Function at 0x1009d440
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b7d7e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1d8
mov eax, dword [0x100d99c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 0xc]
mov edi, dword [ebx + 8]
mov dword [ebp - 0x120], eax
mov eax, dword [0x100fa450]
mov dword [ebp - 0x104], edi
mov dword [ebp - 0xf4], 0
test al, 1
jne 0x1009d4e0
or eax, 1
mov dword [0x100fa450], eax
mov eax, dword [0x100f6b88]
mov dword [0x100fa43c], eax
mov dword [0x100fa440], 0
mov dword [0x100fa444], 0
mov dword [0x100fa448], 0
mov dword [0x100fa44c], 0
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x110], 4
lea eax, [ebp - 0x74]
movss dword [ebp - 0x100], xmm0
push 0
push eax
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call sub.VCRUNTIME140.dll_memset
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
lea eax, [ebp - 0xcc]
push 0
push eax
movups xmmword [ebp - 0x98], xmm0
movups xmmword [ebp - 0x88], xmm0
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi]
xorps xmm0, xmm0
mov eax, dword [0x100f6b74]
add esp, 0x18
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xd0], 0
movups xmmword [ebp - 0xe0], xmm0
mov al, byte [ecx + eax]
test al, al
je 0x1009d5c2
mov eax, dword [0x100c7488]
mov ecx, dword [0x100c7490]
movss xmm4, dword [0x100c7138]
movss xmm5, dword [0x100c713c]
movss xmm6, dword [0x100c7140]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x10c], ecx
jmp 0x1009d61d
mov eax, dword [0x100f6cb8]
add eax, 0xffffff9f
xor eax, 0x920a4914
mov eax, dword [eax + ecx]
mov ecx, dword [0x100f69a0]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov dword [ebp - 0x108], eax
test eax, eax
je 0x1009e100
mov ecx, dword [eax]
mov edx, dword [ecx + 0x6f8]
mov ecx, eax
call edx
mov ecx, eax
mov dword [ebp - 0x10c], ecx
test ecx, ecx
je 0x1009e100
movss xmm4, dword [edi + 0x20]
movss xmm5, dword [edi + 0x24]
movss xmm6, dword [edi + 0x28]
movss dword [ebp - 0x114], xmm6
lea eax, [ebp - 0x158]
movss dword [ebp - 0x118], xmm5
lea esi, [ebp - 0x154]
movss dword [ebp - 0x11c], xmm4
movd xmm0, dword [ecx + 0xec]
movss xmm1, dword [ecx + 0xf8]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x158], 0
movss xmm2, dword [edi + 8]
movss dword [ebp - 0xf8], xmm0
subss xmm2, xmm4
movss xmm0, dword [0x100bd8f0]
divss xmm0, xmm1
movss xmm3, dword [edi + 0xc]
comiss xmm0, dword [ebp - 0x100]
movss xmm7, dword [edi + 0x10]
subss xmm3, xmm5
movss dword [ebp - 0x154], xmm0
subss xmm7, xmm6
movss dword [ebp - 0x130], xmm1
movaps xmm0, xmm2
mulss xmm0, xmm2
cmovbe esi, eax
mov eax, dword [edi]
movaps xmm1, xmm3
mov dword [0x100fa440], eax
mulss xmm1, xmm3
mov eax, dword [0x100c712c]
mov dword [0x100fa44c], eax
addss xmm1, xmm0
movaps xmm0, xmm7
mulss xmm0, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
sqrtss xmm0, xmm1
addss xmm0, dword [0x100bb54c]
divss xmm2, xmm0
divss xmm3, xmm0
divss xmm7, xmm0
movss xmm0, dword [ebp - 0xf8]
comiss xmm0, dword [ebp - 0x100]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x18], xmm7
jbe 0x1009e100
movss xmm0, dword [ecx + 0x104]
movaps xmm1, xmm5
subss xmm0, dword [ebp - 0x128]
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 0x19b], 1
mulss xmm2, xmm0
mulss xmm3, xmm0
mulss xmm7, xmm0
movss dword [ebp - 0x124], xmm0
addss xmm1, xmm3
movaps xmm0, xmm4
movaps xmm3, xmm6
addss xmm0, xmm2
addss xmm3, xmm7
movss dword [ebp - 0x38], xmm1
movaps xmm2, xmm0
movss dword [ebp - 0x12c], xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x34], xmm3
subss xmm2, xmm4
movaps xmm1, xmm3
subss xmm0, xmm5
subss xmm1, xmm6
movss dword [ebp - 0x1d0], xmm2
movss dword [ebp - 0x1cc], xmm0
mulss xmm2, xmm2
mulss xmm0, xmm0
movss dword [ebp - 0x1c8], xmm1
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
ucomiss xmm2, dword [ebp - 0x100]
lahf
test ah, 0x44
jp 0x1009d7c5
mov byte [ebp - 0x19b], 0
mov ecx, dword [0x100f69b8]
lea edx, [ebp - 0x98]
push edx
mov dword [ebp - 0x1a0], 0
lea edx, [ebp - 0x1e0]
mov byte [ebp - 0x19c], 1
movss dword [ebp - 0x1e0], xmm4
movss dword [ebp - 0x1dc], xmm5
movss dword [ebp - 0x1d8], xmm6
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
mov eax, dword [ecx]
push 0x100fa43c
push 0x4600400b
push edx
mov eax, dword [eax + 0x14]
call eax
mov eax, dword [edi + 4]
test eax, eax
je 0x1009d8e1
movss xmm1, dword [0x100bc350]
movss xmm0, dword [ebp - 0x20]
mulss xmm0, xmm1
push ecx
mov dword [esp], 0xc2700000
push eax
addss xmm0, dword [ebp - 0x12c]
lea eax, [ebp - 0x98]
push eax
push 0x4600400b
lea eax, [ebp - 0x168]
movss dword [ebp - 0x168], xmm0
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, xmm1
push eax
lea eax, [ebp - 0x11c]
push eax
addss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x18]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x160], xmm0
call fcn.1009bba0
add esp, 0x18
jmp 0x1009db0b
movss xmm3, dword [0x100bc350]
lea eax, [ebp - 0x98]
movss xmm1, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x20]
movss xmm0, dword [ebp - 0x18]
mulss xmm1, xmm3
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x174]
mulss xmm2, xmm3
mov dword [ebp - 0x24], 0xc2700000
addss xmm1, dword [ebp - 0x38]
mulss xmm0, xmm3
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x11c]
addss xmm2, dword [ebp - 0x12c]
mov dword [ebp - 0x3c], 0x100fa43c
addss xmm0, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [0x100fa3f4]
movss dword [ebp - 0x174], xmm2
movss dword [ebp - 0x170], xmm1
movss dword [ebp - 0x16c], xmm0
test al, 1
jne 0x1009dae5
or eax, 1
mov dword [0x100fa3f4], eax
movaps xmm0, xmmword [0x100bb620]
mov eax, 0x10
pxor xmm0, xmmword [0x100bd900]
mov dword [ebp - 4], 0
mov dword [ebp - 0x140], 0x8c989d8c
mov dword [ebp - 0x13c], 0x998ced94
mov dword [ebp - 0x138], 0x9b9f8c9a
mov byte [ebp - 0x134], 0xac
movups xmmword [ebp - 0x150], xmm0
xor byte [ebp + eax - 0x150], 0xac
inc eax
cmp eax, 0x1d
jb 0x1009d9b3
xorps xmm0, xmm0
mov dword [ebp - 0x17c], 0
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x178], 0
movups xmmword [ebp - 0x18c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009d9e8
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x18c]
call fcn.1001d5b0
mov eax, dword [0x100f6954]
mov byte [ebp - 4], 1
test eax, eax
je 0x1009da16
mov edi, dword [eax + 0x50]
jmp 0x1009da18
xor edi, edi
mov eax, dword [0x100f694c]
mov ecx, dword [ebp - 0xf4]
test eax, eax
je 0x1009da2f
mov edx, dword [eax + 0x18]
or ecx, 1
jmp 0x1009da34
or ecx, 2
xor edx, edx
mov eax, ecx
mov dword [ebp - 0xf4], ecx
and ecx, 0xfffffffd
test al, 2
cmove ecx, eax
mov dword [ebp - 0xf4], ecx
and dword [ebp - 0xf4], 0xfffffffe
test cl, 1
mov eax, dword [ebp - 0xf4]
cmove eax, ecx
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x18c]
push eax
push edi
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.10025d70
mov eax, dword [ebp - 0x15c]
add esp, 0x10
test eax, eax
je 0x1009da95
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x1009da90
xor eax, eax
jmp 0x1009da95
add eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x178]
mov dword [0x100fa3f0], eax
mov byte [ebp - 4], 0
cmp ecx, 0x10
jb 0x1009dad8
mov edx, dword [ebp - 0x18c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1009dace
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1009e06a
push ecx
push edx
call fcn.100ae001
add esp, 8
mov edi, dword [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x100fa3f0], 0
je 0x1009db0b
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x24]
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push 0x4600400b
call dword [0x100fa3f0]
add esp, 0x10
movss xmm1, dword [ebp - 0x6c]
mulss xmm1, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
addss xmm1, dword [ebp - 0x128]
movss xmm0, dword [eax + 0x108]
movss dword [ebp - 0x34], xmm1
mulss xmm1, dword [0x100bd8d4]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_powf
mulss xmm0, dword [ebp - 0xf8]
mov ecx, dword [edi + 4]
movaps xmm1, xmm0
movss dword [ebp - 0xf8], xmm1
test ecx, ecx
je 0x1009dc11
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x1009dd7b
cmp eax, ecx
jne 0x1009dd7b
mov edi, dword [ebp - 0x54]
cmp edi, 1
jl 0x1009db7e
cmp edi, 7
jle 0x1009db87
cmp edi, 0xa
jne 0x1009dd75
mov eax, dword [0x100f6cd0]
mov esi, 4
mov edx, dword [ebp - 0x108]
add eax, 0xffffff99
xor eax, 0x920a491a
cmp dword [eax + edx], 0x1f
mov eax, dword [ebp - 0x10c]
cmove edi, esi
push edi
sub esp, 8
movss xmm0, dword [eax + 0xf0]
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push ecx
call fcn.1009e120
mov ecx, dword [ebp - 0x104]
add esp, 0x10
cmp dword [ebp - 0x110], esi
mov esi, dword [ebp - 0x120]
fstp dword [ebp - 0x108]
movss xmm0, dword [ebp - 0x108]
setne al
mov byte [esi + 0xc], al
mov dword [esi + 8], edi
movss dword [esi + 4], xmm0
mov eax, dword [ecx + 4]
mov dword [esi], eax
jne 0x1009e070
comiss xmm0, dword [ecx + 0x14]
setae al
jmp 0x1009e102
cmp dword [ebp - 0x110], 4
mov ecx, dword [ebp - 0x120]
setne al
mov byte [ecx + 0xc], al
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x1009dc5b
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1009dc53
mov edi, dword [ebp - 0x54]
cmp edi, 1
jl 0x1009dc4a
cmp edi, 7
jle 0x1009e07c
cmp edi, 0xa
je 0x1009e07c
movss xmm1, dword [ebp - 0xf8]
mov eax, dword [0x100f6c50]
movaps xmm4, xmm1
mov edx, dword [0x100c712c]
add eax, 0xffffffb9
mulss xmm4, dword [0x100bbc20]
xor eax, 0x920a48fa
movss xmm0, dword [0x100bb564]
mov cl, byte [eax + edx]
mov eax, dword [0x100f6c64]
add eax, 0xffffffb4
xor eax, 0x920a48ff
mov edi, dword [eax + edx]
test cl, cl
je 0x1009dc9c
mulss xmm4, xmm0
mov eax, dword [0x100f6c48]
movd xmm3, edi
add eax, 0xffffffbb
cvtdq2ps xmm3, xmm3
xor eax, 0x920a48f8
mov al, byte [eax + edx]
comiss xmm3, dword [ebp - 0x100]
jbe 0x1009dd20
test al, al
jne 0x1009dcc4
test cl, cl
je 0x1009dd20
test cl, cl
je 0x1009dce2
movss xmm2, dword [0x100bd8ec]
movss xmm5, dword [0x100bd8dc]
movss xmm1, dword [0x100bd8e4]
jmp 0x1009dcf0
movss xmm2, dword [0x100bb5a0]
movaps xmm5, xmm0
movaps xmm1, xmm0
mov eax, dword [ebp - 0x10c]
movaps xmm0, xmm4
mulss xmm1, dword [eax + 0xf0]
mulss xmm1, xmm4
subss xmm0, xmm1
mulss xmm0, xmm5
comiss xmm0, xmm3
jbe 0x1009dd1d
mulss xmm2, xmm3
movaps xmm1, xmm4
subss xmm1, xmm2
movaps xmm4, xmm1
movss xmm3, dword [0x100bc358]
movaps xmm0, xmm4
movss xmm1, dword [0x100bc354]
andps xmm3, xmm4
xorps xmm0, xmm3
mov eax, dword [ebp - 0x120]
cmpltss xmm0, xmm1
movaps xmm2, xmm4
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movss xmm1, dword [0x100bb590]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
movss dword [eax + 4], xmm2
mov edi, dword [ebp - 0x104]
movss xmm1, dword [edi + 8]
movss xmm2, dword [edi + 0xc]
subss xmm2, dword [ebp - 0x118]
subss xmm1, dword [ebp - 0x11c]
movss xmm0, dword [edi + 0x10]
subss xmm0, dword [ebp - 0x114]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
movss xmm1, dword [ebp - 0x34]
addss xmm2, xmm0
xorps xmm0, xmm0
sqrtss xmm0, xmm2
comiss xmm1, xmm0
ja 0x1009e0fc
cmp byte [edi + 0x1c], 0
je 0x1009e100
mov ecx, dword [0x100f69dc]
movsx edx, word [ebp - 0x58]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movss xmm0, dword [ebp - 0x34]
mov edx, eax
comiss xmm0, dword [0x100bd8f8]
mov dword [ebp - 0x3c], edx
movss xmm1, dword [ebp - 0x130]
movss xmm0, dword [ebp - 0x100]
jbe 0x1009de17
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1009e100
movss xmm2, dword [0x100bb558]
comiss xmm2, dword [edx + 0x58]
ja 0x1009e100
mov al, byte [ebp - 0x56]
mov ecx, dword [ebp - 0x68]
movzx edi, word [edx + 0x60]
mov edx, dword [ebp - 0x110]
shr al, 7
shr ecx, 3
and al, 1
and ecx, 0xffffff01
mov byte [ebp - 0xf9], al
mov dword [ebp - 0x124], ecx
test edx, edx
jne 0x1009de6d
test al, al
jne 0x1009de6d
test cl, cl
jne 0x1009de6d
cmp edi, 0x47
je 0x1009de6d
cmp edi, 0x59
jne 0x1009e100
comiss xmm0, xmm1
jae 0x1009e100
test edx, edx
jle 0x1009e100
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.1009bf90
add esp, 0x14
test al, al
jne 0x1009dec9
mov ecx, dword [0x100f69b8]
lea edx, [ebp - 0x30]
push 0
push 0x600400b
push edx
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
test eax, 0x600400b
je 0x1009e100
mov ecx, dword [0x100f69dc]
movsx edx, word [ebp - 0xb0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movzx edx, word [eax + 0x60]
mov ecx, edx
cmp edi, 0x47
je 0x1009df31
cmp edi, 0x59
je 0x1009df31
cmp byte [ebp - 0xf9], 0
jne 0x1009df17
cmp byte [ebp - 0x124], 0
jne 0x1009df17
movss xmm3, dword [eax + 0x58]
mov eax, dword [ebp - 0x3c]
addss xmm3, dword [eax + 0x58]
mulss xmm3, dword [0x100bb564]
jmp 0x1009df1f
movss xmm3, dword [0x100bb590]
movss xmm7, dword [0x100bd8e0]
movss xmm0, dword [0x100bb5a4]
jmp 0x1009df44
movss xmm0, dword [0x100bb5a4]
movss xmm7, dword [0x100bd504]
movaps xmm3, xmm0
cmp edi, ecx
jne 0x1009df64
cmp ecx, 0x55
je 0x1009df61
cmp ecx, 0x57
je 0x1009df61
cmp edx, 0x4c
jne 0x1009df64
movss xmm3, dword [0x100bb5a0]
jmp 0x1009df64
movaps xmm3, xmm0
movss xmm4, dword [ebp - 0xe4]
movss xmm5, dword [ebp - 0xe0]
movaps xmm1, xmm4
subss xmm1, dword [ebp - 0x8c]
movss xmm6, dword [ebp - 0xdc]
movaps xmm2, xmm5
subss xmm2, dword [ebp - 0x88]
movaps xmm0, xmm6
mulss xmm7, dword [ebp - 0xf8]
subss xmm0, dword [ebp - 0x84]
mulss xmm1, xmm1
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
sqrtss xmm0, xmm2
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100bb590]
divss xmm0, xmm3
maxss xmm0, dword [ebp - 0x100]
movaps xmm1, xmm0
mulss xmm2, xmm0
mulss xmm1, dword [0x100bb5a4]
mulss xmm2, dword [0x100bd8d8]
mulss xmm1, dword [esi]
movss xmm0, dword [ebp - 0xf8]
addss xmm1, xmm7
addss xmm1, xmm2
maxss xmm1, dword [ebp - 0x100]
subss xmm0, xmm1
movss xmm1, dword [0x100bb590]
comiss xmm1, xmm0
movss dword [ebp - 0xf8], xmm0
ja 0x1009e100
dec dword [ebp - 0x110]
movss xmm7, dword [ebp - 0x18]
movss xmm3, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x20]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x10c]
movss dword [ebp - 0x11c], xmm4
movss dword [ebp - 0x118], xmm5
movss dword [ebp - 0x114], xmm6
jmp 0x1009d714
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
comiss xmm0, dword [ecx + 0x18]
setae al
jmp 0x1009e102
mov eax, dword [0x100f6cd0]
mov ecx, 4
mov edx, dword [ebp - 0x108]
add eax, 0xffffff99
mov esi, dword [ebp - 0x4c]
xor eax, 0x920a491a
cmp dword [eax + edx], 0x1f
mov eax, dword [ebp - 0x10c]
cmove edi, ecx
push edi
sub esp, 8
movss xmm0, dword [eax + 0xf0]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0xf8]
movss dword [esp], xmm0
push esi
call fcn.1009e120
mov eax, dword [ebp - 0x120]
add esp, 0x10
mov ecx, dword [ebp - 0x104]
cmp dword [ebp - 0x110], 4
fstp dword [ebp - 0x108]
movss xmm0, dword [ebp - 0x108]
mov dword [eax + 8], edi
movss dword [eax + 4], xmm0
mov dword [eax], esi
jmp 0x1009dbff
mov al, 1
jmp 0x1009e102
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100ae337
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret