Function at 0x10099610
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a4c8b
mov eax, dword fs:[0]
push eax
sub esp, 0x18c
mov eax, dword [0x100b9008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x90], ecx
mov eax, dword [ebp + 8]
lea edx, [ecx + 4]
mov dword [ebp - 0x90], ecx
push 0x50
push 0
mov eax, dword [eax]
push edx
mov dword [ebp - 0x84], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov ebx, dword [ecx + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov eax, dword [ecx + 4]
movss xmm0, dword [eax]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x8c], eax
mov eax, dword [ecx + 0x10]
movss dword [ebp - 0x90], xmm0
mov edi, dword [eax]
mov eax, dword [ecx + 0x14]
mov esi, dword [eax]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x84]
add esp, 0xc
lea edx, [eax + 0x14]
mov byte [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [edx], 0
mov dword [edx + 4], 0
mov dword [edx + 8], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x3c], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x4c], 0
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 4], 0
mov dword [eax + 4], esi
mov esi, eax
movss xmm0, dword [0x100ad694]
movss xmm1, dword [0x100ad710]
mov dword [esi + 0x30], edi
lea edi, [esi + 8]
mov eax, dword [ebx]
mov dword [edi], eax
mov eax, dword [ebx + 4]
mov dword [edi + 4], eax
mov eax, dword [ebx + 8]
mov dword [edi + 8], eax
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov dword [esi + 0x24], 0xd
mov eax, dword [0x10112084]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [ebp - 0x8c], eax
neg eax
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0x30]
add eax, 0xffffffd5
cmp eax, 5
ja case.default.0x1009979a
jmp dword [eax*4 + 0x1009ab00]
movss xmm0, dword [0x100ad760]
mov eax, dword [0x10112084]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [esi + 0x38], eax
movss xmm2, dword [0x100ad710]
mov eax, dword [0x10112084]
lea ebx, [esi + 0x44]
movss xmm0, dword [0x100ad8a4]
mov ecx, dword [esi + 0x34]
movss xmm1, dword [eax + 0x20]
divss xmm0, xmm1
addss xmm0, xmm2
cvttss2si eax, xmm0
cmp ecx, eax
jge 0x1009aa77
mov edx, ecx
cmp dword [esi + 0x38], edx
jg 0x100999da
mov eax, dword [esi + 0x30]
add eax, 0xffffffd5
cmp eax, 5
ja case.default.0x1009980c
jmp dword [eax*4 + 0x1009ab18]
mov eax, dword [0x10112084]
movss xmm0, dword [0x100ad748]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm0
jmp 0x100997b3
movss xmm0, dword [0x100ad688]
mov dword [esi + 0x28], 0x3fc00000
jmp 0x100997a9
mov eax, dword [0x10117ccc]
test al, 1
jne 0x100998c1
or eax, 1
mov dword [0x10117ccc], eax
mov eax, dword [0x10112024]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x80], eax
test eax, eax
je 0x100998a9
nop
mov ebx, dword [eax + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp byte [ecx + ebx], 0
jne 0x10099870
xor edx, edx
test ecx, ecx
je 0x1009989c
nop dword [eax]
movsx eax, byte [edx + ebx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10099880
cmp edi, 0xc12e8fe5
je 0x100998b3
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 4]
mov dword [ebp - 0x80], eax
test eax, eax
jne 0x10099860
lea edi, [esi + 8]
xor ecx, ecx
mov dword [0x10117cbc], ecx
jmp 0x100998c7
mov ecx, dword [ebp - 0x80]
lea edi, [esi + 8]
mov dword [0x10117cbc], ecx
jmp 0x100998c7
mov ecx, dword [0x10117cbc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
call dword [ebp - 0x7c]
movss xmm0, dword [0x100ad688]
fstp dword [esi + 0x28]
mov eax, dword [0x10112084]
movss xmm2, dword [0x100ad710]
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm2
cvttss2si eax, xmm0
mov dword [esi + 0x38], eax
jmp 0x100997c6
movss xmm1, dword [esi + 0x18]
movss xmm2, dword [esi + 0x14]
movss xmm0, dword [esi + 0x1c]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
movss xmm0, dword [0x100ad678]
comiss xmm0, xmm2
jb case.default.0x1009980c
mov byte [esi], 1
mov dword [esi + 0x3c], edx
mov ecx, dword [esi + 0x48]
mov byte [ebp - 0x75], 0
cmp dword [esi + 0x4c], ecx
je 0x10099999
movq xmm0, qword [edi]
movq qword [ecx], xmm0
mov eax, dword [edi + 8]
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], 0
add dword [esi + 0x48], 0x10
jmp 0x100999a7
movss xmm1, dword [esi + 0x18]
movss xmm2, dword [esi + 0x14]
movss xmm0, dword [esi + 0x1c]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
movss xmm0, dword [0x100ad698]
jmp 0x1009992a
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
comiss xmm0, dword [esi + 0x28]
jbe case.default.0x1009980c
jmp 0x1009992f
lea eax, [ebp - 0x75]
push eax
push edi
push ecx
lea ecx, [esi + 0x44]
call fcn.10048450
lea ebx, [esi + 0x44]
mov eax, dword [0x10112084]
movss xmm0, dword [0x100ad6c8]
mov ecx, dword [esi + 0x34]
mov edx, ecx
movss xmm2, dword [0x100ad710]
divss xmm0, dword [eax + 0x20]
addss xmm0, dword [0x100ad710]
cvttss2si eax, xmm0
add eax, ecx
mov dword [esi + 0x38], eax
cmp edx, dword [ebp - 0x94]
jl 0x1009aa41
cmp byte [esi], 0
jne 0x1009aa77
mov eax, dword [0x10117cc8]
test al, 1
jne 0x10099a6e
or eax, 1
mov dword [0x10117cc8], eax
mov eax, dword [0x10112024]
mov ebx, dword [eax + 0x30]
test ebx, ebx
je 0x10099a56
nop dword [eax]
mov esi, dword [ebx + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp byte [ecx + esi], 0
jne 0x10099a20
xor edx, edx
test ecx, ecx
je 0x10099a49
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10099a30
cmp edi, 0x58e37709
je 0x10099a60
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10099a10
mov esi, dword [ebp - 0x84]
xor ebx, ebx
mov dword [0x10117cb8], ebx
jmp 0x10099a74
mov esi, dword [ebp - 0x84]
mov dword [0x10117cb8], ebx
jmp 0x10099a74
mov ebx, dword [0x10117cb8]
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
call dword [ebp - 0x7c]
mov eax, dword [0x10112084]
movss xmm3, dword [esi + 0x1c]
fstp dword [ebp - 0x7c]
movss xmm0, dword [ebp - 0x7c]
movaps xmm2, xmm3
movss xmm1, dword [eax + 0x20]
lea eax, [ebp - 0x44]
mulss xmm0, xmm1
push 0x30
push 0
push eax
mulss xmm0, dword [0x100ad6fc]
subss xmm2, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [esi + 0x14]
addss xmm3, xmm2
movss dword [ebp - 0x80], xmm0
movss xmm0, dword [esi + 0x18]
mulss xmm0, xmm1
movss dword [esi + 0x1c], xmm2
mulss xmm3, dword [0x100ad710]
movss dword [ebp - 0x88], xmm0
mulss xmm3, xmm1
movss dword [ebp - 0x7c], xmm3
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esi + 0x24]
lea ebx, [esi + 8]
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
add esp, 0xc
mov dword [ebp - 0xc8], 0x40000000
movups xmmword [ebp - 0x68], xmm0
cmp eax, 1
mov ecx, 0x8400b
movups xmmword [ebp - 0x58], xmm0
mov edi, 0x4208608b
mov dword [ebp - 0xc4], 0x40000000
movss xmm0, dword [ebp - 0x80]
cmove edi, ecx
addss xmm0, dword [ebx]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xc0], 0x40000000
push ecx
mov ecx, dword [0x10112044]
push eax
push dword [esi + 4]
movss dword [ebp - 0xa4], xmm0
lea eax, [ebp - 0xc8]
movss xmm0, dword [ebx + 4]
addss xmm0, dword [ebp - 0x88]
push edi
push eax
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd4], 0xc0000000
push eax
movss dword [ebp - 0xa0], xmm0
lea eax, [ebp - 0xa4]
movss xmm0, dword [ebx + 8]
addss xmm0, dword [ebp - 0x7c]
push eax
push ebx
mov dword [ebp - 0xd0], 0xc0000000
mov dword [ebp - 0xcc], 0xc0000000
movss dword [ebp - 0x9c], xmm0
call fcn.10047b90
cmp byte [ebp - 0x31], 0
je 0x10099c5d
test dword [ebp - 0x38], 0x80000
je 0x10099c5d
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [0x10112044]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
mov dword [ebp - 0xe0], 0x40000000
push eax
push dword [esi + 0x24]
mov eax, edi
mov dword [ebp - 0xdc], 0x40000000
push dword [esi + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0xd8], 0x40000000
push eax
lea eax, [ebp - 0xe0]
mov dword [ebp - 0xec], 0xc0000000
push eax
lea eax, [ebp - 0xec]
mov dword [ebp - 0xe8], 0xc0000000
push eax
lea eax, [ebp - 0xa4]
mov dword [ebp - 0xe4], 0xc0000000
push eax
push ebx
call fcn.10047b90
movss xmm0, dword [0x100ad748]
comiss xmm0, dword [ebp - 0x3c]
ja 0x10099c7b
cmp byte [ebp - 0x32], 0
jne 0x10099c7b
cmp byte [ebp - 0x31], 0
je 0x10099d78
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x10099ccf
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x10099ccc
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x10112044]
lea eax, [ebp - 0x68]
add esp, 0xc
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
push eax
push dword [esi + 0x24]
lea eax, [ebp - 0xa4]
push dword [esi + 4]
push edi
push eax
push ebx
call fcn.10047950
mov ecx, dword [ebp - 0x1c]
cmp byte [ebp - 0x31], 0
je 0x10099d7b
movss xmm5, dword [ebp - 0x80]
lea eax, [ebp - 0x68]
movss xmm4, dword [ebp - 0x7c]
mov dword [esi + 0x24], 3
movss xmm3, dword [ebx]
movss xmm2, dword [ebx + 4]
movaps xmm0, xmm3
movss xmm1, dword [ebx + 8]
addss xmm0, xmm5
mov ecx, dword [0x10112044]
subss xmm3, xmm5
push eax
push 3
push dword [esi + 4]
movss dword [ebp - 0xf8], xmm0
lea eax, [ebp - 0xf8]
movaps xmm0, xmm2
movss dword [ebp - 0x104], xmm3
addss xmm0, dword [ebp - 0x88]
subss xmm2, dword [ebp - 0x88]
push 0x8400b
push eax
lea eax, [ebp - 0x104]
movss dword [ebp - 0xf4], xmm0
movaps xmm0, xmm1
addss xmm0, xmm4
movss dword [ebp - 0x100], xmm2
subss xmm1, xmm4
push eax
movss dword [ebp - 0xf0], xmm0
movss dword [ebp - 0xfc], xmm1
call fcn.10047950
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x3c]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10099da9
movss xmm0, dword [ebp - 0x5c]
movss dword [ebx], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [ebx + 4], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [ebx + 8], xmm0
test ecx, ecx
je 0x10099eda
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x10099eda
mov ecx, dword [esi + 0x30]
mov dword [ebp - 0x7c], ecx
cmp ecx, 0x44
je 0x10099ddc
cmp ecx, 0x2e
je 0x10099ddc
cmp ecx, 0x30
jne 0x10099eda
mov eax, dword [0x10117cc4]
test al, 1
jne 0x10099e64
or eax, 1
mov dword [0x10117cc4], eax
mov eax, dword [0x10112024]
mov ebx, dword [eax + 0x30]
test ebx, ebx
je 0x10099e49
nop dword [eax]
mov esi, dword [ebx + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp byte [ecx + esi], 0
jne 0x10099e10
xor edx, edx
test ecx, ecx
je 0x10099e39
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10099e20
cmp edi, 0x1aef2a38
je 0x10099e53
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10099e00
mov esi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x7c]
xor ebx, ebx
mov dword [0x10117cc0], ebx
jmp 0x10099e6a
mov esi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x7c]
mov dword [0x10117cc0], ebx
jmp 0x10099e6a
mov ebx, dword [0x10117cc0]
cmp ecx, 0x44
je 0x10099e95
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
call dword [ebp - 0x7c]
fmul dword [0x100ad684]
fstp dword [ebp - 0x7c]
movss xmm0, dword [ebp - 0x7c]
call fcn.1001a700
comiss xmm0, dword [ebp - 0x48]
ja 0x10099ed7
mov eax, dword [esi + 0x34]
lea edi, [esi + 0x44]
mov byte [esi], 1
lea ebx, [esi + 8]
mov dword [esi + 0x3c], eax
mov ecx, dword [edi + 4]
mov byte [ebp - 0x75], 1
cmp dword [edi + 8], ecx
je 0x10099ec8
movq xmm0, qword [ebx]
movq qword [ecx], xmm0
mov eax, dword [ebx + 8]
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], 1
add dword [edi + 4], 0x10
jmp 0x10099edd
lea eax, [ebp - 0x75]
push eax
push ebx
push ecx
mov ecx, edi
call fcn.10048450
jmp 0x10099edd
lea ebx, [esi + 8]
lea edi, [esi + 0x44]
cmp byte [esi], 0
jne 0x1009aa71
movss xmm0, dword [ebp - 0x3c]
movss xmm7, dword [0x100ad748]
ucomiss xmm0, xmm7
lahf
test ah, 0x44
jnp 0x1009a9ea
mov eax, dword [esi + 0x34]
mov dword [esi + 0x3c], eax
mov ecx, dword [edi + 4]
mov byte [ebp - 0x75], 1
cmp dword [edi + 8], ecx
je 0x10099f2a
movq xmm0, qword [ebx]
movq qword [ecx], xmm0
mov eax, dword [ebx + 8]
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], 1
add dword [edi + 4], 0x10
jmp 0x10099f3f
lea eax, [ebp - 0x75]
push eax
push ebx
push ecx
mov ecx, edi
call fcn.10048450
movss xmm7, dword [0x100ad748]
mov ecx, dword [ebp - 0x1c]
movaps xmm3, xmm7
movss dword [ebp - 0x80], xmm3
test ecx, ecx
je 0x10099fee
call fcn.1006d950
test al, al
je 0x10099f92
movss xmm0, dword [esi + 0x14]
movss xmm1, dword [0x100ad6fc]
mulss xmm0, xmm1
movss dword [esi + 0x14], xmm0
movss xmm0, dword [esi + 0x18]
mulss xmm0, xmm1
movss dword [esi + 0x18], xmm0
movss xmm0, dword [esi + 0x1c]
mulss xmm0, xmm1
movss dword [esi + 0x1c], xmm0
jmp 0x1009a9ea
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
mov bl, al
test bl, bl
je 0x10099fb2
movss xmm0, dword [0x100ad6d8]
movss dword [ebp - 0x80], xmm0
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
test eax, eax
je 0x10099fde
mov eax, dword [ebp - 0x1c]
test bl, bl
je 0x10099fdb
cmp dword [esi + 0x20], eax
jne 0x10099fdb
mov dword [esi + 0x24], 1
jmp 0x1009a9ea
mov dword [esi + 0x20], eax
movss xmm7, dword [0x100ad748]
lea ebx, [esi + 8]
movss xmm3, dword [ebp - 0x80]
movss xmm1, dword [esi + 0x18]
lea ecx, [esi + 0x14]
movss xmm2, dword [esi + 0x14]
xor eax, eax
mulss xmm2, dword [ebp - 0x50]
mov dword [ebp - 0x74], 0
mulss xmm1, dword [ebp - 0x4c]
mov dword [ebp - 0x70], 0
movss xmm0, dword [esi + 0x1c]
addss xmm2, xmm2
movss xmm6, dword [ebp - 0x48]
addss xmm1, xmm1
mulss xmm0, xmm6
mov dword [ebp - 0x6c], 0
addss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
nop
movss xmm1, dword [ebp + eax - 0x50]
movss xmm0, dword [ecx]
mulss xmm1, xmm2
subss xmm0, xmm1
movss dword [ebp + eax - 0x74], xmm0
call fcn.1001a710
comiss xmm0, xmm7
jae 0x1009a06a
mov dword [ebp + eax - 0x74], 0
add eax, 4
add ecx, 4
cmp eax, 0xc
jb 0x1009a040
mulss xmm3, dword [0x100ad704]
mov dword [ebp - 0x80], 0x3f666666
movss xmm0, dword [0x100ad738]
mov dword [ebp - 0x7c], 0
comiss xmm3, xmm0
movss dword [ebp - 0x88], xmm3
jbe 0x1009a0a5
movaps xmm3, xmm0
jmp 0x1009a0bb
xorps xmm0, xmm0
lea eax, [ebp - 0x7c]
comiss xmm3, xmm0
lea ecx, [ebp - 0x88]
cmovae eax, ecx
movss xmm3, dword [eax]
comiss xmm6, dword [0x100ad71c]
movaps xmm4, xmm3
movaps xmm5, xmm3
mulss xmm4, dword [ebp - 0x74]
mulss xmm5, dword [ebp - 0x70]
mulss xmm3, dword [ebp - 0x6c]
jbe 0x1009a5a5
movaps xmm0, xmm5
movaps xmm7, xmm4
mulss xmm0, xmm5
movaps xmm1, xmm5
mulss xmm7, xmm4
movaps xmm2, xmm3
addss xmm7, xmm0
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm7, xmm0
comiss xmm7, dword [0x100ad934]
jbe 0x1009a19e
movaps xmm1, xmm4
movaps xmm0, xmm5
mulss xmm0, xmm5
mulss xmm1, xmm4
addss xmm0, xmm1
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm0, xmm1
call fcn.1001a740
movaps xmm2, xmm0
movaps xmm1, xmm4
addss xmm2, dword [0x100ad654]
movaps xmm6, xmm5
movaps xmm0, xmm3
divss xmm6, xmm2
divss xmm1, xmm2
mulss xmm6, dword [ebp - 0x4c]
mulss xmm1, dword [ebp - 0x50]
divss xmm0, xmm2
addss xmm6, xmm1
movaps xmm2, xmm3
mulss xmm0, dword [ebp - 0x48]
movaps xmm1, xmm5
addss xmm6, xmm0
movss xmm0, dword [0x100ad710]
comiss xmm6, xmm0
jbe 0x1009a19e
movss xmm1, dword [0x100ad748]
subss xmm1, xmm6
addss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm5, xmm0
mulss xmm4, xmm1
movaps xmm2, xmm3
movaps xmm1, xmm5
movss xmm0, dword [0x100ad918]
movaps xmm6, xmm4
comiss xmm0, xmm7
jbe 0x1009a1c8
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
jmp 0x1009a99f
movss xmm0, dword [0x100ad748]
mov ecx, 0x8400b
subss xmm0, dword [ebp - 0x3c]
movss dword [esi + 0x1c], xmm3
mov edi, 0x4208608b
movss dword [esi + 0x14], xmm4
movss dword [esi + 0x18], xmm5
mov eax, dword [0x10112084]
mov dword [ebp - 0x110], 0x40000000
mov dword [ebp - 0x10c], 0x40000000
mov dword [ebp - 0x108], 0x40000000
mulss xmm0, dword [eax + 0x20]
mov eax, dword [esi + 0x24]
cmp eax, 1
mov dword [ebp - 0x11c], 0xc0000000
cmove edi, ecx
mov dword [ebp - 0x118], 0xc0000000
movaps xmm3, xmm0
mulss xmm1, xmm0
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x114], 0xc0000000
mulss xmm2, xmm0
push ecx
movss xmm0, dword [ebx]
mov ecx, dword [0x10112044]
mulss xmm3, xmm6
push eax
push dword [esi + 4]
lea eax, [ebp - 0x110]
movss dword [ebp - 0x88], xmm1
addss xmm0, xmm3
movss dword [ebp - 0x7c], xmm3
push edi
push eax
lea eax, [ebp - 0x11c]
movss dword [ebp - 0x80], xmm2
push eax
movss dword [ebp - 0xb0], xmm0
lea eax, [ebp - 0xb0]
movss xmm0, dword [ebx + 4]
addss xmm0, xmm1
push eax
push ebx
movss dword [ebp - 0xac], xmm0
movss xmm0, dword [ebx + 8]
addss xmm0, xmm2
movss dword [ebp - 0xa8], xmm0
call fcn.10047b90
cmp byte [ebp - 0x31], 0
je 0x1009a35e
test dword [ebp - 0x38], 0x80000
je 0x1009a35e
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [0x10112044]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
mov dword [ebp - 0x128], 0x40000000
push eax
push dword [esi + 0x24]
mov eax, edi
mov dword [ebp - 0x124], 0x40000000
push dword [esi + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0x120], 0x40000000
push eax
lea eax, [ebp - 0x128]
mov dword [ebp - 0x134], 0xc0000000
push eax
lea eax, [ebp - 0x134]
mov dword [ebp - 0x130], 0xc0000000
push eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x12c], 0xc0000000
push eax
push ebx
call fcn.10047b90
movss xmm0, dword [0x100ad748]
comiss xmm0, dword [ebp - 0x3c]
ja 0x1009a37c
cmp byte [ebp - 0x32], 0
jne 0x1009a37c
cmp byte [ebp - 0x31], 0
je 0x1009a476
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x1009a3d0
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1009a3cd
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x10112044]
lea eax, [ebp - 0x68]
add esp, 0xc
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
push eax
push dword [esi + 0x24]
lea eax, [ebp - 0xb0]
push dword [esi + 4]
push edi
push eax
push ebx
call fcn.10047950
mov ecx, dword [ebp - 0x1c]
cmp byte [ebp - 0x31], 0
je 0x1009a479
movss xmm4, dword [ebp - 0x88]
lea eax, [ebp - 0x68]
movss xmm5, dword [ebp - 0x80]
mov dword [esi + 0x24], 3
movss xmm3, dword [ebx]
movss xmm2, dword [ebx + 4]
movaps xmm0, xmm3
addss xmm0, dword [ebp - 0x7c]
movss xmm1, dword [ebx + 8]
subss xmm3, dword [ebp - 0x7c]
mov ecx, dword [0x10112044]
push eax
movss dword [ebp - 0x140], xmm0
lea eax, [ebp - 0x140]
movaps xmm0, xmm2
subss xmm2, xmm4
addss xmm0, xmm4
movss dword [ebp - 0x14c], xmm3
push 3
push dword [esi + 4]
push 0x8400b
movss dword [ebp - 0x13c], xmm0
movaps xmm0, xmm1
addss xmm0, xmm5
movss dword [ebp - 0x148], xmm2
subss xmm1, xmm5
push eax
lea eax, [ebp - 0x14c]
push eax
movss dword [ebp - 0x138], xmm0
movss dword [ebp - 0x144], xmm1
call fcn.10047950
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x3c]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1009a4a7
movss xmm0, dword [ebp - 0x5c]
movss dword [ebx], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [ebx + 4], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [ebx + 8], xmm0
test ecx, ecx
je 0x1009a99c
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x1009a99c
mov ecx, dword [esi + 0x30]
mov dword [ebp - 0x7c], ecx
cmp ecx, 0x44
je 0x1009a4da
cmp ecx, 0x2e
je 0x1009a4da
cmp ecx, 0x30
jne 0x1009a99c
mov eax, dword [0x10117cc4]
test al, 1
jne 0x1009a564
or eax, 1
mov dword [0x10117cc4], eax
mov eax, dword [0x10112024]
mov ebx, dword [eax + 0x30]
test ebx, ebx
je 0x1009a549
nop dword [eax + eax]
mov esi, dword [ebx + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp byte [ecx + esi], 0
jne 0x1009a510
xor edx, edx
test ecx, ecx
je 0x1009a539
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1009a520
cmp edi, 0x1aef2a38
je 0x1009a553
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x1009a500
mov esi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x7c]
xor ebx, ebx
mov dword [0x10117cc0], ebx
jmp 0x1009a56a
mov esi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x7c]
mov dword [0x10117cc0], ebx
jmp 0x1009a56a
mov ebx, dword [0x10117cc0]
cmp ecx, 0x44
je 0x1009a965
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
call dword [ebp - 0x7c]
fmul dword [0x100ad684]
fstp dword [ebp - 0x7c]
movss xmm0, dword [ebp - 0x7c]
jmp 0x1009a95a
lea eax, [ebp - 0x75]
push eax
push edx
push ecx
mov ecx, edi
call fcn.10048450
jmp 0x1009a99f
movss dword [esi + 0x14], xmm4
movaps xmm0, xmm7
subss xmm0, dword [ebp - 0x3c]
movss dword [esi + 0x1c], xmm3
mov ecx, 0x8400b
movss dword [esi + 0x18], xmm5
mov edi, 0x4208608b
mov eax, dword [0x10112084]
mov dword [ebp - 0x158], 0x40000000
mov dword [ebp - 0x154], 0x40000000
mov dword [ebp - 0x150], 0x40000000
mulss xmm0, dword [eax + 0x20]
mov eax, dword [esi + 0x24]
cmp eax, 1
mov dword [ebp - 0x164], 0xc0000000
cmove edi, ecx
mov dword [ebp - 0x160], 0xc0000000
mulss xmm4, xmm0
lea ecx, [ebp - 0x68]
push ecx
movaps xmm1, xmm0
mulss xmm3, xmm0
mov ecx, dword [0x10112044]
movaps xmm0, xmm4
mulss xmm1, xmm5
push eax
addss xmm0, dword [ebx]
push dword [esi + 4]
lea eax, [ebp - 0x158]
movss dword [ebp - 0x7c], xmm4
push edi
push eax
movss dword [ebp - 0xbc], xmm0
lea eax, [ebp - 0x164]
movss xmm0, dword [ebx + 4]
addss xmm0, xmm1
movss dword [ebp - 0x88], xmm1
push eax
lea eax, [ebp - 0xbc]
movss dword [ebp - 0x80], xmm3
push eax
push ebx
movss dword [ebp - 0xb8], xmm0
movss xmm0, dword [ebx + 8]
addss xmm0, xmm3
mov dword [ebp - 0x15c], 0xc0000000
movss dword [ebp - 0xb4], xmm0
call fcn.10047b90
cmp byte [ebp - 0x31], 0
je 0x1009a735
test dword [ebp - 0x38], 0x80000
je 0x1009a735
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [0x10112044]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
mov dword [ebp - 0x170], 0x40000000
push eax
push dword [esi + 0x24]
mov eax, edi
mov dword [ebp - 0x16c], 0x40000000
push dword [esi + 4]
and eax, 0xfff7ffff
mov dword [ebp - 0x168], 0x40000000
push eax
lea eax, [ebp - 0x170]
mov dword [ebp - 0x17c], 0xc0000000
push eax
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x178], 0xc0000000
push eax
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x174], 0xc0000000
push eax
push ebx
call fcn.10047b90
movss xmm0, dword [0x100ad748]
comiss xmm0, dword [ebp - 0x3c]
ja 0x1009a753
cmp byte [ebp - 0x32], 0
jne 0x1009a753
cmp byte [ebp - 0x31], 0
je 0x1009a850
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x1009a7a7
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1009a7a4
push 0x54
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x10112044]
lea eax, [ebp - 0x68]
add esp, 0xc
mov dword [ebp - 0x3c], 0x3f800000
mov dword [ebp - 0x2c], str.empty
push eax
push dword [esi + 0x24]
lea eax, [ebp - 0xbc]
push dword [esi + 4]
push edi
push eax
push ebx
call fcn.10047950
mov ecx, dword [ebp - 0x1c]
cmp byte [ebp - 0x31], 0
je 0x1009a853
movss xmm5, dword [ebp - 0x7c]
lea eax, [ebp - 0x68]
movss xmm4, dword [ebp - 0x80]
mov dword [esi + 0x24], 3
movss xmm3, dword [ebx]
movss xmm2, dword [ebx + 4]
movaps xmm0, xmm3
movss xmm1, dword [ebx + 8]
addss xmm0, xmm5
mov ecx, dword [0x10112044]
subss xmm3, xmm5
push eax
push 3
push dword [esi + 4]
movss dword [ebp - 0x188], xmm0
lea eax, [ebp - 0x188]
movaps xmm0, xmm2
movss dword [ebp - 0x194], xmm3
addss xmm0, dword [ebp - 0x88]
subss xmm2, dword [ebp - 0x88]
push 0x8400b
push eax
lea eax, [ebp - 0x194]
movss dword [ebp - 0x184], xmm0
movaps xmm0, xmm1
addss xmm0, xmm4
movss dword [ebp - 0x190], xmm2
subss xmm1, xmm4
push eax
movss dword [ebp - 0x180], xmm0
movss dword [ebp - 0x18c], xmm1
call fcn.10047950
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x3c]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1009a881
movss xmm0, dword [ebp - 0x5c]
movss dword [ebx], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [ebx + 4], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [ebx + 8], xmm0
test ecx, ecx
je 0x1009a99c
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
jne 0x1009a99c
mov ecx, dword [esi + 0x30]
mov dword [ebp - 0x7c], ecx
cmp ecx, 0x44
je 0x1009a8b4
cmp ecx, 0x2e
je 0x1009a8b4
cmp ecx, 0x30
jne 0x1009a99c
mov eax, dword [0x10117cc4]
test al, 1
jne 0x1009a934
or eax, 1
mov dword [0x10117cc4], eax
mov eax, dword [0x10112024]
mov ebx, dword [eax + 0x30]
test ebx, ebx
je 0x1009a919
mov esi, dword [ebx + 0xc]
mov edi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [ecx + esi], 0
jne 0x1009a8e0
xor edx, edx
test ecx, ecx
je 0x1009a909
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1009a8f0
cmp edi, 0x1aef2a38
je 0x1009a923
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x1009a8d1
mov esi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x7c]
xor ebx, ebx
mov dword [0x10117cc0], ebx
jmp 0x1009a93a
mov esi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x7c]
mov dword [0x10117cc0], ebx
jmp 0x1009a93a
mov ebx, dword [0x10117cc0]
cmp ecx, 0x44
je 0x1009a965
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x7c], eax
call dword [ebp - 0x7c]
fmul dword [0x100ad684]
fstp dword [ebp - 0x7c]
movss xmm0, dword [ebp - 0x7c]
call fcn.1001a700
comiss xmm0, dword [ebp - 0x48]
ja 0x1009a99c
mov eax, dword [esi + 0x34]
lea edi, [esi + 0x44]
mov byte [esi], 1
lea edx, [esi + 8]
mov dword [esi + 0x3c], eax
mov ecx, dword [edi + 4]
mov byte [ebp - 0x75], 1
cmp dword [edi + 8], ecx
je 0x1009a593
movq xmm0, qword [edx]
movq qword [ecx], xmm0
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], 1
add dword [edi + 4], 0x10
jmp 0x1009a9a2
lea edi, [esi + 0x44]
lea edx, [esi + 8]
mov eax, dword [esi + 0x40]
cmp eax, 0x14
jle 0x1009a9e6
mov eax, dword [esi + 0x34]
mov byte [esi], 1
mov dword [esi + 0x3c], eax
mov ecx, dword [edi + 4]
mov byte [ebp - 0x75], 0
cmp dword [edi + 8], ecx
je 0x1009a9d7
movq xmm0, qword [edx]
movq qword [ecx], xmm0
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], 0
add dword [edi + 4], 0x10
jmp 0x1009a9ea
lea eax, [ebp - 0x75]
push eax
push edx
push ecx
mov ecx, edi
call fcn.10048450
jmp 0x1009a9ea
inc eax
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x3c]
lea ebx, [esi + 0x44]
add eax, dword [ebp - 0x8c]
mov ecx, dword [esi + 0x34]
cmp eax, ecx
jg 0x1009aa36
mov dword [esi + 0x3c], ecx
mov ecx, dword [edi + 4]
cmp dword [edi + 8], ecx
lea edi, [esi + 8]
mov byte [ebp - 0x75], 0
je 0x1009aa27
movq xmm0, qword [edi]
movq qword [ecx], xmm0
mov eax, dword [edi + 8]
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], 0
add dword [esi + 0x48], 0x10
jmp 0x1009aa39
lea eax, [ebp - 0x75]
push eax
push edi
push ecx
mov ecx, ebx
call fcn.10048450
jmp 0x1009aa39
lea edi, [esi + 8]
movss xmm2, dword [0x100ad710]
mov ecx, dword [esi + 0x34]
movss xmm0, dword [0x100ad8a4]
inc ecx
mov dword [esi + 0x34], ecx
mov edx, ecx
mov eax, dword [0x10112084]
movss xmm1, dword [eax + 0x20]
divss xmm0, xmm1
addss xmm0, xmm2
cvttss2si eax, xmm0
cmp edx, eax
jge 0x1009aa77
jmp 0x100997f4
mov ecx, dword [esi + 0x34]
lea ebx, [esi + 0x44]
mov eax, dword [esi + 0x3c]
add eax, dword [ebp - 0x8c]
cmp eax, ecx
jg 0x1009aabc
mov dword [esi + 0x3c], ecx
mov ecx, dword [ebx + 4]
mov byte [ebp - 0x75], 0
cmp dword [ebx + 8], ecx
je 0x1009aaac
movq xmm0, qword [esi + 8]
movq qword [ecx], xmm0
mov eax, dword [esi + 0x10]
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], 0
add dword [ebx + 4], 0x10
jmp 0x1009aabc
lea eax, [ebp - 0x75]
push eax
lea edx, [esi + 8]
push edx
push ecx
mov ecx, ebx
call fcn.10048450
movd xmm0, dword [esi + 0x34]
mov ecx, dword [0x10112084]
mov eax, dword [ebp - 0x98]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [ecx + 0x20]
addss xmm0, dword [ebp - 0x90]
movss dword [esi + 0x2c], xmm0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1009b337
mov esp, ebp
pop ebp
ret 0x10