Function at 0x1014f3a0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xa8
mov eax, dword [0x102230c0]
xor eax, esp
mov dword [esp + 0xa4], eax
mov eax, dword [0x10240c80]
push esi
push edi
cmp byte [eax + 0x3694], 0
je 0x10150023
push 0x1046bd84
call fcn.101b54db
add esp, 4
test eax, eax
jne 0x10150037
cmp dword [0x1046bdb0], 0x7fffffff
je 0x1015003e
mov eax, dword [0x10534054]
mov ecx, dword [0x10534058]
cmp eax, ecx
je 0x1014f40f
cmp byte [eax + 8], 0
jne 0x1014f41e
add eax, 0xc
cmp eax, ecx
jne 0x1014f402
mov eax, dword [0x10240c8c]
cmp byte [eax + 0x5c], 0
je 0x10150016
mov ecx, dword [0x10240c80]
xorps xmm1, xmm1
mov edx, dword [0x10469550]
movss xmm0, dword [ecx + 0x3698]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1014f44f
movss xmm0, dword [ecx + 0x369c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1014f4a5
or dword [edx + 0x1c74], 1
mov eax, dword [ecx + 0x3698]
mov ecx, dword [ecx + 0x369c]
mov dword [edx + 0x1c84], eax
mov dword [edx + 0x1c88], ecx
mov dword [edx + 0x1c8c], 0
mov dword [edx + 0x1c90], 0
mov dword [edx + 0x1c78], 1
mov eax, dword [0x10240c80]
mov dword [eax + 0x3698], 0
mov dword [eax + 0x369c], 0
or dword [edx + 0x1c74], 0x12
mov esi, 0xc02fb
movss xmm2, dword [0x102154b8]
mov ecx, 0xfb
movss xmm0, dword [0x102155ac]
mov dword [edx + 0x1c94], 0x43160000
mov dword [edx + 0x1c98], 0
mov dword [edx + 0x1c7c], 2
movss dword [esp + 0x70], xmm2
mov dword [edx + 0x1cb0], 0x43160000
movss dword [edx + 0x1cb4], xmm1
movss dword [edx + 0x1cb8], xmm2
movss dword [edx + 0x1cbc], xmm0
movq xmm0, qword [str.fFR_M_OSO]
mov dword [edx + 0x1cc0], 0
mov dword [edx + 0x1cc4], 0
mov eax, dword [0x10240c8c]
movq qword [esp + 0x70], xmm0
cmp byte [eax + 0x5c], 0
mov eax, dword [0x1020c774]
mov dword [esp + 0x78], eax
cmovne esi, ecx
mov ax, word [0x1020c778]
xor edx, edx
cmp dword [0x10241d90], 2
mov word [esp + 0x7c], ax
mov al, byte [0x1020c77a]
mov byte [esp + 0x7e], al
mov dword [esp + 0x14], edx
jl 0x1014f670
movaps xmm2, xmmword [0x10215760]
mov edx, 8
movaps xmm3, xmmword [0x10215bf0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm1, xmm3
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
mov dword [esp + 0x14], edx
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10215820]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x102157a0]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x102158a0]
movd xmm0, dword [str.fFR_M_OSO]
packuswb xmm1, xmm1
paddb xmm1, xmmword [0x10215900]
xorps xmm1, xmm0
movaps xmm0, xmm2
movd dword [esp + 0x70], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm1, xmm3
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10215820]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x102158a0]
movd xmm0, dword [esp + 0x74]
packuswb xmm1, xmm1
paddb xmm1, xmmword [0x10215900]
xorps xmm1, xmm0
movd dword [esp + 0x74], xmm1
nop dword [eax + eax]
mov eax, 0x8d3dcb09
imul edx
add edx, dword [esp + 0x14]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x14]
movsx eax, al
mov cl, dl
imul eax, eax, 0x3a
sub cl, al
add cl, 0x35
xor byte [esp + edx + 0x70], cl
inc edx
mov dword [esp + 0x14], edx
cmp edx, 0xf
jl 0x1014f670
push esi
xor edx, edx
lea ecx, [esp + 0x74]
call fcn.101755f0
mov ecx, dword [0x10240c8c]
mov ecx, dword [ecx + 0x40]
call fcn.10177d50
mov eax, dword [0x10469550]
xor edx, edx
push str.Background
mov eax, dword [eax + 0x1d50]
mov ecx, dword [eax]
call fcn.1016fe20
mov esi, dword [0x10469550]
sub esp, 0x18
mov edx, esp
mov edi, eax
mov dword [esp + 0x64], edi
mov ecx, dword [esi + 0x1bec]
movss xmm0, dword [ecx + 0x10]
movss dword [esp + 0x38], xmm0
movss xmm0, dword [ecx + 0x14]
mov ecx, dword [0x10240c80]
movss dword [esp + 0x3c], xmm0
movss xmm0, dword [ecx + 0x390c]
divss xmm0, dword [0x10215488]
mov eax, dword [ecx + 0x3900]
movss dword [esp + 0x40], xmm0
movups xmm0, xmmword [ecx + 0x38f0]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], eax
mov al, byte [ecx + 0x3904]
mov byte [edx + 0x14], al
call fcn.100bb6b0
mov edx, dword [0x10240c80]
sub esp, 0x18
movaps xmm0, xmmword [0x10215b20]
mov ecx, esp
movups xmmword [esp + 0x68], xmm0
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x3900]
movups xmmword [esp + 0x78], xmm0
movups xmm0, xmmword [edx + 0x38f0]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
mov al, byte [edx + 0x3904]
xorps xmm0, xmm0
mov byte [ecx + 0x14], al
call fcn.100bb830
mov ecx, dword [0x10240c80]
sub esp, 0x18
mov edx, esp
mov dword [esp + 0x58], eax
movups xmm1, xmmword [ecx + 0x38f0]
mov eax, dword [ecx + 0x3900]
movss xmm0, dword [ecx + 0x38fc]
mulss xmm0, dword [0x102151ac]
movups xmmword [edx], xmm1
mov dword [edx + 0x10], eax
mov al, byte [ecx + 0x3904]
mov byte [edx + 0x14], al
call fcn.100bb830
mov dword [esp + 0x34], eax
sub esp, 0x18
mov eax, dword [0x10240c80]
mov edx, esp
movups xmm0, xmmword [eax + 0x38f0]
mov ecx, dword [eax + 0x3900]
mov al, byte [eax + 0x3904]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], ecx
mov byte [edx + 0x14], al
call fcn.100bb6b0
mov cx, word [0x1020cdcc]
xor edx, edx
movq xmm0, qword [str.fFR_M_OSOM_]
mov word [esp + 0x78], cx
mov cl, byte [0x1020cdce]
mov dword [esp + 0x44], eax
movq qword [esp + 0x70], xmm0
mov byte [esp + 0x7a], cl
mov dword [esp + 0x30], edx
mov eax, 0x8d3dcb09
mul edx
shr edx, 5
movsx eax, dl
mov edx, dword [esp + 0x30]
mov cl, dl
imul eax, eax, 0x3a
sub cl, al
add cl, 0x35
xor byte [esp + edx + 0x70], cl
inc edx
mov dword [esp + 0x30], edx
cmp edx, 0xb
jl 0x1014f822
movss xmm3, dword [0x102155ac]
lea eax, [esp + 0x70]
movss xmm2, dword [esi + 0x1988]
push 0
push 0
push eax
push ecx
mov ecx, dword [esi + 0x1984]
lea eax, [esp + 0x48]
mov dword [esp], 0xbf800000
push eax
call fcn.10183eb0
movss xmm0, dword [esp + 0x38]
addss xmm0, dword [0x10215214]
mov eax, dword [0x10240c80]
movss xmm4, dword [0x10215378]
mov dword [esp + 0x30], 2
cmp dword [eax + 0x3908], 0
cvttss2si esi, xmm0
xorps xmm0, xmm0
je 0x1014f8b2
xorps xmm4, xmm4
movss xmm1, dword [esp + 0x28]
comiss xmm0, xmm1
jbe 0x1014f8c2
xorps xmm2, xmm2
jmp 0x1014f8ce
movss xmm2, dword [0x1021521c]
minss xmm2, xmm1
movss xmm1, dword [esp + 0x20]
mulss xmm2, dword [0x10215514]
movaps xmm0, xmm1
push 0
addss xmm0, dword [0x102154b8]
movss xmm3, dword [esp + 0x28]
addss xmm2, dword [0x102151ac]
push ecx
movss dword [esp], xmm4
mov ecx, edi
movss dword [esp + 0x34], xmm0
movss dword [esp + 0x20], xmm0
movss xmm0, dword [esp + 0x44]
mulss xmm0, dword [0x102152d0]
cvttss2si eax, xmm2
addss xmm0, xmm3
movss dword [esp + 0x78], xmm1
shl eax, 0x18
push eax
lea eax, [esp + 0x24]
movss dword [esp + 0x80], xmm3
push eax
movss dword [esp + 0x38], xmm0
lea eax, [esp + 0x80]
subss xmm0, dword [0x102152d0]
push eax
movss dword [esp + 0x30], xmm0
call fcn.101815c0
mov eax, dword [0x10240c80]
mov eax, dword [eax + 0x3908]
test eax, eax
jne 0x1014f9e4
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x70]
addss xmm0, dword [0x102154bc]
movss xmm1, dword [0x1021521c]
sub esp, 0xc
mov ecx, edi
movss dword [esp + 0x7c], xmm0
movss xmm0, dword [esp + 0x34]
subss xmm0, xmm1
mov dword [esp + 8], 0x3fc00000
mov dword [esp], 0x40a00000
push dword [esp + 0x20]
push eax
movss dword [esp + 0x88], xmm0
lea eax, [esp + 0x2c]
movss xmm0, dword [esp + 0x34]
subss xmm0, xmm1
push eax
movss dword [esp + 0x30], xmm0
movss xmm0, dword [esp + 0x3c]
subss xmm0, xmm1
movss dword [esp + 0x34], xmm0
call fcn.101814d0
jmp 0x1014fa77
cmp eax, 1
je 0x1014fa28
cmp eax, 2
jne 0x1014fa1e
movss xmm0, dword [esp + 0x2c]
movss dword [esp + 0x70], xmm0
movss xmm0, dword [esp + 0x28]
subss xmm0, dword [0x10215330]
movss dword [esp + 0x74], xmm0
movss xmm0, dword [esp + 0x28]
subss xmm0, dword [0x1021521c]
jmp 0x1014fa48
cmp eax, 3
je 0x1014fa28
cmp eax, 4
jne 0x1014fa77
movss xmm0, dword [esp + 0x2c]
movss dword [esp + 0x70], xmm0
movss xmm0, dword [esp + 0x24]
subss xmm0, dword [0x1021521c]
movss dword [esp + 0x74], xmm0
movss xmm1, dword [esp + 0x20]
lea eax, [esp + 0x70]
push ecx
mov dword [esp], 0x40000000
mov ecx, edi
push dword [esp + 0x18]
movss dword [esp + 0x20], xmm1
push eax
lea eax, [esp + 0x24]
movss dword [esp + 0x28], xmm0
push eax
call fcn.101813a0
mov ax, word [0x1020cdcc]
xor edx, edx
movq xmm0, qword [str.fFR_M_OSOM_]
mov word [esp + 0x78], ax
mov al, byte [0x1020cdce]
movq qword [esp + 0x70], xmm0
mov byte [esp + 0x7a], al
mov dword [esp + 0x14], edx
nop
mov eax, 0x8d3dcb09
mul edx
shr edx, 5
movsx eax, dl
mov edx, dword [esp + 0x14]
mov cl, dl
imul eax, eax, 0x3a
sub cl, al
add cl, 0x35
xor byte [esp + edx + 0x70], cl
inc edx
mov dword [esp + 0x14], edx
cmp edx, 0xb
jl 0x1014faa0
xorps xmm0, xmm0
mov dword [esp + 0x90], 0
lea ecx, [esp + 0x70]
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1014faf1
sub ecx, edx
lea eax, [esp + 0x70]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.10027870
cmp dword [esp + 0x94], 0xf
lea eax, [esp + 0x80]
movups xmm3, xmmword [esp + 0x50]
cmova eax, dword [esp + 0x80]
movss xmm1, dword [0x1021521c]
xorps xmm0, xmm0
comiss xmm0, xmm3
mov dword [esp + 0x14], eax
jbe 0x1014fb41
xorps xmm2, xmm2
jmp 0x1014fb48
movaps xmm2, xmm1
minss xmm2, xmm3
movss xmm4, dword [0x10215514]
movss xmm3, dword [0x102151ac]
movss xmm5, dword [esp + 0x64]
mulss xmm2, xmm4
addss xmm2, xmm3
cvttss2si ecx, xmm2
shl ecx, 0x10
comiss xmm0, xmm5
jbe 0x1014fb77
xorps xmm2, xmm2
jmp 0x1014fb7e
movaps xmm2, xmm1
minss xmm2, xmm5
movss xmm5, dword [esp + 0x68]
mulss xmm2, xmm4
addss xmm2, xmm3
cvttss2si eax, xmm2
shl eax, 8
or ecx, eax
comiss xmm0, xmm5
jbe 0x1014fb9f
xorps xmm2, xmm2
jmp 0x1014fba6
movaps xmm2, xmm1
minss xmm2, xmm5
mulss xmm2, xmm4
addss xmm2, xmm3
cvttss2si eax, xmm2
movss xmm2, dword [esp + 0x6c]
or ecx, eax
comiss xmm0, xmm2
ja 0x1014fbc6
movaps xmm0, xmm1
minss xmm0, xmm2
mulss xmm0, xmm4
movd xmm2, esi
cvtdq2ps xmm2, xmm2
addss xmm0, xmm3
mulss xmm2, xmm3
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x20]
addss xmm0, dword [0x1021546c]
shl edx, 0x18
or edx, ecx
subss xmm0, xmm2
movss dword [esp + 0x18], xmm0
movss xmm0, dword [esp + 0x3c]
mulss xmm0, xmm3
addss xmm0, dword [esp + 0x24]
subss xmm0, xmm1
movss dword [esp + 0x1c], xmm0
test edx, 0xff000000
je 0x1014fc75
mov esi, dword [esp + 0x14]
mov ecx, esi
lea eax, [ecx + 1]
mov dword [esp + 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1014fc30
sub ecx, dword [esp + 0x14]
add ecx, esi
cmp esi, ecx
je 0x1014fc75
push dword [esp + 0x1c]
mov eax, dword [edi + 0x2c]
push dword [esp + 0x1c]
movups xmm0, xmmword [edi + 0x60]
push 0
movss xmm2, dword [eax + 0xc]
push ecx
mov dword [esp], 0
push ecx
push esi
lea ecx, [esp + 0x68]
push ecx
mov ecx, dword [eax + 8]
push edx
push edi
movups xmmword [esp + 0x74], xmm0
call fcn.10184070
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x80]
cmp eax, 0xf
jbe 0x1014fcb3
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x1014fca9
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1015004f
push edx
push ecx
call fcn.101b60a3
add esp, 8
mov eax, dword [0x10240c80]
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0xf
mov byte [esp + 0x80], 0
mov eax, dword [eax + 0x3908]
cmp eax, 3
jne 0x1014fd24
movss xmm0, dword [esp + 0x2c]
movss xmm1, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
movss dword [esp + 0x70], xmm0
movss xmm0, dword [esp + 0x3c]
addss xmm0, xmm1
movss dword [esp + 0x1c], xmm1
push eax
push eax
mov eax, dword [esp + 0x3c]
movss dword [esp + 0x7c], xmm0
movss xmm0, dword [esp + 0x28]
movss dword [esp + 0x20], xmm0
jmp 0x1014fdc6
cmp eax, 4
jne 0x1014fddc
movss xmm1, dword [esp + 0x20]
mov ecx, edi
mov esi, dword [esp + 0x40]
movaps xmm0, xmm1
addss xmm0, dword [0x102152d0]
mov eax, dword [esp + 0x44]
push esi
push esi
push eax
push eax
movss dword [esp + 0x80], xmm0
lea eax, [esp + 0x80]
movss xmm0, dword [esp + 0x38]
push eax
movss dword [esp + 0x88], xmm0
lea eax, [esp + 0x2c]
movss xmm0, dword [esp + 0x38]
push eax
movss dword [esp + 0x30], xmm1
movss dword [esp + 0x34], xmm0
call fcn.10181720
movss xmm0, dword [esp + 0x2c]
mov eax, dword [esp + 0x44]
movss dword [esp + 0x70], xmm0
movss xmm0, dword [esp + 0x28]
movss dword [esp + 0x74], xmm0
movss xmm0, dword [esp + 0x20]
addss xmm0, dword [0x102154b4]
push esi
push esi
movss dword [esp + 0x20], xmm0
movss xmm0, dword [esp + 0x2c]
movss dword [esp + 0x24], xmm0
push eax
push eax
lea eax, [esp + 0x80]
mov ecx, edi
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.10181720
mov ecx, dword [0x10534058]
mov eax, dword [0x10534054]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x28], eax
cmp eax, ecx
je 0x1015000c
mov edi, dword [0x10469550]
nop dword [eax]
cmp byte [eax + 8], 0
je 0x1014fffd
mov esi, dword [0x10533f34]
cmp esi, dword [0x10533f38]
je 0x1014fffd
mov eax, dword [eax]
nop
cmp dword [esi + 0x84], eax
je 0x1014fe36
add esi, 0x148
cmp esi, dword [0x10533f38]
jne 0x1014fe20
mov eax, dword [esp + 0x28]
cmp esi, dword [0x10533f38]
je 0x1014fffd
mov eax, dword [esi + 0x94]
cmp eax, 4
jne 0x1014fea6
movss xmm3, dword [0x102155ac]
lea eax, [esp + 0x70]
movss xmm2, dword [edi + 0x1988]
push 0
push 0
push 0x1020bfec
push ecx
mov ecx, dword [edi + 0x1984]
mov dword [esp], 0xbf800000
push eax
call fcn.10183eb0
movss xmm0, dword [esp + 0x70]
addss xmm0, dword [0x10215214]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x70], xmm0
jmp 0x1014ff52
cmp eax, 5
jne 0x1014fefd
movss xmm3, dword [0x102155ac]
lea eax, [esp + 0x38]
movss xmm2, dword [edi + 0x1988]
push 0
push 0
push 0x1020bff0
push ecx
mov ecx, dword [edi + 0x1984]
mov dword [esp], 0xbf800000
push eax
call fcn.10183eb0
movss xmm0, dword [esp + 0x38]
addss xmm0, dword [0x10215214]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x38], xmm0
jmp 0x1014ff52
cmp eax, 6
jne 0x1014ff52
movss xmm3, dword [0x102155ac]
lea eax, [esp + 0x44]
movss xmm2, dword [edi + 0x1988]
push 0
push 0
push str.Freecam
push ecx
mov ecx, dword [edi + 0x1984]
mov dword [esp], 0xbf800000
push eax
call fcn.10183eb0
movss xmm0, dword [esp + 0x44]
addss xmm0, dword [0x10215214]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x44], xmm0
add esi, 0xa0
cmp dword [esi + 0x14], 0xf
jbe 0x1014ff60
mov esi, dword [esi]
movss xmm0, dword [esp + 0x20]
mov ecx, esi
addss xmm0, dword [0x10215370]
movd xmm1, dword [esp + 0x30]
cvtdq2pd xmm1, xmm1
lea edx, [ecx + 1]
movss dword [esp + 0x18], xmm0
movss xmm0, dword [esp + 0x24]
mulsd xmm1, qword [0x10215320]
cvtps2pd xmm0, xmm0
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movss dword [esp + 0x1c], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1014ffa2
sub ecx, edx
lea edx, [ecx + esi]
cmp esi, edx
je 0x1014fff1
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x50]
push dword [esp + 0x1c]
push 0
mov eax, dword [ecx + 0x2c]
movups xmm0, xmmword [ecx + 0x60]
push ecx
mov dword [esp], 0
movss xmm2, dword [eax + 0xc]
push edx
push esi
lea edx, [esp + 0x68]
push edx
push 0xffffffffffffffff
push ecx
mov ecx, dword [eax + 8]
movups xmmword [esp + 0x74], xmm0
call fcn.10184070
mov edi, dword [0x10469550]
inc dword [esp + 0x30]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x34]
add eax, 0xc
mov dword [esp + 0x28], eax
cmp eax, ecx
jne 0x1014fe00
call fcn.10177e00
call fcn.10177890
push 0x1046bd84
call fcn.101b550d
add esp, 4
mov ecx, dword [esp + 0xac]
pop edi
pop esi
xor ecx, esp
call fcn.101b5daa
mov esp, ebp
pop ebp
ret
push 5
call fcn.101b571c
push 6
mov dword [0x1046bdb0], 0x7ffffffe
call fcn.101b571c
call fcn.101bb1d6
int3