Function at 0x100af800
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c5e20
mov eax, dword fs:[0]
push eax
sub esp, 0x1dc
mov eax, dword [0x10123c00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe0], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0xe0], ecx
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ecx], eax
lea eax, [ecx + 4]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x1e8], eax
mov eax, dword [ecx]
mov edi, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov dword [ebp - 0xd4], esi
xor esi, esi
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0xcc], edi
movss xmm0, dword [eax]
mov eax, dword [ecx + 0x10]
movss dword [ebp - 0xe0], xmm0
mov edx, dword [eax]
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0xdc]
mov eax, dword [eax]
mov word [ecx + 5], si
lea edi, [ecx + 0xc]
mov byte [ecx + 7], 0
mov byte [ecx + 4], 0
mov dword [ecx + 0xc], esi
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x1c], esi
mov dword [ecx + 0x20], esi
mov dword [ecx + 0x24], esi
mov dword [ecx + 0x28], esi
mov dword [ecx + 0x2c], esi
mov dword [ecx + 0x30], esi
mov dword [ecx + 0x38], esi
mov dword [ecx + 0x3c], esi
mov dword [ecx + 0x40], esi
mov dword [ecx + 0x44], esi
mov dword [ebp - 0xd0], edi
mov dword [ecx + 0x48], esi
mov dword [ecx + 0x4c], esi
mov dword [ecx + 0x50], esi
mov dword [ecx + 8], eax
mov dword [ecx + 0x34], edx
mov ecx, edi
mov edi, dword [ebp - 0xcc]
movss xmm0, dword [0x100cf80c]
mov dword [ebp - 4], esi
mov esi, dword [ebp - 0xd4]
movss xmm3, dword [0x100c96fc]
mov eax, dword [esi]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov esi, dword [ebp - 0xdc]
mov dword [ecx + 8], eax
add esi, 4
mov eax, dword [edi]
mov dword [esi + 0x14], eax
mov eax, dword [edi + 4]
mov dword [esi + 0x18], eax
mov eax, dword [edi + 8]
mov dword [esi + 0x1c], eax
mov dword [esi + 0x24], 0xd
mov eax, dword [0x1012c1d8]
divss xmm0, dword [eax + 0x20]
mov dword [esi + 0x3c], 0
addss xmm0, xmm3
cvttss2si eax, xmm0
mov dword [ebp - 0xe8], eax
mov eax, dword [esi + 0x30]
add eax, 0xffffffd5
cmp eax, 5
ja case.default.0x100af965
jmp dword [eax*4 + 0x100b0f84]
movss xmm0, dword [0x100ca6cc]
jmp 0x100afa64
mov eax, dword [0x1012c1d8]
movss xmm0, dword [0x100c9708]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm0
jmp 0x100afa6e
mov dword [esi + 0x28], 0x3fc00000
jmp 0x100afa5c
mov eax, dword [0x1012c604]
test al, 1
jne 0x100afa3a
or eax, 1
mov dword [0x1012c604], eax
mov eax, dword [0x1012c178]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xcc], eax
test eax, eax
je 0x100afa22
nop word [eax + eax]
mov eax, dword [eax + 0xc]
mov edi, 0x811c9dc5
mov dword [ebp - 0xd4], eax
xor ecx, ecx
inc ecx
cmp byte [eax + ecx], 0
jne 0x100af9e0
xor edx, edx
test ecx, ecx
je 0x100afa0f
nop dword [eax]
movsx eax, byte [eax + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
mov eax, dword [ebp - 0xd4]
cmp edx, ecx
jb 0x100af9f0
cmp edi, 0xc12e8fe5
je 0x100afa2c
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax + 4]
mov dword [ebp - 0xcc], eax
test eax, eax
jne 0x100af9d0
xor ecx, ecx
mov dword [0x1012c600], ecx
jmp 0x100afa40
mov ecx, dword [ebp - 0xcc]
mov dword [0x1012c600], ecx
jmp 0x100afa40
mov ecx, dword [0x1012c600]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xd4], eax
call dword [ebp - 0xd4]
movss xmm3, dword [0x100c96fc]
fstp dword [esi + 0x28]
movss xmm0, dword [0x100cf808]
mov eax, dword [0x1012c1d8]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
mov dword [esi + 0x38], eax
mov eax, dword [0x1012c1d8]
movss xmm0, dword [0x100ca818]
mov ecx, dword [esi + 0x34]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
cmp ecx, eax
jge 0x100b0f41
lea edi, [esi + 8]
lea edx, [esi + 0x44]
cmp dword [esi + 0x38], ecx
jge 0x100afccc
mov eax, dword [esi + 0x30]
add eax, 0xffffffd5
cmp eax, 5
ja case.default.0x100afabc
jmp dword [eax*4 + 0x100b0f9c]
movss xmm1, dword [esi + 0x18]
movss xmm2, dword [esi + 0x14]
movss xmm0, dword [esi + 0x1c]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
movss xmm0, dword [0x100c96f4]
comiss xmm0, xmm2
jb case.default.0x100afabc
mov byte [esi], 1
mov dword [esi + 0x3c], ecx
mov ecx, dword [edx + 4]
mov byte [ebp - 0xc6], 0
mov byte [ebp - 0xc5], 0
cmp ecx, dword [edx + 8]
je 0x100afb5d
movq xmm0, qword [edi]
mov eax, dword [edi + 8]
movq qword [ebp - 0xac], xmm0
movss xmm0, dword [ebp - 0xac]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 0xa8]
mov dword [ebp - 0xa4], eax
movss dword [ecx + 4], xmm0
movss xmm0, dword [ebp - 0xa4]
mov word [ecx + 0xc], 0
add dword [edx + 4], 0x10
movss dword [ecx + 8], xmm0
jmp case.default.0x100afabc
lea eax, [ebp - 0xc6]
push eax
lea eax, [ebp - 0xc5]
jmp 0x100afc98
movss xmm1, dword [esi + 0x18]
movss xmm2, dword [esi + 0x14]
movss xmm0, dword [esi + 0x1c]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
movss xmm0, dword [0x100cf810]
comiss xmm0, xmm2
jb case.default.0x100afabc
mov byte [esi], 1
mov dword [esi + 0x3c], ecx
mov ecx, dword [edx + 4]
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc6], 0
cmp ecx, dword [edx + 8]
je 0x100afc8b
movq xmm0, qword [edi]
mov eax, dword [edi + 8]
movq qword [ebp - 0xb8], xmm0
movss xmm0, dword [ebp - 0xb8]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 0xb4]
movss dword [ecx + 4], xmm0
mov dword [ebp - 0xb0], eax
movss xmm0, dword [ebp - 0xb0]
mov word [ecx + 0xc], 0
add dword [edx + 4], 0x10
movss dword [ecx + 8], xmm0
jmp case.default.0x100afabc
mov eax, dword [0x1012c1d8]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
comiss xmm0, dword [esi + 0x28]
jbe case.default.0x100afabc
mov byte [esi], 1
mov dword [esi + 0x3c], ecx
mov ecx, dword [edx + 4]
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc6], 0
cmp ecx, dword [edx + 8]
je 0x100afc8b
movq xmm0, qword [edi]
mov eax, dword [edi + 8]
movq qword [ebp - 0xc4], xmm0
movss xmm0, dword [ebp - 0xc4]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 0xc0]
movss dword [ecx + 4], xmm0
mov dword [ebp - 0xbc], eax
movss xmm0, dword [ebp - 0xbc]
mov word [ecx + 0xc], 0
add dword [edx + 4], 0x10
movss dword [ecx + 8], xmm0
jmp case.default.0x100afabc
lea eax, [ebp - 0xc5]
push eax
lea eax, [ebp - 0xc6]
push eax
push edi
push ecx
mov ecx, edx
call fcn.1008e5e0
movss xmm3, dword [0x100c96fc]
mov eax, dword [0x1012c1d8]
movss xmm0, dword [0x100ca1b0]
mov ecx, dword [esi + 0x34]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
add eax, ecx
mov dword [esi + 0x38], eax
cmp ecx, dword [ebp - 0xe4]
jl 0x100b0f18
cmp byte [esi], 0
jne 0x100b0f41
mov eax, dword [0x1012c5f4]
test al, 1
jne 0x100afd84
or eax, 1
mov dword [0x1012c5f4], eax
mov eax, dword [0x1012c178]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xd0], eax
test eax, eax
je 0x100afd6c
nop dword [eax + eax]
mov edi, dword [eax + 0xc]
xor ecx, ecx
mov eax, 0x811c9dc5
nop word [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x100afd20
xor edx, edx
test ecx, ecx
je 0x100afd59
mov esi, eax
nop
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x100afd30
mov dword [ebp - 0xcc], esi
cmp dword [ebp - 0xcc], 0x58e37709
mov esi, dword [ebp - 0xd8]
je 0x100afd76
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd0], eax
test eax, eax
jne 0x100afd10
xor ecx, ecx
mov dword [0x1012c5f0], ecx
jmp 0x100afd8a
mov ecx, dword [ebp - 0xd0]
mov dword [0x1012c5f0], ecx
jmp 0x100afd8a
mov ecx, dword [0x1012c5f0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xd4], eax
call dword [ebp - 0xd4]
mov eax, dword [0x1012c1d8]
movss xmm3, dword [esi + 0x1c]
fstp dword [ebp - 0xd4]
movaps xmm2, xmm3
movss xmm1, dword [eax + 0x20]
lea eax, [ebp - 0x40]
movaps xmm0, xmm1
mulss xmm0, dword [ebp - 0xd4]
push 0x30
push 0
push eax
mulss xmm0, dword [0x100cf830]
subss xmm2, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [esi + 0x14]
addss xmm3, xmm2
movss dword [ebp - 0xd0], xmm0
movaps xmm0, xmm1
movss dword [esi + 0x1c], xmm2
mulss xmm0, dword [esi + 0x18]
mulss xmm3, dword [0x100c96fc]
movss dword [ebp - 0xcc], xmm0
mulss xmm3, xmm1
movss dword [ebp - 0xd4], xmm3
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esi + 0x24]
xorps xmm0, xmm0
add esp, 0xc
mov dword [ebp - 0x44], 0
movups xmmword [ebp - 0x64], xmm0
cmp eax, 1
mov ecx, 0x8400b
movups xmmword [ebp - 0x54], xmm0
mov edi, 0x4208608b
mov dword [ebp - 0x118], 0x40000000
movss xmm0, dword [ebp - 0xd0]
cmove edi, ecx
addss xmm0, dword [esi + 8]
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x114], 0x40000000
push ecx
push eax
push dword [esi + 4]
movss dword [ebp - 0xf4], xmm0
lea eax, [ebp - 0x118]
movss xmm0, dword [ebp - 0xcc]
mov ecx, esi
addss xmm0, dword [esi + 0xc]
push edi
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x110], 0x40000000
push eax
movss dword [ebp - 0xf0], xmm0
lea eax, [ebp - 0xf4]
movss xmm0, dword [ebp - 0xd4]
addss xmm0, dword [esi + 0x10]
push eax
lea eax, [esi + 8]
mov dword [ebp - 0x124], 0xc0000000
push eax
mov dword [ebp - 0x120], 0xc0000000
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x11c], 0xc0000000
call fcn.1008f290
cmp byte [ebp - 0x2d], 0
je 0x100aff83
test dword [ebp - 0x34], 0x80000
je 0x100aff83
push 0x54
lea eax, [ebp - 0x64]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x38], 0x3f800000
lea eax, [ebp - 0x64]
mov dword [ebp - 0x28], str.empty
mov ecx, esi
mov dword [ebp - 0x130], 0x40000000
mov dword [ebp - 0x12c], 0x40000000
push eax
push dword [esi + 0x24]
mov eax, edi
mov dword [ebp - 0x128], 0x40000000
push dword [esi + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0x13c], 0xc0000000
push eax
lea eax, [ebp - 0x130]
mov dword [ebp - 0x138], 0xc0000000
push eax
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x134], 0xc0000000
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [esi + 8]
push eax
call fcn.1008f290
movss xmm0, dword [0x100c9708]
comiss xmm0, dword [ebp - 0x38]
ja 0x100aff9d
cmp byte [ebp - 0x2e], 0
jne 0x100aff9d
cmp byte [ebp - 0x2d], 0
je 0x100affed
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x100afff0
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100affed
push 0x54
lea eax, [ebp - 0x64]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x38], 0x3f800000
lea eax, [ebp - 0x64]
mov dword [ebp - 0x28], str.empty
mov ecx, esi
push eax
push dword [esi + 0x24]
lea eax, [ebp - 0xf4]
push dword [esi + 4]
push edi
push eax
lea eax, [esi + 8]
push eax
call fcn.1008f570
mov ecx, dword [ebp - 0x18]
cmp byte [ebp - 0x2d], 0
lea edi, [esi + 8]
je 0x100b00a1
mov dword [esi + 0x24], 3
lea eax, [ebp - 0x64]
movss xmm3, dword [edi]
mov ecx, esi
movss xmm2, dword [edi + 4]
movaps xmm0, xmm3
addss xmm0, dword [ebp - 0xd0]
movss xmm1, dword [edi + 8]
subss xmm3, dword [ebp - 0xd0]
push eax
push 3
push dword [esi + 4]
movss dword [ebp - 0x148], xmm0
lea eax, [ebp - 0x148]
movaps xmm0, xmm2
movss dword [ebp - 0x154], xmm3
addss xmm0, dword [ebp - 0xcc]
subss xmm2, dword [ebp - 0xcc]
push 0x8400b
push eax
lea eax, [ebp - 0x154]
movss dword [ebp - 0x144], xmm0
movaps xmm0, xmm1
addss xmm0, dword [ebp - 0xd4]
subss xmm1, dword [ebp - 0xd4]
push eax
movss dword [ebp - 0x150], xmm2
movss dword [ebp - 0x140], xmm0
movss dword [ebp - 0x14c], xmm1
call fcn.1008f570
mov ecx, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x38]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100b00cf
movss xmm0, dword [ebp - 0x58]
movss dword [edi], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [edi + 4], xmm0
movss xmm0, dword [ebp - 0x50]
movss dword [edi + 8], xmm0
test ecx, ecx
je 0x100b024a
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x100b024a
mov eax, dword [esi + 0x30]
cmp eax, 0x44
je 0x100b00ff
cmp eax, 0x2e
je 0x100b00ff
cmp eax, 0x30
jne 0x100b024a
mov eax, dword [0x1012c5fc]
test al, 1
jne 0x100b0194
or eax, 1
mov dword [0x1012c5fc], eax
mov eax, dword [0x1012c178]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xcc], eax
test eax, eax
je 0x100b017c
mov edi, dword [eax + 0xc]
xor ecx, ecx
mov eax, 0x811c9dc5
inc ecx
cmp byte [edi + ecx], 0
jne 0x100b0130
xor edx, edx
test ecx, ecx
je 0x100b0169
mov esi, eax
nop
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x100b0140
mov dword [ebp - 0xd0], esi
cmp dword [ebp - 0xd0], 0x1aef2a38
mov esi, dword [ebp - 0xd8]
je 0x100b0186
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax + 4]
mov dword [ebp - 0xcc], eax
test eax, eax
jne 0x100b0126
xor ecx, ecx
mov dword [0x1012c5f8], ecx
jmp 0x100b019a
mov ecx, dword [ebp - 0xcc]
mov dword [0x1012c5f8], ecx
jmp 0x100b019a
mov ecx, dword [0x1012c5f8]
cmp dword [esi + 0x30], 0x44
je 0x100b01d4
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xd4], eax
call dword [ebp - 0xd4]
fmul dword [0x100cf804]
fstp dword [ebp - 0xd4]
movss xmm0, dword [ebp - 0xd4]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_cosf
comiss xmm0, dword [ebp - 0x44]
ja 0x100b024a
mov eax, dword [esi + 0x34]
lea edx, [esi + 0x44]
mov byte [esi], 1
lea edi, [esi + 8]
mov dword [esi + 0x3c], eax
mov ecx, dword [edx + 4]
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc6], 1
cmp ecx, dword [edx + 8]
je 0x100b0231
movq xmm0, qword [edi]
mov eax, dword [edi + 8]
movq qword [ebp - 0x70], xmm0
movss xmm0, dword [ebp - 0x70]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 0x6c]
mov dword [ebp - 0x68], eax
movss dword [ecx + 4], xmm0
movss xmm0, dword [ebp - 0x68]
mov word [ecx + 0xc], 1
add dword [edx + 4], 0x10
movss dword [ecx + 8], xmm0
jmp 0x100b0250
lea eax, [ebp - 0xc5]
push eax
lea eax, [ebp - 0xc6]
push eax
push edi
push ecx
mov ecx, edx
call fcn.1008e5e0
jmp 0x100b024d
lea edi, [esi + 8]
lea edx, [esi + 0x44]
cmp byte [esi], 0
jne 0x100b0f41
movss xmm0, dword [ebp - 0x38]
ucomiss xmm0, dword [0x100c9708]
lahf
test ah, 0x44
jnp 0x100b0ed5
mov eax, dword [esi + 0x34]
mov dword [esi + 0x3c], eax
mov ecx, dword [edx + 4]
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc6], 1
cmp ecx, dword [edx + 8]
je 0x100b02c3
movq xmm0, qword [edi]
mov eax, dword [edi + 8]
movq qword [ebp - 0x7c], xmm0
movss xmm0, dword [ebp - 0x7c]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
movss dword [ecx + 4], xmm0
movss xmm0, dword [ebp - 0x74]
mov word [ecx + 0xc], 1
add dword [edx + 4], 0x10
movss dword [ecx + 8], xmm0
jmp 0x100b02da
lea eax, [ebp - 0xc5]
push eax
lea eax, [ebp - 0xc6]
push eax
push edi
push ecx
mov ecx, edx
call fcn.1008e5e0
movss xmm6, dword [0x100c9708]
mov eax, dword [ebp - 0x18]
movss dword [ebp - 0xd0], xmm6
test eax, eax
je 0x100b0399
push eax
call fcn.10055d30
add esp, 4
test al, al
je 0x100b0339
movss xmm0, dword [esi + 0x14]
movss xmm1, dword [0x100cf830]
mulss xmm0, xmm1
movss dword [esi + 0x14], xmm0
movss xmm0, dword [esi + 0x18]
mulss xmm0, xmm1
movss dword [esi + 0x18], xmm0
movss xmm0, dword [esi + 0x1c]
mulss xmm0, xmm1
movss dword [esi + 0x1c], xmm0
jmp 0x100b0ed5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
mov byte [ebp - 0xc5], al
test al, al
je 0x100b0360
movss xmm0, dword [0x100cf820]
movss dword [ebp - 0xd0], xmm0
mov ecx, dword [ebp - 0x18]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
test eax, eax
je 0x100b0391
cmp byte [ebp - 0xc5], 0
mov eax, dword [ebp - 0x18]
je 0x100b038e
cmp dword [esi + 0x20], eax
jne 0x100b038e
mov dword [esi + 0x24], 1
jmp 0x100b0ed5
mov dword [esi + 0x20], eax
movss xmm6, dword [ebp - 0xd0]
movss xmm4, dword [ebp - 0x48]
movss xmm5, dword [esi + 0x14]
movaps xmm2, xmm4
movss xmm7, dword [ebp - 0x44]
movaps xmm1, xmm5
mulss xmm2, dword [esi + 0x18]
movaps xmm0, xmm7
mulss xmm0, dword [esi + 0x1c]
mulss xmm1, dword [ebp - 0x4c]
movaps xmm3, xmm2
addss xmm0, xmm0
addss xmm3, xmm1
addss xmm0, xmm1
movss xmm1, dword [0x100c9708]
addss xmm3, xmm2
addss xmm3, xmm0
movss xmm0, dword [ebp - 0x4c]
mulss xmm0, xmm3
subss xmm5, xmm0
movaps xmm0, xmm5
andps xmm0, xmmword [0x100ca1c0]
comiss xmm0, xmm1
jae 0x100b03fe
xorps xmm5, xmm5
movss xmm2, dword [esi + 0x18]
movaps xmm0, xmm4
mulss xmm0, xmm3
movaps xmm4, xmm5
subss xmm2, xmm0
movaps xmm0, xmm2
andps xmm0, xmmword [0x100ca1c0]
comiss xmm0, xmm1
jae 0x100b0423
xorps xmm2, xmm2
movaps xmm0, xmm7
mulss xmm0, xmm3
movss xmm3, dword [esi + 0x1c]
subss xmm3, xmm0
movaps xmm0, xmm3
andps xmm0, xmmword [0x100ca1c0]
comiss xmm0, xmm1
xorps xmm0, xmm0
jae 0x100b044b
movaps xmm4, xmm5
xorps xmm3, xmm3
mulss xmm6, dword [0x100cf834]
lea eax, [ebp - 0xd0]
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0xcc], 0x3f666666
mov dword [ebp - 0xd4], 0
comiss xmm6, xmm0
movss xmm0, dword [0x100cf83c]
movss dword [ebp - 0xd0], xmm6
cmovae ecx, eax
lea eax, [ebp - 0xcc]
comiss xmm0, xmm6
cmovae eax, ecx
comiss xmm7, dword [0x100cf838]
movss xmm0, dword [eax]
mulss xmm4, xmm0
mulss xmm2, xmm0
mulss xmm3, xmm0
jbe 0x100b09e4
movaps xmm0, xmm4
movaps xmm6, xmm2
mulss xmm0, xmm4
mulss xmm6, xmm2
addss xmm6, xmm0
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm6, xmm0
comiss xmm6, dword [0x100cf874]
jbe 0x100b08e6
xorps xmm0, xmm0
sqrtss xmm0, xmm6
addss xmm0, dword [0x100c96ec]
divss xmm1, xmm0
movaps xmm5, xmm1
movaps xmm0, xmm1
mulss xmm5, xmm2
mulss xmm0, xmm4
mulss xmm5, dword [ebp - 0x48]
mulss xmm0, dword [ebp - 0x4c]
mulss xmm1, xmm3
addss xmm5, xmm0
mulss xmm1, xmm7
movss xmm7, dword [0x100c96fc]
addss xmm5, xmm1
movss xmm1, dword [0x100c9708]
comiss xmm5, xmm7
jbe 0x100b08e6
movaps xmm0, xmm1
subss xmm0, xmm5
addss xmm0, xmm7
mulss xmm4, xmm0
mulss xmm2, xmm0
mulss xmm3, xmm0
subss xmm1, dword [ebp - 0x38]
movss dword [esi + 0x14], xmm4
mov ecx, 0x8400b
movss dword [esi + 0x18], xmm2
mov edi, 0x4208608b
movss dword [esi + 0x1c], xmm3
mov eax, dword [0x1012c1d8]
mov dword [ebp - 0x160], 0x40000000
mov dword [ebp - 0x15c], 0x40000000
mov dword [ebp - 0x158], 0x40000000
mulss xmm1, dword [eax + 0x20]
mov eax, dword [esi + 0x24]
cmp eax, 1
mov dword [ebp - 0x16c], 0xc0000000
cmove edi, ecx
mov dword [ebp - 0x168], 0xc0000000
movaps xmm0, xmm1
mov dword [ebp - 0x164], 0xc0000000
mulss xmm0, xmm4
lea ecx, [ebp - 0x64]
push ecx
movaps xmm4, xmm1
mulss xmm1, xmm3
mov ecx, esi
mulss xmm4, xmm2
push eax
push dword [esi + 4]
movss dword [ebp - 0xd4], xmm0
lea eax, [ebp - 0x160]
addss xmm0, dword [esi + 8]
push edi
push eax
lea eax, [ebp - 0x16c]
movss dword [ebp - 0xd0], xmm4
push eax
movss dword [ebp - 0x100], xmm0
lea eax, [ebp - 0x100]
movaps xmm0, xmm4
movss dword [ebp - 0xcc], xmm1
addss xmm0, dword [esi + 0xc]
push eax
lea eax, [esi + 8]
push eax
movss dword [ebp - 0xfc], xmm0
movaps xmm0, xmm1
addss xmm0, dword [esi + 0x10]
movss dword [ebp - 0xf8], xmm0
call fcn.1008f290
cmp byte [ebp - 0x2d], 0
je 0x100b06d7
test dword [ebp - 0x34], 0x80000
je 0x100b06d7
push 0x54
lea eax, [ebp - 0x64]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x38], 0x3f800000
lea eax, [ebp - 0x64]
mov dword [ebp - 0x28], str.empty
mov ecx, esi
mov dword [ebp - 0x178], 0x40000000
mov dword [ebp - 0x174], 0x40000000
push eax
push dword [esi + 0x24]
mov eax, edi
mov dword [ebp - 0x170], 0x40000000
push dword [esi + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0x184], 0xc0000000
push eax
lea eax, [ebp - 0x178]
mov dword [ebp - 0x180], 0xc0000000
push eax
lea eax, [ebp - 0x184]
mov dword [ebp - 0x17c], 0xc0000000
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [esi + 8]
push eax
call fcn.1008f290
movss xmm0, dword [0x100c9708]
comiss xmm0, dword [ebp - 0x38]
ja 0x100b06f1
cmp byte [ebp - 0x2e], 0
jne 0x100b06f1
cmp byte [ebp - 0x2d], 0
je 0x100b0741
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x100b0744
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100b0741
push 0x54
lea eax, [ebp - 0x64]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x38], 0x3f800000
lea eax, [ebp - 0x64]
mov dword [ebp - 0x28], str.empty
mov ecx, esi
push eax
push dword [esi + 0x24]
lea eax, [ebp - 0x100]
push dword [esi + 4]
push edi
push eax
lea eax, [esi + 8]
push eax
call fcn.1008f570
mov ecx, dword [ebp - 0x18]
cmp byte [ebp - 0x2d], 0
lea edi, [esi + 8]
je 0x100b07f8
movss xmm0, dword [ebp - 0xd4]
lea eax, [ebp - 0x64]
mov dword [esi + 0x24], 3
mov ecx, esi
movss xmm3, dword [edi]
movss xmm2, dword [edi + 4]
addss xmm0, xmm3
movss xmm1, dword [edi + 8]
subss xmm3, dword [ebp - 0xd4]
push eax
push 3
push dword [esi + 4]
movss dword [ebp - 0x190], xmm0
lea eax, [ebp - 0x190]
movss xmm0, dword [ebp - 0xd0]
addss xmm0, xmm2
movss dword [ebp - 0x19c], xmm3
subss xmm2, dword [ebp - 0xd0]
push 0x8400b
push eax
lea eax, [ebp - 0x19c]
movss dword [ebp - 0x18c], xmm0
movss xmm0, dword [ebp - 0xcc]
addss xmm0, xmm1
movss dword [ebp - 0x198], xmm2
subss xmm1, dword [ebp - 0xcc]
push eax
movss dword [ebp - 0x188], xmm0
movss dword [ebp - 0x194], xmm1
call fcn.1008f570
mov ecx, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x38]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100b0826
movss xmm0, dword [ebp - 0x58]
movss dword [edi], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [edi + 4], xmm0
movss xmm0, dword [ebp - 0x50]
movss dword [edi + 8], xmm0
test ecx, ecx
je 0x100b0e43
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x100b0e43
mov eax, dword [esi + 0x30]
cmp eax, 0x44
je 0x100b0856
cmp eax, 0x2e
je 0x100b0856
cmp eax, 0x30
jne 0x100b0e43
mov eax, dword [0x1012c5fc]
test al, 1
jne 0x100b091f
or eax, 1
mov dword [0x1012c5fc], eax
mov eax, dword [0x1012c178]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xcc], eax
test eax, eax
je 0x100b08dc
nop dword [eax]
mov edi, dword [eax + 0xc]
xor ecx, ecx
mov eax, 0x811c9dc5
nop word [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x100b0890
xor edx, edx
test ecx, ecx
je 0x100b08c9
mov esi, eax
nop
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x100b08a0
mov dword [ebp - 0xd0], esi
cmp dword [ebp - 0xd0], 0x1aef2a38
mov esi, dword [ebp - 0xd8]
je 0x100b0911
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax + 4]
mov dword [ebp - 0xcc], eax
test eax, eax
jne 0x100b0880
xor ecx, ecx
mov dword [0x1012c5f8], ecx
jmp 0x100b0925
movss xmm0, dword [0x100cf86c]
comiss xmm0, xmm6
jbe 0x100b0547
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
jmp 0x100b0e43
mov ecx, dword [ebp - 0xcc]
mov dword [0x1012c5f8], ecx
jmp 0x100b0925
mov ecx, dword [0x1012c5f8]
cmp dword [esi + 0x30], 0x44
je 0x100b095f
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xd4], eax
call dword [ebp - 0xd4]
fmul dword [0x100cf804]
fstp dword [ebp - 0xd4]
movss xmm0, dword [ebp - 0xd4]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_cosf
comiss xmm0, dword [ebp - 0x44]
ja 0x100b0e40
mov eax, dword [esi + 0x34]
lea edx, [esi + 0x44]
mov byte [esi], 1
lea edi, [esi + 8]
mov dword [esi + 0x3c], eax
mov ecx, dword [edx + 4]
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc6], 1
cmp ecx, dword [edx + 8]
je 0x100b09c8
movq xmm0, qword [edi]
mov eax, dword [edi + 8]
movq qword [ebp - 0x88], xmm0
movss xmm0, dword [ebp - 0x88]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 0x84]
mov dword [ebp - 0x80], eax
movss dword [ecx + 4], xmm0
movss xmm0, dword [ebp - 0x80]
mov word [ecx + 0xc], 1
add dword [edx + 4], 0x10
movss dword [ecx + 8], xmm0
jmp 0x100b0e46
lea eax, [ebp - 0xc5]
push eax
lea eax, [ebp - 0xc6]
push eax
push edi
push ecx
mov ecx, edx
call fcn.1008e5e0
jmp 0x100b0e43
movss dword [esi + 0x14], xmm4
movaps xmm0, xmm1
subss xmm0, dword [ebp - 0x38]
movss dword [esi + 0x18], xmm2
mov ecx, 0x8400b
movss dword [esi + 0x1c], xmm3
mov edi, 0x4208608b
mov eax, dword [0x1012c1d8]
mov dword [ebp - 0x1a8], 0x40000000
mov dword [ebp - 0x1a4], 0x40000000
mov dword [ebp - 0x1a0], 0x40000000
mulss xmm0, dword [eax + 0x20]
mov eax, dword [esi + 0x24]
cmp eax, 1
mov dword [ebp - 0x1b4], 0xc0000000
cmove edi, ecx
mov dword [ebp - 0x1b0], 0xc0000000
mulss xmm4, xmm0
lea ecx, [ebp - 0x64]
push ecx
mulss xmm2, xmm0
mov ecx, esi
push eax
push dword [esi + 4]
mulss xmm3, xmm0
lea eax, [ebp - 0x1a8]
push edi
movaps xmm0, xmm4
movss dword [ebp - 0xd4], xmm4
addss xmm0, dword [esi + 8]
push eax
lea eax, [ebp - 0x1b4]
movss dword [ebp - 0xd0], xmm2
push eax
lea eax, [ebp - 0x10c]
movss dword [ebp - 0xcc], xmm3
movss dword [ebp - 0x10c], xmm0
movaps xmm0, xmm2
addss xmm0, dword [esi + 0xc]
push eax
lea eax, [esi + 8]
mov dword [ebp - 0x1ac], 0xc0000000
push eax
movss dword [ebp - 0x108], xmm0
movaps xmm0, xmm3
addss xmm0, dword [esi + 0x10]
movss dword [ebp - 0x104], xmm0
call fcn.1008f290
cmp byte [ebp - 0x2d], 0
je 0x100b0b74
test dword [ebp - 0x34], 0x80000
je 0x100b0b74
push 0x54
lea eax, [ebp - 0x64]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x38], 0x3f800000
lea eax, [ebp - 0x64]
mov dword [ebp - 0x28], str.empty
mov ecx, esi
mov dword [ebp - 0x1c0], 0x40000000
mov dword [ebp - 0x1bc], 0x40000000
push eax
push dword [esi + 0x24]
mov eax, edi
mov dword [ebp - 0x1b8], 0x40000000
push dword [esi + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0x1cc], 0xc0000000
push eax
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c8], 0xc0000000
push eax
lea eax, [ebp - 0x1cc]
mov dword [ebp - 0x1c4], 0xc0000000
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [esi + 8]
push eax
call fcn.1008f290
movss xmm0, dword [0x100c9708]
comiss xmm0, dword [ebp - 0x38]
ja 0x100b0b8e
cmp byte [ebp - 0x2e], 0
jne 0x100b0b8e
cmp byte [ebp - 0x2d], 0
je 0x100b0bde
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x100b0be1
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100b0bde
push 0x54
lea eax, [ebp - 0x64]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x38], 0x3f800000
lea eax, [ebp - 0x64]
mov dword [ebp - 0x28], str.empty
mov ecx, esi
push eax
push dword [esi + 0x24]
lea eax, [ebp - 0x10c]
push dword [esi + 4]
push edi
push eax
lea eax, [esi + 8]
push eax
call fcn.1008f570
mov ecx, dword [ebp - 0x18]
cmp byte [ebp - 0x2d], 0
lea edi, [esi + 8]
je 0x100b0c95
movss xmm0, dword [ebp - 0xd4]
lea eax, [ebp - 0x64]
mov dword [esi + 0x24], 3
mov ecx, esi
movss xmm3, dword [edi]
movss xmm2, dword [edi + 4]
addss xmm0, xmm3
movss xmm1, dword [edi + 8]
subss xmm3, dword [ebp - 0xd4]
push eax
push 3
push dword [esi + 4]
movss dword [ebp - 0x1d8], xmm0
lea eax, [ebp - 0x1d8]
movss xmm0, dword [ebp - 0xd0]
addss xmm0, xmm2
movss dword [ebp - 0x1e4], xmm3
subss xmm2, dword [ebp - 0xd0]
push 0x8400b
push eax
lea eax, [ebp - 0x1e4]
movss dword [ebp - 0x1d4], xmm0
movss xmm0, dword [ebp - 0xcc]
addss xmm0, xmm1
movss dword [ebp - 0x1e0], xmm2
subss xmm1, dword [ebp - 0xcc]
push eax
movss dword [ebp - 0x1d0], xmm0
movss dword [ebp - 0x1dc], xmm1
call fcn.1008f570
mov ecx, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x38]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100b0cc3
movss xmm0, dword [ebp - 0x58]
movss dword [edi], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [edi + 4], xmm0
movss xmm0, dword [ebp - 0x50]
movss dword [edi + 8], xmm0
test ecx, ecx
je 0x100b0e43
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x100b0e43
mov eax, dword [esi + 0x30]
cmp eax, 0x44
je 0x100b0cf3
cmp eax, 0x2e
je 0x100b0cf3
cmp eax, 0x30
jne 0x100b0e43
mov eax, dword [0x1012c5fc]
test al, 1
jne 0x100b0d94
or eax, 1
mov dword [0x1012c5fc], eax
mov eax, dword [0x1012c178]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xcc], eax
test eax, eax
je 0x100b0d7c
nop word [eax + eax]
mov edi, dword [eax + 0xc]
xor ecx, ecx
mov eax, 0x811c9dc5
nop word [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x100b0d30
xor edx, edx
test ecx, ecx
je 0x100b0d69
mov esi, eax
nop
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x100b0d40
mov dword [ebp - 0xd0], esi
cmp dword [ebp - 0xd0], 0x1aef2a38
mov esi, dword [ebp - 0xd8]
je 0x100b0d86
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax + 4]
mov dword [ebp - 0xcc], eax
test eax, eax
jne 0x100b0d20
xor ecx, ecx
mov dword [0x1012c5f8], ecx
jmp 0x100b0d9a
mov ecx, dword [ebp - 0xcc]
mov dword [0x1012c5f8], ecx
jmp 0x100b0d9a
mov ecx, dword [0x1012c5f8]
cmp dword [esi + 0x30], 0x44
je 0x100b0dd0
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xd4], eax
call dword [ebp - 0xd4]
fmul dword [0x100cf804]
fstp dword [ebp - 0xd4]
movss xmm0, dword [ebp - 0xd4]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_cosf
comiss xmm0, dword [ebp - 0x44]
ja 0x100b0e40
mov eax, dword [esi + 0x34]
lea edx, [esi + 0x44]
mov byte [esi], 1
lea edi, [esi + 8]
mov dword [esi + 0x3c], eax
mov ecx, dword [edx + 4]
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc6], 1
cmp ecx, dword [edx + 8]
je 0x100b09c8
movq xmm0, qword [edi]
mov eax, dword [edi + 8]
movq qword [ebp - 0x94], xmm0
movss xmm0, dword [ebp - 0x94]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 0x90]
mov dword [ebp - 0x8c], eax
movss dword [ecx + 4], xmm0
movss xmm0, dword [ebp - 0x8c]
mov word [ecx + 0xc], 1
add dword [edx + 4], 0x10
movss dword [ecx + 8], xmm0
jmp 0x100b0e46
lea edi, [esi + 8]
lea edx, [esi + 0x44]
mov eax, dword [esi + 0x40]
cmp eax, 0x14
jle 0x100b0ed1
mov eax, dword [esi + 0x34]
mov byte [esi], 1
mov dword [esi + 0x3c], eax
mov ecx, dword [edx + 4]
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc6], 0
cmp ecx, dword [edx + 8]
je 0x100b0eb8
movq xmm0, qword [edi]
mov eax, dword [edi + 8]
movq qword [ebp - 0xa0], xmm0
movss xmm0, dword [ebp - 0xa0]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 0x9c]
mov dword [ebp - 0x98], eax
movss dword [ecx + 4], xmm0
movss xmm0, dword [ebp - 0x98]
mov word [ecx + 0xc], 0
add dword [edx + 4], 0x10
movss dword [ecx + 8], xmm0
jmp 0x100b0ed5
lea eax, [ebp - 0xc5]
push eax
lea eax, [ebp - 0xc6]
push eax
push edi
push ecx
mov ecx, edx
call fcn.1008e5e0
jmp 0x100b0ed5
inc eax
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
add eax, dword [ebp - 0xe8]
mov ecx, dword [esi + 0x34]
cmp eax, ecx
jg 0x100b0f10
lea eax, [ebp - 0xc5]
mov dword [esi + 0x3c], ecx
push eax
lea eax, [ebp - 0xc6]
mov byte [ebp - 0xc5], 0
push eax
lea eax, [esi + 8]
mov byte [ebp - 0xc6], 0
push eax
lea ecx, [esi + 0x44]
call fcn.1008e7e0
movss xmm3, dword [0x100c96fc]
mov ecx, dword [esi + 0x34]
movss xmm0, dword [0x100ca818]
inc ecx
mov dword [esi + 0x34], ecx
mov eax, dword [0x1012c1d8]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
cmp ecx, eax
jl 0x100afaa1
movd xmm0, dword [esi + 0x34]
mov ecx, dword [0x1012c1d8]
mov eax, dword [ebp - 0xdc]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [ecx + 0x20]
addss xmm0, dword [ebp - 0xe0]
movss dword [esi + 0x2c], xmm0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100bae1e
mov esp, ebp
pop ebp
ret 0x10