Function at 0x100496b0
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ef561
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x200
mov eax, dword [0x101090b8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebx + 8]
mov esi, dword [ebx + 0xc]
mov dword [ebp - 0x1cc], esi
mov dword [ebp - 0x1b4], 0
test edi, edi
je 0x1004a581
cmp dword [ebx + 0x14], 0
je 0x1004a581
mov eax, dword [0x101a6c50]
add eax, 0xffffffcb
xor eax, 0x2a974bce
cmp dword [eax + edi], 0
jne 0x1004a581
mov eax, dword [0x101a6bb4]
cmp dword [edi + eax], 0
je 0x1004a581
mov ecx, dword [0x101a6a14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x1004a581
mov ecx, dword [0x101a6a14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
call eax
test al, al
je 0x1004a581
mov ecx, dword [0x101a6a18]
mov eax, dword [0x101a6cf0]
add eax, 0xffffffa3
push ecx
mov edx, dword [ecx]
xor eax, 0x2a974bf6
mov esi, dword [edx + 0x10]
mov edx, esp
mov eax, dword [eax + edi]
mov dword [edx], eax
call esi
test eax, eax
je 0x1004a581
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x44], xmm0
push 0x15c
lea eax, [ebp - 0x1a8]
mov dword [ebp - 4], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov byte [ebp - 4], 1
mov eax, dword [0x101a6bb4]
mov esi, dword [edi + eax]
mov ecx, esi
call fcn.10048e20
push eax
lea ecx, [ebp - 0x1a8]
call fcn.10048fa0
movss xmm0, dword [esi + 0xf4]
comiss xmm0, dword [0x100fd6f0]
jbe 0x10049813
push str.moving
lea ecx, [ebp - 0x1a8]
call fcn.10048fa0
movss xmm0, dword [esi + 0xa4]
comiss xmm0, dword [0x100fd72c]
jbe 0x10049834
push str.crouch
lea ecx, [ebp - 0x1a8]
call fcn.10048fa0
mov eax, dword [ebp - 0x50]
movups xmm0, xmmword [ebp - 0x60]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x34], eax
mov eax, 1
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x1b4], eax
movups xmmword [ebp - 0x44], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov byte [ebp - 4], 2
test eax, eax
js 0x1004988b
mov edx, dword [ebp - 0x60]
test edx, edx
je 0x10049884
mov ecx, dword [0x101a6a94]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 0
mov ecx, dword [0x101a6a18]
mov eax, dword [0x101a6cf0]
add eax, 0xffffffa3
push ecx
mov edx, dword [ecx]
xor eax, 0x2a974bf6
mov esi, dword [edx + 0x10]
mov edx, esp
mov eax, dword [eax + edi]
mov dword [edx], eax
call esi
mov ecx, dword [0x101a6bb4]
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 0x1bc], 0
mov eax, dword [edi + ecx]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebx + 0x14]
test byte [eax + 0x30], 2
je 0x1004993a
mov ecx, dword [0x101a6c54]
add ecx, 0xffffffca
xor ecx, 0x2a974bcf
test byte [ecx + edi], 1
jne 0x1004993a
mov ecx, dword [0x101a6a18]
mov eax, dword [0x101a6cf4]
add eax, 0xffffffa2
push ecx
mov edx, dword [ecx]
xor eax, 0x2a974bf7
mov esi, dword [edx + 0x10]
mov edx, esp
mov eax, dword [eax + edi]
mov dword [edx], eax
call esi
test eax, eax
jne 0x1004993a
movups xmm0, xmmword [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
sub esp, 0x14
mov eax, esp
mov byte [ebp - 0x1bc], 1
push 0x3d9
push 4
movups xmmword [eax], xmm0
push edi
mov dword [eax + 0x10], ecx
call fcn.1004a8e0
mov esi, dword [ebp - 0x1cc]
sub esp, 8
mov ecx, dword [ebp - 0x1b8]
mov eax, dword [0x101a6ba0]
movss xmm0, dword [esi + 0x6c]
subss xmm0, dword [ecx + 0x6c]
mov eax, dword [edi + eax]
mov dword [ebp - 0x18], eax
movss dword [esp + 4], xmm0
mov dword [esp], 0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
mov ecx, dword [0x101a6b5c]
add esp, 8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c0], ecx
mov ecx, dword [0x101a6bb8]
fstp dword [ebp - 0x1c8]
mov eax, dword [eax + 0xc0]
mov dword [ebp - 0x1c4], eax
cmp dword [edi + ecx], 0
jne 0x100499b6
mov eax, dword [0x101a6b38]
mov ecx, edi
call eax
mov ecx, dword [0x101a6bb8]
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [edi + ecx]
mov edx, eax
call dword [ebp - 0x1c0]
movss xmm4, dword [0x100feb10]
cmp eax, 0x3d4
je 0x100499d7
cmp eax, 0x3d3
jne 0x10049a22
mov eax, dword [ebp - 0x18]
movss xmm1, dword [ebp - 0x1c8]
mulss xmm1, dword [0x100fd868]
movss xmm2, dword [eax + 0xc8]
movaps xmm3, xmm2
xorps xmm3, xmm4
comiss xmm3, xmm1
jbe 0x10049a03
addss xmm1, xmm2
jmp 0x10049a1a
movaps xmm0, xmm1
xorps xmm0, xmm4
comiss xmm0, xmm3
jbe 0x10049a17
subss xmm2, xmm1
movaps xmm1, xmm2
jmp 0x10049a1a
xorps xmm1, xmm1
movss dword [eax + 0xc8], xmm1
movss xmm0, dword [0x100fd778]
comiss xmm0, dword [esi + 0xec]
mov eax, dword [ebp - 0x1b8]
jb 0x10049ac1
cmp byte [eax + 0x108], 0
je 0x10049ac1
cmp byte [eax + 0x128], 0
jne 0x10049ac1
cmp byte [eax + 0x109], 0
jne 0x10049ac1
movss xmm0, dword [eax + 0x74]
comiss xmm0, dword [0x100fd664]
jbe 0x10049ac1
movss xmm0, dword [eax + 0x80]
lea ecx, [ebp - 0x18]
subss xmm0, dword [esi + 0x80]
movss dword [ebp - 0x18], xmm0
call fcn.100cfc20
movss xmm0, dword [ebp - 0x18]
divss xmm0, dword [ebp - 0x1c8]
comiss xmm0, dword [0x100fd90c]
jbe 0x10049abb
movups xmm0, xmmword [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
sub esp, 0x14
mov eax, esp
push 0x3d3
push 3
movups xmmword [eax], xmm0
push edi
mov dword [eax + 0x10], ecx
call fcn.1004a8e0
mov eax, dword [ebp - 0x1b8]
movss xmm1, dword [eax + 0x80]
mulss xmm1, dword [0x100fd6a8]
movaps xmm0, xmm1
call fcn.100eb1b0
mov eax, dword [ebp - 0x1b8]
movaps xmm5, xmm0
movaps xmm3, xmm5
movaps xmm0, xmm5
shufps xmm3, xmm5, 1
movaps xmm4, xmm3
movss xmm2, dword [eax + 0xe4]
movss xmm1, dword [eax + 0xe0]
mov eax, dword [ebx + 0x14]
mulss xmm4, xmm1
mulss xmm0, xmm2
mov eax, dword [eax + 0x30]
mov ecx, eax
shr ecx, 0xa
mov edx, eax
and ecx, 0xffffff01
mulss xmm5, xmm1
mov dword [ebp - 0x1c4], ecx
mov ecx, eax
movss xmm1, dword [0x100fd738]
addss xmm4, xmm0
shr ecx, 9
and ecx, 0xffffff01
mulss xmm3, xmm2
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x1b8]
shr edx, 3
shr eax, 4
subss xmm5, xmm3
and dl, 1
and al, 1
movss xmm2, dword [ecx + 0xf4]
comiss xmm2, xmm1
jb 0x10049bbd
test dl, dl
je 0x10049bbd
test al, al
jne 0x10049bbd
movss xmm0, dword [0x100fd994]
comiss xmm0, xmm4
jbe 0x10049bbd
mov cl, 1
xor ah, ah
movss xmm1, dword [0x100fd748]
comiss xmm2, xmm1
mov edx, dword [ebp - 0x18]
jb 0x10049bd9
cmp byte [ebp - 0x1c4], 0
je 0x10049bd9
test dl, dl
jne 0x10049bd9
movss xmm0, dword [0x100fd998]
comiss xmm0, xmm5
jbe 0x10049bd9
mov al, 1
xor dl, dl
test cl, cl
jne 0x10049bf9
test ah, ah
jne 0x10049bf9
test al, al
jne 0x10049bf9
test dl, dl
jne 0x10049bf9
jmp 0x10049bfb
xor cl, cl
comiss xmm2, xmm1
jb 0x10049b7b
test al, al
je 0x10049b7b
test dl, dl
jne 0x10049b7b
comiss xmm4, dword [0x100fd72c]
jbe 0x10049b7b
mov ah, 1
jmp 0x10049b7d
xor al, al
comiss xmm2, xmm1
jb 0x10049ba9
test dl, dl
je 0x10049ba9
cmp byte [ebp - 0x1c4], al
jne 0x10049ba9
comiss xmm5, dword [0x100fd734]
jbe 0x10049ba9
mov dl, 1
jmp 0x10049bab
mov cl, 1
mov eax, dword [0x101a6db8]
add eax, 0xffffff71
xor eax, 0x2a974c28
mov byte [eax + edi], cl
mov eax, dword [ebp - 0x1b8]
mov dl, byte [esi + 0x108]
cmp byte [eax + 0x108], dl
jne 0x10049c33
mov al, byte [eax + 0x128]
cmp al, byte [esi + 0x128]
jne 0x10049c33
xor cl, cl
jmp 0x10049c35
mov cl, 1
test dl, dl
je 0x10049d28
mov eax, dword [0x101a6ba0]
mov edx, dword [ebp - 0x1b8]
mov eax, dword [edi + eax]
cmp byte [edx + 0x109], 0
mov dword [ebp - 0x1c4], eax
jne 0x10049c9b
test cl, cl
je 0x10049c9b
movups xmm0, xmmword [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
sub esp, 0x14
mov eax, esp
movups xmmword [eax], xmm0
mov dword [eax + 0x10], ecx
xor eax, eax
movss xmm0, dword [edx + 0x110]
comiss xmm0, dword [0x100fd778]
seta al
add eax, 0x3dc
push eax
push 5
push edi
call fcn.1004a8e0
mov eax, dword [ebp - 0x1c4]
cmp byte [esi + 0x109], 0
je 0x10049cf7
mov ecx, dword [0x101a6b5c]
mov eax, dword [eax + 0x130]
mov dword [ebp - 0x18], ecx
mov ecx, dword [0x101a6bb8]
mov dword [ebp - 0x1c0], eax
cmp dword [edi + ecx], 0
jne 0x10049cda
mov eax, dword [0x101a6b38]
mov ecx, edi
call eax
mov ecx, dword [0x101a6bb8]
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [edi + ecx]
mov edx, eax
call dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1bc]
xor edx, edx
cmp eax, 0x3db
movzx ecx, cl
cmovne ecx, edx
jmp 0x10049cfd
mov ecx, dword [ebp - 0x1bc]
cmp byte [esi + 0x109], 0
jne 0x10049d57
test cl, cl
jne 0x10049d57
xorps xmm0, xmm0
comiss xmm0, dword [esi + 0x130]
jb 0x10049d57
mov eax, dword [ebp - 0x1c4]
mov dword [eax + 0x138], 0
jmp 0x10049d57
test cl, cl
je 0x10049d57
cmp byte [ebp - 0x1bc], 0
jne 0x10049d57
movups xmm0, xmmword [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
sub esp, 0x14
mov eax, esp
push 0x3da
push 4
movups xmmword [eax], xmm0
push edi
mov dword [eax + 0x10], ecx
call fcn.1004a8e0
mov eax, dword [0x101a6ba0]
mov ecx, dword [0x101a6b5c]
mov dword [ebp - 0x1c4], ecx
mov ecx, dword [0x101a6bb8]
mov esi, dword [edi + eax]
cmp dword [edi + ecx], 0
mov eax, dword [esi + 0x280]
mov dword [ebp - 0x1c0], eax
jne 0x10049d98
mov eax, dword [0x101a6b38]
mov ecx, edi
call eax
mov ecx, dword [0x101a6bb8]
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [edi + ecx]
mov edx, eax
call dword [ebp - 0x1c4]
cmp eax, 0x3d5
jne 0x10049e6f
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax + 0x64]
test ecx, ecx
je 0x10049e04
cmp ecx, dword [eax + 0x68]
je 0x10049e04
movss xmm0, dword [esi + 0x294]
sub esp, 0x14
mov ecx, dword [ebp - 0x1ac]
mov eax, esp
movss dword [ebp - 0x1c0], xmm0
movups xmm0, xmmword [ebp - 0x28]
push 0x3d5
push 0xb
movups xmmword [eax], xmm0
push edi
mov dword [eax + 0x10], ecx
call fcn.1004a8e0
movss xmm0, dword [ebp - 0x1c0]
movss dword [esi + 0x294], xmm0
jmp 0x10049e6f
movss xmm0, dword [ebp - 0x1c8]
mulss xmm0, dword [esi + 0x290]
movss xmm1, dword [0x100fd778]
addss xmm0, dword [esi + 0x294]
comiss xmm1, xmm0
jbe 0x10049e6f
movss xmm2, dword [eax + 0xf8]
subss xmm2, dword [0x100fd72c]
mulss xmm2, dword [0x100fd848]
comiss xmm2, xmm1
seta al
test al, al
je 0x10049e50
movaps xmm2, xmm1
jmp 0x10049e60
xorps xmm0, xmm0
comiss xmm0, xmm2
seta al
test al, al
je 0x10049e60
xorps xmm2, xmm2
movaps xmm0, xmm1
subss xmm0, xmm2
movss dword [esi + 0x288], xmm0
mov ecx, dword [ebp - 0x1b0]
test ecx, ecx
je 0x10049e9b
mov eax, dword [0x101a6d78]
add eax, 0xffffff81
xor eax, 0x2a974c18
mov eax, dword [eax + ecx]
mov ecx, dword [0x101a6a18]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov eax, dword [0x101a6ba0]
xorps xmm3, xmm3
xorps xmm1, xmm1
movss dword [ebp - 0x1bc], xmm1
mov ecx, dword [edi + eax]
mov dword [ebp - 0x1ac], ecx
movss xmm0, dword [ecx + 0x58]
lea edx, [ecx + 0x70]
comiss xmm0, xmm3
mov dword [ebp - 0x18], edx
jbe 0x1004a3f1
cmp dword [edx + 0x18], 0
ja 0x1004a125
push 0x10
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x30]
push str.recrouch_generic
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
call fcn.10025b70
mov byte [ebp - 4], 3
lea esi, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [0x101a94dc]
cmovae esi, dword [ebp - 0x30]
test al, 1
jne 0x1004a0ae
or eax, 1
mov dword [0x101a94dc], eax
mov byte [ebp - 4], 4
xor eax, eax
movaps xmm0, xmmword [0x100fded0]
movaps xmm2, xmmword [0x100fe0d0]
movups xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0x1f0], 0x6d0b6a6d
movaps xmm0, xmmword [0x100fdb00]
movups xmmword [ebp - 0x200], xmm0
mov dword [ebp - 0x1ec], 0x1e1c0b6d
mov dword [ebp - 0x1e8], 0x2b1a1a0b
nop dword [eax + eax]
movups xmm0, xmmword [ebp + eax - 0x210]
movaps xmm1, xmm2
pxor xmm1, xmm0
movups xmmword [ebp + eax - 0x210], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x10049f70
cmp eax, 0x2c
jae 0x10049fa2
xor byte [ebp + eax - 0x210], 0x2b
inc eax
cmp eax, 0x2c
jb 0x10049f94
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1d4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049fd0
sub ecx, edx
lea eax, [ebp - 0x210]
push ecx
push eax
lea ecx, [ebp - 0x1e4]
call fcn.10025b70
mov byte [ebp - 4], 5
mov eax, dword [0x101a69cc]
test eax, eax
je 0x10049ffe
mov edx, dword [eax + 0x50]
jmp 0x1004a000
xor edx, edx
mov ecx, dword [0x101a69c4]
test ecx, ecx
je 0x1004a014
mov ecx, dword [ecx + 0x18]
mov eax, 3
jmp 0x1004a01b
mov eax, 5
xor ecx, ecx
mov dword [ebp - 0x1b4], eax
test al, 4
je 0x1004a02e
and eax, 0xfffffffb
mov dword [ebp - 0x1b4], eax
test al, 2
je 0x1004a03b
and eax, 0xfffffffd
mov dword [ebp - 0x1b4], eax
lea eax, [ebp - 0x1e4]
push eax
push ecx
lea ecx, [ebp - 0x1b0]
call fcn.10030a80
mov eax, dword [ebp - 0x1b0]
add esp, 8
test eax, eax
je 0x1004a069
mov ecx, dword [eax + 1]
test ecx, ecx
je 0x1004a069
add eax, 5
add eax, ecx
jne 0x1004a06b
xor eax, eax
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1d0]
mov dword [0x101a94e0], eax
cmp edx, 0x10
jb 0x1004a0aa
mov ecx, dword [ebp - 0x1e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004a0a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a115
push edx
push ecx
call fcn.100ea570
add esp, 8
mov byte [ebp - 4], 3
mov eax, dword [0x101a94e0]
mov ecx, edi
push esi
call eax
mov ecx, dword [edi]
mov esi, eax
push esi
push dword [ebp - 0x18]
mov ecx, dword [ecx + 0x364]
mov dword [ebp - 0x1b0], ecx
mov ecx, edi
call dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x18], esi
mov dword [eax + 0x20], 0
mov dword [eax + 0x2c], 0
fstp dword [eax + 0x28]
cmp edx, 0x10
jb 0x1004a125
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004a11b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004a11b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100ea570
add esp, 8
push 6
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x30]
push str.crouch
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
call fcn.10025b70
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x1ac]
mov esi, dword [eax + 0x50]
mov eax, dword [0x101a6bb8]
cmp dword [edi + eax], 0
jne 0x1004a173
mov eax, dword [0x101a6b38]
mov ecx, edi
call eax
mov eax, dword [0x101a6bb8]
mov edi, dword [edi + eax]
cmp dword [edi + 4], 0
jne 0x1004a19b
mov ecx, dword [edi]
test esi, esi
js 0x1004a18a
cmp esi, dword [ecx + 0xbc]
jl 0x1004a18c
xor esi, esi
mov eax, dword [ecx + 0xc0]
add eax, ecx
add eax, esi
jmp 0x1004a2a8
mov eax, dword [0x101a9580]
test al, 1
jne 0x1004a29f
or eax, 1
mov dword [0x101a9580], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e4]
push 0x60
mov dword [ebp - 0x1e4], 0
push str.55_8B_EC_83_79_04_00_75_25_8B_45_08_8B_09_85_C0_78_08_3B_81_________7C_02_33_C0_69_C0_________03
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
call fcn.10025b70
mov byte [ebp - 4], 8
mov eax, dword [0x101a69cc]
test eax, eax
je 0x1004a1fd
mov edx, dword [eax + 0x50]
jmp 0x1004a1ff
xor edx, edx
mov ecx, dword [0x101a69c4]
mov eax, dword [ebp - 0x1b4]
test ecx, ecx
je 0x1004a217
mov ecx, dword [ecx + 0x18]
or eax, 8
jmp 0x1004a21c
or eax, 0x10
xor ecx, ecx
mov dword [ebp - 0x1b4], eax
test al, 0x10
je 0x1004a22f
and eax, 0xffffffef
mov dword [ebp - 0x1b4], eax
test al, 8
je 0x1004a23c
and eax, 0xfffffff7
mov dword [ebp - 0x1b4], eax
lea eax, [ebp - 0x1e4]
push eax
push ecx
lea ecx, [ebp - 0x1b0]
call fcn.10030a80
mov eax, dword [ebp - 0x1b0]
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1d0]
mov dword [0x101a957c], eax
cmp ecx, 0x10
jb 0x1004a29b
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a291
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a3cb
push ecx
push edx
call fcn.100ea570
add esp, 8
mov byte [ebp - 4], 6
push esi
mov ecx, edi
call dword [0x101a957c]
mov ecx, dword [eax + 0xbc]
xor esi, esi
mov dword [ebp - 0x1b0], ecx
test ecx, ecx
mov ecx, dword [ebp - 0x30]
jle 0x1004a32e
mov edx, dword [eax + 0xb8]
mov dword [ebp - 0x1c0], edx
lea edi, [edx + eax]
nop dword [eax]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
cmovae eax, ecx
xor ecx, ecx
test edx, edx
cmovne ecx, edi
mov edx, dword [ecx]
test edx, edx
je 0x1004a2eb
add ecx, edx
jmp 0x1004a2f0
xor ecx, ecx
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x1004a310
test dl, dl
je 0x1004a30c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x1004a310
add ecx, 2
add eax, 2
test dl, dl
jne 0x1004a2f0
xor eax, eax
jmp 0x1004a315
sbb eax, eax
or eax, 1
test eax, eax
je 0x1004a359
mov ecx, dword [ebp - 0x30]
inc esi
mov edx, dword [ebp - 0x1c0]
add edi, 4
cmp esi, dword [ebp - 0x1b0]
jl 0x1004a2d0
mov esi, dword [ebp - 0x1cc]
xorps xmm3, xmm3
mov ecx, dword [ebp - 0x1ac]
movss xmm1, dword [esi + 0xa4]
comiss xmm1, xmm3
jbe 0x1004a393
mulss xmm1, dword [ecx + 0x58]
movss dword [ebp - 0x1bc], xmm1
jmp 0x1004a39b
mov esi, dword [ebp - 0x1cc]
xorps xmm3, xmm3
movss xmm0, dword [0x100fd778]
mov ecx, dword [ebp - 0x1ac]
movss xmm2, dword [esi + 0xa4]
comiss xmm0, xmm2
jbe 0x1004a393
movaps xmm1, xmm0
subss xmm1, xmm2
mulss xmm1, dword [ecx + 0x58]
movss dword [ebp - 0x1bc], xmm1
jmp 0x1004a39b
movss xmm1, dword [ebp - 0x1bc]
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1c]
cmp eax, 0x10
jb 0x1004a452
mov edx, dword [ebp - 0x30]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a3d1
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004a3d1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ea570
movss xmm1, dword [ebp - 0x1bc]
add esp, 8
mov ecx, dword [ebp - 0x1ac]
xorps xmm3, xmm3
mov edx, dword [ebp - 0x18]
jmp 0x1004a45d
movss xmm2, dword [edx + 0x20]
comiss xmm2, xmm3
jbe 0x1004a457
movss xmm6, dword [ebp - 0x1c8]
movaps xmm4, xmm2
movss xmm5, dword [0x100feb10]
movaps xmm1, xmm6
mulss xmm1, dword [0x100fd864]
xorps xmm4, xmm5
comiss xmm4, xmm1
jbe 0x1004a42d
mov esi, dword [ebp - 0x1cc]
addss xmm1, xmm2
jmp 0x1004a465
movaps xmm0, xmm1
xorps xmm0, xmm5
comiss xmm0, xmm4
jbe 0x1004a447
mov esi, dword [ebp - 0x1cc]
subss xmm2, xmm1
movaps xmm1, xmm2
jmp 0x1004a465
mov esi, dword [ebp - 0x1cc]
xorps xmm1, xmm1
jmp 0x1004a465
lea edx, [ecx + 0x70]
jmp 0x1004a45d
mov esi, dword [ebp - 0x1cc]
movss xmm6, dword [ebp - 0x1c8]
movss xmm2, dword [0x100fd778]
comiss xmm1, xmm2
seta al
test al, al
je 0x1004a47c
movaps xmm1, xmm2
jmp 0x1004a489
comiss xmm3, xmm1
seta al
test al, al
je 0x1004a489
xorps xmm1, xmm1
mov eax, dword [ebp - 0x1b8]
movss dword [edx + 0x20], xmm1
cmp dword [eax + 0x60], 0
je 0x1004a4ea
movss xmm1, dword [ecx + 0x60]
movaps xmm0, xmm1
call fcn.1001cc70
comiss xmm3, xmm0
jae 0x1004a4ea
mulss xmm1, xmm6
addss xmm1, dword [ecx + 0x64]
comiss xmm1, xmm2
jb 0x1004a4c2
movss xmm1, dword [0x100fd770]
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
comiss xmm3, xmm1
jbe 0x1004a4dc
addss xmm1, xmm2
jmp 0x1004a4e5
comiss xmm1, xmm2
jbe 0x1004a4e5
subss xmm1, xmm2
movss dword [ecx + 0x64], xmm1
movss xmm0, dword [ecx + 0x60]
mulss xmm0, dword [esi + 0x74]
movss xmm1, dword [ecx + 0x64]
subss xmm1, xmm0
comiss xmm1, xmm2
seta al
test al, al
je 0x1004a50c
movaps xmm3, xmm2
jmp 0x1004a519
comiss xmm3, xmm1
seta al
test al, al
jne 0x1004a519
movaps xmm3, xmm1
movss xmm0, dword [ecx + 0x5c]
movss xmm1, dword [ecx + 0x58]
movss dword [ecx + 0x64], xmm3
mulss xmm0, dword [esi + 0x74]
subss xmm1, xmm0
comiss xmm1, xmm2
seta al
test al, al
jne 0x1004a550
movss xmm2, dword [0x100fd670]
comiss xmm2, xmm1
seta al
test al, al
jne 0x1004a550
movaps xmm2, xmm1
movss dword [ecx + 0x58], xmm2
mov dword [0x101413b4], 0
mov dword [ebp - 4], 9
cmp dword [ebp - 0x3c], 0
jl 0x1004a581
mov edx, dword [ebp - 0x44]
test edx, edx
je 0x1004a581
mov ecx, dword [0x101a6a94]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100ea0f5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10