Function at 0x10049660
Capabilities:
Allocate or change rwx memory
Check for time delay via gettickcount
Execute shellcode via indirect call
Log keystrokes via polling
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
mov eax, dword [0x1014c1c0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, ecx
mov dword [ebp - 0x168], 0
cmp dword [0x101f6618], 1
push edi
mov dword [ebp - 0x144], ebx
jne 0x1004ed72
cmp byte [0x10194415], 0
je 0x1004ed72
push 0xe
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0x48
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0x39
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 2
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 6
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0x15
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 3
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0x10
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0x22
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 1
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0x4a
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0x4f
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 4
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
push 0xa
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004ed6b
cmp byte [ebx + 0x2f8], 1
xorps xmm0, xmm0
mov eax, dword [0x102c32f0]
jne 0x100497d4
test eax, eax
je 0x100497d8
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x101430a0]
subss xmm0, dword [0x10143f9c]
test eax, eax
jne 0x100497dd
call fcn.100bd450
cmp byte [ebx + 0x2f9], 1
jne 0x1004984a
addss xmm0, xmm0
movss dword [ebp - 0x148], xmm0
addss xmm0, dword [0x101440c4]
cvttss2si eax, xmm0
mov dword [ebx + 0x2e4], eax
call fcn.1007faf0
cmp al, 1
jne 0x10049827
movss xmm0, dword [ebp - 0x148]
addss xmm0, dword [0x10143f28]
cvttss2si eax, xmm0
mov dword [ebx + 0x2e4], eax
call fcn.1007fc10
cmp al, 1
jne 0x1004984a
movss xmm0, dword [ebp - 0x148]
addss xmm0, dword [0x10143ca8]
cvttss2si eax, xmm0
mov dword [ebx + 0x2e4], eax
cmp byte [ebx + 0x2fa], 1
jne 0x10049a2f
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x10049a18
movd xmm2, dword [ebx + 0x2e4]
movd xmm3, dword [0x879340c]
mov ecx, dword [ebx + 0x2ec]
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm3, xmm3
movd xmm1, ecx
comiss xmm2, xmm3
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
ja 0x100498ed
addss xmm1, xmm2
comiss xmm3, xmm1
ja 0x100498ed
movd xmm1, dword [0x8793410]
cvtdq2ps xmm1, xmm1
comiss xmm0, xmm1
ja 0x100498ed
addss xmm0, dword [0x10143bf8]
comiss xmm1, xmm0
ja 0x100498ed
cmp byte [ebx + 0x2dc], 0
jne 0x100498fa
mov byte [ebx + 0x2dc], 1
movzx eax, word [0x879340c]
mov word [ebx + 0x2de], ax
movzx eax, word [0x8793410]
mov word [ebx + 0x2e0], ax
cmp byte [ebx + 0x2dc], 0
je 0x10049a2f
cmp byte [ebx + 0x2f9], 0
jne 0x10049a2f
cmp dword [0xe61e58], 0x550
jl 0x1004992b
cmp dword [0x102c32f0], 0
je 0x1004992b
lea eax, [ecx + 0x2c1]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
jmp 0x10049933
movss xmm2, dword [0x101440f8]
cmp dword [ebx + 0x2f4], 2
je 0x10049988
mov ecx, dword [ebx + 0x2f0]
cmp ecx, 0xb4
jge 0x10049956
lea eax, [ecx + ecx]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
jmp 0x10049990
cmp ecx, 0x190
jle 0x10049976
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm1
divss xmm0, dword [0x10143220]
subss xmm1, xmm0
jmp 0x10049990
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
jmp 0x10049990
movss xmm1, dword [0x10143de0]
movsx eax, word [ebx + 0x2de]
mov esi, 1
mov edx, dword [ebx + 0x2e4]
mov ecx, dword [ebx + 0x2e8]
sub edx, eax
add edx, dword [0x879340c]
movsx eax, word [ebx + 0x2e0]
sub ecx, eax
mov dword [ebx + 0x2e4], edx
mov eax, dword [0x8793410]
add ecx, eax
cmp edx, esi
cmovl edx, esi
cmp ecx, esi
cmovl ecx, esi
movd xmm0, edx
cvtdq2ps xmm0, xmm0
minss xmm2, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm2
minss xmm1, xmm0
mov dword [ebx + 0x2e4], eax
cvttss2si eax, xmm1
mov dword [ebx + 0x2e8], eax
movzx eax, word [0x879340c]
mov word [ebx + 0x2de], ax
movzx eax, word [0x8793410]
mov word [ebx + 0x2e0], ax
jmp 0x10049a2f
cmp byte [ebx + 0x2dc], 0
je 0x10049a2f
mov byte [ebx + 0x2dc], 0
mov byte [ebx + 0x2f9], 0
mov eax, dword [ebx + 0x2f4]
mov esi, 0x790b50
cmp eax, 3
ja case.default.0x10049a43
jmp dword [eax*4 + 0x1004ed84]
movd xmm0, dword [ebx + 0x2f0]
sub esp, 0x10
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2ec]
cvtdq2ps xmm0, xmm0
movss dword [esp + 8], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0xf058
jmp 0x10049e70
movd xmm0, dword [ebx + 0x2f0]
sub esp, 0x10
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a5a
call esi
movd xmm0, dword [ebx + 0x2f0]
add esp, 4
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7a
call esi
movd xmm0, dword [ebx + 0x2f0]
add esp, 4
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10143c88]
subss xmm0, dword [0x10143c3c]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x10143c88]
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7b
call esi
movd xmm0, dword [ebx + 0x2f0]
add esp, 4
cvtdq2ps xmm0, xmm0
movd xmm1, dword [ebx + 0x2ec]
subss xmm0, dword [0x10143c88]
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x10143c3c]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x10143c88]
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
subss xmm1, dword [0x10143bc4]
movss dword [esp], xmm1
push 0x7a7c
call esi
movd xmm1, dword [ebx + 0x2f0]
movd xmm0, dword [ebx + 0x2e8]
jmp 0x10049e30
movd xmm3, dword [ebx + 0x2f0]
movd xmm2, dword [ebx + 0x2e8]
movd xmm1, dword [ebx + 0x2e4]
cvtdq2ps xmm3, xmm3
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.10010900
mov eax, dword [ebx + 0x2ec]
add eax, dword [ebx + 0x2e4]
push 0x1013d4af
sub esp, 8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov dword [esp + 4], 0x41b80000
subss xmm0, dword [0x10143c10]
movss dword [esp], xmm0
push dword [0x10527ec0]
push 0x102f1340
call fcn.10011ba0
add esp, 0x14
test al, al
je 0x10049e75
mov byte [0x10194415], 0
jmp 0x10049e75
movd xmm0, dword [ebx + 0x2f0]
sub esp, 0xc
movd xmm3, dword [ebx + 0x2ec]
movd xmm2, dword [ebx + 0x2e8]
movd xmm1, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
mov dword [esp + 4], 0
cvtdq2ps xmm3, xmm3
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
movss dword [esp], xmm0
call fcn.10034cc0
jmp 0x10049e75
movd xmm0, dword [ebx + 0x2f0]
sub esp, 0x10
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a5a
call esi
movd xmm0, dword [ebx + 0x2f0]
add esp, 4
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7a
call esi
movd xmm0, dword [ebx + 0x2f0]
add esp, 4
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10143c88]
subss xmm0, dword [0x10143c3c]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x10143c88]
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7b
call esi
movd xmm0, dword [ebx + 0x2f0]
add esp, 4
cvtdq2ps xmm0, xmm0
movd xmm1, dword [ebx + 0x2ec]
subss xmm0, dword [0x10143c88]
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x10143c3c]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [ebx + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x10143c88]
movss dword [esp + 4], xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
subss xmm1, dword [0x10143bc4]
movss dword [esp], xmm1
push 0x7a7c
call esi
movd xmm1, dword [ebx + 0x2e8]
movd xmm0, dword [ebx + 0x2f0]
cvtdq2ps xmm0, xmm0
add esp, 4
cvtdq2ps xmm1, xmm1
mov dword [esp + 0xc], 0x42340000
mov dword [esp + 8], 0x433e0000
addss xmm1, xmm0
movd xmm0, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
subss xmm1, dword [0x10143c3c]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push 0x7a7d
call esi
add esp, 0x14
cmp dword [ebx + 0x2f4], 2
mov ecx, 0x9cfa13
mov eax, 0x779350
mov edi, 0x779860
je 0x10049f31
cmp byte [ebx + 0xb4], 0
jne 0x10049ebd
push 0x779250
push 0x779150
push 1
push 0xac
lea eax, [ebx + 8]
push eax
call ecx
mov byte [ebx + 0xb4], 1
mov eax, 0x779350
push 0
push 0
push 1
push 0x7ec5
push 1
lea ecx, [ebx + 8]
call eax
movd xmm0, dword [ebx + 0x2e8]
lea ecx, [ebx + 8]
cvtdq2ps xmm0, xmm0
push 0x1d
push 0x24
addss xmm0, dword [0x10143b6c]
cvttss2si eax, xmm0
push eax
mov eax, dword [ebx + 0x2e4]
add eax, dword [ebx + 0x2ec]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10143c24]
cvttss2si eax, xmm0
push eax
mov eax, 0x779410
call eax
push 0
lea ecx, [ebx + 8]
mov eax, 0x7798f0
call eax
lea ecx, [ebx + 8]
call edi
cmp al, 1
jne 0x10049f31
mov byte [0x10194415], 0
mov eax, dword [ebx]
test eax, eax
jne 0x1004b0dc
cmp dword [ebx + 0x2f4], 2
jne 0x10049ff1
mov esi, dword [0xe8c58c]
mov ebx, 0x41fe10
call ebx
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call ebx
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call ebx
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0xef
mov ecx, 0x1015dbb8
call fcn.10047580
mov ebx, eax
mov eax, dword [ebp - 0x144]
mov edi, dword [eax + 0x2e8]
mov esi, dword [eax + 0x2e4]
add edi, 0x19
mov eax, 0x41fe10
add esi, 0x41
call eax
push 0
push 1
push 0
push 0
push ebx
push edi
push esi
mov edx, 0x420150
mov ecx, eax
call edx
mov esi, dword [0xe8c588]
mov eax, 0x41fe10
call eax
mov ecx, eax
mov eax, 0x420120
push esi
call eax
mov ebx, dword [ebp - 0x144]
jmp 0x1004a02e
push 0xef
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 3
push 0xc3
add eax, 0xd
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 5
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov esi, dword [ebx + 0x2e8]
mov ecx, 0x1015dbb8
mov edi, dword [ebx + 0x2e4]
add esi, 0x46
cmp dword [0x101f6634], 1
jne 0x1004a1b6
push 0x32
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 3
push 0xd2
add eax, 0x37
push eax
push dword [ebx + 0x2e4]
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
movd xmm0, esi
add esp, 0x1c
cvtdq2ps xmm0, xmm0
mov ecx, 0x1015dbb8
push 0x33
cvttss2si esi, xmm0
call fcn.10047580
push eax
lea eax, [edi + 0xf]
push 1
push 0x28
push esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
lea eax, [edi + 0x21]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push dword [0x102cc104]
cvttss2si eax, xmm0
push 0x1013d534
push 1
push 0x28
push esi
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
mov ecx, 0x1015dbb8
push 0x34
call fcn.10047580
push eax
lea eax, [edi + 0x46]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 1
push 0x28
push esi
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
lea eax, [edi + 0x58]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push dword [0x102cc100]
cvttss2si eax, xmm0
push 0x1013d534
push 1
push 0x28
push esi
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
mov ecx, 0x1015dbb8
push 0x35
call fcn.10047580
push eax
push 1
lea eax, [edi + 0x85]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0x28
push esi
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
lea eax, [edi + 0x95]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push dword [0x102cc0fc]
cvttss2si eax, xmm0
push 0x1013d534
push 1
push 0x28
push esi
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
jmp 0x1004a1eb
push 0x36
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 3
push 0xd2
add eax, 0x2d
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0xa
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov eax, dword [ebx + 0x2e4]
mov ecx, 0x790b10
mov esi, dword [ebx + 0x2e8]
add eax, 0x2c
add esi, 0x46
mov edi, 0x790e40
cmp dword [0x101f661c], 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x144], xmm1
jne 0x1004a3c0
cvttss2si eax, xmm1
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
call ecx
add esp, 0x10
test al, al
je 0x1004a33f
cmp byte [ebx + 0x2dc], 0
jne 0x1004a332
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004a332
cmp byte [0x8793386], 0
je 0x1004a332
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004a332
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov eax, 0x10304bd4
nop dword [eax + eax]
mov dword [eax], 0xffffffff
add eax, 8
cmp eax, 0x10304d24
jl 0x1004a2e0
mov edx, 4
mov dword [0x10304494], 0
lea ecx, [ebp - 0x148]
mov dword [0x1030448c], 0
mov dword [ebp - 0x148], 0xe8f304c1
call fcn.100d0350
mov dword [ebx], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x2d4], eax
jmp 0x1004a386
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004a34a
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x19
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
movss xmm1, dword [ebp - 0x144]
add esp, 0x1c
mov ecx, 0x790b10
cmp dword [0x101f6620], 1
jne 0x1004a50a
cvttss2si eax, xmm1
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
call ecx
add esp, 0x10
test al, al
je 0x1004a496
cmp byte [ebx + 0x2dc], 0
jne 0x1004a489
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004a489
cmp byte [0x8793386], 0
je 0x1004a489
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004a489
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov dword [ebx], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x2d4], eax
jmp 0x1004a4dd
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004a4a1
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x1a
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
cmp dword [0x101f6624], 1
jne 0x1004a6be
cvttss2si eax, dword [ebp - 0x144]
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004a64a
cmp byte [ebx + 0x2dc], 0
jne 0x1004a63d
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004a63d
cmp byte [0x8793386], 0
je 0x1004a63d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004a63d
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov ecx, 0x10304d30
call fcn.10048260
mov edx, 4
mov dword [0x10304d38], 0
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x148], 0xe7f304c1
call fcn.100d0350
mov edx, 5
mov dword [ebp - 0x158], 0xe6f305c1
lea ecx, [ebp - 0x158]
mov dword [0x10304d30], 0
mov byte [ebp - 0x154], 0
call fcn.100d0350
mov dword [ebx], 3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x2d4], eax
jmp 0x1004a691
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004a655
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x1b
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
cmp dword [0x101f6628], 1
jne 0x1004a811
cvttss2si eax, dword [ebp - 0x144]
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004a79d
cmp byte [ebx + 0x2dc], 0
jne 0x1004a790
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004a790
cmp byte [0x8793386], 0
je 0x1004a790
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004a790
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov dword [ebx], 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x2d4], eax
jmp 0x1004a7e4
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004a7a8
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x1c
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
cmp dword [0x101f6630], 1
jne 0x1004a981
cvttss2si eax, dword [ebp - 0x144]
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004a90d
cmp byte [ebx + 0x2dc], 0
jne 0x1004a900
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004a900
cmp byte [0x8793386], 0
je 0x1004a900
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004a900
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov byte [0x10194415], 0
cmp dword [0x101ab7cc], 2
je 0x1004a8f5
xor eax, eax
cmp dword [0x101ab7b8], eax
sete al
mov dword [0x101ab7b8], eax
jmp 0x1004a954
mov eax, dword [0x10527eb4]
mov byte [eax + 0x29], 1
jmp 0x1004a954
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004a918
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x1f
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
cmp dword [0x101f662c], 1
jne 0x1004aad4
cvttss2si eax, dword [ebp - 0x144]
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004aa60
cmp byte [ebx + 0x2dc], 0
jne 0x1004aa53
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004aa53
cmp byte [0x8793386], 0
je 0x1004aa53
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004aa53
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov dword [ebx], 5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x2d4], eax
jmp 0x1004aaa7
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004aa6b
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x2c
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
cmp dword [0x101f6638], 1
jne 0x1004ac37
cvttss2si eax, dword [ebp - 0x144]
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004abc3
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004abb6
cmp byte [0x8793386], 0
je 0x1004abb6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004abb6
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov byte [0x10194415], 0
cmp dword [0x101ab9a8], 2
je 0x1004abab
xor eax, eax
cmp dword [0x101ab994], eax
sete al
mov dword [0x101ab994], eax
jmp 0x1004ac0a
mov eax, dword [0x10527dd0]
mov byte [eax + 0x29], 1
jmp 0x1004ac0a
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004abce
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x20
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
cmp dword [0x101f663c], 1
jne 0x1004adbe
cvttss2si eax, dword [ebp - 0x144]
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004ad4a
cmp byte [ebx + 0x2dc], 0
jne 0x1004ad3d
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004ad3d
cmp byte [0x8793386], 0
je 0x1004ad3d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004ad3d
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov byte [0x10194415], 0
cmp byte [0x101965d5], 1
je 0x1004ad34
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x101965d0]
cmp eax, 0x5dc
jb 0x1004ad34
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101965d0], eax
mov byte [0x101965d5], 1
jmp 0x1004ad91
mov byte [0x101965d5], 0
jmp 0x1004ad91
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004ad55
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x45
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
cmp dword [0x101f6644], 1
jne 0x1004af3b
cvttss2si eax, dword [ebp - 0x144]
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004aec4
cmp byte [ebx + 0x2dc], 0
jne 0x1004aeb7
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004aeb7
cmp byte [0x8793386], 0
je 0x1004aeb7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004aeb7
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
mov byte [0x10194415], 0
cmp byte [0x10196455], 1
mov byte [0x1019645d], 0
jne 0x1004aeae
mov byte [0x10196455], 0
mov dword [0xe8cb3c], 0
jmp 0x1004af0b
mov byte [0x10196455], 1
jmp 0x1004af0b
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004aecf
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0xa1
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
cmp dword [0x101f68b8], 1
jne 0x1004ed72
cvttss2si eax, dword [ebp - 0x144]
push 0x1d
push 0x6b
add esi, 0x1c
push esi
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004b054
cmp byte [ebx + 0x2dc], 0
jne 0x1004b047
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004b047
cmp byte [0x8793386], 0
je 0x1004b047
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004b047
mov eax, 0x83c080
call eax
sub esp, 0x18
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x14], 0x42680000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
mov dword [0xe8cb3c], 1
lea ecx, [ebp - 0x15c]
mov eax, dword [0x1014cef0]
add esp, 0x1c
mov edx, 0xc
mov byte [0x10194415], 0
mov byte [0x1014cee8], 1
mov dword [ebp - 0x15c], 0x3fb0cc1
mov byte [ebp - 0x158], 0
mov dword [ebp - 0x154], eax
call fcn.100d0350
jmp 0x1004b09b
sub esp, 0x18
mov dword [esp + 0x14], 0x41e80000
jmp 0x1004b05f
sub esp, 0x18
mov dword [esp + 0x14], 0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41e80000
mov dword [esp + 8], 0x42d63333
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7a5e
call edi
add esp, 0x1c
push 0x13d
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
push 3
push 0x6c
lea eax, [esi + 9]
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x1004b9de
cmp dword [0x101f67c8], 2
jne 0x1004b198
mov esi, dword [0xe8c58c]
mov ebx, 0x41fe10
call ebx
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call ebx
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call ebx
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0x19
mov ecx, 0x1015dbb8
call fcn.10047580
mov ebx, eax
mov eax, dword [ebp - 0x144]
mov edi, dword [eax + 0x2e8]
mov esi, dword [eax + 0x2e4]
add edi, 0x19
mov eax, 0x41fe10
add esi, 0x4b
call eax
push 0
push 1
push 0
push 0
push ebx
push edi
push esi
mov edx, 0x420150
mov ecx, eax
call edx
mov esi, dword [0xe8c588]
mov eax, 0x41fe10
call eax
mov ecx, eax
mov eax, 0x420120
push esi
call eax
mov ebx, dword [ebp - 0x144]
jmp 0x1004b1ce
push 0x19
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 3
push 0xd2
add eax, 0xd
push eax
push dword [ebx + 0x2e4]
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov ecx, dword [0x10304480]
mov esi, 0x790b10
mov edi, 0x790e40
test ecx, ecx
je 0x1004b1f7
cmp ecx, 1
jne 0x1004b377
cmp dword [0x10304484], ecx
jne 0x1004b380
mov eax, dword [ebx + 0x2e8]
mov ecx, dword [ebx + 0x2ec]
add eax, 0x2d
push 0x17
push 0x14
push eax
mov eax, dword [ebx + 0x2e4]
add ecx, 0xffffffda
add eax, ecx
push eax
call esi
add esp, 0x10
test al, al
je 0x1004b30c
cmp byte [ebx + 0x2dc], 0
jne 0x1004b2e6
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004b2e6
cmp byte [0x8793386], 0
je 0x1004b2e6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004b2e6
mov eax, 0x83c080
call eax
mov eax, dword [ebx + 0x2e8]
sub esp, 0x18
mov ecx, dword [ebx + 0x2e4]
add eax, 0x2d
add ecx, 0xffffffda
mov dword [esp + 0x14], 0x42380000
movd xmm0, eax
mov eax, dword [ebx + 0x2ec]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
add eax, ecx
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
inc dword [0x10304480]
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x2d4], eax
jmp 0x1004b36c
mov eax, dword [ebx + 0x2e8]
sub esp, 0x18
mov ecx, dword [ebx + 0x2e4]
add eax, 0x2d
mov dword [esp + 0x14], 0x41b80000
movd xmm0, eax
mov eax, dword [ebx + 0x2ec]
jmp 0x1004b330
mov eax, dword [ebx + 0x2e8]
sub esp, 0x18
mov ecx, dword [ebx + 0x2ec]
add eax, 0x2d
mov dword [esp + 0x14], 0
movd xmm0, eax
mov eax, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
add ecx, 0xffffffda
mov dword [esp + 0xc], 0x41b80000
add eax, ecx
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
add esp, 0x1c
mov ecx, dword [0x10304480]
cmp ecx, 1
je 0x1004b380
cmp ecx, 2
jne 0x1004b4da
mov eax, dword [ebx + 0x2e8]
push 0x17
add eax, 0x2d
push 0x14
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0xa
push eax
call esi
mov ecx, dword [ebx + 0x2e8]
add esp, 0x10
add ecx, 0x2d
sub esp, 0x18
movd xmm0, ecx
mov ecx, dword [ebx + 0x2e4]
add ecx, 0xa
cvtdq2ps xmm0, xmm0
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
test al, al
je 0x1004b4a5
mov dword [esp + 0x14], 0x42380000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push 0x7e56
call edi
add esp, 0x1c
cmp byte [ebx + 0x2dc], 0
jne 0x1004b455
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1004b455
cmp byte [0x8793386], 0
je 0x1004b455
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004b455
mov eax, 0x83c080
call eax
dec dword [0x10304480]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [ebx + 0x2d4], eax
jmp 0x1004b4e0
mov eax, dword [ebx + 0x2e8]
sub esp, 0x18
add eax, 0x2d
mov dword [esp + 0x14], 0x41b80000
movd xmm0, eax
mov eax, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
add eax, 0xa
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
jmp 0x1004b4d0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push 0x7e56
call edi
add esp, 0x1c
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x1030448c], 1
jne 0x1004b815
push 0xf0
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 1
push 0x34
add eax, 0x35
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0x28
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov ecx, 0x1015dbb8
push 0xf1
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 1
push 0x34
add eax, 0x35
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0x7d
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
call edi
sub eax, dword [0x10304490]
cmp eax, 0x3e8
jbe 0x1004b5a5
mov edx, dword [0x10304494]
xor ecx, ecx
test edx, edx
jle 0x1004b59e
nop dword [eax]
mov eax, dword [ecx*8 + 0x10304bd4]
test eax, eax
jle 0x1004b599
dec eax
mov dword [ecx*8 + 0x10304bd4], eax
mov edx, dword [0x10304494]
inc ecx
cmp ecx, edx
jl 0x1004b580
call edi
mov dword [0x10304490], eax
mov edx, dword [0x10304480]
mov dword [ebp - 0x148], 0
lea edi, [edx*8]
sub edi, edx
add edi, edi
lea eax, [edi + 0xe]
cmp edi, eax
jge 0x1004ed72
imul ecx, edi, 0x2c
mov dword [ebp - 0x14c], 0x3c
add ecx, 0x1030449c
mov dword [ebp - 0x150], ecx
nop dword [eax]
nop dword [eax + eax]
mov esi, dword [edi*8 + 0x10304bd4]
cmp esi, 0xffffffff
jle 0x1004b7de
test esi, esi
jne 0x1004b626
push 0xf2
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
jmp 0x1004b6d2
mov eax, 0x91a2b3c5
imul esi
add edx, esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x144], eax
mov eax, 0x88888889
imul esi
add edx, esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
cdq
idiv dword [ebp - 0x14c]
mov eax, ecx
shl eax, 4
sub eax, ecx
mov dword [ebp - 0x168], edx
shl eax, 2
sub esi, eax
lea eax, [ebp - 0x24]
push esi
push edx
push dword [ebp - 0x144]
push str._02d:_02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x144]
add esp, 0x14
cmp ecx, 0x17
jle 0x1004b6b8
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
lea eax, [ebp - 0x24]
push 0x10140778
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x1004b6d2
push esi
push dword [ebp - 0x168]
lea eax, [ebp - 0x24]
push ecx
push str._02d:_02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ecx, dword [edi*8 + 0x10304bd4]
cmp ecx, 0xffffffff
jg 0x1004b6ea
mov dword [ebp - 0x144], 0xff2d5fe1
jmp 0x1004b713
test ecx, ecx
jne 0x1004b6fa
mov dword [ebp - 0x144], 0xff8be100
jmp 0x1004b713
cmp ecx, 0x12c
mov eax, 0xff00ffff
mov ecx, 0xff8be100
cmovl eax, ecx
mov dword [ebp - 0x144], eax
push dword [ebp - 0x150]
mov ecx, dword [ebp - 0x148]
mov esi, dword [ebx + 0x2e4]
add ecx, 0x4b
mov eax, dword [ebx + 0x2e8]
push 1
push 0x34
add eax, ecx
push eax
lea eax, [esi + 0x14]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov ecx, dword [ebp - 0x148]
lea eax, [ebp - 0x24]
add esp, 0x1c
add ecx, 0x4b
push eax
mov eax, dword [ebx + 0x2e8]
push 1
push 0x34
add eax, ecx
push eax
lea eax, [esi + 0x7d]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push dword [ebp - 0x144]
push 0x10193bd8
call fcn.1007dc40
mov ecx, dword [ebp - 0x148]
add esp, 0x1c
mov eax, dword [ebx + 0x2e8]
add ecx, 0x4d
add eax, ecx
push str._________________________________
push 1
push 0x6e
push eax
lea eax, [esi + 0x18]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0x64d3d3d3
push 0x10193bd8
call fcn.1007dc40
mov edx, dword [0x10304480]
add esp, 0x1c
add dword [ebp - 0x148], 0xc
mov ecx, dword [ebp - 0x150]
add ecx, 0x2c
lea eax, [edx + 1]
mov dword [ebp - 0x150], ecx
inc edi
lea ecx, [eax*8]
sub ecx, eax
add ecx, ecx
cmp edi, ecx
mov ecx, dword [ebp - 0x150]
jl 0x1004b5f0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
mov esi, dword [0x10304488]
cmp esi, 1
jne 0x1004b87d
mov eax, dword [ebx + 0x2e8]
push str.Loading_..
push esi
add eax, 0x64
push 0x34
push eax
mov eax, 0x55555556
imul dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
mov ecx, edx
add edx, 0x14
shr ecx, 0x1f
add ecx, edx
add eax, ecx
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304488], 2
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp esi, 2
jne 0x1004b8e0
mov eax, dword [ebx + 0x2e8]
push str.Loading_...
push 1
add eax, 0x64
push 0x34
push eax
mov eax, 0x55555556
imul dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
mov ecx, edx
add edx, 0x14
shr ecx, 0x1f
add ecx, edx
add eax, ecx
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304488], 3
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp esi, 3
jne 0x1004b943
mov eax, dword [ebx + 0x2e8]
push str.Loading_....
push 1
add eax, 0x64
push 0x34
push eax
mov eax, 0x55555556
imul dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
mov ecx, edx
add edx, 0x14
shr ecx, 0x1f
add ecx, edx
add eax, ecx
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304488], 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
mov edi, dword [ebx + 0x2e8]
mov eax, 0x55555556
imul dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
add edi, 0x64
mov ecx, edx
add eax, 0x14
shr ecx, 0x1f
add ecx, edx
add eax, ecx
cmp esi, 4
jne 0x1004b9a6
push str.Loading_.....
push 1
push 0x34
push edi
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304488], 0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
push str.Loading_.
push 1
push 0x34
push edi
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304488], 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x1004c8cf
cmp dword [0x10186334], eax
jne 0x1004ba99
mov esi, dword [0xe8c58c]
mov ebx, 0x41fe10
call ebx
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call ebx
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call ebx
mov edx, 0x4200b0
mov ecx, eax
call edx
push 5
mov ecx, 0x1015dbb8
call fcn.10047580
mov ebx, eax
mov eax, dword [ebp - 0x144]
mov edi, dword [eax + 0x2e8]
mov esi, dword [eax + 0x2e4]
add edi, 0x19
mov eax, 0x41fe10
add esi, 0x41
call eax
push 0
push 1
push 0
push 0
push ebx
push edi
push esi
mov edx, 0x420150
mov ecx, eax
call edx
mov esi, dword [0xe8c588]
mov eax, 0x41fe10
call eax
mov ecx, eax
mov eax, 0x420120
push esi
call eax
mov ebx, dword [ebp - 0x144]
jmp 0x1004bacf
push 5
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 3
push 0xd2
add eax, 0xd
push eax
push dword [ebx + 0x2e4]
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
movd xmm0, dword [ebx + 0x2e4]
mov ecx, 0x1015dbb8
cvtdq2ps xmm0, xmm0
mov esi, dword [0x102cc364]
push 6
movaps xmm1, xmm0
movss dword [ebp - 0x14c], xmm0
addss xmm1, dword [0x10143b84]
movss dword [ebp - 0x148], xmm1
movaps xmm1, xmm0
addss xmm1, dword [0x10143c78]
movss dword [ebp - 0x150], xmm1
movaps xmm1, xmm0
addss xmm1, dword [0x10143d5c]
addss xmm0, dword [0x10143df4]
movss dword [ebp - 0x16c], xmm1
movss dword [ebp - 0x168], xmm0
call fcn.10047580
movss xmm0, dword [ebp - 0x14c]
addss xmm0, dword [0x10143bc0]
mov ecx, dword [ebx + 0x2e8]
push esi
push eax
push 1
cvttss2si edi, xmm0
push 0xaa
add ecx, 0x32
push ecx
push edi
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
mov ecx, 0x1015dbb8
mov esi, eax
push 0xe
call fcn.10047580
push eax
push 1
push 0xaa
push esi
push edi
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov ecx, 0x1015dbb8
mov esi, eax
push 7
call fcn.10047580
push eax
push 1
push 0xaa
push esi
push edi
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov ecx, 0x1015dbb8
mov esi, eax
push 8
call fcn.10047580
push eax
push 1
push 0xaa
push esi
push edi
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
cvttss2si ecx, dword [ebp - 0x148]
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x5d
push str.Plan
push 1
push 0xd2
push eax
push ecx
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
cvttss2si ecx, dword [ebp - 0x150]
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x5d
push 0x101408a8
push 1
push 0xd2
push eax
push ecx
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
cvttss2si ecx, dword [ebp - 0x16c]
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x5d
push str.Drop
push 1
push 0xd2
push eax
push ecx
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
cvttss2si ecx, dword [ebp - 0x168]
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x5d
push str.Time
push 1
push 0xd2
push eax
push ecx
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov edx, dword [0x101f6610]
add esp, 0x1c
cmp edx, 1
jb 0x1004bcc0
cmp edx, 3
jbe 0x1004bccb
mov edx, 3
mov dword [0x101f6610], edx
mov dword [ebp - 0x14c], 0
test edx, edx
je 0x1004be6d
movss xmm0, dword [ebp - 0x148]
xor esi, esi
addss xmm0, dword [0x10143cdc]
mov edi, 0x10154414
movss dword [ebp - 0x154], xmm0
nop dword [eax]
lea eax, [edi + 0x18]
push eax
mov eax, dword [ebx + 0x2e8]
push 1
add eax, 0x69
push 0xaa
add eax, esi
push eax
cvttss2si eax, dword [ebp - 0x148]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x69
add eax, esi
push dword [edi]
push str._d__
push 1
push 0xaa
push eax
cvttss2si eax, dword [ebp - 0x150]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
push dword [edi + 4]
mov eax, dword [ebx + 0x2e8]
push str._d__
push 1
add eax, 0x69
push 0xaa
add eax, esi
push eax
cvttss2si eax, dword [ebp - 0x16c]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x40
add eax, 0x69
add eax, esi
push dword [edi + 8]
push str._d_day_s_
push 1
push 0xaa
push eax
cvttss2si eax, dword [ebp - 0x168]
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x10
add eax, 0x72
add eax, esi
mov dword [esp + 0xc], 0x40000000
mov dword [esp + 8], 0x42a40000
movd xmm0, eax
mov eax, 0x790b50
cvtdq2ps xmm0, xmm0
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x148]
movss dword [esp], xmm0
push 0x7b5e
call eax
mov eax, dword [ebx + 0x2e8]
add esp, 4
add eax, 0x72
add eax, esi
mov dword [esp + 0xc], 0x40000000
mov dword [esp + 8], 0x42a40000
movd xmm0, eax
mov eax, 0x790b50
cvtdq2ps xmm0, xmm0
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x154]
movss dword [esp], xmm0
push 0x7b5e
call eax
mov eax, dword [ebp - 0x14c]
lea edi, [edi + 0x3c]
mov edx, dword [0x101f6610]
inc eax
add esp, 0x14
mov dword [ebp - 0x14c], eax
add esi, 0xc
cmp eax, edx
jb 0x1004bd00
mov ecx, dword [ebx + 0x2e4]
mov dword [ebp - 0x150], ecx
lea esi, [ecx + 0xa]
lea edi, [ecx + 0x32]
lea ebx, [ecx + 0x64]
test edx, edx
je 0x1004c1f3
mov eax, dword [ebp - 0x144]
cmp byte [eax + 0x168], 0
jne 0x1004bec4
push 0x779250
push 0x779150
push 1
add eax, 0xbc
push 0xac
push eax
mov eax, 0x9cfa13
call eax
mov eax, dword [ebp - 0x144]
mov byte [eax + 0x168], 1
push 0
push 0
add eax, 0xbc
push 1
push 0x7a5e
mov dword [ebp - 0x148], eax
mov ecx, eax
push 1
mov eax, 0x779350
call eax
mov eax, dword [ebp - 0x150]
add eax, 0x2c
push 0x1d
push 0x6c
movd xmm0, eax
mov eax, dword [ebp - 0x144]
cvtdq2ps xmm0, xmm0
cvttss2si ecx, xmm0
movd xmm0, dword [eax + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x154], ecx
addss xmm0, dword [0x10143e24]
cvttss2si eax, xmm0
push eax
push ecx
mov ecx, dword [ebp - 0x148]
mov eax, 0x779410
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 0
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 1
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 2
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x7798f0
push 0
call eax
mov eax, dword [ebp - 0x144]
push 0x1d
push 0x6c
mov eax, dword [eax + 0x2e8]
add eax, 0xa5
push eax
push dword [ebp - 0x154]
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004c19e
mov ecx, dword [ebp - 0x148]
mov eax, 0x779860
call eax
cmp al, 1
jne 0x1004c009
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [ebp - 0x144]
mov ecx, dword [edx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004c009
mov edx, 8
mov dword [ebp - 0x158], 0xf0f308c1
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x154], 1
call fcn.100d0350
mov byte [0x10194415], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x144]
mov dword [ecx + 0x2d4], eax
push 0xa
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebp - 0x144]
movd xmm0, esi
push 1
cvtdq2ps xmm0, xmm0
mov eax, dword [eax + 0x2e8]
push 0xd2
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [0x10154420]
add esp, 0x1c
mov ecx, 0x1015dbb8
mov dword [ebp - 0x154], eax
push 0xb
call fcn.10047580
push dword [ebp - 0x154]
movd xmm0, edi
push eax
mov eax, dword [ebp - 0x144]
push 1
cvtdq2ps xmm0, xmm0
push 0xd2
mov eax, dword [eax + 0x2e8]
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [0x10154424]
add esp, 0x20
mov ecx, 0x1015dbb8
mov dword [ebp - 0x154], eax
push 0xc
call fcn.10047580
push dword [ebp - 0x154]
movd xmm0, ebx
push eax
mov eax, dword [ebp - 0x144]
push 1
cvtdq2ps xmm0, xmm0
push 0xd2
mov eax, dword [eax + 0x2e8]
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [0x10154428]
add esp, 0x20
mov ecx, 0x1015dbb8
mov dword [ebp - 0x154], eax
push 0xd
call fcn.10047580
push dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x144]
push 1
push 0xd2
mov eax, dword [eax + 0x2e8]
add eax, 0x8e
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x8c
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
mov ecx, 0x1015dbb8
push 9
call fcn.10047580
push 0x1015442c
push eax
mov eax, dword [ebp - 0x144]
push 1
push 0xa0
mov eax, dword [eax + 0x2e8]
add eax, 0xae
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x3c
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xff19bdff
jmp 0x1004c1e0
push 9
mov ecx, 0x1015dbb8
call fcn.10047580
push 0x1015442c
push eax
mov eax, dword [ebp - 0x144]
push 1
push 0xa0
mov eax, dword [eax + 0x2e8]
add eax, 0xae
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x3c
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov edx, dword [0x101f6610]
add esp, 0x20
cmp edx, 1
jbe 0x1004c565
mov eax, dword [ebp - 0x144]
cmp byte [eax + 0x21c], 0
jne 0x1004c236
push 0x779250
push 0x779150
push 1
add eax, 0x170
push 0xac
push eax
mov eax, 0x9cfa13
call eax
mov eax, dword [ebp - 0x144]
mov byte [eax + 0x21c], 1
push 0
push 0
add eax, 0x170
push 1
push 0x7a5e
mov dword [ebp - 0x148], eax
mov ecx, eax
push 1
mov eax, 0x779350
call eax
mov eax, dword [ebp - 0x150]
add eax, 0x2c
push 0x1d
push 0x6c
movd xmm0, eax
mov eax, dword [ebp - 0x144]
cvtdq2ps xmm0, xmm0
cvttss2si ecx, xmm0
movd xmm0, dword [eax + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x154], ecx
addss xmm0, dword [0x10143e80]
cvttss2si eax, xmm0
push eax
push ecx
mov ecx, dword [ebp - 0x148]
mov eax, 0x779410
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 0
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 1
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 2
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x7798f0
push 0
call eax
mov eax, dword [ebp - 0x144]
push 0x1d
push 0x6c
mov eax, dword [eax + 0x2e8]
add eax, 0xc3
push eax
push dword [ebp - 0x154]
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004c510
mov ecx, dword [ebp - 0x148]
mov eax, 0x779860
call eax
cmp al, 1
jne 0x1004c37b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [ebp - 0x144]
mov ecx, dword [edx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004c37b
mov edx, 8
mov dword [ebp - 0x158], 0xf0f308c1
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x154], 2
call fcn.100d0350
mov byte [0x10194415], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x144]
mov dword [ecx + 0x2d4], eax
push 0xa
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebp - 0x144]
movd xmm0, esi
push 1
cvtdq2ps xmm0, xmm0
mov eax, dword [eax + 0x2e8]
push 0xd2
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [0x1015445c]
add esp, 0x1c
mov ecx, 0x1015dbb8
mov dword [ebp - 0x154], eax
push 0xb
call fcn.10047580
push dword [ebp - 0x154]
movd xmm0, edi
push eax
mov eax, dword [ebp - 0x144]
push 1
cvtdq2ps xmm0, xmm0
push 0xd2
mov eax, dword [eax + 0x2e8]
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [0x10154460]
add esp, 0x20
mov ecx, 0x1015dbb8
mov dword [ebp - 0x154], eax
push 0xc
call fcn.10047580
push dword [ebp - 0x154]
movd xmm0, ebx
push eax
mov eax, dword [ebp - 0x144]
push 1
cvtdq2ps xmm0, xmm0
push 0xd2
mov eax, dword [eax + 0x2e8]
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [0x10154464]
add esp, 0x20
mov ecx, 0x1015dbb8
mov dword [ebp - 0x154], eax
push 0xd
call fcn.10047580
push dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x144]
push 1
push 0xd2
mov eax, dword [eax + 0x2e8]
add eax, 0x8e
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x8c
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
mov ecx, 0x1015dbb8
push 9
call fcn.10047580
push 0x10154468
push eax
mov eax, dword [ebp - 0x144]
push 1
push 0xa0
mov eax, dword [eax + 0x2e8]
add eax, 0xcc
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x3c
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xff19bdff
jmp 0x1004c552
push 9
mov ecx, 0x1015dbb8
call fcn.10047580
push 0x10154468
push eax
mov eax, dword [ebp - 0x144]
push 1
push 0xa0
mov eax, dword [eax + 0x2e8]
add eax, 0xcc
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x3c
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov edx, dword [0x101f6610]
add esp, 0x20
cmp edx, 2
jbe 0x1004ed72
mov eax, dword [ebp - 0x144]
cmp byte [eax + 0x2d0], 0
jne 0x1004c5a8
push 0x779250
push 0x779150
push 1
add eax, 0x224
push 0xac
push eax
mov eax, 0x9cfa13
call eax
mov eax, dword [ebp - 0x144]
mov byte [eax + 0x2d0], 1
push 0
push 0
add eax, 0x224
push 1
push 0x7a5e
mov dword [ebp - 0x148], eax
mov ecx, eax
push 1
mov eax, 0x779350
call eax
mov eax, dword [ebp - 0x150]
add eax, 0x2c
push 0x1d
push 0x6c
movd xmm0, eax
mov eax, dword [ebp - 0x144]
cvtdq2ps xmm0, xmm0
cvttss2si ecx, xmm0
movd xmm0, dword [eax + 0x2e8]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x154], ecx
addss xmm0, dword [0x10143ed0]
cvttss2si eax, xmm0
push eax
push ecx
mov ecx, dword [ebp - 0x148]
mov eax, 0x779410
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 0
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 1
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x779740
push 0xffffffffffffffff
push 2
call eax
mov ecx, dword [ebp - 0x148]
mov eax, 0x7798f0
push 0
call eax
mov eax, dword [ebp - 0x144]
push 0x1d
push 0x6c
mov eax, dword [eax + 0x2e8]
add eax, 0xe1
push eax
push dword [ebp - 0x154]
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004c86f
mov ecx, dword [ebp - 0x148]
mov eax, 0x779860
call eax
cmp al, 1
jne 0x1004c6ed
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [ebp - 0x144]
mov ecx, dword [edx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004c6ed
mov edx, 8
mov dword [ebp - 0x158], 0xf0f308c1
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x154], 3
call fcn.100d0350
mov byte [0x10194415], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x144]
mov dword [ecx + 0x2d4], eax
push 0xa
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebp - 0x144]
movd xmm0, esi
push 1
cvtdq2ps xmm0, xmm0
mov eax, dword [eax + 0x2e8]
push 0xd2
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov esi, dword [0x10154498]
add esp, 0x1c
mov ecx, 0x1015dbb8
push 0xb
call fcn.10047580
push esi
push eax
mov eax, dword [ebp - 0x144]
movd xmm0, edi
push 1
cvtdq2ps xmm0, xmm0
mov eax, dword [eax + 0x2e8]
push 0xd2
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov esi, dword [0x1015449c]
add esp, 0x20
mov ecx, 0x1015dbb8
push 0xc
call fcn.10047580
mov edi, dword [ebp - 0x144]
push esi
push eax
movd xmm0, ebx
mov eax, dword [edi + 0x2e8]
push 1
cvtdq2ps xmm0, xmm0
push 0xd2
add eax, 0x8e
push eax
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov esi, dword [0x101544a0]
add esp, 0x20
mov ecx, 0x1015dbb8
push 0xd
call fcn.10047580
mov ebx, dword [ebp - 0x150]
push esi
push eax
mov eax, dword [edi + 0x2e8]
push 1
push 0xd2
add eax, 0x8e
push eax
lea eax, [ebx + 0x8c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
mov ecx, 0x1015dbb8
push 9
call fcn.10047580
push 0x101544a4
push eax
mov eax, dword [edi + 0x2e8]
push 1
push 0xa0
add eax, 0xea
push eax
lea eax, [ebx + 0x3c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
push 9
mov ecx, 0x1015dbb8
call fcn.10047580
push 0x101544a4
push eax
mov eax, dword [ebp - 0x144]
push 1
push 0xa0
mov eax, dword [eax + 0x2e8]
add eax, 0xea
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x3c
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp eax, 3
jne 0x1004d135
cmp dword [0x10186334], 2
jne 0x1004c995
mov esi, dword [0xe8c58c]
mov edi, 0x41fe10
call edi
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call edi
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call edi
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0x10304d3c
push str.Ranking__s
lea eax, [ebp - 0x128]
push 0x100
push eax
call sym.Main.dll_snprintf
mov edi, dword [ebx + 0x2e8]
add esp, 0x10
mov esi, dword [ebx + 0x2e4]
mov eax, 0x41fe10
add edi, 0x19
add esi, 0x41
call eax
push 0
push 1
push 0
push 0
lea ecx, [ebp - 0x128]
mov edx, 0x420150
push ecx
push edi
push esi
mov ecx, eax
call edx
mov esi, dword [0xe8c588]
mov eax, 0x41fe10
call eax
mov ecx, eax
mov eax, 0x420120
push esi
call eax
jmp 0x1004c9da
movd xmm0, dword [ebx + 0x2e4]
mov eax, dword [ebx + 0x2e8]
push 0x10304d3c
cvtdq2ps xmm0, xmm0
push str.Ranking__s
push 3
push 0xd2
add eax, 0xd
push eax
subss xmm0, dword [0x10143aa0]
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x20
cmp dword [0x10304d30], 0
mov edx, 0x790b10
mov esi, 0x791070
mov edi, 0x790e40
jle 0x1004cb8f
mov eax, dword [ebx + 0x2e8]
push 0x17
add eax, 0x2d
push 0x14
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0xa
push eax
call edx
add esp, 0x10
test al, al
je 0x1004cb32
cmp byte [ebx + 0x2dc], 0
jne 0x1004cb25
push 1
call esi
add esp, 4
test eax, eax
je 0x1004cb25
cmp byte [0x8793386], 0
je 0x1004cb25
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004cb25
mov eax, 0x83c080
call eax
mov eax, dword [ebx + 0x2e8]
sub esp, 0x18
add eax, 0x2d
mov dword [esp + 0x14], 0x42380000
movd xmm0, eax
mov eax, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
add eax, 0xa
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e56
call edi
mov eax, dword [0x10304d30]
add esp, 0x1c
test eax, eax
jne 0x1004caf1
lea edx, [eax + 4]
mov dword [ebp - 0x148], 0xe7f304c1
lea ecx, [ebp - 0x148]
call fcn.100d0350
mov dword [0x10304d30], 0
mov byte [ebp - 0x154], 0
jmp 0x1004cafd
dec eax
mov dword [0x10304d30], eax
mov byte [ebp - 0x154], al
mov edx, 5
mov dword [ebp - 0x158], 0xe6f305c1
lea ecx, [ebp - 0x158]
call fcn.100d0350
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x2d4], eax
jmp 0x1004cb8a
sub esp, 0x18
mov dword [esp + 0x14], 0x41b80000
jmp 0x1004cb3d
sub esp, 0x18
mov dword [esp + 0x14], 0
mov eax, dword [ebx + 0x2e8]
add eax, 0x2d
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movd xmm0, eax
mov eax, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
add eax, 0xa
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e56
call edi
add esp, 0x1c
mov edx, 0x790b10
mov eax, dword [0x10304d38]
dec eax
cmp dword [0x10304d30], eax
jge 0x1004cd1c
mov eax, dword [ebx + 0x2e8]
mov ecx, dword [ebx + 0x2ec]
add eax, 0x2d
push 0x17
push 0x14
push eax
mov eax, dword [ebx + 0x2e4]
add ecx, 0xffffffda
add eax, ecx
push eax
call edx
add esp, 0x10
test al, al
je 0x1004ccbc
cmp byte [ebx + 0x2dc], 0
jne 0x1004ccaf
push 1
call esi
add esp, 4
test eax, eax
je 0x1004ccaf
cmp byte [0x8793386], 0
je 0x1004ccaf
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
cmp eax, ecx
jb 0x1004ccaf
mov eax, 0x83c080
call eax
mov eax, dword [ebx + 0x2e8]
sub esp, 0x18
mov ecx, dword [ebx + 0x2e4]
add eax, 0x2d
add ecx, 0xffffffda
mov dword [esp + 0x14], 0x42380000
movd xmm0, eax
mov eax, dword [ebx + 0x2ec]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
add eax, ecx
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
mov eax, dword [0x10304d30]
lea ecx, [ebp - 0x158]
add esp, 0x1c
mov dword [ebp - 0x158], 0xe6f305c1
inc eax
mov edx, 5
mov dword [0x10304d30], eax
mov byte [ebp - 0x154], al
call fcn.100d0350
call esi
mov dword [ebx + 0x2d4], eax
jmp 0x1004cd1c
sub esp, 0x18
mov dword [esp + 0x14], 0x41b80000
jmp 0x1004ccc7
sub esp, 0x18
mov dword [esp + 0x14], 0
mov eax, dword [ebx + 0x2e8]
mov ecx, dword [ebx + 0x2e4]
add eax, 0x2d
mov dword [esp + 0x10], 0
add ecx, 0xffffffda
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movd xmm0, eax
mov eax, dword [ebx + 0x2ec]
cvtdq2ps xmm0, xmm0
add eax, ecx
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
add esp, 0x1c
cmp dword [0x10304d34], 1
jne 0x1004cf6c
mov eax, dword [ebx + 0x2e8]
push str.Rank:
push 1
push 0x34
add eax, 0x50
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0x28
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x50
push 0x10304d50
push 0x1013d9f4
push 1
push 0x34
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0x4b
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
push 0x10304d64
push 0x1013d9f4
push 1
push 0x34
add eax, 0x50
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0x7d
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov edx, dword [0x7bc4f04]
xor ecx, ecx
add edx, 0x38
mov dword [ebp - 0x144], ecx
add esp, 0x40
mov dword [ebp - 0x154], edx
cmp dword [0x10304d78], ecx
jle 0x1004ed72
mov eax, 0x10304d7c
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x150], eax
mov esi, 0xff8be100
mov edi, 0xff19bdff
mov ecx, eax
mov eax, edx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1004ce16
test dl, dl
je 0x1004ce12
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1004ce16
add eax, 2
add ecx, 2
test dl, dl
jne 0x1004cdf6
xor eax, eax
jmp 0x1004ce1b
sbb eax, eax
or eax, 1
mov ecx, dword [ebp - 0x148]
test eax, eax
mov eax, dword [ebp - 0x144]
cmovne esi, edi
mov edi, dword [ebx + 0x2e4]
inc eax
add ecx, 0x5a
push eax
push 0x101408dc
mov dword [ebp - 0x144], eax
mov eax, dword [ebx + 0x2e8]
push 1
push 0x34
add eax, ecx
push eax
lea eax, [edi + 0x2d]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push esi
push 0x10193bd8
call fcn.1007dc40
push dword [ebp - 0x150]
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebx + 0x2e8]
add ecx, 0x5a
push 0x1013d9f4
push 1
push 0x34
add eax, ecx
push eax
lea eax, [edi + 0x46]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push esi
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebp - 0x150]
add esp, 0x40
mov ecx, dword [ebp - 0x148]
add ecx, 0x5a
push dword [eax + 0x14]
mov eax, dword [ebx + 0x2e8]
push 0x1013d534
push 1
push 0x34
add eax, ecx
push eax
lea eax, [edi + 0x7d]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push esi
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
mov esi, dword [ebp - 0x148]
add eax, 0x5c
push str._________________________________
push 1
push 0x6e
add eax, esi
push eax
lea eax, [edi + 0x2c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm0
push eax
push 0x64d3d3d3
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebp - 0x150]
add esp, 0x3c
add eax, 0x18
add esi, 0xc
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x148], esi
mov ecx, dword [ebp - 0x144]
mov edi, 0xff19bdff
mov esi, 0xff8be100
mov edx, dword [ebp - 0x154]
cmp ecx, dword [0x10304d78]
jl 0x1004cdf2
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
mov esi, dword [0x10304e6c]
cmp esi, 1
jne 0x1004cfd4
mov eax, dword [ebx + 0x2e8]
push str.Loading_..
push esi
add eax, 0x64
push 0x34
push eax
mov eax, 0x55555556
imul dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
mov ecx, edx
add eax, 0x14
shr ecx, 0x1f
add ecx, edx
add eax, ecx
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304e6c], 2
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp esi, 2
jne 0x1004d037
mov eax, dword [ebx + 0x2e8]
push str.Loading_...
push 1
add eax, 0x64
push 0x34
push eax
mov eax, 0x55555556
imul dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
mov ecx, edx
add eax, 0x14
shr ecx, 0x1f
add ecx, edx
add eax, ecx
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304e6c], 3
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp esi, 3
jne 0x1004d09a
mov eax, dword [ebx + 0x2e8]
push str.Loading_....
push 1
add eax, 0x64
push 0x34
push eax
mov eax, 0x55555556
imul dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
mov ecx, edx
add eax, 0x14
shr ecx, 0x1f
add ecx, edx
add eax, ecx
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304e6c], 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
mov edi, dword [ebx + 0x2e8]
mov eax, 0x55555556
imul dword [ebx + 0x2ec]
mov eax, dword [ebx + 0x2e4]
add edi, 0x64
mov ecx, edx
add eax, 0x14
shr ecx, 0x1f
add ecx, edx
add eax, ecx
cmp esi, 4
jne 0x1004d0fd
push str.Loading_.....
push 1
push 0x34
push edi
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304e6c], 0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
push str.Loading_.
push 1
push 0x34
push edi
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov dword [0x10304e6c], 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp eax, 4
jne 0x1004d70f
cmp dword [0x10186334], 2
jne 0x1004d1f1
mov esi, dword [0xe8c58c]
mov ebx, 0x41fe10
call ebx
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call ebx
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call ebx
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0x1c
mov ecx, 0x1015dbb8
call fcn.10047580
mov ebx, eax
mov eax, dword [ebp - 0x144]
mov edi, dword [eax + 0x2e8]
mov esi, dword [eax + 0x2e4]
add edi, 0x19
mov eax, 0x41fe10
add esi, 0x41
call eax
push 0
push 1
push 0
push 0
push ebx
push edi
push esi
mov edx, 0x420150
mov ecx, eax
call edx
mov esi, dword [0xe8c588]
mov eax, 0x41fe10
call eax
mov ecx, eax
mov eax, 0x420120
push esi
call eax
mov ebx, dword [ebp - 0x144]
jmp 0x1004d227
push 0x1c
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 3
push 0xd2
add eax, 0xd
push eax
push dword [ebx + 0x2e4]
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov eax, dword [ebx + 0x2e8]
push str.Command:
push 1
push 0x34
add eax, 0x37
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0x28
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x37
push str.Comment:
push 1
push 0x34
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0x69
push eax
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
mov ecx, dword [0x10304478]
add esp, 0x1c
mov edx, 0x790b10
mov esi, 0x791070
mov edi, 0x790e40
test ecx, ecx
jne 0x1004d2ac
cmp dword [0x1030447c], 0x19
jg 0x1004d2d5
jmp 0x1004d59f
cmp ecx, 1
jne 0x1004d2bf
cmp dword [0x1030447c], 0x32
jg 0x1004d2d5
jmp 0x1004d455
cmp ecx, 2
jne 0x1004d442
cmp dword [0x1030447c], 0x4b
jle 0x1004d455
mov eax, dword [ebx + 0x2e8]
mov ecx, dword [ebx + 0x2ec]
add eax, 0x2d
push 0x17
push 0x14
push eax
mov eax, dword [ebx + 0x2e4]
add ecx, 0xffffffe4
add eax, ecx
push eax
call edx
add esp, 0x10
test al, al
je 0x1004d3d7
cmp byte [ebx + 0x2dc], 0
jne 0x1004d3ca
push 1
call esi
add esp, 4
test eax, eax
je 0x1004d3ca
cmp byte [0x8793386], 0
je 0x1004d3ca
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
test edx, edx
jb 0x1004d3ca
ja 0x1004d34f
cmp eax, ecx
jb 0x1004d3ca
mov eax, 0x83c080
call eax
mov eax, dword [ebx + 0x2e8]
sub esp, 0x18
mov ecx, dword [ebx + 0x2e4]
add eax, 0x2d
add ecx, 0xffffffe4
mov dword [esp + 0x14], 0x42380000
movd xmm0, eax
mov eax, dword [ebx + 0x2ec]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
add eax, ecx
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
inc dword [0x10304478]
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d4], eax
jmp 0x1004d437
sub esp, 0x18
mov dword [esp + 0x14], 0x41b80000
jmp 0x1004d3e2
sub esp, 0x18
mov dword [esp + 0x14], 0
mov eax, dword [ebx + 0x2e8]
mov ecx, dword [ebx + 0x2e4]
add eax, 0x2d
mov dword [esp + 0x10], 0
add ecx, 0xffffffe4
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movd xmm0, eax
mov eax, dword [ebx + 0x2ec]
cvtdq2ps xmm0, xmm0
add eax, ecx
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
add esp, 0x1c
mov ecx, dword [0x10304478]
mov edx, 0x790b10
cmp ecx, 1
je 0x1004d455
cmp ecx, 2
je 0x1004d455
cmp ecx, 3
jne 0x1004d59f
mov eax, dword [ebx + 0x2e8]
push 0x17
add eax, 0x2d
push 0x14
push eax
mov eax, dword [ebx + 0x2e4]
add eax, 0xa
push eax
call edx
add esp, 0x10
test al, al
je 0x1004d541
cmp byte [ebx + 0x2dc], 0
jne 0x1004d534
push 1
call esi
add esp, 4
test eax, eax
je 0x1004d534
cmp byte [0x8793386], 0
je 0x1004d534
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
call esi
mov ecx, dword [ebx + 0x2d4]
add ecx, 0xfa
test edx, edx
jb 0x1004d534
ja 0x1004d4c5
cmp eax, ecx
jb 0x1004d534
mov eax, 0x83c080
call eax
mov eax, dword [ebx + 0x2e8]
sub esp, 0x18
add eax, 0x2d
mov dword [esp + 0x14], 0x42380000
movd xmm0, eax
mov eax, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
add eax, 0xa
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e56
call edi
dec dword [0x10304478]
add esp, 0x1c
call esi
mov dword [ebx + 0x2d4], eax
jmp 0x1004d599
sub esp, 0x18
mov dword [esp + 0x14], 0x41b80000
jmp 0x1004d54c
sub esp, 0x18
mov dword [esp + 0x14], 0
mov eax, dword [ebx + 0x2e8]
add eax, 0x2d
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movd xmm0, eax
mov eax, dword [ebx + 0x2e4]
cvtdq2ps xmm0, xmm0
add eax, 0xa
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e56
call edi
add esp, 0x1c
mov ecx, dword [0x10304478]
imul esi, ecx, 0x19
mov dword [ebp - 0x14c], esi
lea eax, [esi + 0x19]
cmp esi, eax
jge 0x1004ed72
imul eax, esi, 0x58
mov edx, 0xff19bdff
mov edi, 0xffcc6699
mov dword [ebp - 0x168], 0x7d04d0
add eax, 0x1030221c
mov dword [ebp - 0x148], eax
cmp dword [eax - 4], 0xffffffff
je 0x1004d6da
mov eax, dword [eax]
cmp eax, 1
jne 0x1004d5ed
mov edx, 0xff19bdff
jmp 0x1004d62d
cmp eax, 2
jne 0x1004d5f7
or edx, 0xffffffff
jmp 0x1004d62d
cmp eax, 3
jne 0x1004d603
mov edx, 0xff1969ff
jmp 0x1004d62d
cmp eax, 4
jne 0x1004d60f
mov edx, 0xff2d5fe1
jmp 0x1004d62d
cmp eax, 5
jne 0x1004d61b
mov edx, 0xff8be100
jmp 0x1004d62d
cmp eax, 6
jne 0x1004d627
mov edx, 0xff00ffff
jmp 0x1004d62d
cmp eax, 7
cmove edx, edi
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x154], esi
test ecx, ecx
jle 0x1004d646
imul eax, ecx, 0x19
mov ecx, esi
sub ecx, eax
jmp 0x1004d64c
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebx + 0x2e8]
lea ecx, [ecx + ecx*4]
mov edi, dword [ebx + 0x2e4]
lea eax, [eax + ecx*2]
add eax, 0x4b
movd xmm0, eax
mov eax, dword [ebp - 0x148]
cvtdq2ps xmm0, xmm0
add eax, 4
push eax
push 1
push 0x64
lea eax, [edi + 0xa]
cvttss2si esi, xmm0
push esi
push eax
push edx
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
lea eax, [edi + 0x70]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 1
push 0
push dword [ebp - 0x150]
cvttss2si eax, xmm0
push 0
push 0x46
push esi
push eax
mov eax, dword [ebp - 0x148]
add eax, 0x2c
push eax
call dword [ebp - 0x168]
mov ecx, dword [0x10304478]
add esp, 0x20
mov eax, dword [ebp - 0x148]
mov edx, 0xff19bdff
mov esi, dword [ebp - 0x14c]
mov edi, 0xffcc6699
add eax, 0x58
inc esi
mov dword [ebp - 0x148], eax
lea eax, [ecx + 1]
imul eax, eax, 0x19
mov dword [ebp - 0x14c], esi
cmp esi, eax
mov eax, dword [ebp - 0x148]
jl 0x1004d5d5
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
cmp eax, 5
jne 0x1004ed72
cmp dword [0x10186334], 2
jne 0x1004d7cb
mov esi, dword [0xe8c58c]
mov ebx, 0x41fe10
call ebx
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call ebx
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call ebx
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0x2c
mov ecx, 0x1015dbb8
call fcn.10047580
mov ebx, eax
mov eax, dword [ebp - 0x144]
mov edi, dword [eax + 0x2e8]
mov esi, dword [eax + 0x2e4]
add edi, 0x19
mov eax, 0x41fe10
add esi, 0x41
call eax
push 0
push 1
push 0
push 0
push ebx
push edi
push esi
mov edx, 0x420150
mov ecx, eax
call edx
mov esi, dword [0xe8c588]
mov eax, 0x41fe10
call eax
mov ecx, eax
mov eax, 0x420120
push esi
call eax
mov ebx, dword [ebp - 0x144]
jmp 0x1004d801
push 0x2c
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
push 3
push 0xd2
add eax, 0xd
push eax
push dword [ebx + 0x2e4]
push 0xff19bdff
push 0x10193bd8
call fcn.1007dc40
add esp, 0x1c
mov esi, dword [ebx + 0x2e4]
mov ecx, 0x1015dbb8
push 0x4e
movd xmm0, esi
add esi, 0x1e
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10143bc0]
movss dword [ebp - 0x150], xmm0
addss xmm0, dword [0x10143bf8]
movss dword [ebp - 0x144], xmm0
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x41
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x3e
sub esp, 0x18
cmp byte [0x1014ceac], 0
mov edi, 0x790e40
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
jne 0x1004d8ad
mov dword [esp + 0x14], 0
jmp 0x1004d8b5
mov dword [esp + 0x14], 0x41700000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x3e
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004d961
cmp byte [0x8793386], 0
je 0x1004d961
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004d961
ja 0x1004d947
cmp eax, ecx
jb 0x1004d961
cmp byte [0x1014ceac], 0
sete byte [0x1014ceac]
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
cmp dword [0x101f6768], 0
mov ecx, 0x1015dbb8
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push 0x4f
cvttss2si eax, xmm0
mov dword [ebp - 0x14c], eax
je 0x1004dabc
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x5f
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
push dword [ebp - 0x14c]
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x5c
sub esp, 0x18
cmp dword [0x102c32fc], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004d9f0
mov dword [esp + 0x14], 0x41700000
jmp 0x1004d9f8
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x5c
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004db4d
cmp byte [0x8793386], 0
je 0x1004db4d
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004db4d
ja 0x1004da9a
cmp eax, ecx
jb 0x1004db4d
xor eax, eax
cmp dword [0x102c32fc], 1
setne al
mov dword [0x102c32fc], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
jmp 0x1004db4d
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x5f
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
push dword [ebp - 0x14c]
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 4
add eax, 0x5c
mov dword [esp + 0x14], 0x41700000
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
addss xmm0, dword [0x10143bc0]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7b69
call edi
add esp, 0x1c
push 0x50
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x7d
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x7a
sub esp, 0x18
cmp byte [0x10194295], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004dbc4
mov dword [esp + 0x14], 0x41700000
jmp 0x1004dbcc
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x7a
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004dc78
cmp byte [0x8793386], 0
je 0x1004dc78
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004dc78
ja 0x1004dc5e
cmp eax, ecx
jb 0x1004dc78
cmp byte [0x10194295], 1
setne byte [0x10194295]
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
push 0x51
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x9b
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x98
sub esp, 0x18
cmp dword [0x102c332c], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004dcf3
mov dword [esp + 0x14], 0x41700000
jmp 0x1004dcfb
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x98
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004ddac
cmp byte [0x8793386], 0
je 0x1004ddac
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004ddac
ja 0x1004dd8f
cmp eax, ecx
jb 0x1004ddac
xor eax, eax
cmp dword [0x102c332c], 1
setne al
mov dword [0x102c332c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
push 0x52
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0xb9
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xb6
sub esp, 0x18
cmp byte [0x10194695], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004de27
mov dword [esp + 0x14], 0x41700000
jmp 0x1004de2f
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xb6
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004dedd
cmp byte [0x8793386], 0
je 0x1004dedd
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004dedd
ja 0x1004dec3
cmp eax, ecx
jb 0x1004dedd
cmp byte [0x10194695], 1
setne byte [0x10194695]
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
mov ecx, 0x101f64e3
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004dee5
sub ecx, edx
je 0x1004df80
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0x130], 0
push 0x101f64e3
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x12c], 0
movups xmmword [ebp - 0x140], xmm0
call fcn.1000d0f0
mov dword [ebp - 0x168], 1
lea edx, [ebp - 0x140]
cmp dword [ebp - 0x12c], 0xf
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x130]
cmova edx, ecx
test eax, eax
je 0x1004df86
add eax, edx
mov dword [ebp - 0x14c], eax
mov eax, edx
cmp edx, dword [ebp - 0x14c]
jae 0x1004df86
nop
cmp byte [eax], 0x20
jne 0x1004df70
inc eax
cmp eax, dword [ebp - 0x14c]
jb 0x1004df60
jmp 0x1004df86
sub eax, edx
cmp eax, 0xffffffff
je 0x1004df86
mov byte [ebp - 0x15d], 0
jmp 0x1004df8d
mov ecx, dword [ebp - 0x140]
mov byte [ebp - 0x15d], 1
test byte [ebp - 0x168], 1
je 0x1004dfce
mov eax, dword [ebp - 0x12c]
cmp eax, 0xf
jbe 0x1004dfce
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x1004dfc4
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004dfc4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10131b2c
add esp, 8
cmp byte [ebp - 0x15d], 0
je 0x1004e10c
push 0x53
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0xd7
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xd4
sub esp, 0x18
cmp byte [0x1014d46c], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
jne 0x1004e056
mov dword [esp + 0x14], 0x41700000
jmp 0x1004e05e
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xd4
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004e10c
cmp byte [0x8793386], 0
je 0x1004e10c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004e10c
ja 0x1004e0f2
cmp eax, ecx
jb 0x1004e10c
cmp byte [0x1014d46c], 0
sete byte [0x1014d46c]
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
push 0x54
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0xf5
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xf2
sub esp, 0x18
cmp dword [0x102c3320], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004e187
mov dword [esp + 0x14], 0x41700000
jmp 0x1004e18f
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x144]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xf2
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x144]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004e27b
cmp byte [0x8793386], 0
je 0x1004e27b
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
call esi
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004e27b
ja 0x1004e229
cmp eax, ecx
jb 0x1004e27b
cmp dword [0x102c3320], 1
je 0x1004e250
push 0x100311d0
push 0x60b36a
push 0xe9
call fcn.100d5c50
add esp, 0xc
mov eax, 1
jmp 0x1004e26e
push 0x10031320
push 0x60b36a
push 0xe9
call fcn.100d5c50
add esp, 0xc
call fcn.100313a0
xor eax, eax
mov dword [0x102c3320], eax
call esi
mov dword [ebx + 0x2d8], eax
movss xmm0, dword [ebp - 0x150]
mov ecx, 0x1015dbb8
addss xmm0, dword [0x10143db4]
mov esi, dword [ebx + 0x2e4]
push 0x55
add esi, 0x82
movss dword [ebp - 0x150], xmm0
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x41
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x3e
sub esp, 0x18
cmp dword [0x102c331c], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004e316
mov dword [esp + 0x14], 0x41700000
jmp 0x1004e31e
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x150]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x3e
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x150]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004e46a
cmp byte [0x8793386], 0
je 0x1004e46a
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004e46a
ja 0x1004e3c0
cmp eax, ecx
jb 0x1004e46a
cmp dword [0x102c331c], 1
je 0x1004e452
lea eax, [ebp - 0x14c]
push eax
push 0x40
push 5
push 0x576ddb
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x576ddb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x14c]
push 5
push 0x576ddb
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14c]
push eax
push 0x40
push 5
push 0x5883f4
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x5883f4
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x14c]
push 5
push 0x5883f4
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 1
jmp 0x1004e459
call fcn.10031440
xor eax, eax
mov dword [0x102c331c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
push 0x56
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x5f
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x5c
sub esp, 0x18
cmp dword [0x102c3318], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004e4e1
mov dword [esp + 0x14], 0x41700000
jmp 0x1004e4e9
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x150]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x5c
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x150]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004e652
cmp byte [0x8793386], 0
je 0x1004e652
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004e652
ja 0x1004e58b
cmp eax, ecx
jb 0x1004e652
cmp dword [0x102c3318], 1
lea eax, [ebp - 0x14c]
push eax
push 0x40
push 5
push 0x588661
je 0x1004e5da
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x588661
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x14c]
push 5
push 0x588661
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 1
jmp 0x1004e641
mov byte [ebp - 0x168], 0xe8
mov dword [ebp - 0x167], 0xfffdcf5a
mov dword [ebp - 0x14c], 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x1004e639
mov eax, dword [ebp - 0x168]
mov ecx, 0x588661
mov dword [ecx], eax
mov al, byte [ebp - 0x164]
mov byte [ecx + 4], al
lea eax, [ebp - 0x154]
push eax
push dword [ebp - 0x14c]
mov dword [ebp - 0x154], 0
push 5
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x1004e63f
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov dword [0x102c3318], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
push 0x57
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x7d
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x7a
sub esp, 0x18
cmp dword [0x102c3324], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004e6c9
mov dword [esp + 0x14], 0x41700000
jmp 0x1004e6d1
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x150]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x7a
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x150]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004e82e
cmp byte [0x8793386], 0
je 0x1004e82e
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004e82e
ja 0x1004e773
cmp eax, ecx
jb 0x1004e82e
cmp dword [0x102c3324], 1
lea eax, [ebp - 0x14c]
push eax
push 0x40
push 1
mov dword [ebp - 0x14c], 0
push 0x5de2b2
je 0x1004e7dc
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x1004e7cf
lea eax, [ebp - 0x154]
mov byte [0x5de2b2], 1
push eax
push dword [ebp - 0x14c]
mov dword [ebp - 0x154], 0
push 1
push 0x5de2b2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x1004e7d5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, 1
jmp 0x1004e81d
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x1004e815
lea eax, [ebp - 0x154]
mov byte [0x5de2b2], 0
push eax
push dword [ebp - 0x14c]
mov dword [ebp - 0x154], 0
push 1
push 0x5de2b2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x1004e81b
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov dword [0x102c3324], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
push 0x58
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0x9b
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x98
sub esp, 0x18
cmp dword [0x102c3314], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004e8a9
mov dword [esp + 0x14], 0x41700000
jmp 0x1004e8b1
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x150]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0x98
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x150]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004e99c
cmp byte [0x8793386], 0
je 0x1004e99c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004e99c
ja 0x1004e949
cmp eax, ecx
jb 0x1004e99c
cmp dword [0x102c3314], 1
je 0x1004e963
mov dword [ebp - 0x14c], 1
mov eax, 0x10031500
jmp 0x1004e972
mov dword [ebp - 0x14c], 0
mov eax, 0x10031510
push eax
push 0x57d278
push 0xe9
call fcn.100d5c50
mov eax, dword [ebp - 0x14c]
add esp, 0xc
mov dword [0x102c3314], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
push 0x59
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0xb9
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xb6
sub esp, 0x18
cmp dword [0x102c3308], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004ea17
mov dword [esp + 0x14], 0x41700000
jmp 0x1004ea1f
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x150]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xb6
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x150]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004eb44
cmp byte [0x8793386], 0
je 0x1004eb44
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004eb44
ja 0x1004eac3
cmp eax, ecx
jb 0x1004eb44
cmp dword [0x102c3308], 1
lea eax, [ebp - 0x14c]
push eax
push 0x40
push 1
push 0x54a270
je 0x1004eb0a
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14c]
mov byte [0x54a270], 0xc3
push eax
push dword [ebp - 0x14c]
push 1
push 0x54a270
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 1
jmp 0x1004eb33
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14c]
mov byte [0x54a270], 0x55
push eax
push dword [ebp - 0x14c]
push 1
push 0x54a270
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
xor eax, eax
mov dword [0x102c3308], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebx + 0x2d8], eax
push 0x5a
mov ecx, 0x1015dbb8
call fcn.10047580
push eax
mov eax, dword [ebx + 0x2e8]
add eax, 0xd7
push 1
push 0x7d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push eax
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x10193bd8
call fcn.1007dc40
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xd4
sub esp, 0x18
cmp dword [0x102c3300], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x10143bc0]
je 0x1004ebbf
mov dword [esp + 0x14], 0x41700000
jmp 0x1004ebc7
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x150]
movss dword [esp], xmm0
push 0x7b69
call edi
mov eax, dword [ebx + 0x2e8]
add esp, 0x1c
add eax, 0xd4
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [0x10143bc0]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x150]
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1004ed72
cmp byte [0x8793386], 0
je 0x1004ed72
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
call edi
mov ecx, dword [ebx + 0x2d8]
add ecx, 0xfa
test edx, edx
jb 0x1004ed72
ja 0x1004ec6d
cmp eax, ecx
jb 0x1004ed72
cmp dword [0x102c3300], 1
lea eax, [ebp - 0x14c]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 1
push 0x59af55
je 0x1004ecfd
call esi
lea eax, [ebp - 0x14c]
mov byte [0x59af55], 0
push eax
push dword [ebp - 0x14c]
push 1
push 0x59af55
call esi
lea eax, [ebp - 0x14c]
push eax
push 0x40
push 1
push 0x59b24a
call esi
lea eax, [ebp - 0x14c]
mov byte [0x59b24a], 0
push eax
push dword [ebp - 0x14c]
push 1
push 0x59b24a
call esi
mov eax, 1
mov dword [0x102c3300], eax
call edi
mov dword [ebx + 0x2d8], eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
call esi
lea eax, [ebp - 0x14c]
mov byte [0x59af55], 1
push eax
push dword [ebp - 0x14c]
push 1
push 0x59af55
call esi
lea eax, [ebp - 0x14c]
push eax
push 0x40
push 1
push 0x59b24a
call esi
lea eax, [ebp - 0x14c]
mov byte [0x59b24a], 1
push eax
push dword [ebp - 0x14c]
push 1
push 0x59b24a
call esi
xor eax, eax
mov dword [0x102c3300], eax
call edi
mov dword [ebx + 0x2d8], eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret
mov byte [0x10194415], 0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10131804
mov esp, ebp
pop ebp
ret