Function at 0x10043460
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x78
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, ecx
mov dword [ebp - 0x30], eax
push esi
push edi
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
add ecx, 4
mov eax, dword [eax + 0x20]
call eax
test eax, eax
je 0x10043af3
mov ecx, dword [0x100e896c]
push eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x80]
call edx
mov dword [ebp - 0x38], eax
test eax, eax
je 0x10043af3
xor esi, esi
xor edx, edx
mov dword [ebp - 0x14], esi
test edx, edx
je 0x100434d6
cmp edx, 2
je 0x100434d6
cmp edx, 5
jne 0x10043ae4
mov edi, dword [eax + 0xb0]
add edi, eax
je 0x10043ae4
mov eax, dword [edi + 8]
mov ecx, edx
shl ecx, 4
add ecx, edx
lea ecx, [eax + ecx*4]
add ecx, edi
mov dword [ebp - 0x20], ecx
je 0x10043ae1
mov eax, dword [ecx]
movss xmm0, dword [ecx + 0x30]
mov edx, dword [ebp - 0x30]
movss dword [ebp - 0x1c], xmm0
lea edi, [eax + eax*2]
shl edi, 4
ucomiss xmm0, dword [0x1008d7f8]
mov edx, dword [edx + 4]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x18], edx
lahf
test ah, 0x44
jp 0x1004352f
xorps xmm0, xmm0
movss dword [ebp - 0x1c], xmm0
mov ecx, dword [0x100e42e0]
mov edi, dword fs:[0x2c]
mov eax, dword [0x100e86d0]
mov edx, dword [edi + ecx*4]
mov edi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
cmp eax, dword [edx + 4]
mov edx, dword [ebp - 0x18]
jle 0x10043598
push 0x100e86d0
call fcn.1007bfd7
mov eax, dword [0x100e86d0]
add esp, 4
cmp eax, 0xffffffff
jne 0x10043592
push 0x10082a70
mov byte [0x100e86fc], 0
call fcn.1007be5e
add esp, 4
push 0x100e86d0
call fcn.1007bf8d
mov eax, dword [0x100e86d0]
add esp, 4
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
movss xmm5, dword [ebp - 0x1c]
movaps xmm2, xmm5
movaps xmm3, xmm5
addss xmm3, dword [ecx + 0x18]
addss xmm2, dword [ecx + 0x14]
movaps xmm1, xmm5
addss xmm1, dword [ecx + 0x1c]
movaps xmm0, xmm3
mulss xmm0, dword [edi + edx + 0xc]
movaps xmm4, xmm2
mulss xmm4, dword [edi + edx + 8]
addss xmm4, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [edi + edx + 0x10]
addss xmm4, xmm0
movaps xmm0, xmm2
mulss xmm0, dword [edi + edx + 0x18]
mulss xmm2, dword [edi + edx + 0x28]
addss xmm4, dword [edi + edx + 0x14]
movss dword [ebp - 0x34], xmm4
movaps xmm4, xmm3
mulss xmm4, dword [edi + edx + 0x1c]
mulss xmm3, dword [edi + edx + 0x2c]
addss xmm4, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [edi + edx + 0x20]
mulss xmm1, dword [edi + edx + 0x30]
addss xmm3, xmm2
addss xmm4, xmm0
addss xmm3, xmm1
addss xmm4, dword [edi + edx + 0x24]
addss xmm3, dword [edi + edx + 0x34]
mov edx, dword [0x100e42e0]
mov edi, dword fs:[0x2c]
movss dword [ebp - 0x2c], xmm4
movss dword [ebp - 0x24], xmm3
mov ecx, dword [edi + edx*4]
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x20]
jle 0x1004369f
push 0x100e86d0
call fcn.1007bfd7
mov eax, dword [0x100e86d0]
add esp, 4
cmp eax, 0xffffffff
jne 0x10043694
push 0x10082a70
mov byte [0x100e86fc], 0
call fcn.1007be5e
add esp, 4
push 0x100e86d0
call fcn.1007bf8d
mov eax, dword [0x100e86d0]
add esp, 4
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
movss xmm5, dword [ebp - 0x1c]
movss xmm2, dword [ecx + 8]
movss xmm4, dword [ecx + 0xc]
subss xmm2, xmm5
movss xmm1, dword [ecx + 0x10]
subss xmm4, xmm5
subss xmm1, xmm5
mov ecx, dword [0x100e42e0]
movss xmm5, dword [0x1008d574]
movaps xmm3, xmm2
mulss xmm3, dword [edi + edx + 8]
movaps xmm0, xmm4
mulss xmm0, dword [edi + edx + 0xc]
addss xmm3, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [edi + edx + 0x10]
addss xmm3, xmm0
movaps xmm0, xmm2
mulss xmm0, dword [edi + edx + 0x18]
mulss xmm2, dword [edi + edx + 0x28]
addss xmm3, dword [edi + edx + 0x14]
addss xmm3, dword [ebp - 0x34]
mulss xmm3, xmm5
movss dword [ebp - 0x18], xmm3
movaps xmm3, xmm4
mulss xmm3, dword [edi + edx + 0x1c]
mulss xmm4, dword [edi + edx + 0x2c]
addss xmm3, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [edi + edx + 0x20]
mulss xmm1, dword [edi + edx + 0x30]
addss xmm4, xmm2
addss xmm3, xmm0
addss xmm4, xmm1
addss xmm3, dword [edi + edx + 0x24]
addss xmm4, dword [edi + edx + 0x34]
mov edx, dword fs:[0x2c]
addss xmm3, dword [ebp - 0x2c]
addss xmm4, dword [ebp - 0x24]
mov edi, dword [edx + ecx*4]
mulss xmm3, xmm5
mulss xmm4, xmm5
movss dword [ebp - 0x28], xmm3
movss dword [ebp - 0x34], xmm4
movss dword [ebp - 8], xmm4
cmp eax, dword [edi + 4]
jle 0x100437b2
push 0x100e86d0
call fcn.1007bfd7
add esp, 4
cmp dword [0x100e86d0], 0xffffffff
jne 0x100437b2
push 0x10082a70
mov byte [0x100e86fc], 0
call fcn.1007be5e
add esp, 4
push 0x100e86d0
call fcn.1007bf8d
add esp, 4
call fcn.10045930
movss xmm1, dword [ebp - 0x28]
sub esp, 0xc
mov ecx, esp
sub esp, 0xc
movq xmm0, qword [eax + 0xd0]
mov eax, dword [eax + 0xd8]
movq qword [ecx], xmm0
movss xmm0, dword [ebp - 0x18]
mov dword [ecx + 8], eax
mov ecx, esp
mov eax, dword [ebp - 8]
unpcklps xmm0, xmm1
movq qword [ebp - 0x10], xmm0
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea eax, [ebp - 0x78]
push eax
call fcn.100750e0
mov eax, dword [0x100e86d0]
cmp eax, dword [edi + 4]
jle 0x1004383f
push 0x100e86d0
call fcn.1007bfd7
add esp, 4
cmp dword [0x100e86d0], 0xffffffff
jne 0x1004383f
push 0x10082a70
mov byte [0x100e86fc], 0
call fcn.1007be5e
add esp, 4
push 0x100e86d0
call fcn.1007bf8d
add esp, 4
movss xmm0, dword [ebp - 0x78]
mulss xmm0, dword [0x1008d534]
movaps xmm1, xmm0
movss dword [ebp - 0x3c], xmm0
addss xmm1, dword [0x1008d5f0]
call fcn.10075ac0
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 0x74]
mulss xmm0, dword [0x1008d534]
movaps xmm1, xmm0
movss dword [ebp - 0x24], xmm0
addss xmm1, dword [0x1008d5f0]
call fcn.10075ac0
mulss xmm0, dword [ebp - 0x2c]
movss xmm1, dword [ebp - 0x24]
movss dword [ebp - 0x1c], xmm0
call fcn.10075ac0
mulss xmm0, dword [ebp - 0x2c]
movss xmm1, dword [ebp - 0x3c]
movss dword [ebp - 0x24], xmm0
call fcn.10075ac0
movss xmm2, dword [0x10090a80]
movaps xmm5, xmm0
movss xmm0, dword [ebp - 0x24]
xorps xmm5, xmm2
movss xmm4, dword [ebp - 0x1c]
xorps xmm1, xmm1
mov edi, dword [ebp - 0x20]
movaps xmm7, xmm0
movss xmm3, dword [ebp - 0x34]
mulss xmm5, xmm1
mulss xmm0, xmm1
subss xmm7, xmm5
subss xmm5, xmm4
mulss xmm4, xmm1
movss dword [ebp - 0x40], xmm7
subss xmm4, xmm0
movss dword [ebp - 0x2c], xmm5
movaps xmm0, xmm7
xorps xmm0, xmm2
movss dword [ebp - 0x44], xmm0
movaps xmm0, xmm5
xorps xmm0, xmm2
movss dword [ebp - 0x1c], xmm4
movss dword [ebp - 0x48], xmm0
test esi, esi
jne 0x100439cc
movss xmm6, dword [edi + 0x30]
mov eax, dword [ebp - 0x30]
movaps xmm0, xmm6
mulss xmm0, xmm1
addss xmm6, xmm3
movss xmm1, dword [ebp - 0x18]
mov ecx, dword [eax + 8]
movaps xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x4c], xmm6
mov eax, dword [ecx + 4]
movss dword [ebp - 0x3c], xmm2
movss dword [ebp - 0x54], xmm2
movss xmm2, dword [ebp - 0x28]
addss xmm0, xmm2
movss dword [ebp - 0x24], xmm0
movss dword [ebp - 0x50], xmm0
cmp eax, dword [ecx + 8]
je 0x10043997
movss xmm0, dword [ebp - 0x3c]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x24]
mov dword [eax + 0x18], esi
add dword [ecx + 4], 0x1c
movss dword [eax + 4], xmm0
movss dword [eax + 8], xmm6
movss dword [eax + 0xc], xmm1
movss dword [eax + 0x10], xmm2
movss dword [eax + 0x14], xmm3
jmp 0x100439d6
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x54]
push edx
push eax
call fcn.10045df0
mov esi, dword [ebp - 0x14]
movss xmm3, dword [ebp - 8]
movss xmm2, dword [ebp - 0xc]
movss xmm1, dword [ebp - 0x10]
movss xmm4, dword [ebp - 0x1c]
movss xmm5, dword [ebp - 0x2c]
movss xmm7, dword [ebp - 0x40]
jmp 0x100439d6
movss xmm1, dword [ebp - 0x18]
movss xmm2, dword [ebp - 0x28]
movss xmm0, dword [edi + 0x30]
movaps xmm6, xmm4
mov eax, dword [ebp - 0x30]
mulss xmm7, xmm0
mulss xmm5, xmm0
mov ecx, dword [eax + 8]
mulss xmm6, xmm0
addss xmm7, xmm1
addss xmm5, xmm2
mov eax, dword [ecx + 4]
addss xmm6, xmm3
movss dword [ebp - 0x60], xmm7
movss dword [ebp - 0x5c], xmm5
movss dword [ebp - 0x58], xmm6
cmp eax, dword [ecx + 8]
je 0x10043a39
mov dword [eax + 0x18], esi
add dword [ecx + 4], 0x1c
movss dword [eax], xmm7
movss dword [eax + 4], xmm5
movss dword [eax + 8], xmm6
movss dword [eax + 0xc], xmm1
movss dword [eax + 0x10], xmm2
movss dword [eax + 0x14], xmm3
jmp 0x10043a62
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x60]
push edx
push eax
call fcn.10045df0
mov esi, dword [ebp - 0x14]
movss xmm3, dword [ebp - 8]
movss xmm2, dword [ebp - 0xc]
movss xmm1, dword [ebp - 0x10]
movss xmm4, dword [ebp - 0x1c]
movss xmm0, dword [edi + 0x30]
mov eax, dword [ebp - 0x30]
movss xmm5, dword [ebp - 0x44]
movss xmm6, dword [ebp - 0x48]
mulss xmm5, xmm0
mov ecx, dword [eax + 8]
mulss xmm6, xmm0
mulss xmm4, xmm0
addss xmm5, xmm1
mov eax, dword [ecx + 4]
addss xmm6, xmm2
addss xmm4, xmm3
movss dword [ebp - 0x6c], xmm5
movss dword [ebp - 0x68], xmm6
movss dword [ebp - 0x64], xmm4
cmp eax, dword [ecx + 8]
je 0x10043acc
mov dword [eax + 0x18], esi
add dword [ecx + 4], 0x1c
movss dword [eax], xmm5
movss dword [eax + 4], xmm6
movss dword [eax + 8], xmm4
movss dword [eax + 0xc], xmm1
movss dword [eax + 0x10], xmm2
movss dword [eax + 0x14], xmm3
jmp 0x10043ae1
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x6c]
push edx
push eax
call fcn.10045df0
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x14], esi
mov edx, esi
cmp esi, 0x13
jl 0x100434c4
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1007ba06
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret