Function at 0x1004ac80
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1011b972
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xb0
cmp byte [0x11290084], 0
push esi
push edi
je 0x1004c15a
push 1
mov dword [ebp - 0x2c], 0x42480000
lea eax, [ebp - 0x30]
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0x42480000
push dword [ebp - 0x30]
push eax
call fcn.1004dfa0
movd xmm0, dword [0x11290914]
add esp, 0x10
cvtdq2ps xmm0, xmm0
mov ecx, dword [0x11297ea4]
addss xmm0, dword [ebp - 0x2c]
addss xmm0, dword [0x11064b04]
cvttss2si esi, xmm0
movss xmm0, dword [ebp - 0x30]
mulss xmm0, dword [0x10122d00]
cvttss2si eax, xmm0
mov dword [ebp - 0x4c], eax
mov eax, dword fs:[0x2c]
mov edi, dword [eax + ecx*4]
mov eax, dword [0x11293280]
cmp eax, dword [edi + 4]
jg 0x1004c16d
mov eax, dword [0x11293294]
cmp eax, dword [edi + 4]
jg 0x1004c1c2
mov eax, dword [0x112932a8]
cmp eax, dword [edi + 4]
jg 0x1004c217
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_clock]
mov ecx, dword [0x11293040]
test ecx, ecx
mov dword [ebp - 0xa4], eax
cmove ecx, eax
sub eax, ecx
mov dword [0x11293040], ecx
cmp byte [0x1129003c], 0
movd xmm0, eax
mov al, byte [0x11290087]
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x110bef30]
je 0x1004adb1
test al, al
je 0x1004adb1
mulsd xmm0, qword [0x110bef20]
cvtpd2ps xmm2, xmm0
movsd qword [ebp - 0x30], xmm0
addss xmm2, dword [0x11293024]
jmp 0x1004adce
mulsd xmm0, qword [0x110bef20]
movss xmm2, dword [0x11293024]
movsd qword [ebp - 0x30], xmm0
cvtpd2ps xmm0, xmm0
subss xmm2, xmm0
movss xmm1, dword [0x10122b78]
comiss xmm2, xmm1
movss dword [0x11293024], xmm2
jbe 0x1004adf2
mov dword [0x11293024], 0x3f800000
movaps xmm2, xmm1
jmp 0x1004ae12
xorps xmm0, xmm0
comiss xmm0, xmm2
jbe 0x1004ae09
mov dword [0x11293024], 0
jmp 0x1004b06c
comiss xmm2, xmm0
jbe 0x1004b06c
test al, al
je 0x1004b06c
movd xmm1, dword [0x11290914]
cvtdq2ps xmm1, xmm1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si esi, xmm1
call fcn.10014bb0
cmp byte [0x11290d5c], 0
lea ecx, [ebp - 0x60]
mov edi, eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x64], eax
movss xmm0, dword [0x11293024]
mulss xmm0, dword [0x11064b44]
jne 0x1004ae66
lea ecx, [ebp - 0x80]
cvttss2si eax, xmm0
push eax
push 0
push 0
push 0
call fcn.100b6ca0
movd xmm3, dword [0x11290044]
cvtdq2ps xmm3, xmm3
movups xmm2, xmmword [eax]
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
mov dword [ebp - 0x90], 2
sar eax, 1
mov dword [ebp - 0x3c], eax
inc eax
mov dword [ebp - 0x8c], 0xf
movd xmm1, eax
lea eax, [esi + 1]
movd xmm0, eax
mov eax, 0x7370
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x34], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0xa0], xmm0
mov word [ebp - 0xa0], ax
movss dword [ebp - 0x38], xmm1
mov byte [ebp - 0x9e], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 4], 3
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
movups xmmword [eax], xmm2
lea eax, [ebp - 0xa0]
mov ecx, edi
movss dword [esp], xmm3
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x8c]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004af53
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004af49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004af49
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
call fcn.10014bb0
cmp byte [0x11290d5c], 0
movss xmm0, dword [0x11293024]
mulss xmm0, dword [0x11064b44]
mov dword [ebp - 0x34], eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x54], eax
je 0x1004af95
mov eax, dword [0x112902fc]
lea ecx, [ebp - 0x80]
mov edx, dword [0x112902f4]
mov edi, dword [0x112902f8]
mov dword [ebp - 0x64], eax
jmp 0x1004afa5
mov edx, 0xff
lea ecx, [ebp - 0x98]
mov edi, edx
mov dword [ebp - 0x64], edx
cvttss2si eax, xmm0
push eax
push dword [ebp - 0x64]
push edi
push edx
call fcn.100b6ca0
movd xmm0, dword [ebp - 0x3c]
movd xmm3, dword [0x11290044]
cvtdq2ps xmm0, xmm0
movups xmm2, xmmword [eax]
mov eax, 0x7370
mov dword [ebp - 0x18], 2
movd xmm1, esi
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x14], 0xf
movss dword [ebp - 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x26], 0
movss dword [ebp - 0x3c], xmm1
push 0
push dword [ebp - 0x54]
mov dword [ebp - 4], 4
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
mov ecx, dword [ebp - 0x34]
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
movss dword [esp], xmm3
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004b06c
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b062
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004b062
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
push dword [0x11290010]
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
call edi
test ax, ax
je 0x1004b09b
cmp byte [0x1128ffec], 0
je 0x1004b09b
movsd xmm0, qword [ebp - 0x30]
cvtpd2ps xmm0, xmm0
addss xmm0, dword [0x11293038]
jmp 0x1004b0b0
movsd xmm2, qword [ebp - 0x30]
movss xmm0, dword [0x11293038]
cvtpd2ps xmm1, xmm2
subss xmm0, xmm1
movss xmm1, dword [0x10122b78]
comiss xmm0, xmm1
movss dword [0x11293038], xmm0
jbe 0x1004b0d4
mov dword [0x11293038], 0x3f800000
movaps xmm0, xmm1
jmp 0x1004b0f4
xorps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x1004b0eb
mov dword [0x11293038], 0
jmp 0x1004b344
comiss xmm0, xmm1
jbe 0x1004b344
cmp byte [0x112900cc], 0
je 0x1004b344
movd xmm1, dword [0x11290914]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si esi, xmm1
call fcn.10014bb0
cmp byte [0x11292c74], 0
lea ecx, [ebp - 0x98]
mov edi, eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
movss xmm0, dword [0x11293038]
mulss xmm0, dword [0x11064b44]
jne 0x1004b150
lea ecx, [ebp - 0x80]
cvttss2si eax, xmm0
push eax
push 0
push 0
push 0
call fcn.100b6ca0
movd xmm3, dword [0x11290044]
cvtdq2ps xmm3, xmm3
movups xmm2, xmmword [eax]
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
mov dword [ebp - 0x18], 2
sar eax, 1
mov dword [ebp - 0x54], eax
inc eax
mov dword [ebp - 0x14], 0xf
movd xmm1, eax
lea eax, [esi + 1]
movd xmm0, eax
mov eax, 0x6265
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x3c], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
movss dword [ebp - 0x40], xmm1
mov byte [ebp - 0x26], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 5
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
mov ecx, edi
movss dword [esp], xmm3
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004b225
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b21b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004b21b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
call fcn.10014bb0
cmp byte [0x11292c74], 0
movss xmm0, dword [0x11293038]
mulss xmm0, dword [0x11064b44]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
je 0x1004b26a
mov eax, dword [0x112902ec]
lea ecx, [ebp - 0x98]
mov edx, dword [0x112902e4]
mov edi, dword [0x112902e8]
mov dword [ebp - 0x64], eax
jmp 0x1004b277
mov edx, 0xff
lea ecx, [ebp - 0x80]
mov edi, edx
mov dword [ebp - 0x64], edx
cvttss2si eax, xmm0
push eax
push dword [ebp - 0x64]
push edi
push edx
call fcn.100b6ca0
movd xmm0, dword [ebp - 0x54]
movd xmm3, dword [0x11290044]
cvtdq2ps xmm0, xmm0
movups xmm2, xmmword [eax]
mov eax, 0x6265
mov dword [ebp - 0x18], 2
movd xmm1, esi
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x14], 0xf
movss dword [ebp - 0x58], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x26], 0
movss dword [ebp - 0x54], xmm1
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 6
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
mov ecx, dword [ebp - 0x3c]
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
movss dword [esp], xmm3
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004b33e
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b334
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004b334
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push dword [0x1128ff80]
call edi
test ax, ax
mov al, byte [0x1128ff7c]
je 0x1004b36d
test al, al
je 0x1004b36d
movsd xmm1, qword [ebp - 0x30]
cvtpd2ps xmm2, xmm1
addss xmm2, dword [0x1129303c]
jmp 0x1004b382
movsd xmm1, qword [ebp - 0x30]
movss xmm2, dword [0x1129303c]
cvtpd2ps xmm0, xmm1
subss xmm2, xmm0
movss xmm0, dword [0x10122b78]
comiss xmm2, xmm0
movss dword [0x1129303c], xmm2
jbe 0x1004b3a6
mov dword [0x1129303c], 0x3f800000
movaps xmm2, xmm0
jmp 0x1004b3c6
xorps xmm0, xmm0
comiss xmm0, xmm2
jbe 0x1004b3bd
mov dword [0x1129303c], 0
jmp 0x1004b5fa
comiss xmm2, xmm0
jbe 0x1004b5fa
test al, al
je 0x1004b5fa
movd xmm1, dword [0x11290914]
cvtdq2ps xmm1, xmm1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si esi, xmm1
call fcn.10014bb0
cmp byte [0x11290c7f], 0
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x54], eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
movss xmm0, dword [0x1129303c]
mulss xmm0, dword [0x11064b44]
jne 0x1004b41e
lea ecx, [ebp - 0x80]
cvttss2si eax, xmm0
push eax
push 0
push 0
push 0
call fcn.100b6ca0
movd xmm3, dword [0x11290044]
cvtdq2ps xmm3, xmm3
movups xmm2, xmmword [eax]
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
mov dword [ebp - 0x18], 2
sar eax, 1
mov dword [ebp - 0x3c], eax
inc eax
mov dword [ebp - 0x14], 0xf
movd xmm1, eax
lea eax, [esi + 1]
movd xmm0, eax
mov eax, 0x7266
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x64], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
movss dword [ebp - 0x68], xmm1
mov byte [ebp - 0x26], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 7
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
mov ecx, dword [ebp - 0x54]
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
movss dword [esp], xmm3
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004b4f4
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b4ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004b4ea
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
call fcn.10014bb0
cmp byte [0x11290c7f], 0
movss xmm0, dword [0x1129303c]
mulss xmm0, dword [0x11064b44]
mov dword [ebp - 0x54], eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
je 0x1004b527
lea edx, [ebp - 0x98]
xor ecx, ecx
jmp 0x1004b52f
lea edx, [ebp - 0x80]
mov ecx, 0xff
cvttss2si eax, xmm0
push eax
push ecx
push ecx
push 0xff
mov ecx, edx
call fcn.100b6ca0
movd xmm0, dword [ebp - 0x3c]
movd xmm3, dword [0x11290044]
cvtdq2ps xmm0, xmm0
movups xmm2, xmmword [eax]
mov eax, 0x7266
mov dword [ebp - 0x18], 2
movd xmm1, esi
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x14], 0xf
movss dword [ebp - 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x26], 0
movss dword [ebp - 0x3c], xmm1
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 8
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
mov ecx, dword [ebp - 0x54]
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
movss dword [esp], xmm3
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004b5fa
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b5f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004b5f0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
cmp byte [0x1128ff91], 0
je 0x1004b62c
push dword [0x1128ff94]
call edi
test ax, ax
je 0x1004b62c
mov al, byte [0x11290086]
test al, al
je 0x1004b631
movsd xmm1, qword [ebp - 0x30]
cvtpd2ps xmm2, xmm1
addss xmm2, dword [0x11293018]
jmp 0x1004b646
mov al, byte [0x11290086]
movsd xmm1, qword [ebp - 0x30]
movss xmm2, dword [0x11293018]
cvtpd2ps xmm0, xmm1
subss xmm2, xmm0
movss xmm0, dword [0x10122b78]
comiss xmm2, xmm0
movss dword [0x11293018], xmm2
jbe 0x1004b66a
mov dword [0x11293018], 0x3f800000
movaps xmm2, xmm0
jmp 0x1004b68a
xorps xmm0, xmm0
comiss xmm0, xmm2
jbe 0x1004b681
mov dword [0x11293018], 0
jmp 0x1004b8bb
comiss xmm2, xmm0
jbe 0x1004b8bb
test al, al
je 0x1004b8bb
movd xmm1, dword [0x11290914]
cvtdq2ps xmm1, xmm1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si esi, xmm1
call fcn.10014bb0
cmp byte [0x11290d59], 0
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x54], eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
movss xmm0, dword [0x11293018]
mulss xmm0, dword [0x11064b44]
jne 0x1004b6e2
lea ecx, [ebp - 0x80]
cvttss2si eax, xmm0
push eax
push 0
push 0
push 0
call fcn.100b6ca0
movd xmm3, dword [0x11290044]
cvtdq2ps xmm3, xmm3
movups xmm2, xmmword [eax]
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
mov dword [ebp - 0x18], 2
sar eax, 1
mov dword [ebp - 0x3c], eax
inc eax
mov dword [ebp - 0x14], 0xf
movd xmm1, eax
lea eax, [esi + 1]
movd xmm0, eax
mov eax, 0x6a6c
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x64], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
movss dword [ebp - 0x68], xmm1
mov byte [ebp - 0x26], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 9
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
mov ecx, dword [ebp - 0x54]
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
movss dword [esp], xmm3
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004b7b8
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b7ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004b7ae
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
call fcn.10014bb0
cmp byte [0x11290d59], 0
lea ecx, [ebp - 0x98]
movss xmm0, dword [0x11293018]
mulss xmm0, dword [0x11064b44]
mov dword [ebp - 0x54], eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
jne 0x1004b7ea
lea ecx, [ebp - 0x80]
cvttss2si eax, xmm0
push eax
push 0xff
push 0xff
push 0xff
call fcn.100b6ca0
movd xmm0, dword [ebp - 0x3c]
movd xmm3, dword [0x11290044]
cvtdq2ps xmm0, xmm0
movups xmm2, xmmword [eax]
mov eax, 0x6a6c
mov dword [ebp - 0x18], 2
movd xmm1, esi
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x14], 0xf
movss dword [ebp - 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x26], 0
movss dword [ebp - 0x3c], xmm1
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 0xa
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
mov ecx, dword [ebp - 0x54]
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
movss dword [esp], xmm3
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004b8bb
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b8b1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004b8b1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
cmp byte [0x11290030], 0
je 0x1004b8ed
push dword [0x11290038]
call edi
test ax, ax
je 0x1004b8ed
mov al, byte [0x11290094]
test al, al
je 0x1004b8f2
movsd xmm1, qword [ebp - 0x30]
cvtpd2ps xmm2, xmm1
addss xmm2, dword [0x11293020]
jmp 0x1004b907
mov al, byte [0x11290094]
movsd xmm1, qword [ebp - 0x30]
movss xmm2, dword [0x11293020]
cvtpd2ps xmm0, xmm1
subss xmm2, xmm0
movss xmm0, dword [0x10122b78]
comiss xmm2, xmm0
movss dword [0x11293020], xmm2
jbe 0x1004b92b
mov dword [0x11293020], 0x3f800000
movaps xmm2, xmm0
jmp 0x1004b94b
xorps xmm0, xmm0
comiss xmm0, xmm2
jbe 0x1004b942
mov dword [0x11293020], 0
jmp 0x1004bb78
comiss xmm2, xmm0
jbe 0x1004bb78
test al, al
je 0x1004bb78
movd xmm1, dword [0x11290914]
cvtdq2ps xmm1, xmm1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si esi, xmm1
call fcn.10014bb0
cmp byte [0x11290d5a], 0
lea ecx, [ebp - 0x98]
mov edi, eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
movss xmm0, dword [0x11293020]
mulss xmm0, dword [0x11064b44]
jne 0x1004b9a2
lea ecx, [ebp - 0x80]
cvttss2si eax, xmm0
push eax
push 0
push 0
push 0
call fcn.100b6ca0
movd xmm3, dword [0x11290044]
cvtdq2ps xmm3, xmm3
movups xmm2, xmmword [eax]
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
mov dword [ebp - 0x18], 2
sar eax, 1
mov dword [ebp - 0x54], eax
inc eax
mov dword [ebp - 0x14], 0xf
movd xmm1, eax
lea eax, [esi + 1]
movd xmm0, eax
mov eax, 0x6a6d
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x3c], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
movss dword [ebp - 0x40], xmm1
mov byte [ebp - 0x26], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 0xb
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
mov ecx, edi
movss dword [esp], xmm3
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004ba77
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004ba6d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004ba6d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
call fcn.10014bb0
cmp byte [0x11290d5a], 0
lea ecx, [ebp - 0x98]
movss xmm0, dword [0x11293020]
mov edi, eax
mov eax, dword [0x112911a8]
mulss xmm0, dword [0x11064b44]
mov dword [ebp - 0x34], eax
jne 0x1004baa8
lea ecx, [ebp - 0x80]
cvttss2si eax, xmm0
push eax
push 0xff
push 0xff
push 0xff
call fcn.100b6ca0
movd xmm0, dword [ebp - 0x54]
movd xmm3, dword [0x11290044]
cvtdq2ps xmm0, xmm0
movups xmm2, xmmword [eax]
mov eax, 0x6a6d
mov dword [ebp - 0x18], 2
movd xmm1, esi
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x14], 0xf
movss dword [ebp - 0x58], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x26], 0
movss dword [ebp - 0x54], xmm1
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 0xc
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
mov ecx, edi
movss dword [esp], xmm3
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004bb78
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004bb6e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004bb6e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
xor edi, edi
cmp byte [0x11290d58], 0
je 0x1004bb8b
mov eax, dword [0x11290b50]
mov edi, dword [eax + 0x1c]
cmp byte [0x1129002f], 0
je 0x1004bbc1
push dword [0x11290050]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1004bbc1
mov al, byte [0x112900b0]
test al, al
je 0x1004bbc6
movsd xmm1, qword [ebp - 0x30]
cvtpd2ps xmm2, xmm1
addss xmm2, dword [0x11293014]
jmp 0x1004bbdb
mov al, byte [0x112900b0]
movsd xmm1, qword [ebp - 0x30]
movss xmm2, dword [0x11293014]
cvtpd2ps xmm0, xmm1
subss xmm2, xmm0
movss xmm0, dword [0x10122b78]
comiss xmm2, xmm0
movss dword [0x11293014], xmm2
jbe 0x1004bbff
mov dword [0x11293014], 0x3f800000
movaps xmm2, xmm0
jmp 0x1004bc1f
xorps xmm0, xmm0
comiss xmm0, xmm2
jbe 0x1004bc16
mov dword [0x11293014], 0
jmp 0x1004be6a
comiss xmm2, xmm0
jbe 0x1004be6a
test al, al
je 0x1004be6a
movd xmm1, dword [0x11290914]
cvtdq2ps xmm1, xmm1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si esi, xmm1
call fcn.10014bb0
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x54], eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
mov eax, dword [0x11290b50]
movss xmm0, dword [0x11293014]
mulss xmm0, dword [0x11064b44]
mov edx, dword [eax + 0x1c]
sub edx, edi
cmp edx, 0xf
cvttss2si eax, xmm0
push eax
push 0
push 0
lea eax, [ebp - 0x80]
push 0
cmovl ecx, eax
call fcn.100b6ca0
movd xmm3, dword [0x11290044]
cvtdq2ps xmm3, xmm3
movups xmm2, xmmword [eax]
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
mov dword [ebp - 0x18], 2
sar eax, 1
mov dword [ebp - 0x3c], eax
inc eax
mov dword [ebp - 0x14], 0xf
movd xmm1, eax
lea eax, [esi + 1]
movd xmm0, eax
mov eax, 0x626a
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x64], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
movss dword [ebp - 0x68], xmm1
mov byte [ebp - 0x26], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 0xd
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
mov ecx, dword [ebp - 0x54]
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
movss dword [esp], xmm3
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004bd54
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004bd4a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004bd4a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
call fcn.10014bb0
mov dword [ebp - 0x54], eax
mov eax, dword [0x112911a8]
mov dword [ebp - 0x34], eax
mov eax, dword [0x11290b50]
mov eax, dword [eax + 0x1c]
sub eax, edi
cmp eax, 0xf
jge 0x1004bd83
movups xmm0, xmmword [0x112902d4]
lea eax, [ebp - 0x70]
movups xmmword [ebp - 0x70], xmm0
jmp 0x1004bdb2
movss xmm0, dword [0x11293014]
lea ecx, [ebp - 0x98]
mulss xmm0, dword [0x11064b44]
cvttss2si eax, xmm0
push eax
push 0xff
push 0xff
push 0xff
call fcn.100b6ca0
movd xmm0, dword [ebp - 0x3c]
movups xmm2, xmmword [eax]
mov eax, 0x626a
mov dword [ebp - 0x18], 2
movd xmm3, dword [0x11290044]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x14], 0xf
movd xmm1, esi
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x26], 0
movss dword [ebp - 0x3c], xmm1
push 0
push dword [ebp - 0x34]
mov dword [ebp - 4], 0xe
push 0
push 1
sub esp, 0x10
mov eax, esp
push ecx
mov ecx, dword [ebp - 0x54]
movups xmmword [eax], xmm2
lea eax, [ebp - 0x28]
movss dword [esp], xmm3
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x14]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004be6a
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004be60
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004be60
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
cmp byte [0x1128ff3b], 0
je 0x1004bea8
push dword [0x1128ff3c]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1004be8c
cmp byte [0x1128ff4c], al
je 0x1004bea8
mov al, byte [0x1128ff4d]
test al, al
je 0x1004bead
movsd xmm1, qword [ebp - 0x30]
cvtpd2ps xmm0, xmm1
addss xmm0, dword [0x11293010]
jmp 0x1004bec2
mov al, byte [0x1128ff4d]
movsd xmm2, qword [ebp - 0x30]
movss xmm0, dword [0x11293010]
cvtpd2ps xmm1, xmm2
subss xmm0, xmm1
movss xmm2, dword [0x10122b78]
comiss xmm0, xmm2
movss dword [0x11293010], xmm0
jbe 0x1004bee3
mov dword [0x11293010], 0x3f800000
jmp 0x1004bf06
xorps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x1004befa
mov dword [0x11293010], 0
jmp 0x1004c14f
comiss xmm0, xmm1
movaps xmm2, xmm0
jbe 0x1004c14f
test al, al
je 0x1004c14f
movd xmm1, dword [0x11290914]
cvtdq2ps xmm1, xmm1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [ebp - 0x64], eax
call fcn.10014bb0
movss xmm0, dword [0x11293010]
lea ecx, [ebp - 0x98]
mulss xmm0, dword [0x11064b44]
mov edi, eax
mov esi, dword [0x112911a8]
cvttss2si eax, xmm0
push eax
push 0
push 0
push 0
call fcn.100b6ca0
movd xmm3, dword [0x11290044]
cvtdq2ps xmm3, xmm3
movups xmm2, xmmword [eax]
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
mov dword [ebp - 0x78], 3
sar eax, 1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x74], 0xf
lea ecx, [eax + 1]
mov ax, word [0x110be700]
movd xmm1, ecx
mov ecx, dword [ebp - 0x64]
inc ecx
cvtdq2ps xmm1, xmm1
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x30], xmm1
movss dword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x88], xmm0
mov word [ebp - 0x88], ax
mov al, byte [0x110be702]
mov byte [ebp - 0x86], al
mov byte [ebp - 0x85], 0
push 0
push esi
push 0
push 1
sub esp, 0x10
mov dword [ebp - 4], 0xf
mov eax, esp
push ecx
movups xmmword [eax], xmm2
lea eax, [ebp - 0x88]
mov ecx, edi
movss dword [esp], xmm3
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0x74]
fstp st(0)
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1004c043
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004c039
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004c039
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
call fcn.10014bb0
movss xmm0, dword [0x11293010]
mov edi, eax
mulss xmm0, dword [0x11064b44]
mov esi, dword [0x112911a8]
cvttss2si ecx, xmm0
push ecx
push 0xff
push 0xff
push 0xff
lea ecx, [ebp - 0x48]
call fcn.100b6ca0
movd xmm0, dword [ebp - 0x34]
movd xmm1, dword [ebp - 0x64]
movd xmm3, dword [0x11290044]
movups xmm2, xmmword [eax]
mov ax, word [0x110be704]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0xac], 3
mov dword [ebp - 0xa8], 0xf
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0xbc], xmm0
mov word [ebp - 0xbc], ax
mov al, byte [0x110be706]
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0xba], al
mov byte [ebp - 0xb9], 0
movss dword [ebp - 0x2c], xmm1
push 0
push esi
push 0
push 1
sub esp, 0x10
mov dword [ebp - 4], 0x10
mov eax, esp
push ecx
movups xmmword [eax], xmm2
lea eax, [ebp - 0xbc]
mov ecx, edi
movss dword [esp], xmm3
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push eax
call fcn.100b2dc0
mov ecx, dword [ebp - 0xa8]
fstp st(0)
cmp ecx, 0x10
jb 0x1004c14f
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004c145
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004c145
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
mov eax, dword [ebp - 0xa4]
mov dword [0x11293040], eax
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x11293280
call fcn.10118384
add esp, 4
cmp dword [0x11293280], 0xffffffff
jne 0x1004ad33
push 0
push 0xff
push 0xff
push 0xff
mov ecx, 0x11293270
mov dword [ebp - 4], 0
call fcn.100b6ca0
push 0x11293280
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x1004ad33
push 0x11293294
call fcn.10118384
add esp, 4
cmp dword [0x11293294], 0xffffffff
jne 0x1004ad44
push 0
push 0xff
push 0xff
push 0xff
mov ecx, 0x11293284
mov dword [ebp - 4], 1
call fcn.100b6ca0
push 0x11293294
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x1004ad44
push 0x112932a8
call fcn.10118384
add esp, 4
cmp dword [0x112932a8], 0xffffffff
jne 0x1004ad55
push 0
push 0xff
push 0xff
push 0xff
mov ecx, 0x11293298
mov dword [ebp - 4], 2
call fcn.100b6ca0
push 0x112932a8
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x1004ad55