Function at 0x98d8c0
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
mov eax, dword [0x9f0274]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x9e5ef8
call fcn.009ae840
add esp, 4
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x214], 0x30
mov dword [ebp - 0x210], 3
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x200], eax
push 0x101
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x1e8], 0
push 3
call fcn.00401000
add esp, 4
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x1c0], edx
mov dword [ebp - 0x1a0], 0x9fce10
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x218], eax
mov ecx, dword [ebp - 0x1c0]
mov dx, word [ecx]
mov word [ebp - 0x18e], dx
mov eax, dword [ebp - 0x1a0]
mov cx, word [ebp - 0x18e]
mov word [eax], cx
mov edx, dword [ebp - 0x1c0]
add edx, 2
mov dword [ebp - 0x1c0], edx
mov eax, dword [ebp - 0x1a0]
add eax, 2
mov dword [ebp - 0x1a0], eax
cmp word [ebp - 0x18e], 0
jne 0x98d99b
mov dword [ebp - 0x20c], 0x9879d0
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.USER32.dll_RegisterClassExW]
movzx edx, ax
test edx, edx
jne 0x98da08
xor eax, eax
jmp 0x98ef39
mov eax, dword [ebp + 8]
mov dword [0x9fe284], eax
call fcn.0047b060
mov ecx, dword [ebp - 0x1ac]
push ecx
mov edx, dword [ebp - 0x1ac]
push edx
call dword [0x9fe860]
test eax, eax
je 0x98edf4
xorps xmm0, xmm0
movsd qword [ebp - 0x198], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x18c], xmm0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x19c], 1
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x1a8], 0
mov byte [ebp - 0x11d], 0
mov byte [ebp - 0x11e], 0
mov byte [ebp - 0x123], 0
mov byte [ebp - 0x11f], 0
mov byte [ebp - 0x120], 0
mov byte [ebp - 0x121], 0
mov byte [ebp - 0x12a], 0
mov byte [ebp - 0x124], 0
mov byte [ebp - 0x122], 0
mov byte [ebp - 0x129], 0
xorps xmm0, xmm0
movsd qword [ebp - 0x198], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x18c], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x18c], xmm0
jmp 0x98db86
movsd xmm0, qword [ebp - 0x18c]
addsd xmm0, qword [0x9d10b0]
movsd qword [ebp - 0x18c], xmm0
movsd xmm0, qword [0x9d1a50]
comisd xmm0, xmmword [ebp - 0x18c]
jbe 0x98dc37
movsd xmm0, qword [0x9d12f8]
mulsd xmm0, qword [ebp - 0x18c]
mulsd xmm0, qword [ebp - 0x18c]
movsd xmm1, qword [ebp - 0x18c]
mulsd xmm1, qword [ebp - 0x18c]
subsd xmm0, xmm1
movsd xmm1, qword [0x9d1120]
mulsd xmm1, qword [ebp - 0x18c]
mulsd xmm1, qword [ebp - 0x18c]
addsd xmm1, qword [0x9d11d0]
divsd xmm0, xmm1
addsd xmm0, qword [ebp - 0x198]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [ebp - 0x198]
comisd xmm0, xmmword [0x9d1248]
jbe 0x98dc32
movsd xmm0, qword [0x9d1058]
mulsd xmm0, qword [ebp - 0x18c]
movsd xmm1, qword [ebp - 0x198]
subsd xmm1, xmm0
movsd qword [ebp - 0x198], xmm1
jmp 0x98db6e
xorps xmm0, xmm0
comisd xmm0, xmmword [ebp - 0x198]
jbe 0x98dc6e
mov esp, 0xbbbdbdc4
ret 0xb9b7
mov dword [ebp - 0x1d4], 0x98dc44
mov dword [ebp - 0x1d8], 0x98dc4c
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
mov byte [ebp - 0x12a], 0x21
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x128], 0
jmp 0x98dcd0
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x128], 0x100
jae 0x98dcf1
mov eax, dword [ebp - 0x128]
mov cl, byte [ebp - 0x128]
mov byte [ebp + eax - 0x10c], cl
jmp 0x98dcc1
mov dword [ebp - 0x174], 0
mov byte [ebp - 0x121], 0
mov dword [ebp - 0x128], 0xff
jmp 0x98dd1d
mov edx, dword [ebp - 0x128]
sub edx, 1
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x128], 0
jbe 0x98df97
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x19c], 1
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x128]
jae 0x98dd68
mov ecx, dword [ebp - 0x19c]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x19c], edx
jmp 0x98dd48
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 3
ja case.default.0x98dd87
mov ecx, dword [ebp - 0x1c8]
jmp dword [ecx*4 + 0x98ef4c]
movzx edx, byte [ebp - 0x121]
movzx ebx, byte [ebp + edx - 0x10c]
movsd xmm0, qword [ebp - 0x198]
call fcn.009aeb80
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x98de70
movzx eax, byte [ebp - 0x121]
movzx ebx, byte [ebp + eax - 0x10c]
movsd xmm0, qword [ebp - 0x198]
call fcn.009aeb80
shr eax, 8
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x98de70
movzx ecx, byte [ebp - 0x121]
movzx ebx, byte [ebp + ecx - 0x10c]
movsd xmm0, qword [ebp - 0x198]
call fcn.009aeb80
shr eax, 0x10
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x98de70
movzx edx, byte [ebp - 0x121]
movzx ebx, byte [ebp + edx - 0x10c]
movsd xmm0, qword [ebp - 0x198]
call fcn.009aeb80
shr eax, 0x18
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x98de70
movzx eax, byte [ebp - 0x121]
movzx ecx, byte [ebp + eax - 0x10c]
mov edx, dword [ebp - 0x1dc]
add edx, dword [ebp - 0x174]
movzx eax, byte [edx - 4]
add ecx, eax
mov byte [ebp - 0x121], cl
mov ecx, dword [ebp - 0x174]
add ecx, 1
mov dword [ebp - 0x174], ecx
movzx edx, byte [ebp - 0x12a]
cmp dword [ebp - 0x174], edx
jb 0x98deae
mov dword [ebp - 0x174], 0
movzx eax, byte [ebp - 0x12a]
movzx ecx, byte [ebp - 0x121]
add ecx, eax
mov byte [ebp - 0x121], cl
movzx edx, byte [ebp - 0x121]
and edx, dword [ebp - 0x19c]
mov dword [ebp - 0x138], edx
mov eax, dword [ebp - 0x1a4]
add eax, 1
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xb
jbe 0x98deed
mov eax, dword [ebp - 0x138]
xor edx, edx
div dword [ebp - 0x128]
mov dword [ebp - 0x138], edx
mov ecx, dword [ebp - 0x138]
cmp ecx, dword [ebp - 0x128]
ja 0x98dd68
mov edx, dword [ebp - 0x128]
cmp edx, dword [ebp - 0x138]
je 0x98df92
mov eax, dword [ebp - 0x138]
movzx ecx, byte [ebp + eax - 0x10c]
mov edx, dword [ebp - 0x128]
movzx eax, byte [ebp + edx - 0x10c]
xor eax, ecx
mov ecx, dword [ebp - 0x128]
mov byte [ebp + ecx - 0x10c], al
mov edx, dword [ebp - 0x128]
movzx eax, byte [ebp + edx - 0x10c]
mov ecx, dword [ebp - 0x138]
movzx edx, byte [ebp + ecx - 0x10c]
xor edx, eax
mov eax, dword [ebp - 0x138]
mov byte [ebp + eax - 0x10c], dl
mov ecx, dword [ebp - 0x138]
movzx edx, byte [ebp + ecx - 0x10c]
mov eax, dword [ebp - 0x128]
movzx ecx, byte [ebp + eax - 0x10c]
xor ecx, edx
mov edx, dword [ebp - 0x128]
mov byte [ebp + edx - 0x10c], cl
jmp 0x98dd0e
mov eax, 1
shl eax, 0
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11d], cl
mov edx, 1
imul eax, edx, 3
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11e], cl
mov edx, 1
imul eax, edx, 5
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x123], cl
mov edx, 1
imul eax, edx, 7
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11f], cl
movzx edx, byte [ebp - 0x121]
mov al, byte [ebp + edx - 0x10c]
mov byte [ebp - 0x120], al
mov dword [ebp - 0x1c4], 8
cmp dword [ebp - 0x1c4], 2
jle 0x98ed87
mov ecx, dword [ebp - 0x1c4]
and ecx, 1
jne 0x98ed87
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x134], 0
mov edx, dword [ebp - 0x134]
add edx, 1
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x128]
shl eax, 1
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x144], 0
mov ecx, dword [ebp - 0x170]
add ecx, dword [ebp - 0x15c]
movzx edx, byte [ecx]
add edx, dword [ebp - 0x144]
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
add eax, 0xb0
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x160], 0
mov ecx, dword [ebp - 0x128]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x160]
movzx ecx, byte [eax]
add ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], 0
mov edx, dword [ebp - 0x150]
add edx, 0xb9
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x144]
sub eax, dword [ebp - 0x148]
add eax, dword [ebp - 0x154]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x158], 0
mov ecx, dword [ebp - 0x14c]
sub ecx, dword [ebp - 0x150]
add ecx, dword [ebp - 0x158]
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x164], 0
mov edx, dword [ebp - 0x154]
shl edx, 4
mov dword [ebp - 0x164], edx
mov dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x16c], 0
mov ecx, dword [ebp - 0x164]
or ecx, dword [ebp - 0x168]
mov dword [ebp - 0x16c], ecx
mov byte [ebp - 0x124], 0
mov dl, byte [ebp - 0x16c]
mov byte [ebp - 0x124], dl
mov byte [ebp - 0x122], 0
movzx eax, byte [ebp - 0x120]
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x122], cl
movzx edx, byte [ebp - 0x11d]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x11e]
add ecx, eax
mov byte [ebp - 0x11e], cl
mov dl, byte [ebp - 0x11d]
add dl, 1
mov byte [ebp - 0x11d], dl
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp - 0x11e]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp - 0x11f]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
mov cl, byte [ebp - 0x122]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x122]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x123]
add ecx, eax
mov byte [ebp - 0x123], cl
movzx edx, byte [ebp - 0x124]
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x11d]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
xor edx, ecx
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x120]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
movzx eax, byte [ebp - 0x123]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp + ecx - 0x10c]
xor edx, eax
mov byte [ebp - 0x11f], dl
mov cl, byte [ebp - 0x124]
mov byte [ebp - 0x120], cl
mov dl, byte [ebp - 0x11f]
mov byte [ebp - 0x129], dl
cmp dword [ebp - 0x128], 0
jbe 0x98e325
movsx ax, byte [ebp - 0x129]
mov ecx, dword [ebp - 0x128]
mov word [ebp + ecx*2 - 0xe], ax
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x128], edx
mov eax, dword [ebp - 0x134]
add eax, 1
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x128]
shl ecx, 1
mov dword [ebp - 0x15c], ecx
mov edx, dword [ebp - 0x170]
add edx, dword [ebp - 0x15c]
movzx eax, byte [edx]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x148], 0xb0
mov ecx, dword [ebp - 0x128]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x160]
movzx ecx, byte [eax]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], 0xb9
mov edx, dword [ebp - 0x144]
sub edx, dword [ebp - 0x148]
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0x14c]
sub eax, dword [ebp - 0x150]
mov dword [ebp - 0x158], eax
mov ecx, dword [ebp - 0x154]
shl ecx, 4
mov dword [ebp - 0x164], ecx
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x164]
or eax, dword [ebp - 0x168]
mov dword [ebp - 0x16c], eax
mov cl, byte [ebp - 0x16c]
mov byte [ebp - 0x124], cl
movzx edx, byte [ebp - 0x120]
mov al, byte [ebp + edx - 0x10c]
mov byte [ebp - 0x122], al
movzx ecx, byte [ebp - 0x11d]
movzx edx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp - 0x11e]
add eax, edx
mov byte [ebp - 0x11e], al
mov cl, byte [ebp - 0x11d]
add cl, 1
mov byte [ebp - 0x11d], cl
movzx edx, byte [ebp - 0x11e]
movzx eax, byte [ebp - 0x120]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11f]
movzx eax, byte [ebp - 0x11e]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11d]
movzx eax, byte [ebp - 0x11f]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11d]
mov al, byte [ebp - 0x122]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x122]
movzx edx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp - 0x123]
add eax, edx
mov byte [ebp - 0x123], al
movzx ecx, byte [ebp - 0x124]
movzx edx, byte [ebp - 0x11e]
movzx eax, byte [ebp + edx - 0x10c]
movzx edx, byte [ebp - 0x11d]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
and eax, 0xff
movzx eax, byte [ebp + eax - 0x10c]
xor ecx, eax
movzx edx, byte [ebp - 0x11f]
movzx eax, byte [ebp + edx - 0x10c]
movzx edx, byte [ebp - 0x120]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
movzx edx, byte [ebp - 0x123]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
and eax, 0xff
movzx eax, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp + eax - 0x10c]
xor ecx, edx
mov byte [ebp - 0x11f], cl
mov al, byte [ebp - 0x124]
mov byte [ebp - 0x120], al
mov cl, byte [ebp - 0x11f]
mov byte [ebp - 0x129], cl
cmp dword [ebp - 0x128], 0
jbe 0x98e57b
movsx dx, byte [ebp - 0x129]
mov eax, dword [ebp - 0x128]
mov word [ebp + eax*2 - 0xe], dx
mov ecx, dword [ebp - 0x134]
add ecx, 1
mov dword [ebp - 0x134], ecx
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x1a8], edx
jmp 0x98e5aa
mov eax, dword [ebp - 0x1a8]
add eax, 1
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [ebp - 0x134]
jge 0x98eaf4
movss xmm0, dword [0x9d1d60]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x9d1ce8]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [0x9d1c54]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x9d1bc0]
movss dword [ebp - 0x17c], xmm0
movss xmm0, dword [0x9d1b1c]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x178]
mulss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [ebp - 0x17c]
mulss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x17c], xmm0
movss xmm0, dword [ebp - 0x140]
subss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x130]
subss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x178]
mulss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [ebp - 0x178]
comiss xmm0, dword [ebp - 0x13c]
jbe 0x98e722
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x128], edx
movss xmm0, dword [ebp - 0x17c]
subss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x17c], xmm0
movss xmm0, dword [ebp - 0x140]
addss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x140]
subss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
jmp 0x98e79a
movss xmm0, dword [ebp - 0x130]
subss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x17c]
addss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x17c], xmm0
movss xmm0, dword [ebp - 0x178]
addss xmm0, dword [ebp - 0x17c]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [ebp - 0x13c]
addss xmm0, dword [ebp - 0x178]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x130]
subss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
mov eax, dword [ebp - 0x128]
shl eax, 1
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x170]
add ecx, dword [ebp - 0x15c]
movzx edx, byte [ecx]
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x148], 0xb0
mov eax, dword [ebp - 0x128]
lea ecx, [eax + eax + 1]
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x170]
add edx, dword [ebp - 0x160]
movzx eax, byte [edx]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x150], 0xb9
mov ecx, dword [ebp - 0x144]
sub ecx, dword [ebp - 0x148]
mov dword [ebp - 0x154], ecx
mov edx, dword [ebp - 0x14c]
sub edx, dword [ebp - 0x150]
mov dword [ebp - 0x158], edx
mov eax, dword [ebp - 0x154]
shl eax, 4
mov dword [ebp - 0x164], eax
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x168], ecx
mov edx, dword [ebp - 0x164]
or edx, dword [ebp - 0x168]
mov dword [ebp - 0x16c], edx
mov al, byte [ebp - 0x16c]
mov byte [ebp - 0x124], al
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + ecx - 0x10c]
mov byte [ebp - 0x122], dl
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp - 0x11e]
add edx, ecx
mov byte [ebp - 0x11e], dl
mov al, byte [ebp - 0x11d]
add al, 1
mov byte [ebp - 0x11d], al
movzx ecx, byte [ebp - 0x11e]
movzx edx, byte [ebp - 0x120]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11f]
movzx edx, byte [ebp - 0x11e]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11d]
movzx edx, byte [ebp - 0x11f]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11d]
mov dl, byte [ebp - 0x122]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x122]
movzx ecx, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp - 0x123]
add edx, ecx
mov byte [ebp - 0x123], dl
movzx eax, byte [ebp - 0x124]
movzx ecx, byte [ebp - 0x11e]
movzx edx, byte [ebp + ecx - 0x10c]
movzx ecx, byte [ebp - 0x11d]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x10c]
xor eax, edx
movzx ecx, byte [ebp - 0x11f]
movzx edx, byte [ebp + ecx - 0x10c]
movzx ecx, byte [ebp - 0x120]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
movzx ecx, byte [ebp - 0x123]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp + edx - 0x10c]
xor eax, ecx
mov byte [ebp - 0x11f], al
movsd xmm0, qword [0x9d1738]
movsd qword [ebp - 0x1b4], xmm0
movsd xmm0, qword [0x9d15b0]
movsd qword [ebp - 0x184], xmm0
movsd xmm0, qword [0x9d13d0]
movsd qword [ebp - 0x1bc], xmm0
movsd xmm0, qword [ebp - 0x1b4]
subsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x1b4], xmm0
movsd xmm0, qword [ebp - 0x184]
mulsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x184], xmm0
movsd xmm0, qword [ebp - 0x1b4]
mulsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x1b4], xmm0
movsd xmm0, qword [ebp - 0x184]
comisd xmm0, xmmword [ebp - 0x1bc]
jbe 0x98ea7f
movsd xmm0, qword [ebp - 0x1b4]
addsd xmm0, qword [ebp - 0x184]
movsd qword [ebp - 0x1b4], xmm0
movsd xmm0, qword [ebp - 0x184]
subsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x184], xmm0
mov dl, byte [ebp - 0x124]
mov byte [ebp - 0x120], dl
movsd xmm0, qword [ebp - 0x184]
subsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x184], xmm0
jmp 0x98eac7
movsd xmm0, qword [ebp - 0x184]
subsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x184], xmm0
movsd xmm0, qword [ebp - 0x1b4]
addsd xmm0, qword [ebp - 0x184]
movsd qword [ebp - 0x1b4], xmm0
movsd xmm0, qword [ebp - 0x184]
addsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x184], xmm0
mov al, byte [ebp - 0x11f]
mov byte [ebp - 0x129], al
cmp dword [ebp - 0x128], 0
jbe 0x98eaef
movsx cx, byte [ebp - 0x129]
mov edx, dword [ebp - 0x128]
mov word [ebp + edx*2 - 0xe], cx
jmp 0x98e59b
mov eax, dword [ebp - 0x134]
add eax, 1
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x128]
add ecx, 1
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x134]
add edx, 1
mov dword [ebp - 0x134], edx
mov eax, dword [ebp - 0x128]
shl eax, 1
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x170]
add ecx, dword [ebp - 0x15c]
movzx edx, byte [ecx]
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x148], 0xb0
mov eax, dword [ebp - 0x128]
lea ecx, [eax + eax + 1]
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x170]
add edx, dword [ebp - 0x160]
movzx eax, byte [edx]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x150], 0xb9
mov ecx, dword [ebp - 0x144]
sub ecx, dword [ebp - 0x148]
mov dword [ebp - 0x154], ecx
mov edx, dword [ebp - 0x14c]
sub edx, dword [ebp - 0x150]
mov dword [ebp - 0x158], edx
mov eax, dword [ebp - 0x154]
shl eax, 4
mov dword [ebp - 0x164], eax
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x168], ecx
mov edx, dword [ebp - 0x164]
or edx, dword [ebp - 0x168]
mov dword [ebp - 0x16c], edx
mov al, byte [ebp - 0x16c]
mov byte [ebp - 0x124], al
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + ecx - 0x10c]
mov byte [ebp - 0x122], dl
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp - 0x11e]
add edx, ecx
mov byte [ebp - 0x11e], dl
mov al, byte [ebp - 0x11d]
add al, 1
mov byte [ebp - 0x11d], al
movzx ecx, byte [ebp - 0x11e]
movzx edx, byte [ebp - 0x120]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11f]
movzx edx, byte [ebp - 0x11e]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11d]
movzx edx, byte [ebp - 0x11f]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11d]
mov dl, byte [ebp - 0x122]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x122]
movzx ecx, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp - 0x123]
add edx, ecx
mov byte [ebp - 0x123], dl
movzx eax, byte [ebp - 0x124]
movzx ecx, byte [ebp - 0x11e]
movzx edx, byte [ebp + ecx - 0x10c]
movzx ecx, byte [ebp - 0x11d]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x10c]
xor eax, edx
movzx ecx, byte [ebp - 0x11f]
movzx edx, byte [ebp + ecx - 0x10c]
movzx ecx, byte [ebp - 0x120]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
movzx ecx, byte [ebp - 0x123]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp + edx - 0x10c]
xor eax, ecx
mov byte [ebp - 0x11f], al
mov dl, byte [ebp - 0x124]
mov byte [ebp - 0x120], dl
mov al, byte [ebp - 0x11f]
mov byte [ebp - 0x129], al
cmp dword [ebp - 0x128], 0
jbe 0x98ed5a
movsx cx, byte [ebp - 0x129]
mov edx, dword [ebp - 0x128]
mov word [ebp + edx*2 - 0xe], cx
mov eax, 2
imul ecx, eax, 3
mov dword [ebp - 0x1cc], ecx
cmp dword [ebp - 0x1cc], 8
jae 0x98ed73
jmp 0x98ed78
call fcn.009aea97
xor edx, edx
mov eax, dword [ebp - 0x1cc]
mov word [ebp + eax - 0xc], dx
jmp 0x98edd8
mov dword [ebp - 0x128], 0
jmp 0x98eda2
mov ecx, dword [ebp - 0x128]
add ecx, 1
mov dword [ebp - 0x128], ecx
cmp dword [ebp - 0x128], 4
jae 0x98edd8
mov edx, dword [ebp - 0x128]
shl edx, 1
mov dword [ebp - 0x1d0], edx
cmp dword [ebp - 0x1d0], 8
jae 0x98edc4
jmp 0x98edc9
call fcn.009aea97
xor eax, eax
mov ecx, dword [ebp - 0x1d0]
mov word [ebp + ecx - 0xc], ax
jmp 0x98ed93
lea edx, [ebp - 0xc]
push edx
push 0x9fce10
call fcn.009aff3b
add esp, 8
test eax, eax
jne 0x98edf4
xor eax, eax
jmp 0x98ef39
push 0
mov eax, dword [ebp - 0x200]
push eax
push 0
push 0
push 0x4b
push 0x118
push 0x64
push 0x64
push 0x10ca0000
mov ecx, dword [ebp - 0x1ac]
push ecx
mov edx, dword [ebp - 0x1ec]
push edx
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x9fe280], eax
cmp dword [0x9fe280], 0
jne 0x98ee3f
mov eax, 1
jmp 0x98ef39
lea eax, [ebp - 0x11c]
push eax
mov ecx, dword [0x9fe280]
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, dword [ebp - 0x114]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x1e0], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, dword [ebp - 0x110]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x1e4], eax
push 5
push 0
push 0
mov edx, dword [ebp - 0x1e4]
push edx
mov eax, dword [ebp - 0x1e0]
push eax
push 0
mov ecx, dword [0x9fe280]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [0x9fe280]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x9fe280]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
push 0
push 0
push 0x987bd0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x21c], eax
push 0
push 0
push 0
push 0x98d7c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x220], eax
push 0
push 0
push 0
lea edx, [ebp - 0x23c]
push edx
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x98ef2e
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [ebp - 0x23c]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x98eefb
call fcn.004010a0
mov eax, dword [ebp - 0x234]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.009aeb72
mov esp, ebp
pop ebp
ret 0x10