Function at 0x10066550
Capabilities:
Authenticate hmac
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x10141040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1018f46d], 0
push esi
push edi
je 0x100680b4
cmp byte [0x1018b2e8], 1
xorps xmm0, xmm0
mov eax, dword [0x102bc21c]
jne 0x100665bd
test eax, eax
je 0x100665c1
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x10137690]
subss xmm0, dword [0x10138538]
test eax, eax
jne 0x100665c6
call fcn.100b1760
cmp byte [0x1018b2e9], 1
jne 0x10066630
addss xmm0, xmm0
movss dword [ebp - 0xec], xmm0
addss xmm0, dword [0x10138660]
cvttss2si eax, xmm0
mov dword [0x1018b2d4], eax
call fcn.10078330
cmp al, 1
jne 0x1006660e
movss xmm0, dword [ebp - 0xec]
addss xmm0, dword [0x101384c8]
cvttss2si eax, xmm0
mov dword [0x1018b2d4], eax
call fcn.10078450
cmp al, 1
jne 0x10066630
movss xmm0, dword [ebp - 0xec]
addss xmm0, dword [0x10138248]
cvttss2si eax, xmm0
mov dword [0x1018b2d4], eax
cmp byte [0x1018b2ea], 1
jne 0x1006680b
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x100667f4
mov esi, dword [0x1018b2d4]
movd xmm2, dword [0x879340c]
mov edi, dword [0x1018b2d8]
mov edx, dword [0x1018b2dc]
movd xmm1, esi
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm2, xmm2
movd xmm0, edi
comiss xmm1, xmm2
movd xmm3, edx
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm3, xmm3
ja 0x100666d9
addss xmm1, xmm3
comiss xmm2, xmm1
ja 0x100666d9
movd xmm1, dword [0x8793410]
cvtdq2ps xmm1, xmm1
comiss xmm0, xmm1
ja 0x100666d9
addss xmm0, dword [0x10138198]
comiss xmm1, xmm0
ja 0x100666d9
mov cl, byte [0x1018b214]
test cl, cl
jne 0x100666e7
mov cl, 1
mov byte [0x1018b214], cl
movzx eax, word [0x879340c]
mov word [0x1018b216], ax
movzx eax, word [0x8793410]
mov word [0x1018b218], ax
jmp 0x100666df
mov cl, byte [0x1018b214]
test cl, cl
je 0x1006680b
cmp byte [0x1018b2e9], 0
jne 0x1006680b
cmp dword [0xe61e58], 0x550
jl 0x10066718
cmp dword [0x102bc21c], 0
je 0x10066718
lea eax, [edx + 0x2c1]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
jmp 0x10066720
movss xmm2, dword [0x10138694]
cmp dword [0x1018b2e4], 2
je 0x10066775
mov ecx, dword [0x1018b2e0]
cmp ecx, 0xb4
jge 0x10066743
lea eax, [ecx + ecx]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
jmp 0x1006677d
cmp ecx, 0x190
jle 0x10066763
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm1
divss xmm0, dword [0x10137810]
subss xmm1, xmm0
jmp 0x1006677d
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
jmp 0x1006677d
movss xmm1, dword [0x10138380]
movsx eax, word [0x1018b216]
mov ecx, 1
sub esi, eax
movsx eax, word [0x1018b218]
add esi, dword [0x879340c]
sub edi, eax
mov dword [0x1018b2d4], esi
add edi, dword [0x8793410]
cmp esi, ecx
cmovl esi, ecx
cmp edi, ecx
cmovl edi, ecx
movd xmm0, esi
cvtdq2ps xmm0, xmm0
minss xmm2, xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm2
minss xmm1, xmm0
mov dword [0x1018b2d4], eax
cvttss2si eax, xmm1
mov dword [0x1018b2d8], eax
movzx eax, word [0x879340c]
mov word [0x1018b216], ax
movzx eax, word [0x8793410]
mov word [0x1018b218], ax
jmp 0x1006680b
cmp byte [0x1018b214], 0
je 0x1006680b
mov byte [0x1018b214], 0
mov byte [0x1018b2e9], 0
push 1
mov eax, 0x635fd0
call eax
mov eax, dword [0x1018b2e4]
add esp, 4
mov esi, 0x790b50
sub eax, 0
je 0x10066b51
sub eax, 2
je 0x10066a23
movd xmm0, dword [0x1018b2e0]
cvtdq2ps xmm0, xmm0
sub eax, 1
je 0x100669e8
sub esp, 0x10
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x1018b2d8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a5a
call esi
movd xmm0, dword [0x1018b2e0]
add esp, 4
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x1018b2d8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7a
call esi
movd xmm0, dword [0x1018b2e0]
add esp, 4
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10138228]
subss xmm0, dword [0x101381dc]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x1018b2d8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x10138228]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7b
call esi
movd xmm0, dword [0x1018b2e0]
add esp, 4
cvtdq2ps xmm0, xmm0
movd xmm1, dword [0x1018b2dc]
subss xmm0, dword [0x10138228]
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x101381dc]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x1018b2d8]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x10138228]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
subss xmm1, dword [0x10138164]
movss dword [esp], xmm1
push 0x7a7c
call esi
movd xmm1, dword [0x1018b2d8]
add esp, 4
movd xmm0, dword [0x1018b2e0]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0xc], 0x42340000
mov dword [esp + 8], 0x433e0000
cvtdq2ps xmm1, xmm1
addss xmm1, xmm0
movd xmm0, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
subss xmm1, dword [0x101381dc]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push 0x7a7d
jmp 0x10066b9c
movd xmm3, dword [0x1018b2dc]
sub esp, 0xc
movd xmm2, dword [0x1018b2d8]
movd xmm1, dword [0x1018b2d4]
cvtdq2ps xmm3, xmm3
mov dword [esp + 4], 0
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
movss dword [esp], xmm0
call fcn.10033260
jmp 0x10066ba1
movd xmm2, dword [0x1018b2d8]
movd xmm1, dword [0x1018b2d4]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.10010550
movd xmm0, dword [0x1018b2d8]
cvtdq2ps xmm0, xmm0
push 0x1012f453
sub esp, 8
addss xmm0, dword [0x10138170]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x1018b2d4]
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [0x10137eb0]
subsd xmm0, qword [0x10137c70]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push dword [0x10520f00]
push 0x102ea368
call fcn.10011aa0
add esp, 0x14
test al, al
je 0x10066aa0
call fcn.10068140
mov esi, dword [0xe8c58c]
mov edi, 0x41fe10
call edi
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call edi
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call edi
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0xa1
mov ecx, 0x10153ce0
call fcn.10042ce0
movd xmm0, dword [0x1018b2d8]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0xec], eax
mov eax, 0x41fe10
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x10137c18]
cvttsd2si edi, xmm0
movd xmm0, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x10137d50]
cvttsd2si esi, xmm0
call eax
push 0
push 1
push 0
push 0
mov edx, 0x420150
mov ecx, eax
push dword [ebp - 0xec]
push edi
push esi
call edx
jmp 0x10066ba1
movd xmm0, dword [0x1018b2e0]
sub esp, 0x10
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x1018b2dc]
cvtdq2ps xmm0, xmm0
movss dword [esp + 8], xmm0
movd xmm0, dword [0x1018b2d8]
cvtdq2ps xmm0, xmm0
movss dword [esp + 4], xmm0
movd xmm0, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0xf058
call esi
add esp, 0x14
cmp dword [0x1018b2e4], 2
je 0x10066cb2
cmp byte [0x1018b2cc], 0
jne 0x10066bdb
push 0x779250
push 0x779150
push 1
push 0xac
push 0x1018b220
mov eax, 0x9cfa13
call eax
mov byte [0x1018b2cc], 1
push 0
push 0
push 1
push 0x7ec5
push 1
mov eax, 0x779350
mov ecx, 0x1018b220
call eax
movd xmm0, dword [0x1018b2d8]
mov ecx, 0x1018b220
cvtdq2ps xmm0, xmm0
push 0x1d
push 0x24
addss xmm0, dword [0x101380f8]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2dc]
add eax, dword [0x1018b2d4]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101381c4]
cvttss2si eax, xmm0
push eax
mov eax, 0x779410
call eax
push 0
mov eax, 0x7798f0
mov ecx, 0x1018b220
call eax
mov eax, 0x779860
mov ecx, 0x1018b220
call eax
cmp al, 1
jne 0x10066c5e
call fcn.10068140
push 0xa1
mov ecx, 0x10153ce0
call fcn.10042ce0
movd xmm0, dword [0x1018b2d4]
push eax
mov eax, dword [0x1018b2d8]
cvtdq2ps xmm0, xmm0
push 3
push 0xd2
add eax, 0xd
push eax
subss xmm0, dword [0x101380f8]
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x1018cbf0
call fcn.10078040
movss xmm0, dword [0x10138148]
add esp, 0x1c
jmp 0x10066cba
movss xmm0, dword [0x10138198]
push 0x158
mov ecx, 0x10153ce0
movss dword [ebp - 0xec], xmm0
call fcn.10042ce0
push eax
mov eax, dword [0x1018b2d8]
add eax, 0x21
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
mov eax, dword [0x1018b2d8]
add esp, 0x1c
add eax, 0x1e
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10138110]
addss xmm0, dword [0x10138280]
cvttss2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x10
mov ecx, 0x791070
mov edi, 0x83c080
test al, al
je 0x10066de3
cmp byte [0x1018b214], 0
jne 0x10066de3
push 1
call ecx
add esp, 4
test eax, eax
je 0x10066de3
cmp byte [0x8793386], 0
je 0x10066de3
call esi
mov ecx, dword [0x1018b2d0]
add ecx, 0xfa
cmp eax, ecx
jb 0x10066de3
call edi
mov al, byte [0x1018b204]
xor al, 1
xor edx, edx
mov byte [0x1018b204], al
nop
movzx eax, al
mov ecx, 0x1018b200
push eax
push edx
call fcn.10068170
inc edx
cmp edx, 7
jge 0x10066ddc
mov al, byte [0x1018b204]
jmp 0x10066dc0
call esi
mov dword [0x1018b2d0], eax
cmp byte [0x1018b204], 0
je 0x10066df6
movss xmm0, dword [0x10138148]
jmp 0x10066df9
xorps xmm0, xmm0
mov eax, dword [0x1018b2d8]
sub esp, 0x18
add eax, 0x1e
mov edi, 0x790e40
movss dword [esp + 0x14], xmm0
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov eax, edx
mov dword [esp + 0xc], 0x41700000
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
mov dword [esp + 8], 0x41700000
add eax, dword [0x1018b2d4]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10138110]
addss xmm0, dword [0x10138280]
movss dword [esp], xmm0
push 0x7bae
call edi
mov eax, dword [0x1018b2d8]
add esp, 0x1c
movd xmm2, dword [0x1018b2d4]
add eax, 0x28
cvtdq2ps xmm2, xmm2
mov ecx, 0x1018cbf0
push 0xa0
movd xmm3, eax
subss xmm2, dword [0x10138160]
cvtdq2ps xmm3, xmm3
addss xmm3, dword [ebp - 0xec]
call fcn.10075430
push 0x159
mov ecx, 0x10153ce0
call fcn.10042ce0
push eax
mov eax, dword [0x1018b2d8]
add eax, 0x3c
push 1
push 0x46
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
mov eax, dword [0x1018b2d8]
add esp, 0x1c
add eax, 0x3e
push dword [0x1018b210]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0x10133cf4
push 1
push 0x46
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x8c
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
mov eax, dword [0x1018b2d8]
add eax, 0x39
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x78
push eax
mov eax, 0x790b10
call eax
add esp, 0x30
test al, al
je 0x10066fd1
cmp byte [0x1018b214], 0
jne 0x10066fd1
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x10066fd1
cmp byte [0x8793386], 0
je 0x10066fd1
call esi
mov ecx, dword [0x1018b2d0]
add ecx, 0xfa
cmp eax, ecx
jb 0x10066fd1
mov eax, 0x83c080
call eax
mov eax, dword [0x1018b210]
sub eax, 0xa
mov dword [0x1018b210], eax
test eax, eax
jg 0x10066fca
mov dword [0x1018b210], 0
call esi
mov dword [0x1018b2d0], eax
mov eax, dword [0x1018b2d8]
add eax, 0x39
cmp byte [0x1018b204], 0
jne 0x1006701f
movd xmm3, eax
sub esp, 0x10
mov eax, dword [0x1018b2d4]
mov ecx, 0x1018cbf0
add eax, 0x78
cvtdq2ps xmm3, xmm3
mov dword [esp + 8], 0
mov dword [esp + 4], 0
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.100780f0
jmp 0x10067075
movd xmm0, eax
sub esp, 0x18
mov eax, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
add eax, 0x78
mov dword [esp + 0x14], 0x41700000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7c0d
call edi
add esp, 0x1c
mov eax, dword [0x1018b2d8]
add eax, 0x39
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0xa0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006710e
cmp byte [0x1018b214], 0
jne 0x1006710e
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006710e
cmp byte [0x8793386], 0
je 0x1006710e
call esi
mov ecx, dword [0x1018b2d0]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006710e
mov eax, 0x83c080
call eax
mov eax, dword [0x1018b210]
add eax, 0xa
mov dword [0x1018b210], eax
cmp eax, 0x190
jl 0x10067107
mov dword [0x1018b210], 0x190
call esi
mov dword [0x1018b2d0], eax
mov eax, dword [0x1018b2d8]
add eax, 0x39
cmp byte [0x1018b204], 0
jne 0x1006715e
movd xmm3, eax
sub esp, 0x10
mov eax, dword [0x1018b2d4]
mov ecx, 0x1018cbf0
add eax, 0xa0
cvtdq2ps xmm3, xmm3
mov dword [esp + 8], 0
mov dword [esp + 4], 0
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.100780f0
jmp 0x100671b6
movd xmm0, eax
sub esp, 0x18
mov eax, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
add eax, 0xa0
mov dword [esp + 0x14], 0x41700000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7c0d
call edi
add esp, 0x1c
mov eax, dword [0x1018b2d8]
add eax, 0x4c
push 0x15
push 0xaa
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 8
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
setne byte [0x1018f4ee]
cmp byte [0x1018f476], 1
jne 0x10067223
mov ecx, 0x1018f4f7
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10067206
sub ecx, edx
jne 0x10067223
push 0x1012f456
push 0x1018f4f7
call sym.Main.dll_sprintf
add esp, 8
mov eax, dword [0x1018b2d8]
mov ecx, 0x1018cbf0
add eax, 0x4c
push 0xa1
movd xmm3, eax
mov eax, dword [0x1018b2d4]
add eax, 8
cvtdq2ps xmm3, xmm3
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.10075430
cmp byte [0x1018f4ee], 1
jne 0x1006729b
mov eax, dword [0x1018b2d8]
mov ecx, 0x1018cbf0
add eax, 0x4c
push 0xff19bdff
push 0xa1
movd xmm3, eax
mov eax, dword [0x1018b2d4]
add eax, 8
cvtdq2ps xmm3, xmm3
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.100773d0
push 0x15a
mov ecx, 0x10153ce0
call fcn.10042ce0
push eax
mov eax, dword [0x1018b2d8]
add eax, 0x52
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
mov eax, dword [0x1018b2d8]
add esp, 0x1c
add eax, 0x52
push 0x1018f4f7
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 3
push 0xc8
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x1e
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
add esp, 0x1c
mov ecx, 0x10153ce0
push 0x15b
call fcn.10042ce0
push eax
mov eax, dword [0x1018b2d8]
add eax, 0x68
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
mov eax, dword [0x1018b2d8]
add esp, 0x1c
add eax, 0x64
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x10137b90]
addsd xmm0, qword [0x10137da0]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006741d
cmp byte [0x1018b214], 0
jne 0x1006741d
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006741d
cmp byte [0x8793386], 0
je 0x1006741d
call esi
mov ecx, dword [0x1018b2d0]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006741d
mov eax, 0x83c080
call eax
xor byte [0x1018b205], 1
call esi
mov dword [0x1018b2d0], eax
cmp byte [0x1018b205], 0
mov al, byte [0x1018b204]
jne 0x1006743c
cmp al, 1
jne 0x1006743c
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006745b
test al, al
je 0x1006744a
movss xmm0, dword [0x10138148]
jmp 0x10067452
movss xmm0, dword [0x10138198]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x1018b2d8]
add eax, 0x64
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x10137b90]
addsd xmm0, qword [0x10137da0]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
add esp, 0x1c
mov ecx, 0x10153ce0
push 0x15c
call fcn.10042ce0
push eax
mov eax, dword [0x1018b2d8]
add eax, 0x7e
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
mov eax, dword [0x1018b2d8]
add esp, 0x1c
add eax, 0x7a
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x10137b90]
addsd xmm0, qword [0x10137da0]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x100675ca
cmp byte [0x1018b214], 0
jne 0x100675ca
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x100675ca
cmp byte [0x8793386], 0
je 0x100675ca
call esi
mov ecx, dword [0x1018b2d0]
add ecx, 0xfa
cmp eax, ecx
jb 0x100675ca
mov eax, 0x83c080
call eax
xor byte [0x1018b206], 1
call esi
mov dword [0x1018b2d0], eax
cmp byte [0x1018b206], 0
mov al, byte [0x1018b204]
jne 0x100675e9
cmp al, 1
jne 0x100675e9
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x10067608
test al, al
je 0x100675f7
movss xmm0, dword [0x10138148]
jmp 0x100675ff
movss xmm0, dword [0x10138198]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x1018b2d8]
add eax, 0x7a
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x10137b90]
addsd xmm0, qword [0x10137da0]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
add esp, 0x1c
mov ecx, 0x10153ce0
push 0x15d
call fcn.10042ce0
push eax
mov eax, dword [0x1018b2d8]
add eax, 0x94
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
mov eax, dword [0x1018b2d8]
add esp, 0x1c
add eax, 0x90
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x10137b90]
addsd xmm0, qword [0x10137da0]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x10067856
cmp byte [0x1018b214], 0
jne 0x10067856
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x10067856
cmp byte [0x8793386], 0
je 0x10067856
call esi
mov ecx, dword [0x1018b2d0]
add ecx, 0xfa
cmp eax, ecx
jb 0x10067856
mov eax, 0x83c080
call eax
mov cl, byte [0x1018b207]
xor cl, 1
xor eax, eax
mov byte [0x1018b207], cl
test cl, cl
jne 0x100677e2
cmp eax, 6
ja case.default.0x100677e7
jmp dword [eax*4 + 0x100680c8]
mov byte [0x1018b208], 1
inc eax
jmp 0x10067792
mov byte [0x1018b209], 1
inc eax
jmp 0x10067792
mov byte [0x1018b20a], 1
inc eax
jmp 0x10067792
mov byte [0x1018b20b], 1
inc eax
jmp 0x10067792
mov byte [0x1018b20c], 1
inc eax
jmp 0x10067792
mov byte [0x1018b20d], 1
inc eax
jmp 0x10067792
cmp eax, 6
ja case.default.0x100677e7
jmp dword [eax*4 + 0x100680e4]
mov byte [0x1018b208], 0
inc eax
jmp 0x10067792
mov byte [0x1018b209], 0
inc eax
jmp 0x10067792
mov byte [0x1018b20a], 0
inc eax
jmp 0x10067792
mov byte [0x1018b20b], 0
inc eax
jmp 0x10067792
mov byte [0x1018b20c], 0
inc eax
jmp 0x10067792
mov byte [0x1018b20d], 0
inc eax
jmp 0x10067792
inc eax
cmp eax, 7
jl 0x10067792
jmp 0x1006784f
mov byte [0x1018b20e], 1
jmp 0x1006784f
mov byte [0x1018b20e], 0
call esi
mov dword [0x1018b2d0], eax
cmp byte [0x1018b207], 0
mov al, byte [0x1018b204]
jne 0x10067875
cmp al, 1
jne 0x10067875
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x10067894
test al, al
je 0x10067883
movss xmm0, dword [0x10138148]
jmp 0x1006788b
movss xmm0, dword [0x10138198]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x1018b2d8]
add eax, 0x90
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x10137b90]
addsd xmm0, qword [0x10137da0]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
mov eax, dword [0x1018b2d8]
add esp, 0x1c
movd xmm2, dword [0x1018b2d4]
add eax, 0x9b
cvtdq2ps xmm2, xmm2
mov ecx, 0x1018cbf0
push 0xa0
movd xmm3, eax
subss xmm2, dword [0x10138160]
cvtdq2ps xmm3, xmm3
addss xmm3, dword [ebp - 0xec]
call fcn.10075430
push 0x14
mov edi, 0x402320
mov ecx, 0x8128adc
call edi
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
push eax
lea eax, [ebp - 0xe8]
push 0x20
push eax
call esi
add esp, 0xc
mov ecx, 0x8128adc
push 0x15
call edi
push eax
lea eax, [ebp - 0xc8]
push 0x20
push eax
call esi
add esp, 0xc
mov ecx, 0x8128adc
push 0x16
call edi
push eax
lea eax, [ebp - 0xa8]
push 0x20
push eax
call esi
add esp, 0xc
mov ecx, 0x8128adc
push 0x17
call edi
push eax
lea eax, [ebp - 0x88]
push 0x20
push eax
call esi
add esp, 0xc
mov ecx, 0x8128adc
push 0x18
call edi
push eax
lea eax, [ebp - 0x68]
push 0x20
push eax
call esi
add esp, 0xc
mov ecx, 0x8128adc
push 0x697
call edi
push eax
lea eax, [ebp - 0x48]
push 0x20
push eax
call esi
add esp, 0xc
mov ecx, 0x8128adc
push 0xc4e
call edi
push eax
lea eax, [ebp - 0x28]
push 0x20
push eax
call esi
add esp, 0xc
xor esi, esi
nop dword [eax + eax]
mov eax, esi
imul edi, esi, 0x16
shl eax, 5
lea ecx, [ebp - 0xe8]
add eax, ecx
push eax
mov eax, dword [0x1018b2d8]
add eax, 0xae
add eax, edi
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2d4]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x1018cbf0
call fcn.10078040
add esp, 0x1c
mov byte [ebp - 0xed], 0
cmp esi, 6
ja case.default.0x10067a5c
jmp dword [esi*4 + 0x10068100]
mov al, byte [0x1018b208]
jmp 0x10067a92
mov al, byte [0x1018b209]
jmp 0x10067a92
mov al, byte [0x1018b20a]
jmp 0x10067a92
mov al, byte [0x1018b20b]
jmp 0x10067a92
mov al, byte [0x1018b20c]
jmp 0x10067a92
mov al, byte [0x1018b20d]
jmp 0x10067a92
mov al, byte [0x1018b20e]
mov byte [ebp - 0xed], al
mov eax, dword [0x1018b2d8]
add eax, 0xaa
add eax, edi
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x10137b90]
addsd xmm0, qword [0x10137da0]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x10067bb2
cmp byte [0x1018b214], 0
jne 0x10067bb2
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x10067bb2
cmp byte [0x8793386], 0
je 0x10067bb2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1018b2d0]
add ecx, 0xfa
cmp eax, ecx
jb 0x10067bb2
mov eax, 0x83c080
call eax
cmp esi, 6
ja case.default.0x10067b53
jmp dword [esi*4 + 0x1006811c]
xor byte [0x1018b208], 1
jmp case.default.0x10067b53
xor byte [0x1018b209], 1
jmp case.default.0x10067b53
xor byte [0x1018b20a], 1
jmp case.default.0x10067b53
xor byte [0x1018b20b], 1
jmp case.default.0x10067b53
xor byte [0x1018b20c], 1
jmp case.default.0x10067b53
xor byte [0x1018b20d], 1
jmp case.default.0x10067b53
xor byte [0x1018b20e], 1
cmp byte [0x1018b207], 1
jne 0x10067ba7
mov byte [0x1018b207], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1018b2d0], eax
cmp byte [ebp - 0xed], 0
mov al, byte [0x1018b204]
jne 0x10067bd1
cmp al, 1
jne 0x10067bd1
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x10067bf0
test al, al
je 0x10067bdf
movss xmm0, dword [0x10138148]
jmp 0x10067be7
movss xmm0, dword [0x10138198]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x1018b2d8]
add eax, 0xaa
mov dword [esp + 0x10], 0
add eax, edi
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x1018b2dc]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x1018b2d4]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x10137b90]
addsd xmm0, qword [0x10137da0]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call eax
add esp, 0x1c
test esi, esi
je 0x10067d26
mov eax, dword [0x1018b2d8]
sub esp, 0x10
add eax, 0xa5
add eax, edi
mov dword [esp + 0xc], 0x40000000
mov dword [esp + 8], 0x42a40000
movd xmm0, eax
mov eax, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
add eax, 0xa
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790b50
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7b5e
call eax
mov eax, dword [0x1018b2d8]
add esp, 4
add eax, 0xa5
add eax, edi
mov edi, 0x790b50
mov dword [esp + 0xc], 0x40000000
mov dword [esp + 8], 0x42a40000
movd xmm0, eax
mov eax, dword [0x1018b2d4]
cvtdq2ps xmm0, xmm0
add eax, 0x5c
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7b5e
call edi
add esp, 0x14
jmp 0x10067d2b
mov edi, 0x790b50
inc esi
cmp esi, 7
jl 0x10067a00
mov eax, dword [0x1018b2d8]
movss xmm0, dword [0x1018f498]
add eax, 0x138
movss xmm3, dword [0x10138728]
movd xmm1, dword [0x1018b2d4]
movss xmm4, dword [0x1018f494]
movss xmm5, dword [0x1018f490]
ucomiss xmm0, xmm3
movd xmm2, eax
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm2, xmm2
subss xmm1, dword [0x10138160]
addss xmm2, dword [ebp - 0xec]
lahf
test ah, 0x44
jnp 0x10067d9b
movss xmm0, dword [0x1018f49c]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x10067dc9
movaps xmm0, xmm1
movss dword [0x1018f498], xmm1
addss xmm0, xmm5
movss dword [0x1018f49c], xmm2
movss dword [0x1018f4a0], xmm0
movaps xmm0, xmm2
addss xmm0, xmm4
movss dword [0x1018f4a4], xmm0
sub esp, 0x10
movss dword [esp + 0xc], xmm4
movss dword [esp + 8], xmm5
movss dword [esp + 4], xmm2
movss dword [esp], xmm1
push dword [0x1018f48c]
call edi
mov eax, dword [0x1018b2d8]
add esp, 0x14
add eax, 0x151
push 0x1e
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0x36
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x1018b2dc]
cdq
sub eax, edx
sar eax, 1
add eax, dword [0x1018b2d4]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x1013817c]
cvttss2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x10068023
cmp byte [0x1018b214], 0
jne 0x10068016
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x10068016
cmp byte [0x8793386], 0
je 0x10068016
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, dword [0x1018b2d0]
add ecx, 0xfa
cmp eax, ecx
jb 0x10068016
mov eax, dword [0x1018b2d8]
sub esp, 0x18
add eax, 0x151
mov dword [esp + 0x14], 0x42700000
movd xmm0, eax
mov eax, dword [0x1018b2dc]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
mov dword [esp + 0x10], 0
sar eax, 1
add eax, dword [0x1018b2d4]
mov dword [esp + 0xc], 0x41f00000
addss xmm0, dword [ebp - 0xec]
mov dword [esp + 8], 0x42580000
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x1013817c]
movss dword [esp], xmm0
push 0x7a5b
call eax
add esp, 0x1c
mov eax, 0x83c080
call eax
mov al, byte [0x1018b204]
mov ecx, 0x1012f457
mov byte [ebp - 0x118], al
mov al, byte [0x1018b205]
mov byte [ebp - 0x117], al
mov al, byte [0x1018b206]
mov byte [ebp - 0x116], al
mov al, byte [0x1018b207]
mov byte [ebp - 0x115], al
mov al, byte [0x1018b208]
mov byte [ebp - 0x114], al
mov al, byte [0x1018b209]
mov byte [ebp - 0x113], al
mov al, byte [0x1018b20a]
mov byte [ebp - 0x112], al
mov al, byte [0x1018b20b]
mov byte [ebp - 0x111], al
mov al, byte [0x1018b20c]
mov byte [ebp - 0x110], al
mov al, byte [0x1018b20d]
mov byte [ebp - 0x10f], al
mov al, byte [0x1018b20e]
mov byte [ebp - 0x10e], al
mov eax, dword [0x1018b210]
mov dword [ebp - 0x10c], eax
mov eax, 0x1018f4f7
mov dword [ebp - 0x11c], 0x4ff2cc1
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10067fc4
test dl, dl
je 0x10067fc0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10067fc4
add eax, 2
add ecx, 2
test dl, dl
jne 0x10067fa4
xor eax, eax
jmp 0x10067fc9
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10067fd5
mov byte [ebp - 0x108], al
jmp 0x10067ff5
movups xmm0, xmmword [0x1018f4f7]
mov eax, dword [0x1018f507]
mov byte [ebp - 0x108], 1
movups xmmword [ebp - 0x107], xmm0
mov dword [ebp - 0xf7], eax
mov edx, 0x2c
lea ecx, [ebp - 0x11c]
call fcn.100c4b40
call fcn.10068140
call esi
mov dword [0x1018b2d0], eax
jmp 0x10068098
sub esp, 0x18
mov dword [esp + 0x14], 0x41f00000
jmp 0x1006802e
sub esp, 0x18
mov dword [esp + 0x14], 0
mov eax, dword [0x1018b2d8]
add eax, 0x151
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41f00000
mov dword [esp + 8], 0x42580000
movd xmm0, eax
mov eax, dword [0x1018b2dc]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
add eax, dword [0x1018b2d4]
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x1013817c]
movss dword [esp], xmm0
push 0x7a5b
call eax
add esp, 0x1c
cmp byte [0x1018f476], 1
jne 0x100680a8
mov byte [0x1018f476], 0
push 0
mov eax, 0x635fd0
call eax
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.100d84a2
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret