Function at 0x46b060
Capabilities:
Encode data using xor
Hash data with crc32
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49e240
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x170
mov eax, dword [0x4ba040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x54], ecx
mov edi, dword [0x4bead0]
mov dword [ebp - 0x34], edi
mov eax, dword [edi + 0x3f8c]
mov byte [eax + 0xb0], 1
mov esi, dword [edi + 0x3f8c]
mov dword [ebp - 0x2c], esi
cmp byte [esi + 0xb3], 0
jne 0x46b219
mov ecx, dword [ebx + 0xc]
and ecx, 0x3000000
cmp dword [esi + 0x198], 0
mov dword [ebp - 0x3c], ecx
jne 0x46b0f7
cmp dword [edi + 0x4ce0], 0
lea eax, [esi + 0x234]
je 0x46b0fd
lea eax, [esi + 0x204]
movss xmm1, dword [eax]
movss xmm2, dword [eax + 4]
movss xmm0, dword [0x4b6ac4]
subss xmm1, dword [esi + 0xf8]
subss xmm2, dword [esi + 0xfc]
test ecx, ecx
je 0x46b128
maxss xmm2, xmm0
jmp 0x46b12b
xorps xmm2, xmm2
mov eax, dword [ebx + 0x10]
maxss xmm1, xmm0
lea ecx, [ebp - 0x7c]
push dword [eax + 4]
push dword [eax]
call fcn.00416a30
movss xmm2, dword [esi + 0xf8]
add esp, 8
cmp byte [esi + 0xcc], 0
movss xmm3, dword [esi + 0xfc]
movss xmm1, dword [ebp - 0x7c]
movss xmm0, dword [ebp - 0x78]
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [ebp - 0x70], xmm2
movss dword [ebp - 0x6c], xmm3
movss dword [ebp - 0xa4], xmm2
movss dword [ebp - 0xa0], xmm3
movss dword [ebp - 0x68], xmm1
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x9c], xmm1
movss dword [ebp - 0x98], xmm0
jg 0x46b1ae
cmp byte [esi + 0xcd], 0
jg 0x46b1ae
xor al, al
jmp 0x46b1b0
mov al, 1
cmp dword [ebp - 0x3c], 0
mov byte [ebp - 0x2d], al
je 0x46b220
comiss xmm0, dword [esi + 0x220]
jbe 0x46b1ea
movss xmm0, dword [esi + 0x228]
comiss xmm0, xmm3
jbe 0x46b1e5
comiss xmm1, dword [esi + 0x21c]
jbe 0x46b1e5
movss xmm0, dword [esi + 0x224]
comiss xmm0, xmm2
ja 0x46b220
movss xmm0, dword [ebp - 0x20]
cmp byte [edi + 0x5e24], 0
jne 0x46b220
test al, al
jne 0x46b220
subss xmm1, xmm2
subss xmm0, xmm3
lea ecx, [ebp - 0x58]
movss dword [ebp - 0x58], xmm1
movss xmm1, dword [0x4b6cc0]
movss dword [ebp - 0x54], xmm0
call fcn.00416490
xor al, al
jmp 0x46c27f
mov edx, dword [ebp - 0x38]
cmp dword [edi + 0x4ce4], edx
jne 0x46b22c
int3
lea ecx, [edi + 0x4d04]
push ecx
push edx
call fcn.00404a00
mov edx, eax
mov esi, dword [edx]
cmp esi, 0xffffffff
je 0x46b250
shl esi, 9
add esi, dword [edi + 0x4d00]
mov dword [ebp - 0x4c], esi
jmp 0x46b268
mov eax, dword [edi + 0x4d10]
lea ecx, [edi + 0x4cf8]
mov dword [edx], eax
call fcn.00475860
mov esi, eax
mov dword [ebp - 0x4c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x48], eax
mov eax, esi
sub eax, dword [edi + 0x4d00]
sar eax, 9
mov dword [ebp - 0x50], eax
mov eax, dword [edi + 0x4ce8]
inc eax
mov dword [ebp - 0x5c], 6
cmp eax, dword [edi + 0x4cec]
mov dword [ebp - 0x44], eax
mov dword [edi + 0x4ce8], eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [ebp - 0x60], eax
jle 0x46b430
push 0x6c
lea eax, [ebp - 0x180]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x17c], 0xbf800000
