Function at 0x10013c30
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10022956
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x1002f018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.10013850
call fcn.10013930
call fcn.10013b60
call fcn.10013a00
call fcn.10013ab0
cmp dword [0x101627c0], 0
je 0x10013cec
mov edi, str._9__860__87_9__
sub edi, 0x6fad512a
lea esi, [ebp - 0x50]
call fcn.1001dee0
mov dword [ebp - 4], 0
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
call eax
fld dword [0x1002ab40]
mov ecx, dword [eax]
mov edi, 0x1002a268
fstp dword [ecx]
sub edi, 0x16440e0f
lea esi, [ebp - 0x50]
call fcn.1001df20
mov dword [ebp - 4], 1
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
call eax
fld dword [0x1002a73c]
mov ecx, dword [eax]
fstp dword [ecx + 4]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x1016286c], 0
jne 0x10013d07
cmp dword [0x10162870], 0
jne 0x10013d07
cmp dword [0x10162878], 0
je 0x10013d60
call fcn.1000aa80
push eax
call fcn.1000a880
push eax
call fcn.1000bdc0
add esp, 4
push eax
call fcn.1000b5f0
mov ebx, eax
test ebx, ebx
je 0x10013d60
cmp dword [0x10162878], 0
je 0x10013d60
mov edi, 0x1022a396
lea esi, [ebp - 0x68]
call fcn.1001bac0
mov dword [ebp - 4], 2
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
call eax
mov dword [eax + ebx], 0
mov dword [ebp - 4], 0xffffffff
cmp dword [0x101628a8], 0
je 0x10013dc8
mov edi, 0x1005a2ad
lea esi, [ebp - 0x44]
call fcn.1001bb40
mov dword [ebp - 4], 3
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
call eax
add eax, 5
lea esi, [ebp - 0x44]
mov dword [0x1006ae28], eax
call fcn.1001bb40
mov dword [ebp - 4], 4
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x1000a7c0
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, 5
mov edx, eax
call fcn.10002c10
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10162704], 0
je 0x100150aa
mov edi, 0x102dccef
lea esi, [ebp - 0x24]
call fcn.1001df60
mov dword [ebp - 4], 5
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [eax]
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov word [ebp - 0x18], ax
mov byte [ebp - 0x16], al
mov ecx, dword [ecx]
mov ecx, dword [ecx + 8]
mov eax, dword [ecx + 4]
mov esi, dword [eax]
fld dword [esi + 0x114]
mov ebx, dword [eax + 4]
fstp dword [ebp - 0xa0]
sub esp, 0xc
fld dword [esi + 0x11c]
mov eax, esp
fstp dword [ebp - 0xa8]
lea edi, [ebp - 0x94]
fld dword [esi + 0x124]
fstp dword [ebp - 0xac]
fld dword [ebx + 0x114]
fstp dword [ebp - 0xa4]
fld dword [ebx + 0x11c]
fstp dword [ebp - 0x98]
fld dword [ebx + 0x124]
fstp dword [ebp - 0x9c]
fld dword [0x1002ab3c]
fstp dword [ebp - 0x94]
mov ecx, dword [ebp - 0x94]
fld dword [0x1002ab38]
mov dword [eax], ecx
fstp dword [ebp - 0x90]
mov edx, dword [ebp - 0x90]
fld dword [0x1002ab34]
mov dword [eax + 4], edx
fstp dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 8], ecx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10013ee7
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002ab30]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
fld dword [0x1002ab2c]
mov eax, esp
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [0x1002ab28]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
lea edi, [ebp - 0x94]
mov dword [eax + 8], edx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10013f55
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002ab24]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
fld dword [0x1002ab20]
mov eax, esp
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
fld dword [0x1002ab1c]
mov dword [eax], ecx
fstp dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 4], edx
lea edi, [ebp - 0x94]
mov dword [eax + 8], ecx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10013fc3
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002a818]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
fld dword [0x1002ab18]
mov eax, esp
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [0x1002ab20]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
lea edi, [ebp - 0x94]
mov dword [eax + 8], edx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10014031
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld1
sub esp, 0xc
fstp dword [ebp - 0x20]
mov eax, esp
fld dword [0x1002ab14]
mov ecx, dword [ebp - 0x20]
fstp dword [ebp - 0x1c]
mov dword [eax], ecx
fld dword [0x1002a72c]
mov edx, dword [ebp - 0x1c]
fstp dword [ebp - 0x18]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x18]
lea edi, [ebp - 0x94]
mov dword [eax + 8], ecx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x1001409b
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002ab3c]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
fld dword [0x1002ab20]
mov eax, esp
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [0x1002ab10]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
lea edi, [ebp - 0x94]
mov dword [eax + 8], edx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10014109
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002ab0c]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
fld dword [0x1002ab14]
mov eax, esp
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
fld dword [0x1002ab08]
mov dword [eax], ecx
fstp dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 4], edx
lea edi, [ebp - 0x94]
mov dword [eax + 8], ecx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10014177
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002ab04]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
fld dword [0x1002a72c]
mov eax, esp
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [0x1002ab28]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
lea edi, [ebp - 0x94]
mov dword [eax + 8], edx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x100141e5
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002ab0c]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
fld dword [0x1002ab14]
mov eax, esp
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
fld dword [0x1002ab08]
mov dword [eax], ecx
fstp dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 4], edx
lea edi, [ebp - 0x94]
mov dword [eax + 8], ecx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10014253
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002ab1c]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
fld dword [0x1002ab20]
mov eax, esp
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [0x1002ab14]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
lea edi, [ebp - 0x94]
mov dword [eax + 8], edx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x100142c1
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002ab00]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
fld dword [0x1002ab20]
mov eax, esp
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
fld dword [0x1002ab38]
mov dword [eax], ecx
fstp dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 4], edx
lea edi, [ebp - 0x94]
mov dword [eax + 8], ecx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x1001432f
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002aafc]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
fld dword [0x1002ab38]
mov eax, esp
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [0x1002aaf8]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
lea edi, [ebp - 0x94]
mov dword [eax + 8], edx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x1001439d
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002aaf4]
sub esp, 0xc
fst dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
fld dword [0x1002ab20]
mov eax, esp
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov dword [eax], ecx
fstp dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 4], edx
lea edi, [ebp - 0x94]
mov dword [eax + 8], ecx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10014405
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002aaf0]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
fld dword [0x1002ab20]
mov eax, esp
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [0x1002aaec]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
lea edi, [ebp - 0x94]
mov dword [eax + 8], edx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x10014473
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [0x1002aae8]
sub esp, 0xc
fstp dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
fld dword [0x1002aae4]
mov eax, esp
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
fld dword [0x1002aae0]
mov dword [eax], ecx
fstp dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 4], edx
lea edi, [ebp - 0x94]
mov dword [eax + 8], ecx
call fcn.1000c610
add esp, 0xc
test al, al
je 0x100144e1
fld dword [ebp - 0x90]
push str.HERE
push 0xffffff00
call fcn.10020ad0
fld dword [ebp - 0x94]
push eax
call fcn.10020ad0
mov ecx, eax
call fcn.100107b0
add esp, 0xc
fld dword [ebp - 0xac]
fcom qword [0x1002aad8]
fnstsw ax
fld dword [ebp - 0xa0]
fld dword [0x1002aad0]
test ah, 0x41
jne 0x1001455d
fxch st(2)
fcom qword [0x1002aac8]
fnstsw ax
test ah, 5
jp 0x10014772
fxch st(1)
fcom qword [0x1002aac0]
fnstsw ax
test ah, 0x41
jne 0x10014770
fcom qword [0x1002aab8]
fnstsw ax
test ah, 5
jp 0x10014770
fld dword [0x1002aab4]
fstp dword [esi + 0x114]
fxch st(2)
fst dword [esi + 0x11c]
fld dword [str._34_q_]
fstp dword [esi + 0x124]
fxch st(1)
fxch st(2)
fxch st(1)
fxch st(2)
fcom qword [0x1002aaa8]
fnstsw ax
fld dword [0x1002aaa0]
test ah, 0x41
jne 0x100145c3
fxch st(1)
fcom qword [0x1002aa98]
fnstsw ax
test ah, 5
jp 0x100145c1
fxch st(2)
fcom qword [0x1002aa90]
fnstsw ax
test ah, 5
jp 0x100145bf
fcom qword [0x1002aa88]
fnstsw ax
test ah, 0x41
jne 0x100145bf
fld dword [0x1002aa84]
fstp dword [esi + 0x114]
fxch st(1)
fst dword [esi + 0x11c]
fld dword [0x1002aa80]
fstp dword [esi + 0x124]
fxch st(1)
fxch st(2)
fxch st(1)
fxch st(2)
fcom qword [0x1002aa78]
fnstsw ax
fld dword [ebp - 0xa8]
fld qword [0x1002aa70]
test ah, 0x41
jne 0x10014640
fxch st(2)
fcom qword [str.q_np]
fnstsw ax
test ah, 5
jp 0x1001463e
fxch st(3)
fcom qword [0x1002aa60]
fnstsw ax
test ah, 5
jp 0x1001463c
fld dword [0x1002aa5c]
fcomp st(1)
fnstsw ax
test ah, 5
jp 0x1001463c
fxch st(1)
fcom st(2)
fnstsw ax
test ah, 5
jp 0x1001463a
fld dword [0x1002aa58]
fstp dword [esi + 0x114]
fld dword [str.T0_]
fstp dword [esi + 0x11c]
fld dword [0x1002aa50]
fstp dword [esi + 0x124]
fxch st(1)
fxch st(3)
fxch st(2)
fxch st(2)
fcom qword [0x1002aa48]
fnstsw ax
test ah, 0x41
jne 0x100146af
fcom qword [0x1002aa40]
fnstsw ax
test ah, 5
jp 0x100146af
fxch st(3)
fcom qword [0x1002aa38]
fnstsw ax
test ah, 5
jp 0x100146ad
fcom qword [0x1002aa30]
fnstsw ax
test ah, 0x41
jne 0x100146ad
fxch st(1)
fcom qword [0x1002aa28]
fnstsw ax
test ah, 5
jp 0x100146ab
fld dword [0x1002aa20]
fstp dword [esi + 0x114]
fld dword [str.t_f__0k]
fstp dword [esi + 0x11c]
fld dword [0x1002aa18]
fstp dword [esi + 0x124]
fxch st(1)
fxch st(3)
fcom qword [str.ffffff]
fnstsw ax
test ah, 0x41
jne 0x10014718
fcom qword [0x1002aa08]
fnstsw ax
test ah, 5
jp 0x10014718
fxch st(3)
fcom qword [0x1002aa00]
fnstsw ax
test ah, 5
jp 0x10014716
fcom qword [0x1002a9f8]
fnstsw ax
test ah, 0x41
jne 0x10014716
fxch st(1)
fcom st(2)
fnstsw ax
test ah, 5
jp 0x10014714
fld dword [0x1002a9f0]
fstp dword [esi + 0x114]
fld dword [0x1002a9ec]
fstp dword [esi + 0x11c]
fld dword [0x1002a9e8]
fstp dword [esi + 0x124]
fxch st(1)
fxch st(3)
fcom qword [0x1002a9e0]
fnstsw ax
test ah, 0x41
jne 0x10014779
fcom qword [0x1002a9d8]
fnstsw ax
test ah, 5
jp 0x10014779
fxch st(3)
fcom qword [0x1002a9d0]
fnstsw ax
test ah, 5
jp 0x1001477d
fcom qword [0x1002a9c8]
fnstsw ax
test ah, 0x41
jne 0x1001477d
fld dword [0x1002a9c4]
fstp dword [esi + 0x114]
fxch st(5)
fstp dword [esi + 0x11c]
fld dword [0x1002a9c0]
fstp dword [esi + 0x124]
jmp 0x1001477f
fxch st(1)
fxch st(2)
jmp 0x1001455d
fstp st(5)
jmp 0x10014785
fstp st(5)
fxch st(2)
fxch st(4)
fxch st(2)
fxch st(4)
fcom qword [str.p_n]
fnstsw ax
test ah, 0x41
jne 0x100147ee
fcom qword [0x1002a9b0]
fnstsw ax
test ah, 5
jp 0x100147ee
fxch st(2)
fcom qword [0x1002a9a8]
fnstsw ax
test ah, 5
jp 0x100147ec
fcom qword [0x1002a9a0]
fnstsw ax
test ah, 0x41
jne 0x100147ec
fxch st(4)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x100147ea
fld dword [0x1002a99c]
fstp dword [esi + 0x114]
fxch st(3)
fst dword [esi + 0x11c]
fld dword [0x1002a998]
fstp dword [esi + 0x124]
fxch st(3)
fxch st(4)
fxch st(2)
fcom qword [0x1002a990]
fnstsw ax
test ah, 5
jp 0x10014846
fcom qword [0x1002a988]
fnstsw ax
test ah, 0x41
jne 0x10014846
fxch st(2)
fcom qword [0x1002a980]
fnstsw ax
test ah, 0x41
jne 0x1001484a
fcom qword [0x1002a978]
fnstsw ax
test ah, 5
jp 0x1001484a
fld dword [0x1002a974]
fstp dword [esi + 0x114]
fxch st(3)
fstp dword [esi + 0x11c]
fld dword [str.4C_e_06]
fstp dword [esi + 0x124]
jmp 0x1001484c
fstp st(3)
jmp 0x10014852
fstp st(3)
fxch st(1)
fxch st(2)
fxch st(1)
fxch st(2)
fcom qword [0x1002a968]
fnstsw ax
fld qword [0x1002a960]
test ah, 5
jp 0x100148c3
fxch st(1)
fcom qword [0x1002a958]
fnstsw ax
test ah, 0x41
jne 0x100148c1
fxch st(2)
fcom qword [0x1002a950]
fnstsw ax
test ah, 0x41
jne 0x100148bf
fcom st(1)
fnstsw ax
test ah, 5
jp 0x100148bf
fxch st(4)
fcom st(3)
fnstsw ax
test ah, 5
jp 0x100148bd
fld dword [0x1002a948]
fstp dword [esi + 0x114]
fld dword [0x1002a944]
fstp dword [esi + 0x11c]
fld dword [0x1002a940]
fstp dword [esi + 0x124]
fxch st(4)
fxch st(2)
fxch st(1)
fxch st(1)
fcom qword [0x1002a938]
fnstsw ax
test ah, 5
jp 0x10014932
fcom qword [0x1002a930]
fnstsw ax
test ah, 0x41
jne 0x10014932
fxch st(2)
fcom qword [0x1002a928]
fnstsw ax
test ah, 5
jp 0x10014930
fcom qword [0x1002a920]
fnstsw ax
test ah, 0x41
jne 0x10014930
fxch st(4)
fcom qword [str.333333]
fnstsw ax
test ah, 5
jp 0x1001492e
fld dword [0x1002a910]
fstp dword [esi + 0x114]
fld dword [0x1002a90c]
fstp dword [esi + 0x11c]
fld dword [0x1002a908]
fstp dword [esi + 0x124]
fxch st(4)
fxch st(2)
fcom qword [0x1002a900]
fnstsw ax
test ah, 5
jp 0x1001498e
fcom qword [0x1002a8f8]
fnstsw ax
test ah, 0x41
jne 0x1001498e
fxch st(2)
fcom qword [0x1002a8f0]
fnstsw ax
test ah, 5
jp 0x1001498c
fcom qword [0x1002a8e8]
fnstsw ax
test ah, 0x41
jne 0x1001498c
fld dword [0x1002a8e0]
fstp dword [esi + 0x114]
fld dword [0x1002a8dc]
fstp dword [esi + 0x11c]
fld dword [0x1002a8d8]
fstp dword [esi + 0x124]
fxch st(2)
fld qword [0x1002a8d0]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x100149f0
fxch st(1)
fcom qword [0x1002a8c8]
fnstsw ax
test ah, 0x41
jne 0x100149ee
fxch st(3)
fcom qword [0x1002a8c0]
fnstsw ax
test ah, 5
jp 0x100149ec
fcom qword [0x1002a8b8]
fnstsw ax
test ah, 0x41
jne 0x100149ec
fld dword [0x1002a8b0]
fstp dword [esi + 0x114]
fld dword [0x1002a8ac]
fstp dword [esi + 0x11c]
fld dword [str.U3_S0_]
fstp dword [esi + 0x124]
fxch st(3)
fxch st(1)
fld qword [0x1002a8a0]
fcom st(2)
fnstsw ax
test ah, 0x41
jne 0x10014a57
fxch st(2)
fcom qword [0x1002a898]
fnstsw ax
test ah, 0x41
jne 0x10014a5b
fxch st(4)
fcom qword [0x1002a890]
fnstsw ax
test ah, 5
jp 0x10014a63
fcom st(2)
fnstsw ax
test ah, 0x41
jne 0x10014a63
fxch st(5)
fcomp st(6)
fnstsw ax
test ah, 0x41
jne 0x10014a65
fld dword [0x1002a88c]
fstp dword [esi + 0x114]
fld dword [0x1002aaa0]
fstp dword [esi + 0x11c]
fld dword [0x1002a888]
fstp dword [esi + 0x124]
jmp 0x10014a65
fstp st(5)
jmp 0x10014a6d
fstp st(5)
fxch st(1)
fxch st(4)
jmp 0x10014a6b
fstp st(5)
fxch st(1)
fxch st(4)
fxch st(3)
fxch st(1)
fld qword [0x1002a880]
fcom st(2)
fnstsw ax
test ah, 0x41
jne 0x10014ada
fxch st(2)
fcomp st(3)
fnstsw ax
fstp st(2)
test ah, 0x41
jne 0x10014ae4
fxch st(2)
fcom qword [0x1002a878]
fnstsw ax
test ah, 5
jp 0x10014ae8
fcomp qword [0x1002a870]
fnstsw ax
test ah, 0x41
jne 0x10014aea
fxch st(3)
fcomp qword [0x1002aa70]
fnstsw ax
test ah, 5
jp 0x10014aec
fld dword [0x1002a86c]
fstp dword [esi + 0x114]
fld dword [0x1002aad0]
fstp dword [esi + 0x11c]
fld dword [0x1002a868]
fstp dword [esi + 0x124]
jmp 0x10014af0
fstp st(2)
fstp st(3)
fstp st(4)
fstp st(0)
jmp 0x10014aee
fstp st(2)
jmp 0x10014aea
fstp st(0)
fstp st(3)
fxch st(2)
fxch st(2)
fld dword [ebp - 0x9c]
fcom qword [0x1002aad8]
fnstsw ax
fld dword [ebp - 0xa4]
test ah, 0x41
jne 0x10014b58
fxch st(1)
fcom qword [0x1002aac8]
fnstsw ax
fxch st(1)
test ah, 5
jp 0x10014b58
fcom qword [0x1002aac0]
fnstsw ax
test ah, 0x41
jne 0x10014b58
fcom qword [0x1002aab8]
fnstsw ax
test ah, 5
jp 0x10014b58
fld dword [0x1002aab4]
fstp dword [ebx + 0x114]
fld dword [0x1002aad0]
fstp dword [ebx + 0x11c]
fld dword [str._34_q_]
fstp dword [ebx + 0x124]
fxch st(1)
fcom qword [0x1002aaa8]
fnstsw ax
test ah, 0x41
jne 0x10014bb6
fcom qword [0x1002aa98]
fnstsw ax
test ah, 5
jp 0x10014bb6
fxch st(1)
fcom qword [0x1002aa90]
fnstsw ax
test ah, 5
jp 0x10014bb4
fcom qword [0x1002aa88]
fnstsw ax
test ah, 0x41
jne 0x10014bb4
fld dword [0x1002aa84]
fstp dword [ebx + 0x114]
fld dword [0x1002aaa0]
fstp dword [ebx + 0x11c]
fld dword [0x1002aa80]
fstp dword [ebx + 0x124]
fxch st(1)
fxch st(1)
fcom qword [0x1002aa78]
fnstsw ax
fld dword [ebp - 0x98]
fxch st(1)
test ah, 0x41
jne 0x10014c31
fcom qword [str.q_np]
fnstsw ax
test ah, 5
jp 0x10014c31
fxch st(2)
fcom qword [0x1002aa60]
fnstsw ax
test ah, 5
jp 0x10014c2f
fld dword [0x1002aa5c]
fcomp st(1)
fnstsw ax
test ah, 5
jp 0x10014c2f
fxch st(1)
fcom qword [0x1002aa70]
fnstsw ax
test ah, 5
jp 0x10014c2d
fld dword [0x1002aa58]
fstp dword [ebx + 0x114]
fld dword [str.T0_]
fstp dword [ebx + 0x11c]
fld dword [0x1002aa50]
fstp dword [ebx + 0x124]
jmp 0x10014c35
fxch st(1)
fxch st(2)
fxch st(2)
fxch st(1)
fxch st(2)
fcom qword [0x1002aa48]
fnstsw ax
test ah, 0x41
jne 0x10014ca4
fcom qword [0x1002aa40]
fnstsw ax
test ah, 5
jp 0x10014ca4
fxch st(1)
fcom qword [0x1002aa38]
fnstsw ax
test ah, 5
jp 0x10014ca2
fcom qword [0x1002aa30]
fnstsw ax
test ah, 0x41
jne 0x10014ca2
fxch st(2)
fcom qword [0x1002aa28]
fnstsw ax
test ah, 5
jp 0x10014ca0
fld dword [0x1002aa20]
fstp dword [ebx + 0x114]
fld dword [str.t_f__0k]
fstp dword [ebx + 0x11c]
fld dword [0x1002aa18]
fstp dword [ebx + 0x124]
fxch st(2)
fxch st(1)
fcom qword [str.ffffff]
fnstsw ax
test ah, 0x41
jne 0x10014d11
fcom qword [0x1002aa08]
fnstsw ax
test ah, 5
jp 0x10014d11
fxch st(1)
fcom qword [0x1002aa00]
fnstsw ax
test ah, 5
jp 0x10014d0f
fcom qword [0x1002a9f8]
fnstsw ax
test ah, 0x41
jne 0x10014d0f
fxch st(2)
fcom qword [0x1002aa70]
fnstsw ax
test ah, 5
jp 0x10014d0d
fld dword [0x1002a9f0]
fstp dword [ebx + 0x114]
fld dword [0x1002a9ec]
fstp dword [ebx + 0x11c]
fld dword [0x1002a9e8]
fstp dword [ebx + 0x124]
fxch st(2)
fxch st(1)
fcom qword [0x1002a9e0]
fnstsw ax
test ah, 0x41
jne 0x10014d6d
fcom qword [0x1002a9d8]
fnstsw ax
test ah, 5
jp 0x10014d6d
fxch st(1)
fcom qword [0x1002a9d0]
fnstsw ax
test ah, 5
jp 0x10014d6b
fcom qword [0x1002a9c8]
fnstsw ax
test ah, 0x41
jne 0x10014d6b
fld dword [0x1002a9c4]
fstp dword [ebx + 0x114]
fld dword [0x1002aad0]
fstp dword [ebx + 0x11c]
fld dword [0x1002a9c0]
fstp dword [ebx + 0x124]
fxch st(1)
fcom qword [str.p_n]
fnstsw ax
test ah, 0x41
jne 0x10014dda
fcom qword [0x1002a9b0]
fnstsw ax
test ah, 5
jp 0x10014dda
fxch st(1)
fcom qword [0x1002a9a8]
fnstsw ax
test ah, 5
jp 0x10014dd8
fcom qword [0x1002a9a0]
fnstsw ax
test ah, 0x41
jne 0x10014dd8
fxch st(2)
fcom qword [0x1002aa70]
fnstsw ax
test ah, 5
jp 0x10014dd6
fld dword [0x1002a99c]
fstp dword [ebx + 0x114]
fld dword [0x1002aaa0]
fstp dword [ebx + 0x11c]
fld dword [0x1002a998]
fstp dword [ebx + 0x124]
fxch st(2)
fxch st(1)
fcom qword [0x1002a990]
fnstsw ax
test ah, 5
jp 0x10014e36
fcom qword [0x1002a988]
fnstsw ax
test ah, 0x41
jne 0x10014e36
fxch st(1)
fcom qword [0x1002a980]
fnstsw ax
test ah, 0x41
jne 0x10014e34
fcom qword [0x1002a978]
fnstsw ax
test ah, 5
jp 0x10014e34
fld dword [0x1002a974]
fstp dword [ebx + 0x114]
fld dword [0x1002aaa0]
fstp dword [ebx + 0x11c]
fld dword [str.4C_e_06]
fstp dword [ebx + 0x124]
fxch st(1)
fcom qword [0x1002a968]
fnstsw ax
test ah, 5
jp 0x10014ea3
fcom qword [0x1002a958]
fnstsw ax
test ah, 0x41
jne 0x10014ea3
fxch st(1)
fcom qword [0x1002a950]
fnstsw ax
test ah, 0x41
jne 0x10014ea1
fcom qword [0x1002a960]
fnstsw ax
test ah, 5
jp 0x10014ea1
fxch st(2)
fcom qword [0x1002aa70]
fnstsw ax
test ah, 5
jp 0x10014e9f
fld dword [0x1002a948]
fstp dword [ebx + 0x114]
fld dword [0x1002a944]
fstp dword [ebx + 0x11c]
fld dword [0x1002a940]
fstp dword [ebx + 0x124]
fxch st(2)
fxch st(1)
fcom qword [0x1002a938]
fnstsw ax
test ah, 5
jp 0x10014f10
fcom qword [0x1002a930]
fnstsw ax
test ah, 0x41
jne 0x10014f10
fxch st(1)
fcom qword [0x1002a928]
fnstsw ax
test ah, 5
jp 0x10014f0e
fcom qword [0x1002a920]
fnstsw ax
test ah, 0x41
jne 0x10014f0e
fxch st(2)
fcom qword [str.333333]
fnstsw ax
test ah, 5
jp 0x10014f0c
fld dword [0x1002a864]
fstp dword [ebx + 0x114]
fld dword [0x1002a860]
fstp dword [ebx + 0x11c]
fld dword [0x1002a85c]
fstp dword [ebx + 0x124]
fxch st(2)
fxch st(1)
fcom qword [0x1002a900]
fnstsw ax
test ah, 5
jp 0x10014f6c
fcom qword [0x1002a8f8]
fnstsw ax
test ah, 0x41
jne 0x10014f6c
fxch st(1)
fcom qword [0x1002a8f0]
fnstsw ax
test ah, 5
jp 0x10014f6a
fcom qword [0x1002a8e8]
fnstsw ax
test ah, 0x41
jne 0x10014f6a
fld dword [0x1002a8e0]
fstp dword [ebx + 0x114]
fld dword [0x1002a8dc]
fstp dword [ebx + 0x11c]
fld dword [0x1002a8d8]
fstp dword [ebx + 0x124]
fxch st(1)
fcom st(5)
fnstsw ax
fstp st(5)
test ah, 5
jp 0x10014fc6
fxch st(4)
fcom qword [0x1002a8c8]
fnstsw ax
fxch st(4)
test ah, 0x41
jne 0x10014fc6
fcom qword [0x1002a8c0]
fnstsw ax
test ah, 5
jp 0x10014fc6
fcom qword [0x1002a8b8]
fnstsw ax
test ah, 0x41
jne 0x10014fc6
fld dword [0x1002a8b0]
fstp dword [ebx + 0x114]
fld dword [0x1002a8ac]
fstp dword [ebx + 0x11c]
fld dword [str.U3_S0_]
fstp dword [ebx + 0x124]
fxch st(4)
fcom st(3)
fnstsw ax
test ah, 5
jp 0x1001502b
fcom qword [0x1002a898]
fnstsw ax
test ah, 0x41
jne 0x1001502b
fxch st(4)
fcom qword [0x1002a890]
fnstsw ax
test ah, 5
jp 0x1001502f
fcom st(3)
fnstsw ax
fstp st(3)
test ah, 0x41
jne 0x10015031
fcom qword [0x1002aa70]
fnstsw ax
test ah, 5
jp 0x1001503d
fld dword [0x1002a88c]
fstp dword [ebx + 0x114]
fld dword [0x1002aaa0]
fstp dword [ebx + 0x11c]
fld dword [0x1002a888]
fstp dword [ebx + 0x124]
jmp 0x1001503d
fstp st(3)
jmp 0x10015037
fstp st(3)
fxch st(2)
fxch st(3)
fxch st(2)
fxch st(2)
fxch st(3)
fxch st(2)
fxch st(1)
fcomp st(3)
fnstsw ax
test ah, 0x41
jne 0x100150a4
fxch st(2)
fcomp qword [0x1002a960]
fnstsw ax
test ah, 0x41
jne 0x100150a6
fcom qword [0x1002a878]
fnstsw ax
test ah, 5
jp 0x100150a6
fcomp qword [0x1002a870]
fnstsw ax
test ah, 0x41
jne 0x100150a8
fcomp qword [0x1002aa70]
fnstsw ax
test ah, 5
jp 0x100150aa
fld dword [0x1002a86c]
fstp dword [ebx + 0x114]
fld dword [0x1002aad0]
fstp dword [ebx + 0x11c]
fld dword [0x1002a868]
fstp dword [ebx + 0x124]
jmp 0x100150aa
fstp st(2)
fstp st(0)
fstp st(0)
xor edi, edi
cmp dword [0x10162804], edi
je 0x100150d9
call fcn.1000aa80
push eax
call fcn.1000a880
push eax
call fcn.1000aa80
push eax
call fcn.1000a7e0
cmp byte [eax], 0
je 0x100150d9
mov byte [eax], 0
inc eax
cmp byte [eax], 0
jne 0x100150d0
cmp dword [0x1016277c], edi
je 0x1001510c
call fcn.1000bd30
mov ecx, eax
call fcn.1000b6a0
test al, al
je 0x1001510c
call fcn.1000aa80
push eax
call fcn.1000a880
push eax
call fcn.1000bdc0
add esp, 4
mov esi, eax
call fcn.1000b7f0
cmp dword [0x1016275c], edi
je 0x100151a9
mov ecx, dword [0x10162760]
mov esi, dword [0x10162768]
mov edx, dword [0x10162764]
cmp ecx, edi
jne 0x1001513c
cmp edx, edi
jne 0x1001513c
cmp esi, edi
je 0x100151bb
xor edi, edi
xor eax, eax
cmp ecx, edi
je 0x1001514c
mov eax, ecx
mov dword [0x10162768], edi
jmp 0x1001516e
cmp edx, edi
je 0x10015161
lea eax, [edx + 0xa]
mov dword [0x10162768], edi
mov dword [0x10162760], edi
jmp 0x10015174
cmp esi, edi
je 0x10015174
lea eax, [esi + 0x14]
mov dword [0x10162760], edi
mov dword [0x10162764], edi
push eax
call fcn.1000bd30
mov edi, eax
call fcn.1000ca00
mov esi, eax
call fcn.1000c940
xor edi, edi
lea esi, [edi + 1]
call fcn.10001bb0
test eax, eax
je 0x100151bb
xor eax, eax
mov dword [0x10162760], eax
mov dword [0x10162764], eax
mov dword [0x10162768], eax
jmp 0x100151bb
mov dword [0x10162760], edi
mov dword [0x10162764], edi
mov dword [0x10162768], edi
mov eax, dword [0x10162744]
mov ebx, 1
cmp eax, ebx
jne 0x10015210
mov edi, 0x101dc6f1
lea esi, [ebp - 0x40]
call fcn.1001dfa0
mov edi, eax
mov dword [ebp - 4], 6
call fcn.1000aa80
push eax
call fcn.1000a880
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x28]
imul esi, esi, 0x45
push edi
call eax
add esi, eax
call fcn.1000aa80
mov dword [eax + esi], 0x30
jmp 0x10015384
cmp eax, 2
jne 0x1001525c
mov edi, 0x101dc6f1
lea esi, [ebp - 0x40]
call fcn.1001dfa0
mov edi, eax
mov dword [ebp - 4], 7
call fcn.1000aa80
push eax
call fcn.1000a880
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x28]
imul esi, esi, 0x45
push edi
call eax
add esi, eax
call fcn.1000aa80
mov dword [eax + esi], 0x31
jmp 0x10015384
cmp eax, 3
jne 0x100152a8
mov edi, 0x101dc6f1
lea esi, [ebp - 0x40]
call fcn.1001dfa0
mov edi, eax
mov dword [ebp - 4], 8
call fcn.1000aa80
push eax
call fcn.1000a880
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x28]
imul esi, esi, 0x45
push edi
call eax
add esi, eax
call fcn.1000aa80
mov dword [eax + esi], 0x32
jmp 0x10015384
cmp eax, 4
jne 0x100152f4
mov edi, 0x101dc6f1
lea esi, [ebp - 0x40]
call fcn.1001dfa0
mov edi, eax
mov dword [ebp - 4], 9
call fcn.1000aa80
push eax
call fcn.1000a880
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x28]
imul esi, esi, 0x45
push edi
call eax
add esi, eax
call fcn.1000aa80
mov dword [eax + esi], 0x33
jmp 0x10015384
cmp eax, 5
jne 0x1001533d
mov edi, 0x101dc6f1
lea esi, [ebp - 0x40]
call fcn.1001dfa0
mov edi, eax
mov dword [ebp - 4], 0xa
call fcn.1000aa80
push eax
call fcn.1000a880
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x28]
imul esi, esi, 0x45
push edi
call eax
add esi, eax
call fcn.1000aa80
mov dword [eax + esi], 0x35
jmp 0x10015384
cmp eax, 6
jne 0x1001538b
mov edi, 0x101dc6f1
lea esi, [ebp - 0x40]
call fcn.1001dfa0
mov edi, eax
mov dword [ebp - 4], 0xb
call fcn.1000aa80
push eax
call fcn.1000a880
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x28]
imul esi, esi, 0x45
push edi
call eax
add esi, eax
call fcn.1000aa80
mov dword [eax + esi], 0x36
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10162888], 0
je 0x1001547e
call fcn.1000bfb0
test eax, eax
je 0x100153af
call fcn.1000bfb0
cmp eax, 2
jne 0x1001547e
xor edi, edi
mov esi, ebx
call fcn.10001bb0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
test eax, eax
je 0x100153cf
call esi
mov dword [0x10162d68], eax
mov dword [0x10162d74], ebx
call esi
mov ecx, dword [0x10162d68]
add ecx, 0x32
cmp eax, ecx
jbe 0x10015401
cmp dword [0x10162d74], ebx
jne 0x10015401
push ebx
push 4
push 0x33
call fcn.1001f1e0
call esi
mov dword [0x10162d6c], eax
mov dword [0x10162d74], 2
call esi
mov edx, dword [0x10162d6c]
add edx, 0x32
cmp eax, edx
jbe 0x1001544a
cmp dword [0x10162d74], 2
jne 0x1001544a
push 3
push 4
push 0x33
call fcn.1001f1e0
push 3
push 0x21
push 0x46
call fcn.1001f1e0
push ebx
push 2
push 0x31
call fcn.1001f1e0
call esi
mov dword [0x10162d70], eax
mov dword [0x10162d74], 3
call esi
mov ecx, dword [0x10162d70]
add ecx, 0x23
cmp eax, ecx
jbe 0x1001547e
cmp dword [0x10162d74], 3
jne 0x1001547e
push 3
push 2
push 0x31
call fcn.1001f1e0
push 3
push 0x21
push 0x46
call fcn.1001f1e0
mov dword [0x10162d74], edi
cmp dword [0x101627e0], 0
je 0x10015614
call fcn.1000bd30
push eax
call fcn.1000b5f0
mov ebx, eax
test ebx, ebx
je 0x10015614
call fcn.1000bd30
mov esi, eax
call fcn.1000b550
mov edi, eax
test edi, edi
je 0x10015614
fld dword [0x1002a858]
push ecx
mov esi, ebx
fstp dword [esp]
call fcn.1000b030
fld dword [0x1002a818]
push ecx
fstp dword [esp]
call fcn.1000bd30
push eax
call fcn.1000bb50
test al, al
je 0x1001556b
mov edi, str._DOIUoYQESA
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x24]
call fcn.1001bdd0
mov ebx, eax
mov edi, 0x1024a900
lea esi, [ebp - 0x6c]
mov dword [ebp - 4], 0xc
call fcn.1001ba40
mov dword [ebp - 0x98], eax
lea esi, [ebp - 0x88]
call fcn.1001ba40
mov edi, eax
mov byte [ebp - 4], 0xe
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
call eax
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov edx, dword [edx + 0x28]
mov ebx, eax
mov eax, dword [ebp - 0x98]
push eax
call edx
mov ecx, dword [0x10162524]
mov esi, eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
add esi, dword [ebx]
push edi
call edx
mov ecx, dword [esi]
mov edx, dword [eax + ecx]
mov dword [edx + 0x68], 1
jmp 0x10015614
mov ecx, edi
call fcn.1000b290
cmp eax, 3
jne 0x10015609
push eax
push 5
push 0x34
call fcn.1001f1e0
mov edi, str._DOIUoYQESA
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x64]
call fcn.1001bdd0
mov ebx, eax
mov edi, 0x1024a900
lea esi, [ebp - 0x88]
mov dword [ebp - 4], 0xf
call fcn.1001ba40
mov dword [ebp - 0x98], eax
lea esi, [ebp - 0x40]
call fcn.1001ba40
mov edi, eax
mov byte [ebp - 4], 0x11
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
push ebx
call edx
mov ecx, dword [0x10162524]
mov edx, dword [ebp - 0x98]
mov ebx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
push edx
call eax
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x28]
add esi, dword [ebx]
push edi
call eax
mov ecx, dword [esi]
mov edx, dword [eax + ecx]
mov dword [edx + 0x68], 0
jmp 0x10015614
push 1
push 5
push 0x34
call fcn.1001f1e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001fa55
mov esp, ebp
pop ebp
ret