Function at 0x1004a16d
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x17c
mov eax, dword [0x1005e040]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
mov ebx, ecx
push esi
push edi
xor edi, edi
mov dword [esp + 0x28], ebx
cmp dword [ebx + 0x58], edi
jge 0x1004a1b3
test byte [ebx + 4], 2
jne 0x1004a1a6
push 0x1b
push 0xd9
jmp 0x1004a1aa
push 2
push 2
push ecx
call fcn.1004a01a
mov dword [ebx + 0x58], eax
xorps xmm0, xmm0
mov dword [ebx + 8], edi
mov ecx, ebx
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x1c], edi
movups xmmword [ebx + 0x24], xmm0
call fcn.10049b09
mov esi, edi
mov ecx, edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
mov dword [esp + 0x44], ecx
cmp dword [ebx + 0x4c], edi
jle 0x1004a247
mov dword [esp + 0x40], edi
mov eax, dword [ebx + 0x54]
mov edx, dword [eax + edi + 0x30]
test edx, edx
jne 0x1004a1f7
mov edx, 0x100596f8
mov dword [eax + edi + 0x30], edx
xor eax, eax
cmp word [edx], ax
je 0x1004a234
mov ebx, dword [esp + 0x10]
xor edi, edi
movzx eax, word [edx + 2]
test ax, ax
je 0x1004a220
mov ecx, eax
inc esi
movzx eax, word [edx]
add edx, 4
sub ecx, eax
add esi, ecx
inc ebx
cmp word [edx], di
jne 0x1004a204
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0xc], esi
inc ecx
add edi, 0x74
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], edi
cmp ecx, dword [ebx + 0x4c]
jl 0x1004a1e3
xor edi, edi
mov edx, dword [ebx + 0xc]
test edx, edx
jg 0x1004a27d
cmp esi, 0x3e8
mov eax, 0x400
mov edx, 0x200
cmovg edx, eax
cmp esi, 0x7d0
mov eax, 0x800
cmovg edx, eax
cmp esi, 0xfa0
mov eax, 0x1000
cmovg edx, eax
push 0xa
pop ecx
mov dword [ebx + 0x20], edi
xor eax, eax
lea edi, [esp + 0x54]
mov dword [ebx + 0x1c], edx
rep stosd dword es:[edi], eax
push ecx
push dword [ebx + 0x10]
push ecx
push ecx
push edx
lea ecx, [esp + 0x68]
call fcn.10044c14
add esp, 0x14
test eax, eax
jne 0x1004a2ac
xor al, al
jmp 0x1004ac94
mov edx, dword [esp + 0x58]
xor ecx, ecx
lea eax, [ecx + 1]
mov dword [esp + 0x20], eax
lea eax, [ecx + 1]
mov ecx, ebx
mov dword [esp + 0x24], eax
call fcn.1004aca9
imul ecx, dword [ebx + 0x4c], 0x8c
call fcn.10022a4f
mov ecx, eax
xor eax, eax
mov edi, eax
mov dword [esp + 0x4c], ecx
cmp dword [ebx + 0x4c], eax
jle 0x1004a333
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], ecx
mov edx, dword [ebx + 0x54]
mov esi, dword [edx + eax]
mov ecx, esi
mov edx, dword [edx + eax + 0xc]
call fcn.10041178
mov edx, esi
mov esi, dword [esp + 0x40]
push eax
mov ecx, esi
call fcn.100412af
pop ecx
test eax, eax
je 0x1004a546
mov eax, dword [esp + 0x44]
inc edi
add eax, 0x74
add esi, 0x8c
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], esi
cmp edi, dword [ebx + 0x4c]
jl 0x1004a2ea
mov esi, dword [esp + 0xc]
xor eax, eax
imul esi, esi, 0x1c
mov dword [esp + 0x2c], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x50], eax
mov ecx, esi
call fcn.10022a4f
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xc]
shl eax, 4
mov ecx, eax
mov dword [esp + 0xc], eax
call fcn.10022a4f
imul edi, dword [esp + 0x10], 0x18
mov dword [esp + 0x48], eax
mov ecx, edi
call fcn.10022a4f
push esi
xor esi, esi
mov dword [esp + 0x48], eax
push esi
push dword [esp + 0x48]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push dword [esp + 0xc]
push esi
push dword [esp + 0x50]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push edi
xor edi, edi
push edi
push dword [esp + 0x4c]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x30], edi
cmp dword [ebx + 0x4c], edi
jle 0x1004a67b
mov edx, dword [esp + 0x20]
mov ecx, edi
mov edi, dword [esp + 0x4c]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x18], ecx
mov eax, dword [ebx + 0x54]
add eax, ecx
xor ecx, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], ecx
mov eax, dword [eax + 0x30]
mov dword [esp + 0x10], eax
movzx eax, word [eax]
mov ebx, eax
mov dword [esp + 0xc], ebx
test ax, ax
je 0x1004a433
movzx eax, ax
mov edx, ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
movzx eax, word [eax + 2]
test ax, ax
je 0x1004a42b
mov ecx, eax
movzx eax, bx
sub ecx, eax
mov eax, dword [esp + 0x10]
add eax, 4
inc ecx
add edx, ecx
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x34]
inc ecx
movzx ebx, word [eax]
mov dword [esp + 0x34], ecx
test bx, bx
jne 0x1004a3fc
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x20]
imul eax, dword [esp + 0x50], 0x18
add dword [esp + 0x50], ecx
mov dword [edi + 0x88], ecx
add eax, dword [esp + 0x44]
mov dword [esp + 0x10], eax
mov dword [edi + 0x84], eax
xor eax, eax
mov dword [esp + 0xc], eax
test ecx, ecx
jle 0x1004a4d2
mov ebx, dword [esp + 0x34]
mov ecx, eax
mov dword [esp + 0x10], eax
mov esi, dword [edi + 0x84]
add esi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
add dword [esp + 0x10], 0x18
mov edx, dword [eax + 0x30]
mov eax, dword [eax + 0x10]
mov dword [esi], eax
movzx eax, word [edx + ecx*4]
mov dword [esi + 4], eax
movzx ecx, word [edx + ecx*4 + 2]
mov eax, dword [esp + 0xc]
movzx eax, word [edx + eax*4]
mov edx, dword [esp + 0x2c]
sub ecx, eax
imul eax, edx, 0x1c
inc ecx
add edx, ecx
mov dword [esi + 0xc], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x2c], edx
add eax, dword [esp + 0x40]
inc ecx
mov dword [esi + 0x10], eax
mov dword [esp + 0xc], ecx
cmp ecx, ebx
jl 0x1004a464
mov eax, dword [edi + 0x84]
mov ecx, dword [edi + 0x88]
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
add dword [esp + 0x3c], ebx
mov dword [edi + 0x80], ebx
mov ebx, dword [esp + 0x14]
shl eax, 4
add eax, dword [esp + 0x48]
mov dword [edi + 0x7c], eax
cmp dword [ebx + 0x14], 8
push eax
cmovbe edx, dword [ebx + 0x14]
mov dword [esp + 0x70], edx
mov edx, ebx
push ecx
push dword [esp + 0x18]
lea ecx, [esp + 0x60]
cmp dword [edx + 0x18], 8
cmovbe esi, dword [edx + 0x18]
mov edx, edi
mov dword [esp + 0x7c], esi
call fcn.1004513e
mov ebx, dword [esp + 0x34]
mov esi, eax
xor eax, eax
mov dword [esp + 0x1c], esi
add esp, 0xc
mov dword [esp + 0x14], eax
mov edx, eax
mov dword [esp + 0x34], edx
cmp dword [edi + 0x88], eax
jle 0x1004a5e1
mov ebx, eax
jmp 0x1004a56b
xor eax, eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x1004a55c
dec dword [0x1010b624]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
pop ecx
jmp 0x1004a2a5
xor eax, eax
mov ecx, eax
xor esi, esi
mov eax, dword [edi + 0x84]
mov dword [esp + 0x38], ecx
cmp dword [ebx + eax + 0xc], esi
jle 0x1004a5c9
mov esi, dword [esp + 0x14]
shl esi, 4
mov edx, dword [ebx + eax + 4]
add edx, ecx
mov ecx, edi
call fcn.1004167b
test eax, eax
jne 0x1004a5a9
mov eax, dword [edi + 0x7c]
xor ecx, ecx
mov word [esi + eax + 6], cx
mov eax, dword [edi + 0x7c]
mov word [esi + eax + 4], cx
mov ecx, dword [esp + 0x38]
add esi, 0x10
mov eax, dword [edi + 0x84]
inc ecx
inc dword [esp + 0x14]
mov dword [esp + 0x38], ecx
cmp ecx, dword [ebx + eax + 0xc]
jl 0x1004a586
mov edx, dword [esp + 0x34]
inc edx
add ebx, 0x18
mov dword [esp + 0x34], edx
cmp edx, dword [edi + 0x88]
jl 0x1004a569
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x10]
mov edx, dword [edi + 0x7c]
mov ecx, dword [esp + 0x58]
push esi
call fcn.10040c63
pop ecx
test esi, esi
jle 0x1004a635
xor ecx, ecx
mov edx, ecx
mov eax, dword [edi + 0x7c]
cmp word [edx + eax + 4], cx
jne 0x1004a60c
cmp word [edx + eax + 6], cx
jne 0x1004a60c
mov dword [edx + eax + 0xc], ecx
mov eax, dword [edi + 0x7c]
cmp dword [edx + eax + 0xc], ecx
je 0x1004a62d
movzx ecx, word [edx + eax + 0xa]
movzx eax, word [edx + eax + 6]
add ecx, eax
cmp dword [ebx + 0x20], ecx
cmovge ecx, dword [ebx + 0x20]
mov dword [ebx + 0x20], ecx
xor ecx, ecx
add edx, 0x10
sub esi, 1
jne 0x1004a5f7
mov eax, dword [esp + 0x30]
add edi, 0x8c
mov ecx, dword [esp + 0x18]
inc eax
add ecx, 0x74
mov dword [esp + 0x30], eax
mov dword [esp + 0x18], ecx
cmp eax, dword [ebx + 0x4c]
jge 0x1004a669
mov esi, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], edx
jmp 0x1004a3c3
mov eax, dword [esp + 0x70]
xor edi, edi
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x20], eax
test byte [ebx + 4], 1
mov eax, dword [ebx + 0x20]
jne 0x1004a6a9
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movd xmm0, dword [ebx + 0x1c]
inc eax
movss xmm1, dword [0x100597ac]
cvtdq2ps xmm0, xmm0
inc dword [0x1010b624]
mov dword [ebx + 0x20], eax
movaps xmm2, xmm1
divss xmm2, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
imul eax, dword [ebx + 0x1c]
divss xmm1, xmm0
push eax
movss dword [ebx + 0x24], xmm2
movss dword [ebx + 0x28], xmm1
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
pop ecx
mov ecx, dword [ebx + 0x20]
imul ecx, dword [ebx + 0x1c]
mov dword [ebx + 0x14], eax
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebx + 0x14]
add esp, 0xc
mov dword [esp + 0x74], eax
mov eax, dword [ebx + 0x20]
mov dword [esp + 0x60], eax
mov dword [esp + 0x30], edi
cmp dword [ebx + 0x4c], edi
jle 0x1004a88d
mov eax, dword [esp + 0x20]
mov edx, edi
mov edi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
sub edi, 0xffffff80
mov dword [esp + 0x2c], edx
mov dword [esp + 0x14], edi
mov esi, dword [ebx + 0x54]
push dword [edi - 4]
add esi, edx
lea edx, [edi - 0x80]
push dword [edi + 8]
push dword [edi + 4]
cmp dword [esi + 0x14], 8
cmovbe eax, dword [esi + 0x14]
cmp dword [esi + 0x18], 8
mov dword [esp + 0x78], eax
cmovbe ecx, dword [esi + 0x18]
mov dword [esp + 0x7c], ecx
lea ecx, [esp + 0x60]
call fcn.100452cd
movss xmm1, dword [esi + 0x44]
add esp, 0xc
ucomiss xmm1, dword [0x100597ac]
movss dword [esp + 0x18], xmm1
lahf
test ah, 0x44
jnp 0x1004a856
xor eax, eax
mov ebx, 0xff
mov esi, eax
movd xmm0, esi
mov eax, esi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1005a390]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
call fcn.10050370
movss xmm1, dword [esp + 0x18]
cmp eax, ebx
movzx ecx, al
cmova ecx, ebx
mov byte [esp + esi + 0x80], cl
inc esi
cmp esi, 0x100
jb 0x1004a78e
mov eax, dword [edi]
mov ecx, dword [edi - 4]
mov ebx, dword [esp + 0x28]
shl eax, 4
add eax, ecx
cmp ecx, eax
je 0x1004a856
xor eax, eax
cmp dword [ecx + 0xc], eax
je 0x1004a843
movzx eax, word [ecx + 4]
movzx edx, word [ecx + 8]
mov dword [esp + 0x3c], eax
movzx eax, word [ecx + 0xa]
imul eax, dword [esp + 0x64]
add eax, dword [esp + 0x74]
add edx, eax
movzx eax, word [ecx + 6]
mov dword [esp + 0x18], eax
test eax, eax
je 0x1004a843
mov ebx, dword [esp + 0x3c]
xor edi, edi
mov esi, edi
test ebx, ebx
je 0x1004a832
movzx eax, byte [esi + edx]
mov al, byte [esp + eax + 0x80]
mov byte [esi + edx], al
inc esi
cmp esi, ebx
jl 0x1004a81b
mov eax, dword [esp + 0x18]
add edx, dword [esp + 0x64]
dec eax
mov dword [esp + 0x18], eax
test eax, eax
jg 0x1004a815
mov edi, dword [esp + 0x14]
mov eax, dword [edi]
add ecx, 0x10
shl eax, 4
add eax, dword [edi - 4]
cmp ecx, eax
jne 0x1004a7e1
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
xor eax, eax
mov dword [edi - 4], eax
add edx, 0x74
mov eax, dword [esp + 0x30]
add edi, 0x8c
inc eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], edi
cmp eax, dword [ebx + 0x4c]
jge 0x1004a88b
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
jmp 0x1004a734
xor edi, edi
cmp dword [esp + 0x78], 0
je 0x1004a89a
dec dword [0x1010b624]
push dword [esp + 0x78]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
mov eax, dword [esp + 0x5c]
pop ecx
test eax, eax
je 0x1004a8b5
dec dword [0x1010b624]
push eax
call esi
mov eax, dword [esp + 0x4c]
pop ecx
test eax, eax
je 0x1004a8c7
dec dword [0x1010b624]
push eax
call esi
pop ecx
mov dword [esp + 0x38], edi
cmp dword [ebx + 0x4c], edi
jle 0x1004ac55
mov eax, dword [esp + 0x4c]
mov ecx, edi
add eax, 4
mov dword [esp + 0x34], ecx
mov dword [esp + 0x24], eax
mov esi, dword [ebx + 0x54]
add esi, ecx
mov dword [esp + 0x14], esi
mov dl, byte [esi + 0x3c]
mov ecx, dword [esi + 0x70]
mov dword [esp + 0x48], ecx
mov byte [esp + 0x1f], dl
test dl, dl
je 0x1004a914
call fcn.1004b0c5
mov al, byte [esi + 0x3c]
mov byte [esp + 0x1f], al
mov eax, dword [esp + 0x24]
movss xmm1, dword [esi + 0x10]
lea ecx, [eax - 4]
call fcn.100432f9
mov esi, dword [esp + 0x24]
movss dword [esp + 0x30], xmm0
mov edi, dword [esi + 0x18]
mov esi, dword [esi]
lea ecx, [esi + 4]
add ecx, edi
call fcn.1004105d
cwde
lea ecx, [esi + 6]
add ecx, edi
mov dword [esp + 0x18], eax
call fcn.1004105d
cmp byte [esp + 0x1f], 0
mov edi, dword [esp + 0x48]
cwde
mov dword [esp + 0x2c], eax
jne 0x1004a9e1
mov ecx, edi
call fcn.1004b06c
mov esi, dword [esp + 0x14]
xorps xmm3, xmm3
movd xmm1, dword [esp + 0x18]
cvtdq2ps xmm1, xmm1
push 1
mov eax, dword [esi + 0x10]
mov dword [edi], eax
or eax, 0xffffffff
pop ecx
mov dword [edi + 0x40], esi
comiss xmm1, xmm3
mov dword [edi + 0x44], ebx
mulss xmm1, dword [esp + 0x30]
cmova eax, ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movd xmm1, dword [esp + 0x2c]
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
or eax, 0xffffffff
comiss xmm1, xmm3
mulss xmm1, dword [esp + 0x30]
cvtdq2ps xmm0, xmm0
cmova eax, ecx
movss dword [edi + 0x48], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x4c], xmm0
jmp 0x1004a9e5
mov esi, dword [esp + 0x14]
movss xmm0, dword [edi + 0x48]
xor ecx, ecx
addss xmm0, dword [0x10059780]
inc word [edi + 0x3e]
movss xmm1, dword [esi + 0x28]
movss dword [esp + 0x7c], xmm1
mov dword [esp + 0x30], ecx
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x24]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [esi + 0x2c]
movss dword [esp + 0x10], xmm0
cmp dword [eax + 0x84], ecx
jle 0x1004ac29
mov edx, ecx
mov dword [esp + 0x2c], ecx
mov ecx, dword [eax + 0x80]
add ecx, edx
xor edx, edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0xc], edx
cmp dword [ecx + 0xc], edx
jle 0x1004ac09
xor eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [ecx + 0x10]
xor ebx, ebx
add eax, dword [esp + 0x20]
mov dword [esp + 0x50], eax
cmp word [eax], bx
mov ebx, dword [esp + 0x28]
jne 0x1004aa92
xor edi, edi
cmp word [eax + 4], di
mov edi, dword [esp + 0x48]
jne 0x1004aa92
xor esi, esi
cmp word [eax + 2], si
mov esi, dword [esp + 0x14]
jne 0x1004aa92
xor edx, edx
cmp word [eax + 6], dx
mov edx, dword [esp + 0xc]
je 0x1004abf2
mov ebx, dword [ecx + 4]
add ebx, edx
cmp byte [esi + 0x3c], 0
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x28]
je 0x1004aac0
push dword [esp + 0x18]
mov ecx, edi
call fcn.1004b400
mov ecx, dword [esp + 0x3c]
test eax, eax
jne 0x1004abee
mov eax, dword [esp + 0x50]
movss xmm0, dword [eax + 0x10]
movss xmm7, dword [esi + 0x34]
comiss xmm7, xmm0
ja 0x1004aad8
movss xmm7, dword [esi + 0x38]
minss xmm7, xmm0
ucomiss xmm0, xmm7
movaps xmm6, xmm1
lahf
test ah, 0x44
jnp 0x1004ab08
cmp byte [esi + 0x1c], 0
movaps xmm6, xmm7
subss xmm6, xmm0
mulss xmm6, dword [0x10059780]
je 0x1004ab04
cvttss2si eax, xmm6
movd xmm6, eax
cvtdq2ps xmm6, xmm6
addss xmm6, xmm1
movd xmm0, dword [ebx + 0x1c]
sub esp, 0x1c
movss xmm3, dword [0x100597ac]
mov ecx, dword [ecx + 0x10]
add ecx, dword [esp + 0x3c]
movss xmm2, dword [0x100597ac]
cvtdq2ps xmm0, xmm0
movzx eax, word [ecx]
movss dword [esp + 0x18], xmm7
divss xmm3, xmm0
movd xmm0, dword [ebx + 0x20]
cvtdq2ps xmm0, xmm0
movd xmm5, eax
movzx eax, word [ecx + 2]
divss xmm2, xmm0
movd xmm4, eax
movzx eax, word [ecx + 4]
cvtdq2ps xmm4, xmm4
movd xmm1, eax
movzx eax, word [ecx + 6]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm4, xmm2
mulss xmm0, xmm2
movss xmm2, dword [ecx + 8]
mulss xmm1, xmm3
movss dword [esp + 0x14], xmm0
movss xmm0, dword [ecx + 0x18]
movss dword [esp + 0x10], xmm1
movss dword [esp + 0xc], xmm4
xorps xmm4, xmm4
addss xmm0, xmm4
cvtdq2ps xmm5, xmm5
addss xmm0, dword [esp + 0x2c]
mulss xmm5, xmm3
addss xmm2, xmm4
movss xmm3, dword [ecx + 0xc]
addss xmm3, xmm4
movss dword [esp + 8], xmm5
movss dword [esp + 4], xmm0
addss xmm2, xmm6
movss xmm0, dword [ecx + 0x14]
mov ecx, edi
addss xmm0, xmm4
addss xmm3, dword [esp + 0x2c]
addss xmm0, xmm6
movss dword [esp], xmm0
push dword [esp + 0x34]
call fcn.1004b2bc
movss xmm1, dword [esp + 0x7c]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xc]
add dword [esp + 0x20], 0x1c
inc edx
mov dword [esp + 0xc], edx
cmp edx, dword [ecx + 0xc]
jl 0x1004aa54
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
inc ecx
add edx, 0x18
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], edx
cmp ecx, dword [eax + 0x84]
jl 0x1004aa33
mov edi, dword [esp + 0x38]
add eax, 0x8c
mov ecx, dword [esp + 0x34]
inc edi
add ecx, 0x74
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ecx
mov dword [esp + 0x24], eax
cmp edi, dword [ebx + 0x4c]
jl 0x1004a8e9
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [esp + 0x40]
test eax, eax
je 0x1004ac63
dec dword [0x1010b624]
push eax
call esi
mov eax, dword [esp + 0x48]
pop ecx
test eax, eax
je 0x1004ac75
dec dword [0x1010b624]
push eax
call esi
mov eax, dword [esp + 0x50]
pop ecx
test eax, eax
je 0x1004ac87
dec dword [0x1010b624]
push eax
call esi
pop ecx
mov ecx, ebx
call fcn.1004ae97
mov al, 1
mov ecx, dword [esp + 0x184]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1004c3cd
mov esp, ebp
pop ebp
ret