Function at 0x1002cfd0
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1018c7b1
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x198
mov byte [0x11320215], 0
cmp byte [0x1131f47f], 0
push esi
push edi
je 0x1002d19a
mov eax, dword [0x1131f3ec]
cmp dword [eax], 0
je 0x1002d19a
mov ecx, dword [0x113200e0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x1002d19a
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.100ce2c0
test al, al
je 0x1002d19a
push dword [0x1131f484]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [ebp - 0x20], esi
call esi
movss xmm0, dword [0x110da73c]
mov edi, dword [ebx + 8]
movss dword [ebp - 0x24], xmm0
test al, 1
je 0x1002d2aa
cmp byte [0x11320215], 0
jne 0x1002d2aa
mov eax, dword [0x1131f3ec]
lea ecx, [ebp - 0x64]
movss xmm1, dword [edi + 0x10]
movss xmm0, dword [edi + 0xc]
push ecx
mov ecx, dword [eax]
movss dword [ebp - 0x58], xmm0
movss dword [ebp - 0x54], xmm1
mov dword [ebp - 0x50], 0
call fcn.100cde50
mov esi, eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.10039f20
movss xmm0, dword [0x110da730]
lea ecx, [ebp - 0x148]
add esp, 8
movss xmm1, dword [eax]
movss xmm2, dword [eax + 4]
movss xmm3, dword [eax + 8]
mulss xmm1, xmm0
mulss xmm2, xmm0
addss xmm1, dword [esi]
mulss xmm3, xmm0
addss xmm2, dword [esi + 4]
addss xmm3, dword [esi + 8]
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0x58], xmm1
movss dword [ebp - 0x44], xmm2
movss dword [ebp - 0x54], xmm2
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x50], xmm3
call fcn.1002bc40
lea ecx, [ebp - 0x1a0]
call fcn.1002bd30
mov eax, dword [0x1131f3ec]
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x64]
push ecx
mov ecx, dword [eax]
call fcn.100cde50
push eax
lea ecx, [ebp - 0x1a0]
call fcn.10029d40
mov ecx, dword [0x113201b0]
lea edx, [ebp - 0x148]
push edx
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x110da528
push edx
mov eax, dword [ecx]
lea edx, [ebp - 0x1a0]
push 0x201400b
push edx
call dword [eax + 0x14]
movss xmm0, dword [ebp - 0x11c]
ucomiss xmm0, dword [0x1019b9cc]
mov ecx, dword [0x113200e0]
lahf
test ah, 0x44
mov eax, dword [ecx]
jp 0x1002d1ad
push 0x110da320
call dword [eax + 0x1b4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [eax + 0xd4]
call eax
push eax
lea ecx, [ebp - 0xc0]
call fcn.1000c840
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x1131f3ec]
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 4], 0
mov ecx, dword [ecx]
call fcn.100cde50
mov ecx, dword [0x1131f3ec]
mov esi, eax
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ecx]
call fcn.100cde50
movss xmm1, dword [ebp - 0x2c]
movss xmm2, dword [ebp - 0x44]
movss xmm3, dword [ebp - 0x1c]
subss xmm1, dword [eax]
subss xmm2, dword [eax + 4]
subss xmm3, dword [eax + 8]
movss xmm0, dword [ebp - 0x11c]
push dword [ebp - 0x4c]
mulss xmm1, xmm0
mulss xmm2, xmm0
addss xmm1, dword [esi]
mulss xmm3, xmm0
addss xmm2, dword [esi + 4]
addss xmm3, dword [esi + 8]
mov esi, dword [0x1131f3e4]
movss dword [ebp - 0x58], xmm1
movss dword [ebp - 0x54], xmm2
movss dword [ebp - 0x50], xmm3
cmp esi, dword [0x1131f3e8]
je 0x1002d286
movq xmm0, qword [ebp - 0x58]
lea ecx, [esi + 0xc]
mov eax, dword [ebp - 0x50]
movq qword [esi], xmm0
mov dword [esi + 8], eax
call fcn.1000c790
mov dword [esi + 0x24], 0x7f800000
mov dword [esi + 0x28], 0x7f800000
mov dword [esi + 0x2c], 0x7f800000
add dword [0x1131f3e4], 0x30
jmp 0x1002d295
lea eax, [ebp - 0x58]
mov ecx, 0x1131f3e0
push eax
push esi
call fcn.1002b650
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], 0xffffffff
call fcn.10003ba0
mov esi, dword [ebp - 0x20]
cmp dword [0x1131f48c], 0
je 0x1002d2fa
push dword [0x1131f480]
call esi
test ax, ax
je 0x1002d2fa
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x3c], eax
mov ecx, edx
mov eax, dword [0x11320858]
cdq
cmp edx, ecx
ja 0x1002d2fa
jb 0x1002d2dc
cmp eax, dword [ebp - 0x3c]
jae 0x1002d2fa
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
add eax, 0x1f4
cmp byte [0x1131f490], 0
mov dword [0x11320858], eax
sete byte [0x1131f490]
push dword [0x1131f480]
call esi
test ax, ax
jne 0x1002d345
cmp byte [0x1131f490], al
jne 0x1002d345
mov byte [0x113202f9], al
mov byte [0x113202f8], al
mov byte [0x11320850], al
mov byte [0x11320851], al
mov byte [0x11320852], al
mov byte [0x11320853], al
mov byte [0x11320854], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [0x1131f3e4]
mov eax, 0x2aaaaaab
mov esi, dword [0x1131f3e0]
mov dword [ebp - 0x44], ecx
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1002d19a
movss xmm0, dword [0x110da738]
xor eax, eax
mov dword [ebp - 0x20], eax
movss dword [ebp - 0x4c], xmm0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x44]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [ebp - 0x1c]
jbe 0x1002e991
mov ecx, dword [0x113200e0]
add esi, dword [ebp - 0x2c]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
push eax
lea ecx, [esi + 0xc]
call fcn.100376b0
test al, al
je 0x1002d510
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003ab00
mov esi, dword [0x1131f3e0]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x1131f3e4]
mov ecx, eax
mov dword [ebp - 0x44], eax
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [ebp - 0x1c]
jbe 0x1002e991
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
movss xmm1, dword [ecx]
movss xmm2, dword [ecx + 4]
subss xmm2, dword [esi + eax + 4]
subss xmm1, dword [esi + eax]
movss xmm0, dword [ecx + 8]
subss xmm0, dword [esi + eax + 8]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x1002d44e
sqrtsd xmm0, xmm0
jmp 0x1002d453
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [ebp - 0x4c]
cvtsd2ss xmm0, xmm0
comiss xmm1, xmm0
jbe 0x1002d524
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003ab00
mov esi, dword [0x1131f3e0]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x1131f3e4]
mov ecx, eax
mov dword [ebp - 0x44], eax
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [ebp - 0x1c]
jbe 0x1002e991
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
movss xmm1, dword [ecx]
movss xmm2, dword [ecx + 4]
subss xmm2, dword [esi + eax + 4]
subss xmm1, dword [esi + eax]
movss xmm0, dword [ecx + 8]
subss xmm0, dword [esi + eax + 8]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x1002d4fa
sqrtsd xmm0, xmm0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x4c], xmm0
jmp 0x1002d527
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov eax, dword [ebp - 0x1c]
cvtsd2ss xmm0, xmm0
mov dword [ebp - 0x20], eax
movss dword [ebp - 0x4c], xmm0
jmp 0x1002d527
mov ecx, dword [0x1131f3e4]
mov esi, dword [0x1131f3e0]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x44], ecx
jmp 0x1002d52a
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
add dword [ebp - 0x2c], 0x30
inc eax
mov dword [ebp - 0x1c], eax
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1c], eax
jb 0x1002d385
mov eax, dword [ebp - 0x20]
mov ecx, 0x1131f3e0
push eax
call fcn.10037a30
mov ecx, dword [0x1131f3ec]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov ecx, dword [ecx]
movq qword [ebp - 0x58], xmm0
movss xmm0, dword [edi + 0x24]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [edi + 0x28]
mov dword [ebp - 0x50], eax
mov eax, dword [edi + 0x30]
mov dword [ebp - 0x2c], eax
movss dword [ebp - 0x18], xmm0
call fcn.1003aca0
mov ecx, dword [0x1131f3ec]
mov ecx, dword [ecx]
call fcn.1003ab00
mov ecx, dword [0x1131f3ec]
mov ecx, dword [ecx]
call fcn.10039d80
cmp byte [0x1131f4c0], 0
mov eax, dword [0x11320304]
mov ecx, dword [eax + 0x1c]
mov dword [ebp - 0x3c], ecx
jne 0x1002d5fe
mov eax, dword [edi + 8]
cmp eax, dword [0x1132085c]
jle 0x1002d5fe
mov eax, dword [0x113202ec]
test al, 1
je 0x1002d608
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.10039d80
xorps xmm1, xmm1
movss xmm0, dword [eax]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1002d19a
mov ecx, dword [ebp - 0x3c]
mov eax, dword [0x113202ec]
jmp 0x1002d60b
mov eax, dword [0x113202ec]
xorps xmm1, xmm1
jmp 0x1002d60b
xorps xmm1, xmm1
comiss xmm1, dword [0x11320224]
jbe 0x1002d61e
mov dword [0x11320860], 0
movss xmm0, dword [ebp - 0x24]
not eax
and eax, 1
mov dword [ebp - 0x4c], 0
xor esi, esi
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x28], xmm0
mov byte [ebp - 0x11], 0
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1002dd6a
dec ecx
mov dword [ebp - 0xa8], ecx
nop dword [eax + eax]
mov eax, dword [ebp - 0x2c]
mov dword [edi + 0x28], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x30], eax
mov eax, dword [0x1118f47c]
push ecx
push 0
mov byte [ebp - 0x2d], 0
mov eax, dword [eax]
call eax
xor eax, eax
mov dword [ebp - 0x44], eax
cmp byte [0x11320850], al
jne 0x1002dd6a
cmp byte [0x11320851], al
jne 0x1002dd6a
cmp byte [0x11320852], al
jne 0x1002dd6a
cmp byte [0x11320853], al
jne 0x1002dd6a
cmp byte [0x11320854], al
jne 0x1002dd6a
mov dword [ebp - 0x1c], eax
nop dword [eax + eax]
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003a980
mov ecx, dword [ebp - 0x44]
test byte [eax], 1
lea eax, [ecx + 1]
cmove eax, ecx
mov dword [ebp - 0x44], eax
cmp eax, 1
jne 0x1002d719
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003ab00
movss xmm0, dword [eax]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x24], xmm0
test esi, esi
jne 0x1002d734
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003a980
test byte [eax], 1
je 0x1002d74e
or dword [edi + 0x30], 2
jmp 0x1002d74e
cmp esi, 1
jne 0x1002d74e
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003a980
test byte [eax], 1
je 0x1002d74e
or dword [edi + 0x30], 6
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003a980
test byte [eax], 1
jne 0x1002d76f
cmp esi, 2
je 0x1002d774
cmp esi, 3
je 0x1002d792
and dword [edi + 0x30], 0xfffffff9
jmp 0x1002d78d
cmp esi, 2
jne 0x1002d78d
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003a980
test byte [eax], 1
je 0x1002d789
or dword [edi + 0x30], 2
or dword [edi + 0x30], 4
cmp esi, 3
jne 0x1002d7ba
mov ecx, dword [ebp - 0x4c]
mov eax, dword [edi + 0x30]
cmp dword [ebp - 0x1c], ecx
jne 0x1002d7ab
and eax, 0xfffffffd
or eax, 4
inc dword [ebp - 0x44]
mov dword [edi + 0x30], eax
jmp 0x1002d7ba
and eax, 0xfffffffb
or eax, 2
mov dword [edi + 0x30], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003aca0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0xac], eax
mov eax, dword [0x1131f3ec]
movq qword [ebp - 0xb4], xmm0
mov ecx, dword [eax]
call fcn.1003ab00
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x8c], eax
mov eax, dword [0x1131f3ec]
movq qword [ebp - 0x94], xmm0
mov ecx, dword [eax]
call fcn.1003a980
mov ecx, dword [0x11320294]
push edi
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
call fcn.10063e60
mov ecx, dword [0x11320294]
call fcn.1001ea40
cmp esi, 1
jne 0x1002d852
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003a980
test byte [eax], 1
je 0x1002d852
test byte [ebp - 0x34], 1
jne 0x1002d852
cmp byte [ebp - 0x2d], 0
mov eax, dword [ebp - 0x4c]
cmove eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x2d], 1
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003a980
test byte [eax], 1
jne 0x1002d871
cmp esi, 3
je 0x1002d871
cmp esi, 4
je 0x1002d871
and dword [edi + 0x30], 0xfffffff9
mov eax, dword [0x1131f3ec]
mov ecx, dword [eax]
call fcn.1003ab00
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5c], eax
mov eax, dword [0x1131f3ec]
movq qword [ebp - 0x64], xmm0
mov ecx, dword [eax]
call fcn.1003aca0
xorps xmm5, xmm5
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x7c], xmm0
movss xmm0, dword [ebp - 0xac]
comiss xmm0, xmm5
mov dword [ebp - 0x74], eax
jbe 0x1002d8e3
comiss xmm5, dword [ebp - 0x74]
jbe 0x1002d8e3
cmp dword [ebp - 0x44], 1
jne 0x1002d8e3
movss xmm2, dword [ebp - 0x8c]
movaps xmm0, xmm2
mov dword [ebp - 0x44], 2
subss xmm0, dword [ebp - 0x5c]
ucomiss xmm0, xmm5
lahf
test ah, 0x44
jp 0x1002d8f8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x30
jl 0x1002d6d0
jmp 0x1002dd57
movss xmm4, dword [ebp - 0x50]
xorps xmm6, xmm6
movaps xmm7, xmm4
subss xmm7, dword [0x110da6a0]
comiss xmm2, xmm7
jbe 0x1002dd57
cvtps2pd xmm0, xmm0
cvttss2si ecx, xmm4
movsd qword [ebp - 0x48], xmm0
comiss xmm5, xmm4
cvttss2si eax, xmm2
jbe 0x1002d97f
cmp eax, ecx
jne 0x1002da1b
movd xmm0, eax
movaps xmm1, xmm2
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si edx, xmm1
movaps xmm1, xmm4
subss xmm1, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si eax, xmm1
mov dword [ebp - 0x34], eax
cmp eax, edx
je 0x1002d9cf
lea eax, [edx + 1]
cmp eax, dword [ebp - 0x34]
je 0x1002d9cf
lea eax, [edx + 2]
cvttss2si edx, xmm1
cmp eax, edx
jmp 0x1002d9cd
cmp eax, ecx
jne 0x1002da1b
movd xmm0, eax
movaps xmm1, xmm2
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si edx, xmm1
movaps xmm1, xmm4
subss xmm1, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si eax, xmm1
cmp eax, edx
je 0x1002d9cf
dec eax
cmp edx, eax
je 0x1002d9cf
cvttss2si eax, xmm1
add eax, 0xfffffffe
cmp edx, eax
jne 0x1002da1b
test esi, esi
jne 0x1002d9dc
mov byte [0x11320850], 1
jmp 0x1002da0b
cmp esi, 1
jne 0x1002d9ea
mov byte [0x11320851], 1
jmp 0x1002da0b
cmp esi, 2
jne 0x1002d9ff
mov byte [0x11320852], 1
mov byte [0x11320853], 1
jmp 0x1002da0b
cmp esi, 3
jne 0x1002da0b
mov byte [0x11320854], 1
mov edx, dword [ebp - 0x1c]
mov eax, dword [edi + 8]
add edx, 4
add eax, edx
mov dword [0x1132085c], eax
movss xmm0, dword [0x110da688]
movaps xmm1, xmm2
addss xmm1, xmm0
cvttss2si eax, xmm1
cmp eax, ecx
jne 0x1002daeb
comiss xmm5, xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si edx, xmm1
movaps xmm1, xmm4
subss xmm1, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si eax, xmm1
jbe 0x1002da86
mov dword [ebp - 0x34], eax
cmp eax, edx
je 0x1002da9a
lea eax, [edx + 1]
cmp eax, dword [ebp - 0x34]
je 0x1002da9a
lea eax, [edx + 2]
cvttss2si edx, xmm1
cmp eax, edx
jmp 0x1002da98
cmp eax, edx
je 0x1002da9a
dec eax
cmp edx, eax
je 0x1002da9a
cvttss2si eax, xmm1
add eax, 0xfffffffe
cmp edx, eax
jne 0x1002dae3
test esi, esi
jne 0x1002daa7
mov byte [0x11320850], 1
jmp 0x1002dacf
cmp esi, 1
jne 0x1002dab5
mov byte [0x11320851], 1
jmp 0x1002dacf
cmp esi, 2
jne 0x1002dac3
mov byte [0x11320852], 1
jmp 0x1002dacf
cmp esi, 3
jne 0x1002dacf
mov byte [0x11320854], 1
mov edx, dword [ebp - 0x1c]
mov eax, dword [edi + 8]
add edx, 6
add eax, edx
mov byte [ebp - 0x11], 1
mov dword [0x1132085c], eax
movss xmm0, dword [0x110da688]
cmp esi, 2
jne 0x1002dbb4
comiss xmm5, xmm4
movaps xmm1, xmm2
subss xmm1, xmm0
cvttss2si eax, xmm1
jbe 0x1002db57
cmp eax, ecx
jne 0x1002dd2a
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si edx, xmm1
movaps xmm1, xmm4
subss xmm1, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si eax, xmm1
mov dword [ebp - 0x34], eax
cmp eax, edx
je 0x1002dba8
lea eax, [edx + 1]
cmp eax, dword [ebp - 0x34]
je 0x1002dba8
lea eax, [edx + 2]
cvttss2si edx, xmm1
cmp eax, edx
jmp 0x1002dba2
cmp eax, ecx
jne 0x1002dd2a
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si edx, xmm1
movaps xmm1, xmm4
subss xmm1, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si eax, xmm1
cmp eax, edx
je 0x1002dba8
dec eax
cmp edx, eax
je 0x1002dba8
cvttss2si eax, xmm1
add eax, 0xfffffffe
cmp edx, eax
jne 0x1002dd2a
mov byte [0x11320853], 1
jmp 0x1002dd1a
cmp esi, 1
jne 0x1002dd2a
movss xmm0, dword [0x110da684]
movaps xmm1, xmm2
addss xmm1, xmm0
cvttss2si eax, xmm1
cmp eax, ecx
jne 0x1002dc5b
comiss xmm5, xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si edx, xmm1
movaps xmm1, xmm4
subss xmm1, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si eax, xmm1
jbe 0x1002dc28
mov dword [ebp - 0x34], eax
cmp eax, edx
je 0x1002dc3c
lea eax, [edx + 1]
cmp eax, dword [ebp - 0x34]
je 0x1002dc3c
lea eax, [edx + 2]
cvttss2si edx, xmm1
cmp eax, edx
jmp 0x1002dc3a
cmp eax, edx
je 0x1002dc3c
dec eax
cmp edx, eax
je 0x1002dc3c
cvttss2si eax, xmm1
add eax, 0xfffffffe
cmp edx, eax
jne 0x1002dc53
mov edx, dword [ebp - 0x1c]
mov eax, dword [edi + 8]
add edx, 4
add eax, edx
mov byte [0x11320852], 1
mov dword [0x1132085c], eax
movss xmm0, dword [0x110da684]
comiss xmm5, xmm4
movaps xmm1, xmm2
addss xmm1, dword [0x110da688]
addss xmm1, xmm0
cvttss2si eax, xmm1
jbe 0x1002dcc6
cmp eax, ecx
jne 0x1002dd2a
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si edx, xmm1
movaps xmm1, xmm4
subss xmm1, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si eax, xmm1
mov dword [ebp - 0x34], eax
cmp eax, edx
je 0x1002dd0f
lea eax, [edx + 1]
cmp eax, dword [ebp - 0x34]
je 0x1002dd0f
lea eax, [edx + 2]
cvttss2si edx, xmm1
cmp eax, edx
jmp 0x1002dd0d
cmp eax, ecx
jne 0x1002dd2a
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si edx, xmm1
movaps xmm1, xmm4
subss xmm1, xmm0
mulss xmm1, dword [0x110da6b8]
cvttss2si eax, xmm1
cmp eax, edx
je 0x1002dd0f
dec eax
cmp edx, eax
je 0x1002dd0f
cvttss2si eax, xmm1
add eax, 0xfffffffe
cmp edx, eax
jne 0x1002dd2a
mov byte [0x11320852], 1
mov byte [ebp - 0x11], 1
mov edx, dword [ebp - 0x1c]
mov eax, dword [edi + 8]
add edx, 4
add eax, edx
mov dword [0x1132085c], eax
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
addss xmm6, dword [0x1019b9cc]
mulsd xmm0, qword [0x110da650]
addsd xmm0, qword [ebp - 0x48]
cvtpd2ps xmm0, xmm0
subss xmm2, xmm0
comiss xmm2, xmm7
ja 0x1002d920
mov ecx, dword [ebp - 0xa8]
inc esi
cmp esi, dword [ebp - 0xa4]
jl 0x1002d660
movss xmm0, dword [ebp - 0x38]
mov esi, dword [ebp - 0x2c]
movss dword [edi + 0x24], xmm0
movss xmm0, dword [ebp - 0x18]
mov dword [edi + 0x30], esi
movss dword [edi + 0x28], xmm0
mov eax, dword [0x1118f47c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x3c]
dec eax
push eax
push 0
call ecx
mov eax, dword [0x1132085c]
cmp dword [edi + 8], eax
jle 0x1002ddad
xor eax, eax
mov byte [0x113202f8], al
cmp dword [edi + 8], eax
mov dword [0x1132085c], eax
jge 0x1002e977
mov byte [0x113202f8], 1
xor eax, eax
mov dword [edi + 0x24], 0
xorps xmm1, xmm1
mov dword [edi + 0x28], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x44], eax
movss xmm0, dword [0x11320224]
comiss xmm0, xmm1
jbe 0x1002e02b
cmp byte [0x11320854], al
je 0x1002e01d
movss xmm0, dword [ebp - 0x28]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1002de22
movss xmm0, dword [ebp - 0x20]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1002de22
movss xmm0, dword [ebp - 0x24]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1002e01d
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11320864]
cdq
cmp edx, ecx
ja 0x1002e017
jb 0x1002de44
cmp eax, esi
jae 0x1002e017
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11320864], eax
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0xf
mov dword [ecx + 0x14], 0xf
movq xmm0, qword [0x110da358]
movq qword [ecx], xmm0
mov eax, dword [0x110da360]
mov dword [ecx + 8], eax
movzx eax, word [0x110da364]
mov word [ecx + 0xc], ax
mov al, byte [0x110da366]
mov byte [ecx + 0xe], al
mov byte [ecx + 0xf], 0
sub esp, 0x18
mov dword [ebp - 4], 1
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 1
mov dword [ecx + 0x14], 0xf
mov al, byte [0x110da368]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10050b60
mov eax, dword [0x113200e8]
movss xmm0, dword [eax + 0x10]
subss xmm0, dword [0x1019b9cc]
movzx eax, word [0x110da374]
mov dword [ebp - 0x60], 0xb
mov dword [ebp - 0x5c], 0xf
movss dword [ebp - 0x18], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x70], xmm0
mov word [ebp - 0x68], ax
movq xmm0, qword [0x110da36c]
mov al, byte [0x110da376]
movq qword [ebp - 0x70], xmm0
mov byte [ebp - 0x66], al
mov byte [ebp - 0x65], 0
movss xmm0, dword [ebp - 0x50]
lea eax, [ebp - 0x88]
add esp, 0x38
mov dword [ebp - 4], 2
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 3
call fcn.100379b0
push 6
push 0x110da378
mov ecx, eax
call fcn.100103d0
movss xmm0, dword [0x1118f5a0]
mov esi, eax
push ecx
lea eax, [ebp - 0xa0]
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
push eax
mov ecx, esi
mov byte [ebp - 4], 4
call fcn.100379b0
cmp byte [ebp - 0x11], 0
mov edx, 0x110da38c
mov ecx, 0x110da380
cmove ecx, edx
push ecx
mov ecx, eax
call fcn.100379d0
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x38], 5
push ecx
push eax
lea eax, [ebp - 0x38]
mov ecx, 0x11320298
push eax
call fcn.1002ba00
lea ecx, [ebp - 0xa0]
call fcn.10003ba0
lea ecx, [ebp - 0x88]
call fcn.10003ba0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x1002e017
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002e00d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002e00d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1013141d
add esp, 8
mov esi, dword [ebp - 0x2c]
xorps xmm1, xmm1
xor al, al
mov byte [0x11320853], al
mov byte [0x11320854], al
jmp 0x1002e030
mov al, byte [0x11320853]
mov dword [edi + 0x30], esi
test al, al
je 0x1002e272
or esi, 4
mov dword [edi + 0x30], esi
test byte [0x113202ec], 1
je 0x1002e050
or esi, 2
mov dword [edi + 0x30], esi
movss xmm2, dword [ebp - 0x28]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x1002e07e
movss xmm0, dword [ebp - 0x20]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1002e07e
movss xmm3, dword [ebp - 0x24]
ucomiss xmm3, xmm1
lahf
test ah, 0x44
jnp 0x1002e27c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11320864]
cdq
cmp edx, ecx
ja 0x1002e272
jb 0x1002e0a0
cmp eax, esi
jae 0x1002e272
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11320864], eax
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0xf
mov dword [ecx + 0x14], 0xf
movq xmm0, qword [0x110da398]
movq qword [ecx], xmm0
mov eax, dword [0x110da3a0]
mov dword [ecx + 8], eax
movzx eax, word [0x110da3a4]
mov word [ecx + 0xc], ax
mov al, byte [0x110da3a6]
mov byte [ecx + 0xe], al
mov byte [ecx + 0xf], 0
sub esp, 0x18
mov dword [ebp - 4], 5
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 1
mov dword [ecx + 0x14], 0xf
mov al, byte [0x110da3a8]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10050b60
mov eax, dword [0x113200e8]
movss xmm0, dword [eax + 0x10]
subss xmm0, dword [0x1019b9cc]
mov eax, dword [0x110da3b4]
mov dword [ebp - 0x60], 0xe
mov dword [ebp - 0x5c], 0xf
movss dword [ebp - 0x38], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x68], eax
movq xmm0, qword [0x110da3ac]
movzx eax, word [0x110da3b8]
movq qword [ebp - 0x70], xmm0
mov word [ebp - 0x64], ax
mov byte [ebp - 0x62], 0
movss xmm0, dword [ebp - 0x50]
lea eax, [ebp - 0x88]
add esp, 0x38
mov dword [ebp - 4], 6
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
mov byte [ebp - 4], 7
jbe 0x1002e1b6
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.100103d0
push 6
push 0x110da3bc
mov ecx, eax
call fcn.100103d0
movss xmm0, dword [0x1118f5a0]
mov esi, eax
push ecx
lea eax, [ebp - 0xa0]
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
mov byte [ebp - 4], 8
jbe 0x1002e1fc
mov eax, dword [eax]
push ecx
push eax
mov ecx, esi
call fcn.100103d0
cmp byte [ebp - 0x11], 0
mov esi, eax
mov eax, 0x110da3d0
mov edx, 0x110da3c4
cmove edx, eax
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x18], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e220
sub ecx, dword [ebp - 0x18]
push ecx
push edx
mov ecx, esi
call fcn.100103d0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x18], 5
push ecx
push eax
lea eax, [ebp - 0x18]
mov ecx, 0x11320298
push eax
call fcn.1002ba00
lea ecx, [ebp - 0xa0]
call fcn.10003ba0
lea ecx, [ebp - 0x88]
call fcn.10003ba0
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
call fcn.10003ba0
movss xmm3, dword [ebp - 0x24]
movss xmm2, dword [ebp - 0x28]
cmp byte [0x11320850], 0
je 0x1002e4aa
test byte [0x113202ec], 1
xorps xmm0, xmm0
je 0x1002e4ad
or dword [edi + 0x30], 2
ucomiss xmm2, xmm0
mov byte [0x11320850], 0
lahf
test ah, 0x44
jp 0x1002e2c8
movss xmm1, dword [ebp - 0x20]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1002e2c8
ucomiss xmm3, xmm0
lahf
test ah, 0x44
jnp 0x1002e4b2
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11320864]
cdq
cmp edx, ecx
ja 0x1002e4aa
jb 0x1002e2ea
cmp eax, esi
jae 0x1002e4aa
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11320864], eax
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0xf
mov dword [ecx + 0x14], 0xf
movq xmm0, qword [0x110da3dc]
movq qword [ecx], xmm0
mov eax, dword [0x110da3e4]
mov dword [ecx + 8], eax
mov ax, word [0x110da3e8]
mov word [ecx + 0xc], ax
mov al, byte [0x110da3ea]
mov byte [ecx + 0xe], al
mov byte [ecx + 0xf], 0
sub esp, 0x18
mov dword [ebp - 4], 9
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 1
mov dword [ecx + 0x14], 0xf
mov al, byte [0x110da3ec]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10050b60
mov eax, dword [0x113200e8]
movss xmm0, dword [eax + 0x10]
subss xmm0, dword [0x1019b9cc]
mov dword [ebp - 0x60], 8
mov dword [ebp - 0x5c], 0xf
movss dword [ebp - 0x18], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x70], 0x706d756a
mov dword [ebp - 0x6c], 0x206f7420
mov byte [ebp - 0x68], 0
movss xmm0, dword [ebp - 0x50]
lea eax, [ebp - 0x88]
add esp, 0x38
mov dword [ebp - 4], 0xa
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xb
call fcn.100379b0
push 6
push 0x110da3fc
mov ecx, eax
call fcn.100103d0
movss xmm0, dword [0x1118f5a0]
mov esi, eax
push ecx
lea eax, [ebp - 0xa0]
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
push eax
mov ecx, esi
mov byte [ebp - 4], 0xc
call fcn.100379b0
cmp byte [ebp - 0x11], 0
mov ecx, 0x110da404
mov edx, 0x110da410
cmove ecx, edx
push ecx
mov ecx, eax
call fcn.100379d0
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x38], 5
push ecx
push eax
lea eax, [ebp - 0x38]
mov ecx, 0x11320298
push eax
call fcn.1002ba00
lea ecx, [ebp - 0xa0]
call fcn.10003ba0
lea ecx, [ebp - 0x88]
call fcn.10003ba0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x1002e4aa
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002e4a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002e4a0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1013141d
add esp, 8
xorps xmm0, xmm0
movss xmm1, dword [ebp - 0x20]
cmp byte [0x11320851], 0
je 0x1002e6e9
test byte [0x113202ec], 1
movss xmm2, dword [ebp - 0x28]
je 0x1002e6ee
or dword [edi + 0x30], 6
ucomiss xmm2, xmm0
mov byte [0x11320851], 0
lahf
test ah, 0x44
jp 0x1002e500
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1002e500
movss xmm3, dword [ebp - 0x24]
ucomiss xmm3, xmm0
lahf
test ah, 0x44
jnp 0x1002e6f3
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11320864]
cdq
cmp edx, ecx
ja 0x1002e6e9
jb 0x1002e522
cmp eax, esi
jae 0x1002e6e9
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11320864], eax
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0xf
mov dword [ecx + 0x14], 0xf
movq xmm0, qword [0x110da41c]
movq qword [ecx], xmm0
mov eax, dword [0x110da424]
mov dword [ecx + 8], eax
mov ax, word [0x110da428]
mov word [ecx + 0xc], ax
mov al, byte [0x110da42a]
mov byte [ecx + 0xe], al
mov byte [ecx + 0xf], 0
sub esp, 0x18
mov dword [ebp - 4], 0xd
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 1
mov dword [ecx + 0x14], 0xf
mov al, byte [0x110da42c]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10050b60
mov eax, dword [0x113200e8]
movss xmm0, dword [eax + 0x10]
subss xmm0, dword [0x1019b9cc]
mov eax, dword [0x110da438]
mov dword [ebp - 0x60], 0xc
mov dword [ebp - 0x5c], 0xf
movss dword [ebp - 0x18], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x68], eax
movq xmm0, qword [0x110da430]
movq qword [ebp - 0x70], xmm0
mov byte [ebp - 0x64], 0
movss xmm0, dword [ebp - 0x50]
lea eax, [ebp - 0x88]
add esp, 0x38
mov dword [ebp - 4], 0xe
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xf
call fcn.100379b0
push 6
push 0x110da440
mov ecx, eax
call fcn.100103d0
movss xmm0, dword [0x1118f5a0]
mov esi, eax
push ecx
lea eax, [ebp - 0xa0]
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
push eax
mov ecx, esi
mov byte [ebp - 4], 0x10
call fcn.100379b0
mov ecx, 0x110da448
mov edx, 0x110da454
cmp byte [ebp - 0x11], 0
cmove ecx, edx
push ecx
mov ecx, eax
call fcn.100379d0
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x38], 5
push ecx
push eax
lea eax, [ebp - 0x38]
mov ecx, 0x11320298
push eax
call fcn.1002ba00
lea ecx, [ebp - 0xa0]
call fcn.10003ba0
lea ecx, [ebp - 0x88]
call fcn.10003ba0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x1002e6e9
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002e6df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002e6df
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1013141d
add esp, 8
movss xmm2, dword [ebp - 0x28]
movss xmm3, dword [ebp - 0x24]
cmp byte [0x11320852], 0
xorps xmm1, xmm1
je 0x1002e912
test byte [0x113202ec], 1
je 0x1002e912
or dword [edi + 0x30], 6
mov eax, dword [0x113200e8]
mov byte [0x11320852], 0
mov eax, dword [eax + 0x1c]
add eax, 3
ucomiss xmm2, xmm1
mov dword [0x11320860], eax
lahf
test ah, 0x44
jp 0x1002e74f
movss xmm0, dword [ebp - 0x20]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1002e74f
ucomiss xmm3, xmm1
lahf
test ah, 0x44
jnp 0x1002e912
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11320864]
cdq
cmp edx, ecx
ja 0x1002e90f
jb 0x1002e771
cmp eax, esi
jae 0x1002e90f
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11320864], eax
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0xf
mov dword [ecx + 0x14], 0xf
movq xmm0, qword [0x110da460]
movq qword [ecx], xmm0
mov eax, dword [0x110da468]
mov dword [ecx + 8], eax
mov ax, word [0x110da46c]
mov word [ecx + 0xc], ax
mov al, byte [0x110da46e]
mov byte [ecx + 0xe], al
mov byte [ecx + 0xf], 0
sub esp, 0x18
mov dword [ebp - 4], 0x11
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 1
mov dword [ecx + 0x14], 0xf
mov al, byte [0x110da470]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10050b60
mov eax, dword [0x113200e8]
movss xmm0, dword [eax + 0x10]
subss xmm0, dword [0x1019b9cc]
mov eax, dword [0x110da47c]
mov dword [ebp - 0x78], 0xc
mov dword [ebp - 0x74], 0xf
movss dword [ebp - 0x18], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x80], eax
movq xmm0, qword [0x110da474]
movq qword [ebp - 0x88], xmm0
mov byte [ebp - 0x7c], 0
movss xmm0, dword [ebp - 0x50]
lea eax, [ebp - 0xf0]
add esp, 0x38
mov dword [ebp - 4], 0x12
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x13
call fcn.100379b0
push 6
push 0x110da484
mov ecx, eax
call fcn.100103d0
movss xmm0, dword [0x1118f5a0]
mov esi, eax
push ecx
lea eax, [ebp - 0xd8]
movss dword [esp], xmm0
push eax
call fcn.1003d180
add esp, 8
push eax
mov ecx, esi
mov byte [ebp - 4], 0x14
call fcn.100379b0
mov ecx, 0x110da48c
mov edx, 0x110da498
cmp byte [ebp - 0x11], 0
cmove ecx, edx
push ecx
mov ecx, eax
call fcn.100379d0
lea edx, [ebp - 0x18]
mov dword [ebp - 0x38], 5
push edx
push eax
lea eax, [ebp - 0x38]
mov ecx, 0x11320298
push eax
call fcn.1002ba00
lea ecx, [ebp - 0xd8]
call fcn.10003ba0
lea ecx, [ebp - 0xf0]
call fcn.10003ba0
lea ecx, [ebp - 0x88]
call fcn.10003ba0
xorps xmm1, xmm1
mov eax, dword [0x113200e8]
mov ecx, dword [0x11320860]
cmp ecx, dword [eax + 0x1c]
jle 0x1002e943
mov al, byte [0x11320854]
or dword [edi + 0x30], 4
mov byte [0x113202f9], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
movss xmm0, dword [0x11320224]
comiss xmm0, xmm1
jbe 0x1002e95a
mov dword [0x1132085c], 0
mov al, byte [0x11320854]
mov byte [0x113202f9], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [ebp - 0xc]
pop edi
mov byte [0x113202f8], 0
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100379a0
int3