Function at 0x48de60
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c75f0
mov eax, dword fs:[0]
push eax
mov eax, 0x10e0
call fcn.00498b20
mov eax, dword [0x507b40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [0x50abc8], 0
jne 0x48dea9
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x50abc8], eax
jmp 0x48deec
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, eax
sub ecx, dword [0x50abc8]
mov dword [0x50abc8], eax
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c99e0]
mov ecx, dword [0x50abc4]
push ecx
cvtpd2ps xmm0, xmm0
mov eax, dword [ecx]
divss xmm0, dword [0x4cd6a4]
movss dword [esp], xmm0
call dword [eax]
mov dword [ebp - 0x10a8], 0
mov dword [ebp - 0x10a4], 0
mov dword [ebp - 0x10a0], 0
mov ecx, dword [0x509434]
lea edx, [ebp - 0x109c]
push 0
push 0
mov dword [ebp - 0x10ac], 0
mov eax, dword [ecx]
push edx
push 0
mov dword [ebp - 4], 0
call dword [eax + 8]
mov eax, dword [ebp - 0x109c]
test eax, eax
jle 0x48df9a
nop dword [eax]
cmp eax, 0xfa0
jle 0x48df51
mov dword [ebp - 0x109c], 0xfa0
mov ecx, dword [0x509434]
lea edx, [ebp - 0x10a8]
push edx
lea edx, [ebp - 0x10ac]
push edx
mov eax, dword [ecx]
lea edx, [ebp - 0x109c]
push edx
lea edx, [ebp - 0xfb0]
push edx
call dword [eax + 8]
mov ecx, dword [0x509434]
lea edx, [ebp - 0x109c]
push 0
push 0
push edx
mov eax, dword [ecx]
push 0
call dword [eax + 8]
mov eax, dword [ebp - 0x109c]
test eax, eax
jg 0x48df40
mov esi, dword [ebp - 0x10a8]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x48e00c
mov ecx, dword [ebp - 0x10a0]
mov eax, 0x66666667
sub ecx, esi
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*4]
mov eax, esi
cmp ecx, 0x1000
jb 0x48dfe4
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48e6f2
push ecx
push esi
call fcn.00498884
add esp, 8
mov dword [ebp - 0x10a8], 0
mov dword [ebp - 0x10a4], 0
mov dword [ebp - 0x10a0], 0
movss xmm0, dword [0x5099d0]
addss xmm0, dword [0x4ca598]
mov ecx, dword [0x509420]
movss dword [0x5099d0], xmm0
call fcn.0043e450
mov esi, eax
test esi, esi
je 0x48e100
nop dword [eax]
mov ecx, esi
call fcn.004343e0
cmp eax, 5
ja case.default.0x48e050
jmp dword [eax*4 + 0x48e6f8]
movzx eax, word [esi + 0x12c]
push eax
push 0
push 6
jmp 0x48e0d4
mov ecx, dword [edi + 0x19c]
movzx eax, word [esi + 0x12c]
push eax
push 0
mov edx, dword [ecx]
push 7
call dword [edx + 0x28]
movsx ax, byte [esi + 0x128]
movzx eax, ax
push eax
push 0
push 8
jmp 0x48e0d4
movzx eax, word [esi + 0x10c]
push eax
push dword [esi + 0x108]
push 0
jmp 0x48e0d4
movzx eax, word [esi + 0x10c]
push eax
push dword [esi + 0x108]
push 2
jmp 0x48e0d4
movzx eax, word [esi + 0x10c]
push eax
push dword [esi + 0x108]
push 1
jmp 0x48e0d4
movzx eax, word [esi + 0x10c]
push eax
push dword [esi + 0x108]
push 3
mov ecx, dword [edi + 0x19c]
mov edx, dword [ecx]
call dword [edx + 0x28]
test esi, esi
je 0x48e0eb
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
mov ecx, dword [0x509420]
call fcn.0043e450
mov esi, eax
test esi, esi
jne 0x48e040
mov edx, dword [0x509420]
mov ecx, dword [edi + 0x19c]
movzx eax, word [edx + 0x2a690]
mov esi, dword [ecx]
push eax
push dword [edx + 0x2a68c]
push 4
call dword [esi + 0x28]
movss xmm2, dword [0x4ceed0]
sub esp, 0xc
movss xmm1, dword [0x4ceedc]
mov ecx, esp
unpcklps xmm2, xmm1
mov dword [ebp - 0x10b0], 0xc2140000
mov eax, dword [ebp - 0x10b0]
movq qword [ecx], xmm2
mov dword [ecx + 8], eax
mov ecx, dword [0x50abc4]
call fcn.004843b0
sub esp, 0x10
mov ecx, esp
push 3
mov dword [ecx], 0x3f800000
mov dword [ecx + 4], 0x3f028283
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0x3f1b9b9c
mov ecx, dword [0x50abc4]
call fcn.00483fe0
mov ecx, dword [0x50abd0]
mov eax, 0x66666667
inc ecx
imul ecx
mov dword [0x50abd0], ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
sub ecx, eax
jne 0x48e1d8
call fcn.004ad3e4
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x4cd5b0]
divss xmm1, dword [0x4cd6d4]
addss xmm1, dword [0x4cd5b0]
movss dword [0x50abcc], xmm1
sub esp, 0xc
lea eax, [ebp - 0x1058]
mov dword [esp + 8], 0x40000000
mov dword [esp + 4], 0
mov dword [esp], 0xc0800000
push 1
push eax
call fcn.004399c0
mov eax, dword [0x509420]
lea edx, [ebp - 0x1058]
movss xmm0, dword [0x50abcc]
add esp, 0x14
mov dword [ebp - 0x1024], 0x4164cccd
mov dword [ebp - 0x1020], 0x42720000
mov dword [ebp - 0x101c], 0xc2140000
mov dword [ebp - 0x100c], 0x42c80000
mov dword [ebp - 0x1008], 0x3f800000
movss dword [ebp - 0x1000], xmm0
mov dword [ebp - 0x1054], 0x3f800000
mov dword [ebp - 0x1050], 0x3f800000
mov dword [ebp - 0x104c], 0x3f000000
mov dword [ebp - 0x1034], 0
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x102c], 0
mov eax, dword [eax + 0x2a3d8]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb0]
mov eax, dword [0x509420]
push 1
push 1
mov eax, dword [eax + 0x2a3d8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb8]
mov ecx, dword [0x509420]
push 0x3c
push 0x3f
push 0xb
call fcn.0043e3b0
mov eax, dword [0x509420]
mov dword [ebp - 0xfb8], 0
mov dword [ebp - 0xfbc], 0
mov dword [ebp - 0xfc0], 0
mov dword [ebp - 0xfc4], 0
mov dword [ebp - 0xfcc], 0
mov dword [ebp - 0xfd0], 0
mov dword [ebp - 0xfd4], 0
mov dword [ebp - 0xfd8], 0
mov dword [ebp - 0xfe0], 0
mov dword [ebp - 0xfe4], 0
mov dword [ebp - 0xfe8], 0
mov dword [ebp - 0xfec], 0
mov dword [ebp - 0xfb4], 0x3f800000
mov dword [ebp - 0xfc8], 0x3f800000
mov dword [ebp - 0xfdc], 0x3f800000
mov dword [ebp - 0xff0], 0x3f800000
mov eax, dword [eax + 0x2a680]
push ecx
movss xmm0, dword [eax + 4]
lea eax, [ebp - 0x1098]
movss dword [esp], xmm0
push eax
call fcn.00402543
mov eax, dword [0x509420]
push ecx
mov eax, dword [eax + 0x2a680]
movss xmm0, dword [eax]
lea eax, [ebp - 0xff0]
movss dword [esp], xmm0
push eax
call fcn.004025df
lea eax, [ebp - 0x1098]
push eax
lea eax, [ebp - 0xff0]
push eax
push eax
call fcn.00401b6e
mov ecx, dword [0x509420]
mov eax, dword [ecx + 0x2a680]
lea edx, [ebp - 0xff0]
push edx
push 2
movss xmm0, dword [eax + 0xc]
movss dword [ebp - 0xfc0], xmm0
mov eax, dword [ecx + 0x2a680]
movss xmm0, dword [eax + 0x10]
movss dword [ebp - 0xfbc], xmm0
mov eax, dword [ecx + 0x2a680]
movss xmm0, dword [eax + 0x14]
movss dword [ebp - 0xfb8], xmm0
mov eax, dword [ecx + 0x2a3d8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x94]
movups xmm0, xmmword [ebp - 0xff0]
mov eax, dword [0x509420]
lea edx, [ebp - 0xff0]
mov dword [ebp - 0xfe4], 0
movups xmmword [ebp - 0x10bc], xmm0
mov dword [ebp - 0xfe8], 0
movups xmm0, xmmword [ebp - 0xfe0]
mov dword [ebp - 0xfd4], 0
mov dword [ebp - 0xfd8], 0
movups xmmword [ebp - 0x10cc], xmm0
mov dword [ebp - 0xfe0], 0
movups xmm0, xmmword [ebp - 0xfd0]
mov dword [ebp - 0xfc4], 0
mov dword [ebp - 0xfcc], 0
movups xmmword [ebp - 0x10dc], xmm0
mov dword [ebp - 0xfd0], 0
movups xmm0, xmmword [ebp - 0xfc0]
mov dword [ebp - 0xfb8], 0
mov dword [ebp - 0xfbc], 0
mov dword [ebp - 0xfc0], 0
mov dword [ebp - 0xfec], 0
mov dword [ebp - 0xfb4], 0x3f800000
mov dword [ebp - 0xfc8], 0x3f800000
mov dword [ebp - 0xfdc], 0x3f800000
mov dword [ebp - 0xff0], 0x3f800000
mov eax, dword [eax + 0x2a3d8]
push edx
push 0x100
push eax
mov ecx, dword [eax]
movups xmmword [ebp - 0x10ec], xmm0
call dword [ecx + 0x94]
mov eax, dword [0x509420]
mov ecx, dword [0x50aba4]
push 0
push dword [eax + 0x2a3d8]
call fcn.004413f0
mov eax, dword [0x509420]
mov ecx, dword [0x50abbc]
push 0
push dword [eax + 0x2a3d8]
call fcn.004413f0
mov eax, dword [0x509420]
mov ecx, dword [0x50abb4]
push 0
push dword [eax + 0x2a3d8]
call fcn.004413f0
mov eax, dword [0x509420]
mov ecx, dword [0x50abac]
push 0
push dword [eax + 0x2a3d8]
call fcn.004413f0
mov eax, dword [0x509420]
mov ecx, dword [0x50abb0]
push 0
push dword [eax + 0x2a3d8]
call fcn.004413f0
mov eax, dword [0x509420]
mov ecx, dword [0x50abb8]
push 0
push dword [eax + 0x2a3d8]
call fcn.004413f0
mov eax, dword [0x509420]
push 0
push dword [eax + 0x2a3d8]
mov ecx, dword [0x50abc0]
call fcn.004413f0
mov eax, dword [0x509420]
mov ecx, dword [0x50aba8]
push 0
push dword [eax + 0x2a3d8]
call fcn.004413f0
mov ecx, dword [0x50abc4]
call fcn.00484290
movups xmm0, xmmword [ebp - 0x10bc]
mov ecx, dword [0x50abc4]
sub esp, 0x40
mov eax, esp
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x10cc]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x10dc]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [ebp - 0x10ec]
movups xmmword [eax + 0x30], xmm0
call fcn.00483620
mov eax, dword [0x509420]
push 1
push 0xe
mov eax, dword [eax + 0x2a3d8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov eax, dword [0x509420]
push 1
push 0x89
mov eax, dword [eax + 0x2a3d8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov eax, dword [0x509420]
push 1
push 0x16
mov eax, dword [eax + 0x2a3d8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov eax, dword [0x509420]
push 5
push 0x13
mov eax, dword [eax + 0x2a3d8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov eax, dword [0x509420]
push 6
push 0x14
mov eax, dword [eax + 0x2a3d8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov eax, dword [0x509420]
push 2
push 9
mov eax, dword [eax + 0x2a3d8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov ecx, dword [edi + 0x19c]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov ecx, dword [0x509420]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push dword [edi + 0x10c]
call fcn.0043c040
mov ecx, dword [0x509420]
call fcn.0043cb70
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00498846
mov esp, ebp
pop ebp
ret
call fcn.004a9ef2
nop
push edi
loopne 4777795
add byte [ebp - 0x20], ah
dec eax
add byte [esi - 0x5fffb720], cl
loopne 0x48e74f
add byte [edx - 0x3bffb720], dh
loopne 0x48e757
add byte [ebp + 0x500c2444], cl
je 0x48e769
sbb byte [ebx + 0x2474fff1], cl
sbb byte [ecx - 0x17f3db8c], cl
or al, 0xe8
sti
int 0xfa
invalid
and al, 0xc
mov cl, 0x50
add al, ch
das
mov eax, 0x74fffffb
and al, 0x18