Function at 0x1006a9e0
Capabilities:
Authenticate hmac
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x101b11c0]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x101fbead], 0
push esi
push edi
je 0x1006c554
cmp byte [0x101f7d28], 1
xorps xmm0, xmm0
mov eax, dword [0x1032a2e8]
jne 0x1006aa4d
test eax, eax
je 0x1006aa51
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x101a27e8]
subss xmm0, dword [0x101a36f0]
test eax, eax
jne 0x1006aa56
call fcn.100b7ec0
cmp byte [0x101f7d29], 1
jne 0x1006aac0
addss xmm0, xmm0
movss dword [ebp - 0xec], xmm0
addss xmm0, dword [0x101a3818]
cvttss2si eax, xmm0
mov dword [0x101f7d14], eax
call fcn.1007c710
cmp al, 1
jne 0x1006aa9e
movss xmm0, dword [ebp - 0xec]
addss xmm0, dword [0x101a367c]
cvttss2si eax, xmm0
mov dword [0x101f7d14], eax
call fcn.1007c830
cmp al, 1
jne 0x1006aac0
movss xmm0, dword [ebp - 0xec]
addss xmm0, dword [0x101a33fc]
cvttss2si eax, xmm0
mov dword [0x101f7d14], eax
cmp byte [0x101f7d2a], 1
jne 0x1006ac9b
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1006ac84
mov esi, dword [0x101f7d14]
movd xmm2, dword [0x879340c]
mov edi, dword [0x101f7d18]
mov edx, dword [0x101f7d1c]
movd xmm1, esi
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm2, xmm2
movd xmm0, edi
comiss xmm1, xmm2
movd xmm3, edx
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm3, xmm3
ja 0x1006ab69
addss xmm1, xmm3
comiss xmm2, xmm1
ja 0x1006ab69
movd xmm1, dword [0x8793410]
cvtdq2ps xmm1, xmm1
comiss xmm0, xmm1
ja 0x1006ab69
addss xmm0, dword [0x101a3340]
comiss xmm1, xmm0
ja 0x1006ab69
mov cl, byte [0x101f7c54]
test cl, cl
jne 0x1006ab77
mov cl, 1
mov byte [0x101f7c54], cl
movzx eax, word [0x879340c]
mov word [0x101f7c56], ax
movzx eax, word [0x8793410]
mov word [0x101f7c58], ax
jmp 0x1006ab6f
mov cl, byte [0x101f7c54]
test cl, cl
je 0x1006ac9b
cmp byte [0x101f7d29], 0
jne 0x1006ac9b
cmp dword [0xe61e58], 0x550
jl 0x1006aba8
cmp dword [0x1032a2e8], 0
je 0x1006aba8
lea eax, [edx + 0x2c1]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
jmp 0x1006abb0
movss xmm2, dword [0x101a384c]
cmp dword [0x101f7d24], 2
je 0x1006ac05
mov ecx, dword [0x101f7d20]
cmp ecx, 0xb4
jge 0x1006abd3
lea eax, [ecx + ecx]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
jmp 0x1006ac0d
cmp ecx, 0x190
jle 0x1006abf3
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm1
divss xmm0, dword [0x101a2968]
subss xmm1, xmm0
jmp 0x1006ac0d
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
jmp 0x1006ac0d
movss xmm1, dword [0x101a3534]
movsx eax, word [0x101f7c56]
mov ecx, 1
sub esi, eax
movsx eax, word [0x101f7c58]
add esi, dword [0x879340c]
sub edi, eax
mov dword [0x101f7d14], esi
add edi, dword [0x8793410]
cmp esi, ecx
cmovl esi, ecx
cmp edi, ecx
cmovl edi, ecx
movd xmm0, esi
cvtdq2ps xmm0, xmm0
minss xmm2, xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm2
minss xmm1, xmm0
mov dword [0x101f7d14], eax
cvttss2si eax, xmm1
mov dword [0x101f7d18], eax
movzx eax, word [0x879340c]
mov word [0x101f7c56], ax
movzx eax, word [0x8793410]
mov word [0x101f7c58], ax
jmp 0x1006ac9b
cmp byte [0x101f7c54], 0
je 0x1006ac9b
mov byte [0x101f7c54], 0
mov byte [0x101f7d29], 0
push 1
mov eax, 0x635fd0
call eax
mov eax, dword [0x101f7d24]
add esp, 4
mov esi, 0x790b50
sub eax, 0
je 0x1006afe1
sub eax, 2
je 0x1006aeb3
movd xmm0, dword [0x101f7d20]
cvtdq2ps xmm0, xmm0
sub eax, 1
je 0x1006ae78
sub esp, 0x10
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7d18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a5a
call esi
movd xmm0, dword [0x101f7d20]
add esp, 4
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7d18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7a
call esi
movd xmm0, dword [0x101f7d20]
add esp, 4
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a33dc]
subss xmm0, dword [0x101a3390]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7d18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x101a33dc]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7b
call esi
movd xmm0, dword [0x101f7d20]
add esp, 4
cvtdq2ps xmm0, xmm0
movd xmm1, dword [0x101f7d1c]
subss xmm0, dword [0x101a33dc]
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x101a3390]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7d18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x101a33dc]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
subss xmm1, dword [0x101a330c]
movss dword [esp], xmm1
push 0x7a7c
call esi
movd xmm1, dword [0x101f7d18]
add esp, 4
movd xmm0, dword [0x101f7d20]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0xc], 0x42340000
mov dword [esp + 8], 0x433e0000
cvtdq2ps xmm1, xmm1
addss xmm1, xmm0
movd xmm0, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
subss xmm1, dword [0x101a3390]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push 0x7a7d
jmp 0x1006b02c
movd xmm3, dword [0x101f7d1c]
sub esp, 0xc
movd xmm2, dword [0x101f7d18]
movd xmm1, dword [0x101f7d14]
cvtdq2ps xmm3, xmm3
mov dword [esp + 4], 0
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
movss dword [esp], xmm0
call fcn.10037110
jmp 0x1006b031
movd xmm2, dword [0x101f7d18]
movd xmm1, dword [0x101f7d14]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.10010540
movd xmm0, dword [0x101f7d18]
cvtdq2ps xmm0, xmm0
push 0x1019a6fe
sub esp, 8
addss xmm0, dword [0x101a3318]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7d14]
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [0x101a3008]
subsd xmm0, qword [0x101a2dc8]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push dword [0x1058ef00]
push 0x10358368
call fcn.10011b20
add esp, 0x14
test al, al
je 0x1006af30
call fcn.1006c5e0
mov esi, dword [0xe8c58c]
mov edi, 0x41fe10
call edi
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call edi
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call edi
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0xa1
mov ecx, 0x101c3610
call fcn.10046fb0
movd xmm0, dword [0x101f7d18]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0xec], eax
mov eax, 0x41fe10
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x101a2d70]
cvttsd2si edi, xmm0
movd xmm0, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x101a2ea8]
cvttsd2si esi, xmm0
call eax
push 0
push 1
push 0
push 0
mov edx, 0x420150
mov ecx, eax
push dword [ebp - 0xec]
push edi
push esi
call edx
jmp 0x1006b031
movd xmm0, dword [0x101f7d20]
sub esp, 0x10
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7d1c]
cvtdq2ps xmm0, xmm0
movss dword [esp + 8], xmm0
movd xmm0, dword [0x101f7d18]
cvtdq2ps xmm0, xmm0
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0xf058
call esi
add esp, 0x14
cmp dword [0x101f7d24], 2
je 0x1006b142
cmp byte [0x101f7d0c], 0
jne 0x1006b06b
push 0x779250
push 0x779150
push 1
push 0xac
push 0x101f7c60
mov eax, 0x9cfa13
call eax
mov byte [0x101f7d0c], 1
push 0
push 0
push 1
push 0x7ec5
push 1
mov eax, 0x779350
mov ecx, 0x101f7c60
call eax
movd xmm0, dword [0x101f7d18]
mov ecx, 0x101f7c60
cvtdq2ps xmm0, xmm0
push 0x1d
push 0x24
addss xmm0, dword [0x101a32a0]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d1c]
add eax, dword [0x101f7d14]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a3378]
cvttss2si eax, xmm0
push eax
mov eax, 0x779410
call eax
push 0
mov eax, 0x7798f0
mov ecx, 0x101f7c60
call eax
mov eax, 0x779860
mov ecx, 0x101f7c60
call eax
cmp al, 1
jne 0x1006b0ee
call fcn.1006c5e0
push 0xa1
mov ecx, 0x101c3610
call fcn.10046fb0
movd xmm0, dword [0x101f7d14]
push eax
mov eax, dword [0x101f7d18]
cvtdq2ps xmm0, xmm0
push 3
push 0xd2
add eax, 0xd
push eax
subss xmm0, dword [0x101a32a0]
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x101f9630
call fcn.1007c410
movss xmm0, dword [0x101a32f0]
add esp, 0x1c
jmp 0x1006b14a
movss xmm0, dword [0x101a3340]
push 0x158
mov ecx, 0x101c3610
movss dword [ebp - 0xec], xmm0
call fcn.10046fb0
push eax
mov eax, dword [0x101f7d18]
add eax, 0x21
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
mov eax, dword [0x101f7d18]
add esp, 0x1c
add eax, 0x1e
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a32b8]
addss xmm0, dword [0x101a3434]
cvttss2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x10
mov ecx, 0x791070
mov edi, 0x83c080
test al, al
je 0x1006b273
cmp byte [0x101f7c54], 0
jne 0x1006b273
push 1
call ecx
add esp, 4
test eax, eax
je 0x1006b273
cmp byte [0x8793386], 0
je 0x1006b273
call esi
mov ecx, dword [0x101f7d10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006b273
call edi
mov al, byte [0x101f7c44]
xor al, 1
xor edx, edx
mov byte [0x101f7c44], al
nop
movzx eax, al
mov ecx, 0x101f7c40
push eax
push edx
call fcn.1006c610
inc edx
cmp edx, 7
jge 0x1006b26c
mov al, byte [0x101f7c44]
jmp 0x1006b250
call esi
mov dword [0x101f7d10], eax
cmp byte [0x101f7c44], 0
je 0x1006b286
movss xmm0, dword [0x101a32f0]
jmp 0x1006b289
xorps xmm0, xmm0
mov eax, dword [0x101f7d18]
sub esp, 0x18
add eax, 0x1e
mov edi, 0x790e40
movss dword [esp + 0x14], xmm0
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov eax, edx
mov dword [esp + 0xc], 0x41700000
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
mov dword [esp + 8], 0x41700000
add eax, dword [0x101f7d14]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a32b8]
addss xmm0, dword [0x101a3434]
movss dword [esp], xmm0
push 0x7bae
call edi
mov eax, dword [0x101f7d18]
add esp, 0x1c
movd xmm2, dword [0x101f7d14]
add eax, 0x28
cvtdq2ps xmm2, xmm2
mov ecx, 0x101f9630
push 0xa0
movd xmm3, eax
subss xmm2, dword [0x101a3308]
cvtdq2ps xmm3, xmm3
addss xmm3, dword [ebp - 0xec]
call fcn.10079950
push 0x159
mov ecx, 0x101c3610
call fcn.10046fb0
push eax
mov eax, dword [0x101f7d18]
add eax, 0x3c
push 1
push 0x46
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
mov eax, dword [0x101f7d18]
add esp, 0x1c
add eax, 0x3e
push dword [0x101f7c50]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0x1019efb4
push 1
push 0x46
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x8c
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
mov eax, dword [0x101f7d18]
add eax, 0x39
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x78
push eax
mov eax, 0x790b10
call eax
add esp, 0x30
test al, al
je 0x1006b461
cmp byte [0x101f7c54], 0
jne 0x1006b461
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006b461
cmp byte [0x8793386], 0
je 0x1006b461
call esi
mov ecx, dword [0x101f7d10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006b461
mov eax, 0x83c080
call eax
mov eax, dword [0x101f7c50]
sub eax, 0xa
mov dword [0x101f7c50], eax
test eax, eax
jg 0x1006b45a
mov dword [0x101f7c50], 0
call esi
mov dword [0x101f7d10], eax
mov eax, dword [0x101f7d18]
add eax, 0x39
cmp byte [0x101f7c44], 0
jne 0x1006b4af
movd xmm3, eax
sub esp, 0x10
mov eax, dword [0x101f7d14]
mov ecx, 0x101f9630
add eax, 0x78
cvtdq2ps xmm3, xmm3
mov dword [esp + 8], 0
mov dword [esp + 4], 0
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.1007c4c0
jmp 0x1006b505
movd xmm0, eax
sub esp, 0x18
mov eax, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
add eax, 0x78
mov dword [esp + 0x14], 0x41700000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7c0d
call edi
add esp, 0x1c
mov eax, dword [0x101f7d18]
add eax, 0x39
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0xa0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006b59e
cmp byte [0x101f7c54], 0
jne 0x1006b59e
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006b59e
cmp byte [0x8793386], 0
je 0x1006b59e
call esi
mov ecx, dword [0x101f7d10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006b59e
mov eax, 0x83c080
call eax
mov eax, dword [0x101f7c50]
add eax, 0xa
mov dword [0x101f7c50], eax
cmp eax, 0x190
jl 0x1006b597
mov dword [0x101f7c50], 0x190
call esi
mov dword [0x101f7d10], eax
mov eax, dword [0x101f7d18]
add eax, 0x39
cmp byte [0x101f7c44], 0
jne 0x1006b5ee
movd xmm3, eax
sub esp, 0x10
mov eax, dword [0x101f7d14]
mov ecx, 0x101f9630
add eax, 0xa0
cvtdq2ps xmm3, xmm3
mov dword [esp + 8], 0
mov dword [esp + 4], 0
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.1007c4c0
jmp 0x1006b646
movd xmm0, eax
sub esp, 0x18
mov eax, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
add eax, 0xa0
mov dword [esp + 0x14], 0x41700000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7c0d
call edi
add esp, 0x1c
mov eax, dword [0x101f7d18]
add eax, 0x4c
push 0x15
push 0xaa
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 8
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
setne byte [0x101fbf2e]
cmp byte [0x101fbeb6], 1
jne 0x1006b6b3
mov ecx, 0x101fbf37
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b696
sub ecx, edx
jne 0x1006b6b3
push 0x1019a6ff
push 0x101fbf37
call sym.Main.dll_sprintf
add esp, 8
mov eax, dword [0x101f7d18]
mov ecx, 0x101f9630
add eax, 0x4c
push 0xa1
movd xmm3, eax
mov eax, dword [0x101f7d14]
add eax, 8
cvtdq2ps xmm3, xmm3
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.10079950
cmp byte [0x101fbf2e], 1
jne 0x1006b72b
mov eax, dword [0x101f7d18]
mov ecx, 0x101f9630
add eax, 0x4c
push 0xff19bdff
push 0xa1
movd xmm3, eax
mov eax, dword [0x101f7d14]
add eax, 8
cvtdq2ps xmm3, xmm3
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.1007b7a0
push 0x15a
mov ecx, 0x101c3610
call fcn.10046fb0
push eax
mov eax, dword [0x101f7d18]
add eax, 0x52
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
mov eax, dword [0x101f7d18]
add esp, 0x1c
add eax, 0x52
push 0x101fbf37
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 3
push 0xc8
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x1e
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
add esp, 0x1c
mov ecx, 0x101c3610
push 0x15b
call fcn.10046fb0
push eax
mov eax, dword [0x101f7d18]
add eax, 0x68
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
mov eax, dword [0x101f7d18]
add esp, 0x1c
add eax, 0x64
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef8]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006b8ad
cmp byte [0x101f7c54], 0
jne 0x1006b8ad
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006b8ad
cmp byte [0x8793386], 0
je 0x1006b8ad
call esi
mov ecx, dword [0x101f7d10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006b8ad
mov eax, 0x83c080
call eax
xor byte [0x101f7c45], 1
call esi
mov dword [0x101f7d10], eax
cmp byte [0x101f7c45], 0
mov al, byte [0x101f7c44]
jne 0x1006b8cc
cmp al, 1
jne 0x1006b8cc
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006b8eb
test al, al
je 0x1006b8da
movss xmm0, dword [0x101a32f0]
jmp 0x1006b8e2
movss xmm0, dword [0x101a3340]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x101f7d18]
add eax, 0x64
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef8]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
add esp, 0x1c
mov ecx, 0x101c3610
push 0x15c
call fcn.10046fb0
push eax
mov eax, dword [0x101f7d18]
add eax, 0x7e
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
mov eax, dword [0x101f7d18]
add esp, 0x1c
add eax, 0x7a
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef8]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006ba5a
cmp byte [0x101f7c54], 0
jne 0x1006ba5a
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006ba5a
cmp byte [0x8793386], 0
je 0x1006ba5a
call esi
mov ecx, dword [0x101f7d10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006ba5a
mov eax, 0x83c080
call eax
xor byte [0x101f7c46], 1
call esi
mov dword [0x101f7d10], eax
cmp byte [0x101f7c46], 0
mov al, byte [0x101f7c44]
jne 0x1006ba79
cmp al, 1
jne 0x1006ba79
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006ba98
test al, al
je 0x1006ba87
movss xmm0, dword [0x101a32f0]
jmp 0x1006ba8f
movss xmm0, dword [0x101a3340]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x101f7d18]
add eax, 0x7a
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef8]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
add esp, 0x1c
mov ecx, 0x101c3610
push 0x15d
call fcn.10046fb0
push eax
mov eax, dword [0x101f7d18]
add eax, 0x94
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
mov eax, dword [0x101f7d18]
add esp, 0x1c
add eax, 0x90
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef8]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006bce6
cmp byte [0x101f7c54], 0
jne 0x1006bce6
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006bce6
cmp byte [0x8793386], 0
je 0x1006bce6
call esi
mov ecx, dword [0x101f7d10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006bce6
mov eax, 0x83c080
call eax
mov cl, byte [0x101f7c47]
xor cl, 1
xor eax, eax
mov byte [0x101f7c47], cl
test cl, cl
jne 0x1006bc72
cmp eax, 6
ja case.default.0x1006bc77
jmp dword [eax*4 + 0x1006c568]
mov byte [0x101f7c48], 1
inc eax
jmp 0x1006bc22
mov byte [0x101f7c49], 1
inc eax
jmp 0x1006bc22
mov byte [0x101f7c4a], 1
inc eax
jmp 0x1006bc22
mov byte [0x101f7c4b], 1
inc eax
jmp 0x1006bc22
mov byte [0x101f7c4c], 1
inc eax
jmp 0x1006bc22
mov byte [0x101f7c4d], 1
inc eax
jmp 0x1006bc22
cmp eax, 6
ja case.default.0x1006bc77
jmp dword [eax*4 + 0x1006c584]
mov byte [0x101f7c48], 0
inc eax
jmp 0x1006bc22
mov byte [0x101f7c49], 0
inc eax
jmp 0x1006bc22
mov byte [0x101f7c4a], 0
inc eax
jmp 0x1006bc22
mov byte [0x101f7c4b], 0
inc eax
jmp 0x1006bc22
mov byte [0x101f7c4c], 0
inc eax
jmp 0x1006bc22
mov byte [0x101f7c4d], 0
inc eax
jmp 0x1006bc22
inc eax
cmp eax, 7
jl 0x1006bc22
jmp 0x1006bcdf
mov byte [0x101f7c4e], 1
jmp 0x1006bcdf
mov byte [0x101f7c4e], 0
call esi
mov dword [0x101f7d10], eax
cmp byte [0x101f7c47], 0
mov al, byte [0x101f7c44]
jne 0x1006bd05
cmp al, 1
jne 0x1006bd05
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006bd24
test al, al
je 0x1006bd13
movss xmm0, dword [0x101a32f0]
jmp 0x1006bd1b
movss xmm0, dword [0x101a3340]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x101f7d18]
add eax, 0x90
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef8]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
mov eax, dword [0x101f7d18]
add esp, 0x1c
movd xmm2, dword [0x101f7d14]
add eax, 0x9b
cvtdq2ps xmm2, xmm2
mov ecx, 0x101f9630
push 0xa0
movd xmm3, eax
subss xmm2, dword [0x101a3308]
cvtdq2ps xmm3, xmm3
addss xmm3, dword [ebp - 0xec]
call fcn.10079950
push 0x14
mov esi, 0x402320
mov ecx, 0x8128adc
call esi
push eax
lea eax, [ebp - 0xe8]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x15
call esi
push eax
lea eax, [ebp - 0xc8]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x16
call esi
push eax
lea eax, [ebp - 0xa8]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x17
call esi
push eax
lea eax, [ebp - 0x88]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x18
call esi
push eax
lea eax, [ebp - 0x68]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
push 0x697
mov ecx, 0x8128adc
call esi
push eax
lea eax, [ebp - 0x48]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0xc4e
call esi
push eax
lea eax, [ebp - 0x28]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
xor esi, esi
nop word [eax + eax]
mov eax, esi
imul edi, esi, 0x16
shl eax, 5
lea ecx, [ebp - 0xe8]
add eax, ecx
push eax
mov eax, dword [0x101f7d18]
add eax, 0xae
add eax, edi
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d14]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
add esp, 0x1c
mov byte [ebp - 0xed], 0
cmp esi, 6
ja case.default.0x1006befc
jmp dword [esi*4 + 0x1006c5a0]
mov al, byte [0x101f7c48]
jmp 0x1006bf32
mov al, byte [0x101f7c49]
jmp 0x1006bf32
mov al, byte [0x101f7c4a]
jmp 0x1006bf32
mov al, byte [0x101f7c4b]
jmp 0x1006bf32
mov al, byte [0x101f7c4c]
jmp 0x1006bf32
mov al, byte [0x101f7c4d]
jmp 0x1006bf32
mov al, byte [0x101f7c4e]
mov byte [ebp - 0xed], al
mov eax, dword [0x101f7d18]
add eax, 0xaa
add eax, edi
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef8]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006c052
cmp byte [0x101f7c54], 0
jne 0x1006c052
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006c052
cmp byte [0x8793386], 0
je 0x1006c052
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x101f7d10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006c052
mov eax, 0x83c080
call eax
cmp esi, 6
ja case.default.0x1006bff3
jmp dword [esi*4 + 0x1006c5bc]
xor byte [0x101f7c48], 1
jmp case.default.0x1006bff3
xor byte [0x101f7c49], 1
jmp case.default.0x1006bff3
xor byte [0x101f7c4a], 1
jmp case.default.0x1006bff3
xor byte [0x101f7c4b], 1
jmp case.default.0x1006bff3
xor byte [0x101f7c4c], 1
jmp case.default.0x1006bff3
xor byte [0x101f7c4d], 1
jmp case.default.0x1006bff3
xor byte [0x101f7c4e], 1
cmp byte [0x101f7c47], 1
jne 0x1006c047
mov byte [0x101f7c47], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101f7d10], eax
cmp byte [ebp - 0xed], 0
mov al, byte [0x101f7c44]
jne 0x1006c071
cmp al, 1
jne 0x1006c071
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006c090
test al, al
je 0x1006c07f
movss xmm0, dword [0x101a32f0]
jmp 0x1006c087
movss xmm0, dword [0x101a3340]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x101f7d18]
add eax, 0xaa
mov dword [esp + 0x10], 0
add eax, edi
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f7d1c]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7d14]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef8]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call eax
add esp, 0x1c
test esi, esi
je 0x1006c1c6
mov eax, dword [0x101f7d18]
sub esp, 0x10
add eax, 0xa5
add eax, edi
mov dword [esp + 0xc], 0x40000000
mov dword [esp + 8], 0x42a40000
movd xmm0, eax
mov eax, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
add eax, 0xa
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790b50
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7b5e
call eax
mov eax, dword [0x101f7d18]
add esp, 4
add eax, 0xa5
add eax, edi
mov edi, 0x790b50
mov dword [esp + 0xc], 0x40000000
mov dword [esp + 8], 0x42a40000
movd xmm0, eax
mov eax, dword [0x101f7d14]
cvtdq2ps xmm0, xmm0
add eax, 0x5c
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7b5e
call edi
add esp, 0x14
jmp 0x1006c1cb
mov edi, 0x790b50
inc esi
cmp esi, 7
jl 0x1006bea0
mov eax, dword [0x101f7d18]
movss xmm0, dword [0x101fbed8]
add eax, 0x138
movss xmm3, dword [0x101a38e0]
movd xmm1, dword [0x101f7d14]
movss xmm4, dword [0x101fbed4]
movss xmm5, dword [0x101fbed0]
ucomiss xmm0, xmm3
movd xmm2, eax
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm2, xmm2
subss xmm1, dword [0x101a3308]
addss xmm2, dword [ebp - 0xec]
lahf
test ah, 0x44
jnp 0x1006c23b
movss xmm0, dword [0x101fbedc]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x1006c269
movaps xmm0, xmm1
movss dword [0x101fbed8], xmm1
addss xmm0, xmm5
movss dword [0x101fbedc], xmm2
movss dword [0x101fbee0], xmm0
movaps xmm0, xmm2
addss xmm0, xmm4
movss dword [0x101fbee4], xmm0
sub esp, 0x10
movss dword [esp + 0xc], xmm4
movss dword [esp + 8], xmm5
movss dword [esp + 4], xmm2
movss dword [esp], xmm1
push dword [0x101fbecc]
call edi
mov eax, dword [0x101f7d18]
add esp, 0x14
add eax, 0x151
push 0x1e
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0x36
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7d1c]
cdq
sub eax, edx
sar eax, 1
add eax, dword [0x101f7d14]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a3324]
cvttss2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006c4c3
cmp byte [0x101f7c54], 0
jne 0x1006c4b6
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006c4b6
cmp byte [0x8793386], 0
je 0x1006c4b6
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, dword [0x101f7d10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006c4b6
mov eax, dword [0x101f7d18]
sub esp, 0x18
add eax, 0x151
mov dword [esp + 0x14], 0x42700000
movd xmm0, eax
mov eax, dword [0x101f7d1c]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
mov dword [esp + 0x10], 0
sar eax, 1
add eax, dword [0x101f7d14]
mov dword [esp + 0xc], 0x41f00000
addss xmm0, dword [ebp - 0xec]
mov dword [esp + 8], 0x42580000
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a3324]
movss dword [esp], xmm0
push 0x7a5b
call eax
add esp, 0x1c
mov eax, 0x83c080
call eax
mov al, byte [0x101f7c44]
mov ecx, 0x1019a703
mov byte [ebp - 0x118], al
mov al, byte [0x101f7c45]
mov byte [ebp - 0x117], al
mov al, byte [0x101f7c46]
mov byte [ebp - 0x116], al
mov al, byte [0x101f7c47]
mov byte [ebp - 0x115], al
mov al, byte [0x101f7c48]
mov byte [ebp - 0x114], al
mov al, byte [0x101f7c49]
mov byte [ebp - 0x113], al
mov al, byte [0x101f7c4a]
mov byte [ebp - 0x112], al
mov al, byte [0x101f7c4b]
mov byte [ebp - 0x111], al
mov al, byte [0x101f7c4c]
mov byte [ebp - 0x110], al
mov al, byte [0x101f7c4d]
mov byte [ebp - 0x10f], al
mov al, byte [0x101f7c4e]
mov byte [ebp - 0x10e], al
mov eax, dword [0x101f7c50]
mov dword [ebp - 0x10c], eax
mov eax, 0x101fbf37
mov dword [ebp - 0x11c], 0x4ff2cc1
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c464
test dl, dl
je 0x1006c460
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c464
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c444
xor eax, eax
jmp 0x1006c469
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1006c475
mov byte [ebp - 0x108], al
jmp 0x1006c495
movups xmm0, xmmword [0x101fbf37]
mov eax, dword [0x101fbf47]
mov byte [ebp - 0x108], 1
movups xmmword [ebp - 0x107], xmm0
mov dword [ebp - 0xf7], eax
mov edx, 0x2c
lea ecx, [ebp - 0x11c]
call fcn.100ca8d0
call fcn.1006c5e0
call esi
mov dword [0x101f7d10], eax
jmp 0x1006c538
sub esp, 0x18
mov dword [esp + 0x14], 0x41f00000
jmp 0x1006c4ce
sub esp, 0x18
mov dword [esp + 0x14], 0
mov eax, dword [0x101f7d18]
add eax, 0x151
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41f00000
mov dword [esp + 8], 0x42580000
movd xmm0, eax
mov eax, dword [0x101f7d1c]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
add eax, dword [0x101f7d14]
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a3324]
movss dword [esp], xmm0
push 0x7a5b
call eax
add esp, 0x1c
cmp byte [0x101fbeb6], 1
jne 0x1006c548
mov byte [0x101fbeb6], 0
push 0
mov eax, 0x635fd0
call eax
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10141944
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret