Function at 0x10029d30
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100810c5
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x100b200c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x54], ecx
cmp dword [0x100b5ddc], 0
je 0x1002ac6e
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 0x1c
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, 0xffffff00
cmp dword [eax], 0
jne 0x1002a18f
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 4
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 2
je 0x1002a18f
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 4
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 4
je 0x1002a18f
push 0x76
mov dword [0x100b5848], 0x10015b90
call fcn.10015b90
cwde
shr eax, 0x10
test eax, eax
je 0x10029e10
cmp byte [0x100bed78], 0
je 0x10029e07
cmp dword [0x100bed7c], 0
je 0x10029e17
call esi
cmp dword [0x100bed7c], eax
ja 0x10029e17
mov byte [0x100bed78], 1
jmp 0x10029e53
mov byte [0x100bed78], 0
push 0x2d
mov dword [0x100b5848], 0x10015b90
call fcn.10015b90
cwde
shr eax, 0x10
test eax, eax
je 0x10029e65
cmp byte [0x100beb30], 0
je 0x10029e4c
cmp dword [0x100beb34], 0
je 0x10029e6c
call esi
cmp dword [0x100beb34], eax
ja 0x10029e6c
mov byte [0x100beb30], 1
xor eax, eax
cmp dword [0x100b5798], eax
sete al
mov dword [0x100b5798], eax
jmp 0x10029e6c
mov byte [0x100beb30], 0
mov eax, dword [0x100b2018]
test eax, eax
jg 0x10029e94
cmp dword [0x100b488c], 0
jne 0x10029e94
mov dword [0x100b5798], 1
mov dword [0x100b488c], 1
jmp 0x10029ea1
cmp dword [0x100b5798], 0
je 0x1002a18f
mov esi, dword [ebp - 0x18]
cmp eax, 0x28
mov ecx, 0xff00ff00
cmovle esi, ecx
cmp eax, 0x1e
mov ecx, 0xffffc000
cmovle esi, edi
cmp eax, 0x14
cmovle esi, ecx
cmp eax, 0xa
mov ecx, 0xffff0000
cmovle esi, ecx
test eax, eax
jg 0x10029ef3
mov esi, dword [0x100b2454]
movzx eax, byte [0x100b2040]
or esi, 0xffffff00
shl esi, 8
or esi, eax
movzx eax, byte [0x100b2028]
shl esi, 8
or esi, eax
mov edi, dword [0x100b510c]
mov eax, edi
mov edx, dword [0x100b5108]
mov ecx, edx
shr eax, 3
shr edi, 1
sub edi, eax
shr ecx, 3
mov eax, dword [0x100b5554]
shr edx, 1
sub edx, ecx
mov dword [ebp - 0x50], edx
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x42480000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x100b5554]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov ecx, dword [ebp - 0x50]
lea eax, [edi + 0x19]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
lea eax, [ecx + 0xaa]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x20], xmm1
movss dword [ebp - 0x24], xmm0
movd xmm0, eax
mov eax, dword [0x100b5554]
cvtdq2ps xmm0, xmm0
push eax
movss dword [ebp - 0x18], xmm1
movss dword [ebp - 0x1c], xmm0
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [0x100b5554]
lea edx, [ebp - 0x24]
push 0xc8000000
push 2
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x100b5554]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
movd xmm0, dword [ebp - 0x50]
mov edx, dword [ebp - 0x54]
movss xmm3, dword [0x100a22f0]
movss xmm2, dword [0x100a2320]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, esi
mov dword [esp], 0x40000000
cvtdq2ps xmm0, xmm0
call fcn.1001cec0
xor edx, edx
add esp, 4
cmp dword [0x100b2018], edx
jg 0x1002a0b7
mov ecx, 0x3b
nop dword [eax]
mov al, byte [edx + str.zKM]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x10029ffd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xf
jl 0x10029fe0
mov byte [ebp - 0x29], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x38]
mov ecx, dword [0x100b2454]
mov esi, dword [ebp - 0x50]
or ecx, 0xffffff00
push eax
movzx eax, byte [0x100b2040]
add esi, 0x55
shl ecx, 8
or ecx, eax
movzx eax, byte [0x100b2028]
shl ecx, 8
or ecx, eax
lea eax, [edi + 8]
push ecx
push eax
push esi
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x14
mov ecx, 0xef
xor edx, edx
mov al, byte [edx + 0x100a1d04]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1002a074
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x11
jl 0x1002a057
mov byte [ebp - 0x27], 0
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 1
push eax
push 0xffccffff
lea eax, [edi + 0x1b]
push eax
push esi
push dword [0x100b556c]
call fcn.10015f50
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movups xmmword [ebp - 0x38], xmm0
mov word [ebp - 0x28], 0
jmp 0x1002a181
mov ecx, 0xa9
nop dword [eax]
mov al, byte [edx + 0x100a1d18]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x3c], al
and ecx, 0x800000ff
jns 0x1002a0dd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x15
jl 0x1002a0c0
mov byte [ebp - 0x27], 0
mov dword [ebp - 4], 2
lea eax, [ebp - 0x3c]
push dword [0x100b266c]
mov ecx, dword [ebp - 0x50]
push dword [0x100b2018]
add ecx, 0x55
push eax
push esi
lea eax, [edi + 8]
push eax
push ecx
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x1c
mov ecx, 0xef
xor edx, edx
nop
mov al, byte [edx + 0x100a1d04]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1002a13d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x11
jl 0x1002a120
mov byte [ebp - 0x13], 0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 3
push eax
push 0xffccffff
lea eax, [edi + 0x1b]
push eax
mov eax, dword [ebp - 0x50]
add eax, 0x55
push eax
push dword [0x100b556c]
call fcn.10015f50
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, 0xffffff00
add esp, 0x14
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 0x1c
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 0
je 0x1002a578
push 0x76
mov dword [0x100b5848], 0x10015b90
call fcn.10015b90
cwde
shr eax, 0x10
test eax, eax
je 0x1002a1ec
cmp byte [0x100bed78], 0
je 0x1002a1e3
cmp dword [0x100bed7c], 0
je 0x1002a1f3
call esi
cmp dword [0x100bed7c], eax
ja 0x1002a1f3
mov byte [0x100bed78], 1
jmp 0x1002a22f
mov byte [0x100bed78], 0
push 0x2d
mov dword [0x100b5848], 0x10015b90
call fcn.10015b90
cwde
shr eax, 0x10
test eax, eax
je 0x1002a241
cmp byte [0x100beb30], 0
je 0x1002a228
cmp dword [0x100beb34], 0
je 0x1002a248
call esi
cmp dword [0x100beb34], eax
ja 0x1002a248
mov byte [0x100beb30], 1
xor eax, eax
cmp dword [0x100b5798], eax
sete al
mov dword [0x100b5798], eax
jmp 0x1002a248
mov byte [0x100beb30], 0
mov eax, dword [0x100b2018]
test eax, eax
jg 0x1002a270
cmp dword [0x100b488c], 0
jne 0x1002a270
mov dword [0x100b5798], 1
mov dword [0x100b488c], 1
jmp 0x1002a27d
cmp dword [0x100b5798], 0
je 0x1002a564
mov esi, dword [ebp - 0x18]
cmp eax, 0x28
mov ecx, 0xff00ff00
cmovle esi, ecx
cmp eax, 0x1e
mov ecx, 0xffffc000
cmovle esi, edi
cmp eax, 0x14
cmovle esi, ecx
cmp eax, 0xa
mov ecx, 0xffff0000
cmovle esi, ecx
test eax, eax
jg 0x1002a2cf
mov esi, dword [0x100b2454]
movzx eax, byte [0x100b2040]
or esi, 0xffffff00
shl esi, 8
or esi, eax
movzx eax, byte [0x100b2028]
shl esi, 8
or esi, eax
mov edi, dword [0x100b510c]
mov eax, edi
mov edx, dword [0x100b5108]
mov ecx, edx
shr eax, 3
shr edi, 1
sub edi, eax
shr ecx, 3
mov eax, dword [0x100b5554]
shr edx, 1
sub edx, ecx
mov dword [ebp - 0x50], edx
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x42480000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x100b5554]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov ecx, dword [ebp - 0x50]
lea eax, [edi + 0x19]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
lea eax, [ecx + 0xaa]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x20], xmm1
movss dword [ebp - 0x24], xmm0
movd xmm0, eax
mov eax, dword [0x100b5554]
cvtdq2ps xmm0, xmm0
push eax
movss dword [ebp - 0x18], xmm1
movss dword [ebp - 0x1c], xmm0
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [0x100b5554]
lea edx, [ebp - 0x24]
push 0xc8000000
push 2
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x100b5554]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
movd xmm0, dword [ebp - 0x50]
mov edx, dword [ebp - 0x54]
movss xmm3, dword [0x100a22f0]
movss xmm2, dword [0x100a2320]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, esi
mov dword [esp], 0x40000000
cvtdq2ps xmm0, xmm0
call fcn.1001cec0
xor edx, edx
add esp, 4
cmp dword [0x100b2018], edx
jg 0x1002a497
mov ecx, 0x3b
nop dword [eax + eax]
mov al, byte [edx + str.zKM]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1002a3dd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xf
jl 0x1002a3c0
mov byte [ebp - 0x29], 0
mov dword [ebp - 4], 4
lea eax, [ebp - 0x38]
mov ecx, dword [0x100b2454]
mov esi, dword [ebp - 0x50]
or ecx, 0xffffff00
push eax
movzx eax, byte [0x100b2040]
add esi, 0x55
shl ecx, 8
or ecx, eax
movzx eax, byte [0x100b2028]
shl ecx, 8
or ecx, eax
lea eax, [edi + 8]
push ecx
push eax
push esi
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x14
mov ecx, 0xef
xor edx, edx
mov al, byte [edx + 0x100a1d04]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1002a454
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x11
jl 0x1002a437
mov byte [ebp - 0x27], 0
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 5
push eax
push 0xffccffff
lea eax, [edi + 0x1b]
push eax
push esi
push dword [0x100b556c]
call fcn.10015f50
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movups xmmword [ebp - 0x38], xmm0
mov word [ebp - 0x28], 0
jmp 0x1002a561
mov ecx, 0xa9
nop dword [eax]
mov al, byte [edx + 0x100a1d18]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x3c], al
and ecx, 0x800000ff
jns 0x1002a4bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x15
jl 0x1002a4a0
mov byte [ebp - 0x27], 0
mov dword [ebp - 4], 6
lea eax, [ebp - 0x3c]
push dword [0x100b266c]
mov ecx, dword [ebp - 0x50]
push dword [0x100b2018]
add ecx, 0x55
push eax
push esi
lea eax, [edi + 8]
push eax
push ecx
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x1c
mov ecx, 0xef
xor edx, edx
nop
mov al, byte [edx + 0x100a1d04]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1002a51d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x11
jl 0x1002a500
mov byte [ebp - 0x13], 0
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 7
push eax
push 0xffccffff
lea eax, [edi + 0x1b]
push eax
mov eax, dword [ebp - 0x50]
add eax, 0x55
push eax
push dword [0x100b556c]
call fcn.10015f50
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0
add esp, 0x14
mov eax, dword [0x100bac24]
mov ecx, 1
test eax, eax
cmove eax, ecx
mov dword [0x100bac24], eax
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 0x1c
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 0
jne 0x1002a5e6
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 4
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 2
je 0x1002a5c9
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 4
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 4
jne 0x1002a5e6
cmp dword [0x100bac24], 0
je 0x1002a5e6
mov dword [0x100b5798], 1
mov dword [0x100bac24], 0
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 0x1c
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 0
jne 0x1002ac6e
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 4
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 2
je 0x1002a63f
mov ecx, dword [0x100b511c]
mov eax, dword [0x100bac94]
add eax, 4
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
cmp dword [eax], 4
jne 0x1002ac6e
push 0x76
mov dword [0x100b5848], 0x10015b90
call fcn.10015b90
cwde
shr eax, 0x10
test eax, eax
je 0x1002a683
cmp byte [0x100bed78], 0
je 0x1002a67a
cmp dword [0x100bed7c], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
je 0x1002a690
call esi
cmp dword [0x100bed7c], eax
ja 0x1002a690
mov byte [0x100bed78], 1
jmp 0x1002a6cc
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [0x100bed78], 0
push 0x2d
mov dword [0x100b5848], 0x10015b90
call fcn.10015b90
cwde
shr eax, 0x10
test eax, eax
je 0x1002a6de
cmp byte [0x100beb30], 0
je 0x1002a6c5
cmp dword [0x100beb34], 0
je 0x1002a6e5
call esi
cmp dword [0x100beb34], eax
ja 0x1002a6e5
mov byte [0x100beb30], 1
xor eax, eax
cmp dword [0x100b5798], eax
sete al
mov dword [0x100b5798], eax
jmp 0x1002a6e5
mov byte [0x100beb30], 0
mov edx, dword [0x100b2018]
test edx, edx
jg 0x1002a70c
cmp dword [0x100b488c], 0
jne 0x1002a70c
mov dword [0x100b5798], 1
mov dword [0x100b488c], 1
mov esi, dword [0x100b5108]
mov ecx, esi
mov edi, dword [0x100b510c]
mov eax, edi
shr ecx, 3
shr eax, 3
shr esi, 1
shr edi, 1
sub esi, ecx
sub edi, eax
mov dword [ebp - 0x18], esi
cmp dword [0x100b5798], 0
je 0x1002ac6e
mov esi, dword [ebp - 0x18]
cmp edx, 0x28
mov eax, 0xff00ff00
cmovle esi, eax
cmp edx, 0x1e
mov eax, 0xffffff00
cmovle esi, eax
cmp edx, 0x14
mov eax, 0xffffc000
cmovle esi, eax
cmp edx, 0xa
mov eax, 0xffff0000
cmovle esi, eax
test edx, edx
jg 0x1002a791
mov esi, dword [0x100b2454]
movzx eax, byte [0x100b2040]
or esi, 0xffffff00
shl esi, 8
or esi, eax
movzx eax, byte [0x100b2028]
shl esi, 8
or esi, eax
mov eax, dword [0x100b5554]
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x432f0000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x100b5554]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov ecx, dword [ebp - 0x18]
lea eax, [edi + 0x57]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
lea eax, [ecx + 0x14a]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x34], xmm1
movss dword [ebp - 0x38], xmm0
movd xmm0, eax
mov eax, dword [0x100b5554]
cvtdq2ps xmm0, xmm0
push eax
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0x30], xmm0
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [0x100b5554]
lea edx, [ebp - 0x38]
push 0xc8000000
push 2
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x100b5554]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
movd xmm0, dword [ebp - 0x18]
mov edx, dword [ebp - 0x54]
movss xmm3, dword [0x100a2324]
movss xmm2, dword [0x100a2330]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, esi
mov dword [esp], 0x40000000
cvtdq2ps xmm0, xmm0
call fcn.1001cec0
add esp, 4
mov ecx, 0xed
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x100a1cd8]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x40], al
and ecx, 0x800000ff
jns 0x1002a86d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x1a
jl 0x1002a850
mov byte [ebp - 0x26], 0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 8
mov ecx, dword [ebp - 0x18]
push eax
push 0xff33cccc
lea eax, [edi + 8]
add ecx, 0xa5
push eax
push ecx
push dword [0x100b556c]
mov dword [ebp - 0x50], ecx
call fcn.10015f50
add esp, 0x14
mov ecx, 0xd8
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x100a1d30]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x4c], al
and ecx, 0x800000ff
jns 0x1002a8cd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x26
jl 0x1002a8b0
mov byte [ebp - 0x26], 0
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 9
push eax
push 0xffccffff
lea eax, [edi + 0x21]
push eax
push dword [ebp - 0x50]
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x14
mov ecx, 0xf6
xor edx, edx
mov al, byte [edx + 0x100a1d58]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x40], al
and ecx, 0x800000ff
jns 0x1002a920
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x19
jl 0x1002a903
mov byte [ebp - 0x27], 0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0xa
push eax
push 0xffccffff
lea eax, [edi + 0x3a]
push eax
push dword [ebp - 0x50]
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x14
mov ecx, 0xc4
xor edx, edx
mov al, byte [edx + 0x100a1d74]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x48], al
and ecx, 0x800000ff
jns 0x1002a973
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x21
jl 0x1002a956
mov byte [ebp - 0x27], 0
lea eax, [ebp - 0x48]
mov dword [ebp - 4], 0xb
push eax
push 0xffccffff
lea eax, [edi + 0x53]
push eax
push dword [ebp - 0x50]
push dword [0x100b556c]
call fcn.10015f50
xor edx, edx
add esp, 0x14
cmp dword [0x100b2018], edx
jg 0x1002aa1f
mov ecx, 0x3b
mov al, byte [edx + str.zKM]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1002a9ce
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xf
jl 0x1002a9b1
mov byte [ebp - 0x29], 0
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x38]
mov ecx, dword [0x100b2454]
push eax
movzx eax, byte [0x100b2040]
or ecx, 0xffffff00
shl ecx, 8
or ecx, eax
movzx eax, byte [0x100b2028]
shl ecx, 8
or ecx, eax
lea eax, [edi + 0x6c]
push ecx
push eax
push dword [ebp - 0x50]
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x14
jmp 0x1002aa78
mov ecx, 0xa3
mov al, byte [edx + 0x100a1d98]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x4c], al
and ecx, 0x800000ff
jns 0x1002aa41
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x26
jl 0x1002aa24
mov byte [ebp - 0x26], 0
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x4c]
push dword [0x100b266c]
push dword [0x100b2018]
push eax
push esi
lea eax, [edi + 0x6c]
push eax
push dword [ebp - 0x50]
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x1c
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
add edi, 0x85
push eax
add esi, 0x8a
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x1c]
cmp eax, esi
jl 0x1002abd4
lea edx, [esi + 0x28]
cmp eax, edx
jg 0x1002abd4
mov eax, dword [ebp - 0x18]
cmp eax, edi
jl 0x1002abd4
lea ecx, [edi + 0x19]
cmp eax, ecx
jg 0x1002abd4
mov eax, dword [ebp - 0x54]
push 0
push ecx
mov dword [esp], 0
mov eax, dword [eax]
push 0xff000000
mov dword [ebp - 0x30], edx
lea edx, [ebp - 0x38]
push 1
push edx
mov edx, dword [ebp - 0x54]
push 1
push edx
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x2c], ecx
call dword [eax + 0xac]
mov edx, dword [ebp - 0x54]
movss xmm3, dword [0x100a22d8]
movss xmm2, dword [0x100a22e8]
movd xmm1, edi
movd xmm0, esi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, 0xff00ff00
mov dword [esp], 0x3f800000
cvtdq2ps xmm0, xmm0
call fcn.1001cec0
mov word [ebp - 0x50], 0x4b4f
mov byte [ebp - 0x4e], 0
lea eax, [ebp - 0x50]
mov dword [ebp - 4], 0xe
push eax
push 0xffccffff
lea eax, [edi + 3]
push eax
lea eax, [esi + 0x14]
push eax
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
mov dword [0x100b5848], 0x10015b90
push 1
call fcn.10015b90
cwde
shr eax, 0x10
test eax, eax
je 0x1002abc8
cmp byte [0x100be9d0], 0
je 0x1002abb2
cmp dword [0x100be9d4], 0
je 0x1002ac6e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x100be9d4], eax
ja 0x1002ac6e
mov byte [0x100be9d0], 1
mov dword [0x100b62c0], 1
jmp 0x1002ac6e
mov byte [0x100be9d0], 0
jmp 0x1002ac6e
mov edx, dword [ebp - 0x54]
lea ecx, [esi + 0x28]
push 0
push ecx
mov dword [esp], 0
lea eax, [edi + 0x19]
mov edx, dword [edx]
push 0xff000000
push 1
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x54]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], ecx
call dword [edx + 0xac]
mov edx, dword [ebp - 0x54]
movss xmm3, dword [0x100a22d8]
movss xmm2, dword [0x100a22e8]
movd xmm1, edi
movd xmm0, esi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, 0xffff0000
mov dword [esp], 0x3f800000
cvtdq2ps xmm0, xmm0
call fcn.1001cec0
mov word [ebp - 0x54], 0x4b4f
mov byte [ebp - 0x52], 0
lea eax, [ebp - 0x54]
mov dword [ebp - 4], 0xf
push eax
push 0xffccffff
lea eax, [edi + 3]
push eax
lea eax, [esi + 0x14]
push eax
push dword [0x100b556c]
call fcn.10015f50
add esp, 0x18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007cc49
mov esp, ebp
pop ebp
ret