Function at 0x1018ea4a
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10230a23
mov eax, dword fs:[0]
push eax
sub esp, 0x204
mov eax, dword [0x102d944c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, dword [ebp + 8]
lea esi, [ebp - 0x180]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x194], 0
mov ecx, dword [0x1054dfe4]
mov dword [ebp - 0x18c], eax
push esi
push dword [edx + 0x64]
mov eax, dword [ecx]
mov dword [ebp - 0x190], edx
mov eax, dword [eax + 0x20]
call eax
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d0], 0
push 0x102592ff
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x1cc], 0
movups xmmword [ebp - 0x1e0], xmm0
call fcn.100bd420
lea edx, [ebp - 0xec]
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x1018e6c0
mov edi, dword [ebp - 0x1cc]
lea eax, [ebp - 0xec]
mov esi, dword [ebp - 0x1e0]
sub edx, ecx
push edx
mov edx, dword [ebp - 0x1d0]
lea ecx, [ebp - 0x1e0]
cmp edi, 0x10
push eax
cmovae ecx, esi
call fcn.100bfc80
add esp, 8
mov byte [ebp - 0x181], al
cmp edi, 0x10
jb 0x1018e733
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x1018e723
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f337
push ecx
push esi
call fcn.101fb2ba
mov al, byte [ebp - 0x181]
add esp, 8
test al, al
jne 0x1018f2d4
cmp byte [ebp - 0x44], 0
lea edx, [ebp - 0x170]
lea eax, [ebp - 0xec]
mov dword [ebp - 0x1d0], 0
cmove edx, eax
mov dword [ebp - 0x1cc], 0
mov ecx, edx
xorps xmm0, xmm0
movups xmmword [ebp - 0x1e0], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1018e771
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1e0]
call fcn.100bd420
lea eax, [ebp - 0x1e0]
mov dword [ebp - 4], 0
push eax
mov edx, str.plist_
lea ecx, [ebp - 0x210]
call fcn.100db850
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 1
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x1018e7d4
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0x10
jb 0x1018e7cc
mov eax, dword [ecx]
mov word [eax + edx], 0x5f
jmp 0x1018e7f1
push 1
push 0x102b8b24
mov byte [ebp - 0x198], 0
push dword [ebp - 0x198]
push 1
call fcn.100bd860
mov ecx, eax
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1fc]
cmp ecx, 0x10
jb 0x1018e851
mov edx, dword [ebp - 0x210]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018e847
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f2f1
push ecx
push edx
call fcn.101fb2ba
add esp, 8
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0xf
mov byte [ebp - 0x210], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1cc]
cmp ecx, 0x10
jb 0x1018e8aa
mov edx, dword [ebp - 0x1e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018e8a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f2f1
push ecx
push edx
call fcn.101fb2ba
add esp, 8
mov ecx, dword [ebp - 0x18]
mov edi, 0x7fffffff
mov eax, edi
mov dword [ebp - 0x1d0], 0
sub eax, ecx
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
cmp eax, 5
jb 0x1018f2f6
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 5
cmovae eax, dword [ebp - 0x28]
push str.pitch
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1c8]
call fcn.100dc6b0
mov esi, 0x30
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x1c8]
mov byte [ebp - 4], 5
push eax
mov ecx, 0x105509a8
call fcn.100b9b80
mov al, byte [eax]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1b4]
mov byte [ebp - 0x181], al
cmp ecx, 0x10
jb 0x1018e96c
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018e95c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f2fb
push ecx
push edx
call fcn.101fb2ba
mov al, byte [ebp - 0x181]
add esp, 8
test al, al
je case.default.0x1018ea2e
mov ecx, dword [ebp - 0x18]
mov eax, edi
sub eax, ecx
cmp eax, 9
jb 0x1018f300
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 9
cmovae eax, dword [ebp - 0x28]
push str.pitchtype
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1b0]
call fcn.100dc6b0
mov esi, 0x70
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 6
push eax
mov ecx, 0x105509c8
call fcn.100b9b60
mov esi, dword [eax]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x19c]
cmp ecx, 0x10
jb 0x1018ea0a
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018ea00
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f305
push ecx
push edx
call fcn.101fb2ba
add esp, 8
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
cmp esi, 3
ja case.default.0x1018ea2e
jmp dword [esi*4 + 0x1018f34c]
mov esi, dword [ebp - 0x18c]
mov dword [esi + 0x39d8], 0x42b20000
jmp 0x1018eb40
mov esi, dword [ebp - 0x18c]
mov dword [esi + 0x39d8], 0xc2b20000
jmp 0x1018eb40
mov eax, dword [0x1054e140]
sub esp, 8
mov dword [ebp - 0x198], eax
mov dword [esp + 4], 0x42b20000
mov dword [esp], 0xc2b20000
call dword [ebp - 0x198]
mov esi, dword [ebp - 0x18c]
add esp, 8
fstp dword [esi + 0x39d8]
jmp 0x1018eb40
mov ecx, dword [ebp - 0x18]
mov eax, edi
sub eax, ecx
cmp eax, 8
jb 0x1018f30a
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 8
cmovae eax, dword [ebp - 0x28]
push str.pitchval
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1c8]
call fcn.100dc6b0
mov esi, 0x270
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x1c8]
mov byte [ebp - 4], 7
push eax
mov ecx, 0x105509e8
call fcn.100b9b40
mov esi, dword [ebp - 0x18c]
mov eax, dword [eax]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1b4]
mov dword [esi + 0x39d8], eax
cmp ecx, 0x10
jb 0x1018eb40
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018eb2e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f30f
push ecx
push edx
call fcn.101fb2ba
add esp, 8
jmp 0x1018eb40
mov esi, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x190]
imul eax, dword [eax + 0x64], 0x3ba4
lea eax, [eax + 0x103f2d70]
mov dword [ebp - 0x198], eax
test eax, eax
je 0x1018f2a4
cmp dword [eax + 0x10], 0
je 0x1018f2a4
mov ecx, dword [ebp - 0x18]
mov eax, edi
sub eax, ecx
cmp eax, 3
jb 0x1018f314
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 3
cmovae eax, dword [ebp - 0x28]
push 0x102bb614
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1c8]
call fcn.100dc6b0
mov eax, dword [ebp - 0x188]
or eax, 0x80
or eax, 1
mov byte [ebp - 4], 8
mov dword [ebp - 0x188], eax
mov ecx, 0x105509a8
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x1c8]
push eax
call fcn.100b9b80
cmp byte [eax], 0
je 0x1018ec56
cmp dword [esi + 0x3a40], 2
jne 0x1018ec56
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x1a0], 0
push str.override_key
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x19c], 0
movups xmmword [ebp - 0x1b0], xmm0
call fcn.100bd420
mov dword [ebp - 4], 9
lea eax, [ebp - 0x1b0]
mov esi, dword [ebp - 0x188]
mov ecx, 0x10550928
or esi, 2
push eax
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x194], esi
call fcn.100b9b60
push dword [eax]
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
shr eax, 0x10
mov byte [ebp - 0x181], 1
test eax, eax
je 0x1018ec5d
mov byte [ebp - 0x181], 0
mov dword [ebp - 4], 8
mov eax, dword [ebp - 0x188]
test al, 2
je 0x1018ecd2
mov ecx, dword [ebp - 0x19c]
and eax, 0xfffffffd
mov dword [ebp - 0x188], eax
cmp ecx, 0x10
jb 0x1018ecb7
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018eca7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f319
push ecx
push edx
call fcn.101fb2ba
mov eax, dword [ebp - 0x188]
add esp, 8
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
mov dword [ebp - 4], 4
test al, 1
je 0x1018ed20
mov ecx, dword [ebp - 0x1b4]
and eax, 0xfffffffe
mov dword [ebp - 0x188], eax
cmp ecx, 0x10
jb 0x1018ed20
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018ed16
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f319
push ecx
push edx
call fcn.101fb2ba
add esp, 8
cmp byte [ebp - 0x181], 0
je 0x1018f0e8
mov ecx, dword [ebp - 0x18]
mov eax, edi
sub eax, ecx
cmp eax, 7
jb 0x1018f31e
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 7
cmovae eax, dword [ebp - 0x28]
push str.yawmode
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1b0]
call fcn.100dc6b0
mov esi, dword [ebp - 0x188]
or esi, 0x100
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0xa
push eax
mov ecx, 0x105509c8
call fcn.100b9b60
mov eax, dword [eax]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x194], eax
cmp ecx, 0x10
jb 0x1018edd6
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018edc6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f323
push ecx
push edx
call fcn.101fb2ba
mov eax, dword [ebp - 0x194]
add esp, 8
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
cmp eax, 3
ja case.default.0x1018edfa
jmp dword [eax*4 + 0x1018f35c]
mov eax, dword [ebp - 0x198]
mov edi, dword [ebp - 0x18c]
mov eax, dword [eax + 0x3b6c]
mov dword [edi + 0x39dc], eax
jmp 0x1018f0f4
mov edi, dword [ebp - 0x18c]
push edi
call fcn.101d89a0
jmp 0x1018f0f4
mov eax, dword [ebp - 0x198]
mov edi, dword [ebp - 0x18c]
mov eax, dword [eax + 0x3a10]
mov dword [edi + 0x39dc], eax
jmp 0x1018f0f4
mov ecx, dword [ebp - 0x18]
mov eax, edi
sub eax, ecx
cmp eax, 7
jb 0x1018f328
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 7
cmovae eax, dword [ebp - 0x28]
push str.yawtype
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1c8]
call fcn.100dc6b0
or esi, 0x400
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x1c8]
mov byte [ebp - 4], 0xb
push eax
mov ecx, 0x105509c8
call fcn.100b9b60
mov eax, dword [eax]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x194], eax
cmp ecx, 0x10
jb 0x1018eeef
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018eedf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f32d
push ecx
push edx
call fcn.101fb2ba
mov eax, dword [ebp - 0x194]
add esp, 8
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b4], 0xf
mov byte [ebp - 0x1c8], 0
sub eax, 0
je 0x1018f07c
sub eax, 1
je 0x1018efd5
sub eax, 1
jne case.default.0x1018edfa
mov ecx, dword [ebp - 0x18]
sub edi, ecx
cmp edi, 6
jb 0x1018f332
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 6
cmovae eax, dword [ebp - 0x28]
push str.yawval
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1f8]
call fcn.100dc6b0
or esi, 0x800
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x1f8]
mov byte [ebp - 4], 0xe
push eax
mov ecx, 0x105509e8
call fcn.100b9b40
mov edi, dword [ebp - 0x18c]
movss xmm0, dword [edi + 0x39dc]
subss xmm0, dword [eax]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1e4]
movss dword [edi + 0x39dc], xmm0
cmp ecx, 0x10
jb 0x1018f0f4
mov edx, dword [ebp - 0x1f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018f070
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f337
jmp 0x1018f070
mov ecx, dword [ebp - 0x18]
sub edi, ecx
cmp edi, 6
jb 0x1018f33c
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 6
cmovae eax, dword [ebp - 0x28]
push str.yawval
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1f8]
call fcn.100dc6b0
or esi, 0x2000
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x1f8]
mov byte [ebp - 4], 0xd
push eax
mov ecx, 0x105509e8
call fcn.100b9b40
mov edi, dword [ebp - 0x18c]
mov eax, dword [eax]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1e4]
mov dword [edi + 0x39dc], eax
cmp ecx, 0x10
jb 0x1018f0f4
mov edx, dword [ebp - 0x1f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018f070
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f341
push ecx
push edx
call fcn.101fb2ba
add esp, 8
jmp 0x1018f0f4
mov ecx, dword [ebp - 0x18]
sub edi, ecx
cmp edi, 6
jb 0x1018f346
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 6
cmovae eax, dword [ebp - 0x28]
push str.yawval
push ecx
push eax
push ecx
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1f8]
call fcn.100dc6b0
or esi, 0x1000
mov dword [ebp - 0x188], esi
lea eax, [ebp - 0x1f8]
mov byte [ebp - 4], 0xc
push eax
mov ecx, 0x105509e8
call fcn.100b9b40
mov edi, dword [ebp - 0x18c]
movss xmm0, dword [eax]
addss xmm0, dword [edi + 0x39dc]
jmp 0x1018ef8c
mov esi, dword [ebp - 0x188]
mov edi, dword [ebp - 0x18c]
cmp dword [edi + 0x3a40], 8
jne 0x1018f1c8
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x1b8], 0
push str.override_key
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1b4], 0
movups xmmword [ebp - 0x1c8], xmm0
call fcn.100bd420
lea eax, [ebp - 0x1c8]
mov byte [ebp - 4], 0xf
or esi, 4
mov ecx, 0x10550928
push eax
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x194], esi
call fcn.100b9b60
push dword [eax]
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
shr eax, 0x10
test eax, eax
je 0x1018f1c8
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x1a0], 0
push str.override
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x19c], 0
movups xmmword [ebp - 0x1b0], xmm0
call fcn.100bd420
lea eax, [ebp - 0x1b0]
mov dword [ebp - 4], 0x10
or esi, 8
mov ecx, 0x10550908
push eax
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x194], esi
call fcn.100b9b80
mov byte [ebp - 0x181], 1
cmp byte [eax], 0
jne 0x1018f1cf
mov byte [ebp - 0x181], 0
mov dword [ebp - 4], 0xf
mov eax, dword [ebp - 0x188]
test al, 8
je 0x1018f244
mov ecx, dword [ebp - 0x19c]
and eax, 0xfffffff7
mov dword [ebp - 0x188], eax
cmp ecx, 0x10
jb 0x1018f229
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018f219
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f337
push ecx
push edx
call fcn.101fb2ba
mov eax, dword [ebp - 0x188]
add esp, 8
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
mov dword [ebp - 4], 4
test al, 4
je 0x1018f289
mov ecx, dword [ebp - 0x1b4]
cmp ecx, 0x10
jb 0x1018f289
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018f27f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f337
push ecx
push edx
call fcn.101fb2ba
add esp, 8
cmp byte [ebp - 0x181], 0
je 0x1018f2a4
push dword [ebp - 0x190]
push edi
push dword [ebp - 0x198]
call fcn.101d90e0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x1018f2d4
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1018f2ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1018f337
push ecx
push edx
call fcn.101fb2ba
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101fae3a
mov esp, ebp
pop ebp
ret 8
call fcn.10201dbe
call fcn.100a31c0
call fcn.10201dbe
call fcn.100a31c0
call fcn.10201dbe
call fcn.100a31c0
call fcn.10201dbe
call fcn.100a31c0
call fcn.10201dbe
call fcn.100a31c0
call fcn.10201dbe
call fcn.100a31c0
call fcn.10201dbe
call fcn.100a31c0
call fcn.10201dbe
call fcn.100a31c0
call fcn.10201dbe
call fcn.100a31c0
nop
xor eax, 0x4a1018ea
ljmp 125919