Function at 0x1009bcd8
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100bf327
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1b8
mov eax, dword [0x100cd00c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ebp - 0x144]
push 0x30
push 0
push eax
mov dword [ebp - 0x178], esi
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0x148], 0
add esp, 0xc
movups xmmword [ebp - 0x168], xmm0
movups xmmword [ebp - 0x158], xmm0
test esi, esi
je 0x1009cd47
cmp dword [0x100df5d0], 0
je 0x1009cd47
mov eax, dword [0x100f5798]
mov edi, dword [esi + 8]
test al, 1
jne 0x1009b6ed
or eax, 1
mov dword [0x100f5798], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x74]
call fcn.10034d20
push 0xda7d68cb
mov edx, eax
mov ecx, 0x100f579c
call fcn.10035210
add esp, 4
push 0x100c07f0
call fcn.100b735f
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100f579c]
call eax
mov esi, eax
mov dword [ebp - 0x198], esi
test edi, edi
je 0x1009b78c
test esi, esi
je 0x1009b78c
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x16c], ecx
test ecx, ecx
je 0x1009b78c
nop dword [eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1009b769
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x1009b740
xor edx, edx
test ecx, ecx
je 0x1009b769
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1009b750
cmp edi, 0xfd0c5087
je 0x1009b784
mov ecx, dword [ebp - 0x16c]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x16c], ecx
test ecx, ecx
je 0x1009b78c
mov esi, dword [ebp - 0x198]
jmp 0x1009b720
mov ecx, dword [ebp - 0x16c]
jmp 0x1009b78e
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1009b798.4
jmp dword [eax*4 + 0x1009cd68]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x16c]
movss xmm0, dword [ebp - 0x16c]
add esp, 4
jmp 0x1009b7fe
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x16c]
movss xmm0, dword [ebp - 0x16c]
add esp, 4
jmp 0x1009b7fe
movss xmm0, dword [ecx + 0xc]
jmp 0x1009b7fe
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x1009b7fe
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100b8250
cvtsd2ss xmm0, xmm0
jmp 0x1009b7fe
xorps xmm0, xmm0
mov eax, dword [ebp - 0x178]
movss dword [ebp - 0x170], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x100f5798]
test al, 1
jne 0x1009b85c
or eax, 1
mov dword [0x100f5798], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x74]
call fcn.10034d20
push 0xda7d68cb
mov edx, eax
mov ecx, 0x100f579c
call fcn.10035210
add esp, 4
push 0x100c07f0
call fcn.100b735f
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100f579c]
call eax
mov esi, eax
mov dword [ebp - 0x198], esi
test edi, edi
je 0x1009b8ec
test esi, esi
je 0x1009b8ec
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x16c], ecx
test ecx, ecx
je 0x1009b8ec
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1009b8c9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x1009b8a0
xor edx, edx
test ecx, ecx
je 0x1009b8c9
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1009b8b0
cmp edi, 0xfc0c4ef4
je 0x1009b8e4
mov ecx, dword [ebp - 0x16c]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x16c], ecx
test ecx, ecx
je 0x1009b8ec
mov esi, dword [ebp - 0x198]
jmp 0x1009b880
mov ecx, dword [ebp - 0x16c]
jmp 0x1009b8ee
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1009b8f8.4
jmp dword [eax*4 + 0x1009cd84]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x16c]
movss xmm0, dword [ebp - 0x16c]
add esp, 4
jmp 0x1009b95e
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x16c]
movss xmm0, dword [ebp - 0x16c]
add esp, 4
jmp 0x1009b95e
movss xmm0, dword [ecx + 0xc]
jmp 0x1009b95e
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x1009b95e
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100b8250
cvtsd2ss xmm0, xmm0
jmp 0x1009b95e
xorps xmm0, xmm0
mov eax, dword [ebp - 0x178]
movss dword [ebp - 0x16c], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x100f5798]
test al, 1
jne 0x1009b9bc
or eax, 1
mov dword [0x100f5798], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x74]
call fcn.10034d20
push 0xda7d68cb
mov edx, eax
mov ecx, 0x100f579c
call fcn.10035210
add esp, 4
push 0x100c07f0
call fcn.100b735f
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100f579c]
call eax
mov esi, eax
mov dword [ebp - 0x184], esi
test edi, edi
je 0x1009ba4c
test esi, esi
je 0x1009ba4c
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x198], ecx
test ecx, ecx
je 0x1009ba4c
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1009ba29
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x1009ba00
xor edx, edx
test ecx, ecx
je 0x1009ba29
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1009ba10
cmp edi, 0xff0c53ad
je 0x1009ba44
mov ecx, dword [ebp - 0x198]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x198], ecx
test ecx, ecx
je 0x1009ba4c
mov esi, dword [ebp - 0x184]
jmp 0x1009b9e0
mov ecx, dword [ebp - 0x198]
jmp 0x1009ba4e
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1009ba58.4
jmp dword [eax*4 + 0x1009cda0]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x198]
movss xmm0, dword [ebp - 0x198]
add esp, 4
jmp 0x1009babe
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x198]
movss xmm0, dword [ebp - 0x198]
add esp, 4
jmp 0x1009babe
movss xmm0, dword [ecx + 0xc]
jmp 0x1009babe
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x1009babe
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100b8250
cvtsd2ss xmm0, xmm0
jmp 0x1009babe
xorps xmm0, xmm0
mov ecx, dword [0x100f0858]
lea edx, [ebp - 0x74]
movss xmm1, dword [ebp - 0x170]
push ecx
mov dword [esp], 0x40800000
push 0x7f
push 0xff
push 0
push 0
push edx
movss dword [ebp - 0x20], xmm1
lea edx, [ebp - 0x18c]
movss xmm1, dword [ebp - 0x16c]
push edx
movss dword [ebp - 0x1c], xmm1
lea edx, [ebp - 0x1a0]
movss dword [ebp - 0x18], xmm0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x18c], 0x3f800000
mov dword [ebp - 0x188], 0x3f800000
mov dword [ebp - 0x184], 0x3f800000
mov dword [ebp - 0x1a0], 0xbf800000
mov dword [ebp - 0x19c], 0xbf800000
mov dword [ebp - 0x198], 0xbf800000
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [eax + 4]
call eax
mov eax, dword [ebp - 0x178]
mov edi, dword [eax + 8]
mov eax, dword [0x100f5798]
test al, 1
jne 0x1009bbba
or eax, 1
mov dword [0x100f5798], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x74]
call fcn.10034d20
push 0xda7d68cb
mov edx, eax
mov ecx, 0x100f579c
call fcn.10035210
add esp, 4
push 0x100c07f0
call fcn.100b735f
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100f579c]
call eax
mov esi, eax
mov dword [ebp - 0x184], esi
test edi, edi
je 0x1009bc4c
test esi, esi
je 0x1009bc4c
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x178], ecx
test ecx, ecx
je 0x1009bc4c
nop
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1009bc29
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x1009bc00
xor edx, edx
test ecx, ecx
je 0x1009bc29
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1009bc10
cmp edi, 0x11ab48ff
je 0x1009bc44
mov ecx, dword [ebp - 0x178]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x178], ecx
test ecx, ecx
je 0x1009bc4c
mov esi, dword [ebp - 0x184]
jmp 0x1009bbe0
mov ecx, dword [ebp - 0x178]
jmp 0x1009bc4e
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1009bc5c.2
jmp dword [eax*4 + 0x1009cdbc]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x1009bcdf
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x1009bcdf
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100c3694]
movaps xmm0, xmm4
movss xmm2, dword [0x100c3688]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm1, xmm4
cmpltss xmm0, xmm2
andps xmm2, xmm0
orps xmm2, xmm3
addss xmm1, xmm2
subss xmm1, xmm2
movss xmm2, dword [0x100c3524]
movaps xmm0, xmm1
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm2
subss xmm1, xmm0
cvttss2si edx, xmm1
jmp 0x1009bcdf
xor edx, edx
jmp 0x1009bcdf
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x100f081c]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [0x100f081c]
mov esi, eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x30]
call edx
cmp esi, eax
je 0x1009c0a3
mov ecx, dword [0x100f0820]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov esi, eax
test esi, esi
je 0x1009cd47
mov edx, dword [esi + 8]
lea ecx, [esi + 8]
mov edx, dword [edx + 0x24]
call edx
test al, al
jne 0x1009cd47
mov edx, dword [0x100f09ec]
mov eax, dword [0x100df5d0]
add edx, 0xffffffd6
xor edx, 0xc99123f3
mov ecx, dword [edx + esi]
cmp ecx, dword [edx + eax]
je 0x1009cd47
mov dword [ebp - 0x1a0], 0
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0
mov eax, dword [esi]
push ecx
mov ecx, esi
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov eax, dword [eax + 0x28c]
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xdc], 0xffffffff
call eax
cmp dword [esi + 0x39e1], 0
je 0x1009bf19
mov eax, dword [0x100f09b0]
mov edi, dword [eax + esi]
test edi, edi
je 0x1009bf19
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x1009bf19
cmp byte [edi + 0x109], 0
xorps xmm3, xmm3
jne 0x1009be38
mov eax, dword [0x100f0a44]
add eax, 0xffffffc0
xor eax, 0xc9912409
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x1009be38
mov eax, dword [0x100f0ab8]
add eax, 0xffffffa3
xor eax, 0xc9912426
mov eax, dword [eax + ecx]
mov ecx, dword [0x100f0820]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x1009bf19
xorps xmm3, xmm3
mov ecx, dword [0x100f0aac]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa6
xor ecx, 0xc9912423
mov eax, dword [ecx + eax]
test eax, eax
je 0x1009bf19
movss xmm4, dword [eax + 0x1ac]
movss xmm1, dword [ebp - 0x198]
cvtps2pd xmm4, xmm4
cvtps2pd xmm0, xmm1
addsd xmm4, qword [str.333333]
comisd xmm0, xmm4
movsd qword [ebp - 0x180], xmm4
jbe 0x1009bf21
cvtps2pd xmm0, xmm1
subsd xmm0, xmm4
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100c3584]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100c3548]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm3
jb 0x1009bee3
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm1, dword [ebp - 0x198]
add esp, 8
movsd xmm4, qword [ebp - 0x180]
fstp dword [ebp - 0x184]
movss xmm3, dword [ebp - 0x184]
movaps xmm2, xmm3
mulss xmm2, xmm3
cvtps2pd xmm1, xmm1
movaps xmm0, xmm2
addss xmm2, xmm2
mulss xmm0, dword [0x100c3570]
subsd xmm4, xmm1
mulss xmm2, xmm3
subss xmm0, xmm2
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm4
addsd xmm0, xmm1
cvtpd2ps xmm1, xmm0
jmp 0x1009bf21
movss xmm1, dword [ebp - 0x198]
movss xmm0, dword [ebp - 0x1a0]
mov eax, 0x10
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [ebp - 0x19c]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [ebp - 0x1c]
movss dword [ebp - 0xec], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0xe8], xmm0
movaps xmm0, xmmword [0x100c42b0]
pxor xmm0, xmmword [0x100c3780]
movss dword [ebp - 0xf4], xmm1
mov dword [ebp - 0x70], 0x9d849fc7
mov byte [ebp - 0x6c], 0xe9
movups xmmword [ebp - 0x80], xmm0
xor byte [ebp + eax - 0x80], 0xe9
inc eax
cmp eax, 0x15
jb 0x1009bf93
mov ecx, dword [0x100f0854]
lea edx, [ebp - 0x80]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movaps xmm0, xmmword [0x100c42b0]
pxor xmm0, xmmword [0x100c3780]
mov dword [ebp - 0xe4], eax
mov eax, 0x10
mov dword [ebp - 0x70], 0x9d849fc7
mov byte [ebp - 0x6c], 0xe9
movups xmmword [ebp - 0x80], xmm0
nop dword [eax + eax]
xor byte [ebp + eax - 0x80], 0xe9
inc eax
cmp eax, 0x15
jb 0x1009bfe0
movss xmm0, dword [0x100e6b54]
lea eax, [ebp - 0x80]
movss dword [ebp - 0xd0], xmm0
lea ecx, [ebp - 0x110]
movaps xmm0, xmmword [0x100c36f0]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xd4], 0
movups xmmword [ebp - 0xcc], xmm0
mov dword [ebp - 0xbc], 0x437f0000
mov dword [ebp - 0xb8], 0x3f000000
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x9c], 2
mov byte [ebp - 0xa0], 1
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xac], 0x437f0000
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
call fcn.1008c310
mov edx, eax
test edx, edx
je 0x1009cd47
mov ecx, dword [0x100f08a8]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
jmp 0x1009cd45
mov eax, dword [0x100f0a3c]
mov esi, dword [0x100df5d0]
add eax, 0xffffffc2
xor eax, 0xc9912407
cmp byte [0x100e69a8], 0
movd xmm0, dword [eax + esi]
mov eax, dword [0x100f0878]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
movss dword [ebp - 0x178], xmm0
je 0x1009c2f6
mov dword [ebp - 0x74], 0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax + 0x28c]
call eax
cmp dword [esi + 0x39e1], 0
je 0x1009c25f
mov eax, dword [0x100f09b0]
mov edi, dword [esi + eax]
test edi, edi
je 0x1009c25f
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x1009c25f
cmp byte [edi + 0x109], 0
xorps xmm1, xmm1
jne 0x1009c17e
mov eax, dword [0x100f0a44]
add eax, 0xffffffc0
xor eax, 0xc9912409
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1009c17e
mov eax, dword [0x100f0ab8]
add eax, 0xffffffa3
xor eax, 0xc9912426
mov eax, dword [eax + ecx]
mov ecx, dword [0x100f0820]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x1009c25f
xorps xmm1, xmm1
mov ecx, dword [0x100f0aac]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa6
xor ecx, 0xc9912423
mov eax, dword [ecx + eax]
test eax, eax
je 0x1009c25f
movss xmm3, dword [eax + 0x1ac]
movss xmm4, dword [ebp - 0x6c]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm4
addsd xmm3, qword [str.333333]
comisd xmm0, xmm3
movsd qword [ebp - 0x1a0], xmm3
jbe 0x1009c25f
cvtps2pd xmm0, xmm4
xorps xmm5, xmm5
subsd xmm0, xmm3
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100c3584]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100c3548]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x1009c226
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm4, dword [ebp - 0x6c]
add esp, 8
movsd xmm3, qword [ebp - 0x1a0]
fstp dword [ebp - 0x184]
movss xmm5, dword [ebp - 0x184]
movaps xmm2, xmm5
mulss xmm2, xmm5
cvtps2pd xmm1, xmm4
movaps xmm0, xmm2
addss xmm2, xmm2
mulss xmm0, dword [0x100c3570]
subsd xmm3, xmm1
mulss xmm2, xmm5
subss xmm0, xmm2
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm1
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x6c], xmm0
mov ecx, dword [0x100f0a3c]
mov eax, dword [0x100df5d0]
add ecx, 0xffffffc2
movq xmm0, qword [ebp - 0x20]
xor ecx, 0xc9912407
movq qword [ebp - 0x1c0], xmm0
movq xmm0, qword [ebp - 0x74]
movq qword [ebp - 0x1b4], xmm0
mov ecx, dword [ecx + eax]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1ac], eax
mov eax, dword [0x100f12f8]
mov dword [ebp - 0x1a8], ecx
mov word [ebp - 0x1a4], 0
cmp eax, dword [0x100f12fc]
je 0x1009c2dc
movups xmm0, xmmword [ebp - 0x1c0]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x1b0]
movups xmmword [eax + 0x10], xmm0
add dword [0x100f12f8], 0x20
jmp 0x1009c2ee
lea ecx, [ebp - 0x1c0]
push ecx
push eax
mov ecx, 0x100f12f4
call fcn.1009e420
movss xmm0, dword [ebp - 0x178]
mov eax, dword [0x100f12f0]
test eax, eax
je 0x1009cd47
mov ecx, dword [0x100f12ec]
xor edi, edi
movss xmm2, dword [0x100c3690]
mov dword [ebp - 0x16c], edi
lea edx, [ecx + eax]
cmp ecx, edx
je 0x1009cd47
mov esi, dword [0x100f12e8]
dec esi
nop dword [eax + eax]
mov edi, dword [0x100f12e4]
mov eax, ecx
and eax, esi
mov eax, dword [edi + eax*4]
mov edi, dword [ebp - 0x16c]
cmp byte [eax + 0x20], 0
jne 0x1009c375
movss xmm1, dword [eax + 0xc]
addss xmm1, dword [eax + 8]
subss xmm0, xmm1
call fcn.10022030
comiss xmm0, dword [0x100c3524]
ja 0x1009c375
comiss xmm2, xmm0
jbe 0x1009c375
mov edi, eax
movaps xmm2, xmm0
mov dword [ebp - 0x16c], edi
movss xmm0, dword [ebp - 0x178]
inc ecx
cmp ecx, edx
jne 0x1009c330
test edi, edi
je 0x1009cd47
mov byte [edi + 0x20], 1
mov ecx, dword [0x100f0a3c]
mov eax, dword [0x100df5d0]
add ecx, 0xffffffc2
movss xmm0, dword [ebp - 0x20]
xor ecx, 0xc9912407
mov esi, dword [0x100f1308]
movss dword [ebp - 0x74], xmm0
movss xmm0, dword [ebp - 0x1c]
mov eax, dword [ecx + eax]
mov dword [ebp - 0x78], eax
mov eax, dword [0x100f1310]
movss dword [ebp - 0x70], xmm0
inc eax
movss xmm0, dword [ebp - 0x18]
mov dword [ebp - 0x7c], edi
movss dword [ebp - 0x6c], xmm0
cmp esi, eax
ja 0x1009c3ea
push ecx
mov ecx, 0x100f1300
call fcn.1009e0c0
mov esi, dword [0x100f1308]
lea ecx, [esi - 1]
mov eax, ecx
and eax, dword [0x100f130c]
mov dword [0x100f130c], eax
cmovne esi, eax
mov eax, dword [0x100f1304]
dec esi
and ecx, esi
mov dword [ebp - 0x178], ecx
cmp dword [eax + ecx*4], 0
jne 0x1009c431
push 0x14
call fcn.100b6f15
mov ecx, dword [0x100f1304]
add esp, 4
mov edx, dword [ebp - 0x178]
mov dword [ecx + edx*4], eax
mov ecx, edx
mov eax, dword [0x100f1304]
mov ecx, dword [eax + ecx*4]
movups xmm0, xmmword [ebp - 0x7c]
mov eax, dword [ebp - 0x6c]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
mov eax, dword [0x100f1310]
inc eax
mov dword [0x100f130c], esi
mov dword [0x100f1310], eax
cmp eax, 0x80
jbe 0x1009c47d
nop dword [eax]
add eax, 0xffffffff
mov dword [0x100f1310], eax
je 0x1009c473
cmp eax, 0x80
ja 0x1009c460
jmp 0x1009c47d
mov dword [0x100f130c], 0
cmp dword [0x100eec94], 1
je 0x1009cd47
mov esi, dword [edi]
mov dword [ebp - 0x184], esi
test esi, esi
je 0x1009cd47
mov eax, dword [0x100f0a14]
add eax, 0xffffffcc
xor eax, 0xc99123fd
cmp dword [eax + esi], 0
jne 0x1009cd47
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0x44c
lea eax, [eax + 0x100ccc88]
mov dword [ebp - 0x170], eax
test eax, eax
je 0x1009cd47
mov eax, dword [edi + 4]
cmp dword [eax + 0x3c4], 0
je 0x1009cd47
push 0x44
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x68]
call fcn.100181d0
mov ecx, dword [0x100f0aac]
add ecx, 0xffffffa6
xor ecx, 0xc9912423
mov eax, dword [ecx + esi]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + esi + 0xc]
mov ecx, esi
mov dword [ebp - 0x64], eax
mov eax, dword [0x100f09d8]
add eax, 0xffffffdb
xor eax, 0xc99123ee
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x60], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x100f09e4]
add eax, 0xffffffd8
movss dword [ebp - 0x58], xmm0
xor eax, 0xc99123f1
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x100f09e8]
add eax, 0xffffffd7
movss dword [ebp - 0x40], xmm0
xor eax, 0xc99123f2
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [eax + esi + 8]
movss dword [ebp - 0x34], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
call eax
mov ecx, esi
movss xmm0, dword [eax]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x50], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x4c], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x2c]
call eax
mov ecx, dword [0x100f0aac]
add ecx, 0xffffffa6
xor ecx, 0xc9912423
movss xmm0, dword [eax]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x28], xmm0
mov edx, dword [edi + 4]
lea edi, [edx + 0x3cc]
mov dword [ebp - 0x178], edx
add ecx, dword [edx]
mov eax, dword [edx + 0x3c4]
mov dword [ecx], eax
mov dword [ecx + 0xc], 0x80
mov ecx, dword [0x100f09d8]
mov esi, dword [edx]
add ecx, 0xffffffdb
mov eax, dword [edi]
xor ecx, 0xc99123ee
mov dword [ecx + esi], eax
mov eax, dword [edi + 4]
mov dword [ecx + esi + 4], eax
mov eax, dword [edi + 8]
mov dword [ecx + esi + 8], eax
mov ecx, dword [0x100f09e4]
mov eax, dword [edx + 0x44]
add ecx, 0xffffffd8
xor ecx, 0xc99123f1
mov dword [ecx + esi], eax
mov eax, dword [edx + 0x48]
mov dword [ecx + esi + 4], eax
mov eax, dword [edx + 0x4c]
mov dword [ecx + esi + 8], eax
mov edx, dword [0x100f09e8]
mov ecx, dword [ebp - 0x178]
add edx, 0xffffffd7
xor edx, 0xc99123f2
mov eax, dword [ecx + 0x50]
mov dword [edx + esi], eax
mov eax, dword [ecx + 0x54]
mov dword [edx + esi + 4], eax
mov eax, dword [ecx + 0x58]
mov dword [edx + esi + 8], eax
lea eax, [ecx + 0x68]
mov edx, dword [0x100f092c]
mov ecx, esi
push eax
call edx
mov ecx, dword [ebp - 0x178]
mov eax, dword [0x100f0930]
push edi
mov ecx, dword [ecx]
call eax
mov ecx, dword [ebp - 0x16c]
movss xmm6, dword [ebp - 0x20]
movss xmm2, dword [ebp - 0x1c]
movss xmm1, dword [ebp - 0x18]
movss xmm7, dword [ecx + 0x14]
subss xmm2, dword [ecx + 0x18]
subss xmm1, dword [ecx + 0x1c]
subss xmm6, xmm7
movss dword [ebp - 0x178], xmm1
mov eax, dword [ebp - 0x178]
movaps xmm0, xmm6
unpcklps xmm0, xmm2
movq qword [ebp - 0x74], xmm0
movaps xmm0, xmm6
mulss xmm0, xmm6
mov dword [ebp - 0x6c], eax
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.100174a0
addss xmm0, dword [0x100c3460]
movss xmm1, dword [0x100c3524]
movss xmm4, dword [ebp - 0x70]
movss xmm5, dword [ebp - 0x6c]
mov dword [ebp - 0xb4], 0
divss xmm1, xmm0
mov byte [ebp - 0x8b], 1
movss xmm0, dword [0x100c367c]
mulss xmm6, xmm1
mulss xmm4, xmm1
movaps xmm3, xmm6
mulss xmm5, xmm1
movaps xmm2, xmm4
mulss xmm6, xmm6
mulss xmm4, xmm4
movaps xmm1, xmm5
mulss xmm5, xmm5
addss xmm6, xmm4
mulss xmm3, xmm0
mulss xmm2, xmm0
mulss xmm1, xmm0
addss xmm6, xmm5
movss dword [ebp - 0xc0], xmm3
movss dword [ebp - 0xbc], xmm2
movss dword [ebp - 0xb8], xmm1
mulss xmm6, dword [0x100c368c]
ucomiss xmm6, dword [0x100c3454]
lahf
test ah, 0x44
jp 0x1009c7aa
mov byte [ebp - 0x8b], 0
movss xmm0, dword [ecx + 0x18]
lea edx, [ebp - 0x168]
mov edi, dword [ebp - 0x184]
movss dword [ebp - 0xcc], xmm0
movss xmm0, dword [ecx + 0x1c]
mov ecx, dword [0x100f0838]
push edx
mov dword [ebp - 0x90], 0
lea edx, [ebp - 0xd0]
mov byte [ebp - 0x8c], 1
movss dword [ebp - 0xd0], xmm7
movss dword [ebp - 0xc8], xmm0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa0], 0
mov eax, dword [ecx]
push edi
push 0x4600400b
push edx
mov eax, dword [eax + 0xc]
call eax
mov ecx, dword [ebp - 0x11c]
test ecx, ecx
je 0x1009cab2
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1009cab2
cmp dword [ebp - 0x11c], edi
jne 0x1009cab2
mov ecx, dword [0x100f0878]
mov eax, dword [0x100f57b8]
cmp eax, dword [ecx + 0x1c]
je 0x1009ca58
movaps xmm0, xmmword [0x100c42b0]
mov eax, 0x10
pxor xmm0, xmmword [0x100c3d80]
mov esi, dword [0x100c2ab0]
mov dword [ebp - 0x1b0], 0x9bc9869d
mov dword [ebp - 0x1ac], 0x85869a8c
mov dword [ebp - 0x1a8], 0xe39b8c9f
mov byte [ebp - 0x1a4], 0xe9
movups xmmword [ebp - 0x1c0], xmm0
xor byte [ebp + eax - 0x1c0], 0xe9
inc eax
cmp eax, 0x1d
jb 0x1009c8d0
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x70], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009c900
sub ecx, edx
lea eax, [ebp - 0x1c0]
push ecx
push eax
lea ecx, [ebp - 0x80]
call fcn.1001d170
push 0x2c
mov dword [ebp - 4], 7
call fcn.100b6f15
add esp, 4
mov dword [ebp - 0x178], eax
mov byte [ebp - 4], 8
lea ecx, [eax + 0xc]
xorps xmm0, xmm0
mov dword [ebp - 0x184], ecx
movq qword [eax], xmm0
mov dword [eax + 8], 0
mov dword [eax + 4], 1
mov dword [eax + 8], 1
mov dword [eax], 0x100c25d4
lea eax, [ebp - 0x80]
push eax
call fcn.10021410
mov edx, dword [ebp - 0x184]
xorps xmm0, xmm0
mov eax, dword [ebp - 0x178]
movlpd qword [ebp - 0x188], xmm0
mov dword [ebp - 0x188], edx
mov dword [edx + 0x18], esi
mov dword [edx + 0x1c], 0x41000000
mov dword [ebp - 0x184], eax
mov byte [ebp - 4], 9
mov ecx, dword [0x100f09d0]
cmp ecx, dword [0x100f09d4]
je 0x1009c9be
mov dword [ecx + 4], 0
mov dword [ecx], edx
mov dword [ecx + 4], eax
xor ecx, ecx
add dword [0x100f09d0], 8
jmp 0x1009c9d1
lea eax, [ebp - 0x188]
push eax
push ecx
call fcn.10021860
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x178], ecx
mov byte [ebp - 4], 7
test ecx, ecx
je 0x1009ca02
or esi, 0xffffffff
mov eax, esi
lock xadd dword [ecx + 4], eax
jne 0x1009ca02
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x178]
lock xadd dword [ecx + 8], esi
dec esi
jne 0x1009ca02
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.10021410
push 0x100df5d0
call fcn.10027140
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1009ca58
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1009ca4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1009cc7a
push edx
push ecx
call fcn.100b7374
add esp, 8
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x3ec]
cmp eax, 6
jne 0x1009ca80
mov eax, dword [ebp - 0x170]
inc dword [eax + 0x440]
inc dword [eax + 0x2c]
jmp 0x1009cc8a
cmp eax, 2
jne 0x1009ca99
mov eax, dword [ebp - 0x170]
inc dword [eax + 0x438]
inc dword [eax + 0x2c]
jmp 0x1009cc8a
cmp eax, 4
mov eax, dword [ebp - 0x170]
jne 0x1009caaa
inc dword [eax + 0x43c]
inc dword [eax + 0x2c]
jmp 0x1009cc8a
movaps xmm0, xmmword [0x100c42b0]
mov eax, 0x10
pxor xmm0, xmmword [0x100c3d80]
mov esi, dword [0x100c2ab0]
mov dword [ebp - 0x1ac], 0x9ac9869d
mov dword [ebp - 0x1a8], 0x888c9b99
mov word [ebp - 0x1a4], 0xe38d
mov byte [ebp - 0x1a2], 0xe9
movups xmmword [ebp - 0x1bc], xmm0
nop word [eax + eax]
xor byte [ebp + eax - 0x1bc], 0xe9
inc eax
cmp eax, 0x1b
jb 0x1009cb00
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x70], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009cb30
sub ecx, edx
lea eax, [ebp - 0x1bc]
push ecx
push eax
lea ecx, [ebp - 0x80]
call fcn.1001d170
push 0x2c
mov dword [ebp - 4], 4
call fcn.100b6f15
add esp, 4
mov dword [ebp - 0x178], eax
mov byte [ebp - 4], 5
lea ecx, [eax + 0xc]
xorps xmm0, xmm0
mov dword [ebp - 0x184], ecx
movq qword [eax], xmm0
mov dword [eax + 8], 0
mov dword [eax + 4], 1
mov dword [eax + 8], 1
mov dword [eax], 0x100c25d4
lea eax, [ebp - 0x80]
push eax
call fcn.10021410
mov edx, dword [ebp - 0x184]
xorps xmm0, xmm0
mov eax, dword [ebp - 0x178]
movlpd qword [ebp - 0x188], xmm0
mov dword [ebp - 0x188], edx
mov dword [edx + 0x18], esi
mov dword [edx + 0x1c], 0x41000000
mov dword [ebp - 0x184], eax
mov byte [ebp - 4], 6
mov ecx, dword [0x100f09d0]
cmp ecx, dword [0x100f09d4]
je 0x1009cbee
mov dword [ecx + 4], 0
mov dword [ecx], edx
mov dword [ecx + 4], eax
xor ecx, ecx
add dword [0x100f09d0], 8
jmp 0x1009cc01
lea eax, [ebp - 0x188]
push eax
push ecx
call fcn.10021860
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x178], ecx
mov byte [ebp - 4], 4
test ecx, ecx
je 0x1009cc32
or esi, 0xffffffff
mov eax, esi
lock xadd dword [ecx + 4], eax
jne 0x1009cc32
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x178]
lock xadd dword [ecx + 8], esi
dec esi
jne 0x1009cc32
mov eax, dword [ecx]
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.10021410
push 0x100df5d0
call fcn.10027140
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1009cc8a
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1009cc80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1009cc80
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100b7374
add esp, 8
mov ecx, dword [0x100f0aac]
mov eax, dword [ebp - 0x68]
add ecx, 0xffffffa6
xor ecx, 0xc9912423
mov dword [ecx + edi], eax
mov eax, dword [ebp - 0x64]
mov dword [ecx + edi + 0xc], eax
lea ecx, [ebp - 0x30]
mov eax, dword [0x100f09d8]
movss xmm0, dword [ebp - 0x60]
add eax, 0xffffffdb
xor eax, 0xc99123ee
push ecx
mov ecx, edi
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x100f09e4]
movss xmm0, dword [ebp - 0x48]
add eax, 0xffffffd8
xor eax, 0xc99123f1
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x44]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x100f09e8]
movss xmm0, dword [ebp - 0x3c]
add eax, 0xffffffd7
xor eax, 0xc99123f2
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x38]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x100f092c]
call eax
mov eax, dword [0x100f0930]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, edi
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100b6ef9
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4