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 4], 0
mov eax, dword [edi + 0x4cf0]
cmp ecx, eax
jle 0x46b3c8
test eax, eax
je 0x46b2ef
cdq
sub eax, edx
mov edx, dword [edi + 0x4cf0]
sar eax, 1
add eax, edx
jmp 0x46b2fa
mov edx, dword [edi + 0x4cf0]
mov eax, 8
cmp eax, ecx
mov edi, ecx
cmovg edi, eax
mov eax, edi
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x34]
cmp eax, edx
jle 0x46b3c8
imul ecx, eax, 0x6c
call fcn.004099a0
mov edx, dword [edi + 0x4cf4]
mov dword [ebp - 0x64], eax
test edx, edx
je 0x46b3b6
imul ecx, dword [edi + 0x4cec], 0x6c
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [edi + 0x4cf4]
add esp, 0xc
mov dword [ebp - 0x1c], edx
test edx, edx
je 0x46b3ac
mov ecx, dword [0x4bead0]
test ecx, ecx
je 0x46b3ac
mov eax, dword [ecx + 0x3f08]
mov dword [ebp - 0x28], eax
movsx eax, word [ecx + 0x5ee4]
mov edi, dword [ebp - 0x28]
add eax, 0xbdd
cmp dword [ecx + eax*8], edi
mov edi, dword [ebp - 0x34]
lea eax, [ecx + eax*8]
je 0x46b3a2
movsx eax, word [ecx + 0x5ee4]
inc eax
cdq
idiv dword [ebp - 0x5c]
movzx eax, dx
mov edx, dword [ebp - 0x28]
mov word [ecx + 0x5ee4], ax
cwde
add eax, 0xbdd
lea eax, [ecx + eax*8]
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x1c]
inc word [eax + 6]
inc dword [ecx + 0x5ee0]
push edx
call dword [ebp - 0x60]
mov eax, dword [ebp - 0x64]
add esp, 4
mov ecx, dword [ebp - 0x44]
mov dword [edi + 0x4cf4], eax
mov eax, dword [ebp - 0x24]
mov dword [edi + 0x4cf0], eax
mov eax, dword [edi + 0x4cec]
cmp ecx, eax
jle 0x46b406
mov edx, ecx
imul eax, eax, 0x6c
sub edx, dword [edi + 0x4cec]
nop dword [eax]
mov edi, dword [edi + 0x4cf4]
lea esi, [ebp - 0x180]
add edi, eax
mov ecx, 0x1b
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x34]
add eax, 0x6c
sub edx, 1
jne 0x46b3e0
mov esi, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x44]
mov dword [edi + 0x4cec], ecx
lea ecx, [ebp - 0x16c]
mov dword [ebp - 4], 1
call fcn.00462ad0
lea ecx, [ebp - 0x164]
call fcn.00428500
mov dword [ebp - 4], 0xffffffff
imul ecx, dword [edi + 0x4ce8], 0x6c
mov eax, dword [edi + 0x4cf4]
mov edx, dword [ebx + 0xc]
add ecx, 0xffffff94
add eax, ecx
mov ecx, dword [ebp - 0x50]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x24], eax
mov dword [eax], ecx
mov ecx, edx
mov eax, dword [esi + 0xc]
add eax, 0x14
test edx, 0xe000
mov dword [esi + 0x168], eax
mov dword [eax], 0
mov dword [eax + 4], 1
sete al
mov byte [esi + 0x1f7], al
test ecx, 0xe000
jne 0x46b49f
test edx, 0x1000000
jne 0x46b498
mov eax, dword [ebp - 0x2c]
test byte [eax + 0xc], 0x40
mov eax, 0x8000
je 0x46b49d
mov eax, 0x2000
or edx, eax
mov eax, edx
mov ecx, edx
or ecx, 0x40000
and eax, 0xe000
cmp eax, 0x4000
cmovne ecx, edx
mov edx, ecx
or edx, 0x200
test cl, 1
cmove edx, ecx
mov ecx, edx
and ecx, 0xfffcffff
test edx, 0x3000000
cmove ecx, edx
mov edx, ecx
and edx, 0xfffff7ff
test ecx, 0x1000
cmove edx, ecx
mov ecx, edx
or ecx, 0x10
test dl, 0xf
cmovne ecx, edx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
or dword [ebp - 0x1c], 0x10
mov eax, dword [edx + 0x30c]
test dword [eax + 0xc], 0x100
mov eax, dword [ebp - 0x1c]
cmove eax, ecx
mov ecx, dword [esi + 0x3c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], ecx
cmp ecx, dword [edi + 0x3f08]
je 0x46b528
mov dword [ebp - 0x44], 0
jmp 0x46b530
movsx ecx, word [esi + 0x4c]
inc ecx
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x38]
movss xmm3, dword [ebx + 0x14]
mov dword [esi + 4], eax
mov dword [esi], ecx
mov eax, dword [edi + 0x3f08]
mov ecx, dword [ebx + 0x10]
mov dword [esi + 0x3c], eax
mov eax, dword [ebx + 8]
mov dword [esi + 0x158], edx
mov dword [esi + 0x154], edx
mov edx, dword [ebp - 0x24]
mov dword [esi + 0x40], eax
mov byte [esi + 0x1ea], 0
movss dword [esi + 0xa0], xmm3
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x44]
mov dword [edx + 0x10], ecx
mov word [esi + 0x4c], ax
test eax, eax
jle 0x46b790
mov ecx, dword [esi + 0x184]
cmp ecx, eax
jge 0x46b6f1
mov eax, dword [esi + 0x188]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x84], 0xffffffff
cmp ecx, eax
jne 0x46b6c3
inc ecx
test eax, eax
je 0x46b5f0
cdq
sub eax, edx
mov edx, dword [esi + 0x188]
sar eax, 1
add eax, edx
jmp 0x46b5fb
mov edx, dword [esi + 0x188]
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov dword [ebp - 0x18], ecx
cmp ecx, edx
jle 0x46b6c3
lea ecx, [ecx + ecx*2]
shl ecx, 3
call fcn.004099a0
mov edx, dword [esi + 0x18c]
mov dword [ebp - 0x78], eax
test edx, edx
je 0x46b6b4
mov ecx, dword [esi + 0x184]
lea ecx, [ecx + ecx*2]
shl ecx, 3
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esi + 0x18c]
add esp, 0xc
mov dword [ebp - 0x64], edx
test edx, edx
je 0x46b6aa
mov ecx, dword [0x4bead0]
test ecx, ecx
je 0x46b6aa
mov eax, dword [ecx + 0x3f08]
mov dword [ebp - 0x28], eax
movsx eax, word [ecx + 0x5ee4]
mov edi, dword [ebp - 0x28]
add eax, 0xbdd
cmp dword [ecx + eax*8], edi
lea eax, [ecx + eax*8]
je 0x46b6a0
movsx eax, word [ecx + 0x5ee4]
inc eax
cdq
idiv dword [ebp - 0x5c]
movzx eax, dx
mov edx, edi
mov word [ecx + 0x5ee4], ax
cwde
add eax, 0xbdd
lea eax, [ecx + eax*8]
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x64]
inc word [eax + 6]
inc dword [ecx + 0x5ee0]
push edx
call dword [ebp - 0x60]
mov eax, dword [ebp - 0x78]
add esp, 4
mov dword [esi + 0x18c], eax
mov eax, dword [ebp - 0x18]
mov dword [esi + 0x188], eax
mov eax, dword [esi + 0x184]
movups xmm0, xmmword [ebp - 0x94]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x18c]
movups xmmword [eax + ecx*8], xmm0
movq xmm0, qword [ebp - 0x84]
movq qword [eax + ecx*8 + 0x10], xmm0
inc dword [esi + 0x184]
push dword [ebp - 0x38]
xor edx, edx
mov ecx, str.Instances
call fcn.00404090
mov edx, eax
add esp, 4
mov eax, dword [0x4bead0]
mov dword [ebp - 0x28], edx
cmp dword [eax + 0x3fc4], edx
jne 0x46b72e
push ecx
mov ecx, dword [ebp - 0x28]
mov edx, 0xb
push str.Instances
call fcn.00427b90
mov edx, dword [ebp - 0x28]
add esp, 8
mov eax, dword [ebp - 0x44]
lea edi, [ebp - 0x18]
mov dword [ebp - 0x18], eax
not edx
mov esi, 4
nop
movzx eax, byte [edi]
lea edi, [edi + 1]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x4a2af0]
sub esi, 1
jne 0x46b740
mov eax, dword [0x4bead0]
not edx
mov esi, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x28], edx
cmp dword [eax + 0x3fc4], edx
jne 0x46b789
push ecx
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x28]
mov edx, 4
call fcn.00427b90
mov edx, dword [ebp - 0x28]
add esp, 8
movss xmm3, dword [ebx + 0x14]
jmp 0x46b796
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x28], edx
movsx eax, word [esi + 0x4c]
test eax, eax
jne 0x46b7a6
lea eax, [esi + 0x16c]
jmp 0x46b7b5
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x18c]
lea eax, [eax + ecx*8]
add eax, 0xffffffe8
cmp dword [ebp - 0x3c], 0
mov dword [eax], edx
je 0x46b96b
mov ecx, dword [ebp - 0x1c]
mov eax, ecx
movss xmm0, dword [0x4b6c90]
and eax, 0x3000000
movaps xmm1, xmm0
movaps xmm2, xmm0
cmp eax, 0x1000000
jne 0x46b7e8
movss xmm2, dword [0x4b69f8]
test ecx, 0x1000000
je 0x46b812
xorps xmm4, xmm4
comiss xmm3, xmm4
jbe 0x46b812
ucomiss xmm3, xmm0
movaps xmm1, xmm3
lahf
test ah, 0x44
jnp 0x46b812
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x46b81b
xorps xmm2, xmm2
jmp 0x46b81b
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jnp 0x46b85c
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x46b827
xorps xmm1, xmm1
mov ecx, dword [0x4bead0]
cvttss2si eax, xmm1
or dword [ecx + 0x4954], 4
movd xmm1, eax
cvttss2si eax, xmm2
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ecx + 0x497c], xmm1
movss dword [ecx + 0x4980], xmm0
jmp 0x46b862
mov ecx, dword [0x4bead0]
test dword [ebp - 0x48], 0x3000000
jne 0x46b889
or dword [ecx + 0x4954], 0x80
mov dword [ecx + 0x4984], 0
mov dword [ecx + 0x4988], 0
movss xmm0, dword [ebp - 0x68]
subss xmm0, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x54]
shr eax, 0xd
and eax, 0x800
movss dword [ebp - 0x74], xmm0
movss xmm0, dword [ebp - 0x20]
subss xmm0, dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0x74]
push 0
push eax
movss dword [ebp - 0x70], xmm0
call fcn.0040ccc0
mov eax, dword [edi + 0x3f8c]
add esp, 0xc
mov dword [esi + 0x158], eax
movups xmm0, xmmword [eax + 0x1fc]
movups xmmword [esi + 0xe4], xmm0
movss xmm2, dword [eax + 0x18]
movss xmm0, dword [eax + 0x20]
movss xmm3, dword [eax + 0x1c]
movss xmm1, dword [eax + 0x24]
movss dword [esi + 0xc4], xmm2
addss xmm2, xmm0
movss dword [esi + 0xc8], xmm3
addss xmm3, xmm1
movss dword [esi + 0xcc], xmm2
movss dword [esi + 0xd0], xmm3
movups xmm0, xmmword [eax + 0x1dc]
movups xmmword [esi + 0xd4], xmm0
cmp byte [eax + 0xb3], 0
je 0x46b93e
cmp byte [ebp - 0x2d], 0
je 0x46b93e
mov byte [eax + 0xb3], 0
cmp dword [ebp - 0x44], 0
jne 0x46b957
mov al, byte [esi + 0x1fa]
mov byte [esi + 0x1fb], al
mov byte [esi + 0x1fa], 0
mov eax, dword [esi + 0x158]
mov al, byte [eax + 0xad]
or byte [esi + 0x1fa], al
jmp 0x46b987
movups xmm0, xmmword [ebp - 0xa4]
movups xmmword [esi + 0xd4], xmm0
movups xmmword [esi + 0xc4], xmm0
movups xmmword [esi + 0xe4], xmm0
mov ecx, dword [ebp - 0x38]
call fcn.00413a10
cmp dword [ebp - 0x44], 0
jle 0x46b99d
mov ecx, dword [ebp - 0x28]
call fcn.00413a10
mov ecx, dword [esi + 0x158]
mov edi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], ecx
mov eax, dword [ecx + 0x13c]
mov dword [esi + 0x88], eax
movups xmm0, xmmword [ecx + 0x21c]
movss xmm7, dword [0x4b6ac4]
movups xmmword [esi + 0x134], xmm0
mov al, byte [ecx + 0xb3]
mov byte [esi + 0x1fd], al
movups xmm0, xmmword [ecx + 0x1fc]
mov eax, dword [ebp - 0x24]
movups xmmword [eax + 0x28], xmm0
movups xmm0, xmmword [ecx + 0x20c]
movups xmmword [eax + 0x38], xmm0
mov eax, dword [edx + 0x140]
mov dword [edi + 0x60], eax
mov eax, dword [ecx + 0x128]
mov ecx, dword [ecx + 0x12c]
mov dword [edi + 0x48], eax
mov eax, edi
mov dword [eax + 0x4c], ecx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + 0x120]
mov ecx, dword [ecx + 0x124]
mov dword [edi + 0x50], eax
mov eax, edi
mov dword [eax + 0x54], ecx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + 0x110]
mov ecx, dword [ecx + 0x114]
mov dword [edi + 0x58], eax
mov eax, edi
mov dword [eax + 0x5c], ecx
mov ecx, edi
mov eax, dword [edx + 0x1ac]
mov dword [ecx + 0x64], eax
mov eax, dword [edx + 0x1b4]
mov dword [ecx + 0x68], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x120], 0
mov dword [eax + 0x124], 0
mov dword [eax + 0x128], 0
mov dword [eax + 0x12c], 0
cmp eax, edx
je 0x46bacc
test ecx, 0x400
je 0x46baa8
movss xmm0, dword [esi + 0x134]
addss xmm0, xmm7
minss xmm0, dword [esi + 0x13c]
movss dword [esi + 0x134], xmm0
test ecx, 0x100
je 0x46bacc
movss xmm0, dword [esi + 0x138]
addss xmm0, xmm7
minss xmm0, dword [esi + 0x140]
movss dword [esi + 0x138], xmm0
test ecx, 0x400000
je 0x46bada
mov byte [ebp - 0x20], 0
jmp 0x46baf7
test ecx, 0x200000
je 0x46bae8
mov byte [ebp - 0x20], 1
jmp 0x46baf7
shr ecx, 0xa
and ecx, 0xffffff01
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x1c]
shr ecx, 0x17
not cl
and cl, 1
and edi, 0x200
mov dword [ebp - 0x3c], edi
je 0x46bb12
movaps xmm3, xmm7
jmp 0x46bb15
xorps xmm3, xmm3
mov edi, dword [ebp - 0x34]
test cl, cl
je 0x46bb5a
cmp dword [ebp - 0x3c], 0
jne 0x46bb5a
movss xmm1, dword [edi + 0x3904]
xorps xmm2, xmm2
test dword [ebp - 0x1c], 0x400
movaps xmm0, xmm1
addss xmm0, xmm3
movss dword [esi + 0x9c], xmm1
movss dword [esi + 0x94], xmm2
movss dword [esi + 0x98], xmm0
je 0x46bb76
movaps xmm1, xmm7
jmp 0x46bb79
xorps xmm1, xmm1
movss dword [ebp - 0x54], xmm1
test cl, cl
je 0x46bb2a
cmp dword [ebp - 0x3c], 0
je 0x46bb2a
movss xmm2, dword [edi + 0x3904]
jmp 0x46bb2d
xorps xmm1, xmm1
cmp byte [ebp - 0x20], 0
je 0x46bb89
movss xmm0, dword [edi + 0x3904]
jmp 0x46bb8c
xorps xmm0, xmm0
addss xmm0, xmm1
mov dword [esi + 0x48], 0xffffffff
xor ecx, ecx
mov dword [esi + 0x44], 0xffffffff
mov dword [esi + 0x6c], 0
mov word [esi + 0x6a], cx
subss xmm0, xmm2
movss dword [esi + 0x90], xmm0
cmp eax, edx
jne 0x46bbc9
lea edi, [esi + 0xe4]
mov dword [ebp - 0x3c], edi
mov edi, dword [ebp - 0x34]
jmp 0x46bbd2
lea edx, [eax + 0x21c]
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x3c]
movups xmm0, xmmword [edx]
movups xmmword [esi + 0xf4], xmm0
movss xmm3, dword [esi + 0xf4]
movss xmm4, dword [esi + 0xf8]
maxss xmm4, dword [esi + 0xe8]
maxss xmm3, dword [esi + 0xe4]
movss dword [esi + 0xf8], xmm4
movss dword [esi + 0xf4], xmm3
movss xmm1, dword [esi + 0xfc]
movss xmm0, dword [esi + 0x100]
minss xmm1, dword [esi + 0xec]
minss xmm0, dword [esi + 0xf0]
movss dword [esi + 0xfc], xmm1
movss dword [esi + 0x100], xmm0
movss xmm2, dword [esi + 0x138]
comiss xmm2, xmm4
movss xmm1, dword [esi + 0x13c]
ja 0x46bc60
movss xmm2, dword [esi + 0x140]
minss xmm2, xmm4
movss xmm0, dword [esi + 0x134]
comiss xmm0, xmm3
jbe 0x46bc72
movaps xmm1, xmm0
jmp 0x46bc76
minss xmm1, xmm3
movss dword [esi + 0xf4], xmm1
movss dword [esi + 0xf8], xmm2
movss xmm2, dword [esi + 0x100]
movss xmm1, dword [esi + 0x138]
comiss xmm1, xmm2
ja 0x46bca7
movss xmm1, dword [esi + 0x140]
minss xmm1, xmm2
movss xmm2, dword [esi + 0xfc]
comiss xmm0, xmm2
ja 0x46bcc0
movss xmm0, dword [esi + 0x13c]
minss xmm0, xmm2
test dword [ebp - 0x1c], 0x20000
movss dword [esi + 0xfc], xmm0
movss dword [esi + 0x100], xmm1
je 0x46bce6
movaps xmm0, xmm1
minss xmm0, dword [eax + 0x208]
jmp 0x46bcee
movss xmm0, dword [eax + 0x228]
mov edx, dword [ebp - 0x2c]
xor eax, eax
mov dword [esi + 0x1da], eax
mov dword [esi + 0x1de], eax
mov dword [esi + 0x1ba], eax
mov eax, dword [ebp - 0x40]
movss dword [esi + 0x100], xmm0
inc eax
movss xmm0, dword [esi + 0xe8]
movss dword [esi + 0x54], xmm0
movss dword [esi + 0x50], xmm0
mov dword [esi + 0x60], ecx
mov dword [esi + 0x5c], ecx
mov byte [esi + 0x1f6], 1
cmp eax, dword [edi + 0x3f08]
jge 0x46bd3e
mov byte [esi + 0x1f9], cl
mov eax, dword [ebp - 0x24]
movaps xmm1, xmm7
mov dword [eax + 8], ecx
mov ecx, 0x2b
call fcn.00405c00
movaps xmm1, xmm7
mov dword [esi + 0x78], eax
mov ecx, 0x2c
call fcn.00405c00
mov dword [esi + 0x7c], eax
mov eax, dword [ebp - 0x50]
mov dword [edi + 0x4ce0], esi
mov dword [edx + 0x19c], eax
mov eax, dword [ebp - 0x38]
cmp eax, edx
mov byte [edx + 0x158], 0
mov edx, dword [ebp - 0x50]
je 0x46bd8a
mov dword [eax + 0x19c], edx
test byte [ebp - 0x48], 2
je 0x46bd9d
test byte [ebp - 0x1c], 2
jne 0x46bd9d
mov byte [esi + 0x1f5], 1
lea ecx, [edi + 0x4d18]
mov dword [ebp - 0x48], ecx
cmp edx, dword [ecx]
jl 0x46be1e
mov eax, dword [ecx + 4]
inc edx
mov dword [ebp - 0x40], 0xbf800000
mov dword [ebp - 0x2c], edx
cmp edx, eax
jle 0x46bdf0
test eax, eax
je 0x46bdd4
cdq
sub eax, edx
mov edx, dword [ebp - 0x2c]
sar eax, 1
add eax, dword [ecx + 4]
mov dword [ebp - 0x20], eax
jmp 0x46bddb
mov dword [ebp - 0x20], 8
cmp dword [ebp - 0x20], edx
mov eax, edx
cmovg eax, dword [ebp - 0x20]
push eax
call fcn.00428f20
lea ecx, [edi + 0x4d18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x2c]
cmp eax, edx
jle 0x46be19
mov eax, dword [ebp - 0x40]
mov edi, dword [ebp - 0x48]
mov esi, dword [ebp - 0x2c]
mov ecx, dword [edi + 8]
mov dword [ecx + edx*4], eax
inc edx
cmp edx, esi
jl 0x46be02
mov esi, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x50]
mov dword [ecx], eax
movsd xmm0, qword [edi + 0x3f00]
mov eax, dword [edi + 0x4d20]
cvtpd2ps xmm0, xmm0
movss dword [eax + edx*4], xmm0
movsd xmm0, qword [edi + 0x3f00]
mov eax, dword [ebp - 0x24]
mov edi, dword [ebx + 8]
cvtpd2ps xmm0, xmm0
movss dword [eax + 4], xmm0
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x2c], eax
mov eax, 0x92492493
mov byte [esi + 0x1fc], 0
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x68], eax
je 0x46be90
cmp eax, edi
je 0x46be90
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x2c], eax
mov dword [esi + 8], 0
cmp dword [esi + 8], 0
jne 0x46bf41
mov edx, dword [ebx + 8]
lea eax, [edi + 0x1f]
imul edi, edi, 0x70
sar eax, 3
and eax, 0xfffffffc
lea ecx, [edi + 3]
and ecx, 0xfffffffc
mov dword [ebp - 0x40], ecx
lea ecx, [ecx + edx*2]
add ecx, 3
and ecx, 0xfffffffc
mov dword [ebp - 0x54], ecx
lea ecx, [ecx + edx*8]
add ecx, eax
mov dword [ebp - 0x6c], ecx
add ecx, eax
mov dword [ebp - 0x70], ecx
lea esi, [ecx + eax]
mov ecx, esi
call fcn.004099a0
mov ecx, dword [ebp - 0x4c]
push esi
push 0
push eax
mov dword [ecx + 8], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [ebp - 0x4c]
add esp, 0xc
mov edx, dword [ebp - 0x40]
mov ecx, dword [esi + 8]
mov dword [esi + 0x10], ecx
lea eax, [edi + ecx]
mov edi, dword [ebx + 8]
mov dword [esi + 0x14], eax
lea eax, [edx + ecx]
mov dword [esi + 0x18], eax
lea eax, [edx + edi*2]
mov edx, dword [ebp - 0x54]
add eax, ecx
mov dword [esi + 0x1c], eax
lea eax, [ecx + edx]
mov dword [esi + 0x20], eax
lea eax, [edx + edi*8]
add eax, ecx
mov dword [esi + 0x24], eax
lea eax, [edx + edi*8]
add eax, ecx
mov byte [esi + 0x1f1], 1
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x6c]
add eax, ecx
mov byte [esi + 0x1ec], 1
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x70]
add eax, ecx
mov dword [esi + 0x30], eax
cmp byte [esi + 0x1f4], 0
je 0x46bf68
mov word [esi + 0x1f1], 0x100
mov byte [esi + 0x1ec], 1
mov byte [esi + 0x1f4], 0
mov dword [esi + 0x34], 0
cmp byte [esi + 0x1ec], 0
je 0x46c0c7
or eax, 0xffffffff
mov dword [esi + 0x38], 0xffffffff
xor edi, edi
mov byte [esi + 0x1ed], 1
mov word [esi + 0x4e], ax
mov word [esi + 0x1d8], ax
mov word [esi + 0x1c8], ax
mov word [esi + 0x1c6], ax
mov word [esi + 0x1cc], ax
mov word [esi + 0x1c4], ax
mov word [esi + 0x1c0], ax
mov word [esi + 0x1be], ax
mov dword [ebp - 0x3c], edi
cmp dword [ebx + 8], edi
jle 0x46c0c4
xor eax, eax
mov dword [ebp - 0x20], eax
nop
mov edx, dword [esi + 0x10]
mov ecx, dword [ebp - 0x48]
add edx, eax
mov dword [ebp - 0x40], edx
test ecx, ecx
je 0x46bff5
cmp edi, dword [ebp - 0x68]
jge 0x46bff5
lea esi, [ecx + eax]
mov edi, edx
mov ecx, 0x1c
rep movsd dword es:[edi], dword [esi]
jmp 0x46c09a
movss xmm0, dword [edx + 0x14]
lea eax, [ebp - 0x114]
push 0x70
push 0
push eax
movss dword [ebp - 0x54], xmm0
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x40]
lea esi, [ebp - 0x114]
movss xmm0, dword [ebp - 0x54]
or eax, 0xffffffff
mov word [ebp - 0xc4], ax
add esp, 0xc
and byte [ebp - 0xa7], 0xfc
mov ecx, 0x1c
mov word [ebp - 0xc0], ax
mov edi, edx
mov word [ebp - 0xc2], ax
mov word [ebp - 0xbc], ax
mov word [ebp - 0xbe], ax
mov word [ebp - 0xba], ax
mov eax, 0xff
mov dword [ebp - 0x104], 0xbf800000
mov dword [ebp - 0xfc], 0xbf800000
mov dword [ebp - 0xb6], 0xff00ff
mov word [ebp - 0xb8], ax
rep movsd dword es:[edi], dword [esi]
movss dword [edx + 0x14], xmm0
mov byte [edx + 0x69], 1
mov word [edx + 0x63], 0x101
mov byte [edx + 0x62], 1
mov esi, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x3c]
movzx ecx, di
mov eax, dword [esi + 0x18]
mov word [eax + edi*2], cx
inc edi
mov eax, dword [ebp - 0x20]
add eax, 0x70
mov word [edx + 0x52], cx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x20], eax
cmp edi, dword [ebx + 8]
jl 0x46bfd0
mov edi, dword [ebx + 8]
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x46c132
mov ecx, dword [0x4bead0]
test ecx, ecx
je 0x46c12b
movsx eax, word [ecx + 0x5ee4]
mov edx, dword [ecx + 0x3f08]
add eax, 0xbdd
mov dword [ebp - 0x40], edx
cmp dword [ecx + eax*8], edx
lea eax, [ecx + eax*8]
je 0x46c11e
movsx eax, word [ecx + 0x5ee4]
inc eax
cdq
idiv dword [ebp - 0x5c]
movzx eax, dx
mov edx, dword [ebp - 0x40]
mov word [ecx + 0x5ee4], ax
cwde
add eax, 0xbdd
lea eax, [ecx + eax*8]
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], edx
inc word [eax + 6]
inc dword [ecx + 0x5ee0]
mov eax, dword [ebp - 0x2c]
push eax
call dword [ebp - 0x60]
add esp, 4
cmp byte [esi + 0x1f1], 0
je 0x46c142
mov ecx, esi
call fcn.00472dd0
movss xmm0, dword [esi + 0xb8]
xorps xmm4, xmm4
mov eax, dword [ebp - 0x34]
ucomiss xmm0, xmm4
movss xmm2, dword [eax + 0x3cf4]
lahf
test ah, 0x44
jnp 0x46c22b
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x46c22b
movaps xmm1, xmm2
xor eax, eax
divss xmm1, xmm0
cmp edi, 4
jl 0x46c208
lea edx, [edi - 4]
xor ecx, ecx
shr edx, 2
inc edx
lea eax, [edx*4]
mov dword [ebp - 0x40], eax
nop word [eax + eax]
mov eax, dword [esi + 0x10]
movaps xmm0, xmm1
lea ecx, [ecx + 0x1c0]
mulss xmm0, dword [eax + ecx - 0x1b0]
movss dword [eax + ecx - 0x1b0], xmm0
movaps xmm0, xmm1
mov eax, dword [esi + 0x10]
mulss xmm0, dword [eax + ecx - 0x140]
movss dword [eax + ecx - 0x140], xmm0
movaps xmm0, xmm1
mov eax, dword [esi + 0x10]
mulss xmm0, dword [eax + ecx - 0xd0]
movss dword [eax + ecx - 0xd0], xmm0
movaps xmm0, xmm1
mov eax, dword [esi + 0x10]
mulss xmm0, dword [eax + ecx - 0x60]
movss dword [eax + ecx - 0x60], xmm0
sub edx, 1
jne 0x46c1a0
mov eax, dword [ebp - 0x40]
cmp eax, edi
jge 0x46c22b
imul ecx, eax, 0x70
sub edi, eax
mov eax, dword [esi + 0x10]
movaps xmm0, xmm1
lea ecx, [ecx + 0x70]
mulss xmm0, dword [eax + ecx - 0x60]
movss dword [eax + ecx - 0x60], xmm0
sub edi, 1
jne 0x46c211
mov ecx, dword [ebp - 0x38]
movss dword [esi + 0xb8], xmm2
mov byte [ecx + 0xb3], 1
cmp dword [esi + 0x15c], 0
jle 0x46c276
mov ecx, dword [esi + 0x160]
test ecx, ecx
jns 0x46c26c
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x15c]
call fcn.004293e0
mov dword [esi + 0x15c], 0
mov ecx, esi
call fcn.0046c2a0
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0049c694
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret