Function at 0x1006aa40
Capabilities:
Authenticate hmac
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x101b31c0]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x101fdebd], 0
push esi
push edi
je 0x1006c5b4
cmp byte [0x101f9d38], 1
xorps xmm0, xmm0
mov eax, dword [0x1032c498]
jne 0x1006aaad
test eax, eax
je 0x1006aab1
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x101a4880]
subss xmm0, dword [0x101a5788]
test eax, eax
jne 0x1006aab6
call fcn.100b86d0
cmp byte [0x101f9d39], 1
jne 0x1006ab20
addss xmm0, xmm0
movss dword [ebp - 0xec], xmm0
addss xmm0, dword [0x101a58b0]
cvttss2si eax, xmm0
mov dword [0x101f9d24], eax
call fcn.1007c930
cmp al, 1
jne 0x1006aafe
movss xmm0, dword [ebp - 0xec]
addss xmm0, dword [0x101a5714]
cvttss2si eax, xmm0
mov dword [0x101f9d24], eax
call fcn.1007ca50
cmp al, 1
jne 0x1006ab20
movss xmm0, dword [ebp - 0xec]
addss xmm0, dword [0x101a5494]
cvttss2si eax, xmm0
mov dword [0x101f9d24], eax
cmp byte [0x101f9d3a], 1
jne 0x1006acfb
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1006ace4
mov esi, dword [0x101f9d24]
movd xmm2, dword [0x879340c]
mov edi, dword [0x101f9d28]
mov edx, dword [0x101f9d2c]
movd xmm1, esi
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm2, xmm2
movd xmm0, edi
comiss xmm1, xmm2
movd xmm3, edx
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm3, xmm3
ja 0x1006abc9
addss xmm1, xmm3
comiss xmm2, xmm1
ja 0x1006abc9
movd xmm1, dword [0x8793410]
cvtdq2ps xmm1, xmm1
comiss xmm0, xmm1
ja 0x1006abc9
addss xmm0, dword [0x101a53d8]
comiss xmm1, xmm0
ja 0x1006abc9
mov cl, byte [0x101f9c64]
test cl, cl
jne 0x1006abd7
mov cl, 1
mov byte [0x101f9c64], cl
movzx eax, word [0x879340c]
mov word [0x101f9c66], ax
movzx eax, word [0x8793410]
mov word [0x101f9c68], ax
jmp 0x1006abcf
mov cl, byte [0x101f9c64]
test cl, cl
je 0x1006acfb
cmp byte [0x101f9d39], 0
jne 0x1006acfb
cmp dword [0xe61e58], 0x550
jl 0x1006ac08
cmp dword [0x1032c498], 0
je 0x1006ac08
lea eax, [edx + 0x2c1]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
jmp 0x1006ac10
movss xmm2, dword [0x101a58e4]
cmp dword [0x101f9d34], 2
je 0x1006ac65
mov ecx, dword [0x101f9d30]
cmp ecx, 0xb4
jge 0x1006ac33
lea eax, [ecx + ecx]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
jmp 0x1006ac6d
cmp ecx, 0x190
jle 0x1006ac53
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm1
divss xmm0, dword [0x101a4a00]
subss xmm1, xmm0
jmp 0x1006ac6d
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
jmp 0x1006ac6d
movss xmm1, dword [0x101a55cc]
movsx eax, word [0x101f9c66]
mov ecx, 1
sub esi, eax
movsx eax, word [0x101f9c68]
add esi, dword [0x879340c]
sub edi, eax
mov dword [0x101f9d24], esi
add edi, dword [0x8793410]
cmp esi, ecx
cmovl esi, ecx
cmp edi, ecx
cmovl edi, ecx
movd xmm0, esi
cvtdq2ps xmm0, xmm0
minss xmm2, xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm2
minss xmm1, xmm0
mov dword [0x101f9d24], eax
cvttss2si eax, xmm1
mov dword [0x101f9d28], eax
movzx eax, word [0x879340c]
mov word [0x101f9c66], ax
movzx eax, word [0x8793410]
mov word [0x101f9c68], ax
jmp 0x1006acfb
cmp byte [0x101f9c64], 0
je 0x1006acfb
mov byte [0x101f9c64], 0
mov byte [0x101f9d39], 0
push 1
mov eax, 0x635fd0
call eax
mov eax, dword [0x101f9d34]
add esp, 4
mov esi, 0x790b50
sub eax, 0
je 0x1006b041
sub eax, 2
je 0x1006af13
movd xmm0, dword [0x101f9d30]
cvtdq2ps xmm0, xmm0
sub eax, 1
je 0x1006aed8
sub esp, 0x10
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f9d28]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a5a
call esi
movd xmm0, dword [0x101f9d30]
add esp, 4
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f9d28]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7a
call esi
movd xmm0, dword [0x101f9d30]
add esp, 4
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a5474]
subss xmm0, dword [0x101a5428]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f9d28]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x101a5474]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7b
call esi
movd xmm0, dword [0x101f9d30]
add esp, 4
cvtdq2ps xmm0, xmm0
movd xmm1, dword [0x101f9d2c]
subss xmm0, dword [0x101a5474]
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x101a5428]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f9d28]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x101a5474]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
subss xmm1, dword [0x101a53a4]
movss dword [esp], xmm1
push 0x7a7c
call esi
movd xmm1, dword [0x101f9d28]
add esp, 4
movd xmm0, dword [0x101f9d30]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0xc], 0x42340000
mov dword [esp + 8], 0x433e0000
cvtdq2ps xmm1, xmm1
addss xmm1, xmm0
movd xmm0, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
subss xmm1, dword [0x101a5428]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push 0x7a7d
jmp 0x1006b08c
movd xmm3, dword [0x101f9d2c]
sub esp, 0xc
movd xmm2, dword [0x101f9d28]
movd xmm1, dword [0x101f9d24]
cvtdq2ps xmm3, xmm3
mov dword [esp + 4], 0
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
movss dword [esp], xmm0
call fcn.10037430
jmp 0x1006b091
movd xmm2, dword [0x101f9d28]
movd xmm1, dword [0x101f9d24]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.10010690
movd xmm0, dword [0x101f9d28]
cvtdq2ps xmm0, xmm0
push 0x1019c7be
sub esp, 8
addss xmm0, dword [0x101a53b0]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f9d24]
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [0x101a50a0]
subsd xmm0, qword [0x101a4e60]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push dword [0x105910b0]
push 0x1035a51c
call fcn.10011c70
add esp, 0x14
test al, al
je 0x1006af90
call fcn.1006c640
mov esi, dword [0xe8c58c]
mov edi, 0x41fe10
call edi
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call edi
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call edi
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0xa1
mov ecx, 0x101c5620
call fcn.10047130
movd xmm0, dword [0x101f9d28]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0xec], eax
mov eax, 0x41fe10
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x101a4e08]
cvttsd2si edi, xmm0
movd xmm0, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x101a4f40]
cvttsd2si esi, xmm0
call eax
push 0
push 1
push 0
push 0
mov edx, 0x420150
mov ecx, eax
push dword [ebp - 0xec]
push edi
push esi
call edx
jmp 0x1006b091
movd xmm0, dword [0x101f9d30]
sub esp, 0x10
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f9d2c]
cvtdq2ps xmm0, xmm0
movss dword [esp + 8], xmm0
movd xmm0, dword [0x101f9d28]
cvtdq2ps xmm0, xmm0
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0xf058
call esi
add esp, 0x14
cmp dword [0x101f9d34], 2
je 0x1006b1a2
cmp byte [0x101f9d1c], 0
jne 0x1006b0cb
push 0x779250
push 0x779150
push 1
push 0xac
push 0x101f9c70
mov eax, 0x9cfa13
call eax
mov byte [0x101f9d1c], 1
push 0
push 0
push 1
push 0x7ec5
push 1
mov eax, 0x779350
mov ecx, 0x101f9c70
call eax
movd xmm0, dword [0x101f9d28]
mov ecx, 0x101f9c70
cvtdq2ps xmm0, xmm0
push 0x1d
push 0x24
addss xmm0, dword [0x101a5338]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d2c]
add eax, dword [0x101f9d24]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a5410]
cvttss2si eax, xmm0
push eax
mov eax, 0x779410
call eax
push 0
mov eax, 0x7798f0
mov ecx, 0x101f9c70
call eax
mov eax, 0x779860
mov ecx, 0x101f9c70
call eax
cmp al, 1
jne 0x1006b14e
call fcn.1006c640
push 0xa1
mov ecx, 0x101c5620
call fcn.10047130
movd xmm0, dword [0x101f9d24]
push eax
mov eax, dword [0x101f9d28]
cvtdq2ps xmm0, xmm0
push 3
push 0xd2
add eax, 0xd
push eax
subss xmm0, dword [0x101a5338]
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x101fb640
call fcn.1007c630
movss xmm0, dword [0x101a5388]
add esp, 0x1c
jmp 0x1006b1aa
movss xmm0, dword [0x101a53d8]
push 0x158
mov ecx, 0x101c5620
movss dword [ebp - 0xec], xmm0
call fcn.10047130
push eax
mov eax, dword [0x101f9d28]
add eax, 0x21
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
mov eax, dword [0x101f9d28]
add esp, 0x1c
add eax, 0x1e
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a5350]
addss xmm0, dword [0x101a54cc]
cvttss2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x10
mov ecx, 0x791070
mov edi, 0x83c080
test al, al
je 0x1006b2d3
cmp byte [0x101f9c64], 0
jne 0x1006b2d3
push 1
call ecx
add esp, 4
test eax, eax
je 0x1006b2d3
cmp byte [0x8793386], 0
je 0x1006b2d3
call esi
mov ecx, dword [0x101f9d20]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006b2d3
call edi
mov al, byte [0x101f9c54]
xor al, 1
xor edx, edx
mov byte [0x101f9c54], al
nop
movzx eax, al
mov ecx, 0x101f9c50
push eax
push edx
call fcn.1006c670
inc edx
cmp edx, 7
jge 0x1006b2cc
mov al, byte [0x101f9c54]
jmp 0x1006b2b0
call esi
mov dword [0x101f9d20], eax
cmp byte [0x101f9c54], 0
je 0x1006b2e6
movss xmm0, dword [0x101a5388]
jmp 0x1006b2e9
xorps xmm0, xmm0
mov eax, dword [0x101f9d28]
sub esp, 0x18
add eax, 0x1e
mov edi, 0x790e40
movss dword [esp + 0x14], xmm0
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x10], 0
mov eax, edx
mov dword [esp + 0xc], 0x41700000
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
mov dword [esp + 8], 0x41700000
add eax, dword [0x101f9d24]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a5350]
addss xmm0, dword [0x101a54cc]
movss dword [esp], xmm0
push 0x7bae
call edi
mov eax, dword [0x101f9d28]
add esp, 0x1c
movd xmm2, dword [0x101f9d24]
add eax, 0x28
cvtdq2ps xmm2, xmm2
mov ecx, 0x101fb640
push 0xa0
movd xmm3, eax
subss xmm2, dword [0x101a53a0]
cvtdq2ps xmm3, xmm3
addss xmm3, dword [ebp - 0xec]
call fcn.100799e0
push 0x159
mov ecx, 0x101c5620
call fcn.10047130
push eax
mov eax, dword [0x101f9d28]
add eax, 0x3c
push 1
push 0x46
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
mov eax, dword [0x101f9d28]
add esp, 0x1c
add eax, 0x3e
push dword [0x101f9c60]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0x101a0fb4
push 1
push 0x46
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x8c
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
mov eax, dword [0x101f9d28]
add eax, 0x39
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x78
push eax
mov eax, 0x790b10
call eax
add esp, 0x30
test al, al
je 0x1006b4c1
cmp byte [0x101f9c64], 0
jne 0x1006b4c1
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006b4c1
cmp byte [0x8793386], 0
je 0x1006b4c1
call esi
mov ecx, dword [0x101f9d20]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006b4c1
mov eax, 0x83c080
call eax
mov eax, dword [0x101f9c60]
sub eax, 0xa
mov dword [0x101f9c60], eax
test eax, eax
jg 0x1006b4ba
mov dword [0x101f9c60], 0
call esi
mov dword [0x101f9d20], eax
mov eax, dword [0x101f9d28]
add eax, 0x39
cmp byte [0x101f9c54], 0
jne 0x1006b50f
movd xmm3, eax
sub esp, 0x10
mov eax, dword [0x101f9d24]
mov ecx, 0x101fb640
add eax, 0x78
cvtdq2ps xmm3, xmm3
mov dword [esp + 8], 0
mov dword [esp + 4], 0
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.1007c6e0
jmp 0x1006b565
movd xmm0, eax
sub esp, 0x18
mov eax, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
add eax, 0x78
mov dword [esp + 0x14], 0x41700000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7c0d
call edi
add esp, 0x1c
mov eax, dword [0x101f9d28]
add eax, 0x39
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0xa0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006b5fe
cmp byte [0x101f9c64], 0
jne 0x1006b5fe
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006b5fe
cmp byte [0x8793386], 0
je 0x1006b5fe
call esi
mov ecx, dword [0x101f9d20]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006b5fe
mov eax, 0x83c080
call eax
mov eax, dword [0x101f9c60]
add eax, 0xa
mov dword [0x101f9c60], eax
cmp eax, 0x190
jl 0x1006b5f7
mov dword [0x101f9c60], 0x190
call esi
mov dword [0x101f9d20], eax
mov eax, dword [0x101f9d28]
add eax, 0x39
cmp byte [0x101f9c54], 0
jne 0x1006b64e
movd xmm3, eax
sub esp, 0x10
mov eax, dword [0x101f9d24]
mov ecx, 0x101fb640
add eax, 0xa0
cvtdq2ps xmm3, xmm3
mov dword [esp + 8], 0
mov dword [esp + 4], 0
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.1007c6e0
jmp 0x1006b6a6
movd xmm0, eax
sub esp, 0x18
mov eax, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
add eax, 0xa0
mov dword [esp + 0x14], 0x41700000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7c0d
call edi
add esp, 0x1c
mov eax, dword [0x101f9d28]
add eax, 0x4c
push 0x15
push 0xaa
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 8
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
setne byte [0x101fdf3e]
cmp byte [0x101fdec6], 1
jne 0x1006b713
mov ecx, 0x101fdf47
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b6f6
sub ecx, edx
jne 0x1006b713
push 0x1019c7bf
push 0x101fdf47
call sym.Main.dll_sprintf
add esp, 8
mov eax, dword [0x101f9d28]
mov ecx, 0x101fb640
add eax, 0x4c
push 0xa1
movd xmm3, eax
mov eax, dword [0x101f9d24]
add eax, 8
cvtdq2ps xmm3, xmm3
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.100799e0
cmp byte [0x101fdf3e], 1
jne 0x1006b78b
mov eax, dword [0x101f9d28]
mov ecx, 0x101fb640
add eax, 0x4c
push 0xff19bdff
push 0xa1
movd xmm3, eax
mov eax, dword [0x101f9d24]
add eax, 8
cvtdq2ps xmm3, xmm3
movd xmm2, eax
addss xmm3, dword [ebp - 0xec]
cvtdq2ps xmm2, xmm2
call fcn.1007b9c0
push 0x15a
mov ecx, 0x101c5620
call fcn.10047130
push eax
mov eax, dword [0x101f9d28]
add eax, 0x52
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
mov eax, dword [0x101f9d28]
add esp, 0x1c
add eax, 0x52
push 0x101fdf47
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 3
push 0xc8
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x1e
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
add esp, 0x1c
mov ecx, 0x101c5620
push 0x15b
call fcn.10047130
push eax
mov eax, dword [0x101f9d28]
add eax, 0x68
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
mov eax, dword [0x101f9d28]
add esp, 0x1c
add eax, 0x64
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a4d80]
addsd xmm0, qword [0x101a4f90]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006b90d
cmp byte [0x101f9c64], 0
jne 0x1006b90d
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006b90d
cmp byte [0x8793386], 0
je 0x1006b90d
call esi
mov ecx, dword [0x101f9d20]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006b90d
mov eax, 0x83c080
call eax
xor byte [0x101f9c55], 1
call esi
mov dword [0x101f9d20], eax
cmp byte [0x101f9c55], 0
mov al, byte [0x101f9c54]
jne 0x1006b92c
cmp al, 1
jne 0x1006b92c
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006b94b
test al, al
je 0x1006b93a
movss xmm0, dword [0x101a5388]
jmp 0x1006b942
movss xmm0, dword [0x101a53d8]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x101f9d28]
add eax, 0x64
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a4d80]
addsd xmm0, qword [0x101a4f90]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
add esp, 0x1c
mov ecx, 0x101c5620
push 0x15c
call fcn.10047130
push eax
mov eax, dword [0x101f9d28]
add eax, 0x7e
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
mov eax, dword [0x101f9d28]
add esp, 0x1c
add eax, 0x7a
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a4d80]
addsd xmm0, qword [0x101a4f90]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006baba
cmp byte [0x101f9c64], 0
jne 0x1006baba
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006baba
cmp byte [0x8793386], 0
je 0x1006baba
call esi
mov ecx, dword [0x101f9d20]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006baba
mov eax, 0x83c080
call eax
xor byte [0x101f9c56], 1
call esi
mov dword [0x101f9d20], eax
cmp byte [0x101f9c56], 0
mov al, byte [0x101f9c54]
jne 0x1006bad9
cmp al, 1
jne 0x1006bad9
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006baf8
test al, al
je 0x1006bae7
movss xmm0, dword [0x101a5388]
jmp 0x1006baef
movss xmm0, dword [0x101a53d8]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x101f9d28]
add eax, 0x7a
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a4d80]
addsd xmm0, qword [0x101a4f90]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
add esp, 0x1c
mov ecx, 0x101c5620
push 0x15d
call fcn.10047130
push eax
mov eax, dword [0x101f9d28]
add eax, 0x94
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
mov eax, dword [0x101f9d28]
add esp, 0x1c
add eax, 0x90
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xf
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a4d80]
addsd xmm0, qword [0x101a4f90]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006bd46
cmp byte [0x101f9c64], 0
jne 0x1006bd46
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006bd46
cmp byte [0x8793386], 0
je 0x1006bd46
call esi
mov ecx, dword [0x101f9d20]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006bd46
mov eax, 0x83c080
call eax
mov cl, byte [0x101f9c57]
xor cl, 1
xor eax, eax
mov byte [0x101f9c57], cl
test cl, cl
jne 0x1006bcd2
cmp eax, 6
ja case.default.0x1006bcd7
jmp dword [eax*4 + 0x1006c5c8]
mov byte [0x101f9c58], 1
inc eax
jmp 0x1006bc82
mov byte [0x101f9c59], 1
inc eax
jmp 0x1006bc82
mov byte [0x101f9c5a], 1
inc eax
jmp 0x1006bc82
mov byte [0x101f9c5b], 1
inc eax
jmp 0x1006bc82
mov byte [0x101f9c5c], 1
inc eax
jmp 0x1006bc82
mov byte [0x101f9c5d], 1
inc eax
jmp 0x1006bc82
cmp eax, 6
ja case.default.0x1006bcd7
jmp dword [eax*4 + 0x1006c5e4]
mov byte [0x101f9c58], 0
inc eax
jmp 0x1006bc82
mov byte [0x101f9c59], 0
inc eax
jmp 0x1006bc82
mov byte [0x101f9c5a], 0
inc eax
jmp 0x1006bc82
mov byte [0x101f9c5b], 0
inc eax
jmp 0x1006bc82
mov byte [0x101f9c5c], 0
inc eax
jmp 0x1006bc82
mov byte [0x101f9c5d], 0
inc eax
jmp 0x1006bc82
inc eax
cmp eax, 7
jl 0x1006bc82
jmp 0x1006bd3f
mov byte [0x101f9c5e], 1
jmp 0x1006bd3f
mov byte [0x101f9c5e], 0
call esi
mov dword [0x101f9d20], eax
cmp byte [0x101f9c57], 0
mov al, byte [0x101f9c54]
jne 0x1006bd65
cmp al, 1
jne 0x1006bd65
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006bd84
test al, al
je 0x1006bd73
movss xmm0, dword [0x101a5388]
jmp 0x1006bd7b
movss xmm0, dword [0x101a53d8]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x101f9d28]
add eax, 0x90
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a4d80]
addsd xmm0, qword [0x101a4f90]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call edi
mov eax, dword [0x101f9d28]
add esp, 0x1c
movd xmm2, dword [0x101f9d24]
add eax, 0x9b
cvtdq2ps xmm2, xmm2
mov ecx, 0x101fb640
push 0xa0
movd xmm3, eax
subss xmm2, dword [0x101a53a0]
cvtdq2ps xmm3, xmm3
addss xmm3, dword [ebp - 0xec]
call fcn.100799e0
push 0x14
mov esi, 0x402320
mov ecx, 0x8128adc
call esi
push eax
lea eax, [ebp - 0xe8]
push 0x20
push eax
call fcn.1015c398
add esp, 0xc
mov ecx, 0x8128adc
push 0x15
call esi
push eax
lea eax, [ebp - 0xc8]
push 0x20
push eax
call fcn.1015c398
add esp, 0xc
mov ecx, 0x8128adc
push 0x16
call esi
push eax
lea eax, [ebp - 0xa8]
push 0x20
push eax
call fcn.1015c398
add esp, 0xc
mov ecx, 0x8128adc
push 0x17
call esi
push eax
lea eax, [ebp - 0x88]
push 0x20
push eax
call fcn.1015c398
add esp, 0xc
mov ecx, 0x8128adc
push 0x18
call esi
push eax
lea eax, [ebp - 0x68]
push 0x20
push eax
call fcn.1015c398
add esp, 0xc
push 0x697
mov ecx, 0x8128adc
call esi
push eax
lea eax, [ebp - 0x48]
push 0x20
push eax
call fcn.1015c398
add esp, 0xc
mov ecx, 0x8128adc
push 0xc4e
call esi
push eax
lea eax, [ebp - 0x28]
push 0x20
push eax
call fcn.1015c398
add esp, 0xc
xor esi, esi
nop word [eax + eax]
mov eax, esi
imul edi, esi, 0x16
shl eax, 5
lea ecx, [ebp - 0xe8]
add eax, ecx
push eax
mov eax, dword [0x101f9d28]
add eax, 0xae
add eax, edi
push 1
push 0xc8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d24]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101fb640
call fcn.1007c630
add esp, 0x1c
mov byte [ebp - 0xed], 0
cmp esi, 6
ja case.default.0x1006bf5c
jmp dword [esi*4 + 0x1006c600]
mov al, byte [0x101f9c58]
jmp 0x1006bf92
mov al, byte [0x101f9c59]
jmp 0x1006bf92
mov al, byte [0x101f9c5a]
jmp 0x1006bf92
mov al, byte [0x101f9c5b]
jmp 0x1006bf92
mov al, byte [0x101f9c5c]
jmp 0x1006bf92
mov al, byte [0x101f9c5d]
jmp 0x1006bf92
mov al, byte [0x101f9c5e]
mov byte [ebp - 0xed], al
mov eax, dword [0x101f9d28]
add eax, 0xaa
add eax, edi
push 0xf
push 0xf
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a4d80]
addsd xmm0, qword [0x101a4f90]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006c0b2
cmp byte [0x101f9c64], 0
jne 0x1006c0b2
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006c0b2
cmp byte [0x8793386], 0
je 0x1006c0b2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x101f9d20]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006c0b2
mov eax, 0x83c080
call eax
cmp esi, 6
ja case.default.0x1006c053
jmp dword [esi*4 + 0x1006c61c]
xor byte [0x101f9c58], 1
jmp case.default.0x1006c053
xor byte [0x101f9c59], 1
jmp case.default.0x1006c053
xor byte [0x101f9c5a], 1
jmp case.default.0x1006c053
xor byte [0x101f9c5b], 1
jmp case.default.0x1006c053
xor byte [0x101f9c5c], 1
jmp case.default.0x1006c053
xor byte [0x101f9c5d], 1
jmp case.default.0x1006c053
xor byte [0x101f9c5e], 1
cmp byte [0x101f9c57], 1
jne 0x1006c0a7
mov byte [0x101f9c57], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101f9d20], eax
cmp byte [ebp - 0xed], 0
mov al, byte [0x101f9c54]
jne 0x1006c0d1
cmp al, 1
jne 0x1006c0d1
sub esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x1006c0f0
test al, al
je 0x1006c0df
movss xmm0, dword [0x101a5388]
jmp 0x1006c0e7
movss xmm0, dword [0x101a53d8]
sub esp, 0x18
movss dword [esp + 0x14], xmm0
mov eax, dword [0x101f9d28]
add eax, 0xaa
mov dword [esp + 0x10], 0
add eax, edi
mov dword [esp + 0xc], 0x41700000
mov dword [esp + 8], 0x41700000
movd xmm0, eax
mov eax, 0x55555556
imul dword [0x101f9d2c]
cvtdq2ps xmm0, xmm0
mov eax, edx
addss xmm0, dword [ebp - 0xec]
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f9d24]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a4d80]
addsd xmm0, qword [0x101a4f90]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7bae
call eax
add esp, 0x1c
test esi, esi
je 0x1006c226
mov eax, dword [0x101f9d28]
sub esp, 0x10
add eax, 0xa5
add eax, edi
mov dword [esp + 0xc], 0x40000000
mov dword [esp + 8], 0x42a40000
movd xmm0, eax
mov eax, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
add eax, 0xa
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790b50
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7b5e
call eax
mov eax, dword [0x101f9d28]
add esp, 4
add eax, 0xa5
add eax, edi
mov edi, 0x790b50
mov dword [esp + 0xc], 0x40000000
mov dword [esp + 8], 0x42a40000
movd xmm0, eax
mov eax, dword [0x101f9d24]
cvtdq2ps xmm0, xmm0
add eax, 0x5c
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7b5e
call edi
add esp, 0x14
jmp 0x1006c22b
mov edi, 0x790b50
inc esi
cmp esi, 7
jl 0x1006bf00
mov eax, dword [0x101f9d28]
movss xmm0, dword [0x101fdee8]
add eax, 0x138
movss xmm3, dword [0x101a5978]
movd xmm1, dword [0x101f9d24]
movss xmm4, dword [0x101fdee4]
movss xmm5, dword [0x101fdee0]
ucomiss xmm0, xmm3
movd xmm2, eax
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm2, xmm2
subss xmm1, dword [0x101a53a0]
addss xmm2, dword [ebp - 0xec]
lahf
test ah, 0x44
jnp 0x1006c29b
movss xmm0, dword [0x101fdeec]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x1006c2c9
movaps xmm0, xmm1
movss dword [0x101fdee8], xmm1
addss xmm0, xmm5
movss dword [0x101fdeec], xmm2
movss dword [0x101fdef0], xmm0
movaps xmm0, xmm2
addss xmm0, xmm4
movss dword [0x101fdef4], xmm0
sub esp, 0x10
movss dword [esp + 0xc], xmm4
movss dword [esp + 8], xmm5
movss dword [esp + 4], xmm2
movss dword [esp], xmm1
push dword [0x101fdedc]
call edi
mov eax, dword [0x101f9d28]
add esp, 0x14
add eax, 0x151
push 0x1e
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0x36
addss xmm0, dword [ebp - 0xec]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f9d2c]
cdq
sub eax, edx
sar eax, 1
add eax, dword [0x101f9d24]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a53bc]
cvttss2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006c523
cmp byte [0x101f9c64], 0
jne 0x1006c516
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006c516
cmp byte [0x8793386], 0
je 0x1006c516
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, dword [0x101f9d20]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006c516
mov eax, dword [0x101f9d28]
sub esp, 0x18
add eax, 0x151
mov dword [esp + 0x14], 0x42700000
movd xmm0, eax
mov eax, dword [0x101f9d2c]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
mov dword [esp + 0x10], 0
sar eax, 1
add eax, dword [0x101f9d24]
mov dword [esp + 0xc], 0x41f00000
addss xmm0, dword [ebp - 0xec]
mov dword [esp + 8], 0x42580000
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a53bc]
movss dword [esp], xmm0
push 0x7a5b
call eax
add esp, 0x1c
mov eax, 0x83c080
call eax
mov al, byte [0x101f9c54]
mov ecx, 0x1019c7c3
mov byte [ebp - 0x118], al
mov al, byte [0x101f9c55]
mov byte [ebp - 0x117], al
mov al, byte [0x101f9c56]
mov byte [ebp - 0x116], al
mov al, byte [0x101f9c57]
mov byte [ebp - 0x115], al
mov al, byte [0x101f9c58]
mov byte [ebp - 0x114], al
mov al, byte [0x101f9c59]
mov byte [ebp - 0x113], al
mov al, byte [0x101f9c5a]
mov byte [ebp - 0x112], al
mov al, byte [0x101f9c5b]
mov byte [ebp - 0x111], al
mov al, byte [0x101f9c5c]
mov byte [ebp - 0x110], al
mov al, byte [0x101f9c5d]
mov byte [ebp - 0x10f], al
mov al, byte [0x101f9c5e]
mov byte [ebp - 0x10e], al
mov eax, dword [0x101f9c60]
mov dword [ebp - 0x10c], eax
mov eax, 0x101fdf47
mov dword [ebp - 0x11c], 0x4ff2cc1
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c4c4
test dl, dl
je 0x1006c4c0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c4c4
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c4a4
xor eax, eax
jmp 0x1006c4c9
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1006c4d5
mov byte [ebp - 0x108], al
jmp 0x1006c4f5
movups xmm0, xmmword [0x101fdf47]
mov eax, dword [0x101fdf57]
mov byte [ebp - 0x108], 1
movups xmmword [ebp - 0x107], xmm0
mov dword [ebp - 0xf7], eax
mov edx, 0x2c
lea ecx, [ebp - 0x11c]
call fcn.100cb100
call fcn.1006c640
call esi
mov dword [0x101f9d20], eax
jmp 0x1006c598
sub esp, 0x18
mov dword [esp + 0x14], 0x41f00000
jmp 0x1006c52e
sub esp, 0x18
mov dword [esp + 0x14], 0
mov eax, dword [0x101f9d28]
add eax, 0x151
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41f00000
mov dword [esp + 8], 0x42580000
movd xmm0, eax
mov eax, dword [0x101f9d2c]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
add eax, dword [0x101f9d24]
addss xmm0, dword [ebp - 0xec]
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790e40
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a53bc]
movss dword [esp], xmm0
push 0x7a5b
call eax
add esp, 0x1c
cmp byte [0x101fdec6], 1
jne 0x1006c5a8
mov byte [0x101fdec6], 0
push 0
mov eax, 0x635fd0
call eax
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10142fe4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret