Function at 0x1004b7e0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ab510
mov eax, dword fs:[0]
push eax
sub esp, 0x1ac
mov eax, dword [0x100c5040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0x98], ecx
mov eax, dword [ebp + 8]
lea ebx, [ecx + 4]
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x1b4], ebx
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov edi, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
mov eax, dword [ecx + 4]
movss xmm0, dword [eax]
mov eax, dword [ecx + 0x10]
movss dword [ebp - 0x98], xmm0
mov edx, dword [eax]
mov eax, dword [ecx + 0x14]
xor ecx, ecx
mov eax, dword [eax]
mov word [ebx + 1], cx
mov byte [ebx + 3], cl
mov byte [ebx], cl
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], ecx
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], ecx
mov dword [ebx + 0x18], ecx
mov dword [ebx + 0x1c], ecx
mov dword [ebx + 0x20], ecx
mov dword [ebx + 0x24], ecx
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], ecx
mov dword [ebx + 0x34], ecx
mov dword [ebx + 0x38], ecx
mov dword [ebx + 0x3c], ecx
mov dword [ebx + 0x40], ecx
mov dword [ebx + 0x44], ecx
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], ecx
mov dword [ebp - 4], ecx
mov dword [ebx + 4], eax
movss xmm0, dword [0x100ba8dc]
mov dword [ebx + 0x30], edx
mov eax, dword [esi]
mov dword [ebx + 8], eax
mov eax, dword [esi + 4]
mov dword [ebx + 0xc], eax
mov eax, dword [esi + 8]
mov dword [ebx + 0x10], eax
mov eax, dword [edi]
mov dword [ebx + 0x14], eax
mov eax, dword [edi + 4]
mov dword [ebx + 0x18], eax
mov eax, dword [edi + 8]
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x24], 0xd
mov eax, dword [0x1010e994]
movss xmm3, dword [0x100ba96c]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
mov dword [ebp - 0x9c], eax
neg eax
mov dword [ebx + 0x3c], eax
mov eax, dword [ebx + 0x30]
add eax, 0xffffffd5
cmp eax, 5
ja case.default.0x1004b90a
jmp dword [eax*4 + 0x1004cc14]
movss xmm0, dword [0x100ba9d0]
jmp 0x1004b9df
mov eax, dword [0x1010e994]
movss xmm0, dword [0x100ba9a8]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm0
jmp 0x1004b9e9
mov dword [ebx + 0x28], 0x3fc00000
jmp 0x1004b9d7
mov eax, dword [0x10114840]
test al, 1
jne 0x1004b9bb
or eax, 1
mov dword [0x10114840], eax
mov eax, dword [0x1010e934]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x1004b9a6
mov edi, dword [eax + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [edi + ecx], 0
jne 0x1004b970
xor edx, edx
test ecx, ecx
je 0x1004b99c
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x1004b980
cmp esi, 0xc12e8fe5
je 0x1004b9b0
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x7c], eax
test eax, eax
jne 0x1004b965
xor ecx, ecx
mov dword [0x10114830], ecx
jmp 0x1004b9c1
mov ecx, dword [ebp - 0x7c]
mov dword [0x10114830], ecx
jmp 0x1004b9c1
mov ecx, dword [0x10114830]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x78], eax
call dword [ebp - 0x78]
movss xmm3, dword [0x100ba96c]
fstp dword [ebx + 0x28]
movss xmm0, dword [0x100ba8d0]
mov eax, dword [0x1010e994]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
mov dword [ebx + 0x38], eax
mov eax, dword [0x1010e994]
lea esi, [ebx + 8]
movss xmm0, dword [0x100baad0]
mov ecx, dword [ebx + 0x34]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
cmp ecx, eax
jge 0x1004cbab
lea edi, [ebx + 0x14]
nop
cmp dword [ebx + 0x38], ecx
jg 0x1004bb1d
mov eax, dword [ebx + 0x30]
add eax, 0xffffffd5
cmp eax, 5
ja case.default.0x1004ba38
jmp dword [eax*4 + 0x1004cc2c]
movss xmm1, dword [edi + 4]
movss xmm2, dword [edi]
movss xmm0, dword [edi + 8]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
movss xmm0, dword [0x100ba8c8]
comiss xmm0, xmm2
jb case.default.0x1004ba38
mov byte [ebp - 0x91], 0
lea eax, [ebp - 0x91]
jmp 0x1004bae3
movss xmm1, dword [edi + 4]
movss xmm2, dword [edi]
movss xmm0, dword [edi + 8]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
movss xmm0, dword [0x100ba8e0]
comiss xmm0, xmm2
jb case.default.0x1004ba38
mov byte [ebp - 0x89], 0
lea eax, [ebp - 0x89]
jmp 0x1004bae3
mov eax, dword [0x1010e994]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
comiss xmm0, dword [ebx + 0x28]
jbe case.default.0x1004ba38
mov byte [ebp - 0x8a], 0
lea eax, [ebp - 0x8a]
push eax
mov dword [ebx + 0x3c], ecx
lea ecx, [ebx + 0x44]
push esi
mov byte [ebx], 1
call fcn.1004b540
movss xmm3, dword [0x100ba96c]
mov eax, dword [0x1010e994]
movss xmm0, dword [0x100ba920]
mov ecx, dword [ebx + 0x34]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
add eax, ecx
mov dword [ebx + 0x38], eax
cmp ecx, dword [ebp - 0xa0]
jl 0x1004c112
cmp byte [ebx], 0
jne 0x1004cbab
mov eax, dword [0x1011483c]
test al, 1
jne 0x1004bbb1
or eax, 1
mov dword [0x1011483c], eax
mov eax, dword [0x1010e934]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x1004bb99
mov esi, dword [eax + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x1004bb60
xor edx, edx
test ecx, ecx
je 0x1004bb8c
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1004bb70
cmp edi, 0x58e37709
je 0x1004bba3
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x7c], eax
test eax, eax
jne 0x1004bb56
lea edi, [ebx + 0x14]
xor ecx, ecx
mov dword [0x1011482c], ecx
jmp 0x1004bbb7
mov ecx, dword [ebp - 0x7c]
lea edi, [ebx + 0x14]
mov dword [0x1011482c], ecx
jmp 0x1004bbb7
mov ecx, dword [0x1011482c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x78], eax
call dword [ebp - 0x78]
mov eax, dword [0x1010e994]
movss xmm3, dword [ebx + 0x1c]
fstp dword [ebp - 0x78]
movaps xmm2, xmm3
movss xmm1, dword [eax + 0x20]
lea eax, [ebp - 0x68]
movaps xmm0, xmm1
mulss xmm0, dword [ebp - 0x78]
push 0x54
push 0
push eax
mulss xmm0, dword [0x100ba95c]
subss xmm2, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [edi]
addss xmm3, xmm2
movss dword [ebp - 0x84], xmm0
movaps xmm0, xmm1
movss dword [ebx + 0x1c], xmm2
mulss xmm0, dword [ebx + 0x18]
mulss xmm3, dword [0x100ba96c]
movss dword [ebp - 0x88], xmm0
mulss xmm3, xmm1
movss dword [ebp - 0x7c], xmm3
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x68]
call fcn.10020520
mov eax, dword [ebx + 0x24]
lea edi, [ebx + 8]
movss xmm0, dword [ebp - 0x84]
cmp eax, 1
addss xmm0, dword [ebx + 8]
mov ecx, 0x8400b
mov dword [ebp - 0xe4], 0x40000000
mov esi, 0x4208608b
mov dword [ebp - 0xe0], 0x40000000
cmove esi, ecx
mov dword [ebp - 0xdc], 0x40000000
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xf0], 0xc0000000
push ecx
mov ecx, dword [0x1010e954]
push eax
push dword [ebx + 4]
movss dword [ebp - 0xc0], xmm0
lea eax, [ebp - 0xe4]
movss xmm0, dword [ebp - 0x88]
addss xmm0, dword [ebx + 0xc]
push esi
push eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xec], 0xc0000000
push eax
movss dword [ebp - 0xbc], xmm0
lea eax, [ebp - 0xc0]
movss xmm0, dword [ebp - 0x7c]
addss xmm0, dword [ebx + 0x10]
push eax
push edi
mov dword [ebp - 0xe8], 0xc0000000
movss dword [ebp - 0xb8], xmm0
call fcn.100490a0
cmp byte [ebp - 0x31], 0
je 0x1004bd98
test dword [ebp - 0x38], 0x80000
je 0x1004bd98
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [0x1010e954]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
mov dword [ebp - 0xfc], 0x40000000
push eax
push dword [ebx + 0x24]
mov eax, esi
mov dword [ebp - 0xf8], 0x40000000
push dword [ebx + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0xf4], 0x40000000
push eax
lea eax, [ebp - 0xfc]
mov dword [ebp - 0x108], 0xc0000000
push eax
lea eax, [ebp - 0x108]
mov dword [ebp - 0x104], 0xc0000000
push eax
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x100], 0xc0000000
push eax
push edi
call fcn.100490a0
movss xmm0, dword [0x100ba9a8]
comiss xmm0, dword [ebp - 0x3c]
ja 0x1004bdb2
cmp byte [ebp - 0x32], 0
jne 0x1004bdb2
cmp byte [ebp - 0x31], 0
je 0x1004be03
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x1004be06
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1004be03
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x1010e954]
lea eax, [ebp - 0x68]
add esp, 0xc
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
push eax
push dword [ebx + 0x24]
lea eax, [ebp - 0xc0]
push dword [ebx + 4]
push esi
push eax
push edi
call fcn.10048e60
mov ecx, dword [ebp - 0x1c]
cmp byte [ebp - 0x31], 0
je 0x1004beb3
mov dword [ebx + 0x24], 3
lea eax, [ebp - 0x68]
movss xmm3, dword [ebx + 8]
movss xmm2, dword [ebx + 0xc]
movaps xmm0, xmm3
addss xmm0, dword [ebp - 0x84]
movss xmm1, dword [ebx + 0x10]
subss xmm3, dword [ebp - 0x84]
mov ecx, dword [0x1010e954]
push eax
movss dword [ebp - 0x114], xmm0
lea eax, [ebp - 0x114]
movaps xmm0, xmm2
addss xmm0, dword [ebp - 0x88]
subss xmm2, dword [ebp - 0x88]
push 3
push dword [ebx + 4]
movss dword [ebp - 0x120], xmm3
movss dword [ebp - 0x110], xmm0
movaps xmm0, xmm1
addss xmm0, dword [ebp - 0x7c]
subss xmm1, dword [ebp - 0x7c]
push 0x8400b
push eax
lea eax, [ebp - 0x120]
movss dword [ebp - 0x11c], xmm2
push eax
movss dword [ebp - 0x10c], xmm0
movss dword [ebp - 0x118], xmm1
call fcn.10048e60
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x3c]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1004bee2
movss xmm0, dword [ebp - 0x5c]
movss dword [ebx + 8], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [ebx + 0xc], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [ebx + 0x10], xmm0
test ecx, ecx
je 0x1004bfec
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x1004bfec
mov edx, dword [ebx + 0x30]
cmp edx, 0x44
je 0x1004bf12
cmp edx, 0x2e
je 0x1004bf12
cmp edx, 0x30
jne 0x1004bfec
mov eax, dword [0x10114838]
test al, 1
jne 0x1004bf97
or eax, 1
mov dword [0x10114838], eax
mov eax, dword [0x1010e934]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x1004bf7c
mov esi, dword [eax + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [esi + ecx], 0
jne 0x1004bf40
xor edx, edx
test ecx, ecx
je 0x1004bf6c
nop dword [eax]
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1004bf50
cmp edi, 0x1aef2a38
je 0x1004bf86
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x7c], eax
test eax, eax
jne 0x1004bf36
mov edx, dword [ebx + 0x30]
lea edi, [ebx + 8]
xor ecx, ecx
mov dword [0x10114834], ecx
jmp 0x1004bf9d
mov ecx, dword [ebp - 0x7c]
lea edi, [ebx + 8]
mov edx, dword [ebx + 0x30]
mov dword [0x10114834], ecx
jmp 0x1004bf9d
mov ecx, dword [0x10114834]
cmp edx, 0x44
je 0x1004bfc8
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x78], eax
call dword [ebp - 0x78]
fstp dword [ebp - 0x78]
movss xmm0, dword [ebp - 0x78]
mulss xmm0, dword [0x100ba8cc]
call fcn.1001f720
comiss xmm0, dword [ebp - 0x48]
ja 0x1004bfec
mov eax, dword [ebx + 0x34]
lea esi, [ebx + 0x44]
mov dword [ebx + 0x3c], eax
mov ecx, esi
lea eax, [ebp - 0x8b]
mov byte [ebx], 1
push eax
push edi
mov byte [ebp - 0x8b], 1
call fcn.1004b540
jmp 0x1004bfef
lea esi, [ebx + 0x44]
cmp byte [ebx], 0
jne 0x1004cba8
movss xmm0, dword [ebp - 0x3c]
ucomiss xmm0, dword [0x100ba9a8]
lahf
test ah, 0x44
jnp 0x1004c0da
mov eax, dword [ebx + 0x34]
mov ecx, esi
mov dword [ebx + 0x3c], eax
lea eax, [ebp - 0x8c]
push eax
push edi
mov byte [ebp - 0x8c], 1
call fcn.1004b540
movss xmm0, dword [0x100ba9a8]
mov ecx, dword [ebp - 0x1c]
movss dword [ebp - 0x84], xmm0
test ecx, ecx
je 0x1004c143
call fcn.1007a660
test al, al
je 0x1004c084
movss xmm0, dword [ebx + 0x14]
lea edi, [ebx + 0x14]
movss xmm1, dword [0x100ba95c]
mulss xmm0, xmm1
movss dword [edi], xmm0
movss xmm0, dword [edi + 4]
mulss xmm0, xmm1
movss dword [edi + 4], xmm0
movss xmm0, dword [edi + 8]
mulss xmm0, xmm1
movss dword [edi + 8], xmm0
jmp 0x1004c0dd
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
mov byte [ebp - 0x7d], al
test al, al
je 0x1004c0a8
movss xmm0, dword [0x100ba93c]
movss dword [ebp - 0x84], xmm0
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
test eax, eax
je 0x1004c143
cmp byte [ebp - 0x7d], 0
mov eax, dword [ebp - 0x1c]
je 0x1004c140
cmp dword [ebx + 0x20], eax
jne 0x1004c140
mov dword [ebx + 0x24], 1
lea edi, [ebx + 0x14]
lea esi, [ebx + 8]
mov eax, dword [ebx + 0x3c]
add eax, dword [ebp - 0x9c]
mov ecx, dword [ebx + 0x34]
cmp eax, ecx
jg 0x1004c10a
lea eax, [ebp - 0x90]
mov dword [ebx + 0x3c], ecx
push eax
push esi
lea ecx, [ebx + 0x44]
mov byte [ebp - 0x90], 0
call fcn.1004b540
movss xmm3, dword [0x100ba96c]
mov ecx, dword [ebx + 0x34]
movss xmm0, dword [0x100baad0]
inc ecx
mov dword [ebx + 0x34], ecx
mov eax, dword [0x1010e994]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm3
cvttss2si eax, xmm0
cmp ecx, eax
jl 0x1004ba20
jmp 0x1004cbab
mov dword [ebx + 0x20], eax
movss xmm2, dword [ebp - 0x48]
lea edi, [ebx + 0x14]
mulss xmm2, dword [ebx + 0x1c]
xor esi, esi
mov dword [ebp - 0x74], 0
movss xmm0, dword [ebp - 0x50]
mulss xmm0, dword [ebx + 0x14]
mov dword [ebp - 0x70], 0
movss xmm1, dword [ebp - 0x4c]
addss xmm2, xmm2
mulss xmm1, dword [ebx + 0x18]
mov dword [ebp - 0x6c], 0
addss xmm2, xmm0
addss xmm0, xmm1
addss xmm0, xmm1
addss xmm2, xmm0
movss dword [ebp - 0x78], xmm2
nop dword [eax]
nop dword [eax + eax]
mulss xmm2, dword [ebp + esi - 0x50]
movss xmm0, dword [edi]
subss xmm0, xmm2
movss dword [ebp + esi - 0x74], xmm0
call fcn.1002bb50
comiss xmm0, dword [0x100ba9a8]
jae 0x1004c1ca
mov dword [ebp + esi - 0x74], 0
movss xmm2, dword [ebp - 0x78]
add esi, 4
add edi, 4
cmp esi, 0xc
jb 0x1004c1a0
movss xmm0, dword [ebp - 0x84]
lea eax, [ebp - 0xa8]
mulss xmm0, dword [0x100ba964]
lea edx, [ebp - 0xb4]
mov byte [ebp - 0xa4], 0
lea ecx, [ebp - 0xac]
push dword [ebp - 0xa4]
mov dword [ebp - 0xa8], 0x3f666666
push eax
mov dword [ebp - 0xb4], 0
movss dword [ebp - 0xac], xmm0
call fcn.10027fd0
movss xmm0, dword [ebp - 0x48]
add esp, 8
comiss xmm0, dword [0x100ba978]
movss xmm2, dword [eax]
movaps xmm3, xmm2
movaps xmm4, xmm2
mulss xmm3, dword [ebp - 0x74]
mulss xmm4, dword [ebp - 0x70]
mulss xmm2, dword [ebp - 0x6c]
movss dword [ebp - 0x7c], xmm3
movss dword [ebp - 0x88], xmm4
movss dword [ebp - 0x84], xmm2
jbe 0x1004c794
movaps xmm0, xmm3
movaps xmm1, xmm4
mulss xmm0, xmm3
mulss xmm1, xmm4
addss xmm1, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm2
addss xmm1, xmm0
comiss xmm1, dword [0x100bab8c]
movss dword [ebp - 0x78], xmm1
jbe 0x1004c6c4
movaps xmm0, xmm1
call fcn.1001f740
movss xmm0, dword [ebp - 0x78]
call fcn.1001f740
addss xmm0, dword [0x100ba8a0]
movss xmm6, dword [0x100ba9a8]
movaps xmm1, xmm6
movss xmm3, dword [ebp - 0x7c]
movss xmm4, dword [ebp - 0x88]
movaps xmm5, xmm3
movss xmm2, dword [ebp - 0x84]
divss xmm1, xmm0
movaps xmm0, xmm4
mulss xmm0, xmm1
mulss xmm5, xmm1
mulss xmm0, dword [ebp - 0x4c]
mulss xmm5, dword [ebp - 0x50]
addss xmm5, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm1
movss xmm1, dword [0x100ba96c]
mulss xmm0, dword [ebp - 0x48]
addss xmm5, xmm0
comiss xmm5, xmm1
jbe 0x1004c6bd
movaps xmm0, xmm6
subss xmm0, xmm5
addss xmm0, xmm1
mulss xmm3, xmm0
mulss xmm4, xmm0
mulss xmm2, xmm0
movss dword [ebx + 0x14], xmm3
lea edi, [ebx + 8]
movss dword [ebx + 0x18], xmm4
movaps xmm1, xmm6
subss xmm1, dword [ebp - 0x3c]
movss dword [ebx + 0x1c], xmm2
mov ecx, 0x8400b
mov eax, dword [0x1010e994]
mov esi, 0x4208608b
mov dword [ebp - 0x12c], 0x40000000
mov dword [ebp - 0x128], 0x40000000
mov dword [ebp - 0x124], 0x40000000
mulss xmm1, dword [eax + 0x20]
mov eax, dword [ebx + 0x24]
cmp eax, 1
mov dword [ebp - 0x138], 0xc0000000
cmove esi, ecx
mov dword [ebp - 0x134], 0xc0000000
movaps xmm0, xmm1
mov dword [ebp - 0x130], 0xc0000000
mulss xmm0, xmm3
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [0x1010e954]
movaps xmm3, xmm1
mulss xmm1, xmm2
push eax
push dword [ebx + 4]
movss dword [ebp - 0x78], xmm0
lea eax, [ebp - 0x12c]
addss xmm0, dword [ebx + 8]
mulss xmm3, xmm4
push esi
push eax
lea eax, [ebp - 0x138]
movss dword [ebp - 0x88], xmm1
movss dword [ebp - 0xcc], xmm0
movaps xmm0, xmm3
addss xmm0, dword [ebx + 0xc]
push eax
lea eax, [ebp - 0xcc]
movss dword [ebp - 0x84], xmm3
push eax
push edi
movss dword [ebp - 0xc8], xmm0
movaps xmm0, xmm1
addss xmm0, dword [ebx + 0x10]
movss dword [ebp - 0xc4], xmm0
call fcn.100490a0
cmp byte [ebp - 0x31], 0
je 0x1004c4c4
test dword [ebp - 0x38], 0x80000
je 0x1004c4c4
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [0x1010e954]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
mov dword [ebp - 0x174], 0x40000000
push eax
push dword [ebx + 0x24]
mov eax, esi
mov dword [ebp - 0x170], 0x40000000
push dword [ebx + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0x16c], 0x40000000
push eax
lea eax, [ebp - 0x174]
mov dword [ebp - 0x144], 0xc0000000
push eax
lea eax, [ebp - 0x144]
mov dword [ebp - 0x140], 0xc0000000
push eax
lea eax, [ebp - 0xcc]
mov dword [ebp - 0x13c], 0xc0000000
push eax
push edi
call fcn.100490a0
movss xmm0, dword [0x100ba9a8]
comiss xmm0, dword [ebp - 0x3c]
ja 0x1004c4de
cmp byte [ebp - 0x32], 0
jne 0x1004c4de
cmp byte [ebp - 0x31], 0
je 0x1004c52f
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x1004c532
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1004c52f
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x1010e954]
lea eax, [ebp - 0x68]
add esp, 0xc
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
push eax
push dword [ebx + 0x24]
lea eax, [ebp - 0xcc]
push dword [ebx + 4]
push esi
push eax
push edi
call fcn.10048e60
mov ecx, dword [ebp - 0x1c]
cmp byte [ebp - 0x31], 0
je 0x1004c5e2
movss xmm0, dword [ebp - 0x78]
lea eax, [ebp - 0x68]
mov dword [ebx + 0x24], 3
movss xmm3, dword [ebx + 8]
movss xmm2, dword [ebx + 0xc]
addss xmm0, xmm3
movss xmm1, dword [ebx + 0x10]
subss xmm3, dword [ebp - 0x78]
mov ecx, dword [0x1010e954]
push eax
movss dword [ebp - 0x150], xmm0
lea eax, [ebp - 0x150]
movss xmm0, dword [ebp - 0x84]
addss xmm0, xmm2
movss dword [ebp - 0x15c], xmm3
subss xmm2, dword [ebp - 0x84]
push 3
push dword [ebx + 4]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x88]
addss xmm0, xmm1
movss dword [ebp - 0x158], xmm2
subss xmm1, dword [ebp - 0x88]
push 0x8400b
push eax
lea eax, [ebp - 0x15c]
push eax
movss dword [ebp - 0x148], xmm0
movss dword [ebp - 0x154], xmm1
call fcn.10048e60
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x3c]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1004c611
movss xmm0, dword [ebp - 0x5c]
movss dword [ebx + 8], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [ebx + 0xc], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [ebx + 0x10], xmm0
test ecx, ecx
je 0x1004c6f2
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x1004c6f2
mov edx, dword [ebx + 0x30]
cmp edx, 0x44
je 0x1004c641
cmp edx, 0x2e
je 0x1004c641
cmp edx, 0x30
jne 0x1004c6f2
mov eax, dword [0x10114838]
test al, 1
jne 0x1004c73c
or eax, 1
mov dword [0x10114838], eax
mov eax, dword [0x1010e934]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x1004c6b0
mov esi, dword [eax + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [esi + ecx], 0
jne 0x1004c670
xor edx, edx
test ecx, ecx
je 0x1004c6a0
nop dword [eax]
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1004c680
cmp edi, 0x1aef2a38
je 0x1004c72b
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x7c], eax
test eax, eax
jne 0x1004c665
mov edx, dword [ebx + 0x30]
lea edi, [ebx + 8]
xor ecx, ecx
mov dword [0x10114834], ecx
jmp 0x1004c742
movss xmm1, dword [ebp - 0x78]
jmp 0x1004c6cc
movss xmm6, dword [0x100ba9a8]
movss xmm0, dword [0x100bab64]
comiss xmm0, xmm1
jbe 0x1004c32f
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
lea edi, [ebx + 0x44]
mov eax, dword [ebx + 0x40]
lea esi, [ebx + 8]
cmp eax, 0x14
jle 0x1004cb9c
mov eax, dword [ebx + 0x34]
mov ecx, edi
mov dword [ebx + 0x3c], eax
lea eax, [ebp - 0x8f]
push eax
push esi
mov byte [ebx], 1
mov byte [ebp - 0x8f], 0
call fcn.1004b540
lea edi, [ebx + 0x14]
jmp 0x1004c0e0
mov ecx, dword [ebp - 0x7c]
lea edi, [ebx + 8]
mov edx, dword [ebx + 0x30]
mov dword [0x10114834], ecx
jmp 0x1004c742
mov ecx, dword [0x10114834]
cmp edx, 0x44
je 0x1004c76d
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x78], eax
call dword [ebp - 0x78]
fstp dword [ebp - 0x78]
movss xmm0, dword [ebp - 0x78]
mulss xmm0, dword [0x100ba8cc]
call fcn.1001f720
comiss xmm0, dword [ebp - 0x48]
ja 0x1004c6f2
mov eax, dword [ebx + 0x34]
mov dword [ebx + 0x3c], eax
lea eax, [ebp - 0x8d]
push eax
push edi
lea edi, [ebx + 0x44]
mov byte [ebx], 1
mov ecx, edi
mov byte [ebp - 0x8d], 1
call fcn.1004b540
jmp 0x1004c6f5
movss xmm0, dword [0x100ba9a8]
lea edi, [ebx + 8]
subss xmm0, dword [ebp - 0x3c]
movss dword [ebx + 0x14], xmm3
mov ecx, 0x8400b
movss dword [ebx + 0x18], xmm4
mov esi, 0x4208608b
movss dword [ebx + 0x1c], xmm2
mov eax, dword [0x1010e994]
mov dword [ebp - 0x168], 0x40000000
mov dword [ebp - 0x164], 0x40000000
mov dword [ebp - 0x160], 0x40000000
mulss xmm0, dword [eax + 0x20]
mov eax, dword [ebx + 0x24]
cmp eax, 1
mov dword [ebp - 0x1b0], 0xc0000000
cmove esi, ecx
mov dword [ebp - 0x1ac], 0xc0000000
mulss xmm3, xmm0
lea ecx, [ebp - 0x68]
push ecx
mulss xmm4, xmm0
mov ecx, dword [0x1010e954]
mulss xmm2, xmm0
movaps xmm0, xmm3
push eax
addss xmm0, dword [ebx + 8]
push dword [ebx + 4]
lea eax, [ebp - 0x168]
movss dword [ebp - 0x7c], xmm3
push esi
push eax
movss dword [ebp - 0xd8], xmm0
lea eax, [ebp - 0x1b0]
movaps xmm0, xmm4
movss dword [ebp - 0x88], xmm4
addss xmm0, dword [ebx + 0xc]
push eax
lea eax, [ebp - 0xd8]
movss dword [ebp - 0x84], xmm2
push eax
push edi
movss dword [ebp - 0xd4], xmm0
movaps xmm0, xmm2
addss xmm0, dword [ebx + 0x10]
mov dword [ebp - 0x1a8], 0xc0000000
movss dword [ebp - 0xd0], xmm0
call fcn.100490a0
cmp byte [ebp - 0x31], 0
je 0x1004c92b
test dword [ebp - 0x38], 0x80000
je 0x1004c92b
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [0x1010e954]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
mov dword [ebp - 0x180], 0x40000000
push eax
push dword [ebx + 0x24]
mov eax, esi
mov dword [ebp - 0x17c], 0x40000000
push dword [ebx + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0x178], 0x40000000
push eax
lea eax, [ebp - 0x180]
mov dword [ebp - 0x18c], 0xc0000000
push eax
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x188], 0xc0000000
push eax
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x184], 0xc0000000
push eax
push edi
call fcn.100490a0
movss xmm0, dword [0x100ba9a8]
comiss xmm0, dword [ebp - 0x3c]
ja 0x1004c945
cmp byte [ebp - 0x32], 0
jne 0x1004c945
cmp byte [ebp - 0x31], 0
je 0x1004c996
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x1004c999
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1004c996
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x1010e954]
lea eax, [ebp - 0x68]
add esp, 0xc
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
push eax
push dword [ebx + 0x24]
lea eax, [ebp - 0xd8]
push dword [ebx + 4]
push esi
push eax
push edi
call fcn.10048e60
mov ecx, dword [ebp - 0x1c]
cmp byte [ebp - 0x31], 0
je 0x1004ca49
movss xmm0, dword [ebp - 0x7c]
lea eax, [ebp - 0x68]
mov dword [ebx + 0x24], 3
movss xmm3, dword [ebx + 8]
movss xmm2, dword [ebx + 0xc]
addss xmm0, xmm3
movss xmm1, dword [ebx + 0x10]
subss xmm3, dword [ebp - 0x7c]
mov ecx, dword [0x1010e954]
push eax
movss dword [ebp - 0x198], xmm0
lea eax, [ebp - 0x198]
movss xmm0, dword [ebp - 0x88]
addss xmm0, xmm2
movss dword [ebp - 0x1a4], xmm3
subss xmm2, dword [ebp - 0x88]
push 3
push dword [ebx + 4]
movss dword [ebp - 0x194], xmm0
movss xmm0, dword [ebp - 0x84]
addss xmm0, xmm1
movss dword [ebp - 0x1a0], xmm2
subss xmm1, dword [ebp - 0x84]
push 0x8400b
push eax
lea eax, [ebp - 0x1a4]
push eax
movss dword [ebp - 0x190], xmm0
movss dword [ebp - 0x19c], xmm1
call fcn.10048e60
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x3c]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1004ca78
movss xmm0, dword [ebp - 0x5c]
movss dword [ebx + 8], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [ebx + 0xc], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [ebx + 0x10], xmm0
test ecx, ecx
je 0x1004c6f2
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x1004c6f2
mov edx, dword [ebx + 0x30]
cmp edx, 0x44
je 0x1004caa8
cmp edx, 0x2e
je 0x1004caa8
cmp edx, 0x30
jne 0x1004c6f2
mov eax, dword [0x10114838]
test al, 1
jne 0x1004cb40
or eax, 1
mov dword [0x10114838], eax
mov eax, dword [0x1010e934]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x84], eax
test eax, eax
je 0x1004cb22
mov esi, dword [eax + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
nop dword [eax]
inc ecx
cmp byte [ecx + esi], 0
jne 0x1004cae0
xor edx, edx
test ecx, ecx
je 0x1004cb0f
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1004caf0
cmp edi, 0x1aef2a38
je 0x1004cb2c
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 4]
mov dword [ebp - 0x84], eax
test eax, eax
jne 0x1004cad3
mov edx, dword [ebx + 0x30]
lea edi, [ebx + 8]
xor ecx, ecx
mov dword [0x10114834], ecx
jmp 0x1004cb46
mov ecx, dword [ebp - 0x84]
lea edi, [ebx + 8]
mov edx, dword [ebx + 0x30]
mov dword [0x10114834], ecx
jmp 0x1004cb46
mov ecx, dword [0x10114834]
cmp edx, 0x44
je 0x1004cb75
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x78], eax
call dword [ebp - 0x78]
fstp dword [ebp - 0x78]
movss xmm0, dword [ebp - 0x78]
mulss xmm0, dword [0x100ba8cc]
call fcn.1001f720
comiss xmm0, dword [ebp - 0x48]
ja 0x1004c6f2
mov eax, dword [ebx + 0x34]
mov dword [ebx + 0x3c], eax
lea eax, [ebp - 0x8e]
push eax
push edi
lea edi, [ebx + 0x44]
mov byte [ebx], 1
mov ecx, edi
mov byte [ebp - 0x8e], 1
call fcn.1004b540
jmp 0x1004c6f5
inc eax
lea edi, [ebx + 0x14]
mov dword [ebx + 0x40], eax
jmp 0x1004c0e0
lea esi, [ebx + 8]
mov eax, dword [ebx + 0x3c]
add eax, dword [ebp - 0x9c]
mov edx, dword [ebx + 0x34]
cmp eax, edx
jg 0x1004cbcf
lea eax, [ebp - 0x7d]
mov dword [ebx + 0x3c], edx
push eax
push esi
lea ecx, [ebx + 0x44]
mov byte [ebp - 0x7d], 0
call fcn.1004b540
movd xmm0, dword [ebx + 0x34]
mov ecx, dword [0x1010e994]
mov eax, dword [ebp - 0xb0]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [ecx + 0x20]
addss xmm0, dword [ebp - 0x98]
movss dword [ebx + 0x2c], xmm0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100a5fbc
mov esp, ebp
pop ebp
ret 0x10