0
006eb565: comiss xmm3, xmm0
006eb568: ja 0x6eb745
006eb56e: movss xmm7, dword ptr [0xec6e14]
006eb576: xorps xmm6, xmm6
006eb579: xorps xmm0, xmm0
006eb57c: movss xmm0, xmm3
006eb580: sqrtss xmm0, xmm0
006eb584: movaps xmmword ptr [esp + 0x20], xmm0
006eb589: movaps xmm0, xmm7
006eb58c: divss xmm0, dword ptr [esp + 0x20]
006eb592: shufps xmm0, xmm0, 0
006eb596: mulps xmm0, xmm2
006eb599: movss xmm2, dword ptr [0xec990c]
006eb5a1: movaps xmmword ptr [esp + 0x30], xmm0
006eb5a6: movss xmm0, dword ptr [esp + 0x20]
006eb5ac: subss xmm0, xmm2
006eb5b0: subss xmm1, xmm2
006eb5b4: divss xmm0, xmm1
006eb5b8: comiss xmm6, xmm0
006eb5bb: jbe 0x6eb5c2
006eb5bd: movaps xmm0, xmm6
006eb5c0: jmp 0x6eb5ca
006eb5c2: comiss xmm7, xmm0
006eb5c5: ja 0x6eb5ca
006eb5c7: movaps xmm0, xmm7
006eb5ca: movss xmm1, dword ptr [0xec6ff0]
006eb5d2: subss xmm0, xmm7
006eb5d6: mulss xmm0, xmm0
006eb5da: movss dword ptr [esp + 0x14], xmm0
006eb5e0: movaps xmm0, xmm7
006eb5e3: subss xmm0, dword ptr [esp + 0x14]
006eb5e9: subss xmm0, xmm7
006eb5ed: comiss xmm1, xmm0
006eb5f0: jbe 0x6eb5fd
006eb5f2: movaps xmm0, xmm1
006eb5f5: movss dword ptr [esp + 0x18], xmm0
006eb5fb: jmp 0x6eb610
006eb5fd: comiss xmm6, xmm0
006eb600: jbe 0x6eb60a
006eb602: movss dword ptr [esp + 0x18], xmm0
006eb608: jmp 0x6eb610
006eb60a: movss dword ptr [esp + 0x18], xmm6
006eb610: test dword ptr [edi + 0x324], 0x1000
006eb61a: movaps xmm2, xmm6
006eb61d: je 0x6eb6c0
006eb623: mov eax, dword ptr [ebx + 0x4c]
006eb626: cmp eax, dword ptr [esi + 0x4c]
006eb629: jne 0x6eb6c0
006eb62f: mov eax, dword ptr [ebx + 0x74]
006eb632: dec eax
006eb633: cmp eax, 4
006eb636: ja 0x6eb6c0
006eb63c: jmp dword ptr [eax*4 + 0x6eb860]
006eb643: mov eax, dword ptr [esi + 0x74]
006eb646: dec eax
006eb647: cmp eax, 4
006eb64a: ja 0x6eb6c0
006eb64c: jmp dword ptr [eax*4 + 0x6eb874]
006eb653: movss xmm0, dword ptr [esp + 0x20]
006eb659: sub esp, 0x14
006eb65c: movss dword ptr [esp + 0x10], xmm0
006eb662: movss xmm0, dword ptr [0xf2d118]
006eb66a: movss dword ptr [esp + 0xc], xmm6
006eb670: movss dword ptr [esp + 8], xmm0
006eb676: movss xmm0, dword ptr [0xf21000]
006eb67e: movss dword ptr [esp + 4], xmm1
006eb684: movss dword ptr [esp], xmm0
006eb689: call 0x6cb710
006eb68e: fstp dword ptr [esp + 0x14]
006eb692: subss xmm5, dword ptr [0xf25ecc]
006eb69a: mulss xmm5, dword ptr [0xf2d284]
006eb6a2: comiss xmm6, xmm5
006eb6a5: jbe 0x6eb6ac
006eb6a7: movaps xmm0, xmm6
006eb6aa: jmp 0x6eb6b7
006eb6ac: comiss xmm7, xmm5
006eb6af: movaps xmm0, xmm5
006eb6b2: ja 0x6eb6b7
006eb6b4: movaps xmm0, xmm7
006eb6b7: mulss xmm0, dword ptr [esp + 0x14]
006eb6bd: movaps xmm2, xmm0
006eb6c0: mov eax, dword ptr [edi + 0x318]
006eb6c6: cmp eax, dword ptr [edi + 0x31c]
006eb6cc: jg 0x6eb750
006eb6d2: movss xmm3, dword ptr [esp + 0x38]
006eb6d8: movss xmm4, dword ptr [esp + 0x30]
006eb6de: mov edx, eax
006eb6e0: add edx, edx
006eb6e2: lea ecx, [edi + eax*4 + 0x29c]
006eb6e9: lea edx, [edi + edx*8 + 0x38]
006eb6ed: lea ecx, [ecx]
006eb6f0: movss xmm0, dword ptr [edx - 8]
006eb6f5: movss xmm1, dword ptr [edx]
006eb6f9: mulss xmm0, xmm4
006eb6fd: mulss xmm1, xmm3
006eb701: addss xmm0, xmm1
006eb705: comiss xmm0, xmm6
006eb708: jbe 0x6eb70f
006eb70a: movaps xmm1, xmm0
006eb70d: jmp 0x6eb712
006eb70f: movaps xmm1, xmm6
006eb712: mulss xmm1, xmm1
006eb716: mulss xmm1, dword ptr [esp + 0x18]
006eb71c: addss xmm1, dword ptr [ecx]
006eb720: mulss xmm0, xmm2
006eb724: addss xmm0, dword ptr [esp + eax*4 + 0x50]
006eb72a: movss dword ptr [ecx], xmm1
006eb72e: movss dword ptr [esp + eax*4 + 0x50], xmm0
006eb734: inc eax
006eb735: add edx, 0x10
006eb738: add ecx, 4
006eb73b: cmp eax, dword ptr [edi + 0x31c]
006eb741: jle 0x6eb6f0
006eb743: jmp 0x6eb750
006eb745: movss xmm7, dword ptr [0xec6e14]
006eb74d: xorps xmm6, xmm6
006eb750: mov eax, dword ptr [esi + 0x60]
006eb753: mov ecx, dword ptr [esi + 0x28]
006eb756: and eax, 1
006eb759: lea eax, [eax*8 + 0x1d9543c]
006eb760: test eax, eax
006eb762: je 0x6eb769
006eb764: add eax, -0x24
006eb767: jmp 0x6eb76b
006eb769: xor eax, eax
006eb76b: mov esi, ecx
006eb76d: sub esi, eax
006eb76f: neg esi
006eb771: sbb esi, esi
006eb773: and esi, ecx
006eb775: jne 0x6eb420
006eb77b: mov edx, dword ptr [ebx + 4]
006eb77e: xor eax, eax
006eb780: mov ecx, edx
006eb782: test ecx, ecx
006eb784: je 0x6eb799
006eb786: mov eax, dword ptr [ecx + 0x14]
006eb789: dec eax
006eb78a: neg eax
006eb78c: sbb eax, eax
006eb78e: not eax
006eb790: and eax, ecx
006eb792: mov ecx, dword ptr [ecx + 4]
006eb795: je 0x6eb782
006eb797: jmp 0x6eb7a0
006eb799: test eax, eax
006eb79b: jne 0x6eb7a0
006eb79d: movaps xmm6, xmm7
006eb7a0: test dword ptr [edi + 0x324], 0x2000
006eb7aa: je 0x6eb7b6
006eb7ac: movss xmm1, dword ptr [0xec6fd0]
006eb7b4: jmp 0x6eb7f0
006eb7b6: xor eax, eax
006eb7b8: mov ecx, edx
006eb7ba: lea ebx, [ebx]
006eb7c0: test ecx, ecx
006eb7c2: je 0x6eb7df
006eb7c4: mov eax, dword ptr [ecx + 0x14]
006eb7c7: dec eax
006eb7c8: neg eax
006eb7ca: sbb eax, eax
006eb7cc: not eax
006eb7ce: and eax, ecx
006eb7d0: mov ecx, dword ptr [ecx + 4]
006eb7d3: je 0x6eb7c0
006eb7d5: movss xmm1, dword ptr [0xec6fc0]
006eb7dd: jmp 0x6eb7f0
006eb7df: test eax, eax
006eb7e1: je 0x6eb7ed
006eb7e3: movss xmm1, dword ptr [0xec6fc0]
006eb7eb: jmp 0x6eb7f0
006eb7ed: movaps xmm1, xmm7
006eb7f0: mov ecx, dword ptr [edi + 0x318]
006eb7f6: cmp ecx, dword ptr [edi + 0x31c]
006eb7fc: jg 0x6eb857
006eb7fe: movss xmm2, dword ptr [0xec7250]
006eb806: lea eax, [edi + ecx*4 + 0x220]
006eb80d: lea ecx, [ecx]
006eb810: movss xmm0, dword ptr [eax + 0x7c]
006eb815: comiss xmm2, xmm0
006eb818: jbe 0x6eb81d
006eb81a: movaps xmm0, xmm2
006eb81d: movss xmm3, dword ptr [0xec6ff0]
006eb825: mulss xmm0, xmm1
006eb829: addss xmm0, dword ptr [eax]
006eb82d: movss dword ptr [eax], xmm0
006eb831: movss xmm0, dword ptr [esp + ecx*4 + 0x50]
006eb837: .byte 0x0f
006eb838: das 

3over4 data0xec6fc0 operand0x6eb7e7 candidate-start0x6eb3a0
006eb3a0: push ebp
006eb3a1: mov ebp, esp
006eb3a3: and esp, 0xfffffff0
006eb3a6: sub esp, 0xc8
006eb3ac: push ebx
006eb3ad: mov ebx, dword ptr [ebp + 8]
006eb3b0: push esi
006eb3b1: push 0x7c
006eb3b3: lea ecx, [edi + 0x29c]
006eb3b9: xor dl, dl
006eb3bb: call 0xd95820
006eb3c0: push 0x7c
006eb3c2: xor dl, dl
006eb3c4: lea ecx, [esp + 0x54]
006eb3c8: call 0xd95820
006eb3cd: test dword ptr [edi + 0x324], 0x2000
006eb3d7: je 0x6eb3e3
006eb3d9: movss xmm0, dword ptr [0xf2c0ec]
006eb3e1: jmp 0x6eb3eb
006eb3e3: movss xmm0, dword ptr [0xf2d118]
006eb3eb: mov ecx, dword ptr [0x1d95440]
006eb3f1: xorps xmm6, xmm6
006eb3f4: movss xmm7, dword ptr [0xec6e14]
006eb3fc: mov eax, 0x1d9543c
006eb401: sub eax, 0x24
006eb404: mov esi, ecx
006eb406: sub esi, eax
006eb408: neg esi
006eb40a: sbb esi, esi
006eb40c: and esi, ecx
006eb40e: movss dword ptr [esp + 0x1c], xmm0
006eb414: je 0x6eb77b
006eb41a: lea ebx, [ebx]
006eb420: movss xmm4, dword ptr [0xf1be18]
006eb428: movss xmm1, dword ptr [0xf2bd38]
006eb430: cmp esi, ebx
006eb432: je 0x6eb750
006eb438: mov ecx, dword ptr [esi + 0x74]
006eb43b: mov edx, 0x400
006eb440: cmp ecx, 1
006eb443: je 0x6eb492
006eb445: cmp ecx, 3
006eb448: jne 0x6eb497
006eb44a: mov eax, dword ptr [esi + 0x20]
006eb44d: movss xmm2, dword ptr [eax + 0x30]
006eb452: movaps xmm0, xmm2
006eb455: addss xmm0, xmm1
006eb459: subss xmm1, xmm2
006eb45d: comiss xmm1, xmm0
006eb460: jbe 0x6eb467
006eb462: movaps xmm3, xmm0
006eb465: jmp 0x6eb46a
006eb467: movaps xmm3, xmm1
006eb46a: movss xmm2, dword ptr [eax + 0x38]
006eb46f: movaps xmm0, xmm2
006eb472: movaps xmm1, xmm4
006eb475: addss xmm0, xmm4
006eb479: subss xmm1, xmm2
006eb47d: comiss xmm1, xmm0
006eb480: ja 0x6eb485
006eb482: movaps xmm0, xmm1
006eb485: comiss xmm0, xmm3
006eb488: jbe 0x6eb48d
006eb48a: movaps xmm0, xmm3
006eb48d: comiss xmm0, xmm6
006eb490: jb 0x6eb497
006eb492: mov edx, 0x200
006eb497: test dword ptr [edi + 0x324], edx
006eb49d: je 0x6eb750
006eb4a3: cmp ecx, 1
006eb4a6: jne 0x6eb4d1
006eb4a8: mov eax, dword ptr [esi]
006eb4aa: mov edx, dword ptr [eax + 0x20]
006eb4ad: mov ecx, esi
006eb4af: call edx
006eb4b1: movzx ecx, byte ptr [eax + 0x1287]
006eb4b8: and ecx, 0xf
006eb4bb: mov eax, 1
006eb4c0: shl eax, cl
006eb4c2: test dword ptr [edi + 0x328], eax
006eb4c8: je 0x6eb745
006eb4ce: xorps xmm6, xmm6
006eb4d1: mov ecx, dword ptr [esi + 0x20]
006eb4d4: movaps xmm0, xmmword ptr [ecx + 0x30]
006eb4d8: movaps xmmword ptr [esp + 0x30], xmm0
006eb4dd: mov edx, esi
006eb4df: lea ecx, [esp + 0x40]
006eb4e3: movss dword ptr [esp + 0x34], xmm6
006eb4e9: call 0x88f9b0
006eb4ee: fstp st(0)
006eb4f0: mov edx, dword ptr [ebp + 0xc]
006eb4f3: cmp dword ptr [edx + 0x24], 0
006eb4f7: je 0x6eb503
006eb4f9: movss xmm0, dword ptr [0xec7090]
006eb501: jmp 0x6eb50b
006eb503: movss xmm0, dword ptr [0xec708c]
006eb50b: movaps xmm2, xmmword ptr [esp + 0x30]
006eb510: movss xmm5, dword ptr [edi + 0x320]
006eb518: shufps xmm0, xmm0, 0
006eb51c: mulps xmm0, xmmword ptr [esp + 0x40]
006eb521: addps xmm2, xmm0
006eb524: subps xmm2, xmmword ptr [edi]
006eb527: movaps xmmword ptr [esp + 0x40], xmm0
006eb52c: movaps xmm1, xmm2
006eb52f: mulps xmm1, xmm2
006eb532: movaps xmm0, xmm1
006eb535: movhlps xmm0, xmm1
006eb538: addps xmm0, xmm1
006eb53b: movaps xmm1, xmm0
006eb53e: shufps xmm1, xmm0, 1
006eb542: addps xmm1, xmm0
006eb545: movaps xmmword ptr [esp + 0x20], xmm1
006eb54a: movss xmm1, dword ptr [esp + 0x1c]
006eb550: movaps xmm0, xmm5
006eb553: comiss xmm1, xmm0
006eb556: ja 0x6eb55b
006eb558: movaps xmm0, xmm1
006eb55b: movss xmm3, dword ptr [esp + 0x20]
006eb561: mulss xmm0, xmm0
006eb565: comiss xmm3, xmm0
006eb568: ja 0x6eb745
006eb56e: movss xmm7, dword ptr [0xec6e14]
006eb576: xorps xmm6, xmm6
006eb579: xorps xmm0, xmm0
006eb57c: movss xmm0, xmm3
006eb580: sqrtss xmm0, xmm0
006eb584: movaps xmmword ptr [esp + 0x20], xmm0
006eb589: movaps xmm0, xmm7
006eb58c: divss xmm0, dword ptr [esp + 0x20]
006eb592: shufps xmm0, xmm0, 0
006eb596: mulps xmm0, xmm2
006eb599: movss xmm2, dword ptr [0xec990c]
006eb5a1: movaps xmmword ptr [esp + 0x30], xmm0
006eb5a6: movss xmm0, dword ptr [esp + 0x20]
006eb5ac: subss xmm0, xmm2
006eb5b0: subss xmm1, xmm2
006eb5b4: divss xmm0, xmm1
006eb5b8: comiss xmm6, xmm0
006eb5bb: jbe 0x6eb5c2
006eb5bd: movaps xmm0, xmm6
006eb5c0: jmp 0x6eb5ca
006eb5c2: comiss xmm7, xmm0
006eb5c5: ja 0x6eb5ca
006eb5c7: movaps xmm0, xmm7
006eb5ca: movss xmm1, dword ptr [0xec6ff0]
006eb5d2: subss xmm0, xmm7
006eb5d6: mulss xmm0, xmm0
006eb5da: movss dword ptr [esp + 0x14], xmm0
006eb5e0: movaps xmm0, xmm7
006eb5e3: subss xmm0, dword ptr [esp + 0x14]
006eb5e9: subss xmm0, xmm7
006eb5ed: comiss xmm1, xmm0
006eb5f0: jbe 0x6eb5fd
006eb5f2: movaps xmm0, xmm1
006eb5f5: movss dword ptr [esp + 0x18], xmm0
006eb5fb: jmp 0x6eb610
006eb5fd: comiss xmm6, xmm0
006eb600: jbe 0x6eb60a
006eb602: movss dword ptr [esp + 0x18], xmm0
006eb608: jmp 0x6eb610
006eb60a: movss dword ptr [esp + 0x18], xmm6
006eb610: test dword ptr [edi + 0x324], 0x1000
006eb61a: movaps xmm2, xmm6
006eb61d: je 0x6eb6c0
006eb623: mov eax, dword ptr [ebx + 0x4c]
006eb626: cmp eax, dword ptr [esi + 0x4c]
006eb629: jne 0x6eb6c0
006eb62f: mov eax, dword ptr [ebx + 0x74]
006eb632: dec eax
006eb633: cmp eax, 4
006eb636: ja 0x6eb6c0
006eb63c: jmp dword ptr [eax*4 + 0x6eb860]
006eb643: mov eax, dword ptr [esi + 0x74]
006eb646: dec eax
006eb647: cmp eax, 4
006eb64a: ja 0x6eb6c0
006eb64c: jmp dword ptr [eax*4 + 0x6eb874]
006eb653: movss xmm0, dword ptr [esp + 0x20]
006eb659: sub esp, 0x14
006eb65c: movss dword ptr [esp + 0x10], xmm0
006eb662: movss xmm0, dword ptr [0xf2d118]
006eb66a: movss dword ptr [esp + 0xc], xmm6
006eb670: movss dword ptr [esp + 8], xmm0
006eb676: movss xmm0, dword ptr [0xf21000]
006eb67e: movss dword ptr [esp + 4], xmm1
006eb684: movss dword ptr [esp], xmm0
006eb689: call 0x6cb710
006eb68e: fstp dword ptr [esp + 0x14]
006eb692: subss xmm5, dword ptr [0xf25ecc]
006eb69a: mulss xmm5, dword ptr [0xf2d284]
006eb6a2: comiss xmm6, xmm5
006eb6a5: jbe 0x6eb6ac
006eb6a7: movaps xmm0, xmm6
006eb6aa: jmp 0x6eb6b7
006eb6ac: comiss xmm7, xmm5
006eb6af: movaps xmm0, xmm5
006eb6b2: ja 0x6eb6b7
006eb6b4: movaps xmm0, xmm7
006eb6b7: mulss xmm0, dword ptr [esp + 0x14]
006eb6bd: movaps xmm2, xmm0
006eb6c0: mov eax, dword ptr [edi + 0x318]
006eb6c6: cmp eax, dword ptr [edi + 0x31c]
006eb6cc: jg 0x6eb750
006eb6d2: movss xmm3, dword ptr [esp + 0x38]
006eb6d8: movss xmm4, dword ptr [esp + 0x30]
006eb6de: mov edx, eax
006eb6e0: add edx, edx
006eb6e2: lea ecx, [edi + eax*4 + 0x29c]
006eb6e9: lea edx, [edi + edx*8 + 0x38]
006eb6ed: lea ecx, [ecx]
006eb6f0: movss xmm0, dword ptr [edx - 8]
006eb6f5: movss xmm1, dword ptr [edx]
006eb6f9: mulss xmm0, xmm4
006eb6fd: mulss xmm1, xmm3
006eb701: addss xmm0, xmm1
006eb705: comiss xmm0, xmm6
006eb708: jbe 0x6eb70f
006eb70a: movaps xmm1, xmm0
006eb70d: jmp 0x6eb712
006eb70f: movaps xmm1, xmm6
006eb712: mulss xmm1, xmm1
006eb716: mulss xmm1, dword ptr [esp + 0x18]
006eb71c: addss xmm1, dword ptr [ecx]
006eb720: mulss xmm0, xmm2
006eb724: addss xmm0, dword ptr [esp + eax*4 + 0x50]
006eb72a: movss dword ptr [ecx], xmm1
006eb72e: movss dword ptr [esp + eax*4 + 0x50], xmm0
006eb734: inc eax
006eb735: add edx, 0x10
006eb738: add ecx, 4
006eb73b: cmp eax, dword ptr [edi + 0x31c]
006eb741: jle 0x6eb6f0
006eb743: jmp 0x6eb750
006eb745: movss xmm7, dword ptr [0xec6e14]
006eb74d: xorps xmm6, xmm6
006eb750: mov eax, dword ptr [esi + 0x60]
006eb753: mov ecx, dword ptr [esi + 0x28]
006eb756: and eax, 1
006eb759: lea eax, [eax*8 + 0x1d9543c]
006eb760: test eax, eax
006eb762: je 0x6eb769
006eb764: add eax, -0x24
006eb767: jmp 0x6eb76b
006eb769: xor eax, eax
006eb76b: mov esi, ecx
006eb76d: sub esi, eax
006eb76f: neg esi
006eb771: sbb esi, esi
006eb773: and esi, ecx
006eb775: jne 0x6eb420
006eb77b: mov edx, dword ptr [ebx + 4]
006eb77e: xor eax, eax
006eb780: mov ecx, edx
006eb782: test ecx, ecx
006eb784: je 0x6eb799
006eb786: mov eax, dword ptr [ecx + 0x14]
006eb789: dec eax
006eb78a: neg eax
006eb78c: sbb eax, eax
006eb78e: not eax
006eb790: and eax, ecx
006eb792: mov ecx, dword ptr [ecx + 4]
006eb795: je 0x6eb782
006eb797: jmp 0x6eb7a0
006eb799: test eax, eax
006eb79b: jne 0x6eb7a0
006eb79d: movaps xmm6, xmm7
006eb7a0: test dword ptr [edi + 0x324], 0x2000
006eb7aa: je 0x6eb7b6
006eb7ac: movss xmm1, dword ptr [0xec6fd0]
006eb7b4: jmp 0x6eb7f0
006eb7b6: xor eax, eax
006eb7b8: mov ecx, edx
006eb7ba: lea ebx, [ebx]
006eb7c0: test ecx, ecx
006eb7c2: je 0x6eb7df
006eb7c4: mov eax, dword ptr [ecx + 0x14]
006eb7c7: dec eax
006eb7c8: neg eax
006eb7ca: sbb eax, eax
006eb7cc: not eax
006eb7ce: and eax, ecx
006eb7d0: mov ecx, dword ptr [ecx + 4]
006eb7d3: je 0x6eb7c0
006eb7d5: movss xmm1, dword ptr [0xec6fc0]
006eb7dd: jmp 0x6eb7f0
006eb7df: test eax, eax
006eb7e1: je 0x6eb7ed
006eb7e3: movss xmm1, dword ptr [0xec6fc0]
006eb7eb: jmp 0x6eb7f0
006eb7ed: movaps xmm1, xmm7
006eb7f0: mov ecx, dword ptr [edi + 0x318]
006eb7f6: cmp ecx, dword ptr [edi + 0x31c]
006eb7fc: jg 0x6eb857
006eb7fe: movss xmm2, dword ptr [0xec7250]
006eb806: lea eax, [edi + ecx*4 + 0x220]
006eb80d: lea ecx, [ecx]
006eb810: movss xmm0, dword ptr [eax + 0x7c]
006eb815: comiss xmm2, xmm0
006eb818: jbe 0x6eb81d
006eb81a: movaps xmm0, xmm2
006eb81d: movss xmm3, dword ptr [0xec6ff0]
006eb825: mulss xmm0, xmm1
006eb829: addss xmm0, dword ptr [eax]
006eb82d: movss dword ptr [eax], xmm0
006eb831: movss xmm0, dword ptr [esp + ecx*4 + 0x50]
006eb837: comiss xmm3, xmm0
006eb83a: jbe 0x6eb83f
006eb83c: movaps xmm0, xmm3
006eb83f: mulss xmm0, xmm6
006eb843: addss xmm0, dword ptr [eax]

3over4 data0xec6fc0 operand0x6f6b89 candidate-start0x6f6b00
006f6b00: movss xmm2, dword ptr [0x1dee638]
006f6b08: divss xmm2, dword ptr [0x1dee884]
006f6b10: movss xmm0, dword ptr [0xec6e14]
006f6b18: mov eax, dword ptr [0x1dee5ec]
006f6b1d: movaps xmm1, xmm0
006f6b20: subss xmm1, xmm2
006f6b24: xorps xmm2, xmm2
006f6b27: sub esp, 0xc
006f6b2a: comiss xmm2, xmm1
006f6b2d: jbe 0x6f6b34
006f6b2f: movaps xmm3, xmm2
006f6b32: jmp 0x6f6b3f
006f6b34: comiss xmm0, xmm1
006f6b37: movaps xmm3, xmm1
006f6b3a: ja 0x6f6b3f
006f6b3c: movaps xmm3, xmm0
006f6b3f: comiss xmm2, xmm1
006f6b42: ja 0x6f6b4f
006f6b44: comiss xmm0, xmm1
006f6b47: movaps xmm2, xmm1
006f6b4a: ja 0x6f6b4f
006f6b4c: movaps xmm2, xmm0
006f6b4f: xorps xmm1, xmm1
006f6b52: cvtsi2ss xmm1, eax
006f6b56: subss xmm1, xmm0
006f6b5a: addss xmm1, xmm2
006f6b5e: mulss xmm1, dword ptr [0xec6fd0]
006f6b66: movss dword ptr [esp + 8], xmm1
006f6b6c: movss xmm1, dword ptr [0xf274a0]
006f6b74: push esi
006f6b75: movss dword ptr [esp + 4], xmm1
006f6b7b: cmp eax, 2
006f6b7e: jg 0x6f6b93
006f6b80: jne 0x6f6c70
006f6b86: comiss xmm3, dword ptr [0xec6fc0]
006f6b8d: jbe 0x6f6c70
006f6b93: test edi, edi
006f6b95: je 0x6f6ba1
006f6b97: mov eax, dword ptr [edi + 0x30]
006f6b9a: add eax, 0xc7c
006f6b9f: jne 0x6f6ba5
006f6ba1: xor esi, esi
006f6ba3: jmp 0x6f6ba7
006f6ba5: mov esi, dword ptr [eax]
006f6ba7: call 0x48ef10
006f6bac: cmp eax, 1
006f6baf: je 0x6f6bbb
006f6bb1: call 0x48ef10
006f6bb6: cmp eax, 3
006f6bb9: jne 0x6f6c03
006f6bbb: fld dword ptr [0x1dee884]
006f6bc1: push 0
006f6bc3: push 0x13
006f6bc5: fstp dword ptr [esp + 0xc]
006f6bc9: mov edx, 0xb3
006f6bce: mov ecx, edi
006f6bd0: call 0x6382b0
006f6bd5: fld dword ptr [esp + 4]
006f6bd9: fmul dword ptr [0xec7238]
006f6bdf: push 0
006f6be1: mov edx, 0x11
006f6be6: mov ecx, edi
006f6be8: .byte 0xde

3over4 data0xec6fc0 operand0x701e94 candidate-start0x701e10
00701e10: call 0x4120b0
00701e15: cmp dword ptr [eax + 0x34], 0
00701e19: je 0x701f5f
00701e1f: mov ecx, dword ptr [eax + 0x2c]
00701e22: lea ecx, [ecx + ecx*2]
00701e25: cmp dword ptr [eax + ecx*4 + 0x14], 0xa
00701e2a: jne 0x701f5f
00701e30: cmp dword ptr [0x1e85a90], 0
00701e37: je 0x701e69
00701e39: cmp dword ptr [0x1e85cd4], 5
00701e40: jne 0x701e69
00701e42: test dword ptr [0x1ce7920], 0x100
00701e4c: jne 0x701e7f
00701e4e: call 0x8d72c0
00701e53: test eax, eax
00701e55: je 0x701f5f
00701e5b: call 0x8dfb90
00701e60: cmp eax, 0x13
00701e63: jne 0x701f5f
00701e69: cmp dword ptr [0x1e85cd4], 4
00701e70: jne 0x701e7f
00701e72: cmp dword ptr [0x1e85cd8], 1
00701e79: jne 0x701f5f
00701e7f: mov edx, dword ptr [esi + 0xb00]
00701e85: mov ecx, dword ptr [edx + 0x30]
00701e88: mov edx, 0x10
00701e8d: call 0x6d5f00
00701e92: fld dword ptr [0xec6fc0]
00701e98: fcompi st(1)
00701e9a: fstp st(0)
00701e9c: ja 0x701f5f
00701ea2: call 0x880380
00701ea7: xorps xmm1, xmm1
00701eaa: xorps xmm0, xmm0
00701ead: cvtsi2ss xmm0, eax
00701eb1: mov eax, dword ptr [esi + 0x20]
00701eb4: movss xmm2, dword ptr [eax + 0x38]
00701eb9: mulss xmm2, xmm0
00701ebd: comiss xmm1, xmm2
00701ec0: ja 0x701f5f
00701ec6: mov ecx, dword ptr [esp + 4]
00701eca: mov edx, dword ptr [ecx + 0x20]
00701ecd: movss xmm2, dword ptr [edx + 0x38]
00701ed2: mulss xmm2, xmm0
00701ed6: comiss xmm1, xmm2
00701ed9: ja 0x701f5f
00701edf: cmp dword ptr [0x1e85cd4], 8
00701ee6: jne 0x701ef0
00701ee8: mov eax, 1
00701eed: ret 4
00701ef0: .byte 0xf3
00701ef1: .byte 0x0f
00701ef2: .byte 0x10
00701ef3: .byte 0x05

3over4 data0xec6fc0 operand0x702ea5 candidate-start0x702e20
00702e20: push ebp
00702e21: mov ebp, esp
00702e23: and esp, 0xfffffff0
00702e26: sub esp, 0x20
00702e29: mov eax, dword ptr [0x1ce716c]
00702e2e: mov ecx, dword ptr [eax + 0xc]
00702e31: mov edx, dword ptr [esi + 0x20]
00702e34: movss xmm0, dword ptr [ecx + 0x88]
00702e3c: subss xmm0, dword ptr [edx + 0x38]
00702e41: movdqa xmm1, xmmword ptr [0xf2b990]
00702e49: shufps xmm0, xmm0, 0
00702e4d: andps xmm0, xmm1
00702e50: movaps xmmword ptr [esp + 0x10], xmm0
00702e55: movss xmm0, dword ptr [esp + 0x10]
00702e5b: comiss xmm0, dword ptr [0xf2c080]
00702e62: ja 0x702ed4
00702e64: mov edx, 0x2aab
00702e69: mov ecx, esi
00702e6b: call 0x7d54e0
00702e70: test eax, eax
00702e72: jne 0x702ed4
00702e74: mov eax, dword ptr [esi + 0xb00]
00702e7a: mov ecx, dword ptr [eax + 0x30]
00702e7d: mov edx, 0x1b
00702e82: call 0x6d5f00
00702e87: fstp dword ptr [esp + 0xc]
00702e8b: movss xmm0, dword ptr [esp + 0xc]
00702e91: subss xmm0, dword ptr [0xec6fd4]
00702e99: mulss xmm0, dword ptr [0xec6fd0]
00702ea1: movss xmm1, dword ptr [0xec6fc0]
00702ea9: mulss xmm0, dword ptr [0xf2d424]
00702eb1: addss xmm0, xmm1
00702eb5: comiss xmm1, xmm0
00702eb8: ja 0x702ec7
00702eba: movss xmm1, dword ptr [0xec6e14]
00702ec2: comiss xmm1, xmm0
00702ec5: ja 0x702eca
00702ec7: movaps xmm0, xmm1
00702eca: mulss xmm0, dword ptr [0xf25ee0]
00702ed2: jmp 0x702ee5
00702ed4: mov ecx, esi
00702ed6: call 0x7bec00
00702edb: fstp dword ptr [esp + 0xc]
00702edf: movss xmm0, dword ptr [esp + 0xc]
00702ee5: mov ecx, dword ptr [esi + 0x20]
00702ee8: movss xmm1, dword ptr [ecx + 0x2f0]
00702ef0: comiss xmm0, xmm1
00702ef3: ja 0x702ef8
00702ef5: movaps xmm0, xmm1
00702ef8: mov esp, ebp
00702efa: pop ebp
00702efb: ret 
00702efc: int3 
00702efd: int3 
00702efe: int3 
00702eff: int3 
00702f00: push ebp
00702f01: mov ebp, esp
00702f03: .byte 0x83
00702f04: .byte 0xe4

3over4 data0xec6fc0 operand0x713564 candidate-start0x713400
00713400: push ebp
00713401: mov ebp, esp
00713403: and esp, 0xfffffff0
00713406: sub esp, 0x3c
00713409: movss xmm0, dword ptr [0x1dee638]
00713411: push ebx
00713412: mov ebx, dword ptr [ebp + 8]
00713415: movss dword ptr [esp + 0xc], xmm0
0071341b: call 0x4120c0
00713420: xor edx, edx
00713422: mov ecx, eax
00713424: call 0x411f40
00713429: test eax, eax
0071342b: je 0x71345f
0071342d: call 0x880320
00713432: test eax, eax
00713434: je 0x713440
00713436: movss xmm1, dword ptr [0x1dee654]
0071343e: jmp 0x71344f
00713440: call 0x880250
00713445: fstp dword ptr [esp + 8]
00713449: movss xmm1, dword ptr [esp + 8]
0071344f: movss xmm0, dword ptr [esp + 0xc]
00713455: comiss xmm0, xmm1
00713458: jbe 0x713465
0071345a: movaps xmm0, xmm1
0071345d: jmp 0x713465
0071345f: movss xmm0, dword ptr [esp + 0xc]
00713465: movss xmm1, dword ptr [0xec7068]
0071346d: comiss xmm1, xmm0
00713470: jbe 0x71347e
00713472: mov eax, 1
00713477: pop ebx
00713478: mov esp, ebp
0071347a: pop ebp
0071347b: ret 4
0071347e: call 0x880380
00713483: xorps xmm1, xmm1
00713486: movss xmm4, dword ptr [0xec6e14]
0071348e: xorps xmm0, xmm0
00713491: cvtsi2ss xmm0, eax
00713495: mulss xmm0, dword ptr [0xf2c190]
0071349d: mov eax, dword ptr [esi + 0x20]
007134a0: movaps xmm2, xmm1
007134a3: movaps xmm3, xmm1
007134a6: unpcklps xmm2, xmm0
007134a9: unpcklps xmm3, xmm4
007134ac: unpcklps xmm2, xmm3
007134af: subps xmm2, xmmword ptr [eax + 0x30]
007134b3: movaps xmmword ptr [esp + 0x30], xmm2
007134b8: movss dword ptr [esp + 0x34], xmm1
007134be: movaps xmm0, xmmword ptr [esp + 0x30]
007134c3: mulps xmm0, xmm0
007134c6: movaps xmm1, xmm0
007134c9: movhlps xmm0, xmm1
007134cc: addps xmm0, xmm1
007134cf: movaps xmm1, xmm0
007134d2: shufps xmm1, xmm0, 1
007134d6: addps xmm1, xmm0
007134d9: movaps xmmword ptr [esp + 0x30], xmm1
007134de: movss xmm1, dword ptr [esp + 0x30]
007134e4: xorps xmm0, xmm0
007134e7: movss xmm0, xmm1
007134eb: sqrtss xmm0, xmm0
007134ef: movaps xmmword ptr [esp + 0x30], xmm0
007134f4: movss xmm0, dword ptr [esp + 0x30]
007134fa: comiss xmm0, dword ptr [0xf2d378]
00713501: ja 0x7137f3
00713507: mov ecx, dword ptr [edi + 0xb00]
0071350d: call 0xcb5660
00713512: xorps xmm1, xmm1
00713515: xorps xmm0, xmm0
00713518: cvtsi2ss xmm0, eax
0071351c: mulss xmm0, dword ptr [0xec6fc4]
00713524: comiss xmm1, xmm0
00713527: jbe 0x713534
00713529: movaps xmm0, xmm1
0071352c: movss dword ptr [esp + 0xc], xmm0
00713532: jmp 0x71354f
00713534: movss xmm1, dword ptr [0xec6e14]
0071353c: comiss xmm1, xmm0
0071353f: jbe 0x713549
00713541: movss dword ptr [esp + 0xc], xmm0
00713547: jmp 0x71354f
00713549: movss dword ptr [esp + 0xc], xmm1
0071354f: mov ecx, dword ptr [edi + 0xb00]
00713555: mov ecx, dword ptr [ecx + 0x30]
00713558: mov edx, 0x1a
0071355d: call 0x6d5f00
00713562: fmul dword ptr [0xec6fc0]
00713568: fld1 
0071356a: push ecx
0071356b: fsub dword ptr [esp + 0x10]
0071356f: mov edx, 3
00713574: mov ecx, 0xf23348
00713579: fmul dword ptr [0xec6fd0]
0071357f: faddp st(1)
00713581: fstp dword ptr [esp + 0x10]
00713585: movss xmm0, dword ptr [esp + 0x10]
0071358b: movss dword ptr [esp], xmm0
00713590: call 0x404870
00713595: fstp dword ptr [esp + 8]
00713599: movss xmm0, dword ptr [esp + 0xc]
0071359f: push ecx
007135a0: mov edx, 3
007135a5: mov ecx, 0xf23440
007135aa: movss dword ptr [esp], xmm0
007135af: call 0x404870
007135b4: fst dword ptr [esp + 0x10]
007135b8: mov edx, edi
007135ba: mov ecx, esi
007135bc: call 0x709bb0
007135c1: .byte 0xd9
007135c2: pop esp
007135c3: .byte 0x24

3over4 data0xec6fc0 operand0x714fe7 candidate-start0x714f50
00714f50: push ebx
00714f51: push ebp
00714f52: push esi
00714f53: mov esi, dword ptr [0x11988dc]
00714f59: push edi
00714f5a: mov edi, ecx
00714f5c: mov ebp, edx
00714f5e: mov edx, dword ptr [edi + 0x3c]
00714f61: xor ebx, ebx
00714f63: cmp edx, ebx
00714f65: je 0x714f8e
00714f67: mov ecx, dword ptr [edx + 0x1680]
00714f6d: cmp ecx, ebx
00714f6f: jle 0x714f8e
00714f71: lea eax, [ecx + ecx*2]
00714f74: shl eax, 7
00714f77: add eax, edx
00714f79: lea esp, [esp]
00714f80: sub eax, 0x180
00714f85: dec ecx
00714f86: cmp dword ptr [eax], esi
00714f88: je 0x714f8e
00714f8a: cmp ecx, ebx
00714f8c: jg 0x714f80
00714f8e: mov eax, edi
00714f90: call 0x714ef0
00714f95: test eax, eax
00714f97: je 0x715046
00714f9d: mov edx, esi
00714f9f: mov ecx, edi
00714fa1: call 0x6e2600
00714fa6: mov esi, eax
00714fa8: cmp esi, ebx
00714faa: je 0x715046
00714fb0: movss xmm0, dword ptr [0xec6fb8]
00714fb8: mov ecx, ebp
00714fba: movss dword ptr [esi + 0x10], xmm0
00714fbf: mov dword ptr [esi + 0x14], ebp
00714fc2: call 0x6f7b30
00714fc7: mov dword ptr [esi + 0x18], eax
00714fca: mov eax, dword ptr [esp + 0x14]
00714fce: mov dword ptr [esi + 0x20], eax
00714fd1: mov dword ptr [esi + 0x1c], ebx
00714fd4: mov dword ptr [esi + 0x2c], 0x2aab
00714fdb: movss xmm0, dword ptr [0x146b618]
00714fe3: addss xmm0, dword ptr [0xec6fc0]
00714feb: movss dword ptr [esi + 0x24], xmm0
00714ff0: xorps xmm0, xmm0
00714ff3: cmp eax, ebx
00714ff5: mov eax, dword ptr [esp + 0x18]
00714ff9: movss dword ptr [esi + 0x28], xmm0
00714ffe: jne 0x715009
00715000: neg eax
00715002: sbb eax, eax
00715004: add eax, 4
00715007: jmp 0x715010
00715009: neg eax
0071500b: sbb eax, eax
0071500d: add eax, 7
00715010: mov dword ptr [esi + 0x30], eax
00715013: mov dword ptr [esi + 0x34], ebx
00715016: mov dword ptr [esi + 0x38], ebx
00715019: mov dword ptr [esi + 0x3c], ebx
0071501c: mov dword ptr [esi + 0x40], ebx
0071501f: mov dword ptr [esi + 0x44], ebx
00715022: mov eax, dword ptr [edi + 0x4c]
00715025: cmp eax, dword ptr [0x1dee624]
0071502b: jne 0x715046
0071502d: mov ecx, dword ptr [edi + 0xb0c]
00715033: mov edx, dword ptr [eax + 0x40]
00715036: shl ecx, 5
00715039: lea eax, [ecx + edx - 0x20]
0071503d: mov dword ptr [eax + 4], 3
00715044: mov dword ptr [eax], ebp
00715046: pop edi

3over4 data0xec6fc0 operand0x71e08c candidate-start0x71de60
0071de60: push ebp
0071de61: mov ebp, esp
0071de63: and esp, 0xfffffff0
0071de66: sub esp, 0x24
0071de69: push ebx
0071de6a: push esi
0071de6b: mov esi, ecx
0071de6d: push edi
0071de6e: mov edi, dword ptr [esi + 0x4c]
0071de71: mov eax, dword ptr [edi + 0x38]
0071de74: mov eax, dword ptr [eax + 0x58]
0071de77: test eax, eax
0071de79: je 0x71de8f
0071de7b: mov ebx, dword ptr [eax]
0071de7d: cmp ebx, 2
0071de80: jne 0x71de91
0071de82: fld dword ptr [0xf1bdfc]
0071de88: pop edi
0071de89: pop esi
0071de8a: pop ebx
0071de8b: mov esp, ebp
0071de8d: pop ebp
0071de8e: ret 
0071de8f: xor ebx, ebx
0071de91: movss xmm0, dword ptr [0x1dee638]
0071de99: movss dword ptr [esp + 0x14], xmm0
0071de9f: call 0x6bfbb0
0071dea4: fstp dword ptr [esp + 0x18]
0071dea8: mov ecx, edi
0071deaa: call 0x882370
0071deaf: test byte ptr [0x1dee65c], 6
0071deb6: movss xmm0, dword ptr [esp + 0x18]
0071debc: mov dword ptr [esp + 0x1c], eax
0071dec0: jne 0x71dee7
0071dec2: movss xmm1, dword ptr [esp + 0x14]
0071dec8: comiss xmm1, xmm0
0071decb: jbe 0x71dee7
0071decd: movss xmm1, dword ptr [0xec704c]
0071ded5: comiss xmm1, xmm0
0071ded8: jbe 0x71df3b
0071deda: fld dword ptr [0xec992c]
0071dee0: pop edi
0071dee1: pop esi
0071dee2: pop ebx
0071dee3: mov esp, ebp
0071dee5: pop ebp
0071dee6: ret 
0071dee7: movss xmm0, dword ptr [0xec704c]
0071deef: comiss xmm0, dword ptr [esp + 0x14]
0071def4: jbe 0x71df3b
0071def6: cmp dword ptr [0x1dee5ec], 4
0071defd: jl 0x71df03
0071deff: test eax, eax
0071df01: jle 0x71deda
0071df03: mov eax, dword ptr [esi + 0x4c]
0071df06: test eax, eax
0071df08: jne 0x71df11
0071df0a: mov eax, 1
0071df0f: jmp 0x71df16
0071df11: mov eax, dword ptr [eax + 0x30]
0071df14: mov eax, dword ptr [eax]
0071df16: mov ecx, dword ptr [esi + 0x20]
0071df19: xorps xmm0, xmm0
0071df1c: cvtsi2ss xmm0, eax
0071df20: mulss xmm0, dword ptr [ecx + 0x38]
0071df25: comiss xmm0, dword ptr [0xf25320]
0071df2c: jbe 0x71df3b
0071df2e: fld dword ptr [0xec992c]
0071df34: pop edi
0071df35: pop esi
0071df36: pop ebx
0071df37: mov esp, ebp
0071df39: pop ebp
0071df3a: ret 
0071df3b: call 0x880380
0071df40: xorps xmm2, xmm2
0071df43: movss xmm4, dword ptr [0xec6e14]
0071df4b: xorps xmm1, xmm1
0071df4e: cvtsi2ss xmm1, eax
0071df52: mulss xmm1, dword ptr [0xf2c190]
0071df5a: mov eax, dword ptr [esi + 0x20]
0071df5d: movaps xmm0, xmm2
0071df60: movaps xmm3, xmm2
0071df63: push ecx
0071df64: mov ecx, esi
0071df66: unpcklps xmm0, xmm1
0071df69: unpcklps xmm3, xmm4
0071df6c: unpcklps xmm0, xmm3
0071df6f: subps xmm0, xmmword ptr [eax + 0x30]
0071df73: movaps xmmword ptr [esp + 0x24], xmm0
0071df78: movss dword ptr [esp + 0x28], xmm2
0071df7e: movaps xmm0, xmmword ptr [esp + 0x24]
0071df83: mulps xmm0, xmm0
0071df86: movaps xmm1, xmm0
0071df89: movhlps xmm0, xmm1
0071df8c: addps xmm0, xmm1
0071df8f: movaps xmm1, xmm0
0071df92: shufps xmm1, xmm0, 1
0071df96: addps xmm1, xmm0
0071df99: movaps xmmword ptr [esp + 0x24], xmm1
0071df9e: movss xmm0, dword ptr [esp + 0x24]
0071dfa4: sqrtss xmm0, xmm0
0071dfa8: movaps xmmword ptr [esp + 0x24], xmm0
0071dfad: movss xmm0, dword ptr [esp + 0x24]
0071dfb3: movss dword ptr [esp], xmm0
0071dfb8: call 0x6eb1d0
0071dfbd: fstp dword ptr [esp + 0x10]
0071dfc1: movss xmm0, dword ptr [esp + 0x10]
0071dfc7: push ecx
0071dfc8: mov edx, 3
0071dfcd: mov ecx, 0xf2558c
0071dfd2: movss dword ptr [esp], xmm0
0071dfd7: call 0x404870
0071dfdc: fst dword ptr [esp + 0xc]
0071dfe0: mov edi, dword ptr [edi + 0x38]
0071dfe3: jmp dword ptr [ebx*4 + 0x71e1a4]
0071dfea: fstp st(0)
0071dfec: fldz 
0071dfee: pop edi
0071dfef: pop esi
0071dff0: pop ebx
0071dff1: mov esp, ebp
0071dff3: pop ebp
0071dff4: ret 
0071dff5: movss xmm0, dword ptr [esp + 0x18]
0071dffb: fstp st(0)
0071dffd: push ecx
0071dffe: mov ecx, 0xf25578
0071e003: movss dword ptr [esp], xmm0
0071e008: call 0x6cb4c0
0071e00d: pop edi
0071e00e: pop esi
0071e00f: pop ebx
0071e010: mov esp, ebp
0071e012: pop ebp
0071e013: ret 
0071e014: fstp st(0)
0071e016: call 0x6bca00
0071e01b: test eax, eax
0071e01d: je 0x71e030
0071e01f: fld dword ptr [esp + 0xc]
0071e023: fmul dword ptr [0xec708c]
0071e029: pop edi
0071e02a: pop esi
0071e02b: pop ebx
0071e02c: mov esp, ebp
0071e02e: pop ebp
0071e02f: ret 
0071e030: mov edi, dword ptr [edi + 0x58]
0071e033: test edi, edi
0071e035: je 0x71dfec
0071e037: movss xmm0, dword ptr [edi + 4]
0071e03c: comiss xmm0, dword ptr [0xedb328]
0071e043: jb 0x71dfec
0071e045: mov ecx, dword ptr [esi + 0x18]
0071e048: call 0x6a9de0
0071e04d: test eax, eax
0071e04f: jne 0x71dfec
0071e051: mov ecx, esi
0071e053: call 0x8bc660
0071e058: fld dword ptr [esp + 0xc]
0071e05c: fmul dword ptr [0xec74bc]
0071e062: pop edi
0071e063: pop esi
0071e064: pop ebx
0071e065: mov esp, ebp
0071e067: pop ebp
0071e068: ret 
0071e069: cmp dword ptr [esp + 0x1c], 0
0071e06e: jge 0x71dfea
0071e074: cmp esi, dword ptr [edi + 0x60]
0071e077: je 0x71e023
0071e079: cmp dword ptr [0x1dee5ec], 4
0071e080: fstp st(0)
0071e082: jge 0x71dfec
0071e088: movss xmm0, dword ptr [0xec6fc0]
0071e090: comiss xmm0, dword ptr [esp + 0x10]
0071e095: jbe 0x71dfec
0071e09b: fld dword ptr [0xed5a90]
0071e0a1: pop edi
0071e0a2: pop esi
0071e0a3: pop ebx
0071e0a4: mov esp, ebp
0071e0a6: pop ebp
0071e0a7: ret 
0071e0a8: cmp dword ptr [esp + 0x1c], -4
0071e0ad: jg 0x71e05c
0071e0af: movss xmm0, dword ptr [0xf274f0]
0071e0b7: comiss xmm0, dword ptr [esp + 0x14]
0071e0bc: jbe 0x71e05c
0071e0be: fstp st(0)
0071e0c0: mov ecx, esi
0071e0c2: call 0x872b00
0071e0c7: fld dword ptr [0xf2c050]
0071e0cd: fcompi st(1)
0071e0cf: fstp st(0)
0071e0d1: jbe 0x71e058
0071e0d3: fld dword ptr [0xec6e10]
0071e0d9: pop edi
0071e0da: pop esi
0071e0db: pop ebx
0071e0dc: mov esp, ebp
0071e0de: pop ebp
0071e0df: ret 
0071e0e0: mov ecx, esi
0071e0e2: fstp st(0)
0071e0e4: call 0x8bc660
0071e0e9: test eax, eax
0071e0eb: .byte 0x0f

3over4 data0xec6fc0 operand0x73da00 candidate-start0x73d7a0
0073d7a0: push ebp
0073d7a1: mov ebp, esp
0073d7a3: and esp, 0xfffffff0
0073d7a6: sub esp, 0x74
0073d7a9: mov ecx, dword ptr [ebp + 0x10]
0073d7ac: push ebx
0073d7ad: mov ebx, dword ptr [ebp + 8]
0073d7b0: movaps xmm0, xmmword ptr [ebx]
0073d7b3: push esi
0073d7b4: mov esi, eax
0073d7b6: mov eax, dword ptr [ecx + 0x20]
0073d7b9: movaps xmmword ptr [esp + 0x2c], xmm0
0073d7be: movaps xmm0, xmmword ptr [eax + 0x30]
0073d7c2: movaps xmmword ptr [esp + 0x1c], xmm0
0073d7c7: xorps xmm0, xmm0
0073d7ca: push edi
0073d7cb: mov edx, ebx
0073d7cd: movss dword ptr [esp + 0x24], xmm0
0073d7d3: call 0x73d240
0073d7d8: fstp dword ptr [esp + 0x14]
0073d7dc: movss xmm0, dword ptr [esp + 0x20]
0073d7e2: subss xmm0, dword ptr [ebx]
0073d7e6: movss xmm1, dword ptr [esp + 0x28]
0073d7ec: subss xmm1, dword ptr [ebx + 8]
0073d7f1: mov ecx, dword ptr [ebp + 0x1c]
0073d7f4: mov edx, dword ptr [ebp + 0x28]
0073d7f7: mulss xmm0, xmm0
0073d7fb: mulss xmm1, xmm1
0073d7ff: addss xmm1, xmm0
0073d803: xorps xmm0, xmm0
0073d806: movss xmm0, xmm1
0073d80a: sqrtss xmm0, xmm0
0073d80e: push 0
0073d810: movaps xmmword ptr [esp + 0x44], xmm0
0073d815: movss xmm0, dword ptr [ecx + 8]
0073d81a: mov ecx, dword ptr [ebp + 0x24]
0073d81d: sub esp, 8
0073d820: movss dword ptr [esp + 4], xmm0
0073d826: movss xmm0, dword ptr [esp + 0x4c]
0073d82c: movss dword ptr [esp], xmm0
0073d831: call 0x6ca130
0073d836: fstp dword ptr [esp + 0x1c]
0073d83a: movss xmm1, dword ptr [0xec98c4]
0073d842: movaps xmm0, xmm1
0073d845: test esi, esi
0073d847: jne 0x73d885
0073d849: movss xmm0, dword ptr [esp + 0x40]
0073d84f: subss xmm0, dword ptr [0xf2d118]
0073d857: mulss xmm0, dword ptr [0xf2d3f4]
0073d85f: mulss xmm0, dword ptr [0xec9908]
0073d867: movss xmm2, dword ptr [0xec7068]
0073d86f: addss xmm0, xmm2
0073d873: comiss xmm1, xmm0
0073d876: jbe 0x73d87d
0073d878: movaps xmm0, xmm1
0073d87b: jmp 0x73d885
0073d87d: comiss xmm2, xmm0
0073d880: ja 0x73d885
0073d882: movaps xmm0, xmm2
0073d885: mulss xmm0, dword ptr [esp + 0x1c]
0073d88b: movss xmm1, dword ptr [0xf2aa14]
0073d893: comiss xmm1, xmm0
0073d896: movss dword ptr [esp + 0x18], xmm0
0073d89c: ja 0x73d8a7
0073d89e: movaps xmm0, xmm1
0073d8a1: movss dword ptr [esp + 0x18], xmm0
0073d8a7: test esi, esi
0073d8a9: jne 0x73da5d
0073d8af: movss xmm1, dword ptr [esp + 0x14]
0073d8b5: mov edx, dword ptr [ebp + 0xc]
0073d8b8: mov eax, dword ptr [ebp + 0x18]
0073d8bb: sub esp, 0xc
0073d8be: movss dword ptr [esp + 8], xmm1
0073d8c4: movss xmm1, dword ptr [ebp + 0x20]
0073d8c9: movss dword ptr [esp + 4], xmm1
0073d8cf: movss xmm1, dword ptr [ebp + 0x14]
0073d8d4: movss dword ptr [esp], xmm1
0073d8d9: push edx
0073d8da: push ecx
0073d8db: movss dword ptr [esp], xmm0
0073d8e0: push eax
0073d8e1: lea ecx, [esi + 1]
0073d8e4: mov eax, ebx
0073d8e6: lea edi, [esp + 0x38]
0073d8ea: lea esi, [esp + 0x48]
0073d8ee: call 0x73d570
0073d8f3: movss xmm6, dword ptr [esp + 0x20]
0073d8f9: test eax, eax
0073d8fb: je 0x73d90a
0073d8fd: movaps xmm0, xmmword ptr [esp + 0x30]
0073d902: movaps xmmword ptr [ebx], xmm0
0073d905: jmp 0x73da63
0073d90a: movaps xmm3, xmmword ptr [ebx]
0073d90d: mov ecx, dword ptr [ebp + 0xc]
0073d910: mov edx, dword ptr [ebp + 0x18]
0073d913: movss xmm0, dword ptr [0xf2d7dc]
0073d91b: mov eax, dword ptr [edx + 0x20]
0073d91e: movaps xmm4, xmmword ptr [ecx]
0073d921: movss xmm5, dword ptr [0xec6e14]
0073d929: divss xmm5, dword ptr [ebp + 0x14]
0073d92e: subps xmm4, xmm3
0073d931: mulps xmm4, xmmword ptr [0xf2bc40]
0073d938: movss dword ptr [esp + 0x1c], xmm0
0073d93e: movaps xmm0, xmmword ptr [eax + 0x30]
0073d942: movaps xmmword ptr [esp + 0x30], xmm3
0073d947: subps xmm3, xmm4
0073d94a: movaps xmmword ptr [esp + 0x50], xmm0
0073d94f: mov eax, 0xb
0073d954: addps xmm3, xmm4
0073d957: movaps xmmword ptr [esp + 0x40], xmm3
0073d95c: movss xmm2, dword ptr [esp + 0x48]
0073d962: movss xmm0, dword ptr [esp + 0x40]
0073d968: subss xmm0, dword ptr [esp + 0x50]
0073d96e: mulss xmm0, xmm0
0073d972: movaps xmm1, xmm2
0073d975: subss xmm1, dword ptr [esp + 0x58]
0073d97b: mulss xmm1, xmm1
0073d97f: addss xmm1, xmm0
0073d983: xorps xmm0, xmm0
0073d986: movss xmm0, xmm1
0073d98a: sqrtss xmm0, xmm0
0073d98e: movaps xmmword ptr [esp + 0x70], xmm0
0073d993: movss xmm0, dword ptr [esp + 0x40]
0073d999: subss xmm0, xmm6
0073d99d: mulss xmm0, xmm0
0073d9a1: movaps xmm1, xmm2
0073d9a4: subss xmm1, dword ptr [esp + 0x28]
0073d9aa: mulss xmm1, xmm1
0073d9ae: addss xmm1, xmm0
0073d9b2: xorps xmm0, xmm0
0073d9b5: movss xmm0, xmm1
0073d9b9: movss xmm1, dword ptr [0xec747c]
0073d9c1: sqrtss xmm0, xmm0
0073d9c5: movaps xmmword ptr [esp + 0x60], xmm0
0073d9ca: movss xmm0, dword ptr [esp + 0x60]
0073d9d0: subss xmm0, dword ptr [esp + 0x14]
0073d9d6: mulss xmm0, xmm5
0073d9da: subss xmm0, dword ptr [ebp + 0x20]
0073d9df: comiss xmm0, xmm1
0073d9e2: ja 0x73d9e7
0073d9e4: movaps xmm0, xmm1
0073d9e7: movss xmm1, dword ptr [esp + 0x70]
0073d9ed: divss xmm1, xmm0
0073d9f1: movss xmm0, dword ptr [esp + 0x18]
0073d9f7: comiss xmm0, xmm1
0073d9fa: jbe 0x73da4c
0073d9fc: mulss xmm0, dword ptr [0xec6fc0]
0073da04: comiss xmm1, xmm0
0073da07: jbe 0x73da4c
0073da09: mov ecx, dword ptr [ebp + 0x10]
0073da0c: mov edx, dword ptr [ecx + 0x20]
0073da0f: movaps xmm0, xmmword ptr [edx + 0x30]
0073da13: movss xmm1, dword ptr [esp + 0x1c]
0073da19: movaps xmmword ptr [esp + 0x60], xmm0
0073da1e: movss xmm0, dword ptr [esp + 0x40]
0073da24: subss xmm0, dword ptr [esp + 0x60]
0073da2a: subss xmm2, dword ptr [esp + 0x68]
0073da30: mulss xmm0, xmm0
0073da34: mulss xmm2, xmm2
0073da38: addss xmm0, xmm2
0073da3c: comiss xmm1, xmm0
0073da3f: jbe 0x73da4c
0073da41: movaps xmmword ptr [esp + 0x30], xmm3
0073da46: movss dword ptr [esp + 0x1c], xmm0
0073da4c: dec eax
0073da4d: jne 0x73d954
0073da53: movaps xmm0, xmmword ptr [esp + 0x30]
0073da58: movaps xmmword ptr [ebx], xmm0
0073da5b: jmp 0x73da63
0073da5d: .byte 0xf3
0073da5e: .byte 0x0f
0073da5f: .byte 0x10

3over4 data0xec6fc0 operand0x73dfda candidate-start0x73de20
0073de20: push ebp
0073de21: mov ebp, esp
0073de23: and esp, 0xfffffff0
0073de26: sub esp, 0x58
0073de29: push esi
0073de2a: push edi
0073de2b: mov edi, ecx
0073de2d: test edx, edx
0073de2f: je 0x73e05c
0073de35: cmp dword ptr [edi + 0x74], 1
0073de39: jne 0x73e05c
0073de3f: mov eax, dword ptr [edi]
0073de41: mov edx, dword ptr [eax + 0x20]
0073de44: call edx
0073de46: mov esi, eax
0073de48: mov eax, dword ptr [esi + 0x20]
0073de4b: movaps xmm0, xmmword ptr [eax + 0x30]
0073de4f: push ecx
0073de50: movaps xmmword ptr [esp + 0x24], xmm0
0073de55: movss xmm0, dword ptr [0xf2c06c]
0073de5d: lea ecx, [esp + 0x24]
0073de61: movss dword ptr [esp], xmm0
0073de66: call 0x89fd10
0073de6b: test eax, eax
0073de6d: je 0x73e05c
0073de73: movss xmm0, dword ptr [esp + 0x20]
0073de79: movdqa xmm1, xmmword ptr [0xf2b990]
0073de81: shufps xmm0, xmm0, 0
0073de85: andps xmm0, xmm1
0073de88: movaps xmmword ptr [esp + 0x30], xmm0
0073de8d: movss xmm0, dword ptr [esp + 0x30]
0073de93: comiss xmm0, dword ptr [0xf2d138]
0073de9a: jbe 0x73debb
0073de9c: movss xmm0, dword ptr [0xf23e30]
0073dea4: push ecx
0073dea5: lea ecx, [esp + 0x24]
0073dea9: movss dword ptr [esp], xmm0
0073deae: call 0x89fd10
0073deb3: test eax, eax
0073deb5: jne 0x73e05c
0073debb: lea ecx, [esp + 0x40]
0073debf: push ecx
0073dec0: xor edx, edx
0073dec2: mov ecx, edi
0073dec4: call 0x6dc460
0073dec9: lea edx, [esp + 0x50]
0073decd: push edx
0073dece: mov edx, 2
0073ded3: call 0x6dc460
0073ded8: movss xmm0, dword ptr [0xf2d7e0]
0073dee0: push ecx
0073dee1: lea ecx, [esp + 0x44]
0073dee5: movss dword ptr [esp], xmm0
0073deea: call 0x89fd10
0073deef: test eax, eax
0073def1: je 0x73df12
0073def3: movss xmm0, dword ptr [0xf2d7e0]
0073defb: push ecx
0073defc: lea ecx, [esp + 0x54]
0073df00: movss dword ptr [esp], xmm0
0073df05: call 0x89fd10
0073df0a: test eax, eax
0073df0c: jne 0x73e05c
0073df12: mov ecx, esi
0073df14: call 0x401bf0
0073df19: mov ecx, esi
0073df1b: mov edi, eax
0073df1d: call 0x6a9c00
0073df22: sub eax, edi
0073df24: movsx ecx, ax
0073df27: mov eax, ecx
0073df29: sar eax, 0x1f
0073df2c: mov edx, ecx
0073df2e: neg edx
0073df30: and edx, eax
0073df32: not eax
0073df34: and eax, ecx
0073df36: or edx, eax
0073df38: cmp edx, 0x2aab
0073df3e: jg 0x73e05c
0073df44: mov eax, dword ptr [esi + 0xb00]
0073df4a: mov ecx, dword ptr [eax + 0x30]
0073df4d: mov edx, 2
0073df52: call 0x6d5f00
0073df57: fst dword ptr [esp + 0x18]
0073df5b: fld dword ptr [0xf2d5d8]
0073df61: fxch st(1)
0073df63: fcompi st(1)
0073df65: fstp st(0)
0073df67: jb 0x73e05c
0073df6d: mov ecx, dword ptr [esi + 0xb00]
0073df73: xorps xmm0, xmm0
0073df76: mov ecx, dword ptr [ecx + 0x30]
0073df79: mov edx, 0x21
0073df7e: movss dword ptr [esp + 0x10], xmm0
0073df84: call 0x6d5f00
0073df89: fstp dword ptr [esp + 0x14]
0073df8d: mov edx, dword ptr [esi + 0xb00]
0073df93: mov ecx, dword ptr [edx + 0x30]
0073df96: mov edx, 0x22
0073df9b: call 0x6d5f00
0073dfa0: fst dword ptr [esp + 0x1c]
0073dfa4: fld dword ptr [esp + 0x14]
0073dfa8: movss xmm1, dword ptr [esp + 0x18]
0073dfae: movss xmm0, dword ptr [esp + 0x1c]
0073dfb4: fxch st(1)
0073dfb6: fcompi st(1)
0073dfb8: fstp st(0)
0073dfba: ja 0x73dfff
0073dfbc: comiss xmm0, dword ptr [0xec7044]
0073dfc3: ja 0x73dfff
0073dfc5: movaps xmm2, xmm0
0073dfc8: subss xmm2, dword ptr [esp + 0x14]
0073dfce: comiss xmm2, dword ptr [0xed5a90]
0073dfd5: jb 0x73e00d
0073dfd7: comiss xmm1, dword ptr [0xec6fc0]
0073dfde: jae 0x73dfe9
0073dfe0: comiss xmm0, dword ptr [0xf2d358]
0073dfe7: jb 0x73e00d
0073dfe9: push ecx
0073dfea: mov ecx, 0xf2ab38
0073dfef: movss dword ptr [esp], xmm1
0073dff4: call 0x6cb4c0
0073dff9: fstp dword ptr [esp + 0x10]
0073dffd: jmp 0x73e00d
0073dfff: movss xmm0, dword ptr [0xec6e14]
0073e007: movss dword ptr [esp + 0x10], xmm0
0073e00d: mov ecx, esi
0073e00f: call 0x8a0010
0073e014: test eax, eax
0073e016: je 0x73e040
0073e018: movss xmm0, dword ptr [esp + 0x18]
0073e01e: comiss xmm0, dword ptr [0xec6fc0]
0073e025: jb 0x73e040
0073e027: movss xmm0, dword ptr [esp + 0x1c]
0073e02d: comiss xmm0, dword ptr [0xec7978]
0073e034: jb 0x73e040
0073e036: .byte 0xf3
0073e037: .byte 0x0f
0073e038: .byte 0x10
0073e039: .byte 0x05

3over4 data0xec6fc0 operand0x73e021 candidate-start0x73de20
0073de20: push ebp
0073de21: mov ebp, esp
0073de23: and esp, 0xfffffff0
0073de26: sub esp, 0x58
0073de29: push esi
0073de2a: push edi
0073de2b: mov edi, ecx
0073de2d: test edx, edx
0073de2f: je 0x73e05c
0073de35: cmp dword ptr [edi + 0x74], 1
0073de39: jne 0x73e05c
0073de3f: mov eax, dword ptr [edi]
0073de41: mov edx, dword ptr [eax + 0x20]
0073de44: call edx
0073de46: mov esi, eax
0073de48: mov eax, dword ptr [esi + 0x20]
0073de4b: movaps xmm0, xmmword ptr [eax + 0x30]
0073de4f: push ecx
0073de50: movaps xmmword ptr [esp + 0x24], xmm0
0073de55: movss xmm0, dword ptr [0xf2c06c]
0073de5d: lea ecx, [esp + 0x24]
0073de61: movss dword ptr [esp], xmm0
0073de66: call 0x89fd10
0073de6b: test eax, eax
0073de6d: je 0x73e05c
0073de73: movss xmm0, dword ptr [esp + 0x20]
0073de79: movdqa xmm1, xmmword ptr [0xf2b990]
0073de81: shufps xmm0, xmm0, 0
0073de85: andps xmm0, xmm1
0073de88: movaps xmmword ptr [esp + 0x30], xmm0
0073de8d: movss xmm0, dword ptr [esp + 0x30]
0073de93: comiss xmm0, dword ptr [0xf2d138]
0073de9a: jbe 0x73debb
0073de9c: movss xmm0, dword ptr [0xf23e30]
0073dea4: push ecx
0073dea5: lea ecx, [esp + 0x24]
0073dea9: movss dword ptr [esp], xmm0
0073deae: call 0x89fd10
0073deb3: test eax, eax
0073deb5: jne 0x73e05c
0073debb: lea ecx, [esp + 0x40]
0073debf: push ecx
0073dec0: xor edx, edx
0073dec2: mov ecx, edi
0073dec4: call 0x6dc460
0073dec9: lea edx, [esp + 0x50]
0073decd: push edx
0073dece: mov edx, 2
0073ded3: call 0x6dc460
0073ded8: movss xmm0, dword ptr [0xf2d7e0]
0073dee0: push ecx
0073dee1: lea ecx, [esp + 0x44]
0073dee5: movss dword ptr [esp], xmm0
0073deea: call 0x89fd10
0073deef: test eax, eax
0073def1: je 0x73df12
0073def3: movss xmm0, dword ptr [0xf2d7e0]
0073defb: push ecx
0073defc: lea ecx, [esp + 0x54]
0073df00: movss dword ptr [esp], xmm0
0073df05: call 0x89fd10
0073df0a: test eax, eax
0073df0c: jne 0x73e05c
0073df12: mov ecx, esi
0073df14: call 0x401bf0
0073df19: mov ecx, esi
0073df1b: mov edi, eax
0073df1d: call 0x6a9c00
0073df22: sub eax, edi
0073df24: movsx ecx, ax
0073df27: mov eax, ecx
0073df29: sar eax, 0x1f
0073df2c: mov edx, ecx
0073df2e: neg edx
0073df30: and edx, eax
0073df32: not eax
0073df34: and eax, ecx
0073df36: or edx, eax
0073df38: cmp edx, 0x2aab
0073df3e: jg 0x73e05c
0073df44: mov eax, dword ptr [esi + 0xb00]
0073df4a: mov ecx, dword ptr [eax + 0x30]
0073df4d: mov edx, 2
0073df52: call 0x6d5f00
0073df57: fst dword ptr [esp + 0x18]
0073df5b: fld dword ptr [0xf2d5d8]
0073df61: fxch st(1)
0073df63: fcompi st(1)
0073df65: fstp st(0)
0073df67: jb 0x73e05c
0073df6d: mov ecx, dword ptr [esi + 0xb00]
0073df73: xorps xmm0, xmm0
0073df76: mov ecx, dword ptr [ecx + 0x30]
0073df79: mov edx, 0x21
0073df7e: movss dword ptr [esp + 0x10], xmm0
0073df84: call 0x6d5f00
0073df89: fstp dword ptr [esp + 0x14]
0073df8d: mov edx, dword ptr [esi + 0xb00]
0073df93: mov ecx, dword ptr [edx + 0x30]
0073df96: mov edx, 0x22
0073df9b: call 0x6d5f00
0073dfa0: fst dword ptr [esp + 0x1c]
0073dfa4: fld dword ptr [esp + 0x14]
0073dfa8: movss xmm1, dword ptr [esp + 0x18]
0073dfae: movss xmm0, dword ptr [esp + 0x1c]
0073dfb4: fxch st(1)
0073dfb6: fcompi st(1)
0073dfb8: fstp st(0)
0073dfba: ja 0x73dfff
0073dfbc: comiss xmm0, dword ptr [0xec7044]
0073dfc3: ja 0x73dfff
0073dfc5: movaps xmm2, xmm0
0073dfc8: subss xmm2, dword ptr [esp + 0x14]
0073dfce: comiss xmm2, dword ptr [0xed5a90]
0073dfd5: jb 0x73e00d
0073dfd7: comiss xmm1, dword ptr [0xec6fc0]
0073dfde: jae 0x73dfe9
0073dfe0: comiss xmm0, dword ptr [0xf2d358]
0073dfe7: jb 0x73e00d
0073dfe9: push ecx
0073dfea: mov ecx, 0xf2ab38
0073dfef: movss dword ptr [esp], xmm1
0073dff4: call 0x6cb4c0
0073dff9: fstp dword ptr [esp + 0x10]
0073dffd: jmp 0x73e00d
0073dfff: movss xmm0, dword ptr [0xec6e14]
0073e007: movss dword ptr [esp + 0x10], xmm0
0073e00d: mov ecx, esi
0073e00f: call 0x8a0010
0073e014: test eax, eax
0073e016: je 0x73e040
0073e018: movss xmm0, dword ptr [esp + 0x18]
0073e01e: comiss xmm0, dword ptr [0xec6fc0]
0073e025: jb 0x73e040
0073e027: movss xmm0, dword ptr [esp + 0x1c]
0073e02d: comiss xmm0, dword ptr [0xec7978]
0073e034: jb 0x73e040
0073e036: movss xmm0, dword ptr [0xec6e14]
0073e03e: jmp 0x73e046
0073e040: movss xmm0, dword ptr [esp + 0x10]
0073e046: push ecx
0073e047: mov ecx, 0x10e23b8
0073e04c: movss dword ptr [esp], xmm0
0073e051: call 0x41c330
0073e056: pop edi
0073e057: pop esi
0073e058: mov esp, ebp
0073e05a: pop ebp
0073e05b: ret 
0073e05c: pop edi
0073e05d: xor eax, eax
0073e05f: pop esi
0073e060: mov esp, ebp
0073e062: pop ebp
0073e063: ret 
0073e064: int3 
0073e065: int3 
0073e066: int3 
0073e067: int3 
0073e068: int3 
0073e069: int3 
0073e06a: int3 
0073e06b: int3 
0073e06c: int3 
0073e06d: int3 
0073e06e: int3 
0073e06f: int3 
0073e070: push ebp
0073e071: mov ebp, esp
0073e073: and esp, 0xfffffff0
0073e076: sub esp, 0x1c
0073e079: push esi
0073e07a: mov esi, ecx
0073e07c: test edx, edx
0073e07e: je 0x73e0ed
0073e080: .byte 0x83

3over4 data0xec6fc0 operand0x746153 candidate-start0x746030
00746030: push esi
00746031: mov esi, ecx
00746033: call 0x6ba650
00746038: mov eax, dword ptr [esi + 0x14]
0074603b: and dword ptr [eax + 8], 0xfffffbff
00746042: mov eax, dword ptr [esi]
00746044: mov edx, dword ptr [eax + 0x20]
00746047: mov ecx, esi
00746049: call edx
0074604b: cmp dword ptr [0x1c64484], eax
00746051: je 0x74605b
00746053: cmp dword ptr [0x1c6447c], eax
00746059: jne 0x7460a5
0074605b: push edi
0074605c: xor edi, edi
0074605e: cmp dword ptr [0x1c64498], edi
00746064: je 0x7460a4
00746066: mov dword ptr [0x1c64498], edi
0074606c: call 0x6f89b0
00746071: xorps xmm0, xmm0
00746074: mov dword ptr [0x1c6447c], edi
0074607a: mov dword ptr [0x1c64480], edi
00746080: mov dword ptr [0x1c64484], edi
00746086: mov dword ptr [0x1c64488], edi
0074608c: movss dword ptr [0x1c64494], xmm0
00746094: movss dword ptr [0x1c64490], xmm0
0074609c: movss dword ptr [0x1c6448c], xmm0
007460a4: pop edi
007460a5: mov esi, dword ptr [esi + 0x18]
007460a8: mov eax, dword ptr [esi + 0xf4]
007460ae: and dword ptr [esi + 0xf0], 0xefffffff
007460b8: mov dword ptr [esi + 0xf4], eax
007460be: pop esi
007460bf: ret 
007460c0: sub esp, 0xc
007460c3: push ebx
007460c4: push ebp
007460c5: push esi
007460c6: mov esi, dword ptr [0x11988bc]
007460cc: push edi
007460cd: mov edi, ecx
007460cf: mov ebp, edx
007460d1: mov edx, dword ptr [edi + 0x3c]
007460d4: xor ebx, ebx
007460d6: cmp edx, ebx
007460d8: je 0x7460fe
007460da: mov ecx, dword ptr [edx + 0x1680]
007460e0: cmp ecx, ebx
007460e2: jle 0x7460fe
007460e4: lea eax, [ecx + ecx*2]
007460e7: shl eax, 7
007460ea: add eax, edx
007460ec: lea esp, [esp]
007460f0: sub eax, 0x180
007460f5: dec ecx
007460f6: cmp dword ptr [eax], esi
007460f8: je 0x7460fe
007460fa: cmp ecx, ebx
007460fc: jg 0x7460f0
007460fe: mov ecx, edi
00746100: call 0x7145c0
00746105: test eax, eax
00746107: je 0x746202
0074610d: mov edx, esi
0074610f: mov ecx, edi
00746111: call 0x6e2600
00746116: mov esi, eax
00746118: cmp esi, ebx
0074611a: je 0x746202
00746120: movss xmm0, dword ptr [0xec6fb8]
00746128: mov ecx, ebp
0074612a: movss dword ptr [esi + 0x10], xmm0
0074612f: mov dword ptr [esi + 0x14], ebp
00746132: call 0x6f7b30
00746137: mov dword ptr [esi + 0x18], eax
0074613a: mov dword ptr [esi + 0x1c], ebx
0074613d: mov dword ptr [esi + 0x20], ebx
00746140: mov dword ptr [esi + 0x2c], 0x2aab
00746147: movss xmm0, dword ptr [0x146b618]
0074614f: addss xmm0, dword ptr [0xec6fc0]
00746157: movss dword ptr [esi + 0x24], xmm0
0074615c: mov dword ptr [esi + 0x30], ebx
0074615f: mov ecx, dword ptr [edi + 0xb00]
00746165: call 0xcb55a0
0074616a: mov ecx, 0x11afe34
0074616f: mov dword ptr [esp + 0x10], eax
00746173: call 0x6cd5b0
00746178: fiadd dword ptr [esp + 0x10]
0074617c: call 0xe22fa0
00746181: push ecx
00746182: xorps xmm0, xmm0
00746185: cvtsi2ss xmm0, eax
00746189: mov ecx, 0xf24328
0074618e: movss dword ptr [esp], xmm0
00746193: call 0x6cb570
00746198: fstp dword ptr [esp + 0x10]
0074619c: mov ecx, dword ptr [0x10e23b8]
007461a2: call 0xd963d0
007461a7: mov ecx, eax
007461a9: mov dword ptr [esp + 0x18], edx
007461ad: call 0xd96410
007461b2: .byte 0xd9

3over4 data0xec6fc0 operand0x74c420 candidate-start0x74c300
0074c300: push ebp
0074c301: mov ebp, esp
0074c303: and esp, 0xfffffff0
0074c306: movss xmm0, dword ptr [0x146b618]
0074c30e: subss xmm0, dword ptr [0x1c4e92c]
0074c316: movss xmm1, dword ptr [0xec9600]
0074c31e: sub esp, 0x28
0074c321: comiss xmm1, xmm0
0074c324: push esi
0074c325: push edi
0074c326: ja 0x74c3b6
0074c32c: mov esi, dword ptr [ebp + 0xc]
0074c32f: mov eax, dword ptr [esi + 0x20]
0074c332: movss xmm0, dword ptr [eax + 0x38]
0074c337: movss dword ptr [esp + 8], xmm0
0074c33d: call 0x880380
0074c342: xorps xmm0, xmm0
0074c345: cvtsi2ss xmm0, eax
0074c349: mulss xmm0, dword ptr [esp + 8]
0074c34f: comiss xmm0, dword ptr [0xf2d88c]
0074c356: ja 0x74c3b6
0074c358: mov eax, dword ptr [esi + 0x20]
0074c35b: movss xmm0, dword ptr [eax + 0x30]
0074c360: shufps xmm0, xmm0, 0
0074c364: andps xmm0, xmmword ptr [0xf2b990]
0074c36b: movaps xmmword ptr [esp + 0x10], xmm0
0074c370: movss xmm0, dword ptr [0xf25ecc]
0074c378: comiss xmm0, dword ptr [esp + 0x10]
0074c37d: ja 0x74c3b6
0074c37f: call 0x4120b0
0074c384: cmp dword ptr [eax + 0x34], 0
0074c388: je 0x74c3b6
0074c38a: mov ecx, dword ptr [eax + 0x2c]
0074c38d: lea ecx, [ecx + ecx*2]
0074c390: cmp dword ptr [eax + ecx*4 + 0x14], 0xa
0074c395: jne 0x74c3b6
0074c397: mov eax, dword ptr [esi + 0x4c]
0074c39a: mov ecx, dword ptr [eax + 0x38]
0074c39d: mov eax, dword ptr [ecx + 0x58]
0074c3a0: test eax, eax
0074c3a2: je 0x74c3a8
0074c3a4: mov eax, dword ptr [eax]
0074c3a6: jmp 0x74c3aa
0074c3a8: xor eax, eax
0074c3aa: jmp dword ptr [eax*4 + 0x74c684]
0074c3b1: cmp esi, dword ptr [ecx + 0x60]
0074c3b4: je 0x74c3da
0074c3b6: fld dword ptr [0xec6ff0]
0074c3bc: pop edi
0074c3bd: pop esi
0074c3be: mov esp, ebp
0074c3c0: pop ebp
0074c3c1: ret 8
0074c3c4: cmp esi, dword ptr [ecx + 0x60]
0074c3c7: jne 0x74c3b6
0074c3c9: call 0x6bfbb0
0074c3ce: fld dword ptr [0xec6e10]
0074c3d4: fcompi st(1)
0074c3d6: fstp st(0)
0074c3d8: jbe 0x74c3b6
0074c3da: call 0x6bfbb0
0074c3df: fld dword ptr [0xec7048]
0074c3e5: fcompi st(1)
0074c3e7: fstp st(0)
0074c3e9: ja 0x74c3b6
0074c3eb: mov eax, dword ptr [esi + 0xb0c]
0074c3f1: lea edi, [eax*8]
0074c3f8: sub edi, eax
0074c3fa: lea edi, [edi*4 + 0x1dee6b4]
0074c401: call 0x4120c0
0074c406: mov edx, 5
0074c40b: mov ecx, eax
0074c40d: call 0x411f40
0074c412: test eax, eax
0074c414: je 0x74c42a
0074c416: test byte ptr [edi + 0x18], 6
0074c41a: jne 0x74c42a
0074c41c: movss xmm0, dword ptr [0xec6fc0]
0074c424: comiss xmm0, dword ptr [edi + 0x10]
0074c428: ja 0x74c3b6
0074c42a: mov ecx, dword ptr [esi + 0x18]
0074c42d: call 0x6a9d60
0074c432: test eax, eax
0074c434: je 0x74c3b6
0074c436: mov ecx, esi
0074c438: call 0x872a30
0074c43d: fst dword ptr [esp + 8]
0074c441: fld dword ptr [0xf2c050]
0074c447: fxch st(1)
0074c449: fcompi st(1)
0074c44b: fstp st(0)
0074c44d: ja 0x74c3b6
0074c453: movss xmm0, dword ptr [0xf2d888]
0074c45b: comiss xmm0, dword ptr [esp + 8]
0074c460: ja 0x74c3b6
0074c466: mov eax, dword ptr [esi + 0x18]
0074c469: movss xmm0, dword ptr [0x146b618]
0074c471: subss xmm0, dword ptr [eax + 0x3e8]
0074c479: .byte 0xf3
0074c47a: .byte 0x0f
0074c47b: .byte 0x10
0074c47c: .byte 0x0d
0074c47d: cmp byte ptr [edx - 0x14], dh

3over4 data0xec6fc0 operand0x74e076 candidate-start0x74dc40
0074dc40: push ebp
0074dc41: mov ebp, esp
0074dc43: and esp, 0xfffffff0
0074dc46: sub esp, 0x394
0074dc4c: push ebx
0074dc4d: push esi
0074dc4e: push edi
0074dc4f: xor edi, edi
0074dc51: mov dword ptr [esp + 0xc], edx
0074dc55: mov dword ptr [esp + 0x1c], ecx
0074dc59: cmp dword ptr [0x1c64208], edi
0074dc5f: jne 0x74e0c0
0074dc65: movss xmm1, dword ptr [0x1e697f8]
0074dc6d: xorps xmm0, xmm0
0074dc70: movss xmm2, dword ptr [0xec6e14]
0074dc78: movss xmm3, dword ptr [0xf0d8ec]
0074dc80: movaps xmm5, xmm1
0074dc83: xorps xmm5, xmmword ptr [0xec6fe0]
0074dc8a: movaps xmm4, xmm0
0074dc8d: movaps xmm6, xmm2
0074dc90: unpcklps xmm0, xmm2
0074dc93: mov esi, 1
0074dc98: lea ecx, [edi + 0x10]
0074dc9b: unpcklps xmm3, xmm5
0074dc9e: mov dword ptr [0x1d83000], esi
0074dca4: unpcklps xmm4, xmm6
0074dca7: unpcklps xmm3, xmm4
0074dcaa: movaps xmmword ptr [0x1ce6fc0], xmm3
0074dcb1: movss xmm3, dword ptr [0xed59c8]
0074dcb9: unpcklps xmm3, xmm1
0074dcbc: unpcklps xmm3, xmm0
0074dcbf: movaps xmmword ptr [0x1ce6fb0], xmm3
0074dcc6: call 0x6ec0b0
0074dccb: lea eax, [esp + 0x10]
0074dccf: push eax
0074dcd0: call 0x6ec840
0074dcd5: lea ecx, [edi + 0x10]
0074dcd8: mov dword ptr [0x1d951c0], edi
0074dcde: mov dword ptr [0x1d951c4], edi
0074dce4: mov dword ptr [0x1d951c8], edi
0074dcea: mov dword ptr [0x1d951cc], edi
0074dcf0: mov dword ptr [0x1d951d0], edi
0074dcf6: call 0x587370
0074dcfb: mov ebx, dword ptr [esp + 0x14]
0074dcff: cmp ebx, edi
0074dd01: je 0x74dd1d
0074dd03: mov ecx, ebx
0074dd05: mov dword ptr [0x1d951c0], ebx
0074dd0b: call 0x6ec610
0074dd10: test eax, eax
0074dd12: je 0x74dd1d
0074dd14: mov ecx, ebx
0074dd16: call 0x6ec660
0074dd1b: jmp 0x74dd29
0074dd1d: mov dword ptr [0x1d951c8], esi
0074dd23: mov dword ptr [0x1d951d0], esi
0074dd29: mov esi, dword ptr [esp + 0x10]
0074dd2d: cmp esi, edi
0074dd2f: je 0x74dd4f
0074dd31: xor eax, eax
0074dd33: cmp dword ptr [esi + 4], edi
0074dd36: jle 0x74dd4f
0074dd38: xor ecx, ecx
0074dd3a: lea ebx, [ebx]
0074dd40: mov edx, dword ptr [esi]
0074dd42: mov dword ptr [edx + ecx + 0x50], edi
0074dd46: inc eax
0074dd47: add ecx, 0x60
0074dd4a: cmp eax, dword ptr [esi + 4]
0074dd4d: jl 0x74dd40
0074dd4f: cmp ebx, edi
0074dd51: je 0x74dd6f
0074dd53: xor eax, eax
0074dd55: cmp dword ptr [ebx + 4], edi
0074dd58: jle 0x74dd6f
0074dd5a: xor ecx, ecx
0074dd5c: lea esp, [esp]
0074dd60: mov edx, dword ptr [ebx]
0074dd62: mov dword ptr [edx + ecx + 0x50], edi
0074dd66: inc eax
0074dd67: add ecx, 0x60
0074dd6a: cmp eax, dword ptr [ebx + 4]
0074dd6d: jl 0x74dd60
0074dd6f: push 0x1ac
0074dd74: xor dl, dl
0074dd76: mov ecx, 0x1d83038
0074dd7b: call 0xd95820
0074dd80: xor eax, eax
0074dd82: cmp esi, 0x11a24a8
0074dd88: sete al
0074dd8b: cmp dword ptr [esp + 0xc], edi
0074dd8f: jne 0x74dda7
0074dd91: cmp eax, edi
0074dd93: jne 0x74ddab
0074dd95: cmp esi, edi
0074dd97: je 0x74ddbb
0074dd99: mov eax, dword ptr [esi + 4]
0074dd9c: mov ecx, dword ptr [esi]
0074dd9e: push eax
0074dd9f: push ecx
0074dda0: call 0x6ecee0
0074dda5: jmp 0x74ddab
0074dda7: cmp eax, edi
0074dda9: je 0x74ddbb
0074ddab: cmp esi, edi
0074ddad: je 0x74ddbb
0074ddaf: mov edx, dword ptr [esi + 4]
0074ddb2: mov eax, dword ptr [esi]
0074ddb4: push edx
0074ddb5: push eax
0074ddb6: call 0x6ed020
0074ddbb: call 0x6ed360
0074ddc0: push edi
0074ddc1: mov edx, 0x1d955d0
0074ddc6: lea ecx, [esp + 0x44]
0074ddca: call 0x6eda30
0074ddcf: push edi
0074ddd0: mov edx, 0x1d95520
0074ddd5: lea ecx, [esp + 0x1f4]
0074dddc: call 0x6eda30
0074dde1: mov ecx, dword ptr [0x1d95440]
0074dde7: mov eax, 0x1d9543c
0074ddec: sub eax, 0x24
0074ddef: mov edi, ecx
0074ddf1: sub edi, eax
0074ddf3: neg edi
0074ddf5: sbb edi, edi
0074ddf7: and edi, ecx
0074ddf9: pxor xmm0, xmm0
0074ddfd: movdqa xmmword ptr [esp + 0x20], xmm0
0074de03: movq qword ptr [esp + 0x30], xmm0
0074de09: mov dword ptr [esp + 0x18], 1
0074de11: je 0x74df05
0074de17: mov eax, dword ptr [edi + 0x74]
0074de1a: dec eax
0074de1b: cmp eax, 6
0074de1e: ja 0x74deda
0074de24: jmp dword ptr [eax*4 + 0x74e0c8]
0074de2b: test esi, esi
0074de2d: je 0x74deda
0074de33: mov ecx, dword ptr [edi + 0x68]
0074de36: xor eax, eax
0074de38: cmp ecx, 0x6a
0074de3b: ja 0x74de5e
0074de3d: cmp dword ptr [edi + 0x4c], 0x1d955d0
0074de44: jne 0x74de57
0074de46: mov eax, dword ptr [esp + ecx*4 + 0x40]
0074de4a: mov ecx, dword ptr [esi + 4]
0074de4d: mov edx, dword ptr [esp + 0x10]
0074de51: push eax
0074de52: mov eax, dword ptr [edx]
0074de54: push ecx
0074de55: jmp 0x74decb
0074de57: mov eax, dword ptr [esp + ecx*4 + 0x1f0]
0074de5e: mov ecx, dword ptr [esi + 4]
0074de61: mov edx, dword ptr [esp + 0x10]
0074de65: push eax
0074de66: mov eax, dword ptr [edx]
0074de68: push ecx
0074de69: jmp 0x74decb
0074de6b: mov ecx, edi
0074de6d: call 0x6bc0c0
0074de72: test eax, eax
0074de74: jne 0x74deda
0074de76: test ebx, ebx
0074de78: je 0x74deda
0074de7a: push -1
0074de7c: jmp 0x74dec5
0074de7e: test ebx, ebx
0074de80: je 0x74deda
0074de82: cmp dword ptr [esp + 0x18], 0
0074de87: je 0x74deb0
0074de89: push 2
0074de8b: lea ecx, [esp + 0x24]
0074de8f: push ecx
0074de90: xor eax, eax
0074de92: call 0x7239c0
0074de97: push 5
0074de99: lea edx, [esp + 0x30]
0074de9d: push edx
0074de9e: mov eax, 3
0074dea3: call 0x7239c0
0074dea8: mov dword ptr [esp + 0x18], 0
0074deb0: mov eax, dword ptr [edi + 0xb00]
0074deb6: cmp eax, 5
0074deb9: ja 0x74dec1
0074debb: mov eax, dword ptr [esp + eax*4 + 0x20]
0074debf: jmp 0x74dec4
0074dec1: or eax, 0xffffffff
0074dec4: push eax
0074dec5: mov eax, dword ptr [ebx + 4]
0074dec8: push eax
0074dec9: mov eax, dword ptr [ebx]
0074decb: mov esi, dword ptr [esp + 0x14]
0074decf: mov ecx, edi
0074ded1: call 0x74d0f0
0074ded6: mov esi, dword ptr [esp + 0x10]
0074deda: mov eax, dword ptr [edi + 0x60]
0074dedd: mov ecx, dword ptr [edi + 0x28]
0074dee0: and eax, 1
0074dee3: lea eax, [eax*8 + 0x1d9543c]
0074deea: test eax, eax
0074deec: je 0x74def3
0074deee: add eax, -0x24
0074def1: jmp 0x74def5
0074def3: xor eax, eax
0074def5: mov edi, ecx
0074def7: sub edi, eax
0074def9: neg edi
0074defb: sbb edi, edi
0074defd: and edi, ecx
0074deff: jne 0x74de17
0074df05: cmp dword ptr [esp + 0x1c], 0
0074df0a: je 0x74df3f
0074df0c: cmp dword ptr [0x1dee620], 0x1d955d0
0074df16: mov esi, dword ptr [0x1c49d3c]
0074df1c: je 0x74df24
0074df1e: mov esi, dword ptr [0x1c4817c]
0074df24: test esi, esi
0074df26: je 0x74df3f
0074df28: mov eax, dword ptr [0x11b04a8]
0074df2d: test eax, eax
0074df2f: je 0x74df35
0074df31: mov ecx, esi
0074df33: call eax
0074df35: mov dword ptr [esi + 0xb08], 2
0074df3f: call 0x4120b0
0074df44: cmp dword ptr [eax + 0x34], 0
0074df48: jne 0x74df4e
0074df4a: xor eax, eax
0074df4c: jmp 0x74df58
0074df4e: mov ecx, dword ptr [eax + 0x2c]
0074df51: lea ecx, [ecx + ecx*2]
0074df54: mov eax, dword ptr [eax + ecx*4 + 0x14]
0074df58: dec eax
0074df59: cmp eax, 0xc
0074df5c: ja 0x74df6c
0074df5e: movzx edx, byte ptr [eax + 0x74e0ec]
0074df65: jmp dword ptr [edx*4 + 0x74e0e4]
0074df6c: mov ecx, dword ptr [0x1d954c0]
0074df72: mov eax, 0x1d954bc
0074df77: sub eax, 0x2c
0074df7a: mov esi, ecx
0074df7c: sub esi, eax
0074df7e: neg esi
0074df80: sbb esi, esi
0074df82: and esi, ecx
0074df84: je 0x74dfa2
0074df86: mov eax, dword ptr [0x1199270]
0074df8b: test eax, eax
0074df8d: je 0x74df93
0074df8f: mov ecx, esi
0074df91: call eax
0074df93: mov eax, dword ptr [esi]
0074df95: mov edx, dword ptr [eax + 0x10]
0074df98: mov ecx, esi
0074df9a: call edx
0074df9c: mov esi, eax
0074df9e: test esi, esi
0074dfa0: jne 0x74df86
0074dfa2: call 0x4120b0
0074dfa7: cmp dword ptr [eax + 0x34], 0
0074dfab: je 0x74e0a3
0074dfb1: mov ecx, dword ptr [eax + 0x2c]
0074dfb4: lea ecx, [ecx + ecx*2]
0074dfb7: cmp dword ptr [eax + ecx*4 + 0x14], 0xb
0074dfbc: jne 0x74e0a3
0074dfc2: cmp dword ptr [0x1dee5ec], 5
0074dfc9: jl 0x74e0a3
0074dfcf: mov eax, dword ptr [0x1c48300]
0074dfd4: xor edi, edi
0074dfd6: mov ebx, eax
0074dfd8: test eax, eax
0074dfda: je 0x74dfef
0074dfdc: test dword ptr [eax + 0x78], 0xc00
0074dfe3: mov edi, 0x1d955d0
0074dfe8: je 0x74dfef
0074dfea: mov edi, 0x1d95520
0074dfef: mov ecx, dword ptr [0x1d95200]
0074dff5: mov eax, 0x1d951fc
0074dffa: sub eax, 0x2c
0074dffd: mov esi, ecx
0074dfff: sub esi, eax
0074e001: neg esi
0074e003: sbb esi, esi
0074e005: and esi, ecx
0074e007: je 0x74e0a3
0074e00d: lea ecx, [ecx]
0074e010: cmp dword ptr [esi + 0xb00], ebx
0074e016: jne 0x74e03a
0074e018: mov ecx, dword ptr [0x10e23b8]
0074e01e: push 2
0074e020: call 0xd963d0
0074e025: mov ecx, eax
0074e027: call 0xd96410
0074e02c: fmul dword ptr [0xf27218]
0074e032: fadd dword ptr [0xec708c]
0074e038: jmp 0x74e080
0074e03a: cmp edi, dword ptr [esi + 0x4c]
0074e03d: jne 0x74e090
0074e03f: mov ecx, dword ptr [0x10e23b8]
0074e045: call 0xd963d0
0074e04a: and eax, 1
0074e04d: xor edx, edx
0074e04f: or eax, edx
0074e051: je 0x74e058
0074e053: lea eax, [edx + 1]
0074e056: jmp 0x74e05a
0074e058: xor eax, eax
0074e05a: mov ecx, dword ptr [0x10e23b8]
0074e060: neg eax
0074e062: sbb eax, eax
0074e064: add eax, 2
0074e067: push eax
0074e068: call 0xd963d0
0074e06d: mov ecx, eax
0074e06f: call 0xd96410
0074e074: fmul dword ptr [0xec6fc0]
0074e07a: fadd dword ptr [0xec6fd0]
0074e080: push ecx
0074e081: mov edx, 2
0074e086: fstp dword ptr [esp]
0074e089: mov ecx, esi
0074e08b: call 0x717b60
0074e090: mov edx, dword ptr [esi]
0074e092: mov eax, dword ptr [edx + 0xc]
0074e095: mov ecx, esi
0074e097: call eax
0074e099: mov esi, eax
0074e09b: test esi, esi
0074e09d: jne 0x74e010
0074e0a3: xorpd xmm0, xmm0
0074e0a7: mov ecx, 0x26
0074e0ac: mov esi, 0x1c64190
0074e0b1: mov edi, 0x1c64198
0074e0b6: movlpd qword ptr [0x1c64190], xmm0
0074e0be: rep movsd dword ptr es:[edi], dword ptr [esi]
0074e0c0: pop edi
0074e0c1: pop esi
0074e0c2: pop ebx
0074e0c3: mov esp, ebp
0074e0c5: pop ebp
0074e0c6: ret 
0074e0c7: nop 
0074e0c8: sub ebx, esi
0074e0ca: je 0x74e0cc
0074e0cc: sub ebx, esi
0074e0ce: je 0x74e0d0
0074e0d0: jbe 0x74e0b0
0074e0d2: je 0x74e0d4
0074e0d4: sub ebx, esi

3over4 data0xec6fc0 operand0x75bfc1 candidate-start0x75bf91
0075bf91: mov dh, dh
0075bf93: dec dword ptr [ecx - 0x7adfdbbc]
0075bf99: sal byte ptr [eax + edi*2 - 0x75], 0x54
0075bf9e: and al, 0x30
0075bfa0: mov eax, dword ptr [edx + 0x18]
0075bfa3: test byte ptr [eax + 0x2c], 1
0075bfa7: jne 0x75c014
0075bfa9: cmp dword ptr [esp + esi + 0x104], 0
0075bfb1: mov ecx, dword ptr [esp + 0x20]
0075bfb5: mov eax, dword ptr [ecx + 0xb0c]
0075bfbb: jne 0x75c014
0075bfbd: movss xmm0, dword ptr [0xec6fc0]
0075bfc5: lea eax, [eax + eax*4 - 5]
0075bfc9: lea ecx, [eax + edi - 1]
0075bfcd: lea edx, [ecx + ecx*8]
0075bfd0: movss xmm1, dword ptr [esp + edx*8 + 0xfc]
0075bfd9: mov ecx, dword ptr [esp + 0x18]
0075bfdd: lea eax, [eax + ebx - 1]
0075bfe1: lea edx, [eax + eax*8]
0075bfe4: movss xmm2, dword ptr [esp + edx*8 + 0xfc]
0075bfed: mov eax, dword ptr [esp + 0x24]
0075bff1: mulss xmm1, xmm0
0075bff5: addss xmm1, dword ptr [ecx]
0075bff9: mulss xmm2, xmm0
0075bffd: addss xmm2, dword ptr [eax]
0075c001: subss xmm1, xmm2
0075c005: subss xmm1, dword ptr [esp + 0x1c]
0075c00b: comiss xmm1, dword ptr [0xf0fc08]
0075c012: ja 0x75c023
0075c014: mov edx, dword ptr [esp + 0x2c]
0075c018: mov ecx, dword ptr [esp + 0x14]
0075c01c: push 0
0075c01e: .byte 0xe8
0075c01f: .byte 0xdd
0075c020: cmc 

3over4 data0xec6fc0 operand0x75d29b candidate-start0x75d200
0075d200: sub esp, 0x10
0075d203: cmp dword ptr [0x1b22be8], 0
0075d20a: je 0x75d244
0075d20c: lea eax, [esp]
0075d20f: push eax
0075d210: push 0x1af7
0075d215: mov edx, 0x9623a0a6
0075d21a: mov ecx, 0x1b22bf8
0075d21f: mov dword ptr [esp + 8], 0
0075d227: mov dword ptr [esp + 0xc], 1
0075d22f: mov dword ptr [esp + 0x10], 0xf2da44
0075d237: mov dword ptr [esp + 0x14], 0x67aea0
0075d23f: call 0x67b040
0075d244: mov ecx, 0xa
0075d249: call 0x5a2cd0
0075d24e: call 0x54b630
0075d253: call 0x6f63f0
0075d258: call 0x8bf850
0075d25d: mov ecx, 0x1d955d0
0075d262: mov dword ptr [0x1dee958], 0
0075d26c: call 0x72e930
0075d271: mov ecx, 0x1d95520
0075d276: call 0x72e930
0075d27b: xor edx, edx
0075d27d: xor ecx, ecx
0075d27f: call 0x74e450
0075d284: call 0x74e670
0075d289: mov edx, dword ptr [0x1d95200]
0075d28f: movss xmm2, dword ptr [0xec6fd4]
0075d297: movss xmm1, dword ptr [0xec6fc0]
0075d29f: movss xmm4, dword ptr [0xec6e14]
0075d2a7: mov ecx, 0x1d951fc
0075d2ac: sub ecx, 0x2c
0075d2af: mov eax, edx
0075d2b1: sub eax, ecx
0075d2b3: neg eax
0075d2b5: sbb eax, eax
0075d2b7: and eax, edx
0075d2b9: je 0x75d350
0075d2bf: nop 
0075d2c0: mov ecx, dword ptr [eax + 0xb00]
0075d2c6: mov edx, dword ptr [ecx + 0x34]
0075d2c9: xorps xmm0, xmm0
0075d2cc: shr edx, 0x11
0075d2cf: and edx, 0x7f
0075d2d2: cvtsi2ss xmm0, edx
0075d2d6: mulss xmm0, dword ptr [0xf2cf88]
0075d2de: movaps xmm3, xmm0
0075d2e1: subss xmm0, xmm2
0075d2e5: mulss xmm0, dword ptr [0xec6fd0]
0075d2ed: mulss xmm0, dword ptr [0xec704c]
0075d2f5: addss xmm0, xmm1
0075d2f9: .byte 0x0f
0075d2fa: das 

3over4 data0xec6fc0 operand0x75d33c candidate-start0x75d200
0075d200: sub esp, 0x10
0075d203: cmp dword ptr [0x1b22be8], 0
0075d20a: je 0x75d244
0075d20c: lea eax, [esp]
0075d20f: push eax
0075d210: push 0x1af7
0075d215: mov edx, 0x9623a0a6
0075d21a: mov ecx, 0x1b22bf8
0075d21f: mov dword ptr [esp + 8], 0
0075d227: mov dword ptr [esp + 0xc], 1
0075d22f: mov dword ptr [esp + 0x10], 0xf2da44
0075d237: mov dword ptr [esp + 0x14], 0x67aea0
0075d23f: call 0x67b040
0075d244: mov ecx, 0xa
0075d249: call 0x5a2cd0
0075d24e: call 0x54b630
0075d253: call 0x6f63f0
0075d258: call 0x8bf850
0075d25d: mov ecx, 0x1d955d0
0075d262: mov dword ptr [0x1dee958], 0
0075d26c: call 0x72e930
0075d271: mov ecx, 0x1d95520
0075d276: call 0x72e930
0075d27b: xor edx, edx
0075d27d: xor ecx, ecx
0075d27f: call 0x74e450
0075d284: call 0x74e670
0075d289: mov edx, dword ptr [0x1d95200]
0075d28f: movss xmm2, dword ptr [0xec6fd4]
0075d297: movss xmm1, dword ptr [0xec6fc0]
0075d29f: movss xmm4, dword ptr [0xec6e14]
0075d2a7: mov ecx, 0x1d951fc
0075d2ac: sub ecx, 0x2c
0075d2af: mov eax, edx
0075d2b1: sub eax, ecx
0075d2b3: neg eax
0075d2b5: sbb eax, eax
0075d2b7: and eax, edx
0075d2b9: je 0x75d350
0075d2bf: nop 
0075d2c0: mov ecx, dword ptr [eax + 0xb00]
0075d2c6: mov edx, dword ptr [ecx + 0x34]
0075d2c9: xorps xmm0, xmm0
0075d2cc: shr edx, 0x11
0075d2cf: and edx, 0x7f
0075d2d2: cvtsi2ss xmm0, edx
0075d2d6: mulss xmm0, dword ptr [0xf2cf88]
0075d2de: movaps xmm3, xmm0
0075d2e1: subss xmm0, xmm2
0075d2e5: mulss xmm0, dword ptr [0xec6fd0]
0075d2ed: mulss xmm0, dword ptr [0xec704c]
0075d2f5: addss xmm0, xmm1
0075d2f9: comiss xmm1, xmm0
0075d2fc: mulss xmm3, xmm2
0075d300: addss xmm3, dword ptr [eax + 0x136c]
0075d308: jbe 0x75d30f
0075d30a: movaps xmm0, xmm1
0075d30d: jmp 0x75d317
0075d30f: comiss xmm4, xmm0
0075d312: ja 0x75d317
0075d314: movaps xmm0, xmm4
0075d317: comiss xmm0, xmm3
0075d31a: ja 0x75d31f
0075d31c: movaps xmm0, xmm3
0075d31f: mov edx, dword ptr [eax]
0075d321: movss dword ptr [eax + 0x136c], xmm0
0075d329: mov ecx, eax
0075d32b: mov eax, dword ptr [edx + 0xc]
0075d32e: call eax
0075d330: movss xmm2, dword ptr [0xec6fd4]
0075d338: movss xmm1, dword ptr [0xec6fc0]
0075d340: movss xmm4, dword ptr [0xec6e14]
0075d348: test eax, eax
0075d34a: jne 0x75d2c0
0075d350: mov edx, dword ptr [0x1d95210]
0075d356: mov ecx, 0x1d9520c
0075d35b: sub ecx, 0x2c
0075d35e: mov eax, edx
0075d360: sub eax, ecx
0075d362: neg eax
0075d364: sbb eax, eax
0075d366: and eax, edx
0075d368: je 0x75d400
0075d36e: jmp 0x75d388
0075d370: movss xmm2, dword ptr [0xec6fd4]
0075d378: movss xmm1, dword ptr [0xec6fc0]
0075d380: movss xmm4, dword ptr [0xec6e14]
0075d388: mov ecx, dword ptr [eax + 0xb00]
0075d38e: mov edx, dword ptr [ecx + 0x34]
0075d391: xorps xmm0, xmm0
0075d394: shr edx, 0x11
0075d397: and edx, 0x7f
0075d39a: .byte 0xf3
0075d39b: .byte 0x0f

3over4 data0xec6fc0 operand0x75d37c candidate-start0x75d200
0075d200: sub esp, 0x10
0075d203: cmp dword ptr [0x1b22be8], 0
0075d20a: je 0x75d244
0075d20c: lea eax, [esp]
0075d20f: push eax
0075d210: push 0x1af7
0075d215: mov edx, 0x9623a0a6
0075d21a: mov ecx, 0x1b22bf8
0075d21f: mov dword ptr [esp + 8], 0
0075d227: mov dword ptr [esp + 0xc], 1
0075d22f: mov dword ptr [esp + 0x10], 0xf2da44
0075d237: mov dword ptr [esp + 0x14], 0x67aea0
0075d23f: call 0x67b040
0075d244: mov ecx, 0xa
0075d249: call 0x5a2cd0
0075d24e: call 0x54b630
0075d253: call 0x6f63f0
0075d258: call 0x8bf850
0075d25d: mov ecx, 0x1d955d0
0075d262: mov dword ptr [0x1dee958], 0
0075d26c: call 0x72e930
0075d271: mov ecx, 0x1d95520
0075d276: call 0x72e930
0075d27b: xor edx, edx
0075d27d: xor ecx, ecx
0075d27f: call 0x74e450
0075d284: call 0x74e670
0075d289: mov edx, dword ptr [0x1d95200]
0075d28f: movss xmm2, dword ptr [0xec6fd4]
0075d297: movss xmm1, dword ptr [0xec6fc0]
0075d29f: movss xmm4, dword ptr [0xec6e14]
0075d2a7: mov ecx, 0x1d951fc
0075d2ac: sub ecx, 0x2c
0075d2af: mov eax, edx
0075d2b1: sub eax, ecx
0075d2b3: neg eax
0075d2b5: sbb eax, eax
0075d2b7: and eax, edx
0075d2b9: je 0x75d350
0075d2bf: nop 
0075d2c0: mov ecx, dword ptr [eax + 0xb00]
0075d2c6: mov edx, dword ptr [ecx + 0x34]
0075d2c9: xorps xmm0, xmm0
0075d2cc: shr edx, 0x11
0075d2cf: and edx, 0x7f
0075d2d2: cvtsi2ss xmm0, edx
0075d2d6: mulss xmm0, dword ptr [0xf2cf88]
0075d2de: movaps xmm3, xmm0
0075d2e1: subss xmm0, xmm2
0075d2e5: mulss xmm0, dword ptr [0xec6fd0]
0075d2ed: mulss xmm0, dword ptr [0xec704c]
0075d2f5: addss xmm0, xmm1
0075d2f9: comiss xmm1, xmm0
0075d2fc: mulss xmm3, xmm2
0075d300: addss xmm3, dword ptr [eax + 0x136c]
0075d308: jbe 0x75d30f
0075d30a: movaps xmm0, xmm1
0075d30d: jmp 0x75d317
0075d30f: comiss xmm4, xmm0
0075d312: ja 0x75d317
0075d314: movaps xmm0, xmm4
0075d317: comiss xmm0, xmm3
0075d31a: ja 0x75d31f
0075d31c: movaps xmm0, xmm3
0075d31f: mov edx, dword ptr [eax]
0075d321: movss dword ptr [eax + 0x136c], xmm0
0075d329: mov ecx, eax
0075d32b: mov eax, dword ptr [edx + 0xc]
0075d32e: call eax
0075d330: movss xmm2, dword ptr [0xec6fd4]
0075d338: movss xmm1, dword ptr [0xec6fc0]
0075d340: movss xmm4, dword ptr [0xec6e14]
0075d348: test eax, eax
0075d34a: jne 0x75d2c0
0075d350: mov edx, dword ptr [0x1d95210]
0075d356: mov ecx, 0x1d9520c
0075d35b: sub ecx, 0x2c
0075d35e: mov eax, edx
0075d360: sub eax, ecx
0075d362: neg eax
0075d364: sbb eax, eax
0075d366: and eax, edx
0075d368: je 0x75d400
0075d36e: jmp 0x75d388
0075d370: movss xmm2, dword ptr [0xec6fd4]
0075d378: movss xmm1, dword ptr [0xec6fc0]
0075d380: movss xmm4, dword ptr [0xec6e14]
0075d388: mov ecx, dword ptr [eax + 0xb00]
0075d38e: mov edx, dword ptr [ecx + 0x34]
0075d391: xorps xmm0, xmm0
0075d394: shr edx, 0x11
0075d397: and edx, 0x7f
0075d39a: cvtsi2ss xmm0, edx
0075d39e: mulss xmm0, dword ptr [0xf2cf88]
0075d3a6: movaps xmm3, xmm0
0075d3a9: subss xmm0, xmm2
0075d3ad: mulss xmm0, dword ptr [0xec6fd0]
0075d3b5: mulss xmm0, dword ptr [0xec704c]
0075d3bd: addss xmm0, xmm1
0075d3c1: comiss xmm1, xmm0
0075d3c4: mulss xmm3, xmm2
0075d3c8: addss xmm3, dword ptr [eax + 0x136c]
0075d3d0: jbe 0x75d3d7
0075d3d2: movaps xmm0, xmm1
0075d3d5: jmp 0x75d3df
0075d3d7: comiss xmm4, xmm0
0075d3da: ja 0x75d3df

3over4 data0xec6fc0 operand0x75dc8e candidate-start0x75d850
0075d850: push ebp
0075d851: mov ebp, esp
0075d853: and esp, 0xfffffff0
0075d856: sub esp, 0x64
0075d859: push ebx
0075d85a: push esi
0075d85b: push edi
0075d85c: mov edi, ecx
0075d85e: mov ebx, dword ptr [edi + 0x54]
0075d861: mov eax, dword ptr [edi + 0x38]
0075d864: mov eax, dword ptr [eax]
0075d866: movaps xmm0, xmmword ptr [ebx + 0x40]
0075d86a: mov ecx, 1
0075d86f: mov dword ptr [esp + 0x28], edi
0075d873: mov dword ptr [esp + 0x24], ebx
0075d877: mov dword ptr [esp + 0x18], ecx
0075d87b: movaps xmmword ptr [esp + 0x40], xmm0
0075d880: mov dword ptr [esp + 0x10], eax
0075d884: cmp dword ptr [edi + 0x74], ecx
0075d887: je 0x75d89b
0075d889: push edi
0075d88a: mov edi, 0xf2a3f4
0075d88f: call 0x6ff7a0
0075d894: pop edi
0075d895: pop esi
0075d896: pop ebx
0075d897: mov esp, ebp
0075d899: pop ebp
0075d89a: ret 
0075d89b: mov edx, dword ptr [edi]
0075d89d: mov eax, dword ptr [edx + 0x20]
0075d8a0: mov ecx, edi
0075d8a2: call eax
0075d8a4: mov esi, eax
0075d8a6: mov ecx, dword ptr [esi + 0x18]
0075d8a9: mov dword ptr [esp + 0x2c], ecx
0075d8ad: mov ecx, esi
0075d8af: call 0x880420
0075d8b4: test eax, eax
0075d8b6: jne 0x75d8ca
0075d8b8: push edi
0075d8b9: mov edi, 0xf2a3c4
0075d8be: call 0x6ff7a0
0075d8c3: pop edi
0075d8c4: pop esi
0075d8c5: pop ebx
0075d8c6: mov esp, ebp
0075d8c8: pop ebp
0075d8c9: ret 
0075d8ca: call 0x4120b0
0075d8cf: cmp dword ptr [eax + 0x34], 0
0075d8d3: jne 0x75d8d9
0075d8d5: xor eax, eax
0075d8d7: jmp 0x75d8e3
0075d8d9: mov ecx, dword ptr [eax + 0x2c]
0075d8dc: lea edx, [ecx + ecx*2]
0075d8df: mov eax, dword ptr [eax + edx*4 + 0x14]
0075d8e3: movzx eax, byte ptr [eax + 0x75def8]
0075d8ea: jmp dword ptr [eax*4 + 0x75dedc]
0075d8f1: push edi
0075d8f2: mov edi, 0xf2a414
0075d8f7: call 0x6ff7a0
0075d8fc: pop edi
0075d8fd: pop esi
0075d8fe: pop ebx
0075d8ff: mov esp, ebp
0075d901: pop ebp
0075d902: ret 
0075d903: mov ecx, dword ptr [0x1dee8d0]
0075d909: cmp ecx, esi
0075d90b: je 0x75d9d1
0075d911: cmp dword ptr [0x1dee8dc], 1
0075d918: jle 0x75d959
0075d91a: call 0x6b1f50
0075d91f: test eax, eax
0075d921: jne 0x75d959
0075d923: mov eax, dword ptr [ebx + 0x58]
0075d926: cmp eax, 0xf2a4c4
0075d92b: je 0x75ded3
0075d931: cmp eax, 0xf2a4d4
0075d936: je 0x75ded3
0075d93c: cmp eax, 0xf2a4e4
0075d941: je 0x75ded3
0075d947: push edi
0075d948: mov edi, 0xf2a4c4
0075d94d: call 0x6ff7a0
0075d952: pop edi
0075d953: pop esi
0075d954: pop ebx
0075d955: mov esp, ebp
0075d957: pop ebp
0075d958: ret 
0075d959: mov edx, dword ptr [0x1ce716c]
0075d95f: mov eax, dword ptr [edx + 0x1bc]
0075d965: cmp eax, 3
0075d968: je 0x75de90
0075d96e: cmp eax, 4
0075d971: je 0x75de90
0075d977: test ecx, ecx
0075d979: je 0x75d9d1
0075d97b: mov eax, dword ptr [ecx + 8]
0075d97e: movaps xmm0, xmmword ptr [eax + 0x3f0]
0075d985: jmp 0x75de9d
0075d98a: mov eax, dword ptr [0x1ce7434]
0075d98f: test eax, eax
0075d991: je 0x75d9d1
0075d993: cmp eax, esi
0075d995: je 0x75d9d1
0075d997: mov eax, dword ptr [eax + 8]
0075d99a: movaps xmm0, xmmword ptr [eax + 0x3f0]
0075d9a1: jmp 0x75de9d
0075d9a6: mov eax, dword ptr [esp + 0x10]
0075d9aa: test eax, eax
0075d9ac: je 0x75da27
0075d9ae: mov ecx, dword ptr [eax + 8]
0075d9b1: movaps xmm0, xmmword ptr [ecx + 0x3f0]
0075d9b8: jmp 0x75de9d
0075d9bd: mov ecx, edi
0075d9bf: call 0x6bb710
0075d9c4: test eax, eax
0075d9c6: jne 0x75de90
0075d9cc: call 0x881f40
0075d9d1: mov dword ptr [esp + 0x18], 0
0075d9d9: jmp 0x75dea2
0075d9de: mov eax, dword ptr [esp + 0x2c]
0075d9e2: mov ecx, dword ptr [eax + 4]
0075d9e5: movzx eax, byte ptr [ecx + 3]
0075d9e9: cmp eax, 0x4c
0075d9ec: jne 0x75da00
0075d9ee: push edi
0075d9ef: mov edi, 0xf2a474
0075d9f4: call 0x6ff7a0
0075d9f9: pop edi
0075d9fa: pop esi
0075d9fb: pop ebx
0075d9fc: mov esp, ebp
0075d9fe: pop ebp
0075d9ff: ret 
0075da00: cmp eax, 0x32
0075da03: je 0x75de90
0075da09: mov ebx, dword ptr [esp + 0x2c]
0075da0d: mov ecx, ebx
0075da0f: call 0x404b70
0075da14: test eax, eax
0075da16: jne 0x75de90
0075da1c: mov ecx, ebx
0075da1e: call 0x7be480
0075da23: test eax, eax
0075da25: je 0x75da39
0075da27: mov edx, dword ptr [edi + 0x38]
0075da2a: mov eax, dword ptr [edx + 0xc]
0075da2d: movaps xmm0, xmmword ptr [eax + 0x80]
0075da34: jmp 0x75de9d
0075da39: mov ecx, dword ptr [ebx + 4]
0075da3c: movzx eax, byte ptr [ecx + 3]
0075da40: cmp eax, 0x33
0075da43: je 0x75da27
0075da45: cmp eax, 0xe
0075da48: je 0x75da27
0075da4a: cmp eax, 0x39
0075da4d: je 0x75da27
0075da4f: call 0xaacb50
0075da54: test eax, eax
0075da56: jne 0x75da79
0075da58: mov edx, dword ptr [0x1ce716c]
0075da5e: cmp dword ptr [edx + 0x1bc], 4
0075da65: jne 0x75da79
0075da67: mov eax, dword ptr [edi + 0x38]
0075da6a: mov ecx, dword ptr [eax + 0xc]
0075da6d: movaps xmm0, xmmword ptr [ecx + 0x80]
0075da74: jmp 0x75de9d
0075da79: mov edx, 1
0075da7e: mov ecx, esi
0075da80: call 0x7c2840
0075da85: test eax, eax
0075da87: jne 0x75da9a
0075da89: mov edx, dword ptr [ebx + 4]
0075da8c: mov eax, dword ptr [edx]
0075da8e: and eax, 0xff000000
0075da93: cmp eax, 0x31000000
0075da98: jne 0x75daa5
0075da9a: cmp dword ptr [esp + 0x10], 0
0075da9f: je 0x75de90
0075daa5: mov eax, dword ptr [esi + 0x3c]
0075daa8: mov eax, dword ptr [eax + 0x16a8]
0075daae: mov dword ptr [esp + 0x1c], eax
0075dab2: test eax, eax
0075dab4: je 0x75dac4
0075dab6: mov dword ptr [esp + 0x20], 1
0075dabe: cmp eax, dword ptr [esp + 0x10]
0075dac2: je 0x75dacc
0075dac4: mov dword ptr [esp + 0x20], 0
0075dacc: mov ebx, 8
0075dad1: mov dword ptr [esp + 0x2c], ebx
0075dad5: call 0xaacb50
0075dada: test eax, eax
0075dadc: jne 0x75daee
0075dade: mov ecx, dword ptr [0x1ce716c]
0075dae4: mov ebx, dword ptr [ecx + 0x1bc]
0075daea: mov dword ptr [esp + 0x2c], ebx
0075daee: mov dword ptr [esp + 0x14], 0
0075daf6: cmp ebx, 3
0075daf9: je 0x75db27
0075dafb: cmp ebx, 4
0075dafe: je 0x75db27
0075db00: cmp ebx, 7
0075db03: je 0x75db27
0075db05: cmp dword ptr [esp + 0x10], 0
0075db0a: je 0x75db2f
0075db0c: mov ebx, dword ptr [esp + 0x10]
0075db10: mov ecx, ebx
0075db12: call 0x7d1d90
0075db17: test eax, eax
0075db19: je 0x75db2f
0075db1b: mov ecx, dword ptr [ebx + 0x18]
0075db1e: call 0x7bbb20
0075db23: test eax, eax
0075db25: je 0x75db2f
0075db27: mov dword ptr [esp + 0x14], 1
0075db2f: call 0xaacb50
0075db34: xorps xmm0, xmm0
0075db37: test eax, eax
0075db39: je 0x75db6b
0075db3b: mov edx, dword ptr [esi + 0x4c]
0075db3e: mov eax, dword ptr [edx + 0x30]
0075db41: movd xmm2, dword ptr [eax]
0075db45: movss xmm3, dword ptr [0xec6e14]
0075db4d: cvtdq2ps xmm2, xmm2
0075db50: mulss xmm2, dword ptr [0xf2c190]
0075db58: movaps xmm1, xmm0
0075db5b: unpcklps xmm0, xmm3
0075db5e: unpcklps xmm1, xmm2
0075db61: unpcklps xmm1, xmm0
0075db64: movaps xmmword ptr [esp + 0x60], xmm1
0075db69: jmp 0x75db7d
0075db6b: mov ecx, dword ptr [edi + 0x38]
0075db6e: mov edx, dword ptr [ecx + 0xc]
0075db71: movaps xmm0, xmmword ptr [edx + 0x80]
0075db78: movaps xmmword ptr [esp + 0x60], xmm0
0075db7d: cmp dword ptr [esp + 0x14], 0
0075db82: jne 0x75dbd5
0075db84: cmp dword ptr [esp + 0x1c], 0
0075db89: je 0x75dbd5
0075db8b: mov edx, dword ptr [esp + 0x1c]
0075db8f: mov ecx, esi
0075db91: call 0x6a9bd0
0075db96: mov ecx, edi
0075db98: mov ebx, eax
0075db9a: call 0x401bf0
0075db9f: cmp dword ptr [esp + 0x20], 0
0075dba4: jne 0x75dbc2
0075dba6: sub eax, ebx
0075dba8: cwde 
0075dba9: mov ecx, eax
0075dbab: sar ecx, 0x1f
0075dbae: mov edx, ecx
0075dbb0: not edx
0075dbb2: and edx, eax
0075dbb4: neg eax
0075dbb6: and eax, ecx
0075dbb8: or edx, eax
0075dbba: cmp edx, 0x4aab
0075dbc0: jge 0x75dbd5
0075dbc2: mov eax, dword ptr [esp + 0x1c]
0075dbc6: mov ecx, dword ptr [eax + 8]
0075dbc9: movaps xmm0, xmmword ptr [ecx + 0x3f0]
0075dbd0: movaps xmmword ptr [esp + 0x60], xmm0
0075dbd5: mov eax, dword ptr [esp + 0x10]
0075dbd9: test eax, eax
0075dbdb: je 0x75dbe9
0075dbdd: mov edx, dword ptr [eax + 8]
0075dbe0: movaps xmm0, xmmword ptr [edx + 0x3f0]
0075dbe7: jmp 0x75dc08
0075dbe9: call 0xaacb50
0075dbee: test eax, eax
0075dbf0: je 0x75dbfb
0075dbf2: movaps xmm0, xmmword ptr [0xf2b9a0]
0075dbf9: jmp 0x75dc08
0075dbfb: mov eax, dword ptr [edi + 0x38]
0075dbfe: mov ecx, dword ptr [eax + 0xc]
0075dc01: movaps xmm0, xmmword ptr [ecx + 0x80]
0075dc08: mov edx, dword ptr [esp + 0x1c]
0075dc0c: movaps xmmword ptr [esp + 0x40], xmm0
0075dc11: test edx, edx
0075dc13: je 0x75dc6e
0075dc15: cmp dword ptr [esp + 0x20], 0
0075dc1a: je 0x75dc6e
0075dc1c: mov eax, dword ptr [edx + 0x18]
0075dc1f: test byte ptr [eax + 0x2c], 1
0075dc23: jne 0x75dc6e
0075dc25: cmp dword ptr [esp + 0x2c], 1
0075dc2a: mov ebx, dword ptr [esp + 0x24]
0075dc2e: jne 0x75dc72
0075dc30: movss xmm0, dword ptr [0x146b618]
0075dc38: comiss xmm0, dword ptr [ebx + 0x68]
0075dc3c: jb 0x75dc72
0075dc3e: cmp dword ptr [ebx + 0x90], 0
0075dc45: je 0x75dc72
0075dc47: mov ecx, edi
0075dc49: call 0x6b4750
0075dc4e: test eax, eax
0075dc50: je 0x75dc72
0075dc52: push edx
0075dc53: call 0x75d780
0075dc58: test eax, eax
0075dc5a: je 0x75dc72
0075dc5c: push edi
0075dc5d: mov edi, 0xf2a4b4
0075dc62: call 0x6ff7a0
0075dc67: pop edi
0075dc68: pop esi
0075dc69: pop ebx
0075dc6a: mov esp, ebp
0075dc6c: pop ebp
0075dc6d: ret 
0075dc6e: mov ebx, dword ptr [esp + 0x24]
0075dc72: cmp dword ptr [ebx + 0x78], 0
0075dc76: jne 0x75dc7f
0075dc78: mov dword ptr [ebx + 0x78], 1
0075dc7f: mov eax, dword ptr [ebx + 0x78]
0075dc82: movss xmm1, dword ptr [0xec6fd0]
0075dc8a: movss xmm2, dword ptr [0xec6fc0]
0075dc92: xorps xmm0, xmm0
0075dc95: cvtsi2ss xmm0, eax
0075dc99: mulss xmm0, dword ptr [0x146b624]
0075dca1: mulss xmm0, dword ptr [0x11ab1a8]
0075dca9: addss xmm0, dword ptr [ebx + 0x5c]
0075dcae: comiss xmm1, xmm0
0075dcb1: movss dword ptr [ebx + 0x5c], xmm0
0075dcb6: jae 0x75dcc0
0075dcb8: comiss xmm0, xmm2
0075dcbb: jb 0x75dcd9
0075dcbd: comiss xmm1, xmm0
0075dcc0: jbe 0x75dcc7
0075dcc2: movaps xmm0, xmm1
0075dcc5: jmp 0x75dccf
0075dcc7: comiss xmm2, xmm0
0075dcca: ja 0x75dccf
0075dccc: movaps xmm0, xmm2
0075dccf: neg eax
0075dcd1: movss dword ptr [ebx + 0x5c], xmm0
0075dcd6: mov dword ptr [ebx + 0x78], eax
0075dcd9: cmp dword ptr [esp + 0x14], 0
0075dcde: je 0x75dce8
0075dce0: xorps xmm0, xmm0
0075dce3: movss dword ptr [ebx + 0x5c], xmm0
0075dce8: mov ecx, dword ptr [esp + 0x24]
0075dcec: .byte 0xf3
0075dced: .byte 0x0f

3over4 data0xec6fc0 operand0x760791 candidate-start0x760630
00760630: push ebp
00760631: mov ebp, esp
00760633: and esp, 0xfffffff0
00760636: sub esp, 0x14
00760639: push ebx
0076063a: mov ebx, dword ptr [ebp + 0x10]
0076063d: movss xmm3, dword ptr [ebx + 0x138]
00760645: movss xmm0, dword ptr [ebx + 0x130]
0076064d: movss xmm2, dword ptr [ebx + 0x128]
00760655: subss xmm0, dword ptr [ebx + 0x120]
0076065d: movaps xmm1, xmm3
00760660: subss xmm1, xmm2
00760664: mulss xmm1, xmm1
00760668: mulss xmm0, xmm0
0076066c: push esi
0076066d: addss xmm1, xmm0
00760671: comiss xmm1, dword ptr [0xf2bfb8]
00760678: push edi
00760679: jbe 0x7606f2
0076067b: movdqa xmm1, xmmword ptr [0xf2b990]
00760683: movss xmm4, dword ptr [0xf25ee0]
0076068b: movss xmm0, xmm2
0076068f: shufps xmm0, xmm0, 0
00760693: andps xmm0, xmm1
00760696: movaps xmmword ptr [esp + 0x10], xmm0
0076069b: comiss xmm4, dword ptr [esp + 0x10]
007606a0: ja 0x7606dd
007606a2: movss xmm0, xmm3
007606a6: shufps xmm0, xmm0, 0
007606aa: andps xmm0, xmm1
007606ad: movaps xmmword ptr [esp + 0x10], xmm0
007606b2: comiss xmm4, dword ptr [esp + 0x10]
007606b7: ja 0x7606dd
007606b9: xorps xmm0, xmm0
007606bc: mulss xmm2, xmm3
007606c0: comiss xmm0, xmm2
007606c3: jbe 0x7606dd
007606c5: mov eax, 1
007606ca: xor ecx, ecx
007606cc: test eax, eax
007606ce: setne cl
007606d1: lea eax, [ecx + 0xc]
007606d4: pop edi
007606d5: pop esi
007606d6: pop ebx
007606d7: mov esp, ebp
007606d9: pop ebp
007606da: ret 0x14
007606dd: xor eax, eax
007606df: xor ecx, ecx
007606e1: test eax, eax
007606e3: setne cl
007606e6: lea eax, [ecx + 0xc]
007606e9: pop edi
007606ea: pop esi
007606eb: pop ebx
007606ec: mov esp, ebp
007606ee: pop ebp
007606ef: ret 0x14
007606f2: mov eax, dword ptr [ebx + 0x1e0]
007606f8: mov dword ptr [esp + 0xc], eax
007606fc: test al, 0x10
007606fe: je 0x76071c
00760700: mov edx, dword ptr [ebp + 8]
00760703: mov eax, dword ptr [edx + 0x4c]
00760706: mov ecx, dword ptr [ebp + 0xc]
00760709: cmp eax, dword ptr [ecx + 0x4c]
0076070c: jne 0x76071c
0076070e: mov eax, 1
00760713: pop edi
00760714: pop esi
00760715: pop ebx
00760716: mov esp, ebp
00760718: pop ebp
00760719: ret 0x14
0076071c: mov ecx, dword ptr [0x11af9e0]
00760722: or ecx, dword ptr [0x11afa40]
00760728: mov edi, dword ptr [ebp + 0x18]
0076072b: mov edx, dword ptr [0x11afa3c]
00760731: or edx, dword ptr [0x11af9dc]
00760737: mov esi, dword ptr [ebp + 0x14]
0076073a: mov eax, edi
0076073c: and eax, ecx
0076073e: mov ecx, esi
00760740: and ecx, edx
00760742: mov edx, dword ptr [0x1d956e4]
00760748: cmp ecx, edx
0076074a: jne 0x760756
0076074c: mov ecx, dword ptr [0x1d956e8]
00760752: cmp eax, ecx
00760754: je 0x760764
00760756: mov eax, 3
0076075b: pop edi
0076075c: pop esi
0076075d: pop ebx
0076075e: mov esp, ebp
00760760: pop ebp
00760761: ret 0x14
00760764: mov eax, dword ptr [esp + 0xc]
00760768: test al, 0xc0
0076076a: je 0x760780
0076076c: shr eax, 8
0076076f: not eax
00760771: and eax, 1
00760774: or eax, 4
00760777: pop edi
00760778: pop esi
00760779: pop ebx
0076077a: mov esp, ebp
0076077c: pop ebp
0076077d: ret 0x14
00760780: test eax, 0x80000
00760785: je 0x7607ad
00760787: mov eax, dword ptr [ebx + 0xf4]
0076078d: movss xmm0, dword ptr [0xec6fc0]
00760795: lea eax, [eax + eax*4]
00760798: comiss xmm0, dword ptr [ebx + eax*8 + 0x14]
0076079d: jbe 0x7607ad
0076079f: mov eax, 6
007607a4: pop edi
007607a5: pop esi
007607a6: pop ebx
007607a7: mov esp, ebp
007607a9: pop ebp
007607aa: ret 0x14
007607ad: and esi, dword ptr [0x11af9fc]
007607b3: and edi, dword ptr [0x11afa00]
007607b9: cmp esi, edx
007607bb: jne 0x7607c1
007607bd: cmp edi, ecx
007607bf: je 0x7607cf
007607c1: mov eax, 7
007607c6: pop edi
007607c7: pop esi
007607c8: pop ebx
007607c9: mov esp, ebp
007607cb: pop ebp
007607cc: ret 0x14
007607cf: mov ecx, dword ptr [ebp + 8]
007607d2: mov edi, dword ptr [ebp + 0xc]
007607d5: push ecx
007607d6: push edi
007607d7: mov eax, ebx
007607d9: call 0x760520
007607de: test eax, eax
007607e0: je 0x7607f0
007607e2: mov eax, 9
007607e7: pop edi
007607e8: pop esi
007607e9: pop ebx
007607ea: mov esp, ebp
007607ec: pop ebp
007607ed: ret 0x14
007607f0: .byte 0x8b

3over4 data0xec6fc0 operand0x762301 candidate-start0x7622d1
007622d1: mov ebp, esp
007622d3: and esp, 0xfffffff0
007622d6: sub esp, 0x2c
007622d9: test dword ptr [eax + 0x1e0], 0x800000
007622e3: push esi
007622e4: mov esi, ecx
007622e6: jne 0x7623e1
007622ec: mov ecx, dword ptr [esi + 0xb00]
007622f2: mov ecx, dword ptr [ecx + 0x30]
007622f5: mov edx, 0x10
007622fa: call 0x6d5f00
007622ff: fld dword ptr [0xec6fc0]
00762305: fcompi st(1)
00762307: fstp st(0)
00762309: ja 0x7623e1
0076230f: mov edx, edi
00762311: mov ecx, esi
00762313: call 0x6a9be0
00762318: fld dword ptr [0xf2c0ec]
0076231e: fcompi st(1)
00762320: fstp st(0)
00762322: ja 0x7623e1
00762328: call 0x880380
0076232d: xorps xmm2, xmm2
00762330: movss xmm1, dword ptr [0xec6e14]
00762338: xorps xmm0, xmm0
0076233b: cvtsi2ss xmm0, eax
0076233f: mulss xmm0, dword ptr [0xf2c190]
00762347: lea edx, [esp + 0x10]
0076234b: mov ecx, esi
0076234d: unpcklps xmm2, xmm0
00762350: xorps xmm0, xmm0
00762353: unpcklps xmm0, xmm1
00762356: unpcklps xmm2, xmm0
00762359: movaps xmmword ptr [esp + 0x10], xmm2
0076235e: .byte 0xe8
0076235f: int 0x10

3over4 data0xec6fc0 operand0x76b76a candidate-start0x76b230
0076b230: push ebp
0076b231: mov ebp, esp
0076b233: and esp, 0xfffffff0
0076b236: sub esp, 0x24
0076b239: push ebx
0076b23a: push esi
0076b23b: push edi
0076b23c: mov edi, ecx
0076b23e: mov esi, edx
0076b240: test edi, edi
0076b242: je 0x76b251
0076b244: mov eax, dword ptr [edi]
0076b246: mov edx, dword ptr [eax + 0x20]
0076b249: call edx
0076b24b: mov dword ptr [esp + 0x14], eax
0076b24f: jmp 0x76b259
0076b251: mov dword ptr [esp + 0x14], 0
0076b259: mov ecx, dword ptr [edi + 4]
0076b25c: xor eax, eax
0076b25e: mov edi, edi
0076b260: test ecx, ecx
0076b262: je 0x76b281
0076b264: mov eax, dword ptr [ecx + 0x14]
0076b267: dec eax
0076b268: neg eax
0076b26a: sbb eax, eax
0076b26c: not eax
0076b26e: and eax, ecx
0076b270: mov ecx, dword ptr [ecx + 4]
0076b273: je 0x76b260
0076b275: mov eax, 1
0076b27a: pop edi
0076b27b: pop esi
0076b27c: pop ebx
0076b27d: mov esp, ebp
0076b27f: pop ebp
0076b280: ret 
0076b281: test eax, eax
0076b283: jne 0x76b275
0076b285: mov eax, dword ptr [esp + 0x14]
0076b289: push eax
0076b28a: call 0x6e6400
0076b28f: test eax, eax
0076b291: je 0x76b275
0076b293: mov eax, dword ptr [0x1ce716c]
0076b298: test eax, eax
0076b29a: je 0x76b275
0076b29c: mov ecx, dword ptr [eax]
0076b29e: test ecx, ecx
0076b2a0: je 0x76b275
0076b2a2: cmp dword ptr [ecx + 0x74], 1
0076b2a6: jne 0x76b275
0076b2a8: mov edx, dword ptr [ecx]
0076b2aa: mov eax, dword ptr [edx + 0x20]
0076b2ad: call eax
0076b2af: mov ebx, eax
0076b2b1: mov dword ptr [esp + 0x18], ebx
0076b2b5: test ebx, ebx
0076b2b7: je 0x76b275
0076b2b9: cmp dword ptr [esi + 0x14], 0
0076b2bd: jne 0x76b2d3
0076b2bf: cmp dword ptr [0x1dee604], 0
0076b2c6: jne 0x76b2d3
0076b2c8: mov eax, 1
0076b2cd: mov dword ptr [esi + 0x14], eax
0076b2d0: mov dword ptr [esi + 0x10], eax
0076b2d3: cmp dword ptr [esi + 0x10], 0
0076b2d7: je 0x76b3f5
0076b2dd: mov ecx, dword ptr [esi + 0x14]
0076b2e0: mov edx, dword ptr [esp + 0x14]
0076b2e4: push ecx
0076b2e5: push edx
0076b2e6: push ebx
0076b2e7: push esi
0076b2e8: call 0x71d3d0
0076b2ed: mov ecx, dword ptr [esp + 0x14]
0076b2f1: test eax, eax
0076b2f3: je 0x76b328
0076b2f5: mov edx, esi
0076b2f7: mov dword ptr [esi + 0x10], 0
0076b2fe: call 0x6cb9f0
0076b303: fld dword ptr [0xf2d0c4]
0076b309: fxch st(1)
0076b30b: fcompi st(1)
0076b30d: fstp st(0)
0076b30f: jbe 0x76b31e
0076b311: mov eax, 1
0076b316: mov dword ptr [esi + 0x18], eax
0076b319: jmp 0x76b3f5
0076b31e: xor eax, eax
0076b320: mov dword ptr [esi + 0x18], eax
0076b323: jmp 0x76b3f5
0076b328: mov eax, dword ptr [ebx + 0x20]
0076b32b: movaps xmm3, xmmword ptr [eax + 0x30]
0076b32f: mov edx, dword ptr [ecx + 0x20]
0076b332: movaps xmm0, xmmword ptr [edx + 0x30]
0076b336: xorps xmm2, xmm2
0076b339: subps xmm0, xmm3
0076b33c: movaps xmmword ptr [esp + 0x20], xmm0
0076b341: movss dword ptr [esp + 0x24], xmm2
0076b347: movss dword ptr [esp + 0x2c], xmm2
0076b34d: movaps xmm4, xmmword ptr [esp + 0x20]
0076b352: movaps xmm1, xmm4
0076b355: mulps xmm1, xmm4
0076b358: movaps xmm0, xmm1
0076b35b: movhlps xmm0, xmm1
0076b35e: addps xmm0, xmm1
0076b361: movaps xmm1, xmm0
0076b364: shufps xmm1, xmm0, 1
0076b368: addps xmm1, xmm0
0076b36b: movaps xmmword ptr [esp + 0x20], xmm1
0076b370: movss xmm0, dword ptr [esp + 0x20]
0076b376: ucomiss xmm0, xmm2
0076b379: lahf 
0076b37a: test ah, 0x44
0076b37d: jp 0x76b381
0076b37f: jmp 0x76b3b2
0076b381: movss xmm0, dword ptr [esp + 0x20]
0076b387: sqrtss xmm0, xmm0
0076b38b: movaps xmmword ptr [esp + 0x20], xmm0
0076b390: movss xmm0, dword ptr [esp + 0x20]
0076b396: ucomiss xmm0, xmm2
0076b399: lahf 
0076b39a: test ah, 0x44
0076b39d: jnp 0x76b3af
0076b39f: movss xmm0, dword ptr [0xec6e14]
0076b3a7: divss xmm0, dword ptr [esp + 0x20]
0076b3ad: jmp 0x76b3b2
0076b3af: movaps xmm0, xmm2
0076b3b2: mulss xmm0, dword ptr [0xeea830]
0076b3ba: movaps xmmword ptr [esp + 0x20], xmm3
0076b3bf: movss dword ptr [esp + 0x24], xmm2
0076b3c5: push ecx
0076b3c6: lea ecx, [esp + 0x24]
0076b3ca: shufps xmm0, xmm0, 0
0076b3ce: mulps xmm0, xmm4
0076b3d1: addps xmm0, xmmword ptr [esp + 0x24]
0076b3d6: movaps xmmword ptr [esp + 0x24], xmm0
0076b3db: movss xmm0, dword ptr [0xf2c06c]
0076b3e3: movss dword ptr [esp], xmm0
0076b3e8: call 0x872c60
0076b3ed: movaps xmm0, xmmword ptr [esp + 0x20]
0076b3f2: movaps xmmword ptr [esi], xmm0
0076b3f5: mov eax, dword ptr [edi + 0x18]
0076b3f8: movss xmm0, dword ptr [0xec6fc4]
0076b400: push ecx
0076b401: mov dword ptr [eax + 0x178], 1
0076b40b: mov dword ptr [eax + 0x17c], 0
0076b415: mov ecx, dword ptr [edi + 0x18]
0076b418: movss dword ptr [esp], xmm0
0076b41d: call 0x7bbe50
0076b422: xorps xmm0, xmm0
0076b425: mov eax, dword ptr [esi + 0x18]
0076b428: push 1
0076b42a: push ecx
0076b42b: movss dword ptr [esp], xmm0
0076b430: movss xmm0, dword ptr [0xec6e14]
0076b438: push eax
0076b439: push ecx
0076b43a: mov edx, esi
0076b43c: mov ecx, edi
0076b43e: movss dword ptr [esp], xmm0
0076b443: call 0x7673e0
0076b448: mov ebx, eax
0076b44a: mov eax, dword ptr [edi + 0x4c]
0076b44d: test eax, eax
0076b44f: jne 0x76b456
0076b451: lea ecx, [eax + 1]
0076b454: jmp 0x76b45b
0076b456: mov ecx, dword ptr [eax + 0x30]
0076b459: mov ecx, dword ptr [ecx]
0076b45b: xorps xmm0, xmm0
0076b45e: cvtsi2ss xmm0, ecx
0076b462: mulss xmm0, dword ptr [esi + 8]
0076b467: movss dword ptr [esp + 0x1c], xmm0
0076b46d: test eax, eax
0076b46f: jne 0x76b47b
0076b471: mov dword ptr [esp + 0x14], 1
0076b479: jmp 0x76b484
0076b47b: mov edx, dword ptr [eax + 0x30]
0076b47e: mov eax, dword ptr [edx]
0076b480: mov dword ptr [esp + 0x14], eax
0076b484: mov ecx, dword ptr [esp + 0x18]
0076b488: call 0x401be0
0076b48d: fimul dword ptr [esp + 0x14]
0076b491: fstp dword ptr [esp + 0x18]
0076b495: test bl, 1
0076b498: jne 0x76b4a7
0076b49a: movss xmm0, dword ptr [esp + 0x18]
0076b4a0: comiss xmm0, dword ptr [esp + 0x1c]
0076b4a5: jbe 0x76b4b5
0076b4a7: mov dword ptr [esi + 0x10], 1
0076b4ae: mov dword ptr [esi + 0x18], 0
0076b4b5: pop edi
0076b4b6: pop esi
0076b4b7: xor eax, eax
0076b4b9: pop ebx
0076b4ba: mov esp, ebp
0076b4bc: pop ebp
0076b4bd: ret 
0076b4be: inc edx
0076b4bf: int3 
0076b4c0: push ebp
0076b4c1: mov ebp, esp
0076b4c3: and esp, 0xfffffff0
0076b4c6: sub esp, 0x34
0076b4c9: push ebx
0076b4ca: mov eax, ecx
0076b4cc: mov ecx, dword ptr [0x1ce716c]
0076b4d2: xor ebx, ebx
0076b4d4: push esi
0076b4d5: push edi
0076b4d6: cmp ecx, ebx
0076b4d8: je 0x76b4e8
0076b4da: cmp dword ptr [ecx], ebx
0076b4dc: je 0x76b4e8
0076b4de: lea eax, [ebx + 1]
0076b4e1: pop edi
0076b4e2: pop esi
0076b4e3: pop ebx
0076b4e4: mov esp, ebp
0076b4e6: pop ebp
0076b4e7: ret 
0076b4e8: cmp eax, ebx
0076b4ea: je 0x76b4ff
0076b4ec: mov edx, dword ptr [eax]
0076b4ee: mov ecx, eax
0076b4f0: mov eax, dword ptr [edx + 0x20]
0076b4f3: call eax
0076b4f5: mov ecx, dword ptr [0x1ce716c]
0076b4fb: mov edi, eax
0076b4fd: jmp 0x76b501
0076b4ff: xor edi, edi
0076b501: mov eax, dword ptr [edi + 0x20]
0076b504: movaps xmm0, xmmword ptr [eax + 0x30]
0076b508: mov esi, dword ptr [edi + 0x14]
0076b50b: mov edx, dword ptr [edi + 0xb0c]
0076b511: movaps xmmword ptr [esp + 0x30], xmm0
0076b516: jmp dword ptr [edx*4 + 0x76b678]
0076b51d: movaps xmmword ptr [esp + 0x20], xmm0
0076b522: call 0x880380
0076b527: xorps xmm0, xmm0
0076b52a: cvtsi2ss xmm0, eax
0076b52e: mulss xmm0, dword ptr [0xf2c0ec]
0076b536: push 1
0076b538: sub esp, 8
0076b53b: movss dword ptr [esp + 0x34], xmm0
0076b541: xorps xmm0, xmm0
0076b544: movss dword ptr [esp + 4], xmm0
0076b54a: movss dword ptr [esp + 0x40], xmm0
0076b550: movss xmm0, dword ptr [0xec6fd4]
0076b558: movss dword ptr [esp], xmm0
0076b55d: lea eax, [esp + 0x2c]
0076b561: push eax
0076b562: lea ecx, [esp + 0x40]
0076b566: push ecx
0076b567: mov dword ptr [esp + 0x44], ebx
0076b56b: mov dword ptr [esp + 0x4c], ebx
0076b56f: mov dword ptr [esp + 0x50], ebx
0076b573: call 0x767180
0076b578: xor eax, eax
0076b57a: pop edi
0076b57b: pop esi
0076b57c: pop ebx
0076b57d: mov esp, ebp
0076b57f: pop ebp
0076b580: ret 
0076b581: movss xmm0, dword ptr [0xec6fd4]
0076b589: push ebx
0076b58a: push ecx
0076b58b: lea edx, [esp + 0x28]
0076b58f: movss dword ptr [esp], xmm0
0076b594: call 0x8c4260
0076b599: movaps xmm0, xmmword ptr [esp + 0x20]
0076b59e: subps xmm0, xmmword ptr [esp + 0x30]
0076b5a3: movaps xmmword ptr [esp + 0x30], xmm0
0076b5a8: movss xmm0, dword ptr [esp + 0x38]
0076b5ae: sub esp, 8
0076b5b1: movss dword ptr [esp + 4], xmm0
0076b5b7: movss xmm0, dword ptr [esp + 0x38]
0076b5bd: movss dword ptr [esp], xmm0
0076b5c2: call 0xd91670
0076b5c7: fnstcw word ptr [esp + 0x1a]
0076b5cb: movzx eax, word ptr [esp + 0x1a]
0076b5d0: movss xmm0, dword ptr [0xec6e14]
0076b5d8: or dword ptr [esi + 0x1c], 0x10
0076b5dc: or eax, 0xc00
0076b5e1: mov dword ptr [esp + 0x1c], eax
0076b5e5: movss dword ptr [esi + 0x14], xmm0
0076b5ea: fldcw word ptr [esp + 0x1c]
0076b5ee: fistp dword ptr [esp + 0x1c]
0076b5f2: mov dx, word ptr [esp + 0x1c]
0076b5f7: movzx eax, dx
0076b5fa: mov dword ptr [esi + 0x18], eax
0076b5fd: fldcw word ptr [esp + 0x1a]
0076b601: xor eax, eax
0076b603: pop edi
0076b604: pop esi
0076b605: pop ebx
0076b606: mov esp, ebp
0076b608: pop ebp
0076b609: ret 
0076b60a: movss xmm0, dword ptr [0xec6fd4]
0076b612: push ebx
0076b613: push ecx
0076b614: lea edx, [esp + 0x28]
0076b618: movss dword ptr [esp], xmm0
0076b61d: call 0x8c4260
0076b622: xorps xmm0, xmm0
0076b625: push 1
0076b627: sub esp, 8
0076b62a: movss dword ptr [esp + 4], xmm0
0076b630: movss dword ptr [esp + 0x40], xmm0
0076b636: movss xmm0, dword ptr [0xec6fd4]
0076b63e: movss dword ptr [esp], xmm0
0076b643: lea ecx, [esp + 0x2c]
0076b647: push ecx
0076b648: lea edx, [esp + 0x40]
0076b64c: push edx
0076b64d: mov dword ptr [esp + 0x44], ebx
0076b651: mov dword ptr [esp + 0x4c], ebx
0076b655: mov dword ptr [esp + 0x50], ebx
0076b659: call 0x767180
0076b65e: xor eax, eax
0076b660: pop edi
0076b661: pop esi
0076b662: pop ebx
0076b663: mov esp, ebp
0076b665: pop ebp
0076b666: ret 
0076b667: xorps xmm0, xmm0
0076b66a: pop edi
0076b66b: movss dword ptr [esi + 0x14], xmm0
0076b670: pop esi
0076b671: xor eax, eax
0076b673: pop ebx
0076b674: mov esp, ebp
0076b676: pop ebp
0076b677: ret 
0076b678: mov dh, 0x76
0076b67b: add byte ptr [edx], cl
0076b67d: mov dh, 0x76
0076b67f: add byte ptr [0x1d0076b5], bl
0076b685: mov ch, 0x76
0076b687: add byte ptr [ecx + 0x670076b5], al
0076b68d: mov dh, 0x76
0076b68f: add byte ptr [ebp - 0x75], dl
0076b692: in al, dx
0076b693: and esp, 0xfffffff0
0076b696: sub esp, 0x14
0076b699: push ebx
0076b69a: push esi
0076b69b: mov esi, dword ptr [ebp + 0xc]
0076b69e: mov eax, dword ptr [esi + 0x20]
0076b6a1: movss xmm0, dword ptr [eax + 0x38]
0076b6a6: push edi
0076b6a7: movss dword ptr [esp + 0xc], xmm0
0076b6ad: call 0x880380
0076b6b2: xorps xmm0, xmm0
0076b6b5: cvtsi2ss xmm0, eax
0076b6b9: mulss xmm0, dword ptr [esp + 0xc]
0076b6bf: comiss xmm0, dword ptr [0xf2d930]
0076b6c6: ja 0x76b6ff
0076b6c8: call 0x4120b0
0076b6cd: cmp dword ptr [eax + 0x34], 0
0076b6d1: je 0x76b6ff
0076b6d3: mov ecx, dword ptr [eax + 0x2c]
0076b6d6: lea ecx, [ecx + ecx*2]
0076b6d9: cmp dword ptr [eax + ecx*4 + 0x14], 0xa
0076b6de: jne 0x76b6ff
0076b6e0: mov eax, dword ptr [esi + 0x4c]
0076b6e3: mov ecx, dword ptr [eax + 0x38]
0076b6e6: mov eax, dword ptr [ecx + 0x58]
0076b6e9: test eax, eax
0076b6eb: je 0x76b6f1
0076b6ed: mov eax, dword ptr [eax]
0076b6ef: jmp 0x76b6f3
0076b6f1: xor eax, eax
0076b6f3: jmp dword ptr [eax*4 + 0x76b93c]
0076b6fa: cmp esi, dword ptr [ecx + 0x60]
0076b6fd: je 0x76b724
0076b6ff: fld dword ptr [0xec6ff0]
0076b705: pop edi
0076b706: pop esi
0076b707: pop ebx
0076b708: mov esp, ebp
0076b70a: pop ebp
0076b70b: ret 8
0076b70e: cmp esi, dword ptr [ecx + 0x60]
0076b711: jne 0x76b6ff
0076b713: call 0x6bfbb0
0076b718: fld dword ptr [0xec6e10]
0076b71e: fcompi st(1)
0076b720: fstp st(0)
0076b722: jbe 0x76b6ff
0076b724: call 0x6bfbb0
0076b729: fld dword ptr [0xec7048]
0076b72f: fcompi st(1)
0076b731: fstp st(0)
0076b733: ja 0x76b6ff
0076b735: mov eax, dword ptr [esi + 0xb0c]
0076b73b: lea edi, [eax*8]
0076b742: sub edi, eax
0076b744: lea edi, [edi*4 + 0x1dee6b4]
0076b74b: call 0x4120c0
0076b750: mov edx, 5
0076b755: mov ecx, eax
0076b757: call 0x411f40
0076b75c: test eax, eax
0076b75e: je 0x76b774
0076b760: test byte ptr [edi + 0x18], 6
0076b764: jne 0x76b774
0076b766: movss xmm0, dword ptr [0xec6fc0]
0076b76e: comiss xmm0, dword ptr [edi + 0x10]
0076b772: ja 0x76b6ff
0076b774: mov edi, dword ptr [esi + 0x18]
0076b777: mov edx, dword ptr [edi + 0xf0]
0076b77d: and edx, 0x80
0076b783: mov dword ptr [esp + 0x10], edx
0076b787: mov eax, 0
0076b78c: je 0x76b796
0076b78e: test eax, eax
0076b790: je 0x76b6ff
0076b796: mov ecx, esi
0076b798: call 0x872a30
0076b79d: fst dword ptr [esp + 0xc]
0076b7a1: fld dword ptr [0xf2d89c]
0076b7a7: fxch st(1)
0076b7a9: fcompi st(1)
0076b7ab: fstp st(0)
0076b7ad: ja 0x76b6ff
0076b7b3: movss xmm0, dword ptr [0xf2d92c]
0076b7bb: comiss xmm0, dword ptr [esp + 0xc]
0076b7c0: ja 0x76b6ff
0076b7c6: mov eax, dword ptr [esi + 0x20]
0076b7c9: .byte 0xf3

3over4 data0xec6fc0 operand0x76f734 candidate-start0x76f500
0076f500: push ebp
0076f501: mov ebp, esp
0076f503: and esp, 0xfffffff0
0076f506: sub esp, 0x34
0076f509: push ebx
0076f50a: push esi
0076f50b: mov esi, ecx
0076f50d: mov eax, dword ptr [esi + 0x14]
0076f510: mov dword ptr [esp + 0x18], eax
0076f514: mov eax, dword ptr [edx + 0xa4]
0076f51a: push edi
0076f51b: mov dword ptr [esp + 0x18], edx
0076f51f: test eax, eax
0076f521: jne 0x76f52f
0076f523: mov eax, 1
0076f528: pop edi
0076f529: pop esi
0076f52a: pop ebx
0076f52b: mov esp, ebp
0076f52d: pop ebp
0076f52e: ret 
0076f52f: mov ebx, eax
0076f531: sub ebx, esi
0076f533: neg ebx
0076f535: sbb ebx, ebx
0076f537: push esi
0076f538: mov edi, 0xf2a4f4
0076f53d: and ebx, eax
0076f53f: call 0x6ff7a0
0076f544: mov eax, dword ptr [esi + 0x54]
0076f547: cmp esi, ebx
0076f549: jne 0x76f54d
0076f54b: xor ebx, ebx
0076f54d: test eax, eax
0076f54f: je 0x76f554
0076f551: mov dword ptr [eax + 0x50], ebx
0076f554: mov eax, dword ptr [esi + 0x18]
0076f557: mov ebx, dword ptr [esp + 0x18]
0076f55b: xorps xmm1, xmm1
0076f55e: mov dword ptr [eax + 0x178], 3
0076f568: mov dword ptr [eax + 0x17c], 0
0076f572: movss xmm0, dword ptr [ebx + 0x70]
0076f577: subss xmm0, dword ptr [0x146b624]
0076f57f: comiss xmm1, xmm0
0076f582: jbe 0x76f587
0076f584: movaps xmm0, xmm1
0076f587: comiss xmm0, xmm1
0076f58a: movss dword ptr [ebx + 0x70], xmm0
0076f58f: ja 0x76f7b9
0076f595: mov ecx, dword ptr [esp + 0x1c]
0076f599: mov eax, dword ptr [esi + 0x40]
0076f59c: movss dword ptr [ecx + 0x14], xmm1
0076f5a1: mov edx, 0xfffb
0076f5a6: and word ptr [eax + 0x126], dx
0076f5ad: mov ecx, esi
0076f5af: call 0x7b3610
0076f5b4: test eax, eax
0076f5b6: jne 0x76f5ed
0076f5b8: mov ecx, esi
0076f5ba: call 0x7b35b0
0076f5bf: test eax, eax
0076f5c1: jne 0x76f5ed
0076f5c3: mov eax, dword ptr [esi + 0x18]
0076f5c6: and dword ptr [eax + 0x2c], 0xfffffffe
0076f5ca: mov esi, dword ptr [esi + 0x14]
0076f5cd: mov eax, dword ptr [esi + 0x10]
0076f5d0: mov edx, 0xa8
0076f5d5: mov dword ptr [esi + 0x20], edx
0076f5d8: test eax, eax
0076f5da: je 0x76f7b9
0076f5e0: mov ecx, esi
0076f5e2: call eax
0076f5e4: xor eax, eax
0076f5e6: pop edi
0076f5e7: pop esi
0076f5e8: pop ebx
0076f5e9: mov esp, ebp
0076f5eb: pop ebp
0076f5ec: ret 
0076f5ed: mov edi, dword ptr [ebx + 0xa4]
0076f5f3: mov edx, dword ptr [0x11a2578]
0076f5f9: mov ecx, dword ptr [edi + 0x3c]
0076f5fc: call 0x6bb540
0076f601: mov ecx, eax
0076f603: test ecx, ecx
0076f605: je 0x76f523
0076f60b: mov eax, dword ptr [edi + 0x20]
0076f60e: movaps xmm4, xmmword ptr [eax + 0x30]
0076f612: movaps xmm5, xmmword ptr [ecx + 0x10]
0076f616: movaps xmm2, xmm4
0076f619: subps xmm2, xmm5
0076f61c: movaps xmm1, xmm2
0076f61f: mulps xmm1, xmm2
0076f622: movaps xmm0, xmm1
0076f625: movhlps xmm0, xmm1
0076f628: addps xmm0, xmm1
0076f62b: movaps xmm1, xmm0
0076f62e: shufps xmm1, xmm0, 1
0076f632: addps xmm1, xmm0
0076f635: xorps xmm0, xmm0
0076f638: movaps xmmword ptr [esp + 0x20], xmm1
0076f63d: movss xmm1, dword ptr [esp + 0x20]
0076f643: ucomiss xmm1, xmm0
0076f646: lahf 
0076f647: test ah, 0x44
0076f64a: jp 0x76f651
0076f64c: movaps xmm0, xmm1
0076f64f: jmp 0x76f682
0076f651: movss xmm3, dword ptr [esp + 0x20]
0076f657: xorps xmm1, xmm1
0076f65a: movss xmm1, xmm3
0076f65e: sqrtss xmm1, xmm1
0076f662: movaps xmmword ptr [esp + 0x20], xmm1
0076f667: movss xmm1, dword ptr [esp + 0x20]
0076f66d: ucomiss xmm1, xmm0
0076f670: lahf 
0076f671: test ah, 0x44
0076f674: jnp 0x76f682
0076f676: movss xmm0, dword ptr [0xec6e14]
0076f67e: divss xmm0, xmm1
0076f682: movss xmm3, dword ptr [0xeea830]
0076f68a: movss xmm1, dword ptr [ecx + 0x18]
0076f68f: mulss xmm0, xmm3
0076f693: movaps xmmword ptr [esp + 0x30], xmm4
0076f698: subss xmm1, dword ptr [esp + 0x38]
0076f69e: mulss xmm1, xmm1
0076f6a2: shufps xmm0, xmm0, 0
0076f6a6: mulps xmm0, xmm2
0076f6a9: addps xmm0, xmm5
0076f6ac: movaps xmmword ptr [esp + 0x20], xmm0
0076f6b1: movss xmm0, dword ptr [ecx + 0x10]
0076f6b6: subss xmm0, dword ptr [esp + 0x30]
0076f6bc: mulss xmm0, xmm0
0076f6c0: addss xmm1, xmm0
0076f6c4: xorps xmm0, xmm0
0076f6c7: movss xmm0, xmm1
0076f6cb: sqrtss xmm0, xmm0
0076f6cf: movaps xmmword ptr [esp + 0x30], xmm0
0076f6d4: comiss xmm3, dword ptr [esp + 0x30]
0076f6d9: ja 0x76f523
0076f6df: mov ecx, dword ptr [esi + 0x20]
0076f6e2: movaps xmm0, xmmword ptr [ecx + 0x30]
0076f6e6: movss xmm1, dword ptr [esp + 0x28]
0076f6ec: movaps xmmword ptr [esp + 0x30], xmm0
0076f6f1: movss xmm0, dword ptr [esp + 0x20]
0076f6f7: subss xmm0, dword ptr [esp + 0x30]
0076f6fd: subss xmm1, dword ptr [esp + 0x38]
0076f703: mulss xmm0, xmm0
0076f707: mulss xmm1, xmm1
0076f70b: addss xmm1, xmm0
0076f70f: xorps xmm0, xmm0
0076f712: movss xmm0, xmm1
0076f716: sqrtss xmm0, xmm0
0076f71a: movaps xmmword ptr [esp + 0x30], xmm0
0076f71f: comiss xmm3, dword ptr [esp + 0x30]
0076f724: jbe 0x76f730
0076f726: movss xmm0, dword ptr [0xf2c058]
0076f72e: jmp 0x76f738
0076f730: movss xmm0, dword ptr [0xec6fc0]
0076f738: movss xmm1, dword ptr [0xf23e20]
0076f740: push 0
0076f742: sub esp, 8
0076f745: movss dword ptr [esp + 4], xmm1
0076f74b: lea edx, [esp + 0x2c]
0076f74f: mov ecx, esi
0076f751: movss dword ptr [esp], xmm0
0076f756: call 0x767390
0076f75b: test eax, eax
0076f75d: je 0x76f7b9
0076f75f: mov edx, dword ptr [ebx + 0xa4]
0076f765: mov ecx, esi
0076f767: call 0x706b00
0076f76c: movss xmm0, dword ptr [0xec7978]
0076f774: push ecx
0076f775: mov ecx, dword ptr [esi + 0x14]
0076f778: mov edx, eax
0076f77a: movss dword ptr [esp], xmm0
0076f77f: call 0x6c36a0
0076f784: movss xmm0, dword ptr [0xec6ff0]
0076f78c: sub esp, 8
0076f78f: .byte 0xf3
0076f790: .byte 0x0f
0076f791: .byte 0x11
0076f792: inc esp
0076f793: .byte 0x24

3over4 data0xec6fc0 operand0x78672d candidate-start0x7865a0
007865a0: push ebp
007865a1: mov ebp, esp
007865a3: and esp, 0xfffffff0
007865a6: sub esp, 0x34
007865a9: push ebx
007865aa: push esi
007865ab: mov esi, edx
007865ad: mov edx, dword ptr [ecx + 4]
007865b0: push edi
007865b1: mov dword ptr [esp + 0x1c], esi
007865b5: xor eax, eax
007865b7: test edx, edx
007865b9: je 0x7865ce
007865bb: mov eax, dword ptr [edx + 0x14]
007865be: dec eax
007865bf: neg eax
007865c1: sbb eax, eax
007865c3: not eax
007865c5: and eax, edx
007865c7: mov edx, dword ptr [edx + 4]
007865ca: je 0x7865b7
007865cc: jmp 0x7865d6
007865ce: test eax, eax
007865d0: je 0x786815
007865d6: mov eax, dword ptr [ecx + 0x18]
007865d9: mov edx, dword ptr [eax + 4]
007865dc: movzx eax, byte ptr [edx + 3]
007865e0: cmp eax, 0x15
007865e3: je 0x7865ee
007865e5: cmp eax, 0x16
007865e8: jne 0x786815
007865ee: mov eax, dword ptr [ecx]
007865f0: mov edx, dword ptr [eax + 0x20]
007865f3: call edx
007865f5: xorps xmm0, xmm0
007865f8: movss dword ptr [esp + 0x10], xmm0
007865fe: movss xmm0, dword ptr [0x146b618]
00786606: xor ebx, ebx
00786608: comiss xmm0, dword ptr [esi]
0078660b: mov edi, eax
0078660d: jbe 0x786619
0078660f: movss xmm0, dword ptr [0xf2bd38]
00786617: jmp 0x786621
00786619: movss xmm0, dword ptr [0xf2aa98]
00786621: mov eax, dword ptr [edi + 0x4c]
00786624: movss dword ptr [esp + 0x14], xmm0
0078662a: test eax, eax
0078662c: je 0x786633
0078662e: lea ecx, [eax - 0x78]
00786631: jmp 0x786635
00786633: xor ecx, ecx
00786635: mov ecx, dword ptr [ecx + 0x7c]
00786638: test eax, eax
0078663a: je 0x786641
0078663c: add eax, -0x78
0078663f: jmp 0x786643
00786641: xor eax, eax
00786643: mov esi, ecx
00786645: sub esi, eax
00786647: neg esi
00786649: sbb esi, esi
0078664b: and esi, ecx
0078664d: je 0x786714
00786653: cmp esi, edi
00786655: je 0x7866ed
0078665b: mov eax, dword ptr [esi + 0x20]
0078665e: movaps xmm0, xmmword ptr [eax + 0x30]
00786662: mov ecx, dword ptr [edi + 0x20]
00786665: movaps xmmword ptr [esp + 0x30], xmm0
0078666a: movaps xmm0, xmmword ptr [ecx + 0x30]
0078666e: movaps xmmword ptr [esp + 0x20], xmm0
00786673: movss xmm0, dword ptr [esp + 0x20]
00786679: subss xmm0, dword ptr [esp + 0x30]
0078667f: movss xmm1, dword ptr [esp + 0x28]
00786685: subss xmm1, dword ptr [esp + 0x38]
0078668b: mulss xmm0, xmm0
0078668f: mulss xmm1, xmm1
00786693: addss xmm1, xmm0
00786697: xorps xmm0, xmm0
0078669a: movss xmm0, xmm1
0078669e: sqrtss xmm0, xmm0
007866a2: movaps xmmword ptr [esp + 0x30], xmm0
007866a7: movss xmm0, dword ptr [esp + 0x30]
007866ad: comiss xmm0, dword ptr [esp + 0x14]
007866b2: ja 0x7866ed
007866b4: push 0
007866b6: mov edx, esi
007866b8: mov ecx, edi
007866ba: call 0x7c9460
007866bf: test eax, eax
007866c1: je 0x7866ed
007866c3: push 0x10
007866c5: push esi
007866c6: mov edx, edi
007866c8: xor ecx, ecx
007866ca: call 0x777890
007866cf: fst dword ptr [esp + 0x18]
007866d3: fld dword ptr [esp + 0x10]
007866d7: fxch st(1)
007866d9: fcompi st(1)
007866db: fstp st(0)
007866dd: jbe 0x7866ed
007866df: movss xmm0, dword ptr [esp + 0x18]
007866e5: mov ebx, esi
007866e7: movss dword ptr [esp + 0x10], xmm0
007866ed: mov edx, dword ptr [esi + 0x70]
007866f0: mov eax, dword ptr [esi + 0x4c]
007866f3: mov ecx, dword ptr [esi + 0x7c]
007866f6: lea eax, [eax + edx*8]
007866f9: test eax, eax
007866fb: je 0x786702
007866fd: add eax, -0x78
00786700: jmp 0x786704
00786702: xor eax, eax
00786704: mov esi, ecx
00786706: sub esi, eax
00786708: neg esi
0078670a: sbb esi, esi
0078670c: and esi, ecx
0078670e: jne 0x786653
00786714: mov ecx, dword ptr [edi + 0xb00]
0078671a: mov ecx, dword ptr [ecx + 0x30]
0078671d: mov edx, 0x11
00786722: call 0x6d5f00
00786727: fst dword ptr [esp + 0x14]
0078672b: fld dword ptr [0xec6fc0]
00786731: movss xmm0, dword ptr [esp + 0x14]
00786737: fcompi st(1)
00786739: fstp st(0)
0078673b: jbe 0x78676c
0078673d: movss xmm1, dword ptr [0xec7044]
00786745: subss xmm0, xmm1
00786749: mulss xmm0, dword ptr [0xf27218]
00786751: mulss xmm0, dword ptr [0xf2d9f4]
00786759: addss xmm0, xmm1
0078675d: comiss xmm1, xmm0
00786760: ja 0x78679e
00786762: movss xmm1, dword ptr [0xec6fc0]
0078676a: jmp 0x786799
0078676c: movss xmm1, dword ptr [0xec6fc0]
00786774: subss xmm0, xmm1
00786778: mulss xmm0, dword ptr [0xf2d644]
00786780: mulss xmm0, dword ptr [0xf2d9f0]
00786788: addss xmm0, xmm1
0078678c: .byte 0x0f

3over4 data0xec6fc0 operand0x786766 candidate-start0x7865a0
007865a0: push ebp
007865a1: mov ebp, esp
007865a3: and esp, 0xfffffff0
007865a6: sub esp, 0x34
007865a9: push ebx
007865aa: push esi
007865ab: mov esi, edx
007865ad: mov edx, dword ptr [ecx + 4]
007865b0: push edi
007865b1: mov dword ptr [esp + 0x1c], esi
007865b5: xor eax, eax
007865b7: test edx, edx
007865b9: je 0x7865ce
007865bb: mov eax, dword ptr [edx + 0x14]
007865be: dec eax
007865bf: neg eax
007865c1: sbb eax, eax
007865c3: not eax
007865c5: and eax, edx
007865c7: mov edx, dword ptr [edx + 4]
007865ca: je 0x7865b7
007865cc: jmp 0x7865d6
007865ce: test eax, eax
007865d0: je 0x786815
007865d6: mov eax, dword ptr [ecx + 0x18]
007865d9: mov edx, dword ptr [eax + 4]
007865dc: movzx eax, byte ptr [edx + 3]
007865e0: cmp eax, 0x15
007865e3: je 0x7865ee
007865e5: cmp eax, 0x16
007865e8: jne 0x786815
007865ee: mov eax, dword ptr [ecx]
007865f0: mov edx, dword ptr [eax + 0x20]
007865f3: call edx
007865f5: xorps xmm0, xmm0
007865f8: movss dword ptr [esp + 0x10], xmm0
007865fe: movss xmm0, dword ptr [0x146b618]
00786606: xor ebx, ebx
00786608: comiss xmm0, dword ptr [esi]
0078660b: mov edi, eax
0078660d: jbe 0x786619
0078660f: movss xmm0, dword ptr [0xf2bd38]
00786617: jmp 0x786621
00786619: movss xmm0, dword ptr [0xf2aa98]
00786621: mov eax, dword ptr [edi + 0x4c]
00786624: movss dword ptr [esp + 0x14], xmm0
0078662a: test eax, eax
0078662c: je 0x786633
0078662e: lea ecx, [eax - 0x78]
00786631: jmp 0x786635
00786633: xor ecx, ecx
00786635: mov ecx, dword ptr [ecx + 0x7c]
00786638: test eax, eax
0078663a: je 0x786641
0078663c: add eax, -0x78
0078663f: jmp 0x786643
00786641: xor eax, eax
00786643: mov esi, ecx
00786645: sub esi, eax
00786647: neg esi
00786649: sbb esi, esi
0078664b: and esi, ecx
0078664d: je 0x786714
00786653: cmp esi, edi
00786655: je 0x7866ed
0078665b: mov eax, dword ptr [esi + 0x20]
0078665e: movaps xmm0, xmmword ptr [eax + 0x30]
00786662: mov ecx, dword ptr [edi + 0x20]
00786665: movaps xmmword ptr [esp + 0x30], xmm0
0078666a: movaps xmm0, xmmword ptr [ecx + 0x30]
0078666e: movaps xmmword ptr [esp + 0x20], xmm0
00786673: movss xmm0, dword ptr [esp + 0x20]
00786679: subss xmm0, dword ptr [esp + 0x30]
0078667f: movss xmm1, dword ptr [esp + 0x28]
00786685: subss xmm1, dword ptr [esp + 0x38]
0078668b: mulss xmm0, xmm0
0078668f: mulss xmm1, xmm1
00786693: addss xmm1, xmm0
00786697: xorps xmm0, xmm0
0078669a: movss xmm0, xmm1
0078669e: sqrtss xmm0, xmm0
007866a2: movaps xmmword ptr [esp + 0x30], xmm0
007866a7: movss xmm0, dword ptr [esp + 0x30]
007866ad: comiss xmm0, dword ptr [esp + 0x14]
007866b2: ja 0x7866ed
007866b4: push 0
007866b6: mov edx, esi
007866b8: mov ecx, edi
007866ba: call 0x7c9460
007866bf: test eax, eax
007866c1: je 0x7866ed
007866c3: push 0x10
007866c5: push esi
007866c6: mov edx, edi
007866c8: xor ecx, ecx
007866ca: call 0x777890
007866cf: fst dword ptr [esp + 0x18]
007866d3: fld dword ptr [esp + 0x10]
007866d7: fxch st(1)
007866d9: fcompi st(1)
007866db: fstp st(0)
007866dd: jbe 0x7866ed
007866df: movss xmm0, dword ptr [esp + 0x18]
007866e5: mov ebx, esi
007866e7: movss dword ptr [esp + 0x10], xmm0
007866ed: mov edx, dword ptr [esi + 0x70]
007866f0: mov eax, dword ptr [esi + 0x4c]
007866f3: mov ecx, dword ptr [esi + 0x7c]
007866f6: lea eax, [eax + edx*8]
007866f9: test eax, eax
007866fb: je 0x786702
007866fd: add eax, -0x78
00786700: jmp 0x786704
00786702: xor eax, eax
00786704: mov esi, ecx
00786706: sub esi, eax
00786708: neg esi
0078670a: sbb esi, esi
0078670c: and esi, ecx
0078670e: jne 0x786653
00786714: mov ecx, dword ptr [edi + 0xb00]
0078671a: mov ecx, dword ptr [ecx + 0x30]
0078671d: mov edx, 0x11
00786722: call 0x6d5f00
00786727: fst dword ptr [esp + 0x14]
0078672b: fld dword ptr [0xec6fc0]
00786731: movss xmm0, dword ptr [esp + 0x14]
00786737: fcompi st(1)
00786739: fstp st(0)
0078673b: jbe 0x78676c
0078673d: movss xmm1, dword ptr [0xec7044]
00786745: subss xmm0, xmm1
00786749: mulss xmm0, dword ptr [0xf27218]
00786751: mulss xmm0, dword ptr [0xf2d9f4]
00786759: addss xmm0, xmm1
0078675d: comiss xmm1, xmm0
00786760: ja 0x78679e
00786762: movss xmm1, dword ptr [0xec6fc0]
0078676a: jmp 0x786799
0078676c: movss xmm1, dword ptr [0xec6fc0]
00786774: subss xmm0, xmm1
00786778: mulss xmm0, dword ptr [0xf2d644]
00786780: mulss xmm0, dword ptr [0xf2d9f0]
00786788: addss xmm0, xmm1
0078678c: comiss xmm1, xmm0
0078678f: ja 0x78679e
00786791: movss xmm1, dword ptr [0xf2aa38]
00786799: comiss xmm1, xmm0
0078679c: ja 0x7867a1
0078679e: movaps xmm0, xmm1
007867a1: movss xmm1, dword ptr [esp + 0x10]
007867a7: comiss xmm1, xmm0
007867aa: jbe 0x7867b7
007867ac: push 0
007867ae: mov edx, ebx
007867b0: mov ecx, edi
007867b2: call 0x74a8b0
007867b7: mov edx, dword ptr [esp + 0x1c]
007867bb: movss xmm0, dword ptr [0x146b618]
007867c3: comiss xmm0, dword ptr [edx]

3over4 data0xec6fc0 operand0x786770 candidate-start0x7865a0
007865a0: push ebp
007865a1: mov ebp, esp
007865a3: and esp, 0xfffffff0
007865a6: sub esp, 0x34
007865a9: push ebx
007865aa: push esi
007865ab: mov esi, edx
007865ad: mov edx, dword ptr [ecx + 4]
007865b0: push edi
007865b1: mov dword ptr [esp + 0x1c], esi
007865b5: xor eax, eax
007865b7: test edx, edx
007865b9: je 0x7865ce
007865bb: mov eax, dword ptr [edx + 0x14]
007865be: dec eax
007865bf: neg eax
007865c1: sbb eax, eax
007865c3: not eax
007865c5: and eax, edx
007865c7: mov edx, dword ptr [edx + 4]
007865ca: je 0x7865b7
007865cc: jmp 0x7865d6
007865ce: test eax, eax
007865d0: je 0x786815
007865d6: mov eax, dword ptr [ecx + 0x18]
007865d9: mov edx, dword ptr [eax + 4]
007865dc: movzx eax, byte ptr [edx + 3]
007865e0: cmp eax, 0x15
007865e3: je 0x7865ee
007865e5: cmp eax, 0x16
007865e8: jne 0x786815
007865ee: mov eax, dword ptr [ecx]
007865f0: mov edx, dword ptr [eax + 0x20]
007865f3: call edx
007865f5: xorps xmm0, xmm0
007865f8: movss dword ptr [esp + 0x10], xmm0
007865fe: movss xmm0, dword ptr [0x146b618]
00786606: xor ebx, ebx
00786608: comiss xmm0, dword ptr [esi]
0078660b: mov edi, eax
0078660d: jbe 0x786619
0078660f: movss xmm0, dword ptr [0xf2bd38]
00786617: jmp 0x786621
00786619: movss xmm0, dword ptr [0xf2aa98]
00786621: mov eax, dword ptr [edi + 0x4c]
00786624: movss dword ptr [esp + 0x14], xmm0
0078662a: test eax, eax
0078662c: je 0x786633
0078662e: lea ecx, [eax - 0x78]
00786631: jmp 0x786635
00786633: xor ecx, ecx
00786635: mov ecx, dword ptr [ecx + 0x7c]
00786638: test eax, eax
0078663a: je 0x786641
0078663c: add eax, -0x78
0078663f: jmp 0x786643
00786641: xor eax, eax
00786643: mov esi, ecx
00786645: sub esi, eax
00786647: neg esi
00786649: sbb esi, esi
0078664b: and esi, ecx
0078664d: je 0x786714
00786653: cmp esi, edi
00786655: je 0x7866ed
0078665b: mov eax, dword ptr [esi + 0x20]
0078665e: movaps xmm0, xmmword ptr [eax + 0x30]
00786662: mov ecx, dword ptr [edi + 0x20]
00786665: movaps xmmword ptr [esp + 0x30], xmm0
0078666a: movaps xmm0, xmmword ptr [ecx + 0x30]
0078666e: movaps xmmword ptr [esp + 0x20], xmm0
00786673: movss xmm0, dword ptr [esp + 0x20]
00786679: subss xmm0, dword ptr [esp + 0x30]
0078667f: movss xmm1, dword ptr [esp + 0x28]
00786685: subss xmm1, dword ptr [esp + 0x38]
0078668b: mulss xmm0, xmm0
0078668f: mulss xmm1, xmm1
00786693: addss xmm1, xmm0
00786697: xorps xmm0, xmm0
0078669a: movss xmm0, xmm1
0078669e: sqrtss xmm0, xmm0
007866a2: movaps xmmword ptr [esp + 0x30], xmm0
007866a7: movss xmm0, dword ptr [esp + 0x30]
007866ad: comiss xmm0, dword ptr [esp + 0x14]
007866b2: ja 0x7866ed
007866b4: push 0
007866b6: mov edx, esi
007866b8: mov ecx, edi
007866ba: call 0x7c9460
007866bf: test eax, eax
007866c1: je 0x7866ed
007866c3: push 0x10
007866c5: push esi
007866c6: mov edx, edi
007866c8: xor ecx, ecx
007866ca: call 0x777890
007866cf: fst dword ptr [esp + 0x18]
007866d3: fld dword ptr [esp + 0x10]
007866d7: fxch st(1)
007866d9: fcompi st(1)
007866db: fstp st(0)
007866dd: jbe 0x7866ed
007866df: movss xmm0, dword ptr [esp + 0x18]
007866e5: mov ebx, esi
007866e7: movss dword ptr [esp + 0x10], xmm0
007866ed: mov edx, dword ptr [esi + 0x70]
007866f0: mov eax, dword ptr [esi + 0x4c]
007866f3: mov ecx, dword ptr [esi + 0x7c]
007866f6: lea eax, [eax + edx*8]
007866f9: test eax, eax
007866fb: je 0x786702
007866fd: add eax, -0x78
00786700: jmp 0x786704
00786702: xor eax, eax
00786704: mov esi, ecx
00786706: sub esi, eax
00786708: neg esi
0078670a: sbb esi, esi
0078670c: and esi, ecx
0078670e: jne 0x786653
00786714: mov ecx, dword ptr [edi + 0xb00]
0078671a: mov ecx, dword ptr [ecx + 0x30]
0078671d: mov edx, 0x11
00786722: call 0x6d5f00
00786727: fst dword ptr [esp + 0x14]
0078672b: fld dword ptr [0xec6fc0]
00786731: movss xmm0, dword ptr [esp + 0x14]
00786737: fcompi st(1)
00786739: fstp st(0)
0078673b: jbe 0x78676c
0078673d: movss xmm1, dword ptr [0xec7044]
00786745: subss xmm0, xmm1
00786749: mulss xmm0, dword ptr [0xf27218]
00786751: mulss xmm0, dword ptr [0xf2d9f4]
00786759: addss xmm0, xmm1
0078675d: comiss xmm1, xmm0
00786760: ja 0x78679e
00786762: movss xmm1, dword ptr [0xec6fc0]
0078676a: jmp 0x786799
0078676c: movss xmm1, dword ptr [0xec6fc0]
00786774: subss xmm0, xmm1
00786778: mulss xmm0, dword ptr [0xf2d644]
00786780: mulss xmm0, dword ptr [0xf2d9f0]
00786788: addss xmm0, xmm1
0078678c: comiss xmm1, xmm0
0078678f: ja 0x78679e
00786791: movss xmm1, dword ptr [0xf2aa38]
00786799: comiss xmm1, xmm0
0078679c: ja 0x7867a1
0078679e: movaps xmm0, xmm1
007867a1: movss xmm1, dword ptr [esp + 0x10]
007867a7: comiss xmm1, xmm0
007867aa: jbe 0x7867b7
007867ac: push 0
007867ae: mov edx, ebx
007867b0: mov ecx, edi
007867b2: call 0x74a8b0
007867b7: mov edx, dword ptr [esp + 0x1c]
007867bb: movss xmm0, dword ptr [0x146b618]
007867c3: comiss xmm0, dword ptr [edx]
007867c6: jbe 0x78680c
007867c8: mov esi, dword ptr [edi + 0x4c]
007867cb: mov ecx, esi
007867cd: .byte 0xe8
007867ce: pop esi
007867cf: .byte 0x15

3over4 data0xec6fc0 operand0x788596 candidate-start0x787fe0
00787fe0: push ebp
00787fe1: mov ebp, esp
00787fe3: and esp, 0xfffffff0
00787fe6: sub esp, 0x54
00787fe9: push ebx
00787fea: push esi
00787feb: push edi
00787fec: mov edi, ecx
00787fee: mov dword ptr [esp + 0xc], edx
00787ff2: mov dword ptr [esp + 0x14], edi
00787ff6: test edi, edi
00787ff8: je 0x788009
00787ffa: mov eax, dword ptr [edi]
00787ffc: mov edx, dword ptr [eax + 0x20]
00787fff: call edx
00788001: mov esi, eax
00788003: mov dword ptr [esp + 0x10], esi
00788007: jmp 0x788015
00788009: mov dword ptr [esp + 0x10], 0
00788011: mov esi, dword ptr [esp + 0x10]
00788015: mov dword ptr [0x1c64220], 1
0078801f: call 0x880690
00788024: mov ebx, 8
00788029: cmp eax, ebx
0078802b: jne 0x788061
0078802d: call 0x4120b0
00788032: cmp dword ptr [eax + 0x34], 0
00788036: je 0x788049
00788038: mov ecx, dword ptr [eax + 0x2c]
0078803b: lea ecx, [ecx + ecx*2]
0078803e: cmp dword ptr [eax + ecx*4 + 0x14], 0xa
00788043: jne 0x788049
00788045: xor eax, eax
00788047: jmp 0x78804e
00788049: mov eax, dword ptr [0x1c641e4]
0078804e: cmp eax, esi
00788050: jne 0x788061
00788052: mov ecx, edi
00788054: call 0x6e3430
00788059: test eax, eax
0078805b: je 0x788474
00788061: mov eax, dword ptr [edi + 0x4c]
00788064: mov eax, dword ptr [eax + 0x38]
00788067: mov eax, dword ptr [eax + 0x58]
0078806a: test eax, eax
0078806c: je 0x788072
0078806e: mov eax, dword ptr [eax]
00788070: jmp 0x788074
00788072: xor eax, eax
00788074: movzx edx, byte ptr [eax + 0x788488]
0078807b: jmp dword ptr [edx*4 + 0x788480]
00788082: call 0x4120b0
00788087: cmp dword ptr [eax + 0x34], 0
0078808b: je 0x7880a1
0078808d: mov ecx, dword ptr [eax + 0x2c]
00788090: lea ecx, [ecx + ecx*2]
00788093: mov dword ptr [esp + 0x18], 1
0078809b: cmp dword ptr [eax + ecx*4 + 0x14], ebx
0078809f: je 0x7880a9
007880a1: mov dword ptr [esp + 0x18], 0
007880a9: call 0x4120b0
007880ae: cmp dword ptr [eax + 0x34], 0
007880b2: je 0x7880de
007880b4: mov ecx, dword ptr [eax + 0x2c]
007880b7: lea edx, [ecx + ecx*2]
007880ba: cmp dword ptr [eax + edx*4 + 0x14], ebx
007880be: jne 0x7880de
007880c0: movss xmm0, dword ptr [0xec6e14]
007880c8: comiss xmm0, dword ptr [0x1dee68c]
007880cf: jbe 0x7880de
007880d1: call 0x875630
007880d6: test eax, eax
007880d8: je 0x7883c2
007880de: mov edx, esi
007880e0: mov ecx, 0x1c4eb00
007880e5: call 0x873b00
007880ea: test eax, eax
007880ec: js 0x7883c2
007880f2: shl eax, 8
007880f5: add eax, 0x1c4eb20
007880fa: je 0x7883c2
00788100: mov eax, dword ptr [eax + 0xc8]
00788106: cmp eax, 2
00788109: jne 0x7883c2
0078810f: mov eax, dword ptr [edi + 0x4c]
00788112: mov ecx, dword ptr [eax + 0x38]
00788115: cmp dword ptr [ecx + 0x18], 7
00788119: je 0x7883c2
0078811f: push 0
00788121: mov edx, 0x200
00788126: mov ecx, edi
00788128: call 0x787770
0078812d: test eax, eax
0078812f: je 0x78813d
00788131: mov eax, 2
00788136: pop edi
00788137: pop esi
00788138: pop ebx
00788139: mov esp, ebp
0078813b: pop ebp
0078813c: ret 
0078813d: mov eax, dword ptr [0x1ce716c]
00788142: test eax, eax
00788144: je 0x78815d
00788146: mov ecx, dword ptr [eax]
00788148: test ecx, ecx
0078814a: je 0x78815d
0078814c: cmp dword ptr [ecx + 0x74], 1
00788150: jne 0x78815d
00788152: mov edx, dword ptr [ecx]
00788154: mov eax, dword ptr [edx + 0x20]
00788157: call eax
00788159: mov ebx, eax
0078815b: jmp 0x78815f
0078815d: xor ebx, ebx
0078815f: mov esi, dword ptr [edi + 0x14]
00788162: xorps xmm0, xmm0
00788165: movss dword ptr [esi + 0x14], xmm0
0078816a: mov ecx, dword ptr [edi + 0x14]
0078816d: cmp dword ptr [ecx + 0x20], 0
00788171: jne 0x78819a
00788173: mov edx, dword ptr [edi + 0x18]
00788176: mov eax, dword ptr [edx + 4]
00788179: mov edx, dword ptr [eax]
0078817b: and edx, 0xff000000
00788181: cmp edx, 0x24000000
00788187: jne 0x78819a
00788189: mov eax, dword ptr [ecx + 0x10]
0078818c: mov edx, 0x47
00788191: mov dword ptr [ecx + 0x20], edx
00788194: test eax, eax
00788196: je 0x78819a
00788198: call eax
0078819a: and dword ptr [esi + 0x1c], 0xfffffffd
0078819e: mov eax, dword ptr [esp + 0x10]
007881a2: mov esi, dword ptr [eax + 0x18]
007881a5: mov ecx, dword ptr [esi + 4]
007881a8: mov edx, dword ptr [ecx]
007881aa: and edx, 0xff000000
007881b0: cmp edx, 0x1e000000
007881b6: je 0x788474
007881bc: test ebx, ebx
007881be: je 0x788474
007881c4: cmp ebx, eax
007881c6: jne 0x7883c2
007881cc: mov ecx, esi
007881ce: call 0x6b0fc0
007881d3: test eax, eax
007881d5: jne 0x7883c2
007881db: cmp dword ptr [esp + 0x18], eax
007881df: je 0x7881e6
007881e1: xorps xmm0, xmm0
007881e4: jmp 0x7881ee
007881e6: movss xmm0, dword ptr [0xec98c8]
007881ee: mov eax, dword ptr [esp + 0xc]
007881f2: push ecx
007881f3: mov ecx, dword ptr [esp + 0x14]
007881f7: movss dword ptr [esp], xmm0
007881fc: push eax
007881fd: push ecx
007881fe: call 0x787ca0
00788203: mov ebx, eax
00788205: mov dword ptr [esp + 0x18], ebx
00788209: cmp ebx, 2
0078820c: je 0x788474
00788212: mov eax, dword ptr [esp + 0xc]
00788216: movss xmm0, dword ptr [0x146b618]
0078821e: subss xmm0, dword ptr [eax + 0x15c]
00788226: movss dword ptr [esp + 0x1c], xmm0
0078822c: cmp ebx, 1
0078822f: jne 0x788370
00788235: comiss xmm0, dword ptr [eax + 0x164]
0078823c: jbe 0x788370
00788242: mov ecx, esi
00788244: call 0x6a9d60
00788249: test eax, eax
0078824b: je 0x788338
00788251: mov edx, dword ptr [esp + 0xc]
00788255: xor esi, esi
00788257: or edi, 0xffffffff
0078825a: cmp dword ptr [edx + 0x154], esi
00788260: jle 0x788334
00788266: mov ebx, edx
00788268: add ebx, 0xb0
0078826e: mov edi, edi
00788270: mov ecx, dword ptr [esp + 0x10]
00788274: mov edx, esi
00788276: call 0x6c0760
0078827b: test eax, eax
0078827d: je 0x7882a7
0078827f: mov edx, ebx
00788281: lea ecx, [esp + 0x20]
00788285: call 0x6e82f0
0078828a: mov edx, ecx
0078828c: mov ecx, dword ptr [esp + 0x10]
00788290: push 0
00788292: call 0x6e7d90
00788297: fld dword ptr [0xec6fb4]
0078829d: fxch st(1)
0078829f: fcompi st(1)
007882a1: fstp st(0)
007882a3: jbe 0x7882a7
007882a5: mov edi, esi
007882a7: mov eax, dword ptr [esp + 0xc]
007882ab: inc esi
007882ac: add ebx, 0x28
007882af: cmp esi, dword ptr [eax + 0x154]
007882b5: jl 0x788270
007882b7: test edi, edi
007882b9: js 0x788330
007882bb: mov esi, dword ptr [esp + 0x14]
007882bf: lea ecx, [edi + edi*4]
007882c2: mov edx, eax
007882c4: movq xmm0, qword ptr [edx + ecx*8 + 0xb0]
007882cd: lea eax, [edx + ecx*8 + 0xb0]
007882d4: movq qword ptr [esp + 0x38], xmm0
007882da: movq xmm0, qword ptr [eax + 8]
007882df: movq qword ptr [esp + 0x40], xmm0
007882e5: movq xmm0, qword ptr [eax + 0x10]
007882ea: movq qword ptr [esp + 0x48], xmm0
007882f0: movq xmm0, qword ptr [eax + 0x18]
007882f5: movq qword ptr [esp + 0x50], xmm0
007882fb: movq xmm0, qword ptr [eax + 0x20]
00788300: mov ecx, esi
00788302: movq qword ptr [esp + 0x58], xmm0
00788308: call 0x6bb520
0078830d: push 0
0078830f: push 1
00788311: lea edx, [esp + 0x40]
00788315: mov ecx, esi
00788317: call 0x6e8500
0078831c: mov ecx, dword ptr [esp + 0x10]
00788320: mov edx, edi
00788322: call 0x6c06d0
00788327: xor eax, eax
00788329: pop edi
0078832a: pop esi
0078832b: pop ebx
0078832c: mov esp, ebp
0078832e: pop ebp
0078832f: ret 
00788330: mov ebx, dword ptr [esp + 0x18]
00788334: mov edi, dword ptr [esp + 0x14]
00788338: mov eax, dword ptr [esp + 0xc]
0078833c: cmp dword ptr [eax + 0x168], 0
00788343: je 0x78836c
00788345: mov ecx, dword ptr [esp + 0x10]
00788349: call 0x6c0700
0078834e: test eax, eax
00788350: je 0x78836c
00788352: mov ecx, edi
00788354: call 0x6bb520
00788359: mov ecx, 0x1c4eb00
0078835e: call 0x8734c0
00788363: xor eax, eax
00788365: pop edi
00788366: pop esi
00788367: pop ebx
00788368: mov esp, ebp
0078836a: pop ebp
0078836b: ret 
0078836c: mov eax, dword ptr [esp + 0xc]
00788370: mov ecx, dword ptr [eax + 0xa0]
00788376: call 0x6e1eb0
0078837b: mov esi, eax
0078837d: test esi, esi
0078837f: je 0x78838b
00788381: movss xmm0, dword ptr [0xec7238]
00788389: jmp 0x788393
0078838b: movss xmm0, dword ptr [0xec7048]
00788393: movss dword ptr [esp + 0x18], xmm0
00788399: call 0x880690
0078839e: cmp eax, 8
007883a1: je 0x788461
007883a7: cmp ebx, 1
007883aa: jne 0x7883ce
007883ac: movss xmm0, dword ptr [esp + 0x1c]
007883b2: comiss xmm0, dword ptr [esp + 0x18]
007883b7: jbe 0x7883ce
007883b9: mov ecx, dword ptr [esp + 0x10]
007883bd: call 0x768f10
007883c2: mov eax, 1
007883c7: pop edi
007883c8: pop esi
007883c9: pop ebx
007883ca: mov esp, ebp
007883cc: pop ebp
007883cd: ret 
007883ce: mov ebx, dword ptr [esp + 0xc]
007883d2: cmp dword ptr [ebx + 0x168], 0
007883d9: jne 0x788465
007883df: cmp dword ptr [ebx + 0x154], 0
007883e6: jg 0x788465
007883e8: movss xmm0, dword ptr [0x146b618]
007883f0: subss xmm0, dword ptr [ebx + 0x160]
007883f8: movss xmm1, dword ptr [0xec704c]
00788400: comiss xmm1, xmm0
00788403: jbe 0x788418
00788405: mov ecx, edi
00788407: call 0x88fae0
0078840c: fld dword ptr [0xf2d240]
00788412: fcompi st(1)
00788414: fstp st(0)
00788416: ja 0x788465
00788418: movss xmm0, dword ptr [ebx + 0xc]
0078841d: xorps xmm1, xmm1
00788420: ucomiss xmm0, xmm1
00788423: lahf 
00788424: test ah, 0x44
00788427: jnp 0x788465
00788429: test esi, esi
0078842b: je 0x788437
0078842d: movss xmm0, dword ptr [0xec6fd4]
00788435: jmp 0x78843f
00788437: movss xmm0, dword ptr [0xec6e14]
0078843f: push 1
00788441: sub esp, 8
00788444: movss dword ptr [esp + 4], xmm1
0078844a: mov edx, ebx
0078844c: mov ecx, edi
0078844e: movss dword ptr [esp], xmm0
00788453: call 0x767390
00788458: xor eax, eax
0078845a: pop edi
0078845b: pop esi
0078845c: pop ebx
0078845d: mov esp, ebp
0078845f: pop ebp
00788460: ret 
00788461: mov ebx, dword ptr [esp + 0xc]
00788465: mov ecx, dword ptr [esp + 0x10]
00788469: lea edx, [ebx + 0x100]
0078846f: call 0x76a3d0
00788474: pop edi
00788475: pop esi
00788476: xor eax, eax
00788478: pop ebx
00788479: mov esp, ebp
0078847b: pop ebp
0078847c: ret 
0078847d: lea ecx, [ecx]
00788480: mov eax, dword ptr [0x82007880]
00788485: cmp byte ptr [eax], 0
00788489: add byte ptr [eax], al
0078848b: add byte ptr [eax], al
0078848d: add dword ptr [ecx], eax
0078848f: add byte ptr [ebx + 0x56532cec], al
00788495: push edi
00788496: mov edi, ecx
00788498: mov esi, edx
0078849a: test edi, edi
0078849c: je 0x7884a9
0078849e: mov eax, dword ptr [edi]
007884a0: mov edx, dword ptr [eax + 0x20]
007884a3: call edx
007884a5: mov ebx, eax
007884a7: jmp 0x7884ab
007884a9: xor ebx, ebx
007884ab: mov edx, ebx
007884ad: mov ecx, 0x1c4eb00
007884b2: call 0x873b00
007884b7: test eax, eax
007884b9: js 0x7884d0
007884bb: shl eax, 8
007884be: add eax, 0x1c4eb20
007884c3: je 0x7884d0
007884c5: mov eax, dword ptr [eax + 0xc8]
007884cb: cmp eax, 2
007884ce: je 0x7884dc
007884d0: pop edi
007884d1: pop esi
007884d2: mov eax, 1
007884d7: pop ebx
007884d8: add esp, 0x2c
007884db: ret 
007884dc: mov eax, dword ptr [edi + 0x4c]
007884df: mov ecx, dword ptr [eax + 0x38]
007884e2: cmp dword ptr [ecx + 0x18], 7
007884e6: je 0x7884d0
007884e8: push 0
007884ea: mov edx, 0x200
007884ef: mov ecx, edi
007884f1: call 0x787770
007884f6: test eax, eax
007884f8: je 0x788506
007884fa: pop edi
007884fb: pop esi
007884fc: mov eax, 2
00788501: pop ebx
00788502: add esp, 0x2c
00788505: ret 
00788506: push ebp
00788507: lea edx, [esi + 0xb0]
0078850d: mov ecx, edi
0078850f: call 0x76c5d0
00788514: mov ebp, dword ptr [ebx + 0x18]
00788517: mov edx, dword ptr [ebp + 4]
0078851a: mov eax, dword ptr [edx]
0078851c: and eax, 0xff000000
00788521: cmp eax, 0x1e000000
00788526: je 0x7886b2
0078852c: call 0x6a8af0
00788531: test eax, eax
00788533: je 0x7886b2
00788539: cmp eax, ebx
0078853b: jne 0x788656
00788541: mov ecx, ebp
00788543: call 0x6b0fc0
00788548: test eax, eax
0078854a: jne 0x788656
00788550: movss xmm0, dword ptr [0xec98c8]
00788558: push ecx
00788559: movss dword ptr [esp], xmm0
0078855e: mov ecx, esi
00788560: push ecx
00788561: push ebx
00788562: call 0x787ca0
00788567: mov ebp, eax
00788569: cmp ebp, 2
0078856c: je 0x7886b2
00788572: movss xmm0, dword ptr [0x146b618]
0078857a: mov eax, esi
0078857c: subss xmm0, dword ptr [eax + 0x15c]
00788584: movss dword ptr [esp + 0x10], xmm0
0078858a: cmp ebp, 1
0078858d: jne 0x788623
00788593: comiss xmm0, dword ptr [0xec6fc0]
0078859a: jbe 0x788623
007885a0: cmp dword ptr [eax + 0x168], 0
007885a7: je 0x788623
007885a9: mov ecx, ebx
007885ab: call 0x6c0700
007885b0: test eax, eax
007885b2: je 0x788623
007885b4: movq xmm0, qword ptr [esi + 0xb0]
007885bc: movq qword ptr [esp + 0x14], xmm0
007885c2: movq xmm0, qword ptr [esi + 0xb8]
007885ca: movq qword ptr [esp + 0x1c], xmm0
007885d0: movq xmm0, qword ptr [esi + 0xc0]
007885d8: movq qword ptr [esp + 0x24], xmm0
007885de: movq xmm0, qword ptr [esi + 0xc8]
007885e6: movq qword ptr [esp + 0x2c], xmm0
007885ec: movq xmm0, qword ptr [esi + 0xd0]
007885f4: mov ecx, edi

3over4 data0xec6fc0 operand0x79464e candidate-start0x794410
00794410: push ebp
00794411: mov ebp, esp
00794413: and esp, 0xfffffff0
00794416: sub esp, 0x8f4
0079441c: push ebx
0079441d: push esi
0079441e: mov esi, ecx
00794420: xor ebx, ebx
00794422: push edi
00794423: mov dword ptr [esp + 0x2c], edx
00794427: mov dword ptr [esp + 0x24], esi
0079442b: cmp esi, ebx
0079442d: je 0x79443c
0079442f: mov eax, dword ptr [esi]
00794431: mov edx, dword ptr [eax + 0x20]
00794434: call edx
00794436: mov dword ptr [esp + 0xc], eax
0079443a: jmp 0x794440
0079443c: mov dword ptr [esp + 0xc], ebx
00794440: mov ecx, dword ptr [esi + 4]
00794443: xor eax, eax
00794445: cmp ecx, ebx
00794447: je 0x79445e
00794449: mov eax, dword ptr [ecx + 0x14]
0079444c: dec eax
0079444d: neg eax
0079444f: sbb eax, eax
00794451: not eax
00794453: and eax, ecx
00794455: mov ecx, dword ptr [ecx + 4]
00794458: cmp eax, ebx
0079445a: je 0x794445
0079445c: jmp 0x794466
0079445e: cmp eax, ebx
00794460: je 0x794a20
00794466: mov eax, dword ptr [esp + 0xc]
0079446a: push eax
0079446b: call 0x6e6400
00794470: test eax, eax
00794472: je 0x794a20
00794478: mov ecx, dword ptr [0x1dee620]
0079447e: mov eax, dword ptr [ecx + 0x38]
00794481: cmp dword ptr [eax + 0x18], 4
00794485: jne 0x794a20
0079448b: cmp dword ptr [eax + 0x24], ebx
0079448e: je 0x794a20
00794494: cmp dword ptr [0x1c4f03c], ebx
0079449a: je 0x794a20
007944a0: mov edx, dword ptr [0x1c4f020]
007944a6: mov edi, dword ptr [edx*4 + 0x1c4eb08]
007944ad: cmp edi, ebx
007944af: je 0x794a20
007944b5: mov eax, dword ptr [esp + 0xc]
007944b9: xorps xmm0, xmm0
007944bc: push ebx
007944bd: push eax
007944be: lea edx, [esp + 0x68]
007944c2: lea ecx, [esp + 0x78]
007944c6: mov dword ptr [esp + 0x68], ebx
007944ca: mov dword ptr [esp + 0x6c], ebx
007944ce: mov dword ptr [esp + 0x70], ebx
007944d2: movss dword ptr [esp + 0x74], xmm0
007944d8: call 0x786970
007944dd: mov ecx, dword ptr [esp + 0xc]
007944e1: push ecx
007944e2: lea edx, [esp + 0x64]
007944e6: lea ecx, [esp + 0x74]
007944ea: call 0x6e7420
007944ef: cmp dword ptr [esp + 0x8ec], ebx
007944f6: je 0x794525
007944f8: mov esi, dword ptr [esp + 0xc]
007944fc: mov ecx, esi
007944fe: call 0x6bb520
00794503: mov edx, dword ptr [esp + 0x8f0]
0079450a: mov ecx, dword ptr [esp + 0x8ec]
00794511: push edx
00794512: mov edx, esi
00794514: call 0x76b960
00794519: mov eax, 2
0079451e: pop edi
0079451f: pop esi
00794520: pop ebx
00794521: mov esp, ebp
00794523: pop ebp
00794524: ret 
00794525: mov eax, dword ptr [esi + 0x14]
00794528: cmp dword ptr [eax], -1
0079452b: je 0x794532
0079452d: cmp dword ptr [eax + 8], ebx
00794530: je 0x794541
00794532: xorps xmm0, xmm0
00794535: and dword ptr [eax + 0x1c], 0xfffffee4
0079453c: movss dword ptr [eax + 0x14], xmm0
00794541: movss xmm0, dword ptr [0xec6fb4]
00794549: mov edx, edi
0079454b: mov ecx, esi
0079454d: mov dword ptr [esp + 0x28], ebx
00794551: movss dword ptr [esp + 0x38], xmm0
00794557: call 0x6cba20
0079455c: fstp dword ptr [esp + 0x48]
00794560: mov eax, dword ptr [esi + 0x4c]
00794563: xor ecx, ecx
00794565: cmp eax, ecx
00794567: jne 0x79456e
00794569: lea eax, [ecx + 1]
0079456c: jmp 0x794573
0079456e: mov eax, dword ptr [eax + 0x30]
00794571: mov eax, dword ptr [eax]
00794573: mov edx, dword ptr [esi + 0x20]
00794576: movss xmm4, dword ptr [edx + 0x38]
0079457b: movss xmm1, dword ptr [0xf25ee0]
00794583: xorps xmm3, xmm3
00794586: cvtsi2ss xmm3, eax
0079458a: movaps xmm0, xmm4
0079458d: mulss xmm0, xmm3
00794591: comiss xmm1, xmm0
00794594: movss dword ptr [esp + 0x40], xmm3
0079459a: movss dword ptr [esp + 0x44], xmm4
007945a0: mov dword ptr [esp + 0x3c], 1
007945a8: ja 0x7945ae
007945aa: mov dword ptr [esp + 0x3c], ecx
007945ae: mov dword ptr [esp + 0x34], ecx
007945b2: cmp dword ptr [esp + 0x870], ecx
007945b9: jle 0x7947c8
007945bf: lea ebx, [esp + 0x70]
007945c3: jmp 0x7945d6
007945c5: jmp 0x7945d0
007945c7: lea esp, [esp]
007945ce: mov edi, edi
007945d0: movss xmm4, dword ptr [esp + 0x44]
007945d6: mov eax, dword ptr [ebx + 0x104]
007945dc: mov ecx, dword ptr [esp + 0x24]
007945e0: mov esi, dword ptr [ebx]
007945e2: mov edx, dword ptr [ecx + 0x20]
007945e5: movaps xmm0, xmmword ptr [edx + 0x30]
007945e9: movaps xmmword ptr [esp + 0x50], xmm0
007945ee: lea eax, [eax + eax*4]
007945f1: movss xmm2, dword ptr [ebx + eax*8 + 0x20]
007945f7: mov eax, dword ptr [esi + 0x20]
007945fa: movaps xmm0, xmmword ptr [eax + 0x30]
007945fe: movaps xmmword ptr [esp + 0x10], xmm0
00794603: movss xmm0, dword ptr [esp + 0x10]
00794609: subss xmm0, dword ptr [esp + 0x50]
0079460f: movss xmm1, dword ptr [esp + 0x18]
00794615: subss xmm1, dword ptr [esp + 0x58]
0079461b: mulss xmm0, xmm0
0079461f: mulss xmm1, xmm1
00794623: addss xmm1, xmm0
00794627: xorps xmm0, xmm0
0079462a: movss xmm0, xmm1
0079462e: sqrtss xmm0, xmm0
00794632: movaps xmmword ptr [esp + 0x10], xmm0
00794637: cmp edi, esi
00794639: jne 0x79464a
0079463b: movss xmm0, dword ptr [0xf1be14]
00794643: comiss xmm0, dword ptr [esp + 0x10]
00794648: ja 0x79465b
0079464a: movss xmm0, dword ptr [0xec6fc0]
00794652: comiss xmm0, xmm2
00794655: ja 0x7947a4
0079465b: mov ecx, dword ptr [esp + 0x3c]
0079465f: test ecx, ecx
00794661: je 0x794689
00794663: movss xmm0, dword ptr [eax + 0x38]
00794668: subss xmm4, xmm0
0079466c: mulss xmm4, xmm3
00794670: comiss xmm4, dword ptr [0xf23e20]
00794677: jbe 0x794689
00794679: xorps xmm1, xmm1
0079467c: mulss xmm0, xmm3
00794680: comiss xmm1, xmm0
00794683: ja 0x7947a4
00794689: movaps xmm1, xmm2
0079468c: movss dword ptr [esp + 0x30], xmm1
00794692: cmp edi, dword ptr [esp + 0xc]
00794696: je 0x79478b
0079469c: cmp esi, edi
0079469e: jne 0x7946d9
007946a0: cmp dword ptr [ebx + 0x10c], 1
007946a7: jne 0x7946b9
007946a9: mov eax, dword ptr [edi + 0x14]
007946ac: .byte 0x83
007946ad: .byte 0x38

3over4 data0xec6fc0 operand0x794bb1 candidate-start0x794a30
00794a30: push ebp
00794a31: mov ebp, esp
00794a33: and esp, 0xfffffff0
00794a36: sub esp, 0x8c4
00794a3c: push ebx
00794a3d: push esi
00794a3e: push edi
00794a3f: mov edi, ecx
00794a41: mov dword ptr [esp + 0x1c], edx
00794a45: mov dword ptr [esp + 0x24], edi
00794a49: test edi, edi
00794a4b: je 0x794a5c
00794a4d: mov eax, dword ptr [edi]
00794a4f: mov edx, dword ptr [eax + 0x20]
00794a52: call edx
00794a54: mov esi, eax
00794a56: mov dword ptr [esp + 0x14], esi
00794a5a: jmp 0x794a68
00794a5c: mov dword ptr [esp + 0x14], 0
00794a64: mov esi, dword ptr [esp + 0x14]
00794a68: mov ecx, dword ptr [edi + 4]
00794a6b: xor eax, eax
00794a6d: lea ecx, [ecx]
00794a70: test ecx, ecx
00794a72: je 0x794a87
00794a74: mov eax, dword ptr [ecx + 0x14]
00794a77: dec eax
00794a78: neg eax
00794a7a: sbb eax, eax
00794a7c: not eax
00794a7e: and eax, ecx
00794a80: mov ecx, dword ptr [ecx + 4]
00794a83: je 0x794a70
00794a85: jmp 0x794a8f
00794a87: test eax, eax
00794a89: je 0x794d5c
00794a8f: push esi
00794a90: call 0x6e6400
00794a95: test eax, eax
00794a97: je 0x794d5c
00794a9d: mov eax, dword ptr [0x1dee620]
00794aa2: mov eax, dword ptr [eax + 0x38]
00794aa5: cmp dword ptr [eax + 0x18], 4
00794aa9: jne 0x794d5c
00794aaf: cmp dword ptr [eax + 0x24], 0
00794ab3: je 0x794d5c
00794ab9: cmp dword ptr [0x1c4f03c], 0
00794ac0: je 0x794d5c
00794ac6: mov ecx, dword ptr [0x1c4f020]
00794acc: mov ebx, dword ptr [ecx*4 + 0x1c4eb08]
00794ad3: xor eax, eax
00794ad5: cmp ebx, eax
00794ad7: je 0x794d5c
00794add: cmp ebx, esi
00794adf: je 0x794d5c
00794ae5: xorps xmm0, xmm0
00794ae8: push eax
00794ae9: push esi
00794aea: lea edx, [esp + 0x38]
00794aee: lea ecx, [esp + 0x48]
00794af2: mov dword ptr [esp + 0x38], eax
00794af6: mov dword ptr [esp + 0x3c], eax
00794afa: mov dword ptr [esp + 0x40], eax
00794afe: movss dword ptr [esp + 0x44], xmm0
00794b04: call 0x786970
00794b09: push esi
00794b0a: lea edx, [esp + 0x34]
00794b0e: lea ecx, [esp + 0x44]
00794b12: call 0x6e7420
00794b17: cmp dword ptr [esp + 0x8bc], 0
00794b1f: je 0x794b4a
00794b21: mov ecx, esi
00794b23: call 0x6bb520
00794b28: mov edx, dword ptr [esp + 0x8c0]
00794b2f: mov ecx, dword ptr [esp + 0x8bc]
00794b36: push edx
00794b37: mov edx, esi
00794b39: call 0x76b960
00794b3e: mov eax, 2
00794b43: pop edi
00794b44: pop esi
00794b45: pop ebx
00794b46: mov esp, ebp
00794b48: pop ebp
00794b49: ret 
00794b4a: mov eax, dword ptr [edi + 0x18]
00794b4d: mov dword ptr [esp + 0x28], eax
00794b51: call 0x880380
00794b56: mov ecx, dword ptr [edi + 0x20]
00794b59: movss xmm1, dword ptr [ecx + 0x38]
00794b5e: xorps xmm0, xmm0
00794b61: cvtsi2ss xmm0, eax
00794b65: mulss xmm1, xmm0
00794b69: comiss xmm1, dword ptr [0xf0fc08]
00794b70: movss dword ptr [esp + 0x20], xmm0
00794b76: mov dword ptr [esp + 0x18], 1
00794b7e: ja 0x794b88
00794b80: mov dword ptr [esp + 0x18], 0
00794b88: mov edx, dword ptr [esp + 0x1c]
00794b8c: push edx
00794b8d: mov edi, ebx
00794b8f: call 0x74aa20
00794b94: test eax, eax
00794b96: jne 0x794c2c
00794b9c: mov edi, dword ptr [esp + 0x840]
00794ba3: xor edx, edx
00794ba5: test edi, edi
00794ba7: jle 0x794c2c
00794bad: movss xmm1, dword ptr [0xec6fc0]
00794bb5: movss xmm0, dword ptr [esp + 0x20]
00794bbb: lea eax, [esp + 0x40]
00794bbf: nop 
00794bc0: cmp dword ptr [esp + 0x18], 0
00794bc5: mov esi, dword ptr [eax]
00794bc7: je 0x794bdd
00794bc9: mov ecx, dword ptr [esi + 0x20]
00794bcc: movss xmm2, dword ptr [ecx + 0x38]
00794bd1: xorps xmm3, xmm3
00794bd4: mulss xmm2, xmm0
00794bd8: comiss xmm3, xmm2
00794bdb: ja 0x794c06
00794bdd: cmp esi, ebx
00794bdf: jne 0x794c06
00794be1: mov ecx, dword ptr [eax + 0x104]
00794be7: lea ecx, [ecx + ecx*4]
00794bea: movss xmm2, dword ptr [eax + ecx*8 + 0x20]
00794bf0: comiss xmm2, xmm1
00794bf3: jbe 0x794c06
00794bf5: cmp dword ptr [eax + 0x10c], 1
00794bfc: jne 0x794c12
00794bfe: mov ecx, dword ptr [ebx + 0x14]
00794c01: cmp dword ptr [ecx], -1
00794c04: jne 0x794c12
00794c06: inc edx
00794c07: add eax, 0x200
00794c0c: cmp edx, edi
00794c0e: jl 0x794bc0
00794c10: .byte 0xeb

3over4 data0xec6fc0 operand0x8d0e05 candidate-start0x8d0df0
008d0df0: push ecx
008d0df1: push esi
008d0df2: mov esi, edx
008d0df4: push edi
008d0df5: mov edi, ecx
008d0df7: mov edx, 1
008d0dfc: mov ecx, esi
008d0dfe: call 0x6d5f00
008d0e03: fmul dword ptr [0xec6fc0]
008d0e09: mov edx, 2
008d0e0e: mov ecx, esi
008d0e10: fstp dword ptr [esp + 8]
008d0e14: call 0x6d5f00
008d0e19: fmul dword ptr [0xec6fd0]
008d0e1f: push 0
008d0e21: push 0
008d0e23: push 0
008d0e25: fadd dword ptr [esp + 0x14]
008d0e29: push 0
008d0e2b: push 0
008d0e2d: push 0x802a0
008d0e32: mov edx, esi
008d0e34: fstp dword ptr [esp + 0x20]
008d0e38: mov ecx, edi
008d0e3a: call 0x8cec40
008d0e3f: fadd dword ptr [esp + 8]
008d0e43: pop edi
008d0e44: pop esi
008d0e45: pop ecx
008d0e46: ret 
008d0e47: mov eax, dword ptr [0xcccccccc]
008d0e4c: int3 
008d0e4d: int3 
008d0e4e: int3 
008d0e4f: int3 
008d0e50: push 0
008d0e52: push 3
008d0e54: call 0x8cf250
008d0e59: ret 
008d0e5a: ror esp, 0xcc
008d0e5d: int3 
008d0e5e: int3 
008d0e5f: int3 
008d0e60: sub esp, 8
008d0e63: push ebx
008d0e64: push esi

3over4 data0xec6fc0 operand0x8d0eba candidate-start0x8d0e60
008d0e60: sub esp, 8
008d0e63: push ebx
008d0e64: push esi
008d0e65: mov esi, edx
008d0e67: mov ebx, dword ptr [esi + 0xb00]
008d0e6d: push edi
008d0e6e: mov edi, ecx
008d0e70: mov edx, 1
008d0e75: mov ecx, esi
008d0e77: call 0x6d5f00
008d0e7c: fmul dword ptr [0xec6fd0]
008d0e82: mov ecx, ebx
008d0e84: fmul dword ptr [0xec6fc4]
008d0e8a: fstp dword ptr [esp + 0xc]
008d0e8e: call 0xcb4460
008d0e93: mov ebx, dword ptr [esi + 0xb00]
008d0e99: xorps xmm0, xmm0
008d0e9c: cvtsi2ss xmm0, eax
008d0ea0: mulss xmm0, dword ptr [esp + 0xc]
008d0ea6: mov edx, 2
008d0eab: mov ecx, esi
008d0ead: movss dword ptr [esp + 0xc], xmm0
008d0eb3: call 0x6d5f00
008d0eb8: fmul dword ptr [0xec6fc0]
008d0ebe: mov ecx, ebx
008d0ec0: fmul dword ptr [0xec6fc4]
008d0ec6: fstp dword ptr [esp + 0x10]
008d0eca: call 0xcb44c0
008d0ecf: push 0
008d0ed1: push 0
008d0ed3: push 0
008d0ed5: xorps xmm0, xmm0
008d0ed8: push 0
008d0eda: cvtsi2ss xmm0, eax
008d0ede: mulss xmm0, dword ptr [esp + 0x20]
008d0ee4: addss xmm0, dword ptr [esp + 0x1c]
008d0eea: push 0
008d0eec: push 0x1a0
008d0ef1: mov edx, esi
008d0ef3: mov ecx, edi
008d0ef5: movss dword ptr [esp + 0x24], xmm0
008d0efb: call 0x8cec40
008d0f00: fadd dword ptr [esp + 0xc]
008d0f04: pop edi
008d0f05: pop esi
008d0f06: pop ebx
008d0f07: add esp, 8
008d0f0a: ret 
008d0f0b: cli 
008d0f0c: int3 
008d0f0d: int3 
008d0f0e: int3 
008d0f0f: int3 
008d0f10: push ecx
008d0f11: push esi
008d0f12: mov esi, edx
008d0f14: mov edx, 0xe
008d0f19: .byte 0x8b

3over4 data0xec6fc0 operand0x8d1eed candidate-start0x8d18f0
008d18f0: push esi
008d18f1: push edi
008d18f2: call 0x6b2250
008d18f7: mov edi, dword ptr [eax]
008d18f9: push 0xe1
008d18fe: push 0xb6158414
008d1903: xor esi, esi
008d1905: push esi
008d1906: mov ecx, eax
008d1908: mov eax, dword ptr [edi + 4]
008d190b: push esi
008d190c: lea edx, [esi + 0x10]
008d190f: call eax
008d1911: cmp eax, esi
008d1913: je 0x8d1943
008d1915: movss xmm0, dword ptr [0xec74bc]
008d191d: movss dword ptr [eax + 8], xmm0
008d1922: movss xmm0, dword ptr [0xec98c8]
008d192a: mov dword ptr [eax + 4], 5
008d1931: movss dword ptr [eax + 0xc], xmm0
008d1936: mov dword ptr [eax], 0xf399cc
008d193c: mov dword ptr [0x1e16b3c], eax
008d1941: jmp 0x8d1949
008d1943: mov dword ptr [0x1e16b3c], esi
008d1949: call 0x6b2250
008d194e: mov edi, dword ptr [eax]
008d1950: push 0xe1
008d1955: push 0xb6158414
008d195a: push esi
008d195b: mov ecx, eax
008d195d: mov eax, dword ptr [edi + 4]
008d1960: push esi
008d1961: mov edx, 0x10
008d1966: call eax
008d1968: cmp eax, esi
008d196a: je 0x8d199a
008d196c: movss xmm0, dword ptr [0xec893c]
008d1974: movss dword ptr [eax + 8], xmm0
008d1979: movss xmm0, dword ptr [0xec98cc]
008d1981: mov dword ptr [eax + 4], 0xe
008d1988: movss dword ptr [eax + 0xc], xmm0
008d198d: mov dword ptr [eax], 0xf399dc
008d1993: mov dword ptr [0x1e16b60], eax
008d1998: jmp 0x8d19a0
008d199a: mov dword ptr [0x1e16b60], esi
008d19a0: call 0x6b2250
008d19a5: mov edi, dword ptr [eax]
008d19a7: push 0xe1
008d19ac: push 0xb6158414
008d19b1: push esi
008d19b2: mov ecx, eax
008d19b4: mov eax, dword ptr [edi + 4]
008d19b7: push esi
008d19b8: mov edx, 0x10
008d19bd: call eax
008d19bf: cmp eax, esi
008d19c1: je 0x8d19f1
008d19c3: movss xmm0, dword ptr [0xec8938]
008d19cb: movss dword ptr [eax + 8], xmm0
008d19d0: movss xmm0, dword ptr [0xec893c]
008d19d8: mov dword ptr [eax + 4], 9
008d19df: movss dword ptr [eax + 0xc], xmm0
008d19e4: mov dword ptr [eax], 0xf399ec
008d19ea: mov dword ptr [0x1e16b4c], eax
008d19ef: jmp 0x8d19f7
008d19f1: mov dword ptr [0x1e16b4c], esi
008d19f7: call 0x6b2250
008d19fc: mov edi, dword ptr [eax]
008d19fe: push 0xe1
008d1a03: push 0xb6158414
008d1a08: push esi
008d1a09: mov ecx, eax
008d1a0b: mov eax, dword ptr [edi + 4]
008d1a0e: push esi
008d1a0f: mov edx, 0x10
008d1a14: call eax
008d1a16: cmp eax, esi
008d1a18: je 0x8d1a48
008d1a1a: movss xmm0, dword ptr [0xec98c8]
008d1a22: movss dword ptr [eax + 8], xmm0
008d1a27: movss xmm0, dword ptr [0xed5a0c]
008d1a2f: mov dword ptr [eax + 4], 0xb
008d1a36: movss dword ptr [eax + 0xc], xmm0
008d1a3b: mov dword ptr [eax], 0xf399fc
008d1a41: mov dword ptr [0x1e16b54], eax
008d1a46: jmp 0x8d1a4e
008d1a48: mov dword ptr [0x1e16b54], esi
008d1a4e: call 0x6b2250
008d1a53: mov edi, dword ptr [eax]
008d1a55: push 0xe1
008d1a5a: push 0xb6158414
008d1a5f: push esi
008d1a60: mov ecx, eax
008d1a62: mov eax, dword ptr [edi + 4]
008d1a65: push esi
008d1a66: mov edx, 0x10
008d1a6b: call eax
008d1a6d: cmp eax, esi
008d1a6f: je 0x8d1a9f
008d1a71: mov dword ptr [eax + 4], 0xc
008d1a78: movss xmm0, dword ptr [0xf39814]
008d1a80: movss dword ptr [eax + 8], xmm0
008d1a85: movss xmm0, dword ptr [0xec8944]
008d1a8d: movss dword ptr [eax + 0xc], xmm0
008d1a92: mov dword ptr [eax], 0xf39a0c
008d1a98: mov dword ptr [0x1e16b58], eax
008d1a9d: jmp 0x8d1aa5
008d1a9f: mov dword ptr [0x1e16b58], esi
008d1aa5: call 0x6b2250
008d1aaa: mov edi, dword ptr [eax]
008d1aac: push 0xe1
008d1ab1: push 0xb6158414
008d1ab6: push esi
008d1ab7: mov ecx, eax
008d1ab9: mov eax, dword ptr [edi + 4]
008d1abc: push esi
008d1abd: mov edx, 0x10
008d1ac2: call eax
008d1ac4: cmp eax, esi
008d1ac6: je 0x8d1af6
008d1ac8: mov dword ptr [eax + 4], 0xa
008d1acf: movss xmm0, dword ptr [0xf39814]
008d1ad7: movss dword ptr [eax + 8], xmm0
008d1adc: movss xmm0, dword ptr [0xec8944]
008d1ae4: movss dword ptr [eax + 0xc], xmm0
008d1ae9: mov dword ptr [eax], 0xf39a1c
008d1aef: mov dword ptr [0x1e16b50], eax
008d1af4: jmp 0x8d1afc
008d1af6: mov dword ptr [0x1e16b50], esi
008d1afc: call 0x6b2250
008d1b01: mov edi, dword ptr [eax]
008d1b03: push 0xe1
008d1b08: push 0xb6158414
008d1b0d: push esi
008d1b0e: mov ecx, eax
008d1b10: mov eax, dword ptr [edi + 4]
008d1b13: push esi
008d1b14: mov edx, 0x10
008d1b19: call eax
008d1b1b: cmp eax, esi
008d1b1d: je 0x8d1b4d
008d1b1f: movss xmm0, dword ptr [0xec9604]
008d1b27: movss dword ptr [eax + 8], xmm0
008d1b2c: movss xmm0, dword ptr [0xec703c]
008d1b34: mov dword ptr [eax + 4], 6
008d1b3b: movss dword ptr [eax + 0xc], xmm0
008d1b40: mov dword ptr [eax], 0xf39a2c
008d1b46: mov dword ptr [0x1e16b40], eax
008d1b4b: jmp 0x8d1b53
008d1b4d: mov dword ptr [0x1e16b40], esi
008d1b53: call 0x6b2250
008d1b58: mov edi, dword ptr [eax]
008d1b5a: push 0xe1
008d1b5f: push 0xb6158414
008d1b64: push esi
008d1b65: mov ecx, eax
008d1b67: mov eax, dword ptr [edi + 4]
008d1b6a: push esi
008d1b6b: mov edx, 0x10
008d1b70: call eax
008d1b72: cmp eax, esi
008d1b74: je 0x8d1ba4
008d1b76: movss xmm0, dword ptr [0xec893c]
008d1b7e: movss dword ptr [eax + 8], xmm0
008d1b83: movss xmm0, dword ptr [0xec98cc]
008d1b8b: mov dword ptr [eax + 4], 2
008d1b92: movss dword ptr [eax + 0xc], xmm0
008d1b97: mov dword ptr [eax], 0xf39a3c
008d1b9d: mov dword ptr [0x1e16b30], eax
008d1ba2: jmp 0x8d1baa
008d1ba4: mov dword ptr [0x1e16b30], esi
008d1baa: call 0x6b2250
008d1baf: mov edi, dword ptr [eax]
008d1bb1: push 0xe1
008d1bb6: push 0xb6158414
008d1bbb: push esi
008d1bbc: mov ecx, eax
008d1bbe: mov eax, dword ptr [edi + 4]
008d1bc1: push esi
008d1bc2: mov edx, 0x10
008d1bc7: call eax
008d1bc9: cmp eax, esi
008d1bcb: je 0x8d1bfb
008d1bcd: movss xmm0, dword ptr [0xf2d358]
008d1bd5: movss dword ptr [eax + 8], xmm0
008d1bda: movss xmm0, dword ptr [0xec98cc]
008d1be2: mov dword ptr [eax + 4], 0xd
008d1be9: movss dword ptr [eax + 0xc], xmm0
008d1bee: mov dword ptr [eax], 0xf39a4c
008d1bf4: mov dword ptr [0x1e16b5c], eax
008d1bf9: jmp 0x8d1c01
008d1bfb: mov dword ptr [0x1e16b5c], esi
008d1c01: call 0x6b2250
008d1c06: mov edi, dword ptr [eax]
008d1c08: push 0xe1
008d1c0d: push 0xb6158414
008d1c12: push esi
008d1c13: mov ecx, eax
008d1c15: mov eax, dword ptr [edi + 4]
008d1c18: push esi
008d1c19: mov edx, 0x10
008d1c1e: call eax
008d1c20: cmp eax, esi
008d1c22: je 0x8d1c52
008d1c24: movss xmm0, dword ptr [0xf2d5d8]
008d1c2c: movss dword ptr [eax + 8], xmm0
008d1c31: movss xmm0, dword ptr [0xec7070]
008d1c39: mov dword ptr [eax + 4], 7
008d1c40: movss dword ptr [eax + 0xc], xmm0
008d1c45: mov dword ptr [eax], 0xf39a64
008d1c4b: mov dword ptr [0x1e16b44], eax
008d1c50: jmp 0x8d1c58
008d1c52: mov dword ptr [0x1e16b44], esi
008d1c58: call 0x6b2250
008d1c5d: mov edi, dword ptr [eax]
008d1c5f: push 0xe1
008d1c64: push 0xb6158414
008d1c69: push esi
008d1c6a: mov ecx, eax
008d1c6c: mov eax, dword ptr [edi + 4]
008d1c6f: push esi
008d1c70: mov edx, 0x10
008d1c75: call eax
008d1c77: cmp eax, esi
008d1c79: je 0x8d1ca9
008d1c7b: mov dword ptr [eax + 4], 3
008d1c82: movss xmm0, dword ptr [0xf39814]
008d1c8a: movss dword ptr [eax + 8], xmm0
008d1c8f: movss xmm0, dword ptr [0xec893c]
008d1c97: movss dword ptr [eax + 0xc], xmm0
008d1c9c: mov dword ptr [eax], 0xf39a74
008d1ca2: mov dword ptr [0x1e16b34], eax
008d1ca7: jmp 0x8d1caf
008d1ca9: mov dword ptr [0x1e16b34], esi
008d1caf: call 0x6b2250
008d1cb4: mov edi, dword ptr [eax]
008d1cb6: push 0xe1
008d1cbb: push 0xb6158414
008d1cc0: push esi
008d1cc1: mov ecx, eax
008d1cc3: mov eax, dword ptr [edi + 4]
008d1cc6: push esi
008d1cc7: mov edx, 0x10
008d1ccc: call eax
008d1cce: cmp eax, esi
008d1cd0: je 0x8d1d00
008d1cd2: movss xmm0, dword ptr [0xed0058]
008d1cda: movss dword ptr [eax + 8], xmm0
008d1cdf: movss xmm0, dword ptr [0xec7978]
008d1ce7: mov dword ptr [eax + 4], 1
008d1cee: movss dword ptr [eax + 0xc], xmm0
008d1cf3: mov dword ptr [eax], 0xf39a84
008d1cf9: mov dword ptr [0x1e16b2c], eax
008d1cfe: jmp 0x8d1d06
008d1d00: mov dword ptr [0x1e16b2c], esi
008d1d06: call 0x6b2250
008d1d0b: mov edi, dword ptr [eax]
008d1d0d: push 0xe1
008d1d12: push 0xb6158414
008d1d17: push esi
008d1d18: mov ecx, eax
008d1d1a: mov eax, dword ptr [edi + 4]
008d1d1d: push esi
008d1d1e: mov edx, 0x10
008d1d23: call eax
008d1d25: cmp eax, esi
008d1d27: je 0x8d1d57
008d1d29: movss xmm0, dword ptr [0xf2d708]
008d1d31: movss dword ptr [eax + 8], xmm0
008d1d36: movss xmm0, dword ptr [0xec8944]
008d1d3e: mov dword ptr [eax + 4], 4
008d1d45: movss dword ptr [eax + 0xc], xmm0
008d1d4a: mov dword ptr [eax], 0xf39a94
008d1d50: mov dword ptr [0x1e16b38], eax
008d1d55: jmp 0x8d1d5d
008d1d57: mov dword ptr [0x1e16b38], esi
008d1d5d: call 0x6b2250
008d1d62: mov edi, dword ptr [eax]
008d1d64: push 0xe1
008d1d69: push 0xb6158414
008d1d6e: push esi
008d1d6f: mov ecx, eax
008d1d71: mov eax, dword ptr [edi + 4]
008d1d74: push esi
008d1d75: mov edx, 0x10
008d1d7a: call eax
008d1d7c: cmp eax, esi
008d1d7e: je 0x8d1dae
008d1d80: movss xmm0, dword ptr [0xf39ab0]
008d1d88: movss dword ptr [eax + 8], xmm0
008d1d8d: movss xmm0, dword ptr [0xec98cc]
008d1d95: mov dword ptr [eax + 4], 0x10
008d1d9c: movss dword ptr [eax + 0xc], xmm0
008d1da1: mov dword ptr [eax], 0xf39aa4
008d1da7: mov dword ptr [0x1e16b68], eax
008d1dac: jmp 0x8d1db4
008d1dae: mov dword ptr [0x1e16b68], esi
008d1db4: call 0x6b2250
008d1db9: mov edi, dword ptr [eax]
008d1dbb: push 0xe1
008d1dc0: push 0xb6158414
008d1dc5: push esi
008d1dc6: mov ecx, eax
008d1dc8: mov eax, dword ptr [edi + 4]
008d1dcb: push esi
008d1dcc: mov edx, 0x10
008d1dd1: call eax
008d1dd3: cmp eax, esi
008d1dd5: je 0x8d1e05
008d1dd7: mov dword ptr [eax + 4], 0x11
008d1dde: movss xmm0, dword ptr [0xf39814]
008d1de6: movss dword ptr [eax + 8], xmm0
008d1deb: movss xmm0, dword ptr [0xec98c8]
008d1df3: movss dword ptr [eax + 0xc], xmm0
008d1df8: mov dword ptr [eax], 0xf39ab8
008d1dfe: mov dword ptr [0x1e16b6c], eax
008d1e03: jmp 0x8d1e0b
008d1e05: mov dword ptr [0x1e16b6c], esi
008d1e0b: call 0x6b2250
008d1e10: mov edi, dword ptr [eax]
008d1e12: push 0xe1
008d1e17: push 0xb6158414
008d1e1c: push esi
008d1e1d: mov ecx, eax
008d1e1f: mov eax, dword ptr [edi + 4]
008d1e22: push esi
008d1e23: mov edx, 0x10
008d1e28: call eax
008d1e2a: cmp eax, esi
008d1e2c: je 0x8d1e5c
008d1e2e: movss xmm0, dword ptr [0xec8938]
008d1e36: movss dword ptr [eax + 8], xmm0
008d1e3b: movss xmm0, dword ptr [0xec98c8]
008d1e43: mov dword ptr [eax + 4], 0x12
008d1e4a: movss dword ptr [eax + 0xc], xmm0
008d1e4f: mov dword ptr [eax], 0xf39ac8
008d1e55: mov dword ptr [0x1e16b70], eax
008d1e5a: jmp 0x8d1e62
008d1e5c: mov dword ptr [0x1e16b70], esi
008d1e62: call 0x6b2250
008d1e67: mov edi, dword ptr [eax]
008d1e69: push 0xe1
008d1e6e: push 0xb6158414
008d1e73: push esi
008d1e74: mov ecx, eax
008d1e76: mov eax, dword ptr [edi + 4]
008d1e79: push esi
008d1e7a: mov edx, 0x10
008d1e7f: call eax
008d1e81: cmp eax, esi
008d1e83: je 0x8d1eb3
008d1e85: movss xmm0, dword ptr [0xf2d5d8]
008d1e8d: movss dword ptr [eax + 8], xmm0
008d1e92: movss xmm0, dword ptr [0xec98cc]
008d1e9a: mov dword ptr [eax + 4], 8
008d1ea1: movss dword ptr [eax + 0xc], xmm0
008d1ea6: mov dword ptr [eax], 0xf39ad8
008d1eac: mov dword ptr [0x1e16b48], eax
008d1eb1: jmp 0x8d1eb9
008d1eb3: mov dword ptr [0x1e16b48], esi
008d1eb9: call 0x6b2250
008d1ebe: mov edi, dword ptr [eax]
008d1ec0: push 0xe1
008d1ec5: push 0xb6158414
008d1eca: push esi
008d1ecb: mov ecx, eax
008d1ecd: mov eax, dword ptr [edi + 4]
008d1ed0: push esi
008d1ed1: mov edx, 0x10
008d1ed6: call eax
008d1ed8: cmp eax, esi
008d1eda: je 0x8d1f0a
008d1edc: movss xmm0, dword ptr [0xec703c]
008d1ee4: movss dword ptr [eax + 8], xmm0
008d1ee9: movss xmm0, dword ptr [0xec6fc0]
008d1ef1: mov dword ptr [eax + 4], 0xf
008d1ef8: movss dword ptr [eax + 0xc], xmm0
008d1efd: mov dword ptr [eax], 0xf39ae8
008d1f03: mov dword ptr [0x1e16b64], eax
008d1f08: jmp 0x8d1f10
008d1f0a: mov dword ptr [0x1e16b64], esi
008d1f10: call 0x6b2250
008d1f15: mov edi, dword ptr [eax]
008d1f17: push 0xe1
008d1f1c: push 0xb6158414
008d1f21: push esi
008d1f22: mov ecx, eax
008d1f24: mov eax, dword ptr [edi + 4]
008d1f27: push esi
008d1f28: mov edx, 0x10
008d1f2d: call eax
008d1f2f: cmp eax, esi
008d1f31: je 0x8d1f61
008d1f33: movss xmm0, dword ptr [0xec74bc]
008d1f3b: movss dword ptr [eax + 8], xmm0
008d1f40: movss xmm0, dword ptr [0xec98cc]
008d1f48: .byte 0xc7
008d1f49: inc eax
008d1f4a: add al, 0x15
008d1f4c: .byte 0x00

3over4 data0xec6fc0 operand0x8d7084 candidate-start0x8d7054
008d7054: add byte ptr [ebx - 0x367a07b1], cl
008d705a: je 0x8d71d6
008d7060: call 0x92ac50
008d7065: test eax, eax
008d7067: jne 0x8d71d6
008d706d: mov ecx, dword ptr [0x10e23b8]
008d7073: call 0xd963d0
008d7078: mov ecx, eax
008d707a: mov dword ptr [ebp - 0x20], edx
008d707d: call 0xd96410
008d7082: fld dword ptr [0xec6fc0]
008d7088: fcompi st(1)
008d708a: fstp st(0)
008d708c: jbe 0x8d71d6
008d7092: mov edx, dword ptr [edi - 8]
008d7095: mov ecx, 0x7e850bff
008d709a: call 0x92b870
008d709f: mov dword ptr [ebp - 0x10], eax
008d70a2: test eax, eax
008d70a4: je 0x8d71d6
008d70aa: movzx esi, byte ptr [edi + 4]
008d70ae: shl esi, 6
008d70b1: add esi, 0x12bf050
008d70b7: cmp byte ptr [edi + 5], 0
008d70bb: je 0x8d70c5
008d70bd: mov edx, dword ptr [esi + 0xc]
008d70c0: mov dword ptr [ebp - 4], edx
008d70c3: jmp 0x8d70cb
008d70c5: mov eax, dword ptr [esi + 4]
008d70c8: mov dword ptr [ebp - 4], eax
008d70cb: mov ecx, dword ptr [edi - 8]
008d70ce: call 0x923670
008d70d3: mov ecx, dword ptr [0x10e23b8]
008d70d9: mov dword ptr [ebp - 0x2c], eax
008d70dc: test eax, eax
008d70de: je 0x8d710d
008d70e0: .byte 0xe8
008d70e1: jmp 0x8d70d5
008d70e3: dec ebx

3over4 data0xec6fc0 operand0x8e6fe2 candidate-start0x8e6ee0
008e6ee0: push ecx
008e6ee1: cmp dword ptr [0x1e17028], 0
008e6ee8: je 0x8e7059
008e6eee: mov edx, dword ptr [0x1e185d4]
008e6ef4: mov ecx, dword ptr [0x1e185d8]
008e6efa: test edx, edx
008e6efc: jne 0x8e6f05
008e6efe: mov eax, 0x1e171b0
008e6f03: jmp 0x8e6f10
008e6f05: lea eax, [ecx + ecx*4]
008e6f08: shl eax, 4
008e6f0b: add eax, 0x1e17070
008e6f10: push esi
008e6f11: mov esi, dword ptr [eax]
008e6f13: test edx, edx
008e6f15: jne 0x8e6f1e
008e6f17: mov ecx, 0x1e171b0
008e6f1c: jmp 0x8e6f2a
008e6f1e: lea ecx, [ecx + ecx*4]
008e6f21: shl ecx, 4
008e6f24: add ecx, 0x1e17070
008e6f2a: mov eax, dword ptr [ecx]
008e6f2c: movss xmm0, dword ptr [eax*4 + 0xf3dd40]
008e6f35: movss dword ptr [esp + 4], xmm0
008e6f3b: cmp eax, 2
008e6f3e: jne 0x8e6f6b
008e6f40: call 0x8d77d0
008e6f45: mov edx, dword ptr [0x12bf328]
008e6f4b: push ecx
008e6f4c: mov ecx, dword ptr [0x12bf32c]
008e6f52: xorps xmm0, xmm0
008e6f55: cvtsi2ss xmm0, eax
008e6f59: movss dword ptr [esp], xmm0
008e6f5e: call 0x404870
008e6f63: fsubr dword ptr [esp + 4]
008e6f67: fstp dword ptr [esp + 4]
008e6f6b: movss xmm0, dword ptr [esp + 4]
008e6f71: ucomiss xmm0, dword ptr [0xec6ff0]
008e6f78: lahf 
008e6f79: test ah, 0x44
008e6f7c: jnp 0x8e7058
008e6f82: call 0x8dfd20
008e6f87: test eax, eax
008e6f89: jne 0x8e703c
008e6f8f: xorps xmm1, xmm1
008e6f92: movaps xmm0, xmm1
008e6f95: cmp dword ptr [0x1e17028], eax
008e6f9b: je 0x8e6fa5
008e6f9d: movss xmm0, dword ptr [0x1e17018]
008e6fa5: comiss xmm1, xmm0
008e6fa8: jb 0x8e6ff4
008e6faa: mov ecx, 0x1e17008
008e6faf: movss dword ptr [0x1e17018], xmm1
008e6fb7: call 0x403fd0
008e6fbc: mov eax, dword ptr [0x1ce716c]
008e6fc1: cmp dword ptr [eax + 0x1bc], 3
008e6fc8: je 0x8e6ff4
008e6fca: mov eax, dword ptr [0x1e17064]
008e6fcf: test eax, eax
008e6fd1: je 0x8e6fd5
008e6fd3: call eax
008e6fd5: call 0x8827a0
008e6fda: test eax, eax
008e6fdc: jne 0x8e6ff4
008e6fde: movss xmm0, dword ptr [0xec6fc0]
008e6fe6: push ecx
008e6fe7: lea ecx, [eax + 1]
008e6fea: movss dword ptr [esp], xmm0
008e6fef: call 0x880e70
008e6ff4: test byte ptr [0x1e17020], 6
008e6ffb: je 0x8e703c
008e6ffd: cmp dword ptr [0x1e17044], 0
008e7004: jne 0x8e703c
008e7006: mov eax, dword ptr [0x1e185d4]
008e700b: test eax, eax
008e700d: je 0x8e7014
008e700f: cmp eax, 6
008e7012: jne 0x8e703c
008e7014: cmp esi, 0x12
008e7017: jne 0x8e7024
008e7019: cmp dword ptr [0x1c48960], 0
008e7020: je 0x8e703c
008e7022: jmp 0x8e7032
008e7024: cmp esi, 0x14
008e7027: jne 0x8e7032
008e7029: cmp dword ptr [0x1c487c0], 2
008e7030: jne 0x8e703c
008e7032: mov ecx, 0x1e17008
008e7037: call 0x404030
008e703c: call 0x8dfd20
008e7041: .byte 0x85

3over4 data0xec6fc0 operand0x8e7939 candidate-start0x8e7620
008e7620: sub esp, 8
008e7623: mov eax, dword ptr [0x1e185d4]
008e7628: mov ecx, dword ptr [0x1e1702c]
008e762e: push ebx
008e762f: push ebp
008e7630: push esi
008e7631: xor esi, esi
008e7633: push edi
008e7634: mov ebp, eax
008e7636: mov dword ptr [esp + 0x14], ecx
008e763a: cmp eax, esi
008e763c: jne 0x8e7668
008e763e: mov ecx, 0x1e171b0
008e7643: call 0x8dceb0
008e7648: test eax, eax
008e764a: je 0x8e7668
008e764c: mov edx, dword ptr [0x1e171b0]
008e7652: call 0x8e0460
008e7657: mov edx, dword ptr [0x1d95600]
008e765d: mov dword ptr [edx], 1
008e7663: call 0x8bcc10
008e7668: call 0x8e6ee0
008e766d: cmp ebp, 0xa
008e7670: jne 0x8e76c3
008e7672: call 0x8d8de0
008e7677: test eax, eax
008e7679: je 0x8e779e
008e767f: xor ecx, ecx
008e7681: call 0x8827b0
008e7686: mov dword ptr [0x1e17044], esi
008e768c: cmp dword ptr [0x1e185d4], esi
008e7692: jne 0x8e76a6
008e7694: mov eax, 0x1e171b0
008e7699: mov dword ptr [eax + 0x10], esi
008e769c: call 0x8e0ae0
008e76a1: jmp 0x8e778f
008e76a6: mov eax, dword ptr [0x1e185d8]
008e76ab: lea eax, [eax + eax*4]
008e76ae: shl eax, 4
008e76b1: add eax, 0x1e17070
008e76b6: mov dword ptr [eax + 0x10], esi
008e76b9: call 0x8e0ae0
008e76be: jmp 0x8e778f
008e76c3: cmp ebp, 6
008e76c6: je 0x8e7779
008e76cc: cmp ebp, esi
008e76ce: je 0x8e7779
008e76d4: cmp ebp, 2
008e76d7: je 0x8e7779
008e76dd: cmp ebp, 3
008e76e0: je 0x8e7779
008e76e6: cmp ebp, 4
008e76e9: je 0x8e7779
008e76ef: cmp ebp, 5
008e76f2: je 0x8e7779
008e76f8: call 0x8dfb90
008e76fd: mov esi, eax
008e76ff: xor edx, edx
008e7701: mov ecx, esi
008e7703: call 0x8e1c90
008e7708: mov ebx, eax
008e770a: mov edi, dword ptr [ebx + 0x18]
008e770d: mov ecx, ebx
008e770f: call 0x9022a0
008e7714: test eax, eax
008e7716: jne 0x8e7779
008e7718: mov eax, dword ptr [edi + 4]
008e771b: mov ecx, dword ptr [eax]
008e771d: and ecx, 0xff000000
008e7723: cmp ecx, 0x48000000
008e7729: je 0x8e7779
008e772b: mov ecx, edi
008e772d: call 0x7bbb20
008e7732: test eax, eax
008e7734: jne 0x8e7779
008e7736: cmp esi, 8
008e7739: je 0x8e7779
008e773b: cmp esi, 9
008e773e: je 0x8e7779
008e7740: cmp esi, 2
008e7743: je 0x8e7779
008e7745: mov esi, dword ptr [0x1cb6aec]
008e774b: test esi, esi
008e774d: je 0x8e776b
008e774f: nop 
008e7750: cmp dword ptr [esi], 0
008e7753: je 0x8e7761
008e7755: mov edx, 8
008e775a: mov ecx, esi
008e775c: call 0x7a1d80
008e7761: mov esi, dword ptr [esi + 0x11c]
008e7767: test esi, esi
008e7769: jne 0x8e7750
008e776b: push 0
008e776d: mov edx, 0xf30d60
008e7772: mov ecx, ebx
008e7774: call 0x404db0
008e7779: cmp ebp, 7
008e777c: jne 0x8e779e
008e777e: movss xmm0, dword ptr [0x146b618]
008e7786: comiss xmm0, dword ptr [0x1e17058]
008e778d: jb 0x8e779e
008e778f: mov dword ptr [0x1e185f0], 1
008e7799: call 0x8dfe90
008e779e: cmp dword ptr [0x1e17044], 0
008e77a5: je 0x8e77c6
008e77a7: call 0x8827a0
008e77ac: test eax, eax
008e77ae: jne 0x8e77c6
008e77b0: movss xmm0, dword ptr [0xec6fd4]
008e77b8: push ecx
008e77b9: lea ecx, [eax + 1]
008e77bc: movss dword ptr [esp], xmm0
008e77c1: call 0x880e70
008e77c6: cmp ebp, 6
008e77c9: je 0x8e77da
008e77cb: call 0x6f63f0
008e77d0: pop edi
008e77d1: pop esi
008e77d2: pop ebp
008e77d3: pop ebx
008e77d4: add esp, 8
008e77d7: ret 4
008e77da: cmp dword ptr [0x1e185d4], 0
008e77e1: jne 0x8e77ea
008e77e3: mov esi, 0x1e171b0
008e77e8: jmp 0x8e77fb
008e77ea: mov eax, dword ptr [0x1e185d8]
008e77ef: lea esi, [eax + eax*4]
008e77f2: shl esi, 4
008e77f5: add esi, 0x1e17070
008e77fb: mov edi, dword ptr [esi]
008e77fd: call 0x6c5b30
008e7802: fstp dword ptr [esp + 0x10]
008e7806: movss xmm0, dword ptr [edi*4 + 0xf3d6a0]
008e780f: xorps xmm2, xmm2
008e7812: comiss xmm0, xmm2
008e7815: lea ebp, [edi*4 + 0xf3d6a0]
008e781c: jbe 0x8e782f
008e781e: movaps xmm1, xmm0
008e7821: subss xmm1, dword ptr [esp + 0x10]
008e7827: movss dword ptr [esp + 0x10], xmm1
008e782d: jmp 0x8e7835
008e782f: movss xmm1, dword ptr [esp + 0x10]
008e7835: mov ecx, esi
008e7837: call 0x8dceb0
008e783c: test eax, eax
008e783e: jne 0x8e7853
008e7840: comiss xmm0, xmm2
008e7843: jb 0x8e784a
008e7845: comiss xmm1, xmm0
008e7848: jae 0x8e7853
008e784a: cmp dword ptr [0x1e185f4], 0
008e7851: je 0x8e7866
008e7853: call 0x8d8cc0
008e7858: test eax, eax
008e785a: jne 0x8e7866
008e785c: cmp dword ptr [esi + 8], eax
008e785f: jne 0x8e7866
008e7861: lea ebx, [eax + 1]
008e7864: jmp 0x8e7868
008e7866: xor ebx, ebx
008e7868: comiss xmm0, xmm2
008e786b: jb 0x8e7890
008e786d: comiss xmm1, xmm0
008e7870: jbe 0x8e7890
008e7872: cmp dword ptr [0x1e17028], 0
008e7879: je 0x8e7890
008e787b: mov ecx, 0x1e17008
008e7880: call 0x403fd0
008e7885: xorps xmm0, xmm0
008e7888: movss dword ptr [0x1e17018], xmm0
008e7890: test ebx, ebx
008e7892: je 0x8e7967
008e7898: cmp dword ptr [0x1e17028], 0
008e789f: je 0x8e78ab
008e78a1: mov ecx, 0x1e17008
008e78a6: call 0x403fd0
008e78ab: xor edx, edx
008e78ad: cmp dword ptr [0x1e185f4], edx
008e78b3: mov ecx, esi
008e78b5: sete dl
008e78b8: call 0x8dcca0
008e78bd: cmp dword ptr [edi*4 + 0xf3d518], 0
008e78c5: je 0x8e78d1
008e78c7: movd xmm0, dword ptr [esi + 4]
008e78cc: cvtdq2ps xmm0, xmm0
008e78cf: jmp 0x8e78d7
008e78d1: movss xmm0, dword ptr [esp + 0x10]
008e78d7: movss dword ptr [esp + 0x10], xmm0
008e78dd: call 0x8dfd20
008e78e2: test eax, eax
008e78e4: je 0x8e78ff
008e78e6: cmp dword ptr [0x1e17650], 0
008e78ed: jne 0x8e78ff
008e78ef: mov ecx, dword ptr [0x1e17674]
008e78f5: cmp ecx, -1
008e78f8: je 0x8e78ff
008e78fa: call 0x4a8260
008e78ff: mov edx, dword ptr [0x1e185d8]
008e7905: movss xmm0, dword ptr [esp + 0x10]
008e790b: push edx
008e790c: push ecx
008e790d: mov edx, edi
008e790f: mov ecx, 0x1e17200
008e7914: movss dword ptr [esp], xmm0
008e7919: call 0x8d7cb0
008e791e: mov dword ptr [0x1e1702c], 0
008e7928: call 0x8dfe90
008e792d: movss xmm0, dword ptr [0x146b618]
008e7935: addss xmm0, dword ptr [0xec6fc0]
008e793d: movss dword ptr [0x1e17058], xmm0
008e7945: call 0x8dfd20
008e794a: test eax, eax
008e794c: je 0x8e7967
008e794e: cmp dword ptr [0x1e17650], 0
008e7955: jne 0x8e7967
008e7957: mov ecx, dword ptr [0x1e17674]
008e795d: cmp ecx, -1
008e7960: je 0x8e7967
008e7962: call 0x4a8260
008e7967: cmp dword ptr [0x1e1702c], 0
008e796e: jne 0x8e799a
008e7970: test ebx, ebx
008e7972: jne 0x8e799a
008e7974: cmp dword ptr [0x1e17028], ebx
008e797a: je 0x8e7990
008e797c: cmp edi, 0x12
008e797f: je 0x8e7990
008e7981: cmp edi, 0x14
008e7984: je 0x8e7990
008e7986: mov ecx, 0x1e17008
008e798b: call 0x404030
008e7990: .byte 0xc7
008e7991: add eax, 0x1e1702c
008e7996: add dword ptr [eax], eax
008e7998: .byte 0x00

3over4 data0xec6fc0 operand0x906757 candidate-start0x9066d0
009066d0: mov edx, dword ptr [ecx + 0x14]
009066d3: movss xmm0, dword ptr [edi + 0x3c]
009066d8: movss xmm1, dword ptr [0xec9898]
009066e0: push ebx
009066e1: mov ebx, dword ptr [esp + 8]
009066e5: mov eax, 1
009066ea: push esi
009066eb: test byte ptr [edx + 0x1c], al
009066ee: je 0x906711
009066f0: cmp dword ptr [edx], -1
009066f3: je 0x90670d
009066f5: mov edx, dword ptr [ecx + 0x18]
009066f8: movss xmm2, dword ptr [0x146b618]
00906700: subss xmm2, dword ptr [edx + 0x328]
00906708: comiss xmm2, xmm1
0090670b: jb 0x906711
0090670d: mov edx, eax
0090670f: jmp 0x906713
00906711: xor edx, edx
00906713: movss xmm2, dword ptr [0xec7044]
0090671b: comiss xmm2, xmm0
0090671e: jbe 0x906724
00906720: mov dword ptr [ebx], eax
00906722: jmp 0x906745
00906724: movss xmm2, dword ptr [0xec7070]
0090672c: comiss xmm2, xmm0
0090672f: jbe 0x906739
00906731: mov dword ptr [ebx], 8
00906737: jmp 0x906745
00906739: neg edx
0090673b: sbb edx, edx
0090673d: and edx, 0xe
00906740: add edx, 2
00906743: mov dword ptr [ebx], edx
00906745: mov esi, dword ptr [edi + 0x58]
00906748: test esi, esi
0090674a: je 0x9067ac
0090674c: mov edx, dword ptr [esi + 0x14]
0090674f: movss xmm0, dword ptr [edx + 0x14]
00906754: comiss xmm0, dword ptr [0xec6fc0]
0090675b: jbe 0x9067ac
0090675d: test byte ptr [edx + 0x1c], al
00906760: je 0x90677f
00906762: cmp dword ptr [edx], -1
00906765: je 0x906781
00906767: mov edx, dword ptr [esi + 0x18]
0090676a: movss xmm0, dword ptr [0x146b618]
00906772: subss xmm0, dword ptr [edx + 0x328]
0090677a: comiss xmm0, xmm1
0090677d: jae 0x906781
0090677f: xor eax, eax
00906781: neg eax
00906783: sbb eax, eax
00906785: and eax, 0x4000000
0090678a: cmp dword ptr [edi + 8], 0
0090678e: lea esi, [eax + 0x4000000]
00906794: mov eax, dword ptr [ebx + 0x18]
00906797: je 0x90679b
00906799: neg eax
0090679b: mov edx, dword ptr [edi]
0090679d: push eax
0090679e: push 0
009067a0: push esi
009067a1: call 0x7daf90
009067a6: test eax, eax
009067a8: je 0x9067ac
009067aa: mov dword ptr [ebx], esi
009067ac: pop esi
009067ad: pop ebx
009067ae: ret 4
009067b1: cmc 
009067b2: int3 
009067b3: int3 
009067b4: int3 
009067b5: int3 
009067b6: int3 

3over4 data0xec6fc0 operand0x909b12 candidate-start0x909b00
00909b00: sub esp, 8
00909b03: push ebp
00909b04: mov ebp, ecx
00909b06: test edx, edx
00909b08: je 0x909c01
00909b0e: movss xmm0, dword ptr [0xec6fc0]
00909b16: push ebx
00909b17: mov ebx, dword ptr [ebp + 0x14]
00909b1a: comiss xmm0, dword ptr [ebx + 0x14]
00909b1e: ja 0x909c00
00909b24: push esi
00909b25: push edi
00909b26: lea edi, [edx + edx*2]
00909b29: mov eax, dword ptr [edi*4 + 0x12ee390]
00909b30: mov esi, dword ptr [edi*4 + 0x12ee388]
00909b37: lea edi, [edi*4 + 0x12ee388]
00909b3e: mov dword ptr [esp + 0x10], eax
00909b42: call 0x401bf0
00909b47: mov ebx, dword ptr [ebx + 0x18]
00909b4a: mov ecx, ebx
00909b4c: sub ecx, eax
00909b4e: cmp dword ptr [esp + 0x10], 0
00909b53: mov dword ptr [esp + 0x14], eax
00909b57: movsx eax, cx
00909b5a: je 0x909b5e
00909b5c: neg eax
00909b5e: mov edi, dword ptr [edi + 4]
00909b61: mov ecx, eax
00909b63: xor eax, eax
00909b65: test edi, edi
00909b67: jle 0x909bfe
00909b6d: lea ecx, [ecx]
00909b70: .byte 0x39
00909b71: dec esi

3over4 data0xec6fc0 operand0x90c77e candidate-start0x90c470
0090c470: sub esp, 0x10
0090c473: push ebp
0090c474: mov ebp, dword ptr [esp + 0x20]
0090c478: push esi
0090c479: mov esi, eax
0090c47b: push edi
0090c47c: mov ecx, esi
0090c47e: call 0x6f7b30
0090c483: mov edi, eax
0090c485: test edi, edi
0090c487: jne 0x90c498
0090c489: fld dword ptr [0xf1bdfc]
0090c48f: pop edi
0090c490: pop esi
0090c491: pop ebp
0090c492: add esp, 0x10
0090c495: ret 0xc
0090c498: mov eax, dword ptr [esp + 0x20]
0090c49c: dec eax
0090c49d: je 0x90c6e3
0090c4a3: dec eax
0090c4a4: je 0x90c56b
0090c4aa: dec eax
0090c4ab: je 0x90c4bc
0090c4ad: fld dword ptr [0xec6fc4]
0090c4b3: pop edi
0090c4b4: pop esi
0090c4b5: pop ebp
0090c4b6: add esp, 0x10
0090c4b9: ret 0xc
0090c4bc: mov ecx, esi
0090c4be: call 0x6b5300
0090c4c3: mov esi, eax
0090c4c5: mov ecx, esi
0090c4c7: call 0x6d64c0
0090c4cc: fmul dword ptr [0xec9604]
0090c4d2: mov ecx, esi
0090c4d4: fstp dword ptr [esp + 0x28]
0090c4d8: call 0x6d6760
0090c4dd: fmul dword ptr [0xec9604]
0090c4e3: mov ecx, esi
0090c4e5: fadd dword ptr [esp + 0x28]
0090c4e9: fstp dword ptr [esp + 0x28]
0090c4ed: call 0x6d6300
0090c4f2: fmul dword ptr [0xec9604]
0090c4f8: mov ecx, esi
0090c4fa: fadd dword ptr [esp + 0x28]
0090c4fe: fstp dword ptr [esp + 0x28]
0090c502: call 0x6d62f0
0090c507: fmul dword ptr [0xec9604]
0090c50d: mov ecx, esi
0090c50f: fadd dword ptr [esp + 0x28]
0090c513: fstp dword ptr [esp + 0x28]
0090c517: call 0x6d6540
0090c51c: fmul dword ptr [0xec9604]
0090c522: mov eax, dword ptr [esp + 0x24]
0090c526: mov ecx, edi
0090c528: fadd dword ptr [esp + 0x28]
0090c52c: fst dword ptr [esp + 0x28]
0090c530: fstp dword ptr [eax]
0090c532: call 0x6b5300
0090c537: mov esi, eax
0090c539: mov ecx, esi
0090c53b: call 0x6d67f0
0090c540: fmul dword ptr [0xec98c8]
0090c546: mov ecx, esi
0090c548: fstp dword ptr [esp + 0x24]
0090c54c: call 0x6d6760
0090c551: fmul dword ptr [0xec74bc]
0090c557: pop edi
0090c558: pop esi
0090c559: fadd dword ptr [esp + 0x1c]
0090c55d: fst dword ptr [ebp]
0090c560: pop ebp
0090c561: fsub dword ptr [esp + 0x1c]
0090c565: add esp, 0x10
0090c568: ret 0xc
0090c56b: push ebx
0090c56c: mov ebx, dword ptr [esi + 0xb00]
0090c572: mov ecx, esi
0090c574: call 0x6b5300
0090c579: movss xmm0, dword ptr [ebx + 0xc]
0090c57e: push ecx
0090c57f: mov esi, eax
0090c581: movss dword ptr [esp], xmm0
0090c586: call 0xa2bcf0
0090c58b: cvttss2si ecx, dword ptr [ebx + 0x10]
0090c590: mov dword ptr [esp + 0x2c], eax
0090c594: fild dword ptr [esp + 0x2c]
0090c598: fmul dword ptr [0xec6fc4]
0090c59e: fstp dword ptr [esp + 0x24]
0090c5a2: call 0xa2bd60
0090c5a7: mov dword ptr [esp + 0x2c], eax
0090c5ab: fild dword ptr [esp + 0x2c]
0090c5af: mov ecx, esi
0090c5b1: fmul dword ptr [0xec6fc4]
0090c5b7: fstp dword ptr [esp + 0x2c]
0090c5bb: call 0x6d68e0
0090c5c0: mov ecx, esi
0090c5c2: fstp dword ptr [esp + 0x10]
0090c5c6: call 0x6d6760
0090c5cb: fstp dword ptr [esp + 0x14]
0090c5cf: mov ecx, esi
0090c5d1: call 0x6d6560
0090c5d6: fstp dword ptr [esp + 0x18]
0090c5da: mov ecx, esi
0090c5dc: call 0x6d6570
0090c5e1: fstp dword ptr [esp + 0x1c]
0090c5e5: mov ecx, esi
0090c5e7: call 0x6d6580
0090c5ec: fld dword ptr [0xec7978]
0090c5f2: fmul st(1), st(0)
0090c5f4: mov ecx, dword ptr [esp + 0x28]
0090c5f8: fld dword ptr [esp + 0x2c]
0090c5fc: fmul st(1)
0090c5fe: fld dword ptr [esp + 0x24]
0090c602: fmul dword ptr [0xec9604]
0090c608: faddp st(1)
0090c60a: fld dword ptr [esp + 0x10]
0090c60e: fmul st(2)
0090c610: faddp st(1)
0090c612: fld dword ptr [esp + 0x14]
0090c616: fmul st(2)
0090c618: faddp st(1)
0090c61a: fld dword ptr [esp + 0x18]
0090c61e: fmul dword ptr [0xec74bc]
0090c624: faddp st(1)
0090c626: fld dword ptr [esp + 0x1c]
0090c62a: fmulp st(2)
0090c62c: faddp st(1)
0090c62e: faddp st(1)
0090c630: fst dword ptr [esp + 0x1c]
0090c634: fstp dword ptr [ecx]
0090c636: mov ebx, dword ptr [edi + 0xb00]
0090c63c: mov ecx, edi
0090c63e: call 0x6b5300
0090c643: movss xmm0, dword ptr [ebx + 0xc]
0090c648: push ecx
0090c649: mov esi, eax
0090c64b: movss dword ptr [esp], xmm0
0090c650: call 0xa2bcf0
0090c655: cvttss2si ecx, dword ptr [ebx + 0x10]
0090c65a: mov dword ptr [esp + 0x28], eax
0090c65e: fild dword ptr [esp + 0x28]
0090c662: fmul dword ptr [0xec6fc4]
0090c668: fstp dword ptr [esp + 0x24]
0090c66c: call 0xa2bd60
0090c671: mov dword ptr [esp + 0x28], eax
0090c675: fild dword ptr [esp + 0x28]
0090c679: mov ecx, esi
0090c67b: fmul dword ptr [0xec6fc4]
0090c681: fstp dword ptr [esp + 0x2c]
0090c685: call 0x6d68e0
0090c68a: mov ecx, esi
0090c68c: fstp dword ptr [esp + 0x10]
0090c690: call 0x6d6760
0090c695: fstp dword ptr [esp + 0x14]
0090c699: mov ecx, esi
0090c69b: call 0x6d6640
0090c6a0: fmul dword ptr [0xec7044]
0090c6a6: fld dword ptr [esp + 0x2c]
0090c6aa: pop ebx
0090c6ab: fld dword ptr [0xec7978]
0090c6b1: pop edi
0090c6b2: fmul st(1), st(0)
0090c6b4: pop esi
0090c6b5: fld dword ptr [esp + 0x18]
0090c6b9: fld dword ptr [0xec9604]
0090c6bf: fmul st(1), st(0)
0090c6c1: fxch st(3)
0090c6c3: faddp st(1)
0090c6c5: fld dword ptr [esp + 4]
0090c6c9: fmulp st(3)
0090c6cb: faddp st(2)
0090c6cd: fmul dword ptr [esp + 8]
0090c6d1: faddp st(1)
0090c6d3: faddp st(1)
0090c6d5: fst dword ptr [ebp]
0090c6d8: pop ebp
0090c6d9: fsubr dword ptr [esp + 0xc]
0090c6dd: add esp, 0x10
0090c6e0: ret 0xc
0090c6e3: mov ecx, esi
0090c6e5: call 0x6b5300
0090c6ea: mov esi, eax
0090c6ec: mov ecx, esi
0090c6ee: call 0x6d64c0
0090c6f3: fmul dword ptr [0xec8938]
0090c6f9: mov ecx, esi
0090c6fb: fstp dword ptr [esp + 0x28]
0090c6ff: call 0x6d6760
0090c704: fmul dword ptr [0xec8938]
0090c70a: mov ecx, esi
0090c70c: fadd dword ptr [esp + 0x28]
0090c710: fstp dword ptr [esp + 0x28]
0090c714: call 0x6d6300
0090c719: fmul dword ptr [0xec7978]
0090c71f: mov ecx, esi
0090c721: fadd dword ptr [esp + 0x28]
0090c725: fstp dword ptr [esp + 0x28]
0090c729: call 0x6d62f0
0090c72e: fmul dword ptr [0xec7978]
0090c734: mov ecx, esi
0090c736: fadd dword ptr [esp + 0x28]
0090c73a: fstp dword ptr [esp + 0x28]
0090c73e: call 0x6d6850
0090c743: fmul dword ptr [0xec7090]
0090c749: mov ecx, esi
0090c74b: fadd dword ptr [esp + 0x28]
0090c74f: fstp dword ptr [esp + 0x28]
0090c753: call 0x6d6840
0090c758: fmul dword ptr [0xec7090]
0090c75e: mov edx, dword ptr [esp + 0x24]
0090c762: mov ecx, edi
0090c764: fadd dword ptr [esp + 0x28]
0090c768: fst dword ptr [esp + 0x28]
0090c76c: fstp dword ptr [edx]
0090c76e: call 0x6b5300
0090c773: mov esi, eax
0090c775: mov ecx, esi
0090c777: call 0x6d67f0
0090c77c: fmul dword ptr [0xec6fc0]
0090c782: mov ecx, esi
0090c784: fstp dword ptr [esp + 0x24]
0090c788: call 0x6d6760
0090c78d: fmul dword ptr [0xec6fd0]
0090c793: pop edi
0090c794: pop esi
0090c795: fadd dword ptr [esp + 0x1c]
0090c799: fst dword ptr [ebp]
0090c79c: pop ebp
0090c79d: fsubr dword ptr [esp + 0x1c]
0090c7a1: add esp, 0x10
0090c7a4: ret 0xc
0090c7a7: sub cl, ah
0090c7a9: int3 
0090c7aa: int3 
0090c7ab: int3 
0090c7ac: int3 
0090c7ad: int3 
0090c7ae: int3 
0090c7af: int3 
0090c7b0: imul eax, eax, 0x94
0090c7b6: push ebx
0090c7b7: push ebp
0090c7b8: mov ebp, dword ptr [esp + 0xc]
0090c7bc: push esi
0090c7bd: add eax, 0x1e19980
0090c7c2: push edi
0090c7c3: mov edi, eax
0090c7c5: xor esi, esi
0090c7c7: cmp dword ptr [edi + 0x90], esi
0090c7cd: jle 0x90c7f8
0090c7cf: mov ebx, edi
0090c7d1: movss xmm0, dword ptr [0xec98e4]
0090c7d9: push ecx
0090c7da: mov edx, ebx
0090c7dc: mov ecx, ebp

3over4 data0xec6fc0 operand0x9249bf candidate-start0x9248c0
009248c0: mov eax, dword ptr [0x1e85cd4]
009248c5: movzx ecx, byte ptr [eax + 0x924bc4]
009248cc: sub esp, 0xc
009248cf: push ebx
009248d0: push ebp
009248d1: push esi
009248d2: push edi
009248d3: jmp dword ptr [ecx*4 + 0x924bac]
009248da: mov esi, 1
009248df: jmp 0x92492c
009248e1: xor edi, edi
009248e3: xor esi, esi
009248e5: xor ebx, ebx
009248e7: lea ebp, [edi + 1]
009248ea: jmp 0x924932
009248ec: call 0x60ee70
009248f1: mov esi, eax
009248f3: test esi, esi
009248f5: je 0x9248e1
009248f7: mov ecx, esi
009248f9: call 0x60e2c0
009248fe: test eax, eax
00924900: jne 0x924918
00924902: mov ecx, esi
00924904: call 0x60e2e0
00924909: test eax, eax
0092490b: jne 0x924918
0092490d: mov ecx, esi
0092490f: call 0x60e300
00924914: test eax, eax
00924916: je 0x9248e1
00924918: mov edi, 1
0092491d: xor esi, esi
0092491f: jmp 0x92492e
00924921: xor edi, edi
00924923: xor esi, esi
00924925: lea ebx, [edi + 1]
00924928: jmp 0x924930
0092492a: xor esi, esi
0092492c: xor edi, edi
0092492e: xor ebx, ebx
00924930: xor ebp, ebp
00924932: call 0xc70470
00924937: movss xmm0, dword ptr [0xec6e14]
0092493f: test eax, eax
00924941: je 0x92498f
00924943: xor edi, edi
00924945: xor esi, esi
00924947: xor ebp, ebp
00924949: call 0x4a8350
0092494e: movzx eax, word ptr [eax + 0x30]
00924952: xorps xmm2, xmm2
00924955: xorps xmm0, xmm0
00924958: cvtsi2ss xmm0, eax
0092495c: comiss xmm2, xmm0
0092495f: movss dword ptr [esp + 0x14], xmm0
00924965: jae 0x924ad4
0092496b: test esi, esi
0092496d: jne 0x924ad4
00924973: test edi, edi
00924975: je 0x9249ee
00924977: movss xmm0, dword ptr [0xec6e14]
0092497f: movss xmm2, dword ptr [0xec708c]
00924987: movaps xmm1, xmm0
0092498a: jmp 0x924ac3
0092498f: test ebp, ebp
00924991: jne 0x924b06
00924997: test ebx, ebx
00924999: je 0x924949
0092499b: cmp dword ptr [0x1e85d08], ebp
009249a1: je 0x9249dd
009249a3: xorps xmm0, xmm0
009249a6: movss dword ptr [esp + 0x10], xmm0
009249ac: call 0x4a8350
009249b1: movzx edx, word ptr [eax + 0x30]
009249b5: movss xmm2, dword ptr [esp + 0x10]
009249bb: movss xmm1, dword ptr [0xec6fc0]
009249c3: xorps xmm0, xmm0
009249c6: cvtsi2ss xmm0, edx
009249ca: movss dword ptr [esp + 0x14], xmm0
009249d0: movss xmm0, dword ptr [0xec6e14]
009249d8: jmp 0x924b69
009249dd: xorps xmm2, xmm2
009249e0: movaps xmm1, xmm0
009249e3: movss dword ptr [esp + 0x14], xmm0
009249e9: jmp 0x924ac3
009249ee: call 0x9f4070
009249f3: mov esi, eax
009249f5: call 0x9f4080
009249fa: movzx ecx, byte ptr [eax + 0x7c]
009249fe: movzx edx, byte ptr [esi + 0x7c]
00924a02: movss xmm2, dword ptr [esi + 0x9c]
00924a0a: xorps xmm0, xmm0
00924a0d: cvtsi2ss xmm0, ecx
00924a11: mulss xmm0, dword ptr [0xec6fc4]
00924a19: movaps xmm1, xmm0
00924a1c: .byte 0xf3
00924a1d: .byte 0x0f
00924a1e: pop esp

3over4 data0xec6fc0 operand0x924ae0 candidate-start0x9248c0
009248c0: mov eax, dword ptr [0x1e85cd4]
009248c5: movzx ecx, byte ptr [eax + 0x924bc4]
009248cc: sub esp, 0xc
009248cf: push ebx
009248d0: push ebp
009248d1: push esi
009248d2: push edi
009248d3: jmp dword ptr [ecx*4 + 0x924bac]
009248da: mov esi, 1
009248df: jmp 0x92492c
009248e1: xor edi, edi
009248e3: xor esi, esi
009248e5: xor ebx, ebx
009248e7: lea ebp, [edi + 1]
009248ea: jmp 0x924932
009248ec: call 0x60ee70
009248f1: mov esi, eax
009248f3: test esi, esi
009248f5: je 0x9248e1
009248f7: mov ecx, esi
009248f9: call 0x60e2c0
009248fe: test eax, eax
00924900: jne 0x924918
00924902: mov ecx, esi
00924904: call 0x60e2e0
00924909: test eax, eax
0092490b: jne 0x924918
0092490d: mov ecx, esi
0092490f: call 0x60e300
00924914: test eax, eax
00924916: je 0x9248e1
00924918: mov edi, 1
0092491d: xor esi, esi
0092491f: jmp 0x92492e
00924921: xor edi, edi
00924923: xor esi, esi
00924925: lea ebx, [edi + 1]
00924928: jmp 0x924930
0092492a: xor esi, esi
0092492c: xor edi, edi
0092492e: xor ebx, ebx
00924930: xor ebp, ebp
00924932: call 0xc70470
00924937: movss xmm0, dword ptr [0xec6e14]
0092493f: test eax, eax
00924941: je 0x92498f
00924943: xor edi, edi
00924945: xor esi, esi
00924947: xor ebp, ebp
00924949: call 0x4a8350
0092494e: movzx eax, word ptr [eax + 0x30]
00924952: xorps xmm2, xmm2
00924955: xorps xmm0, xmm0
00924958: cvtsi2ss xmm0, eax
0092495c: comiss xmm2, xmm0
0092495f: movss dword ptr [esp + 0x14], xmm0
00924965: jae 0x924ad4
0092496b: test esi, esi
0092496d: jne 0x924ad4
00924973: test edi, edi
00924975: je 0x9249ee
00924977: movss xmm0, dword ptr [0xec6e14]
0092497f: movss xmm2, dword ptr [0xec708c]
00924987: movaps xmm1, xmm0
0092498a: jmp 0x924ac3
0092498f: test ebp, ebp
00924991: jne 0x924b06
00924997: test ebx, ebx
00924999: je 0x924949
0092499b: cmp dword ptr [0x1e85d08], ebp
009249a1: je 0x9249dd
009249a3: xorps xmm0, xmm0
009249a6: movss dword ptr [esp + 0x10], xmm0
009249ac: call 0x4a8350
009249b1: movzx edx, word ptr [eax + 0x30]
009249b5: movss xmm2, dword ptr [esp + 0x10]
009249bb: movss xmm1, dword ptr [0xec6fc0]
009249c3: xorps xmm0, xmm0
009249c6: cvtsi2ss xmm0, edx
009249ca: movss dword ptr [esp + 0x14], xmm0
009249d0: movss xmm0, dword ptr [0xec6e14]
009249d8: jmp 0x924b69
009249dd: xorps xmm2, xmm2
009249e0: movaps xmm1, xmm0
009249e3: movss dword ptr [esp + 0x14], xmm0
009249e9: jmp 0x924ac3
009249ee: call 0x9f4070
009249f3: mov esi, eax
009249f5: call 0x9f4080
009249fa: movzx ecx, byte ptr [eax + 0x7c]
009249fe: movzx edx, byte ptr [esi + 0x7c]
00924a02: movss xmm2, dword ptr [esi + 0x9c]
00924a0a: xorps xmm0, xmm0
00924a0d: cvtsi2ss xmm0, ecx
00924a11: mulss xmm0, dword ptr [0xec6fc4]
00924a19: movaps xmm1, xmm0
00924a1c: subss xmm0, dword ptr [0xec6fd4]
00924a24: xorps xmm3, xmm3
00924a27: cvtsi2ss xmm3, edx
00924a2b: mulss xmm3, dword ptr [0xec6fc4]
00924a33: subss xmm1, xmm3
00924a37: addss xmm1, dword ptr [0xec6e14]
00924a3f: mulss xmm0, xmm2
00924a43: mulss xmm0, dword ptr [0xec7044]
00924a4b: mulss xmm1, xmm0
00924a4f: movss xmm0, dword ptr [0xec7378]
00924a57: mulss xmm1, dword ptr [0xec6fd4]
00924a5f: addss xmm1, dword ptr [0xec7978]
00924a67: sub esp, 8
00924a6a: movss dword ptr [esp + 4], xmm0
00924a70: movss xmm0, dword ptr [0xed5a0c]
00924a78: mov ecx, 0x10e23b8
00924a7d: movss dword ptr [esp + 0x20], xmm2
00924a83: movss dword ptr [esp + 0x18], xmm1
00924a89: movss dword ptr [esp], xmm0
00924a8e: call 0x417110
00924a93: fmul dword ptr [esp + 0x18]
00924a97: movss xmm0, dword ptr [0xec6e14]
00924a9f: fst dword ptr [esp + 0x18]
00924aa3: fld dword ptr [0xec7978]
00924aa9: fcompi st(1)
00924aab: fstp st(0)
00924aad: ja 0x924af6
00924aaf: movss xmm1, dword ptr [esp + 0x18]
00924ab5: comiss xmm1, xmm0
00924ab8: jbe 0x924ae9
00924aba: movaps xmm1, xmm0
00924abd: movss xmm2, dword ptr [esp + 0x10]
00924ac3: comiss xmm0, xmm1
00924ac6: ja 0x924b69
00924acc: movaps xmm1, xmm0
00924acf: jmp 0x924b69
00924ad4: movss xmm0, dword ptr [0xec6e14]
00924adc: movss xmm1, dword ptr [0xec6fc0]
00924ae4: jmp 0x924b69
00924ae9: movss xmm2, dword ptr [0xec6fc0]
00924af1: comiss xmm2, xmm1
00924af4: jbe 0x924abd
00924af6: movss xmm2, dword ptr [esp + 0x10]
00924afc: movss xmm1, dword ptr [0xec6fc0]
00924b04: jmp 0x924b69
00924b06: call 0x9f4070
00924b0b: mov esi, eax
00924b0d: call 0x9f4080
00924b12: mov edi, eax
00924b14: call 0x4a8350
00924b19: movzx eax, word ptr [eax + 0x30]
00924b1d: xorps xmm0, xmm0
00924b20: cvtsi2ss xmm0, eax
00924b24: movss dword ptr [esp + 0x14], xmm0
00924b2a: pxor xmm0, xmm0
00924b2e: movq qword ptr [0x12fd76c], xmm0
00924b36: movq qword ptr [0x12fd774], xmm0
00924b3e: .byte 0xe8
00924b3f: .byte 0x0d

3over4 data0xec6fc0 operand0x924aed candidate-start0x9248c0
009248c0: mov eax, dword ptr [0x1e85cd4]
009248c5: movzx ecx, byte ptr [eax + 0x924bc4]
009248cc: sub esp, 0xc
009248cf: push ebx
009248d0: push ebp
009248d1: push esi
009248d2: push edi
009248d3: jmp dword ptr [ecx*4 + 0x924bac]
009248da: mov esi, 1
009248df: jmp 0x92492c
009248e1: xor edi, edi
009248e3: xor esi, esi
009248e5: xor ebx, ebx
009248e7: lea ebp, [edi + 1]
009248ea: jmp 0x924932
009248ec: call 0x60ee70
009248f1: mov esi, eax
009248f3: test esi, esi
009248f5: je 0x9248e1
009248f7: mov ecx, esi
009248f9: call 0x60e2c0
009248fe: test eax, eax
00924900: jne 0x924918
00924902: mov ecx, esi
00924904: call 0x60e2e0
00924909: test eax, eax
0092490b: jne 0x924918
0092490d: mov ecx, esi
0092490f: call 0x60e300
00924914: test eax, eax
00924916: je 0x9248e1
00924918: mov edi, 1
0092491d: xor esi, esi
0092491f: jmp 0x92492e
00924921: xor edi, edi
00924923: xor esi, esi
00924925: lea ebx, [edi + 1]
00924928: jmp 0x924930
0092492a: xor esi, esi
0092492c: xor edi, edi
0092492e: xor ebx, ebx
00924930: xor ebp, ebp
00924932: call 0xc70470
00924937: movss xmm0, dword ptr [0xec6e14]
0092493f: test eax, eax
00924941: je 0x92498f
00924943: xor edi, edi
00924945: xor esi, esi
00924947: xor ebp, ebp
00924949: call 0x4a8350
0092494e: movzx eax, word ptr [eax + 0x30]
00924952: xorps xmm2, xmm2
00924955: xorps xmm0, xmm0
00924958: cvtsi2ss xmm0, eax
0092495c: comiss xmm2, xmm0
0092495f: movss dword ptr [esp + 0x14], xmm0
00924965: jae 0x924ad4
0092496b: test esi, esi
0092496d: jne 0x924ad4
00924973: test edi, edi
00924975: je 0x9249ee
00924977: movss xmm0, dword ptr [0xec6e14]
0092497f: movss xmm2, dword ptr [0xec708c]
00924987: movaps xmm1, xmm0
0092498a: jmp 0x924ac3
0092498f: test ebp, ebp
00924991: jne 0x924b06
00924997: test ebx, ebx
00924999: je 0x924949
0092499b: cmp dword ptr [0x1e85d08], ebp
009249a1: je 0x9249dd
009249a3: xorps xmm0, xmm0
009249a6: movss dword ptr [esp + 0x10], xmm0
009249ac: call 0x4a8350
009249b1: movzx edx, word ptr [eax + 0x30]
009249b5: movss xmm2, dword ptr [esp + 0x10]
009249bb: movss xmm1, dword ptr [0xec6fc0]
009249c3: xorps xmm0, xmm0
009249c6: cvtsi2ss xmm0, edx
009249ca: movss dword ptr [esp + 0x14], xmm0
009249d0: movss xmm0, dword ptr [0xec6e14]
009249d8: jmp 0x924b69
009249dd: xorps xmm2, xmm2
009249e0: movaps xmm1, xmm0
009249e3: movss dword ptr [esp + 0x14], xmm0
009249e9: jmp 0x924ac3
009249ee: call 0x9f4070
009249f3: mov esi, eax
009249f5: call 0x9f4080
009249fa: movzx ecx, byte ptr [eax + 0x7c]
009249fe: movzx edx, byte ptr [esi + 0x7c]
00924a02: movss xmm2, dword ptr [esi + 0x9c]
00924a0a: xorps xmm0, xmm0
00924a0d: cvtsi2ss xmm0, ecx
00924a11: mulss xmm0, dword ptr [0xec6fc4]
00924a19: movaps xmm1, xmm0
00924a1c: subss xmm0, dword ptr [0xec6fd4]
00924a24: xorps xmm3, xmm3
00924a27: cvtsi2ss xmm3, edx
00924a2b: mulss xmm3, dword ptr [0xec6fc4]
00924a33: subss xmm1, xmm3
00924a37: addss xmm1, dword ptr [0xec6e14]
00924a3f: mulss xmm0, xmm2
00924a43: mulss xmm0, dword ptr [0xec7044]
00924a4b: mulss xmm1, xmm0
00924a4f: movss xmm0, dword ptr [0xec7378]
00924a57: mulss xmm1, dword ptr [0xec6fd4]
00924a5f: addss xmm1, dword ptr [0xec7978]
00924a67: sub esp, 8
00924a6a: movss dword ptr [esp + 4], xmm0
00924a70: movss xmm0, dword ptr [0xed5a0c]
00924a78: mov ecx, 0x10e23b8
00924a7d: movss dword ptr [esp + 0x20], xmm2
00924a83: movss dword ptr [esp + 0x18], xmm1
00924a89: movss dword ptr [esp], xmm0
00924a8e: call 0x417110
00924a93: fmul dword ptr [esp + 0x18]
00924a97: movss xmm0, dword ptr [0xec6e14]
00924a9f: fst dword ptr [esp + 0x18]
00924aa3: fld dword ptr [0xec7978]
00924aa9: fcompi st(1)
00924aab: fstp st(0)
00924aad: ja 0x924af6
00924aaf: movss xmm1, dword ptr [esp + 0x18]
00924ab5: comiss xmm1, xmm0
00924ab8: jbe 0x924ae9
00924aba: movaps xmm1, xmm0
00924abd: movss xmm2, dword ptr [esp + 0x10]
00924ac3: comiss xmm0, xmm1
00924ac6: ja 0x924b69
00924acc: movaps xmm1, xmm0
00924acf: jmp 0x924b69
00924ad4: movss xmm0, dword ptr [0xec6e14]
00924adc: movss xmm1, dword ptr [0xec6fc0]
00924ae4: jmp 0x924b69
00924ae9: movss xmm2, dword ptr [0xec6fc0]
00924af1: comiss xmm2, xmm1
00924af4: jbe 0x924abd
00924af6: movss xmm2, dword ptr [esp + 0x10]
00924afc: movss xmm1, dword ptr [0xec6fc0]
00924b04: jmp 0x924b69
00924b06: call 0x9f4070
00924b0b: mov esi, eax
00924b0d: call 0x9f4080
00924b12: mov edi, eax
00924b14: call 0x4a8350
00924b19: movzx eax, word ptr [eax + 0x30]
00924b1d: xorps xmm0, xmm0
00924b20: cvtsi2ss xmm0, eax
00924b24: movss dword ptr [esp + 0x14], xmm0
00924b2a: pxor xmm0, xmm0
00924b2e: movq qword ptr [0x12fd76c], xmm0
00924b36: movq qword ptr [0x12fd774], xmm0
00924b3e: call 0x4a8350
00924b43: push eax
00924b44: push edi
00924b45: mov edx, esi
00924b47: mov ecx, 0x12fd76c
00924b4c: .byte 0xe8

3over4 data0xec6fc0 operand0x924b00 candidate-start0x9248c0
009248c0: mov eax, dword ptr [0x1e85cd4]
009248c5: movzx ecx, byte ptr [eax + 0x924bc4]
009248cc: sub esp, 0xc
009248cf: push ebx
009248d0: push ebp
009248d1: push esi
009248d2: push edi
009248d3: jmp dword ptr [ecx*4 + 0x924bac]
009248da: mov esi, 1
009248df: jmp 0x92492c
009248e1: xor edi, edi
009248e3: xor esi, esi
009248e5: xor ebx, ebx
009248e7: lea ebp, [edi + 1]
009248ea: jmp 0x924932
009248ec: call 0x60ee70
009248f1: mov esi, eax
009248f3: test esi, esi
009248f5: je 0x9248e1
009248f7: mov ecx, esi
009248f9: call 0x60e2c0
009248fe: test eax, eax
00924900: jne 0x924918
00924902: mov ecx, esi
00924904: call 0x60e2e0
00924909: test eax, eax
0092490b: jne 0x924918
0092490d: mov ecx, esi
0092490f: call 0x60e300
00924914: test eax, eax
00924916: je 0x9248e1
00924918: mov edi, 1
0092491d: xor esi, esi
0092491f: jmp 0x92492e
00924921: xor edi, edi
00924923: xor esi, esi
00924925: lea ebx, [edi + 1]
00924928: jmp 0x924930
0092492a: xor esi, esi
0092492c: xor edi, edi
0092492e: xor ebx, ebx
00924930: xor ebp, ebp
00924932: call 0xc70470
00924937: movss xmm0, dword ptr [0xec6e14]
0092493f: test eax, eax
00924941: je 0x92498f
00924943: xor edi, edi
00924945: xor esi, esi
00924947: xor ebp, ebp
00924949: call 0x4a8350
0092494e: movzx eax, word ptr [eax + 0x30]
00924952: xorps xmm2, xmm2
00924955: xorps xmm0, xmm0
00924958: cvtsi2ss xmm0, eax
0092495c: comiss xmm2, xmm0
0092495f: movss dword ptr [esp + 0x14], xmm0
00924965: jae 0x924ad4
0092496b: test esi, esi
0092496d: jne 0x924ad4
00924973: test edi, edi
00924975: je 0x9249ee
00924977: movss xmm0, dword ptr [0xec6e14]
0092497f: movss xmm2, dword ptr [0xec708c]
00924987: movaps xmm1, xmm0
0092498a: jmp 0x924ac3
0092498f: test ebp, ebp
00924991: jne 0x924b06
00924997: test ebx, ebx
00924999: je 0x924949
0092499b: cmp dword ptr [0x1e85d08], ebp
009249a1: je 0x9249dd
009249a3: xorps xmm0, xmm0
009249a6: movss dword ptr [esp + 0x10], xmm0
009249ac: call 0x4a8350
009249b1: movzx edx, word ptr [eax + 0x30]
009249b5: movss xmm2, dword ptr [esp + 0x10]
009249bb: movss xmm1, dword ptr [0xec6fc0]
009249c3: xorps xmm0, xmm0
009249c6: cvtsi2ss xmm0, edx
009249ca: movss dword ptr [esp + 0x14], xmm0
009249d0: movss xmm0, dword ptr [0xec6e14]
009249d8: jmp 0x924b69
009249dd: xorps xmm2, xmm2
009249e0: movaps xmm1, xmm0
009249e3: movss dword ptr [esp + 0x14], xmm0
009249e9: jmp 0x924ac3
009249ee: call 0x9f4070
009249f3: mov esi, eax
009249f5: call 0x9f4080
009249fa: movzx ecx, byte ptr [eax + 0x7c]
009249fe: movzx edx, byte ptr [esi + 0x7c]
00924a02: movss xmm2, dword ptr [esi + 0x9c]
00924a0a: xorps xmm0, xmm0
00924a0d: cvtsi2ss xmm0, ecx
00924a11: mulss xmm0, dword ptr [0xec6fc4]
00924a19: movaps xmm1, xmm0
00924a1c: subss xmm0, dword ptr [0xec6fd4]
00924a24: xorps xmm3, xmm3
00924a27: cvtsi2ss xmm3, edx
00924a2b: mulss xmm3, dword ptr [0xec6fc4]
00924a33: subss xmm1, xmm3
00924a37: addss xmm1, dword ptr [0xec6e14]
00924a3f: mulss xmm0, xmm2
00924a43: mulss xmm0, dword ptr [0xec7044]
00924a4b: mulss xmm1, xmm0
00924a4f: movss xmm0, dword ptr [0xec7378]
00924a57: mulss xmm1, dword ptr [0xec6fd4]
00924a5f: addss xmm1, dword ptr [0xec7978]
00924a67: sub esp, 8
00924a6a: movss dword ptr [esp + 4], xmm0
00924a70: movss xmm0, dword ptr [0xed5a0c]
00924a78: mov ecx, 0x10e23b8
00924a7d: movss dword ptr [esp + 0x20], xmm2
00924a83: movss dword ptr [esp + 0x18], xmm1
00924a89: movss dword ptr [esp], xmm0
00924a8e: call 0x417110
00924a93: fmul dword ptr [esp + 0x18]
00924a97: movss xmm0, dword ptr [0xec6e14]
00924a9f: fst dword ptr [esp + 0x18]
00924aa3: fld dword ptr [0xec7978]
00924aa9: fcompi st(1)
00924aab: fstp st(0)
00924aad: ja 0x924af6
00924aaf: movss xmm1, dword ptr [esp + 0x18]
00924ab5: comiss xmm1, xmm0
00924ab8: jbe 0x924ae9
00924aba: movaps xmm1, xmm0
00924abd: movss xmm2, dword ptr [esp + 0x10]
00924ac3: comiss xmm0, xmm1
00924ac6: ja 0x924b69
00924acc: movaps xmm1, xmm0
00924acf: jmp 0x924b69
00924ad4: movss xmm0, dword ptr [0xec6e14]
00924adc: movss xmm1, dword ptr [0xec6fc0]
00924ae4: jmp 0x924b69
00924ae9: movss xmm2, dword ptr [0xec6fc0]
00924af1: comiss xmm2, xmm1
00924af4: jbe 0x924abd
00924af6: movss xmm2, dword ptr [esp + 0x10]
00924afc: movss xmm1, dword ptr [0xec6fc0]
00924b04: jmp 0x924b69
00924b06: call 0x9f4070
00924b0b: mov esi, eax
00924b0d: call 0x9f4080
00924b12: mov edi, eax
00924b14: call 0x4a8350
00924b19: movzx eax, word ptr [eax + 0x30]
00924b1d: xorps xmm0, xmm0
00924b20: cvtsi2ss xmm0, eax
00924b24: movss dword ptr [esp + 0x14], xmm0
00924b2a: pxor xmm0, xmm0
00924b2e: movq qword ptr [0x12fd76c], xmm0
00924b36: movq qword ptr [0x12fd774], xmm0
00924b3e: call 0x4a8350
00924b43: push eax
00924b44: push edi
00924b45: mov edx, esi
00924b47: mov ecx, 0x12fd76c
00924b4c: call 0x9ebe60
00924b51: movss xmm1, dword ptr [0x12fd76c]
00924b59: .byte 0xf3
00924b5a: .byte 0x0f
00924b5b: .byte 0x10
00924b5c: .byte 0x15
00924b5d: js 0x924b36
00924b5f: das 

3over4 data0xec6fc0 operand0x9252c3 candidate-start0x9251b0
009251b0: sub esp, 0x18
009251b3: push esi
009251b4: mov esi, eax
009251b6: mov eax, dword ptr [0x12fd764]
009251bb: test eax, eax
009251bd: jns 0x9254f4
009251c3: call 0x510680
009251c8: test eax, eax
009251ca: jne 0x9251d8
009251cc: mov eax, 3
009251d1: pop esi
009251d2: add esp, 0x18
009251d5: ret 8
009251d8: cmp esi, 1
009251db: je 0x9251e1
009251dd: mov eax, esi
009251df: jmp 0x9251ec
009251e1: mov eax, dword ptr [esp + 0x24]
009251e5: mov eax, dword ptr [eax*4 + 0xf4271c]
009251ec: push ebx
009251ed: push ebp
009251ee: push edi
009251ef: mov edi, dword ptr [esp + 0x2c]
009251f3: lea ecx, [esp + 0x18]
009251f7: push ecx
009251f8: push eax
009251f9: push edi
009251fa: mov dword ptr [esp + 0x24], eax
009251fe: call 0x924be0
00925203: mov edx, dword ptr [esp + 0x18]
00925207: mov esi, eax
00925209: mov dword ptr [0x12fd760], edx
0092520f: mov eax, dword ptr [edi + 8]
00925212: cmp eax, dword ptr [0x12fd768]
00925218: jl 0x925246
0092521a: movzx ecx, byte ptr [esi + 0x92550c]
00925221: jmp dword ptr [ecx*4 + 0x9254fc]
00925228: mov esi, 6
0092522d: jmp 0x925423
00925232: mov esi, 7
00925237: jmp 0x925423
0092523c: mov esi, 0xe
00925241: jmp 0x925423
00925246: movss xmm7, dword ptr [0xec6e14]
0092524e: movss xmm6, dword ptr [0xec6fd4]
00925256: mov ecx, 0x3c
0092525b: mov dword ptr [esp + 0x18], 0
00925263: mov edx, dword ptr [edi + 8]
00925266: mov eax, dword ptr [edx*4 + 0x12fd798]
0092526d: cdq 
0092526e: xor ebx, ebx
00925270: idiv ecx
00925272: xorps xmm1, xmm1
00925275: movzx eax, byte ptr [esi + 0x925544]
0092527c: xorps xmm4, xmm4
0092527f: xorps xmm5, xmm5
00925282: cvtsi2ss xmm5, ecx
00925286: movaps xmm0, xmm7
00925289: movss dword ptr [esp + 0x24], xmm5
0092528f: movss dword ptr [esp + 0x10], xmm0
00925295: movss dword ptr [esp + 0x14], xmm1
0092529b: mov ebp, esi
0092529d: mov edi, esi
0092529f: cvtsi2ss xmm4, edx
009252a3: divss xmm4, xmm5
009252a7: movss dword ptr [esp + 0x20], xmm4
009252ad: jmp dword ptr [eax*4 + 0x925520]
009252b4: cmp dword ptr [esp + 0x30], 3
009252b9: jne 0x92537b
009252bf: movss xmm0, dword ptr [0xec6fc0]
009252c7: mov edi, 7
009252cc: jmp 0x925370
009252d1: movss xmm1, dword ptr [0xec8938]
009252d9: movss xmm0, dword ptr [0xec98c8]
009252e1: mov esi, 5
009252e6: movss dword ptr [esp + 0x14], xmm1
009252ec: lea edi, [esi - 4]
009252ef: jmp 0x925375
009252f4: movss xmm0, dword ptr [0xec6fc0]
009252fc: mov edi, 1
00925301: jmp 0x925375
00925303: movss xmm0, dword ptr [0xec98c8]
0092530b: mov edi, 7
00925310: jmp 0x925375
00925312: cmp dword ptr [0x1e85cd4], 0xc
00925319: jne 0x92537b
0092531b: mov ebp, 1
00925320: jmp 0x92537b
00925322: .byte 0x83

3over4 data0xec6fc0 operand0x9252f8 candidate-start0x9251b0
009251b0: sub esp, 0x18
009251b3: push esi
009251b4: mov esi, eax
009251b6: mov eax, dword ptr [0x12fd764]
009251bb: test eax, eax
009251bd: jns 0x9254f4
009251c3: call 0x510680
009251c8: test eax, eax
009251ca: jne 0x9251d8
009251cc: mov eax, 3
009251d1: pop esi
009251d2: add esp, 0x18
009251d5: ret 8
009251d8: cmp esi, 1
009251db: je 0x9251e1
009251dd: mov eax, esi
009251df: jmp 0x9251ec
009251e1: mov eax, dword ptr [esp + 0x24]
009251e5: mov eax, dword ptr [eax*4 + 0xf4271c]
009251ec: push ebx
009251ed: push ebp
009251ee: push edi
009251ef: mov edi, dword ptr [esp + 0x2c]
009251f3: lea ecx, [esp + 0x18]
009251f7: push ecx
009251f8: push eax
009251f9: push edi
009251fa: mov dword ptr [esp + 0x24], eax
009251fe: call 0x924be0
00925203: mov edx, dword ptr [esp + 0x18]
00925207: mov esi, eax
00925209: mov dword ptr [0x12fd760], edx
0092520f: mov eax, dword ptr [edi + 8]
00925212: cmp eax, dword ptr [0x12fd768]
00925218: jl 0x925246
0092521a: movzx ecx, byte ptr [esi + 0x92550c]
00925221: jmp dword ptr [ecx*4 + 0x9254fc]
00925228: mov esi, 6
0092522d: jmp 0x925423
00925232: mov esi, 7
00925237: jmp 0x925423
0092523c: mov esi, 0xe
00925241: jmp 0x925423
00925246: movss xmm7, dword ptr [0xec6e14]
0092524e: movss xmm6, dword ptr [0xec6fd4]
00925256: mov ecx, 0x3c
0092525b: mov dword ptr [esp + 0x18], 0
00925263: mov edx, dword ptr [edi + 8]
00925266: mov eax, dword ptr [edx*4 + 0x12fd798]
0092526d: cdq 
0092526e: xor ebx, ebx
00925270: idiv ecx
00925272: xorps xmm1, xmm1
00925275: movzx eax, byte ptr [esi + 0x925544]
0092527c: xorps xmm4, xmm4
0092527f: xorps xmm5, xmm5
00925282: cvtsi2ss xmm5, ecx
00925286: movaps xmm0, xmm7
00925289: movss dword ptr [esp + 0x24], xmm5
0092528f: movss dword ptr [esp + 0x10], xmm0
00925295: movss dword ptr [esp + 0x14], xmm1
0092529b: mov ebp, esi
0092529d: mov edi, esi
0092529f: cvtsi2ss xmm4, edx
009252a3: divss xmm4, xmm5
009252a7: movss dword ptr [esp + 0x20], xmm4
009252ad: jmp dword ptr [eax*4 + 0x925520]
009252b4: cmp dword ptr [esp + 0x30], 3
009252b9: jne 0x92537b
009252bf: movss xmm0, dword ptr [0xec6fc0]
009252c7: mov edi, 7
009252cc: jmp 0x925370
009252d1: movss xmm1, dword ptr [0xec8938]
009252d9: movss xmm0, dword ptr [0xec98c8]
009252e1: mov esi, 5
009252e6: movss dword ptr [esp + 0x14], xmm1
009252ec: lea edi, [esi - 4]
009252ef: jmp 0x925375
009252f4: movss xmm0, dword ptr [0xec6fc0]
009252fc: mov edi, 1
00925301: jmp 0x925375
00925303: movss xmm0, dword ptr [0xec98c8]
0092530b: mov edi, 7
00925310: jmp 0x925375
00925312: cmp dword ptr [0x1e85cd4], 0xc
00925319: jne 0x92537b
0092531b: mov ebp, 1
00925320: jmp 0x92537b
00925322: cmp dword ptr [esp + 0x18], 2
00925327: jge 0x92533a
00925329: cmp dword ptr [0x1e85cd4], 0xc
00925330: je 0x92533a
00925332: movss xmm1, dword ptr [0xec98a4]
0092533a: mov esi, 0xa
0092533f: movss dword ptr [esp + 0x14], xmm1
00925345: movaps xmm0, xmm6
00925348: lea edi, [esi - 9]
0092534b: jmp 0x925375
0092534d: mov esi, 8
00925352: lea edi, [esi - 6]
00925355: jmp 0x92535f
00925357: .byte 0xbe

3over4 data0xec6fc0 operand0x93607c candidate-start0x936010
00936010: sub esp, 0xc
00936013: push ebx
00936014: mov ebx, dword ptr [esp + 0x14]
00936018: push ebp
00936019: push esi
0093601a: push edi
0093601b: call 0x9f4070
00936020: cmp ebx, eax
00936022: jne 0x93602b
00936024: call 0x9f4080
00936029: jmp 0x936030
0093602b: call 0x9f4070
00936030: push 0
00936032: push 0
00936034: mov edx, 0x3b
00936039: mov ecx, ebx
0093603b: mov ebp, eax
0093603d: call 0x6252b0
00936042: fstp st(0)
00936044: push 0
00936046: push 0
00936048: mov edx, 0x3b
0093604d: mov ecx, ebp
0093604f: call 0x6252b0
00936054: fstp st(0)
00936056: push 0
00936058: push 0
0093605a: mov edx, 0x3b
0093605f: mov ecx, ebx
00936061: call 0x6252b0
00936066: fstp dword ptr [esp + 0x20]
0093606a: push 0
0093606c: push 0
0093606e: mov edx, 0x3b
00936073: mov ecx, ebp
00936075: call 0x6252b0
0093607a: fmul dword ptr [0xec6fc0]
00936080: fld dword ptr [esp + 0x20]
00936084: fxch st(1)
00936086: fcompi st(1)
00936088: fstp st(0)
0093608a: jbe 0x936097
0093608c: mov esi, 1
00936091: mov dword ptr [esp + 0x20], esi
00936095: jmp 0x9360a3
00936097: mov dword ptr [esp + 0x20], 0
0093609f: mov esi, dword ptr [esp + 0x20]
009360a3: push esi
009360a4: push ebp
009360a5: xor eax, eax
009360a7: push ebx
009360a8: lea ecx, [eax + 0x3b]
009360ab: call 0x935f10
009360b0: push 0
009360b2: push 0
009360b4: mov edx, 4
009360b9: mov ecx, ebx
009360bb: call 0x6252b0
009360c0: fld dword ptr [0xec6e10]
009360c6: fxch st(1)
009360c8: fcompi st(1)
009360ca: fstp st(0)
009360cc: jbe 0x9361b1
009360d2: push 0
009360d4: push 0
009360d6: mov edx, 0x71
009360db: .byte 0x8b

3over4 data0xec6fc0 operand0x937e12 candidate-start0x937d00
00937d00: sub esp, 0xc
00937d03: push esi
00937d04: mov esi, ecx
00937d06: call 0x4c2060
00937d0b: test eax, eax
00937d0d: je 0x937eed
00937d13: push ebx
00937d14: push ebp
00937d15: push edi
00937d16: call 0x4c5f30
00937d1b: mov ecx, esi
00937d1d: mov ebp, eax
00937d1f: call 0x4c2060
00937d24: mov ecx, esi
00937d26: mov ebx, eax
00937d28: call 0x4c2040
00937d2d: mov edi, eax
00937d2f: test edi, edi
00937d31: jne 0x937d82
00937d33: lea eax, [ebx - 1]
00937d36: cmp eax, 4
00937d39: ja 0x937eb9
00937d3f: jmp dword ptr [eax*4 + 0x937f00]
00937d46: mov ecx, esi
00937d48: call 0x4c2120
00937d4d: push eax
00937d4e: mov ecx, esi
00937d50: call 0x4c1fb0
00937d55: mov edx, ebx
00937d57: mov ecx, eax
00937d59: call 0x5e9af0
00937d5e: jmp 0x937d78
00937d60: mov ecx, esi
00937d62: call 0x4c2170
00937d67: push eax
00937d68: mov ecx, esi
00937d6a: call 0x4c1fb0
00937d6f: mov edx, ebx
00937d71: mov ecx, eax
00937d73: call 0x5e9b90
00937d78: mov edi, eax
00937d7a: test edi, edi
00937d7c: je 0x937eb9
00937d82: mov ecx, esi
00937d84: call 0x4c1fe0
00937d89: mov edx, dword ptr [edi + 0xc]
00937d8c: mov ecx, ebp
00937d8e: mov esi, eax
00937d90: call 0x5ec330
00937d95: fst dword ptr [esp + 0x18]
00937d99: fldz 
00937d9b: fcompi st(1)
00937d9d: fstp st(0)
00937d9f: jbe 0x937da6
00937da1: xorps xmm0, xmm0
00937da4: jmp 0x937dac
00937da6: movss xmm0, dword ptr [esp + 0x18]
00937dac: mov edx, dword ptr [edi + 0x10]
00937daf: mov ecx, ebp
00937db1: movss dword ptr [esp + 0x10], xmm0
00937db7: call 0x5ec330
00937dbc: fst dword ptr [esp + 0x14]
00937dc0: fld dword ptr [esp + 0x10]
00937dc4: fsubr st(1)
00937dc6: fstp dword ptr [esp + 0x18]
00937dca: test esi, esi
00937dcc: jne 0x937e24
00937dce: movss xmm0, dword ptr [esp + 0x18]
00937dd4: comiss xmm0, dword ptr [0xec7048]
00937ddb: jbe 0x937dfc
00937ddd: mov ecx, dword ptr [0x10e23b8]
00937de3: fstp st(0)
00937de5: call 0xd963d0
00937dea: mov ecx, eax
00937dec: call 0xd96410
00937df1: fmul dword ptr [0xec7068]
00937df7: jmp 0x937ecb
00937dfc: movss xmm1, dword ptr [esp + 0x14]
00937e02: comiss xmm1, dword ptr [0xf0fc08]
00937e09: jbe 0x937eb7
00937e0f: comiss xmm0, dword ptr [0xec6fc0]
00937e16: jb 0x937eb7
00937e1c: pop edi
00937e1d: pop ebp
00937e1e: pop ebx
00937e1f: pop esi
00937e20: add esp, 0xc
00937e23: ret 
00937e24: movss xmm0, dword ptr [esp + 0x14]
00937e2a: fstp st(0)
00937e2c: comiss xmm0, dword ptr [0xf0fc08]
00937e33: jbe 0x937eab
00937e35: movss xmm1, dword ptr [esp + 0x10]
00937e3b: comiss xmm0, xmm1
00937e3e: jbe 0x937eab
00937e40: movss xmm0, dword ptr [esp + 0x18]
00937e46: mov ecx, dword ptr [0x10e23b8]
00937e4c: addss xmm0, xmm1
00937e50: movss dword ptr [esp + 0x14], xmm0
00937e56: call 0xd963d0
00937e5b: mov ecx, eax
00937e5d: call 0xd96410
00937e62: fmul dword ptr [0xec6fd4]
00937e68: movss xmm0, dword ptr [esp + 0x14]
00937e6e: .byte 0xd8
00937e6f: .byte 0x05
00937e70: .byte 0x68
00937e71: .byte 0x70

3over4 data0xec6fc0 operand0x9395b7 candidate-start0x9392e0
009392e0: sub esp, 0x2c
009392e3: push ebx
009392e4: push ebp
009392e5: push esi
009392e6: push edi
009392e7: xor edi, edi
009392e9: cmp dword ptr [esp + 0x48], edi
009392ed: jne 0x939368
009392ef: xor ebx, ebx
009392f1: call 0x5e97b0
009392f6: test eax, eax
009392f8: jle 0x939347
009392fa: mov ebp, dword ptr [esp + 0x44]
009392fe: mov edi, edi
00939300: mov ecx, edi
00939302: call 0x5eaf10
00939307: mov esi, eax
00939309: test esi, esi
0093930b: je 0x93933d
0093930d: mov ecx, esi
0093930f: call 0x5e9840
00939314: test eax, eax
00939316: je 0x93933d
00939318: mov ecx, esi
0093931a: call 0x5eafe0
0093931f: test eax, eax
00939321: je 0x93933d
00939323: mov edx, dword ptr [ebp + 8]
00939326: mov ecx, esi
00939328: call 0x937b30
0093932d: test eax, eax
0093932f: je 0x93933d
00939331: mov ecx, esi
00939333: call 0x5e9a70
00939338: test eax, eax
0093933a: jle 0x93933d
0093933c: inc ebx
0093933d: inc edi
0093933e: call 0x5e97b0
00939343: cmp edi, eax
00939345: jl 0x939300
00939347: mov eax, dword ptr [esp + 0x4c]
0093934b: cmp eax, 4
0093934e: jge 0x939355
00939350: mov eax, 4
00939355: xor ecx, ecx
00939357: cmp ebx, eax
00939359: setge cl
0093935c: pop edi
0093935d: pop esi
0093935e: pop ebp
0093935f: pop ebx
00939360: mov eax, ecx
00939362: add esp, 0x2c
00939365: ret 0x10
00939368: mov eax, dword ptr [esp + 0x4c]
0093936c: cmp eax, edi
0093936e: jge 0x939378
00939370: xor eax, eax
00939372: mov dword ptr [esp + 0x14], eax
00939376: jmp 0x93938b
00939378: cmp eax, 0x12
0093937b: jge 0x939383
0093937d: mov dword ptr [esp + 0x14], eax
00939381: jmp 0x93938b
00939383: mov dword ptr [esp + 0x14], 0x12
0093938b: mov ecx, dword ptr [0x10e23b8]
00939391: call 0xd963d0
00939396: and eax, 3
00939399: mov dword ptr [esp + 0x48], eax
0093939d: mov dword ptr [esp + 0x10], edi
009393a1: mov dword ptr [esp + 0x4c], edi
009393a5: cmp dword ptr [esp + 0x14], edi
009393a9: jle 0x939654
009393af: mov edi, dword ptr [esp + 0x44]
009393b3: jmp 0x9393c0
009393b5: lea esp, [esp]
009393bc: lea esp, [esp]
009393c0: mov edx, dword ptr [esp + 0x10]
009393c4: pxor xmm0, xmm0
009393c8: movq qword ptr [esp + 0x28], xmm0
009393ce: mov ebp, dword ptr [esp + 0x2c]
009393d2: xor ebx, ebx
009393d4: xor eax, eax
009393d6: mov dword ptr [esp + 0x18], edx
009393da: movq qword ptr [esp + 0x30], xmm0
009393e0: xor esi, esi
009393e2: cmp dword ptr [esp + 0x18], 0
009393e7: je 0x939479
009393ed: test eax, eax
009393ef: jne 0x939633
009393f5: mov ecx, dword ptr [0x10e23b8]
009393fb: call 0xd963d0
00939400: mov ecx, eax
00939402: call 0xd96410
00939407: fstp dword ptr [esp + 0x44]
0093940b: mov ecx, dword ptr [esp + 0x28]
0093940f: test ecx, ecx
00939411: jne 0x93950d
00939417: movss xmm0, dword ptr [0xec703c]
0093941f: comiss xmm0, dword ptr [esp + 0x44]
00939424: jae 0x93944a
00939426: cmp dword ptr [esp + 0x30], ecx
0093942a: je 0x93950d
00939430: cmp dword ptr [esp + 0x34], ecx
00939434: je 0x93950d
0093943a: test ebp, ebp
0093943c: je 0x93950d
00939442: test ebx, ebx
00939444: je 0x93950d
0093944a: mov ecx, dword ptr [esp + 0x4c]
0093944e: mov dword ptr [esp + 0x28], 1
00939456: cmp dword ptr [esp + 0x48], ecx
0093945a: je 0x9395eb
00939460: mov edx, dword ptr [edi + 8]
00939463: push 1
00939465: push 0x936e80
0093946a: push 0
0093946c: push 0
0093946e: push edx
0093946f: call 0x9387c0
00939474: jmp 0x9395e9
00939479: test eax, eax
0093947b: jne 0x9394d0
0093947d: mov ecx, dword ptr [0x10e23b8]
00939483: call 0xd963d0
00939488: mov ecx, eax
0093948a: mov dword ptr [esp + 0x20], edx
0093948e: call 0xd96410
00939493: fld dword ptr [0xec6fd0]
00939499: fcompi st(1)
0093949b: fstp st(0)
0093949d: ja 0x9394d0
0093949f: cmp dword ptr [esp + 0x4c], 0x11
009394a4: jne 0x9393f5
009394aa: mov ecx, dword ptr [0x10e23b8]
009394b0: call 0xd963d0
009394b5: mov ecx, eax
009394b7: mov dword ptr [esp + 0x20], edx
009394bb: call 0xd96410
009394c0: fld dword ptr [0xec6fd4]
009394c6: fcompi st(1)
009394c8: fstp st(0)
009394ca: jbe 0x9393f5
009394d0: mov eax, dword ptr [esp + 0x48]
009394d4: mov dword ptr [esp + 0x18], 1
009394dc: cmp eax, dword ptr [esp + 0x4c]
009394e0: je 0x9394eb
009394e2: cmp eax, 3
009394e5: jle 0x9395f7
009394eb: mov eax, dword ptr [edi + 8]
009394ee: push 0
009394f0: push eax
009394f1: call 0x938060
009394f6: mov esi, eax
009394f8: test esi, esi
009394fa: je 0x9395f7
00939500: mov dword ptr [esp + 0x10], 1
00939508: jmp 0x9395f7
0093950d: mov eax, dword ptr [esp + 0x4c]
00939511: cmp dword ptr [esp + 0x48], eax
00939515: je 0x939534
00939517: cmp eax, 3
0093951a: jg 0x939534
0093951c: test ecx, ecx
0093951e: jne 0x939534
00939520: mov ebx, 1
00939525: mov dword ptr [esp + 0x30], ebx
00939529: mov dword ptr [esp + 0x34], ebx
0093952d: mov ebp, ebx
0093952f: jmp 0x9395eb
00939534: mov ecx, dword ptr [0x10e23b8]
0093953a: call 0xd963d0
0093953f: mov ecx, eax
00939541: call 0xd96410
00939546: fstp dword ptr [esp + 0x44]
0093954a: cmp dword ptr [esp + 0x30], 0
0093954f: movss xmm0, dword ptr [esp + 0x44]
00939555: jne 0x939581
00939557: movss xmm1, dword ptr [0xec6fd0]
0093955f: comiss xmm1, xmm0
00939562: jae 0x939573
00939564: cmp dword ptr [esp + 0x34], 0
00939569: je 0x939588
0093956b: test ebp, ebp
0093956d: je 0x939581
0093956f: test ebx, ebx
00939571: je 0x939581
00939573: push 0
00939575: mov dword ptr [esp + 0x34], 1
0093957d: push 3
0093957f: jmp 0x9395e0
00939581: cmp dword ptr [esp + 0x34], 0
00939586: jne 0x9395af
00939588: movss xmm1, dword ptr [0xec6fd4]
00939590: comiss xmm1, xmm0
00939593: jae 0x93959d
00939595: test ebp, ebp
00939597: je 0x9395b3
00939599: test ebx, ebx
0093959b: je 0x9395af
0093959d: mov ecx, dword ptr [edi + 8]
009395a0: push 0
009395a2: push 4
009395a4: mov dword ptr [esp + 0x3c], 1
009395ac: push ecx
009395ad: jmp 0x9395e4
009395af: test ebp, ebp
009395b1: jne 0x9395d3
009395b3: movss xmm1, dword ptr [0xec6fc0]
009395bb: comiss xmm1, xmm0
009395be: jae 0x9395c4
009395c0: test ebx, ebx
009395c2: je 0x9395d7
009395c4: mov edx, dword ptr [edi + 8]
009395c7: push 0
009395c9: push 2
009395cb: mov ebp, 1
009395d0: push edx
009395d1: jmp 0x9395e4
009395d3: test ebx, ebx
009395d5: jne 0x9395eb
009395d7: push 0
009395d9: mov ebx, 1
009395de: push 5
009395e0: mov eax, dword ptr [edi + 8]
009395e3: push eax
009395e4: call 0x938d30
009395e9: mov esi, eax
009395eb: test esi, esi
009395ed: je 0x9395f7
009395ef: mov dword ptr [esp + 0x10], 0
009395f7: mov eax, 1
009395fc: mov ecx, eax
009395fe: test ecx, ecx
00939600: jne 0x939602
00939602: cmp dword ptr [esp + 0x28], 0
00939607: jne 0x93960b
00939609: xor eax, eax
0093960b: test ebp, ebp
0093960d: jne 0x939611
0093960f: xor eax, eax
00939611: cmp dword ptr [esp + 0x30], 0
00939616: .byte 0x75

3over4 data0xec6fc0 operand0x93a697 candidate-start0x93a380
0093a380: cmp dword ptr [esp + 0xc], 0
0093a385: push ebx
0093a386: push ebp
0093a387: push esi
0093a388: push edi
0093a389: mov edi, edx
0093a38b: jne 0x93a3ef
0093a38d: xor ebp, ebp
0093a38f: xor ebx, ebx
0093a391: call 0x5e97b0
0093a396: test eax, eax
0093a398: jle 0x93a3e0
0093a39a: lea ebx, [ebx]
0093a3a0: mov ecx, ebx
0093a3a2: call 0x5eaf10
0093a3a7: mov esi, eax
0093a3a9: test esi, esi
0093a3ab: je 0x93a3d6
0093a3ad: mov ecx, esi
0093a3af: call 0x5e9840
0093a3b4: test eax, eax
0093a3b6: je 0x93a3d6
0093a3b8: mov ecx, esi
0093a3ba: call 0x5e98e0
0093a3bf: cmp eax, edi
0093a3c1: jne 0x93a3d6
0093a3c3: mov eax, dword ptr [esp + 0x18]
0093a3c7: mov edx, dword ptr [eax + 8]
0093a3ca: mov ecx, esi
0093a3cc: call 0x937b30
0093a3d1: test eax, eax
0093a3d3: je 0x93a3d6
0093a3d5: inc ebp
0093a3d6: inc ebx
0093a3d7: call 0x5e97b0
0093a3dc: cmp ebx, eax
0093a3de: jl 0x93a3a0
0093a3e0: pop edi
0093a3e1: xor eax, eax
0093a3e3: pop esi
0093a3e4: cmp ebp, 3
0093a3e7: pop ebp
0093a3e8: setge al
0093a3eb: pop ebx
0093a3ec: ret 0x10
0093a3ef: mov eax, dword ptr [esp + 0x20]
0093a3f3: test eax, eax
0093a3f5: jns 0x93a3fd
0093a3f7: xor eax, eax
0093a3f9: mov ebp, eax
0093a3fb: jmp 0x93a40b
0093a3fd: cmp eax, 0xc
0093a400: jge 0x93a406
0093a402: mov ebp, eax
0093a404: jmp 0x93a40b
0093a406: mov ebp, 0xc
0093a40b: xor ebx, ebx
0093a40d: test ebp, ebp
0093a40f: jle 0x93a4b3
0093a415: mov esi, dword ptr [esp + 0x18]
0093a419: lea esp, [esp]
0093a420: cmp ebx, 0xb
0093a423: ja 0x93a497
0093a425: jmp dword ptr [ebx*4 + 0x93a4c0]
0093a42c: mov ecx, dword ptr [esi + 8]
0093a42f: push 0
0093a431: push 0x936e80
0093a436: push 0
0093a438: push edi
0093a439: push ecx
0093a43a: jmp 0x93a48e
0093a43c: mov edx, dword ptr [esi + 8]
0093a43f: push 1
0093a441: push edi
0093a442: push edx
0093a443: call 0x938250
0093a448: jmp 0x93a493
0093a44a: mov eax, dword ptr [esi + 8]
0093a44d: push edi
0093a44e: push eax
0093a44f: call 0x9391c0
0093a454: jmp 0x93a493
0093a456: mov eax, dword ptr [esi + 8]
0093a459: push 1
0093a45b: push edi
0093a45c: push eax
0093a45d: call 0x938250
0093a462: jmp 0x93a493
0093a464: mov ecx, dword ptr [esi + 8]
0093a467: push edi
0093a468: push ecx
0093a469: call 0x9391c0
0093a46e: jmp 0x93a493
0093a470: mov edx, dword ptr [esi + 8]
0093a473: push 0
0093a475: push 0x936e80
0093a47a: push 0
0093a47c: push edi
0093a47d: push edx
0093a47e: jmp 0x93a48e
0093a480: mov eax, dword ptr [esi + 8]
0093a483: push 0
0093a485: push 0x936e80
0093a48a: push 0
0093a48c: push edi
0093a48d: push eax
0093a48e: call 0x9387c0
0093a493: test eax, eax
0093a495: jne 0x93a4aa
0093a497: mov ecx, dword ptr [esi + 8]
0093a49a: push 0
0093a49c: push 0x936e80
0093a4a1: push 0
0093a4a3: push edi
0093a4a4: push ecx
0093a4a5: call 0x9387c0
0093a4aa: inc ebx
0093a4ab: cmp ebx, ebp
0093a4ad: jl 0x93a420
0093a4b3: pop edi
0093a4b4: pop esi
0093a4b5: pop ebp
0093a4b6: mov eax, 1
0093a4bb: pop ebx
0093a4bc: ret 0x10
0093a4bf: nop 
0093a4c0: sub al, 0xa4
0093a4c2: xchg ebx, eax
0093a4c3: add byte ptr [esp], bh
0093a4c6: xchg ebx, eax
0093a4c7: add byte ptr [edx - 0x5c], cl
0093a4ca: xchg ebx, eax
0093a4cb: add byte ptr [esp], ch
0093a4ce: xchg ebx, eax
0093a4cf: add byte ptr [esp], bh
0093a4d2: xchg ebx, eax
0093a4d3: add byte ptr [eax + 0x2c0093a4], al
0093a4d9: movsb byte ptr es:[edi], byte ptr [esi]
0093a4da: xchg ebx, eax
0093a4db: add byte ptr [esp], bh
0093a4de: xchg ebx, eax
0093a4df: add byte ptr [esi - 0x5c], dl
0093a4e2: xchg ebx, eax
0093a4e3: add byte ptr [esp - 0x6d], ah
0093a4e7: add byte ptr [eax - 0x5c], dh
0093a4ea: xchg ebx, eax
0093a4eb: add byte ptr [eax - 0x7cff6c5c], al
0093a4f1: in al, dx
0093a4f2: sbb byte ptr [ebx + 0x55], dl
0093a4f5: push esi
0093a4f6: push edi
0093a4f7: xor edi, edi
0093a4f9: mov dword ptr [esp + 0x14], edx
0093a4fd: cmp dword ptr [esp + 0x34], edi
0093a501: jne 0x93a574
0093a503: xor ebp, ebp
0093a505: call 0x5e97b0
0093a50a: test eax, eax
0093a50c: jle 0x93a562
0093a50e: mov ebx, dword ptr [esp + 0x30]
0093a512: mov ecx, edi
0093a514: call 0x5eaf10
0093a519: mov esi, eax
0093a51b: test esi, esi
0093a51d: je 0x93a558
0093a51f: mov ecx, esi
0093a521: call 0x5e9840
0093a526: test eax, eax
0093a528: je 0x93a558
0093a52a: mov edx, dword ptr [ebx + 8]
0093a52d: mov ecx, esi
0093a52f: call 0x937b30
0093a534: test eax, eax
0093a536: je 0x93a558
0093a538: mov ecx, esi
0093a53a: call 0x5e98e0
0093a53f: mov ecx, dword ptr [esp + 0x14]
0093a543: cmp eax, ecx
0093a545: jne 0x93a558
0093a547: mov eax, dword ptr [ebx + 8]
0093a54a: push 0
0093a54c: push ecx
0093a54d: push eax
0093a54e: call 0x938250
0093a553: test eax, eax
0093a555: je 0x93a558
0093a557: inc ebp
0093a558: inc edi
0093a559: call 0x5e97b0
0093a55e: cmp edi, eax
0093a560: jl 0x93a512
0093a562: pop edi
0093a563: xor eax, eax
0093a565: pop esi
0093a566: cmp ebp, 1
0093a569: pop ebp
0093a56a: setge al
0093a56d: pop ebx
0093a56e: add esp, 0x18
0093a571: ret 0x10
0093a574: mov ebx, dword ptr [esp + 0x30]
0093a578: xor eax, eax
0093a57a: mov dword ptr [esp + 0x34], edi
0093a57e: mov dword ptr [esp + 0x18], edi
0093a582: mov dword ptr [esp + 0x10], edi
0093a586: mov dword ptr [esp + 0x1c], eax
0093a58a: jmp 0x93a592
0093a58c: lea esp, [esp]
0093a590: xor edi, edi
0093a592: mov ebp, dword ptr [esp + 0x14]
0093a596: xor esi, esi
0093a598: mov dword ptr [esp + 0x30], edi
0093a59c: test eax, eax
0093a59e: jne 0x93a5d0
0093a5a0: mov ecx, dword ptr [ebx + 8]
0093a5a3: push eax
0093a5a4: push 0x936e70
0093a5a9: push eax
0093a5aa: push ebp
0093a5ab: push ecx
0093a5ac: call 0x9387c0
0093a5b1: mov esi, eax
0093a5b3: test esi, esi
0093a5b5: je 0x93a5d0
0093a5b7: mov eax, 1
0093a5bc: add dword ptr [esp + 0x34], eax
0093a5c0: mov dword ptr [esp + 0x10], eax
0093a5c4: jmp 0x93a6e4
0093a5c9: lea esp, [esp]
0093a5d0: cmp dword ptr [esp + 0x30], 0
0093a5d5: je 0x93a64e
0093a5d7: test edi, edi
0093a5d9: jne 0x93a6e0
0093a5df: mov ecx, dword ptr [0x10e23b8]
0093a5e5: call 0xd963d0
0093a5ea: mov ecx, eax
0093a5ec: call 0xd96410
0093a5f1: fstp dword ptr [esp + 0x20]
0093a5f5: mov eax, dword ptr [esp + 0x18]
0093a5f9: cmp dword ptr [esp + 0x34], eax
0093a5fd: jge 0x93a6d1
0093a603: cmp dword ptr [esp + 0x10], 0
0093a608: jne 0x93a6d1
0093a60e: movss xmm0, dword ptr [0xec98c8]
0093a616: comiss xmm0, dword ptr [esp + 0x20]
0093a61b: jb 0x93a6d6
0093a621: mov ecx, dword ptr [ebx + 8]
0093a624: push 0
0093a626: push 0x936e70
0093a62b: push 0
0093a62d: push ebp
0093a62e: push ecx
0093a62f: mov edi, 1
0093a634: call 0x9387c0
0093a639: mov esi, eax
0093a63b: test esi, esi
0093a63d: je 0x93a5d0
0093a63f: mov eax, edi
0093a641: add dword ptr [esp + 0x34], eax
0093a645: mov dword ptr [esp + 0x10], eax
0093a649: jmp 0x93a6d6
0093a64e: test edi, edi
0093a650: jne 0x93a6a5
0093a652: mov ecx, dword ptr [0x10e23b8]
0093a658: call 0xd963d0
0093a65d: mov ecx, eax
0093a65f: mov dword ptr [esp + 0x24], edx
0093a663: call 0xd96410
0093a668: fld dword ptr [0xec703c]
0093a66e: fcompi st(1)
0093a670: fstp st(0)
0093a672: ja 0x93a6a5
0093a674: cmp dword ptr [esp + 0x1c], 0x11
0093a679: jne 0x93a5df
0093a67f: mov ecx, dword ptr [0x10e23b8]
0093a685: call 0xd963d0
0093a68a: mov ecx, eax
0093a68c: mov dword ptr [esp + 0x24], edx
0093a690: call 0xd96410
0093a695: fld dword ptr [0xec6fc0]
0093a69b: fcompi st(1)
0093a69d: fstp st(0)
0093a69f: jbe 0x93a5df
0093a6a5: mov edx, dword ptr [ebx + 8]
0093a6a8: push 1
0093a6aa: push ebp
0093a6ab: push edx
0093a6ac: mov dword ptr [esp + 0x3c], 1
0093a6b4: call 0x938250
0093a6b9: mov esi, eax
0093a6bb: test esi, esi
0093a6bd: je 0x93a5d0
0093a6c3: inc dword ptr [esp + 0x18]
0093a6c7: mov dword ptr [esp + 0x10], 0
0093a6cf: jmp 0x93a6d6
0093a6d1: mov edi, 1
0093a6d6: test esi, esi
0093a6d8: je 0x93a5d0
0093a6de: jmp 0x93a6e4
0093a6e0: test esi, esi
0093a6e2: je 0x93a6f6
0093a6e4: mov eax, dword ptr [esp + 0x1c]
0093a6e8: inc eax
0093a6e9: mov dword ptr [esp + 0x1c], eax
0093a6ed: cmp eax, 0x12
0093a6f0: jl 0x93a590
0093a6f6: .byte 0xe8

3over4 data0xec6fc0 operand0x93c5d0 candidate-start0x93c530
0093c530: movss xmm1, dword ptr [esp + 0x18]
0093c536: movss xmm0, dword ptr [esp + 4]
0093c53c: addss xmm0, dword ptr [esp + 0x14]
0093c542: addss xmm0, dword ptr [esp + 0x1c]
0093c548: movss xmm3, dword ptr [esp + 0x20]
0093c54e: movaps xmm2, xmm1
0093c551: mulss xmm2, dword ptr [0xf44274]
0093c559: addss xmm0, xmm2
0093c55d: movss xmm2, dword ptr [0xf44278]
0093c565: mulss xmm3, xmm2
0093c569: addss xmm0, xmm3
0093c56d: movss xmm3, dword ptr [esp + 0x24]
0093c573: sub esp, 0x28
0093c576: comiss xmm1, dword ptr [0xf44280]
0093c57d: mulss xmm3, xmm2
0093c581: addss xmm0, xmm3
0093c585: jb 0x93c591
0093c587: movss xmm1, dword ptr [0xf44284]
0093c58f: jmp 0x93c594
0093c591: xorps xmm1, xmm1
0093c594: movss xmm5, dword ptr [esp + 0x30]
0093c59a: movss xmm6, dword ptr [0xec7230]
0093c5a2: comiss xmm5, xmm6
0093c5a5: movss xmm2, dword ptr [0xec98cc]
0093c5ad: movss xmm3, dword ptr [0xec8944]
0093c5b5: movss xmm4, dword ptr [0xf2da18]
0093c5bd: addss xmm1, xmm0
0093c5c1: movss xmm0, dword ptr [0xec893c]
0093c5c9: movaps xmm7, xmm1
0093c5cc: movss xmm1, dword ptr [0xec6fc0]
0093c5d4: movss dword ptr [esp + 0x2c], xmm7
0093c5da: movss dword ptr [esp], xmm2
0093c5df: movss dword ptr [esp + 4], xmm3
0093c5e5: movss dword ptr [esp + 8], xmm1
0093c5eb: movss dword ptr [esp + 0xc], xmm1
0093c5f1: movss dword ptr [esp + 0x10], xmm0
0093c5f7: movss dword ptr [esp + 0x14], xmm0
0093c5fd: movss dword ptr [esp + 0x18], xmm0
0093c603: movss dword ptr [esp + 0x1c], xmm0
0093c609: movss dword ptr [esp + 0x20], xmm0
0093c60f: movss dword ptr [esp + 0x24], xmm4
0093c615: jb 0x93c650
0093c617: movaps xmm7, xmm5
0093c61a: subss xmm7, xmm6
0093c61e: cvttss2si eax, xmm7
0093c622: cmp eax, 0xa
0093c625: jle 0x93c62c
0093c627: mov eax, 9
0093c62c: .byte 0xf3
0093c62d: .byte 0x0f
0093c62e: .byte 0x10
0093c62f: .byte 0x74

3over4 data0xec6fc0 operand0x95df66 candidate-start0x95def0
0095def0: push ebp
0095def1: mov ebp, esp
0095def3: and esp, 0xfffffff0
0095def6: sub esp, 0x28
0095def9: push esi
0095defa: push edi
0095defb: mov esi, ecx
0095defd: call 0x6b47f0
0095df02: mov edi, eax
0095df04: test edi, edi
0095df06: je 0x95e199
0095df0c: mov eax, dword ptr [esi + 0x40]
0095df0f: and dword ptr [eax + 0x11c], 0xfffffff7
0095df16: and dword ptr [edi + 0x184], 0xefffffff
0095df20: mov edx, 3
0095df25: mov ecx, edi
0095df27: call 0x7a1d80
0095df2c: or dword ptr [edi + 0x184], 0x200
0095df36: cmp dword ptr [0x1e4e94c], 0
0095df3d: mov dword ptr [0x1dee900], 0
0095df47: je 0x95e014
0095df4d: mov eax, dword ptr [0x1e4e944]
0095df52: cmp eax, edi
0095df54: je 0x95dfc1
0095df56: test eax, eax
0095df58: je 0x95dfc1
0095df5a: movss xmm2, dword ptr [0x1305ac4]
0095df62: movss xmm1, dword ptr [0xec6fc0]
0095df6a: comiss xmm1, xmm2
0095df6d: movaps xmm0, xmm2
0095df70: jbe 0x95df75
0095df72: movaps xmm0, xmm1
0095df75: cmp dword ptr [0x1304384], 0
0095df7c: movaps xmm1, xmmword ptr [0x1305af0]
0095df83: shufps xmm0, xmm0, 0
0095df87: mulps xmm0, xmmword ptr [0x1305aa0]
0095df8e: movaps xmm4, xmm0
0095df91: movaps xmmword ptr [esp + 0x20], xmm4
0095df96: movaps xmmword ptr [esp + 0x10], xmm1
0095df9b: mov dword ptr [0x1e4e944], 0
0095dfa5: je 0x95dfba
0095dfa7: cmp dword ptr [0x13043b8], 0
0095dfae: je 0x95dfba
0095dfb0: mov ecx, 1
0095dfb5: jmp 0x95e073
0095dfba: xor ecx, ecx
0095dfbc: jmp 0x95e073
0095dfc1: .byte 0xf3
0095dfc2: .byte 0x0f
0095dfc3: .byte 0x10
0095dfc4: .byte 0x15
0095dfc5: .byte 0xe4

3over4 data0xec6fc0 operand0x95dfcd candidate-start0x95def0
0095def0: push ebp
0095def1: mov ebp, esp
0095def3: and esp, 0xfffffff0
0095def6: sub esp, 0x28
0095def9: push esi
0095defa: push edi
0095defb: mov esi, ecx
0095defd: call 0x6b47f0
0095df02: mov edi, eax
0095df04: test edi, edi
0095df06: je 0x95e199
0095df0c: mov eax, dword ptr [esi + 0x40]
0095df0f: and dword ptr [eax + 0x11c], 0xfffffff7
0095df16: and dword ptr [edi + 0x184], 0xefffffff
0095df20: mov edx, 3
0095df25: mov ecx, edi
0095df27: call 0x7a1d80
0095df2c: or dword ptr [edi + 0x184], 0x200
0095df36: cmp dword ptr [0x1e4e94c], 0
0095df3d: mov dword ptr [0x1dee900], 0
0095df47: je 0x95e014
0095df4d: mov eax, dword ptr [0x1e4e944]
0095df52: cmp eax, edi
0095df54: je 0x95dfc1
0095df56: test eax, eax
0095df58: je 0x95dfc1
0095df5a: movss xmm2, dword ptr [0x1305ac4]
0095df62: movss xmm1, dword ptr [0xec6fc0]
0095df6a: comiss xmm1, xmm2
0095df6d: movaps xmm0, xmm2
0095df70: jbe 0x95df75
0095df72: movaps xmm0, xmm1
0095df75: cmp dword ptr [0x1304384], 0
0095df7c: movaps xmm1, xmmword ptr [0x1305af0]
0095df83: shufps xmm0, xmm0, 0
0095df87: mulps xmm0, xmmword ptr [0x1305aa0]
0095df8e: movaps xmm4, xmm0
0095df91: movaps xmmword ptr [esp + 0x20], xmm4
0095df96: movaps xmmword ptr [esp + 0x10], xmm1
0095df9b: mov dword ptr [0x1e4e944], 0
0095dfa5: je 0x95dfba
0095dfa7: cmp dword ptr [0x13043b8], 0
0095dfae: je 0x95dfba
0095dfb0: mov ecx, 1
0095dfb5: jmp 0x95e073
0095dfba: xor ecx, ecx
0095dfbc: jmp 0x95e073
0095dfc1: movss xmm2, dword ptr [0x13072e4]
0095dfc9: movss xmm1, dword ptr [0xec6fc0]
0095dfd1: comiss xmm1, xmm2
0095dfd4: movaps xmm0, xmm2
0095dfd7: jbe 0x95dfdc
0095dfd9: movaps xmm0, xmm1
0095dfdc: cmp dword ptr [0x1305ba4], 0
0095dfe3: movaps xmm1, xmmword ptr [0x1307310]
0095dfea: shufps xmm0, xmm0, 0
0095dfee: mulps xmm0, xmmword ptr [0x13072c0]
0095dff5: movaps xmm4, xmm0
0095dff8: movaps xmmword ptr [esp + 0x20], xmm4
0095dffd: movaps xmmword ptr [esp + 0x10], xmm1
0095e002: je 0x95dfba
0095e004: cmp dword ptr [0x1305bd8], 0
0095e00b: je 0x95dfba
0095e00d: mov ecx, 1
0095e012: jmp 0x95e073
0095e014: movss xmm2, dword ptr [0x1305ac4]
0095e01c: movss xmm1, dword ptr [0xec6fc0]
0095e024: comiss xmm1, xmm2
0095e027: movaps xmm0, xmm2
0095e02a: jbe 0x95e02f
0095e02c: .byte 0x0f

3over4 data0xec6fc0 operand0x95e020 candidate-start0x95def0
0095def0: push ebp
0095def1: mov ebp, esp
0095def3: and esp, 0xfffffff0
0095def6: sub esp, 0x28
0095def9: push esi
0095defa: push edi
0095defb: mov esi, ecx
0095defd: call 0x6b47f0
0095df02: mov edi, eax
0095df04: test edi, edi
0095df06: je 0x95e199
0095df0c: mov eax, dword ptr [esi + 0x40]
0095df0f: and dword ptr [eax + 0x11c], 0xfffffff7
0095df16: and dword ptr [edi + 0x184], 0xefffffff
0095df20: mov edx, 3
0095df25: mov ecx, edi
0095df27: call 0x7a1d80
0095df2c: or dword ptr [edi + 0x184], 0x200
0095df36: cmp dword ptr [0x1e4e94c], 0
0095df3d: mov dword ptr [0x1dee900], 0
0095df47: je 0x95e014
0095df4d: mov eax, dword ptr [0x1e4e944]
0095df52: cmp eax, edi
0095df54: je 0x95dfc1
0095df56: test eax, eax
0095df58: je 0x95dfc1
0095df5a: movss xmm2, dword ptr [0x1305ac4]
0095df62: movss xmm1, dword ptr [0xec6fc0]
0095df6a: comiss xmm1, xmm2
0095df6d: movaps xmm0, xmm2
0095df70: jbe 0x95df75
0095df72: movaps xmm0, xmm1
0095df75: cmp dword ptr [0x1304384], 0
0095df7c: movaps xmm1, xmmword ptr [0x1305af0]
0095df83: shufps xmm0, xmm0, 0
0095df87: mulps xmm0, xmmword ptr [0x1305aa0]
0095df8e: movaps xmm4, xmm0
0095df91: movaps xmmword ptr [esp + 0x20], xmm4
0095df96: movaps xmmword ptr [esp + 0x10], xmm1
0095df9b: mov dword ptr [0x1e4e944], 0
0095dfa5: je 0x95dfba
0095dfa7: cmp dword ptr [0x13043b8], 0
0095dfae: je 0x95dfba
0095dfb0: mov ecx, 1
0095dfb5: jmp 0x95e073
0095dfba: xor ecx, ecx
0095dfbc: jmp 0x95e073
0095dfc1: movss xmm2, dword ptr [0x13072e4]
0095dfc9: movss xmm1, dword ptr [0xec6fc0]
0095dfd1: comiss xmm1, xmm2
0095dfd4: movaps xmm0, xmm2
0095dfd7: jbe 0x95dfdc
0095dfd9: movaps xmm0, xmm1
0095dfdc: cmp dword ptr [0x1305ba4], 0
0095dfe3: movaps xmm1, xmmword ptr [0x1307310]
0095dfea: shufps xmm0, xmm0, 0
0095dfee: mulps xmm0, xmmword ptr [0x13072c0]
0095dff5: movaps xmm4, xmm0
0095dff8: movaps xmmword ptr [esp + 0x20], xmm4
0095dffd: movaps xmmword ptr [esp + 0x10], xmm1
0095e002: je 0x95dfba
0095e004: cmp dword ptr [0x1305bd8], 0
0095e00b: je 0x95dfba
0095e00d: mov ecx, 1
0095e012: jmp 0x95e073
0095e014: movss xmm2, dword ptr [0x1305ac4]
0095e01c: movss xmm1, dword ptr [0xec6fc0]
0095e024: comiss xmm1, xmm2
0095e027: movaps xmm0, xmm2
0095e02a: jbe 0x95e02f
0095e02c: movaps xmm0, xmm1
0095e02f: cmp dword ptr [0x1304384], 0
0095e036: movaps xmm1, xmmword ptr [0x1305af0]
0095e03d: shufps xmm0, xmm0, 0
0095e041: mulps xmm0, xmmword ptr [0x1305aa0]
0095e048: movaps xmm4, xmm0
0095e04b: movaps xmmword ptr [esp + 0x20], xmm4
0095e050: movaps xmmword ptr [esp + 0x10], xmm1
0095e055: je 0x95e067
0095e057: cmp dword ptr [0x13043b8], 0
0095e05e: je 0x95e067
0095e060: mov ecx, 1
0095e065: jmp 0x95e069
0095e067: xor ecx, ecx
0095e069: mov dword ptr [0x1e4e944], 0
0095e073: mov eax, dword ptr [edi + 0xc]
0095e076: movss xmm5, dword ptr [esp + 0x14]
0095e07c: .byte 0xf3
0095e07d: .byte 0x0f
0095e07e: .byte 0x10
0095e07f: .byte 0x74

3over4 data0xec6fc0 operand0x95f77a candidate-start0x95f470
0095f470: push ebp
0095f471: mov ebp, esp
0095f473: and esp, 0xfffffff0
0095f476: sub esp, 0x34
0095f479: push ebx
0095f47a: push esi
0095f47b: push edi
0095f47c: push 0
0095f47e: push 0
0095f480: push 0
0095f482: push 0xe26c9b5d
0095f487: push 0x3f407209
0095f48c: mov edi, edx
0095f48e: mov ebx, ecx
0095f490: push 0x89d0e3f
0095f495: mov edx, 0xbb05a9c1
0095f49a: mov ecx, 0x20e3760
0095f49f: movaps xmmword ptr [esp + 0x38], xmm1
0095f4a4: movaps xmmword ptr [esp + 0x48], xmm0
0095f4a9: call 0xd94400
0095f4ae: movss xmm0, dword ptr [0xec90f4]
0095f4b6: mov ecx, dword ptr [ebp + 0x1c]
0095f4b9: mov edx, dword ptr [ebp + 0x20]
0095f4bc: movss dword ptr [ebx + 0x14], xmm0
0095f4c1: movss xmm0, dword ptr [0xec9904]
0095f4c9: movss dword ptr [ebx + 0x18], xmm0
0095f4ce: movss xmm0, dword ptr [0xee9120]
0095f4d6: movss dword ptr [ebx + 0x1c], xmm0
0095f4db: movss xmm0, dword ptr [0xec9470]
0095f4e3: movss dword ptr [ebx + 0x20], xmm0
0095f4e8: movss xmm0, dword ptr [0xec74c0]
0095f4f0: movss dword ptr [ebx + 0x24], xmm0
0095f4f5: movaps xmm0, xmmword ptr [esp + 0x30]
0095f4fa: movaps xmmword ptr [ebx + 0x17a0], xmm0
0095f501: movaps xmm0, xmmword ptr [esp + 0x20]
0095f506: movaps xmmword ptr [ebx + 0x17b0], xmm0
0095f50d: movss xmm0, dword ptr [0xec6fd0]
0095f515: mov dword ptr [ebx + 0x10], eax
0095f518: mov eax, dword ptr [ebp + 0x18]
0095f51b: movss dword ptr [ebx + 0x44], xmm0
0095f520: xorps xmm0, xmm0
0095f523: mov dword ptr [ebx + 0x1808], eax
0095f529: mov eax, dword ptr [ebp + 0x14]
0095f52c: mov esi, 1
0095f531: mov dword ptr [ebx + 0x30], edi
0095f534: xor edi, edi
0095f536: push ecx
0095f537: mov dword ptr [ebx + 0x180c], ecx
0095f53d: movss dword ptr [ebx + 0x48], xmm0
0095f542: movss dword ptr [ebx + 0x64], xmm0
0095f547: movss xmm0, dword ptr [ebp + 0x10]
0095f54c: mov ecx, 0xf47920
0095f551: mov dword ptr [ebx + 0x1810], edx
0095f557: mov dword ptr [ebx + 0x1814], eax
0095f55d: mov dword ptr [ebx + 0x34], esi
0095f560: mov dword ptr [ebx + 0x38], esi
0095f563: mov dword ptr [ebx + 0x3c], edi
0095f566: mov dword ptr [ebx + 0x40], edi
0095f569: mov dword ptr [ebx + 0x50], esi
0095f56c: mov dword ptr [ebx + 0x1804], edi
0095f572: movss dword ptr [esp], xmm0
0095f577: call 0x6cb570
0095f57c: fstp dword ptr [ebx + 0x4c]
0095f57f: movss xmm0, dword ptr [ebp + 0x10]
0095f584: movss dword ptr [ebx + 0x54], xmm0
0095f589: movaps xmm0, xmmword ptr [esp + 0x20]
0095f58e: movaps xmmword ptr [ebx + 0x17c0], xmm0
0095f595: movaps xmmword ptr [ebx + 0x17e0], xmm0
0095f59c: mov dword ptr [ebx + 0x17d0], edi
0095f5a2: movss xmm0, dword ptr [ebx + 0x17a0]
0095f5aa: subss xmm0, dword ptr [ebx + 0x17b0]
0095f5b2: movss xmm1, dword ptr [ebx + 0x17a4]
0095f5ba: subss xmm1, dword ptr [ebx + 0x17b4]
0095f5c2: movss xmm2, dword ptr [ebx + 0x17a8]
0095f5ca: subss xmm2, dword ptr [ebx + 0x17b8]
0095f5d2: mulss xmm0, xmm0
0095f5d6: mulss xmm1, xmm1
0095f5da: addss xmm1, xmm0
0095f5de: xorps xmm0, xmm0
0095f5e1: mulss xmm2, xmm2
0095f5e5: addss xmm1, xmm2
0095f5e9: movss xmm0, xmm1
0095f5ed: sqrtss xmm0, xmm0
0095f5f1: movaps xmmword ptr [esp + 0x20], xmm0
0095f5f6: movss xmm0, dword ptr [esp + 0x20]
0095f5fc: subss xmm0, dword ptr [0xf33d0c]
0095f604: mulss xmm0, dword ptr [0xf4791c]
0095f60c: movss xmm1, dword ptr [0xec9958]
0095f614: mulss xmm0, dword ptr [0xf47918]
0095f61c: addss xmm0, xmm1
0095f620: comiss xmm1, xmm0
0095f623: ja 0x95f638
0095f625: movss xmm2, dword ptr [0xf1be14]
0095f62d: comiss xmm2, xmm0
0095f630: movaps xmm1, xmm0
0095f633: ja 0x95f638
0095f635: movaps xmm1, xmm2
0095f638: xorps xmm0, xmm0
0095f63b: movss dword ptr [ebx + 0x17f8], xmm1
0095f643: movss xmm1, dword ptr [ebx + 0x17a8]
0095f64b: subss xmm1, dword ptr [ebx + 0x17b8]
0095f653: movss dword ptr [ebx + 0x17f0], xmm0
0095f65b: movss dword ptr [ebx + 0x17f4], xmm0
0095f663: movss dword ptr [ebx + 0x17fc], xmm0
0095f66b: movss xmm0, dword ptr [ebx + 0x17a0]
0095f673: subss xmm0, dword ptr [ebx + 0x17b0]
0095f67b: sub esp, 8
0095f67e: movss dword ptr [esp + 4], xmm1
0095f684: movss dword ptr [esp], xmm0
0095f689: call 0xd91670
0095f68e: call 0xe22fa0
0095f693: movaps xmm0, xmmword ptr [ebx + 0x17f0]
0095f69a: movaps xmmword ptr [esp + 0x20], xmm0
0095f69f: xorps xmm0, xmm0
0095f6a2: cvtsi2ss xmm0, eax
0095f6a6: mulss xmm0, dword ptr [0xec6f80]
0095f6ae: mov dword ptr [ebx + 0x1800], eax
0095f6b4: movss dword ptr [esp + 0x14], xmm0
0095f6ba: fld dword ptr [esp + 0x14]
0095f6be: fsin 
0095f6c0: fstp dword ptr [esp + 0x18]
0095f6c4: movss dword ptr [esp + 0x1c], xmm0
0095f6ca: fld dword ptr [esp + 0x1c]
0095f6ce: fcos 
0095f6d0: fstp dword ptr [esp + 0x14]
0095f6d4: movss xmm1, dword ptr [esp + 0x14]
0095f6da: movss xmm0, dword ptr [esp + 0x18]
0095f6e0: movaps xmm4, xmm0
0095f6e3: mulss xmm0, dword ptr [esp + 0x20]
0095f6e9: mulss xmm4, dword ptr [esp + 0x28]
0095f6ef: movaps xmm3, xmm1
0095f6f2: mulss xmm3, dword ptr [esp + 0x20]
0095f6f8: mulss xmm1, dword ptr [esp + 0x28]
0095f6fe: addss xmm3, xmm4
0095f702: movss xmm4, dword ptr [esp + 0x24]
0095f708: subss xmm1, xmm0
0095f70c: movss xmm0, dword ptr [esp + 0x2c]
0095f712: unpcklps xmm3, xmm1
0095f715: unpcklps xmm4, xmm0
0095f718: unpcklps xmm3, xmm4
0095f71b: movaps xmmword ptr [ebx + 0x17f0], xmm3
0095f722: fld dword ptr [ebx + 0x17f8]
0095f728: movss xmm0, dword ptr [ebx + 0x17f0]
0095f730: fstp dword ptr [ebx + 0x17f0]
0095f736: xorps xmm0, xmmword ptr [0xec6fe0]
0095f73d: movss dword ptr [ebx + 0x17f8], xmm0
0095f745: mov ecx, dword ptr [0x10e23b8]
0095f74b: call 0xd963d0
0095f750: and eax, esi
0095f752: and edx, edi
0095f754: or eax, edx
0095f756: je 0x95f76d
0095f758: movaps xmm0, xmmword ptr [0xf47870]
0095f75f: mulps xmm0, xmmword ptr [ebx + 0x17f0]
0095f766: movaps xmmword ptr [ebx + 0x17f0], xmm0
0095f76d: xorps xmm0, xmm0
0095f770: mov ecx, dword ptr [ebp + 8]
0095f773: mov edx, dword ptr [ebp + 0xc]
0095f776: movss xmm1, dword ptr [0xec6fc0]
0095f77e: movss dword ptr [ebx + 0x1770], xmm0
0095f786: movss dword ptr [ebx + 0x1778], xmm0
0095f78e: movss dword ptr [ebx + 0x177c], xmm0
0095f796: movss dword ptr [ebx + 0x1774], xmm0
0095f79e: movss dword ptr [ebx + 0x1788], xmm0
0095f7a6: movss xmm0, dword ptr [0xec6ff0]
0095f7ae: movss dword ptr [ebx + 0x1780], xmm1
0095f7b6: mov dword ptr [ebx + 0x1784], esi
0095f7bc: mov dword ptr [ebx + 0x68], ecx
0095f7bf: mov dword ptr [ebx + 0x6c], edx
0095f7c2: movss dword ptr [ebx + 0x178c], xmm0
0095f7ca: mov ecx, dword ptr [0x10e23b8]
0095f7d0: call 0xd963d0
0095f7d5: mov ecx, eax
0095f7d7: .byte 0xe8
0095f7d8: xor al, 0x6c

3over4 data0xec6fc0 operand0x960049 candidate-start0x960019
00960019: sub cl, al
0096001b: movss dword ptr [esi + 0x178c], xmm0
00960023: jmp 0x960028
00960025: xorps xmm2, xmm2
00960028: mov eax, dword ptr [esi + 0x180c]
0096002e: mov ecx, dword ptr [esi + 0x60]
00960031: and ecx, eax
00960033: mov edi, 3
00960038: cmp ecx, eax
0096003a: je 0x960045
0096003c: cmp dword ptr [esi + 0x1814], 0
00960043: jge 0x960098
00960045: movss xmm0, dword ptr [0xec6fc0]
0096004d: movss dword ptr [esi + 0x1794], xmm0
00960055: movss xmm0, dword ptr [esi + 0x1760]
0096005d: comiss xmm0, dword ptr [0xeca4b8]
00960064: mov dword ptr [esi + 0x34], edi
00960067: jbe 0x960079
00960069: movss xmm0, dword ptr [0xec6e14]
00960071: movss dword ptr [esi + 0x1794], xmm0
00960079: cmp dword ptr [esi + 0x68], 0
0096007d: je 0x96008d
0096007f: movaps xmm0, xmmword ptr [esi + 0x17b0]
00960086: movaps xmmword ptr [esi + 0x17e0], xmm0
0096008d: mov ecx, dword ptr [esi + 0x30]
00960090: call 0x54b630
00960095: xorps xmm2, xmm2
00960098: cmp dword ptr [esi + 0x34], edi
0096009b: jne 0x960227
009600a1: movss dword ptr [esi + 0x64], xmm2
009600a6: .byte 0xf3
009600a7: .byte 0x0f
009600a8: .byte 0x10

3over4 data0xec6fc0 operand0x97dcaa candidate-start0x97dc50
0097dc50: mov eax, dword ptr [esp + 8]
0097dc54: test eax, eax
0097dc56: je 0x97dc5f
0097dc58: movss xmm2, dword ptr [eax + 4]
0097dc5d: jmp 0x97dc62
0097dc5f: xorps xmm2, xmm2
0097dc62: test ecx, ecx
0097dc64: je 0x97dc6d
0097dc66: movss xmm1, dword ptr [ecx + 4]
0097dc6b: jmp 0x97dc70
0097dc6d: movaps xmm1, xmm2
0097dc70: test edx, edx
0097dc72: je 0x97dc7b
0097dc74: movss xmm3, dword ptr [edx + 4]
0097dc79: jmp 0x97dc7e
0097dc7b: movaps xmm3, xmm1
0097dc7e: mov ecx, dword ptr [esp + 4]
0097dc82: movss xmm0, dword ptr [ecx + 4]
0097dc87: subss xmm0, xmm2
0097dc8b: subss xmm2, xmm1
0097dc8f: comiss xmm2, xmm0
0097dc92: jbe 0x97dc97
0097dc94: movaps xmm0, xmm2
0097dc97: subss xmm1, xmm3
0097dc9b: comiss xmm1, xmm0
0097dc9e: jbe 0x97dca3
0097dca0: movaps xmm0, xmm1
0097dca3: test eax, eax
0097dca5: je 0x97dcb8
0097dca7: comiss xmm0, dword ptr [0xec6fc0]
0097dcae: jbe 0x97dcb8
0097dcb0: mov eax, 1
0097dcb5: ret 8
0097dcb8: xor eax, eax
0097dcba: ret 8
0097dcbd: int3 
0097dcbe: int3 
0097dcbf: int3 
0097dcc0: pxor xmm0, xmm0
0097dcc4: mov dword ptr [0x1307768], 1
0097dcce: movq qword ptr [0x130776c], xmm0
0097dcd6: movq qword ptr [0x1307774], xmm0
0097dcde: movq qword ptr [0x130777c], xmm0
0097dce6: movq qword ptr [0x1307784], xmm0
0097dcee: movq qword ptr [0x130778c], xmm0
0097dcf6: mov dword ptr [0x1307794], 0
0097dd00: ret 
0097dd01: int3 
0097dd02: int3 
0097dd03: int3 
0097dd04: int3 
0097dd05: int3 
0097dd06: int3 
0097dd07: int3 
0097dd08: int3 
0097dd09: int3 

3over4 data0xec6fc0 operand0x98342c candidate-start0x9833c0
009833c0: sub esp, 0x24
009833c3: mov edx, dword ptr [esi + 8]
009833c6: movss xmm3, dword ptr [0xec6fd0]
009833ce: push ebx
009833cf: mov ebx, dword ptr [esi + 0x10]
009833d2: push ebp
009833d3: push edi
009833d4: mov edi, dword ptr [esi + 0xc]
009833d7: xor ebp, ebp
009833d9: xor ecx, ecx
009833db: xor eax, eax
009833dd: comiss xmm3, xmm0
009833e0: mov dword ptr [esp + 0x24], edx
009833e4: mov dword ptr [esp + 0x28], edi
009833e8: mov dword ptr [esp + 0x2c], ebx
009833ec: jb 0x9833f6
009833ee: mov ebp, dword ptr [esi + 4]
009833f1: jmp 0x9834ad
009833f6: movss xmm2, dword ptr [0xec6fd4]
009833fe: comiss xmm2, xmm0
00983401: jb 0x983428
00983403: mov ebp, dword ptr [esi + 4]
00983406: subss xmm0, xmm3
0098340a: mulss xmm0, dword ptr [0xec704c]
00983412: xorps xmm1, xmm1
00983415: cvtsi2ss xmm1, ebp
00983419: mulss xmm0, xmm1
0098341d: cvttss2si ecx, xmm0
00983421: sub ebp, ecx
00983423: jmp 0x9834ad
00983428: movss xmm1, dword ptr [0xec6fc0]
00983430: comiss xmm1, xmm0
00983433: jb 0x98347b
00983435: mov ebp, dword ptr [esi + 4]
00983438: movaps xmm4, xmm0
0098343b: xorps xmm1, xmm1
0098343e: cvtsi2ss xmm1, ebp
00983442: subss xmm0, xmm3
00983446: mulss xmm0, dword ptr [0xec704c]
0098344e: subss xmm4, xmm2
00983452: mulss xmm4, dword ptr [0xec704c]
0098345a: mulss xmm4, xmm1
0098345e: mulss xmm0, xmm1
00983462: cvttss2si eax, xmm4
00983466: xorps xmm1, xmm1
00983469: cvtsi2ss xmm1, eax
0098346d: subss xmm0, xmm1
00983471: sub ebp, eax
00983473: cvttss2si ecx, xmm0
00983477: sub ebp, ecx
00983479: jmp 0x9834ad
0098347b: movss xmm1, dword ptr [0xec6e14]
00983483: comiss xmm1, xmm0
00983486: jb 0x9834aa
00983488: mov ecx, dword ptr [esi + 4]
0098348b: .byte 0xf3

3over4 data0xec6fc0 operand0x9891b9 candidate-start0x989190
00989190: push esi
00989191: mov esi, eax
00989193: mov al, byte ptr [esi + 0xe7]
00989199: mov cl, byte ptr [esi + 0xe1]
0098919f: cmp cl, al
009891a1: jbe 0x9891a5
009891a3: mov al, cl
009891a5: movss xmm0, dword ptr [esi + 0xb8]
009891ad: movss xmm7, dword ptr [0xec6fd4]
009891b5: movss xmm1, dword ptr [0xec6fc0]
009891bd: movss xmm4, dword ptr [0xec6e14]
009891c5: subss xmm0, xmm7
009891c9: mulss xmm0, dword ptr [0xec6fd0]
009891d1: mulss xmm0, dword ptr [0xec704c]
009891d9: movzx eax, al
009891dc: addss xmm0, xmm1
009891e0: comiss xmm1, xmm0
009891e3: xorps xmm2, xmm2
009891e6: cvtsi2ss xmm2, eax
009891ea: jbe 0x9891f1
009891ec: movaps xmm0, xmm1
009891ef: jmp 0x9891f9
009891f1: comiss xmm4, xmm0
009891f4: ja 0x9891f9
009891f6: movaps xmm0, xmm4
009891f9: movss xmm1, dword ptr [0xec6e10]
00989201: xorps xmm5, xmm5
00989204: mulss xmm0, xmm2
00989208: movss xmm2, dword ptr [0xf4b378]
00989210: movaps xmm6, xmm0
00989213: movss xmm0, dword ptr [edi + 0x34]
00989218: .byte 0xf3

3over4 data0xec6fc0 operand0x9b9d29 candidate-start0x9b9950
009b9950: push ebp
009b9951: mov ebp, esp
009b9953: and esp, 0xfffffff0
009b9956: sub esp, 0x24
009b9959: mov edx, dword ptr [eax]
009b995b: push ebx
009b995c: push esi
009b995d: push edi
009b995e: mov edi, ecx
009b9960: mov ecx, dword ptr [eax + 8]
009b9963: cmp dword ptr [edi + ecx*4 + 0x20c], 0
009b996b: mov dword ptr [esp + 0xc], edx
009b996f: mov dword ptr [esp + 0x1c], ecx
009b9973: jne 0x9b9981
009b9975: xorps xmm0, xmm0
009b9978: pop edi
009b9979: pop esi
009b997a: pop ebx
009b997b: mov esp, ebp
009b997d: pop ebp
009b997e: ret 4
009b9981: mov eax, dword ptr [eax + 0xc]
009b9984: mov dword ptr [esp + 0x18], eax
009b9988: mov eax, dword ptr [edx + 0x34]
009b998b: mov esi, eax
009b998d: shr eax, 0xb
009b9990: and eax, 7
009b9993: shr esi, 8
009b9996: mov dword ptr [esp + 0x10], eax
009b999a: mov eax, dword ptr [edi + ecx*4 + 0x25c]
009b99a1: and esi, 7
009b99a4: mov ebx, 5
009b99a9: mov dword ptr [esp + 0x14], ebx
009b99ad: test eax, eax
009b99af: je 0x9b99ec
009b99b1: xor edx, edx
009b99b3: mov eax, 0xd0
009b99b8: cmp eax, 0xe4
009b99bd: jge 0x9b99ec
009b99bf: cmp edx, 4
009b99c2: ja 0x9b99cb
009b99c4: mov ecx, dword ptr [edi]
009b99c6: mov ecx, dword ptr [eax + ecx]
009b99c9: jmp 0x9b99cd
009b99cb: xor ecx, ecx
009b99cd: cmp ecx, dword ptr [esp + 0xc]
009b99d1: jne 0x9b99db
009b99d3: mov ebx, edx
009b99d5: mov dword ptr [esp + 0x14], ebx
009b99d9: jmp 0x9b99df
009b99db: mov ebx, dword ptr [esp + 0x14]
009b99df: mov ecx, dword ptr [esp + 0x1c]
009b99e3: inc edx
009b99e4: add eax, 4
009b99e7: cmp ebx, 5
009b99ea: je 0x9b99b8
009b99ec: cmp dword ptr [edi + 0x2d4], 0
009b99f3: xorps xmm5, xmm5
009b99f6: movss xmm6, dword ptr [0xec6e14]
009b99fe: jne 0x9b9a2a
009b9a00: mov ecx, dword ptr [esp + 0xc]
009b9a04: test dword ptr [ecx + 0xb8], 0x400
009b9a0e: jne 0x9b9a15
009b9a10: call 0xcbc670
009b9a15: mov ecx, dword ptr [esp + 0xc]
009b9a19: call 0xcb6860
009b9a1e: xorps xmm1, xmm1
009b9a21: cvtsi2ss xmm1, eax
009b9a25: jmp 0x9b9bed
009b9a2a: mov edx, dword ptr [esp + 0xc]
009b9a2e: mov eax, dword ptr [edx + 0x34]
009b9a31: shr eax, 0x11
009b9a34: and eax, 0x7f
009b9a37: jne 0x9b9a46
009b9a39: movss xmm1, dword ptr [0xec9904]
009b9a41: jmp 0x9b9bed
009b9a46: xorps xmm1, xmm1
009b9a49: cvtsi2ss xmm1, eax
009b9a4d: mov eax, dword ptr [edi + ecx*4 + 0x25c]
009b9a54: mulss xmm1, dword ptr [0xec6e1c]
009b9a5c: test eax, eax
009b9a5e: je 0x9b9a7b
009b9a60: addss xmm1, dword ptr [0xedb320]
009b9a68: movaps xmm0, xmm1
009b9a6b: movss xmm1, dword ptr [0xf4e638]
009b9a73: comiss xmm0, xmm1
009b9a76: ja 0x9b9a7b
009b9a78: movaps xmm1, xmm0
009b9a7b: movss xmm4, dword ptr [edi + 0x2b0]
009b9a83: movss xmm3, dword ptr [edi + 0x2bc]
009b9a8b: movaps xmm2, xmm4
009b9a8e: mulss xmm2, dword ptr [0xec7238]
009b9a96: movaps xmm0, xmm2
009b9a99: mulss xmm0, dword ptr [0xf41818]
009b9aa1: mulss xmm0, xmm1
009b9aa5: subss xmm0, dword ptr [edi + ecx*4 + 0x16c]
009b9aae: movaps xmm1, xmm0
009b9ab1: divss xmm1, xmm3
009b9ab5: comiss xmm5, xmm1
009b9ab8: jbe 0x9b9abf
009b9aba: movaps xmm1, xmm5
009b9abd: jmp 0x9b9ac7
009b9abf: comiss xmm6, xmm1
009b9ac2: ja 0x9b9ac7
009b9ac4: movaps xmm1, xmm6
009b9ac7: mulss xmm1, dword ptr [0xec9904]
009b9acf: addss xmm1, dword ptr [0xec98ac]
009b9ad7: movss dword ptr [esp + 0x1c], xmm1
009b9add: test eax, eax
009b9adf: jne 0x9b9b22
009b9ae1: comiss xmm0, xmm5
009b9ae4: jbe 0x9b9b1e
009b9ae6: mov edx, dword ptr [edi + 0x2c8]
009b9aec: cmp edx, 2
009b9aef: je 0x9b9b10
009b9af1: mulss xmm4, dword ptr [0xec6fd4]
009b9af9: movss xmm0, dword ptr [edi + 0x2ac]
009b9b01: comiss xmm0, xmm4
009b9b04: jbe 0x9b9b1e
009b9b06: cmp edx, 1
009b9b09: je 0x9b9b10
009b9b0b: cmp edx, 3
009b9b0e: jne 0x9b9b1e
009b9b10: addss xmm1, dword ptr [0xf4e634]
009b9b18: movss dword ptr [esp + 0x1c], xmm1
009b9b1e: test eax, eax
009b9b20: je 0x9b9b28
009b9b22: cmp ebx, dword ptr [esp + 0x18]
009b9b26: je 0x9b9b3b
009b9b28: cmp ecx, 5
009b9b2b: jne 0x9b9bed
009b9b31: cmp esi, dword ptr [esp + 0x18]
009b9b35: jne 0x9b9bed
009b9b3b: mov edx, dword ptr [0x1324918]
009b9b41: push ecx
009b9b42: mov ecx, dword ptr [0x132491c]
009b9b48: divss xmm3, xmm2
009b9b4c: movaps xmm0, xmm6
009b9b4f: subss xmm0, xmm3
009b9b53: movss dword ptr [esp], xmm0
009b9b58: call 0x404870
009b9b5d: fst dword ptr [esp + 0x14]
009b9b61: fldz 
009b9b63: movss xmm0, dword ptr [0xec6e14]
009b9b6b: fcompi st(1)
009b9b6d: fstp st(0)
009b9b6f: jbe 0x9b9b76
009b9b71: xorps xmm1, xmm1
009b9b74: jmp 0x9b9b84
009b9b76: movss xmm1, dword ptr [esp + 0x14]
009b9b7c: comiss xmm0, xmm1
009b9b7f: ja 0x9b9b84
009b9b81: movaps xmm1, xmm0
009b9b84: mov eax, dword ptr [ebp + 8]
009b9b87: cmp dword ptr [eax + 0x7b0], 5
009b9b8e: subss xmm0, xmm1
009b9b92: movss dword ptr [esp + 0x14], xmm0
009b9b98: jl 0x9b9bac
009b9b9a: cmp dword ptr [edi + 0x2c8], 4
009b9ba1: jl 0x9b9bac
009b9ba3: xorps xmm0, xmm0
009b9ba6: movss dword ptr [esp + 0x14], xmm0
009b9bac: mov edi, dword ptr [esp + 0xc]
009b9bb0: test dword ptr [edi + 0xb8], 0x400
009b9bba: jne 0x9b9bc3
009b9bbc: mov ecx, edi
009b9bbe: call 0xcbc670
009b9bc3: mov ecx, edi
009b9bc5: call 0xcb6860
009b9bca: movss xmm0, dword ptr [esp + 0x1c]
009b9bd0: xorps xmm1, xmm1
009b9bd3: cvtsi2ss xmm1, eax
009b9bd7: addss xmm1, dword ptr [0xec992c]
009b9bdf: subss xmm1, xmm0
009b9be3: mulss xmm1, dword ptr [esp + 0x14]
009b9be9: addss xmm1, xmm0
009b9bed: mov eax, dword ptr [esp + 0x18]
009b9bf1: movaps xmm0, xmm1
009b9bf4: cmp ebx, eax
009b9bf6: je 0x9b9d33
009b9bfc: cmp eax, 4
009b9bff: ja 0x9b9c5c
009b9c01: jmp dword ptr [eax*4 + 0x9b9d3c]
009b9c08: mov edx, dword ptr [esp + 0x10]
009b9c0c: lea ecx, [esi + esi*2]
009b9c0f: lea eax, [edx + ecx*2]
009b9c12: movss xmm0, dword ptr [eax*4 + 0xf4e348]
009b9c1b: jmp 0x9b9c6f
009b9c1d: mov edx, dword ptr [esp + 0x10]
009b9c21: lea ecx, [esi + esi*2]
009b9c24: lea eax, [edx + ecx*2]
009b9c27: movss xmm0, dword ptr [eax*4 + 0xf4e3d8]
009b9c30: jmp 0x9b9c6f
009b9c32: mov edx, dword ptr [esp + 0x10]
009b9c36: lea ecx, [esi + esi*2]
009b9c39: lea eax, [edx + ecx*2]
009b9c3c: movss xmm0, dword ptr [eax*4 + 0xf4e468]
009b9c45: jmp 0x9b9c6f
009b9c47: mov edx, dword ptr [esp + 0x10]
009b9c4b: lea ecx, [esi + esi*2]
009b9c4e: lea eax, [edx + ecx*2]
009b9c51: movss xmm0, dword ptr [eax*4 + 0xf4e4f8]
009b9c5a: jmp 0x9b9c6f
009b9c5c: mov edx, dword ptr [esp + 0x10]
009b9c60: lea ecx, [esi + esi*2]
009b9c63: lea eax, [edx + ecx*2]
009b9c66: movss xmm0, dword ptr [eax*4 + 0xf4e588]
009b9c6f: mov eax, dword ptr [esp + 0xc]
009b9c73: movdqa xmm2, xmmword ptr [0xf4e620]
009b9c7b: mov edx, dword ptr [0x1324890]
009b9c81: mulss xmm0, xmm1
009b9c85: movss dword ptr [esp + 0x10], xmm0
009b9c8b: movss xmm0, dword ptr [eax + 0x10]
009b9c90: mulss xmm0, dword ptr [eax + 0xc]
009b9c95: push ecx
009b9c96: mov ecx, dword ptr [0x1324894]
009b9c9c: movdqa xmmword ptr [esp + 0x24], xmm2
009b9ca2: movss dword ptr [esp], xmm0
009b9ca7: call 0x404870
009b9cac: fild dword ptr [esp + 0x18]
009b9cb0: movss xmm2, dword ptr [0xec6fd0]
009b9cb8: xorps xmm1, xmm1
009b9cbb: fadd dword ptr [0xec6e14]
009b9cc1: fsubp st(1)
009b9cc3: fstp dword ptr [esp + 0x1c]
009b9cc7: movss xmm0, dword ptr [esp + 0x1c]
009b9ccd: shufps xmm0, xmm0, 0
009b9cd1: andps xmm0, xmmword ptr [esp + 0x20]
009b9cd6: movaps xmmword ptr [esp + 0x20], xmm0
009b9cdb: movss xmm0, dword ptr [esp + 0x20]
009b9ce1: mulss xmm0, xmm2
009b9ce5: comiss xmm1, xmm0
009b9ce8: jbe 0x9b9cf7
009b9cea: movaps xmm0, xmm1
009b9ced: movss xmm1, dword ptr [0xec6e14]
009b9cf5: jmp 0x9b9d07
009b9cf7: movss xmm1, dword ptr [0xec6e14]
009b9cff: comiss xmm1, xmm0
009b9d02: ja 0x9b9d07
009b9d04: movaps xmm0, xmm1
009b9d07: subss xmm1, xmm0
009b9d0b: xorps xmm0, xmm0
009b9d0e: movss xmm0, xmm1
009b9d12: sqrtss xmm0, xmm0
009b9d16: movaps xmmword ptr [esp + 0x20], xmm0
009b9d1b: movss xmm0, dword ptr [esp + 0x20]
009b9d21: mulss xmm0, xmm2
009b9d25: addss xmm0, dword ptr [0xec6fc0]
009b9d2d: mulss xmm0, dword ptr [esp + 0x10]
009b9d33: pop edi
009b9d34: pop esi
009b9d35: pop ebx
009b9d36: mov esp, ebp
009b9d38: pop ebp
009b9d39: ret 4
009b9d3c: or byte ptr [ebx + ebx*4 - 0x6463e300], bl
009b9d43: add byte ptr [edx], dh
009b9d45: pushfd 
009b9d46: wait 
009b9d47: add byte ptr [edi - 0x64], al
009b9d4a: wait 
009b9d4b: add byte ptr [esp + ebx*4 - 0x65], bl
009b9d4f: add byte ptr [ecx + 0x85cec], al
009b9d55: add byte ptr [ebx + 0x86c248c], cl
009b9d5b: add byte ptr [eax], al
009b9d5d: push ebx
009b9d5e: mov ebx, dword ptr [esp + 0x874]
009b9d65: push ebp
009b9d66: mov ebp, dword ptr [esp + 0x868]
009b9d6d: push esi
009b9d6e: mov esi, eax
009b9d70: mov eax, dword ptr [esp + 0x874]
009b9d77: push edi
009b9d78: mov edi, dword ptr [esp + 0x874]
009b9d7f: mov dword ptr [esp + 0x830], eax
009b9d86: mov eax, ebp
009b9d88: .byte 0x89

3over4 data0xec6fc0 operand0x9c2aa9 candidate-start0x9c2910
009c2910: sub esp, 0x10
009c2913: push esi
009c2914: mov esi, ecx
009c2916: cmp dword ptr [esi], 0
009c2919: je 0x9c2c29
009c291f: movss xmm2, dword ptr [esi + 0x30]
009c2924: movss xmm3, dword ptr [esi + 0x28]
009c2929: movss xmm1, dword ptr [esi + 0x34]
009c292e: movaps xmm0, xmm2
009c2931: subss xmm0, xmm3
009c2935: movss dword ptr [esp + 8], xmm0
009c293b: movss xmm0, dword ptr [esi + 0x2c]
009c2940: subss xmm1, xmm0
009c2944: sub esp, 0x10
009c2947: movss dword ptr [esp + 0x20], xmm1
009c294d: movss dword ptr [esp + 0xc], xmm3
009c2953: movaps xmm1, xmm0
009c2956: addss xmm1, dword ptr [0xec6e14]
009c295e: movss dword ptr [esp + 8], xmm1
009c2964: movss dword ptr [esp + 4], xmm2
009c296a: or edx, 0xffffffff
009c296d: movss dword ptr [esp], xmm0
009c2972: call 0x9c2670
009c2977: movss xmm0, dword ptr [esi + 0x30]
009c297c: subss xmm0, dword ptr [0xec6e10]
009c2984: sub esp, 0x10
009c2987: movaps xmm1, xmm0
009c298a: addss xmm1, dword ptr [0xec6e14]
009c2992: movss dword ptr [esp + 0xc], xmm1
009c2998: movss xmm1, dword ptr [esi + 0x34]
009c299d: movss dword ptr [esp + 8], xmm1
009c29a3: movss dword ptr [esp + 4], xmm0
009c29a9: movss dword ptr [esp + 0x14], xmm0
009c29af: movss xmm0, dword ptr [esi + 0x2c]
009c29b4: or edx, 0xffffffff
009c29b7: mov ecx, esi
009c29b9: movss dword ptr [esp], xmm0
009c29be: call 0x9c2670
009c29c3: movss xmm2, dword ptr [esp + 4]
009c29c9: movss xmm1, dword ptr [esi + 0x2c]
009c29ce: sub esp, 0x10
009c29d1: movaps xmm0, xmm2
009c29d4: addss xmm0, dword ptr [0xec6e10]
009c29dc: movss dword ptr [esp + 0xc], xmm0
009c29e2: movss dword ptr [esp + 0x1c], xmm0
009c29e8: movaps xmm0, xmm1
009c29eb: addss xmm0, dword ptr [0xec6e14]
009c29f3: movss dword ptr [esp + 8], xmm0
009c29f9: movss dword ptr [esp + 4], xmm2
009c29ff: or edx, 0xffffffff
009c2a02: mov ecx, esi
009c2a04: movss dword ptr [esp], xmm1
009c2a09: call 0x9c2670
009c2a0e: movss xmm1, dword ptr [esp + 0xc]
009c2a14: movss xmm0, dword ptr [esi + 0x34]
009c2a19: sub esp, 0x10
009c2a1c: movss dword ptr [esp + 0xc], xmm1
009c2a22: movaps xmm1, xmm0
009c2a25: addss xmm1, dword ptr [0xec6e14]
009c2a2d: movss dword ptr [esp + 8], xmm1
009c2a33: movss xmm1, dword ptr [esp + 0x14]
009c2a39: movss dword ptr [esp + 4], xmm1
009c2a3f: or edx, 0xffffffff
009c2a42: mov ecx, esi
009c2a44: movss dword ptr [esp], xmm0
009c2a49: call 0x9c2670
009c2a4e: movss xmm0, dword ptr [esi + 0x34]
009c2a53: movss xmm1, dword ptr [esp + 0xc]
009c2a59: addss xmm0, dword ptr [esi + 0x2c]
009c2a5e: mulss xmm0, dword ptr [0xec6fd4]
009c2a66: sub esp, 0x10
009c2a69: movss dword ptr [esp + 0xc], xmm1
009c2a6f: movaps xmm1, xmm0
009c2a72: addss xmm1, dword ptr [0xec6e14]
009c2a7a: movss dword ptr [esp + 8], xmm1
009c2a80: movss xmm1, dword ptr [esp + 0x14]
009c2a86: movss dword ptr [esp + 4], xmm1
009c2a8c: or edx, 0xffffffff
009c2a8f: mov ecx, esi
009c2a91: movss dword ptr [esp], xmm0
009c2a96: call 0x9c2670
009c2a9b: movss xmm0, dword ptr [esi + 0x34]
009c2aa0: movss xmm1, dword ptr [esi + 0x2c]
009c2aa5: mulss xmm0, dword ptr [0xec6fc0]
009c2aad: mulss xmm1, dword ptr [0xec6fd0]
009c2ab5: addss xmm0, xmm1
009c2ab9: movss xmm2, dword ptr [esp + 4]
009c2abf: sub esp, 0x10
009c2ac2: movaps xmm1, xmm2
009c2ac5: addss xmm1, dword ptr [0xeca4b8]
009c2acd: movss dword ptr [esp + 0xc], xmm1
009c2ad3: movss dword ptr [esp + 0x1c], xmm1
009c2ad9: movaps xmm1, xmm0
009c2adc: addss xmm1, dword ptr [0xec6e14]
009c2ae4: movss dword ptr [esp + 8], xmm1
009c2aea: movss dword ptr [esp + 4], xmm2
009c2af0: or edx, 0xffffffff
009c2af3: mov ecx, esi
009c2af5: movss dword ptr [esp], xmm0
009c2afa: call 0x9c2670
009c2aff: movss xmm0, dword ptr [esi + 0x34]
009c2b04: movss xmm1, dword ptr [esi + 0x2c]

3over4 data0xec6fc0 operand0x9c2b0d candidate-start0x9c2910
009c2910: sub esp, 0x10
009c2913: push esi
009c2914: mov esi, ecx
009c2916: cmp dword ptr [esi], 0
009c2919: je 0x9c2c29
009c291f: movss xmm2, dword ptr [esi + 0x30]
009c2924: movss xmm3, dword ptr [esi + 0x28]
009c2929: movss xmm1, dword ptr [esi + 0x34]
009c292e: movaps xmm0, xmm2
009c2931: subss xmm0, xmm3
009c2935: movss dword ptr [esp + 8], xmm0
009c293b: movss xmm0, dword ptr [esi + 0x2c]
009c2940: subss xmm1, xmm0
009c2944: sub esp, 0x10
009c2947: movss dword ptr [esp + 0x20], xmm1
009c294d: movss dword ptr [esp + 0xc], xmm3
009c2953: movaps xmm1, xmm0
009c2956: addss xmm1, dword ptr [0xec6e14]
009c295e: movss dword ptr [esp + 8], xmm1
009c2964: movss dword ptr [esp + 4], xmm2
009c296a: or edx, 0xffffffff
009c296d: movss dword ptr [esp], xmm0
009c2972: call 0x9c2670
009c2977: movss xmm0, dword ptr [esi + 0x30]
009c297c: subss xmm0, dword ptr [0xec6e10]
009c2984: sub esp, 0x10
009c2987: movaps xmm1, xmm0
009c298a: addss xmm1, dword ptr [0xec6e14]
009c2992: movss dword ptr [esp + 0xc], xmm1
009c2998: movss xmm1, dword ptr [esi + 0x34]
009c299d: movss dword ptr [esp + 8], xmm1
009c29a3: movss dword ptr [esp + 4], xmm0
009c29a9: movss dword ptr [esp + 0x14], xmm0
009c29af: movss xmm0, dword ptr [esi + 0x2c]
009c29b4: or edx, 0xffffffff
009c29b7: mov ecx, esi
009c29b9: movss dword ptr [esp], xmm0
009c29be: call 0x9c2670
009c29c3: movss xmm2, dword ptr [esp + 4]
009c29c9: movss xmm1, dword ptr [esi + 0x2c]
009c29ce: sub esp, 0x10
009c29d1: movaps xmm0, xmm2
009c29d4: addss xmm0, dword ptr [0xec6e10]
009c29dc: movss dword ptr [esp + 0xc], xmm0
009c29e2: movss dword ptr [esp + 0x1c], xmm0
009c29e8: movaps xmm0, xmm1
009c29eb: addss xmm0, dword ptr [0xec6e14]
009c29f3: movss dword ptr [esp + 8], xmm0
009c29f9: movss dword ptr [esp + 4], xmm2
009c29ff: or edx, 0xffffffff
009c2a02: mov ecx, esi
009c2a04: movss dword ptr [esp], xmm1
009c2a09: call 0x9c2670
009c2a0e: movss xmm1, dword ptr [esp + 0xc]
009c2a14: movss xmm0, dword ptr [esi + 0x34]
009c2a19: sub esp, 0x10
009c2a1c: movss dword ptr [esp + 0xc], xmm1
009c2a22: movaps xmm1, xmm0
009c2a25: addss xmm1, dword ptr [0xec6e14]
009c2a2d: movss dword ptr [esp + 8], xmm1
009c2a33: movss xmm1, dword ptr [esp + 0x14]
009c2a39: movss dword ptr [esp + 4], xmm1
009c2a3f: or edx, 0xffffffff
009c2a42: mov ecx, esi
009c2a44: movss dword ptr [esp], xmm0
009c2a49: call 0x9c2670
009c2a4e: movss xmm0, dword ptr [esi + 0x34]
009c2a53: movss xmm1, dword ptr [esp + 0xc]
009c2a59: addss xmm0, dword ptr [esi + 0x2c]
009c2a5e: mulss xmm0, dword ptr [0xec6fd4]
009c2a66: sub esp, 0x10
009c2a69: movss dword ptr [esp + 0xc], xmm1
009c2a6f: movaps xmm1, xmm0
009c2a72: addss xmm1, dword ptr [0xec6e14]
009c2a7a: movss dword ptr [esp + 8], xmm1
009c2a80: movss xmm1, dword ptr [esp + 0x14]
009c2a86: movss dword ptr [esp + 4], xmm1
009c2a8c: or edx, 0xffffffff
009c2a8f: mov ecx, esi
009c2a91: movss dword ptr [esp], xmm0
009c2a96: call 0x9c2670
009c2a9b: movss xmm0, dword ptr [esi + 0x34]
009c2aa0: movss xmm1, dword ptr [esi + 0x2c]
009c2aa5: mulss xmm0, dword ptr [0xec6fc0]
009c2aad: mulss xmm1, dword ptr [0xec6fd0]
009c2ab5: addss xmm0, xmm1
009c2ab9: movss xmm2, dword ptr [esp + 4]
009c2abf: sub esp, 0x10
009c2ac2: movaps xmm1, xmm2
009c2ac5: addss xmm1, dword ptr [0xeca4b8]
009c2acd: movss dword ptr [esp + 0xc], xmm1
009c2ad3: movss dword ptr [esp + 0x1c], xmm1
009c2ad9: movaps xmm1, xmm0
009c2adc: addss xmm1, dword ptr [0xec6e14]
009c2ae4: movss dword ptr [esp + 8], xmm1
009c2aea: movss dword ptr [esp + 4], xmm2
009c2af0: or edx, 0xffffffff
009c2af3: mov ecx, esi
009c2af5: movss dword ptr [esp], xmm0
009c2afa: call 0x9c2670
009c2aff: movss xmm0, dword ptr [esi + 0x34]
009c2b04: movss xmm1, dword ptr [esi + 0x2c]
009c2b09: mulss xmm1, dword ptr [0xec6fc0]
009c2b11: mulss xmm0, dword ptr [0xec6fd0]
009c2b19: addss xmm0, xmm1
009c2b1d: movss xmm1, dword ptr [esp + 0xc]
009c2b23: sub esp, 0x10
009c2b26: movss dword ptr [esp + 0xc], xmm1
009c2b2c: movaps xmm1, xmm0
009c2b2f: addss xmm1, dword ptr [0xec6e14]
009c2b37: movss dword ptr [esp + 8], xmm1
009c2b3d: movss xmm1, dword ptr [esp + 0x14]
009c2b43: movss dword ptr [esp + 4], xmm1
009c2b49: or edx, 0xffffffff
009c2b4c: mov ecx, esi
009c2b4e: movss dword ptr [esp], xmm0
009c2b53: call 0x9c2670
009c2b58: movss xmm0, dword ptr [esp + 8]
009c2b5e: subss xmm0, dword ptr [0xec8f28]
009c2b66: .byte 0xf3
009c2b67: .byte 0x0f
009c2b68: pop ecx
009c2b69: .byte 0x05
009c2b6a: aam 0x6f
009c2b6c: in al, dx

3over4 data0xec6fc0 operand0x9c44f4 candidate-start0x9c4460
009c4460: mov eax, edx
009c4462: test eax, eax
009c4464: je 0x9c4509
009c446a: xor ecx, ecx
009c446c: cmp ecx, 0x1dee628
009c4472: je 0x9c4509
009c4478: test dword ptr [0x1dee640], 1
009c4482: je 0x9c4509
009c4488: mov edx, dword ptr [0x1dee5ec]
009c448e: movss xmm0, dword ptr [0x1dee884]
009c4496: subss xmm0, dword ptr [0x1dee638]
009c449e: divss xmm0, dword ptr [0x1dee884]
009c44a6: mov ecx, edx
009c44a8: dec ecx
009c44a9: je 0x9c44ca
009c44ab: dec ecx
009c44ac: je 0x9c44c7
009c44ae: dec ecx
009c44af: je 0x9c44c2
009c44b1: cmp edx, 4
009c44b4: jne 0x9c44bb
009c44b6: add eax, 0x3c
009c44b9: jmp 0x9c44ca
009c44bb: jle 0x9c44ca
009c44bd: add eax, 0x50
009c44c0: jmp 0x9c44ca
009c44c2: add eax, 0x28
009c44c5: jmp 0x9c44ca
009c44c7: add eax, 0x14
009c44ca: movss xmm1, dword ptr [0xec6fd0]
009c44d2: comiss xmm1, xmm0
009c44d5: jbe 0x9c44dd
009c44d7: mov edx, dword ptr [eax + 4]
009c44da: fld dword ptr [edx]
009c44dc: ret 
009c44dd: movss xmm1, dword ptr [0xec6fd4]
009c44e5: comiss xmm1, xmm0
009c44e8: jbe 0x9c44f0
009c44ea: mov eax, dword ptr [eax + 8]
009c44ed: fld dword ptr [eax]
009c44ef: ret 
009c44f0: movss xmm1, dword ptr [0xec6fc0]
009c44f8: comiss xmm1, xmm0
009c44fb: jbe 0x9c4503
009c44fd: mov ecx, dword ptr [eax + 0xc]
009c4500: fld dword ptr [ecx]
009c4502: ret 
009c4503: mov edx, dword ptr [eax + 0x10]
009c4506: fld dword ptr [edx]
009c4508: ret 
009c4509: fldz 
009c450b: ret 
009c450c: int3 
009c450d: int3 
009c450e: int3 
009c450f: int3 
009c4510: mov eax, edx
009c4512: test eax, eax
009c4514: je 0x9c45cb
009c451a: xor ecx, ecx
009c451c: cmp ecx, 0x1dee628
009c4522: je 0x9c45cb
009c4528: test dword ptr [0x1dee640], 1
009c4532: je 0x9c45cb
009c4538: mov edx, dword ptr [0x1dee5ec]
009c453e: movss xmm0, dword ptr [0x1dee884]
009c4546: subss xmm0, dword ptr [0x1dee638]
009c454e: .byte 0xf3
009c454f: .byte 0x0f
009c4550: pop esi
009c4551: .byte 0x05
009c4552: test al, ch

3over4 data0xec6fc0 operand0x9c45a3 candidate-start0x9c4510
009c4510: mov eax, edx
009c4512: test eax, eax
009c4514: je 0x9c45cb
009c451a: xor ecx, ecx
009c451c: cmp ecx, 0x1dee628
009c4522: je 0x9c45cb
009c4528: test dword ptr [0x1dee640], 1
009c4532: je 0x9c45cb
009c4538: mov edx, dword ptr [0x1dee5ec]
009c453e: movss xmm0, dword ptr [0x1dee884]
009c4546: subss xmm0, dword ptr [0x1dee638]
009c454e: divss xmm0, dword ptr [0x1dee884]
009c4556: mov ecx, edx
009c4558: dec ecx
009c4559: je 0x9c457a
009c455b: dec ecx
009c455c: je 0x9c4577
009c455e: dec ecx
009c455f: je 0x9c4572
009c4561: cmp edx, 4
009c4564: jne 0x9c456b
009c4566: add eax, 0x3c
009c4569: jmp 0x9c457a
009c456b: jle 0x9c457a
009c456d: add eax, 0x50
009c4570: jmp 0x9c457a
009c4572: add eax, 0x28
009c4575: jmp 0x9c457a
009c4577: add eax, 0x14
009c457a: movss xmm1, dword ptr [0xec6fd0]
009c4582: comiss xmm1, xmm0
009c4585: jbe 0x9c458c
009c4587: mov edx, dword ptr [eax]
009c4589: fld dword ptr [edx]
009c458b: ret 
009c458c: movss xmm1, dword ptr [0xec6fd4]
009c4594: comiss xmm1, xmm0
009c4597: jbe 0x9c459f
009c4599: mov eax, dword ptr [eax + 4]
009c459c: fld dword ptr [eax]
009c459e: ret 
009c459f: movss xmm1, dword ptr [0xec6fc0]
009c45a7: comiss xmm1, xmm0
009c45aa: jbe 0x9c45b2
009c45ac: mov ecx, dword ptr [eax + 8]
009c45af: fld dword ptr [ecx]
009c45b1: ret 
009c45b2: movss xmm1, dword ptr [0xec7070]
009c45ba: comiss xmm1, xmm0
009c45bd: jbe 0x9c45c5
009c45bf: mov edx, dword ptr [eax + 0xc]
009c45c2: fld dword ptr [edx]
009c45c4: ret 
009c45c5: mov eax, dword ptr [eax + 0x10]
009c45c8: fld dword ptr [eax]
009c45ca: ret 
009c45cb: fldz 
009c45cd: ret 
009c45ce: int3 
009c45cf: int3 
009c45d0: push ecx
009c45d1: push ebx
009c45d2: push esi
009c45d3: mov esi, edx
009c45d5: push edi
009c45d6: mov edi, dword ptr [ecx + esi*4 + 0x50]
009c45da: mov eax, edi
009c45dc: cdq 
009c45dd: mov ebx, 0xa
009c45e2: idiv ebx
009c45e4: test edx, edx
009c45e6: jns 0x9c45ea
009c45e8: add edx, ebx
009c45ea: lea esi, [esi + esi*4]
009c45ed: add esi, esi
009c45ef: lea eax, [esi + edx]
009c45f2: movss xmm1, dword ptr [ecx + eax*4]
009c45f7: lea eax, [edi - 1]
009c45fa: cdq 
009c45fb: idiv ebx
009c45fd: test edx, edx
009c45ff: jns 0x9c4603
009c4601: add edx, ebx

3over4 data0xec6fc0 operand0x9c4722 candidate-start0x9c4660
009c4660: push ecx
009c4661: push ebx
009c4662: push esi
009c4663: mov esi, edx
009c4665: push edi
009c4666: mov edi, dword ptr [ecx + esi*4 + 0x50]
009c466a: mov eax, edi
009c466c: cdq 
009c466d: mov ebx, 0xa
009c4672: idiv ebx
009c4674: test edx, edx
009c4676: jns 0x9c467a
009c4678: add edx, ebx
009c467a: lea esi, [esi + esi*4]
009c467d: add esi, esi
009c467f: lea eax, [esi + edx]
009c4682: movss xmm0, dword ptr [ecx + eax*4]
009c4687: lea eax, [edi - 1]
009c468a: cdq 
009c468b: idiv ebx
009c468d: test edx, edx
009c468f: jns 0x9c4693
009c4691: add edx, ebx
009c4693: add edx, esi
009c4695: movss xmm1, dword ptr [ecx + edx*4]
009c469a: lea eax, [edi - 2]
009c469d: cdq 
009c469e: idiv ebx
009c46a0: mulss xmm1, dword ptr [0xed5a0c]
009c46a8: addss xmm1, xmm0
009c46ac: test edx, edx
009c46ae: jns 0x9c46b2
009c46b0: add edx, ebx
009c46b2: lea eax, [esi + edx]
009c46b5: movss xmm0, dword ptr [ecx + eax*4]
009c46ba: lea eax, [edi - 3]
009c46bd: cdq 
009c46be: idiv ebx
009c46c0: mulss xmm0, dword ptr [0xec7070]
009c46c8: addss xmm0, xmm1
009c46cc: test edx, edx
009c46ce: jns 0x9c46d2
009c46d0: add edx, ebx
009c46d2: add edx, esi
009c46d4: movss xmm1, dword ptr [ecx + edx*4]
009c46d9: lea eax, [edi - 4]
009c46dc: cdq 
009c46dd: idiv ebx
009c46df: mulss xmm1, dword ptr [0xec98cc]
009c46e7: addss xmm1, xmm0
009c46eb: test edx, edx
009c46ed: jns 0x9c46f1
009c46ef: add edx, ebx
009c46f1: lea eax, [esi + edx]
009c46f4: movss xmm0, dword ptr [ecx + eax*4]
009c46f9: lea eax, [edi - 5]
009c46fc: cdq 
009c46fd: idiv ebx
009c46ff: mulss xmm0, dword ptr [0xec8944]
009c4707: addss xmm0, xmm1
009c470b: test edx, edx
009c470d: jns 0x9c4711
009c470f: add edx, ebx
009c4711: add edx, esi
009c4713: movss xmm1, dword ptr [ecx + edx*4]
009c4718: lea eax, [edi - 6]
009c471b: cdq 
009c471c: idiv ebx
009c471e: mulss xmm1, dword ptr [0xec6fc0]
009c4726: addss xmm1, xmm0
009c472a: test edx, edx
009c472c: jns 0x9c4730
009c472e: add edx, ebx
009c4730: lea eax, [esi + edx]
009c4733: movss xmm0, dword ptr [ecx + eax*4]
009c4738: lea eax, [edi - 7]
009c473b: cdq 
009c473c: idiv ebx
009c473e: mulss xmm0, dword ptr [0xec98c8]
009c4746: addss xmm0, xmm1
009c474a: test edx, edx
009c474c: jns 0x9c4750
009c474e: add edx, ebx
009c4750: add edx, esi
009c4752: movss xmm1, dword ptr [ecx + edx*4]
009c4757: lea eax, [edi - 8]
009c475a: cdq 
009c475b: idiv ebx
009c475d: mulss xmm1, dword ptr [0xec893c]
009c4765: addss xmm1, xmm0
009c4769: test edx, edx
009c476b: jns 0x9c476f
009c476d: add edx, ebx
009c476f: lea eax, [esi + edx]
009c4772: movss xmm0, dword ptr [ecx + eax*4]
009c4777: lea eax, [edi - 9]
009c477a: cdq 
009c477b: mov edi, ebx
009c477d: idiv edi
009c477f: .byte 0xf3
009c4780: .byte 0x0f
009c4781: pop ecx

3over4 data0xec6fc0 operand0x9ebcae candidate-start0x9ebba0
009ebba0: sub esp, 0x10
009ebba3: mov edx, dword ptr [esp + 0x18]
009ebba7: xorps xmm1, xmm1
009ebbaa: push ebx
009ebbab: push ebp
009ebbac: mov ebp, dword ptr [esp + 0x1c]
009ebbb0: push esi
009ebbb1: push edi
009ebbb2: pxor xmm0, xmm0
009ebbb6: movq qword ptr [esp + 0x14], xmm0
009ebbbc: xor edi, edi
009ebbbe: mov dword ptr [esp + 0x1c], edi
009ebbc2: mov dword ptr [esp + 0x14], eax
009ebbc6: mov dword ptr [esp + 0x18], ecx
009ebbca: mov dword ptr [esp + 0x1c], edx
009ebbce: movss xmm0, dword ptr [eax + 0x9c]
009ebbd6: movss dword ptr [esp + 0x28], xmm0
009ebbdc: movss xmm0, dword ptr [eax + 0xa0]
009ebbe4: movss dword ptr [esp + 0x10], xmm0
009ebbea: xor ebx, ebx
009ebbec: movss dword ptr [esp + 0x24], xmm1
009ebbf2: mov esi, 0x1330730
009ebbf7: cmp esi, 0x1330860
009ebbfd: jge 0x9ebc41
009ebbff: mov eax, dword ptr [esi - 4]
009ebc02: mov edx, esi
009ebc04: lea ecx, [esp + 0x14]
009ebc08: call eax
009ebc0a: test eax, eax
009ebc0c: je 0x9ebc33
009ebc0e: mov edx, 1
009ebc13: mov ecx, edi
009ebc15: xorps xmm1, xmm1
009ebc18: shl edx, cl
009ebc1a: cvtsi2ss xmm1, eax
009ebc1e: mulss xmm1, dword ptr [esi - 8]
009ebc23: addss xmm1, dword ptr [esp + 0x24]
009ebc29: movss dword ptr [esp + 0x24], xmm1
009ebc2f: or ebx, edx
009ebc31: jmp 0x9ebc39
009ebc33: movss xmm1, dword ptr [esp + 0x24]
009ebc39: inc edi
009ebc3a: add esi, 0x10
009ebc3d: test ebx, ebx
009ebc3f: je 0x9ebbf7
009ebc41: movss xmm2, dword ptr [0xf54160]
009ebc49: movaps xmm0, xmm1
009ebc4c: addss xmm0, dword ptr [esp + 0x28]
009ebc52: comiss xmm2, xmm0
009ebc55: jbe 0x9ebc5f
009ebc57: movaps xmm0, xmm2
009ebc5a: movaps xmm3, xmm0
009ebc5d: jmp 0x9ebc74
009ebc5f: movss xmm2, dword ptr [0xf54164]
009ebc67: comiss xmm2, xmm0
009ebc6a: jbe 0x9ebc71
009ebc6c: movaps xmm3, xmm0
009ebc6f: jmp 0x9ebc74
009ebc71: movaps xmm3, xmm2
009ebc74: comiss xmm1, dword ptr [0xf0fc08]
009ebc7b: movss xmm2, dword ptr [0xf5416c]
009ebc83: movaps xmm0, xmm1
009ebc86: jbe 0x9ebc8f
009ebc88: mulss xmm1, xmm2
009ebc8c: movaps xmm0, xmm1
009ebc8f: addss xmm0, dword ptr [esp + 0x10]
009ebc95: comiss xmm2, xmm0
009ebc98: jbe 0x9ebc9d
009ebc9a: movaps xmm0, xmm2
009ebc9d: comiss xmm3, xmm0
009ebca0: ja 0x9ebca5
009ebca2: movaps xmm0, xmm3
009ebca5: movss dword ptr [ebp], xmm0
009ebcaa: movss xmm0, dword ptr [0xec6fc0]
009ebcb2: pop edi
009ebcb3: movss dword ptr [ebp + 8], xmm0
009ebcb8: movss xmm0, dword ptr [0xec6fd0]
009ebcc0: pop esi
009ebcc1: movss dword ptr [ebp + 4], xmm3
009ebcc6: movss dword ptr [ebp + 0xc], xmm0
009ebccb: pop ebp
009ebccc: pop ebx
009ebccd: add esp, 0x10
009ebcd0: ret 8
009ebcd3: int3 
009ebcd4: int3 
009ebcd5: int3 
009ebcd6: int3 
009ebcd7: int3 
009ebcd8: int3 
009ebcd9: int3 
009ebcda: int3 
009ebcdb: int3 
009ebcdc: int3 
009ebcdd: int3 
009ebcde: int3 
009ebcdf: int3 
009ebce0: sub esp, 0x14
009ebce3: mov edx, dword ptr [esp + 0x1c]
009ebce7: push ebp
009ebce8: mov ebp, dword ptr [esp + 0x1c]
009ebcec: push esi
009ebced: pxor xmm0, xmm0
009ebcf1: movq qword ptr [esp + 0x10], xmm0
009ebcf7: push edi
009ebcf8: xor edi, edi
009ebcfa: mov dword ptr [esp + 0x1c], edi
009ebcfe: mov dword ptr [esp + 0x14], eax
009ebd02: mov dword ptr [esp + 0x18], ecx
009ebd06: mov dword ptr [esp + 0x1c], edx
009ebd0a: .byte 0xf3
009ebd0b: .byte 0x0f
009ebd0c: .byte 0x10
009ebd0d: .byte 0x80

3over4 data0xec6fc0 operand0x9ebe32 candidate-start0x9ebce0
009ebce0: sub esp, 0x14
009ebce3: mov edx, dword ptr [esp + 0x1c]
009ebce7: push ebp
009ebce8: mov ebp, dword ptr [esp + 0x1c]
009ebcec: push esi
009ebced: pxor xmm0, xmm0
009ebcf1: movq qword ptr [esp + 0x10], xmm0
009ebcf7: push edi
009ebcf8: xor edi, edi
009ebcfa: mov dword ptr [esp + 0x1c], edi
009ebcfe: mov dword ptr [esp + 0x14], eax
009ebd02: mov dword ptr [esp + 0x18], ecx
009ebd06: mov dword ptr [esp + 0x1c], edx
009ebd0a: movss xmm0, dword ptr [eax + 0x9c]
009ebd12: movss dword ptr [esp + 0xc], xmm0
009ebd18: movss xmm0, dword ptr [eax + 0xa0]
009ebd20: movss dword ptr [esp + 0x10], xmm0
009ebd26: xorps xmm0, xmm0
009ebd29: movss dword ptr [esp + 0x28], xmm0
009ebd2f: mov esi, 0x1330860
009ebd34: mov eax, dword ptr [esi - 4]
009ebd37: mov edx, esi
009ebd39: lea ecx, [esp + 0x14]
009ebd3d: call eax
009ebd3f: cmp eax, edi
009ebd41: je 0x9ebd5b
009ebd43: xorps xmm0, xmm0
009ebd46: cvtsi2ss xmm0, eax
009ebd4a: mulss xmm0, dword ptr [esi - 8]
009ebd4f: addss xmm0, dword ptr [esp + 0x28]
009ebd55: movss dword ptr [esp + 0x28], xmm0
009ebd5b: add esi, 0x10
009ebd5e: cmp esi, 0x13308e0
009ebd64: jl 0x9ebd34
009ebd66: xorps xmm1, xmm1
009ebd69: push ebx
009ebd6a: xor ebx, ebx
009ebd6c: movss dword ptr [esp + 0x28], xmm1
009ebd72: mov esi, 0x13308e0
009ebd77: cmp esi, 0x13309f0
009ebd7d: jge 0x9ebdc1
009ebd7f: mov eax, dword ptr [esi - 4]
009ebd82: mov edx, esi
009ebd84: lea ecx, [esp + 0x18]
009ebd88: call eax
009ebd8a: test eax, eax
009ebd8c: je 0x9ebdb3
009ebd8e: mov edx, 1
009ebd93: mov ecx, edi
009ebd95: xorps xmm1, xmm1
009ebd98: shl edx, cl
009ebd9a: cvtsi2ss xmm1, eax
009ebd9e: mulss xmm1, dword ptr [esi - 8]
009ebda3: addss xmm1, dword ptr [esp + 0x28]
009ebda9: movss dword ptr [esp + 0x28], xmm1
009ebdaf: or ebx, edx
009ebdb1: jmp 0x9ebdb9
009ebdb3: movss xmm1, dword ptr [esp + 0x28]
009ebdb9: inc edi
009ebdba: add esi, 0x10
009ebdbd: test ebx, ebx
009ebdbf: je 0x9ebd77
009ebdc1: movss xmm3, dword ptr [esp + 0x2c]
009ebdc7: movss xmm2, dword ptr [0xf54160]
009ebdcf: movaps xmm0, xmm3
009ebdd2: addss xmm0, dword ptr [esp + 0x10]
009ebdd8: addss xmm0, xmm1
009ebddc: comiss xmm2, xmm0
009ebddf: pop ebx
009ebde0: jbe 0x9ebde7
009ebde2: movaps xmm0, xmm2
009ebde5: jmp 0x9ebdf4
009ebde7: movss xmm2, dword ptr [0xf54164]
009ebdef: comiss xmm2, xmm0
009ebdf2: jbe 0x9ebdf7
009ebdf4: movaps xmm2, xmm0
009ebdf7: addss xmm1, xmm3
009ebdfb: movaps xmm0, xmm1
009ebdfe: comiss xmm0, dword ptr [0xf0fc08]
009ebe05: movss xmm1, dword ptr [0xf5416c]
009ebe0d: jbe 0x9ebe13
009ebe0f: mulss xmm0, xmm1
009ebe13: addss xmm0, dword ptr [esp + 0x10]
009ebe19: comiss xmm1, xmm0
009ebe1c: jbe 0x9ebe21
009ebe1e: movaps xmm0, xmm1
009ebe21: comiss xmm2, xmm0
009ebe24: ja 0x9ebe29
009ebe26: movaps xmm0, xmm2
009ebe29: movss dword ptr [ebp], xmm0
009ebe2e: movss xmm0, dword ptr [0xec6fc0]
009ebe36: pop edi
009ebe37: movss dword ptr [ebp + 8], xmm0
009ebe3c: movss xmm0, dword ptr [0xec6fd0]
009ebe44: pop esi
009ebe45: movss dword ptr [ebp + 4], xmm2
009ebe4a: movss dword ptr [ebp + 0xc], xmm0
009ebe4f: pop ebp
009ebe50: add esp, 0x14
009ebe53: ret 8
009ebe56: int3 
009ebe57: int3 
009ebe58: int3 
009ebe59: int3 
009ebe5a: int3 
009ebe5b: int3 
009ebe5c: int3 
009ebe5d: int3 
009ebe5e: int3 
009ebe5f: int3 
009ebe60: push esi
009ebe61: mov esi, ecx
009ebe63: push edi
009ebe64: mov edi, edx
009ebe66: test esi, esi
009ebe68: je 0x9ebe9d
009ebe6a: call 0x48ef10
009ebe6f: jmp dword ptr [eax*4 + 0x9ebea4]
009ebe76: mov eax, dword ptr [esp + 0x10]
009ebe7a: mov ecx, dword ptr [esp + 0xc]
009ebe7e: push eax
009ebe7f: push esi
009ebe80: mov eax, edi
009ebe82: call 0x9ebba0
009ebe87: pop edi
009ebe88: pop esi
009ebe89: ret 8
009ebe8c: mov ecx, dword ptr [esp + 0x10]
009ebe90: push ecx
009ebe91: .byte 0x8b

3over4 data0xec6fc0 operand0x9ecb8d candidate-start0x9ec930
009ec930: push ecx
009ec931: push ebp
009ec932: mov ebp, ecx
009ec934: test ebp, ebp
009ec936: jne 0x9ec943
009ec938: fld dword ptr [0xf54164]
009ec93e: pop ebp
009ec93f: pop ecx
009ec940: ret 0x10
009ec943: movss xmm0, dword ptr [ebp]
009ec948: movss dword ptr [esp + 4], xmm0
009ec94e: cmp edx, 1
009ec951: jne 0x9ec9ea
009ec957: movss xmm0, dword ptr [esp + 0xc]
009ec95d: subss xmm0, dword ptr [esp + 0x10]
009ec963: divss xmm0, dword ptr [esp + 0xc]
009ec969: xorps xmm1, xmm1
009ec96c: comiss xmm1, xmm0
009ec96f: ja 0x9ec97e
009ec971: movss xmm1, dword ptr [0xf54164]
009ec979: comiss xmm1, xmm0
009ec97c: ja 0x9ec981
009ec97e: movaps xmm0, xmm1
009ec981: push ecx
009ec982: mov edx, 7
009ec987: mov ecx, 0xf540ac
009ec98c: movss dword ptr [esp], xmm0
009ec991: call 0x404870
009ec996: fstp dword ptr [esp + 0x10]
009ec99a: movss xmm1, dword ptr [ebp]
009ec99f: movss xmm0, dword ptr [ebp + 4]
009ec9a4: comiss xmm1, xmm0
009ec9a7: jbe 0x9ec9ae
009ec9a9: movaps xmm3, xmm1
009ec9ac: jmp 0x9ec9b1
009ec9ae: movaps xmm3, xmm0
009ec9b1: movaps xmm2, xmm0
009ec9b4: comiss xmm2, xmm1
009ec9b7: jbe 0x9ec9bc
009ec9b9: movaps xmm2, xmm1
009ec9bc: subss xmm0, xmm1
009ec9c0: mulss xmm0, dword ptr [esp + 0x10]
009ec9c6: addss xmm0, xmm1
009ec9ca: comiss xmm2, xmm0
009ec9cd: jbe 0x9ec9d2
009ec9cf: movaps xmm0, xmm2
009ec9d2: comiss xmm3, xmm0
009ec9d5: ja 0x9ecba2
009ec9db: movss dword ptr [esp + 4], xmm3
009ec9e1: fld dword ptr [esp + 4]
009ec9e5: pop ebp
009ec9e6: pop ecx
009ec9e7: ret 0x10
009ec9ea: cmp edx, 2
009ec9ed: jne 0x9eca03
009ec9ef: movss xmm0, dword ptr [ebp + 4]
009ec9f4: movss dword ptr [esp + 4], xmm0
009ec9fa: fld dword ptr [esp + 4]
009ec9fe: pop ebp
009ec9ff: pop ecx
009eca00: ret 0x10
009eca03: cmp edx, 3
009eca06: jne 0x9eca55
009eca08: movss xmm0, dword ptr [esp + 0xc]
009eca0e: subss xmm0, dword ptr [esp + 0x10]
009eca14: divss xmm0, dword ptr [esp + 0xc]
009eca1a: xorps xmm1, xmm1
009eca1d: comiss xmm1, xmm0
009eca20: ja 0x9eca2f
009eca22: movss xmm1, dword ptr [0xf54164]
009eca2a: comiss xmm1, xmm0
009eca2d: ja 0x9eca32
009eca2f: movaps xmm0, xmm1
009eca32: push ecx
009eca33: mov edx, 2
009eca38: mov ecx, 0xf540e8
009eca3d: movss dword ptr [esp], xmm0
009eca42: call 0x404870
009eca47: fmul dword ptr [ebp + 4]
009eca4a: pop ebp
009eca4b: fstp dword ptr [esp]
009eca4e: fld dword ptr [esp]
009eca51: pop ecx
009eca52: ret 0x10
009eca55: cmp edx, 4
009eca58: jl 0x9ecba8
009eca5e: push ebx
009eca5f: mov ebx, dword ptr [0x1d9560c]
009eca65: push esi
009eca66: xor ecx, ecx
009eca68: push edi
009eca69: mov edi, dword ptr [0x1d9555c]
009eca6f: xor esi, esi
009eca71: lea eax, [ecx + 1]
009eca74: test ebx, ebx
009eca76: jne 0x9eca7c
009eca78: xor edx, edx
009eca7a: jmp 0x9eca8e
009eca7c: mov edx, eax
009eca7e: cmp eax, 5
009eca81: jl 0x9eca88
009eca83: mov edx, 5
009eca88: imul edx, edx, 0x5c
009eca8b: mov edx, dword ptr [edx + ebx]
009eca8e: add ecx, edx
009eca90: test edi, edi
009eca92: jne 0x9eca98
009eca94: xor edx, edx
009eca96: jmp 0x9ecaaa
009eca98: mov edx, eax
009eca9a: cmp eax, 5
009eca9d: jl 0x9ecaa4
009eca9f: mov edx, 5
009ecaa4: imul edx, edx, 0x5c
009ecaa7: mov edx, dword ptr [edx + edi]
009ecaaa: inc eax
009ecaab: add esi, edx
009ecaad: cmp eax, 4
009ecab0: jl 0x9eca74
009ecab2: sub ecx, esi
009ecab4: mov eax, ecx
009ecab6: mov edx, ecx
009ecab8: sar eax, 0x1f
009ecabb: neg edx
009ecabd: and edx, eax
009ecabf: not eax
009ecac1: and eax, ecx
009ecac3: or edx, eax
009ecac5: xorps xmm0, xmm0
009ecac8: cvtsi2ss xmm0, edx
009ecacc: push ecx
009ecacd: mov edx, 4
009ecad2: mov ecx, 0xf540fc
009ecad7: movss dword ptr [esp], xmm0
009ecadc: call 0x404870
009ecae1: fmul dword ptr [ebp + 4]
009ecae4: movss xmm1, dword ptr [0xf54138]
009ecaec: movss xmm2, dword ptr [esp + 0x1c]
009ecaf2: comiss xmm1, xmm2
009ecaf5: fstp dword ptr [esp + 0x18]
009ecaf9: movss xmm0, dword ptr [0xf54164]
009ecb01: mov esi, dword ptr [esp + 0x24]
009ecb05: mov edx, dword ptr [esp + 0x20]
009ecb09: jbe 0x9ecb2d
009ecb0b: mov ecx, edx
009ecb0d: sub ecx, esi
009ecb0f: mov eax, ecx
009ecb11: sar eax, 0x1f
009ecb14: mov edi, ecx
009ecb16: neg edi
009ecb18: and edi, eax
009ecb1a: not eax
009ecb1c: and eax, ecx
009ecb1e: or edi, eax
009ecb20: cmp edi, 0xa
009ecb23: jl 0x9ecb2d
009ecb25: movss xmm0, dword ptr [0xf54140]
009ecb2d: movss xmm1, dword ptr [0xf54144]
009ecb35: comiss xmm1, xmm2
009ecb38: jbe 0x9ecb64
009ecb3a: mov ecx, edx
009ecb3c: sub ecx, esi
009ecb3e: mov eax, ecx
009ecb40: sar eax, 0x1f
009ecb43: mov edi, ecx
009ecb45: neg edi
009ecb47: and edi, eax
009ecb49: not eax
009ecb4b: and eax, ecx
009ecb4d: or edi, eax
009ecb4f: cmp edi, 0xa
009ecb52: jl 0x9ecb64
009ecb54: movss xmm1, dword ptr [0xf5414c]
009ecb5c: comiss xmm0, xmm1
009ecb5f: jbe 0x9ecb64
009ecb61: movaps xmm0, xmm1
009ecb64: movss xmm1, dword ptr [0xf54150]
009ecb6c: comiss xmm1, xmm2
009ecb6f: jbe 0x9ecb99
009ecb71: sub edx, esi
009ecb73: mov eax, edx
009ecb75: sar eax, 0x1f
009ecb78: mov ecx, edx
009ecb7a: neg ecx
009ecb7c: and ecx, eax
009ecb7e: not eax
009ecb80: and eax, edx
009ecb82: or ecx, eax
009ecb84: cmp ecx, 7
009ecb87: jl 0x9ecb99
009ecb89: movss xmm1, dword ptr [0xec6fc0]
009ecb91: comiss xmm0, xmm1
009ecb94: jbe 0x9ecb99
009ecb96: movaps xmm0, xmm1
009ecb99: mulss xmm0, dword ptr [esp + 0x18]
009ecb9f: pop edi
009ecba0: pop esi
009ecba1: pop ebx
009ecba2: movss dword ptr [esp + 4], xmm0
009ecba8: fld dword ptr [esp + 4]
009ecbac: pop ebp
009ecbad: pop ecx
009ecbae: ret 0x10
009ecbb1: int3 
009ecbb2: int3 
009ecbb3: int3 
009ecbb4: int3 
009ecbb5: int3 
009ecbb6: int3 
009ecbb7: int3 
009ecbb8: int3 
009ecbb9: int3 
009ecbba: int3 
009ecbbb: int3 
009ecbbc: int3 
009ecbbd: int3 
009ecbbe: int3 
009ecbbf: int3 
009ecbc0: push ebx
009ecbc1: push esi
009ecbc2: push edi
009ecbc3: mov edi, dword ptr [ecx + 4]
009ecbc6: mov esi, edx
009ecbc8: xor ebx, ebx
009ecbca: call 0x9ec020
009ecbcf: movss xmm1, dword ptr [esi]
009ecbd3: xorps xmm0, xmm0
009ecbd6: cvtsi2ss xmm0, eax
009ecbda: comiss xmm1, xmm0
009ecbdd: lea eax, [ebx + 1]
009ecbe0: jae 0x9ecbe4
009ecbe2: mov eax, ebx
009ecbe4: pop edi
009ecbe5: pop esi
009ecbe6: pop ebx
009ecbe7: ret 
009ecbe8: int3 
009ecbe9: int3 
009ecbea: int3 
009ecbeb: int3 
009ecbec: int3 

3over4 data0xec6fc0 operand0x9efabe candidate-start0x9efa00
009efa00: push esi
009efa01: mov esi, ecx
009efa03: test esi, esi
009efa05: je 0x9efa10
009efa07: mov eax, dword ptr [esi]
009efa09: mov edx, dword ptr [eax + 0x20]
009efa0c: call edx
009efa0e: jmp 0x9efa12
009efa10: xor eax, eax
009efa12: mov ecx, dword ptr [esi + 0x14]
009efa15: cmp dword ptr [ecx], -1
009efa18: mov eax, dword ptr [eax + 0x4c]
009efa1b: mov eax, dword ptr [eax + 0x34]
009efa1e: je 0x9efb16
009efa24: cmp eax, 0x1d95520
009efa29: je 0x9efb16
009efa2f: inc dword ptr [0x1e85560]
009efa35: test eax, eax
009efa37: je 0x9efa3e
009efa39: lea ecx, [eax - 0x78]
009efa3c: jmp 0x9efa40
009efa3e: xor ecx, ecx
009efa40: mov ecx, dword ptr [ecx + 0x7c]
009efa43: test eax, eax
009efa45: je 0x9efa4c
009efa47: add eax, -0x78
009efa4a: jmp 0x9efa4e
009efa4c: xor eax, eax
009efa4e: mov esi, ecx
009efa50: sub esi, eax
009efa52: neg esi
009efa54: sbb esi, esi
009efa56: and esi, ecx
009efa58: je 0x9efada
009efa5e: push edi
009efa5f: nop 
009efa60: mov eax, dword ptr [esi + 0x14]
009efa63: mov edi, dword ptr [eax]
009efa65: cmp edi, -1
009efa68: je 0x9efacc
009efa6a: mov ecx, edi
009efa6c: call 0xaa11b0
009efa71: mov ecx, edi
009efa73: test eax, eax
009efa75: je 0x9efa8b
009efa77: call 0xaa11b0
009efa7c: test eax, eax
009efa7e: jne 0x9efaa9
009efa80: mov ecx, edi
009efa82: call 0xaa11b0
009efa87: test eax, eax
009efa89: jmp 0x9efaa7
009efa8b: xor edx, edx
009efa8d: call 0x5875e0
009efa92: test eax, 0x100
009efa97: jne 0x9efaa9
009efa99: xor edx, edx
009efa9b: mov ecx, edi
009efa9d: call 0x5875e0
009efaa2: test eax, 0x200
009efaa7: je 0x9efacc
009efaa9: movss xmm0, dword ptr [0xec7978]
009efab1: sub esp, 8
009efab4: movss dword ptr [esp + 4], xmm0
009efaba: movss xmm0, dword ptr [0xec6fc0]
009efac2: movss dword ptr [esp], xmm0
009efac7: call 0x42e170
009efacc: mov ecx, esi
009eface: call 0x6b49c0
009efad3: mov esi, eax
009efad5: test esi, esi
009efad7: jne 0x9efa60
009efad9: pop edi
009efada: call 0x8d72c0
009efadf: test eax, eax
009efae1: je 0x9efb16
009efae3: call 0x8da800
009efae8: mov ecx, eax
009efaea: call 0xaa11b0
009efaef: test eax, eax
009efaf1: je 0x9efb16
009efaf3: movss xmm0, dword ptr [0xec7978]
009efafb: sub esp, 8
009efafe: movss dword ptr [esp + 4], xmm0
009efb04: movss xmm0, dword ptr [0xec6fc0]
009efb0c: movss dword ptr [esp], xmm0
009efb11: call 0x42e170
009efb16: pop esi
009efb17: ret 
009efb18: int3 
009efb19: int3 
009efb1a: int3 
009efb1b: int3 
009efb1c: int3 
009efb1d: int3 

3over4 data0xec6fc0 operand0x9efb08 candidate-start0x9efa00
009efa00: push esi
009efa01: mov esi, ecx
009efa03: test esi, esi
009efa05: je 0x9efa10
009efa07: mov eax, dword ptr [esi]
009efa09: mov edx, dword ptr [eax + 0x20]
009efa0c: call edx
009efa0e: jmp 0x9efa12
009efa10: xor eax, eax
009efa12: mov ecx, dword ptr [esi + 0x14]
009efa15: cmp dword ptr [ecx], -1
009efa18: mov eax, dword ptr [eax + 0x4c]
009efa1b: mov eax, dword ptr [eax + 0x34]
009efa1e: je 0x9efb16
009efa24: cmp eax, 0x1d95520
009efa29: je 0x9efb16
009efa2f: inc dword ptr [0x1e85560]
009efa35: test eax, eax
009efa37: je 0x9efa3e
009efa39: lea ecx, [eax - 0x78]
009efa3c: jmp 0x9efa40
009efa3e: xor ecx, ecx
009efa40: mov ecx, dword ptr [ecx + 0x7c]
009efa43: test eax, eax
009efa45: je 0x9efa4c
009efa47: add eax, -0x78
009efa4a: jmp 0x9efa4e
009efa4c: xor eax, eax
009efa4e: mov esi, ecx
009efa50: sub esi, eax
009efa52: neg esi
009efa54: sbb esi, esi
009efa56: and esi, ecx
009efa58: je 0x9efada
009efa5e: push edi
009efa5f: nop 
009efa60: mov eax, dword ptr [esi + 0x14]
009efa63: mov edi, dword ptr [eax]
009efa65: cmp edi, -1
009efa68: je 0x9efacc
009efa6a: mov ecx, edi
009efa6c: call 0xaa11b0
009efa71: mov ecx, edi
009efa73: test eax, eax
009efa75: je 0x9efa8b
009efa77: call 0xaa11b0
009efa7c: test eax, eax
009efa7e: jne 0x9efaa9
009efa80: mov ecx, edi
009efa82: call 0xaa11b0
009efa87: test eax, eax
009efa89: jmp 0x9efaa7
009efa8b: xor edx, edx
009efa8d: call 0x5875e0
009efa92: test eax, 0x100
009efa97: jne 0x9efaa9
009efa99: xor edx, edx
009efa9b: mov ecx, edi
009efa9d: call 0x5875e0
009efaa2: test eax, 0x200
009efaa7: je 0x9efacc
009efaa9: movss xmm0, dword ptr [0xec7978]
009efab1: sub esp, 8
009efab4: movss dword ptr [esp + 4], xmm0
009efaba: movss xmm0, dword ptr [0xec6fc0]
009efac2: movss dword ptr [esp], xmm0
009efac7: call 0x42e170
009efacc: mov ecx, esi
009eface: call 0x6b49c0
009efad3: mov esi, eax
009efad5: test esi, esi
009efad7: jne 0x9efa60
009efad9: pop edi
009efada: call 0x8d72c0
009efadf: test eax, eax
009efae1: je 0x9efb16
009efae3: call 0x8da800
009efae8: mov ecx, eax
009efaea: call 0xaa11b0
009efaef: test eax, eax
009efaf1: je 0x9efb16
009efaf3: movss xmm0, dword ptr [0xec7978]
009efafb: sub esp, 8
009efafe: movss dword ptr [esp + 4], xmm0
009efb04: movss xmm0, dword ptr [0xec6fc0]
009efb0c: movss dword ptr [esp], xmm0
009efb11: call 0x42e170
009efb16: pop esi
009efb17: ret 
009efb18: int3 
009efb19: int3 
009efb1a: int3 
009efb1b: int3 
009efb1c: int3 
009efb1d: int3 
009efb1e: int3 
009efb1f: int3 
009efb20: movss xmm0, dword ptr [esp + 4]
009efb26: xorps xmm1, xmm1
009efb29: ucomiss xmm0, xmm1
009efb2c: lahf 
009efb2d: test ah, 0x44
009efb30: jp 0x9efb3a
009efb32: mov eax, 3
009efb37: ret 4
009efb3a: movss xmm2, dword ptr [0xedac08]
009efb42: comiss xmm2, xmm0
009efb45: jbe 0x9efb4f
009efb47: mov eax, 1
009efb4c: ret 4
009efb4f: comiss xmm1, xmm0
009efb52: jbe 0x9efb5c
009efb54: mov eax, 2
009efb59: ret 4
009efb5c: movss xmm1, dword ptr [0xec6fd0]
009efb64: comiss xmm1, xmm0
009efb67: .byte 0xb8

3over4 data0xec6fc0 operand0xa297eb candidate-start0xa297bb
00a297bb: inc esp
00a297bc: and al, 8
00a297be: fadd dword ptr [esp + 0xc]
00a297c2: fstp dword ptr [esp + esi + 0x10]
00a297c6: cmp esi, 0x14
00a297c9: jl 0xa29780
00a297cb: movss xmm3, dword ptr [esp + 0x14]
00a297d1: subss xmm3, dword ptr [esp + 0x24]
00a297d7: movss xmm2, dword ptr [0xec8938]
00a297df: movss xmm4, dword ptr [0xec6e14]
00a297e7: movss xmm7, dword ptr [0xec6fc0]
00a297ef: movss xmm6, dword ptr [0xed5a0c]
00a297f7: movss xmm5, dword ptr [esp + 0x10]
00a297fd: pop edi
00a297fe: xor eax, eax
00a29800: pop esi
00a29801: test eax, eax
00a29803: jne 0xa2984d
00a29805: movss xmm0, dword ptr [esp + 0x10]
00a2980b: subss xmm0, dword ptr [esp + 0x1c]
00a29811: divss xmm0, xmm3
00a29815: subss xmm0, xmm2
00a29819: mulss xmm0, dword ptr [0xedac08]
00a29821: mulss xmm0, dword ptr [0xec7040]
00a29829: addss xmm0, xmm4
00a2982d: comiss xmm7, xmm0
00a29830: jbe 0xa2983d
00a29832: movaps xmm0, xmm7
00a29835: movss dword ptr [esp + 0x20], xmm0
00a2983b: jmp 0xa298ac
00a2983d: comiss xmm4, xmm0
00a29840: ja 0xa29845
00a29842: movaps xmm0, xmm4
00a29845: movss dword ptr [esp + 0x20], xmm0

3over4 data0xec6fc0 operand0xa2fb77 candidate-start0xa2f5e0
00a2f5e0: sub esp, 0x14
00a2f5e3: push ebx
00a2f5e4: mov ebx, ecx
00a2f5e6: mov edx, dword ptr [ebx + 0x2394]
00a2f5ec: mov ecx, dword ptr [ebx]
00a2f5ee: call 0x60e1e0
00a2f5f3: mov eax, dword ptr [ebx + 0x1038]
00a2f5f9: mov edx, dword ptr [ebx + 0x2c]
00a2f5fc: mov ecx, dword ptr [ebx]
00a2f5fe: push eax
00a2f5ff: call 0x60fb50
00a2f604: mov eax, dword ptr [ebx]
00a2f606: movzx ecx, byte ptr [eax + 0x13]
00a2f60a: movzx edx, byte ptr [eax + 0x12]
00a2f60e: add ecx, edx
00a2f610: test ecx, ecx
00a2f612: jle 0xa2faba
00a2f618: push ebp
00a2f619: push esi
00a2f61a: push edi
00a2f61b: lea ecx, [ebx + 8]
00a2f61e: call 0x9876a0
00a2f623: mov ecx, dword ptr [ebx]
00a2f625: push eax
00a2f626: xor edx, edx
00a2f628: call 0x60e4b0
00a2f62d: lea ecx, [ebx + 8]
00a2f630: call 0x9876e0
00a2f635: mov ecx, dword ptr [ebx]
00a2f637: push eax
00a2f638: xor edx, edx
00a2f63a: call 0x60e4c0
00a2f63f: lea ecx, [ebx + 8]
00a2f642: call 0x987720
00a2f647: mov ecx, dword ptr [ebx]
00a2f649: push eax
00a2f64a: xor edx, edx
00a2f64c: call 0x60e4d0
00a2f651: mov eax, dword ptr [ebx + 0x100c]
00a2f657: mov ecx, dword ptr [ebx]
00a2f659: push eax
00a2f65a: xor edx, edx
00a2f65c: call 0x60e4e0
00a2f661: movss xmm0, dword ptr [ebx + 0x1010]
00a2f669: mulss xmm0, dword ptr [0xec6e1c]
00a2f671: xorps xmm1, xmm1
00a2f674: comiss xmm1, xmm0
00a2f677: jbe 0xa2f683
00a2f679: subss xmm0, dword ptr [0xec6fd4]
00a2f681: jmp 0xa2f68b
00a2f683: addss xmm0, dword ptr [0xec6fd4]
00a2f68b: movss dword ptr [esp + 0x14], xmm0
00a2f691: cvttss2si eax, dword ptr [esp + 0x14]
00a2f697: mov ecx, dword ptr [ebx]
00a2f699: push eax
00a2f69a: xor edx, edx
00a2f69c: call 0x60e510
00a2f6a1: lea ecx, [ebx + 8]
00a2f6a4: call 0x987680
00a2f6a9: mov ecx, dword ptr [ebx]
00a2f6ab: push eax
00a2f6ac: xor edx, edx
00a2f6ae: call 0x60e4f0
00a2f6b3: lea ecx, [ebx + 8]
00a2f6b6: call 0x987690
00a2f6bb: mov ecx, dword ptr [ebx]
00a2f6bd: push eax
00a2f6be: xor edx, edx
00a2f6c0: call 0x60e500
00a2f6c5: lea ecx, [ebx + 0x1014]
00a2f6cb: call 0x9876a0
00a2f6d0: mov ecx, dword ptr [ebx]
00a2f6d2: push eax
00a2f6d3: mov edx, 1
00a2f6d8: call 0x60e4b0
00a2f6dd: lea ecx, [ebx + 0x1014]
00a2f6e3: call 0x9876e0
00a2f6e8: mov ecx, dword ptr [ebx]
00a2f6ea: push eax
00a2f6eb: mov edx, 1
00a2f6f0: call 0x60e4c0
00a2f6f5: lea ecx, [ebx + 0x1014]
00a2f6fb: call 0x987720
00a2f700: mov ecx, dword ptr [ebx]
00a2f702: push eax
00a2f703: mov edx, 1
00a2f708: call 0x60e4d0
00a2f70d: mov ecx, dword ptr [ebx + 0x2018]
00a2f713: push ecx
00a2f714: mov ecx, dword ptr [ebx]
00a2f716: mov edx, 1
00a2f71b: call 0x60e4e0
00a2f720: movss xmm0, dword ptr [ebx + 0x201c]
00a2f728: mulss xmm0, dword ptr [0xec6e1c]
00a2f730: xorps xmm1, xmm1
00a2f733: comiss xmm1, xmm0
00a2f736: jbe 0xa2f742
00a2f738: subss xmm0, dword ptr [0xec6fd4]
00a2f740: jmp 0xa2f74a
00a2f742: addss xmm0, dword ptr [0xec6fd4]
00a2f74a: movss dword ptr [esp + 0x14], xmm0
00a2f750: cvttss2si eax, dword ptr [esp + 0x14]
00a2f756: mov ecx, dword ptr [ebx]
00a2f758: push eax
00a2f759: mov edx, 1
00a2f75e: call 0x60e510
00a2f763: lea ecx, [ebx + 0x1014]
00a2f769: call 0x987680
00a2f76e: mov ecx, dword ptr [ebx]
00a2f770: push eax
00a2f771: mov edx, 1
00a2f776: call 0x60e4f0
00a2f77b: lea ecx, [ebx + 0x1014]
00a2f781: call 0x987690
00a2f786: mov ecx, dword ptr [ebx]
00a2f788: push eax
00a2f789: mov edx, 1
00a2f78e: call 0x60e500
00a2f793: xor edi, edi
00a2f795: lea esi, [ebx + 0x34]
00a2f798: mov dword ptr [esp + 0x10], edi
00a2f79c: mov dword ptr [esp + 0x20], esi
00a2f7a0: mov ecx, dword ptr [ebx]
00a2f7a2: mov edx, edi
00a2f7a4: mov dword ptr [esp + 0x14], 0
00a2f7ac: call 0x60f120
00a2f7b1: test eax, eax
00a2f7b3: jle 0xa2fa9b
00a2f7b9: lea esp, [esp]
00a2f7c0: mov edx, dword ptr [esp + 0x14]
00a2f7c4: mov ecx, dword ptr [ebx]
00a2f7c6: mov ebp, dword ptr [esi]
00a2f7c8: push edx
00a2f7c9: mov edx, edi
00a2f7cb: call 0x60f140
00a2f7d0: mov edi, eax
00a2f7d2: mov edx, ebp
00a2f7d4: mov ecx, edi
00a2f7d6: call 0x608120
00a2f7db: movzx eax, byte ptr [esi + 0xf4]
00a2f7e2: push ecx
00a2f7e3: xorps xmm0, xmm0
00a2f7e6: cvtsi2ss xmm0, eax
00a2f7ea: mov edx, 0x4b
00a2f7ef: mov ecx, edi
00a2f7f1: movss dword ptr [esp], xmm0
00a2f7f6: call 0x6078b0
00a2f7fb: mov edx, 5
00a2f800: mov ecx, esi
00a2f802: call 0x987b70
00a2f807: push ecx
00a2f808: xorps xmm0, xmm0
00a2f80b: cvtsi2ss xmm0, eax
00a2f80f: mov edx, 4
00a2f814: mov ecx, edi
00a2f816: movss dword ptr [esp], xmm0
00a2f81b: call 0x6078b0
00a2f820: mov edx, 5
00a2f825: mov ecx, esi
00a2f827: call 0x987c10
00a2f82c: push ecx
00a2f82d: xorps xmm0, xmm0
00a2f830: cvtsi2ss xmm0, eax
00a2f834: mov edx, 3
00a2f839: mov ecx, edi
00a2f83b: movss dword ptr [esp], xmm0
00a2f840: call 0x6078b0
00a2f845: mov edx, 5
00a2f84a: mov ecx, esi
00a2f84c: call 0x987db0
00a2f851: push ecx
00a2f852: xorps xmm0, xmm0
00a2f855: cvtsi2ss xmm0, eax
00a2f859: mov edx, 8
00a2f85e: mov ecx, edi
00a2f860: movss dword ptr [esp], xmm0
00a2f865: call 0x6078b0
00a2f86a: mov edx, 5
00a2f86f: mov ecx, esi
00a2f871: call 0x987de0
00a2f876: push ecx
00a2f877: xorps xmm0, xmm0
00a2f87a: cvtsi2ss xmm0, eax
00a2f87e: mov edx, 7
00a2f883: mov ecx, edi
00a2f885: movss dword ptr [esp], xmm0
00a2f88a: call 0x6078b0
00a2f88f: mov edx, 5
00a2f894: mov ecx, esi
00a2f896: call 0x987e10
00a2f89b: push ecx
00a2f89c: xorps xmm0, xmm0
00a2f89f: cvtsi2ss xmm0, eax
00a2f8a3: mov edx, 2
00a2f8a8: mov ecx, edi
00a2f8aa: movss dword ptr [esp], xmm0
00a2f8af: call 0x6078b0
00a2f8b4: mov edx, 5
00a2f8b9: mov ecx, esi
00a2f8bb: call 0x987e40
00a2f8c0: push ecx
00a2f8c1: xorps xmm0, xmm0
00a2f8c4: cvtsi2ss xmm0, eax
00a2f8c8: mov edx, 1
00a2f8cd: mov ecx, edi
00a2f8cf: movss dword ptr [esp], xmm0
00a2f8d4: call 0x6078b0
00a2f8d9: mov edx, 5
00a2f8de: mov ecx, esi
00a2f8e0: call 0x9879b0
00a2f8e5: push ecx
00a2f8e6: xorps xmm0, xmm0
00a2f8e9: cvtsi2ss xmm0, eax
00a2f8ed: mov edx, 0x10
00a2f8f2: mov ecx, edi
00a2f8f4: movss dword ptr [esp], xmm0
00a2f8f9: call 0x6078b0
00a2f8fe: mov edx, 5
00a2f903: mov ecx, esi
00a2f905: call 0x9879e0
00a2f90a: push ecx
00a2f90b: xorps xmm0, xmm0
00a2f90e: cvtsi2ss xmm0, eax
00a2f912: mov edx, 0x11
00a2f917: mov ecx, edi
00a2f919: movss dword ptr [esp], xmm0
00a2f91e: call 0x6078b0
00a2f923: mov edx, 5
00a2f928: mov ecx, esi
00a2f92a: call 0x987ad0
00a2f92f: push ecx
00a2f930: xorps xmm0, xmm0
00a2f933: cvtsi2ss xmm0, eax
00a2f937: mov edx, 0x12
00a2f93c: mov ecx, edi
00a2f93e: movss dword ptr [esp], xmm0
00a2f943: call 0x6078b0
00a2f948: mov edx, 5
00a2f94d: mov ecx, esi
00a2f94f: call 0x987aa0
00a2f954: push ecx
00a2f955: xorps xmm0, xmm0
00a2f958: cvtsi2ss xmm0, eax
00a2f95c: mov edx, 0x13
00a2f961: mov ecx, edi
00a2f963: movss dword ptr [esp], xmm0
00a2f968: call 0x6078b0
00a2f96d: mov edx, 5
00a2f972: mov ecx, esi
00a2f974: call 0x987a70
00a2f979: push ecx
00a2f97a: xorps xmm0, xmm0
00a2f97d: cvtsi2ss xmm0, eax
00a2f981: mov edx, 0x15
00a2f986: mov ecx, edi
00a2f988: movss dword ptr [esp], xmm0
00a2f98d: call 0x6078b0
00a2f992: mov edx, 5
00a2f997: mov ecx, esi
00a2f999: call 0x987b30
00a2f99e: push ecx
00a2f99f: xorps xmm0, xmm0
00a2f9a2: cvtsi2ss xmm0, eax
00a2f9a6: mov edx, 0x16
00a2f9ab: mov ecx, edi
00a2f9ad: movss dword ptr [esp], xmm0
00a2f9b2: call 0x6078b0
00a2f9b7: mov edx, 5
00a2f9bc: mov ecx, esi
00a2f9be: call 0x987b00
00a2f9c3: push ecx
00a2f9c4: xorps xmm0, xmm0
00a2f9c7: cvtsi2ss xmm0, eax
00a2f9cb: mov edx, 0x14
00a2f9d0: mov ecx, edi
00a2f9d2: movss dword ptr [esp], xmm0
00a2f9d7: call 0x6078b0
00a2f9dc: movsx ecx, byte ptr [esi + 0xf5]
00a2f9e3: xorps xmm0, xmm0
00a2f9e6: cvtsi2ss xmm0, ecx
00a2f9ea: push ecx
00a2f9eb: mov edx, 0x65
00a2f9f0: mov ecx, edi
00a2f9f2: movss dword ptr [esp], xmm0
00a2f9f7: call 0x6078b0
00a2f9fc: mov ecx, esi
00a2f9fe: call 0x987b60
00a2fa03: fst dword ptr [esp + 0x18]
00a2fa07: fld1 
00a2fa09: fcompi st(1)
00a2fa0b: fstp st(0)
00a2fa0d: jbe 0xa2fa25
00a2fa0f: movss xmm0, dword ptr [esp + 0x18]
00a2fa15: comiss xmm0, dword ptr [0xf0fc08]
00a2fa1c: jbe 0xa2fa25
00a2fa1e: mov eax, 1
00a2fa23: jmp 0xa2fa5c
00a2fa25: mov ecx, esi
00a2fa27: call 0x987b60
00a2fa2c: fst dword ptr [esp + 0x18]
00a2fa30: fldz 
00a2fa32: movss xmm0, dword ptr [esp + 0x18]
00a2fa38: fcompi st(1)
00a2fa3a: fstp st(0)
00a2fa3c: jbe 0xa2fa48
00a2fa3e: subss xmm0, dword ptr [0xec6fd4]
00a2fa46: jmp 0xa2fa50
00a2fa48: addss xmm0, dword ptr [0xec6fd4]
00a2fa50: movss dword ptr [esp + 0x1c], xmm0
00a2fa56: cvttss2si eax, dword ptr [esp + 0x1c]
00a2fa5c: push ecx
00a2fa5d: xorps xmm0, xmm0
00a2fa60: cvtsi2ss xmm0, eax
00a2fa64: mov edx, 0xb3
00a2fa69: mov ecx, edi
00a2fa6b: movss dword ptr [esp], xmm0
00a2fa70: call 0x6078b0
00a2fa75: mov edi, dword ptr [esp + 0x14]
00a2fa79: mov edx, dword ptr [esp + 0x10]
00a2fa7d: mov ecx, dword ptr [ebx]
00a2fa7f: inc edi
00a2fa80: mov dword ptr [esp + 0x14], edi
00a2fa84: add esi, 0x130
00a2fa8a: call 0x60f120
00a2fa8f: cmp edi, eax
00a2fa91: mov edi, dword ptr [esp + 0x10]
00a2fa95: jl 0xa2f7c0
00a2fa9b: mov esi, dword ptr [esp + 0x20]
00a2fa9f: inc edi
00a2faa0: add esi, 0x100c
00a2faa6: mov dword ptr [esp + 0x10], edi
00a2faaa: mov dword ptr [esp + 0x20], esi
00a2faae: cmp edi, 2
00a2fab1: jl 0xa2f7a0
00a2fab7: pop edi
00a2fab8: pop esi
00a2fab9: pop ebp
00a2faba: pop ebx
00a2fabb: add esp, 0x14
00a2fabe: ret 
00a2fabf: int3 
00a2fac0: sub esp, 8
00a2fac3: push esi
00a2fac4: mov esi, edx
00a2fac6: push edi
00a2fac7: mov edi, ecx
00a2fac9: cmp esi, 2
00a2facc: jne 0xa2faf1
00a2face: call 0x98d210
00a2fad3: mov ecx, eax
00a2fad5: call 0x98d310
00a2fada: cmp eax, 3
00a2fadd: jne 0xa2faf1
00a2fadf: fld dword ptr [0xec7044]
00a2fae5: pop edi
00a2fae6: fdiv dword ptr [esp + 0x1c]
00a2faea: pop esi
00a2faeb: add esp, 8
00a2faee: ret 0x10
00a2faf1: movss xmm0, dword ptr [esp + 0x14]
00a2faf7: movss xmm1, dword ptr [0xec7090]
00a2faff: mulss xmm0, dword ptr [0xec708c]
00a2fb07: addss xmm0, xmm1
00a2fb0b: comiss xmm1, xmm0
00a2fb0e: jbe 0xa2fb1b
00a2fb10: movaps xmm0, xmm1
00a2fb13: movss dword ptr [esp + 0x14], xmm0
00a2fb19: jmp 0xa2fb36
00a2fb1b: movss xmm1, dword ptr [0xec9604]
00a2fb23: comiss xmm1, xmm0
00a2fb26: jbe 0xa2fb30
00a2fb28: movss dword ptr [esp + 0x14], xmm0
00a2fb2e: jmp 0xa2fb36
00a2fb30: movss dword ptr [esp + 0x14], xmm1
00a2fb36: mov ecx, dword ptr [0x10e23b8]
00a2fb3c: call 0xd963d0
00a2fb41: mov ecx, eax
00a2fb43: mov dword ptr [esp + 0xc], edx
00a2fb47: call 0xd96410
00a2fb4c: fld dword ptr [esp + 0x14]
00a2fb50: fcompi st(1)
00a2fb52: fstp st(0)
00a2fb54: ja 0xa2fba8
00a2fb56: cmp dword ptr [esp + 0x1c], 0
00a2fb5b: jne 0xa2fba8
00a2fb5d: movss xmm0, dword ptr [esp + 0x18]
00a2fb63: mulss xmm0, dword ptr [0xf54640]
00a2fb6b: movss xmm1, dword ptr [0xf545a0]
00a2fb73: movss xmm2, dword ptr [0xec6fc0]
00a2fb7b: addss xmm0, xmm1
00a2fb7f: comiss xmm2, xmm0
00a2fb82: jbe 0xa2fb89
00a2fb84: movaps xmm0, xmm2
00a2fb87: jmp 0xa2fb91
00a2fb89: comiss xmm1, xmm0
00a2fb8c: ja 0xa2fb91
00a2fb8e: movaps xmm0, xmm1
00a2fb91: movss xmm1, dword ptr [esi*4 + 0xf54620]
00a2fb9a: movss xmm2, dword ptr [0xec7254]
00a2fba2: mulss xmm1, xmm0
00a2fba6: jmp 0xa2fbc1
00a2fba8: movss xmm1, dword ptr [esi*4 + 0xf54620]
00a2fbb1: mulss xmm1, dword ptr [0xec7044]
00a2fbb9: movss xmm2, dword ptr [0xec7048]
00a2fbc1: xorps xmm4, xmm4
00a2fbc4: movss xmm3, dword ptr [0xec6fd4]
00a2fbcc: movaps xmm0, xmm1
00a2fbcf: subss xmm0, xmm2
00a2fbd3: comiss xmm4, xmm0
00a2fbd6: .byte 0x76

3over4 data0xec6fc0 operand0xa57c30 candidate-start0xa57c00
00a57c00: mov ebp, 3
00a57c05: cmp dword ptr [eax + 0x284], ebp
00a57c0b: je 0xa57c25
00a57c0d: mov ecx, edi
00a57c0f: call 0x48f1b0
00a57c14: mov dword ptr [eax + 0x284], 2
00a57c1e: jmp 0xa57c25
00a57c20: mov ebp, 3
00a57c25: movss xmm0, dword ptr [esp + 0x14]
00a57c2b: xor ecx, ecx
00a57c2d: comiss xmm0, dword ptr [0xec6fc0]
00a57c34: jb 0xa57c96
00a57c36: call 0xa09eb0
00a57c3b: cmp dword ptr [eax + 0x54], 0
00a57c3f: jne 0xa57cd7
00a57c45: xor ecx, ecx
00a57c47: call 0xa09eb0
00a57c4c: cmp dword ptr [eax + 0x74], 1
00a57c50: je 0xa57cd7
00a57c56: mov ecx, esi
00a57c58: call 0x48f230
00a57c5d: mov ebx, eax
00a57c5f: mov ecx, ebx
00a57c61: call 0x48f1b0
00a57c66: mov eax, dword ptr [eax + 0x288]
00a57c6c: cmp eax, ebp
00a57c6e: je 0xa57cd7
00a57c70: test eax, eax
00a57c72: je 0xa57c83
00a57c74: mov ecx, dword ptr [esp + 0x34]
00a57c78: push ecx
00a57c79: mov edi, 0x1d
00a57c7e: call 0xa566a0
00a57c83: mov ecx, ebx
00a57c85: call 0x48f1b0
00a57c8a: .byte 0xc7
00a57c8b: .byte 0x80
00a57c8c: mov byte ptr [edx], al
00a57c8e: add byte ptr [eax], al

3over4 data0xec6fc0 operand0xa57ef8 candidate-start0xa57ec8
00a57ec8: jae 0xa57e6d
00a57eca: dec dword ptr [ebx - 0x17307408]
00a57ed0: fdiv qword ptr [edx - 0x5d]
00a57ed3: .byte 0xff
00a57ed4: cmp dword ptr [eax + 0x294], ebp
00a57eda: je 0xa57eed
00a57edc: mov ecx, edi
00a57ede: call 0x48f1b0
00a57ee3: mov dword ptr [eax + 0x294], 2
00a57eed: movss xmm0, dword ptr [esp + 0x38]
00a57ef3: xor ecx, ecx
00a57ef5: comiss xmm0, dword ptr [0xec6fc0]
00a57efc: jb 0xa57f66
00a57efe: call 0xa09eb0
00a57f03: cmp dword ptr [eax + 0x54], 0
00a57f07: jne 0xa57fa7
00a57f0d: xor ecx, ecx
00a57f0f: call 0xa09eb0
00a57f14: cmp dword ptr [eax + 0x74], 1
00a57f18: je 0xa57fa7
00a57f1e: mov ecx, esi
00a57f20: call 0x48f230
00a57f25: mov ebx, eax
00a57f27: mov ecx, ebx
00a57f29: call 0x48f1b0
00a57f2e: mov eax, dword ptr [eax + 0x298]
00a57f34: cmp eax, ebp
00a57f36: je 0xa57fa7
00a57f38: test eax, eax
00a57f3a: je 0xa57f4b
00a57f3c: mov edx, dword ptr [esp + 0x34]
00a57f40: push edx
00a57f41: mov edi, 0x21
00a57f46: call 0xa566a0
00a57f4b: mov ecx, ebx
00a57f4d: call 0x48f1b0
00a57f52: pop edi
00a57f53: pop esi
00a57f54: pop ebp
00a57f55: .byte 0xc7
00a57f56: .byte 0x80
00a57f57: cwde 

3over4 data0xec6fc0 operand0xa5ba07 candidate-start0xa5ba00
00a5ba00: sub esp, 0xc
00a5ba03: movss xmm0, dword ptr [0xec6fc0]
00a5ba0b: push ebx
00a5ba0c: push esi
00a5ba0d: push edi
00a5ba0e: mov esi, ecx
00a5ba10: mov edi, dword ptr [esi + 0x34]
00a5ba13: shr edi, 8
00a5ba16: and edi, 7
00a5ba19: movss dword ptr [esp + 0x10], xmm0
00a5ba1f: call 0xcb3df0
00a5ba24: fstp dword ptr [esp + 0x14]
00a5ba28: mov ecx, esi
00a5ba2a: call 0xcb69f0
00a5ba2f: xor ecx, ecx
00a5ba31: mov ebx, eax
00a5ba33: call 0xa09eb0
00a5ba38: cmp dword ptr [eax + 0x54], 0
00a5ba3c: je 0xa5ba47
00a5ba3e: xorps xmm0, xmm0
00a5ba41: movss dword ptr [esp + 0x10], xmm0
00a5ba47: mov ecx, esi
00a5ba49: call 0xcb6870
00a5ba4e: fstp dword ptr [esp + 0xc]
00a5ba52: movss xmm1, dword ptr [esp + 0x10]
00a5ba58: xorps xmm4, xmm4
00a5ba5b: comiss xmm1, xmm4
00a5ba5e: jbe 0xa5ba65
00a5ba60: movaps xmm3, xmm1
00a5ba63: jmp 0xa5ba68
00a5ba65: .byte 0x0f
00a5ba66: .byte 0x28

3over4 data0xec6fc0 operand0xa650fc candidate-start0xa65050
00a65050: push esi
00a65051: mov esi, dword ptr [ecx + 0x34]
00a65054: push edi
00a65055: movzx edi, word ptr [ecx + 0x11a]
00a6505c: shr esi, 8
00a6505f: and esi, 7
00a65062: call 0xcb69f0
00a65067: movss xmm1, dword ptr [esi*4 + 0xf64240]
00a65070: movss xmm2, dword ptr [esi*4 + 0xf64228]
00a65079: xorps xmm0, xmm0
00a6507c: mov ecx, edi
00a6507e: cvtsi2ss xmm0, ecx
00a65082: subss xmm0, xmm1
00a65086: mulss xmm0, dword ptr [0xedb328]
00a6508e: subss xmm2, xmm1
00a65092: movss xmm1, dword ptr [0xec6fc4]
00a6509a: divss xmm0, xmm2
00a6509e: movss xmm2, dword ptr [0xec6e14]
00a650a6: addss xmm0, xmm1
00a650aa: comiss xmm1, xmm0
00a650ad: pop edi
00a650ae: pop esi
00a650af: jbe 0xa650b6
00a650b1: movaps xmm0, xmm1
00a650b4: jmp 0xa650be
00a650b6: comiss xmm2, xmm0
00a650b9: ja 0xa650be
00a650bb: movaps xmm0, xmm2
00a650be: movss xmm3, dword ptr [0xec7978]
00a650c6: xorps xmm1, xmm1
00a650c9: add eax, -0x1c
00a650cc: cvtsi2ss xmm1, eax
00a650d0: mulss xmm1, dword ptr [0xf64224]
00a650d8: mulss xmm1, xmm3
00a650dc: addss xmm1, xmm2
00a650e0: comiss xmm3, xmm1
00a650e3: ja 0xa650ed
00a650e5: comiss xmm2, xmm1
00a650e8: movaps xmm3, xmm1
00a650eb: jbe 0xa650f0
00a650ed: movaps xmm2, xmm3
00a650f0: mulss xmm0, dword ptr [0xec704c]
00a650f8: movss xmm1, dword ptr [0xec6fc0]
00a65100: addss xmm0, xmm2
00a65104: xorps xmm2, xmm2
00a65107: mulss xmm0, xmm1
00a6510b: mulss xmm0, dword ptr [0xeca320]
00a65113: comiss xmm2, xmm0
00a65116: jbe 0xa6511c
00a65118: movaps xmm0, xmm2
00a6511b: ret 
00a6511c: comiss xmm1, xmm0
00a6511f: ja 0xa65124
00a65121: movaps xmm0, xmm1
00a65124: ret 
00a65125: int3 
00a65126: int3 
00a65127: int3 
00a65128: int3 
00a65129: int3 
00a6512a: int3 
00a6512b: int3 
00a6512c: int3 
00a6512d: int3 
00a6512e: int3 
00a6512f: int3 
00a65130: push ebp
00a65131: push edi
00a65132: movzx edi, byte ptr [ecx + 0x7d]
00a65136: xor ebp, ebp
00a65138: xor edx, edx
00a6513a: test edi, edi
00a6513c: jle 0xa65160
00a6513e: push esi
00a6513f: nop 
00a65140: cmp edx, 0x13
00a65143: ja 0xa6514a
00a65145: mov esi, dword ptr [ecx + edx*4]
00a65148: jmp 0xa6514c
00a6514a: xor esi, esi
00a6514c: mov eax, dword ptr [esi + 0xb4]
00a65152: shr eax, 0x14
00a65155: test al, 0xf
00a65157: jle 0xa6515a
00a65159: inc ebp
00a6515a: inc edx
00a6515b: .byte 0x3b

3over4 data0xec6fc0 operand0xa674ab candidate-start0xa673f0
00a673f0: push ecx
00a673f1: xorps xmm0, xmm0
00a673f4: push ebx
00a673f5: mov ebx, dword ptr [esp + 0x10]
00a673f9: push esi
00a673fa: xor esi, esi
00a673fc: mov ecx, edi
00a673fe: movss dword ptr [esp + 8], xmm0
00a67404: mov dword ptr [esp + 0x14], esi
00a67408: call 0xcc9ac0
00a6740d: fld dword ptr [esp + 0x10]
00a67411: fsub dword ptr [0xed0058]
00a67417: fcompi st(1)
00a67419: fstp st(0)
00a6741b: jbe 0xa67425
00a6741d: mov dword ptr [esp + 0x14], 0xffffffff
00a67425: mov ecx, edi
00a67427: call 0xcc9ac0
00a6742c: fld dword ptr [esp + 0x10]
00a67430: fadd dword ptr [0xed0058]
00a67436: fxch st(1)
00a67438: fcompi st(1)
00a6743a: fstp st(0)
00a6743c: jbe 0xa67446
00a6743e: mov dword ptr [esp + 0x14], 1
00a67446: push esi
00a67447: mov edx, edi
00a67449: mov ecx, ebx
00a6744b: call 0xa665b0
00a67450: test eax, eax
00a67452: je 0xa6748c
00a67454: movzx eax, word ptr [eax + 2]
00a67458: mov ecx, 0xffff
00a6745d: cmp ax, cx
00a67460: je 0xa6748c
00a67462: mov ecx, eax
00a67464: call 0xa4e1c0
00a67469: mov ecx, eax
00a6746b: call 0xcb6870
00a67470: fst dword ptr [esp + 0x10]
00a67474: fld dword ptr [esp + 8]
00a67478: fcompi st(1)
00a6747a: fstp st(0)
00a6747c: ja 0xa6748c
00a6747e: movss xmm0, dword ptr [esp + 0x10]
00a67484: movss dword ptr [esp + 8], xmm0
00a6748a: jmp 0xa67492
00a6748c: movss xmm0, dword ptr [esp + 8]
00a67492: inc esi
00a67493: cmp esi, 4
00a67496: jl 0xa67446
00a67498: comiss xmm0, dword ptr [0xec98cc]
00a6749f: jbe 0xa674a8
00a674a1: sub dword ptr [esp + 0x14], 9
00a674a6: jmp 0xa674e5
00a674a8: comiss xmm0, dword ptr [0xec6fc0]
00a674af: jbe 0xa674b8
00a674b1: sub dword ptr [esp + 0x14], 6
00a674b6: jmp 0xa674e5
00a674b8: comiss xmm0, dword ptr [0xec893c]
00a674bf: jbe 0xa674c8
00a674c1: sub dword ptr [esp + 0x14], 4
00a674c6: jmp 0xa674e5
00a674c8: comiss xmm0, dword ptr [0xf2d5d8]
00a674cf: jbe 0xa674d8
00a674d1: sub dword ptr [esp + 0x14], 2
00a674d6: jmp 0xa674e5
00a674d8: comiss xmm0, dword ptr [0xf0fc08]
00a674df: jbe 0xa674e5
00a674e1: dec dword ptr [esp + 0x14]
00a674e5: mov eax, dword ptr [esp + 0x14]
00a674e9: test eax, eax
00a674eb: jns 0xa6754b
00a674ed: cdq 
00a674ee: sub eax, edx
00a674f0: sar eax, 1
00a674f2: mov bl, al
00a674f4: mov ecx, edi
00a674f6: mov byte ptr [esp + 0x10], bl
00a674fa: call 0x48f230
00a674ff: xor ecx, ecx
00a67501: mov esi, eax
00a67503: call 0xa09e30
00a67508: xor ecx, ecx
00a6750a: .byte 0x38

3over4 data0xec6fc0 operand0xa7015e candidate-start0xa70150
00a70150: sub esp, 0xc
00a70153: jmp dword ptr [eax*4 + 0xa70200]
00a7015a: movss xmm0, dword ptr [0xec6fc0]
00a70162: jmp 0xa7017b
00a70164: movss xmm0, dword ptr [0xec6fd0]
00a7016c: jmp 0xa7017b
00a7016e: movss xmm0, dword ptr [0xec6fd4]
00a70176: jmp 0xa7017b
00a70178: xorps xmm0, xmm0
00a7017b: movzx ecx, byte ptr [esi + 0xf4]
00a70182: movss dword ptr [esp], xmm0
00a70187: call 0xa4e1e0
00a7018c: mov ecx, eax
00a7018e: call 0x48f330
00a70193: test eax, eax
00a70195: jne 0xa701f4
00a70197: mov ecx, dword ptr [0x10e23b8]
00a7019d: call 0xd963d0
00a701a2: mov ecx, eax
00a701a4: mov dword ptr [esp + 8], edx
00a701a8: call 0xd96410
00a701ad: fld dword ptr [esp]
00a701b0: fcompi st(1)
00a701b2: fstp st(0)
00a701b4: jbe 0xa701f4
00a701b6: mov ecx, dword ptr [0x10e23b8]
00a701bc: .byte 0xe8
00a701bd: .byte 0x0f

3over4 data0xec6fc0 operand0xa7328a candidate-start0xa73130
00a73130: sub esp, 0xd4
00a73136: push ebx
00a73137: mov ebx, dword ptr [esp + 0xdc]
00a7313e: push esi
00a7313f: pxor xmm0, xmm0
00a73143: push 0x90
00a73148: lea eax, [esp + 0x50]
00a7314c: push 0
00a7314e: push eax
00a7314f: mov dword ptr [esp + 0x28], 0
00a73157: mov dword ptr [esp + 0x2c], 0
00a7315f: movq qword ptr [esp + 0x30], xmm0
00a73165: movq qword ptr [esp + 0x38], xmm0
00a7316b: movq qword ptr [esp + 0x40], xmm0
00a73171: movq qword ptr [esp + 0x48], xmm0
00a73177: movq qword ptr [esp + 0x50], xmm0
00a7317d: call 0xe231d0
00a73182: mov esi, dword ptr [ebx + 0x1ec]
00a73188: shr esi, 4
00a7318b: add esp, 0xc
00a7318e: mov ecx, edi
00a73190: and esi, 3
00a73193: call 0xa6e230
00a73198: movss xmm1, dword ptr [esp + 0xe4]
00a731a1: mulss xmm1, dword ptr [0xec98c4]
00a731a9: xorps xmm0, xmm0
00a731ac: cvtsi2ss xmm0, eax
00a731b0: comiss xmm0, xmm1
00a731b3: jbe 0xa731c3
00a731b5: xorps xmm0, xmm0
00a731b8: pop esi
00a731b9: pop ebx
00a731ba: add esp, 0xd4
00a731c0: ret 0xc
00a731c3: mov ecx, edi
00a731c5: call 0xa5ba00
00a731ca: fstp dword ptr [esp + 8]
00a731ce: mov edx, edi
00a731d0: mov ecx, ebx
00a731d2: call 0xcca460
00a731d7: fstp dword ptr [esp + 0x18]
00a731db: fld dword ptr [0xec703c]
00a731e1: movss xmm0, dword ptr [edi + 0x80]
00a731e9: fld dword ptr [esp + 8]
00a731ed: movss xmm1, dword ptr [0xec6e14]
00a731f5: fcompi st(1)
00a731f7: fstp st(0)
00a731f9: movss dword ptr [esp + 0x14], xmm0
00a731ff: jbe 0xa7326d
00a73201: lea edx, [esp + 0x1c]
00a73205: mov ecx, ebx
00a73207: call 0xa654c0
00a7320c: lea edx, [esp + 0x1c]
00a73210: mov ecx, edi
00a73212: call 0xa65440
00a73217: lea ecx, [esp + 0x1c]
00a7321b: call 0xa651a0
00a73220: fstp dword ptr [esp + 0xc]
00a73224: lea ecx, [esp + 0x1c]
00a73228: push ecx
00a73229: mov edx, ebx
00a7322b: mov ecx, edi
00a7322d: call 0xa65380
00a73232: lea ecx, [esp + 0x1c]
00a73236: call 0xa651a0
00a7323b: fst dword ptr [esp + 0x10]
00a7323f: fld dword ptr [esp + 0xc]
00a73243: movss xmm1, dword ptr [0xec6e14]
00a7324b: fxch st(1)
00a7324d: fcompi st(1)
00a7324f: fstp st(0)
00a73251: jbe 0xa7326d
00a73253: movss xmm0, dword ptr [esp + 0x10]
00a73259: divss xmm0, dword ptr [esp + 0xc]
00a7325f: subss xmm0, xmm1
00a73263: mulss xmm0, dword ptr [0xec6e10]
00a7326b: jmp 0xa73270
00a7326d: xorps xmm0, xmm0
00a73270: cmp dword ptr [esp + 0xe8], 0
00a73278: je 0xa732cf
00a7327a: cmp byte ptr [ebx + 0x7d], 0xc
00a7327e: jae 0xa7329a
00a73280: movss xmm1, dword ptr [esp + 8]
00a73286: mulss xmm0, dword ptr [0xec6fc0]
00a7328e: mulss xmm1, dword ptr [0xec6fd0]
00a73296: addss xmm0, xmm1
00a7329a: movss dword ptr [esp + 8], xmm0
00a732a0: call 0x48ef10
00a732a5: cmp eax, 3
00a732a8: jne 0xa732ec
00a732aa: call 0x498200
00a732af: cmp dword ptr [eax + 0x14], ebx
00a732b2: jne 0xa732ec
00a732b4: mov ecx, edi
00a732b6: call 0x498510
00a732bb: test eax, eax
00a732bd: je 0xa732ec
00a732bf: movss xmm1, dword ptr [esp + 8]
00a732c5: mulss xmm1, dword ptr [0xec7068]
00a732cd: jmp 0xa732f2
00a732cf: movss xmm2, dword ptr [esi*4 + 0xf6446c]
00a732d8: subss xmm1, xmm2
00a732dc: mulss xmm1, dword ptr [esp + 8]
00a732e2: mulss xmm2, xmm0
00a732e6: addss xmm1, xmm2

3over4 data0xec6fc0 operand0xa80b2e candidate-start0xa80850
00a80850: sub esp, 0x18c
00a80856: push ebx
00a80857: push ebp
00a80858: push esi
00a80859: push edi
00a8085a: mov edi, eax
00a8085c: mov ecx, edi
00a8085e: call 0xa4e150
00a80863: mov ecx, edi
00a80865: mov ebx, eax
00a80867: call 0xa4e130
00a8086c: mov ecx, edi
00a8086e: mov esi, eax
00a80870: call 0xa76090
00a80875: mov ecx, dword ptr [edi + 4]
00a80878: mov ebp, eax
00a8087a: mov eax, ecx
00a8087c: shr eax, 0xf
00a8087f: mov dword ptr [esp + 0x10], ebp
00a80883: and eax, 7
00a80886: jmp dword ptr [eax*4 + 0xa80ddc]
00a8088d: mov edx, dword ptr [esi + 0x16c]
00a80893: shr edx, 7
00a80896: and edx, 7
00a80899: jmp dword ptr [edx*4 + 0xa80df4]
00a808a0: xor ecx, ecx
00a808a2: call 0xa09eb0
00a808a7: mov eax, dword ptr [eax + 0x3c]
00a808aa: test eax, eax
00a808ac: jne 0xa808bb
00a808ae: cmp dword ptr [esp + 0x1a0], eax
00a808b5: jne 0xa80dcb
00a808bb: cmp dword ptr [esp + 0x1a4], 0
00a808c3: jne 0xa80dcb
00a808c9: push 0x170
00a808ce: lea eax, [esp + 0x30]
00a808d2: pxor xmm0, xmm0
00a808d6: push 0
00a808d8: push eax
00a808d9: movq qword ptr [esp + 0x24], xmm0
00a808df: movq qword ptr [esp + 0x2c], xmm0
00a808e5: mov dword ptr [esp + 0x34], 0
00a808ed: call 0xe231d0
00a808f2: add esp, 0xc
00a808f5: push -1
00a808f7: push -1
00a808f9: lea ecx, [esp + 0x1c]
00a808fd: push ecx
00a808fe: mov dword ptr [esp + 0x20], esi
00a80902: mov dword ptr [esp + 0x38], ebx
00a80906: mov dword ptr [esp + 0x180], edi
00a8090d: call 0x4dfc00
00a80912: mov edx, dword ptr [0x133bb10]
00a80918: jmp 0xa80dc4
00a8091d: xor ecx, ecx
00a8091f: call 0xa09eb0
00a80924: mov eax, dword ptr [eax + 0x3c]
00a80927: test eax, eax
00a80929: jne 0xa80938
00a8092b: cmp dword ptr [esp + 0x1a0], eax
00a80932: jne 0xa80dcb
00a80938: cmp dword ptr [esp + 0x1a4], 0
00a80940: jne 0xa80dcb
00a80946: push 0x170
00a8094b: lea edx, [esp + 0x30]
00a8094f: pxor xmm0, xmm0
00a80953: push 0
00a80955: push edx
00a80956: movq qword ptr [esp + 0x24], xmm0
00a8095c: movq qword ptr [esp + 0x2c], xmm0
00a80962: mov dword ptr [esp + 0x34], 0
00a8096a: call 0xe231d0
00a8096f: add esp, 0xc
00a80972: push -1
00a80974: push -1
00a80976: lea eax, [esp + 0x1c]
00a8097a: push eax
00a8097b: mov dword ptr [esp + 0x20], esi
00a8097f: mov dword ptr [esp + 0x38], ebx
00a80983: mov dword ptr [esp + 0x180], edi
00a8098a: call 0x4dfc00
00a8098f: mov edx, dword ptr [0x133bb0c]
00a80995: jmp 0xa80dc4
00a8099a: cmp dword ptr [esp + 0x1a0], 0
00a809a2: je 0xa809c6
00a809a4: cmp dword ptr [esp + 0x1a8], 0
00a809ac: je 0xa80a6b
00a809b2: pop edi
00a809b3: xor eax, eax
00a809b5: pop esi
00a809b6: test ebp, ebp
00a809b8: pop ebp
00a809b9: setg al
00a809bc: pop ebx
00a809bd: add esp, 0x18c
00a809c3: ret 0xc
00a809c6: test eax, eax
00a809c8: je 0xa80a6b
00a809ce: shr ecx, 0x18
00a809d1: and ecx, 7
00a809d4: cmp ecx, 1
00a809d7: jne 0xa80a6b
00a809dd: mov ecx, esi
00a809df: call 0xcb3de0
00a809e4: mov ebp, dword ptr [esi + 0x78]
00a809e7: shr ebp, 0xe
00a809ea: mov ecx, esi
00a809ec: and ebp, 0x1f
00a809ef: call 0xcb69f0
00a809f4: cmp eax, 0x19
00a809f7: jg 0xa809fe
00a809f9: cmp ebp, 4
00a809fc: jle 0xa80a67
00a809fe: and dword ptr [edi + 4], 0xfffffdff
00a80a05: cmp dword ptr [esp + 0x1a4], 0
00a80a0d: jne 0xa80dcb
00a80a13: push 0x170
00a80a18: lea ecx, [esp + 0x30]
00a80a1c: pxor xmm0, xmm0
00a80a20: push 0
00a80a22: push ecx
00a80a23: movq qword ptr [esp + 0x24], xmm0
00a80a29: movq qword ptr [esp + 0x2c], xmm0
00a80a2f: mov dword ptr [esp + 0x34], 0
00a80a37: call 0xe231d0
00a80a3c: add esp, 0xc
00a80a3f: push -1
00a80a41: push -1
00a80a43: lea edx, [esp + 0x1c]
00a80a47: push edx
00a80a48: mov dword ptr [esp + 0x20], esi
00a80a4c: mov dword ptr [esp + 0x38], ebx
00a80a50: mov dword ptr [esp + 0x180], edi
00a80a57: call 0x4dfc00
00a80a5c: mov edx, dword ptr [0x133bb2c]
00a80a62: jmp 0xa80dc4
00a80a67: mov ebp, dword ptr [esp + 0x10]
00a80a6b: cmp ebp, 0x64
00a80a6e: jle 0xa80b0f
00a80a74: cmp dword ptr [esp + 0x1a4], 0
00a80a7c: jne 0xa80afd
00a80a7e: call 0xa289f0
00a80a83: test eax, eax
00a80a85: jne 0xa80afd
00a80a87: cmp dword ptr [esp + 0x1a0], eax
00a80a8e: jne 0xa80afd
00a80a90: mov ecx, ebx
00a80a92: call 0x48f230
00a80a97: mov ecx, eax
00a80a99: call 0x48f1b0
00a80a9e: cmp dword ptr [eax + 0x2dc], 0
00a80aa5: jne 0xa80afd
00a80aa7: push 0x170
00a80aac: lea eax, [esp + 0x30]
00a80ab0: pxor xmm0, xmm0
00a80ab4: push 0
00a80ab6: push eax
00a80ab7: movq qword ptr [esp + 0x24], xmm0
00a80abd: movq qword ptr [esp + 0x2c], xmm0
00a80ac3: mov dword ptr [esp + 0x34], 0
00a80acb: call 0xe231d0
00a80ad0: add esp, 0xc
00a80ad3: push -1
00a80ad5: push -1
00a80ad7: lea ecx, [esp + 0x1c]
00a80adb: push ecx
00a80adc: mov dword ptr [esp + 0x20], esi
00a80ae0: mov dword ptr [esp + 0x38], ebx
00a80ae4: mov dword ptr [esp + 0x180], edi
00a80aeb: call 0x4dfc00
00a80af0: mov edx, dword ptr [0x133bb04]
00a80af6: mov ecx, eax
00a80af8: call 0x57abb0
00a80afd: pop edi
00a80afe: pop esi
00a80aff: pop ebp
00a80b00: mov eax, 1
00a80b05: pop ebx
00a80b06: add esp, 0x18c
00a80b0c: ret 0xc
00a80b0f: cmp ebp, 0x4b
00a80b12: jl 0xa80c06
00a80b18: movss xmm1, dword ptr [0xec6fd0]
00a80b20: xorps xmm0, xmm0
00a80b23: lea edx, [ebp - 0x4b]
00a80b26: cvtsi2ss xmm0, edx
00a80b2a: mulss xmm0, dword ptr [0xec6fc0]
00a80b32: mulss xmm0, dword ptr [0xec7090]
00a80b3a: addss xmm0, xmm1
00a80b3e: comiss xmm1, xmm0
00a80b41: ja 0xa80b50
00a80b43: movss xmm1, dword ptr [0xec6e14]
00a80b4b: comiss xmm1, xmm0
00a80b4e: ja 0xa80b53
00a80b50: movaps xmm0, xmm1
00a80b53: push ecx
00a80b54: mov ecx, 0x10e23b8
00a80b59: movss dword ptr [esp], xmm0
00a80b5e: call 0x41c330
00a80b63: test eax, eax
00a80b65: je 0xa80c06
00a80b6b: cmp dword ptr [esp + 0x1a4], 0
00a80b73: jne 0xa80bf4
00a80b75: call 0xa289f0
00a80b7a: test eax, eax
00a80b7c: jne 0xa80bf4
00a80b7e: cmp dword ptr [esp + 0x1a0], eax
00a80b85: jne 0xa80bf4
00a80b87: mov ecx, ebx
00a80b89: call 0x48f230

3over4 data0xec6fc0 operand0xab3cc7 candidate-start0xab3c50
00ab3c50: push ebp
00ab3c51: mov ebp, esp
00ab3c53: and esp, 0xfffffff0
00ab3c56: sub esp, 0x2fc
00ab3c5c: push esi
00ab3c5d: call 0x4bf970
00ab3c62: lea ecx, [esp + 0xd0]
00ab3c69: mov esi, eax
00ab3c6b: call 0xd96840
00ab3c70: mov ecx, esi
00ab3c72: call 0xd96ee0
00ab3c77: call 0x6a79b0
00ab3c7c: movss xmm0, dword ptr [esi + 0x1f4]
00ab3c84: subss xmm0, dword ptr [esi + 0x204]
00ab3c8c: movdqa xmm1, xmmword ptr [0xf68280]
00ab3c94: movdqa xmmword ptr [esp + 0x10], xmm1
00ab3c9a: shufps xmm0, xmm0, 0
00ab3c9e: andps xmm0, xmm1
00ab3ca1: movaps xmmword ptr [esp + 0x20], xmm0
00ab3ca6: movss xmm0, dword ptr [esp + 0x20]
00ab3cac: mulss xmm0, dword ptr [0xec98cc]
00ab3cb4: movss dword ptr [esp + 0xc], xmm0
00ab3cba: call 0x6a79b0
00ab3cbf: test eax, eax
00ab3cc1: je 0xab3ccd
00ab3cc3: movss xmm0, dword ptr [0xec6fc0]
00ab3ccb: jmp 0xab3cd5
00ab3ccd: movss xmm0, dword ptr [0xec7070]
00ab3cd5: movss dword ptr [esp + 8], xmm0
00ab3cdb: movss xmm0, dword ptr [esi + 0x200]
00ab3ce3: subss xmm0, dword ptr [esi + 0x1f0]
00ab3ceb: lea ecx, [esp + 0x40]
00ab3cef: shufps xmm0, xmm0, 0
00ab3cf3: andps xmm0, xmmword ptr [esp + 0x10]
00ab3cf8: movaps xmmword ptr [esp + 0x30], xmm0
00ab3cfd: call 0x566220
00ab3d02: mov edx, 2
00ab3d07: lea ecx, [esp + 0x40]
00ab3d0b: call 0x55d890
00ab3d10: or edx, 0xffffffff
00ab3d13: lea ecx, [esp + 0x40]
00ab3d17: call 0x505b60
00ab3d1c: mov edx, 1
00ab3d21: lea ecx, [esp + 0x40]
00ab3d25: .byte 0xe8
00ab3d26: .byte 0xf6

3over4 data0xec6fc0 operand0xab8389 candidate-start0xab8020
00ab8020: sub esp, 0x28
00ab8023: push ebx
00ab8024: push esi
00ab8025: mov esi, ecx
00ab8027: xor ebx, ebx
00ab8029: cmp dword ptr [esi + 0x3c], ebx
00ab802c: je 0xab804b
00ab802e: call 0x9f4070
00ab8033: cmp dword ptr [esi + 0x44], eax
00ab8036: jne 0xab804b
00ab8038: call 0x9f4080
00ab803d: cmp dword ptr [esi + 0x48], eax
00ab8040: jne 0xab804b
00ab8042: pop esi
00ab8043: lea eax, [ebx + 1]
00ab8046: pop ebx
00ab8047: add esp, 0x28
00ab804a: ret 
00ab804b: mov ecx, esi
00ab804d: call 0xab7080
00ab8052: call 0x9f4070
00ab8057: mov dword ptr [esi + 0x44], eax
00ab805a: call 0x9f4080
00ab805f: mov dword ptr [esi + 0x48], eax
00ab8062: call 0x9f4070
00ab8067: mov dword ptr [esi + 0x40], eax
00ab806a: cmp eax, ebx
00ab806c: je 0xab8093
00ab806e: test dword ptr [eax + 0x1ec], 0xfc000000
00ab8078: je 0xab8093
00ab807a: call 0x9f4070
00ab807f: cmp dword ptr [esi + 0x40], eax
00ab8082: jne 0xab808b
00ab8084: call 0x9f4080
00ab8089: jmp 0xab8090
00ab808b: call 0x9f4070
00ab8090: mov dword ptr [esi + 0x40], eax
00ab8093: mov eax, dword ptr [esi + 0x40]
00ab8096: push ebp
00ab8097: push edi
00ab8098: xor edi, edi
00ab809a: mov dword ptr [esp + 0x10], edi
00ab809e: cmp eax, ebx
00ab80a0: je 0xab80ae
00ab80a2: test dword ptr [eax + 0x1ec], 0xfc000000
00ab80ac: je 0xab80eb
00ab80ae: xor edx, edx
00ab80b0: mov ecx, esi
00ab80b2: call 0xab7eb0
00ab80b7: mov edx, dword ptr [esi + 0x50]
00ab80ba: mov ebp, 1
00ab80bf: mov ecx, ebp
00ab80c1: call 0x4b0090
00ab80c6: cmp eax, ebx
00ab80c8: je 0xab80d3
00ab80ca: mov dword ptr [esi + 0x40], eax
00ab80cd: mov dword ptr [esp + 0x10], ebp
00ab80d1: mov edi, ebp
00ab80d3: mov edx, dword ptr [esi + 0x78]
00ab80d6: mov ecx, esi
00ab80d8: call 0xab6ca0
00ab80dd: mov edx, dword ptr [esi + 0x78]
00ab80e0: add edx, ebp
00ab80e2: mov ecx, esi
00ab80e4: call 0xab6ca0
00ab80e9: jmp 0xab80f0
00ab80eb: mov ebp, 1
00ab80f0: mov dword ptr [esi + 0x3c], ebx
00ab80f3: mov dword ptr [esp + 0x14], ebx
00ab80f7: mov dword ptr [esp + 0x20], ebp
00ab80fb: mov dword ptr [esp + 0x24], ebp
00ab80ff: mov dword ptr [esp + 0x28], ebx
00ab8103: mov dword ptr [esp + 0x2c], ebx
00ab8107: mov dword ptr [esp + 0x30], ebx
00ab810b: mov dword ptr [esp + 0x34], ebp
00ab810f: nop 
00ab8110: cmp dword ptr [esp + 0x14], 5
00ab8115: jge 0xab8450
00ab811b: cmp dword ptr [0x1e85d08], 0
00ab8122: jne 0xab814a
00ab8124: test edi, edi
00ab8126: jne 0xab814a
00ab8128: call 0x5e87c0
00ab812d: test eax, eax
00ab812f: jne 0xab814a
00ab8131: call 0x5e7480
00ab8136: test eax, eax
00ab8138: jne 0xab814a
00ab813a: lea edx, [esp + 0x20]
00ab813e: mov ecx, esi
00ab8140: call 0xab70f0
00ab8145: mov dword ptr [esi + 0x3c], eax
00ab8148: jmp 0xab8151
00ab814a: mov dword ptr [esi + 0x3c], 4
00ab8151: mov eax, dword ptr [esi + 0x3c]
00ab8154: add dword ptr [esp + 0x14], ebp
00ab8158: mov dword ptr [esp + eax*4 + 0x20], ebp
00ab815c: call 0x48ef10
00ab8161: cmp eax, ebp
00ab8163: jne 0xab81a0
00ab8165: call 0x5e87c0
00ab816a: test eax, eax
00ab816c: jne 0xab81a0
00ab816e: call 0x5e7480
00ab8173: test eax, eax
00ab8175: jne 0xab81a0
00ab8177: test edi, edi
00ab8179: jne 0xab81a0
00ab817b: cmp dword ptr [0x1e85d08], edi
00ab8181: jne 0xab81a0
00ab8183: mov eax, dword ptr [esi + 0x3c]
00ab8186: sub eax, edi
00ab8188: je 0xab8199
00ab818a: sub eax, 2
00ab818d: je 0xab81a0
00ab818f: sub eax, ebp
00ab8191: jne 0xab8110
00ab8197: jmp 0xab81a0
00ab8199: mov dword ptr [esi + 0x3c], 4
00ab81a0: mov ecx, dword ptr [esi + 0x40]
00ab81a3: test dword ptr [ecx + 0x1ec], 0xfc000000
00ab81ad: je 0xab81b9
00ab81af: cmp dword ptr [esi + 0x3c], 3
00ab81b3: jne 0xab8110
00ab81b9: mov edx, dword ptr [esi + 0x3c]
00ab81bc: lea eax, [edx - 1]
00ab81bf: cmp eax, 4
00ab81c2: ja 0xab8110
00ab81c8: jmp dword ptr [eax*4 + 0xab845c]
00ab81cf: call 0x5e87c0
00ab81d4: test eax, eax
00ab81d6: jne 0xab81ed
00ab81d8: call 0x5e7480
00ab81dd: test eax, eax
00ab81df: jne 0xab81ed
00ab81e1: test edi, edi
00ab81e3: jne 0xab81ed
00ab81e5: cmp dword ptr [0x1e85d08], edi
00ab81eb: je 0xab8212
00ab81ed: mov edx, dword ptr [esi + 0x50]
00ab81f0: mov ecx, ebp
00ab81f2: call 0x4b0090
00ab81f7: mov dword ptr [esi + 0x40], eax
00ab81fa: test eax, eax
00ab81fc: jne 0xab8206
00ab81fe: call 0x9f4070
00ab8203: mov dword ptr [esi + 0x40], eax
00ab8206: mov edx, dword ptr [esi + 0x78]
00ab8209: add edx, ebp
00ab820b: mov ecx, esi
00ab820d: call 0xab6ca0
00ab8212: mov edx, ebp
00ab8214: mov ecx, esi
00ab8216: call 0xab7eb0
00ab821b: mov edx, dword ptr [esi + 0x40]
00ab821e: cmp byte ptr [edx + 0x7b], 0
00ab8222: jne 0xab8231
00ab8224: mov edx, dword ptr [esi + 0x50]
00ab8227: mov ecx, ebp
00ab8229: call 0x4b0090
00ab822e: mov dword ptr [esi + 0x40], eax
00ab8231: mov edx, dword ptr [esi + 0x3c]
00ab8234: mov ecx, esi
00ab8236: call 0xab7f90
00ab823b: test eax, eax
00ab823d: je 0xab8110
00ab8243: pop edi
00ab8244: mov ebx, ebp
00ab8246: pop ebp
00ab8247: pop esi
00ab8248: mov eax, ebx
00ab824a: pop ebx
00ab824b: add esp, 0x28
00ab824e: ret 
00ab824f: mov ecx, esi
00ab8251: call 0xab7f90
00ab8256: test eax, eax
00ab8258: je 0xab8110
00ab825e: xor edx, edx
00ab8260: mov ecx, esi
00ab8262: call 0xab7eb0
00ab8267: mov edx, dword ptr [esi + 0x40]
00ab826a: push 0
00ab826c: mov ecx, esi
00ab826e: call 0xab71c0
00ab8273: cmp dword ptr [esi + 0x94], 0
00ab827a: mov ebx, ebp
00ab827c: jne 0xab8280
00ab827e: xor ebx, ebx
00ab8280: cmp dword ptr [esi + 0x98], 0
00ab8287: jne 0xab828b
00ab8289: xor ebx, ebx
00ab828b: cmp dword ptr [esi + 0x9c], 0
00ab8292: jne 0xab8296
00ab8294: xor ebx, ebx
00ab8296: cmp dword ptr [esi + 0xa0], 0
00ab829d: jne 0xab83c3
00ab82a3: xor ebx, ebx
00ab82a5: jmp 0xab8110
00ab82aa: mov ecx, esi
00ab82ac: call 0xab7f90
00ab82b1: test eax, eax
00ab82b3: je 0xab8110
00ab82b9: mov ecx, esi
00ab82bb: call 0xab7020
00ab82c0: lea ebx, [esi + 0x64]
00ab82c3: mov ebp, 4
00ab82c8: mov ecx, eax
00ab82ca: shl ecx, 4
00ab82cd: xor edi, edi
00ab82cf: cmp eax, dword ptr [ecx + 0x134a378]
00ab82d5: jne 0xab834c
00ab82d7: cmp edi, 0x14
00ab82da: jge 0xab834c
00ab82dc: fld dword ptr [0x134a37c]
00ab82e2: mov ecx, dword ptr [0x10e23b8]
00ab82e8: fadd dword ptr [0x134a38c]
00ab82ee: fadd dword ptr [0x134a39c]
00ab82f4: fadd dword ptr [0x134a3ac]
00ab82fa: fstp dword ptr [esp + 0x18]
00ab82fe: call 0xd963d0
00ab8303: mov ecx, eax
00ab8305: call 0xd96410
00ab830a: fmul dword ptr [esp + 0x18]
00ab830e: xor ecx, ecx
00ab8310: mov eax, 0x134a37c
00ab8315: fstp dword ptr [esp + 0x18]
00ab8319: movss xmm0, dword ptr [esp + 0x18]
00ab831f: nop 
00ab8320: movss xmm1, dword ptr [eax]
00ab8324: comiss xmm1, xmm0
00ab8327: ja 0xab83d5
00ab832d: add eax, 0x10
00ab8330: inc ecx
00ab8331: subss xmm0, xmm1
00ab8335: cmp eax, 0x134a3bc
00ab833a: jl 0xab8320
00ab833c: xor eax, eax
00ab833e: mov edx, eax
00ab8340: shl edx, 4
00ab8343: inc edi
00ab8344: cmp eax, dword ptr [edx + 0x134a378]
00ab834a: je 0xab82d7
00ab834c: mov dword ptr [ebx], eax
00ab834e: add ebx, 4
00ab8351: dec ebp
00ab8352: jne 0xab82c8
00ab8358: xor ebx, ebx
00ab835a: mov dword ptr [esi + 0x74], ebx
00ab835d: call 0x48ef10
00ab8362: cmp eax, 1
00ab8365: jne 0xab83a7
00ab8367: mov edi, dword ptr [esi + 0x40]
00ab836a: mov edx, eax
00ab836c: mov ecx, edi
00ab836e: call 0x604d50
00ab8373: xor edx, edx
00ab8375: mov ecx, edi
00ab8377: mov ebp, eax
00ab8379: call 0x604d50
00ab837e: add ebp, eax
00ab8380: cmp ebp, 5
00ab8383: jle 0xab83a7
00ab8385: movss xmm0, dword ptr [0xec6fc0]
00ab838d: push ecx
00ab838e: mov ecx, 0x10e23b8
00ab8393: movss dword ptr [esp], xmm0
00ab8398: call 0x41c330
00ab839d: test eax, eax
00ab839f: je 0xab83a7
00ab83a1: mov dword ptr [esi + 0xf4], ebx
00ab83a7: mov edx, dword ptr [esi + 0x74]
00ab83aa: push ebx
00ab83ab: mov ecx, esi
00ab83ad: call 0xab7310
00ab83b2: mov edi, dword ptr [esp + 0x10]
00ab83b6: xor ebx, ebx
00ab83b8: cmp eax, 5
00ab83bb: sete bl
00ab83be: mov ebp, 1
00ab83c3: test ebx, ebx
00ab83c5: je 0xab8110
00ab83cb: pop edi
00ab83cc: pop ebp
00ab83cd: pop esi
00ab83ce: mov eax, ebx
00ab83d0: pop ebx
00ab83d1: add esp, 0x28
00ab83d4: ret 
00ab83d5: mov eax, ecx
00ab83d7: jmp 0xab833e
00ab83dc: mov ecx, esi
00ab83de: call 0xab7f90
00ab83e3: test eax, eax
00ab83e5: .byte 0x0f
00ab83e6: .byte 0x84
00ab83e7: .byte 0x25
00ab83e8: std 

3over4 data0xec6fc0 operand0xabe499 candidate-start0xabded0
00abded0: sub esp, 0x3c
00abded3: push ebx
00abded4: push ebp
00abded5: push edi
00abded6: mov edi, dword ptr [esp + 0x54]
00abdeda: mov ebp, ecx
00abdedc: mov ebx, edx
00abdede: mov dword ptr [esp + 0x10], ebp
00abdee2: test edi, edi
00abdee4: jne 0xabdef1
00abdee6: pop edi
00abdee7: pop ebp
00abdee8: xor eax, eax
00abdeea: pop ebx
00abdeeb: add esp, 0x3c
00abdeee: ret 0xc
00abdef1: push esi
00abdef2: mov esi, dword ptr [edi + 0xc]
00abdef5: lea eax, [esp + 0x10]
00abdef9: push eax
00abdefa: mov edx, 0x64d20921
00abdeff: mov ecx, esi
00abdf01: mov dword ptr [esp + 0x14], 0x7f9000cf
00abdf09: call 0x69e170
00abdf0e: lea ecx, [esp + 0x1c]
00abdf12: push ecx
00abdf13: mov edx, 0xf467595c
00abdf18: mov ecx, esi
00abdf1a: call 0x69e170
00abdf1f: test eax, eax
00abdf21: je 0xabe406
00abdf27: mov eax, dword ptr [esp + 0x1c]
00abdf2b: cmp eax, 0x98229d65
00abdf30: ja 0xabe22d
00abdf36: je 0xabe098
00abdf3c: cmp eax, 0x5d107123
00abdf41: ja 0xabdfa4
00abdf43: je 0xabdf7b
00abdf45: cmp eax, 0x2340a7bf
00abdf4a: je 0xabdf5e
00abdf4c: cmp eax, 0x2a574990
00abdf51: jne 0xabe3f7
00abdf57: push 6
00abdf59: jmp 0xabe3cb
00abdf5e: mov edx, dword ptr [esp + 0x50]
00abdf62: push edx
00abdf63: mov edx, ebx
00abdf65: mov ecx, ebp
00abdf67: call 0xabb840
00abdf6c: pop esi
00abdf6d: pop edi
00abdf6e: pop ebp
00abdf6f: mov eax, 1
00abdf74: pop ebx
00abdf75: add esp, 0x3c
00abdf78: ret 0xc
00abdf7b: call 0x558420
00abdf80: test eax, eax
00abdf82: je 0xabe3f7
00abdf88: push eax
00abdf89: mov edx, 0xb6e7ae40
00abdf8e: mov ecx, ebx
00abdf90: call 0xdcd7a0
00abdf95: pop esi
00abdf96: pop edi
00abdf97: pop ebp
00abdf98: mov eax, 1
00abdf9d: pop ebx
00abdf9e: add esp, 0x3c
00abdfa1: ret 0xc
00abdfa4: cmp eax, 0x6c3656ad
00abdfa9: jne 0xabe3f7
00abdfaf: cmp dword ptr [esp + 0x10], 0x7f9000cf
00abdfb7: mov edx, ebx
00abdfb9: jne 0xabdfd1
00abdfbb: mov ecx, ebp
00abdfbd: call 0xabb7c0
00abdfc2: pop esi
00abdfc3: pop edi
00abdfc4: pop ebp
00abdfc5: mov eax, 1
00abdfca: pop ebx
00abdfcb: add esp, 0x3c
00abdfce: ret 0xc
00abdfd1: mov ecx, esi
00abdfd3: call 0xab3810
00abdfd8: test eax, eax
00abdfda: je 0xabdfe5
00abdfdc: mov dword ptr [ebx + 0x14], 0xffffffff
00abdfe3: jmp 0xabe009
00abdfe5: mov eax, dword ptr [esi]
00abdfe7: mov eax, dword ptr [eax + 0x10]
00abdfea: lea ecx, [esp + 0x2c]
00abdfee: xor edi, edi
00abdff0: push ecx
00abdff1: mov edx, 0x656ac9cd
00abdff6: mov ecx, esi
00abdff8: mov dword ptr [esp + 0x34], 0x82f6983b
00abe000: mov dword ptr [esp + 0x30], edi
00abe004: call eax
00abe006: mov dword ptr [ebx + 0x14], edi
00abe009: cmp dword ptr [esp + 0x10], 0xd1e4a3ee
00abe011: mov dword ptr [esp + 0x50], 0xffffffff
00abe019: jne 0xabe022
00abe01b: call 0x9f4070
00abe020: jmp 0xabe027
00abe022: call 0x9f4080
00abe027: lea ecx, [esp + 0x50]
00abe02b: push ecx
00abe02c: mov edx, 0x3b1b3fbe
00abe031: mov ecx, esi
00abe033: mov edi, eax
00abe035: call 0x69e120
00abe03a: mov eax, dword ptr [esp + 0x50]
00abe03e: cmp eax, 4
00abe041: ja 0xabe04c
00abe043: mov eax, dword ptr [edi + eax*4 + 0xd0]
00abe04a: jmp 0xabe04e
00abe04c: xor eax, eax
00abe04e: movzx esi, word ptr [eax + 0x13a]
00abe055: call 0x498200
00abe05a: cmp si, word ptr [eax + 0x13a]
00abe061: je 0xabe3f7
00abe067: cmp dword ptr [ebp + 0x37e4], 4
00abe06e: jne 0xabe3f7
00abe074: xorps xmm0, xmm0
00abe077: push ecx
00abe078: mov edx, 0x4b2e417e
00abe07d: mov ecx, ebx
00abe07f: movss dword ptr [esp], xmm0
00abe084: call 0xdce050
00abe089: pop esi
00abe08a: pop edi
00abe08b: pop ebp
00abe08c: mov eax, 1
00abe091: pop ebx
00abe092: add esp, 0x3c
00abe095: ret 0xc
00abe098: lea edx, [esp + 0x58]
00abe09c: push edx
00abe09d: mov edx, 0xcb537879
00abe0a2: mov ecx, esi
00abe0a4: call 0x69e120
00abe0a9: cmp dword ptr [esp + 0x58], 1
00abe0ae: je 0xabe3f7
00abe0b4: mov edx, dword ptr [ebp + 0x37c4]
00abe0ba: mov ecx, ebp
00abe0bc: mov dword ptr [esp + 0x20], edx
00abe0c0: call 0xabb4c0
00abe0c5: imul edx, edx, 0x580
00abe0cb: lea ebp, [edx + ebp + 0xc0]
00abe0d2: mov ecx, ebp
00abe0d4: call 0x5de6b0
00abe0d9: test eax, eax
00abe0db: je 0xabe122
00abe0dd: mov edx, dword ptr [esp + 0x50]
00abe0e1: push eax
00abe0e2: mov ecx, ebx
00abe0e4: call 0xdcd7a0
00abe0e9: mov dword ptr [ebx + 0x14], 0xffffffff
00abe0f0: mov eax, dword ptr [esi]
00abe0f2: mov eax, dword ptr [eax + 0x10]
00abe0f5: lea ecx, [esp + 0x34]
00abe0f9: push ecx
00abe0fa: mov edx, 0xcb537879
00abe0ff: mov ecx, esi
00abe101: mov dword ptr [esp + 0x3c], 0x82f6983b
00abe109: mov dword ptr [esp + 0x38], 1
00abe111: call eax
00abe113: pop esi
00abe114: pop edi
00abe115: pop ebp
00abe116: mov eax, 1
00abe11b: pop ebx
00abe11c: add esp, 0x3c
00abe11f: ret 0xc
00abe122: lea ecx, [esp + 0x28]
00abe126: push ecx
00abe127: mov edx, 0xa806bcf4
00abe12c: mov ecx, esi
00abe12e: call 0x69e120
00abe133: lea edx, [esp + 0x24]
00abe137: push edx
00abe138: mov edx, 0xe468f2aa
00abe13d: mov ecx, esi
00abe13f: call 0x69e120
00abe144: lea eax, [esp + 0x18]
00abe148: push eax
00abe149: mov edx, 0xfd651601
00abe14e: mov ecx, esi
00abe150: call 0x69e170
00abe155: mov eax, dword ptr [edi + 0x28]
00abe158: test eax, eax
00abe15a: je 0xabe169
00abe15c: lea esp, [esp]
00abe160: mov edi, eax
00abe162: mov eax, dword ptr [edi + 0x28]
00abe165: test eax, eax
00abe167: jne 0xabe160
00abe169: mov edx, dword ptr [esp + 0x18]
00abe16d: mov ecx, edi
00abe16f: call 0x69f140
00abe174: mov ecx, dword ptr [esp + 0x14]
00abe178: mov dword ptr [ecx + 0x37dc], eax
00abe17e: test eax, eax
00abe180: je 0xabe217
00abe186: mov edx, dword ptr [esp + 0x20]
00abe18a: movd xmm0, dword ptr [esp + 0x24]
00abe190: push 0
00abe192: push 0
00abe194: push 1
00abe196: push 0
00abe198: push 1
00abe19a: push edx
00abe19b: push 0
00abe19d: push 0
00abe19f: push 1
00abe1a1: push 0
00abe1a3: push 0xabcf00
00abe1a8: cvtdq2ps xmm0, xmm0
00abe1ab: sub esp, 8
00abe1ae: movss dword ptr [esp + 4], xmm0
00abe1b4: movd xmm0, dword ptr [esp + 0x5c]
00abe1ba: cvtdq2ps xmm0, xmm0
00abe1bd: xor edx, edx
00abe1bf: mov ecx, ebp
00abe1c1: movss dword ptr [esp], xmm0
00abe1c6: call 0x5de460
00abe1cb: mov ecx, ebp
00abe1cd: call 0x5de6b0
00abe1d2: mov edx, dword ptr [esp + 0x50]
00abe1d6: push eax
00abe1d7: mov ecx, ebx
00abe1d9: call 0xdcd7a0
00abe1de: mov dword ptr [ebx + 0x14], 0xffffffff
00abe1e5: mov eax, dword ptr [esi]
00abe1e7: mov eax, dword ptr [eax + 0x10]
00abe1ea: lea ecx, [esp + 0x3c]
00abe1ee: push ecx
00abe1ef: mov edx, 0xcb537879
00abe1f4: mov ecx, esi
00abe1f6: mov dword ptr [esp + 0x44], 0x82f6983b
00abe1fe: mov dword ptr [esp + 0x40], 1
00abe206: call eax
00abe208: pop esi
00abe209: pop edi
00abe20a: pop ebp
00abe20b: mov eax, 1
00abe210: pop ebx
00abe211: add esp, 0x3c
00abe214: ret 0xc
00abe217: pop esi
00abe218: pop edi
00abe219: pop ebp
00abe21a: mov dword ptr [ebx + 0x14], 0
00abe221: mov eax, 1
00abe226: pop ebx
00abe227: add esp, 0x3c
00abe22a: ret 0xc
00abe22d: cmp eax, 0xa9a2612e
00abe232: je 0xabe3c9
00abe238: cmp eax, 0xaa32c425
00abe23d: je 0xabe370
00abe243: cmp eax, 0xfa72d7a0
00abe248: jne 0xabe3f7
00abe24e: xor edi, edi
00abe250: mov dword ptr [esp + 0x58], edi
00abe254: call 0x60ee70
00abe259: mov ecx, eax
00abe25b: xor eax, eax
00abe25d: cmp dword ptr [ebp + 0x37e4], 7
00abe264: jne 0xabe26f
00abe266: lea edx, [esp + 0x58]
00abe26a: call 0x49ff40
00abe26f: mov dword ptr [esp + 0x14], edi
00abe273: cmp eax, edi
00abe275: je 0xabe293
00abe277: lea ecx, [esp + 0x14]
00abe27b: push ecx
00abe27c: mov edx, 0xa00712e9
00abe281: mov ecx, esi
00abe283: call 0x69e120
00abe288: test eax, eax
00abe28a: je 0xabe29c
00abe28c: cmp dword ptr [esp + 0x14], 1
00abe291: jne 0xabe29c
00abe293: call 0x498200
00abe298: mov dword ptr [esp + 0x58], eax
00abe29c: lea edx, [esp + 0x18]
00abe2a0: push edx
00abe2a1: mov edx, 0xfa72d7a0
00abe2a6: mov ecx, esi
00abe2a8: mov dword ptr [esp + 0x1c], 0xffffffff
00abe2b0: call 0x69e120
00abe2b5: test eax, eax
00abe2b7: je 0xabe34e
00abe2bd: mov eax, dword ptr [esp + 0x18]
00abe2c1: dec eax
00abe2c2: cmp eax, 4
00abe2c5: ja 0xabe3f7
00abe2cb: jmp dword ptr [eax*4 + 0xabe41c]
00abe2d2: mov ecx, dword ptr [esp + 0x58]
00abe2d6: mov esi, dword ptr [ecx + 0x15c]
00abe2dc: shr esi, 4
00abe2df: jmp 0xabe318
00abe2e1: mov ecx, dword ptr [esp + 0x58]
00abe2e5: mov esi, dword ptr [ecx + 0x15c]
00abe2eb: shr esi, 0xa
00abe2ee: jmp 0xabe318
00abe2f0: mov ecx, dword ptr [esp + 0x58]
00abe2f4: mov esi, dword ptr [ecx + 0x160]
00abe2fa: jmp 0xabe318
00abe2fc: mov ecx, dword ptr [esp + 0x58]
00abe300: mov esi, dword ptr [ecx + 0x160]
00abe306: shr esi, 6
00abe309: jmp 0xabe318
00abe30b: mov ecx, dword ptr [esp + 0x58]
00abe30f: mov esi, dword ptr [ecx + 0x160]
00abe315: shr esi, 0xc
00abe318: and esi, 0x3f
00abe31b: cmp esi, edi
00abe31d: je 0xabe34e
00abe31f: call 0xc896b0
00abe324: test eax, eax
00abe326: je 0xabe34e
00abe328: push edi
00abe329: push edi
00abe32a: push edi
00abe32b: push 0x5c369069
00abe330: mov ecx, esi
00abe332: call 0xc89600
00abe337: push eax
00abe338: push 0x62979c8d
00abe33d: mov edx, 0xbb05a9c1
00abe342: mov ecx, 0x20e3760
00abe347: call 0xd94400
00abe34c: mov edi, eax
00abe34e: mov edx, dword ptr [esp + 0x50]
00abe352: push edi
00abe353: mov ecx, ebx
00abe355: call 0xdcd7a0
00abe35a: neg edi
00abe35c: sbb edi, edi
00abe35e: pop esi
00abe35f: mov dword ptr [ebx + 0x14], edi
00abe362: pop edi
00abe363: pop ebp
00abe364: mov eax, 1
00abe369: pop ebx
00abe36a: add esp, 0x3c
00abe36d: ret 0xc
00abe370: lea eax, [esp + 0x10]
00abe374: push eax
00abe375: mov edx, ebx
00abe377: mov ecx, ebp
00abe379: call 0xabb4e0
00abe37e: test eax, eax
00abe380: jne 0xabe3b3
00abe382: mov eax, dword ptr [esi]
00abe384: mov eax, dword ptr [eax + 0x10]
00abe387: lea ecx, [esp + 0x44]
00abe38b: xor edi, edi
00abe38d: push ecx
00abe38e: mov edx, 0x656ac9cd
00abe393: mov ecx, esi
00abe395: mov dword ptr [esp + 0x4c], 0x82f6983b
00abe39d: mov dword ptr [esp + 0x48], edi
00abe3a1: call eax
00abe3a3: pop esi
00abe3a4: mov dword ptr [ebx + 0x14], edi
00abe3a7: lea eax, [edi + 1]
00abe3aa: pop edi
00abe3ab: pop ebp
00abe3ac: pop ebx
00abe3ad: add esp, 0x3c
00abe3b0: ret 0xc
00abe3b3: pop esi
00abe3b4: pop edi
00abe3b5: pop ebp
00abe3b6: mov dword ptr [ebx + 0x14], 0xffffffff
00abe3bd: mov eax, 1
00abe3c2: pop ebx
00abe3c3: add esp, 0x3c
00abe3c6: ret 0xc
00abe3c9: push 4
00abe3cb: cmp dword ptr [esp + 0x14], 0x7f9000cf
00abe3d3: jne 0xabe3ee
00abe3d5: push esi
00abe3d6: mov edx, ebx
00abe3d8: mov ecx, ebp
00abe3da: call 0xabb640
00abe3df: pop esi
00abe3e0: pop edi
00abe3e1: pop ebp
00abe3e2: mov eax, 1
00abe3e7: pop ebx
00abe3e8: add esp, 0x3c
00abe3eb: ret 0xc
00abe3ee: mov edx, esi
00abe3f0: mov ecx, ebx
00abe3f2: call 0xab38a0
00abe3f7: pop esi
00abe3f8: pop edi
00abe3f9: pop ebp
00abe3fa: mov eax, 1
00abe3ff: pop ebx
00abe400: add esp, 0x3c
00abe403: ret 0xc
00abe406: pop esi
00abe407: pop edi
00abe408: pop ebp
00abe409: mov dword ptr [ebx + 0x14], 0
00abe410: xor eax, eax
00abe412: pop ebx
00abe413: add esp, 0x3c
00abe416: ret 0xc
00abe419: lea ecx, [ecx]
00abe41c: shl dl, cl
00abe41e: stosd dword ptr es:[edi], eax
00abe41f: add cl, ah
00abe421: loop 0xabe3ce
00abe423: add al, dh
00abe425: loop 0xabe3d2
00abe427: add ah, bh
00abe429: loop 0xabe3d6
00abe42b: add byte ptr [ebx], cl
00abe42d: jecxz 0xabe3da
00abe42f: add byte ptr [ebx + 0x56530cec], al
00abe435: push edi
00abe436: mov esi, ecx
00abe438: call 0x4da540
00abe43d: lea edi, [esi + 0xc0]
00abe443: mov ebx, 0xa
00abe448: jmp 0xabe450
00abe44a: lea ebx, [ebx]
00abe450: push 0x580
00abe455: xor dl, dl
00abe457: mov ecx, edi
00abe459: call 0xd95820
00abe45e: add edi, 0x580
00abe464: dec ebx
00abe465: jne 0xabe450
00abe467: push 0x116
00abe46c: push 0x6ce8bae0
00abe471: push ebx
00abe472: push ebx
00abe473: push ebx
00abe474: push ebx
00abe475: push 1
00abe477: push 0x21344ec
00abe47c: mov edx, 0xe452814b
00abe481: mov ecx, 0x1552f60
00abe486: call 0x48e4c0
00abe48b: call 0x48f0c0
00abe490: cmp eax, 4
00abe493: jne 0xabe4b1
00abe495: movss xmm0, dword ptr [0xec6fc0]
00abe49d: push ecx
00abe49e: lea ecx, [esi + 0x40]
00abe4a1: lea edx, [ebx + 3]
00abe4a4: movss dword ptr [esp], xmm0
00abe4a9: call 0xa41280
00abe4ae: mov dword ptr [esi + 0x4c], eax
00abe4b1: mov ecx, esi
00abe4b3: call 0xabb410
00abe4b8: call 0xd62c70
00abe4bd: call 0x60ee70
00abe4c2: mov edi, eax
00abe4c4: mov dword ptr [esi + 0x54], ebx
00abe4c7: mov dword ptr [esp + 0xc], ebx
00abe4cb: cmp edi, ebx
00abe4cd: je 0xabe4fc
00abe4cf: mov ecx, edi
00abe4d1: call 0x60e0b0
00abe4d6: mov ecx, eax
00abe4d8: call 0x4a02d0
00abe4dd: cmp eax, ebx
00abe4df: je 0xabe4ff
00abe4e1: mov dword ptr [esi + 0x54], 1
00abe4e8: cmp eax, 8
00abe4eb: jne 0xabe4ff
00abe4ed: lea edx, [esp + 0xc]
00abe4f1: mov ecx, edi
00abe4f3: call 0x49ff40
00abe4f8: .byte 0x3b

3over4 data0xec6fc0 operand0xb26962 candidate-start0xb26890
00b26890: push ebp
00b26891: mov ebp, esp
00b26893: and esp, 0xfffffff0
00b26896: sub esp, 0x30
00b26899: mov eax, dword ptr [0x1faf370]
00b2689e: mov ecx, dword ptr [0x1fae8d4]
00b268a4: mov edx, dword ptr [0x1fae8d8]
00b268aa: lea eax, [eax + eax*2]
00b268ad: shl eax, 4
00b268b0: movaps xmm0, xmmword ptr [eax + 0xf8d5f0]
00b268b7: movaps xmmword ptr [0x1faf310], xmm0
00b268be: movaps xmm0, xmmword ptr [eax + 0xf8d600]
00b268c5: movaps xmmword ptr [0x1faf320], xmm0
00b268cc: movaps xmm0, xmmword ptr [0xec9100]
00b268d3: movaps xmmword ptr [0x1faf330], xmm0
00b268da: movss xmm0, dword ptr [eax + 0xf8d610]
00b268e2: mov eax, dword ptr [0x1fae8d0]
00b268e7: mov dword ptr [esp + 0x14], ecx
00b268eb: mov ecx, dword ptr [0x1fae8e0]
00b268f1: mov dword ptr [esp + 0x10], eax
00b268f5: mov eax, dword ptr [0x1fae8dc]
00b268fa: mov dword ptr [esp + 0x18], edx
00b268fe: mov edx, dword ptr [0x1fae8e4]
00b26904: mov dword ptr [esp + 0x20], ecx
00b26908: mov ecx, dword ptr [0x1fae8ec]
00b2690e: mov dword ptr [esp + 0x1c], eax
00b26912: mov eax, dword ptr [0x1fae8e8]
00b26917: movss dword ptr [0x1faf340], xmm0
00b2691f: movss xmm0, dword ptr [esp + 0x18]
00b26925: mov dword ptr [esp + 0x24], edx
00b26929: mov dword ptr [esp + 0x2c], ecx
00b2692d: push 0
00b2692f: mov edx, 0x1faf2e0
00b26934: mov ecx, 0x1faf3f0
00b26939: mov dword ptr [esp + 0x2c], eax
00b2693d: movss dword ptr [0x1faf344], xmm0
00b26945: call 0x5e56c0
00b2694a: mov ecx, dword ptr [0x10e23b8]
00b26950: call 0xd963d0
00b26955: mov ecx, eax
00b26957: mov dword ptr [esp + 0xc], edx
00b2695b: call 0xd96410
00b26960: fld dword ptr [0xec6fc0]
00b26966: mov ecx, dword ptr [0x10e23b8]
00b2696c: fcompi st(1)
00b2696e: fstp st(0)
00b26970: jbe 0xb26992
00b26972: call 0xd963d0
00b26977: mov ecx, eax
00b26979: call 0xd96410
00b2697e: fmul dword ptr [0xf2d394]
00b26984: fadd dword ptr [0xec703c]
00b2698a: fsubr dword ptr [0xec98c0]
00b26990: jmp 0xb269b0
00b26992: call 0xd963d0
00b26997: mov ecx, eax
00b26999: call 0xd96410
00b2699e: fmul dword ptr [0xf2d394]
00b269a4: fadd dword ptr [0xec703c]
00b269aa: fsub dword ptr [0xec98c0]
00b269b0: mov ecx, dword ptr [0x10e23b8]
00b269b6: fstp dword ptr [esp]
00b269b9: call 0xd963d0
00b269be: mov ecx, eax
00b269c0: .byte 0xe8
00b269c1: dec ebx

3over4 data0xec6fc0 operand0xba3738 candidate-start0xba36d0
00ba36d0: push ecx
00ba36d1: cmp dword ptr [0x2004558], 0
00ba36d8: movss xmm1, dword ptr [0x2000388]
00ba36e0: movss xmm0, dword ptr [0x2008a94]
00ba36e8: push esi
00ba36e9: addss xmm1, xmm0
00ba36ed: mov esi, ecx
00ba36ef: movss dword ptr [0x2000388], xmm1
00ba36f7: jne 0xba36fc
00ba36f9: xorps xmm0, xmm0
00ba36fc: cmp dword ptr [0x2000380], 0
00ba3703: movss dword ptr [esp + 4], xmm0
00ba3709: jne 0xba37a2
00ba370f: comiss xmm0, dword ptr [0xec6e14]
00ba3716: jb 0xba37a2
00ba371c: mov eax, dword ptr [0x2008aa0]
00ba3721: mov ecx, eax
00ba3723: shl ecx, 4
00ba3726: sub ecx, eax
00ba3728: cmp dword ptr [ecx*8 + 0xfbcb64], 0
00ba3730: je 0xba3756
00ba3732: fld dword ptr [esp + 4]
00ba3736: fadd dword ptr [0xec6fc0]
00ba373c: fstp dword ptr [esp + 4]
00ba3740: call 0xba2220
00ba3745: fld dword ptr [esp + 4]
00ba3749: fxch st(1)
00ba374b: fcompi st(1)
00ba374d: fstp st(0)
00ba374f: jbe 0xba37a2
00ba3751: mov eax, dword ptr [0x2008aa0]
00ba3756: test eax, eax
00ba3758: jne 0xba3775
00ba375a: lea ecx, [eax + 1]
00ba375d: call 0x5e44d0
00ba3762: movss xmm0, dword ptr [0x2008a94]
00ba376a: push ecx
00ba376b: movss dword ptr [esp], xmm0
00ba3770: call 0x5e44b0
00ba3775: movss xmm0, dword ptr [0xec7068]
00ba377d: push 0
00ba377f: push 0
00ba3781: push ecx
00ba3782: movss dword ptr [esp], xmm0
00ba3787: push 0xff000000
00ba378c: mov edx, 2
00ba3791: xor ecx, ecx
00ba3793: .byte 0xc7
00ba3794: .byte 0x05
00ba3795: add byte ptr [ebx], 0

3over4 data0xec6fc0 operand0xcbecc8 candidate-start0xcbec40
00cbec40: sub esp, 0xc
00cbec43: push esi
00cbec44: mov esi, ecx
00cbec46: mov eax, dword ptr [esi + 0x34]
00cbec49: push edi
00cbec4a: shr eax, 8
00cbec4d: push 0
00cbec4f: and eax, 7
00cbec52: push eax
00cbec53: push esi
00cbec54: call 0xcbc530
00cbec59: mov edi, dword ptr [esi + 0x14]
00cbec5c: movaps xmm1, xmm0
00cbec5f: mulss xmm1, xmm0
00cbec63: mulss xmm1, xmm0
00cbec67: movss dword ptr [esp + 0x10], xmm1
00cbec6d: test edi, edi
00cbec6f: jne 0xcbec84
00cbec71: xor ecx, ecx
00cbec73: call 0x48f1b0
00cbec78: mov edi, eax
00cbec7a: test edi, edi
00cbec7c: jne 0xcbec84
00cbec7e: pop edi
00cbec7f: pop esi
00cbec80: add esp, 0xc
00cbec83: ret 
00cbec84: push ebx
00cbec85: push 0
00cbec87: push 0
00cbec89: mov edx, 1
00cbec8e: mov ecx, edi
00cbec90: call 0x6046c0
00cbec95: push 0
00cbec97: push 0
00cbec99: xor edx, edx
00cbec9b: mov ecx, edi
00cbec9d: mov ebx, eax
00cbec9f: call 0x6046c0
00cbeca4: xor edx, edx
00cbeca6: mov ecx, esi
00cbeca8: add ebx, eax
00cbecaa: call 0x5f1190
00cbecaf: mov edi, eax
00cbecb1: test edi, edi
00cbecb3: je 0xcbedf2
00cbecb9: mov eax, ebx
00cbecbb: cdq 
00cbecbc: idiv edi
00cbecbe: xorps xmm0, xmm0
00cbecc1: cvtsi2ss xmm0, eax
00cbecc5: comiss xmm0, dword ptr [0xec6fc0]
00cbeccc: jb 0xcbedf2
00cbecd2: xorps xmm0, xmm0
00cbecd5: cvtsi2ss xmm0, ebx
00cbecd9: mov edx, 0x11
00cbecde: mov ecx, esi
00cbece0: movss dword ptr [esp + 0x10], xmm0
00cbece6: call 0x5f1190
00cbeceb: cdq 
00cbecec: idiv edi
00cbecee: xorps xmm0, xmm0
00cbecf1: mov edx, 0xf
00cbecf6: mov ecx, esi
00cbecf8: cvtsi2ss xmm0, eax
00cbecfc: mulss xmm0, dword ptr [0xec7378]
00cbed04: mulss xmm0, dword ptr [esp + 0x10]
00cbed0a: movss dword ptr [esp + 0xc], xmm0
00cbed10: call 0x5f1190
00cbed15: cdq 
00cbed16: idiv edi
00cbed18: xorps xmm0, xmm0
00cbed1b: mov edx, 0xa
00cbed20: mov ecx, esi
00cbed22: cvtsi2ss xmm0, eax
00cbed26: .byte 0xf3
00cbed27: .byte 0x0f

3over4 data0xec6fc0 operand0xcc9c8d candidate-start0xcc9bc0
00cc9bc0: push ecx
00cc9bc1: push esi
00cc9bc2: mov esi, dword ptr [edi + 0x34]
00cc9bc5: push 0
00cc9bc7: shr esi, 8
00cc9bca: push edi
00cc9bcb: and esi, 7
00cc9bce: call 0xcc7340
00cc9bd3: movss xmm1, dword ptr [esi*8 + 0x208f0d8]
00cc9bdc: movss xmm2, dword ptr [esi*8 + 0x208f0dc]
00cc9be5: subss xmm2, xmm1
00cc9be9: subss xmm0, xmm1
00cc9bed: xorps xmm1, xmm1
00cc9bf0: divss xmm0, xmm2
00cc9bf4: comiss xmm1, xmm0
00cc9bf7: movss xmm2, dword ptr [0xec6e14]
00cc9bff: jbe 0xcc9c0c
00cc9c01: movaps xmm0, xmm1
00cc9c04: movss dword ptr [esp + 4], xmm0
00cc9c0a: jmp 0xcc9c1f
00cc9c0c: comiss xmm2, xmm0
00cc9c0f: jbe 0xcc9c19
00cc9c11: movss dword ptr [esp + 4], xmm0
00cc9c17: jmp 0xcc9c1f
00cc9c19: movss dword ptr [esp + 4], xmm2
00cc9c1f: mov esi, dword ptr [edi + 0x34]
00cc9c22: push 0
00cc9c24: shr esi, 8
00cc9c27: push edi
00cc9c28: and esi, 7
00cc9c2b: call 0xcc74d0
00cc9c30: movss xmm1, dword ptr [esi*8 + 0x208f100]
00cc9c39: movss xmm2, dword ptr [esi*8 + 0x208f104]
00cc9c42: movss xmm3, dword ptr [0xec6e14]
00cc9c4a: subss xmm2, xmm1
00cc9c4e: subss xmm0, xmm1
00cc9c52: divss xmm0, xmm2
00cc9c56: xorps xmm2, xmm2
00cc9c59: comiss xmm2, xmm0
00cc9c5c: pop esi
00cc9c5d: ja 0xcc9c6a
00cc9c5f: comiss xmm3, xmm0
00cc9c62: movaps xmm2, xmm0
00cc9c65: ja 0xcc9c6a
00cc9c67: movaps xmm2, xmm3
00cc9c6a: movss xmm1, dword ptr [esp + 8]
00cc9c70: movss xmm0, dword ptr [0xec6fd0]
00cc9c78: mulss xmm1, dword ptr [0xec6fd4]
00cc9c80: addss xmm1, xmm0
00cc9c84: comiss xmm0, xmm1
00cc9c87: ja 0xcc9c96
00cc9c89: movss xmm0, dword ptr [0xec6fc0]
00cc9c91: comiss xmm0, xmm1
00cc9c94: ja 0xcc9c99
00cc9c96: movaps xmm1, xmm0
00cc9c99: movaps xmm0, xmm3
00cc9c9c: subss xmm0, xmm1
00cc9ca0: mulss xmm0, dword ptr [esp]
00cc9ca5: mulss xmm2, xmm1
00cc9ca9: addss xmm0, xmm2
00cc9cad: pop ecx
00cc9cae: ret 4
00cc9cb1: int3 
00cc9cb2: int3 
00cc9cb3: int3 
00cc9cb4: int3 
00cc9cb5: int3 
00cc9cb6: int3 
00cc9cb7: int3 
00cc9cb8: int3 
00cc9cb9: int3 
00cc9cba: int3 
00cc9cbb: int3 
00cc9cbc: int3 
00cc9cbd: int3 
00cc9cbe: int3 
00cc9cbf: int3 
00cc9cc0: sub esp, 8
00cc9cc3: push ebx
00cc9cc4: push esi
00cc9cc5: mov esi, ecx
00cc9cc7: mov ebx, dword ptr [esi + 0x34]
00cc9cca: shr ebx, 8
00cc9ccd: and ebx, 7
00cc9cd0: call 0xcb2b50
00cc9cd5: movss xmm1, dword ptr [ebx*8 + 0x208f538]
00cc9cde: movss xmm2, dword ptr [ebx*8 + 0x208f53c]
00cc9ce7: xorps xmm0, xmm0
00cc9cea: .byte 0xf3
00cc9ceb: .byte 0x0f
00cc9cec: .byte 0x2a

3over4 data0xec6fc0 operand0xcca57b candidate-start0xcca460
00cca460: sub esp, 0x10
00cca463: push esi
00cca464: mov esi, dword ptr [ecx + 0xa4]
00cca46a: push edi
00cca46b: mov edi, edx
00cca46d: test esi, esi
00cca46f: jne 0xcca4d4
00cca471: mov eax, dword ptr [edi + 0xb8]
00cca477: xorps xmm1, xmm1
00cca47a: shr eax, 0xb
00cca47d: movzx ecx, al
00cca480: xorps xmm0, xmm0
00cca483: cvtsi2ss xmm0, ecx
00cca487: mulss xmm0, dword ptr [0xf0370c]
00cca48f: comiss xmm1, xmm0
00cca492: jbe 0xcca4a7
00cca494: movaps xmm0, xmm1
00cca497: movss dword ptr [esp + 8], xmm0
00cca49d: fld dword ptr [esp + 8]
00cca4a1: pop edi
00cca4a2: pop esi
00cca4a3: add esp, 0x10
00cca4a6: ret 
00cca4a7: movss xmm1, dword ptr [0xec6e14]
00cca4af: comiss xmm1, xmm0
00cca4b2: jbe 0xcca4c4
00cca4b4: movss dword ptr [esp + 8], xmm0
00cca4ba: fld dword ptr [esp + 8]
00cca4be: pop edi
00cca4bf: pop esi
00cca4c0: add esp, 0x10
00cca4c3: ret 
00cca4c4: movss dword ptr [esp + 8], xmm1
00cca4ca: fld dword ptr [esp + 8]
00cca4ce: pop edi
00cca4cf: pop esi
00cca4d0: add esp, 0x10
00cca4d3: ret 
00cca4d4: push ebx
00cca4d5: mov bl, byte ptr [esi + 0x6c]
00cca4d8: mov ecx, edi
00cca4da: call 0xcc9cc0
00cca4df: fstp dword ptr [esp + 0xc]
00cca4e3: mov ecx, edi
00cca4e5: call 0xcafec0
00cca4ea: fstp dword ptr [esp + 0x10]
00cca4ee: movss xmm1, dword ptr [0xec9604]
00cca4f6: movzx edx, bl
00cca4f9: xorps xmm0, xmm0
00cca4fc: cvtsi2ss xmm0, edx
00cca500: mulss xmm0, dword ptr [0xec6fc4]
00cca508: mulss xmm0, dword ptr [0xec703c]
00cca510: addss xmm0, xmm1
00cca514: comiss xmm1, xmm0
00cca517: ja 0xcca52c
00cca519: movss xmm2, dword ptr [0xec8944]
00cca521: comiss xmm2, xmm0
00cca524: movaps xmm1, xmm0
00cca527: ja 0xcca52c
00cca529: movaps xmm1, xmm2
00cca52c: movss xmm0, dword ptr [0xec6e14]
00cca534: mov bl, byte ptr [esi + 0x6d]
00cca537: subss xmm0, xmm1
00cca53b: mulss xmm1, dword ptr [esp + 0xc]
00cca541: mulss xmm0, dword ptr [esp + 0x10]
00cca547: addss xmm0, xmm1
00cca54b: mov ecx, edi
00cca54d: movss dword ptr [esp + 0xc], xmm0
00cca553: call 0xcc9e60
00cca558: fstp dword ptr [esp + 0x14]
00cca55c: mov ecx, edi
00cca55e: call 0xcca000
00cca563: fstp dword ptr [esp + 0x18]
00cca567: movss xmm2, dword ptr [0xec6fc4]
00cca56f: movss xmm1, dword ptr [0xec6fd0]
00cca577: movss xmm3, dword ptr [0xec6fc0]
00cca57f: movzx eax, bl
00cca582: xorps xmm0, xmm0
00cca585: cvtsi2ss xmm0, eax
00cca589: mulss xmm0, xmm2
00cca58d: mulss xmm0, dword ptr [0xec6fd4]
00cca595: addss xmm0, xmm1
00cca599: comiss xmm1, xmm0
00cca59c: ja 0xcca5a6
00cca59e: comiss xmm3, xmm0
00cca5a1: movaps xmm1, xmm0
00cca5a4: jbe 0xcca5ae
00cca5a6: movss dword ptr [esp + 0x10], xmm1
00cca5ac: jmp 0xcca5b4
00cca5ae: movss dword ptr [esp + 0x10], xmm3
00cca5b4: movzx ecx, byte ptr [esi + 0x6e]
00cca5b8: xorps xmm0, xmm0
00cca5bb: cvtsi2ss xmm0, ecx
00cca5bf: push ecx
00cca5c0: mulss xmm0, xmm2
00cca5c4: movss dword ptr [esp], xmm0
00cca5c9: call 0xcc9bc0
00cca5ce: movss xmm1, dword ptr [esp + 0x10]
00cca5d4: .byte 0xf3
00cca5d5: .byte 0x0f
00cca5d6: .byte 0x10
00cca5d7: .byte 0x2d
00cca5d8: adc al, 0x6e
00cca5da: in al, dx

3over4 data0xec6fc0 operand0xcca6c1 candidate-start0xcca460
00cca460: sub esp, 0x10
00cca463: push esi
00cca464: mov esi, dword ptr [ecx + 0xa4]
00cca46a: push edi
00cca46b: mov edi, edx
00cca46d: test esi, esi
00cca46f: jne 0xcca4d4
00cca471: mov eax, dword ptr [edi + 0xb8]
00cca477: xorps xmm1, xmm1
00cca47a: shr eax, 0xb
00cca47d: movzx ecx, al
00cca480: xorps xmm0, xmm0
00cca483: cvtsi2ss xmm0, ecx
00cca487: mulss xmm0, dword ptr [0xf0370c]
00cca48f: comiss xmm1, xmm0
00cca492: jbe 0xcca4a7
00cca494: movaps xmm0, xmm1
00cca497: movss dword ptr [esp + 8], xmm0
00cca49d: fld dword ptr [esp + 8]
00cca4a1: pop edi
00cca4a2: pop esi
00cca4a3: add esp, 0x10
00cca4a6: ret 
00cca4a7: movss xmm1, dword ptr [0xec6e14]
00cca4af: comiss xmm1, xmm0
00cca4b2: jbe 0xcca4c4
00cca4b4: movss dword ptr [esp + 8], xmm0
00cca4ba: fld dword ptr [esp + 8]
00cca4be: pop edi
00cca4bf: pop esi
00cca4c0: add esp, 0x10
00cca4c3: ret 
00cca4c4: movss dword ptr [esp + 8], xmm1
00cca4ca: fld dword ptr [esp + 8]
00cca4ce: pop edi
00cca4cf: pop esi
00cca4d0: add esp, 0x10
00cca4d3: ret 
00cca4d4: push ebx
00cca4d5: mov bl, byte ptr [esi + 0x6c]
00cca4d8: mov ecx, edi
00cca4da: call 0xcc9cc0
00cca4df: fstp dword ptr [esp + 0xc]
00cca4e3: mov ecx, edi
00cca4e5: call 0xcafec0
00cca4ea: fstp dword ptr [esp + 0x10]
00cca4ee: movss xmm1, dword ptr [0xec9604]
00cca4f6: movzx edx, bl
00cca4f9: xorps xmm0, xmm0
00cca4fc: cvtsi2ss xmm0, edx
00cca500: mulss xmm0, dword ptr [0xec6fc4]
00cca508: mulss xmm0, dword ptr [0xec703c]
00cca510: addss xmm0, xmm1
00cca514: comiss xmm1, xmm0
00cca517: ja 0xcca52c
00cca519: movss xmm2, dword ptr [0xec8944]
00cca521: comiss xmm2, xmm0
00cca524: movaps xmm1, xmm0
00cca527: ja 0xcca52c
00cca529: movaps xmm1, xmm2
00cca52c: movss xmm0, dword ptr [0xec6e14]
00cca534: mov bl, byte ptr [esi + 0x6d]
00cca537: subss xmm0, xmm1
00cca53b: mulss xmm1, dword ptr [esp + 0xc]
00cca541: mulss xmm0, dword ptr [esp + 0x10]
00cca547: addss xmm0, xmm1
00cca54b: mov ecx, edi
00cca54d: movss dword ptr [esp + 0xc], xmm0
00cca553: call 0xcc9e60
00cca558: fstp dword ptr [esp + 0x14]
00cca55c: mov ecx, edi
00cca55e: call 0xcca000
00cca563: fstp dword ptr [esp + 0x18]
00cca567: movss xmm2, dword ptr [0xec6fc4]
00cca56f: movss xmm1, dword ptr [0xec6fd0]
00cca577: movss xmm3, dword ptr [0xec6fc0]
00cca57f: movzx eax, bl
00cca582: xorps xmm0, xmm0
00cca585: cvtsi2ss xmm0, eax
00cca589: mulss xmm0, xmm2
00cca58d: mulss xmm0, dword ptr [0xec6fd4]
00cca595: addss xmm0, xmm1
00cca599: comiss xmm1, xmm0
00cca59c: ja 0xcca5a6
00cca59e: comiss xmm3, xmm0
00cca5a1: movaps xmm1, xmm0
00cca5a4: jbe 0xcca5ae
00cca5a6: movss dword ptr [esp + 0x10], xmm1
00cca5ac: jmp 0xcca5b4
00cca5ae: movss dword ptr [esp + 0x10], xmm3
00cca5b4: movzx ecx, byte ptr [esi + 0x6e]
00cca5b8: xorps xmm0, xmm0
00cca5bb: cvtsi2ss xmm0, ecx
00cca5bf: push ecx
00cca5c0: mulss xmm0, xmm2
00cca5c4: movss dword ptr [esp], xmm0
00cca5c9: call 0xcc9bc0
00cca5ce: movss xmm1, dword ptr [esp + 0x10]
00cca5d4: movss xmm5, dword ptr [0xec6e14]
00cca5dc: mov eax, dword ptr [edi + 0x34]
00cca5df: movzx edx, byte ptr [esi + 0x6f]
00cca5e3: shr eax, 8
00cca5e6: movaps xmm2, xmm5
00cca5e9: subss xmm2, xmm1
00cca5ed: mulss xmm1, dword ptr [esp + 0x18]
00cca5f3: mulss xmm2, dword ptr [esp + 0x14]
00cca5f9: addss xmm2, xmm1
00cca5fd: addss xmm2, dword ptr [esp + 0xc]
00cca603: xorps xmm1, xmm1
00cca606: and eax, 7
00cca609: cvtsi2ss xmm1, edx
00cca60d: mulss xmm1, dword ptr [0xec6fc4]
00cca615: mulss xmm1, dword ptr [0xf2d5ec]
00cca61d: add eax, eax
00cca61f: movss xmm3, dword ptr [eax + eax + 0xfc6218]
00cca628: movss xmm4, dword ptr [eax + eax + 0xfc6230]
00cca631: addss xmm0, xmm2
00cca635: movss xmm2, dword ptr [0xec7044]
00cca63d: add eax, eax
00cca63f: addss xmm1, xmm2
00cca643: comiss xmm2, xmm1
00cca646: ja 0xcca65b
00cca648: movss xmm6, dword ptr [0xec703c]
00cca650: comiss xmm6, xmm1
00cca653: movaps xmm2, xmm1
00cca656: ja 0xcca65b
00cca658: movaps xmm2, xmm6
00cca65b: mov bl, byte ptr [esi + 0x70]
00cca65e: movaps xmm1, xmm5
00cca661: subss xmm1, xmm2
00cca665: mulss xmm1, xmm3
00cca669: mulss xmm2, xmm4
00cca66d: addss xmm1, xmm2
00cca671: addss xmm1, xmm0
00cca675: mov ecx, edi
00cca677: movss dword ptr [esp + 0xc], xmm1
00cca67d: call 0xcca240
00cca682: fstp dword ptr [esp + 0x18]
00cca686: mov ecx, edi
00cca688: call 0xcca340
00cca68d: fstp dword ptr [esp + 0x14]
00cca691: movss xmm1, dword ptr [0xec6fd0]
00cca699: movzx eax, bl
00cca69c: xorps xmm0, xmm0
00cca69f: cvtsi2ss xmm0, eax
00cca6a3: mulss xmm0, dword ptr [0xec6fc4]
00cca6ab: mulss xmm0, dword ptr [0xec6fd4]
00cca6b3: addss xmm0, xmm1
00cca6b7: comiss xmm1, xmm0
00cca6ba: pop ebx
00cca6bb: ja 0xcca6d0
00cca6bd: movss xmm2, dword ptr [0xec6fc0]
00cca6c5: comiss xmm2, xmm0
00cca6c8: movaps xmm1, xmm0
00cca6cb: ja 0xcca6d0
00cca6cd: movaps xmm1, xmm2
00cca6d0: movss xmm2, dword ptr [0xec6e14]
00cca6d8: movaps xmm0, xmm2
00cca6db: subss xmm0, xmm1
00cca6df: mulss xmm0, dword ptr [esp + 0x14]
00cca6e5: mulss xmm1, dword ptr [esp + 0x10]
00cca6eb: addss xmm0, xmm1
00cca6ef: addss xmm0, dword ptr [esp + 8]
00cca6f5: mulss xmm0, dword ptr [0xec9604]
00cca6fd: movss xmm1, dword ptr [0xec8938]
00cca705: mulss xmm0, dword ptr [0xfc6104]
00cca70d: addss xmm0, xmm1
00cca711: comiss xmm1, xmm0
00cca714: ja 0xcca4c4
00cca71a: comiss xmm2, xmm0
00cca71d: movaps xmm1, xmm0
00cca720: .byte 0x0f

3over4 data0xec6fc0 operand0xcdcb17 candidate-start0xcdcae7
00cdcae7: out 0xfb, eax
00cdcae9: add byte ptr [edi], cl
00cdcaeb: das 
00cdcaec: sal ebx, 1
00cdcaee: movups xmm3, xmmword ptr [0xee9120]
00cdcaf5: movaps xmm0, xmm1
00cdcaf8: jbe 0xcdcaff
00cdcafa: movaps xmm0, xmm2
00cdcafd: jmp 0xcdcb07
00cdcaff: comiss xmm1, xmm3
00cdcb02: jbe 0xcdcb07
00cdcb04: movaps xmm0, xmm3
00cdcb07: subss xmm0, xmm2
00cdcb0b: mulss xmm0, dword ptr [0xfc8740]
00cdcb13: subss xmm0, dword ptr [0xec6fc0]
00cdcb1b: push ecx
00cdcb1c: mov edx, 0xfcb8a0
00cdcb21: mov ecx, 0xfca8c0
00cdcb26: movss dword ptr [esp + 0x20], xmm0
00cdcb2c: movss dword ptr [esp], xmm1
00cdcb31: call 0xdfd900
00cdcb36: fstp dword ptr [esp + 0x3100]
00cdcb3d: movss xmm0, dword ptr [esp + 0x3190]
00cdcb46: push ecx
00cdcb47: mov edx, 0xfca8b0
00cdcb4c: mov ecx, 0xfc8730
00cdcb51: movss dword ptr [esp], xmm0
00cdcb56: call 0xdfd900
00cdcb5b: fstp dword ptr [esp + 0x3128]
00cdcb62: movss xmm0, dword ptr [esp + 0x3190]
00cdcb6b: movss xmm1, dword ptr [0xecfd70]
00cdcb73: comiss xmm1, xmm0
00cdcb76: .byte 0xf3

3over4 data0xec6fc0 operand0xce0b29 candidate-start0xce0af9
00ce0af9: mulps xmm1, xmmword ptr [esp + 0x1e40]
00ce0b01: addps xmm1, xmmword ptr [esp + 0x1e70]
00ce0b09: movaps xmm2, xmm0
00ce0b0c: shufps xmm2, xmm0, 0x55
00ce0b10: shufps xmm0, xmm0, 0xaa
00ce0b14: mulps xmm2, xmm3
00ce0b17: addps xmm1, xmm2
00ce0b1a: movaps xmm2, xmmword ptr [esp + 0x1e60]
00ce0b22: mulps xmm0, xmm2
00ce0b25: movss xmm2, dword ptr [0xec6fc0]
00ce0b2d: addps xmm1, xmm0
00ce0b30: movss xmm0, dword ptr [esp + 0x30f0]
00ce0b39: mulss xmm0, dword ptr [0xec7048]
00ce0b41: movss dword ptr [esp + 0x310c], xmm0
00ce0b4a: movss xmm0, dword ptr [esp + 0x3110]
00ce0b53: mulss xmm0, dword ptr [0xec7084]
00ce0b5b: movaps xmmword ptr [esp + 0x5f0], xmm1
00ce0b63: movss xmm1, dword ptr [0xf2d738]
00ce0b6b: movss dword ptr [esp + 0x30f0], xmm0
00ce0b74: movss xmm0, dword ptr [esp + 0x1c]
00ce0b7a: comiss xmm1, xmm0
00ce0b7d: movss dword ptr [esp + 0x31d8], xmm0
00ce0b86: jbe 0xce0b93
00ce0b88: .byte 0xf3

3over4 data0xec6fc0 operand0xce2edc candidate-start0xce2eac
00ce2eac: add bl, dh
00ce2eae: movups xmmword ptr [esp + 0x3128], xmm0
00ce2eb6: movss xmm0, dword ptr [esp + 0x82c]
00ce2ebf: movss dword ptr [esp + 0x30f0], xmm0
00ce2ec8: movss xmm0, dword ptr [esp + 0x10]
00ce2ece: comiss xmm1, xmm0
00ce2ed1: jbe 0xce2ed8
00ce2ed3: movaps xmm0, xmm1
00ce2ed6: jmp 0xce2ee8
00ce2ed8: movss xmm2, dword ptr [0xec6fc0]
00ce2ee0: comiss xmm0, xmm2
00ce2ee3: jbe 0xce2ee8
00ce2ee5: movaps xmm0, xmm2
00ce2ee8: mov esi, dword ptr [ebp + 0x10]
00ce2eeb: subss xmm0, xmm1
00ce2eef: mulss xmm0, dword ptr [0xfc9680]
00ce2ef7: addss xmm0, dword ptr [0xfc9508]
00ce2eff: lea edx, [esp + 0xae0]
00ce2f06: push edx
00ce2f07: movss dword ptr [esi + 0x24], xmm0
00ce2f0c: movss xmm0, dword ptr [esp + 0x558]
00ce2f15: push ecx
00ce2f16: mov edx, 0xfc8680
00ce2f1b: mov ecx, 0xfc86b0
00ce2f20: movss dword ptr [esp + 0x18], xmm0
00ce2f26: movss dword ptr [esp], xmm0
00ce2f2b: call 0xdfddc0
00ce2f30: movss xmm0, dword ptr [esp + 0xae0]
00ce2f39: .byte 0xf3
00ce2f3a: .byte 0x0f
00ce2f3b: .byte 0x10

3over4 data0xec6fc0 operand0xce2f94 candidate-start0xce2f64
00ce2f64: add bl, dh
00ce2f66: movups xmmword ptr [esp + 0x310c], xmm0
00ce2f6e: movss xmm0, dword ptr [esp + 0xaec]
00ce2f77: movss dword ptr [esp + 0x3124], xmm0
00ce2f80: movss xmm0, dword ptr [esp + 0x10]
00ce2f86: comiss xmm1, xmm0
00ce2f89: jbe 0xce2f90
00ce2f8b: movaps xmm0, xmm1
00ce2f8e: jmp 0xce2fa0
00ce2f90: movss xmm2, dword ptr [0xec6fc0]
00ce2f98: comiss xmm0, xmm2
00ce2f9b: jbe 0xce2fa0
00ce2f9d: movaps xmm0, xmm2
00ce2fa0: subss xmm0, xmm1
00ce2fa4: mulss xmm0, dword ptr [0xfc8670]
00ce2fac: addss xmm0, dword ptr [0xfc92dc]
00ce2fb4: lea eax, [esp + 0x800]
00ce2fbb: push eax
00ce2fbc: movss dword ptr [esi + 0x28], xmm0
00ce2fc1: movss xmm0, dword ptr [esp + 0x5b4]
00ce2fca: push ecx
00ce2fcb: mov edx, 0xfc8640
00ce2fd0: mov ecx, 0xfc86b0
00ce2fd5: movss dword ptr [esp + 0x18], xmm0
00ce2fdb: movss dword ptr [esp], xmm0
00ce2fe0: call 0xdfddc0
00ce2fe5: movss xmm0, dword ptr [esp + 0x800]
00ce2fee: .byte 0xf3
00ce2fef: .byte 0x0f
00ce2ff0: .byte 0x11
00ce2ff1: test byte ptr [esp + edx], ah

3over4 data0xec6fc0 operand0xd0bf2d candidate-start0xd0befd
00d0befd: out 0xfb, eax
00d0beff: add byte ptr [edi], cl
00d0bf01: das 
00d0bf02: sal ebx, 1
00d0bf04: movups xmm3, xmmword ptr [0xee9120]
00d0bf0b: movaps xmm0, xmm1
00d0bf0e: jbe 0xd0bf15
00d0bf10: movaps xmm0, xmm2
00d0bf13: jmp 0xd0bf1d
00d0bf15: comiss xmm1, xmm3
00d0bf18: jbe 0xd0bf1d
00d0bf1a: movaps xmm0, xmm3
00d0bf1d: subss xmm0, xmm2
00d0bf21: mulss xmm0, dword ptr [0xfc8740]
00d0bf29: subss xmm0, dword ptr [0xec6fc0]
00d0bf31: push ecx
00d0bf32: mov edx, 0xfcb8a0
00d0bf37: mov ecx, 0xfca8c0
00d0bf3c: movss dword ptr [esp + 0x20], xmm0
00d0bf42: movss dword ptr [esp], xmm1
00d0bf47: call 0xdfd900
00d0bf4c: fstp dword ptr [esp + 0x30f8]
00d0bf53: movss xmm0, dword ptr [esp + 0x318c]
00d0bf5c: push ecx
00d0bf5d: mov edx, 0xfca8b0
00d0bf62: mov ecx, 0xfc8730
00d0bf67: movss dword ptr [esp], xmm0
00d0bf6c: call 0xdfd900
00d0bf71: fstp dword ptr [esp + 0x312c]
00d0bf78: movss xmm0, dword ptr [esp + 0x318c]
00d0bf81: movss xmm1, dword ptr [0xecfd70]
00d0bf89: comiss xmm1, xmm0
00d0bf8c: .byte 0xf3

3over4 data0xec6fc0 operand0xd0ff3e candidate-start0xd0ff0e
00d0ff0e: mulps xmm1, xmmword ptr [esp + 0x1e40]
00d0ff16: addps xmm1, xmmword ptr [esp + 0x1e70]
00d0ff1e: movaps xmm2, xmm0
00d0ff21: shufps xmm2, xmm0, 0x55
00d0ff25: shufps xmm0, xmm0, 0xaa
00d0ff29: mulps xmm2, xmm3
00d0ff2c: addps xmm1, xmm2
00d0ff2f: movaps xmm2, xmmword ptr [esp + 0x1e60]
00d0ff37: mulps xmm0, xmm2
00d0ff3a: movss xmm2, dword ptr [0xec6fc0]
00d0ff42: addps xmm1, xmm0
00d0ff45: movss xmm0, dword ptr [esp + 0x30ec]
00d0ff4e: mulss xmm0, dword ptr [0xec7048]
00d0ff56: movss dword ptr [esp + 0x310c], xmm0
00d0ff5f: movss xmm0, dword ptr [esp + 0x3108]
00d0ff68: mulss xmm0, dword ptr [0xec7084]
00d0ff70: movaps xmmword ptr [esp + 0x5f0], xmm1
00d0ff78: movss xmm1, dword ptr [0xf2d738]
00d0ff80: movss dword ptr [esp + 0x30ec], xmm0
00d0ff89: movss xmm0, dword ptr [esp + 0x1c]
00d0ff8f: comiss xmm1, xmm0
00d0ff92: movss dword ptr [esp + 0x31d8], xmm0
00d0ff9b: jbe 0xd0ffa8
00d0ff9d: .byte 0xf3

3over4 data0xec6fc0 operand0xd122f1 candidate-start0xd122c1
00d122c1: add bl, dh
00d122c3: movups xmmword ptr [esp + 0x312c], xmm0
00d122cb: movss xmm0, dword ptr [esp + 0x82c]
00d122d4: movss dword ptr [esp + 0x30ec], xmm0
00d122dd: movss xmm0, dword ptr [esp + 0x10]
00d122e3: comiss xmm1, xmm0
00d122e6: jbe 0xd122ed
00d122e8: movaps xmm0, xmm1
00d122eb: jmp 0xd122fd
00d122ed: movss xmm2, dword ptr [0xec6fc0]
00d122f5: comiss xmm0, xmm2
00d122f8: jbe 0xd122fd
00d122fa: movaps xmm0, xmm2
00d122fd: mov esi, dword ptr [ebp + 0x10]
00d12300: subss xmm0, xmm1
00d12304: mulss xmm0, dword ptr [0xfc9680]
00d1230c: addss xmm0, dword ptr [0xfc9508]
00d12314: lea edx, [esp + 0xae0]
00d1231b: push edx
00d1231c: movss dword ptr [esi + 0x24], xmm0
00d12321: movss xmm0, dword ptr [esp + 0x558]
00d1232a: push ecx
00d1232b: mov edx, 0xfc8680
00d12330: mov ecx, 0xfc86b0
00d12335: movss dword ptr [esp + 0x18], xmm0
00d1233b: movss dword ptr [esp], xmm0
00d12340: call 0xdfddc0
00d12345: movss xmm0, dword ptr [esp + 0xae0]
00d1234e: .byte 0xf3
00d1234f: .byte 0x0f
00d12350: .byte 0x10

3over4 data0xec6fc0 operand0xd123a9 candidate-start0xd12379
00d12379: add bl, dh
00d1237b: movups xmmword ptr [esp + 0x310c], xmm0
00d12383: movss xmm0, dword ptr [esp + 0xaec]
00d1238c: movss dword ptr [esp + 0x3130], xmm0
00d12395: movss xmm0, dword ptr [esp + 0x10]
00d1239b: comiss xmm1, xmm0
00d1239e: jbe 0xd123a5
00d123a0: movaps xmm0, xmm1
00d123a3: jmp 0xd123b5
00d123a5: movss xmm2, dword ptr [0xec6fc0]
00d123ad: comiss xmm0, xmm2
00d123b0: jbe 0xd123b5
00d123b2: movaps xmm0, xmm2
00d123b5: subss xmm0, xmm1
00d123b9: mulss xmm0, dword ptr [0xfc8670]
00d123c1: addss xmm0, dword ptr [0xfc92dc]
00d123c9: lea eax, [esp + 0x800]
00d123d0: push eax
00d123d1: movss dword ptr [esi + 0x28], xmm0
00d123d6: movss xmm0, dword ptr [esp + 0x5b4]
00d123df: push ecx
00d123e0: mov edx, 0xfc8640
00d123e5: mov ecx, 0xfc86b0
00d123ea: movss dword ptr [esp + 0x18], xmm0
00d123f0: movss dword ptr [esp], xmm0
00d123f5: call 0xdfddc0
00d123fa: movss xmm0, dword ptr [esp + 0x800]
00d12403: .byte 0xf3
00d12404: .byte 0x0f
00d12405: .byte 0x11
00d12406: test byte ptr [esp + edx], ah

3over4 data0xec6fc0 operand0xd314fd candidate-start0xd314cd
00d314cd: out 0xfb, eax
00d314cf: add byte ptr [edi], cl
00d314d1: das 
00d314d2: sal ebx, 1
00d314d4: movups xmm3, xmmword ptr [0xee9120]
00d314db: movaps xmm0, xmm1
00d314de: jbe 0xd314e5
00d314e0: movaps xmm0, xmm2
00d314e3: jmp 0xd314ed
00d314e5: comiss xmm1, xmm3
00d314e8: jbe 0xd314ed
00d314ea: movaps xmm0, xmm3
00d314ed: subss xmm0, xmm2
00d314f1: mulss xmm0, dword ptr [0xfc8740]
00d314f9: subss xmm0, dword ptr [0xec6fc0]
00d31501: push ecx
00d31502: mov edx, 0xfcb8a0
00d31507: mov ecx, 0xfca8c0
00d3150c: movss dword ptr [esp + 0x20], xmm0
00d31512: movss dword ptr [esp], xmm1
00d31517: call 0xdfd900
00d3151c: fstp dword ptr [esp + 0x30fc]
00d31523: movss xmm0, dword ptr [esp + 0x3190]
00d3152c: push ecx
00d3152d: mov edx, 0xfca8b0
00d31532: mov ecx, 0xfc8730
00d31537: movss dword ptr [esp], xmm0
00d3153c: call 0xdfd900
00d31541: fstp dword ptr [esp + 0x3130]
00d31548: movss xmm0, dword ptr [esp + 0x3190]
00d31551: movss xmm1, dword ptr [0xecfd70]
00d31559: comiss xmm1, xmm0
00d3155c: .byte 0xf3

3over4 data0xec6fc0 operand0xd3550f candidate-start0xd354df
00d354df: mulps xmm1, xmmword ptr [esp + 0x1e40]
00d354e7: addps xmm1, xmmword ptr [esp + 0x1e70]
00d354ef: movaps xmm2, xmm0
00d354f2: shufps xmm2, xmm0, 0x55
00d354f6: shufps xmm0, xmm0, 0xaa
00d354fa: mulps xmm2, xmm3
00d354fd: addps xmm1, xmm2
00d35500: movaps xmm2, xmmword ptr [esp + 0x1e60]
00d35508: mulps xmm0, xmm2
00d3550b: movss xmm2, dword ptr [0xec6fc0]
00d35513: addps xmm1, xmm0
00d35516: movss xmm0, dword ptr [esp + 0x30f0]
00d3551f: mulss xmm0, dword ptr [0xec7048]
00d35527: movss dword ptr [esp + 0x3110], xmm0
00d35530: movss xmm0, dword ptr [esp + 0x310c]
00d35539: mulss xmm0, dword ptr [0xec7084]
00d35541: movaps xmmword ptr [esp + 0x5f0], xmm1
00d35549: movss xmm1, dword ptr [0xf2d738]
00d35551: movss dword ptr [esp + 0x30f0], xmm0
00d3555a: movss xmm0, dword ptr [esp + 0x1c]
00d35560: comiss xmm1, xmm0
00d35563: movss dword ptr [esp + 0x31d8], xmm0
00d3556c: jbe 0xd35579
00d3556e: .byte 0xf3

3over4 data0xec6fc0 operand0xd378c2 candidate-start0xd37892
00d37892: add bl, dh
00d37894: movups xmmword ptr [esp + 0x3130], xmm0
00d3789c: movss xmm0, dword ptr [esp + 0x82c]
00d378a5: movss dword ptr [esp + 0x30f0], xmm0
00d378ae: movss xmm0, dword ptr [esp + 0x10]
00d378b4: comiss xmm1, xmm0
00d378b7: jbe 0xd378be
00d378b9: movaps xmm0, xmm1
00d378bc: jmp 0xd378ce
00d378be: movss xmm2, dword ptr [0xec6fc0]
00d378c6: comiss xmm0, xmm2
00d378c9: jbe 0xd378ce
00d378cb: movaps xmm0, xmm2
00d378ce: mov esi, dword ptr [ebp + 0x10]
00d378d1: subss xmm0, xmm1
00d378d5: mulss xmm0, dword ptr [0xfc9680]
00d378dd: addss xmm0, dword ptr [0xfc9508]
00d378e5: lea edx, [esp + 0xae0]
00d378ec: push edx
00d378ed: movss dword ptr [esi + 0x24], xmm0
00d378f2: movss xmm0, dword ptr [esp + 0x558]
00d378fb: push ecx
00d378fc: mov edx, 0xfc8680
00d37901: mov ecx, 0xfc86b0
00d37906: movss dword ptr [esp + 0x18], xmm0
00d3790c: movss dword ptr [esp], xmm0
00d37911: call 0xdfddc0
00d37916: movss xmm0, dword ptr [esp + 0xae0]
00d3791f: .byte 0xf3
00d37920: .byte 0x0f
00d37921: .byte 0x10

3over4 data0xec6fc0 operand0xd3797a candidate-start0xd3794a
00d3794a: add bl, dh
00d3794c: movups xmmword ptr [esp + 0x3110], xmm0
00d37954: movss xmm0, dword ptr [esp + 0xaec]
00d3795d: movss dword ptr [esp + 0x3134], xmm0
00d37966: movss xmm0, dword ptr [esp + 0x10]
00d3796c: comiss xmm1, xmm0
00d3796f: jbe 0xd37976
00d37971: movaps xmm0, xmm1
00d37974: jmp 0xd37986
00d37976: movss xmm2, dword ptr [0xec6fc0]
00d3797e: comiss xmm0, xmm2
00d37981: jbe 0xd37986
00d37983: movaps xmm0, xmm2
00d37986: subss xmm0, xmm1
00d3798a: mulss xmm0, dword ptr [0xfc8670]
00d37992: addss xmm0, dword ptr [0xfc92dc]
00d3799a: lea eax, [esp + 0x800]
00d379a1: push eax
00d379a2: movss dword ptr [esi + 0x28], xmm0
00d379a7: movss xmm0, dword ptr [esp + 0x5b4]
00d379b0: push ecx
00d379b1: mov edx, 0xfc8640
00d379b6: mov ecx, 0xfc86b0
00d379bb: movss dword ptr [esp + 0x18], xmm0
00d379c1: movss dword ptr [esp], xmm0
00d379c6: call 0xdfddc0
00d379cb: movss xmm0, dword ptr [esp + 0x800]
00d379d4: .byte 0xf3
00d379d5: .byte 0x0f
00d379d6: .byte 0x11
00d379d7: test byte ptr [eax + ebx], ah

3over4 data0xec6fc0 operand0xd48fb6 candidate-start0xd48e60
00d48e60: push ebp
00d48e61: mov ebp, esp
00d48e63: and esp, 0xfffffff0
00d48e66: sub esp, 0x24
00d48e69: push ebx
00d48e6a: push esi
00d48e6b: push edi
00d48e6c: mov edi, dword ptr [eax]
00d48e6e: mov eax, dword ptr [eax + 0xc]
00d48e71: mov dword ptr [esp + 0x1c], eax
00d48e75: mov eax, dword ptr [edi + 0x34]
00d48e78: mov esi, eax
00d48e7a: shr eax, 0xb
00d48e7d: and eax, 7
00d48e80: shr esi, 8
00d48e83: mov ecx, edi
00d48e85: and esi, 7
00d48e88: mov ebx, eax
00d48e8a: movss dword ptr [esp + 0x18], xmm0
00d48e90: call 0xa2cbb0
00d48e95: test eax, eax
00d48e97: jne 0xd48e9e
00d48e99: xorps xmm0, xmm0
00d48e9c: jmp 0xd48ea4
00d48e9e: movss xmm0, dword ptr [esp + 0x18]
00d48ea4: mov eax, dword ptr [esp + 0x1c]
00d48ea8: cmp eax, 4
00d48eab: ja 0xd48ef8
00d48ead: jmp dword ptr [eax*4 + 0xd48fc8]
00d48eb4: lea ecx, [esi + esi*2]
00d48eb7: lea edx, [ebx + ecx*2]
00d48eba: movss xmm1, dword ptr [edx*4 + 0xfcc820]
00d48ec3: jmp 0xd48f07
00d48ec5: lea eax, [esi + esi*2]
00d48ec8: lea ecx, [ebx + eax*2]
00d48ecb: movss xmm1, dword ptr [ecx*4 + 0xfcc8b0]
00d48ed4: jmp 0xd48f07
00d48ed6: lea edx, [esi + esi*2]
00d48ed9: lea eax, [ebx + edx*2]
00d48edc: movss xmm1, dword ptr [eax*4 + 0xfcc940]
00d48ee5: jmp 0xd48f07
00d48ee7: lea ecx, [esi + esi*2]
00d48eea: lea edx, [ebx + ecx*2]
00d48eed: movss xmm1, dword ptr [edx*4 + 0xfcc9d0]
00d48ef6: jmp 0xd48f07
00d48ef8: lea eax, [esi + esi*2]
00d48efb: lea ecx, [ebx + eax*2]
00d48efe: movss xmm1, dword ptr [ecx*4 + 0xfcca60]
00d48f07: movdqa xmm2, xmmword ptr [0xfccb90]
00d48f0f: mov edx, dword ptr [0x1437f2c]
00d48f15: mulss xmm1, xmm0
00d48f19: movss xmm0, dword ptr [edi + 0x10]
00d48f1e: mulss xmm0, dword ptr [edi + 0xc]
00d48f23: push ecx
00d48f24: mov ecx, dword ptr [0x1437f30]
00d48f2a: movss dword ptr [esp + 0x1c], xmm1
00d48f30: movdqa xmmword ptr [esp + 0x24], xmm2
00d48f36: movss dword ptr [esp], xmm0
00d48f3b: call 0x404870
00d48f40: fild dword ptr [esp + 0x1c]
00d48f44: movss xmm3, dword ptr [0xfccaf0]
00d48f4c: xorps xmm2, xmm2
00d48f4f: fadd dword ptr [0xec6e14]
00d48f55: movss xmm1, dword ptr [0xec6e14]
00d48f5d: fsubp st(1)
00d48f5f: fstp dword ptr [esp + 0x1c]
00d48f63: movss xmm0, dword ptr [esp + 0x1c]
00d48f69: shufps xmm0, xmm0, 0
00d48f6d: andps xmm0, xmmword ptr [esp + 0x20]
00d48f72: movaps xmmword ptr [esp + 0x20], xmm0
00d48f77: movss xmm0, dword ptr [esp + 0x20]
00d48f7d: mulss xmm0, xmm3
00d48f81: comiss xmm2, xmm0
00d48f84: jbe 0xd48f8b
00d48f86: movaps xmm0, xmm2
00d48f89: jmp 0xd48f93
00d48f8b: comiss xmm1, xmm0
00d48f8e: ja 0xd48f93
00d48f90: movaps xmm0, xmm1
00d48f93: subss xmm1, xmm0
00d48f97: xorps xmm0, xmm0
00d48f9a: movss xmm0, xmm1
00d48f9e: sqrtss xmm0, xmm0
00d48fa2: movaps xmmword ptr [esp + 0x20], xmm0
00d48fa7: movss xmm0, dword ptr [esp + 0x20]
00d48fad: pop edi
00d48fae: mulss xmm0, xmm3
00d48fb2: addss xmm0, dword ptr [0xec6fc0]
00d48fba: mulss xmm0, dword ptr [esp + 0x14]
00d48fc0: pop esi
00d48fc1: pop ebx
00d48fc2: mov esp, ebp
00d48fc4: pop ebp
00d48fc5: ret 
00d48fc6: mov edi, edi
00d48fc8: mov ah, 0x8e
00d48fca: aam 0
00d48fcc: lds ecx, ptr [esi - 0x7129ff2c]
00d48fd2: aam 0
00d48fd4: out 0x8e, eax
00d48fd6: aam 0
00d48fd8: clc 
00d48fd9: mov ss, esp
00d48fdb: add ah, cl
00d48fdd: int3 
00d48fde: int3 
00d48fdf: int3 
00d48fe0: sub esp, 0xa80
00d48fe6: push ebx
00d48fe7: push ebp
00d48fe8: push esi
00d48fe9: push edi
00d48fea: mov edi, ecx
00d48fec: mov ebp, dword ptr [edi]
00d48fee: mov ebx, edx
00d48ff0: mov dword ptr [esp + 0x18], ebp
00d48ff4: xor esi, esi
00d48ff6: mov edx, esi
00d48ff8: mov ecx, ebp
00d48ffa: call ebx
00d48ffc: mov dword ptr [esp + esi*4 + 0x24], eax
00d49000: inc esi
00d49001: cmp esi, 5
00d49004: jl 0xd48ff6
00d49006: xor ebp, ebp
00d49008: xor eax, eax
00d4900a: cmp dword ptr [esp + 0xa98], ebp
00d49011: jne 0xd49033
00d49013: cmp eax, 5

3over4 data0xec6fc0 operand0xddc43d candidate-start0xddc0f0
00ddc0f0: push ebp
00ddc0f1: mov ebp, esp
00ddc0f3: and esp, 0xfffffff0
00ddc0f6: sub esp, 0xd4
00ddc0fc: push ebx
00ddc0fd: push esi
00ddc0fe: mov ebx, ecx
00ddc100: cmp dword ptr [ebx + 0xc], 0
00ddc104: push edi
00ddc105: mov edi, edx
00ddc107: je 0xddc115
00ddc109: mov eax, 1
00ddc10e: pop edi
00ddc10f: pop esi
00ddc110: pop ebx
00ddc111: mov esp, ebp
00ddc113: pop ebp
00ddc114: ret 
00ddc115: call 0xda3620
00ddc11a: cmp dword ptr [eax + 0x220a8], 0
00ddc121: jne 0xddc153
00ddc123: call 0x4dff60
00ddc128: mov esi, eax
00ddc12a: call 0xda3620
00ddc12f: mov dword ptr [eax + 0x220ac], esi
00ddc135: call 0xda3620
00ddc13a: mov dword ptr [eax + 0x220b0], 2
00ddc144: call 0xda3620
00ddc149: mov dword ptr [eax + 0x220a8], 1
00ddc153: call 0xda3620
00ddc158: cmp dword ptr [eax + 0x220ac], 0
00ddc15f: jne 0xddc179
00ddc161: mov edx, edi
00ddc163: mov ecx, ebx
00ddc165: call 0xddc0a0
00ddc16a: mov eax, 1
00ddc16f: mov dword ptr [ebx + 0xc], eax
00ddc172: pop edi
00ddc173: pop esi
00ddc174: pop ebx
00ddc175: mov esp, ebp
00ddc177: pop ebp
00ddc178: ret 
00ddc179: mov dword ptr [esp + 0x28], 0
00ddc181: call 0xda3620
00ddc186: cmp dword ptr [eax], 0
00ddc189: jle 0xddc194
00ddc18b: xor eax, eax
00ddc18d: pop edi
00ddc18e: pop esi
00ddc18f: pop ebx
00ddc190: mov esp, ebp
00ddc192: pop ebp
00ddc193: ret 
00ddc194: mov edx, edi
00ddc196: mov ecx, ebx
00ddc198: call 0xddc0a0
00ddc19d: push 0x20
00ddc19f: call 0xe1bbb6
00ddc1a4: mov esi, eax
00ddc1a6: mov dword ptr [esp + 0x34], esi
00ddc1aa: test esi, esi
00ddc1ac: je 0xddc59b
00ddc1b2: mov eax, dword ptr [esi]
00ddc1b4: mov ecx, dword ptr [eax + 0x10]
00ddc1b7: push esi
00ddc1b8: call ecx
00ddc1ba: cmp edi, eax
00ddc1bc: jae 0xddc593
00ddc1c2: mov edx, dword ptr [esi]
00ddc1c4: mov ecx, dword ptr [edx + 0x14]
00ddc1c7: lea eax, [ebx + 0x28]
00ddc1ca: push eax
00ddc1cb: push 0
00ddc1cd: push edi
00ddc1ce: push esi
00ddc1cf: call ecx
00ddc1d1: neg eax
00ddc1d3: sbb eax, eax
00ddc1d5: inc eax
00ddc1d6: mov dword ptr [ebx + 0x14], eax
00ddc1d9: mov edx, dword ptr [esi]
00ddc1db: lea eax, [ebx + 0x18]
00ddc1de: push eax
00ddc1df: mov eax, dword ptr [edx + 0x20]
00ddc1e2: push edi
00ddc1e3: push esi
00ddc1e4: call eax
00ddc1e6: test eax, eax
00ddc1e8: jne 0xddc1f3
00ddc1ea: mov dword ptr [ebx + 0x10], 1
00ddc1f1: jmp 0xddc1fa
00ddc1f3: mov dword ptr [ebx + 0x10], 0
00ddc1fa: mov dword ptr [esp + 0x38], ebx
00ddc1fe: mov dword ptr [esp + 0x28], 1
00ddc206: mov dword ptr [esp + 0x20], 0
00ddc20e: xor ecx, ecx
00ddc210: cmp dword ptr [esp + 0x20], 1
00ddc215: mov dword ptr [esp + 0x1c], 0xfd30c8
00ddc21d: sete cl
00ddc220: mov dword ptr [esp + 0x2c], ecx
00ddc224: mov edx, dword ptr [esp + 0x1c]
00ddc228: mov eax, dword ptr [edx]
00ddc22a: mov edx, dword ptr [eax*4 + 0xfd30b0]
00ddc231: mov ecx, dword ptr [esi]
00ddc233: mov ecx, dword ptr [ecx + 0x18]
00ddc236: mov dword ptr [esp + 0x40], eax
00ddc23a: mov eax, dword ptr [ebx + 8]
00ddc23d: push edx
00ddc23e: push eax
00ddc23f: push esi
00ddc240: call ecx
00ddc242: xor edi, edi
00ddc244: mov dword ptr [esp + 0x54], eax
00ddc248: mov dword ptr [esp + 0x30], edi
00ddc24c: test eax, eax
00ddc24e: jle 0xddc56b
00ddc254: mov ecx, dword ptr [esp + 0x40]
00ddc258: mov edx, dword ptr [esi]
00ddc25a: mov edx, dword ptr [edx + 0x1c]
00ddc25d: lea eax, [esp + 0x44]
00ddc261: push eax
00ddc262: mov eax, dword ptr [ecx*4 + 0xfd30b0]
00ddc269: mov ecx, dword ptr [ebx + 8]
00ddc26c: push edi
00ddc26d: push eax
00ddc26e: push ecx
00ddc26f: push esi
00ddc270: call edx
00ddc272: test eax, eax
00ddc274: jne 0xddc55c
00ddc27a: mov eax, dword ptr [ebx + 0x10]
00ddc27d: mov dword ptr [esp + 0x3c], eax
00ddc281: test eax, eax
00ddc283: je 0xddc2a9
00ddc285: mov eax, dword ptr [esp + 0x44]
00ddc289: cmp eax, dword ptr [ebx + 0x18]
00ddc28c: jne 0xddc2a9
00ddc28e: mov ecx, dword ptr [esp + 0x48]
00ddc292: cmp ecx, dword ptr [ebx + 0x1c]
00ddc295: jne 0xddc2a9
00ddc297: mov edx, dword ptr [esp + 0x4c]
00ddc29b: cmp edx, dword ptr [ebx + 0x20]
00ddc29e: jne 0xddc2a9
00ddc2a0: mov eax, dword ptr [esp + 0x50]
00ddc2a4: cmp eax, dword ptr [ebx + 0x24]
00ddc2a7: je 0xddc2b1
00ddc2a9: mov dword ptr [esp + 0x3c], 0
00ddc2b1: mov edi, 0xfd3054
00ddc2b6: mov dword ptr [esp + 0x14], 0xfd30b0
00ddc2be: mov dword ptr [esp + 0x18], edi
00ddc2c2: mov edx, dword ptr [esp + 0x2c]
00ddc2c6: mov eax, dword ptr [esp + 0x14]
00ddc2ca: mov ecx, dword ptr [esi]
00ddc2cc: mov ecx, dword ptr [ecx + 0x24]
00ddc2cf: push edx
00ddc2d0: mov edx, dword ptr [eax]
00ddc2d2: mov eax, dword ptr [esp + 0x44]
00ddc2d6: push edx
00ddc2d7: mov edx, dword ptr [eax*4 + 0xfd30b0]
00ddc2de: mov eax, dword ptr [ebx + 8]
00ddc2e1: push edx
00ddc2e2: push 1
00ddc2e4: push eax
00ddc2e5: push esi
00ddc2e6: call ecx
00ddc2e8: test eax, eax
00ddc2ea: jne 0xddc540
00ddc2f0: mov edx, dword ptr [esp + 0x48]
00ddc2f4: mov ecx, dword ptr [esp + 0x44]
00ddc2f8: mov dword ptr [esp + 0x68], edx
00ddc2fc: mov dword ptr [esp + 0x70], edx
00ddc300: mov edx, dword ptr [edi - 4]
00ddc303: mov dword ptr [esp + 0x64], ecx
00ddc307: mov dword ptr [esp + 0x6c], ecx
00ddc30b: mov ecx, dword ptr [edi]
00ddc30d: mov dword ptr [esp + 0x74], edx
00ddc311: mov edx, dword ptr [esp + 0x4c]
00ddc315: mov dword ptr [esp + 0x5c], eax
00ddc319: mov dword ptr [esp + 0x60], eax
00ddc31d: mov dword ptr [esp + 0x78], ecx
00ddc321: mov ecx, dword ptr [edi + 4]
00ddc324: mov dword ptr [esp + 0x7c], eax
00ddc328: mov dword ptr [esp + 0x80], eax
00ddc32f: mov dword ptr [esp + 0x84], edx
00ddc336: mov edx, dword ptr [edi + 8]
00ddc339: mov dword ptr [esp + 0x8c], eax
00ddc340: mov dword ptr [esp + 0x94], eax
00ddc347: mov dword ptr [esp + 0xa0], eax
00ddc34e: mov dword ptr [esp + 0xa4], eax
00ddc355: mov dword ptr [esp + 0xac], eax
00ddc35c: mov eax, dword ptr [esp + 0x3c]
00ddc360: mov dword ptr [esp + 0x90], ecx
00ddc367: mov ecx, dword ptr [esp + 0x2c]
00ddc36b: mov dword ptr [esp + 0x98], edx
00ddc372: mov edx, dword ptr [ebx + 8]
00ddc375: mov dword ptr [esp + 0xb0], eax
00ddc37c: mov eax, 0x80000000
00ddc381: mov dword ptr [esp + 0x58], 2
00ddc389: mov dword ptr [esp + 0x88], 1
00ddc394: mov dword ptr [esp + 0x9c], ecx
00ddc39b: mov dword ptr [esp + 0xa8], edx
00ddc3a2: mov dword ptr [esp + 0xb4], eax
00ddc3a9: mov dword ptr [esp + 0xb8], eax
00ddc3b0: mov dword ptr [esp + 0x24], 0xfd2fc4
00ddc3b8: mov dword ptr [esp + 0x10], 0xfd2f98
00ddc3c0: mov edx, dword ptr [esp + 0x10]
00ddc3c4: mov eax, dword ptr [edx]
00ddc3c6: mov edx, dword ptr [esp + 0x50]
00ddc3ca: mov ecx, dword ptr [esi]
00ddc3cc: mov ecx, dword ptr [ecx + 0x28]
00ddc3cf: push eax
00ddc3d0: mov eax, dword ptr [ebx + 8]
00ddc3d3: push 1
00ddc3d5: push 2
00ddc3d7: push edx
00ddc3d8: push 1
00ddc3da: push eax
00ddc3db: push esi
00ddc3dc: call ecx
00ddc3de: test eax, eax
00ddc3e0: jne 0xddc525
00ddc3e6: mov eax, dword ptr [esp + 0x10]
00ddc3ea: mov ecx, dword ptr [eax]
00ddc3ec: mov eax, dword ptr [esp + 0x14]
00ddc3f0: mov edx, dword ptr [esi]
00ddc3f2: mov edx, dword ptr [edx + 0x30]
00ddc3f5: push ecx
00ddc3f6: mov ecx, dword ptr [eax]
00ddc3f8: mov eax, dword ptr [esp + 0x54]
00ddc3fc: push ecx
00ddc3fd: mov ecx, dword ptr [ebx + 8]
00ddc400: push eax
00ddc401: push 1
00ddc403: push ecx
00ddc404: push esi
00ddc405: call edx
00ddc407: test eax, eax
00ddc409: jne 0xddc525
00ddc40f: movd xmm1, dword ptr [esp + 0x6c]
00ddc415: movd xmm0, dword ptr [esp + 0x70]
00ddc41b: mov eax, dword ptr [esp + 0x24]
00ddc41f: mov ecx, dword ptr [eax - 4]
00ddc422: mov edx, dword ptr [eax]
00ddc424: cvtdq2ps xmm0, xmm0
00ddc427: cvtdq2ps xmm1, xmm1
00ddc42a: divss xmm1, xmm0
00ddc42e: movaps xmm0, xmm1
00ddc431: mulss xmm0, dword ptr [0xfc20d8]
00ddc439: mulss xmm1, dword ptr [0xec6fc0]
00ddc441: subss xmm0, dword ptr [0xec6e14]
00ddc449: subss xmm1, dword ptr [0xec6e14]
00ddc451: mov dword ptr [esp + 0x7c], ecx
00ddc455: mov ecx, dword ptr [eax + 4]
00ddc458: mov dword ptr [esp + 0x80], edx
00ddc45f: mov edx, dword ptr [eax + 8]
00ddc462: shufps xmm0, xmm0, 0
00ddc466: andps xmm0, xmmword ptr [0xfd2f70]
00ddc46d: shufps xmm1, xmm1, 0
00ddc471: andps xmm1, xmmword ptr [0xfd2f70]
00ddc478: movaps xmmword ptr [esp + 0xc0], xmm0
00ddc480: movaps xmmword ptr [esp + 0xd0], xmm1
00ddc488: movss xmm0, dword ptr [esp + 0xd0]
00ddc491: comiss xmm0, dword ptr [esp + 0xc0]
00ddc499: .byte 0x89
00ddc49a: mov word ptr [esp + edx*4], fs

3over4 data0xec6fc0 operand0xe0c0dc candidate-start0xe0bdc0
00e0bdc0: sub esp, 0x28
00e0bdc3: push ebx
00e0bdc4: push ebp
00e0bdc5: push esi
00e0bdc6: mov ebp, ecx
00e0bdc8: push edi
00e0bdc9: lea ecx, [ebp + 0x4dc]
00e0bdcf: mov ebx, edx
00e0bdd1: call 0xda1c90
00e0bdd6: test ebx, ebx
00e0bdd8: je 0xe0be2b
00e0bdda: mov eax, dword ptr [ebx + 8]
00e0bddd: cmp eax, 3
00e0bde0: je 0xe0be19
00e0bde2: lea ecx, [ebp + 0x4d0]
00e0bde8: call 0xda1d90
00e0bded: lea ecx, [ebp + 0x4dc]
00e0bdf3: call 0xda1cb0
00e0bdf8: or edx, 0xffffffff
00e0bdfb: lea ecx, [ebp + 0x4d0]
00e0be01: call 0xda1d00
00e0be06: lea ecx, [ebp + 0x4dc]
00e0be0c: call 0xda1c90
00e0be11: mov ecx, dword ptr [ebx + 8]
00e0be14: cmp ecx, 3
00e0be17: jne 0xe0bde2
00e0be19: pop edi
00e0be1a: pop esi
00e0be1b: lea ecx, [ebp + 0x4dc]
00e0be21: pop ebp
00e0be22: pop ebx
00e0be23: add esp, 0x28
00e0be26: jmp 0xda1cb0
00e0be2b: mov edx, dword ptr [ebp + 0x500]
00e0be31: lea edi, [ebp + 0x500]
00e0be37: cmp edx, edi
00e0be39: je 0xe0be75
00e0be3b: jmp 0xe0be40
00e0be3d: lea ecx, [ecx]
00e0be40: lea ecx, [ebp + 0x4d0]
00e0be46: call 0xda1d90
00e0be4b: lea ecx, [ebp + 0x4dc]
00e0be51: call 0xda1cb0
00e0be56: or edx, 0xffffffff
00e0be59: lea ecx, [ebp + 0x4d0]
00e0be5f: call 0xda1d00
00e0be64: lea ecx, [ebp + 0x4dc]
00e0be6a: call 0xda1c90
00e0be6f: mov eax, dword ptr [edi]
00e0be71: cmp eax, edi
00e0be73: jne 0xe0be40
00e0be75: lea ecx, [ebp + 0x4dc]
00e0be7b: call 0xda1cb0
00e0be80: xor esi, esi
00e0be82: mov dword ptr [esp + 0x10], esi
00e0be86: mov dword ptr [esp + 0x14], esi
00e0be8a: mov dword ptr [esp + 0x18], esi
00e0be8e: lea edx, [esp + 0x10]
00e0be92: mov ecx, ebp
00e0be94: mov dword ptr [esp + 0x1c], 1
00e0be9c: call 0xe0e860
00e0bea1: lea edx, [esp + 0x10]
00e0bea5: mov ecx, ebp
00e0bea7: call 0xe0bdc0
00e0beac: mov ecx, dword ptr [esp + 0x18]
00e0beb0: test ecx, ecx
00e0beb2: je 0xe0beb8
00e0beb4: mov dword ptr [esp + 0x18], esi
00e0beb8: pop edi
00e0beb9: pop esi
00e0beba: pop ebp
00e0bebb: pop ebx
00e0bebc: add esp, 0x28
00e0bebf: ret 
00e0bec0: push ebp
00e0bec1: mov ebp, esp
00e0bec3: and esp, 0xfffffff8
00e0bec6: sub esp, 0xc
00e0bec9: push ebx
00e0beca: push esi
00e0becb: push edi
00e0becc: xor eax, eax
00e0bece: mov edi, ecx
00e0bed0: lea ecx, [edi + 0x538]
00e0bed6: mov dword ptr [esp + 0x10], eax
00e0beda: mov dword ptr [esp + 0x14], eax
00e0bede: mov dword ptr [esp + 0xc], eax
00e0bee2: call 0xdf4390
00e0bee7: mov esi, eax
00e0bee9: test esi, esi
00e0beeb: je 0xe0bf3b
00e0beed: mov ecx, dword ptr [esi + 0x28]
00e0bef0: test ecx, ecx
00e0bef2: je 0xe0bf16
00e0bef4: mov eax, dword ptr [edi + 0x848]
00e0befa: sub eax, ecx
00e0befc: cmp eax, -4
00e0beff: jle 0xe0bf16
00e0bf01: test eax, eax
00e0bf03: jg 0xe0bf16
00e0bf05: cmp dword ptr [esp + 0xc], 0
00e0bf0a: jne 0xe0bf10
00e0bf0c: mov dword ptr [esp + 0xc], esi
00e0bf10: lea edx, [esp + 0x10]
00e0bf14: jmp 0xe0bf23
00e0bf16: mov ecx, esi
00e0bf18: call 0xdbb090
00e0bf1d: lea edx, [edi + 0x540]
00e0bf23: mov ecx, esi
00e0bf25: call 0xdf4380
00e0bf2a: lea ecx, [edi + 0x538]
00e0bf30: call 0xdf4390
00e0bf35: mov esi, eax
00e0bf37: test esi, esi
00e0bf39: jne 0xe0beed
00e0bf3b: mov eax, dword ptr [esp + 0x10]
00e0bf3f: test eax, eax
00e0bf41: je 0xe0bf59
00e0bf43: mov ecx, dword ptr [esp + 0xc]
00e0bf47: mov edx, dword ptr [esp + 0x10]
00e0bf4b: push 0x24
00e0bf4d: push ecx
00e0bf4e: lea ecx, [edi + 0x538]
00e0bf54: call 0xe157d0
00e0bf59: pop edi
00e0bf5a: pop esi
00e0bf5b: pop ebx
00e0bf5c: mov esp, ebp
00e0bf5e: pop ebp
00e0bf5f: ret 
00e0bf60: push ebp
00e0bf61: mov ebp, esp
00e0bf63: and esp, 0xfffffff0
00e0bf66: sub esp, 0x34
00e0bf69: push ebx
00e0bf6a: push esi
00e0bf6b: mov esi, dword ptr [ebp + 8]
00e0bf6e: push edi
00e0bf6f: mov edi, dword ptr [esi + 8]
00e0bf72: add edi, -0x15
00e0bf75: mov ebx, 1
00e0bf7a: xor eax, eax
00e0bf7c: lea ecx, [ebx + 0xf]
00e0bf7f: cmp edi, 0x6b
00e0bf82: ja 0xe0c00a
00e0bf88: movzx edi, byte ptr [edi + 0xe0c1e0]
00e0bf8f: jmp dword ptr [edi*4 + 0xe0c1b8]
00e0bf96: mov dword ptr [esp + 0x10], eax
00e0bf9a: mov dword ptr [esp + 0xc], 0xf
00e0bfa2: jmp 0xe0c01a
00e0bfa4: mov dword ptr [esp + 0x10], ebx
00e0bfa8: mov dword ptr [esp + 0xc], 0xf
00e0bfb0: jmp 0xe0c01a
00e0bfb2: mov dword ptr [esp + 0x10], eax
00e0bfb6: mov dword ptr [esp + 0xc], ecx
00e0bfba: jmp 0xe0c01a
00e0bfbc: mov dword ptr [esp + 0x10], eax
00e0bfc0: jmp 0xe0c012
00e0bfc2: mov dword ptr [esp + 0x10], 2
00e0bfca: mov dword ptr [esp + 0xc], 0x1e
00e0bfd2: jmp 0xe0c01a
00e0bfd4: mov dword ptr [esp + 0x14], ebx
00e0bfd8: mov dword ptr [esp + 0x10], ecx
00e0bfdc: mov dword ptr [esp + 0xc], 0x30
00e0bfe4: jmp 0xe0c01e
00e0bfe6: mov dword ptr [esp + 0x10], ecx
00e0bfea: mov dword ptr [esp + 0xc], 0x30
00e0bff2: jmp 0xe0c01a
00e0bff4: mov dword ptr [esp + 0x14], ebx
00e0bff8: mov dword ptr [esp + 0x10], 0x20
00e0c000: mov dword ptr [esp + 0xc], 0x60
00e0c008: jmp 0xe0c01e
00e0c00a: mov dword ptr [esp + 0x10], 8
00e0c012: mov dword ptr [esp + 0xc], 0x18
00e0c01a: mov dword ptr [esp + 0x14], eax
00e0c01e: mov edi, dword ptr [esi + 0x28]
00e0c021: add edi, -0x47
00e0c024: cmp edi, 0xc
00e0c027: ja 0xe0c07a
00e0c029: jmp dword ptr [edi*4 + 0xe0c24c]
00e0c030: mov dword ptr [esp + 0x18], ebx
00e0c034: mov eax, 8
00e0c039: jmp 0xe0c07e
00e0c03b: mov dword ptr [esp + 0x18], eax
00e0c03f: mov eax, 8
00e0c044: jmp 0xe0c07e
00e0c046: mov dword ptr [esp + 0x18], eax
00e0c04a: mov eax, 4
00e0c04f: jmp 0xe0c07e
00e0c051: mov dword ptr [esp + 0x18], ebx
00e0c055: mov ecx, 0x20
00e0c05a: jmp 0xe0c083
00e0c05c: mov dword ptr [esp + 0x18], eax
00e0c060: mov ecx, 0x20
00e0c065: jmp 0xe0c083
00e0c067: mov dword ptr [esp + 0x18], eax
00e0c06b: jmp 0xe0c083
00e0c06d: mov dword ptr [esp + 0x18], eax
00e0c071: mov eax, ebx
00e0c073: mov ecx, 0xf
00e0c078: jmp 0xe0c083
00e0c07a: mov dword ptr [esp + 0x18], eax
00e0c07e: mov ecx, 0x18
00e0c083: mov ebx, dword ptr [esi]
00e0c085: mov edi, dword ptr [esi + 4]
00e0c088: mov dword ptr [esp + 0x1c], ebx
00e0c08c: cmp ebx, edi
00e0c08e: ja 0xe0c098
00e0c090: mov dword ptr [esp + 0x1c], edi
00e0c094: jae 0xe0c098
00e0c096: mov edi, ebx
00e0c098: mov ebx, dword ptr [esp + 0x1c]
00e0c09c: fild dword ptr [esp + 0x1c]
00e0c0a0: test ebx, ebx
00e0c0a2: jns 0xe0c0aa
00e0c0a4: fadd dword ptr [0xec74c8]
00e0c0aa: mov dword ptr [esp + 0x1c], edi
00e0c0ae: fild dword ptr [esp + 0x1c]
00e0c0b2: test edi, edi
00e0c0b4: jns 0xe0c0bc
00e0c0b6: fadd dword ptr [0xec74c8]
00e0c0bc: fdivp st(1)
00e0c0be: xor edi, edi
00e0c0c0: fld dword ptr [0xfc20d8]
00e0c0c6: fmul st(1)
00e0c0c8: fld1 
00e0c0ca: fsub st(1), st(0)
00e0c0cc: fxch st(1)
00e0c0ce: fstp dword ptr [esp + 0x1c]
00e0c0d2: movss xmm0, dword ptr [esp + 0x1c]
00e0c0d8: fxch st(1)
00e0c0da: fmul dword ptr [0xec6fc0]
00e0c0e0: shufps xmm0, xmm0, 0
00e0c0e4: andps xmm0, xmmword ptr [0xfdf1e0]
00e0c0eb: movaps xmmword ptr [esp + 0x30], xmm0
00e0c0f0: fsubrp st(1)
00e0c0f2: fstp dword ptr [esp + 0x1c]
00e0c0f6: movss xmm0, dword ptr [esp + 0x1c]
00e0c0fc: shufps xmm0, xmm0, 0
00e0c100: andps xmm0, xmmword ptr [0xfdf1e0]
00e0c107: movaps xmmword ptr [esp + 0x20], xmm0
00e0c10c: movss xmm0, dword ptr [esp + 0x20]
00e0c112: comiss xmm0, dword ptr [esp + 0x30]
00e0c117: mov dword ptr [esp + 0x1c], 1
00e0c11f: ja 0xe0c125
00e0c121: mov dword ptr [esp + 0x1c], edi
00e0c125: mov dword ptr [edx], 2
00e0c12b: mov dword ptr [edx + 4], edi
00e0c12e: mov dword ptr [edx + 8], edi
00e0c131: mov ebx, dword ptr [esi]
00e0c133: mov dword ptr [edx + 0xc], ebx
00e0c136: mov ebx, dword ptr [esi + 4]
00e0c139: mov dword ptr [edx + 0x10], ebx

3over4 data0xf1c56c operand0x5e60bc candidate-start0x5e608c
005e608c: subps xmm1, xmm0
005e608f: mulss xmm1, dword ptr [0xec6fd4]
005e6097: addss xmm1, xmm0
005e609b: movss dword ptr [ebx + 0x14], xmm1
005e60a0: jmp 0x5e60c6
005e60a2: mov ecx, dword ptr [0x10e23b8]
005e60a8: call 0xd963d0
005e60ad: mov ecx, eax
005e60af: call 0xd96410
005e60b4: fmul dword ptr [0xf1c5f8]
005e60ba: fadd dword ptr [0xf1c56c]
005e60c0: fmul dword ptr [ebx + 0x30]
005e60c3: fstp dword ptr [ebx + 0x30]
005e60c6: movss xmm0, dword ptr [ebx + 0x30]
005e60cb: movss xmm1, dword ptr [0xf1c580]
005e60d3: comiss xmm0, xmm1
005e60d6: ja 0x5e60db
005e60d8: movaps xmm0, xmm1
005e60db: cmp dword ptr [ebp + 0x28], 0
005e60df: movss dword ptr [ebx + 0x30], xmm0
005e60e4: mov eax, dword ptr [0x195d770]
005e60e9: mov ecx, dword ptr [0x195d774]
005e60ef: mov edx, dword ptr [0x195d778]
005e60f5: mov dword ptr [esp + 0x50], eax
005e60f9: mov eax, dword ptr [0x195d77c]
005e60fe: mov dword ptr [esp + 0x54], ecx
005e6102: mov ecx, dword ptr [0x195d780]
005e6108: mov dword ptr [esp + 0x58], edx
005e610c: mov edx, dword ptr [0x195d784]
005e6112: movss xmm0, dword ptr [esp + 0x58]
005e6118: mov dword ptr [esp + 0x5c], eax

3over4 data0xf1c56c operand0x5e6e47 candidate-start0x5e6d50
005e6d50: push ebp
005e6d51: mov ebp, esp
005e6d53: and esp, 0xfffffff0
005e6d56: mov eax, 0x3454
005e6d5b: call 0xe230a0
005e6d60: mov eax, dword ptr [0x1951350]
005e6d65: push ebx
005e6d66: push esi
005e6d67: push edi
005e6d68: mov bl, dl
005e6d6a: mov byte ptr [esp + 0xc], cl
005e6d6e: test eax, eax
005e6d70: je 0x5e6ee9
005e6d76: cmp dword ptr [eax], 0
005e6d79: je 0x5e6ee9
005e6d7f: lea esi, [eax + 0x10]
005e6d82: test esi, esi
005e6d84: je 0x5e6ee9
005e6d8a: cmp dword ptr [esi + 4], 0
005e6d8e: je 0x5e6ee9
005e6d94: lea ecx, [esp + 0x30]
005e6d98: call 0x437a80
005e6d9d: mov ecx, dword ptr [esi + 4]
005e6da0: lea edi, [esi + 0x40]
005e6da3: push edi
005e6da4: mov edx, 2
005e6da9: call 0x5e2ce0
005e6dae: lea ecx, [esp + 0x30]
005e6db2: call 0x437d40
005e6db7: mov edx, dword ptr [esi + 4]
005e6dba: lea ecx, [esp + 0x40]
005e6dbe: call 0x455220
005e6dc3: movzx edx, byte ptr [esp + 0xc]
005e6dc8: push 0
005e6dca: lea eax, [esp + 0x34]
005e6dce: push eax
005e6dcf: lea ecx, [esp + 0xf18]
005e6dd6: call 0x455450
005e6ddb: lea ecx, [esp + 0x30]
005e6ddf: push ecx
005e6de0: movzx edx, bl
005e6de3: lea ecx, [esp + 0x1b14]
005e6dea: call 0x452360
005e6def: lea ecx, [esp + 0x30]
005e6df3: call 0x437c70
005e6df8: movss xmm0, dword ptr [esp + 0x31e4]
005e6e01: mov edx, edi
005e6e03: lea ecx, [esp + 0x40]
005e6e07: movss dword ptr [esi + 0x44], xmm0
005e6e0c: call 0x455350
005e6e11: movaps xmm0, xmmword ptr [esp + 0x31e0]
005e6e19: movss xmm1, dword ptr [ebp + 8]
005e6e1e: movaps xmmword ptr [edi], xmm0
005e6e21: movaps xmm0, xmmword ptr [esp + 0x3200]
005e6e29: movaps xmmword ptr [esi + 0x30], xmm0
005e6e2d: movss xmm0, dword ptr [esp + 0x3218]
005e6e36: movss dword ptr [esi + 0x60], xmm0
005e6e3b: xorps xmm0, xmm0
005e6e3e: comiss xmm0, xmm1
005e6e41: jbe 0x5e6e4b
005e6e43: movss xmm1, dword ptr [0xf1c56c]
005e6e4b: movss xmm0, dword ptr [esp + 0x3218]
005e6e54: mulss xmm0, xmm1
005e6e58: movss xmm1, dword ptr [0xf1c580]
005e6e60: comiss xmm0, xmm1
005e6e63: movss dword ptr [esi + 0x60], xmm0
005e6e68: ja 0x5e6e6d
005e6e6a: movaps xmm0, xmm1
005e6e6d: movss dword ptr [esi + 0x60], xmm0
005e6e72: mov edx, dword ptr [esp + 0x3410]
005e6e79: mov eax, dword ptr [esp + 0x3414]
005e6e80: mov ecx, dword ptr [esp + 0x3418]
005e6e87: mov dword ptr [esp + 0x10], edx
005e6e8b: mov edx, dword ptr [esp + 0x341c]
005e6e92: mov dword ptr [esp + 0x14], eax
005e6e96: mov eax, dword ptr [esp + 0x3420]
005e6e9d: mov dword ptr [esp + 0x18], ecx
005e6ea1: .byte 0x8b
005e6ea2: mov word ptr [esp], fs
005e6ea5: xor al, 0

3over4 data0xf20d3c operand0x6ac67a candidate-start0x6ac620
006ac620: push esi
006ac621: push edi
006ac622: mov esi, edx
006ac624: mov edi, ecx
006ac626: mov ecx, esi
006ac628: call 0x6b5300
006ac62d: mov eax, dword ptr [eax + 0x1268]
006ac633: test eax, eax
006ac635: je 0x6ac656
006ac637: cmp dword ptr [eax], edi
006ac639: je 0x6ac644
006ac63b: mov eax, dword ptr [eax + 0x24]
006ac63e: test eax, eax
006ac640: jne 0x6ac637
006ac642: jmp 0x6ac656
006ac644: test eax, eax
006ac646: je 0x6ac656
006ac648: mov ecx, dword ptr [esp + 0xc]
006ac64c: mov dword ptr [eax + 0xc], 0x3c
006ac653: mov dword ptr [eax + 0x20], ecx
006ac656: mov ecx, esi
006ac658: call 0x6b5300
006ac65d: mov eax, dword ptr [eax + 0x1268]
006ac663: test eax, eax
006ac665: je 0x6ac672
006ac667: cmp dword ptr [eax], edi
006ac669: je 0x6ac683
006ac66b: mov eax, dword ptr [eax + 0x24]
006ac66e: test eax, eax
006ac670: jne 0x6ac667
006ac672: mov eax, 2
006ac677: fld dword ptr [eax*4 + 0xf20d3c]
006ac67e: pop edi
006ac67f: pop esi
006ac680: ret 4
006ac683: test eax, eax
006ac685: je 0x6ac672
006ac687: mov eax, dword ptr [eax + 8]
006ac68a: fld dword ptr [eax*4 + 0xf20d3c]
006ac691: pop edi
006ac692: pop esi
006ac693: ret 4
006ac696: mov dh, 0xcc
006ac698: int3 
006ac699: int3 
006ac69a: int3 
006ac69b: int3 
006ac69c: int3 
006ac69d: int3 
006ac69e: int3 
006ac69f: int3 
006ac6a0: push ebx
006ac6a1: mov ebx, dword ptr [esp + 8]
006ac6a5: push esi
006ac6a6: push edi
006ac6a7: mov edi, ecx
006ac6a9: mov ecx, dword ptr [ebx + 0x18]
006ac6ac: mov eax, dword ptr [ecx + 0xf0]
006ac6b2: and eax, 0x40
006ac6b5: mov esi, edx
006ac6b7: mov edx, 0
006ac6bc: je 0x6ac6c2
006ac6be: test edx, edx
006ac6c0: je 0x6ac6d0
006ac6c2: movss xmm0, dword ptr [ecx + 8]
006ac6c7: comiss xmm0, dword ptr [0xf20f54]
006ac6ce: jae 0x6ac6f3
006ac6d0: cmp eax, 0x40
006ac6d3: jne 0x6ac7e3
006ac6d9: .byte 0x85

3over4 data0xf20d3c operand0x6ac68d candidate-start0x6ac620
006ac620: push esi
006ac621: push edi
006ac622: mov esi, edx
006ac624: mov edi, ecx
006ac626: mov ecx, esi
006ac628: call 0x6b5300
006ac62d: mov eax, dword ptr [eax + 0x1268]
006ac633: test eax, eax
006ac635: je 0x6ac656
006ac637: cmp dword ptr [eax], edi
006ac639: je 0x6ac644
006ac63b: mov eax, dword ptr [eax + 0x24]
006ac63e: test eax, eax
006ac640: jne 0x6ac637
006ac642: jmp 0x6ac656
006ac644: test eax, eax
006ac646: je 0x6ac656
006ac648: mov ecx, dword ptr [esp + 0xc]
006ac64c: mov dword ptr [eax + 0xc], 0x3c
006ac653: mov dword ptr [eax + 0x20], ecx
006ac656: mov ecx, esi
006ac658: call 0x6b5300
006ac65d: mov eax, dword ptr [eax + 0x1268]
006ac663: test eax, eax
006ac665: je 0x6ac672
006ac667: cmp dword ptr [eax], edi
006ac669: je 0x6ac683
006ac66b: mov eax, dword ptr [eax + 0x24]
006ac66e: test eax, eax
006ac670: jne 0x6ac667
006ac672: mov eax, 2
006ac677: fld dword ptr [eax*4 + 0xf20d3c]
006ac67e: pop edi
006ac67f: pop esi
006ac680: ret 4
006ac683: test eax, eax
006ac685: je 0x6ac672
006ac687: mov eax, dword ptr [eax + 8]
006ac68a: fld dword ptr [eax*4 + 0xf20d3c]
006ac691: pop edi
006ac692: pop esi
006ac693: ret 4
006ac696: mov dh, 0xcc
006ac698: int3 
006ac699: int3 
006ac69a: int3 
006ac69b: int3 
006ac69c: int3 
006ac69d: int3 
006ac69e: int3 
006ac69f: int3 
006ac6a0: push ebx
006ac6a1: mov ebx, dword ptr [esp + 8]
006ac6a5: push esi
006ac6a6: push edi
006ac6a7: mov edi, ecx
006ac6a9: mov ecx, dword ptr [ebx + 0x18]
006ac6ac: mov eax, dword ptr [ecx + 0xf0]
006ac6b2: and eax, 0x40
006ac6b5: mov esi, edx
006ac6b7: mov edx, 0
006ac6bc: je 0x6ac6c2
006ac6be: test edx, edx
006ac6c0: je 0x6ac6d0
006ac6c2: movss xmm0, dword ptr [ecx + 8]
006ac6c7: comiss xmm0, dword ptr [0xf20f54]
006ac6ce: jae 0x6ac6f3
006ac6d0: cmp eax, 0x40
006ac6d3: jne 0x6ac7e3
006ac6d9: test edx, edx
006ac6db: jne 0x6ac7e3
006ac6e1: lea edx, [eax - 0x27]
006ac6e4: mov ecx, ebx
006ac6e6: call 0x7b0540
006ac6eb: test eax, eax

3over4 data0xf20fb0 operand0x6abe97 candidate-start0x6abe60
006abe60: xorps xmm1, xmm1
006abe63: push esi
006abe64: mov esi, dword ptr [esp + 8]
006abe68: movss xmm0, dword ptr [esi]
006abe6c: comiss xmm1, xmm0
006abe6f: jbe 0x6abea6
006abe71: mov eax, dword ptr [edx + 0x1268]
006abe77: test eax, eax
006abe79: je 0x6abea6
006abe7b: jmp 0x6abe80
006abe7d: lea ecx, [ecx]
006abe80: cmp dword ptr [eax], ecx
006abe82: je 0x6abe8f
006abe84: mov eax, dword ptr [eax + 0x24]
006abe87: test eax, eax
006abe89: jne 0x6abe80
006abe8b: pop esi
006abe8c: ret 4
006abe8f: test eax, eax
006abe91: je 0x6abea6
006abe93: mulss xmm0, dword ptr [0xf20fb0]
006abe9b: movss dword ptr [esi], xmm0
006abe9f: mov dword ptr [eax + 0xc], 2
006abea6: pop esi
006abea7: ret 4
006abeaa: pop esp
006abeab: int3 
006abeac: int3 
006abead: int3 
006abeae: int3 
006abeaf: int3 
006abeb0: movss xmm1, dword ptr [0xec6e14]
006abeb8: push esi
006abeb9: mov esi, dword ptr [esp + 8]
006abebd: movss xmm0, dword ptr [esi]
006abec1: comiss xmm1, xmm0
006abec4: jbe 0x6abf0e
006abec6: comiss xmm0, dword ptr [0xf0fc08]
006abecd: jbe 0x6abf0e
006abecf: mov eax, dword ptr [edx + 0x1268]
006abed5: test eax, eax
006abed7: je 0x6abf0e
006abed9: lea esp, [esp]
006abee0: cmp dword ptr [eax], ecx
006abee2: je 0x6abeef
006abee4: mov eax, dword ptr [eax + 0x24]
006abee7: test eax, eax
006abee9: jne 0x6abee0
006abeeb: pop esi
006abeec: ret 4
006abeef: test eax, eax
006abef1: je 0x6abf0e
006abef3: .byte 0xf3
006abef4: .byte 0x0f
006abef5: pop ecx
006abef6: .byte 0x05

3over4 data0xf23e78 operand0x778d24 candidate-start0x778a30
00778a30: push esi
00778a31: push edi
00778a32: mov edi, edx
00778a34: mov eax, dword ptr [edi + 0x30]
00778a37: movss xmm0, dword ptr [edi + 0x24]
00778a3c: mov edx, dword ptr [edi + 0x1c]
00778a3f: push eax
00778a40: mov eax, dword ptr [edi + 0x18]
00778a43: push edi
00778a44: push ecx
00778a45: mov esi, ecx
00778a47: mov ecx, dword ptr [edi + 0x20]
00778a4a: movss dword ptr [esp], xmm0
00778a4f: push ecx
00778a50: mov ecx, dword ptr [edi + 0x14]
00778a53: push edx
00778a54: mov edx, dword ptr [edi + 0x10]
00778a57: push eax
00778a58: push ecx
00778a59: mov ecx, esi
00778a5b: call 0x823990
00778a60: test eax, eax
00778a62: jne 0x778aee
00778a68: mov edx, dword ptr [0x1ce716c]
00778a6e: test edx, edx
00778a70: je 0x778a8d
00778a72: mov ecx, dword ptr [edx]
00778a74: test ecx, ecx
00778a76: je 0x778a8d
00778a78: cmp dword ptr [ecx + 0x74], 1
00778a7c: jne 0x778a8d
00778a7e: mov edx, dword ptr [ecx]
00778a80: mov eax, dword ptr [edx + 0x20]
00778a83: call eax
00778a85: mov edx, dword ptr [0x1ce716c]
00778a8b: jmp 0x778a8f
00778a8d: xor eax, eax
00778a8f: cmp dword ptr [edx + 0x1bc], 7
00778a96: je 0x778aee
00778a98: cmp eax, esi
00778a9a: je 0x778aee
00778a9c: test eax, eax
00778a9e: je 0x778aac
00778aa0: mov ecx, dword ptr [eax + 0x18]
00778aa3: call 0x6b1020
00778aa8: test eax, eax
00778aaa: je 0x778aee
00778aac: push 0
00778aae: push edi
00778aaf: mov eax, esi
00778ab1: call 0x7786d0
00778ab6: mov eax, dword ptr [esi + 0x18]
00778ab9: test byte ptr [eax + 0x2c], 1
00778abd: je 0x778ad0
00778abf: mov ecx, dword ptr [eax + 0xf4]
00778ac5: and ecx, 8
00778ac8: xor eax, eax
00778aca: or eax, ecx
00778acc: je 0x778ae9
00778ace: jmp 0x778adb
00778ad0: mov ecx, esi
00778ad2: call 0x7c0710
00778ad7: test eax, eax
00778ad9: jne 0x778ae9
00778adb: push 0
00778add: mov edx, 0xf2f520
00778ae2: mov ecx, esi
00778ae4: call 0x404db0
00778ae9: pop edi
00778aea: xor eax, eax
00778aec: pop esi
00778aed: ret 
00778aee: mov esi, dword ptr [esi + 0x3c]
00778af1: and dword ptr [esi + 0x1684], 0xffffffdf
00778af8: pop edi
00778af9: mov eax, 1
00778afe: pop esi
00778aff: ret 
00778b00: push ebp
00778b01: mov ebp, esp
00778b03: and esp, 0xfffffff0
00778b06: sub esp, 0x44
00778b09: push ebx
00778b0a: push esi
00778b0b: mov dword ptr [esp + 0x20], edx
00778b0f: mov edx, dword ptr [0x1198794]
00778b15: push edi
00778b16: mov ebx, ecx
00778b18: call 0x6e2600
00778b1d: mov ecx, dword ptr [ebx + 0x3c]
00778b20: or dword ptr [ecx + 0x1684], 0x20
00778b27: mov ecx, dword ptr [ebx + 0x14]
00778b2a: or dword ptr [ecx + 8], 0x2000000
00778b31: mov esi, dword ptr [ebp + 8]
00778b34: xorps xmm0, xmm0
00778b37: movss dword ptr [ecx + 0x14], xmm0
00778b3c: lea edi, [eax + 0x10]
00778b3f: mov eax, dword ptr [esp + 0x24]
00778b43: xor edx, edx
00778b45: mov dword ptr [ecx + 0x1c], edx
00778b48: movaps xmm0, xmmword ptr [esi + 0x130]
00778b4f: movaps xmmword ptr [edi], xmm0
00778b52: mov dword ptr [edi + 0x10], eax
00778b55: mov ecx, dword ptr [esi + 0x1e0]
00778b5b: mov dword ptr [edi + 0x14], ecx
00778b5e: mov eax, dword ptr [esi + 0x1e4]
00778b64: mov dword ptr [edi + 0x18], eax
00778b67: mov ecx, dword ptr [esi + 0x104]
00778b6d: mov dword ptr [edi + 0x1c], ecx
00778b70: movss xmm0, dword ptr [esi + 0x130]
00778b78: subss xmm0, dword ptr [esi + 0x120]
00778b80: movss xmm1, dword ptr [esi + 0x138]
00778b88: subss xmm1, dword ptr [esi + 0x128]
00778b90: mulss xmm0, xmm0
00778b94: mulss xmm1, xmm1
00778b98: addss xmm1, xmm0
00778b9c: xorps xmm0, xmm0
00778b9f: movss xmm0, xmm1
00778ba3: sqrtss xmm0, xmm0
00778ba7: movaps xmmword ptr [esp + 0x40], xmm0
00778bac: movss xmm0, dword ptr [esp + 0x40]
00778bb2: movss dword ptr [edi + 0x24], xmm0
00778bb7: movss xmm0, dword ptr [esi + 0x1c8]
00778bbf: addss xmm0, dword ptr [0x146b618]
00778bc7: mov dword ptr [edi + 0x2c], edx
00778bca: movss dword ptr [edi + 0x28], xmm0
00778bcf: mov eax, dword ptr [esi + 0xf4]
00778bd5: lea edx, [eax + eax*4]
00778bd8: mov eax, dword ptr [esi + edx*8 + 4]
00778bdc: mov dword ptr [edi + 0x30], eax
00778bdf: mov ecx, dword ptr [esi + 0xfc]
00778be5: mov dword ptr [edi + 0x50], ecx
00778be8: mov ecx, ebx
00778bea: call 0x7c0790
00778bef: test eax, eax
00778bf1: jne 0x778bfc
00778bf3: xor edx, edx
00778bf5: mov ecx, ebx
00778bf7: call 0x7c07c0
00778bfc: push 1
00778bfe: push edi
00778bff: mov eax, ebx
00778c01: call 0x7786d0
00778c06: fld dword ptr [esi + 0x130]
00778c0c: mov edx, dword ptr [ebp + 0xc]
00778c0f: fstp dword ptr [edx]
00778c11: mov eax, dword ptr [esi + 0x10c]
00778c17: mov dword ptr [esp + 0x18], eax
00778c1b: cmp eax, 3
00778c1e: je 0x778c25
00778c20: cmp eax, 4
00778c23: jne 0x778c6a
00778c25: mov eax, dword ptr [edi + 0x30]
00778c28: fld dword ptr [eax*4 + 0xf2315c]
00778c2f: mov ecx, dword ptr [0x10e23b8]
00778c35: fstp dword ptr [esp + 0x20]
00778c39: call 0xd963d0
00778c3e: mov ecx, eax
00778c40: mov dword ptr [esp + 0x2c], edx
00778c44: call 0xd96410
00778c49: fld dword ptr [esp + 0x20]
00778c4d: fcompi st(1)
00778c4f: fstp st(0)
00778c51: jbe 0x778c5a
00778c53: mov eax, 1
00778c58: jmp 0x778c5c
00778c5a: xor eax, eax
00778c5c: xor ecx, ecx
00778c5e: test eax, eax
00778c60: setne cl
00778c63: inc ecx
00778c64: mov dword ptr [esp + 0x18], ecx
00778c68: mov eax, ecx
00778c6a: mov dword ptr [edi + 0x20], eax
00778c6d: mov ecx, dword ptr [esi + 0x104]
00778c73: lea eax, [eax + ecx*4]
00778c76: add eax, ecx
00778c78: shl eax, 4
00778c7b: movss xmm1, dword ptr [eax + 0xf23ea0]
00778c83: movss xmm0, dword ptr [eax + 0xf23ea4]
00778c8b: comiss xmm1, xmm0
00778c8e: jbe 0x778c95
00778c90: movaps xmm3, xmm1
00778c93: jmp 0x778c98
00778c95: movaps xmm3, xmm0
00778c98: comiss xmm0, xmm1
00778c9b: jbe 0x778ca2
00778c9d: movaps xmm2, xmm1
00778ca0: jmp 0x778ca5
00778ca2: movaps xmm2, xmm0
00778ca5: movss xmm4, dword ptr [edi + 0x24]
00778caa: subss xmm4, dword ptr [0xf2d118]
00778cb2: subss xmm0, xmm1
00778cb6: mulss xmm0, xmm4
00778cba: mulss xmm0, dword ptr [0xf2d97c]
00778cc2: addss xmm0, xmm1
00778cc6: comiss xmm2, xmm0
00778cc9: jbe 0x778cce
00778ccb: movaps xmm0, xmm2
00778cce: comiss xmm3, xmm0
00778cd1: jbe 0x778cdb
00778cd3: movss dword ptr [esp + 0x1c], xmm0
00778cd9: jmp 0x778ce1
00778cdb: movss dword ptr [esp + 0x1c], xmm3
00778ce1: mov eax, dword ptr [ebx + 0x20]
00778ce4: mov ecx, dword ptr [esi + 0xf4]
00778cea: movaps xmm0, xmmword ptr [eax + 0x30]
00778cee: lea edx, [ecx + ecx*4]
00778cf1: movaps xmmword ptr [esp + 0x30], xmm0
00778cf6: mov ecx, dword ptr [esi + edx*8 + 4]
00778cfa: mov eax, dword ptr [eax + 0x50]
00778cfd: push eax
00778cfe: mov dword ptr [esp + 0x24], ecx
00778d02: push edi
00778d03: lea edx, [esp + 0x38]
00778d07: lea ecx, [esi + 0x120]
00778d0d: call 0x7fe780
00778d12: mov edx, dword ptr [esp + 0x20]
00778d16: neg eax
00778d18: sbb eax, eax
00778d1a: neg eax
00778d1c: lea eax, [eax + edx*2]
00778d1f: movss xmm0, dword ptr [eax*4 + 0xf23e78]
00778d28: mov edx, dword ptr [ebp + 0xc]
00778d2b: addss xmm0, dword ptr [esp + 0x1c]
00778d31: movss dword ptr [edx + 4], xmm0
00778d36: cmp dword ptr [ebx + 0x74], 1
00778d3a: jne 0x778d55
00778d3c: mov edx, dword ptr [ebx]
00778d3e: mov eax, dword ptr [edx + 0x20]
00778d41: mov ecx, ebx
00778d43: call eax
00778d45: mov ecx, dword ptr [eax + 0xb00]
00778d4b: movss xmm0, dword ptr [ecx + 0xc]
00778d50: mov edx, dword ptr [ebp + 0xc]
00778d53: jmp 0x778d5d
00778d55: movss xmm0, dword ptr [0xf2d978]
00778d5d: movss xmm1, dword ptr [edx + 4]
00778d62: xorps xmm4, xmm4
00778d65: mulss xmm1, xmm0
00778d69: movss dword ptr [edx + 4], xmm1
00778d6e: fld dword ptr [esi + 0x138]
00778d74: fstp dword ptr [edx + 8]
00778d77: movaps xmm1, xmmword ptr [esi + 0x120]
00778d7e: .byte 0x0f
00778d7f: pop esp
00778d80: .byte 0x8e
00778d81: xor byte ptr [ecx], al
00778d83: .byte 0x00

3over4 data0xf27d7c operand0x72f798 candidate-start0x72f740
0072f740: sub esp, 0xc
0072f743: mov ecx, dword ptr [edi + 0xb00]
0072f749: movss xmm0, dword ptr [ecx + 0xc]
0072f74e: push ebx
0072f74f: mov ebx, dword ptr [esp + 0x14]
0072f753: mov eax, dword ptr [ebx + 0xb00]
0072f759: subss xmm0, dword ptr [eax + 0xc]
0072f75e: push esi
0072f75f: push ecx
0072f760: mov ecx, 0xf27d64
0072f765: movss dword ptr [esp], xmm0
0072f76a: call 0x6cb570
0072f76f: fstp dword ptr [esp + 8]
0072f773: mov esi, dword ptr [eax + 0x30]
0072f776: mov edx, 0x13
0072f77b: mov ecx, esi
0072f77d: call 0x6d5f00
0072f782: fstp dword ptr [esp + 0x18]
0072f786: mov edx, 0x29
0072f78b: mov ecx, esi
0072f78d: call 0x6d5f00
0072f792: fadd dword ptr [esp + 0x18]
0072f796: push ecx
0072f797: mov ecx, 0xf27d7c
0072f79c: fstp dword ptr [esp + 0x1c]
0072f7a0: movss xmm0, dword ptr [esp + 0x1c]
0072f7a6: movss dword ptr [esp], xmm0
0072f7ab: call 0x6cb570
0072f7b0: fstp dword ptr [esp + 0x18]
0072f7b4: mov ecx, dword ptr [0x10e23b8]
0072f7ba: call 0xd963d0
0072f7bf: mov ecx, eax
0072f7c1: mov dword ptr [esp + 0x10], edx
0072f7c5: call 0xd96410
0072f7ca: fld dword ptr [esp + 0x18]
0072f7ce: fmul dword ptr [esp + 8]
0072f7d2: fcompi st(1)
0072f7d4: fstp st(0)
0072f7d6: jbe 0x72f7fd
0072f7d8: mov edx, edi
0072f7da: mov ecx, ebx
0072f7dc: call 0x715c20
0072f7e1: test eax, eax
0072f7e3: je 0x72f7fd
0072f7e5: push 3
0072f7e7: mov edx, edi
0072f7e9: mov ecx, ebx
0072f7eb: call 0x8b2980
0072f7f0: pop esi
0072f7f1: mov eax, 1
0072f7f6: pop ebx
0072f7f7: .byte 0x83

3over4 data0xf2b358 operand0x762f9e candidate-start0x762d70
00762d70: push ebp
00762d71: mov ebp, esp
00762d73: and esp, 0xfffffff0
00762d76: sub esp, 0x74
00762d79: movss xmm0, dword ptr [0xec6f84]
00762d81: push ebx
00762d82: mov ebx, dword ptr [ebp + 0xc]
00762d85: mov eax, dword ptr [ebx + 0x4c]
00762d88: mov eax, dword ptr [eax + 0x34]
00762d8b: push esi
00762d8c: xor esi, esi
00762d8e: push edi
00762d8f: mov dword ptr [esp + 0x18], esi
00762d93: mov dword ptr [esp + 0x1c], esi
00762d97: movss dword ptr [esp + 0x14], xmm0
00762d9d: cmp eax, esi
00762d9f: je 0x762da6
00762da1: lea ecx, [eax - 0x78]
00762da4: jmp 0x762da8
00762da6: xor ecx, ecx
00762da8: mov ecx, dword ptr [ecx + 0x7c]
00762dab: cmp eax, esi
00762dad: je 0x762db4
00762daf: add eax, -0x78
00762db2: jmp 0x762db6
00762db4: xor eax, eax
00762db6: xorps xmm1, xmm1
00762db9: mov edi, ecx
00762dbb: sub edi, eax
00762dbd: neg edi
00762dbf: sbb edi, edi
00762dc1: and edi, ecx
00762dc3: cmp edi, esi
00762dc5: je 0x762f2c
00762dcb: mov eax, dword ptr [edi + 0x20]
00762dce: movaps xmm0, xmmword ptr [eax + 0x30]
00762dd2: mov edx, dword ptr [ebx + 0x20]
00762dd5: mov ecx, dword ptr [edi + 0x60]
00762dd8: and ecx, 3
00762ddb: movaps xmmword ptr [esp + 0x30], xmm0
00762de0: movss dword ptr [esp + 0x34], xmm1
00762de6: movaps xmm2, xmmword ptr [esp + 0x30]
00762deb: subps xmm2, xmmword ptr [edx + 0x30]
00762def: movaps xmmword ptr [esp + 0x30], xmm2
00762df4: movss dword ptr [esp + 0x34], xmm1
00762dfa: movss dword ptr [esp + 0x3c], xmm1
00762e00: movaps xmm0, xmmword ptr [esp + 0x30]
00762e05: mulps xmm0, xmm0
00762e08: movaps xmm2, xmm0
00762e0b: movhlps xmm0, xmm2
00762e0e: addps xmm0, xmm2
00762e11: movaps xmm2, xmm0
00762e14: shufps xmm2, xmm0, 1
00762e18: addps xmm2, xmm0
00762e1b: movaps xmmword ptr [esp + 0x30], xmm2
00762e20: jne 0x762e3f
00762e22: movss xmm0, dword ptr [esp + 0x14]
00762e28: comiss xmm0, dword ptr [esp + 0x30]
00762e2d: jbe 0x762e3f
00762e2f: movss xmm0, dword ptr [esp + 0x30]
00762e35: mov dword ptr [esp + 0x1c], edi
00762e39: movss dword ptr [esp + 0x14], xmm0
00762e3f: test ecx, ecx
00762e41: je 0x762e4b
00762e43: movaps xmm0, xmm1
00762e46: jmp 0x762ef6
00762e4b: movss xmm0, dword ptr [0xf23e34]
00762e53: comiss xmm0, dword ptr [eax + 0x34]
00762e57: jbe 0x762e61
00762e59: movaps xmm0, xmm1
00762e5c: jmp 0x762ef6
00762e61: mov ecx, dword ptr [ebp + 0x10]
00762e64: cmp ecx, 2
00762e67: je 0x762eaa
00762e69: cmp ecx, 1
00762e6c: je 0x762eaa
00762e6e: movaps xmm0, xmmword ptr [eax + 0x30]
00762e72: mov ecx, dword ptr [edi + 0xb00]
00762e78: movaps xmmword ptr [esp + 0x40], xmm0
00762e7d: movss xmm0, dword ptr [ecx + 0xc]
00762e82: movss dword ptr [esp + 0x44], xmm0
00762e88: movaps xmm0, xmmword ptr [edx + 0x30]
00762e8c: mov edx, dword ptr [ebx + 0xb00]
00762e92: movaps xmmword ptr [esp + 0x20], xmm0
00762e97: movss dword ptr [esp + 0x24], xmm1
00762e9d: movss xmm0, dword ptr [edx + 0xc]
00762ea2: movss dword ptr [esp + 0x24], xmm0
00762ea8: jmp 0x762ebd
00762eaa: lea eax, [esp + 0x40]
00762eae: push eax
00762eaf: lea edx, [esp + 0x24]
00762eb3: push edx
00762eb4: push ecx
00762eb5: push ebx
00762eb6: mov eax, edi
00762eb8: call 0x740440
00762ebd: lea ecx, [esp + 0x20]
00762ec1: call 0x88fa20
00762ec6: fstp dword ptr [esp + 0x18]
00762eca: mov eax, dword ptr [ebp + 0x10]
00762ecd: movss xmm0, dword ptr [esp + 0x18]
00762ed3: push eax
00762ed4: push ecx
00762ed5: movss dword ptr [esp], xmm0
00762eda: lea ecx, [esp + 0x28]
00762ede: push ecx
00762edf: lea edx, [esp + 0x4c]
00762ee3: push edx
00762ee4: call 0x73fcc0
00762ee9: fstp dword ptr [esp + 0x18]
00762eed: movss xmm0, dword ptr [esp + 0x18]
00762ef3: xorps xmm1, xmm1
00762ef6: mov dword ptr [esp + esi*8 + 0x58], edi
00762efa: movss dword ptr [esp + esi*8 + 0x5c], xmm0
00762f00: mov eax, dword ptr [edi + 0x70]
00762f03: mov ecx, dword ptr [edi + 0x4c]
00762f06: lea ecx, [ecx + eax*8]
00762f09: mov eax, dword ptr [edi + 0x7c]
00762f0c: test ecx, ecx
00762f0e: je 0x762f15
00762f10: add ecx, -0x78
00762f13: jmp 0x762f17
00762f15: xor ecx, ecx
00762f17: mov edi, eax
00762f19: sub edi, ecx
00762f1b: neg edi
00762f1d: sbb edi, edi
00762f1f: inc esi
00762f20: and edi, eax
00762f22: jne 0x762dcb
00762f28: mov dword ptr [esp + 0x18], esi
00762f2c: lea eax, [esi - 1]
00762f2f: test eax, eax
00762f31: jle 0x762f6e
00762f33: mov ebx, eax
00762f35: mov dword ptr [esp + 0x14], eax
00762f39: test ebx, ebx
00762f3b: jle 0x762f67
00762f3d: lea esi, [esp + 0x60]
00762f41: mov edi, ebx
00762f43: movss xmm0, dword ptr [esi + 4]
00762f48: comiss xmm0, dword ptr [esi - 4]
00762f4c: jbe 0x762f5d
00762f4e: push 8
00762f50: lea ecx, [esi - 8]
00762f53: mov edx, esi
00762f55: call 0xd95760
00762f5a: xorps xmm1, xmm1
00762f5d: add esi, 8
00762f60: dec edi
00762f61: jne 0x762f43
00762f63: mov esi, dword ptr [esp + 0x18]
00762f67: dec ebx
00762f68: dec dword ptr [esp + 0x14]
00762f6c: jne 0x762f39
00762f6e: xor eax, eax
00762f70: movaps xmm0, xmm1
00762f73: cmp esi, 4
00762f76: jl 0x762fd6
00762f78: lea ecx, [esi - 3]
00762f7b: jmp 0x762f80
00762f7d: lea ecx, [ecx]
00762f80: movss xmm2, dword ptr [esp + eax*8 + 0x5c]
00762f86: mulss xmm2, dword ptr [eax*4 + 0xf2b354]
00762f8f: addss xmm2, xmm0
00762f93: movss xmm0, dword ptr [esp + eax*8 + 0x64]
00762f99: mulss xmm0, dword ptr [eax*4 + 0xf2b358]
00762fa2: addss xmm2, xmm0
00762fa6: movss xmm0, dword ptr [esp + eax*8 + 0x6c]
00762fac: mulss xmm0, dword ptr [eax*4 + 0xf2b35c]
00762fb5: addss xmm2, xmm0
00762fb9: movss xmm0, dword ptr [esp + eax*8 + 0x74]
00762fbf: mulss xmm0, dword ptr [eax*4 + 0xf2b360]
00762fc8: add eax, 4
00762fcb: addss xmm2, xmm0
00762fcf: movaps xmm0, xmm2
00762fd2: cmp eax, ecx
00762fd4: jl 0x762f80
00762fd6: cmp eax, esi
00762fd8: jge 0x762ffb
00762fda: lea ebx, [ebx]
00762fe0: movss xmm2, dword ptr [eax*4 + 0xf2b354]
00762fe9: mulss xmm2, dword ptr [esp + eax*8 + 0x5c]
00762fef: inc eax
00762ff0: addss xmm2, xmm0
00762ff4: movaps xmm0, xmm2
00762ff7: cmp eax, esi
00762ff9: jl 0x762fe0
00762ffb: mov eax, dword ptr [ebp + 8]

3over4 data0xf30054 operand0x7c4496 candidate-start0x7c4370
007c4370: test byte ptr [esp + 4], 2
007c4375: push ebx
007c4376: push ebp
007c4377: push esi
007c4378: push edi
007c4379: mov edi, edx
007c437b: mov ebx, ecx
007c437d: je 0x7c43e9
007c437f: mov eax, dword ptr [edi]
007c4381: mov edx, dword ptr [eax + 8]
007c4384: mov ecx, edi
007c4386: call edx
007c4388: mov eax, dword ptr [eax + 0x18]
007c438b: cmp dword ptr [eax + 0x310], 3
007c4392: jg 0x7c43e9
007c4394: mov esi, dword ptr [edi + 0x18]
007c4397: mov ecx, esi
007c4399: call 0x7ad6b0
007c439e: mov ecx, esi
007c43a0: mov ebp, eax
007c43a2: call 0x7ad6b0
007c43a7: mov ecx, dword ptr [ebp + 4]
007c43aa: mov edx, dword ptr [ecx + 0xc]
007c43ad: mov esi, dword ptr [0x129d014]
007c43b3: mov ecx, dword ptr [ecx + 8]
007c43b6: mov ebp, dword ptr [0x129d018]
007c43bc: and ecx, esi
007c43be: and edx, ebp
007c43c0: cmp ecx, esi
007c43c2: jne 0x7c43e9
007c43c4: cmp edx, ebp
007c43c6: jne 0x7c43e9
007c43c8: mov eax, dword ptr [eax + 0x4c]
007c43cb: mov ecx, dword ptr [eax + 0xc]
007c43ce: mov eax, dword ptr [eax + 8]
007c43d1: and eax, esi
007c43d3: and ecx, ebp
007c43d5: cmp eax, esi
007c43d7: jne 0x7c43dd
007c43d9: cmp ecx, ebp
007c43db: je 0x7c43e9
007c43dd: mov eax, 7
007c43e2: pop edi
007c43e3: pop esi
007c43e4: pop ebp
007c43e5: pop ebx
007c43e6: ret 0xc
007c43e9: mov ecx, dword ptr [esp + 0x18]
007c43ed: sub esp, 8
007c43f0: mov eax, esp
007c43f2: mov dword ptr [eax], ecx
007c43f4: mov edx, dword ptr [esp + 0x24]
007c43f8: mov dword ptr [eax + 4], edx
007c43fb: mov eax, dword ptr [esp + 0x1c]
007c43ff: push eax
007c4400: mov edx, edi
007c4402: mov ecx, ebx
007c4404: call 0x7c1510
007c4409: pop edi
007c440a: pop esi
007c440b: pop ebp
007c440c: pop ebx
007c440d: ret 0xc
007c4410: push ebp
007c4411: mov ebp, esp
007c4413: and esp, 0xfffffff0
007c4416: sub esp, 0x24
007c4419: push ebx
007c441a: push esi
007c441b: mov ebx, edx
007c441d: push edi
007c441e: mov edi, dword ptr [ebx + 0x18]
007c4421: cmp dword ptr [edi + 0x310], 3
007c4428: mov dword ptr [esp + 0x18], ebx
007c442c: mov dword ptr [esp + 0x1c], ecx
007c4430: jge 0x7c443b
007c4432: xor eax, eax
007c4434: pop edi
007c4435: pop esi
007c4436: pop ebx
007c4437: mov esp, ebp
007c4439: pop ebp
007c443a: ret 
007c443b: mov ecx, edi
007c443d: call 0x7ad6b0
007c4442: mov esi, eax
007c4444: mov eax, dword ptr [ebx + 0x14]
007c4447: cmp dword ptr [eax], -1
007c444a: je 0x7c4459
007c444c: cmp dword ptr [eax + 8], 0
007c4450: jne 0x7c4459
007c4452: mov ebx, 1
007c4457: jmp 0x7c445b
007c4459: xor ebx, ebx
007c445b: mov ecx, edi
007c445d: call 0x7ad6b0
007c4462: xor ecx, ecx
007c4464: test ebx, ebx
007c4466: sete cl
007c4469: lea ecx, [ecx + ecx*2 + 0x24]
007c446d: movss xmm0, dword ptr [eax + ecx*4]
007c4472: subss xmm0, dword ptr [esi + 0xb4]
007c447a: lea edi, [eax + ecx*4]
007c447d: shufps xmm0, xmm0, 0
007c4481: andps xmm0, xmmword ptr [0xf337f0]
007c4488: movaps xmmword ptr [esp + 0x20], xmm0
007c448d: movss xmm0, dword ptr [esp + 0x20]
007c4493: comiss xmm0, dword ptr [0xf30054]
007c449a: ja 0x7c4432
007c449c: call 0x4120b0
007c44a1: cmp dword ptr [eax + 0x34], 0
007c44a5: jne 0x7c44ab
007c44a7: xor eax, eax
007c44a9: jmp 0x7c44b5
007c44ab: mov ecx, dword ptr [eax + 0x2c]
007c44ae: lea edx, [ecx + ecx*2]
007c44b1: mov eax, dword ptr [eax + edx*4 + 0x14]
007c44b5: sub eax, 8
007c44b8: je 0x7c44fb
007c44ba: sub eax, 2
007c44bd: je 0x7c44fb
007c44bf: mov ecx, dword ptr [esp + 0x18]
007c44c3: mov eax, dword ptr [ecx + 0x14]
007c44c6: cmp dword ptr [eax], -1
007c44c9: je 0x7c44d1
007c44cb: cmp dword ptr [eax + 8], 0
007c44cf: je 0x7c44fb
007c44d1: mov ecx, dword ptr [ecx + 0x18]
007c44d4: call 0x7ad6b0
007c44d9: mov ecx, dword ptr [esp + 0x1c]
007c44dd: mov edx, eax
007c44df: call 0x7c1890
007c44e4: test eax, eax
007c44e6: jne 0x7c44fb
007c44e8: mov ax, word ptr [edi + 4]
007c44ec: sub ax, word ptr [esi + 0xbc]
007c44f3: cwde 
007c44f4: pop edi
007c44f5: pop esi

3over4 data0xf30054 operand0x7c45e5 candidate-start0x7c4580
007c4580: push ebp
007c4581: mov ebp, esp
007c4583: and esp, 0xfffffff0
007c4586: sub esp, 0x18
007c4589: push esi
007c458a: push edi
007c458b: mov edi, dword ptr [edx + 0x18]
007c458e: mov ecx, edi
007c4590: call 0x7ad6b0
007c4595: test byte ptr [eax + 0x14], 0x10
007c4599: je 0x7c45ac
007c459b: cmp dword ptr [edi + 0x178], 0xf
007c45a2: je 0x7c45ac
007c45a4: xor eax, eax
007c45a6: pop edi
007c45a7: pop esi
007c45a8: mov esp, ebp
007c45aa: pop ebp
007c45ab: ret 
007c45ac: mov ecx, edi
007c45ae: call 0x7ad6b0
007c45b3: mov ecx, edi
007c45b5: mov esi, eax
007c45b7: call 0x7ad6b0
007c45bc: movss xmm0, dword ptr [eax + 0x90]
007c45c4: subss xmm0, dword ptr [esi + 0xb4]
007c45cc: shufps xmm0, xmm0, 0
007c45d0: andps xmm0, xmmword ptr [0xf337f0]
007c45d7: movaps xmmword ptr [esp + 0x10], xmm0
007c45dc: movss xmm0, dword ptr [esp + 0x10]
007c45e2: comiss xmm0, dword ptr [0xf30054]
007c45e9: ja 0x7c45a4
007c45eb: mov ax, word ptr [eax + 0x98]
007c45f2: sub ax, word ptr [esi + 0xbc]
007c45f9: pop edi
007c45fa: cwde 
007c45fb: pop esi
007c45fc: mov esp, ebp
007c45fe: pop ebp
007c45ff: ret 
007c4600: push ecx
007c4601: push esi
007c4602: mov esi, edx
007c4604: mov eax, dword ptr [esi]
007c4606: mov edx, dword ptr [eax + 8]
007c4609: push edi
007c460a: mov edi, ecx
007c460c: mov ecx, esi
007c460e: call edx
007c4610: cmp dword ptr [eax + 0x74], 1
007c4614: jne 0x7c472b
007c461a: mov ecx, esi
007c461c: call 0x7bd840
007c4621: test eax, eax
007c4623: jne 0x7c472b
007c4629: push eax
007c462a: xor edx, edx
007c462c: mov ecx, esi
007c462e: call 0x7beab0
007c4633: test eax, eax
007c4635: je 0x7c4642
007c4637: cmp dword ptr [esp + 0x14], 0
007c463c: je 0x7c472b
007c4642: mov eax, dword ptr [esi]
007c4644: .byte 0x8b

3over4 data0xf30054 operand0x7c7a7d candidate-start0x7c7990
007c7990: push ebp
007c7991: mov ebp, esp
007c7993: and esp, 0xfffffff0
007c7996: sub esp, 0x88
007c799c: push esi
007c799d: push edi
007c799e: mov edi, edx
007c79a0: mov esi, ecx
007c79a2: call 0x6f7b30
007c79a7: test eax, eax
007c79a9: jne 0x7c79b3
007c79ab: xor eax, eax
007c79ad: pop edi
007c79ae: pop esi
007c79af: mov esp, ebp
007c79b1: pop ebp
007c79b2: ret 
007c79b3: mov ecx, dword ptr [0x1ce716c]
007c79b9: mov edx, dword ptr [ecx + 0xc]
007c79bc: movaps xmm1, xmmword ptr [edx + 0x80]
007c79c3: pxor xmm0, xmm0
007c79c7: mov dword ptr [esp + 0x14], eax
007c79cb: push edi
007c79cc: movq qword ptr [esp + 0x1c], xmm0
007c79d2: movq qword ptr [esp + 0x24], xmm0
007c79d8: movq qword ptr [esp + 0x2c], xmm0
007c79de: movq qword ptr [esp + 0x34], xmm0
007c79e4: movq qword ptr [esp + 0x3c], xmm0
007c79ea: pxor xmm0, xmm0
007c79ee: lea eax, [esp + 0x14]
007c79f2: push eax
007c79f3: movdqa xmmword ptr [esp + 0x68], xmm0
007c79f9: movdqa xmmword ptr [esp + 0x78], xmm0
007c79ff: pxor xmm0, xmm0
007c7a03: push 0xa
007c7a05: mov edx, 0x11f10d8
007c7a0a: mov ecx, 0x129d144
007c7a0f: mov dword ptr [esp + 0x1c], esi
007c7a13: mov dword ptr [esp + 0x4c], 2
007c7a1b: movaps xmmword ptr [esp + 0x5c], xmm1
007c7a20: movdqa xmmword ptr [esp + 0x8c], xmm0
007c7a29: call 0x7c5fc0
007c7a2e: fld dword ptr [0xf31d6c]
007c7a34: fxch st(1)
007c7a36: fcompi st(1)
007c7a38: fstp st(0)
007c7a3a: ja 0x7c79ab
007c7a40: mov ecx, esi
007c7a42: call 0x6b5300
007c7a47: mov ecx, eax
007c7a49: call 0x6d6750
007c7a4e: fstp dword ptr [esp + 0xc]
007c7a52: call 0x6b5320
007c7a57: fsubr dword ptr [esp + 0xc]
007c7a5b: fmul dword ptr [0xf2d394]
007c7a61: fstp dword ptr [esp + 8]
007c7a65: call 0x6b5310
007c7a6a: fstp dword ptr [esp + 0xc]
007c7a6e: call 0x6b5320
007c7a73: fsubr dword ptr [esp + 0xc]
007c7a77: fdivr dword ptr [esp + 8]
007c7a7b: fld dword ptr [0xf30054]
007c7a81: fadd st(1), st(0)
007c7a83: fxch st(1)
007c7a85: fst dword ptr [esp + 8]
007c7a89: fxch st(1)
007c7a8b: fcompi st(1)
007c7a8d: fstp st(0)
007c7a8f: jbe 0x7c7aac
007c7a91: movss xmm0, dword ptr [0xf30054]
007c7a99: movss dword ptr [edi + 0xb0], xmm0
007c7aa1: mov eax, 1
007c7aa6: pop edi
007c7aa7: pop esi
007c7aa8: mov esp, ebp
007c7aaa: pop ebp
007c7aab: ret 
007c7aac: movss xmm0, dword ptr [esp + 8]
007c7ab2: movss xmm1, dword ptr [0xf31d68]
007c7aba: comiss xmm1, xmm0
007c7abd: ja 0x7c7ac2
007c7abf: movaps xmm0, xmm1
007c7ac2: movss dword ptr [edi + 0xb0], xmm0
007c7aca: pop edi
007c7acb: mov eax, 1
007c7ad0: pop esi
007c7ad1: mov esp, ebp
007c7ad3: pop ebp
007c7ad4: ret 
007c7ad5: das 
007c7ad6: int3 
007c7ad7: int3 
007c7ad8: int3 
007c7ad9: int3 
007c7ada: int3 
007c7adb: int3 
007c7adc: int3 

3over4 data0xf30054 operand0x7c7a95 candidate-start0x7c7990
007c7990: push ebp
007c7991: mov ebp, esp
007c7993: and esp, 0xfffffff0
007c7996: sub esp, 0x88
007c799c: push esi
007c799d: push edi
007c799e: mov edi, edx
007c79a0: mov esi, ecx
007c79a2: call 0x6f7b30
007c79a7: test eax, eax
007c79a9: jne 0x7c79b3
007c79ab: xor eax, eax
007c79ad: pop edi
007c79ae: pop esi
007c79af: mov esp, ebp
007c79b1: pop ebp
007c79b2: ret 
007c79b3: mov ecx, dword ptr [0x1ce716c]
007c79b9: mov edx, dword ptr [ecx + 0xc]
007c79bc: movaps xmm1, xmmword ptr [edx + 0x80]
007c79c3: pxor xmm0, xmm0
007c79c7: mov dword ptr [esp + 0x14], eax
007c79cb: push edi
007c79cc: movq qword ptr [esp + 0x1c], xmm0
007c79d2: movq qword ptr [esp + 0x24], xmm0
007c79d8: movq qword ptr [esp + 0x2c], xmm0
007c79de: movq qword ptr [esp + 0x34], xmm0
007c79e4: movq qword ptr [esp + 0x3c], xmm0
007c79ea: pxor xmm0, xmm0
007c79ee: lea eax, [esp + 0x14]
007c79f2: push eax
007c79f3: movdqa xmmword ptr [esp + 0x68], xmm0
007c79f9: movdqa xmmword ptr [esp + 0x78], xmm0
007c79ff: pxor xmm0, xmm0
007c7a03: push 0xa
007c7a05: mov edx, 0x11f10d8
007c7a0a: mov ecx, 0x129d144
007c7a0f: mov dword ptr [esp + 0x1c], esi
007c7a13: mov dword ptr [esp + 0x4c], 2
007c7a1b: movaps xmmword ptr [esp + 0x5c], xmm1
007c7a20: movdqa xmmword ptr [esp + 0x8c], xmm0
007c7a29: call 0x7c5fc0
007c7a2e: fld dword ptr [0xf31d6c]
007c7a34: fxch st(1)
007c7a36: fcompi st(1)
007c7a38: fstp st(0)
007c7a3a: ja 0x7c79ab
007c7a40: mov ecx, esi
007c7a42: call 0x6b5300
007c7a47: mov ecx, eax
007c7a49: call 0x6d6750
007c7a4e: fstp dword ptr [esp + 0xc]
007c7a52: call 0x6b5320
007c7a57: fsubr dword ptr [esp + 0xc]
007c7a5b: fmul dword ptr [0xf2d394]
007c7a61: fstp dword ptr [esp + 8]
007c7a65: call 0x6b5310
007c7a6a: fstp dword ptr [esp + 0xc]
007c7a6e: call 0x6b5320
007c7a73: fsubr dword ptr [esp + 0xc]
007c7a77: fdivr dword ptr [esp + 8]
007c7a7b: fld dword ptr [0xf30054]
007c7a81: fadd st(1), st(0)
007c7a83: fxch st(1)
007c7a85: fst dword ptr [esp + 8]
007c7a89: fxch st(1)
007c7a8b: fcompi st(1)
007c7a8d: fstp st(0)
007c7a8f: jbe 0x7c7aac
007c7a91: movss xmm0, dword ptr [0xf30054]
007c7a99: movss dword ptr [edi + 0xb0], xmm0
007c7aa1: mov eax, 1
007c7aa6: pop edi
007c7aa7: pop esi
007c7aa8: mov esp, ebp
007c7aaa: pop ebp
007c7aab: ret 
007c7aac: movss xmm0, dword ptr [esp + 8]
007c7ab2: movss xmm1, dword ptr [0xf31d68]
007c7aba: comiss xmm1, xmm0
007c7abd: ja 0x7c7ac2
007c7abf: movaps xmm0, xmm1
007c7ac2: movss dword ptr [edi + 0xb0], xmm0
007c7aca: pop edi
007c7acb: mov eax, 1
007c7ad0: pop esi
007c7ad1: mov esp, ebp
007c7ad3: pop ebp
007c7ad4: ret 
007c7ad5: das 
007c7ad6: int3 
007c7ad7: int3 
007c7ad8: int3 
007c7ad9: int3 
007c7ada: int3 
007c7adb: int3 
007c7adc: int3 
007c7add: int3 
007c7ade: int3 
007c7adf: int3 
007c7ae0: mov ecx, dword ptr [ecx + 0x18]
007c7ae3: cmp dword ptr [ecx + 4], 0xf31d90
007c7aea: jne 0x7c7b03
007c7aec: call 0x7ad920
007c7af1: cmp dword ptr [eax + 0x74], 0

3over4 data0xf30054 operand0x7d4914 candidate-start0x7d4880
007d4880: sub esp, 0xc
007d4883: push ebx
007d4884: mov ebx, dword ptr [esp + 0x14]
007d4888: push ebp
007d4889: push esi
007d488a: push edi
007d488b: mov edx, ebx
007d488d: mov edi, eax
007d488f: mov esi, ecx
007d4891: call 0x6d33d0
007d4896: fld dword ptr [esi + 0x10]
007d4899: mov edx, ebx
007d489b: fstp dword ptr [esp + 0x20]
007d489f: mov ecx, esi
007d48a1: mov dword ptr [esp + 0x14], eax
007d48a5: call 0x6d3430
007d48aa: fdiv dword ptr [esp + 0x20]
007d48ae: mov ecx, esi
007d48b0: fstp dword ptr [esp + 0x18]
007d48b4: call 0x401bf0
007d48b9: movss xmm3, dword ptr [0xec6fb8]
007d48c1: mov dword ptr [esp + 0x10], eax
007d48c5: xor eax, eax
007d48c7: xor ebp, ebp
007d48c9: mov dword ptr [esp + 0x20], eax
007d48cd: test edi, edi
007d48cf: jle 0x7d49a5
007d48d5: mov ebx, dword ptr [esp + 0x28]
007d48d9: movss xmm4, dword ptr [esp + 0x18]
007d48df: movss xmm5, dword ptr [0xec704c]
007d48e7: movss xmm6, dword ptr [0xec6e14]
007d48ef: movss xmm7, dword ptr [0xec6fd4]
007d48f7: mov dword ptr [esp + 0x28], edi
007d48fb: jmp 0x7d4900
007d48fd: lea ecx, [ecx]
007d4900: mov eax, dword ptr [ebx + 8]
007d4903: and eax, 1
007d4906: je 0x7d4910
007d4908: movaps xmm1, xmm5
007d490b: movaps xmm2, xmm7
007d490e: jmp 0x7d491b
007d4910: movss xmm2, dword ptr [0xf30054]
007d4918: movaps xmm1, xmm6
007d491b: movaps xmm0, xmm4
007d491e: divss xmm0, dword ptr [ebx + 0xc]
007d4923: comiss xmm0, xmm1
007d4926: ja 0x7d4982
007d4928: comiss xmm2, xmm0
007d492b: ja 0x7d4982
007d492d: mov edx, dword ptr [esp + 0x24]
007d4931: mov eax, dword ptr [esp + 0x10]
007d4935: mov edi, dword ptr [esp + 0x14]
007d4939: push ebx
007d493a: mov esi, 1
007d493f: call 0x7d47f0
007d4944: comiss xmm3, xmm0
007d4947: jbe 0x7d4956
007d4949: movaps xmm3, xmm0
007d494c: mov ebp, ebx
007d494e: mov dword ptr [esp + 0x20], 0
007d4956: mov ecx, dword ptr [ebx + 4]
007d4959: cmp dword ptr [ecx + 0x18], 0
007d495d: je 0x7d4982
007d495f: mov edx, dword ptr [esp + 0x24]
007d4963: mov eax, dword ptr [esp + 0x10]
007d4967: push ebx
007d4968: or esi, 0xffffffff
007d496b: call 0x7d47f0
007d4970: comiss xmm3, xmm0
007d4973: .byte 0x76

3over4 data0xf30054 operand0x7dfb9a candidate-start0x7dfb90
007dfb90: push ebp
007dfb91: mov ebp, esp
007dfb93: and esp, 0xfffffff0
007dfb96: movss xmm5, dword ptr [0xf30054]
007dfb9e: sub esp, 0x50
007dfba1: cmp dword ptr [eax + 0x110], 4
007dfba8: jne 0x7dfbb2
007dfbaa: movss xmm5, dword ptr [0xec7068]
007dfbb2: mov edx, dword ptr [ebp + 0x10]
007dfbb5: mov eax, dword ptr [edx + 8]
007dfbb8: movaps xmm0, xmmword ptr [eax + 0x4b0]
007dfbbf: movss xmm2, dword ptr [ecx + 8]
007dfbc4: movaps xmmword ptr [esp + 0x10], xmm0
007dfbc9: movaps xmm0, xmmword ptr [eax + 0x330]
007dfbd0: movss xmm4, dword ptr [esp + 0x18]
007dfbd6: mov eax, dword ptr [ebp + 0xc]
007dfbd9: movaps xmmword ptr [esp + 0x20], xmm0
007dfbde: movss xmm0, dword ptr [ecx]
007dfbe2: movaps xmm1, xmm0
007dfbe5: subss xmm0, dword ptr [esp + 0x20]
007dfbeb: subss xmm1, dword ptr [esp + 0x10]
007dfbf1: mulss xmm0, xmm0
007dfbf5: movaps xmm3, xmm2
007dfbf8: .byte 0xf3
007dfbf9: .byte 0x0f

3over4 data0xf30054 operand0x7e256b candidate-start0x7e2410
007e2410: push ebp
007e2411: mov ebp, dword ptr [esp + 8]
007e2415: call 0x6aeed0
007e241a: test eax, eax
007e241c: je 0x7e2424
007e241e: xor eax, eax
007e2420: pop ebp
007e2421: ret 8
007e2424: push ebx
007e2425: mov ebx, dword ptr [edi + 0x18]
007e2428: xor edx, edx
007e242a: mov ecx, edi
007e242c: call 0x7b6dc0
007e2431: test byte ptr [ebx + 0x2c], 1
007e2435: je 0x7e243f
007e2437: test eax, eax
007e2439: je 0x7e25c8
007e243f: mov ecx, ebx
007e2441: call 0x7bbb20
007e2446: test eax, eax
007e2448: jne 0x7e25c8
007e244e: test byte ptr [edi + 0x60], 3
007e2452: jne 0x7e25c8
007e2458: mov ecx, ebx
007e245a: call 0x7c2460
007e245f: test eax, eax
007e2461: jne 0x7e25c8
007e2467: mov ecx, ebx
007e2469: call 0x7bbdf0
007e246e: test eax, eax
007e2470: jne 0x7e25c8
007e2476: push esi
007e2477: mov esi, dword ptr [ebp + 0x18]
007e247a: test byte ptr [esi + 0x2c], 1
007e247e: je 0x7e24a7
007e2480: mov eax, dword ptr [esi + 4]
007e2483: movzx eax, byte ptr [eax + 3]
007e2487: cmp eax, 3
007e248a: je 0x7e2495
007e248c: cmp eax, 8
007e248f: jne 0x7e25c0
007e2495: movss xmm0, dword ptr [0xec6fd4]
007e249d: comiss xmm0, dword ptr [esi + 8]
007e24a1: ja 0x7e25c0
007e24a7: mov ecx, esi
007e24a9: call 0x6a9d30
007e24ae: test eax, eax
007e24b0: je 0x7e25c0
007e24b6: mov ecx, esi
007e24b8: call 0x7bbdf0
007e24bd: test eax, eax
007e24bf: jne 0x7e25c0
007e24c5: cmp dword ptr [esp + 0x14], eax
007e24c9: jne 0x7e253f
007e24cb: movss xmm0, dword ptr [0xf2e1a0]
007e24d3: comiss xmm0, dword ptr [esi + 0x13c]
007e24da: ja 0x7e25c0
007e24e0: mov ecx, dword ptr [ebp + 0x1c]
007e24e3: test byte ptr [ecx], 0x40
007e24e6: jne 0x7e25c0
007e24ec: mov edx, dword ptr [ebp + 0x20]
007e24ef: movss xmm0, dword ptr [0xeca658]
007e24f7: comiss xmm0, dword ptr [edx + 0x2f0]
007e24fe: ja 0x7e25c0
007e2504: cmp dword ptr [ebx + 0x310], 4
007e250b: jl 0x7e253f
007e250d: mov ecx, edi
007e250f: call 0x401c60
007e2514: mov ecx, ebp
007e2516: mov esi, eax
007e2518: call 0x401c60
007e251d: sub esi, eax
007e251f: movsx ecx, si
007e2522: mov eax, ecx
007e2524: sar eax, 0x1f
007e2527: mov edx, ecx
007e2529: neg edx
007e252b: and edx, eax
007e252d: not eax
007e252f: and eax, ecx
007e2531: or edx, eax
007e2533: cmp edx, 0x6000
007e2539: jg 0x7e25c0
007e253f: mov edx, 0x31c7
007e2544: mov ecx, ebp
007e2546: call 0x7d54e0
007e254b: test eax, eax
007e254d: je 0x7e25c0
007e254f: mov ecx, ebp
007e2551: call 0x7db130
007e2556: test eax, eax
007e2558: jne 0x7e25c0
007e255a: mov esi, dword ptr [edi + 0x14]
007e255d: test byte ptr [esi + 0x1c], 1
007e2561: je 0x7e25b5
007e2563: movss xmm0, dword ptr [esi + 0x14]
007e2568: comiss xmm0, dword ptr [0xf30054]
007e256f: jbe 0x7e25b5
007e2571: mov ecx, esi
007e2573: call 0x401b80
007e2578: test eax, eax
007e257a: je 0x7e258c
007e257c: mov ecx, dword ptr [esi]
007e257e: mov edx, 0x15
007e2583: call 0x946610
007e2588: test eax, eax
007e258a: jne 0x7e25b5
007e258c: mov edx, ebp
007e258e: mov ecx, edi
007e2590: call 0x709b50
007e2595: sub ax, word ptr [esi + 0x18]
007e2599: movsx ecx, ax
007e259c: mov eax, ecx
007e259e: sar eax, 0x1f
007e25a1: mov edx, ecx
007e25a3: neg edx
007e25a5: and edx, eax
007e25a7: not eax
007e25a9: and eax, ecx
007e25ab: or edx, eax
007e25ad: cmp edx, 0x6000
007e25b3: jg 0x7e25c0
007e25b5: pop esi
007e25b6: pop ebx
007e25b7: mov eax, 1
007e25bc: pop ebp
007e25bd: ret 8
007e25c0: pop esi
007e25c1: pop ebx
007e25c2: xor eax, eax
007e25c4: pop ebp
007e25c5: ret 8
007e25c8: pop ebx
007e25c9: xor eax, eax

3over4 data0xf30054 operand0x7e8259 candidate-start0x7e81c0
007e81c0: sub esp, 0x14
007e81c3: movss xmm0, dword ptr [esp + 0x1c]
007e81c9: push ebx
007e81ca: push ebp
007e81cb: push esi
007e81cc: mov esi, eax
007e81ce: movss xmm1, dword ptr [esi + 0x10]
007e81d3: divss xmm0, xmm1
007e81d7: push edi
007e81d8: mov ecx, esi
007e81da: movss dword ptr [esp + 0x1c], xmm1
007e81e0: movss dword ptr [esp + 0x2c], xmm0
007e81e6: call 0x401bf0
007e81eb: mov ecx, esi
007e81ed: mov ebx, eax
007e81ef: call 0x8729f0
007e81f4: mov ecx, dword ptr [esp + 0x34]
007e81f8: mov ebp, eax
007e81fa: mov eax, dword ptr [esi + 0x20]
007e81fd: movss xmm0, dword ptr [eax + 0x2f0]
007e8205: xor eax, eax
007e8207: movss dword ptr [esp + 0x20], xmm0
007e820d: mov dword ptr [esp + 0x14], eax
007e8211: mov dword ptr [ecx], eax
007e8213: mov dword ptr [esp + 0x10], eax
007e8217: mov dword ptr [esp + 0x18], eax
007e821b: cmp dword ptr [esp + 0x38], eax
007e821f: je 0x7e8229
007e8221: mov dword ptr [esp + 0x18], 1
007e8229: mov edi, 0x11d4a20
007e822e: mov edi, edi
007e8230: mov edx, dword ptr [esp + 0x18]
007e8234: test dword ptr [edi + 8], edx
007e8237: jne 0x7e831e
007e823d: movss xmm0, dword ptr [esp + 0x2c]
007e8243: divss xmm0, dword ptr [edi + 0xc]
007e8248: comiss xmm0, dword ptr [0xec6e14]
007e824f: ja 0x7e831e
007e8255: movss xmm1, dword ptr [0xf30054]
007e825d: comiss xmm1, xmm0
007e8260: ja 0x7e831e
007e8266: movss xmm0, dword ptr [edi + 0x1c]
007e826b: mulss xmm0, dword ptr [esp + 0x1c]
007e8271: subss xmm0, dword ptr [esp + 0x20]
007e8277: comiss xmm0, dword ptr [0xec98e0]
007e827e: ja 0x7e831e
007e8284: movss xmm1, dword ptr [0xf2c108]
007e828c: comiss xmm1, xmm0
007e828f: ja 0x7e831e
007e8295: mov eax, dword ptr [esp + 0x30]
007e8299: mov edx, dword ptr [esp + 0x28]
007e829d: push ebp
007e829e: push eax
007e829f: push ebx
007e82a0: mov esi, 1
007e82a5: call 0x7b8850
007e82aa: test eax, eax
007e82ac: je 0x7e82d4
007e82ae: mov esi, dword ptr [esp + 0x10]
007e82b2: mov ecx, dword ptr [0x10e23b8]
007e82b8: inc esi

3over4 data0xf30054 operand0x7ff42e candidate-start0x7ff090
007ff090: push ebp
007ff091: mov ebp, esp
007ff093: and esp, 0xfffffff0
007ff096: sub esp, 0xa4
007ff09c: push ebx
007ff09d: push esi
007ff09e: push edi
007ff09f: mov edi, eax
007ff0a1: mov eax, dword ptr [ebp + 0x10]
007ff0a4: mov dword ptr [eax], 0
007ff0aa: call 0x887bc0
007ff0af: test eax, eax
007ff0b1: je 0x7ff0be
007ff0b3: xor eax, eax
007ff0b5: pop edi
007ff0b6: pop esi
007ff0b7: pop ebx
007ff0b8: mov esp, ebp
007ff0ba: pop ebp
007ff0bb: ret 0xc
007ff0be: push 0
007ff0c0: push edi
007ff0c1: call 0x7d6be0
007ff0c6: test eax, eax
007ff0c8: je 0x7ff564
007ff0ce: mov ebx, dword ptr [ebp + 8]
007ff0d1: mov ecx, dword ptr [ebx + 0x4c]
007ff0d4: call 0x7af950
007ff0d9: fld1 
007ff0db: fdivrp st(1)
007ff0dd: xorps xmm0, xmm0
007ff0e0: mov ecx, edi
007ff0e2: movss dword ptr [esp + 0x18], xmm0
007ff0e8: fstp dword ptr [esp + 0x34]
007ff0ec: call 0x6b5300
007ff0f1: mov esi, eax
007ff0f3: mov ecx, esi
007ff0f5: mov dword ptr [esp + 0x30], esi
007ff0f9: call 0x6d68d0
007ff0fe: fmul dword ptr [0xf32280]
007ff104: mov ecx, esi
007ff106: fstp dword ptr [esp + 0x1c]
007ff10a: call 0x6d6810
007ff10f: fmul dword ptr [0xf32280]
007ff115: mov ecx, esi
007ff117: fadd dword ptr [esp + 0x1c]
007ff11b: fstp dword ptr [esp + 0x1c]
007ff11f: call 0x6d6860
007ff124: fmul dword ptr [0xf32280]
007ff12a: mov ecx, ebx
007ff12c: fadd dword ptr [esp + 0x1c]
007ff130: fstp dword ptr [esp + 0x1c]
007ff134: call 0x6b5300
007ff139: mov ecx, eax
007ff13b: call 0x6d6540
007ff140: fstp dword ptr [esp + 0x24]
007ff144: mov edx, ebx
007ff146: mov ecx, 0x1dc5878
007ff14b: call 0x6ac130
007ff150: test eax, eax
007ff152: je 0x7ff170
007ff154: movss xmm0, dword ptr [esp + 0x24]
007ff15a: push ecx
007ff15b: mov edx, ebx
007ff15d: mov ecx, 0x1dc5878
007ff162: movss dword ptr [esp], xmm0
007ff167: call 0x7c8ab0
007ff16c: fstp dword ptr [esp + 0x24]
007ff170: mov ecx, ebx
007ff172: call 0x6d3600
007ff177: fld dword ptr [0xf21004]
007ff17d: fxch st(1)
007ff17f: mov eax, 0xf31e14
007ff184: fcompi st(1)
007ff186: fstp st(0)
007ff188: ja 0x7ff18f
007ff18a: mov eax, 0xf31d74
007ff18f: movss xmm0, dword ptr [esp + 0x24]
007ff195: mov edx, dword ptr [eax]
007ff197: lea ecx, [eax + 4]
007ff19a: push ecx
007ff19b: movss dword ptr [esp], xmm0
007ff1a0: call 0x404870
007ff1a5: fmul dword ptr [esp + 0x34]
007ff1a9: movss xmm1, dword ptr [0xec6e14]
007ff1b1: fst dword ptr [esp + 0x20]
007ff1b5: fldz 
007ff1b7: fcompi st(1)
007ff1b9: fstp st(0)
007ff1bb: jbe 0x7ff1c2
007ff1bd: xorps xmm0, xmm0
007ff1c0: jmp 0x7ff1d0
007ff1c2: movss xmm0, dword ptr [esp + 0x20]
007ff1c8: comiss xmm1, xmm0
007ff1cb: ja 0x7ff1d0
007ff1cd: movaps xmm0, xmm1
007ff1d0: lea edx, [esp + 0x50]
007ff1d4: mov ecx, edi
007ff1d6: movss dword ptr [esp + 0x20], xmm0
007ff1dc: call 0x6b47a0
007ff1e1: mov edx, edi
007ff1e3: lea ecx, [esp + 0x60]
007ff1e7: call 0x6d3920
007ff1ec: movss xmm0, dword ptr [esp + 0x50]
007ff1f2: subss xmm0, dword ptr [esp + 0x60]
007ff1f8: movss xmm1, dword ptr [esp + 0x58]
007ff1fe: subss xmm1, dword ptr [esp + 0x68]
007ff204: mulss xmm0, xmm0
007ff208: mulss xmm1, xmm1
007ff20c: addss xmm1, xmm0
007ff210: xorps xmm0, xmm0
007ff213: movss xmm0, xmm1
007ff217: sub esp, 0x10
007ff21a: sqrtss xmm0, xmm0
007ff21e: movaps xmmword ptr [esp + 0x50], xmm0
007ff223: xorps xmm0, xmm0
007ff226: movss xmm1, dword ptr [esp + 0x50]
007ff22c: mulss xmm1, dword ptr [0xf33078]
007ff234: movss dword ptr [esp + 0xc], xmm0
007ff23a: movss dword ptr [esp + 8], xmm0
007ff240: movss xmm0, dword ptr [0xf2d10c]
007ff248: addss xmm1, xmm0
007ff24c: movss dword ptr [esp + 4], xmm1
007ff252: lea ecx, [esp + 0x70]
007ff256: movss dword ptr [esp], xmm0
007ff25b: push ecx
007ff25c: lea edx, [esp + 0x64]
007ff260: lea ecx, [esp + 0x84]
007ff267: call 0x741bb0
007ff26c: mov ecx, edi
007ff26e: xor ebx, ebx
007ff270: call 0x6b5330
007ff275: fstp dword ptr [esp + 0x3c]
007ff279: mov edx, dword ptr [edi + 0x4c]
007ff27c: mov eax, dword ptr [edx + 0x34]
007ff27f: test eax, eax
007ff281: je 0x7ff288
007ff283: lea ecx, [eax - 0x78]
007ff286: jmp 0x7ff28a
007ff288: xor ecx, ecx
007ff28a: mov ecx, dword ptr [ecx + 0x7c]
007ff28d: test eax, eax
007ff28f: je 0x7ff296
007ff291: add eax, -0x78
007ff294: jmp 0x7ff298
007ff296: xor eax, eax
007ff298: mov esi, ecx
007ff29a: sub esi, eax
007ff29c: neg esi
007ff29e: sbb esi, esi
007ff2a0: and esi, ecx
007ff2a2: je 0x7ff348
007ff2a8: jmp 0x7ff2b0
007ff2aa: lea ebx, [ebx]
007ff2b0: lea edx, [esp + 0x40]
007ff2b4: mov ecx, esi
007ff2b6: call 0x401bb0
007ff2bb: movss xmm0, dword ptr [0xf2fdfc]
007ff2c3: comiss xmm0, dword ptr [esp + 0x44]
007ff2c8: ja 0x7ff333
007ff2ca: push 4
007ff2cc: lea edx, [esp + 0x74]
007ff2d0: lea ecx, [esp + 0x44]
007ff2d4: call 0x6cb930
007ff2d9: test eax, eax
007ff2db: je 0x7ff333
007ff2dd: movss xmm0, dword ptr [esp + 0x1c]
007ff2e3: push ecx
007ff2e4: mov edx, 4
007ff2e9: mov ecx, 0xf318c8
007ff2ee: inc ebx
007ff2ef: movss dword ptr [esp], xmm0
007ff2f4: call 0x404870
007ff2f9: fstp dword ptr [esp + 0x28]
007ff2fd: mov ecx, esi
007ff2ff: call 0x6b5330
007ff304: fsub dword ptr [esp + 0x3c]
007ff308: push ecx
007ff309: mov edx, 4
007ff30e: fstp dword ptr [esp + 0x3c]
007ff312: mov ecx, 0xf31b00
007ff317: movss xmm0, dword ptr [esp + 0x3c]
007ff31d: movss dword ptr [esp], xmm0
007ff322: call 0x404870
007ff327: fmul dword ptr [esp + 0x28]
007ff32b: fadd dword ptr [esp + 0x18]
007ff32f: fstp dword ptr [esp + 0x18]
007ff333: mov ecx, esi
007ff335: call 0x6b49c0
007ff33a: mov esi, eax
007ff33c: test esi, esi
007ff33e: jne 0x7ff2b0
007ff344: test ebx, ebx
007ff346: jne 0x7ff39a
007ff348: movss xmm0, dword ptr [esp + 0x1c]
007ff34e: push ecx
007ff34f: mov edx, 2
007ff354: mov ecx, 0xf31858
007ff359: movss dword ptr [esp], xmm0
007ff35e: call 0x404870
007ff363: fmul dword ptr [esp + 0x34]
007ff367: fst dword ptr [esp + 0x28]
007ff36b: fldz 
007ff36d: fcompi st(1)
007ff36f: fstp st(0)
007ff371: jbe 0x7ff378
007ff373: xorps xmm0, xmm0
007ff376: jmp 0x7ff38e
007ff378: movss xmm0, dword ptr [esp + 0x28]
007ff37e: movss xmm1, dword ptr [0xec6e14]
007ff386: comiss xmm1, xmm0
007ff389: ja 0x7ff38e
007ff38b: movaps xmm0, xmm1
007ff38e: addss xmm0, dword ptr [esp + 0x18]
007ff394: movss dword ptr [esp + 0x18], xmm0
007ff39a: mov eax, dword ptr [edi + 0x20]
007ff39d: mov edx, dword ptr [ebp + 8]
007ff3a0: mov esi, dword ptr [eax + 0x50]
007ff3a3: mov ecx, edi
007ff3a5: call 0x709b50
007ff3aa: sub eax, esi
007ff3ac: cwde 
007ff3ad: mov ecx, eax
007ff3af: sar ecx, 0x1f
007ff3b2: mov edx, ecx
007ff3b4: not edx
007ff3b6: and edx, eax
007ff3b8: neg eax
007ff3ba: and eax, ecx
007ff3bc: or edx, eax
007ff3be: cmp edx, 0x6000
007ff3c4: jle 0x7ff419
007ff3c6: movss xmm0, dword ptr [esp + 0x1c]
007ff3cc: push ecx
007ff3cd: mov edx, 2
007ff3d2: mov ecx, 0xf31c90
007ff3d7: movss dword ptr [esp], xmm0
007ff3dc: call 0x404870
007ff3e1: fst dword ptr [esp + 0x28]
007ff3e5: fldz 
007ff3e7: movss xmm5, dword ptr [0xec6e14]
007ff3ef: xorps xmm0, xmm0
007ff3f2: fcompi st(1)
007ff3f4: fstp st(0)
007ff3f6: jbe 0x7ff403
007ff3f8: movaps xmm2, xmm0
007ff3fb: addss xmm2, dword ptr [esp + 0x18]
007ff401: jmp 0x7ff42a
007ff403: movss xmm2, dword ptr [esp + 0x28]
007ff409: comiss xmm5, xmm2
007ff40c: ja 0x7ff411
007ff40e: movaps xmm2, xmm5
007ff411: addss xmm2, dword ptr [esp + 0x18]
007ff417: jmp 0x7ff42a
007ff419: movss xmm2, dword ptr [esp + 0x18]
007ff41f: xorps xmm0, xmm0
007ff422: movss xmm5, dword ptr [0xec6e14]
007ff42a: movss xmm3, dword ptr [0xf30054]
007ff432: movss xmm1, dword ptr [esp + 0x24]
007ff438: subss xmm1, xmm3
007ff43c: comiss xmm0, xmm1
007ff43f: jbe 0x7ff446
007ff441: movaps xmm4, xmm0
007ff444: jmp 0x7ff449
007ff446: movaps xmm4, xmm1
007ff449: movss xmm1, dword ptr [esp + 0x1c]
007ff44f: subss xmm1, xmm3
007ff453: comiss xmm0, xmm1
007ff456: jbe 0x7ff45d
007ff458: movaps xmm3, xmm0
007ff45b: jmp 0x7ff460
007ff45d: movaps xmm3, xmm1
007ff460: movss xmm1, dword ptr [esp + 0x20]
007ff466: subss xmm2, xmm4
007ff46a: comiss xmm0, xmm2
007ff46d: subss xmm1, xmm3
007ff471: jbe 0x7ff47e
007ff473: movaps xmm2, xmm0
007ff476: movss dword ptr [esp + 0x18], xmm2
007ff47c: jmp 0x7ff491
007ff47e: comiss xmm5, xmm2
007ff481: jbe 0x7ff48b
007ff483: movss dword ptr [esp + 0x18], xmm2
007ff489: jmp 0x7ff491
007ff48b: .byte 0xf3
007ff48c: .byte 0x0f
007ff48d: .byte 0x11

3over4 data0xf30054 operand0x80970e candidate-start0x8095d0
008095d0: push ebp
008095d1: mov ebp, esp
008095d3: and esp, 0xfffffff0
008095d6: sub esp, 0x48
008095d9: mov ecx, dword ptr [esi + 0x18]
008095dc: push ebx
008095dd: mov ebx, dword ptr [ebp + 8]
008095e0: push edi
008095e1: call 0x7ae120
008095e6: lea edx, [esp + 0x40]
008095ea: mov ecx, esi
008095ec: mov edi, eax
008095ee: call 0x6b47a0
008095f3: mov ecx, esi
008095f5: call 0x6b95f0
008095fa: mov edx, 0x14
008095ff: mov ecx, ebx
00809601: mov dword ptr [esp + 0x14], eax
00809605: call 0x403e50
0080960a: fstp dword ptr [esp + 0x18]
0080960e: movss xmm0, dword ptr [esp + 0x18]
00809614: push 0
00809616: push 0x18
00809618: sub esp, 8
0080961b: movss dword ptr [esp + 4], xmm0
00809621: movss xmm0, dword ptr [0xec6e14]
00809629: lea edx, [esp + 0x30]
0080962d: mov ecx, ebx
0080962f: movss dword ptr [esp], xmm0
00809634: call 0x70ce40
00809639: movss xmm0, dword ptr [esi + 0x10]
0080963e: movaps xmm1, xmmword ptr [esp + 0x20]
00809643: shufps xmm0, xmm0, 0
00809647: mulps xmm0, xmm1
0080964a: movaps xmmword ptr [esp + 0x30], xmm0
0080964f: movd xmm0, dword ptr [esp + 0x14]
00809655: cvtdq2ps xmm0, xmm0
00809658: mulss xmm0, dword ptr [0xec6f80]
00809660: movss dword ptr [esp + 0x10], xmm0
00809666: fld dword ptr [esp + 0x10]
0080966a: fsin 
0080966c: fstp dword ptr [esp + 0x14]
00809670: movss dword ptr [esp + 0x1c], xmm0
00809676: fld dword ptr [esp + 0x1c]
0080967a: fcos 
0080967c: fstp dword ptr [esp + 0x10]
00809680: movss xmm2, dword ptr [esp + 0x10]
00809686: movss xmm1, dword ptr [esp + 0x14]
0080968c: mov eax, dword ptr [esi + 0x4c]
0080968f: movaps xmm0, xmm2
00809692: mulss xmm0, dword ptr [esp + 0x30]
00809698: mulss xmm2, dword ptr [esp + 0x38]
0080969e: movaps xmm4, xmm1
008096a1: mulss xmm4, dword ptr [esp + 0x38]
008096a7: mulss xmm1, dword ptr [esp + 0x30]
008096ad: addss xmm0, xmm4
008096b1: movss xmm4, dword ptr [esp + 0x34]
008096b7: subss xmm2, xmm1
008096bb: movss xmm1, dword ptr [esp + 0x3c]
008096c1: unpcklps xmm0, xmm2
008096c4: unpcklps xmm4, xmm1
008096c7: unpcklps xmm0, xmm4
008096ca: addps xmm0, xmmword ptr [esp + 0x40]
008096cf: cmp eax, dword ptr [0x1dee620]
008096d5: jne 0x8096de
008096d7: mov eax, dword ptr [0x1cb6aec]
008096dc: jmp 0x8096ea
008096de: mov ecx, dword ptr [0x1cb6aec]
008096e4: mov eax, dword ptr [ecx + 0x11c]
008096ea: movaps xmmword ptr [edi + 0x220], xmm0
008096f1: mov dword ptr [edi + 0x4c], eax
008096f4: movss xmm0, dword ptr [0x146b618]
008096fc: addss xmm0, dword ptr [esp + 0x18]
00809702: movss dword ptr [edi + 0x230], xmm0
0080970a: subss xmm0, dword ptr [0xf30054]
00809712: movss dword ptr [edi + 0x234], xmm0
0080971a: mov dword ptr [edi + 0x238], 0
00809724: pop edi
00809725: pop ebx
00809726: mov esp, ebp
00809728: pop ebp
00809729: ret 4
0080972c: int3 
0080972d: int3 
0080972e: int3 
0080972f: int3 
00809730: sub esp, 0x294
00809736: mov edx, dword ptr [esp + 0x298]
0080973d: push ebx
0080973e: mov ebx, dword ptr [esp + 0x2a0]
00809745: push ebp
00809746: mov ebp, dword ptr [esp + 0x2ac]
0080974d: xor eax, eax
0080974f: push esi
00809750: push edi
00809751: mov dword ptr [esp + 0x18], eax
00809755: mov dword ptr [esp + 0x14], eax
00809759: lea eax, [esp + 0x14]
0080975d: push eax
0080975e: lea ecx, [esp + 0x1c]
00809762: push ecx
00809763: mov ecx, ebx
00809765: call 0x7cf670
0080976a: .byte 0x8d
0080976b: mov ah, 0x24
0080976d: .byte 0x24

3over4 data0xf30054 operand0x809bd1 candidate-start0x809aa0
00809aa0: push ebx
00809aa1: push ebp
00809aa2: mov ebp, dword ptr [edi + 0x1c]
00809aa5: mov eax, dword ptr [ebp + 0x50]
00809aa8: push esi
00809aa9: mov esi, dword ptr [eax]
00809aab: mov edx, 0x28
00809ab0: mov ecx, esi
00809ab2: call 0x40cf50
00809ab7: mov edx, 0x29
00809abc: mov ecx, esi
00809abe: mov ebx, eax
00809ac0: call 0x40cf50
00809ac5: movss xmm1, dword ptr [0xec6f84]
00809acd: test ebx, ebx
00809acf: jne 0x809ad6
00809ad1: movaps xmm2, xmm1
00809ad4: jmp 0x809adb
00809ad6: movss xmm2, dword ptr [ebx + 4]
00809adb: test eax, eax
00809add: je 0x809ae4
00809adf: movss xmm1, dword ptr [eax + 4]
00809ae4: mov ecx, dword ptr [ebp + 0x50]
00809ae7: movss xmm0, dword ptr [ecx + 4]
00809aec: comiss xmm0, xmm2
00809aef: jb 0x809bd7
00809af5: comiss xmm1, xmm0
00809af8: jb 0x809bd7
00809afe: mov ecx, dword ptr [edi + 0x18]
00809b01: call 0x7ae2c0
00809b06: mov esi, dword ptr [edi + 0x14]
00809b09: cmp dword ptr [esi], -1
00809b0c: mov ebx, eax
00809b0e: je 0x809b1a
00809b10: cmp dword ptr [esi + 8], 0
00809b14: jne 0x809b1a
00809b16: xor ebp, ebp
00809b18: jmp 0x809b1f
00809b1a: mov ebp, 1
00809b1f: mov ecx, dword ptr [ebx]
00809b21: call 0x6f5e50
00809b26: test eax, eax
00809b28: je 0x809b57
00809b2a: mov eax, dword ptr [esi + 0x10]
00809b2d: mov edx, dword ptr [ebx]
00809b2f: mov dword ptr [esi + 0x20], edx
00809b32: test eax, eax
00809b34: je 0x809b3a
00809b36: mov ecx, esi
00809b38: call eax
00809b3a: mov edx, dword ptr [ebx + 4]
00809b3d: mov dword ptr [esi + 0x24], edx
00809b40: push 0
00809b42: mov edx, 0xf300e0
00809b47: mov ecx, edi
00809b49: call 0x404db0
00809b4e: pop esi
00809b4f: pop ebp
00809b50: mov eax, 1
00809b55: pop ebx
00809b56: ret 
00809b57: mov ecx, dword ptr [ebx]
00809b59: call 0x6c3400
00809b5e: test eax, eax
00809b60: je 0x809b96
00809b62: push 0
00809b64: mov edx, 0xf2f520
00809b69: mov ecx, edi
00809b6b: call 0x404db0
00809b70: mov eax, dword ptr [esi + 0x10]
00809b73: mov edx, dword ptr [ebx]
00809b75: mov dword ptr [esi + 0x20], edx
00809b78: test eax, eax
00809b7a: je 0x809b80
00809b7c: mov ecx, esi
00809b7e: call eax
00809b80: mov eax, dword ptr [ebx + 4]
00809b83: mov ecx, edi
00809b85: mov dword ptr [esi + 0x24], eax
00809b88: call 0x40c850
00809b8d: pop esi
00809b8e: pop ebp
00809b8f: mov eax, 1
00809b94: pop ebx
00809b95: ret 
00809b96: test ebp, ebp
00809b98: jne 0x809bc3
00809b9a: mov ecx, edi
00809b9c: call 0x7d2420
00809ba1: test eax, eax
00809ba3: jne 0x809bd7
00809ba5: push 0
00809ba7: mov edx, 0xf2f520
00809bac: mov ecx, edi
00809bae: call 0x404db0
00809bb3: mov ecx, edi
00809bb5: call 0x40c850
00809bba: pop esi
00809bbb: pop ebp
00809bbc: mov eax, 1
00809bc1: pop ebx
00809bc2: ret 
00809bc3: test byte ptr [esi + 0x1c], 1
00809bc7: je 0x809bd7
00809bc9: movss xmm0, dword ptr [esi + 0x14]
00809bce: comiss xmm0, dword ptr [0xf30054]
00809bd5: ja 0x809ba5
00809bd7: pop esi
00809bd8: pop ebp
00809bd9: xor eax, eax
00809bdb: pop ebx
00809bdc: ret 
00809bdd: insd dword ptr es:[edi], dx
00809bde: int3 
00809bdf: int3 
00809be0: sub esp, 0x48
00809be3: push ebx
00809be4: push ebp
00809be5: push esi
00809be6: push edi
00809be7: mov edi, dword ptr [esp + 0x5c]
00809beb: mov ecx, dword ptr [edi + 0xb00]
00809bf1: mov esi, eax
00809bf3: call 0xcb7eb0
00809bf8: mov ebp, dword ptr [esp + 0x68]
00809bfc: mov dword ptr [esp + 0x1c], eax
00809c00: mov eax, ebp
00809c02: lea ecx, [ebp + 0x20]
00809c05: jmp 0x809c10
00809c07: lea esp, [esp]
00809c0e: mov edi, edi
00809c10: mov dword ptr [eax], 0
00809c16: mov dword ptr [eax + 4], 0
00809c1d: add eax, 8
00809c20: cmp eax, ecx
00809c22: jb 0x809c10
00809c24: mov eax, dword ptr [edi + 0x20]
00809c27: mov ecx, dword ptr [eax + 0x50]
00809c2a: mov dword ptr [esp + 0x20], ecx
00809c2e: mov ecx, edi
00809c30: .byte 0xe8

3over4 data0xf30054 operand0x81679c candidate-start0x8164f0
008164f0: push esi
008164f1: mov esi, ecx
008164f3: mov eax, dword ptr [esi + 0x40]
008164f6: xor ecx, ecx
008164f8: movzx edx, cx
008164fb: mov ecx, edx
008164fd: shl edx, 0x10
00816500: or ecx, edx
00816502: mov dword ptr [eax + 0x120], ecx
00816508: mov word ptr [eax + 0x124], cx
0081650f: or dword ptr [eax + 0x11c], 8
00816516: xor ecx, ecx
00816518: mov word ptr [eax + 0x120], cx
0081651f: mov dword ptr [eax + 0x154], ecx
00816525: mov dword ptr [eax + 0x150], ecx
0081652b: mov dword ptr [eax + 0x168], ecx
00816531: mov eax, dword ptr [esi + 0x20]
00816534: cmp dword ptr [eax + 0x80], ecx
0081653a: jne 0x816547
0081653c: lea ecx, [eax + 0xb0]
00816542: call 0x408dc0
00816547: mov ecx, esi
00816549: pop esi
0081654a: jmp 0x813840
0081654f: int3 
00816550: call 0x4120b0
00816555: cmp dword ptr [eax + 0x34], 0
00816559: je 0x81657f
0081655b: mov ecx, dword ptr [eax + 0x2c]
0081655e: lea ecx, [ecx + ecx*2]
00816561: cmp dword ptr [eax + ecx*4 + 0x14], 0xa
00816566: jne 0x81657f
00816568: cmp dword ptr [0x1dee900], 0
0081656f: jne 0x81657f
00816571: mov ecx, 0x8000
00816576: call 0x6c5450
0081657b: test eax, eax
0081657d: je 0x816582
0081657f: xor eax, eax
00816581: ret 
00816582: mov edx, dword ptr [0x1ce716c]
00816588: mov eax, dword ptr [edx + 0x1bc]
0081658e: cmp eax, 3
00816591: je 0x816598
00816593: cmp eax, 4
00816596: jne 0x81657f
00816598: push esi
00816599: call 0x880390
0081659e: mov esi, eax
008165a0: test esi, esi
008165a2: je 0x8165d5
008165a4: mov eax, dword ptr [esi + 0x18]
008165a7: mov eax, dword ptr [eax + 4]
008165aa: movzx eax, byte ptr [eax + 3]
008165ae: cmp eax, 0x26
008165b1: je 0x8165dc
008165b3: cmp eax, 0xb
008165b6: je 0x8165dc
008165b8: cmp eax, 0xc
008165bb: je 0x8165dc
008165bd: mov ecx, esi
008165bf: call 0x80bc20
008165c4: test eax, eax
008165c6: jne 0x8165dc
008165c8: mov ecx, esi
008165ca: call 0x6b49c0
008165cf: mov esi, eax
008165d1: test esi, esi
008165d3: jne 0x8165a4
008165d5: mov eax, 1
008165da: pop esi
008165db: ret 
008165dc: xor eax, eax
008165de: pop esi
008165df: ret 
008165e0: push ebp
008165e1: mov ebp, esp
008165e3: and esp, 0xfffffff0
008165e6: sub esp, 0x6c
008165e9: push ebx
008165ea: mov ebx, dword ptr [esi]
008165ec: xor edx, edx
008165ee: mov ecx, ebx
008165f0: call 0x6cc880
008165f5: mov edx, dword ptr [ebx + 4]
008165f8: mov eax, dword ptr [esi + 0x8c]
008165fe: and eax, 1
00816601: mov ebx, dword ptr [esi + 0x28]
00816604: mov dword ptr [esp + 0xc], edx
00816608: je 0x816624
0081660a: test dword ptr [edi + 0x50], ebx
0081660d: jne 0x816629
0081660f: push 8
00816611: mov ecx, 0x1dc588c
00816616: call 0x8f06a0
0081661b: xor eax, eax
0081661d: pop ebx
0081661e: mov esp, ebp
00816620: pop ebp
00816621: ret 4
00816624: test dword ptr [edi + 0x4c], ebx
00816627: jmp 0x81660d
00816629: mov ecx, dword ptr [edi + 0x54]
0081662c: mov edx, dword ptr [edi + 0x58]
0081662f: and edx, ecx
00816631: and ecx, ebx
00816633: cmp ecx, edx
00816635: je 0x81663e
00816637: push 7
00816639: jmp 0x816d0f
0081663e: xorps xmm4, xmm4
00816641: test eax, eax
00816643: je 0x816659
00816645: movss xmm1, dword ptr [esi + 0x34]
0081664a: movss xmm2, dword ptr [esi + 0x78]
0081664f: mulss xmm1, dword ptr [edi + 0x34]
00816654: jmp 0x816773
00816659: movss xmm3, dword ptr [esi + 0x84]
00816661: addss xmm3, dword ptr [esi + 0x10]
00816666: comiss xmm4, xmm3
00816669: jbe 0x81666e
0081666b: movaps xmm3, xmm4
0081666e: movss xmm2, dword ptr [edi + 0x34]
00816673: comiss xmm2, dword ptr [0xec6e14]
0081667a: jbe 0x816680
0081667c: divss xmm3, xmm2
00816680: movss xmm0, dword ptr [esi + 0x6c]
00816685: movss xmm1, dword ptr [esi + 0x80]
0081668d: mulss xmm0, xmm2
00816691: addss xmm0, dword ptr [0xf2d3f0]
00816699: mulss xmm1, xmm2
0081669d: movaps xmm2, xmm0
008166a0: addss xmm2, xmm3
008166a4: movaps xmm3, xmm1
008166a7: subss xmm3, xmm2
008166ab: mulss xmm3, dword ptr [0xf34a38]
008166b3: xorps xmm2, xmm2
008166b6: movss xmm2, xmm3
008166ba: sqrtss xmm2, xmm2
008166be: sub esp, 0xc
008166c1: movaps xmmword ptr [esp + 0x6c], xmm2
008166c6: movss xmm2, dword ptr [0xf34a34]
008166ce: movss dword ptr [esp + 0x30], xmm1
008166d4: movss dword ptr [esp + 8], xmm2
008166da: subss xmm1, xmm0
008166de: movss xmm0, dword ptr [esp + 0x6c]
008166e4: movss dword ptr [esp + 4], xmm1
008166ea: lea ecx, [esp + 0x24]
008166ee: movss dword ptr [esp + 0x24], xmm4
008166f4: movss dword ptr [esp], xmm0
008166f9: call 0x409be0
008166fe: test eax, eax
00816700: jne 0x816719
00816702: movss xmm1, dword ptr [esp + 0x60]
00816708: xorps xmm1, xmmword ptr [0xec6fe0]
0081670f: mulss xmm1, dword ptr [0xf34a30]
00816717: jmp 0x81671f
00816719: movss xmm1, dword ptr [esp + 0x18]
0081671f: movss xmm2, dword ptr [esi + 0x74]
00816724: movss xmm3, dword ptr [esi + 0x7c]
00816729: movss xmm0, dword ptr [esi + 0x78]
0081672e: subss xmm3, xmm2
00816732: divss xmm3, xmm1
00816736: movss xmm1, dword ptr [esp + 0x60]
0081673c: subss xmm0, xmm2
00816740: divss xmm0, xmm3
00816744: mulss xmm1, xmm0
00816748: addss xmm1, dword ptr [esp + 0x24]
0081674e: movaps xmm3, xmm0
00816751: mulss xmm3, xmm0
00816755: mulss xmm3, dword ptr [0xf34a2c]
0081675d: addss xmm1, xmm3
00816761: movss xmm3, dword ptr [esi + 0x44]
00816766: mulss xmm3, dword ptr [edi + 0x34]
0081676b: addss xmm1, xmm3
0081676f: addss xmm2, xmm0
00816773: mov eax, dword ptr [esi + 0x28]
00816776: shr eax, 6
00816779: and eax, 1
0081677c: movss dword ptr [esp + 0x18], xmm2
00816782: movss dword ptr [esp + 0x1c], xmm1
00816788: mov dword ptr [esp + 0x24], eax
0081678c: je 0x816798
0081678e: movss xmm0, dword ptr [0xec6fd4]
00816796: jmp 0x8167a0
00816798: movss xmm0, dword ptr [0xf30054]
008167a0: mov edx, dword ptr [edi + 0x5c]
008167a3: sub esp, 0xc
008167a6: addss xmm0, xmm2
008167aa: movss dword ptr [esp + 8], xmm0
008167b0: movss dword ptr [esp + 4], xmm2
008167b6: lea ecx, [esp + 0x14]
008167ba: movss dword ptr [esp], xmm1
008167bf: call 0x872410
008167c4: mov ebx, eax
008167c6: test ebx, ebx
008167c8: je 0x816d1d
008167ce: movss xmm0, dword ptr [esp + 0x18]
008167d4: comiss xmm0, dword ptr [esp + 8]
008167d9: ja 0x816d0d
008167df: mov eax, dword ptr [ebx + 0xb0]
008167e5: cmp eax, 9
008167e8: je 0x816d1d
008167ee: cmp eax, 8
008167f1: je 0x816d1d
008167f7: lea edx, [esp + 0x14]
008167fb: .byte 0x8d

3over4 data0xf30054 operand0x818911 candidate-start0x818850
00818850: push ebp
00818851: mov ebp, esp
00818853: and esp, 0xfffffff0
00818856: sub esp, 0x98
0081885c: push ebx
0081885d: mov ebx, dword ptr [ebp + 8]
00818860: test byte ptr [ebx + 0x18], 0xe
00818864: push esi
00818865: mov esi, eax
00818867: je 0x818924
0081886d: mov eax, dword ptr [ebx + 4]
00818870: mov ecx, esi
00818872: mov dword ptr [esp + 0x10], eax
00818876: call 0x401c50
0081887b: fstp dword ptr [esp + 0x14]
0081887f: mov ecx, dword ptr [esp + 0x10]
00818883: movss xmm0, dword ptr [ecx + 0x14]
00818888: sub esp, 8
0081888b: movss dword ptr [esp + 4], xmm0
00818891: xorps xmm0, xmm0
00818894: lea edx, [esp + 0x84]
0081889b: movss dword ptr [esp], xmm0
008188a0: call 0x40fb30
008188a5: movss xmm0, dword ptr [esp + 0x84]
008188ae: mulss xmm0, xmm0
008188b2: movss dword ptr [esp + 0x10], xmm0
008188b8: movss xmm0, dword ptr [esp + 0x7c]
008188be: movss xmm1, dword ptr [esp + 0x10]
008188c4: mulss xmm0, xmm0
008188c8: addss xmm1, xmm0
008188cc: xorps xmm0, xmm0
008188cf: movss xmm0, xmm1
008188d3: movss xmm1, dword ptr [esi + 0x10]
008188d8: divss xmm1, dword ptr [esp + 0x8c]
008188e1: sqrtss xmm0, xmm0
008188e5: movaps xmmword ptr [esp + 0x90], xmm0
008188ed: mulss xmm1, dword ptr [esp + 0x90]
008188f6: movss xmm0, dword ptr [esp + 0x14]
008188fc: divss xmm0, xmm1
00818900: movss xmm1, dword ptr [edi + 0x24]
00818905: comiss xmm1, xmm0
00818908: ja 0x81890d
0081890a: movaps xmm0, xmm1
0081890d: mulss xmm1, dword ptr [0xf30054]
00818915: comiss xmm0, xmm1
00818918: ja 0x81891d
0081891a: movaps xmm0, xmm1
0081891d: movss dword ptr [ebp + 0x18], xmm0
00818922: jmp 0x81895e
00818924: mov ecx, dword ptr [ebx + 0x1c]
00818927: shl ecx, 0x19
0081892a: sar ecx, 0x19
0081892d: mov eax, dword ptr [ecx*4 + 0xf2e058]
00818934: test eax, 0x3000
00818939: je 0x81894a
0081893b: shr eax, 0xd
0081893e: and eax, 1
00818941: push eax
00818942: push ebx
00818943: call 0x7b06a0
00818948: jmp 0x818958
0081894a: test eax, 0x4000
0081894f: je 0x81895e
00818951: mov ecx, esi
00818953: call 0x7dad50
00818958: fmul dword ptr [ebp + 0x18]
0081895b: fstp dword ptr [ebp + 0x18]
0081895e: mov ecx, dword ptr [ebx]
00818960: test ecx, ecx
00818962: je 0x818aa6
00818968: mov eax, dword ptr [edi + 0x58]
0081896b: test eax, eax
0081896d: .byte 0x0f
0081896e: test byte ptr [ebx], dh
00818970: .byte 0x01

3over4 data0xf30054 operand0x82469f candidate-start0x8245f0
008245f0: push ebp
008245f1: mov ebp, esp
008245f3: and esp, 0xfffffff0
008245f6: sub esp, 0x88
008245fc: cmp dword ptr [ebp + 0xc], 0
00824600: push ebx
00824601: push edi
00824602: jne 0x8249d1
00824608: mov eax, dword ptr [esi + 0x18]
0082460b: mov eax, dword ptr [eax + 0xf0]
00824611: and eax, 0x80
00824616: mov dword ptr [esp + 0x20], eax
0082461a: mov eax, 0
0082461f: je 0x824629
00824621: test eax, eax
00824623: je 0x8249d1
00824629: call 0x4120b0
0082462e: cmp dword ptr [eax + 0x34], 0
00824632: je 0x824694
00824634: mov ecx, dword ptr [eax + 0x2c]
00824637: lea ecx, [ecx + ecx*2]
0082463a: cmp dword ptr [eax + ecx*4 + 0x14], 0xa
0082463f: jne 0x824694
00824641: mov ecx, esi
00824643: call 0x6d3600
00824648: fld dword ptr [0xf2db30]
0082464e: fcompi st(1)
00824650: fstp st(0)
00824652: jbe 0x824694
00824654: movdqa xmm0, xmmword ptr [0xf337f0]
0082465c: mov ecx, esi
0082465e: movdqa xmmword ptr [esp + 0x20], xmm0
00824664: call 0x401bd0
00824669: fstp dword ptr [esp + 0x18]
0082466d: movss xmm0, dword ptr [esp + 0x18]
00824673: shufps xmm0, xmm0, 0
00824677: andps xmm0, xmmword ptr [esp + 0x20]
0082467c: movaps xmmword ptr [esp + 0x20], xmm0
00824681: movss xmm0, dword ptr [esp + 0x20]
00824687: comiss xmm0, dword ptr [0xf2d6f0]
0082468e: ja 0x8249d1
00824694: mov eax, dword ptr [esi + 0x14]
00824697: movss xmm0, dword ptr [eax + 0x14]
0082469c: comiss xmm0, dword ptr [0xf30054]
008246a3: jbe 0x8249d1
008246a9: mov edi, dword ptr [eax + 0x18]
008246ac: mov eax, dword ptr [ebp + 0x18]
008246af: mov ecx, dword ptr [ebp + 0x14]
008246b2: lea edx, [esp + 0x14]
008246b6: push edx
008246b7: mov edx, dword ptr [ebp + 0x10]
008246ba: push eax
008246bb: push ecx
008246bc: push edx
008246bd: mov eax, edi
008246bf: mov ecx, esi
008246c1: mov dword ptr [esp + 0x20], edi
008246c5: mov dword ptr [esp + 0x24], 0
008246cd: call 0x7b6390
008246d2: mov ebx, eax
008246d4: mov dword ptr [esp + 0x20], ebx
008246d8: test ebx, ebx
008246da: jne 0x824707
008246dc: mov eax, dword ptr [ebp + 0x10]
008246df: cmp dword ptr [eax + 0xc], ebx
008246e2: je 0x8249d1
008246e8: mov eax, dword ptr [esi + 0x18]
008246eb: and dword ptr [eax + 0x2c], 0xfffffffe
008246ef: push ebx
008246f0: mov edx, 0xf2f520
008246f5: mov ecx, esi
008246f7: call 0x404db0
008246fc: lea eax, [ebx + 1]

3over4 data0xf30054 operand0x82a557 candidate-start0x82a370
0082a370: push ebp
0082a371: mov ebp, esp
0082a373: and esp, 0xfffffff0
0082a376: sub esp, 0x5c
0082a379: mov eax, dword ptr [esi + 0x18]
0082a37c: push ebx
0082a37d: mov ebx, dword ptr [edi + 0x18]
0082a380: mov ecx, ebx
0082a382: mov dword ptr [esp + 0x1c], ebx
0082a386: mov dword ptr [esp + 0xc], eax
0082a38a: call 0x7ae6d0
0082a38f: test eax, eax
0082a391: je 0x82a3a0
0082a393: mov ecx, ebx
0082a395: call 0x7ae600
0082a39a: mov dword ptr [esp + 8], eax
0082a39e: jmp 0x82a3a8
0082a3a0: mov dword ptr [esp + 8], 0
0082a3a8: mov ecx, edi
0082a3aa: call 0x6b5300
0082a3af: mov ecx, esi
0082a3b1: mov dword ptr [esp + 0x20], eax
0082a3b5: call 0x6b5300
0082a3ba: mov ecx, eax
0082a3bc: call 0x6d6650
0082a3c1: fstp dword ptr [esp + 0x34]
0082a3c5: mov ecx, edi
0082a3c7: call 0x6d3600
0082a3cc: fstp dword ptr [esp + 0x18]
0082a3d0: mov ecx, dword ptr [edi + 0x4c]
0082a3d3: mov eax, dword ptr [esp + 8]
0082a3d7: mov dword ptr [esp + 0x30], ecx
0082a3db: mov ecx, dword ptr [esi + 0xb0c]
0082a3e1: dec ecx
0082a3e2: mov bl, 1
0082a3e4: shl bl, cl
0082a3e6: test byte ptr [eax + 0xd2], 1
0082a3ed: je 0x82a41e
0082a3ef: cmp dword ptr [eax + 0x40], esi
0082a3f2: jne 0x82a41e
0082a3f4: mov edx, dword ptr [edi + 0x40]
0082a3f7: cmp dword ptr [edx + 0x14c], esi
0082a3fd: jne 0x82a41e
0082a3ff: mov ecx, dword ptr [esp + 0xc]
0082a403: mov edx, dword ptr [ecx + 4]
0082a406: mov ecx, dword ptr [edx]
0082a408: and ecx, 0xff000000
0082a40e: mov dword ptr [esp + 0x10], 1
0082a416: cmp ecx, 0x4c000000
0082a41c: je 0x82a426
0082a41e: mov dword ptr [esp + 0x10], 0
0082a426: test byte ptr [eax + 0xd4], bl
0082a42c: jne 0x82a8a1
0082a432: mov ecx, dword ptr [esp + 0xc]
0082a436: call 0x7d4af0
0082a43b: test eax, eax
0082a43d: jne 0x82a8a1
0082a443: mov ecx, dword ptr [esp + 0x1c]
0082a447: call 0x7bbb20
0082a44c: test eax, eax
0082a44e: je 0x82a8a1
0082a454: mov ecx, dword ptr [esp + 0xc]
0082a458: call 0x7bbb20
0082a45d: test eax, eax
0082a45f: jne 0x82a46b
0082a461: cmp dword ptr [esp + 0x10], eax
0082a465: je 0x82a8a1
0082a46b: mov ecx, edi
0082a46d: call 0x6b47f0
0082a472: test eax, eax
0082a474: jne 0x82a493
0082a476: movss xmm0, dword ptr [0x146b618]
0082a47e: subss xmm0, dword ptr [0x1dee914]
0082a486: comiss xmm0, dword ptr [0xf33078]
0082a48d: ja 0x82a8a1
0082a493: cmp dword ptr [esp + 0x10], 0
0082a498: jne 0x82a4b7
0082a49a: mov edx, dword ptr [edi + 0x40]
0082a49d: mov ecx, dword ptr [esi + 0x40]
0082a4a0: push 0x7fffffff
0082a4a5: push 0x1ffe00
0082a4aa: call 0x6f2a30
0082a4af: test eax, eax
0082a4b1: je 0x82a8a1
0082a4b7: mov eax, dword ptr [esp + 8]
0082a4bb: or byte ptr [eax + 0xd4], bl
0082a4c1: mov ecx, esi
0082a4c3: call 0x8824d0
0082a4c8: push ecx
0082a4c9: mov ecx, 0x11d5c08
0082a4ce: fstp dword ptr [esp]
0082a4d1: call 0x6cb570
0082a4d6: push ecx
0082a4d7: mov edx, esi
0082a4d9: fstp dword ptr [esp]
0082a4dc: mov ecx, edi
0082a4de: call 0x7b93e0
0082a4e3: fstp dword ptr [esp + 0x3c]
0082a4e7: movss xmm0, dword ptr [0xec6e14]
0082a4ef: mov eax, dword ptr [esp + 0x30]
0082a4f3: movss dword ptr [esp + 0x24], xmm0
0082a4f9: movss dword ptr [esp + 0x28], xmm0
0082a4ff: movss dword ptr [esp + 0x14], xmm0
0082a505: test eax, eax
0082a507: je 0x82a511
0082a509: mov edx, dword ptr [eax + 0x30]
0082a50c: subss xmm0, dword ptr [edx + 0x18]
0082a511: push ecx
0082a512: movss dword ptr [esp + 0x30], xmm0
0082a518: movss xmm0, dword ptr [esp + 0x1c]
0082a51e: mov edx, 3
0082a523: mov ecx, 0xf305c0
0082a528: movss dword ptr [esp], xmm0
0082a52d: call 0x404870
0082a532: fstp dword ptr [esp + 0x38]
0082a536: mov ecx, esi
0082a538: call 0x7b44d0
0082a53d: test eax, eax
0082a53f: je 0x82a611
0082a545: movss xmm0, dword ptr [0xec8938]
0082a54d: movss dword ptr [esp + 0x40], xmm0
0082a553: movss xmm0, dword ptr [0xf30054]
0082a55b: movss dword ptr [esp + 0x44], xmm0
0082a561: movss xmm0, dword ptr [0xf2e03c]
0082a569: movss dword ptr [esp + 0x48], xmm0
0082a56f: mov ecx, esi
0082a571: mov dword ptr [esp + 0x54], 0
0082a579: pxor xmm0, xmm0
0082a57d: movq qword ptr [esp + 0x4c], xmm0
0082a583: call 0x6b5330
0082a588: fstp dword ptr [esp + 0x24]
0082a58c: mov ecx, edi
0082a58e: call 0x6b5330
0082a593: fsubr dword ptr [esp + 0x24]
0082a597: push ecx
0082a598: mov edx, 3
0082a59d: fstp dword ptr [esp + 0x1c]
0082a5a1: mov ecx, 0xf305dc
0082a5a6: movss xmm0, dword ptr [esp + 0x1c]
0082a5ac: movss dword ptr [esp], xmm0
0082a5b1: call 0x404870
0082a5b6: .byte 0xd9

3over4 data0xf30054 operand0x82a62a candidate-start0x82a370
0082a370: push ebp
0082a371: mov ebp, esp
0082a373: and esp, 0xfffffff0
0082a376: sub esp, 0x5c
0082a379: mov eax, dword ptr [esi + 0x18]
0082a37c: push ebx
0082a37d: mov ebx, dword ptr [edi + 0x18]
0082a380: mov ecx, ebx
0082a382: mov dword ptr [esp + 0x1c], ebx
0082a386: mov dword ptr [esp + 0xc], eax
0082a38a: call 0x7ae6d0
0082a38f: test eax, eax
0082a391: je 0x82a3a0
0082a393: mov ecx, ebx
0082a395: call 0x7ae600
0082a39a: mov dword ptr [esp + 8], eax
0082a39e: jmp 0x82a3a8
0082a3a0: mov dword ptr [esp + 8], 0
0082a3a8: mov ecx, edi
0082a3aa: call 0x6b5300
0082a3af: mov ecx, esi
0082a3b1: mov dword ptr [esp + 0x20], eax
0082a3b5: call 0x6b5300
0082a3ba: mov ecx, eax
0082a3bc: call 0x6d6650
0082a3c1: fstp dword ptr [esp + 0x34]
0082a3c5: mov ecx, edi
0082a3c7: call 0x6d3600
0082a3cc: fstp dword ptr [esp + 0x18]
0082a3d0: mov ecx, dword ptr [edi + 0x4c]
0082a3d3: mov eax, dword ptr [esp + 8]
0082a3d7: mov dword ptr [esp + 0x30], ecx
0082a3db: mov ecx, dword ptr [esi + 0xb0c]
0082a3e1: dec ecx
0082a3e2: mov bl, 1
0082a3e4: shl bl, cl
0082a3e6: test byte ptr [eax + 0xd2], 1
0082a3ed: je 0x82a41e
0082a3ef: cmp dword ptr [eax + 0x40], esi
0082a3f2: jne 0x82a41e
0082a3f4: mov edx, dword ptr [edi + 0x40]
0082a3f7: cmp dword ptr [edx + 0x14c], esi
0082a3fd: jne 0x82a41e
0082a3ff: mov ecx, dword ptr [esp + 0xc]
0082a403: mov edx, dword ptr [ecx + 4]
0082a406: mov ecx, dword ptr [edx]
0082a408: and ecx, 0xff000000
0082a40e: mov dword ptr [esp + 0x10], 1
0082a416: cmp ecx, 0x4c000000
0082a41c: je 0x82a426
0082a41e: mov dword ptr [esp + 0x10], 0
0082a426: test byte ptr [eax + 0xd4], bl
0082a42c: jne 0x82a8a1
0082a432: mov ecx, dword ptr [esp + 0xc]
0082a436: call 0x7d4af0
0082a43b: test eax, eax
0082a43d: jne 0x82a8a1
0082a443: mov ecx, dword ptr [esp + 0x1c]
0082a447: call 0x7bbb20
0082a44c: test eax, eax
0082a44e: je 0x82a8a1
0082a454: mov ecx, dword ptr [esp + 0xc]
0082a458: call 0x7bbb20
0082a45d: test eax, eax
0082a45f: jne 0x82a46b
0082a461: cmp dword ptr [esp + 0x10], eax
0082a465: je 0x82a8a1
0082a46b: mov ecx, edi
0082a46d: call 0x6b47f0
0082a472: test eax, eax
0082a474: jne 0x82a493
0082a476: movss xmm0, dword ptr [0x146b618]
0082a47e: subss xmm0, dword ptr [0x1dee914]
0082a486: comiss xmm0, dword ptr [0xf33078]
0082a48d: ja 0x82a8a1
0082a493: cmp dword ptr [esp + 0x10], 0
0082a498: jne 0x82a4b7
0082a49a: mov edx, dword ptr [edi + 0x40]
0082a49d: mov ecx, dword ptr [esi + 0x40]
0082a4a0: push 0x7fffffff
0082a4a5: push 0x1ffe00
0082a4aa: call 0x6f2a30
0082a4af: test eax, eax
0082a4b1: je 0x82a8a1
0082a4b7: mov eax, dword ptr [esp + 8]
0082a4bb: or byte ptr [eax + 0xd4], bl
0082a4c1: mov ecx, esi
0082a4c3: call 0x8824d0
0082a4c8: push ecx
0082a4c9: mov ecx, 0x11d5c08
0082a4ce: fstp dword ptr [esp]
0082a4d1: call 0x6cb570
0082a4d6: push ecx
0082a4d7: mov edx, esi
0082a4d9: fstp dword ptr [esp]
0082a4dc: mov ecx, edi
0082a4de: call 0x7b93e0
0082a4e3: fstp dword ptr [esp + 0x3c]
0082a4e7: movss xmm0, dword ptr [0xec6e14]
0082a4ef: mov eax, dword ptr [esp + 0x30]
0082a4f3: movss dword ptr [esp + 0x24], xmm0
0082a4f9: movss dword ptr [esp + 0x28], xmm0
0082a4ff: movss dword ptr [esp + 0x14], xmm0
0082a505: test eax, eax
0082a507: je 0x82a511
0082a509: mov edx, dword ptr [eax + 0x30]
0082a50c: subss xmm0, dword ptr [edx + 0x18]
0082a511: push ecx
0082a512: movss dword ptr [esp + 0x30], xmm0
0082a518: movss xmm0, dword ptr [esp + 0x1c]
0082a51e: mov edx, 3
0082a523: mov ecx, 0xf305c0
0082a528: movss dword ptr [esp], xmm0
0082a52d: call 0x404870
0082a532: fstp dword ptr [esp + 0x38]
0082a536: mov ecx, esi
0082a538: call 0x7b44d0
0082a53d: test eax, eax
0082a53f: je 0x82a611
0082a545: movss xmm0, dword ptr [0xec8938]
0082a54d: movss dword ptr [esp + 0x40], xmm0
0082a553: movss xmm0, dword ptr [0xf30054]
0082a55b: movss dword ptr [esp + 0x44], xmm0
0082a561: movss xmm0, dword ptr [0xf2e03c]
0082a569: movss dword ptr [esp + 0x48], xmm0
0082a56f: mov ecx, esi
0082a571: mov dword ptr [esp + 0x54], 0
0082a579: pxor xmm0, xmm0
0082a57d: movq qword ptr [esp + 0x4c], xmm0
0082a583: call 0x6b5330
0082a588: fstp dword ptr [esp + 0x24]
0082a58c: mov ecx, edi
0082a58e: call 0x6b5330
0082a593: fsubr dword ptr [esp + 0x24]
0082a597: push ecx
0082a598: mov edx, 3
0082a59d: fstp dword ptr [esp + 0x1c]
0082a5a1: mov ecx, 0xf305dc
0082a5a6: movss xmm0, dword ptr [esp + 0x1c]
0082a5ac: movss dword ptr [esp], xmm0
0082a5b1: call 0x404870
0082a5b6: fstp dword ptr [esp + 0x4c]
0082a5ba: movss xmm0, dword ptr [esp + 0x18]
0082a5c0: push ecx
0082a5c1: mov edx, 3
0082a5c6: mov ecx, 0xf305f8
0082a5cb: movss dword ptr [esp], xmm0
0082a5d0: call 0x404870
0082a5d5: fstp dword ptr [esp + 0x50]
0082a5d9: movss xmm0, dword ptr [esp + 0x18]
0082a5df: push ecx
0082a5e0: mov edx, 3
0082a5e5: mov ecx, 0xf30614
0082a5ea: movss dword ptr [esp], xmm0
0082a5ef: call 0x404870
0082a5f4: fstp dword ptr [esp + 0x54]
0082a5f8: movss xmm0, dword ptr [esp + 0x34]
0082a5fe: push ecx
0082a5ff: lea ecx, [esp + 0x44]
0082a603: movss dword ptr [esp], xmm0
0082a608: call 0x6cb570
0082a60d: fstp dword ptr [esp + 0x24]
0082a611: mov eax, dword ptr [esp + 0x1c]
0082a615: mov ecx, dword ptr [eax + 4]
0082a618: movzx eax, byte ptr [ecx + 3]
0082a61c: cmp eax, 0xb
0082a61f: je 0x82a626
0082a621: cmp eax, 0xc
0082a624: jne 0x82a634
0082a626: movss xmm0, dword ptr [0xf30054]
0082a62e: movss dword ptr [esp + 0x28], xmm0
0082a634: mov edx, dword ptr [esp + 8]
0082a638: mov eax, dword ptr [edx + 4]
0082a63b: xorps xmm0, xmm0
0082a63e: movss dword ptr [esp + 0x18], xmm0
0082a644: cmp eax, 1
0082a647: jne 0x82a654
0082a649: mov ecx, dword ptr [esp + 0x20]
0082a64d: call 0x6d6380
0082a652: jmp 0x82a662
0082a654: cmp eax, 2
0082a657: jne 0x82a666
0082a659: mov ecx, dword ptr [esp + 0x20]
0082a65d: call 0x6d63f0
0082a662: fstp dword ptr [esp + 0x18]
0082a666: movss xmm0, dword ptr [esp + 0x18]
0082a66c: push ecx
0082a66d: mov edx, 4
0082a672: mov ecx, 0xf2fe60
0082a677: movss dword ptr [esp], xmm0
0082a67c: call 0x404870
0082a681: fstp dword ptr [esp + 0x20]
0082a685: mov eax, dword ptr [esi + 0x14]
0082a688: .byte 0x83
0082a689: .byte 0x38

3over4 data0xf30054 operand0x82a865 candidate-start0x82a370
0082a370: push ebp
0082a371: mov ebp, esp
0082a373: and esp, 0xfffffff0
0082a376: sub esp, 0x5c
0082a379: mov eax, dword ptr [esi + 0x18]
0082a37c: push ebx
0082a37d: mov ebx, dword ptr [edi + 0x18]
0082a380: mov ecx, ebx
0082a382: mov dword ptr [esp + 0x1c], ebx
0082a386: mov dword ptr [esp + 0xc], eax
0082a38a: call 0x7ae6d0
0082a38f: test eax, eax
0082a391: je 0x82a3a0
0082a393: mov ecx, ebx
0082a395: call 0x7ae600
0082a39a: mov dword ptr [esp + 8], eax
0082a39e: jmp 0x82a3a8
0082a3a0: mov dword ptr [esp + 8], 0
0082a3a8: mov ecx, edi
0082a3aa: call 0x6b5300
0082a3af: mov ecx, esi
0082a3b1: mov dword ptr [esp + 0x20], eax
0082a3b5: call 0x6b5300
0082a3ba: mov ecx, eax
0082a3bc: call 0x6d6650
0082a3c1: fstp dword ptr [esp + 0x34]
0082a3c5: mov ecx, edi
0082a3c7: call 0x6d3600
0082a3cc: fstp dword ptr [esp + 0x18]
0082a3d0: mov ecx, dword ptr [edi + 0x4c]
0082a3d3: mov eax, dword ptr [esp + 8]
0082a3d7: mov dword ptr [esp + 0x30], ecx
0082a3db: mov ecx, dword ptr [esi + 0xb0c]
0082a3e1: dec ecx
0082a3e2: mov bl, 1
0082a3e4: shl bl, cl
0082a3e6: test byte ptr [eax + 0xd2], 1
0082a3ed: je 0x82a41e
0082a3ef: cmp dword ptr [eax + 0x40], esi
0082a3f2: jne 0x82a41e
0082a3f4: mov edx, dword ptr [edi + 0x40]
0082a3f7: cmp dword ptr [edx + 0x14c], esi
0082a3fd: jne 0x82a41e
0082a3ff: mov ecx, dword ptr [esp + 0xc]
0082a403: mov edx, dword ptr [ecx + 4]
0082a406: mov ecx, dword ptr [edx]
0082a408: and ecx, 0xff000000
0082a40e: mov dword ptr [esp + 0x10], 1
0082a416: cmp ecx, 0x4c000000
0082a41c: je 0x82a426
0082a41e: mov dword ptr [esp + 0x10], 0
0082a426: test byte ptr [eax + 0xd4], bl
0082a42c: jne 0x82a8a1
0082a432: mov ecx, dword ptr [esp + 0xc]
0082a436: call 0x7d4af0
0082a43b: test eax, eax
0082a43d: jne 0x82a8a1
0082a443: mov ecx, dword ptr [esp + 0x1c]
0082a447: call 0x7bbb20
0082a44c: test eax, eax
0082a44e: je 0x82a8a1
0082a454: mov ecx, dword ptr [esp + 0xc]
0082a458: call 0x7bbb20
0082a45d: test eax, eax
0082a45f: jne 0x82a46b
0082a461: cmp dword ptr [esp + 0x10], eax
0082a465: je 0x82a8a1
0082a46b: mov ecx, edi
0082a46d: call 0x6b47f0
0082a472: test eax, eax
0082a474: jne 0x82a493
0082a476: movss xmm0, dword ptr [0x146b618]
0082a47e: subss xmm0, dword ptr [0x1dee914]
0082a486: comiss xmm0, dword ptr [0xf33078]
0082a48d: ja 0x82a8a1
0082a493: cmp dword ptr [esp + 0x10], 0
0082a498: jne 0x82a4b7
0082a49a: mov edx, dword ptr [edi + 0x40]
0082a49d: mov ecx, dword ptr [esi + 0x40]
0082a4a0: push 0x7fffffff
0082a4a5: push 0x1ffe00
0082a4aa: call 0x6f2a30
0082a4af: test eax, eax
0082a4b1: je 0x82a8a1
0082a4b7: mov eax, dword ptr [esp + 8]
0082a4bb: or byte ptr [eax + 0xd4], bl
0082a4c1: mov ecx, esi
0082a4c3: call 0x8824d0
0082a4c8: push ecx
0082a4c9: mov ecx, 0x11d5c08
0082a4ce: fstp dword ptr [esp]
0082a4d1: call 0x6cb570
0082a4d6: push ecx
0082a4d7: mov edx, esi
0082a4d9: fstp dword ptr [esp]
0082a4dc: mov ecx, edi
0082a4de: call 0x7b93e0
0082a4e3: fstp dword ptr [esp + 0x3c]
0082a4e7: movss xmm0, dword ptr [0xec6e14]
0082a4ef: mov eax, dword ptr [esp + 0x30]
0082a4f3: movss dword ptr [esp + 0x24], xmm0
0082a4f9: movss dword ptr [esp + 0x28], xmm0
0082a4ff: movss dword ptr [esp + 0x14], xmm0
0082a505: test eax, eax
0082a507: je 0x82a511
0082a509: mov edx, dword ptr [eax + 0x30]
0082a50c: subss xmm0, dword ptr [edx + 0x18]
0082a511: push ecx
0082a512: movss dword ptr [esp + 0x30], xmm0
0082a518: movss xmm0, dword ptr [esp + 0x1c]
0082a51e: mov edx, 3
0082a523: mov ecx, 0xf305c0
0082a528: movss dword ptr [esp], xmm0
0082a52d: call 0x404870
0082a532: fstp dword ptr [esp + 0x38]
0082a536: mov ecx, esi
0082a538: call 0x7b44d0
0082a53d: test eax, eax
0082a53f: je 0x82a611
0082a545: movss xmm0, dword ptr [0xec8938]
0082a54d: movss dword ptr [esp + 0x40], xmm0
0082a553: movss xmm0, dword ptr [0xf30054]
0082a55b: movss dword ptr [esp + 0x44], xmm0
0082a561: movss xmm0, dword ptr [0xf2e03c]
0082a569: movss dword ptr [esp + 0x48], xmm0
0082a56f: mov ecx, esi
0082a571: mov dword ptr [esp + 0x54], 0
0082a579: pxor xmm0, xmm0
0082a57d: movq qword ptr [esp + 0x4c], xmm0
0082a583: call 0x6b5330
0082a588: fstp dword ptr [esp + 0x24]
0082a58c: mov ecx, edi
0082a58e: call 0x6b5330
0082a593: fsubr dword ptr [esp + 0x24]
0082a597: push ecx
0082a598: mov edx, 3
0082a59d: fstp dword ptr [esp + 0x1c]
0082a5a1: mov ecx, 0xf305dc
0082a5a6: movss xmm0, dword ptr [esp + 0x1c]
0082a5ac: movss dword ptr [esp], xmm0
0082a5b1: call 0x404870
0082a5b6: fstp dword ptr [esp + 0x4c]
0082a5ba: movss xmm0, dword ptr [esp + 0x18]
0082a5c0: push ecx
0082a5c1: mov edx, 3
0082a5c6: mov ecx, 0xf305f8
0082a5cb: movss dword ptr [esp], xmm0
0082a5d0: call 0x404870
0082a5d5: fstp dword ptr [esp + 0x50]
0082a5d9: movss xmm0, dword ptr [esp + 0x18]
0082a5df: push ecx
0082a5e0: mov edx, 3
0082a5e5: mov ecx, 0xf30614
0082a5ea: movss dword ptr [esp], xmm0
0082a5ef: call 0x404870
0082a5f4: fstp dword ptr [esp + 0x54]
0082a5f8: movss xmm0, dword ptr [esp + 0x34]
0082a5fe: push ecx
0082a5ff: lea ecx, [esp + 0x44]
0082a603: movss dword ptr [esp], xmm0
0082a608: call 0x6cb570
0082a60d: fstp dword ptr [esp + 0x24]
0082a611: mov eax, dword ptr [esp + 0x1c]
0082a615: mov ecx, dword ptr [eax + 4]
0082a618: movzx eax, byte ptr [ecx + 3]
0082a61c: cmp eax, 0xb
0082a61f: je 0x82a626
0082a621: cmp eax, 0xc
0082a624: jne 0x82a634
0082a626: movss xmm0, dword ptr [0xf30054]
0082a62e: movss dword ptr [esp + 0x28], xmm0
0082a634: mov edx, dword ptr [esp + 8]
0082a638: mov eax, dword ptr [edx + 4]
0082a63b: xorps xmm0, xmm0
0082a63e: movss dword ptr [esp + 0x18], xmm0
0082a644: cmp eax, 1
0082a647: jne 0x82a654
0082a649: mov ecx, dword ptr [esp + 0x20]
0082a64d: call 0x6d6380
0082a652: jmp 0x82a662
0082a654: cmp eax, 2
0082a657: jne 0x82a666
0082a659: mov ecx, dword ptr [esp + 0x20]
0082a65d: call 0x6d63f0
0082a662: fstp dword ptr [esp + 0x18]
0082a666: movss xmm0, dword ptr [esp + 0x18]
0082a66c: push ecx
0082a66d: mov edx, 4
0082a672: mov ecx, 0xf2fe60
0082a677: movss dword ptr [esp], xmm0
0082a67c: call 0x404870
0082a681: fstp dword ptr [esp + 0x20]
0082a685: mov eax, dword ptr [esi + 0x14]
0082a688: cmp dword ptr [eax], -1
0082a68b: je 0x82a7e4
0082a691: cmp dword ptr [eax + 8], 0
0082a695: jne 0x82a7e4
0082a69b: mov ebx, dword ptr [esp + 0xc]
0082a69f: mov eax, dword ptr [ebx + 4]
0082a6a2: mov ecx, dword ptr [eax]
0082a6a4: and ecx, 0xff000000
0082a6aa: cmp ecx, 0xe000000
0082a6b0: jne 0x82a7bb
0082a6b6: mov ecx, edi
0082a6b8: call 0x80c0d0
0082a6bd: fsubr dword ptr [0xf2e328]
0082a6c3: movdqa xmm1, xmmword ptr [0xf337f0]
0082a6cb: fsubr dword ptr [ebx + 8]
0082a6ce: fstp dword ptr [esp + 0x34]
0082a6d2: movss xmm0, dword ptr [esp + 0x34]
0082a6d8: movss xmm2, dword ptr [0xec6fd4]
0082a6e0: shufps xmm0, xmm0, 0
0082a6e4: andps xmm0, xmm1
0082a6e7: movaps xmmword ptr [esp + 0x40], xmm0
0082a6ec: movss xmm1, dword ptr [esp + 0x40]
0082a6f2: subss xmm1, dword ptr [0xec7978]
0082a6fa: movaps xmm0, xmm1
0082a6fd: mulss xmm0, xmm2
0082a701: mulss xmm0, dword ptr [0xec6e10]
0082a709: addss xmm0, xmm2
0082a70d: comiss xmm2, xmm0
0082a710: jbe 0x82a71d
0082a712: movaps xmm0, xmm2
0082a715: movss dword ptr [esp + 0x14], xmm0
0082a71b: jmp 0x82a738
0082a71d: movss xmm3, dword ptr [0xec6e14]
0082a725: comiss xmm3, xmm0
0082a728: jbe 0x82a732
0082a72a: movss dword ptr [esp + 0x14], xmm0
0082a730: jmp 0x82a738
0082a732: movss dword ptr [esp + 0x14], xmm3
0082a738: movss xmm3, dword ptr [0xf2e328]
0082a740: comiss xmm3, dword ptr [esp + 0x40]
0082a745: jbe 0x82a77c
0082a747: mulss xmm1, dword ptr [0xec7050]
0082a74f: mulss xmm1, dword ptr [0xec9470]
0082a757: xorps xmm0, xmm0
0082a75a: addss xmm1, xmm2
0082a75e: comiss xmm0, xmm1
0082a761: ja 0x82a76e
0082a763: comiss xmm2, xmm1
0082a766: movaps xmm0, xmm1
0082a769: ja 0x82a76e
0082a76b: movaps xmm0, xmm2
0082a76e: mov edx, dword ptr [esp + 8]
0082a772: movss dword ptr [edx + 0x200], xmm0
0082a77a: jmp 0x82a7e4
0082a77c: movss xmm0, dword ptr [esp + 0x40]
0082a782: movss xmm1, dword ptr [0xedac08]
0082a78a: subss xmm0, xmm3
0082a78e: mulss xmm0, xmm1
0082a792: mulss xmm0, dword ptr [0xec9470]
0082a79a: comiss xmm1, xmm0
0082a79d: ja 0x82a7ad
0082a79f: xorps xmm2, xmm2
0082a7a2: comiss xmm2, xmm0
0082a7a5: movaps xmm1, xmm0
0082a7a8: ja 0x82a7ad
0082a7aa: movaps xmm1, xmm2
0082a7ad: mov eax, dword ptr [esp + 8]
0082a7b1: movss dword ptr [eax + 0x200], xmm1
0082a7b9: jmp 0x82a7e4
0082a7bb: cmp dword ptr [esp + 0x10], 0
0082a7c0: je 0x82a7e4
0082a7c2: movss xmm0, dword ptr [0xf2e328]
0082a7ca: mov ecx, dword ptr [esp + 8]
0082a7ce: movss dword ptr [esp + 0x14], xmm0
0082a7d4: movss xmm0, dword ptr [0xec7050]
0082a7dc: movss dword ptr [ecx + 0x200], xmm0
0082a7e4: mov ecx, esi
0082a7e6: call 0x880420
0082a7eb: test eax, eax
0082a7ed: je 0x82a836
0082a7ef: movss xmm0, dword ptr [esp + 0x38]
0082a7f5: mulss xmm0, dword ptr [esp + 0x3c]
0082a7fb: mulss xmm0, dword ptr [esp + 0x24]
0082a801: mulss xmm0, dword ptr [esp + 0x28]
0082a807: mulss xmm0, dword ptr [esp + 0x20]
0082a80d: mulss xmm0, dword ptr [esp + 0x2c]
0082a813: mulss xmm0, dword ptr [esp + 0x14]
0082a819: push ecx
0082a81a: mov edx, 4
0082a81f: mov ecx, esi
0082a821: movss dword ptr [esp], xmm0
0082a826: call 0x89efb0
0082a82b: test eax, eax
0082a82d: je 0x82a836
0082a82f: mov ebx, 1
0082a834: jmp 0x82a838
0082a836: xor ebx, ebx
0082a838: mov edx, esi
0082a83a: mov ecx, edi
0082a83c: call 0x80c690
0082a841: test ebx, ebx
0082a843: je 0x82a890
0082a845: push 1
0082a847: push eax
0082a848: mov edx, edi
0082a84a: mov ecx, esi
0082a84c: call 0x7a05f0
0082a851: mov eax, dword ptr [esp + 0x30]
0082a855: test eax, eax
0082a857: je 0x82a886
0082a859: mov eax, dword ptr [eax + 0x30]
0082a85c: movss xmm0, dword ptr [eax + 0x18]
0082a861: addss xmm0, dword ptr [0xf30054]
0082a869: xorps xmm1, xmm1
0082a86c: comiss xmm1, xmm0
0082a86f: ja 0x82a87e
0082a871: movss xmm1, dword ptr [0xec6e14]
0082a879: comiss xmm1, xmm0
0082a87c: ja 0x82a881
0082a87e: movaps xmm0, xmm1
0082a881: movss dword ptr [eax + 0x18], xmm0
0082a886: mov eax, 1
0082a88b: pop ebx
0082a88c: mov esp, ebp
0082a88e: pop ebp
0082a88f: ret 
0082a890: xor edx, edx
0082a892: test eax, eax
0082a894: setne dl
0082a897: mov ecx, edi
0082a899: push edx
0082a89a: mov edx, esi
0082a89c: call 0x6c7440
0082a8a1: xor eax, eax
0082a8a3: pop ebx
0082a8a4: mov esp, ebp
0082a8a6: pop ebp
0082a8a7: ret 
0082a8a8: int3 
0082a8a9: int3 
0082a8aa: int3 
0082a8ab: int3 
0082a8ac: int3 
0082a8ad: int3 
0082a8ae: int3 
0082a8af: int3 
0082a8b0: sub esp, 0x14
0082a8b3: push ebx
0082a8b4: mov ebx, dword ptr [esp + 0x1c]
0082a8b8: push ebp
0082a8b9: mov ebp, dword ptr [ebx + 0x1c]
0082a8bc: mov eax, dword ptr [ebp + 0x50]
0082a8bf: movss xmm0, dword ptr [eax + 4]
0082a8c4: push esi

3over4 data0xf30054 operand0x82e141 candidate-start0x82ded0
0082ded0: push ebp
0082ded1: mov ebp, esp
0082ded3: and esp, 0xfffffff0
0082ded6: sub esp, 0x28
0082ded9: push esi
0082deda: mov esi, eax
0082dedc: mov eax, dword ptr [0x1d9590c]
0082dee1: push edi
0082dee2: xor edi, edi
0082dee4: mov dword ptr [esp + 0xc], edi
0082dee8: cmp esi, eax
0082deea: je 0x82df45
0082deec: mov eax, esi
0082deee: imul eax, eax, 0x194
0082def4: add eax, 0x11d5e08
0082def9: mov eax, dword ptr [eax + 0x20]
0082defc: test eax, 0x400
0082df01: jne 0x82df38
0082df03: test al, 1
0082df05: jne 0x82df38
0082df07: test eax, 0x800
0082df0c: je 0x82df1a
0082df0e: mov dword ptr [0x1d95908], 1
0082df18: jmp 0x82df3e
0082df1a: mov ecx, dword ptr [0x10e23b8]
0082df20: call 0xd963d0
0082df25: and eax, 1
0082df28: and edx, edi
0082df2a: or eax, edx
0082df2c: mov dword ptr [0x1d95908], 1
0082df36: jne 0x82df3e
0082df38: mov dword ptr [0x1d95908], edi
0082df3e: mov eax, esi
0082df40: mov dword ptr [0x1d9590c], eax
0082df45: imul eax, eax, 0x194
0082df4b: add eax, 0x11d5e08
0082df50: mov esi, eax
0082df52: je 0x82dfa6
0082df54: movaps xmm0, xmmword ptr [0xf338f0]
0082df5b: movss xmm1, dword ptr [0xec6e14]
0082df63: push 1
0082df65: lea eax, [esp + 0x14]
0082df69: push eax
0082df6a: mov eax, dword ptr [0x1d95908]
0082df6f: lea ecx, [esp + 0x14]
0082df73: push ecx
0082df74: lea edx, [esp + 0x2c]
0082df78: push edx
0082df79: push eax
0082df7a: mov edi, 0x1d958f0
0082df7f: mov eax, esi
0082df81: call 0x82d440
0082df86: movss xmm0, dword ptr [esi + 0x188]
0082df8e: mov eax, dword ptr [esp + 0xc]
0082df92: movss dword ptr [0x1d95900], xmm0
0082df9a: mov dword ptr [0x1d95904], esi
0082dfa0: pop edi
0082dfa1: pop esi
0082dfa2: mov esp, ebp
0082dfa4: pop ebp
0082dfa5: ret 
0082dfa6: mov eax, edi
0082dfa8: pop edi
0082dfa9: pop esi
0082dfaa: mov esp, ebp
0082dfac: pop ebp
0082dfad: ret 
0082dfae: add ah, cl
0082dfb0: mov eax, dword ptr [edi + 0x14]
0082dfb3: cmp dword ptr [eax], -1
0082dfb6: je 0x82dfd3
0082dfb8: call 0xb8e670
0082dfbd: call 0x82ded0
0082dfc2: mov eax, dword ptr [0x1d9590c]
0082dfc7: imul eax, eax, 0x194
0082dfcd: add eax, 0x11d5e08
0082dfd2: ret 
0082dfd3: mov edx, dword ptr [edi]
0082dfd5: mov eax, dword ptr [edx + 0x20]
0082dfd8: push ebx
0082dfd9: push ebp
0082dfda: push esi
0082dfdb: mov ecx, edi
0082dfdd: call eax
0082dfdf: mov ecx, dword ptr [eax + 0xb00]
0082dfe5: call 0xcb1840
0082dfea: mov esi, eax
0082dfec: call 0x4120b0
0082dff1: mov ebx, eax
0082dff3: mov eax, dword ptr [ebx + 0x170]
0082dff9: sub eax, 0
0082dffc: je 0x82e229
0082e002: dec eax
0082e003: mov edx, dword ptr [edi]
0082e005: mov ecx, edi
0082e007: je 0x82e167
0082e00d: dec eax
0082e00e: mov eax, dword ptr [edx + 0x20]
0082e011: call eax
0082e013: mov edx, dword ptr [eax + 0xb00]
0082e019: push 0
0082e01b: mov ecx, ebx
0082e01d: call 0x8f83b0
0082e022: call 0xe22fa0
0082e027: mov edx, dword ptr [edi]
0082e029: mov ebp, eax
0082e02b: mov eax, dword ptr [edx + 0x20]
0082e02e: mov ecx, edi
0082e030: call eax
0082e032: mov edx, dword ptr [eax + 0xb00]
0082e038: push 1
0082e03a: mov ecx, ebx
0082e03c: call 0x8f83b0
0082e041: call 0xe22fa0
0082e046: movss xmm0, dword ptr [0xec7978]
0082e04e: xorps xmm1, xmm1
0082e051: cvtsi2ss xmm1, ebp
0082e055: comiss xmm1, xmm0
0082e058: jbe 0x82e0b2
0082e05a: xorps xmm2, xmm2
0082e05d: cvtsi2ss xmm2, eax
0082e061: comiss xmm2, xmm0
0082e064: jbe 0x82e0ad
0082e066: lea eax, [esi - 0x3c]
0082e069: lea ecx, [eax*8]
0082e070: sub ecx, eax
0082e072: add ecx, ecx
0082e074: mov eax, 0xea0ea0eb
0082e079: imul ecx
0082e07b: add edx, ecx
0082e07d: sar edx, 5
0082e080: mov ecx, edx
0082e082: shr ecx, 0x1f
0082e085: lea eax, [edx + ecx + 0x4b]
0082e089: mov ebp, 0x46
0082e08e: cmp eax, 0x4b
0082e091: jge 0x82e09c
0082e093: mov esi, 0x4b
0082e098: push esi
0082e099: push ebp
0082e09a: jmp 0x82e10d
0082e09c: mov esi, eax
0082e09e: cmp eax, 0x59
0082e0a1: jl 0x82e0a8
0082e0a3: mov esi, 0x59
0082e0a8: push esi
0082e0a9: push 0x46
0082e0ab: jmp 0x82e10d
0082e0ad: comiss xmm1, xmm0
0082e0b0: ja 0x82e0ca
0082e0b2: xorps xmm1, xmm1
0082e0b5: cvtsi2ss xmm1, eax
0082e0b9: comiss xmm1, xmm0
0082e0bc: ja 0x82e0ca
0082e0be: mov ebp, 0x3c
0082e0c3: lea esi, [ebp + 0x19]
0082e0c6: push esi
0082e0c7: push ebp
0082e0c8: jmp 0x82e10d
0082e0ca: lea eax, [esi - 0x3c]
0082e0cd: mov ecx, eax
0082e0cf: shl ecx, 4
0082e0d2: sub ecx, eax
0082e0d4: mov eax, 0xea0ea0eb
0082e0d9: imul ecx
0082e0db: add edx, ecx
0082e0dd: sar edx, 5
0082e0e0: mov eax, edx
0082e0e2: shr eax, 0x1f
0082e0e5: lea eax, [edx + eax + 0x55]
0082e0e9: mov ebp, 0x50
0082e0ee: cmp eax, 0x55
0082e0f1: jge 0x82e0fc
0082e0f3: mov eax, 0x55
0082e0f8: mov esi, eax
0082e0fa: jmp 0x82e10a
0082e0fc: cmp eax, 0x64
0082e0ff: jge 0x82e105
0082e101: mov esi, eax
0082e103: jmp 0x82e10a
0082e105: mov esi, 0x64
0082e10a: push esi
0082e10b: push 0x50
0082e10d: call 0x7ec270
0082e112: mov edx, dword ptr [edi]
0082e114: mov ebx, eax
0082e116: mov eax, dword ptr [edx + 0x20]
0082e119: mov ecx, edi
0082e11b: call eax
0082e11d: mov ecx, dword ptr [eax + 0xb00]
0082e123: call 0x96bd60
0082e128: test eax, eax
0082e12a: je 0x82e2a0
0082e130: cmp dword ptr [0x11d6aa4], 0
0082e137: jg 0x82e2a0
0082e13d: movss xmm0, dword ptr [0xf30054]
0082e145: push ecx
0082e146: mov ecx, 0x10e23b8
0082e14b: movss dword ptr [esp], xmm0
0082e150: call 0x41c330
0082e155: test eax, eax
0082e157: je 0x82e2a0
0082e15d: mov ebx, 7
0082e162: jmp 0x82e2cb
0082e167: mov eax, dword ptr [edx + 0x20]
0082e16a: call eax
0082e16c: mov edx, dword ptr [eax + 0xb00]
0082e172: push 0
0082e174: mov ecx, ebx
0082e176: call 0x8f83b0
0082e17b: fld dword ptr [0xec7978]
0082e181: fcompi st(1)
0082e183: fstp st(0)
0082e185: jbe 0x82e1da
0082e187: lea eax, [esi - 0x3c]
0082e18a: mov ecx, eax
0082e18c: shl ecx, 4
0082e18f: sub ecx, eax
0082e191: mov eax, 0xea0ea0eb
0082e196: imul ecx
0082e198: add edx, ecx
0082e19a: sar edx, 5
0082e19d: mov ecx, edx
0082e19f: .byte 0xc1
0082e1a0: .byte 0xe9

3over4 data0xf30054 operand0x840adf candidate-start0x8409c0
008409c0: mov edx, dword ptr [0x12631fc]
008409c6: test ecx, ecx
008409c8: jne 0x8409d0
008409ca: mov edx, dword ptr [0x1263200]
008409d0: push ecx
008409d1: mov ecx, dword ptr [esp + 0x18]
008409d5: push ecx
008409d6: push edx
008409d7: mov edx, dword ptr [eax + 0x10]
008409da: push edx
008409db: mov edx, dword ptr [eax + 8]
008409de: sub esp, 8
008409e1: mov ecx, esp
008409e3: mov dword ptr [ecx], edx
008409e5: mov edx, dword ptr [eax + 0xc]
008409e8: mov dword ptr [ecx + 4], edx
008409eb: mov edx, dword ptr [eax]
008409ed: sub esp, 8
008409f0: mov ecx, esp
008409f2: mov dword ptr [ecx], edx
008409f4: mov edx, dword ptr [eax + 4]
008409f7: mov dword ptr [ecx + 4], edx
008409fa: mov ecx, dword ptr [esp + 0x2c]
008409fe: mov edx, dword ptr [eax + 0x14]
00840a01: mov eax, dword ptr [esp + 0x28]
00840a05: push ecx
00840a06: mov ecx, dword ptr [0x1ce716c]
00840a0c: push edx
00840a0d: mov edx, dword ptr [esp + 0x38]
00840a11: push eax
00840a12: push ecx
00840a13: mov ecx, dword ptr [esp + 0x34]
00840a17: call 0x819760
00840a1c: ret 0x14
00840a1f: int3 
00840a20: push ebp
00840a21: mov ebp, esp
00840a23: and esp, 0xfffffff0
00840a26: sub esp, 0xb4
00840a2c: push ebx
00840a2d: push esi
00840a2e: push edi
00840a2f: mov ecx, 0x8000
00840a34: mov esi, eax
00840a36: call 0x6c5450
00840a3b: test eax, eax
00840a3d: jne 0x840c2a
00840a43: mov eax, dword ptr [ebp + 0xc]
00840a46: push eax
00840a47: lea ecx, [esp + 0x5c]
00840a4b: call 0x7d0470
00840a50: movss xmm0, dword ptr [ebp + 0x10]
00840a55: push ecx
00840a56: mov ecx, dword ptr [0x1ce716c]
00840a5c: movss dword ptr [esp], xmm0
00840a61: push ecx
00840a62: lea edx, [esp + 0x48]
00840a66: lea ecx, [esp + 0x18]
00840a6a: mov dword ptr [esp + 0x88], 0
00840a75: call 0x8ae870
00840a7a: mov ecx, esi
00840a7c: call 0x6b95f0
00840a81: lea edx, [esp + 0x10]
00840a85: mov ecx, esi
00840a87: mov edi, eax
00840a89: call 0x6cb9f0
00840a8e: fstp dword ptr [esp + 0xc]
00840a92: call 0x80a320
00840a97: movss xmm0, dword ptr [0x146b618]
00840a9f: subss xmm0, dword ptr [0x126312c]
00840aa7: movss xmm1, dword ptr [0xec6e10]
00840aaf: comiss xmm1, xmm0
00840ab2: mov dword ptr [esp + 0x24], eax
00840ab6: ja 0x840c2a
00840abc: mov eax, dword ptr [esi + 0x4c]
00840abf: cmp eax, dword ptr [0x1dee624]
00840ac5: jne 0x840b2b
00840ac7: mov ecx, dword ptr [0x10e23b8]
00840acd: call 0xd963d0
00840ad2: mov ecx, eax
00840ad4: mov dword ptr [esp + 0x2c], edx
00840ad8: call 0xd96410
00840add: fld dword ptr [0xf30054]
00840ae3: fcompi st(1)
00840ae5: fstp st(0)
00840ae7: ja 0x840c2a
00840aed: lea ecx, [esp + 0x30]
00840af1: call 0x6ef360
00840af6: movss xmm0, dword ptr [esp + 0x10]
00840afc: subss xmm0, dword ptr [esp + 0x30]
00840b02: movss xmm1, dword ptr [esp + 0x18]
00840b08: subss xmm1, dword ptr [esp + 0x38]
00840b0e: mulss xmm0, xmm0
00840b12: mulss xmm1, xmm1
00840b16: addss xmm1, xmm0
00840b1a: movss xmm0, dword ptr [0x1263140]
00840b22: comiss xmm0, xmm1
00840b25: ja 0x840c2a
00840b2b: movss xmm1, dword ptr [0x1263144]
00840b33: movss xmm0, dword ptr [esp + 0xc]
00840b39: comiss xmm1, xmm0
00840b3c: .byte 0x0f
00840b3d: xchg eax, ebp

3over4 data0xf30054 operand0x852919 candidate-start0x8528b0
008528b0: push ebx
008528b1: push esi
008528b2: mov esi, edx
008528b4: mov ebx, ecx
008528b6: call 0x8527c0
008528bb: test eax, eax
008528bd: jne 0x8528c4
008528bf: pop esi
008528c0: pop ebx
008528c1: ret 4
008528c4: push edi
008528c5: mov edi, dword ptr [esi + 0x18]
008528c8: mov eax, dword ptr [edi + 4]
008528cb: mov ecx, dword ptr [eax]
008528cd: and ecx, 0xff000000
008528d3: cmp ecx, 0x6000000
008528d9: jne 0x8528f3
008528db: mov edx, dword ptr [esi + 0x14]
008528de: movss xmm0, dword ptr [0xec7978]
008528e6: comiss xmm0, dword ptr [edx + 0x14]
008528ea: jb 0x8528f3
008528ec: mov eax, 1
008528f1: jmp 0x8528f5
008528f3: xor eax, eax
008528f5: test byte ptr [edi + 0x2c], 1
008528f9: je 0x8528ff
008528fb: test eax, eax
008528fd: je 0x85297c
008528ff: mov ecx, esi
00852901: call 0x6b47f0
00852906: test eax, eax
00852908: jne 0x85297c
0085290a: mov ecx, esi
0085290c: call 0x7c6ac0
00852911: test eax, eax
00852913: je 0x85297c
00852915: movss xmm0, dword ptr [0xf30054]
0085291d: comiss xmm0, dword ptr [edi + 8]
00852921: ja 0x85297c
00852923: cmp dword ptr [esp + 0x10], 0
00852928: je 0x852956
0085292a: mov ecx, ebx
0085292c: call 0x6c4a20
00852931: cmp eax, esi
00852933: jne 0x852952
00852935: call 0x6a8af0
0085293a: test eax, eax
0085293c: je 0x85294b
0085293e: mov esi, dword ptr [ebx + 0x4c]
00852941: call 0x6a8af0
00852946: cmp esi, dword ptr [eax + 0x4c]
00852949: je 0x852952
0085294b: mov esi, 1
00852950: jmp 0x852966
00852952: xor esi, esi
00852954: jmp 0x852966
00852956: mov ecx, esi
00852958: call 0x6c4a20
0085295d: xor ecx, ecx
0085295f: cmp eax, ebx
00852961: sete cl
00852964: mov esi, ecx
00852966: call 0x6b1f50
0085296b: test eax, eax
0085296d: jne 0x852984
0085296f: test esi, esi
00852971: jne 0x852984
00852973: .byte 0xf6
00852974: add eax, 0x1c64478

3over4 data0xf30054 operand0x852b7b candidate-start0x852ae0
00852ae0: push ebp
00852ae1: mov ebp, esp
00852ae3: and esp, 0xfffffff0
00852ae6: sub esp, 0x28
00852ae9: push ebx
00852aea: push esi
00852aeb: mov ecx, edi
00852aed: call 0x880420
00852af2: mov esi, dword ptr [edi + 0x18]
00852af5: mov ebx, eax
00852af7: mov eax, dword ptr [esi + 4]
00852afa: mov ecx, dword ptr [eax]
00852afc: and ecx, 0xff000000
00852b02: xor eax, eax
00852b04: cmp ecx, 0x6000000
00852b0a: sete al
00852b0d: test byte ptr [esi + 0x2c], 1
00852b11: mov dword ptr [esp + 0x18], ebx
00852b15: je 0x852b23
00852b17: test eax, eax
00852b19: jne 0x852b23
00852b1b: xor eax, eax
00852b1d: pop esi
00852b1e: pop ebx
00852b1f: mov esp, ebp
00852b21: pop ebp
00852b22: ret 
00852b23: mov ecx, edi
00852b25: call 0x6b47f0
00852b2a: test eax, eax
00852b2c: jne 0x852b1b
00852b2e: mov eax, dword ptr [edi + 0x14]
00852b31: cmp dword ptr [eax], -1
00852b34: je 0x852b53
00852b36: movss xmm0, dword ptr [0x146b618]
00852b3e: subss xmm0, dword ptr [eax + 0xb8]
00852b46: movss xmm1, dword ptr [0xec704c]
00852b4e: comiss xmm1, xmm0
00852b51: ja 0x852b1b
00852b53: test byte ptr [eax + 0x1c], 0xc
00852b57: je 0x852b1b
00852b59: test ebx, ebx
00852b5b: jne 0x852b68
00852b5d: mov ecx, edi
00852b5f: call 0x7c6ac0
00852b64: test eax, eax
00852b66: je 0x852b1b
00852b68: push 0
00852b6a: xor edx, edx
00852b6c: mov ecx, edi
00852b6e: call 0x7c2a90
00852b73: test eax, eax
00852b75: jne 0x852b1b
00852b77: movss xmm0, dword ptr [0xf30054]
00852b7f: comiss xmm0, dword ptr [esi + 8]
00852b83: ja 0x852b1b
00852b85: mov ecx, edi
00852b87: call 0x6d3690
00852b8c: mov ecx, edi
00852b8e: mov esi, eax
00852b90: call 0x709790
00852b95: sub esi, eax
00852b97: movsx ecx, si
00852b9a: mov eax, ecx
00852b9c: sar eax, 0x1f
00852b9f: mov edx, ecx
00852ba1: neg edx
00852ba3: and edx, eax
00852ba5: not eax
00852ba7: and eax, ecx
00852ba9: or edx, eax
00852bab: cmp edx, 0x2000
00852bb1: jl 0x852b1b
00852bb7: mov eax, dword ptr [0x1ce716c]
00852bbc: test eax, eax
00852bbe: je 0x852be6
00852bc0: mov esi, dword ptr [eax]
00852bc2: test esi, esi
00852bc4: je 0x852be6
00852bc6: mov ecx, edi
00852bc8: call 0x6d3600
00852bcd: fstp dword ptr [esp + 0x14]
00852bd1: mov ecx, esi
00852bd3: call 0x6d3600
00852bd8: .byte 0xd9
00852bd9: inc esp
00852bda: .byte 0x24

3over4 data0xf30054 operand0x8585ea candidate-start0x8585ba
008585ba: and al, 0x20
008585bc: mov dword ptr [edi + 0x10], 1
008585c3: movss xmm0, dword ptr [ebx + 0x14]
008585c8: comiss xmm0, xmm2
008585cb: jbe 0x8585d0
008585cd: movaps xmm0, xmm2
008585d0: movss dword ptr [edi + 4], xmm0
008585d5: mov dword ptr [edi], ebx
008585d7: mov eax, dword ptr [esi + 0x20]
008585da: movss xmm0, dword ptr [eax + 0x2f0]
008585e2: divss xmm0, xmm1
008585e6: movss xmm1, dword ptr [0xf30054]
008585ee: comiss xmm1, xmm0
008585f1: ja 0x858600
008585f3: movss xmm1, dword ptr [0xec98d8]
008585fb: comiss xmm1, xmm0
008585fe: ja 0x858603
00858600: movaps xmm0, xmm1
00858603: movss dword ptr [edi + 8], xmm0
00858608: jmp 0x858642
0085860a: xorps xmm0, xmm0
0085860d: mov dword ptr [edi + 0x10], 0
00858614: movss dword ptr [edi + 4], xmm0
00858619: mov dword ptr [edi], ebx
0085861b: mov ecx, dword ptr [0x10e23b8]
00858621: call 0xd963d0
00858626: mov ecx, eax
00858628: call 0xd96410
0085862d: fmul dword ptr [0xf2e1a0]
00858633: fadd dword ptr [0xec6e14]
00858639: fsub dword ptr [0xec7978]
0085863f: fstp dword ptr [edi + 8]
00858642: mov ecx, esi
00858644: call 0x6b47f0
00858649: .byte 0xf7

3over4 data0xf30054 operand0x863671 candidate-start0x8633c0
008633c0: push ebp
008633c1: mov ebp, esp
008633c3: and esp, 0xfffffff0
008633c6: sub esp, 0x4b8
008633cc: push ebx
008633cd: mov ebx, dword ptr [ebp + 8]
008633d0: push esi
008633d1: mov edx, ebx
008633d3: mov ecx, edi
008633d5: call 0x7ff580
008633da: mov esi, eax
008633dc: lea eax, [esp + 0xc]
008633e0: push eax
008633e1: push esi
008633e2: push edi
008633e3: mov eax, ebx
008633e5: mov dword ptr [esp + 0x18], 0
008633ed: call 0x7ff090
008633f2: mov dword ptr [esp + 0x10], eax
008633f6: mov dword ptr [esp + 0x18], 0
008633fe: test eax, eax
00863400: jne 0x863423
00863402: push esi
00863403: mov edx, ebx
00863405: mov ecx, edi
00863407: call 0x815910
0086340c: test eax, eax
0086340e: jne 0x8634a6
00863414: mov eax, 1
00863419: mov dword ptr [esp + 0x10], eax
0086341d: mov dword ptr [esp + 0xc], eax
00863421: jmp 0x86342a
00863423: cmp dword ptr [esp + 0xc], 0
00863428: je 0x863441
0086342a: mov ecx, dword ptr [esp + 0xc]
0086342e: push esi
0086342f: push ecx
00863430: mov edx, ebx
00863432: mov ecx, edi
00863434: call 0x815cd0
00863439: test eax, eax
0086343b: jne 0x863441
0086343d: mov dword ptr [esp + 0xc], eax
00863441: cmp dword ptr [esp + 0x10], 0
00863446: je 0x8634a6
00863448: cmp dword ptr [esp + 0xc], 0
0086344d: jne 0x8634a6
0086344f: push esi
00863450: push 0
00863452: mov edx, ebx
00863454: mov ecx, edi
00863456: call 0x815cd0
0086345b: test eax, eax
0086345d: jne 0x8634a6
0086345f: push esi
00863460: mov edx, ebx
00863462: mov ecx, edi
00863464: mov dword ptr [esp + 0x1c], 1
0086346c: call 0x7d7240
00863471: test eax, eax
00863473: jne 0x8634a6
00863475: mov edx, edi
00863477: mov ecx, 0x1dc5878
0086347c: call 0x6ac130
00863481: test eax, eax
00863483: je 0x86349c
00863485: mov edx, 0x1dc5878
0086348a: mov ecx, edi
0086348c: call 0x6aa060
00863491: test eax, eax
00863493: je 0x86349c
00863495: mov dword ptr [eax + 0xc], 0
0086349c: xor eax, eax
0086349e: pop esi
0086349f: pop ebx
008634a0: mov esp, ebp
008634a2: pop ebp
008634a3: ret 8
008634a6: movaps xmm0, xmmword ptr [0x1dc40a0]
008634ad: movaps xmmword ptr [esp + 0x30], xmm0
008634b2: movss xmm0, dword ptr [0x1dc40dc]
008634ba: movss dword ptr [esp + 0x14], xmm0
008634c0: movss xmm0, dword ptr [0x1dc40e0]
008634c8: push 0x1f0
008634cd: xor dl, dl
008634cf: lea ecx, [esp + 0x54]
008634d3: movss dword ptr [esp + 0x20], xmm0
008634d9: call 0xd95820
008634de: mov edx, dword ptr [ebp + 0xc]
008634e1: push edx
008634e2: push ebx
008634e3: mov edx, edi
008634e5: lea ecx, [esp + 0x58]
008634e9: call 0x760300
008634ee: cmp dword ptr [esp + 0x10], 0
008634f3: je 0x8635fc
008634f9: cmp dword ptr [esp + 0xc], 0
008634fe: jne 0x8635fc
00863504: mov ecx, dword ptr [0x10e23b8]
0086350a: call 0xd963d0
0086350f: mov ecx, eax
00863511: call 0xd96410
00863516: fadd st(0), st(0)
00863518: movss xmm0, dword ptr [0xec6e14]
00863520: mov ecx, dword ptr [0x10e23b8]
00863526: fsub dword ptr [0xec6e14]
0086352c: movss dword ptr [esp + 0x24], xmm0
00863532: fstp dword ptr [esp + 0x20]
00863536: call 0xd963d0
0086353b: mov ecx, eax
0086353d: call 0xd96410
00863542: fadd st(0), st(0)
00863544: xorps xmm0, xmm0
00863547: mov ecx, dword ptr [0x10e23b8]
0086354d: fsub dword ptr [0xec6e14]
00863553: movss dword ptr [esp + 0x2c], xmm0
00863559: fstp dword ptr [esp + 0x28]
0086355d: call 0xd963d0
00863562: mov ecx, eax
00863564: call 0xd96410
00863569: fmul dword ptr [0xf34be8]
0086356f: movaps xmm2, xmmword ptr [esp + 0x20]
00863574: movaps xmm1, xmm2
00863577: fadd dword ptr [0xf2d33c]
0086357d: mulps xmm1, xmm2
00863580: movaps xmm0, xmm1
00863583: movhlps xmm0, xmm1
00863586: addps xmm0, xmm1
00863589: fstp dword ptr [esp + 0x10]
0086358d: movaps xmm1, xmm0
00863590: shufps xmm1, xmm0, 1
00863594: addps xmm1, xmm0
00863597: xorps xmm0, xmm0
0086359a: movaps xmmword ptr [esp + 0x20], xmm1
0086359f: movss xmm1, dword ptr [esp + 0x20]
008635a5: ucomiss xmm1, xmm0
008635a8: lahf 
008635a9: test ah, 0x44
008635ac: jp 0x8635b3
008635ae: movaps xmm0, xmm1
008635b1: jmp 0x8635dd
008635b3: movss xmm1, dword ptr [esp + 0x20]
008635b9: sqrtss xmm1, xmm1
008635bd: movaps xmmword ptr [esp + 0x20], xmm1
008635c2: movss xmm1, dword ptr [esp + 0x20]
008635c8: ucomiss xmm1, xmm0
008635cb: lahf 
008635cc: test ah, 0x44
008635cf: jnp 0x8635dd
008635d1: movss xmm0, dword ptr [0xec6e14]
008635d9: divss xmm0, xmm1
008635dd: mulss xmm0, dword ptr [esp + 0x10]
008635e3: or dword ptr [esp + 0x230], 8
008635eb: shufps xmm0, xmm0, 0
008635ef: mulps xmm0, xmm2
008635f2: addps xmm0, xmmword ptr [esp + 0x30]
008635f7: movaps xmmword ptr [esp + 0x30], xmm0
008635fc: mov eax, dword ptr [esp + 0x148]
00863603: test eax, eax
00863605: je 0x863622
00863607: cmp eax, 1
0086360a: je 0x863622
0086360c: mov ecx, edi
0086360e: call 0x6b4750
00863613: test eax, eax
00863615: je 0x863622
00863617: mov eax, dword ptr [edi + 0x20]
0086361a: mov esi, dword ptr [eax + 0x2f4]
00863620: jmp 0x86362b
00863622: mov ecx, edi
00863624: call 0x6b95f0
00863629: mov esi, eax
0086362b: push 0
0086362d: push esi
0086362e: lea eax, [esp + 0x58]
00863632: push eax
00863633: push ebx
00863634: mov edx, edi
00863636: lea ecx, [esp + 0x250]
0086363d: call 0x802910
00863642: movss xmm1, dword ptr [0x146b618]
0086364a: movss xmm0, dword ptr [esp + 0x1c]
00863650: mov ecx, dword ptr [esp + 0x240]
00863657: subss xmm0, xmm1
0086365b: movss dword ptr [esp + 0x10], xmm1
00863661: movaps xmm1, xmm0
00863664: movss xmm0, dword ptr [ecx + 0x68]
00863669: divss xmm0, xmm1
0086366d: movss xmm1, dword ptr [0xf30054]
00863675: comiss xmm1, xmm0
00863678: ja 0x86368a
0086367a: movss xmm2, dword ptr [0xecff24]
00863682: comiss xmm2, xmm0
00863685: movaps xmm1, xmm0
00863688: jbe 0x863695
0086368a: movss dword ptr [esp + 0x210], xmm1
00863693: jmp 0x86369e
00863695: movss dword ptr [esp + 0x210], xmm2
0086369e: lea edx, [esp + 0x180]
008636a5: push edx
008636a6: push esi
008636a7: lea eax, [esp + 0x248]
008636ae: push eax
008636af: lea ecx, [esp + 0x5c]
008636b3: push ecx
008636b4: mov edx, ebx
008636b6: mov ecx, edi
008636b8: call 0x7fe140
008636bd: mov esi, eax
008636bf: push esi
008636c0: lea edx, [esp + 0x244]
008636c7: push edx
008636c8: lea edx, [esp + 0x48]
008636cc: mov ecx, edi
008636ce: .byte 0xe8
008636cf: in eax, dx
008636d0: .byte 0xa8

3over4 data0xf30054 operand0x86bf44 candidate-start0x86bdf0
0086bdf0: mov eax, dword ptr [0x1ce716c]
0086bdf5: sub esp, 0x10
0086bdf8: push esi
0086bdf9: xor esi, esi
0086bdfb: cmp eax, esi
0086bdfd: je 0x86c243
0086be03: mov ecx, dword ptr [eax]
0086be05: cmp ecx, esi
0086be07: je 0x86c243
0086be0d: cmp dword ptr [ecx + 0x74], 1
0086be11: jne 0x86c243
0086be17: mov eax, dword ptr [ecx]
0086be19: mov edx, dword ptr [eax + 0x20]
0086be1c: push edi
0086be1d: call edx
0086be1f: mov edi, eax
0086be21: cmp edi, esi
0086be23: je 0x86c242
0086be29: push ebx
0086be2a: mov ebx, dword ptr [edi + 0x18]
0086be2d: test byte ptr [ebx + 0x2c], 1
0086be31: jne 0x86c241
0086be37: mov eax, dword ptr [ebx + 0xf0]
0086be3d: and eax, 0x40
0086be40: mov dword ptr [esp + 0x14], eax
0086be44: je 0x86be4e
0086be46: cmp esi, esi
0086be48: je 0x86c241
0086be4e: cmp dword ptr [ebx + 0x31c], esi
0086be54: jne 0x86c241
0086be5a: mov ecx, edi
0086be5c: call 0x6d3600
0086be61: fld dword ptr [0xf21000]
0086be67: fcompi st(1)
0086be69: fstp st(0)
0086be6b: ja 0x86c241
0086be71: mov ecx, edi
0086be73: call 0x401be0
0086be78: fstp dword ptr [esp + 0x10]
0086be7c: call 0x880380
0086be81: mov dword ptr [esp + 0x14], eax
0086be85: fild dword ptr [esp + 0x14]
0086be89: fmul dword ptr [esp + 0x10]
0086be8d: fldz 
0086be8f: fcompi st(1)
0086be91: fstp st(0)
0086be93: ja 0x86c241
0086be99: push ebp
0086be9a: mov ecx, edi
0086be9c: call 0x6f7b30
0086bea1: mov ebp, eax
0086bea3: cmp ebp, esi
0086bea5: je 0x86c240
0086beab: mov ecx, dword ptr [ebp + 0x18]
0086beae: test byte ptr [ecx + 0x2c], 1
0086beb2: jne 0x86c240
0086beb8: mov edx, edi
0086beba: mov ecx, ebp
0086bebc: call 0x709bb0
0086bec1: fld dword ptr [0xf34924]
0086bec7: fxch st(1)
0086bec9: fcompi st(1)
0086becb: fstp st(0)
0086becd: ja 0x86c240
0086bed3: movss xmm0, dword ptr [0x146b618]
0086bedb: movss xmm1, dword ptr [0xec7068]
0086bee3: movaps xmm2, xmm0
0086bee6: subss xmm2, dword ptr [ebx + 0x3e8]
0086beee: comiss xmm1, xmm2
0086bef1: movss dword ptr [esp + 0x18], xmm0
0086bef7: ja 0x86c240
0086befd: subss xmm0, dword ptr [ebx + 0x3ec]
0086bf05: comiss xmm1, xmm0
0086bf08: ja 0x86c240
0086bf0e: mov eax, dword ptr [ebp + 0x14]
0086bf11: cmp dword ptr [eax], -1
0086bf14: jne 0x86bf79
0086bf16: mov ecx, ebx
0086bf18: call 0x6a9d60
0086bf1d: test eax, eax
0086bf1f: je 0x86bf52
0086bf21: push esi
0086bf22: mov edx, ebp
0086bf24: mov ecx, edi
0086bf26: call 0x7ceca0
0086bf2b: fldz 
0086bf2d: fxch st(1)
0086bf2f: fcompi st(1)
0086bf31: fstp st(0)
0086bf33: jae 0x86c240
0086bf39: mov edx, edi
0086bf3b: mov ecx, ebp
0086bf3d: call 0x730b60
0086bf42: fld dword ptr [0xf30054]
0086bf48: fcompi st(1)
0086bf4a: fstp st(0)
0086bf4c: ja 0x86c240
0086bf52: mov edx, dword ptr [0x1ce716c]
0086bf58: movss xmm0, dword ptr [esp + 0x18]
0086bf5e: subss xmm0, dword ptr [edx + 0x138]
0086bf66: movss xmm1, dword ptr [0xec6fd4]
0086bf6e: comiss xmm1, xmm0
0086bf71: ja 0x86c240
0086bf77: jmp 0x86bf83
0086bf79: test byte ptr [eax + 0x1c], 2
0086bf7d: je 0x86c240
0086bf83: cmp dword ptr [0x1d958ec], esi
0086bf89: jne 0x86c240
0086bf8f: call 0x6c5400
0086bf94: test eax, eax
0086bf96: je 0x86bfaa
0086bf98: mov ecx, 0x200
0086bf9d: call 0x6c5450
0086bfa2: test eax, eax

3over4 data0xf30054 operand0x86dd92 candidate-start0x86d7d0
0086d7d0: sub esp, 0x40
0086d7d3: push ebx
0086d7d4: push ebp
0086d7d5: push esi
0086d7d6: mov esi, ecx
0086d7d8: mov ebx, dword ptr [esi + 0x14]
0086d7db: mov ebp, dword ptr [esi + 0x18]
0086d7de: push edi
0086d7df: mov edi, dword ptr [ebx + 0x20]
0086d7e2: mov ecx, edi
0086d7e4: mov dword ptr [esp + 0x38], esi
0086d7e8: mov dword ptr [esp + 0x2c], ebp
0086d7ec: mov dword ptr [esp + 0x24], ebx
0086d7f0: call 0x6c3400
0086d7f5: test eax, eax
0086d7f7: jne 0x86de72
0086d7fd: mov ecx, edi
0086d7ff: call 0x6f5e50
0086d804: test eax, eax
0086d806: jne 0x86de72
0086d80c: cmp edi, 0x46
0086d80f: jne 0x86dd87
0086d815: mov eax, dword ptr [esi]
0086d817: mov edx, dword ptr [eax + 0x20]
0086d81a: mov ecx, esi
0086d81c: call edx
0086d81e: mov edi, eax
0086d820: mov dword ptr [esp + 0x28], edi
0086d824: call 0x4120b0
0086d829: cmp dword ptr [eax + 0x34], 0
0086d82d: je 0x86dd87
0086d833: mov ecx, dword ptr [eax + 0x2c]
0086d836: lea ecx, [ecx + ecx*2]
0086d839: cmp dword ptr [eax + ecx*4 + 0x14], 0xa
0086d83e: jne 0x86dd87
0086d844: mov ebx, dword ptr [edi + 0x14]
0086d847: cmp dword ptr [ebx + 0x20], 0x46
0086d84b: jne 0x86dd83
0086d851: push edi
0086d852: call 0x8048e0
0086d857: mov ebp, eax
0086d859: mov dword ptr [esp + 0x18], ebp
0086d85d: test ebp, ebp
0086d85f: je 0x86d8e9
0086d865: mov eax, dword ptr [ebp + 0x18]
0086d868: test byte ptr [eax + 0x2c], 1
0086d86c: je 0x86d88a
0086d86e: mov edx, dword ptr [eax + 4]
0086d871: mov eax, dword ptr [edx]
0086d873: and eax, 0xff000000
0086d878: cmp eax, 0x2000000
0086d87d: je 0x86d88a
0086d87f: mov ecx, ebp
0086d881: call 0x7d4a80
0086d886: test eax, eax
0086d888: je 0x86d8dd
0086d88a: mov eax, dword ptr [edi + 0x18]
0086d88d: mov ecx, dword ptr [eax + 0xf0]
0086d893: and ecx, 0x40
0086d896: mov dword ptr [esp + 0x30], ecx
0086d89a: mov eax, 0
0086d89f: je 0x86d8e9
0086d8a1: test eax, eax
0086d8a3: jne 0x86d8e9
0086d8a5: movss xmm0, dword ptr [ebx + 0x14]
0086d8aa: comiss xmm0, dword ptr [0xec74bc]
0086d8b1: jb 0x86d8e9
0086d8b3: mov ebx, dword ptr [ebx + 0x18]
0086d8b6: mov edx, ebp
0086d8b8: mov ecx, edi
0086d8ba: call 0x709b50
0086d8bf: sub ebx, eax
0086d8c1: movsx ecx, bx
0086d8c4: mov eax, ecx
0086d8c6: sar eax, 0x1f
0086d8c9: mov edx, ecx
0086d8cb: neg edx
0086d8cd: and edx, eax
0086d8cf: not eax
0086d8d1: and eax, ecx
0086d8d3: or edx, eax
0086d8d5: cmp edx, 0x31c7
0086d8db: jle 0x86d8e9
0086d8dd: mov dword ptr [esp + 0x18], 0
0086d8e5: mov ebp, dword ptr [esp + 0x18]
0086d8e9: xor ebx, ebx
0086d8eb: mov dword ptr [esp + 0x10], ebx
0086d8ef: cmp dword ptr [0x1d958ec], ebx
0086d8f5: jne 0x86dd7f
0086d8fb: call 0x6c5400
0086d900: test eax, eax
0086d902: je 0x86d916
0086d904: mov ecx, 0x200
0086d909: call 0x6c5450
0086d90e: test eax, eax
0086d910: jne 0x86dd7f
0086d916: mov ecx, edi
0086d918: call 0x6b47f0
0086d91d: test eax, eax
0086d91f: je 0x86dd7f
0086d925: mov ecx, edi
0086d927: call 0x88fc40
0086d92c: fst dword ptr [esp + 0x1c]
0086d930: fld dword ptr [0xf33d0c]
0086d936: fcompi st(1)
0086d938: fstp st(0)
0086d93a: ja 0x86dd7f
0086d940: test ebp, ebp
0086d942: je 0x86d99f
0086d944: mov ecx, edi
0086d946: call 0x401be0
0086d94b: fstp dword ptr [esp + 0x20]
0086d94f: call 0x880380
0086d954: mov dword ptr [esp + 0x30], eax
0086d958: fild dword ptr [esp + 0x30]
0086d95c: fmul dword ptr [esp + 0x20]
0086d960: fldz 
0086d962: fxch st(1)
0086d964: fcompi st(1)
0086d966: fstp st(0)
0086d968: jbe 0x86d97f
0086d96a: mov eax, dword ptr [ebp + 0x14]
0086d96d: test byte ptr [eax + 0x1c], 2
0086d971: je 0x86d97f
0086d973: mov dword ptr [esp + 0x10], 1
0086d97b: mov ebx, dword ptr [esp + 0x10]
0086d97f: movss xmm0, dword ptr [esp + 0x1c]
0086d985: comiss xmm0, dword ptr [0xf2bd38]
0086d98c: jbe 0x86d99f
0086d98e: cmp ebx, 2
0086d991: je 0x86d99f
0086d993: cmp ebx, 4
0086d996: je 0x86d99f
0086d998: cmp ebx, 1
0086d99b: je 0x86d99f
0086d99d: xor ebp, ebp
0086d99f: mov ecx, dword ptr [edi + 0x18]
0086d9a2: mov edx, dword ptr [ecx + 4]
0086d9a5: mov eax, dword ptr [edx]
0086d9a7: and eax, 0xff000000
0086d9ac: mov dword ptr [esp + 0x30], ecx
0086d9b0: cmp eax, 0x24000000
0086d9b5: jne 0x86d9c5
0086d9b7: call 0x6b0d30
0086d9bc: mov esi, dword ptr [eax + 0x3c]
0086d9bf: mov dword ptr [esp + 0x14], esi
0086d9c3: jmp 0x86da01
0086d9c5: mov ecx, edi
0086d9c7: call 0x6b47d0
0086d9cc: mov dword ptr [esp + 0x20], eax
0086d9d0: fild dword ptr [esp + 0x20]
0086d9d4: mov ecx, edi
0086d9d6: fstp dword ptr [esp + 0x20]
0086d9da: call 0x401bd0
0086d9df: fmul dword ptr [esp + 0x20]
0086d9e3: mov dword ptr [esp + 0x14], 1
0086d9eb: fldz 
0086d9ed: fxch st(1)
0086d9ef: fcompi st(1)
0086d9f1: fstp st(0)
0086d9f3: ja 0x86d9fd
0086d9f5: mov dword ptr [esp + 0x14], 0
0086d9fd: mov esi, dword ptr [esp + 0x14]
0086da01: xor ebx, ebx
0086da03: mov dword ptr [esp + 0x1c], ebx
0086da07: cmp ebp, ebx
0086da09: jne 0x86da56
0086da0b: cmp dword ptr [esp + 0x10], 2
0086da10: je 0x86da56
0086da12: mov eax, edi
0086da14: call 0x7cd880
0086da19: test eax, eax
0086da1b: je 0x86da56
0086da1d: mov ecx, dword ptr [esp + 0x30]
0086da21: call 0x6a9d30
0086da26: mov ebx, esi
0086da28: test eax, eax
0086da2a: je 0x86da3e
0086da2c: neg ebx
0086da2e: sbb ebx, ebx
0086da30: and ebx, 0x5556
0086da36: add ebx, 0xffffd555
0086da3c: jmp 0x86da4e
0086da3e: neg ebx
0086da40: sbb ebx, ebx
0086da42: and ebx, 0x305c
0086da48: add ebx, 0xffffe7d2
0086da4e: mov dword ptr [esp + 0x1c], 1
0086da56: mov ecx, dword ptr [esp + 0x10]
0086da5a: push ebx
0086da5b: push 0
0086da5d: push ecx
0086da5e: push 0
0086da60: push esi
0086da61: push ebp
0086da62: push edi
0086da63: call 0x804170
0086da68: mov dword ptr [esp + 0x20], eax
0086da6c: test eax, eax
0086da6e: jne 0x86db26
0086da74: test ebp, ebp
0086da76: je 0x86dd7b
0086da7c: cmp dword ptr [esp + 0x10], 4
0086da81: je 0x86dd7b
0086da87: mov ebp, dword ptr [esp + 0x30]
0086da8b: mov edx, dword ptr [ebp + 4]
0086da8e: mov eax, dword ptr [edx]
0086da90: and eax, 0xff000000
0086da95: cmp eax, 0x24000000
0086da9a: jne 0x86daad
0086da9c: mov ecx, ebp
0086da9e: call 0x6b0d30
0086daa3: cmp dword ptr [eax + 0x48], 0x10
0086daa7: jne 0x86dd7b
0086daad: cmp dword ptr [esp + 0x10], 2
0086dab2: je 0x86db00
0086dab4: mov eax, edi
0086dab6: call 0x7cd880
0086dabb: test eax, eax
0086dabd: je 0x86db00
0086dabf: mov ecx, ebp
0086dac1: call 0x6a9d30
0086dac6: mov ebx, esi
0086dac8: test eax, eax
0086daca: je 0x86dae6
0086dacc: neg ebx
0086dace: sbb ebx, ebx
0086dad0: and ebx, 0x5556
0086dad6: add ebx, 0xffffd555
0086dadc: mov dword ptr [esp + 0x1c], 1
0086dae4: jmp 0x86db08
0086dae6: neg ebx
0086dae8: sbb ebx, ebx
0086daea: and ebx, 0x305c
0086daf0: add ebx, 0xffffe7d2
0086daf6: mov dword ptr [esp + 0x1c], 1
0086dafe: jmp 0x86db08
0086db00: mov dword ptr [esp + 0x1c], 0
0086db08: mov ecx, dword ptr [esp + 0x10]
0086db0c: push ebx
0086db0d: xor ebp, ebp
0086db0f: push ebp
0086db10: push ecx
0086db11: push ebp
0086db12: push esi
0086db13: push ebp
0086db14: push edi
0086db15: call 0x804170
0086db1a: mov dword ptr [esp + 0x20], eax
0086db1e: test eax, eax
0086db20: je 0x86dd7b
0086db26: mov esi, dword ptr [edi + 0x18]
0086db29: and dword ptr [esi + 0x2c], 0xfffffffe
0086db2d: mov ecx, edi
0086db2f: mov dword ptr [0x1d958ec], 1
0086db39: mov dword ptr [0x1d958e4], 0
0086db43: mov dword ptr [esp + 0x24], esi
0086db47: call 0x405150
0086db4c: push 0
0086db4e: mov edx, 0xf326b0
0086db53: mov ecx, edi
0086db55: call 0x404db0
0086db5a: or dword ptr [esi + 0x2c], 1
0086db5e: xorps xmm0, xmm0
0086db61: xor eax, eax
0086db63: mov ecx, esi
0086db65: mov dword ptr [0x1d958c0], eax
0086db6a: mov dword ptr [0x1d958c4], eax
0086db6f: mov dword ptr [0x1d958c8], eax
0086db74: mov dword ptr [0x1d958cc], eax
0086db79: mov dword ptr [0x1d958d0], eax
0086db7e: mov dword ptr [0x1d958d4], eax
0086db83: mov dword ptr [0x1d958d8], eax
0086db88: movss dword ptr [0x1d958dc], xmm0
0086db90: call 0x6b0d30
0086db95: mov esi, eax
0086db97: push 0x8c
0086db9c: xor dl, dl
0086db9e: mov ecx, esi
0086dba0: call 0xd95820
0086dba5: mov eax, dword ptr [esp + 0x1c]
0086dba9: mov edx, dword ptr [esp + 0x14]
0086dbad: shl eax, 7
0086dbb0: xor eax, dword ptr [esi + 0x88]
0086dbb6: mov dword ptr [esi + 0x3c], edx
0086dbb9: and eax, 0x80
0086dbbe: xor dword ptr [esi + 0x88], eax
0086dbc4: movss xmm0, dword ptr [0x146b618]
0086dbcc: xor eax, eax
0086dbce: movss dword ptr [esi + 0x6c], xmm0
0086dbd3: movss xmm0, dword ptr [0x146b618]
0086dbdb: mov dword ptr [esi + 0x54], eax
0086dbde: mov dword ptr [esi + 0x58], eax
0086dbe1: mov dword ptr [esi + 0x80], eax
0086dbe7: mov eax, dword ptr [esp + 0x10]
0086dbeb: movss dword ptr [esi + 0x70], xmm0
0086dbf0: mov dword ptr [esi + 0x50], eax
0086dbf3: mov eax, dword ptr [edi + 0x40]
0086dbf6: mov ecx, 0x12c
0086dbfb: mov word ptr [eax + 0x120], cx
0086dc02: mov edx, 1
0086dc07: mov ecx, edi
0086dc09: mov dword ptr [eax + 0x168], 0x8656c0
0086dc13: call 0x405110
0086dc18: test ebp, ebp
0086dc1a: jne 0x86dc36
0086dc1c: mov edx, dword ptr [esp + 0x20]
0086dc20: test byte ptr [edx + 0x24], 0xc
0086dc24: je 0x86dcdb
0086dc2a: mov ecx, edi
0086dc2c: call 0x7cd910
0086dc31: jmp 0x86dcdb
0086dc36: mov eax, dword ptr [edi + 0x40]
0086dc39: mov ecx, 0x7d0
0086dc3e: mov word ptr [eax + 0x120], cx
0086dc45: mov edx, 1
0086dc4a: mov ecx, ebp
0086dc4c: call 0x405110
0086dc51: mov eax, dword ptr [ebp + 0x18]
0086dc54: and dword ptr [eax + 0x2c], 0xfffffffe
0086dc58: mov ecx, ebp
0086dc5a: mov dword ptr [esp + 0x30], eax
0086dc5e: call 0x405150
0086dc63: push 0
0086dc65: mov edx, 0xf32760
0086dc6a: mov ecx, ebp
0086dc6c: call 0x404db0
0086dc71: mov ecx, dword ptr [esp + 0x30]
0086dc75: or dword ptr [ecx + 0x2c], 1
0086dc79: call 0x6b0d30
0086dc7e: push 0x8c
0086dc83: xor dl, dl
0086dc85: mov ecx, eax
0086dc87: mov dword ptr [esp + 0x34], eax
0086dc8b: call 0xd95820
0086dc90: mov eax, dword ptr [esp + 0x30]
0086dc94: mov edx, dword ptr [esp + 0x14]
0086dc98: mov ecx, dword ptr [esp + 0x10]
0086dc9c: mov dword ptr [eax + 0x3c], edx
0086dc9f: mov dword ptr [eax + 0x50], ecx
0086dca2: movss xmm0, dword ptr [0x146b618]
0086dcaa: subss xmm0, dword ptr [0xec6e10]
0086dcb2: movss dword ptr [eax + 0x84], xmm0
0086dcba: mov edx, dword ptr [ebp + 0x40]
0086dcbd: mov eax, 0x7d0
0086dcc2: mov word ptr [edx + 0x120], ax
0086dcc9: mov ecx, dword ptr [edi + 0x18]
0086dccc: mov dword ptr [ecx + 0x14c], ebp
0086dcd2: mov edx, dword ptr [ebp + 0x18]
0086dcd5: mov dword ptr [edx + 0x14c], edi
0086dcdb: mov eax, dword ptr [esp + 0x20]
0086dcdf: test byte ptr [eax + 0x24], 2
0086dce3: mov ecx, dword ptr [esp + 0x24]
0086dce7: je 0x86dcfc
0086dce9: call 0x6a9d30
0086dcee: neg eax
0086dcf0: sbb eax, eax
0086dcf2: and eax, 3
0086dcf5: inc eax
0086dcf6: mov dword ptr [esp + 0x1c], eax
0086dcfa: jmp 0x86dd0c
0086dcfc: call 0x6a9d30
0086dd01: neg eax
0086dd03: sbb eax, eax
0086dd05: and eax, 3
0086dd08: mov dword ptr [esp + 0x1c], eax
0086dd0c: push 1
0086dd0e: push eax
0086dd0f: push ebp
0086dd10: call 0x803dc0
0086dd15: test ebp, ebp
0086dd17: je 0x86dd22
0086dd19: mov edx, ebp
0086dd1b: mov ecx, edi
0086dd1d: call 0x737850
0086dd22: mov ecx, dword ptr [esp + 0x24]
0086dd26: mov edx, dword ptr [ecx + 4]
0086dd29: movzx eax, byte ptr [edx + 3]
0086dd2d: cmp eax, 0x24
0086dd30: je 0x86dd37
0086dd32: cmp eax, 0x25
0086dd35: jne 0x86dd5c
0086dd37: mov eax, dword ptr [esp + 0x1c]
0086dd3b: cmp eax, dword ptr [esi + 0x48]
0086dd3e: jne 0x86dd5c
0086dd40: xorps xmm0, xmm0
0086dd43: push ecx
0086dd44: mov ecx, dword ptr [esp + 0x18]
0086dd48: movss dword ptr [esp], xmm0
0086dd4d: push ebx
0086dd4e: push ecx
0086dd4f: mov edx, edi
0086dd51: mov edi, dword ptr [esp + 0x2c]
0086dd55: push ebp
0086dd56: push edx
0086dd57: call 0x803f70
0086dd5c: mov edx, dword ptr [esp + 0x18]
0086dd60: mov ecx, dword ptr [esp + 0x28]
0086dd64: call 0x6c71a0
0086dd69: mov eax, dword ptr [esp + 0x2c]
0086dd6d: mov dword ptr [eax], 0xffffffff
0086dd73: pop edi
0086dd74: pop esi
0086dd75: pop ebp
0086dd76: pop ebx
0086dd77: add esp, 0x40
0086dd7a: ret 
0086dd7b: mov esi, dword ptr [esp + 0x38]
0086dd7f: mov ebp, dword ptr [esp + 0x2c]
0086dd83: mov ebx, dword ptr [esp + 0x24]
0086dd87: mov ecx, ebp
0086dd89: call 0x7acb60
0086dd8e: movss xmm0, dword ptr [0xf30054]
0086dd96: comiss xmm0, dword ptr [ebx + 0x14]
0086dd9a: jbe 0x86ddf7
0086dd9c: cmp dword ptr [eax + 4], 0
0086dda0: jne 0x86ddb6
0086dda2: mov dword ptr [eax + 4], 1
0086dda9: movss xmm0, dword ptr [0x146b618]
0086ddb1: movss dword ptr [eax + 8], xmm0
0086ddb6: cmp dword ptr [ebx], -1
0086ddb9: je 0x86ddc1
0086ddbb: cmp dword ptr [ebx + 8], 0
0086ddbf: je 0x86dddd
0086ddc1: cmp dword ptr [eax + 4], 0
0086ddc5: je 0x86ddfe
0086ddc7: movss xmm0, dword ptr [0x146b618]
0086ddcf: subss xmm0, dword ptr [eax + 8]
0086ddd4: comiss xmm0, dword ptr [0xf2e1a0]
0086dddb: jbe 0x86ddfe
0086dddd: and dword ptr [ebp + 0x2c], 0xfffffffe
0086dde1: push 0
0086dde3: mov edx, 0xf2f520
0086dde8: mov ecx, esi
0086ddea: call 0x404db0
0086ddef: pop edi
0086ddf0: pop esi
0086ddf1: pop ebp

3over4 data0xf32454 operand0x801300 candidate-start0x800f10
00800f10: push ebp
00800f11: mov ebp, esp
00800f13: and esp, 0xfffffff0
00800f16: sub esp, 0xc4
00800f1c: push ebx
00800f1d: mov ebx, dword ptr [ebp + 8]
00800f20: push esi
00800f21: push edi
00800f22: lea edx, [esp + 0x70]
00800f26: mov ecx, ebx
00800f28: call 0x88fc90
00800f2d: lea edx, [esp + 0x50]
00800f31: mov ecx, ebx
00800f33: call 0x401bb0
00800f38: movss xmm0, dword ptr [0xf2e1a0]
00800f40: comiss xmm0, dword ptr [ebp + 0xc]
00800f44: mov dword ptr [esp + 0x14], 1
00800f4c: ja 0x800f7c
00800f4e: movaps xmm0, xmmword ptr [esp + 0x70]
00800f53: subps xmm0, xmmword ptr [esp + 0x50]
00800f58: call 0x6cb7c0
00800f5d: sub eax, dword ptr [ebp + 0x10]
00800f60: movsx ecx, ax
00800f63: mov eax, ecx
00800f65: sar eax, 0x1f
00800f68: mov edx, ecx
00800f6a: neg edx
00800f6c: and edx, eax
00800f6e: not eax
00800f70: and eax, ecx
00800f72: or edx, eax
00800f74: cmp edx, 0x238e
00800f7a: jg 0x800f84
00800f7c: mov dword ptr [esp + 0x14], 0
00800f84: mov eax, dword ptr [ebx + 0x4c]
00800f87: xorps xmm0, xmm0
00800f8a: mov dword ptr [esp + 0x20], 0
00800f92: movss dword ptr [esp + 0x1c], xmm0
00800f98: test eax, eax
00800f9a: je 0x800fa1
00800f9c: lea ecx, [eax - 0x78]
00800f9f: jmp 0x800fa3
00800fa1: xor ecx, ecx
00800fa3: mov ecx, dword ptr [ecx + 0x7c]
00800fa6: test eax, eax
00800fa8: je 0x800faf
00800faa: add eax, -0x78
00800fad: jmp 0x800fb1
00800faf: xor eax, eax
00800fb1: mov esi, ecx
00800fb3: sub esi, eax
00800fb5: neg esi
00800fb7: sbb esi, esi
00800fb9: and esi, ecx
00800fbb: je 0x80137b
00800fc1: mov edi, dword ptr [esi + 0x18]
00800fc4: cmp ebx, esi
00800fc6: je 0x801362
00800fcc: test byte ptr [esi + 0x60], 3
00800fd0: jne 0x801362
00800fd6: mov eax, dword ptr [ebx + 0x14]
00800fd9: cmp dword ptr [eax], -1
00800fdc: je 0x800fe4
00800fde: cmp dword ptr [eax + 8], 0
00800fe2: je 0x801037
00800fe4: movss xmm0, dword ptr [edi + 0xfc]
00800fec: addss xmm0, dword ptr [0xec6e10]
00800ff4: movss xmm1, dword ptr [0x146b618]
00800ffc: comiss xmm1, xmm0
00800fff: jbe 0x801024
00801001: movss xmm0, dword ptr [0xec6f84]
00801009: mov eax, dword ptr [edi + 0xf4]
0080100f: and dword ptr [edi + 0xf0], 0xfffffffe
00801016: movss dword ptr [edi + 0xfc], xmm0
0080101e: mov dword ptr [edi + 0xf4], eax
00801024: mov eax, dword ptr [edi + 0xf0]
0080102a: and eax, 1
0080102d: xor ecx, ecx
0080102f: or eax, ecx
00801031: jne 0x801362
00801037: test byte ptr [edi + 0x2c], 1
0080103b: je 0x801088
0080103d: mov ecx, dword ptr [edi + 0xf4]
00801043: and ecx, 8
00801046: xor eax, eax
00801048: or eax, ecx
0080104a: jne 0x801088
0080104c: call 0x4120b0
00801051: cmp dword ptr [eax + 0x34], 0
00801055: je 0x801075
00801057: mov ecx, dword ptr [eax + 0x2c]
0080105a: lea ecx, [ecx + ecx*2]
0080105d: cmp dword ptr [eax + ecx*4 + 0x14], 0xe
00801062: jne 0x801075
00801064: mov edx, dword ptr [edi + 4]
00801067: movzx eax, byte ptr [edx + 3]
0080106b: cmp eax, 1
0080106e: je 0x801088
00801070: cmp eax, 0x12
00801073: je 0x801088
00801075: mov edi, dword ptr [edi + 0xf4]
0080107b: and edi, 0x18
0080107e: xor eax, eax
00801080: or eax, edi
00801082: je 0x801362
00801088: mov ecx, ebx
0080108a: call 0x760440
0080108f: test eax, eax
00801091: jne 0x8010c8
00801093: push esi
00801094: mov edx, ebx
00801096: lea ecx, [esp + 0x94]
0080109d: call 0x7779d0
008010a2: call 0x880380
008010a7: movss xmm1, dword ptr [0xf2bf70]
008010af: xorps xmm0, xmm0
008010b2: cvtsi2ss xmm0, eax
008010b6: mulss xmm0, dword ptr [esp + 0x98]
008010bf: comiss xmm1, xmm0
008010c2: ja 0x801362
008010c8: push esi
008010c9: push ebx
008010ca: call 0x7c91f0
008010cf: test eax, eax
008010d1: je 0x801362
008010d7: push 0
008010d9: push esi
008010da: call 0x7d6be0
008010df: test eax, eax
008010e1: je 0x801362
008010e7: cmp dword ptr [esp + 0x14], 0
008010ec: je 0x801131
008010ee: lea edx, [esp + 0xb0]
008010f5: mov ecx, esi
008010f7: call 0x401bb0
008010fc: movaps xmm0, xmmword ptr [esp + 0xb0]
00801104: subps xmm0, xmmword ptr [esp + 0x50]
00801109: call 0x6cb7c0
0080110e: sub eax, dword ptr [ebp + 0x10]
00801111: movsx ecx, ax
00801114: mov eax, ecx
00801116: sar eax, 0x1f
00801119: mov edx, ecx
0080111b: neg edx
0080111d: and edx, eax
0080111f: not eax
00801121: and eax, ecx
00801123: or edx, eax
00801125: cmp edx, 0x238e
0080112b: jg 0x801362
00801131: push esi
00801132: call 0x7af7c0
00801137: test eax, eax
00801139: jne 0x801161
0080113b: mov eax, dword ptr [esi + 0x20]
0080113e: movss xmm0, dword ptr [eax + 0x2f0]
00801146: comiss xmm0, dword ptr [0xf1be14]
0080114d: ja 0x801161
0080114f: lea edx, [esp + 0x60]
00801153: mov ecx, esi
00801155: mov edi, 1
0080115a: call 0x401bb0
0080115f: jmp 0x80117c
00801161: movss xmm0, dword ptr [0xf2e1a0]
00801169: push ecx
0080116a: mov edx, esi
0080116c: lea ecx, [esp + 0x64]
00801170: xor edi, edi
00801172: movss dword ptr [esp], xmm0
00801177: call 0x8affb0
0080117c: movaps xmm0, xmmword ptr [esp + 0x70]
00801181: subps xmm0, xmmword ptr [esp + 0x60]
00801186: movaps xmmword ptr [esp + 0x80], xmm0
0080118e: mulps xmm0, xmm0
00801191: movaps xmm1, xmm0
00801194: movhlps xmm0, xmm1
00801197: addps xmm0, xmm1
0080119a: movaps xmm1, xmm0
0080119d: shufps xmm1, xmm0, 1
008011a1: addps xmm1, xmm0
008011a4: movaps xmmword ptr [esp + 0x30], xmm1
008011a9: movss xmm0, dword ptr [esp + 0x30]
008011af: push ecx
008011b0: movss dword ptr [esp], xmm0
008011b5: test edi, edi
008011b7: je 0x80121d
008011b9: mov edx, 3
008011be: mov ecx, 0xf3241c
008011c3: call 0x404870
008011c8: fstp dword ptr [esp + 0x2c]
008011cc: movss xmm0, dword ptr [0xf2fdfc]
008011d4: push ecx
008011d5: mov ecx, esi
008011d7: movss dword ptr [esp], xmm0
008011dc: call 0x6b95f0
008011e1: lea edx, [esp + 0xa4]
008011e8: mov ecx, eax
008011ea: call 0x7068c0
008011ef: movdqa xmm0, xmmword ptr [0xf337f0]
008011f7: lea edx, [esp + 0x80]
008011fe: lea ecx, [esp + 0xa0]
00801205: movdqa xmmword ptr [esp + 0x30], xmm0
0080120b: call 0x741ce0
00801210: push ecx
00801211: mov edx, 2
00801216: mov ecx, 0xf322b0
0080121b: jmp 0x80126c
0080121d: mov edx, 6
00801222: mov ecx, 0xf31ee0
00801227: call 0x404870
0080122c: fstp dword ptr [esp + 0x2c]
00801230: mov edx, esi
00801232: lea ecx, [esp + 0xc0]
00801239: call 0x88f9b0
0080123e: fstp st(0)
00801240: movdqa xmm0, xmmword ptr [0xf337f0]
00801248: lea edx, [esp + 0x80]
0080124f: lea ecx, [esp + 0xc0]
00801256: movdqa xmmword ptr [esp + 0x30], xmm0
0080125c: call 0x741ce0
00801261: push ecx
00801262: mov edx, 3
00801267: mov ecx, 0xf32438
0080126c: xorps xmm0, xmm0
0080126f: cvtsi2ss xmm0, eax
00801273: mulss xmm0, dword ptr [0xec90b0]
0080127b: shufps xmm0, xmm0, 0
0080127f: andps xmm0, xmmword ptr [esp + 0x34]
00801284: movaps xmmword ptr [esp + 0x34], xmm0
00801289: movss xmm0, dword ptr [esp + 0x34]
0080128f: movss dword ptr [esp], xmm0
00801294: call 0x404870
00801299: fstp dword ptr [esp + 0x24]
0080129d: mov ecx, esi
0080129f: call 0x6b5300
008012a4: mov ecx, eax
008012a6: call 0x6d6860
008012ab: fstp dword ptr [esp + 0x18]
008012af: mov ecx, esi
008012b1: call 0x6b5300
008012b6: mov ecx, eax
008012b8: call 0x6d63f0
008012bd: fstp dword ptr [esp + 0x28]
008012c1: mov ecx, esi
008012c3: call 0x6b5300
008012c8: mov ecx, eax
008012ca: call 0x6d6380
008012cf: fst dword ptr [esp + 0x4c]
008012d3: fld dword ptr [esp + 0x28]
008012d7: fcompi st(1)
008012d9: fstp st(0)
008012db: jbe 0x8012e5
008012dd: movss xmm0, dword ptr [esp + 0x28]
008012e3: jmp 0x8012eb
008012e5: movss xmm0, dword ptr [esp + 0x4c]
008012eb: addss xmm0, dword ptr [esp + 0x18]
008012f1: mulss xmm0, dword ptr [0xec6fd4]
008012f9: push ecx
008012fa: mov edx, 2
008012ff: mov ecx, 0xf32454
00801304: movss dword ptr [esp], xmm0
00801309: call 0x404870
0080130e: fstp dword ptr [esp + 0x18]
00801312: movss xmm1, dword ptr [esp + 0x2c]
00801318: xorps xmm2, xmm2
0080131b: comiss xmm2, xmm1
0080131e: movss xmm0, dword ptr [esp + 0x24]
00801324: ja 0x801331
00801326: comiss xmm2, xmm0
00801329: ja 0x801331
0080132b: movss xmm2, dword ptr [esp + 0x18]
00801331: mulss xmm0, dword ptr [0xf323b8]
00801339: mulss xmm1, dword ptr [0xf323b8]
00801341: mulss xmm2, dword ptr [0xf2e328]
00801349: addss xmm0, xmm1
0080134d: addss xmm0, xmm2
00801351: comiss xmm0, dword ptr [esp + 0x1c]
00801356: jbe 0x801362
00801358: mov dword ptr [esp + 0x20], esi
0080135c: .byte 0xf3
0080135d: .byte 0x0f
0080135e: .byte 0x11
0080135f: inc esp

3over4 data0xf352a0 operand0x8920d0 candidate-start0x892030
00892030: sub esp, 0x54
00892033: movss xmm0, dword ptr [0xec6e14]
0089203b: push ebx
0089203c: push ebp
0089203d: movss dword ptr [esp + 0x20], xmm0
00892043: movss xmm0, dword ptr [0xeceae4]
0089204b: push esi
0089204c: movss dword ptr [esp + 0x28], xmm0
00892052: xorps xmm0, xmm0
00892055: xor ebx, ebx
00892057: push edi
00892058: mov dword ptr [esp + 0x1c], edx
0089205c: movss dword ptr [esp + 0x30], xmm0
00892062: movss dword ptr [esp + 0x34], xmm0
00892068: movss dword ptr [esp + 0x38], xmm0
0089206e: test ecx, ecx
00892070: je 0x892077
00892072: lea eax, [ecx - 0x78]
00892075: jmp 0x892079
00892077: xor eax, eax
00892079: mov eax, dword ptr [eax + 0x7c]
0089207c: test ecx, ecx
0089207e: je 0x892085
00892080: add ecx, -0x78
00892083: jmp 0x892087
00892085: xor ecx, ecx
00892087: mov esi, eax
00892089: sub esi, ecx
0089208b: neg esi
0089208d: sbb esi, esi
0089208f: and esi, eax
00892091: je 0x8920ff
00892093: mov dword ptr [esp + ebx*8 + 0x3c], esi
00892097: mov edi, dword ptr [esi + 0xb00]
0089209d: mov ecx, edi
0089209f: call 0xcb4e20
008920a4: xorps xmm1, xmm1
008920a7: cvtsi2ss xmm1, eax
008920ab: mulss xmm1, dword ptr [0xf0370c]
008920b3: test edi, edi
008920b5: je 0x8920c6
008920b7: mov edi, dword ptr [edi + 0x30]
008920ba: test edi, edi
008920bc: je 0x8920c6
008920be: mov eax, dword ptr [edi + 0x1270]
008920c4: jmp 0x8920cb
008920c6: mov eax, 2
008920cb: movss xmm0, dword ptr [eax*4 + 0xf352a0]
008920d4: push ecx
008920d5: mulss xmm0, xmm1
008920d9: mov edx, 8
008920de: mov ecx, 0xf3534c
008920e3: movss dword ptr [esp], xmm0
008920e8: call 0x404870
008920ed: fstp dword ptr [esp + ebx*8 + 0x40]
008920f1: mov ecx, esi
008920f3: inc ebx
008920f4: call 0x6b49c0
008920f9: mov esi, eax
008920fb: test esi, esi
008920fd: jne 0x892093
008920ff: mov edx, ebx
00892101: lea ecx, [esp + 0x3c]
00892105: call 0x6cb700
0089210a: xorps xmm0, xmm0
0089210d: xor eax, eax
0089210f: or ebp, 0xffffffff
00892112: xor esi, esi
00892114: movss dword ptr [esp + 0x10], xmm0
0089211a: mov dword ptr [esp + 0x14], eax
0089211e: test ebx, ebx
00892120: jle 0x89224f
00892126: mov edi, dword ptr [esp + esi*8 + 0x3c]
0089212a: call 0x48ef10
0089212f: .byte 0x83

3over4 data0xf357e0 operand0x87fa93 candidate-start0x87f9f0
0087f9f0: mov eax, dword ptr [0x1dee620]
0087f9f5: test eax, eax
0087f9f7: je 0x87fa1b
0087f9f9: mov eax, dword ptr [eax + 0x38]
0087f9fc: test eax, eax
0087f9fe: je 0x87fa1b
0087fa00: cmp dword ptr [eax + 0x18], 6
0087fa04: jne 0x87fa1b
0087fa06: cmp dword ptr [eax + 0x48], ecx
0087fa09: jne 0x87fa1b
0087fa0b: mov eax, dword ptr [0x1dc5fb4]
0087fa10: cmp ecx, 3
0087fa13: je 0x87fa1d
0087fa15: mov eax, dword ptr [0x1dc5fb0]
0087fa1a: ret 
0087fa1b: xor eax, eax
0087fa1d: ret 
0087fa1e: mov al, byte ptr [0x5fb0a1cc]
0087fa23: fadd qword ptr [ecx]
0087fa25: mov dword ptr [ecx], eax
0087fa27: mov ecx, dword ptr [0x1dc5fb4]
0087fa2d: mov dword ptr [edx], ecx
0087fa2f: ret 
0087fa30: mov eax, dword ptr [0x1dee620]
0087fa35: test eax, eax
0087fa37: je 0x87fa5c
0087fa39: mov eax, dword ptr [eax + 0x38]
0087fa3c: test eax, eax
0087fa3e: je 0x87fa5c
0087fa40: cmp dword ptr [eax + 0x18], 6
0087fa44: jne 0x87fa5c
0087fa46: cmp dword ptr [eax + 0x48], 3
0087fa4a: jne 0x87fa5c
0087fa4c: movaps xmm0, xmmword ptr [0x1dc5fd0]
0087fa53: movaps xmmword ptr [ecx], xmm0
0087fa56: mov eax, 1
0087fa5b: ret 
0087fa5c: xor eax, eax
0087fa5e: ret 
0087fa5f: int3 
0087fa60: cmp dword ptr [eax + 0x14], 0
0087fa64: je 0x87fa6d
0087fa66: movss xmm0, dword ptr [eax + 0xc]
0087fa6b: jmp 0x87fa7a
0087fa6d: movss xmm0, dword ptr [0xec6e14]
0087fa75: subss xmm0, dword ptr [eax + 0xc]
0087fa7a: movss xmm1, dword ptr [0xf352fc]
0087fa82: comiss xmm1, xmm0
0087fa85: jbe 0x87fa8f
0087fa87: mov dword ptr [eax + 0x18], 0
0087fa8e: ret 
0087fa8f: movss xmm1, dword ptr [0xf357e0]
0087fa97: comiss xmm1, xmm0
0087fa9a: jbe 0x87faa4
0087fa9c: mov dword ptr [eax + 0x18], 1
0087faa3: ret 
0087faa4: mov dword ptr [eax + 0x18], 2
0087faab: ret 
0087faac: int3 
0087faad: int3 
0087faae: int3 
0087faaf: int3 
0087fab0: movss xmm0, dword ptr [0x146b618]
0087fab8: movss xmm1, dword ptr [esp + 4]
0087fabe: push esi
0087fabf: mov esi, dword ptr [0x1de666c]
0087fac5: push edi
0087fac6: xor edi, edi
0087fac8: test esi, esi
0087faca: jle 0x87facf
0087facc: dec esi
0087facd: jmp 0x87fad4
0087facf: mov esi, 6
0087fad4: lea eax, [esi*8]
0087fadb: sub eax, esi
0087fadd: lea eax, [eax*4 + 0x1de1d50]
0087fae4: test ecx, ecx
0087fae6: je 0x87faec
0087fae8: cmp dword ptr [eax], ecx
0087faea: jne 0x87fb02
0087faec: test edx, edx
0087faee: je 0x87faf5
0087faf0: cmp dword ptr [eax + 4], edx

3over4 data0xf357e0 operand0x8810e4 candidate-start0x880ec0
00880ec0: push ecx
00880ec1: push ebx
00880ec2: call 0xaacb50
00880ec7: test eax, eax
00880ec9: jne 0x8813fb
00880ecf: mov eax, dword ptr [0x1ce716c]
00880ed4: movss xmm0, dword ptr [0xec6e14]
00880edc: push esi
00880edd: mov esi, dword ptr [eax + 0x1bc]
00880ee3: lea ecx, [esp + 8]
00880ee7: movss dword ptr [esp + 8], xmm0
00880eed: call 0x6c5890
00880ef2: test eax, eax
00880ef4: je 0x880f2e
00880ef6: cmp dword ptr [0x1dee954], 0
00880efd: movss xmm0, dword ptr [esp + 8]
00880f03: je 0x880f16
00880f05: movss xmm1, dword ptr [0x1dee950]
00880f0d: comiss xmm1, xmm0
00880f10: jbe 0x8813fa
00880f16: pop esi
00880f17: mov dword ptr [0x1dee954], 1
00880f21: movss dword ptr [0x1dee950], xmm0
00880f29: pop ebx
00880f2a: pop ecx
00880f2b: ret 4
00880f2e: call 0x8d72c0
00880f33: test eax, eax
00880f35: je 0x880f4b
00880f37: call 0x8da800
00880f3c: mov ecx, eax
00880f3e: call 0x8dceb0
00880f43: test eax, eax
00880f45: jne 0x8813fa
00880f4b: cmp dword ptr [esp + 0x10], 0x1d955d0
00880f53: mov ebx, dword ptr [0x1e85d48]
00880f59: je 0x880f61
00880f5b: mov ebx, dword ptr [0x1e85d4c]
00880f61: test ebx, ebx
00880f63: je 0x8813fa
00880f69: call 0x4120b0
00880f6e: cmp dword ptr [eax + 0x34], 0
00880f72: jne 0x880f78
00880f74: xor eax, eax
00880f76: jmp 0x880f87
00880f78: mov ecx, dword ptr [eax + 0x2c]
00880f7b: lea ecx, [ecx + ecx*2]
00880f7e: mov eax, dword ptr [eax + ecx*4 + 0x14]
00880f82: cmp eax, 0x13
00880f85: ja 0x880f95
00880f87: movzx edx, byte ptr [eax + 0x881408]
00880f8e: jmp dword ptr [edx*4 + 0x881400]
00880f95: push edi
00880f96: call 0x4120b0
00880f9b: cmp dword ptr [eax + 0x34], 0
00880f9f: mov edi, dword ptr [0x1e85d4c]
00880fa5: mov edx, dword ptr [0x1e85d48]
00880fab: je 0x881001
00880fad: mov ecx, dword ptr [eax + 0x2c]
00880fb0: lea ecx, [ecx + ecx*2]
00880fb3: cmp dword ptr [eax + ecx*4 + 0x14], 8
00880fb8: jne 0x881001
00880fba: cmp dword ptr [0x1dee874], 0
00880fc1: jne 0x8813f9
00880fc7: test edx, edx
00880fc9: jne 0x880fcf
00880fcb: test edi, edi
00880fcd: je 0x881001
00880fcf: cmp dword ptr [0x1dee954], 0
00880fd6: movss xmm0, dword ptr [0xec6e14]
00880fde: je 0x880fed
00880fe0: movss xmm1, dword ptr [0x1dee950]
00880fe8: comiss xmm1, xmm0
00880feb: jbe 0x881009
00880fed: mov dword ptr [0x1dee954], 1
00880ff7: movss dword ptr [0x1dee950], xmm0
00880fff: jmp 0x881009
00881001: movss xmm0, dword ptr [0xec6e14]
00881009: cmp ebx, 6
0088100c: ja 0x881387
00881012: jmp dword ptr [ebx*4 + 0x88141c]
00881019: mov eax, dword ptr [esp + 0x14]
0088101d: cmp dword ptr [0x1dee620], eax
00881023: je 0x881387
00881029: test edx, edx
0088102b: jne 0x881035
0088102d: test edi, edi
0088102f: je 0x881387
00881035: cmp dword ptr [0x1dee954], 0
0088103c: je 0x881375
00881042: movss xmm1, dword ptr [0x1dee950]
0088104a: comiss xmm1, xmm0
0088104d: jbe 0x881387
00881053: jmp 0x881375
00881058: call 0x6a8af0
0088105d: test eax, eax
0088105f: je 0x881387
00881065: mov ecx, dword ptr [esp + 0x14]
00881069: cmp dword ptr [eax + 0x4c], ecx
0088106c: jne 0x881387
00881072: cmp dword ptr [0x1e85d48], 0
00881079: jne 0x881088
0088107b: cmp dword ptr [0x1e85d4c], 0
00881082: je 0x881387
00881088: cmp dword ptr [0x1dee954], 0
0088108f: je 0x8810a6
00881091: movss xmm0, dword ptr [0x1dee950]
00881099: comiss xmm0, dword ptr [0xec6e14]
008810a0: jbe 0x881387
008810a6: movss xmm0, dword ptr [0xec6e14]
008810ae: jmp 0x881375
008810b3: call 0x6a8af0
008810b8: mov edx, dword ptr [0x1e85d4c]
008810be: mov ecx, dword ptr [0x1e85d48]
008810c4: cmp esi, 4
008810c7: jne 0x8812fa
008810cd: test ecx, ecx
008810cf: jne 0x8810d9
008810d1: test edx, edx
008810d3: je 0x88133b
008810d9: cmp dword ptr [0x1dee954], 0
008810e0: movss xmm0, dword ptr [0xf357e0]
008810e8: je 0x881329
008810ee: movss xmm1, dword ptr [0x1dee950]
008810f6: comiss xmm1, xmm0
008810f9: jbe 0x88133b
008810ff: jmp 0x881329
00881104: call 0x6a8af0
00881109: mov edi, dword ptr [0x1e85d4c]
0088110f: mov edx, dword ptr [0x1e85d48]
00881115: cmp esi, 5
00881118: je 0x88111f
0088111a: cmp esi, 6
0088111d: jne 0x88115e
0088111f: test edx, edx
00881121: jne 0x881127
00881123: test edi, edi
00881125: je 0x88115e
00881127: mov ecx, dword ptr [0x1dee954]
0088112d: movss xmm1, dword ptr [0xec7068]
00881135: test ecx, ecx
00881137: je 0x881146
00881139: movss xmm0, dword ptr [0x1dee950]
00881141: comiss xmm0, xmm1

3over4 data0xf357e0 operand0x8892ee candidate-start0x888e50
00888e50: sub esp, 0x14
00888e53: movss xmm0, dword ptr [0xec6fb4]
00888e5b: push ebx
00888e5c: push ebp
00888e5d: mov ebp, ecx
00888e5f: mov eax, dword ptr [ebp + 0x4c]
00888e62: push esi
00888e63: push edi
00888e64: mov dword ptr [esp + 0x18], edx
00888e68: mov dword ptr [esp + 0x14], 0
00888e70: movss dword ptr [esp + 0x10], xmm0
00888e76: test eax, eax
00888e78: je 0x888e7f
00888e7a: lea ecx, [eax - 0x78]
00888e7d: jmp 0x888e81
00888e7f: xor ecx, ecx
00888e81: mov ecx, dword ptr [ecx + 0x7c]
00888e84: test eax, eax
00888e86: je 0x888e8d
00888e88: add eax, -0x78
00888e8b: jmp 0x888e8f
00888e8d: xor eax, eax
00888e8f: mov esi, ecx
00888e91: sub esi, eax
00888e93: neg esi
00888e95: sbb esi, esi
00888e97: and esi, ecx
00888e99: je 0x888fbb
00888e9f: nop 
00888ea0: cmp esi, ebp
00888ea2: je 0x888faa
00888ea8: mov edi, dword ptr [esi + 0xb00]
00888eae: mov eax, dword ptr [esp + 0x18]
00888eb2: jmp dword ptr [eax*4 + 0x888fc8]
00888eb9: mov ecx, edi
00888ebb: call 0xcb08e0
00888ec0: xorps xmm0, xmm0
00888ec3: cvtsi2ss xmm0, eax
00888ec7: jmp 0x888f99
00888ecc: mov ecx, edi
00888ece: call 0xcb08e0
00888ed3: mov ecx, edi
00888ed5: mov ebx, eax
00888ed7: call 0xcb05c0
00888edc: add ebx, eax
00888ede: xorps xmm0, xmm0
00888ee1: cvtsi2ss xmm0, ebx
00888ee5: jmp 0x888f99
00888eea: mov ecx, edi
00888eec: call 0xcb25e0
00888ef1: xorps xmm0, xmm0
00888ef4: cvtsi2ss xmm0, eax
00888ef8: mulss xmm0, dword ptr [0xf35304]
00888f00: mov ecx, edi
00888f02: movss dword ptr [esp + 0x1c], xmm0
00888f08: call 0xcb42b0
00888f0d: movss xmm0, dword ptr [esp + 0x1c]
00888f13: xorps xmm1, xmm1
00888f16: cvtsi2ss xmm1, eax
00888f1a: mulss xmm1, dword ptr [0xf35300]
00888f22: addss xmm0, xmm1
00888f26: mov ecx, edi
00888f28: movss dword ptr [esp + 0x20], xmm0
00888f2e: call 0xcb4130
00888f33: xorps xmm0, xmm0
00888f36: cvtsi2ss xmm0, eax
00888f3a: mulss xmm0, dword ptr [0xf35300]
00888f42: addss xmm0, dword ptr [esp + 0x20]
00888f48: jmp 0x888f99
00888f4a: mov ecx, edi
00888f4c: call 0xcb2be0
00888f51: mov ecx, edi
00888f53: mov ebx, eax
00888f55: call 0xcb1b60
00888f5a: mov ecx, edi
00888f5c: add ebx, eax
00888f5e: call 0xcb10a0
00888f63: add eax, ebx
00888f65: xorps xmm0, xmm0
00888f68: cvtsi2ss xmm0, eax
00888f6c: jmp 0x888f99
00888f6e: mov edx, 3
00888f73: mov ecx, edi
00888f75: call 0x875bb0
00888f7a: test eax, eax
00888f7c: jns 0x888f8b
00888f7e: movd xmm0, dword ptr [esi + 0xb0c]
00888f86: cvtdq2ps xmm0, xmm0
00888f89: jmp 0x888f99
00888f8b: mov ecx, 0xe
00888f90: sub ecx, eax
00888f92: xorps xmm0, xmm0
00888f95: cvtsi2ss xmm0, ecx
00888f99: comiss xmm0, dword ptr [esp + 0x10]
00888f9e: jbe 0x888faa
00888fa0: movss dword ptr [esp + 0x10], xmm0
00888fa6: mov dword ptr [esp + 0x14], esi
00888faa: mov ecx, esi
00888fac: call 0x6b49c0
00888fb1: mov esi, eax
00888fb3: test esi, esi
00888fb5: jne 0x888ea0
00888fbb: mov eax, dword ptr [esp + 0x14]
00888fbf: pop edi
00888fc0: pop esi
00888fc1: pop ebp
00888fc2: pop ebx
00888fc3: add esp, 0x14
00888fc6: ret 
00888fc7: nop 
00888fc8: mov ecx, 0xcc00888e
00888fcd: mov cs, word ptr [eax - 0x77711600]
00888fd3: add byte ptr [edx - 0x71], cl
00888fd6: mov byte ptr [eax], al
00888fd8: int3 
00888fd9: mov cs, word ptr [eax - 0x77709200]
00888fdf: add byte ptr [ebp - 0x75], dl
00888fe2: in al, dx
00888fe3: and esp, 0xfffffff0
00888fe6: sub esp, 0x68
00888fe9: push ebx
00888fea: push edi
00888feb: test esi, esi
00888fed: je 0x889305
00888ff3: mov edi, dword ptr [ebp + 0xc]
00888ff6: test edi, edi
00888ff8: je 0x889305
00888ffe: mov edx, dword ptr [ebp + 8]
00889001: mov ecx, dword ptr [edx + 4]
00889004: xor eax, eax
00889006: mov dword ptr [esi], ecx
00889008: test ecx, ecx
0088900a: jle 0x889021
0088900c: lea ecx, [edx + 8]
0088900f: lea edx, [esi + 4]
00889012: fld dword ptr [ecx]
00889014: inc eax
00889015: fstp dword ptr [edx]
00889017: add ecx, 0x10
0088901a: add edx, 4
0088901d: cmp eax, dword ptr [esi]
0088901f: jl 0x889012
00889021: lea edx, [esp + 0x30]
00889025: mov ecx, edi
00889027: call 0x401bb0
0088902c: lea ecx, [esp + 0x20]
00889030: call 0x6ef360
00889035: movss xmm0, dword ptr [esp + 0x30]
0088903b: movss xmm1, dword ptr [esp + 0x38]
00889041: subss xmm1, dword ptr [esp + 0x28]
00889047: subss xmm0, dword ptr [esp + 0x20]
0088904d: mulss xmm1, xmm1
00889051: mulss xmm0, xmm0
00889055: addss xmm1, xmm0
00889059: mov ecx, edi
0088905b: movss dword ptr [esp + 0x1c], xmm1
00889061: call 0x6d3690
00889066: mov dword ptr [esp + 0x14], eax
0088906a: mov eax, dword ptr [edi + 0x4c]
0088906d: mov eax, dword ptr [eax + 0x34]
00889070: test eax, eax
00889072: je 0x889079
00889074: lea ecx, [eax - 0x78]
00889077: jmp 0x88907b
00889079: xor ecx, ecx
0088907b: mov ecx, dword ptr [ecx + 0x7c]
0088907e: test eax, eax
00889080: je 0x889087
00889082: add eax, -0x78
00889085: jmp 0x889089
00889087: xor eax, eax
00889089: mov ebx, ecx
0088908b: sub ebx, eax
0088908d: neg ebx
0088908f: sbb ebx, ebx
00889091: and ebx, ecx
00889093: mov dword ptr [esp + 0x10], ebx
00889097: je 0x889191
0088909d: lea ecx, [ecx]
008890a0: mov edx, ebx
008890a2: mov ecx, edi
008890a4: call 0x709bb0
008890a9: fstp dword ptr [esp + 8]
008890ad: mov ecx, dword ptr [ebp + 8]
008890b0: movss xmm3, dword ptr [ecx]
008890b4: movss xmm2, dword ptr [0xec6fd4]
008890bc: movss xmm4, dword ptr [esp + 8]
008890c2: movaps xmm1, xmm3
008890c5: mulss xmm1, xmm2
008890c9: movaps xmm0, xmm4
008890cc: subss xmm0, xmm1
008890d0: mulss xmm0, dword ptr [0xec7050]
008890d8: movaps xmm5, xmm3
008890db: subss xmm5, xmm1
008890df: xorps xmm1, xmm1
008890e2: divss xmm0, xmm5
008890e6: addss xmm0, xmm2
008890ea: comiss xmm1, xmm0
008890ed: ja 0x8890f7
008890ef: comiss xmm2, xmm0
008890f2: movaps xmm1, xmm0
008890f5: jbe 0x8890ff
008890f7: movss dword ptr [esp + 0xc], xmm1
008890fd: jmp 0x889105
008890ff: movss dword ptr [esp + 0xc], xmm2
00889105: comiss xmm3, xmm4
00889108: jbe 0x88917c
0088910a: mov edx, ebx
0088910c: mov ecx, edi
0088910e: call 0x709b50
00889113: sub eax, dword ptr [esp + 0x14]
00889117: xor edi, edi
00889119: movsx edx, ax
0088911c: mov dword ptr [esp + 0x18], edx
00889120: cmp dword ptr [esi], edi
00889122: jle 0x889179
00889124: mov ecx, dword ptr [ebp + 8]
00889127: movss xmm0, dword ptr [esp + 0xc]
0088912d: lea eax, [esi + 4]
00889130: mov dword ptr [esp + 8], eax
00889134: add ecx, 0x10
00889137: mov dx, word ptr [esp + 0x18]
0088913c: sub dx, word ptr [ecx - 4]
00889140: movsx edx, dx
00889143: mov eax, edx
00889145: sar eax, 0x1f
00889148: mov ebx, edx
0088914a: neg ebx
0088914c: and ebx, eax
0088914e: not eax
00889150: and eax, edx
00889152: or ebx, eax
00889154: cmp ebx, dword ptr [ecx]
00889156: jge 0x889168
00889158: mov eax, dword ptr [esp + 8]
0088915c: movss xmm1, dword ptr [eax]
00889160: mulss xmm1, xmm0
00889164: movss dword ptr [eax], xmm1
00889168: add dword ptr [esp + 8], 4
0088916d: inc edi
0088916e: add ecx, 0x10
00889171: cmp edi, dword ptr [esi]
00889173: jl 0x889137
00889175: mov ebx, dword ptr [esp + 0x10]
00889179: mov edi, dword ptr [ebp + 0xc]
0088917c: mov ecx, ebx
0088917e: call 0x6b49c0
00889183: mov ebx, eax
00889185: mov dword ptr [esp + 0x10], ebx
00889189: test ebx, ebx
0088918b: jne 0x8890a0
00889191: xorps xmm0, xmm0
00889194: mov edi, dword ptr [ebp + 8]
00889197: movss xmm2, dword ptr [edi]
0088919b: movaps xmm1, xmm0
0088919e: movaps xmm3, xmm0
008891a1: xor eax, eax
008891a3: unpcklps xmm0, xmm2
008891a6: unpcklps xmm1, xmm3
008891a9: unpcklps xmm0, xmm1
008891ac: cmp dword ptr [esi], eax
008891ae: jle 0x889305
008891b4: movdqa xmm3, xmmword ptr [0xf378b0]
008891bc: movss xmm5, dword ptr [0xec6f80]
008891c4: movss xmm6, dword ptr [0xf2d6f0]
008891cc: movaps xmmword ptr [esp + 0x40], xmm0
008891d1: movss xmm2, dword ptr [esp + 0x48]
008891d7: lea edx, [esi + 4]
008891da: add edi, 0xc
008891dd: lea ecx, [ecx]
008891e0: mov ecx, dword ptr [edi]
008891e2: add ecx, dword ptr [esp + 0x14]
008891e6: xorps xmm0, xmm0
008891e9: cvtsi2ss xmm0, ecx
008891ed: mulss xmm0, xmm5
008891f1: movss dword ptr [esp + 0x18], xmm0
008891f7: fld dword ptr [esp + 0x18]
008891fb: fsin 
008891fd: fstp dword ptr [esp + 0xc]
00889201: movss dword ptr [esp + 8], xmm0
00889207: fld dword ptr [esp + 8]
0088920b: fcos 
0088920d: fstp dword ptr [esp + 0x10]
00889211: movss xmm0, dword ptr [esp + 0xc]
00889217: movss xmm1, dword ptr [esp + 0x10]
0088921d: movaps xmm7, xmm0
00889220: mulss xmm0, dword ptr [esp + 0x40]
00889226: movaps xmm4, xmm1
00889229: mulss xmm4, dword ptr [esp + 0x40]
0088922f: mulss xmm7, xmm2
00889233: addss xmm4, xmm7
00889237: movss xmm7, dword ptr [esp + 0x44]
0088923d: mulss xmm1, xmm2
00889241: subss xmm1, xmm0
00889245: movss xmm0, dword ptr [esp + 0x4c]
0088924b: unpcklps xmm4, xmm1
0088924e: unpcklps xmm7, xmm0
00889251: unpcklps xmm4, xmm7
00889254: addps xmm4, xmmword ptr [esp + 0x30]
00889259: movaps xmmword ptr [esp + 0x50], xmm4
0088925e: movss xmm0, dword ptr [esp + 0x50]
00889264: movss xmm4, dword ptr [esp + 0x58]
0088926a: shufps xmm0, xmm0, 0
0088926e: andps xmm0, xmm3
00889271: movaps xmmword ptr [esp + 0x60], xmm0
00889276: movss xmm0, dword ptr [esp + 0x60]
0088927c: comiss xmm0, xmm6
0088927f: ja 0x8892a0
00889281: movss xmm0, xmm4
00889285: shufps xmm0, xmm0, 0
00889289: andps xmm0, xmm3
0088928c: movaps xmmword ptr [esp + 0x60], xmm0
00889291: movss xmm0, dword ptr [esp + 0x60]
00889297: comiss xmm0, dword ptr [0xf34318]
0088929e: jbe 0x8892b0
008892a0: movss xmm0, dword ptr [edx]
008892a4: mulss xmm0, dword ptr [0xf0fc08]
008892ac: movss dword ptr [edx], xmm0
008892b0: movss xmm7, dword ptr [esp + 0x1c]
008892b6: comiss xmm7, dword ptr [0xf34c78]
008892bd: jbe 0x8892f6
008892bf: movss xmm0, dword ptr [esp + 0x20]
008892c5: movss xmm1, dword ptr [esp + 0x28]
008892cb: subss xmm0, dword ptr [esp + 0x50]
008892d1: subss xmm1, xmm4
008892d5: mulss xmm1, xmm1
008892d9: mulss xmm0, xmm0
008892dd: addss xmm1, xmm0
008892e1: comiss xmm1, xmm7
008892e4: jbe 0x8892f6
008892e6: movss xmm0, dword ptr [edx]
008892ea: mulss xmm0, dword ptr [0xf357e0]
008892f2: movss dword ptr [edx], xmm0
008892f6: inc eax
008892f7: add edi, 0x10
008892fa: add edx, 4
008892fd: cmp eax, dword ptr [esi]
008892ff: jl 0x8891e0
00889305: pop edi
00889306: pop ebx
00889307: mov esp, ebp
00889309: pop ebp
0088930a: ret 8
0088930d: int3 
0088930f: int3 
00889310: push ebp
00889311: mov ebp, esp
00889313: and esp, 0xfffffff0
00889316: sub esp, 0x38
00889319: movss xmm2, dword ptr [edi + 4]
0088931e: push ebx
0088931f: push esi
00889320: xor eax, eax
00889322: mov esi, 1
00889327: xor ebx, ebx
00889329: mov dword ptr [esp + 0x18], eax
0088932d: movss dword ptr [esp + 0x1c], xmm2
00889333: cmp dword ptr [edi], esi
00889335: jle 0x8893b9
0088933b: movdqa xmm0, xmmword ptr [0xf378b0]
00889343: lea eax, [edi + 8]
00889346: movdqa xmmword ptr [esp + 0x20], xmm0
0088934c: .byte 0x89
0088934d: inc esp

3over4 data0xf357e0 operand0x88b829 candidate-start0x88b760
0088b760: push ebp
0088b761: mov ebp, esp
0088b763: and esp, 0xfffffff0
0088b766: sub esp, 0x2c
0088b769: push esi
0088b76a: mov esi, ecx
0088b76c: movaps xmm0, xmmword ptr [esi + 0x30]
0088b770: mulps xmm0, xmm0
0088b773: movaps xmm1, xmm0
0088b776: movhlps xmm0, xmm1
0088b779: addps xmm0, xmm1
0088b77c: movaps xmm1, xmm0
0088b77f: shufps xmm1, xmm0, 1
0088b783: addps xmm1, xmm0
0088b786: movaps xmmword ptr [esp + 0x20], xmm1
0088b78b: movss xmm1, dword ptr [esp + 0x20]
0088b791: xorps xmm0, xmm0
0088b794: movss xmm0, xmm1
0088b798: sqrtss xmm0, xmm0
0088b79c: movaps xmmword ptr [esp + 0x20], xmm0
0088b7a1: movss xmm0, dword ptr [esp + 0x20]
0088b7a7: push ecx
0088b7a8: mov ecx, 0xf35004
0088b7ad: movss dword ptr [esp], xmm0
0088b7b2: call 0x6cb4c0
0088b7b7: fstp dword ptr [esp + 0x10]
0088b7bb: movss xmm2, dword ptr [ebp + 8]
0088b7c0: xorps xmm0, xmm0
0088b7c3: comiss xmm2, xmm0
0088b7c6: ja 0x88b7d0
0088b7c8: movss xmm2, dword ptr [0xf2d240]
0088b7d0: movss xmm1, dword ptr [ebp + 0xc]
0088b7d5: comiss xmm1, xmm0
0088b7d8: ja 0x88b7e2
0088b7da: movss xmm1, dword ptr [0xeea820]
0088b7e2: movss xmm0, dword ptr [esp + 0x20]
0088b7e8: mulss xmm0, dword ptr [esp + 0x10]
0088b7ee: comiss xmm1, xmm0
0088b7f1: jbe 0x88b7f6
0088b7f3: movaps xmm0, xmm1
0088b7f6: comiss xmm2, xmm0
0088b7f9: jbe 0x88b803
0088b7fb: movss dword ptr [esp + 0x10], xmm0
0088b801: jmp 0x88b809
0088b803: movss dword ptr [esp + 0x10], xmm2
0088b809: mov ecx, dword ptr [0x10e23b8]
0088b80f: call 0xd963d0
0088b814: mov ecx, eax
0088b816: call 0xd96410
0088b81b: fmul dword ptr [0xf384a0]
0088b821: mov ecx, dword ptr [0x10e23b8]
0088b827: fadd dword ptr [0xf357e0]
0088b82d: fstp dword ptr [esp + 0x1c]
0088b831: call 0xd963d0
0088b836: mov ecx, eax
0088b838: call 0xd96410
0088b83d: fmul dword ptr [0xf384a0]
0088b843: mov ecx, dword ptr [0x10e23b8]
0088b849: fadd dword ptr [0xf357e0]
0088b84f: fstp dword ptr [esp + 0x18]
0088b853: call 0xd963d0
0088b858: mov ecx, eax
0088b85a: call 0xd96410
0088b85f: fmul dword ptr [0xf384a0]
0088b865: fadd dword ptr [0xf357e0]
0088b86b: fmul dword ptr [esi + 0x30]
0088b86e: fstp dword ptr [esp + 0x14]
0088b872: movss xmm0, dword ptr [esp + 0x14]
0088b878: fld dword ptr [esi + 0x34]
0088b87b: fmul dword ptr [esp + 0x18]
0088b87f: fstp dword ptr [esp + 0x18]
0088b883: movss xmm1, dword ptr [esp + 0x18]

3over4 data0xf357e0 operand0x88b84b candidate-start0x88b760
0088b760: push ebp
0088b761: mov ebp, esp
0088b763: and esp, 0xfffffff0
0088b766: sub esp, 0x2c
0088b769: push esi
0088b76a: mov esi, ecx
0088b76c: movaps xmm0, xmmword ptr [esi + 0x30]
0088b770: mulps xmm0, xmm0
0088b773: movaps xmm1, xmm0
0088b776: movhlps xmm0, xmm1
0088b779: addps xmm0, xmm1
0088b77c: movaps xmm1, xmm0
0088b77f: shufps xmm1, xmm0, 1
0088b783: addps xmm1, xmm0
0088b786: movaps xmmword ptr [esp + 0x20], xmm1
0088b78b: movss xmm1, dword ptr [esp + 0x20]
0088b791: xorps xmm0, xmm0
0088b794: movss xmm0, xmm1
0088b798: sqrtss xmm0, xmm0
0088b79c: movaps xmmword ptr [esp + 0x20], xmm0
0088b7a1: movss xmm0, dword ptr [esp + 0x20]
0088b7a7: push ecx
0088b7a8: mov ecx, 0xf35004
0088b7ad: movss dword ptr [esp], xmm0
0088b7b2: call 0x6cb4c0
0088b7b7: fstp dword ptr [esp + 0x10]
0088b7bb: movss xmm2, dword ptr [ebp + 8]
0088b7c0: xorps xmm0, xmm0
0088b7c3: comiss xmm2, xmm0
0088b7c6: ja 0x88b7d0
0088b7c8: movss xmm2, dword ptr [0xf2d240]
0088b7d0: movss xmm1, dword ptr [ebp + 0xc]
0088b7d5: comiss xmm1, xmm0
0088b7d8: ja 0x88b7e2
0088b7da: movss xmm1, dword ptr [0xeea820]
0088b7e2: movss xmm0, dword ptr [esp + 0x20]
0088b7e8: mulss xmm0, dword ptr [esp + 0x10]
0088b7ee: comiss xmm1, xmm0
0088b7f1: jbe 0x88b7f6
0088b7f3: movaps xmm0, xmm1
0088b7f6: comiss xmm2, xmm0
0088b7f9: jbe 0x88b803
0088b7fb: movss dword ptr [esp + 0x10], xmm0
0088b801: jmp 0x88b809
0088b803: movss dword ptr [esp + 0x10], xmm2
0088b809: mov ecx, dword ptr [0x10e23b8]
0088b80f: call 0xd963d0
0088b814: mov ecx, eax
0088b816: call 0xd96410
0088b81b: fmul dword ptr [0xf384a0]
0088b821: mov ecx, dword ptr [0x10e23b8]
0088b827: fadd dword ptr [0xf357e0]
0088b82d: fstp dword ptr [esp + 0x1c]
0088b831: call 0xd963d0
0088b836: mov ecx, eax
0088b838: call 0xd96410
0088b83d: fmul dword ptr [0xf384a0]
0088b843: mov ecx, dword ptr [0x10e23b8]
0088b849: fadd dword ptr [0xf357e0]
0088b84f: fstp dword ptr [esp + 0x18]
0088b853: call 0xd963d0
0088b858: mov ecx, eax
0088b85a: call 0xd96410
0088b85f: fmul dword ptr [0xf384a0]
0088b865: fadd dword ptr [0xf357e0]
0088b86b: fmul dword ptr [esi + 0x30]
0088b86e: fstp dword ptr [esp + 0x14]
0088b872: movss xmm0, dword ptr [esp + 0x14]
0088b878: fld dword ptr [esi + 0x34]
0088b87b: fmul dword ptr [esp + 0x18]
0088b87f: fstp dword ptr [esp + 0x18]
0088b883: movss xmm1, dword ptr [esp + 0x18]
0088b889: fld dword ptr [esi + 0x38]
0088b88c: fmul dword ptr [esp + 0x1c]
0088b890: fstp dword ptr [esp + 0x1c]
0088b894: movss xmm2, dword ptr [esp + 0x1c]
0088b89a: fldz 
0088b89c: fstp dword ptr [esp + 0x1c]
0088b8a0: movss xmm3, dword ptr [esp + 0x1c]
0088b8a6: unpcklps xmm0, xmm2
0088b8a9: .byte 0x0f
0088b8aa: .byte 0x14

3over4 data0xf357e0 operand0x88b867 candidate-start0x88b760
0088b760: push ebp
0088b761: mov ebp, esp
0088b763: and esp, 0xfffffff0
0088b766: sub esp, 0x2c
0088b769: push esi
0088b76a: mov esi, ecx
0088b76c: movaps xmm0, xmmword ptr [esi + 0x30]
0088b770: mulps xmm0, xmm0
0088b773: movaps xmm1, xmm0
0088b776: movhlps xmm0, xmm1
0088b779: addps xmm0, xmm1
0088b77c: movaps xmm1, xmm0
0088b77f: shufps xmm1, xmm0, 1
0088b783: addps xmm1, xmm0
0088b786: movaps xmmword ptr [esp + 0x20], xmm1
0088b78b: movss xmm1, dword ptr [esp + 0x20]
0088b791: xorps xmm0, xmm0
0088b794: movss xmm0, xmm1
0088b798: sqrtss xmm0, xmm0
0088b79c: movaps xmmword ptr [esp + 0x20], xmm0
0088b7a1: movss xmm0, dword ptr [esp + 0x20]
0088b7a7: push ecx
0088b7a8: mov ecx, 0xf35004
0088b7ad: movss dword ptr [esp], xmm0
0088b7b2: call 0x6cb4c0
0088b7b7: fstp dword ptr [esp + 0x10]
0088b7bb: movss xmm2, dword ptr [ebp + 8]
0088b7c0: xorps xmm0, xmm0
0088b7c3: comiss xmm2, xmm0
0088b7c6: ja 0x88b7d0
0088b7c8: movss xmm2, dword ptr [0xf2d240]
0088b7d0: movss xmm1, dword ptr [ebp + 0xc]
0088b7d5: comiss xmm1, xmm0
0088b7d8: ja 0x88b7e2
0088b7da: movss xmm1, dword ptr [0xeea820]
0088b7e2: movss xmm0, dword ptr [esp + 0x20]
0088b7e8: mulss xmm0, dword ptr [esp + 0x10]
0088b7ee: comiss xmm1, xmm0
0088b7f1: jbe 0x88b7f6
0088b7f3: movaps xmm0, xmm1
0088b7f6: comiss xmm2, xmm0
0088b7f9: jbe 0x88b803
0088b7fb: movss dword ptr [esp + 0x10], xmm0
0088b801: jmp 0x88b809
0088b803: movss dword ptr [esp + 0x10], xmm2
0088b809: mov ecx, dword ptr [0x10e23b8]
0088b80f: call 0xd963d0
0088b814: mov ecx, eax
0088b816: call 0xd96410
0088b81b: fmul dword ptr [0xf384a0]
0088b821: mov ecx, dword ptr [0x10e23b8]
0088b827: fadd dword ptr [0xf357e0]
0088b82d: fstp dword ptr [esp + 0x1c]
0088b831: call 0xd963d0
0088b836: mov ecx, eax
0088b838: call 0xd96410
0088b83d: fmul dword ptr [0xf384a0]
0088b843: mov ecx, dword ptr [0x10e23b8]
0088b849: fadd dword ptr [0xf357e0]
0088b84f: fstp dword ptr [esp + 0x18]
0088b853: call 0xd963d0
0088b858: mov ecx, eax
0088b85a: call 0xd96410
0088b85f: fmul dword ptr [0xf384a0]
0088b865: fadd dword ptr [0xf357e0]
0088b86b: fmul dword ptr [esi + 0x30]
0088b86e: fstp dword ptr [esp + 0x14]
0088b872: movss xmm0, dword ptr [esp + 0x14]
0088b878: fld dword ptr [esi + 0x34]
0088b87b: fmul dword ptr [esp + 0x18]
0088b87f: fstp dword ptr [esp + 0x18]
0088b883: movss xmm1, dword ptr [esp + 0x18]
0088b889: fld dword ptr [esi + 0x38]
0088b88c: fmul dword ptr [esp + 0x1c]
0088b890: fstp dword ptr [esp + 0x1c]
0088b894: movss xmm2, dword ptr [esp + 0x1c]
0088b89a: fldz 
0088b89c: fstp dword ptr [esp + 0x1c]
0088b8a0: movss xmm3, dword ptr [esp + 0x1c]
0088b8a6: unpcklps xmm0, xmm2
0088b8a9: unpcklps xmm1, xmm3
0088b8ac: unpcklps xmm0, xmm1
0088b8af: movaps xmmword ptr [esi + 0x30], xmm0
0088b8b3: movaps xmm2, xmmword ptr [esi + 0x30]
0088b8b7: movaps xmm1, xmm2
0088b8ba: mulps xmm1, xmm2
0088b8bd: movaps xmm0, xmm1
0088b8c0: movhlps xmm0, xmm1
0088b8c3: addps xmm0, xmm1
0088b8c6: .byte 0x0f

3over4 data0xf357e0 operand0x8956e9 candidate-start0x895570
00895570: sub esp, 8
00895573: push ebx
00895574: mov ebx, dword ptr [esp + 0x10]
00895578: push esi
00895579: mov esi, ecx
0089557b: mov ecx, dword ptr [ebx + 0x10]
0089557e: call 0x8954c0
00895583: test eax, eax
00895585: je 0x895591
00895587: fldz 
00895589: pop esi
0089558a: pop ebx
0089558b: add esp, 8
0089558e: ret 4
00895591: push edi
00895592: mov ecx, esi
00895594: call 0x6b5300
00895599: mov edi, eax
0089559b: mov ecx, edi
0089559d: call 0x6d6800
008955a2: fstp dword ptr [esp + 0x18]
008955a6: mov ecx, edi
008955a8: call 0x6d66c0
008955ad: fadd dword ptr [esp + 0x18]
008955b1: mov edx, dword ptr [0x12f9ab0]
008955b7: push ecx
008955b8: fmul dword ptr [0xec6fd4]
008955be: mov ecx, 0x12f9ab4
008955c3: fstp dword ptr [esp + 0x10]
008955c7: movss xmm0, dword ptr [esp + 0x10]
008955cd: movss dword ptr [esp], xmm0
008955d2: call 0x404870
008955d7: fstp dword ptr [esp + 0x18]
008955db: mov ecx, dword ptr [0x10e23b8]
008955e1: call 0xd963d0
008955e6: mov ecx, eax
008955e8: call 0xd96410
008955ed: fstp dword ptr [esp + 0x10]
008955f1: movss xmm0, dword ptr [esp + 0xc]
008955f7: mov edx, dword ptr [0x12f9ad4]
008955fd: push ecx
008955fe: mov ecx, 0x12f9ad8
00895603: movss dword ptr [esp], xmm0
00895608: call 0x404870
0089560d: fmul dword ptr [esp + 0x10]
00895611: mov ecx, esi
00895613: fadd dword ptr [esp + 0x18]
00895617: fstp dword ptr [esp + 0x18]
0089561b: call 0x401bf0
00895620: mov ecx, esi
00895622: mov edi, eax
00895624: call 0x709790
00895629: sub eax, edi
0089562b: movsx ecx, ax
0089562e: mov eax, ecx
00895630: mov edx, ecx
00895632: sar eax, 0x1f
00895635: neg edx
00895637: and edx, eax
00895639: not eax
0089563b: and eax, ecx
0089563d: or edx, eax
0089563f: xorps xmm0, xmm0
00895642: cvtsi2ss xmm0, edx
00895646: push ecx
00895647: mov edx, 3
0089564c: mov ecx, 0xf354f0
00895651: movss dword ptr [esp], xmm0
00895656: call 0x404870
0089565b: fadd dword ptr [esp + 0x18]
0089565f: mov eax, dword ptr [ebx + 0x58]
00895662: mov ecx, esi
00895664: fadd dword ptr [eax*4 + 0xf35524]
0089566b: fstp dword ptr [esp + 0x18]
0089566f: call 0x6d3600
00895674: fstp dword ptr [esp + 0x10]
00895678: push ecx
00895679: movss xmm0, dword ptr [esp + 0x14]
0089567f: mov edx, 3
00895684: mov ecx, 0xf3550c
00895689: movss dword ptr [esp], xmm0
0089568e: call 0x404870
00895693: fmul dword ptr [esp + 0x18]
00895697: mov ebx, dword ptr [ebx + 0x10]
0089569a: mov eax, dword ptr [ebx + 0x18]
0089569d: mov ecx, dword ptr [eax + 4]
008956a0: fstp dword ptr [esp + 0x18]
008956a4: mov edx, dword ptr [ecx]
008956a6: and edx, 0xff000000
008956ac: pop edi
008956ad: cmp edx, 0x4a000000
008956b3: je 0x8956bd
008956b5: cmp ecx, 0xf2ee60
008956bb: jne 0x8956e2
008956bd: mov eax, dword ptr [ebx + 0x40]
008956c0: mov eax, dword ptr [eax + 0x14c]
008956c6: test eax, eax
008956c8: je 0x8956e2
008956ca: cmp eax, esi
008956cc: je 0x8956e2
008956ce: movss xmm0, dword ptr [esp + 0x14]
008956d4: addss xmm0, dword ptr [0xec74bc]
008956dc: movss dword ptr [esp + 0x14], xmm0
008956e2: fld dword ptr [esp + 0x14]
008956e6: pop esi
008956e7: fmul dword ptr [0xf357e0]
008956ed: pop ebx
008956ee: add esp, 8
008956f1: ret 4
008956f4: int3 
008956f5: int3 
008956f6: int3 
008956f7: int3 
008956f8: int3 
008956f9: int3 
008956fa: int3 
008956fb: int3 
008956fc: int3 
008956fd: int3 
008956fe: int3 
008956ff: int3 
00895700: cmp dword ptr [ecx + eax*4 + 4], 0
00895705: push esi
00895706: lea esi, [ecx + eax*4 + 4]
0089570a: je 0x8957c4
00895710: push ebx
00895711: mov ebx, dword ptr [0x1dc5f2c]
00895717: push ebp
00895718: push edi
00895719: mov edi, dword ptr [0x1dc5f24]
0089571f: nop 
00895720: mov edx, dword ptr [esi]
00895722: mov edx, dword ptr [edx + 0xc]
00895725: mov eax, esi
00895727: cmp dword ptr [eax], 0
0089572a: je 0x8957ae
00895730: mov ecx, dword ptr [eax]
00895732: cmp dword ptr [ecx + 0xc], edx
00895735: je 0x895742
00895737: cmp dword ptr [ecx + 8], 0
0089573b: lea eax, [ecx + 8]
0089573e: jne 0x895730
00895740: jmp 0x8957ae
00895742: mov edx, dword ptr [ecx + 8]
00895745: mov dword ptr [eax], edx
00895747: .byte 0x8b
00895748: inc ecx

3over4 data0xf357e0 operand0x8a6a01 candidate-start0x8a69e0
008a69e0: push ebp
008a69e1: mov ebp, esp
008a69e3: and esp, 0xfffffff0
008a69e6: sub esp, 0x34
008a69e9: push ebx
008a69ea: push esi
008a69eb: push edi
008a69ec: mov ebx, edx
008a69ee: mov edi, ecx
008a69f0: mov dword ptr [esp + 0x28], ebx
008a69f4: mov dword ptr [esp + 0x2c], edi
008a69f8: call 0x9428e0
008a69fd: movss xmm0, dword ptr [0xf357e0]
008a6a05: push 0
008a6a07: push 0
008a6a09: push ecx
008a6a0a: mov edx, 0xff000000
008a6a0f: xor ecx, ecx
008a6a11: movss dword ptr [esp], xmm0
008a6a16: call 0x607000
008a6a1b: call 0x4a8590
008a6a20: call 0x6c3230
008a6a25: mov ecx, edi
008a6a27: call 0x887300
008a6a2c: mov eax, dword ptr [0x1ce716c]
008a6a31: and dword ptr [eax + 0x184], 0xffffefff
008a6a3b: mov esi, 0x1d95520
008a6a40: mov dword ptr [esp + 0x24], 0x1d955d0
008a6a48: mov dword ptr [esp + 0x20], esi
008a6a4c: call 0x6bf7d0
008a6a51: test eax, eax
008a6a53: je 0x8a6a66
008a6a55: test byte ptr [eax], 1
008a6a58: je 0x8a6a66
008a6a5a: mov dword ptr [esp + 0x24], esi
008a6a5e: .byte 0xc7
008a6a5f: inc esp
008a6a60: .byte 0x24

3over4 data0xf357e0 operand0x8a90f3 candidate-start0x8a8df0
008a8df0: push ebp
008a8df1: mov ebp, esp
008a8df3: and esp, 0xfffffff0
008a8df6: sub esp, 0x54
008a8df9: push ebx
008a8dfa: push esi
008a8dfb: push edi
008a8dfc: mov dword ptr [esp + 0x2c], ecx
008a8e00: mov ecx, dword ptr [ebp + 8]
008a8e03: mov edi, edx
008a8e05: push ecx
008a8e06: mov eax, edi
008a8e08: call 0x889860
008a8e0d: xorps xmm1, xmm1
008a8e10: mov eax, dword ptr [edi + 0xc]
008a8e13: movss xmm2, dword ptr [0xec6e14]
008a8e1b: movss dword ptr [esp + 0x40], xmm1
008a8e21: movss dword ptr [esp + 0x44], xmm1
008a8e27: xorps xmm1, xmm1
008a8e2a: cvtsi2ss xmm1, ecx
008a8e2e: mulss xmm1, dword ptr [0xf2c190]
008a8e36: movss dword ptr [esp + 0x48], xmm1
008a8e3c: movaps xmm1, xmmword ptr [eax + 0x80]
008a8e43: movaps xmmword ptr [esp + 0x50], xmm1
008a8e48: movss xmm1, dword ptr [esp + 0x54]
008a8e4e: subss xmm1, dword ptr [0xf2d3f0]
008a8e56: movss dword ptr [esp + 0x24], xmm0
008a8e5c: subss xmm0, dword ptr [0xf3453c]
008a8e64: movss dword ptr [esp + 0x20], xmm0
008a8e6a: movss dword ptr [esp + 0x18], xmm1
008a8e70: mulss xmm1, xmm1
008a8e74: mulss xmm0, xmm0
008a8e78: addss xmm0, xmm1
008a8e7c: movss dword ptr [esp + 0x28], xmm1
008a8e82: xorps xmm1, xmm1
008a8e85: movss xmm1, xmm0
008a8e89: movss xmm0, dword ptr [0x1dee488]
008a8e91: mulss xmm0, dword ptr [0xf2c9a8]
008a8e99: addss xmm0, dword ptr [0xf388a4]
008a8ea1: sqrtss xmm1, xmm1
008a8ea5: movaps xmmword ptr [esp + 0x30], xmm1
008a8eaa: divss xmm0, dword ptr [esp + 0x30]
008a8eb0: movss xmm1, dword ptr [0xec6ff0]
008a8eb8: comiss xmm1, xmm0
008a8ebb: movss dword ptr [esp + 0x4c], xmm2
008a8ec1: ja 0x8a8ecb
008a8ec3: comiss xmm2, xmm0
008a8ec6: movaps xmm1, xmm0
008a8ec9: jbe 0x8a8ece
008a8ecb: movaps xmm2, xmm1
008a8ece: push ecx
008a8ecf: movss dword ptr [esp], xmm2
008a8ed4: call 0xd91920
008a8ed9: fstp dword ptr [esp + 0x1c]
008a8edd: movss xmm0, dword ptr [esp + 0x18]
008a8ee3: sub esp, 8
008a8ee6: movss dword ptr [esp + 4], xmm0
008a8eec: movss xmm0, dword ptr [esp + 0x28]
008a8ef2: movss dword ptr [esp], xmm0
008a8ef7: call 0xd91670
008a8efc: call 0xe22fa0
008a8f01: movss xmm0, dword ptr [esp + 0x1c]
008a8f07: mulss xmm0, dword ptr [0xecff20]
008a8f0f: cvttss2si ecx, xmm0
008a8f13: movss xmm0, dword ptr [esp + 0x24]
008a8f19: addss xmm0, dword ptr [0xf3453c]
008a8f21: movss dword ptr [esp + 0x24], xmm0
008a8f27: mulss xmm0, xmm0
008a8f2b: addss xmm0, dword ptr [esp + 0x28]
008a8f31: xorps xmm1, xmm1
008a8f34: movss xmm1, xmm0
008a8f38: movss xmm0, dword ptr [0x1dee488]
008a8f40: mulss xmm0, dword ptr [0xf2c9a8]
008a8f48: addss xmm0, dword ptr [0xf388a4]
008a8f50: sqrtss xmm1, xmm1
008a8f54: movaps xmmword ptr [esp + 0x30], xmm1
008a8f59: divss xmm0, dword ptr [esp + 0x30]
008a8f5f: movss xmm1, dword ptr [0xec6ff0]
008a8f67: comiss xmm1, xmm0
008a8f6a: lea ebx, [ecx + eax]
008a8f6d: ja 0x8a8f7c
008a8f6f: movss xmm1, dword ptr [0xec6e14]
008a8f77: comiss xmm1, xmm0
008a8f7a: ja 0x8a8f7f
008a8f7c: movaps xmm0, xmm1
008a8f7f: push ecx
008a8f80: movss dword ptr [esp], xmm0
008a8f85: call 0xd91920
008a8f8a: fstp dword ptr [esp + 0x28]
008a8f8e: movss xmm0, dword ptr [esp + 0x18]
008a8f94: sub esp, 8
008a8f97: movss dword ptr [esp + 4], xmm0
008a8f9d: movss xmm0, dword ptr [esp + 0x2c]
008a8fa3: movss dword ptr [esp], xmm0
008a8fa8: call 0xd91670
008a8fad: call 0xe22fa0
008a8fb2: movss xmm0, dword ptr [esp + 0x28]
008a8fb8: mulss xmm0, dword ptr [0xecff20]
008a8fc0: movss xmm6, dword ptr [0xec6fd4]
008a8fc8: mov esi, eax
008a8fca: cvttss2si edx, xmm0
008a8fce: sub esi, edx
008a8fd0: cmp esi, ebx
008a8fd2: jle 0x8a9040
008a8fd4: mov ecx, dword ptr [0x10e23b8]
008a8fda: call 0xd963d0
008a8fdf: mov ecx, eax
008a8fe1: call 0xd96410
008a8fe6: fstp dword ptr [esp + 0x28]
008a8fea: mov ecx, dword ptr [0x10e23b8]
008a8ff0: sub esi, ebx
008a8ff2: xorps xmm0, xmm0
008a8ff5: cvtsi2ss xmm0, esi
008a8ff9: movss dword ptr [esp + 0x18], xmm0
008a8fff: call 0xd963d0
008a9004: mov ecx, eax
008a9006: call 0xd96410
008a900b: fmul dword ptr [esp + 0x18]
008a900f: call 0xe22fa0
008a9014: movss xmm0, dword ptr [esp + 0x18]
008a901a: mulss xmm0, dword ptr [esp + 0x28]
008a9020: movss xmm6, dword ptr [0xec6fd4]
008a9028: cvttss2si ecx, xmm0
008a902c: add eax, ecx
008a902e: lea edx, [eax + ebx*2]
008a9031: xorps xmm0, xmm0
008a9034: cvtsi2ss xmm0, edx
008a9038: mulss xmm0, xmm6
008a903c: cvttss2si ebx, xmm0
008a9040: mov esi, dword ptr [edi + 0xc]
008a9043: movss xmm0, dword ptr [esi + 0x94]
008a904b: xorps xmm2, xmm2
008a904e: movss xmm4, dword ptr [0xec6e14]
008a9056: mov eax, 0x4000
008a905b: sub eax, ebx
008a905d: comiss xmm0, xmm2
008a9060: ja 0x8a9065
008a9062: movaps xmm6, xmm4
008a9065: movaps xmm0, xmmword ptr [esi + 0x90]
008a906c: mulps xmm0, xmm0
008a906f: movaps xmm1, xmm0
008a9072: movhlps xmm0, xmm1
008a9075: addps xmm0, xmm1
008a9078: movaps xmm1, xmm0
008a907b: shufps xmm1, xmm0, 1
008a907f: addps xmm1, xmm0
008a9082: xorps xmm0, xmm0
008a9085: movaps xmmword ptr [esp + 0x30], xmm1
008a908a: movss xmm1, dword ptr [esp + 0x30]
008a9090: movss xmm0, xmm1
008a9094: sqrtss xmm0, xmm0
008a9098: movaps xmmword ptr [esp + 0x30], xmm0
008a909d: movss xmm0, dword ptr [esp + 0x30]
008a90a3: subss xmm0, dword ptr [0xeef684]
008a90ab: mulss xmm0, dword ptr [0xee207c]
008a90b3: comiss xmm2, xmm0
008a90b6: jbe 0x8a90c0
008a90b8: movaps xmm0, xmm2
008a90bb: movaps xmm5, xmm0
008a90be: jmp 0x8a90cd
008a90c0: comiss xmm4, xmm0
008a90c3: jbe 0x8a90ca
008a90c5: movaps xmm5, xmm0
008a90c8: jmp 0x8a90cd
008a90ca: movaps xmm5, xmm4
008a90cd: movss xmm3, dword ptr [0xec6fd0]
008a90d5: xorps xmm0, xmm0
008a90d8: cvtsi2ss xmm0, eax
008a90dc: movaps xmm1, xmm0
008a90df: mulss xmm1, dword ptr [0xec90b0]
008a90e7: subss xmm1, dword ptr [0xec9470]
008a90ef: mulss xmm1, dword ptr [0xf357e0]
008a90f7: mulss xmm1, dword ptr [0xec98a0]
008a90ff: addss xmm1, xmm3
008a9103: comiss xmm3, xmm1
008a9106: jbe 0x8a910d
008a9108: movaps xmm1, xmm3
008a910b: jmp 0x8a9115
008a910d: comiss xmm4, xmm1
008a9110: ja 0x8a9115
008a9112: movaps xmm1, xmm4
008a9115: mulss xmm1, xmm6
008a9119: mulss xmm1, xmm5
008a911d: comiss xmm2, xmm1
008a9120: jbe 0x8a9127
008a9122: movaps xmm1, xmm2
008a9125: jmp 0x8a912f
008a9127: comiss xmm4, xmm1
008a912a: ja 0x8a912f
008a912c: movaps xmm1, xmm4
008a912f: movss xmm3, dword ptr [0xec7210]
008a9137: movss dword ptr [esp + 0x20], xmm1
008a913d: mulss xmm1, dword ptr [0xf2d250]
008a9145: addss xmm1, xmm3
008a9149: comiss xmm3, xmm1
008a914c: ja 0x8a915b
008a914e: .byte 0xf3
008a914f: .byte 0x0f
008a9150: .byte 0x10
008a9151: .byte 0x1d
008a9152: .byte 0xc8

3over4 data0xf40f64 operand0x90829f candidate-start0x908110
00908110: push ebp
00908111: mov ebp, esp
00908113: and esp, 0xfffffff0
00908116: sub esp, 0x34
00908119: push ebx
0090811a: push esi
0090811b: push edi
0090811c: mov edi, eax
0090811e: mov eax, dword ptr [edi + 0x18]
00908121: mov ecx, dword ptr [eax + 0xf0]
00908127: mov eax, dword ptr [eax + 0xf4]
0090812d: mov dword ptr [esp + 0x24], eax
00908131: mov eax, ecx
00908133: and eax, 2
00908136: xor edx, edx
00908138: xor ebx, ebx
0090813a: xor esi, esi
0090813c: or eax, edx
0090813e: je 0x908147
00908140: mov ebx, 1
00908145: mov esi, ebx
00908147: and ecx, 4
0090814a: xor eax, eax
0090814c: or ecx, eax
0090814e: je 0x908154
00908150: or ebx, 2
00908153: inc esi
00908154: cmp esi, 2
00908157: jne 0x9081b9
00908159: cmp dword ptr [edi + 0x38], eax
0090815c: je 0x9081b9
0090815e: mov ecx, dword ptr [edi + 8]
00908161: movaps xmm0, xmmword ptr [ecx + 0x3f0]
00908168: movaps xmmword ptr [esp + 0x20], xmm0
0090816d: movaps xmm0, xmmword ptr [ecx + 0x3b0]
00908174: movss xmm1, dword ptr [esp + 0x24]
0090817a: movaps xmmword ptr [esp + 0x30], xmm0
0090817f: movss xmm0, dword ptr [edi + 0x10]
00908184: movss xmm2, dword ptr [esp + 0x34]
0090818a: mulss xmm0, dword ptr [0xf41060]
00908192: subss xmm2, xmm1
00908196: comiss xmm0, xmm2
00908199: ja 0x9081b9
0090819b: movaps xmm2, xmmword ptr [ecx + 0x530]
009081a2: movaps xmmword ptr [esp + 0x30], xmm2
009081a7: movss xmm2, dword ptr [esp + 0x34]
009081ad: subss xmm2, xmm1
009081b1: comiss xmm2, xmm0
009081b4: jb 0x9081b9
009081b6: or ebx, 4
009081b9: push 0x907cb0
009081be: push ebx
009081bf: push 7
009081c1: push 0x2f
009081c3: push 0x12e8698
009081c8: lea edx, [esp + 0x20]
009081cc: mov dword ptr [esp + 0x20], eax
009081d0: mov dword ptr [esp + 0x24], eax
009081d4: push edx
009081d5: lea eax, [esp + 0x28]
009081d9: push eax
009081da: push edi
009081db: call 0x907fa0
009081e0: test eax, eax
009081e2: je 0x9083e4
009081e8: mov eax, dword ptr [edi + 0x20]
009081eb: movss xmm0, dword ptr [eax + 0x34]
009081f0: movss xmm1, dword ptr [eax + 0x44]
009081f5: push ecx
009081f6: mov ecx, 0xf40f74
009081fb: movss dword ptr [esp + 0x1c], xmm1
00908201: movss dword ptr [esp], xmm0
00908206: call 0x6cb4c0
0090820b: fstp dword ptr [esp + 0x1c]
0090820f: movss xmm1, dword ptr [esp + 0x1c]
00908215: movss xmm0, dword ptr [esp + 0x18]
0090821b: comiss xmm1, xmm0
0090821e: ja 0x908223
00908220: movaps xmm0, xmm1
00908223: movss xmm1, dword ptr [0xf2d450]
0090822b: mov esi, dword ptr [esp + 0x10]
0090822f: mov edx, dword ptr [esi + 0x14]
00908232: sub esp, 8
00908235: movss dword ptr [esp + 4], xmm1
0090823b: mov ecx, edi
0090823d: movss dword ptr [esp + 0x20], xmm0
00908243: movss dword ptr [esp], xmm0
00908248: call 0x90aeb0
0090824d: fst dword ptr [esp + 0x14]
00908251: fld dword ptr [0xf40f6c]
00908257: fxch st(1)
00908259: fcompi st(1)
0090825b: fstp st(0)
0090825d: jbe 0x9083e4
00908263: mov ecx, dword ptr [esi + 0x14]
00908266: mov edx, 0x27
0090826b: call 0x403e50
00908270: fstp dword ptr [esp + 0x1c]
00908274: movss xmm0, dword ptr [esp + 0x1c]
0090827a: movss xmm3, dword ptr [esp + 0x14]
00908280: movss xmm2, dword ptr [esi + 0x1c]
00908285: movaps xmm1, xmm0
00908288: subss xmm1, xmm3
0090828c: comiss xmm2, xmm1
0090828f: jbe 0x908294
00908291: movaps xmm1, xmm2
00908294: subss xmm0, xmm1
00908298: divss xmm0, xmm3
0090829c: comiss xmm0, dword ptr [0xf40f64]
009082a3: movss dword ptr [esp + 0x1c], xmm1
009082a9: movss dword ptr [esp + 0x20], xmm0
009082af: jb 0x9083e4
009082b5: movss xmm1, dword ptr [0xf40f68]
009082bd: comiss xmm1, xmm0
009082c0: jb 0x9083e4
009082c6: cmp dword ptr [esp + 0xc], 0
009082cb: je 0x9082d8
009082cd: mov esi, dword ptr [esi + 0x20]
009082d0: neg esi
009082d2: mov dword ptr [esp + 0x14], esi
009082d6: jmp 0x9082df
009082d8: mov ecx, dword ptr [esi + 0x20]
009082db: mov dword ptr [esp + 0x14], ecx
009082df: mov ecx, edi
009082e1: call 0x7d0d10
009082e6: mov ebx, eax
009082e8: mov esi, ebx
009082ea: sub esi, dword ptr [esp + 0x14]
009082ee: mov ecx, edi
009082f0: call 0x401bf0
009082f5: mov edx, esi
009082f7: sub edx, eax
009082f9: movsx edx, dx
009082fc: .byte 0x89
009082fd: inc esp
009082fe: .byte 0x24

3over4 data0xf40f64 operand0x908653 candidate-start0x9084b0
009084b0: push ebp
009084b1: mov ebp, esp
009084b3: and esp, 0xfffffff0
009084b6: mov eax, dword ptr [esi + 0x1c]
009084b9: mov eax, dword ptr [eax + 0x50]
009084bc: movss xmm0, dword ptr [eax + 4]
009084c1: mov eax, dword ptr [eax]
009084c3: sub esp, 0x38
009084c6: push ebx
009084c7: push edi
009084c8: push ecx
009084c9: xor edx, edx
009084cb: mov ecx, eax
009084cd: xor ebx, ebx
009084cf: xor edi, edi
009084d1: movss dword ptr [esp], xmm0
009084d6: call 0x6b6b50
009084db: cmp eax, 0x17
009084de: je 0x9084e7
009084e0: mov ebx, 1
009084e5: mov edi, ebx
009084e7: cmp eax, 0x16
009084ea: je 0x9084f0
009084ec: or ebx, 2
009084ef: inc edi
009084f0: mov dword ptr [esp + 0x10], 7
009084f8: cmp edi, 2
009084fb: jne 0x90855e
009084fd: cmp dword ptr [esi + 0x38], 0
00908501: je 0x90855e
00908503: mov eax, dword ptr [esi + 8]
00908506: movaps xmm0, xmmword ptr [eax + 0x3f0]
0090850d: movaps xmmword ptr [esp + 0x30], xmm0
00908512: movaps xmm0, xmmword ptr [eax + 0x3b0]
00908519: movss xmm1, dword ptr [esp + 0x34]
0090851f: movaps xmmword ptr [esp + 0x20], xmm0
00908524: movss xmm0, dword ptr [esi + 0x10]
00908529: movss xmm2, dword ptr [esp + 0x24]
0090852f: mulss xmm0, dword ptr [0xf41060]
00908537: subss xmm2, xmm1
0090853b: comiss xmm0, xmm2
0090853e: ja 0x90855e
00908540: movaps xmm2, xmmword ptr [eax + 0x530]
00908547: movaps xmmword ptr [esp + 0x30], xmm2
0090854c: movss xmm2, dword ptr [esp + 0x34]
00908552: subss xmm2, xmm1
00908556: comiss xmm2, xmm0
00908559: jb 0x90855e
0090855b: or ebx, 4
0090855e: push esi
0090855f: lea edi, [esp + 0x14]
00908563: call 0x9083f0
00908568: mov ecx, dword ptr [esp + 0x10]
0090856c: push 0x907d00
00908571: push ebx
00908572: push ecx
00908573: push 0x1e
00908575: push 0x12e8d38
0090857a: lea edx, [esp + 0x2c]
0090857e: push edx
0090857f: lea eax, [esp + 0x24]
00908583: push eax
00908584: xor edi, edi
00908586: push esi
00908587: mov dword ptr [esp + 0x38], edi
0090858b: mov dword ptr [esp + 0x2c], edi
0090858f: call 0x907fa0
00908594: test eax, eax
00908596: je 0x9086f3
0090859c: mov eax, dword ptr [esi + 0x20]
0090859f: movss xmm0, dword ptr [eax + 0x34]
009085a4: movss xmm1, dword ptr [eax + 0x44]
009085a9: push ecx
009085aa: mov ecx, 0xf40f74
009085af: movss dword ptr [esp + 0x14], xmm1
009085b5: movss dword ptr [esp], xmm0
009085ba: call 0x6cb4c0
009085bf: fstp dword ptr [esp + 0x14]
009085c3: movss xmm1, dword ptr [esp + 0x14]
009085c9: movss xmm0, dword ptr [esp + 0x10]
009085cf: comiss xmm1, xmm0
009085d2: ja 0x9085d7
009085d4: movaps xmm0, xmm1
009085d7: movss xmm1, dword ptr [0xf2d450]
009085df: mov ebx, dword ptr [esp + 0xc]
009085e3: mov edx, dword ptr [ebx + 0x14]
009085e6: sub esp, 8
009085e9: movss dword ptr [esp + 4], xmm1
009085ef: mov ecx, esi
009085f1: movss dword ptr [esp + 0x18], xmm0
009085f7: movss dword ptr [esp], xmm0
009085fc: call 0x90aeb0
00908601: fst dword ptr [esp + 0x1c]
00908605: fld dword ptr [0xf40f6c]
0090860b: fxch st(1)
0090860d: fcompi st(1)
0090860f: fstp st(0)
00908611: jbe 0x9086f3
00908617: mov ecx, dword ptr [ebx + 0x14]
0090861a: mov edx, 0x27
0090861f: call 0x403e50
00908624: fstp dword ptr [esp + 0x14]
00908628: movss xmm0, dword ptr [esp + 0x14]
0090862e: movss xmm3, dword ptr [esp + 0x1c]
00908634: movss xmm2, dword ptr [ebx + 0x1c]
00908639: movaps xmm1, xmm0
0090863c: subss xmm1, xmm3
00908640: comiss xmm2, xmm1
00908643: jbe 0x908648
00908645: movaps xmm1, xmm2
00908648: subss xmm0, xmm1
0090864c: divss xmm0, xmm3
00908650: comiss xmm0, dword ptr [0xf40f64]
00908657: movss dword ptr [esp + 0x14], xmm1
0090865d: movss dword ptr [esp + 0x1c], xmm0
00908663: jb 0x9086f3
00908669: movss xmm1, dword ptr [0xf40f68]
00908671: comiss xmm1, xmm0
00908674: jb 0x9086f3
00908676: mov ecx, dword ptr [esi + 0x20]
00908679: movaps xmm0, xmmword ptr [ecx + 0x40]
0090867d: mov ebx, dword ptr [esi + 0x18]
00908680: movaps xmmword ptr [esp + 0x20], xmm0
00908685: movss xmm0, dword ptr [esp + 0x10]
0090868b: mov ecx, ebx
0090868d: movss dword ptr [esp + 0x24], xmm0
00908693: call 0x907880
00908698: test eax, eax
0090869a: je 0x9086a6
0090869c: mov ecx, ebx
0090869e: call 0x7ae390
009086a3: lea edi, [eax + 0x20]
009086a6: push 1
009086a8: lea edx, [esp + 0x24]
009086ac: push edx
009086ad: mov ecx, esi
009086af: .byte 0xe8
009086b0: cmp al, 0x95
009086b2: scasd eax, dword ptr es:[edi]

3over4 data0xf40f64 operand0x908a1f candidate-start0x908930
00908930: push ebp
00908931: mov ebp, esp
00908933: and esp, 0xfffffff0
00908936: sub esp, 0x34
00908939: mov ecx, dword ptr [0x10e23b8]
0090893f: push ebx
00908940: mov ebx, dword ptr [ebp + 8]
00908943: push esi
00908944: mov esi, dword ptr [ebx*8 + 0xf40fbc]
0090894b: push edi
0090894c: mov edi, eax
0090894e: call 0xd963d0
00908953: mov dword ptr [esp + 0x2c], edx
00908957: xor edx, edx
00908959: div esi
0090895b: mov ecx, dword ptr [ebx*8 + 0xf40fb8]
00908962: push ecx
00908963: lea eax, [edx + edx*8]
00908966: lea esi, [ecx + eax*4]
00908969: mov eax, dword ptr [edi + 0x20]
0090896c: movss xmm0, dword ptr [eax + 0x34]
00908971: movss xmm1, dword ptr [eax + 0x44]
00908976: mov ecx, 0xf40f74
0090897b: mov dword ptr [esp + 0x2c], esi
0090897f: movss dword ptr [esp + 0x20], xmm1
00908985: movss dword ptr [esp], xmm0
0090898a: call 0x6cb4c0
0090898f: fstp dword ptr [esp + 0x20]
00908993: movss xmm1, dword ptr [esp + 0x20]
00908999: movss xmm0, dword ptr [esp + 0x1c]
0090899f: comiss xmm1, xmm0
009089a2: ja 0x9089a7
009089a4: movaps xmm0, xmm1
009089a7: movss xmm1, dword ptr [0xf2d450]
009089af: mov edx, dword ptr [esi + 0x14]
009089b2: sub esp, 8
009089b5: movss dword ptr [esp + 4], xmm1
009089bb: mov ecx, edi
009089bd: movss dword ptr [esp + 0x20], xmm0
009089c3: movss dword ptr [esp], xmm0
009089c8: call 0x90aeb0
009089cd: fst dword ptr [esp + 0x1c]
009089d1: fld dword ptr [0xf40f6c]
009089d7: fxch st(1)
009089d9: fcompi st(1)
009089db: fstp st(0)
009089dd: jbe 0x908b27
009089e3: mov ecx, dword ptr [esi + 0x14]
009089e6: mov edx, 0x27
009089eb: call 0x403e50
009089f0: fstp dword ptr [esp + 0x20]
009089f4: movss xmm0, dword ptr [esp + 0x20]
009089fa: movss xmm3, dword ptr [esp + 0x1c]
00908a00: movss xmm2, dword ptr [esi + 0x1c]
00908a05: movaps xmm1, xmm0
00908a08: subss xmm1, xmm3
00908a0c: comiss xmm2, xmm1
00908a0f: jbe 0x908a14
00908a11: movaps xmm1, xmm2
00908a14: subss xmm0, xmm1
00908a18: divss xmm0, xmm3
00908a1c: comiss xmm0, dword ptr [0xf40f64]
00908a23: movss dword ptr [esp + 0x1c], xmm1
00908a29: movss dword ptr [esp + 0x24], xmm0
00908a2f: jb 0x908b27
00908a35: movss xmm1, dword ptr [0xf40f68]
00908a3d: comiss xmm1, xmm0
00908a40: jb 0x908b27
00908a46: mov esi, 1
00908a4b: cmp dword ptr [edi + 0x74], esi
00908a4e: jne 0x908a6c
00908a50: mov edx, dword ptr [edi]
00908a52: mov eax, dword ptr [edx + 0x20]
00908a55: mov ecx, edi
00908a57: call eax
00908a59: mov ecx, dword ptr [eax + 0xb00]
00908a5f: call 0xcb7eb0
00908a64: mov dword ptr [esp + 0x20], esi
00908a68: test eax, eax
00908a6a: je 0x908a74
00908a6c: mov dword ptr [esp + 0x20], 0
00908a74: mov ecx, dword ptr [edi + 0x20]
00908a77: mov esi, dword ptr [ecx + 0x50]
00908a7a: cmp ebx, 6
00908a7d: jne 0x908abe

3over4 data0xf40f64 operand0x908fe6 candidate-start0x908e10
00908e10: push ebp
00908e11: mov ebp, esp
00908e13: and esp, 0xfffffff0
00908e16: sub esp, 0x64
00908e19: mov ecx, dword ptr [ebp + 0xc]
00908e1c: mov eax, dword ptr [ecx + 8]
00908e1f: movaps xmm0, xmmword ptr [eax + 0x3f0]
00908e26: movss xmm3, dword ptr [0xec98e0]
00908e2e: movaps xmmword ptr [esp + 0x34], xmm0
00908e33: movaps xmm0, xmmword ptr [eax + 0x3b0]
00908e3a: movss xmm2, dword ptr [esp + 0x38]
00908e40: push ebx
00908e41: push esi
00908e42: movaps xmmword ptr [esp + 0x4c], xmm0
00908e47: movaps xmm0, xmmword ptr [eax + 0x530]
00908e4e: movaps xmmword ptr [esp + 0x5c], xmm0
00908e53: movss xmm0, dword ptr [esp + 0x50]
00908e59: movss xmm1, dword ptr [esp + 0x60]
00908e5f: push edi
00908e60: xor edi, edi
00908e62: xor esi, esi
00908e64: comiss xmm0, xmm2
00908e67: jbe 0x908e7a
00908e69: movaps xmm4, xmm1
00908e6c: addss xmm4, xmm3
00908e70: comiss xmm0, xmm4
00908e73: jbe 0x908e7a
00908e75: lea esi, [edi + 1]
00908e78: jmp 0x908e9c
00908e7a: comiss xmm1, xmm2
00908e7d: jbe 0x908e9c
00908e7f: movaps xmm4, xmm0
00908e82: addss xmm4, xmm3
00908e86: comiss xmm1, xmm4
00908e89: jbe 0x908e92
00908e8b: mov esi, 2
00908e90: jmp 0x908e9c
00908e92: comiss xmm0, xmm2
00908e95: jbe 0x908e9c
00908e97: mov esi, 4
00908e9c: mov eax, dword ptr [ecx + 0x20]
00908e9f: movss xmm0, dword ptr [eax + 0x34]
00908ea4: movss xmm1, dword ptr [eax + 0x44]
00908ea9: push ecx
00908eaa: mov ecx, 0xf40f74
00908eaf: movss dword ptr [esp + 0x2c], xmm1
00908eb5: movss dword ptr [esp], xmm0
00908eba: call 0x6cb4c0
00908ebf: fstp dword ptr [esp + 0x2c]
00908ec3: movss xmm1, dword ptr [esp + 0x2c]
00908ec9: movss xmm0, dword ptr [esp + 0x28]
00908ecf: comiss xmm1, xmm0
00908ed2: jbe 0x908edc
00908ed4: movss dword ptr [esp + 0x1c], xmm0
00908eda: jmp 0x908ee2
00908edc: movss dword ptr [esp + 0x1c], xmm1
00908ee2: xorps xmm0, xmm0
00908ee5: mov edx, dword ptr [ebp + 8]
00908ee8: movss dword ptr [esp + 0x48], xmm0
00908eee: movss xmm0, dword ptr [0xec6e14]
00908ef6: mov dword ptr [esp + 0x40], edi
00908efa: mov dword ptr [esp + 0x44], edi
00908efe: movss dword ptr [esp + 0x4c], xmm0
00908f04: mov dword ptr [esp + 0x20], edi
00908f08: mov dword ptr [esp + 0x2c], edi
00908f0c: cmp dword ptr [edx*8 + 0xf40fbc], edi
00908f13: jle 0x9090e4
00908f19: and esi, 7
00908f1c: mov dword ptr [esp + 0x30], esi
00908f20: mov dword ptr [esp + 0x18], edi
00908f24: mov esi, dword ptr [edx*8 + 0xf40fb8]
00908f2b: add esi, dword ptr [esp + 0x18]
00908f2f: xor eax, eax
00908f31: mov dword ptr [esp + 0x28], eax
00908f35: xor ecx, ecx
00908f37: cmp eax, 1
00908f3a: sete cl
00908f3d: mov edi, ecx
00908f3f: test edi, edi
00908f41: je 0x908f5a
00908f43: mov ecx, dword ptr [esi + 0x10]
00908f46: mov ebx, dword ptr [esi + 0x18]
00908f49: push 0x912
00908f4e: mov edx, 0x489
00908f53: call 0x846720
00908f58: jmp 0x908f60
00908f5a: mov ebx, dword ptr [esi + 0x14]
00908f5d: mov eax, dword ptr [esi + 0x10]
00908f60: and eax, 7
00908f63: cmp eax, dword ptr [esp + 0x30]
00908f67: jne 0x909041
00908f6d: movss xmm0, dword ptr [0xf2d450]
00908f75: mov ecx, dword ptr [ebp + 0xc]
00908f78: sub esp, 8
00908f7b: movss dword ptr [esp + 4], xmm0
00908f81: movss xmm0, dword ptr [esp + 0x24]
00908f87: mov edx, ebx
00908f89: movss dword ptr [esp], xmm0
00908f8e: call 0x90aeb0
00908f93: fst dword ptr [esp + 0x38]
00908f97: fld dword ptr [0xf40f6c]
00908f9d: fxch st(1)
00908f9f: fcompi st(1)
00908fa1: fstp st(0)
00908fa3: jbe 0x909041
00908fa9: mov edx, 0x27
00908fae: mov ecx, ebx
00908fb0: call 0x403e50
00908fb5: fstp dword ptr [esp + 0x34]
00908fb9: mov edx, 0x14
00908fbe: mov ecx, ebx
00908fc0: call 0x40cf50
00908fc5: test eax, eax
00908fc7: jne 0x908fce
00908fc9: xorps xmm1, xmm1
00908fcc: jmp 0x908fd3
00908fce: movss xmm1, dword ptr [eax + 4]
00908fd3: movss xmm0, dword ptr [esp + 0x34]
00908fd9: subss xmm0, xmm1
00908fdd: divss xmm0, dword ptr [esp + 0x38]
00908fe3: comiss xmm0, dword ptr [0xf40f64]
00908fea: movss dword ptr [esp + 0x24], xmm1
00908ff0: movss dword ptr [esp + 0x3c], xmm0
00908ff6: jb 0x909041
00908ff8: movss xmm1, dword ptr [0xf40f68]
00909000: comiss xmm1, xmm0
00909003: jb 0x909041
00909005: mov ebx, dword ptr [esp + 0x20]
00909009: mov ecx, dword ptr [0x10e23b8]
0090900f: inc ebx
00909010: mov dword ptr [esp + 0x20], ebx
00909014: call 0xd963d0
00909019: xor edx, edx
0090901b: div ebx
0090901d: test edx, edx
0090901f: jne 0x909041
00909021: movss xmm0, dword ptr [esp + 0x24]
00909027: movss dword ptr [esp + 0x48], xmm0
0090902d: movss xmm0, dword ptr [esp + 0x3c]
00909033: mov dword ptr [esp + 0x40], esi
00909037: mov dword ptr [esp + 0x44], edi
0090903b: movss dword ptr [esp + 0x4c], xmm0
00909041: mov eax, dword ptr [esp + 0x28]
00909045: inc eax

3over4 data0xf41a08 operand0x911825 candidate-start0x911740
00911740: pxor xmm0, xmm0
00911744: movq qword ptr [0x1e19ecc], xmm0
0091174c: movq qword ptr [0x1e19ed4], xmm0
00911754: mov dword ptr [0x1e19edc], 0
0091175e: ret 
0091175f: int3 
00911760: push ebp
00911761: mov ebp, esp
00911763: and esp, 0xfffffff0
00911766: sub esp, 0x30
00911769: mov ecx, esi
0091176b: call 0x401be0
00911770: fstp dword ptr [esp + 0xc]
00911774: call 0x880380
00911779: mov dword ptr [esp + 8], eax
0091177d: fild dword ptr [esp + 8]
00911781: fmul dword ptr [esp + 0xc]
00911785: fldz 
00911787: fcompi st(1)
00911789: fstp st(0)
0091178b: jbe 0x911796
0091178d: xorps xmm0, xmm0
00911790: mov esp, ebp
00911792: pop ebp
00911793: ret 4
00911796: lea ecx, [esp + 0x20]
0091179a: call 0x6ef360
0091179f: mov edx, eax
009117a1: mov ecx, esi
009117a3: call 0x706b50
009117a8: fstp dword ptr [esp + 0xc]
009117ac: mov eax, dword ptr [esi + 0x18]
009117af: mov ecx, dword ptr [eax + 4]
009117b2: mov edx, dword ptr [ecx]
009117b4: and edx, 0xff000000
009117ba: cmp edx, 0x24000000
009117c0: je 0x91181c
009117c2: movss xmm3, dword ptr [0x1e19ed4]
009117ca: movss xmm1, dword ptr [esp + 0xc]
009117d0: movaps xmm0, xmm3
009117d3: subss xmm0, xmm1
009117d7: shufps xmm0, xmm0, 0
009117db: andps xmm0, xmmword ptr [0xf41c40]
009117e2: movaps xmmword ptr [esp + 0x10], xmm0
009117e7: movss xmm0, dword ptr [0xf419f4]
009117ef: comiss xmm0, dword ptr [esp + 0x10]
009117f4: movss xmm0, dword ptr [ebp + 8]
009117f9: ja 0x911829
009117fb: comiss xmm3, xmm1
009117fe: movss dword ptr [0x1e19ed4], xmm1
00911806: jbe 0x911812
00911808: mulss xmm0, dword ptr [0xf419fc]
00911810: jmp 0x911829
00911812: mulss xmm0, dword ptr [0xf41850]
0091181a: jmp 0x911829
0091181c: movss xmm0, dword ptr [ebp + 8]
00911821: mulss xmm0, dword ptr [0xf41a08]
00911829: mov eax, dword ptr [esi + 0xb0c]
0091182f: movss xmm1, dword ptr [eax*4 + 0xf41a10]
00911838: mulss xmm1, xmm0
0091183c: movss dword ptr [esp + 8], xmm1
00911842: call 0x6e1dc0
00911847: movss xmm0, dword ptr [esp + 8]
0091184d: test eax, eax
0091184f: je 0x911859
00911851: mulss xmm0, dword ptr [0xf419fc]
00911859: mov esp, ebp
0091185b: pop ebp
0091185c: ret 4
0091185f: int3 
00911860: push ebp
00911861: mov ebp, esp
00911863: and esp, 0xfffffff0
00911866: sub esp, 0x1c
00911869: push esi
0091186a: call 0x4120b0
0091186f: cmp dword ptr [eax + 0x34], 0
00911873: je 0x911a23
00911879: mov ecx, dword ptr [eax + 0x2c]
0091187c: lea ecx, [ecx + ecx*2]
0091187f: cmp dword ptr [eax + ecx*4 + 0x14], 0xa
00911884: .byte 0x0f

3over4 data0xf41a08 operand0x912c0b candidate-start0x912bc0
00912bc0: push ecx
00912bc1: push ebx
00912bc2: mov ebx, dword ptr [edi + 0xb0c]
00912bc8: push ebp
00912bc9: push esi
00912bca: mov ecx, edi
00912bcc: call 0x6b5300
00912bd1: xorps xmm0, xmm0
00912bd4: mov ebp, eax
00912bd6: mov eax, dword ptr [edi + 0xb00]
00912bdc: mov esi, dword ptr [eax + 0x34]
00912bdf: shr esi, 8
00912be2: and esi, 7
00912be5: movss dword ptr [esp + 0xc], xmm0
00912beb: cmp ebx, 5
00912bee: je 0x912d18
00912bf4: cmp ebx, 4
00912bf7: je 0x912d18
00912bfd: mov ecx, ebp
00912bff: call 0x6d62f0
00912c04: cmp ebx, 1
00912c07: jne 0x912c6a
00912c09: fld dword ptr [0xf41a08]
00912c0f: fcompi st(1)
00912c11: fstp st(0)
00912c13: jb 0x912c4d
00912c15: mov ecx, ebp
00912c17: call 0x6d6560
00912c1c: fld dword ptr [0xf41878]
00912c22: fcompi st(1)
00912c24: fstp st(0)
00912c26: jb 0x912c4d
00912c28: mov ecx, edi
00912c2a: call 0x6d3600
00912c2f: fstp dword ptr [esp + 0xc]
00912c33: movss xmm0, dword ptr [esp + 0xc]
00912c39: push ecx
00912c3a: mov ecx, 0xf41b58
00912c3f: movss dword ptr [esp], xmm0
00912c44: call 0x6cb570
00912c49: fstp dword ptr [esp + 0xc]
00912c4d: movss xmm0, dword ptr [esp + 0xc]
00912c53: cmp esi, 4
00912c56: je 0x912c5d
00912c58: cmp esi, 3
00912c5b: jne 0x912c65
00912c5d: mulss xmm0, dword ptr [0xf41874]
00912c65: pop esi
00912c66: pop ebp
00912c67: pop ebx
00912c68: pop ecx
00912c69: ret 
00912c6a: .byte 0x83

3over4 data0xf41a08 operand0x912c71 candidate-start0x912bc0
00912bc0: push ecx
00912bc1: push ebx
00912bc2: mov ebx, dword ptr [edi + 0xb0c]
00912bc8: push ebp
00912bc9: push esi
00912bca: mov ecx, edi
00912bcc: call 0x6b5300
00912bd1: xorps xmm0, xmm0
00912bd4: mov ebp, eax
00912bd6: mov eax, dword ptr [edi + 0xb00]
00912bdc: mov esi, dword ptr [eax + 0x34]
00912bdf: shr esi, 8
00912be2: and esi, 7
00912be5: movss dword ptr [esp + 0xc], xmm0
00912beb: cmp ebx, 5
00912bee: je 0x912d18
00912bf4: cmp ebx, 4
00912bf7: je 0x912d18
00912bfd: mov ecx, ebp
00912bff: call 0x6d62f0
00912c04: cmp ebx, 1
00912c07: jne 0x912c6a
00912c09: fld dword ptr [0xf41a08]
00912c0f: fcompi st(1)
00912c11: fstp st(0)
00912c13: jb 0x912c4d
00912c15: mov ecx, ebp
00912c17: call 0x6d6560
00912c1c: fld dword ptr [0xf41878]
00912c22: fcompi st(1)
00912c24: fstp st(0)
00912c26: jb 0x912c4d
00912c28: mov ecx, edi
00912c2a: call 0x6d3600
00912c2f: fstp dword ptr [esp + 0xc]
00912c33: movss xmm0, dword ptr [esp + 0xc]
00912c39: push ecx
00912c3a: mov ecx, 0xf41b58
00912c3f: movss dword ptr [esp], xmm0
00912c44: call 0x6cb570
00912c49: fstp dword ptr [esp + 0xc]
00912c4d: movss xmm0, dword ptr [esp + 0xc]
00912c53: cmp esi, 4
00912c56: je 0x912c5d
00912c58: cmp esi, 3
00912c5b: jne 0x912c65
00912c5d: mulss xmm0, dword ptr [0xf41874]
00912c65: pop esi
00912c66: pop ebp
00912c67: pop ebx
00912c68: pop ecx
00912c69: ret 
00912c6a: cmp ebx, 2
00912c6d: jne 0x912c8a
00912c6f: fld dword ptr [0xf41a08]
00912c75: fcompi st(1)
00912c77: fstp st(0)
00912c79: jb 0x912c4d
00912c7b: mov ecx, ebp
00912c7d: call 0x6d6560
00912c82: fld dword ptr [0xf41884]
00912c88: jmp 0x912c22
00912c8a: fld dword ptr [0xec98c8]
00912c90: fcompi st(1)
00912c92: fstp st(0)
00912c94: jb 0x912cce
00912c96: mov ecx, ebp
00912c98: call 0x6d6560
00912c9d: fld dword ptr [0xf41884]
00912ca3: fcompi st(1)
00912ca5: fstp st(0)
00912ca7: jb 0x912cce
00912ca9: mov ecx, edi
00912cab: call 0x6d3600
00912cb0: fstp dword ptr [esp + 0xc]
00912cb4: movss xmm0, dword ptr [esp + 0xc]
00912cba: push ecx
00912cbb: mov ecx, 0xf41b58
00912cc0: movss dword ptr [esp], xmm0
00912cc5: call 0x6cb570
00912cca: fstp dword ptr [esp + 0xc]
00912cce: .byte 0xf3
00912ccf: .byte 0x0f
00912cd0: .byte 0x10

3over4 data0xf4c284 operand0x9a0431 candidate-start0x9a0260
009a0260: push ebp
009a0261: mov ebp, esp
009a0263: and esp, 0xfffffff0
009a0266: sub esp, 0x3c
009a0269: movaps xmm0, xmmword ptr [0x1e694c0]
009a0270: push esi
009a0271: mov esi, eax
009a0273: mov edx, 0x1e694c0
009a0278: mov ecx, esi
009a027a: movaps xmmword ptr [esp + 0x20], xmm0
009a027f: call 0x401bb0
009a0284: xorps xmm0, xmm0
009a0287: mov ecx, esi
009a0289: movss dword ptr [esp + 0xc], xmm0
009a028f: call 0x6b47f0
009a0294: test eax, eax
009a0296: je 0x9a03e7
009a029c: mov ecx, esi
009a029e: call 0x7d1d90
009a02a3: test eax, eax
009a02a5: jne 0x9a0408
009a02ab: mov eax, dword ptr [esi + 0x18]
009a02ae: mov ecx, dword ptr [eax + 4]
009a02b1: mov edx, dword ptr [ecx]
009a02b3: and edx, 0xff000000
009a02b9: cmp edx, 0x4f000000
009a02bf: je 0x9a0408
009a02c5: movaps xmm0, xmmword ptr [0xf4c300]
009a02cc: movaps xmm1, xmmword ptr [0x1e694c0]
009a02d3: subps xmm1, xmmword ptr [esp + 0x20]
009a02d8: mulps xmm1, xmm0
009a02db: movss xmm0, dword ptr [0xec6e14]
009a02e3: divss xmm0, dword ptr [ebp + 8]
009a02e8: lea edx, [esp + 0x20]
009a02ec: mov ecx, esi
009a02ee: shufps xmm0, xmm0, 0
009a02f2: mulps xmm1, xmm0
009a02f5: movaps xmmword ptr [esp + 0x30], xmm1
009a02fa: call 0x6d3530
009a02ff: movaps xmm2, xmmword ptr [esp + 0x20]
009a0304: xorps xmm3, xmm3
009a0307: movaps xmm1, xmm2
009a030a: mulps xmm1, xmm2
009a030d: movaps xmm0, xmm1
009a0310: movhlps xmm0, xmm1
009a0313: addps xmm0, xmm1
009a0316: movaps xmm1, xmm0
009a0319: shufps xmm1, xmm0, 1
009a031d: addps xmm1, xmm0
009a0320: movaps xmmword ptr [esp + 0x20], xmm1
009a0325: movss xmm0, dword ptr [esp + 0x20]
009a032b: sqrtss xmm0, xmm0
009a032f: movaps xmmword ptr [esp + 0x10], xmm0
009a0334: movss xmm0, dword ptr [esp + 0x10]
009a033a: ucomiss xmm0, xmm3
009a033d: lahf 
009a033e: test ah, 0x44
009a0341: jnp 0x9a0353
009a0343: movss xmm0, dword ptr [0xec6e14]
009a034b: divss xmm0, dword ptr [esp + 0x10]
009a0351: jmp 0x9a0356
009a0353: movaps xmm0, xmm3
009a0356: shufps xmm0, xmm0, 0
009a035a: mulps xmm0, xmm2
009a035d: xorps xmm1, xmm1
009a0360: cmpneqps xmm2, xmm1
009a0364: andps xmm0, xmm2
009a0367: movaps xmmword ptr [esp + 0x20], xmm0
009a036c: mulps xmm0, xmmword ptr [esp + 0x30]
009a0371: movaps xmm1, xmm0
009a0374: movhlps xmm1, xmm0
009a0377: addps xmm1, xmm0
009a037a: shufps xmm0, xmm0, 1
009a037e: addss xmm0, xmm1
009a0382: movaps xmmword ptr [esp + 0x10], xmm0
009a0387: movss xmm0, dword ptr [esp + 0x10]
009a038d: shufps xmm0, xmm0, 0
009a0391: andps xmm0, xmmword ptr [0xf4c2e0]
009a0398: movaps xmmword ptr [esp + 0x30], xmm0
009a039d: movss xmm0, dword ptr [0xf4c280]
009a03a5: comiss xmm0, dword ptr [esp + 0x30]
009a03aa: jbe 0x9a03c0
009a03ac: movss xmm0, dword ptr [ebp + 8]
009a03b1: mulss xmm0, dword ptr [0xf4c288]
009a03b9: pop esi
009a03ba: mov esp, ebp
009a03bc: pop ebp
009a03bd: ret 4
009a03c0: movss xmm0, dword ptr [esp + 0x10]
009a03c6: comiss xmm0, xmm3
009a03c9: jbe 0x9a03f4
009a03cb: push ecx
009a03cc: mov edx, 2
009a03d1: mov ecx, 0xf4c2b0
009a03d6: movss dword ptr [esp], xmm0
009a03db: call 0x404870
009a03e0: fmul dword ptr [ebp + 8]
009a03e3: fstp dword ptr [esp + 0xc]
009a03e7: movss xmm0, dword ptr [esp + 0xc]
009a03ed: pop esi
009a03ee: mov esp, ebp
009a03f0: pop ebp
009a03f1: ret 4
009a03f4: movss xmm0, dword ptr [ebp + 8]
009a03f9: mulss xmm0, dword ptr [0xf4c28c]
009a0401: pop esi
009a0402: mov esp, ebp
009a0404: pop ebp
009a0405: ret 4
009a0408: mov esi, dword ptr [esi + 0x18]
009a040b: mov eax, dword ptr [esi + 4]
009a040e: movzx eax, byte ptr [eax + 3]
009a0412: cmp eax, 0x30
009a0415: jne 0x9a0423
009a0417: movss xmm0, dword ptr [ebp + 8]
009a041c: pop esi
009a041d: mov esp, ebp
009a041f: pop ebp
009a0420: ret 4
009a0423: cmp eax, 0x27
009a0426: jne 0x9a03e7
009a0428: movss xmm0, dword ptr [ebp + 8]
009a042d: mulss xmm0, dword ptr [0xf4c284]
009a0435: pop esi
009a0436: mov esp, ebp
009a0438: pop ebp
009a0439: ret 4
009a043c: int3 
009a043d: int3 
009a043e: int3 
009a043f: int3 
009a0440: mov ecx, dword ptr [0x1e694a8]
009a0446: test ecx, ecx
009a0448: je 0x9a049c
009a044a: movss xmm0, dword ptr [0x1e694ac]
009a0452: ucomiss xmm0, dword ptr [0xec6fb8]
009a0459: lahf 
009a045a: test ah, 0x44
009a045d: jnp 0x9a049c
009a045f: movss xmm0, dword ptr [esp + 4]
009a0465: push ecx
009a0466: mov eax, ecx
009a0468: movss dword ptr [esp], xmm0
009a046d: call 0x9a0260
009a0472: movss xmm1, dword ptr [0x1e694ac]
009a047a: addss xmm1, xmm0
009a047e: movss xmm0, dword ptr [0x1e694b0]
009a0486: addss xmm0, dword ptr [esp + 4]
009a048c: .byte 0xf3
009a048d: .byte 0x0f
009a048e: .byte 0x11
009a048f: .byte 0x0d
009a0490: lodsb al, byte ptr [esi]

3over4 data0xf4de04 operand0x9b6542 candidate-start0x9b6360
009b6360: push ecx
009b6361: push ebx
009b6362: push edi
009b6363: mov edi, ecx
009b6365: mov ecx, dword ptr [edi + 0xb00]
009b636b: mov ebx, edx
009b636d: call 0xcb1840
009b6372: cmp eax, 0x1a
009b6375: jl 0x9b6391
009b6377: mov ecx, edi
009b6379: call 0x6b5300
009b637e: mov ecx, eax
009b6380: call 0x6d63f0
009b6385: fld dword ptr [0xf4ddd4]
009b638b: fcompi st(1)
009b638d: fstp st(0)
009b638f: jbe 0x9b6397
009b6391: pop edi
009b6392: xor eax, eax
009b6394: pop ebx
009b6395: pop ecx
009b6396: ret 
009b6397: cmp dword ptr [0x1ce744c], 1
009b639e: push esi
009b639f: jle 0x9b63ff
009b63a1: mov eax, dword ptr [edi + 0x4c]
009b63a4: test eax, eax
009b63a6: je 0x9b63ad
009b63a8: lea ecx, [eax - 0x78]
009b63ab: jmp 0x9b63af
009b63ad: xor ecx, ecx
009b63af: mov ecx, dword ptr [ecx + 0x7c]
009b63b2: test eax, eax
009b63b4: je 0x9b63bb
009b63b6: add eax, -0x78
009b63b9: jmp 0x9b63bd
009b63bb: xor eax, eax
009b63bd: mov esi, ecx
009b63bf: sub esi, eax
009b63c1: neg esi
009b63c3: sbb esi, esi
009b63c5: and esi, ecx
009b63c7: je 0x9b63ff
009b63c9: lea esp, [esp]
009b63d0: cmp esi, edi
009b63d2: je 0x9b63f2
009b63d4: mov ecx, esi
009b63d6: call 0x80bc20
009b63db: test eax, eax
009b63dd: jne 0x9b647e
009b63e3: mov ecx, esi
009b63e5: call 0x80bbf0
009b63ea: test eax, eax
009b63ec: jne 0x9b647e
009b63f2: mov ecx, esi
009b63f4: call 0x6b49c0
009b63f9: mov esi, eax
009b63fb: test esi, esi
009b63fd: jne 0x9b63d0
009b63ff: mov ecx, edi
009b6401: call 0x88fc40
009b6406: fstp dword ptr [esp + 0xc]
009b640a: test ebx, ebx
009b640c: jne 0x9b6426
009b640e: movss xmm0, dword ptr [esp + 0xc]
009b6414: push ecx
009b6415: mov eax, edi
009b6417: movss dword ptr [esp], xmm0
009b641c: call 0x9b6260
009b6421: pop esi
009b6422: pop edi
009b6423: pop ebx
009b6424: pop ecx
009b6425: ret 
009b6426: mov eax, dword ptr [edi + 0x4c]
009b6429: mov ecx, dword ptr [eax + 0x38]
009b642c: cmp dword ptr [ecx + 0x18], 2
009b6430: je 0x9b6485
009b6432: mov ecx, edi
009b6434: call 0x6b5330
009b6439: fld dword ptr [0xf4de00]
009b643f: fcompi st(1)
009b6441: fstp st(0)
009b6443: jbe 0x9b6485
009b6445: mov ecx, edi
009b6447: call 0x6b5300
009b644c: mov ecx, eax
009b644e: call 0x6d63f0
009b6453: fld dword ptr [0xec6fd4]
009b6459: fcompi st(1)
009b645b: fstp st(0)
009b645d: jb 0x9b6485
009b645f: mov ecx, edi
009b6461: call 0x6b5300
009b6466: mov edx, 0x24
009b646b: mov ecx, eax
009b646d: call 0x6d5f00
009b6472: fld dword ptr [0xf4cf08]
009b6478: fcompi st(1)
009b647a: fstp st(0)
009b647c: jb 0x9b6485
009b647e: pop esi
009b647f: pop edi
009b6480: xor eax, eax
009b6482: pop ebx
009b6483: pop ecx
009b6484: ret 
009b6485: pop esi
009b6486: pop edi
009b6487: mov eax, 1
009b648c: pop ebx
009b648d: pop ecx
009b648e: ret 
009b648f: int3 
009b6490: push ecx
009b6491: push esi
009b6492: push edi
009b6493: mov edi, dword ptr [esp + 0x10]
009b6497: mov esi, ecx
009b6499: test edi, edi
009b649b: je 0x9b64a3
009b649d: mov dword ptr [edi], 0
009b64a3: call 0x9b6360
009b64a8: test eax, eax
009b64aa: je 0x9b65cf
009b64b0: movss xmm0, dword ptr [0xf4cf08]
009b64b8: push ecx
009b64b9: mov ecx, esi
009b64bb: movss dword ptr [esp], xmm0
009b64c0: call 0x7b4870
009b64c5: test eax, eax
009b64c7: jne 0x9b65cf
009b64cd: movss xmm0, dword ptr [0xf4cf08]
009b64d5: push ecx
009b64d6: mov ecx, esi
009b64d8: movss dword ptr [esp], xmm0
009b64dd: call 0x7b48c0
009b64e2: test eax, eax
009b64e4: jne 0x9b65cf
009b64ea: call 0xc95dd0
009b64ef: test eax, eax
009b64f1: je 0x9b6505
009b64f3: call 0xc95dd0
009b64f8: cmp dword ptr [eax + 0x20], 0xa
009b64fc: jne 0x9b6505
009b64fe: mov eax, 1
009b6503: jmp 0x9b6507
009b6505: xor eax, eax
009b6507: test edi, edi
009b6509: je 0x9b65c4
009b650f: test eax, eax
009b6511: jne 0x9b65c4
009b6517: mov ecx, esi
009b6519: call 0x9b61a0
009b651e: sub eax, 0
009b6521: je 0x9b65c4
009b6527: dec eax
009b6528: jne 0x9b65cf
009b652e: mov edx, esi
009b6530: mov ecx, 0x1196604
009b6535: call 0x6ac130
009b653a: test eax, eax
009b653c: je 0x9b654e
009b653e: movss xmm0, dword ptr [0xf4de04]
009b6546: movss dword ptr [esp + 0x10], xmm0
009b654c: jmp 0x9b6559
009b654e: mov ecx, esi
009b6550: call 0x9b03e0
009b6555: fstp dword ptr [esp + 0x10]
009b6559: mov ecx, dword ptr [esi + 0x4c]
009b655c: call 0x6b6510
009b6561: mov ecx, eax
009b6563: call 0x9a4760
009b6568: fadd st(0), st(0)
009b656a: fsub dword ptr [0xec6e14]
009b6570: fst dword ptr [esp + 8]
009b6574: fldz 
009b6576: fcompi st(1)
009b6578: fstp st(0)
009b657a: jb 0x9b6592
009b657c: movss xmm0, dword ptr [esp + 8]
009b6582: addss xmm0, dword ptr [0xec6e14]
009b658a: mulss xmm0, dword ptr [esp + 0x10]
009b6590: jmp 0x9b65ac
009b6592: movss xmm0, dword ptr [0xec6e14]
009b659a: subss xmm0, dword ptr [esp + 0x10]
009b65a0: .byte 0xf3
009b65a1: .byte 0x0f

3over4 data0xfbcb20 operand0xba284d candidate-start0xba2710
00ba2710: mov ecx, dword ptr [0x2008aa0]
00ba2716: mov eax, ecx
00ba2718: shl eax, 4
00ba271b: sub eax, ecx
00ba271d: add eax, eax
00ba271f: add eax, eax
00ba2721: push ebx
00ba2722: mov ebx, dword ptr [esp + 0xc]
00ba2726: add eax, eax
00ba2728: cmp dword ptr [eax + 0xfbcb08], 0
00ba272f: push ebp
00ba2730: mov ebp, dword ptr [esp + 0xc]
00ba2734: je 0xba27b2
00ba2736: cmp dword ptr [eax + 0xfbcb3c], 0
00ba273d: jne 0xba2746
00ba273f: pop ebp
00ba2740: xor eax, eax
00ba2742: pop ebx
00ba2743: ret 8
00ba2746: mov eax, dword ptr [ebx + 0x40]
00ba2749: push 0
00ba274b: push 0
00ba274d: push 0
00ba274f: push 0x39f61d57
00ba2754: push eax
00ba2755: push 0
00ba2757: mov edx, 0xbb05a9c1
00ba275c: mov ecx, 0x20e3760
00ba2761: call 0xd94400
00ba2766: test eax, eax
00ba2768: je 0xba2790
00ba276a: mov ecx, dword ptr [0x2008aa0]
00ba2770: mov edx, ecx
00ba2772: shl edx, 4
00ba2775: sub edx, ecx
00ba2777: mov ecx, dword ptr [edx*8 + 0xfbcb3c]
00ba277e: mov edx, dword ptr [ecx + ebp*4]
00ba2781: mov ecx, dword ptr [edx + 8]
00ba2784: add ecx, ecx
00ba2786: mov edx, dword ptr [eax + ecx*8 + 0xc]
00ba278a: mov dword ptr [esp + 0x10], edx
00ba278e: jmp 0xba27b9
00ba2790: mov eax, dword ptr [ebx + 0x40]
00ba2793: push 0
00ba2795: push 0
00ba2797: push 0
00ba2799: push 0x60900d71
00ba279e: push eax
00ba279f: push 0
00ba27a1: mov edx, 0xbb05a9c1
00ba27a6: mov ecx, 0x20e3760
00ba27ab: call 0xd94400
00ba27b0: jmp 0xba27b5
00ba27b2: mov eax, dword ptr [ebx + 0x44]
00ba27b5: mov dword ptr [esp + 0x10], eax
00ba27b9: cmp dword ptr [esp + 0x10], 0
00ba27be: je 0xba273f
00ba27c4: mov ecx, ebp
00ba27c6: shl ecx, 6
00ba27c9: push esi
00ba27ca: push edi
00ba27cb: lea edi, [ecx + 0x20047b0]
00ba27d1: mov eax, edi
00ba27d3: mov ecx, ebx
00ba27d5: lea edx, [eax + 0x40]
00ba27d8: sub ecx, edi
00ba27da: lea ebx, [ebx]
00ba27e0: mov esi, dword ptr [ecx + eax]
00ba27e3: mov dword ptr [eax], esi
00ba27e5: add eax, 4
00ba27e8: cmp eax, edx
00ba27ea: jb 0xba27e0
00ba27ec: push 1
00ba27ee: mov eax, ebp
00ba27f0: call 0xba24f0
00ba27f5: mov ecx, dword ptr [ebp*4 + 0x2004568]
00ba27fc: mov esi, ebp
00ba27fe: imul esi, esi, 0xd20
00ba2804: push 0
00ba2806: lea eax, [esi + 0x20048f0]
00ba280c: push 0
00ba280e: push eax
00ba280f: mov edx, edi
00ba2811: mov dword ptr [esp + 0x20], eax
00ba2815: call 0x96b1a0
00ba281a: test eax, eax
00ba281c: jne 0xba2825
00ba281e: pop edi
00ba281f: pop esi
00ba2820: pop ebp
00ba2821: pop ebx
00ba2822: ret 8
00ba2825: call 0x6a79b0
00ba282a: test eax, eax
00ba282c: mov eax, dword ptr [0x2008aa0]
00ba2831: je 0xba2843
00ba2833: mov edx, eax
00ba2835: shl edx, 4
00ba2838: sub edx, eax
00ba283a: fld dword ptr [edx*8 + 0xfbcb24]
00ba2841: jmp 0xba2851
00ba2843: mov ecx, eax
00ba2845: shl ecx, 4
00ba2848: sub ecx, eax
00ba284a: fld dword ptr [ecx*8 + 0xfbcb20]
00ba2851: xorps xmm0, xmm0
00ba2854: fstp dword ptr [esi + 0x2004914]
00ba285a: movss xmm2, dword ptr [ebx + 0x50]
00ba285f: comiss xmm0, xmm2
00ba2862: movss xmm1, dword ptr [ebx + 0x4c]
00ba2867: jbe 0xba2872
00ba2869: mov edx, dword ptr [esp + 0x18]
00ba286d: movss xmm2, dword ptr [edx + 0x14]
00ba2872: mov eax, dword ptr [0x2008aa0]
00ba2877: mov ecx, eax
00ba2879: shl ecx, 4
00ba287c: sub ecx, eax
00ba287e: mov eax, dword ptr [ecx*8 + 0xfbcb5c]
00ba2885: test eax, eax
00ba2887: je 0xba28b1
00ba2889: mov esi, dword ptr [eax + ebp*4]
00ba288c: cmp esi, 1
00ba288f: je 0xba28b1
00ba2891: mov edx, ebp
00ba2893: call 0xba1910
00ba2898: cmp esi, 2
00ba289b: jne 0xba28a6
00ba289d: movaps xmm1, xmm2
00ba28a0: subss xmm1, xmm0
00ba28a4: jmp 0xba28b1
00ba28a6: test esi, esi
00ba28a8: jne 0xba28b1
00ba28aa: .byte 0xf3
00ba28ab: .byte 0x0f
00ba28ac: pop eax

3over4 data0xfbcb24 operand0xba283d candidate-start0xba2710
00ba2710: mov ecx, dword ptr [0x2008aa0]
00ba2716: mov eax, ecx
00ba2718: shl eax, 4
00ba271b: sub eax, ecx
00ba271d: add eax, eax
00ba271f: add eax, eax
00ba2721: push ebx
00ba2722: mov ebx, dword ptr [esp + 0xc]
00ba2726: add eax, eax
00ba2728: cmp dword ptr [eax + 0xfbcb08], 0
00ba272f: push ebp
00ba2730: mov ebp, dword ptr [esp + 0xc]
00ba2734: je 0xba27b2
00ba2736: cmp dword ptr [eax + 0xfbcb3c], 0
00ba273d: jne 0xba2746
00ba273f: pop ebp
00ba2740: xor eax, eax
00ba2742: pop ebx
00ba2743: ret 8
00ba2746: mov eax, dword ptr [ebx + 0x40]
00ba2749: push 0
00ba274b: push 0
00ba274d: push 0
00ba274f: push 0x39f61d57
00ba2754: push eax
00ba2755: push 0
00ba2757: mov edx, 0xbb05a9c1
00ba275c: mov ecx, 0x20e3760
00ba2761: call 0xd94400
00ba2766: test eax, eax
00ba2768: je 0xba2790
00ba276a: mov ecx, dword ptr [0x2008aa0]
00ba2770: mov edx, ecx
00ba2772: shl edx, 4
00ba2775: sub edx, ecx
00ba2777: mov ecx, dword ptr [edx*8 + 0xfbcb3c]
00ba277e: mov edx, dword ptr [ecx + ebp*4]
00ba2781: mov ecx, dword ptr [edx + 8]
00ba2784: add ecx, ecx
00ba2786: mov edx, dword ptr [eax + ecx*8 + 0xc]
00ba278a: mov dword ptr [esp + 0x10], edx
00ba278e: jmp 0xba27b9
00ba2790: mov eax, dword ptr [ebx + 0x40]
00ba2793: push 0
00ba2795: push 0
00ba2797: push 0
00ba2799: push 0x60900d71
00ba279e: push eax
00ba279f: push 0
00ba27a1: mov edx, 0xbb05a9c1
00ba27a6: mov ecx, 0x20e3760
00ba27ab: call 0xd94400
00ba27b0: jmp 0xba27b5
00ba27b2: mov eax, dword ptr [ebx + 0x44]
00ba27b5: mov dword ptr [esp + 0x10], eax
00ba27b9: cmp dword ptr [esp + 0x10], 0
00ba27be: je 0xba273f
00ba27c4: mov ecx, ebp
00ba27c6: shl ecx, 6
00ba27c9: push esi
00ba27ca: push edi
00ba27cb: lea edi, [ecx + 0x20047b0]
00ba27d1: mov eax, edi
00ba27d3: mov ecx, ebx
00ba27d5: lea edx, [eax + 0x40]
00ba27d8: sub ecx, edi
00ba27da: lea ebx, [ebx]
00ba27e0: mov esi, dword ptr [ecx + eax]
00ba27e3: mov dword ptr [eax], esi
00ba27e5: add eax, 4
00ba27e8: cmp eax, edx
00ba27ea: jb 0xba27e0
00ba27ec: push 1
00ba27ee: mov eax, ebp
00ba27f0: call 0xba24f0
00ba27f5: mov ecx, dword ptr [ebp*4 + 0x2004568]
00ba27fc: mov esi, ebp
00ba27fe: imul esi, esi, 0xd20
00ba2804: push 0
00ba2806: lea eax, [esi + 0x20048f0]
00ba280c: push 0
00ba280e: push eax
00ba280f: mov edx, edi
00ba2811: mov dword ptr [esp + 0x20], eax
00ba2815: call 0x96b1a0
00ba281a: test eax, eax
00ba281c: jne 0xba2825
00ba281e: pop edi
00ba281f: pop esi
00ba2820: pop ebp
00ba2821: pop ebx
00ba2822: ret 8
00ba2825: call 0x6a79b0
00ba282a: test eax, eax
00ba282c: mov eax, dword ptr [0x2008aa0]
00ba2831: je 0xba2843
00ba2833: mov edx, eax
00ba2835: shl edx, 4
00ba2838: sub edx, eax
00ba283a: fld dword ptr [edx*8 + 0xfbcb24]
00ba2841: jmp 0xba2851
00ba2843: mov ecx, eax
00ba2845: shl ecx, 4
00ba2848: sub ecx, eax
00ba284a: fld dword ptr [ecx*8 + 0xfbcb20]
00ba2851: xorps xmm0, xmm0
00ba2854: fstp dword ptr [esi + 0x2004914]
00ba285a: movss xmm2, dword ptr [ebx + 0x50]
00ba285f: comiss xmm0, xmm2
00ba2862: movss xmm1, dword ptr [ebx + 0x4c]
00ba2867: jbe 0xba2872
00ba2869: mov edx, dword ptr [esp + 0x18]
00ba286d: movss xmm2, dword ptr [edx + 0x14]
00ba2872: mov eax, dword ptr [0x2008aa0]
00ba2877: mov ecx, eax
00ba2879: shl ecx, 4
00ba287c: sub ecx, eax
00ba287e: mov eax, dword ptr [ecx*8 + 0xfbcb5c]
00ba2885: test eax, eax
00ba2887: je 0xba28b1
00ba2889: mov esi, dword ptr [eax + ebp*4]
00ba288c: cmp esi, 1
00ba288f: je 0xba28b1
00ba2891: mov edx, ebp
00ba2893: call 0xba1910
00ba2898: cmp esi, 2
00ba289b: jne 0xba28a6

3over4 data0xfc082c operand0xc78823 candidate-start0xc78690
00c78690: push ebp
00c78691: mov ebp, esp
00c78693: and esp, 0xfffffff0
00c78696: sub esp, 0x488
00c7869c: push esi
00c7869d: push edi
00c7869e: mov edi, dword ptr [ebp + 0xc]
00c786a1: mov eax, edx
00c786a3: test edi, edi
00c786a5: je 0xc788cc
00c786ab: cmp eax, 7
00c786ae: ja 0xc788cc
00c786b4: jmp dword ptr [eax*4 + 0xc788d4]
00c786bb: xor esi, esi
00c786bd: jmp 0xc786ee
00c786bf: mov esi, 1
00c786c4: jmp 0xc786ee
00c786c6: mov esi, 2
00c786cb: jmp 0xc786ee
00c786cd: mov esi, 3
00c786d2: jmp 0xc786ee
00c786d4: mov esi, 4
00c786d9: jmp 0xc786ee
00c786db: mov esi, 5
00c786e0: jmp 0xc786ee
00c786e2: mov esi, 6
00c786e7: jmp 0xc786ee
00c786e9: mov esi, 7
00c786ee: mov eax, dword ptr [0x2022f7c]
00c786f3: neg eax
00c786f5: sbb eax, eax
00c786f7: lea edx, [esp + 0x10]
00c786fb: and eax, 0x2022f80
00c78700: push edx
00c78701: mov edx, ecx
00c78703: mov ecx, eax
00c78705: call 0xd98ec0
00c7870a: fst dword ptr [esp + 0xc]
00c7870e: fldz 
00c78710: fcompi st(1)
00c78712: fstp st(0)
00c78714: ja 0xc788cc
00c7871a: movss xmm0, dword ptr [esp + 0x10]
00c78720: comiss xmm0, dword ptr [0xf0fc08]
00c78727: jbe 0xc788cc
00c7872d: xor ecx, ecx
00c7872f: call 0xda3670
00c78734: movzx eax, word ptr [eax + 0x68]
00c78738: xorps xmm0, xmm0
00c7873b: cvtsi2ss xmm0, eax
00c7873f: comiss xmm0, dword ptr [esp + 0x10]
00c78744: jbe 0xc788cc
00c7874a: movss xmm0, dword ptr [esp + 0x14]
00c78750: comiss xmm0, dword ptr [0xf0fc08]
00c78757: jbe 0xc788cc
00c7875d: xor ecx, ecx
00c7875f: call 0xda3670
00c78764: movzx ecx, word ptr [eax + 0x6a]
00c78768: xorps xmm0, xmm0
00c7876b: cvtsi2ss xmm0, ecx
00c7876f: comiss xmm0, dword ptr [esp + 0x14]
00c78774: jbe 0xc788cc
00c7877a: xor edx, edx
00c7877c: lea ecx, [esp + 0x30]
00c78780: call 0xd984d0
00c78785: lea ecx, [esp + 0x260]
00c7878c: call 0xd96840
00c78791: lea ecx, [esp + 0x30]
00c78795: call 0xd96ee0
00c7879a: call 0xd96860
00c7879f: movss xmm0, dword ptr [eax + 0x1e0]
00c787a7: movss dword ptr [esp + 0x28], xmm0
00c787ad: call 0x48b770
00c787b2: fstp dword ptr [esp + 0x2c]
00c787b6: call 0x48b790
00c787bb: fmul dword ptr [esp + 0xc]
00c787bf: fsubr dword ptr [esp + 0x2c]
00c787c3: fstp dword ptr [esp + 0xc]
00c787c7: movss xmm0, dword ptr [esp + 0xc]
00c787cd: ucomiss xmm0, dword ptr [esp + 0x28]
00c787d2: lahf 
00c787d3: test ah, 0x44
00c787d6: jnp 0xc787f7
00c787d8: call 0xd96860
00c787dd: movss xmm0, dword ptr [esp + 0xc]
00c787e3: movss dword ptr [eax + 0x1e0], xmm0
00c787eb: call 0xd96860
00c787f0: mov ecx, eax
00c787f2: call 0xd96ee0
00c787f7: mov ecx, dword ptr [ebp + 8]
00c787fa: xorps xmm0, xmm0
00c787fd: cvtsi2ss xmm0, esi
00c78801: mulss xmm0, dword ptr [0xec6fc4]
00c78809: addss xmm0, dword ptr [0xec7068]
00c78811: movss dword ptr [esp + 0x18], xmm0
00c78817: shl esi, 4
00c7881a: call 0x4a8470
00c7881f: movss xmm0, dword ptr [esi + 0xfc082c]
00c78827: push eax
00c78828: sub esp, 0x10
00c7882b: movss dword ptr [esp + 0xc], xmm0
00c78831: movss xmm0, dword ptr [esi + 0xfc0828]
00c78839: movss dword ptr [esp + 8], xmm0
00c7883f: movss xmm0, dword ptr [esi + 0xfc0824]
00c78847: movss dword ptr [esp + 4], xmm0
00c7884d: movss xmm0, dword ptr [esi + 0xfc0820]
00c78855: mov edx, edi
00c78857: lea ecx, [esp + 0x24]
00c7885b: movss dword ptr [esp], xmm0
00c78860: call 0xc72c50
00c78865: movss xmm0, dword ptr [esp + 0x18]
00c7886b: subss xmm0, dword ptr [0xec9928]
00c78873: movss dword ptr [esp + 0x18], xmm0
00c78879: movss xmm0, dword ptr [esi + 0xfc07ac]
00c78881: push -1

3over4 data0xfc3d98 operand0xc9c415 candidate-start0xc9c2f0
00c9c2f0: push ebp
00c9c2f1: mov ebp, esp
00c9c2f3: and esp, 0xfffffff0
00c9c2f6: sub esp, 0x48
00c9c2f9: mov ecx, dword ptr [edi + 0x18]
00c9c2fc: push ebx
00c9c2fd: mov ebx, dword ptr [ebp + 8]
00c9c300: push esi
00c9c301: call 0x7ae120
00c9c306: lea edx, [esp + 0x30]
00c9c30a: mov ecx, edi
00c9c30c: mov esi, eax
00c9c30e: call 0x6b47a0
00c9c313: mov ecx, edi
00c9c315: call 0x6b95f0
00c9c31a: mov edx, 0x14
00c9c31f: mov ecx, ebx
00c9c321: mov dword ptr [esp + 0x14], eax
00c9c325: call 0x403e50
00c9c32a: fstp dword ptr [esp + 0x18]
00c9c32e: movss xmm0, dword ptr [esp + 0x18]
00c9c334: push 0
00c9c336: push 0x18
00c9c338: sub esp, 8
00c9c33b: movss dword ptr [esp + 4], xmm0
00c9c341: movss xmm0, dword ptr [0xec6e14]
00c9c349: lea edx, [esp + 0x30]
00c9c34d: mov ecx, ebx
00c9c34f: movss dword ptr [esp], xmm0
00c9c354: call 0x70ce40
00c9c359: movss xmm0, dword ptr [edi + 0x10]
00c9c35e: shufps xmm0, xmm0, 0
00c9c362: mulps xmm0, xmmword ptr [esp + 0x20]
00c9c367: movaps xmmword ptr [esp + 0x40], xmm0
00c9c36c: movd xmm0, dword ptr [esp + 0x14]
00c9c372: cvtdq2ps xmm0, xmm0
00c9c375: mulss xmm0, dword ptr [0xec6f80]
00c9c37d: movss dword ptr [esp + 0x10], xmm0
00c9c383: fld dword ptr [esp + 0x10]
00c9c387: fsin 
00c9c389: fstp dword ptr [esp + 0x14]
00c9c38d: movss dword ptr [esp + 0x1c], xmm0
00c9c393: fld dword ptr [esp + 0x1c]
00c9c397: fcos 
00c9c399: fstp dword ptr [esp + 0x10]
00c9c39d: movss xmm2, dword ptr [esp + 0x10]
00c9c3a3: movss xmm0, dword ptr [esp + 0x14]
00c9c3a9: movaps xmm1, xmmword ptr [esp + 0x30]
00c9c3ae: mov eax, dword ptr [0x1cb6aec]
00c9c3b3: movaps xmm5, xmm0
00c9c3b6: mulss xmm0, dword ptr [esp + 0x40]
00c9c3bc: mulss xmm5, dword ptr [esp + 0x48]
00c9c3c2: movaps xmm4, xmm2
00c9c3c5: mulss xmm4, dword ptr [esp + 0x40]
00c9c3cb: mulss xmm2, dword ptr [esp + 0x48]
00c9c3d1: addss xmm4, xmm5
00c9c3d5: movss xmm5, dword ptr [esp + 0x44]
00c9c3db: subss xmm2, xmm0
00c9c3df: movss xmm0, dword ptr [esp + 0x4c]
00c9c3e5: mov dword ptr [esi + 0x4c], eax
00c9c3e8: unpcklps xmm4, xmm2
00c9c3eb: unpcklps xmm5, xmm0
00c9c3ee: unpcklps xmm4, xmm5
00c9c3f1: addps xmm4, xmm1
00c9c3f4: movaps xmmword ptr [esi + 0x220], xmm4
00c9c3fb: movss xmm0, dword ptr [0x146b618]
00c9c403: addss xmm0, dword ptr [esp + 0x18]
00c9c409: movss dword ptr [esi + 0x230], xmm0
00c9c411: subss xmm0, dword ptr [0xfc3d98]
00c9c419: movss dword ptr [esi + 0x234], xmm0
00c9c421: mov dword ptr [esi + 0x238], 0
00c9c42b: pop esi
00c9c42c: pop ebx
00c9c42d: mov esp, ebp
00c9c42f: pop ebp
00c9c430: ret 4
00c9c433: int3 
00c9c434: int3 
00c9c435: int3 
00c9c436: int3 
00c9c437: int3 
00c9c438: int3 
00c9c439: int3 
00c9c43a: int3 
00c9c43b: int3 
00c9c43c: int3 
00c9c43d: int3 
00c9c43e: int3 
00c9c43f: int3 
00c9c440: push ebp
00c9c441: mov ebp, esp
00c9c443: and esp, 0xfffffff0
00c9c446: sub esp, 0x14
00c9c449: push ebx
00c9c44a: push esi
00c9c44b: mov esi, edx
00c9c44d: cmp dword ptr [esi + 0x30], 0
00c9c451: push edi
00c9c452: mov edi, ecx
00c9c454: je 0xc9c467
00c9c456: call 0x7dcef0
00c9c45b: mov eax, 1
00c9c460: pop edi
00c9c461: pop esi
00c9c462: pop ebx
00c9c463: mov esp, ebp
00c9c465: pop ebp
00c9c466: ret 
00c9c467: test byte ptr [esi + 0x34], 2
00c9c46b: je 0xc9c48f
00c9c46d: mov ecx, dword ptr [esi + 0x10]
00c9c470: mov edx, 0x14

3over4 data0xfca8b0 operand0xcdcb48 candidate-start0xcdcb18
00cdcb18: outsd dx, dword ptr [esi]
00cdcb19: in al, dx
00cdcb1a: add byte ptr [ecx - 0x46], dl
00cdcb1d: mov al, byte ptr [0xb900fcb8]
00cdcb22: shr byte ptr [eax + 0xff300fc], 0x11
00cdcb29: inc esp
00cdcb2a: and al, 0x20
00cdcb2c: movss dword ptr [esp], xmm1
00cdcb31: call 0xdfd900
00cdcb36: fstp dword ptr [esp + 0x3100]
00cdcb3d: movss xmm0, dword ptr [esp + 0x3190]
00cdcb46: push ecx
00cdcb47: mov edx, 0xfca8b0
00cdcb4c: mov ecx, 0xfc8730
00cdcb51: movss dword ptr [esp], xmm0
00cdcb56: call 0xdfd900
00cdcb5b: fstp dword ptr [esp + 0x3128]
00cdcb62: movss xmm0, dword ptr [esp + 0x3190]
00cdcb6b: movss xmm1, dword ptr [0xecfd70]
00cdcb73: comiss xmm1, xmm0
00cdcb76: movss dword ptr [esp + 0x3168], xmm0
00cdcb7f: ja 0xcdcb8e
00cdcb81: movss xmm1, dword ptr [0xec9904]
00cdcb89: comiss xmm0, xmm1
00cdcb8c: jbe 0xcdcb97
00cdcb8e: movss dword ptr [esp + 0x3168], xmm1
00cdcb97: movss xmm0, dword ptr [esp + 0x30d4]
00cdcba0: movss xmm1, dword ptr [0xfbe760]

3over4 data0xfca8b0 operand0xd0bf5e candidate-start0xd0bf2e
00d0bf2e: outsd dx, dword ptr [esi]
00d0bf2f: in al, dx
00d0bf30: add byte ptr [ecx - 0x46], dl
00d0bf33: mov al, byte ptr [0xb900fcb8]
00d0bf38: shr byte ptr [eax + 0xff300fc], 0x11
00d0bf3f: inc esp
00d0bf40: and al, 0x20
00d0bf42: movss dword ptr [esp], xmm1
00d0bf47: call 0xdfd900
00d0bf4c: fstp dword ptr [esp + 0x30f8]
00d0bf53: movss xmm0, dword ptr [esp + 0x318c]
00d0bf5c: push ecx
00d0bf5d: mov edx, 0xfca8b0
00d0bf62: mov ecx, 0xfc8730
00d0bf67: movss dword ptr [esp], xmm0
00d0bf6c: call 0xdfd900
00d0bf71: fstp dword ptr [esp + 0x312c]
00d0bf78: movss xmm0, dword ptr [esp + 0x318c]
00d0bf81: movss xmm1, dword ptr [0xecfd70]
00d0bf89: comiss xmm1, xmm0
00d0bf8c: movss dword ptr [esp + 0x3168], xmm0
00d0bf95: ja 0xd0bfa4
00d0bf97: movss xmm1, dword ptr [0xec9904]
00d0bf9f: comiss xmm0, xmm1
00d0bfa2: jbe 0xd0bfad
00d0bfa4: movss dword ptr [esp + 0x3168], xmm1
00d0bfad: movss xmm0, dword ptr [esp + 0x30d0]
00d0bfb6: movss xmm1, dword ptr [0xfbe760]

3over4 data0xfca8b0 operand0xd3152e candidate-start0xd314fe
00d314fe: outsd dx, dword ptr [esi]
00d314ff: in al, dx
00d31500: add byte ptr [ecx - 0x46], dl
00d31503: mov al, byte ptr [0xb900fcb8]
00d31508: shr byte ptr [eax + 0xff300fc], 0x11
00d3150f: inc esp
00d31510: and al, 0x20
00d31512: movss dword ptr [esp], xmm1
00d31517: call 0xdfd900
00d3151c: fstp dword ptr [esp + 0x30fc]
00d31523: movss xmm0, dword ptr [esp + 0x3190]
00d3152c: push ecx
00d3152d: mov edx, 0xfca8b0
00d31532: mov ecx, 0xfc8730
00d31537: movss dword ptr [esp], xmm0
00d3153c: call 0xdfd900
00d31541: fstp dword ptr [esp + 0x3130]
00d31548: movss xmm0, dword ptr [esp + 0x3190]
00d31551: movss xmm1, dword ptr [0xecfd70]
00d31559: comiss xmm1, xmm0
00d3155c: movss dword ptr [esp + 0x3164], xmm0
00d31565: ja 0xd31574
00d31567: movss xmm1, dword ptr [0xec9904]
00d3156f: comiss xmm0, xmm1
00d31572: jbe 0xd3157d
00d31574: movss dword ptr [esp + 0x3164], xmm1
00d3157d: movss xmm0, dword ptr [esp + 0x30d4]
00d31586: movss xmm1, dword ptr [0xfbe760]
