Function at 0x1001f530
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
push 0x41
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 3
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 4
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 5
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 6
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 7
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 8
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 9
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0xa
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0xb
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0xe
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0xf
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x10
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x13
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x14
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x15
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x16
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x17
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x18
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x19
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x1a
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x1d
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x1e
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x20
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x24
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x27
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x39
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x3a
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x3b
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x3c
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x3d
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x3e
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x3f
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x41
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x42
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x44
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x45
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x46
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x48
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x49
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x4a
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x4b
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x4c
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x4d
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x4e
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
push 0x4f
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
mov bl, 1
cmp byte [0x118c80d1], bl
je 0x10020ed5
cmp byte [0x118cb941], bl
je 0x10020ed5
cmp byte [0x118c846d], bl
je 0x10020ed5
cmp byte [0x118c8125], bl
je 0x10020ed5
cmp byte [0x118ceebd], bl
je 0x10020ed5
cmp byte [0x118c7999], bl
je 0x10020ed5
cmp byte [0x118c7f81], bl
je 0x10020ed5
cmp byte [0x118c77f5], bl
je 0x10020ed5
cmp byte [0x118d2829], bl
je 0x10020ed5
cmp byte [0x118c5041], bl
je 0x10020ed5
cmp byte [0x118c639d], bl
je 0x10020ed5
cmp byte [0x118c60a9], bl
je 0x10020ed5
cmp byte [0x118c60fd], bl
je 0x10020ed5
cmp byte [0x118c7b3d], bl
je 0x10020ed5
cmp byte [0x118d0465], bl
je 0x10020ed5
cmp byte [0x118cbc89], bl
je 0x10020ed5
cmp byte [0x118d1ef9], bl
je 0x10020ed5
cmp byte [0x118cd9bd], bl
je 0x10020ed5
cmp byte [0x118ce0a1], bl
je 0x10020ed5
cmp byte [0x118ce634], bl
je 0x10020ed5
cmp byte [0x118c8029], bl
je 0x10020ed5
cmp byte [0x118c6f19], bl
je 0x10020ed5
cmp byte [0x118c8179], bl
je 0x10020ed5
call fcn.10063140
test al, al
jne 0x10020ed5
mov eax, dword [0x10a885a4]
cmp byte [eax + 0x29], 0
jne 0x10020ed5
mov ecx, dword [0x1190acb4]
cmp byte [ecx + 0x29], 0
jne 0x10020ed5
cmp byte [0x101667f8], 0
jne 0x10020ed5
push 0x6e
mov edx, 0x861110
call edx
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x10020ed5
cmp byte [0x10a88af9], al
jne 0x10020ed5
mov eax, dword [0x10a8885c]
cmp byte [eax + 0x29], 0
jne 0x10020ed5
mov ecx, dword [0x10a88858]
cmp byte [ecx + 0x29], 0
jne 0x10020ed5
mov edx, dword [0x10a888f0]
cmp byte [edx + 0x29], 0
jne 0x10020ed5
mov eax, dword [0x10a88928]
cmp byte [eax + 0x29], 0
jne 0x10020ed5
cmp byte [0x118c80d1], bl
je 0x10020ed5
cmp byte [0x118cf0b5], bl
je 0x10020ed5
cmp byte [0x118cc36d], bl
je 0x10020ed5
cmp byte [0x118c5e09], bl
je 0x10020ed5
cmp byte [0x118c5eb1], bl
je 0x10020ed5
cmp byte [0x118cf3a9], bl
je 0x10020ed5
cmp byte [0x118d2b1d], bl
je 0x10020ed5
mov eax, dword [0xe61e18]
cmp eax, 0x6b
je 0x10020ed5
cmp eax, 0x6d
je 0x10020ed5
mov ebx, dword [0x10a88848]
cmp byte [ebx + 0x29], 0
je 0x10020ed5
push str.MENU
call fcn.100264b0
mov eax, dword [0x10a88848]
fld dword [eax + 0x18]
xor ebx, ebx
fmul qword [0x1013f510]
add esp, 4
xor esi, esi
fadd dword [eax]
fsub qword [0x1013f918]
fld qword [0x1013f7b0]
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x14]
fadd dword [eax + 4]
fstp dword [esp + 0x10]
cmp dword [0x10234f38], ebx
jne 0x10020e9c
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
fldz
cmp dword [0x10234ac4], ebx
jne 0x1001fd0a
fld dword [0x1013faa8]
push 0x10a357f8
push ebx
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1013f550]
fstp dword [esp + 8]
fld dword [esp + 0x28]
fadd st(1)
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x1001fcff
call edi
mov ecx, dword [0x10a88930]
add ecx, 0x190
cmp ecx, eax
ja 0x1001fcf8
call fcn.100427b0
push ebx
push ebx
push 0x19
mov edx, 0x6d6c20
call edx
add esp, 0xc
push 0x22
mov eax, 0x861110
call eax
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x10a88930], eax
fldz
mov edi, 1
mov esi, edi
jmp 0x1001fd0f
mov edi, 1
cmp dword [0x10234ab0], ebx
jne 0x1001fdce
fld dword [0x1013faa8]
push 0x10a35870
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, esi
fld dword [0x1013f550]
imul eax, eax, 0x64
fstp dword [esp + 8]
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x1001fdbe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10a88930]
add ecx, 0x190
cmp ecx, eax
ja 0x1001fdb3
call fcn.100aaa90
push 0
push 0
push 0x19
mov edx, 0x6d6c20
call edx
add esp, 0xc
push 0x22
mov eax, 0x861110
call eax
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x1001fdc4
mov ebx, edi
add esi, edi
cmp esi, edi
jle 0x1001fdd0
xor esi, esi
jmp 0x1001fdd0
fstp st(0)
cmp dword [0x10234af4], 0
jne 0x1001fee4
fld dword [0x1013faa8]
push 0x10a35960
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x1001fed6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x1001fecb
cmp dword [0x10597eb4], edi
jne 0x1001fe9d
mov ecx, dword [0x10a88b4c]
mov edi, dword [0x10a88b48]
sub ecx, edi
mov eax, 0x66666667
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov byte [0x10a88af9], 1
je 0x1001fea4
mov di, word [edi]
call fcn.10046850
jmp 0x1001fea4
push 0
call fcn.10008810
push 0
push 0
push 0x19
mov ecx, 0x6d6c20
call ecx
add esp, 0xc
push 0x22
mov edx, 0x861110
call edx
mov edx, 0x85f9a0
mov ecx, eax
call edx
mov edi, 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x1001fedc
add ebx, edi
add esi, edi
cmp esi, edi
jle 0x1001fee4
xor esi, esi
cmp dword [0x10234ac8], 0
jne 0x1001ffc0
fld dword [0x1013faa8]
push 0x10a358e8
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x1001ffb2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x1001ffa7
push 0x6e
mov eax, 0x861110
call eax
mov edx, 0x860660
mov ecx, eax
call edx
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x1001ffb8
add ebx, edi
add esi, edi
cmp esi, edi
jle 0x1001ffc0
xor esi, esi
cmp dword [0x10234acc], 0
jne 0x100200a2
fld dword [0x1013faa8]
push 0x10a359d8
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020094
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020089
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x118c80cc]
cmp eax, 0x1f4
jb 0x10020067
call fcn.100ca980
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x1002009a
add ebx, edi
add esi, edi
cmp esi, edi
jle 0x100200a2
xor esi, esi
cmp dword [0x10234aac], 0
je 0x100201a0
fld dword [0x1013faa8]
push 0x10a35a50
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020192
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020187
mov eax, dword [0x10234aac]
cmp eax, 2
jne 0x1002014a
mov byte [0x118cf3a9], 1
mov dword [0xe8cb3c], edi
jmp 0x10020165
cmp eax, edi
jne 0x10020165
mov byte [0x118c7b3d], 1
mov eax, 2
mov dword [0xe8cb3c], edi
call fcn.1003df30
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x10020198
add ebx, edi
add esi, edi
cmp esi, edi
jle 0x100201a0
xor esi, esi
cmp dword [0x10234ab8], 0
jne 0x10020281
fld dword [0x1013faa8]
push 0x10a35ac8
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020273
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020268
mov byte [0x118c7999], 1
mov eax, 2
mov dword [0xe8cb3c], edi
call fcn.10089760
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x10020279
add ebx, edi
add esi, edi
cmp esi, edi
jle 0x10020281
xor esi, esi
cmp dword [0x10234ac0], 0
jne 0x10020362
fld dword [0x1013faa8]
push 0x10a35b40
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020354
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020349
mov eax, 9
call fcn.1006cd80
push 0
push 0
mov byte [0x118d0465], 1
push 0x19
mov eax, 0x6d6c20
mov dword [0xe8cb3c], edi
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x1002035a
add ebx, edi
add esi, edi
cmp esi, edi
jle 0x10020362
xor esi, esi
cmp dword [0x10234abc], 0
jne 0x10020431
fld dword [0x1013faa8]
push 0x10a35bb8
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020423
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020418
call fcn.10001ff0
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x10020429
add ebx, edi
add esi, edi
cmp esi, edi
jle 0x10020431
xor esi, esi
cmp dword [0x10234ab4], 0
jne 0x10020512
fld dword [0x1013faa8]
push 0x10a361d0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020504
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020504
mov byte [0x118c77f5], 1
mov eax, 2
mov dword [0xe8cb3c], edi
call fcn.10045b30
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, edi
jl 0x1002050a
add ebx, edi
add esi, edi
cmp esi, edi
jle 0x10020512
xor esi, esi
cmp dword [0x10234ad4], 0
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
jne 0x100205f1
fld dword [0x1013faa8]
push 0x10a35ca8
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x100205e3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x100205e3
call edi
cmp eax, dword [0xe8c578]
jne 0x100205d8
call fcn.10087020
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x100205e9
inc ebx
inc esi
cmp esi, 1
jle 0x100205f1
xor esi, esi
cmp dword [0x10234ad8], 0
jne 0x100206c9
fld dword [0x1013faa8]
push 0x10a35d20
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x100206b3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x100206b3
call edi
cmp eax, dword [0xe8c578]
jne 0x100206a4
lea eax, [esp + 0x18]
mov ecx, 4
push eax
mov dword [esp + 0x1c], 0x25f304c1
call fcn.10100800
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [0x10a88930], eax
jmp 0x100206b9
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, 1
jl 0x100206bf
inc ebx
inc esi
cmp esi, 1
jle 0x100206cf
xor esi, esi
jmp 0x100206cf
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x10234ae4], 0
jne 0x100207a9
fld dword [0x1013faa8]
push 0x10a35e10
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov ecx, ebx
fld dword [0x1013f550]
shl ecx, 4
fstp dword [esp + 8]
sub ecx, ebx
add ecx, ecx
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
mov edx, esi
imul edx, edx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], edx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x1002079b
call edi
mov ecx, dword [0x10a88930]
add ecx, 0x190
cmp ecx, eax
ja 0x1002079b
push 0
mov byte [0x118cc36d], 1
push 0
mov dword [0xe8cb3c], 1
push 0x19
mov edx, 0x6d6c20
mov byte [0x118cc39d], 0
call edx
add esp, 0xc
push 0x22
mov eax, 0x861110
call eax
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x100207a1
inc ebx
inc esi
cmp esi, 1
jle 0x100207a9
xor esi, esi
cmp dword [0x10234b10], 0
jne 0x10020870
fld dword [0x1013faa8]
push 0x10a36158
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020862
call edi
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020862
call fcn.100255c0
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x10020868
inc ebx
inc esi
cmp esi, 1
jle 0x10020870
xor esi, esi
cmp dword [0x10234af8], 0
jne 0x10020937
fld dword [0x1013faa8]
push 0x10a35e88
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020929
call edi
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020929
call fcn.10039f00
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x1002092f
inc ebx
inc esi
cmp esi, 1
jle 0x10020937
xor esi, esi
cmp dword [0x10234ae0], 0
jne 0x10020a07
fld dword [0x1013faa8]
push 0x10a35d98
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x100209f9
call edi
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x100209f9
xor byte [0x118cf0b5], 1
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x10a88930], eax
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x100209ff
inc ebx
inc esi
cmp esi, 1
jle 0x10020a07
xor esi, esi
cmp dword [0x10234aec], 0
jne 0x10020abb
fld dword [0x1013faa8]
push 0x10a35f78
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020aad
call edi
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020aad
mov edx, dword [0x10233b84]
xor al, al
mov byte [0x118c5e09], 1
call fcn.100e56b0
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x10020ab3
inc ebx
inc esi
cmp esi, 1
jle 0x10020abb
xor esi, esi
cmp dword [0x10234af0], 0
jne 0x10020ba0
fld dword [0x1013faa8]
push 0x10a35ff0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020b92
call edi
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020b92
mov eax, dword [0x10a72148]
test eax, eax
je 0x10020b8b
mov byte [0x118d2b1d], 1
cmp byte [eax + 0xd], 1
jne 0x10020b64
mov word [eax + 0xc], 0
jmp 0x10020b69
call fcn.1010e3c0
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x10020b98
inc ebx
inc esi
cmp esi, 1
jle 0x10020ba0
xor esi, esi
cmp dword [0x10234b00], 0
jne 0x10020c54
fld dword [0x1013faa8]
push 0x10a36068
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020c46
call edi
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020c46
mov edx, dword [0x10233b54]
xor al, al
mov byte [0x118c5eb1], 1
call fcn.100e4390
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x10020c4c
inc ebx
inc esi
cmp esi, 1
jle 0x10020c54
xor esi, esi
cmp dword [0x10234b04], 0
jne 0x10020d1b
fld dword [0x1013faa8]
push 0x10a360e0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020d0d
call edi
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020d0d
call fcn.10024bf0
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x10020d13
inc ebx
inc esi
cmp esi, 1
jle 0x10020d1b
xor esi, esi
cmp dword [0x10234b14], 0
jne 0x10020ddd
fld dword [0x1013faa8]
push 0x10a36248
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, ebx
fld dword [0x1013f550]
shl eax, 4
fstp dword [esp + 8]
sub eax, ebx
add eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, esi
imul ecx, ecx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020dcf
call edi
mov edx, dword [0x10a88930]
add edx, 0x190
cmp edx, eax
ja 0x10020dcf
lea eax, [esp + 0x18]
mov ecx, 8
push eax
mov dword [esp + 0x1c], 0x25d308c1
mov dword [esp + 0x20], 1
call fcn.10100800
add esp, 4
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x10020dd5
inc ebx
inc esi
cmp esi, 1
jle 0x10020ddd
xor esi, esi
cmp dword [0x10234b2c], 0
jne 0x10020e9c
fld dword [0x1013faa8]
push 0x10912350
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
mov ecx, ebx
fld dword [0x1013f550]
shl ecx, 4
fstp dword [esp + 8]
sub ecx, ebx
add ecx, ecx
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
mov edx, esi
imul edx, edx, 0x64
fadd dword [esp + 0x28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 4]
mov dword [esp + 0x30], edx
fild dword [esp + 0x30]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp]
push 0x10a887f8
call fcn.10026050
add esp, 0x1c
test al, al
je 0x10020e96
call edi
mov ecx, dword [0x10a88930]
add ecx, 0x190
cmp ecx, eax
ja 0x10020e96
call fcn.10008410
push 0
push 0
push 0x19
mov edx, 0x6d6c20
call edx
add esp, 0xc
push 0x22
mov eax, 0x861110
call eax
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x10a88930], eax
cmp esi, 1
jl 0x10020e9c
inc ebx
lea eax, [ebx + 1]
mov ecx, eax
shl ecx, 4
sub ecx, eax
add ecx, ecx
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
mov ecx, dword [0x10a88848]
fadd dword [esp + 0x10]
fld dword [ecx + 0x24]
fcomp st(1)
fnstsw ax
test ah, 5
jp 0x10020ed3
fsub dword [ecx + 4]
fstp dword [ecx + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
fstp st(0)
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret