Function at 0x10049720
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f0971
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x200
mov eax, dword [0x1010b0b8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebx + 8]
mov esi, dword [ebx + 0xc]
mov dword [ebp - 0x1cc], esi
mov dword [ebp - 0x1b4], 0
test edi, edi
je 0x1004a5f1
cmp dword [ebx + 0x14], 0
je 0x1004a5f1
mov eax, dword [0x101a8c50]
add eax, 0xffffffcb
xor eax, 0x42c871d2
cmp dword [eax + edi], 0
jne 0x1004a5f1
mov eax, dword [0x101a8bb4]
cmp dword [edi + eax], 0
je 0x1004a5f1
mov ecx, dword [0x101a8a14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x1004a5f1
mov ecx, dword [0x101a8a14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
call eax
test al, al
je 0x1004a5f1
mov ecx, dword [0x101a8a18]
mov eax, dword [0x101a8cf0]
add eax, 0xffffffa3
push ecx
mov edx, dword [ecx]
xor eax, 0x42c871fa
mov esi, dword [edx + 0x10]
mov edx, esp
mov eax, dword [eax + edi]
mov dword [edx], eax
call esi
test eax, eax
je 0x1004a5f1
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x44], xmm0
push 0x15c
lea eax, [ebp - 0x1a8]
mov dword [ebp - 4], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov byte [ebp - 4], 1
mov eax, dword [0x101a8bb4]
mov esi, dword [edi + eax]
mov ecx, esi
call fcn.10048e90
push eax
lea ecx, [ebp - 0x1a8]
call fcn.10049010
movss xmm0, dword [esi + 0xf4]
comiss xmm0, dword [0x100ff6e8]
jbe 0x10049883
push str.moving
lea ecx, [ebp - 0x1a8]
call fcn.10049010
movss xmm0, dword [esi + 0xa4]
comiss xmm0, dword [0x100ff724]
jbe 0x100498a4
push str.crouch
lea ecx, [ebp - 0x1a8]
call fcn.10049010
mov eax, dword [ebp - 0x50]
movups xmm0, xmmword [ebp - 0x60]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x34], eax
mov eax, 1
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x1b4], eax
movups xmmword [ebp - 0x44], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov byte [ebp - 4], 2
test eax, eax
js 0x100498fb
mov edx, dword [ebp - 0x60]
test edx, edx
je 0x100498f4
mov ecx, dword [0x101a8a94]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 0
mov ecx, dword [0x101a8a18]
mov eax, dword [0x101a8cf0]
add eax, 0xffffffa3
push ecx
mov edx, dword [ecx]
xor eax, 0x42c871fa
mov esi, dword [edx + 0x10]
mov edx, esp
mov eax, dword [eax + edi]
mov dword [edx], eax
call esi
mov ecx, dword [0x101a8bb4]
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 0x1bc], 0
mov eax, dword [edi + ecx]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebx + 0x14]
test byte [eax + 0x30], 2
je 0x100499aa
mov ecx, dword [0x101a8c54]
add ecx, 0xffffffca
xor ecx, 0x42c871d3
test byte [ecx + edi], 1
jne 0x100499aa
mov ecx, dword [0x101a8a18]
mov eax, dword [0x101a8cf4]
add eax, 0xffffffa2
push ecx
mov edx, dword [ecx]
xor eax, 0x42c871fb
mov esi, dword [edx + 0x10]
mov edx, esp
mov eax, dword [eax + edi]
mov dword [edx], eax
call esi
test eax, eax
jne 0x100499aa
movups xmm0, xmmword [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
sub esp, 0x14
mov eax, esp
mov byte [ebp - 0x1bc], 1
push 0x3d9
push 4
movups xmmword [eax], xmm0
push edi
mov dword [eax + 0x10], ecx
call fcn.1004a950
mov esi, dword [ebp - 0x1cc]
sub esp, 8
mov ecx, dword [ebp - 0x1b8]
mov eax, dword [0x101a8ba0]
movss xmm0, dword [esi + 0x6c]
subss xmm0, dword [ecx + 0x6c]
mov eax, dword [edi + eax]
mov dword [ebp - 0x18], eax
movss dword [esp + 4], xmm0
mov dword [esp], 0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
mov ecx, dword [0x101a8b5c]
add esp, 8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c0], ecx
mov ecx, dword [0x101a8bb8]
fstp dword [ebp - 0x1c8]
mov eax, dword [eax + 0xc0]
mov dword [ebp - 0x1c4], eax
cmp dword [edi + ecx], 0
jne 0x10049a26
mov eax, dword [0x101a8b38]
mov ecx, edi
call eax
mov ecx, dword [0x101a8bb8]
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [edi + ecx]
mov edx, eax
call dword [ebp - 0x1c0]
movss xmm4, dword [0x10100b10]
cmp eax, 0x3d4
je 0x10049a47
cmp eax, 0x3d3
jne 0x10049a92
mov eax, dword [ebp - 0x18]
movss xmm1, dword [ebp - 0x1c8]
mulss xmm1, dword [0x100ff860]
movss xmm2, dword [eax + 0xc8]
movaps xmm3, xmm2
xorps xmm3, xmm4
comiss xmm3, xmm1
jbe 0x10049a73
addss xmm1, xmm2
jmp 0x10049a8a
movaps xmm0, xmm1
xorps xmm0, xmm4
comiss xmm0, xmm3
jbe 0x10049a87
subss xmm2, xmm1
movaps xmm1, xmm2
jmp 0x10049a8a
xorps xmm1, xmm1
movss dword [eax + 0xc8], xmm1
movss xmm0, dword [0x100ff770]
comiss xmm0, dword [esi + 0xec]
mov eax, dword [ebp - 0x1b8]
jb 0x10049b31
cmp byte [eax + 0x108], 0
je 0x10049b31
cmp byte [eax + 0x128], 0
jne 0x10049b31
cmp byte [eax + 0x109], 0
jne 0x10049b31
movss xmm0, dword [eax + 0x74]
comiss xmm0, dword [0x100ff65c]
jbe 0x10049b31
movss xmm0, dword [eax + 0x80]
lea ecx, [ebp - 0x18]
subss xmm0, dword [esi + 0x80]
movss dword [ebp - 0x18], xmm0
call fcn.100d1220
movss xmm0, dword [ebp - 0x18]
divss xmm0, dword [ebp - 0x1c8]
comiss xmm0, dword [0x100ff904]
jbe 0x10049b2b
movups xmm0, xmmword [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
sub esp, 0x14
mov eax, esp
push 0x3d3
push 3
movups xmmword [eax], xmm0
push edi
mov dword [eax + 0x10], ecx
call fcn.1004a950
mov eax, dword [ebp - 0x1b8]
movss xmm1, dword [eax + 0x80]
mulss xmm1, dword [0x100ff6a0]
movaps xmm0, xmm1
call fcn.100ec5c0
mov eax, dword [ebp - 0x1b8]
movaps xmm5, xmm0
movaps xmm3, xmm5
movaps xmm0, xmm5
shufps xmm3, xmm5, 1
movaps xmm4, xmm3
movss xmm2, dword [eax + 0xe4]
movss xmm1, dword [eax + 0xe0]
mov eax, dword [ebx + 0x14]
mulss xmm4, xmm1
mulss xmm0, xmm2
mov eax, dword [eax + 0x30]
mov ecx, eax
shr ecx, 0xa
mov edx, eax
and ecx, 0xffffff01
mulss xmm5, xmm1
mov dword [ebp - 0x1c4], ecx
mov ecx, eax
movss xmm1, dword [0x100ff730]
addss xmm4, xmm0
shr ecx, 9
and ecx, 0xffffff01
mulss xmm3, xmm2
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x1b8]
shr edx, 3
shr eax, 4
subss xmm5, xmm3
and dl, 1
and al, 1
movss xmm2, dword [ecx + 0xf4]
comiss xmm2, xmm1
jb 0x10049c2d
test dl, dl
je 0x10049c2d
test al, al
jne 0x10049c2d
movss xmm0, dword [0x100ff98c]
comiss xmm0, xmm4
jbe 0x10049c2d
mov cl, 1
xor ah, ah
movss xmm1, dword [0x100ff740]
comiss xmm2, xmm1
mov edx, dword [ebp - 0x18]
jb 0x10049c49
cmp byte [ebp - 0x1c4], 0
je 0x10049c49
test dl, dl
jne 0x10049c49
movss xmm0, dword [0x100ff990]
comiss xmm0, xmm5
jbe 0x10049c49
mov al, 1
xor dl, dl
test cl, cl
jne 0x10049c69
test ah, ah
jne 0x10049c69
test al, al
jne 0x10049c69
test dl, dl
jne 0x10049c69
jmp 0x10049c6b
xor cl, cl
comiss xmm2, xmm1
jb 0x10049beb
test al, al
je 0x10049beb
test dl, dl
jne 0x10049beb
comiss xmm4, dword [0x100ff724]
jbe 0x10049beb
mov ah, 1
jmp 0x10049bed
xor al, al
comiss xmm2, xmm1
jb 0x10049c19
test dl, dl
je 0x10049c19
cmp byte [ebp - 0x1c4], al
jne 0x10049c19
comiss xmm5, dword [0x100ff72c]
jbe 0x10049c19
mov dl, 1
jmp 0x10049c1b
mov cl, 1
mov eax, dword [0x101a8db8]
add eax, 0xffffff71
xor eax, 0x42c8722c
mov byte [eax + edi], cl
mov eax, dword [ebp - 0x1b8]
mov dl, byte [esi + 0x108]
cmp byte [eax + 0x108], dl
jne 0x10049ca3
mov al, byte [eax + 0x128]
cmp al, byte [esi + 0x128]
jne 0x10049ca3
xor cl, cl
jmp 0x10049ca5
mov cl, 1
test dl, dl
je 0x10049d98
mov eax, dword [0x101a8ba0]
mov edx, dword [ebp - 0x1b8]
mov eax, dword [edi + eax]
cmp byte [edx + 0x109], 0
mov dword [ebp - 0x1c4], eax
jne 0x10049d0b
test cl, cl
je 0x10049d0b
movups xmm0, xmmword [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
sub esp, 0x14
mov eax, esp
movups xmmword [eax], xmm0
mov dword [eax + 0x10], ecx
xor eax, eax
movss xmm0, dword [edx + 0x110]
comiss xmm0, dword [0x100ff770]
seta al
add eax, 0x3dc
push eax
push 5
push edi
call fcn.1004a950
mov eax, dword [ebp - 0x1c4]
cmp byte [esi + 0x109], 0
je 0x10049d67
mov ecx, dword [0x101a8b5c]
mov eax, dword [eax + 0x130]
mov dword [ebp - 0x18], ecx
mov ecx, dword [0x101a8bb8]
mov dword [ebp - 0x1c0], eax
cmp dword [edi + ecx], 0
jne 0x10049d4a
mov eax, dword [0x101a8b38]
mov ecx, edi
call eax
mov ecx, dword [0x101a8bb8]
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [edi + ecx]
mov edx, eax
call dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1bc]
xor edx, edx
cmp eax, 0x3db
movzx ecx, cl
cmovne ecx, edx
jmp 0x10049d6d
mov ecx, dword [ebp - 0x1bc]
cmp byte [esi + 0x109], 0
jne 0x10049dc7
test cl, cl
jne 0x10049dc7
xorps xmm0, xmm0
comiss xmm0, dword [esi + 0x130]
jb 0x10049dc7
mov eax, dword [ebp - 0x1c4]
mov dword [eax + 0x138], 0
jmp 0x10049dc7
test cl, cl
je 0x10049dc7
cmp byte [ebp - 0x1bc], 0
jne 0x10049dc7
movups xmm0, xmmword [ebp - 0x28]
mov ecx, dword [ebp - 0x1ac]
sub esp, 0x14
mov eax, esp
push 0x3da
push 4
movups xmmword [eax], xmm0
push edi
mov dword [eax + 0x10], ecx
call fcn.1004a950
mov eax, dword [0x101a8ba0]
mov ecx, dword [0x101a8b5c]
mov dword [ebp - 0x1c4], ecx
mov ecx, dword [0x101a8bb8]
mov esi, dword [edi + eax]
cmp dword [edi + ecx], 0
mov eax, dword [esi + 0x280]
mov dword [ebp - 0x1c0], eax
jne 0x10049e08
mov eax, dword [0x101a8b38]
mov ecx, edi
call eax
mov ecx, dword [0x101a8bb8]
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [edi + ecx]
mov edx, eax
call dword [ebp - 0x1c4]
cmp eax, 0x3d5
jne 0x10049edf
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax + 0x64]
test ecx, ecx
je 0x10049e74
cmp ecx, dword [eax + 0x68]
je 0x10049e74
movss xmm0, dword [esi + 0x294]
sub esp, 0x14
mov ecx, dword [ebp - 0x1ac]
mov eax, esp
movss dword [ebp - 0x1c0], xmm0
movups xmm0, xmmword [ebp - 0x28]
push 0x3d5
push 0xb
movups xmmword [eax], xmm0
push edi
mov dword [eax + 0x10], ecx
call fcn.1004a950
movss xmm0, dword [ebp - 0x1c0]
movss dword [esi + 0x294], xmm0
jmp 0x10049edf
movss xmm0, dword [ebp - 0x1c8]
mulss xmm0, dword [esi + 0x290]
movss xmm1, dword [0x100ff770]
addss xmm0, dword [esi + 0x294]
comiss xmm1, xmm0
jbe 0x10049edf
movss xmm2, dword [eax + 0xf8]
subss xmm2, dword [0x100ff724]
mulss xmm2, dword [0x100ff840]
comiss xmm2, xmm1
seta al
test al, al
je 0x10049ec0
movaps xmm2, xmm1
jmp 0x10049ed0
xorps xmm0, xmm0
comiss xmm0, xmm2
seta al
test al, al
je 0x10049ed0
xorps xmm2, xmm2
movaps xmm0, xmm1
subss xmm0, xmm2
movss dword [esi + 0x288], xmm0
mov ecx, dword [ebp - 0x1b0]
test ecx, ecx
je 0x10049f0b
mov eax, dword [0x101a8d78]
add eax, 0xffffff81
xor eax, 0x42c8721c
mov eax, dword [eax + ecx]
mov ecx, dword [0x101a8a18]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov eax, dword [0x101a8ba0]
xorps xmm3, xmm3
xorps xmm1, xmm1
movss dword [ebp - 0x1bc], xmm1
mov ecx, dword [edi + eax]
mov dword [ebp - 0x1ac], ecx
movss xmm0, dword [ecx + 0x58]
lea edx, [ecx + 0x70]
comiss xmm0, xmm3
mov dword [ebp - 0x18], edx
jbe 0x1004a461
cmp dword [edx + 0x18], 0
ja 0x1004a195
push 0x10
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x30]
push str.recrouch_generic
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
call fcn.10025bd0
mov byte [ebp - 4], 3
lea esi, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [0x101ab4e4]
cmovae esi, dword [ebp - 0x30]
test al, 1
jne 0x1004a11e
or eax, 1
mov dword [0x101ab4e4], eax
mov byte [ebp - 4], 4
xor eax, eax
movaps xmm0, xmmword [0x10100060]
movaps xmm2, xmmword [0x100ffa80]
movups xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0x1f0], 0x4f29484f
movaps xmm0, xmmword [0x100ffd70]
movups xmmword [ebp - 0x200], xmm0
mov dword [ebp - 0x1ec], 0x3c3e294f
mov dword [ebp - 0x1e8], 0x9383829
nop dword [eax + eax]
movups xmm0, xmmword [ebp + eax - 0x210]
movaps xmm1, xmm2
pxor xmm1, xmm0
movups xmmword [ebp + eax - 0x210], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x10049fe0
cmp eax, 0x2c
jae 0x1004a012
xor byte [ebp + eax - 0x210], 9
inc eax
cmp eax, 0x2c
jb 0x1004a004
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1d4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004a040
sub ecx, edx
lea eax, [ebp - 0x210]
push ecx
push eax
lea ecx, [ebp - 0x1e4]
call fcn.10025bd0
mov byte [ebp - 4], 5
mov eax, dword [0x101a89cc]
test eax, eax
je 0x1004a06e
mov edx, dword [eax + 0x50]
jmp 0x1004a070
xor edx, edx
mov ecx, dword [0x101a89c4]
test ecx, ecx
je 0x1004a084
mov ecx, dword [ecx + 0x18]
mov eax, 3
jmp 0x1004a08b
mov eax, 5
xor ecx, ecx
mov dword [ebp - 0x1b4], eax
test al, 4
je 0x1004a09e
and eax, 0xfffffffb
mov dword [ebp - 0x1b4], eax
test al, 2
je 0x1004a0ab
and eax, 0xfffffffd
mov dword [ebp - 0x1b4], eax
lea eax, [ebp - 0x1e4]
push eax
push ecx
lea ecx, [ebp - 0x1b0]
call fcn.10030b00
mov eax, dword [ebp - 0x1b0]
add esp, 8
test eax, eax
je 0x1004a0d9
mov ecx, dword [eax + 1]
test ecx, ecx
je 0x1004a0d9
add eax, 5
add eax, ecx
jne 0x1004a0db
xor eax, eax
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1d0]
mov dword [0x101ab4e8], eax
cmp edx, 0x10
jb 0x1004a11a
mov ecx, dword [ebp - 0x1e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004a110
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a185
push edx
push ecx
call fcn.100eb980
add esp, 8
mov byte [ebp - 4], 3
mov eax, dword [0x101ab4e8]
mov ecx, edi
push esi
call eax
mov ecx, dword [edi]
mov esi, eax
push esi
push dword [ebp - 0x18]
mov ecx, dword [ecx + 0x364]
mov dword [ebp - 0x1b0], ecx
mov ecx, edi
call dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x18], esi
mov dword [eax + 0x20], 0
mov dword [eax + 0x2c], 0
fstp dword [eax + 0x28]
cmp edx, 0x10
jb 0x1004a195
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004a18b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004a18b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100eb980
add esp, 8
push 6
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x30]
push str.crouch
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
call fcn.10025bd0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x1ac]
mov esi, dword [eax + 0x50]
mov eax, dword [0x101a8bb8]
cmp dword [edi + eax], 0
jne 0x1004a1e3
mov eax, dword [0x101a8b38]
mov ecx, edi
call eax
mov eax, dword [0x101a8bb8]
mov edi, dword [edi + eax]
cmp dword [edi + 4], 0
jne 0x1004a20b
mov ecx, dword [edi]
test esi, esi
js 0x1004a1fa
cmp esi, dword [ecx + 0xbc]
jl 0x1004a1fc
xor esi, esi
mov eax, dword [ecx + 0xc0]
add eax, ecx
add eax, esi
jmp 0x1004a318
mov eax, dword [0x101ab588]
test al, 1
jne 0x1004a30f
or eax, 1
mov dword [0x101ab588], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1e4]
push 0x60
mov dword [ebp - 0x1e4], 0
push str.55_8B_EC_83_79_04_00_75_25_8B_45_08_8B_09_85_C0_78_08_3B_81_________7C_02_33_C0_69_C0_________03
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
call fcn.10025bd0
mov byte [ebp - 4], 8
mov eax, dword [0x101a89cc]
test eax, eax
je 0x1004a26d
mov edx, dword [eax + 0x50]
jmp 0x1004a26f
xor edx, edx
mov ecx, dword [0x101a89c4]
mov eax, dword [ebp - 0x1b4]
test ecx, ecx
je 0x1004a287
mov ecx, dword [ecx + 0x18]
or eax, 8
jmp 0x1004a28c
or eax, 0x10
xor ecx, ecx
mov dword [ebp - 0x1b4], eax
test al, 0x10
je 0x1004a29f
and eax, 0xffffffef
mov dword [ebp - 0x1b4], eax
test al, 8
je 0x1004a2ac
and eax, 0xfffffff7
mov dword [ebp - 0x1b4], eax
lea eax, [ebp - 0x1e4]
push eax
push ecx
lea ecx, [ebp - 0x1b0]
call fcn.10030b00
mov eax, dword [ebp - 0x1b0]
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1d0]
mov dword [0x101ab584], eax
cmp ecx, 0x10
jb 0x1004a30b
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a301
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a43b
push ecx
push edx
call fcn.100eb980
add esp, 8
mov byte [ebp - 4], 6
push esi
mov ecx, edi
call dword [0x101ab584]
mov ecx, dword [eax + 0xbc]
xor esi, esi
mov dword [ebp - 0x1b0], ecx
test ecx, ecx
mov ecx, dword [ebp - 0x30]
jle 0x1004a39e
mov edx, dword [eax + 0xb8]
mov dword [ebp - 0x1c0], edx
lea edi, [edx + eax]
nop dword [eax]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
cmovae eax, ecx
xor ecx, ecx
test edx, edx
cmovne ecx, edi
mov edx, dword [ecx]
test edx, edx
je 0x1004a35b
add ecx, edx
jmp 0x1004a360
xor ecx, ecx
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x1004a380
test dl, dl
je 0x1004a37c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x1004a380
add ecx, 2
add eax, 2
test dl, dl
jne 0x1004a360
xor eax, eax
jmp 0x1004a385
sbb eax, eax
or eax, 1
test eax, eax
je 0x1004a3c9
mov ecx, dword [ebp - 0x30]
inc esi
mov edx, dword [ebp - 0x1c0]
add edi, 4
cmp esi, dword [ebp - 0x1b0]
jl 0x1004a340
mov esi, dword [ebp - 0x1cc]
xorps xmm3, xmm3
mov ecx, dword [ebp - 0x1ac]
movss xmm1, dword [esi + 0xa4]
comiss xmm1, xmm3
jbe 0x1004a403
mulss xmm1, dword [ecx + 0x58]
movss dword [ebp - 0x1bc], xmm1
jmp 0x1004a40b
mov esi, dword [ebp - 0x1cc]
xorps xmm3, xmm3
movss xmm0, dword [0x100ff770]
mov ecx, dword [ebp - 0x1ac]
movss xmm2, dword [esi + 0xa4]
comiss xmm0, xmm2
jbe 0x1004a403
movaps xmm1, xmm0
subss xmm1, xmm2
mulss xmm1, dword [ecx + 0x58]
movss dword [ebp - 0x1bc], xmm1
jmp 0x1004a40b
movss xmm1, dword [ebp - 0x1bc]
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1c]
cmp eax, 0x10
jb 0x1004a4c2
mov edx, dword [ebp - 0x30]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a441
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004a441
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100eb980
movss xmm1, dword [ebp - 0x1bc]
add esp, 8
mov ecx, dword [ebp - 0x1ac]
xorps xmm3, xmm3
mov edx, dword [ebp - 0x18]
jmp 0x1004a4cd
movss xmm2, dword [edx + 0x20]
comiss xmm2, xmm3
jbe 0x1004a4c7
movss xmm6, dword [ebp - 0x1c8]
movaps xmm4, xmm2
movss xmm5, dword [0x10100b10]
movaps xmm1, xmm6
mulss xmm1, dword [0x100ff85c]
xorps xmm4, xmm5
comiss xmm4, xmm1
jbe 0x1004a49d
mov esi, dword [ebp - 0x1cc]
addss xmm1, xmm2
jmp 0x1004a4d5
movaps xmm0, xmm1
xorps xmm0, xmm5
comiss xmm0, xmm4
jbe 0x1004a4b7
mov esi, dword [ebp - 0x1cc]
subss xmm2, xmm1
movaps xmm1, xmm2
jmp 0x1004a4d5
mov esi, dword [ebp - 0x1cc]
xorps xmm1, xmm1
jmp 0x1004a4d5
lea edx, [ecx + 0x70]
jmp 0x1004a4cd
mov esi, dword [ebp - 0x1cc]
movss xmm6, dword [ebp - 0x1c8]
movss xmm2, dword [0x100ff770]
comiss xmm1, xmm2
seta al
test al, al
je 0x1004a4ec
movaps xmm1, xmm2
jmp 0x1004a4f9
comiss xmm3, xmm1
seta al
test al, al
je 0x1004a4f9
xorps xmm1, xmm1
mov eax, dword [ebp - 0x1b8]
movss dword [edx + 0x20], xmm1
cmp dword [eax + 0x60], 0
je 0x1004a55a
movss xmm1, dword [ecx + 0x60]
movaps xmm0, xmm1
call fcn.1001cdd0
comiss xmm3, xmm0
jae 0x1004a55a
mulss xmm1, xmm6
addss xmm1, dword [ecx + 0x64]
comiss xmm1, xmm2
jb 0x1004a532
movss xmm1, dword [0x100ff768]
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
comiss xmm3, xmm1
jbe 0x1004a54c
addss xmm1, xmm2
jmp 0x1004a555
comiss xmm1, xmm2
jbe 0x1004a555
subss xmm1, xmm2
movss dword [ecx + 0x64], xmm1
movss xmm0, dword [ecx + 0x60]
mulss xmm0, dword [esi + 0x74]
movss xmm1, dword [ecx + 0x64]
subss xmm1, xmm0
comiss xmm1, xmm2
seta al
test al, al
je 0x1004a57c
movaps xmm3, xmm2
jmp 0x1004a589
comiss xmm3, xmm1
seta al
test al, al
jne 0x1004a589
movaps xmm3, xmm1
movss xmm0, dword [ecx + 0x5c]
movss xmm1, dword [ecx + 0x58]
movss dword [ecx + 0x64], xmm3
mulss xmm0, dword [esi + 0x74]
subss xmm1, xmm0
comiss xmm1, xmm2
seta al
test al, al
jne 0x1004a5c0
movss xmm2, dword [0x100ff668]
comiss xmm2, xmm1
seta al
test al, al
jne 0x1004a5c0
movaps xmm2, xmm1
movss dword [ecx + 0x58], xmm2
mov dword [0x101433b4], 0
mov dword [ebp - 4], 9
cmp dword [ebp - 0x3c], 0
jl 0x1004a5f1
mov edx, dword [ebp - 0x44]
test edx, edx
je 0x1004a5f1
mov ecx, dword [0x101a8a94]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100eb505
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10