Function at 0x40a3c5
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x78
movss xmm0, dword [0x7e6494]
movzx edx, byte [0x7e68ad]
push esi
push edi
mov edi, ecx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, 0xc8
mov dword [ebp - 0x14], edi
movss dword [edi + 0x10], xmm0
mov eax, dword [0x4a16e4]
sub eax, dword [0x4a16dc]
imul eax, edx
cdq
idiv ecx
movzx ecx, byte [0x7e6499]
sub eax, dword [0x4a16cc]
add eax, dword [0x4a16dc]
mov word [edi + 6], ax
mov eax, dword [0x4a16e8]
sub eax, dword [0x4a16e0]
imul eax, ecx
mov ecx, 0xc8
cdq
idiv ecx
sub eax, dword [0x4a16d0]
add eax, dword [0x4a16e0]
mov word [edi + 8], ax
call esi
mov dword [edi], eax
mov eax, dword [0x4a16cc]
cmp eax, dword [0x4a16d4]
je 0x40b318
mov eax, dword [0x4a16d0]
cmp eax, dword [0x4a16d8]
je 0x40b318
cmp byte [0x83172f], 0
je 0x40b318
cmp byte [0x6b80a0], 0
jne 0x40b318
cmp byte [0x835248], 4
je 0x40b318
mov eax, dword [0x83172c]
test eax, 0x4000
je 0x40b318
test al, 8
jne 0x40b318
cmp byte [0x6b807b], 0
jne 0x40b318
cmp dword [0x7ef618], 0
je 0x40b318
cmp dword [0x7ef514], 0
jne 0x40b318
call esi
sub eax, dword [0x801db4]
cmp eax, 0x3e8
jbe 0x40a50d
test byte [0x83172c], 4
jne 0x40a50d
mov word [edi + 4], 0x100
movss xmm0, dword [0x7e69b4]
movss dword [edi + 0xc], xmm0
jmp 0x40b31e
cmp byte [0x7e68ad], 0x64
movss xmm1, dword [0x47d188]
jbe 0x40a538
cmp byte [0x7e6499], 0x64
jbe 0x40a538
cmp byte [0x6b80a3], 4
jne 0x40a538
movss xmm1, dword [0x47d160]
cmp byte [edi + 0xc0], 0
movss xmm0, dword [0x47d2e8]
jne 0x40a55b
movzx eax, byte [0x7e6bf7]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
movss xmm0, dword [0x83eb78]
mulss xmm0, dword [0x47d2c8]
mov al, byte [0x69bde0]
movsd xmm2, qword [0x47d230]
mov byte [edi + 5], 0
addss xmm0, xmm1
movsd qword [ebp - 0x50], xmm2
divss xmm0, dword [0x47d2cc]
movss dword [0x83eb78], xmm0
movss xmm0, dword [0x7e69b4]
movss dword [edi + 0xc], xmm0
movsd xmm0, qword [0x47d288]
movsd qword [ebp - 0x68], xmm0
movsd xmm0, qword [0x47d258]
movsd qword [ebp - 0x40], xmm0
movsd xmm0, qword [0x47d158]
movsd qword [ebp - 0x48], xmm0
movsd xmm0, qword [0x47d1c8]
mov byte [edi + 4], 1
mov byte [edi + 0x14], al
mov eax, dword [0x6b8390]
movsd qword [ebp - 0x60], xmm0
movsd xmm0, qword [0x47d240]
movsd qword [ebp - 0x58], xmm0
test eax, eax
je 0x40a7e8
cmp eax, dword [0x689d00]
jne 0x40a7e8
mov byte [edi + 0x19bc], 0
movzx eax, byte [0x83172f]
imul eax, eax, 0x88
mov al, byte [eax + 0x7e6c3c]
mov byte [edi + 0x19bd], al
mov eax, dword [0x6b83e8]
sub eax, dword [0x491420]
movd xmm0, eax
mov eax, dword [0x6b83e4]
sub eax, dword [0x49141c]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtps2pd xmm0, xmm0
cvtdq2ps xmm1, xmm1
movsd qword [ebp - 0x38], xmm0
cvtps2pd xmm0, xmm1
movaps xmm1, xmm2
movsd qword [ebp - 0x30], xmm0
call fcn.00465a20
movsd xmm1, qword [ebp - 0x50]
movsd qword [ebp - 0x70], xmm0
movsd xmm0, qword [ebp - 0x38]
call fcn.00465a20
movsd xmm1, qword [ebp - 0x70]
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movsd xmm1, qword [ebp - 0x60]
cvtps2pd xmm0, xmm0
call fcn.00465a20
fld qword [ebp - 0x30]
fld qword [ebp - 0x38]
cvtsd2ss xmm0, xmm0
cvttss2si esi, xmm0
call fcn.00465850
movss xmm0, dword [0x491424]
xorps xmm5, xmm5
movss xmm6, dword [0x47d2dc]
movsd xmm4, qword [ebp - 0x58]
mulss xmm0, xmm6
movsd xmm2, qword [0x47d268]
movss xmm1, dword [0x47d2ec]
cvtps2pd xmm0, xmm0
fstp dword [ebp - 0x1c]
divsd xmm0, xmm4
subsd xmm0, xmm2
cvtpd2ps xmm3, xmm0
comiss xmm5, xmm3
jbe 0x40a6e7
addss xmm3, xmm1
movss xmm0, dword [0x6b83f4]
mulss xmm0, xmm6
cvtps2pd xmm0, xmm0
divsd xmm0, xmm4
subsd xmm0, xmm2
cvtpd2ps xmm2, xmm0
comiss xmm5, xmm2
jbe 0x40a70b
addss xmm2, xmm1
movzx eax, byte [0x7e6493]
shl eax, 0x10
cmp esi, eax
jge 0x40a7ef
subss xmm3, xmm2
movss xmm1, dword [edi + 0x2c]
cvtps2pd xmm1, xmm1
cvtps2pd xmm0, xmm3
mulsd xmm0, xmm4
divsd xmm0, qword [ebp - 0x68]
subsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm2
movss dword [edi + 0x19c8], xmm0
mulsd xmm1, xmm4
movss xmm0, dword [ebp - 0x1c]
cvtps2pd xmm0, xmm0
divsd xmm1, qword [ebp - 0x68]
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, esi
addsd xmm1, xmm4
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x70], xmm1
movsd qword [ebp - 0x38], xmm0
movss xmm0, dword [edi + 0x2c]
cvtps2pd xmm0, xmm0
addsd xmm0, xmm1
call fcn.00466570
mulsd xmm0, qword [ebp - 0x38]
movss xmm1, dword [edi + 0xc]
cvtps2pd xmm1, xmm1
mulsd xmm0, qword [ebp - 0x40]
mulsd xmm0, xmm1
mulsd xmm0, qword [ebp - 0x48]
cvtsd2ss xmm0, xmm0
movss dword [edi + 0x19c0], xmm0
movss xmm0, dword [edi + 0x2c]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [ebp - 0x70]
call fcn.00465860
mulsd xmm0, qword [ebp - 0x38]
movss xmm1, dword [edi + 0xc]
cvtps2pd xmm1, xmm1
mulsd xmm0, qword [ebp - 0x40]
mulsd xmm0, xmm1
mulsd xmm0, qword [ebp - 0x48]
cvtsd2ss xmm0, xmm0
movss dword [edi + 0x19c4], xmm0
jmp 0x40a7ef
mov byte [edi + 0x19bc], 0
mov al, byte [0x801954]
or esi, 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x1c], esi
test al, al
je 0x40b015
mov dl, byte [0x83172f]
cmp al, dl
cmove esi, ecx
inc ecx
imul eax, ecx, 0x1c
mov al, byte [eax + 0x801954]
test al, al
jne 0x40a80a
mov dword [ebp - 0x1c], esi
test esi, esi
js 0x40b015
imul eax, esi, 0x1c
mov dword [ebp - 0x10], eax
mov al, byte [eax + 0x801956]
test al, 0x20
je 0x40a843
mov word [edi + 4], 0x100
jmp 0x40b31e
cmp dword [0x7ef62c], 0
je 0x40a850
and al, 3
jmp 0x40a852
xor al, al
mov byte [edi + 0x1d], al
movzx eax, byte [0x83172f]
imul esi, eax, 0x88
call fcn.00449fee
movss xmm2, dword [0x47d2a8]
mov ecx, eax
sub ecx, dword [esi + 0x7e6c84]
mov eax, 0xff
xorps xmm0, xmm0
cmp ecx, eax
jge 0x40a8b4
maxss xmm0, dword [esi + 0x7e6c88]
sub eax, ecx
movaps xmm1, xmm2
minss xmm1, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm0
divss xmm1, xmm2
movss xmm2, dword [0x47d2e8]
movaps xmm0, xmm2
subss xmm0, xmm1
jmp 0x40a8bc
movss xmm2, dword [0x47d2e8]
cvttss2si eax, xmm0
movss xmm0, dword [0x83eb78]
mov byte [edi + 0x1e], al
movzx eax, byte [0x83172f]
imul eax, eax, 0x88
mulss xmm0, xmm2
mov al, byte [eax + 0x7e6c3c]
mov byte [edi + 0x1c], al
cvttss2si eax, xmm0
mov byte [edi + 0x20], al
cmp dword [0x7ef668], 0
je 0x40a90a
mov eax, dword [0x689d24]
test eax, eax
je 0x40a90a
cmp dword [0x689d28], 0x1f4
jl 0x40a90c
xor eax, eax
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
mov byte [edi + 0x21], al
cmp dword [0x7ef654], 0
mov dword [ebp - 0x18], esi
je 0x40a968
push 0x11
call esi
test al, al
jns 0x40a945
push 0x10
call esi
test al, al
jns 0x40a945
movzx eax, byte [0x83172f]
imul eax, eax, 0x88
add eax, 0x7e6c49
jmp 0x40a957
movzx eax, byte [0x83172f]
imul eax, eax, 0x88
add eax, 0x7e6c20
push eax
lea eax, [edi + 0x34]
push 0x470540
push eax
call fcn.004092ef
jmp 0x40a978
push 0x80
lea eax, [edi + 0x40]
push 0
push eax
call fcn.00447370
mov esi, dword [ebp - 0x10]
add esp, 0xc
movsd xmm1, qword [ebp - 0x58]
movsd xmm2, qword [0x47d168]
mov dl, byte [0x7e6bf4]
movzx eax, word [esi + 0x801968]
movsd qword [ebp - 0x70], xmm2
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm1
mulsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [edi + 0x18], xmm0
xorps xmm0, xmm0
movss dword [ebp - 8], xmm0
cmp dl, 1
jne 0x40a9e2
movsx eax, word [esi + 0x80196a]
neg eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x47d300]
movss dword [ebp - 8], xmm0
jmp 0x40aa24
cmp dl, 2
jne 0x40aa20
mov eax, 0x258
cmp word [esi + 0x801964], ax
jbe 0x40aa24
movzx ecx, word [esi + 0x801966]
movzx eax, word [esi + 0x801968]
sub ecx, eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm1
mulsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 8], xmm0
test dl, dl
je 0x40aa9f
push 0x7cc
push 0x83f008
push 0x83f00c
call fcn.004489d0
movss xmm2, dword [ebp - 8]
add esp, 0xc
movss dword [0x83f008], xmm2
xor eax, eax
addss xmm2, dword [eax + 0x83f008]
add eax, 4
cmp eax, 0x7d0
jb 0x40aa4a
mov dl, byte [0x7e6bf4]
divss xmm2, dword [0x47d2f0]
cmp dl, 1
jne 0x40aaa4
movsd xmm0, qword [0x47d318]
cvtps2pd xmm1, xmm2
comisd xmm0, xmm1
jbe 0x40aa88
movss xmm2, dword [0x47d310]
cvtps2pd xmm0, xmm2
comisd xmm0, xmmword [0x47d1f8]
jbe 0x40aaa4
movss xmm2, dword [0x47d18c]
jmp 0x40aaa4
movss xmm2, dword [ebp - 8]
cmp dl, 2
movss dword [edi + 0x2c], xmm2
sete al
mov byte [edi + 0x1f], al
call fcn.00449fee
test byte [0x83172c], 4
mov ecx, eax
mov dword [0x83e1f0], ecx
jne 0x40ac00
cmp dword [0x83e6b0], 0
je 0x40ac00
cmp ecx, dword [0x83e6b0]
jbe 0x40ac00
mov al, byte [0x801954]
test al, al
je 0x40ac05
mov edi, 0x801966
cmp edi, 0x801dc6
jge 0x40abfd
test byte [edi - 0x10], 0x20
jne 0x40abf0
movzx eax, word [edi]
xorps xmm1, xmm1
movss xmm2, dword [0x831728]
xorps xmm0, xmm0
cvtps2pd xmm2, xmm2
mov esi, ecx
sub esi, dword [0x83e6b0]
cvtsi2sd xmm1, eax
movzx eax, word [edi - 2]
cvtsi2sd xmm0, eax
mulsd xmm1, qword [ebp - 0x58]
mulsd xmm0, qword [0x47d1b8]
mulsd xmm1, qword [ebp - 0x70]
mulsd xmm0, xmm2
movsd qword [ebp - 0x30], xmm1
movsd qword [ebp - 0x38], xmm0
movaps xmm0, xmm1
call fcn.00466570
mulsd xmm0, qword [ebp - 0x38]
xorps xmm1, xmm1
cvtsi2sd xmm1, esi
mulsd xmm0, xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, dword [edi - 0xe]
subsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x30]
cvttsd2si eax, xmm1
mov dword [edi - 0xe], eax
call fcn.00465860
mulsd xmm0, qword [ebp - 0x38]
xorps xmm2, xmm2
mov ecx, dword [0x83e1f0]
cvtsi2sd xmm2, esi
xorps xmm1, xmm1
cvtsi2sd xmm1, dword [edi - 0xa]
mulsd xmm0, xmm2
addsd xmm0, xmm1
xorps xmm1, xmm1
cvttsd2si eax, xmm0
movss xmm0, dword [0x831728]
mov dword [edi - 0xa], eax
movsx eax, word [edi + 4]
cvtps2pd xmm0, xmm0
cvtsi2sd xmm1, eax
movzx eax, word [edi + 2]
mulsd xmm1, qword [0x47d180]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mulsd xmm1, xmm2
addsd xmm1, xmm0
cvttsd2si eax, xmm1
mov word [edi + 2], ax
add edi, 0x1c
cmp byte [edi - 0x12], 0
jne 0x40aaf7
mov edi, dword [ebp - 0x14]
mov al, byte [0x801954]
xor edx, edx
mov dword [0x83e6b0], ecx
inc edx
mov dword [ebp - 0xc], edx
test al, al
je 0x40aff1
lea eax, [edi + 0xc1]
xorps xmm0, xmm0
mov esi, 0x801958
mov dword [ebp - 8], eax
movsd qword [ebp - 0x78], xmm0
cmp edx, 0x28
jae 0x40aff1
test byte [esi - 2], 0x20
jne 0x40afe4
mov al, byte [esi - 4]
cmp al, byte [0x83172f]
je 0x40afe4
movzx eax, al
imul eax, eax, 0x88
mov al, byte [eax + 0x7e6c3c]
mov byte [ebp - 1], al
test al, al
je 0x40afe4
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 4]
sub eax, dword [ecx + 0x80195c]
movd xmm0, eax
mov eax, dword [esi]
sub eax, dword [ecx + 0x801958]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtps2pd xmm0, xmm0
cvtdq2ps xmm1, xmm1
movsd qword [ebp - 0x38], xmm0
cvtps2pd xmm0, xmm1
movsd xmm1, qword [ebp - 0x50]
movsd qword [ebp - 0x28], xmm0
call fcn.00465a20
movsd xmm1, qword [ebp - 0x50]
movsd qword [ebp - 0x30], xmm0
movsd xmm0, qword [ebp - 0x38]
call fcn.00465a20
movsd xmm1, qword [ebp - 0x30]
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movsd xmm1, qword [ebp - 0x60]
cvtps2pd xmm0, xmm0
call fcn.00465a20
fld qword [ebp - 0x28]
fld qword [ebp - 0x38]
cvtsd2ss xmm0, xmm0
cvttss2si eax, xmm0
mov dword [ebp - 0x14], eax
call fcn.00465850
movzx eax, word [esi + 0x10]
mov ecx, dword [ebp - 0x10]
fstp dword [ebp - 0x34]
movd xmm0, eax
movzx eax, word [ecx + 0x801968]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x47d2dc]
mulss xmm0, dword [0x47d14c]
movss dword [ebp - 0x24], xmm0
movd xmm0, eax
movzx eax, byte [0x7e6493]
cvtdq2ps xmm0, xmm0
shl eax, 0x10
mulss xmm0, dword [0x47d2dc]
mulss xmm0, dword [0x47d14c]
movss dword [ebp - 0x2c], xmm0
cmp dword [ebp - 0x14], eax
jge 0x40afe1
mov eax, dword [esi + 8]
sub eax, dword [ecx + 0x801960]
movss xmm1, dword [0x47d298]
cdq
xor eax, edx
sub eax, edx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x47d148]
comiss xmm1, xmm0
jbe 0x40afe1
mov eax, dword [ebp - 8]
mov cl, byte [ebp - 1]
mov byte [eax - 1], cl
cmp dword [0x7ef62c], 0
je 0x40ad8f
mov cl, byte [esi - 2]
and cl, 3
jmp 0x40ad91
xor cl, cl
mov byte [eax], cl
movzx eax, byte [esi - 4]
imul eax, eax, 0x88
mov dword [ebp - 0x20], eax
call fcn.00449fee
mov ecx, eax
mov edx, 0xff
mov eax, dword [ebp - 0x20]
xorps xmm0, xmm0
sub ecx, dword [eax + 0x7e6c84]
cmp ecx, edx
jge 0x40adf3
maxss xmm0, dword [eax + 0x7e6c88]
movss xmm1, dword [0x47d2a8]
mov eax, edx
sub eax, ecx
minss xmm1, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm0
movss xmm0, dword [0x47d2e8]
divss xmm1, dword [0x47d2a8]
subss xmm0, xmm1
movss xmm4, dword [ebp - 0x2c]
movsd xmm3, qword [ebp - 0x58]
movsd xmm5, qword [ebp - 0x68]
cvttss2si eax, xmm0
mov edx, dword [ebp - 8]
movss xmm0, dword [ebp - 0x24]
subss xmm0, xmm4
mov byte [edx + 1], al
movss xmm1, dword [edi + 0x2c]
mov al, byte [0x7e6bf4]
cvtps2pd xmm1, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
divsd xmm0, xmm5
subsd xmm1, xmm0
cvtpd2ps xmm2, xmm1
movss dword [edx + 0xf], xmm2
cmp al, 2
jne 0x40ae8f
mov ecx, 0x12c
cmp word [esi + 0xc], cx
jbe 0x40ae78
movzx eax, word [esi + 0x10]
xorps xmm1, xmm1
movzx ecx, word [esi + 0xe]
sub ecx, eax
mov al, byte [0x7e6bf4]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
xorps xmm0, xmmword [0x47d400]
cvtss2sd xmm1, xmm0
mulsd xmm1, xmm3
mulsd xmm1, qword [ebp - 0x70]
jmp 0x40ae7d
movsd xmm1, qword [ebp - 0x78]
cvtps2pd xmm0, xmm2
cmp al, 2
addsd xmm0, xmm1
cvtpd2ps xmm0, xmm0
movss dword [edx + 0x13], xmm0
cvtps2pd xmm1, xmm4
sete al
mov byte [edx + 2], al
movss xmm0, dword [ebp - 0x34]
mulsd xmm1, xmm3
cvtps2pd xmm0, xmm0
divsd xmm1, xmm5
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [ebp - 0x14]
movsd qword [ebp - 0x30], xmm1
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x38], xmm0
movss xmm0, dword [edi + 0x2c]
cvtps2pd xmm0, xmm0
addsd xmm0, xmm1
call fcn.00466570
mulsd xmm0, qword [ebp - 0x38]
mov eax, dword [ebp - 8]
movss xmm1, dword [edi + 0xc]
cvtps2pd xmm1, xmm1
mulsd xmm0, qword [ebp - 0x40]
mulsd xmm0, xmm1
mulsd xmm0, qword [ebp - 0x48]
cvtsd2ss xmm0, xmm0
movss dword [eax + 7], xmm0
movss xmm0, dword [edi + 0x2c]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [ebp - 0x30]
call fcn.00465860
mulsd xmm0, qword [ebp - 0x38]
mov eax, dword [ebp - 8]
movss xmm1, dword [edi + 0xc]
cvtps2pd xmm1, xmm1
mulsd xmm0, qword [ebp - 0x40]
mulsd xmm0, xmm1
mulsd xmm0, qword [ebp - 0x48]
cvtsd2ss xmm0, xmm0
movss dword [eax + 0xb], xmm0
xorps xmm0, xmm0
imul eax, dword [ebp - 0x14], 0xff
movzx ecx, byte [0x7e6493]
cdq
idiv ecx
mov ecx, 0xff
cdq
and edx, 0xffff
add eax, edx
sar eax, 0x10
sub ecx, eax
cvtsi2ss xmm0, ecx
mov ecx, dword [ebp - 8]
mulss xmm0, dword [0x83eb78]
cvttss2si eax, xmm0
mov byte [ecx + 3], al
cmp dword [0x7ef654], 0
je 0x40afbe
push 0x11
call dword [ebp - 0x18]
test al, al
jns 0x40af9b
push 0x10
call dword [ebp - 0x18]
test al, al
jns 0x40af9b
movzx eax, byte [esi - 4]
imul eax, eax, 0x88
add eax, 0x7e6c49
jmp 0x40afaa
movzx eax, byte [esi - 4]
imul eax, eax, 0x88
add eax, 0x7e6c20
push eax
mov eax, dword [ebp - 8]
add eax, 0x17
push 0x470544
push eax
call fcn.004092ef
jmp 0x40afce
push 0x80
lea eax, [ecx + 0x23]
push 0
push eax
call fcn.00447370
mov edx, dword [ebp - 0xc]
add esp, 0xc
inc edx
add dword [ebp - 8], 0xa4
mov dword [ebp - 0xc], edx
jmp 0x40afe4
mov edx, dword [ebp - 0xc]
add esi, 0x1c
cmp byte [esi - 4], 0
jne 0x40ac2f
imul eax, edx, 0xa4
mov ecx, 0x19a0
sub ecx, eax
imul eax, edx, 0xa4
push ecx
push 0
add eax, 0x1c
add eax, edi
push eax
call fcn.00447370
add esp, 0xc
cmp dword [0x7ef640], 0
je 0x40b31e
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], eax
cmp dword [0x83ca68], eax
jle 0x40b2f8
mov edx, dword [0x83ca68]
lea esi, [edi + 0x19cc]
mov al, byte [eax*8 + 0x838bee]
mov byte [ebp - 1], al
test al, al
je 0x40b2e9
imul edx, dword [ebp - 0x1c], 0x1c
mov ecx, dword [ebp - 8]
movsx eax, word [ecx*8 + 0x838bea]
shl eax, 0xc
mov dword [ebp - 0x34], edx
sub eax, dword [edx + 0x80195c]
movd xmm0, eax
movsx eax, word [ecx*8 + 0x838be8]
shl eax, 0xc
sub eax, dword [edx + 0x801958]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvtps2pd xmm2, xmm0
cvtps2pd xmm0, xmm1
movsd xmm1, qword [ebp - 0x50]
movsd qword [ebp - 0x70], xmm0
movaps xmm0, xmm2
movsd qword [ebp - 0x30], xmm2
call fcn.00465a20
movsd xmm1, qword [ebp - 0x50]
movsd qword [ebp - 0x78], xmm0
movsd xmm0, qword [ebp - 0x70]
call fcn.00465a20
movsd xmm1, qword [ebp - 0x78]
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
movsd xmm1, qword [ebp - 0x60]
cvtps2pd xmm0, xmm0
call fcn.00465a20
movzx eax, byte [0x7e6493]
cvtsd2ss xmm0, xmm0
shl eax, 0x10
cvttss2si ecx, xmm0
mov dword [ebp - 0x18], ecx
cmp ecx, eax
jge 0x40b2e0
fld qword [ebp - 0x70]
fld qword [ebp - 0x30]
call fcn.00465850
mov eax, dword [ebp - 8]
mov cl, byte [ebp - 1]
fstp dword [ebp - 0x2c]
movzx eax, byte [eax*8 + 0x838bef]
movd xmm0, eax
mov eax, dword [ebp - 0x34]
cvtdq2ps xmm0, xmm0
movzx eax, word [eax + 0x801968]
mulss xmm0, dword [0x47d2dc]
movd xmm2, eax
lea eax, [ecx - 0x14]
cvtdq2ps xmm2, xmm2
mulss xmm0, dword [0x47d154]
mulss xmm2, dword [0x47d2dc]
mulss xmm2, dword [0x47d14c]
cmp al, 0xa
ja 0x40b158
mov byte [esi], 1
jmp 0x40b1d0
lea eax, [ecx - 0x28]
cmp al, 3
ja 0x40b164
mov byte [esi], 2
jmp 0x40b1d0
lea eax, [ecx - 0x30]
cmp al, 3
ja 0x40b170
mov byte [esi], 3
jmp 0x40b1d0
lea eax, [ecx - 0x34]
cmp al, 3
ja 0x40b17c
mov byte [esi], 4
jmp 0x40b1d0
cmp cl, 0x40
jb 0x40b186
cmp cl, 0x4d
jbe 0x40b18d
lea eax, [ecx - 0x54]
cmp al, 7
ja 0x40b192
mov byte [esi], 5
jmp 0x40b1d0
cmp cl, 0x60
jne 0x40b19c
mov byte [esi], 6
jmp 0x40b1d0
cmp cl, 0x61
jne 0x40b1a6
mov byte [esi], 7
jmp 0x40b1d0
cmp cl, 0x62
jne 0x40b1b0
mov byte [esi], 8
jmp 0x40b1d0
cmp cl, 0x68
jne 0x40b1ba
mov byte [esi], 9
jmp 0x40b1d0
cmp cl, 0x69
jne 0x40b1c4
mov byte [esi], 0xa
jmp 0x40b1d0
cmp cl, 0x6a
jne 0x40b2e0
mov byte [esi], 0xb
subss xmm0, xmm2
movss xmm1, dword [edi + 0x2c]
cvtps2pd xmm1, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [ebp - 0x58]
divsd xmm0, qword [ebp - 0x68]
subsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm2
movss dword [esi + 0xc], xmm0
mulsd xmm1, qword [ebp - 0x58]
movss xmm0, dword [ebp - 0x2c]
cvtps2pd xmm0, xmm0
divsd xmm1, qword [ebp - 0x68]
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [ebp - 0x18]
movsd qword [ebp - 0x78], xmm1
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x70], xmm0
movss xmm0, dword [edi + 0x2c]
cvtps2pd xmm0, xmm0
addsd xmm0, xmm1
call fcn.00466570
mulsd xmm0, qword [ebp - 0x70]
movss xmm1, dword [0x7e69b4]
cvtps2pd xmm1, xmm1
mulsd xmm0, qword [ebp - 0x40]
mulsd xmm0, xmm1
mulsd xmm0, qword [ebp - 0x48]
cvtsd2ss xmm0, xmm0
movss dword [esi + 4], xmm0
movss xmm0, dword [edi + 0x2c]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [ebp - 0x78]
call fcn.00465860
mulsd xmm0, qword [ebp - 0x70]
movss xmm1, dword [0x7e69b4]
imul eax, dword [ebp - 0x18], 0xff
cvtps2pd xmm1, xmm1
cdq
mulsd xmm0, qword [ebp - 0x40]
mulsd xmm0, xmm1
mulsd xmm0, qword [ebp - 0x48]
cvtsd2ss xmm0, xmm0
movss dword [esi + 8], xmm0
xorps xmm0, xmm0
movzx ecx, byte [0x7e6493]
idiv ecx
mov ecx, 0xff
cdq
and edx, 0xffff
add eax, edx
sar eax, 0x10
sub ecx, eax
cvtsi2ss xmm0, ecx
mov ecx, dword [ebp - 0xc]
inc ecx
mov dword [ebp - 0xc], ecx
mulss xmm0, dword [0x83eb78]
cvttss2si eax, xmm0
mov byte [esi + 1], al
add esi, 0x10
cmp ecx, 0x20
je 0x40b2f8
jmp 0x40b2e3
mov ecx, dword [ebp - 0xc]
mov edx, dword [0x83ca68]
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp eax, edx
jl 0x40b044
shl ecx, 4
mov eax, 0x200
sub eax, ecx
push eax
push 0
lea eax, [ecx + 0x19cc]
add eax, edi
push eax
call fcn.00447370
add esp, 0xc
jmp 0x40b31e
mov word [edi + 4], 0
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret