Function at 0x408a50
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
cmp byte [0x648d88], 0
push esi
jne 0x408c30
mov ecx, dword [0x648d90]
movss xmm1, dword [0x515c08]
mov dword [ebp - 4], 0xff66cc33
mov eax, dword [ecx + 0x3e78]
mov byte [eax + 0xac], 1
movsx eax, word [0x6414b8]
mov ecx, dword [ecx + 0x3e78]
sub eax, 0xf0
movd xmm0, eax
movsx eax, word [0x6414ba]
cvtdq2pd xmm0, xmm0
movss xmm2, dword [ecx + 0x18]
mulsd xmm0, qword [0x515c30]
subss xmm2, dword [ecx + 0x7c]
cvtpd2ps xmm3, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mov byte [ecx + 0x131], 1
addss xmm3, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movss dword [ecx + 0xf0], xmm3
mulsd xmm0, qword [0x515c30]
cvtpd2ps xmm0, xmm0
addss xmm2, xmm0
movss dword [ecx + 0xf4], xmm2
mov ecx, 0x15
call fcn.0040e9c0
mov dword [ebp - 8], eax
mov cl, 0xd
mov dword [ebp - 0x10], 0x43700000
xor eax, eax
mov dword [ebp - 0xc], 0x40e00000
mov dword [ebp - 0x20], 0x6f2e2e0d
mov dword [ebp - 0x1c], 0x686b6b78
mov dword [ebp - 0x18], 0x6c6f527f
mov word [ebp - 0x14], 0x7f
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xc
jae 0x408b43
mov cl, byte [ebp - 0x20]
jmp 0x408b34
movss xmm1, dword [0x648d8c]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
mov byte [ebp - 0x13], 0
push eax
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x1f]
call fcn.00408dc0
movss xmm0, dword [0x648d8c]
add esp, 8
movss xmm1, dword [0x515c08]
comiss xmm1, xmm0
jb 0x408b91
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x515c10]
cvtpd2ps xmm0, xmm0
movss dword [0x648d8c], xmm0
comiss xmm0, dword [0x515ba4]
jb 0x408dac
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x649070]
cmp eax, dword [ecx + 0x18]
jle 0x408beb
push 0x649070
call fcn.004b422a
add esp, 4
cmp dword [0x649070], 0xffffffff
jne 0x408beb
push 0
push 0
push 0
push 0x4073a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x649070
call fcn.004b41d9
add esp, 4
mov edx, dword [0x641550]
test edx, edx
je 0x408dac
mov ecx, 0x641484
mov byte [0x648d88], 1
cmp ecx, 0x641540
je 0x408dac
cmp dword [0x641554], 0x10
mov eax, 0x641540
push edx
cmovae eax, dword [0x641540]
push eax
call fcn.00402ce0
pop esi
mov esp, ebp
pop ebp
ret
movsx eax, word [0x6414b8]
mov esi, dword [0x648d90]
movss xmm4, dword [0x515bc8]
movd xmm2, eax
movsx eax, word [0x6414ba]
cvtdq2ps xmm2, xmm2
movd xmm3, eax
mov eax, dword [esi + 0x3e78]
cvtdq2ps xmm3, xmm3
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e78]
mulss xmm2, xmm4
mulss xmm3, xmm4
movss xmm1, dword [eax + 0x14]
movss xmm0, dword [eax + 0x18]
subss xmm1, dword [eax + 0x78]
subss xmm0, dword [eax + 0x7c]
mov byte [eax + 0x131], 1
movss dword [ebp - 8], xmm2
movss dword [ebp - 4], xmm3
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [eax + 0xf0], xmm1
movss dword [eax + 0xf4], xmm0
mov eax, 0x641484
cmp dword [0x641498], 0x10
movss xmm1, dword [esi + 0x3be0]
cmovae eax, dword [0x641484]
test eax, eax
jne 0x408cd6
xorps xmm0, xmm0
jmp 0x408d2b
movss xmm3, dword [0x515cb0]
movaps xmm2, xmm1
push ecx
push 0
push eax
push ecx
mov ecx, dword [esi + 0x3bdc]
lea eax, [ebp - 0x10]
mov dword [esp], 0xbf800000
push eax
call fcn.004334c0
movss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x515c00]
movss xmm1, dword [ebp - 0xc]
movss xmm2, dword [ebp - 8]
movss xmm3, dword [ebp - 4]
movss xmm4, dword [0x515bc8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov eax, dword [esi + 0x3e78]
mulss xmm0, xmm4
mulss xmm1, xmm4
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e78]
subss xmm2, xmm0
subss xmm3, xmm1
movss xmm0, dword [eax + 0x14]
subss xmm0, dword [eax + 0x78]
addss xmm2, xmm0
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x7c]
mov byte [eax + 0x131], 1
movss dword [eax + 0xf0], xmm2
addss xmm0, xmm3
movss dword [eax + 0xf4], xmm0
mov eax, 0x641484
cmp dword [0x641498], 0x10
movaps xmm0, xmmword [0x515e60]
cmovae eax, dword [0x641484]
push eax
lea eax, [ebp - 0x20]
push eax
movups xmmword [ebp - 0x20], xmm0
call fcn.004359a0
add esp, 8
pop esi
mov esp, ebp
pop ebp
ret