Function at 0x10058160
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x90
mov eax, dword [0x10098010]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ebp + 8], 2
push esi
push edi
mov dword [esp + 0x18], ecx
jne 0x100589fd
mov eax, dword [0x100e8ffc]
cmp dword [eax], 0
je 0x100589fd
mov eax, dword [0x100e8968]
mov dword [esp + 0x10], 1
cmp dword [eax + 0x18], 1
jle 0x100589fd
mov esi, 0xe4
xorps xmm0, xmm0
mov dword [esp + 0x1c], esi
movsd qword [esp + 0x60], xmm0
call fcn.10045870
mov ecx, dword [0x100e8960]
push dword [esp + 0x10]
lea edi, [esi + eax]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
call edx
mov dword [esp + 8], eax
test eax, eax
je 0x100589da
mov ecx, dword [0x100e8ffc]
mov ecx, dword [ecx]
cmp eax, ecx
je 0x100589da
call fcn.1004e540
mov ecx, dword [esp + 8]
mov esi, eax
call fcn.1004e540
mov ecx, dword [eax]
cmp ecx, dword [esi]
jne 0x10058224
movsd xmm0, qword [0x100eb658]
ucomisd xmm0, qword [esp + 0x60]
lahf
test ah, 0x44
jnp 0x100589da
mov esi, dword [esp + 8]
mov ecx, esi
call fcn.1007ad50
cmp dword [eax], 0
jne 0x100589da
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x24]
call eax
test al, al
jne 0x100589da
mov ecx, esi
call fcn.10041560
mov dword [esp + 0x6c], 0
movss xmm1, dword [eax + 4]
movss xmm0, dword [eax]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
movss dword [esp + 0xc], xmm0
sqrtss xmm0, dword [esp + 0xc]
movss dword [esp + 0x6c], xmm0
movss xmm0, dword [esp + 0x6c]
comiss xmm0, dword [0x1008d540]
ja 0x100589da
cmp dword [edi + 0xa0], 0
je 0x100582dd
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x94]
dec ecx
and ecx, dword [edi + 0x9c]
mov esi, dword [eax + ecx*4]
mov ecx, dword [esp + 8]
call fcn.10047a70
movss xmm0, dword [eax]
subss xmm0, dword [esi + 0x3394]
ucomiss xmm0, dword [0x1008d504]
lahf
test ah, 0x44
jnp 0x100589da
mov esi, dword [esp + 8]
mov ecx, esi
call fcn.10046120
mov ecx, eax
movss xmm0, dword [ecx]
ucomiss xmm0, dword [edi + 0x84]
lahf
test ah, 0x44
jp 0x1005831b
movss xmm0, dword [ecx + 4]
ucomiss xmm0, dword [edi + 0x88]
lahf
test ah, 0x44
jp 0x1005831b
movss xmm0, dword [ecx + 8]
ucomiss xmm0, dword [edi + 0x8c]
lahf
test ah, 0x44
jnp 0x10058333
mov eax, dword [0x100e8ffc]
mov ecx, dword [eax]
call fcn.1007ad50
cmp dword [eax], 0
jne 0x10058333
mov dword [edi + 8], 3
mov ecx, esi
call fcn.10047a70
movss xmm0, dword [eax]
subss xmm0, dword [edi + 0x2c]
comiss xmm0, dword [0x1008d5bc]
jbe 0x100583b0
mov ecx, esi
call fcn.10046120
mov ecx, eax
movss xmm0, dword [ecx]
ucomiss xmm0, dword [edi + 0x84]
lahf
test ah, 0x44
jp 0x100583b0
movss xmm0, dword [ecx + 4]
ucomiss xmm0, dword [edi + 0x88]
lahf
test ah, 0x44
jp 0x100583b0
movss xmm0, dword [ecx + 8]
ucomiss xmm0, dword [edi + 0x8c]
lahf
test ah, 0x44
jp 0x100583b0
cmp dword [edi + 8], 0
jne 0x100583b0
mov ecx, esi
call fcn.10047a70
movss xmm0, dword [eax]
subss xmm0, dword [edi + 0x2c]
comiss xmm0, dword [0x1008d608]
jbe 0x100583b0
mov dword [edi + 8], 3
cmp dword [edi + 8], 3
jne 0x100589da
mov eax, dword [0x100e42e0]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x100e86d0]
cmp eax, dword [ecx + 4]
jle 0x1005840d
push 0x100e86d0
call fcn.1007bfd7
add esp, 4
cmp dword [0x100e86d0], 0xffffffff
jne 0x1005840d
push 0x10082a70
mov byte [0x100e86fc], 0
call fcn.1007be5e
add esp, 4
push 0x100e86d0
call fcn.1007bf8d
add esp, 4
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 8]
mov ecx, edi
movq xmm0, qword [eax + 0x3c]
mov esi, dword [eax + 0x44]
movq qword [esp + 0x30], xmm0
call fcn.10046120
movq xmm0, qword [esp + 0x30]
sub esp, 0xc
mov ecx, esp
sub esp, 0xc
movq qword [ecx], xmm0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ecx + 8], esi
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea eax, [esp + 0x94]
push eax
call fcn.100750e0
mov ecx, dword [0x100e42e0]
mov edx, dword fs:[0x2c]
mov esi, dword [0x100e86d0]
mov eax, dword [edx + ecx*4]
cmp esi, dword [eax + 4]
jle 0x100584b9
push 0x100e86d0
call fcn.1007bfd7
mov esi, dword [0x100e86d0]
add esp, 4
cmp esi, 0xffffffff
jne 0x100584b9
push 0x10082a70
mov byte [0x100e86fc], 0
call fcn.1007be5e
add esp, 4
push 0x100e86d0
call fcn.1007bf8d
mov esi, dword [0x100e86d0]
add esp, 4
movss xmm0, dword [esp + 0x80]
movss xmm1, dword [0x1008d5f0]
movss dword [esp + 0x14], xmm0
subss xmm0, dword [0x1008d760]
movss dword [esp + 0xc], xmm0
call fcn.10075ac0
movss dword [esp + 8], xmm0
movss xmm0, dword [esp + 0xc]
mulss xmm0, dword [0x1008d534]
movaps xmm1, xmm0
movss dword [esp + 0xc], xmm0
addss xmm1, dword [0x1008d5f0]
call fcn.10075ac0
mulss xmm0, dword [esp + 8]
movss xmm1, dword [esp + 0xc]
movss dword [esp + 0x20], xmm0
call fcn.10075ac0
mulss xmm0, dword [esp + 8]
xorps xmm1, xmm1
movss dword [esp + 0x24], xmm0
call fcn.10075ac0
mov ecx, dword [0x100e42e0]
mov edx, dword fs:[0x2c]
xorps xmm0, xmmword [0x10090a80]
movss dword [esp + 0x28], xmm0
mov eax, dword [edx + ecx*4]
cmp esi, dword [eax + 4]
jle 0x1005859c
push 0x100e86d0
call fcn.1007bfd7
mov esi, dword [0x100e86d0]
add esp, 4
cmp esi, 0xffffffff
jne 0x1005859c
push 0x10082a70
mov byte [0x100e86fc], 0
call fcn.1007be5e
add esp, 4
push 0x100e86d0
call fcn.1007bf8d
mov esi, dword [0x100e86d0]
add esp, 4
movss xmm0, dword [esp + 0x14]
addss xmm0, dword [0x1008d760]
mulss xmm0, dword [0x1008d534]
movaps xmm1, xmm0
movss dword [esp + 0xc], xmm0
addss xmm1, dword [0x1008d5f0]
call fcn.10075ac0
mulss xmm0, dword [esp + 8]
movss xmm1, dword [esp + 0xc]
movss dword [esp + 0x2c], xmm0
call fcn.10075ac0
mov ecx, dword [0x100e42e0]
mov edx, dword fs:[0x2c]
mulss xmm0, dword [esp + 8]
mov eax, dword [edx + ecx*4]
movss dword [esp + 0xc], xmm0
cmp esi, dword [eax + 4]
jle 0x1005863a
push 0x100e86d0
call fcn.1007bfd7
add esp, 4
cmp dword [0x100e86d0], 0xffffffff
jne 0x1005863a
push 0x10082a70
mov byte [0x100e86fc], 0
call fcn.1007be5e
add esp, 4
push 0x100e86d0
call fcn.1007bf8d
add esp, 4
movss xmm0, dword [esp + 0x14]
addss xmm0, dword [0x1008d78c]
mulss xmm0, dword [0x1008d534]
movaps xmm1, xmm0
movss dword [esp + 0x14], xmm0
addss xmm1, dword [0x1008d5f0]
call fcn.10075ac0
mulss xmm0, dword [esp + 8]
movss xmm1, dword [esp + 0x14]
movss dword [esp + 0x30], xmm0
call fcn.10075ac0
mov eax, dword [edi]
lea ecx, [esp + 0x88]
mulss xmm0, dword [esp + 8]
push ecx
mov ecx, edi
mov eax, dword [eax + 0x474]
movss dword [esp + 0x18], xmm0
call eax
movss xmm4, dword [0x1008d700]
movss xmm0, dword [esp + 0x20]
movss xmm1, dword [esp + 0x88]
movss xmm2, dword [esp + 0x24]
mulss xmm0, xmm4
mov ecx, dword [0x100e42e0]
mulss xmm2, xmm4
mov edx, dword fs:[0x2c]
addss xmm0, xmm1
movss xmm3, dword [esp + 0x28]
mov eax, dword [0x100f1b14]
mulss xmm3, xmm4
mov esi, dword [edx + ecx*4]
movss dword [esp + 0x3c], xmm0
movss xmm0, dword [esp + 0x8c]
addss xmm2, xmm0
addss xmm3, dword [esp + 0x90]
movss dword [esp + 0x40], xmm2
movss xmm2, dword [esp + 0x2c]
mulss xmm2, xmm4
movss dword [esp + 0x44], xmm3
movss dword [esp + 0x50], xmm3
addss xmm2, xmm1
movss dword [esp + 0x5c], xmm3
movss dword [esp + 0x48], xmm2
movss xmm2, dword [esp + 0xc]
mulss xmm2, xmm4
addss xmm2, xmm0
movss dword [esp + 0x4c], xmm2
movss xmm2, dword [esp + 0x30]
mulss xmm2, xmm4
addss xmm2, xmm1
movss xmm1, dword [esp + 0x14]
mulss xmm1, xmm4
addss xmm1, xmm0
movss dword [esp + 0x54], xmm2
movss dword [esp + 0x58], xmm1
cmp eax, dword [esi + 4]
jle 0x100587bf
push 0x100f1b14
call fcn.1007bfd7
add esp, 4
cmp dword [0x100f1b14], 0xffffffff
jne 0x100587bf
push 0x238
push 0
push 0x100f18d4
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x100f18d0], 0x1008d308
push 0x10082d60
call fcn.1007be5e
add esp, 4
push 0x100f1b14
call fcn.1007bf8d
add esp, 4
mov eax, dword [0x100e4850]
cmp eax, dword [esi + 4]
jle 0x10058803
push 0x100e4850
call fcn.1007bfd7
add esp, 4
cmp dword [0x100e4850], 0xffffffff
jne 0x10058803
push 0x10082b70
mov byte [0x100e4854], 0
call fcn.1007be5e
add esp, 4
push 0x100e4850
call fcn.1007bf8d
add esp, 4
movq xmm0, qword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x1c]
mov dword [0x100f19c0], 0xc8
mov dword [0x100f19e0], 0x3f800000
mov dword [0x100f19d0], 0x40c00000
lea eax, [ecx + 0x3c]
mov dword [0x100f19c8], 0x40000000
push eax
mov eax, dword [esp + 0x18]
add ecx, 0x48
push 0x100f18d0
mov dword [0x100f19dc], 0x46000000
lea eax, [ecx + eax*4]
push eax
mov eax, dword [esp + 0x54]
sub esp, 0xc
mov ecx, esp
push edi
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov eax, dword [0x100e8ffc]
push dword [eax]
call fcn.10068350
mov eax, dword [0x100e4850]
cmp eax, dword [esi + 4]
jle 0x100588b5
push 0x100e4850
call fcn.1007bfd7
add esp, 4
cmp dword [0x100e4850], 0xffffffff
jne 0x100588b5
push 0x10082b70
mov byte [0x100e4854], 0
call fcn.1007be5e
add esp, 4
push 0x100e4850
call fcn.1007bf8d
add esp, 4
movq xmm0, qword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x1c]
mov dword [0x100f19c0], 0xc8
mov dword [0x100f19e0], 0x3f800000
mov dword [0x100f19d0], 0x40c00000
lea eax, [ecx + 0x3c]
mov dword [0x100f19c8], 0x40000000
push eax
mov eax, dword [esp + 0x18]
add ecx, 0x148
push 0x100f18d0
mov dword [0x100f19dc], 0x46000000
lea eax, [ecx + eax*4]
push eax
mov eax, dword [esp + 0x60]
sub esp, 0xc
mov ecx, esp
push edi
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov eax, dword [0x100e8ffc]
push dword [eax]
call fcn.10068350
mov eax, dword [0x100e4850]
cmp eax, dword [esi + 4]
jle 0x1005896a
push 0x100e4850
call fcn.1007bfd7
add esp, 4
cmp dword [0x100e4850], 0xffffffff
jne 0x1005896a
push 0x10082b70
mov byte [0x100e4854], 0
call fcn.1007be5e
add esp, 4
push 0x100e4850
call fcn.1007bf8d
add esp, 4
mov esi, dword [esp + 0x18]
movq xmm0, qword [esp + 0x54]
push ecx
mov dword [0x100f19c0], 0xc8
lea eax, [esi + 0x3c]
mov dword [0x100f19e0], 0x3f800000
push eax
mov eax, dword [esp + 0x18]
add eax, 0x92
mov dword [0x100f19d0], 0x40c00000
push 0x100f18d0
mov dword [0x100f19c8], 0x40000000
mov dword [0x100f19dc], 0x46000000
lea eax, [esi + eax*4]
push eax
mov eax, dword [esp + 0x6c]
sub esp, 0xc
mov ecx, esp
push edi
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov eax, dword [0x100e8ffc]
push dword [eax]
call fcn.10068350
mov ecx, dword [esp + 0x10]
mov eax, dword [0x100e8968]
inc ecx
add dword [esp + 0x1c], 0xe4
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x10], ecx
cmp ecx, dword [eax + 0x18]
jl 0x100581c1
mov ecx, dword [esp + 0x94]
pop edi
pop esi
xor ecx, esp
call fcn.1007ba06
mov esp, ebp
pop ebp
ret 4