Function at 0x1006af60
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x100db040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x102778dd], 0
push ebx
push esi
push edi
je 0x1006c84f
mov ebx, 0x936aac
call ebx
mov esi, 0x927c78
mov ecx, dword [eax + 0x100]
call esi
test al, al
jne 0x1006b008
call ebx
mov ecx, dword [eax + 0xdc]
call esi
test al, al
jne 0x1006b008
call ebx
mov ecx, dword [eax + 0xa0]
call esi
test al, al
jne 0x1006b008
call ebx
mov ecx, dword [eax + 0xb0]
call esi
test al, al
jne 0x1006b008
call ebx
mov ecx, dword [eax + 0x9c]
call esi
test al, al
jne 0x1006b008
call ebx
mov ecx, dword [eax + 0xb8]
call esi
test al, al
jne 0x1006b008
call ebx
mov ecx, dword [eax + 0xf0]
call esi
test al, al
jne 0x1006b008
call ebx
mov ecx, dword [eax + 0xa4]
call esi
test al, al
jne 0x1006b008
call ebx
mov ecx, dword [eax + 0xa8]
call esi
test al, al
je 0x1006b015
cmp byte [0x102778dd], 1
je 0x1006c837
push 0x39
mov esi, 0x7fc95b
call esi
mov edi, 0x7fb628
mov ecx, eax
call edi
test al, al
jne 0x1006b037
push 0x41
call esi
mov ecx, eax
call edi
test al, al
je 0x1006b044
cmp byte [0x102778dd], 1
je 0x1006c837
movss xmm1, dword [0x100d183c]
xorps xmm4, xmm4
mov dword [0x11c4454], 1
mov eax, dword [0x104f9dc8]
movss xmm3, dword [0x11b3794]
add eax, 0x140
movd xmm0, eax
xor eax, eax
comiss xmm1, xmm3
cvtdq2ps xmm0, xmm0
setae al
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm0, xmm3
ucomiss xmm2, xmm4
lahf
test ah, 0x44
jnp 0x1006b093
movaps xmm1, xmm3
jmp 0x1006b09b
movss xmm1, dword [0x11b3798]
mulss xmm1, dword [0x100d1e74]
ucomiss xmm2, xmm4
subss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1006b0b8
movss xmm3, dword [0x11b3798]
mulss xmm3, dword [0x100d1cf8]
sub esp, 0x10
mov esi, dword [sym.imp.OPENGL32.dll_glColor4f]
addss xmm3, xmm0
mov dword [esp + 0xc], 0x3f666666
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
movss dword [ebp - 0x30], xmm3
call esi
movss xmm1, dword [0x11b3794]
xor eax, eax
movss xmm0, dword [0x100d183c]
xorps xmm4, xmm4
comiss xmm0, xmm1
setae al
movd xmm3, eax
cvtdq2ps xmm3, xmm3
ucomiss xmm3, xmm4
lahf
test ah, 0x44
jnp 0x1006b127
movaps xmm0, xmm1
addss xmm0, xmm1
jmp 0x1006b133
movss xmm0, dword [0x11b3798]
addss xmm0, xmm0
movss xmm2, dword [ebp - 0x30]
ucomiss xmm3, xmm4
subss xmm2, xmm0
lahf
divss xmm2, xmm1
test ah, 0x44
jnp 0x1006b14e
movaps xmm0, xmm1
jmp 0x1006b156
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1e90]
mov ebx, 0x631289
push ecx
mov dword [esp], 0
push 1
divss xmm0, xmm1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f800000
mov dword [esp + 0x18], 0x3f800000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x43988000
movss dword [esp + 8], xmm0
mov dword [esp + 4], 0x41200000
movss dword [esp], xmm2
push 0xf070
call ebx
add esp, 0x20
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3f800000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
call esi
movss xmm1, dword [0x11b3794]
xor eax, eax
movss xmm0, dword [ebp - 0x30]
xorps xmm2, xmm2
divss xmm0, xmm1
movss dword [ebp - 0x28], xmm1
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [0x100d183c]
comiss xmm0, xmm1
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1006b221
movss dword [ebp - 0x48], xmm1
jmp 0x1006b22e
movss xmm0, dword [0x11b3798]
movss dword [ebp - 0x48], xmm0
push 0xf9
mov ecx, 0x101888b0
call fcn.1003ad30
movss xmm0, dword [ebp - 0x48]
mulss xmm0, dword [0x100d1e90]
push eax
push 0
push 3
divss xmm0, dword [ebp - 0x28]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x2c]
push 0x1f
push eax
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
movss xmm2, dword [0x11b3794]
xor eax, eax
movss xmm0, dword [0x100d183c]
add esp, 0x20
comiss xmm0, xmm2
xorps xmm3, xmm3
setae al
movd xmm1, eax
cvtdq2ps xmm1, xmm1
ucomiss xmm1, xmm3
lahf
test ah, 0x44
jnp 0x1006b2a3
movaps xmm0, xmm2
jmp 0x1006b2ab
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1e64]
ucomiss xmm1, xmm3
addss xmm0, dword [ebp - 0x30]
lahf
divss xmm0, xmm2
movss dword [ebp - 0x40], xmm0
test ah, 0x44
jnp 0x1006b2cf
movaps xmm1, xmm2
jmp 0x1006b2d7
movss xmm1, dword [0x11b3798]
mulss xmm1, dword [0x100d1bb0]
mov eax, 0x799756
push 9
cvttss2si edi, xmm0
divss xmm1, xmm2
cvttss2si esi, xmm1
movss dword [ebp - 0x44], xmm1
push esi
push 0x20
push edi
call eax
add esp, 0x10
test al, al
je 0x1006b38a
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1006b38a
movss xmm0, dword [ebp - 0x44]
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3e222378
mov dword [esp + 0x18], 0x3f29dda9
mov dword [esp + 0x14], 0x3ea8f5c3
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41100000
movss dword [esp + 8], xmm0
movss xmm0, dword [ebp - 0x40]
mov dword [esp + 4], 0x42000000
movss dword [esp], xmm0
push 0xf072
call ebx
mov byte [0x102778dd], 0
mov dword [0x11c4454], 0
mov byte [0x10849a74], 0
jmp 0x1006b403
push 9
push esi
push 0x20
push edi
mov eax, 0x799756
call eax
movss xmm0, dword [ebp - 0x44]
add esp, 0x10
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3e222378
mov dword [esp + 0x18], 0x3f29dda9
test al, al
je 0x1006b3cc
mov dword [esp + 0x14], 0x3e28f5c3
jmp 0x1006b3d4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41100000
movss dword [esp + 8], xmm0
movss xmm0, dword [ebp - 0x40]
mov dword [esp + 4], 0x42000000
movss dword [esp], xmm0
push 0xf072
call ebx
add esp, 0x30
cmp dword [0x108474c8], 0
je 0x1006c6a7
movss xmm1, dword [0x11b3794]
xor eax, eax
movss xmm0, dword [0x100d183c]
xorps xmm4, xmm4
comiss xmm0, xmm1
setae al
movd xmm2, eax
cvtdq2ps xmm2, xmm2
ucomiss xmm2, xmm4
lahf
test ah, 0x44
jnp 0x1006b443
movaps xmm0, xmm1
jmp 0x1006b44b
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1bdc]
movss xmm3, dword [ebp - 0x30]
ucomiss xmm2, xmm4
addss xmm0, xmm3
lahf
divss xmm0, xmm1
movss dword [ebp - 0x28], xmm0
test ah, 0x44
jnp 0x1006b473
movaps xmm0, xmm1
jmp 0x1006b47b
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1db8]
ucomiss xmm2, xmm4
addss xmm0, xmm3
lahf
divss xmm0, xmm1
movss dword [ebp - 0x48], xmm0
test ah, 0x44
jnp 0x1006b49e
movaps xmm0, xmm1
jmp 0x1006b4a6
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1d30]
mov ecx, 0x101888b0
push 0xfd
divss xmm0, xmm1
cvttss2si ebx, xmm0
movss dword [ebp - 0x40], xmm0
mov dword [ebp - 0x54], ebx
call fcn.1003ad30
push eax
cvttss2si eax, dword [ebp - 0x28]
push 0
push 3
push ebx
push 0x34
push eax
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x20
mov ecx, 0x101888b0
push 0xfe
call fcn.1003ad30
push eax
cvttss2si eax, dword [ebp - 0x48]
push 0
push 3
push ebx
push 0x34
push eax
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
movss xmm0, dword [0x100d183c]
xor eax, eax
movss xmm1, dword [0x11b3794]
add esp, 0x20
comiss xmm0, xmm1
xorps xmm2, xmm2
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1006b54c
movaps xmm0, xmm1
jmp 0x1006b554
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1d74]
sub esp, 0x10
mov eax, 0x799791
addss xmm0, dword [ebp - 0x30]
mov dword [esp + 0xc], 0x40400000
mov dword [esp + 8], 0x40e00000
mov dword [esp + 4], 0x428c0000
divss xmm0, xmm1
movss xmm1, dword [0x100d1c88]
movss dword [esp], xmm0
push 0x7a26
movss dword [ebp - 0x34], xmm0
movss dword [ebp - 0x44], xmm1
call eax
movss xmm0, dword [0x100d1c94]
add esp, 0x14
movaps xmm1, xmm0
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [ebp - 0x34]
xor esi, esi
subss xmm0, dword [0x100d1970]
movss dword [ebp - 0x24], xmm1
cvttss2si edi, xmm0
nop
cvttss2si eax, xmm1
push 0x14
push 0x11
push eax
push edi
mov eax, 0x799756
call eax
mov ebx, dword [sym.imp.USER32.dll_GetKeyState]
add esp, 0x10
cmp al, 1
jne 0x1006b60c
push 1
call ebx
test ax, ax
jns 0x1006b60c
mov dword [0x108474d8], esi
cmp esi, 0xc
jbe 0x1006b60c
mov dword [0x108474d8], 0xc
movss xmm0, dword [ebp - 0x24]
sub esp, 0x10
mov eax, 0x799791
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x40e00000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [esp], xmm0
push 0x7a27
call eax
movss xmm0, dword [ebp - 0x24]
inc esi
cvtps2pd xmm0, xmm0
add esp, 0x14
addsd xmm0, qword [0x100d1930]
cvtpd2ps xmm1, xmm0
movss dword [ebp - 0x24], xmm1
cmp esi, 0xd
jl 0x1006b5d0
movss xmm0, dword [ebp - 0x34]
sub esp, 0x10
mov esi, 0x799791
mov dword [esp + 0xc], 0x40400000
mov dword [esp + 8], 0x40e00000
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push 0x7a28
call esi
movss xmm0, dword [0x100d183c]
xor eax, eax
movss xmm2, dword [0x11b3794]
add esp, 0x14
comiss xmm0, xmm2
xorps xmm1, xmm1
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1006b6c8
movaps xmm1, xmm2
jmp 0x1006b6d0
movss xmm1, dword [0x11b3798]
cmp dword [0x108474d4], 9
jle 0x1006b730
mulss xmm1, dword [0x100d1d68]
sub esp, 0x10
mov ecx, dword [0x108474d8]
shl ecx, 4
sub ecx, dword [0x108474d8]
addss xmm1, dword [ebp - 0x30]
mov dword [esp + 0xc], 0x41f00000
mov dword [esp + 8], 0x41700000
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm1, xmm2
addss xmm0, dword [0x100d1c7c]
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push 0x7a29
call esi
add esp, 0x14
movss xmm0, dword [0x100d183c]
xor eax, eax
movss xmm1, dword [0x11b3794]
xorps xmm2, xmm2
comiss xmm0, xmm1
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1006b760
movaps xmm0, xmm1
jmp 0x1006b768
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1e78]
sub esp, 0x10
addss xmm0, dword [ebp - 0x30]
mov dword [esp + 0xc], 0x40400000
mov dword [esp + 8], 0x40e00000
mov dword [esp + 4], 0x428c0000
divss xmm0, xmm1
movss dword [esp], xmm0
push 0x7a26
movss dword [ebp - 0x24], xmm0
call esi
movss xmm0, dword [ebp - 0x24]
add esp, 0x14
subss xmm0, dword [0x100d1970]
xor esi, esi
cvttss2si edi, xmm0
movss xmm0, dword [0x100d1c94]
cvttss2si eax, xmm0
push 0x14
push 0x11
push eax
push edi
mov eax, 0x799756
call eax
add esp, 0x10
cmp al, 1
jne 0x1006b7f9
push 1
call ebx
test ax, ax
jns 0x1006b7f9
mov dword [0x108474dc], esi
cmp esi, 0xc
jbe 0x1006b7f9
mov dword [0x108474dc], 0xc
movss xmm0, dword [ebp - 0x3c]
sub esp, 0x10
mov eax, 0x799791
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x40e00000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x24]
movss dword [esp], xmm0
push 0x7a27
call eax
movss xmm0, dword [ebp - 0x3c]
inc esi
cvtps2pd xmm0, xmm0
add esp, 0x14
addsd xmm0, qword [0x100d1930]
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x3c], xmm0
cmp esi, 0xd
jl 0x1006b7c3
sub esp, 0x10
mov ebx, 0x799791
mov dword [esp + 0xc], 0x40400000
mov dword [esp + 8], 0x40e00000
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x24]
movss dword [esp], xmm0
push 0x7a28
call ebx
movss xmm0, dword [0x100d183c]
xor eax, eax
movss xmm2, dword [0x11b3794]
add esp, 0x14
comiss xmm0, xmm2
xorps xmm1, xmm1
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1006b8b5
movaps xmm1, xmm2
jmp 0x1006b8bd
movss xmm1, dword [0x11b3798]
cmp dword [0x108474d0], 9
jle 0x1006b91d
mulss xmm1, dword [0x100d1e70]
sub esp, 0x10
mov ecx, dword [0x108474dc]
shl ecx, 4
sub ecx, dword [0x108474dc]
addss xmm1, dword [ebp - 0x30]
mov dword [esp + 0xc], 0x41f00000
mov dword [esp + 8], 0x41700000
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm1, xmm2
addss xmm0, dword [0x100d1c7c]
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push 0x7a29
call ebx
add esp, 0x14
movss xmm0, dword [0x100d183c]
xor eax, eax
movss xmm3, dword [0x11b3794]
comiss xmm0, xmm3
xorps xmm0, xmm0
setae al
movd xmm5, eax
cvtdq2ps xmm5, xmm5
ucomiss xmm5, xmm0
lahf
test ah, 0x44
jnp 0x1006b94d
movaps xmm2, xmm3
jmp 0x1006b955
movss xmm2, dword [0x11b3798]
mulss xmm2, dword [0x100d1d50]
ucomiss xmm5, xmm0
divss xmm2, xmm3
lahf
movss dword [ebp - 0x38], xmm2
test ah, 0x44
jnp 0x1006b974
movaps xmm0, xmm3
jmp 0x1006b97c
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1be8]
xor ecx, ecx
mov edi, dword [0x108474d4]
movss xmm6, dword [ebp - 0x30]
mov esi, dword [0x108474d8]
addss xmm0, xmm6
movss xmm7, dword [0x100d1c88]
movd xmm1, edi
movaps xmm4, xmm7
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x48], 0
divss xmm0, xmm3
divss xmm1, dword [0x100d1bd0]
movss dword [ebp - 0x3c], xmm0
subss xmm1, dword [0x100d1824]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x34], xmm4
mulss xmm1, xmm0
xorps xmm0, xmm0
cvttss2si edx, xmm1
lea eax, [edx + 9]
cmp eax, edi
cmovle ecx, edx
cmp esi, 0xc
lea edx, [edi - 9]
mov esi, 0x11b3794
cmovne edx, ecx
cmp edi, 9
mov ecx, 0x11b3798
mov dword [ebp - 0x4c], edx
mov ebx, edx
lea eax, [edx + 9]
cmovge edi, eax
ucomiss xmm5, xmm0
mov dword [ebp - 0x50], edi
movss xmm5, dword [0x100d1b98]
lahf
test ah, 0x44
cmovp ecx, esi
movss xmm1, dword [ecx]
mov ecx, 0xffff
mulss xmm1, dword [0x100d1bc4]
mov byte [ebp - 0x10], 0xff
movq qword [ebp - 0xf], xmm0
mov word [ebp - 7], 0
mov byte [ebp - 5], 0
addss xmm1, xmm6
divss xmm1, xmm3
movss dword [ebp - 0x24], xmm1
cmp edx, edi
jge 0x1006bee6
lea esi, [edx + edx*2]
shl esi, 5
add esi, 0x108487f8
test ebx, ebx
js 0x1006beca
cmp ebx, 0x32
jge 0x1006beca
movzx eax, word [esi - 4]
cmp ax, cx
je 0x1006beca
cmp dword [esi + 8], 0
ja 0x1006baa7
mov word [ebp - 0x1a], ax
mov eax, dword [esi]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x1c], 2
call fcn.1006d390
cmp byte [0x10849a74], 1
jne 0x1006bc84
cmp byte [0x10849a75], 2
jne 0x1006bb1e
movzx eax, byte [0x10849a76]
cmp eax, ebx
jne 0x1006bb1e
push ecx
mov dword [esp], 0
movaps xmm0, xmm4
push 1
push 1
sub esp, 0x20
subss xmm0, xmm5
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f600000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
movss dword [esp + 8], xmm2
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push 0xc941
jmp 0x1006bb72
push ecx
mov dword [esp], 0
movaps xmm0, xmm4
push 1
push 1
sub esp, 0x20
subss xmm0, xmm5
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f600000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
movss dword [esp + 8], xmm2
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push 0xc93f
mov eax, 0x631289
call eax
add esp, 0x30
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x108474f0]
cmp eax, 0x3e8
jbe 0x1006bb92
dec dword [esi + 8]
mov eax, dword [esi + 8]
xor edi, edi
test eax, eax
cmovns edi, eax
mov eax, 0x91a2b3c5
imul edi
add edx, edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x2c], eax
movzx eax, byte [esi - 2]
dec eax
push eax
call fcn.1003aed0
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x100d1970]
push eax
lea eax, [ebx + 1]
push eax
push str._d____s
push 0
cvttss2si eax, xmm0
push 1
push dword [ebp - 0x54]
push eax
cvttss2si eax, dword [ebp - 0x3c]
push eax
push 0xffffffffffffffff
push 0x10276e38
call fcn.100712f0
movss xmm0, dword [ebp - 0x34]
lea eax, [esi - 0x44]
addss xmm0, dword [0x100d1bb0]
push eax
cvttss2si eax, dword [ebp - 0x3c]
push 0x100ceac0
push 0
push 1
push dword [ebp - 0x54]
cvttss2si ecx, xmm0
push ecx
push eax
push 0xff19bdff
push 0x10276e38
mov dword [ebp - 0x28], ecx
call fcn.100712f0
mov ecx, dword [ebp - 0x2c]
add esp, 0x4c
cmp ecx, 0x17
jle 0x1006be44
mov eax, 0x2aaaaaab
imul ecx
mov ecx, 0x101888b0
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push 0x84
call fcn.1003ad30
push eax
cvttss2si eax, dword [ebp - 0x3c]
push 0
push 4
push dword [ebp - 0x54]
push dword [ebp - 0x28]
push eax
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x24
jmp 0x1006be97
movaps xmm0, xmm4
subss xmm0, xmm5
cvttss2si edi, xmm2
push 0x17
cvttss2si eax, xmm0
push edi
cvttss2si ecx, xmm1
push eax
mov dword [ebp - 0x28], eax
mov eax, 0x799756
movss dword [ebp - 0x2c], xmm0
push ecx
mov dword [ebp - 0x58], ecx
call eax
add esp, 0x10
test al, al
je 0x1006bdab
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1006bdab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x108474e8]
cmp eax, 0xc8
jbe 0x1006bdab
movss xmm0, dword [ebp - 0x38]
mov eax, 0x631289
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f600000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
movss dword [esp + 8], xmm0
movss xmm0, dword [ebp - 0x2c]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x24]
movss dword [esp], xmm0
push 0xc941
call eax
mov word [0x10849a74], 0x201
add esp, 0x30
mov byte [0x10849a76], bl
mov eax, dword [esi + 4]
mov dword [0x10849ac0], eax
mov eax, dword [esi]
mov dword [0x10849abc], eax
mov ax, word [esi - 4]
mov word [0x10849ab8], ax
movups xmm0, xmmword [esi - 0x44]
movups xmmword [0x10849a77], xmm0
movups xmm0, xmmword [esi - 0x34]
movups xmmword [0x10849a87], xmm0
movups xmm0, xmmword [esi - 0x24]
movups xmmword [0x10849a97], xmm0
movups xmm0, xmmword [esi - 0x14]
movups xmmword [0x10849aa7], xmm0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x108474e8], eax
jmp 0x1006bb7c
push 0x17
push edi
push dword [ebp - 0x28]
mov eax, 0x799756
push dword [ebp - 0x58]
call eax
movss xmm0, dword [ebp - 0x38]
add esp, 0x10
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f600000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
movss dword [esp + 8], xmm0
movss xmm0, dword [ebp - 0x2c]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x24]
movss dword [esp], xmm0
test al, al
je 0x1006bb6d
push 0xc940
mov eax, 0x631289
call eax
mov eax, dword [esi + 0x18]
movq xmm0, qword [esi + 0x10]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0xc]
movq qword [ebp - 0x10], xmm0
mov dword [ebp - 0x48], eax
jmp 0x1006bb79
mov eax, 0x88888889
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
shl ecx, 4
sub ecx, eax
cdq
shl ecx, 2
sub edi, ecx
mov ecx, 0x3c
idiv ecx
cvttss2si eax, dword [ebp - 0x3c]
push edi
push edx
push dword [ebp - 0x2c]
push str._02d:_02d:_02d
push 0
push 4
push dword [ebp - 0x54]
push dword [ebp - 0x28]
push eax
push 0xff2d5fe1
push 0x10276e38
call fcn.100712f0
add esp, 0x2c
movss xmm0, dword [ebp - 0x34]
mov ecx, 0xffff
movss xmm2, dword [ebp - 0x38]
movss xmm1, dword [ebp - 0x24]
movss xmm5, dword [0x100d1b98]
mov edi, dword [ebp - 0x50]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x100d1940]
cvtpd2ps xmm4, xmm0
movss dword [ebp - 0x34], xmm4
inc ebx
add esi, 0x60
cmp ebx, edi
jl 0x1006ba67
movss xmm6, dword [ebp - 0x30]
movss xmm7, dword [0x100d1c88]
mov edx, dword [ebp - 0x4c]
movss xmm0, dword [0x100d183c]
xor eax, eax
movss xmm3, dword [0x11b3794]
comiss xmm0, xmm3
xorps xmm0, xmm0
setae al
movd xmm4, eax
cvtdq2ps xmm4, xmm4
ucomiss xmm4, xmm0
lahf
test ah, 0x44
jnp 0x1006bf16
movaps xmm0, xmm3
jmp 0x1006bf1e
movss xmm0, dword [0x11b3798]
mulss xmm0, dword [0x100d1db0]
add edx, 9
mov edi, dword [0x108474d0]
xor ecx, ecx
mov esi, dword [0x108474dc]
cmp edx, edi
addss xmm0, xmm6
movd xmm1, edi
lea ebx, [edi - 9]
cvtdq2ps xmm1, xmm1
divss xmm0, xmm3
divss xmm1, dword [0x100d1bd0]
movss dword [ebp - 0x24], xmm0
subss xmm1, dword [0x100d1824]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm0
xorps xmm0, xmm0
cvttss2si eax, xmm1
cmovle ecx, eax
cmp esi, 0xc
cmovne ebx, ecx
cmp edi, 9
lea eax, [ebx + 9]
cmovge edi, eax
ucomiss xmm4, xmm0
mov dword [ebp - 0x58], edi
lahf
test ah, 0x44
jnp 0x1006bf95
movaps xmm1, xmm3
jmp 0x1006bf9d
movss xmm1, dword [0x11b3798]
mulss xmm1, dword [0x100d1d9c]
addss xmm1, xmm6
divss xmm1, xmm3
movss dword [ebp - 0x34], xmm1
cmp ebx, edi
jge 0x1006c441
lea esi, [ebx + ebx*2]
shl esi, 5
add esi, 0x10847538
test ebx, ebx
js 0x1006c428
cmp ebx, 0x32
jge 0x1006c428
movzx eax, word [esi - 4]
mov ecx, 0xffff
cmp ax, cx
je 0x1006c428
cmp dword [esi + 8], 0
ja 0x1006c00b
mov word [ebp - 0x1a], ax
mov eax, dword [esi]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x1c], 1
call fcn.1006d390
cmp byte [0x10849a74], 1
jne 0x1006c1f1
cmp byte [0x10849a75], 1
jne 0x1006c082
movzx eax, byte [0x10849a76]
cmp eax, ebx
jne 0x1006c082
push ecx
mov dword [esp], 0
movaps xmm0, xmm7
push 1
push 1
sub esp, 0x20
subss xmm0, xmm5
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f600000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
movss dword [esp + 8], xmm2
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push 0xc941
jmp 0x1006c0d6
push ecx
mov dword [esp], 0
movaps xmm0, xmm7
push 1
push 1
sub esp, 0x20
subss xmm0, xmm5
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f600000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
movss dword [esp + 8], xmm2
movss dword [esp + 4], xmm0
movss dword [esp], xmm1
push 0xc93f
mov eax, 0x631289
call eax
add esp, 0x30
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x108474f0]
cmp eax, 0x3e8
jbe 0x1006c0f6
dec dword [esi + 8]
mov eax, dword [esi + 8]
xor edi, edi
test eax, eax
cmovns edi, eax
mov eax, 0x91a2b3c5
imul edi
add edx, edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x28], eax
movzx eax, byte [esi - 2]
dec eax
push eax
call fcn.1003aed0
movss xmm0, dword [ebp - 0x44]
subss xmm0, dword [0x100d1970]
push eax
lea eax, [ebx + 1]
push eax
cvttss2si eax, dword [ebp - 0x40]
push str._d____s
push 0
push 1
push eax
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
push 0xffffffffffffffff
push 0x10276e38
call fcn.100712f0
movss xmm0, dword [ebp - 0x44]
lea eax, [esi - 0x44]
addss xmm0, dword [0x100d1bb0]
push eax
cvttss2si eax, dword [ebp - 0x40]
push 0x100ceac0
push 0
push 1
cvttss2si ecx, xmm0
push eax
cvttss2si eax, dword [ebp - 0x24]
push ecx
mov dword [ebp - 0x2c], ecx
push eax
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
mov ecx, dword [ebp - 0x28]
add esp, 0x4c
cmp ecx, 0x17
jle 0x1006c3b1
mov eax, 0x2aaaaaab
imul ecx
mov ecx, 0x101888b0
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push 0x84
call fcn.1003ad30
push eax
cvttss2si eax, dword [ebp - 0x40]
push 0
push 4
push eax
cvttss2si eax, dword [ebp - 0x24]
push dword [ebp - 0x2c]
push eax
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x24
jmp 0x1006c407
movaps xmm0, xmm7
subss xmm0, xmm5
cvttss2si edi, xmm2
push 0x17
cvttss2si eax, xmm0
push edi
cvttss2si ecx, xmm1
push eax
mov dword [ebp - 0x4c], eax
mov eax, 0x799756
movss dword [ebp - 0x2c], xmm0
push ecx
mov dword [ebp - 0x50], ecx
call eax
add esp, 0x10
test al, al
je 0x1006c318
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1006c318
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x108474e8]
cmp eax, 0xc8
jbe 0x1006c318
movss xmm0, dword [ebp - 0x38]
mov eax, 0x631289
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f600000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
movss dword [esp + 8], xmm0
movss xmm0, dword [ebp - 0x2c]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [esp], xmm0
push 0xc941
call eax
mov word [0x10849a74], 0x101
add esp, 0x30
mov byte [0x10849a76], bl
mov eax, dword [esi + 4]
mov dword [0x10849ac0], eax
mov eax, dword [esi]
mov dword [0x10849abc], eax
mov ax, word [esi - 4]
mov word [0x10849ab8], ax
movups xmm0, xmmword [esi - 0x44]
movups xmmword [0x10849a77], xmm0
movups xmm0, xmmword [esi - 0x34]
movups xmmword [0x10849a87], xmm0
movups xmm0, xmmword [esi - 0x24]
movups xmmword [0x10849a97], xmm0
movups xmm0, xmmword [esi - 0x14]
movups xmmword [0x10849aa7], xmm0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x108474e8], eax
jmp 0x1006c0e0
push 0x17
push edi
push dword [ebp - 0x4c]
mov eax, 0x799756
push dword [ebp - 0x50]
call eax
movss xmm0, dword [ebp - 0x38]
add esp, 0x10
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f4ccccd
mov dword [esp + 0x18], 0x3f600000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41b80000
movss dword [esp + 8], xmm0
movss xmm0, dword [ebp - 0x2c]
movss dword [esp + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [esp], xmm0
test al, al
je 0x1006c0d1
push 0xc940
mov eax, 0x631289
call eax
mov eax, dword [esi + 0x18]
movq xmm0, qword [esi + 0x10]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0xc]
movq qword [ebp - 0x10], xmm0
mov dword [ebp - 0x48], eax
jmp 0x1006c0dd
mov eax, 0x88888889
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
shl ecx, 4
sub ecx, eax
cdq
shl ecx, 2
sub edi, ecx
mov ecx, 0x3c
idiv ecx
cvttss2si eax, dword [ebp - 0x40]
push edi
push edx
push dword [ebp - 0x28]
push str._02d:_02d:_02d
push 0
push 4
push eax
cvttss2si eax, dword [ebp - 0x24]
push dword [ebp - 0x2c]
push eax
push 0xff2d5fe1
push 0x10276e38
call fcn.100712f0
add esp, 0x2c
movss xmm0, dword [ebp - 0x44]
movss xmm1, dword [ebp - 0x34]
mov edi, dword [ebp - 0x58]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x100d1940]
cvtpd2ps xmm7, xmm0
movss dword [ebp - 0x44], xmm7
movss xmm2, dword [ebp - 0x38]
inc ebx
movss xmm5, dword [0x100d1b98]
add esi, 0x60
cmp ebx, edi
jl 0x1006bfc6
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
sub eax, dword [0x108474f0]
cmp eax, 0x3e8
jbe 0x1006c45d
call ebx
mov dword [0x108474f0], eax
movss xmm0, dword [ebp - 0x30]
xor eax, eax
subss xmm0, dword [0x100d1b98]
movss xmm1, dword [0x11b3794]
xorps xmm2, xmm2
movss dword [ebp - 0x4c], xmm1
movss dword [ebp - 0x30], xmm0
divss xmm0, xmm1
movss dword [ebp - 0x50], xmm0
movss xmm0, dword [0x100d183c]
comiss xmm0, xmm1
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1006c4af
movss dword [ebp - 0x28], xmm1
jmp 0x1006c4bc
movss xmm0, dword [0x11b3798]
movss dword [ebp - 0x28], xmm0
push 0xfb
mov ecx, 0x101888b0
call fcn.1003ad30
push eax
push 0xfa
mov ecx, 0x101888b0
call fcn.1003ad30
movss xmm0, dword [ebp - 0x28]
mulss xmm0, dword [0x100d1e90]
push eax
push str._s__s
push 3
divss xmm0, dword [ebp - 0x4c]
push 0
push 0xff19bdff
push dword [0x10849ac4]
cvttss2si eax, xmm0
push eax
cvttss2si eax, dword [ebp - 0x50]
push pe_nt_image_headers32
push eax
push 0x10276e38
call fcn.100713d0
movss xmm1, dword [0x11b3794]
xor eax, eax
movss xmm0, dword [0x100d183c]
add esp, 0x2c
comiss xmm0, xmm1
xorps xmm2, xmm2
movss dword [ebp - 0x4c], xmm1
setae al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x1006c556
movss dword [ebp - 0x28], xmm1
jmp 0x1006c563
movss xmm0, dword [0x11b3798]
movss dword [ebp - 0x28], xmm0
push 0xfc
mov ecx, 0x101888b0
call fcn.1003ad30
movss xmm0, dword [ebp - 0x28]
mulss xmm0, dword [0x100d1e90]
push eax
push 3
push 0
divss xmm0, dword [ebp - 0x4c]
push 0xff19bdff
push dword [0x10849ac4]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
divss xmm0, dword [ebp - 0x4c]
push eax
push 0x11f
cvttss2si eax, xmm0
push eax
push 0x10276e38
call fcn.100713d0
add esp, 0x24
cmp byte [ebp - 0x10], 0xff
je 0x1006c84f
mov ebx, 0x936aac
call ebx
mov edx, 0x982371
mov ecx, dword [eax + 0xcc]
call edx
test eax, eax
jne 0x1006c84f
call ebx
mov ecx, dword [eax + 0xc4]
mov eax, 0x927c78
call eax
test al, al
jne 0x1006c84f
lea eax, [ebp - 0x10]
push eax
mov eax, 0x7cd361
call eax
movzx ecx, ax
lea eax, [ebp - 9]
push eax
push dword [ebp - 0xa]
movzx eax, byte [ebp - 0xc]
mov edx, ecx
push dword [ebp - 0xb]
and ecx, 0x1ff
shr dx, 9
push eax
movzx eax, byte [ebp - 0xd]
push eax
push dword [ebp - 0xe]
movzx eax, byte [ebp - 0xf]
push eax
push ecx
movzx eax, dl
push eax
call ebx
mov edx, 0x535e32
mov ecx, eax
call edx
mov edx, 0x7ccd37
mov ecx, eax
call edx
mov esi, eax
mov ecx, 0x23
mov eax, dword [ebp - 0x48]
mov edi, 0x104fa148
rep movsd dword es:[edi], dword [esi]
mov dword [0x104fa1c4], eax
lea eax, [ebp - 0x20]
push eax
push 0x20
push 0x18
push 0x8c
push dword [0x8b156ec]
mov eax, 0x9922bb
call eax
push 0
push 0
push 0
push 0x104fa148
lea eax, [ebp - 0x20]
push eax
push 0
call ebx
mov edx, 0x99232e
mov ecx, dword [eax + 0xc4]
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a0150
mov esp, ebp
pop ebp
ret
mov eax, dword [0x108474cc]
mov ecx, 0x101888b0
cmp eax, 1
jne 0x1006c700
push 0x100cea84
push 0x85
call fcn.1003ad30
push eax
push 0
push 1
push 0x34
push 0x6e
push 0x119
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x24
mov dword [0x108474cc], 2
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a0150
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x1006c74f
push 0x100cea88
push 0x85
call fcn.1003ad30
push eax
push 0
push 1
push 0x34
push 0x6e
push 0x119
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x24
mov dword [0x108474cc], 3
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a0150
mov esp, ebp
pop ebp
ret
cmp eax, 3
jne 0x1006c79e
push str.....
push 0x85
call fcn.1003ad30
push eax
push 0
push 1
push 0x34
push 0x6e
push 0x119
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x24
mov dword [0x108474cc], 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a0150
mov esp, ebp
pop ebp
ret
cmp eax, 4
jne 0x1006c7ed
push str......
push 0x85
call fcn.1003ad30
push eax
push 0
push 1
push 0x34
push 0x6e
push 0x119
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x24
mov dword [0x108474cc], 0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a0150
mov esp, ebp
pop ebp
ret
push 0x100cea9c
push 0x85
call fcn.1003ad30
push eax
push 0
push 1
push 0x34
push 0x6e
push 0x119
push 0xff19bdff
push 0x10276e38
call fcn.100712f0
add esp, 0x24
mov dword [0x108474cc], 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a0150
mov esp, ebp
pop ebp
ret
mov byte [0x102778dd], 0
mov dword [0x11c4454], 0
mov byte [0x10849a74], 0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100a0150
mov esp, ebp
pop ebp
ret