Function at 0x10025b90
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10050f04
mov eax, dword fs:[0]
push eax
sub esp, 0x360
mov eax, dword [0x10064040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [0x10065cb0]
test edi, edi
je 0x10026da3
mov eax, dword [edi + 0xd4]
test eax, eax
je 0x10026da3
cmp dword [eax + 0x70], 0
je 0x10026da3
mov eax, dword [eax + 0x34]
test eax, eax
je 0x10026da3
cmp dword [eax + 0x5d0], 0
je 0x10026da3
cmp dword [eax + 0x7cc], 0
je 0x10026da3
cmp dword [eax + 0x420], 0
mov dword [0x10065ca8], eax
mov dword [0x10065c98], eax
je 0x10026da3
cmp byte [0x10065c00], 0
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
je 0x10025c44
push 0x77
call esi
test al, 1
je 0x10025c44
cmp byte [0x10065c01], 0
sete byte [0x10065c01]
cmp byte [0x10065bc6], 0
je 0x10025c63
push 0x71
call esi
test al, 1
je 0x10025c63
cmp byte [0x10065c02], 0
sete byte [0x10065c02]
cmp byte [0x10065bee], 0
je 0x10025d1d
push 0x73
call esi
test al, 1
je 0x10025d1d
mov ecx, dword [0x10065cf4]
mov esi, dword [0x10065c98]
test ecx, ecx
jne 0x10025cff
push str.Function_Engine.PlayerController.Suicide
lea ecx, [ebp - 0x314]
call fcn.10029100
lea ecx, [ebp - 0x314]
mov dword [ebp - 4], 0
call fcn.100292c0
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x300]
mov dword [0x10065cf4], ecx
cmp eax, 0xf
jbe 0x10025cff
mov edx, dword [ebp - 0x314]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10025cef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10026dbe
push ecx
push edx
call fcn.1002b078
mov ecx, dword [0x10065cf4]
add esp, 8
mov eax, dword [esi]
lea edx, [ebp - 0x219]
push 0
push edx
push ecx
mov eax, dword [eax + 0x10]
mov ecx, esi
call eax
call fcn.1002a460
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp byte [0x10065bed], 0
je 0x10025d33
push 0x2e
call esi
test al, 1
je 0x10025d33
call fcn.1002a460
cmp byte [0x10065bc7], 0
je 0x10025d4a
push 1
call fcn.1002a650
push 0
call fcn.1002a650
cmp byte [0x10065bfe], 0
je 0x10025d89
cmp dword [0x10065c04], 1
jne 0x10025d6e
push 0x43
call esi
test al, 1
je 0x10025d6e
push 0xf8
call fcn.1002a530
cmp dword [0x10065c04], 2
jne 0x10025d89
push 0x43
call esi
test al, 1
je 0x10025d89
push 0xa4
call fcn.1002a530
cmp byte [0x10065bf4], 0
je 0x10025dbe
push 0x43
call fcn.1002a530
push 0x9a
call fcn.1002a530
push 0x6e
call fcn.1002a530
push 0x8a
call fcn.1002a530
push 0x85
call fcn.1002a530
cmp byte [0x10065bf3], 0
je 0x10025df4
push 0x70
call esi
test al, 1
je 0x10025df4
push 0xcc
call fcn.1002a530
push 0x1c0
call fcn.1002a530
push 0x1ef
call fcn.1002a530
push 0x24
call fcn.1002a530
cmp byte [0x10065c03], 0
je 0x10025e66
mov eax, dword [0x10065ca8]
mov ecx, dword [0x10065270]
mov dword [ebp - 0x278], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10065d30]
cmp eax, dword [ecx + 4]
jg 0x10026dc3
mov ecx, dword [ebp - 0x278]
mov edx, dword [0x10065d2c]
push 0
mov dword [ebp - 0x220], 0xdb
mov eax, dword [ecx]
lea ecx, [ebp - 0x220]
mov esi, dword [edx + 0x84]
push ecx
mov ecx, dword [ebp - 0x278]
mov eax, dword [eax + 0x10]
push edx
call eax
mov eax, dword [0x10065d2c]
mov dword [eax + 0x84], esi
cmp byte [0x10065bfd], 0
je 0x10025e76
push 0x42
call fcn.1002a530
cmp byte [0x10065bef], 0
je 0x10025e90
push 0x9a
call fcn.1002a530
push 0x6e
call fcn.1002a530
cmp byte [0x10065bf5], 0
je 0x10025ea3
push 0x174
call fcn.1002a530
cmp byte [0x10065c01], 0
je 0x10025eb3
push 0x52
call fcn.1002a530
cmp byte [0x10065bec], 0
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
je 0x10025f78
push 0x74
call esi
test al, 1
je 0x10025f78
mov ecx, dword [0x10065d0c]
mov esi, dword [0x10065ca8]
test ecx, ecx
jne 0x10025f55
push str.Function_KFXGame.KFXPlayer.RybStateTest
lea ecx, [ebp - 0x314]
call fcn.10029100
lea ecx, [ebp - 0x314]
mov dword [ebp - 4], 3
call fcn.100292c0
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x300]
mov dword [0x10065d0c], ecx
cmp eax, 0xf
jbe 0x10025f55
mov edx, dword [ebp - 0x314]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10025f45
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10026e6e
push ecx
push edx
call fcn.1002b078
mov ecx, dword [0x10065d0c]
add esp, 8
mov eax, dword [esi]
lea edx, [ebp - 0x220]
push 0
push edx
mov dword [ebp - 0x220], 1
mov eax, dword [eax + 0x10]
push ecx
mov ecx, esi
call eax
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp byte [0x10065bf2], 0
je 0x1002602e
push 0x76
call esi
test al, 1
je 0x1002602e
mov ecx, dword [0x10065cd4]
mov esi, dword [0x10065ca8]
test ecx, ecx
jne 0x10026014
push str.Function_Engine.PlayerController.BehindView
lea ecx, [ebp - 0x314]
call fcn.10029100
lea ecx, [ebp - 0x314]
mov dword [ebp - 4], 4
call fcn.100292c0
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x300]
mov dword [0x10065cd4], ecx
cmp eax, 0xf
jbe 0x10026014
mov edx, dword [ebp - 0x314]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10026004
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10026e73
push ecx
push edx
call fcn.1002b078
mov ecx, dword [0x10065cd4]
add esp, 8
mov eax, dword [esi]
lea edx, [ebp - 0x219]
push 0
push edx
mov byte [ebp - 0x219], 1
mov eax, dword [eax + 0x10]
push ecx
mov ecx, esi
call eax
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x78
call esi
cmp dword [0x10065bf8], 0
je 0x10026054
push 0x75
call esi
test al, 1
je 0x10026054
push dword [0x10065bf8]
call fcn.1002a530
cmp byte [0x10065bf7], 0
je 0x10026067
push 0x9a
call fcn.1002a530
cmp byte [0x10065bf1], 0
je 0x10026077
push 0x24
call fcn.1002a530
cmp byte [0x10065bff], 0
je 0x1002608a
push 0x140
call fcn.1002a530
cmp byte [0x10065bfc], 0
je 0x1002609d
push 0xe5
call fcn.1002a530
cmp byte [0x10065bf0], 0
je 0x100260b0
push 0xe7
call fcn.1002a530
cmp byte [0x10065bf6], 0
je 0x100260c8
push 0x7b
call esi
test al, 1
je 0x100260c8
push 0x1c
call fcn.1002a530
cmp dword [0x10065cac], 0
jne 0x1002614c
mov ecx, 0x18
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + str.Lboio_eOEJJ__bp__NxHV_ECW]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x23c], al
and ecx, 0x800000ff
jns 0x10026100
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x1b
jl 0x100260e0
mov byte [ebp - 0x221], 0
lea eax, [ebp - 0x23c]
mov dword [ebp - 4], 5
push eax
lea ecx, [ebp - 0x2e4]
call fcn.10029100
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 6
call fcn.100292c0
lea ecx, [ebp - 0x2e4]
mov dword [0x10065cac], eax
call fcn.100290b0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10065c98]
mov ecx, edi
movss xmm1, dword [0x1005e8e4]
movaps xmm2, xmm1
mov dword [ebp - 0x220], 0
movq xmm0, qword [eax + 0xaf0]
movq qword [0x10065c9c], xmm0
movss xmm0, dword [0x1005e91c]
mov eax, dword [eax + 0xaf8]
mov dword [0x10065ca4], eax
movss dword [ebp - 0x2c8], xmm0
call fcn.1002a110
mov ecx, dword [0x10065c98]
mov dword [ebp - 0x270], 0xffffffff
mov eax, dword [ebp - 0x270]
mov dword [edi + 0x78], eax
mov eax, dword [ecx + 0x7cc]
test eax, eax
je 0x10026da3
mov eax, dword [eax + 0x6e0]
test eax, eax
je 0x10026da3
cmp dword [ecx + 0x420], 0
je 0x10026da3
mov dword [ebp - 0x2cc], 0
test eax, eax
je 0x10026d76
xor esi, esi
nop
mov eax, dword [ecx + 0x7cc]
mov eax, dword [eax + 0x6dc]
mov esi, dword [eax + esi*4]
mov dword [ebp - 0x270], esi
test esi, esi
je 0x10026d51
mov eax, dword [edi + 0xd4]
cmp dword [eax + 0x34], 0
je 0x10026d51
test dword [esi + 0x78], 0x1000
jne 0x10026d51
cmp dword [esi + 0x54c], 0
jle 0x10026d51
mov edx, dword [ecx + 0x420]
test edx, edx
je 0x10026d51
cvttss2si eax, dword [esi + 0x544]
cmp dword [esi + 0x54c], eax
jg 0x10026d51
cmp dword [esi + 0x5e8], 0
je 0x10026d51
cmp dword [edx + 0x5e8], 0
je 0x10026d51
mov eax, dword [edx + 0xa4]
cmp eax, dword [esi + 0xa4]
jne 0x10026d51
cmp edx, esi
je 0x10026d51
mov edx, dword [esi + 0x5e8]
cmp dword [edx + 0x490], 0
je 0x10026d51
cmp byte [0x10064ad0], 0
je 0x100262d8
mov eax, dword [ecx + 0x890]
test eax, eax
je 0x100262d8
test byte [eax + 0x48c], 1
je 0x100262d8
mov eax, dword [ecx + 0x550]
test eax, eax
je 0x100262d8
mov eax, dword [eax + 0x4d0]
cmp eax, dword [edx + 0x4d0]
je 0x10026d51
mov dword [ebp - 0x290], 0x30706942
mov dword [ebp - 0x28c], 0x65482031
mov word [ebp - 0x288], 0x6461
mov byte [ebp - 0x286], 0
push ecx
lea eax, [ebp - 0x290]
mov dword [ebp - 4], 7
mov ecx, esp
push eax
call fcn.100253e0
lea eax, [ebp - 0x308]
mov ecx, esi
push eax
call fcn.100256b0
add esp, 8
movq xmm0, qword [eax]
mov ecx, dword [eax + 8]
mov dword [ebp - 4], 0xffffffff
movq qword [ebp - 0x320], xmm0
movq qword [ebp - 0x2c4], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x290], xmm0
movq qword [ebp - 0x354], xmm0
movq xmm0, qword [eax]
mov eax, ecx
movq qword [ebp - 0x330], xmm0
mov dword [ebp - 0x328], eax
movss xmm0, dword [ebp - 0x328]
addss xmm0, dword [0x1005e8dc]
mov eax, dword [esi + 0x2e4]
mov dword [ebp - 0x318], ecx
movss xmm2, dword [ebp - 0x318]
mov dword [ebp - 0x334], eax
movss xmm1, dword [ebp - 0x334]
movss dword [ebp - 0x328], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x2b4], xmm0
movq xmm0, qword [esi + 0x2dc]
movq qword [ebp - 0x33c], xmm0
movaps xmm0, xmm2
subss xmm0, dword [esi + 0x2e4]
subss xmm2, dword [0x10065ca4]
mov dword [ebp - 0x280], ecx
mov word [ebp - 0x288], 0
mov byte [ebp - 0x286], 0
subss xmm1, xmm0
mov dword [ebp - 0x34c], 0
xorps xmm0, xmm0
mulss xmm2, xmm2
mov dword [ebp - 0x2ac], 0
movq qword [ebp - 0x348], xmm0
movss xmm0, dword [ebp - 0x31c]
subss xmm1, dword [0x1005e8e8]
subss xmm0, dword [0x10065ca0]
mov dword [ebp - 0x340], 0
movss dword [ebp - 0x334], xmm1
movss xmm1, dword [ebp - 0x320]
subss xmm1, dword [0x10065c9c]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
addss xmm0, xmm2
call fcn.100125c0
mov ecx, dword [0x10065cd8]
mov eax, dword [0x10065c98]
movss dword [ebp - 0x2bc], xmm0
mov dword [ebp - 0x26c], 0x1f03434
mov dword [ebp - 0x278], eax
test ecx, ecx
jne 0x100264f6
push str.Function_Engine.Actor.FastTrace
lea ecx, [ebp - 0x2e4]
call fcn.10029100
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], 8
call fcn.100292c0
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2d0]
mov dword [0x10065cd8], ecx
cmp eax, 0xf
jbe 0x100264f6
mov edx, dword [ebp - 0x2e4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x100264e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10026dbe
push ecx
push edx
call fcn.1002b078
mov ecx, dword [0x10065cd8]
add esp, 8
movq xmm0, qword [ebp - 0x2c4]
mov eax, dword [ebp - 0x280]
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x234], eax
mov eax, dword [0x10065ca4]
movq qword [ebp - 0x23c], xmm0
movq xmm0, qword [0x10065c9c]
mov dword [ebp - 0x228], eax
xor eax, eax
movq qword [ebp - 0x230], xmm0
movzx esi, word [ecx + 0x88]
or dword [ecx + 0x84], 0xfffffbff
mov word [ecx + 0x88], ax
mov eax, dword [edx]
lea edx, [ebp - 0x23c]
push 0
push edx
push ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x278]
call eax
mov eax, dword [0x10065cd8]
or dword [eax + 0x84], 0x400
mov word [eax + 0x88], si
cmp byte [ebp - 0x224], 0
je 0x10026599
mov dword [ebp - 0x294], 0xffff0000
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x26c], eax
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x320]
call fcn.10025810
test al, al
je 0x10026d4b
lea edx, [ebp - 0x2b4]
lea ecx, [ebp - 0x330]
call fcn.10025810
test al, al
je 0x10026d4b
lea edx, [ebp - 0x348]
lea ecx, [ebp - 0x33c]
call fcn.10025810
test al, al
je 0x10026d4b
cmp byte [0x10065ba6], 0
movss xmm2, dword [ebp - 0x344]
subss xmm2, dword [ebp - 0x2b0]
movss xmm1, dword [ebp - 0x2b4]
movss dword [ebp - 0x284], xmm1
andps xmm2, xmmword [0x1005ef10]
movaps xmm0, xmm2
movss dword [ebp - 0x27c], xmm2
mulss xmm0, dword [0x1005e834]
movss dword [ebp - 0x278], xmm0
mulss xmm0, dword [0x1005e834]
subss xmm1, xmm0
movss dword [ebp - 0x2b8], xmm1
je 0x100267a8
mov eax, dword [0x10065cb0]
mov edx, dword [0x10065cf8]
mov dword [ebp - 0x2c0], eax
movss xmm1, dword [eax + 0x60]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [0x10065c98]
movss dword [ebp - 0x280], xmm1
movss dword [ebp - 0x274], xmm0
movss xmm1, dword [eax + 0x42c]
movss dword [ebp - 0x324], xmm1
test edx, edx
jne 0x10026704
push str.Function_Engine.Canvas.DrawActorClipped
lea ecx, [ebp - 0x2e4]
call fcn.10029100
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], 9
call fcn.100292c0
mov dword [ebp - 4], 0xffffffff
mov edx, eax
mov ecx, dword [ebp - 0x2d0]
mov dword [0x10065cf8], edx
cmp ecx, 0xf
jbe 0x100266fc
mov edx, dword [ebp - 0x2e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100266ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10026dbe
push ecx
push edx
call fcn.1002b078
mov edx, dword [0x10065cf8]
add esp, 8
movss xmm0, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x270]
xor eax, eax
movss dword [ebp - 0x250], xmm0
movss xmm0, dword [ebp - 0x280]
movss dword [ebp - 0x24c], xmm0
movss xmm0, dword [ebp - 0x324]
mov dword [ebp - 0x260], ecx
mov ecx, dword [ebp - 0x2c0]
mov byte [ebp - 0x25c], 1
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0
mov byte [ebp - 0x248], 1
movss dword [ebp - 0x244], xmm0
movzx esi, word [edx + 0x88]
or dword [edx + 0x84], 0xfffffbff
push eax
mov word [edx + 0x88], ax
lea eax, [ebp - 0x260]
push eax
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 0x10]
call eax
mov eax, dword [0x10065cf8]
movss xmm2, dword [ebp - 0x27c]
or dword [eax + 0x84], 0x400
mov word [eax + 0x88], si
cmp byte [0x10065c11], 0
mov esi, dword [ebp - 0x270]
je 0x10026956
movss xmm1, dword [esi + 0x544]
movd xmm0, dword [esi + 0x54c]
divss xmm1, xmm2
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
call fcn.100125f0
movss xmm1, dword [ebp - 0x27c]
mov ecx, dword [0x10065cb0]
subss xmm1, xmm0
movss xmm0, dword [esi + 0x544]
mulss xmm0, dword [0x1005e834]
movss dword [ebp - 0x280], xmm1
movd xmm1, dword [esi + 0x54c]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x1002685f
subss xmm1, xmm0
mov word [ebp - 0x298], 0xff00
mov byte [ebp - 0x295], 0xff
mulss xmm1, dword [0x1005e8f0]
divss xmm1, xmm0
movss xmm0, dword [0x1005e8fc]
mulss xmm1, xmm0
divss xmm1, dword [0x1005e8f0]
subss xmm0, xmm1
cvttss2si eax, xmm0
mov byte [ebp - 0x296], al
mov eax, dword [ebp - 0x298]
jmp 0x1002689b
mulss xmm1, dword [0x1005e8f0]
mov byte [ebp - 0x29c], 0
mov word [ebp - 0x29a], 0xffff
divss xmm1, xmm0
mulss xmm1, dword [0x1005e8fc]
divss xmm1, dword [0x1005e8f0]
cvttss2si eax, xmm1
mov byte [ebp - 0x29b], al
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x274]
push eax
call fcn.10029f30
movss xmm0, dword [ebp - 0x2b8]
subss xmm0, dword [0x1005e8b0]
movss xmm2, dword [ebp - 0x2b0]
addss xmm2, dword [0x1005e864]
mov ecx, dword [0x10065cb0]
movaps xmm1, xmm0
movss dword [ebp - 0x274], xmm0
call fcn.1002a110
movss xmm3, dword [ebp - 0x27c]
subss xmm3, dword [0x1005e884]
movss xmm2, dword [0x1005e8ac]
push ecx
subss xmm3, dword [ebp - 0x280]
call fcn.1002a010
mov ecx, dword [0x10065cb0]
lea eax, [ebp - 0x2a0]
push eax
mov dword [ebp - 0x2a0], 0xff0a190a
call fcn.10029f30
movss xmm2, dword [ebp - 0x2b0]
movss xmm1, dword [ebp - 0x274]
mov ecx, dword [0x10065cb0]
call fcn.1002a110
movss xmm3, dword [ebp - 0x27c]
movss xmm2, dword [0x1005e8ac]
push ecx
call fcn.10029e30
cmp byte [0x10065ba5], 0
je 0x10026963
or dword [esi + 0x40], 2
cmp byte [0x10065c10], 0
je 0x100269af
mov ecx, dword [0x10065cb0]
lea eax, [ebp - 0x26c]
push eax
call fcn.10029f30
movss xmm2, dword [ebp - 0x2b0]
movss xmm1, dword [ebp - 0x2b8]
mov ecx, dword [0x10065cb0]
call fcn.1002a110
movss xmm3, dword [ebp - 0x27c]
movss xmm2, dword [ebp - 0x278]
push ecx
call fcn.10029e30
cmp byte [0x10065c0b], 0
je 0x10026abe
mov eax, dword [0x10065c0c]
test eax, eax
jne 0x10026a19
lea eax, [ebp - 0x26c]
mov ecx, edi
push eax
call fcn.10029f30
movss xmm2, dword [edi + 0x60]
mov ecx, edi
divss xmm2, dword [0x1005e8ec]
movss xmm1, dword [edi + 0x5c]
mulss xmm1, dword [0x1005e834]
call fcn.1002a110
movss xmm2, dword [ebp - 0x2b0]
addss xmm2, dword [0x1005e8d8]
movss xmm1, dword [ebp - 0x284]
push ecx
mov ecx, edi
call fcn.1002a200
mov eax, dword [0x10065c0c]
cmp eax, 1
jne 0x10026a72
lea eax, [ebp - 0x26c]
mov ecx, edi
push eax
call fcn.10029f30
movss xmm2, dword [edi + 0x60]
mov ecx, edi
movss xmm1, dword [edi + 0x5c]
mulss xmm2, dword [0x1005e834]
mulss xmm1, dword [0x1005e834]
call fcn.1002a110
movss xmm2, dword [ebp - 0x2b0]
addss xmm2, dword [0x1005e8d8]
movss xmm1, dword [ebp - 0x284]
push ecx
mov ecx, edi
call fcn.1002a200
mov eax, dword [0x10065c0c]
cmp eax, 2
jne 0x10026abe
lea eax, [ebp - 0x26c]
mov ecx, edi
push eax
call fcn.10029f30
movss xmm1, dword [edi + 0x5c]
mov ecx, edi
mulss xmm1, dword [0x1005e834]
movss xmm2, dword [edi + 0x60]
call fcn.1002a110
movss xmm2, dword [ebp - 0x2b0]
addss xmm2, dword [ebp - 0x27c]
movss xmm1, dword [ebp - 0x284]
push ecx
mov ecx, edi
call fcn.1002a200
cmp byte [0x10065c09], 0
je 0x10026cca
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.1002d2a0
mov eax, dword [esi + 0x5e8]
add esp, 0xc
test eax, eax
je 0x10026b05
push dword [eax + 0x490]
lea eax, [ebp - 0x218]
push 0x1005e178
push eax
call fcn.100293a0
add esp, 0xc
lea eax, [ebp - 0x26c]
mov ecx, edi
push eax
call fcn.10029f30
movss xmm0, dword [ebp - 0x278]
divss xmm0, dword [0x1005e8ac]
mov ecx, dword [0x10065cb0]
movss xmm1, dword [ebp - 0x284]
movss xmm2, dword [ebp - 0x2b0]
subss xmm1, xmm0
call fcn.1002a110
cmp word [ebp - 0x218], 0
mov dword [ebp - 0x2a4], 0xc8000000
mov dword [ebp - 0x2f0], 0
je 0x10026ba0
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10026b70
sub ecx, edx
sar ecx, 1
lea eax, [ecx + 1]
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], eax
test eax, eax
je 0x10026bb4
lea eax, [ebp - 0x218]
mov dword [ebp - 0x2f0], eax
jmp 0x10026bb4
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0
push ecx
lea eax, [ebp - 0x2a4]
mov ecx, edi
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.1002a330
cmp byte [0x10065c0a], 0
je 0x10026cca
movss xmm0, dword [ebp - 0x2bc]
lea eax, [ebp - 0x218]
divss xmm0, dword [0x1005e8f0]
sub esp, 8
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push eax
push str._s___1.0f_
push eax
call fcn.100293a0
add esp, 0x14
lea eax, [ebp - 0x26c]
mov ecx, edi
push eax
call fcn.10029f30
movss xmm1, dword [ebp - 0x278]
divss xmm1, dword [0x1005e8d0]
mov ecx, dword [0x10065cb0]
movss xmm0, dword [ebp - 0x284]
movss xmm2, dword [ebp - 0x2b0]
subss xmm0, xmm1
movaps xmm1, xmm0
call fcn.1002a110
cmp word [ebp - 0x218], 0
mov dword [ebp - 0x2a8], 0xc8000000
mov dword [ebp - 0x2fc], 0
je 0x10026ca0
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10026c70
sub ecx, edx
sar ecx, 1
lea eax, [ecx + 1]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], eax
test eax, eax
je 0x10026cb4
lea eax, [ebp - 0x218]
mov dword [ebp - 0x2fc], eax
jmp 0x10026cb4
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0
push ecx
lea eax, [ebp - 0x2a8]
mov ecx, edi
push eax
lea eax, [ebp - 0x2fc]
push eax
call fcn.1002a330
mov eax, dword [0x10065c98]
lea ecx, [ebp - 0x360]
push ecx
mov ecx, dword [eax + 0x420]
call fcn.10029d20
mov ecx, dword [ebp - 0x270]
mov esi, eax
lea eax, [ebp - 0x36c]
push eax
call fcn.10029d20
movss xmm2, dword [eax]
movss xmm0, dword [eax + 4]
subss xmm0, dword [esi + 4]
subss xmm2, dword [esi]
movss xmm1, dword [eax + 8]
subss xmm1, dword [esi + 8]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.100125c0
movss xmm1, dword [ebp - 0x2c8]
comiss xmm1, xmm0
jbe 0x10026d4b
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x220], eax
movss dword [ebp - 0x2c8], xmm0
mov ecx, dword [0x10065c98]
mov esi, dword [ebp - 0x2cc]
mov eax, dword [ecx + 0x7cc]
inc esi
mov dword [ebp - 0x2cc], esi
cmp esi, dword [eax + 0x6e0]
jb 0x100261f0
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp byte [0x10065c08], 0
je 0x10026da3
mov edi, dword [ebp - 0x220]
test edi, edi
je 0x10026da3
mov eax, dword [0x10065bac]
push dword [eax*4 + 0x1005df30]
call esi
test ax, ax
jns 0x10026da3
mov ecx, edi
call fcn.10025960
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002ab5b
mov esp, ebp
pop ebp
ret
call fcn.1003acbd
push 0x10065d30
call fcn.1002abe5
add esp, 4
cmp dword [0x10065d30], 0xffffffff
jne 0x10025e28
mov dword [ebp - 4], 1
lea eax, [ebp - 0x2e4]
movaps xmm0, xmmword [0x1005ef30]
lea ecx, [ebp - 0x268]
movups xmmword [ebp - 0x268], xmm0
push eax
movaps xmm0, xmmword [0x1005ef50]
movups xmmword [ebp - 0x258], xmm0
mov dword [ebp - 0x248], 0xbdbc96a4
mov dword [ebp - 0x244], 0xa9bdaf89
mov word [ebp - 0x240], 0xbb
mov byte [ebp - 0x23e], 1
call fcn.1002a8e0
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 2
call fcn.100292c0
lea ecx, [ebp - 0x2e4]
mov dword [0x10065d2c], eax
call fcn.100290b0
push 0x10065d30
mov dword [ebp - 4], 0xffffffff
call fcn.1002ab94
add esp, 4
jmp 0x10025e28
call fcn.1003acbd
call fcn.1003acbd
int3