Function at 0x1000db40
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10034c71
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x1003e280]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x16
mov ecx, 0x1003efe8
call fcn.1000ede0
mov dword [ebp - 0x50], eax
mov eax, dword [0x10041570]
mov dword [ebp - 0x4c], eax
movzx ecx, byte [ebp + 0x10]
push ecx
push ecx
movss xmm0, dword [ebp + 0xc]
movss dword [esp], xmm0
mov edx, dword [ebp + 8]
push edx
xor edx, edx
mov ecx, dword [ebp - 0x4c]
call dword [ebp - 0x50]
mov eax, dword [ebp + 8]
cdq
mov ecx, 0x96
idiv ecx
imul edx, edx, 0x64
mov eax, dword [0x10041584]
add edx, dword [eax + 0xf0]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp + 8]
cdq
mov ecx, 0x96
idiv ecx
imul edx, edx, 0x68
mov eax, dword [0x10041584]
add edx, dword [eax + 0xf4]
mov dword [ebp - 0x48], edx
mov ecx, dword [0x10041574]
call fcn.1000a2e0
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x54]
push ecx
mov ecx, dword [0x10041580]
call fcn.10003110
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x1000dc01
jmp 0x1000e7bf
movzx edx, byte [0x10043208]
test edx, edx
je 0x1000dc1b
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x30]
and ecx, 0xfffffffe
mov edx, dword [ebp - 0x20]
mov dword [edx + 0x30], ecx
mov eax, 4
imul ecx, eax, 6
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000dce9
mov ecx, dword [ebp - 0x28]
call fcn.1000d810
cmp eax, 9
je 0x1000dce9
mov ecx, dword [ebp - 0x28]
call fcn.1000d810
cmp eax, 8
je 0x1000dce9
mov ecx, dword [ebp - 0x28]
call fcn.1000d6c0
and eax, 0x400
jne 0x1000dce9
movzx edx, byte [0x1003fee0]
test edx, edx
jne 0x1000dc9b
movzx eax, byte [0x1003fee1]
test eax, eax
je 0x1000dc9b
mov byte [0x1003fee1], 0
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 0x30]
or edx, 2
mov eax, dword [ebp - 0x20]
mov dword [eax + 0x30], edx
jmp 0x1000dce9
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 0x30]
and edx, 2
je 0x1000dcdb
mov ecx, dword [ebp - 0x28]
call fcn.1000d6c0
and eax, 1
je 0x1000dcc3
mov byte [0x1003fee0], 1
mov byte [0x1003fee1], 1
jmp 0x1000dcd9
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x30]
and ecx, 0xfffffffd
mov edx, dword [ebp - 0x20]
mov dword [edx + 0x30], ecx
mov byte [0x1003fee0], 0
jmp 0x1000dce9
mov byte [0x1003fee0], 0
mov byte [0x1003fee1], 0
mov ecx, dword [ebp - 0x28]
call fcn.10003f10
add eax, 1
cvtsi2ss xmm0, eax
mov eax, dword [0x10041590]
mulss xmm0, dword [eax + 0x20]
movss dword [ebp - 0x30], xmm0
mov ecx, dword [ebp - 0x20]
add ecx, 0xc
mov edx, dword [ecx]
mov dword [ebp - 0x1c], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x18], eax
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x14], ecx
mov edx, 4
imul eax, edx, 0x32
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000de08
mov ecx, dword [ebp - 0x28]
call fcn.1000d6c0
and eax, 1
jne 0x1000de08
mov ecx, dword [ebp - 0x20]
movss xmm0, dword [ecx + 0x28]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jp 0x1000de08
mov edx, dword [ebp - 0x20]
movss xmm0, dword [edx + 0x24]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jp 0x1000de08
lea eax, [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x28]
call fcn.10004150
mov ecx, eax
call fcn.10004ba0
fstp dword [ebp - 0x58]
movss xmm0, dword [ebp - 0x58]
comiss xmm0, dword [0x10038b90]
jbe 0x1000de08
movss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x1003fee4]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [0x1003fee4], xmm0
movss xmm0, dword [ebp - 0x38]
comiss xmm0, dword [0x10038400]
jbe 0x1000ddef
mov ecx, dword [ebp - 0x20]
movss xmm0, dword [0x10038bac]
movss dword [ecx + 0x28], xmm0
jmp 0x1000de08
xorps xmm0, xmm0
comiss xmm0, dword [ebp - 0x38]
jbe 0x1000de08
mov edx, dword [ebp - 0x20]
movss xmm0, dword [0x10038ba0]
movss dword [edx + 0x28], xmm0
push ecx
movss xmm0, dword [ebp - 0x30]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.1000e810
add esp, 0xc
mov ecx, dword [ebp - 0x28]
call fcn.10013f80
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x60], 0xe
cmp dword [ebp - 0x2c], 0
je 0x1000e6b0
mov ecx, dword [ebp - 0x2c]
call fcn.10003b00
fstp dword [ebp - 0x3c]
mov edx, 4
imul eax, edx, 0x2e
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000dec0
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov ecx, 0x1003f038
call fcn.100052f0
movzx eax, al
test eax, eax
je 0x1000dec0
mov ecx, 4
imul edx, ecx, 0x2e
movss xmm0, dword [edx + 0x10040080]
ucomiss xmm0, dword [0x10038440]
lahf
test ah, 0x44
jp 0x1000deb1
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x30]
or ecx, 0x800
mov edx, dword [ebp - 0x20]
mov dword [edx + 0x30], ecx
jmp 0x1000dec0
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x30]
or ecx, 1
mov edx, dword [ebp - 0x20]
mov dword [edx + 0x30], ecx
mov ecx, dword [ebp - 0x2c]
call fcn.1000da10
movzx eax, al
test eax, eax
jne 0x1000e6b0
mov byte [ebp - 0x21], 1
mov ecx, dword [ebp - 0x2c]
call fcn.1000edb0
movss xmm0, dword [ebp - 0x3c]
comiss xmm0, dword [ebp - 0x30]
ja 0x1000def5
movzx ecx, byte [0x1003feec]
test ecx, ecx
je 0x1000def9
mov byte [ebp - 0x21], 0
movss xmm0, dword [ebp - 0x3c]
comiss xmm0, dword [ebp - 0x30]
ja 0x1000df0b
mov byte [0x1003feec], 0
mov ecx, dword [ebp - 0x2c]
call fcn.1000d870
movzx edx, al
test edx, edx
je 0x1000e208
mov eax, 4
imul ecx, eax, 0x15
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000df60
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movsx edx, ax
test edx, edx
je 0x1000df60
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x1003f038
call fcn.10005940
mov eax, 4
shl eax, 2
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038440]
lahf
test ah, 0x44
jp 0x1000dfd5
mov ecx, 4
shl ecx, 3
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000dfba
movzx edx, byte [ebp - 0x21]
test edx, edx
je 0x1000dfb8
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x1003f038
call fcn.10004ce0
jmp 0x1000dfd0
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x1003f038
call fcn.10004ce0
jmp 0x1000e146
mov eax, 4
shl eax, 2
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038444]
lahf
test ah, 0x44
jp 0x1000e146
mov ecx, 4
shl ecx, 3
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000e054
mov edx, 4
imul eax, edx, 0x27
cvttss2si ecx, dword [eax + 0x10040080]
push ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movsx edx, ax
test edx, edx
je 0x1000e054
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1000e04f
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x1003f038
call fcn.10004ce0
jmp 0x1000e146
mov ecx, 4
imul edx, ecx, 0x2a
movss xmm0, dword [edx + 0x10040080]
comiss xmm0, dword [0x10038400]
jbe 0x1000e112
mov eax, 4
imul ecx, eax, 0x27
cvttss2si edx, dword [ecx + 0x10040080]
push edx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x1000e0fd
cmp dword [0x1003fef0], 0
jne 0x1000e0d7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x40], eax
cvtsi2sd xmm0, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x10038520]
movsd qword [ebp - 0x68], xmm0
cvtsd2ss xmm0, qword [ebp - 0x68]
mov edx, 4
imul eax, edx, 0x2a
addss xmm0, dword [eax + 0x10040080]
call fcn.100335b0
mov dword [0x1003fef0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x1003fef0], eax
jbe 0x1000e0fb
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x1003f038
call fcn.10004ce0
jmp 0x1000e110
cmp dword [0x1003fef0], 0
jbe 0x1000e110
mov dword [0x1003fef0], 0
jmp 0x1000e146
mov ecx, 4
imul edx, ecx, 0x27
cvttss2si eax, dword [edx + 0x10040080]
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movsx ecx, ax
test ecx, ecx
je 0x1000e146
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
mov ecx, 0x1003f038
call fcn.10004ce0
mov edx, 4
imul eax, edx, 0xf
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038440]
lahf
test ah, 0x44
jp 0x1000e199
movzx ecx, byte [ebp - 0x21]
test ecx, ecx
je 0x1000e197
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
mov ecx, 0x1003f038
call fcn.10006e60
movzx edx, al
test edx, edx
je 0x1000e197
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x30]
or ecx, 1
mov edx, dword [ebp - 0x20]
mov dword [edx + 0x30], ecx
jmp 0x1000e208
mov eax, 4
imul ecx, eax, 0xf
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038444]
lahf
test ah, 0x44
jp 0x1000e208
mov edx, 4
imul eax, edx, 0x28
cvttss2si ecx, dword [eax + 0x10040080]
push ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movsx edx, ax
test edx, edx
je 0x1000e208
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1000e208
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, 0x1003f038
call fcn.10006e60
movzx ecx, al
test ecx, ecx
je 0x1000e208
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x30]
or eax, 1
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x30]
and eax, 1
je 0x1000e250
movzx ecx, byte [ebp - 0x21]
test ecx, ecx
je 0x1000e224
mov byte [0x1003feec], 1
jmp 0x1000e250
mov edx, 4
imul eax, edx, 7
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000e250
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 0x30]
and edx, 0xfffffffe
mov eax, dword [ebp - 0x20]
mov dword [eax + 0x30], edx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 0x30]
and edx, 1
je 0x1000e2cf
mov eax, 4
imul ecx, eax, 3
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038440]
lahf
test ah, 0x44
jp 0x1000e296
mov edx, dword [ebp - 0x20]
add edx, 0xc
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x40]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov ecx, 0x1003e7e4
call fcn.10011640
jmp 0x1000e2cf
mov eax, 4
imul ecx, eax, 3
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038444]
lahf
test ah, 0x44
jp 0x1000e2cf
mov edx, dword [ebp - 0x20]
add edx, 0xc
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x40]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov ecx, 0x1003e7e4
call fcn.10010b70
mov eax, 4
shl eax, 1
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000e323
lea ecx, [ebp - 0x80]
push ecx
mov ecx, dword [ebp - 0x28]
call fcn.10003c50
mov dword [ebp - 0x5c], eax
push ecx
movss xmm0, dword [0x10038444]
movss dword [esp], xmm0
lea edx, [ebp - 0x8c]
push edx
mov ecx, dword [ebp - 0x5c]
call fcn.10002930
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 0xc
call fcn.1000d390
mov eax, dword [0x100432cc]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x1003ff00]
cmp eax, dword [edx + 4]
jle 0x1000e37a
push 0x1003ff00
call fcn.100331ba
add esp, 4
cmp dword [0x1003ff00], 0xffffffff
jne 0x1000e37a
mov dword [ebp - 4], 0
mov ecx, 0x1003fef4
call fcn.100021f0
mov dword [ebp - 4], 0xffffffff
push 0x1003ff00
call fcn.10033169
add esp, 4
mov ecx, 4
imul edx, ecx, 0xd
movss xmm0, dword [edx + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000e455
movzx eax, byte [ebp - 0x21]
test eax, eax
jne 0x1000e455
push 0x1003fef4
mov ecx, dword [0x10041574]
call fcn.10004270
push ecx
movss xmm0, dword [0x1003fef4]
movss dword [esp], xmm0
mov ecx, 0x1003e7e4
call fcn.10010a80
fstp dword [0x1003fef4]
push ecx
movss xmm0, dword [0x1003fef8]
movss dword [esp], xmm0
mov ecx, 0x1003e7e4
call fcn.10010a80
fstp dword [0x1003fef8]
mov ecx, dword [ebp - 0x20]
movss xmm0, dword [0x1003fef8]
movss dword [ecx + 0x10], xmm0
mov edx, 4
imul eax, edx, 0x30
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jp 0x1000e455
mov ecx, dword [ebp - 0x20]
movss xmm0, dword [0x1003fef4]
movss dword [ecx + 0xc], xmm0
mov ecx, 0x1003f038
call fcn.10004470
movzx edx, al
test edx, edx
jne 0x1000e455
push 1
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
mov ecx, 0x1003f038
call fcn.10002e90
mov edx, 4
imul eax, edx, 0x30
movss xmm0, dword [eax + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jp 0x1000e493
mov ecx, 4
imul edx, ecx, 0x31
movss xmm0, dword [edx + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000e62b
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x30]
and ecx, 0x20
jne 0x1000e62b
mov ecx, dword [ebp - 0x28]
call fcn.1000d810
cmp eax, 9
je 0x1000e62b
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x30]
and eax, 1
je 0x1000e4e3
mov ecx, 0x1003f038
call fcn.10004470
movzx ecx, al
test ecx, ecx
je 0x1000e4e3
push 1
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x1003f038
call fcn.10002e90
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 0x30]
and edx, 1
jne 0x1000e629
mov eax, 4
imul ecx, eax, 0x30
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038440]
lahf
test ah, 0x44
jp 0x1000e51f
mov edx, dword [ebp - 0x20]
movss xmm0, dword [0x10038b94]
movss dword [edx + 0xc], xmm0
mov eax, 4
imul ecx, eax, 0x30
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038444]
lahf
test ah, 0x44
jp 0x1000e54c
mov edx, dword [ebp - 0x20]
movss xmm0, dword [0x10038478]
movss dword [edx + 0xc], xmm0
mov eax, 4
imul ecx, eax, 0x30
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038448]
lahf
test ah, 0x44
jp 0x1000e579
mov edx, dword [ebp - 0x20]
movss xmm0, dword [0x10038b98]
movss dword [edx + 0xc], xmm0
mov eax, 4
imul ecx, eax, 0x31
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038440]
lahf
test ah, 0x44
jp 0x1000e5ae
mov edx, dword [ebp - 0x20]
movss xmm0, dword [edx + 0x10]
subss xmm0, dword [0x10038478]
mov eax, dword [ebp - 0x20]
movss dword [eax + 0x10], xmm0
mov ecx, dword [ebp - 0x20]
push ecx
movss xmm0, dword [ecx + 0xc]
movss dword [esp], xmm0
mov ecx, 0x1003e7e4
call fcn.10010a80
mov edx, dword [ebp - 0x20]
fstp dword [edx + 0xc]
mov eax, dword [ebp - 0x20]
push ecx
movss xmm0, dword [eax + 0x10]
movss dword [esp], xmm0
mov ecx, 0x1003e7e4
call fcn.10010a80
mov ecx, dword [ebp - 0x20]
fstp dword [ecx + 0x10]
mov edx, 4
imul eax, edx, 0x30
movss xmm0, dword [eax + 0x10040080]
comiss xmm0, dword [0x10038440]
jbe 0x1000e60c
mov dword [ebp - 0x44], 0xffffffff
jmp 0x1000e613
mov dword [ebp - 0x44], 1
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x1003f038
call fcn.10002e90
jmp 0x1000e66d
mov ecx, 4
imul edx, ecx, 0xa
movss xmm0, dword [edx + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000e66d
mov ecx, 0x1003f038
call fcn.10004470
movzx eax, al
test eax, eax
je 0x1000e66d
push 1
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x1003f038
call fcn.10002e90
mov eax, 4
imul ecx, eax, 0xd
movss xmm0, dword [ecx + 0x10040080]
ucomiss xmm0, dword [0x10038400]
lahf
test ah, 0x44
jnp 0x1000e6b0
movzx edx, byte [ebp - 0x21]
test edx, edx
je 0x1000e6b0
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x30]
and ecx, 1
je 0x1000e6b0
mov edx, dword [ebp + 0x14]
mov byte [edx], 0
mov eax, dword [0x1003fee8]
add eax, 1
mov dword [0x1003fee8], eax
mov ecx, 4
imul edx, ecx, 0xe
movss xmm0, dword [edx + 0x10040080]
comiss xmm0, dword [0x10038440]
jbe 0x1000e780
mov eax, dword [0x100432cc]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x1003ff0c]
cmp eax, dword [edx + 4]
jle 0x1000e72d
push 0x1003ff0c
call fcn.100331ba
add esp, 4
cmp dword [0x1003ff0c], 0xffffffff
jne 0x1000e72d
cvtsi2ss xmm0, dword [0x1003ff04]
mov ecx, 4
imul edx, ecx, 0xe
addss xmm0, dword [edx + 0x10040080]
cvttss2si eax, xmm0
mov dword [0x1003ff08], eax
push 0x1003ff0c
call fcn.10033169
add esp, 4
mov ecx, dword [0x1003ff08]
cmp ecx, dword [0x1003ff04]
jl 0x1000e750
mov edx, dword [ebp + 0x14]
mov byte [edx], 0
mov eax, dword [0x1003fee8]
add eax, 1
mov dword [0x1003fee8], eax
jmp 0x1000e771
cvtsi2ss xmm0, dword [0x1003ff04]
mov ecx, 4
imul edx, ecx, 0xe
addss xmm0, dword [edx + 0x10040080]
cvttss2si eax, xmm0
mov dword [0x1003ff08], eax
mov ecx, dword [0x1003ff04]
add ecx, 1
mov dword [0x1003ff04], ecx
mov edx, dword [0x1003fee8]
cmp edx, dword [ebp - 0x60]
jle 0x1000e791
mov eax, dword [ebp + 0x14]
mov byte [eax], 1
mov ecx, dword [ebp + 0x14]
movzx edx, byte [ecx]
test edx, edx
je 0x1000e7a5
mov dword [0x1003fee8], 0
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x48]
call fcn.1000d260
mov ecx, dword [ebp - 0x20]
call fcn.1000d550
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x64], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003321e
mov esp, ebp
pop ebp
ret 0x10