Function at 0x1006d39f
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x100c6ce0
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101433ab
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x8d0
mov eax, dword [0x10165f34]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x108cb737
call fcn.1006d309
cmp dword [0x10166a24], 0
je 0x100c91c5
mov ecx, dword [0x10166a24]
call fcn.1006a41f
movzx eax, al
test eax, eax
je 0x100c91c5
mov ecx, dword [0x10166a24]
call fcn.1006bb94
test eax, eax
jne 0x100c6d62
jmp 0x100c91c5
mov eax, dword [0x108c6348]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x14]
mov dword [ebp - 0x8cc], edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [0x108c6348]
call dword [ebp - 0x8cc]
call fcn.1006d115
movzx eax, byte [eax + 0x11]
test eax, eax
je 0x100c7555
mov dword [ebp - 0x28], 0
jmp 0x100c6da9
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xd
jge 0x100c7555
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [0x10166a24]
call fcn.1006d476
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x48]
call fcn.1006c10c
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x2c]
movss xmm0, dword [eax + 0x20]
movss dword [ebp - 0x4c], xmm0
mov eax, dword [ebp - 0x2c]
movss xmm0, dword [eax + 0x2c]
movss dword [ebp - 0x50], xmm0
mov eax, dword [ebp - 0x2c]
movss xmm0, dword [eax + 0x1c]
movss dword [ebp - 0x54], xmm0
mov eax, dword [ebp - 0x2c]
movss xmm0, dword [eax + 0x28]
movss dword [ebp - 0x58], xmm0
mov eax, dword [ebp - 0x2c]
movss xmm0, dword [eax + 0x24]
movss dword [ebp - 0x5c], xmm0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x8cc], ecx
cvtsi2sd xmm0, dword [ebp - 0x8cc]
mov edx, dword [ebp - 0x8cc]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x1014d410]
movsd qword [ebp - 0x8d8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x8d8]
movss dword [ebp - 0x60], xmm0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x8cc], ecx
cvtsi2sd xmm0, dword [ebp - 0x8cc]
mov edx, dword [ebp - 0x8cc]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x1014d410]
movsd qword [ebp - 0x8d8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x8d8]
movss dword [ebp - 0x64], xmm0
lea eax, [ebp - 0x288]
push eax
mov ecx, dword [0x10166a24]
call fcn.1006c3f5
mov ecx, eax
call fcn.1006c279
fstp dword [ebp - 0x8cc]
mov ecx, dword [ebp - 0x2c]
movss xmm0, dword [ebp - 0x8cc]
mulss xmm0, dword [ecx + 0x20]
movss dword [ebp - 0x68], xmm0
lea eax, [ebp - 0x294]
push eax
mov ecx, dword [0x10166a24]
call fcn.1006c3f5
mov ecx, eax
call fcn.1006c279
fstp dword [ebp - 0x8cc]
mov ecx, dword [ebp - 0x2c]
movss xmm0, dword [ebp - 0x8cc]
mulss xmm0, dword [ecx + 0x2c]
movss dword [ebp - 0x6c], xmm0
lea eax, [ebp - 0x2a0]
push eax
mov ecx, dword [0x10166a24]
call fcn.1006c3f5
mov ecx, eax
call fcn.1006c279
fstp dword [ebp - 0x8cc]
mov ecx, dword [ebp - 0x2c]
movss xmm0, dword [ebp - 0x8cc]
mulss xmm0, dword [ecx + 0x1c]
movss dword [ebp - 0x70], xmm0
call fcn.1006d115
cvtsi2ss xmm0, dword [eax + 0x14]
mov eax, dword [ebp - 0x2c]
mulss xmm0, dword [eax + 0x28]
movss dword [ebp - 0x74], xmm0
lea eax, [ebp - 0x2ac]
push eax
mov ecx, dword [0x10166a24]
call fcn.1006c3f5
mov ecx, eax
call fcn.1006c279
fstp dword [ebp - 0x8cc]
mov ecx, dword [ebp - 0x2c]
movss xmm0, dword [ebp - 0x8cc]
mulss xmm0, dword [ecx + 0x24]
movss dword [ebp - 0x78], xmm0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x8cc], ecx
cvtsi2sd xmm0, dword [ebp - 0x8cc]
mov edx, dword [ebp - 0x8cc]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x1014d410]
movsd qword [ebp - 0x8d8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x8d8]
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [0x10166a24]
movss dword [ebp - 0x8dc], xmm0
call fcn.1006c3f5
mov ecx, eax
call fcn.1006c279
fstp dword [ebp - 0x8e0]
movss xmm0, dword [ebp - 0x8dc]
mulss xmm0, dword [ebp - 0x8e0]
movss dword [ebp - 0x7c], xmm0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x8cc], ecx
cvtsi2sd xmm0, dword [ebp - 0x8cc]
mov edx, dword [ebp - 0x8cc]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x1014d410]
movsd qword [ebp - 0x8d8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x8d8]
lea eax, [ebp - 0x2c4]
push eax
mov ecx, dword [0x10166a24]
movss dword [ebp - 0x8dc], xmm0
call fcn.1006c3f5
mov ecx, eax
call fcn.1006c279
fstp dword [ebp - 0x8e0]
movss xmm0, dword [ebp - 0x8dc]
mulss xmm0, dword [ebp - 0x8e0]
movss dword [ebp - 0x80], xmm0
lea eax, [ebp - 0x2d0]
push eax
mov ecx, dword [0x10166a24]
call fcn.1006c3f5
mov ecx, eax
call fcn.1006c279
fstp dword [ebp - 0x84]
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x2ec]
push ecx
call fcn.1006a541
add esp, 8
mov dword [ebp - 0x8cc], eax
mov edx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x8d0]
push eax
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ec]
call fcn.1006bd38
push str._Weight:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x4c]
movss dword [esp], xmm0
lea eax, [ebp - 0x308]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x308]
call fcn.1006bd38
push str._Cycle:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x50]
movss dword [esp], xmm0
lea eax, [ebp - 0x324]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x324]
call fcn.1006bd38
push str._PrevCycle:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x54]
movss dword [esp], xmm0
lea eax, [ebp - 0x340]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x340]
call fcn.1006bd38
push str._PlaybackRate:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x58]
movss dword [esp], xmm0
lea eax, [ebp - 0x35c]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x35c]
call fcn.1006bd38
push str._WeightDeltaRate:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x5c]
movss dword [esp], xmm0
lea eax, [ebp - 0x378]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x378]
call fcn.1006bd38
push str._nOrder:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x60]
movss dword [esp], xmm0
lea eax, [ebp - 0x394]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x394]
call fcn.1006bd38
push str._nSeq:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x64]
movss dword [esp], xmm0
lea eax, [ebp - 0x3b0]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3b0]
call fcn.1006bd38
push str._PlaybackRate1:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x74]
movss dword [esp], xmm0
lea eax, [ebp - 0x3cc]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3cc]
call fcn.1006bd38
push str._Velocity:
lea ecx, [ebp - 0x48]
call fcn.1006c29c
push ecx
movss xmm0, dword [ebp - 0x84]
movss dword [esp], xmm0
lea eax, [ebp - 0x3e8]
push eax
call fcn.1006c1ca
add esp, 8
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x8d0]
push edx
lea ecx, [ebp - 0x48]
call fcn.1006c2a6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3e8]
call fcn.1006bd38
lea ecx, [ebp - 0x48]
call fcn.1006cd50
mov dword [ebp - 0x8cc], eax
mov eax, dword [0x108c2fa4]
mov dword [ebp - 0x8d0], eax
push 0xff
push 0xff
push 0xff
push 0xff
lea ecx, [ebp - 0x3f8]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x408], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x404], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x400], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x3fc], edx
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x404]
mov dword [ebp - 0x414], ecx
mov edx, dword [ebp - 0x400]
mov dword [ebp - 0x410], edx
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x418]
mov dword [ebp - 0x428], ecx
mov edx, dword [ebp - 0x414]
mov dword [ebp - 0x424], edx
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x40c]
mov dword [ebp - 0x41c], ecx
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0x420]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x41c]
mov dword [ebp - 0x42c], edx
imul ecx, dword [ebp - 0x28], 0xd
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov dword [ebp - 0x8d4], eax
mov edx, dword [ebp - 0x8cc]
push edx
push 0
mov eax, dword [ebp - 0x8d0]
push eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x438]
mov dword [ecx], edx
mov eax, dword [ebp - 0x434]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x430]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x42c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x8d4]
push ecx
push 0x1e
mov edx, dword [0x108c6388]
push edx
call fcn.1006ad8e
add esp, 0x28
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.1006bd38
jmp 0x100c6da0
mov eax, dword [0x108c6374]
mov ecx, dword [eax + 0x4d30]
mov dword [ebp - 0x88], ecx
push str.Fake
mov eax, dword [0x108c2fa4]
push eax
lea ecx, [ebp - 0x98]
push ecx
mov ecx, dword [0x108c6388]
call fcn.1006d921
push str.Choke
mov eax, dword [0x108c2fa4]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov ecx, dword [0x108c6388]
call fcn.1006d921
push str.Right
mov eax, dword [0x108c2fa4]
push eax
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [0x108c6388]
call fcn.1006d921
movzx eax, byte [0x10348d78]
test eax, eax
je 0x100c75ff
mov ecx, dword [0x10166a24]
call fcn.1006c706
fstp dword [ebp - 0x8cc]
movss xmm0, dword [ebp - 0x8cc]
cvtsi2ss xmm1, dword [ebp - 0x90]
divss xmm1, dword [0x101532a8]
mulss xmm0, xmm1
movss dword [ebp - 0xbc], xmm0
jmp 0x100c761f
cvtsi2ss xmm0, dword [ebp - 0x90]
divss xmm0, dword [0x101532a8]
mulss xmm0, dword [0x1014dd78]
movss dword [ebp - 0xbc], xmm0
cvtsi2ss xmm0, dword [ebp - 0x88]
cvtsi2ss xmm1, dword [ebp - 0xa0]
divss xmm1, dword [0x10153244]
mulss xmm0, xmm1
movss dword [ebp - 0xc0], xmm0
call fcn.1006d115
cmp dword [eax + 0x124], 4
jne 0x100c765d
mov dword [ebp - 0x8cc], 1
jmp 0x100c7667
mov dword [ebp - 0x8cc], 0
mov al, byte [ebp - 0x8cc]
mov byte [ebp - 0xc1], al
call fcn.1006d115
mov al, byte [eax + 0x26d]
mov byte [ebp - 0xc2], al
mov eax, dword [ebp - 0x18]
sub eax, 0x5a
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0x28
mov ecx, dword [0x10166a24]
call fcn.1006c706
fstp dword [ebp - 0x8cc]
movss xmm0, dword [ebp - 0x8cc]
divss xmm0, dword [0x101532a8]
mulss xmm0, dword [0x101512e4]
cvttss2si eax, xmm0
mov dword [ebp - 0xc8], eax
cvtsi2ss xmm0, dword [ebp - 0xc8]
movss xmm1, dword [0x101512e4]
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd0], 0
cvtsi2ss xmm0, dword [ebp - 0x88]
divss xmm0, dword [0x10153244]
mulss xmm0, dword [0x101512e4]
cvttss2si eax, xmm0
mov dword [ebp - 0xd4], eax
cvtsi2ss xmm0, dword [ebp - 0xd4]
movss xmm1, dword [0x101512e4]
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x100c80d1
call fcn.1006d115
mov eax, dword [eax + 0x2c8]
mov dword [ebp - 0x8cc], eax
call fcn.1006d115
mov ecx, dword [eax + 0x2c4]
mov dword [ebp - 0x8d0], ecx
call fcn.1006d115
mov edx, dword [eax + 0x2c0]
mov dword [ebp - 0x8d4], edx
push 0xff
mov eax, dword [ebp - 0x8cc]
push eax
mov ecx, dword [ebp - 0x8d0]
push ecx
mov edx, dword [ebp - 0x8d4]
push edx
lea ecx, [ebp - 0xf0]
call fcn.1006a230
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
sub eax, 8
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, 0x18
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x108]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, 0x28
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x100]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
add eax, 8
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, 0x18
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0xf8]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
add eax, 8
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x17
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x120]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x27
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x118]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
sub eax, 8
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x17
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x110]
call fcn.1006c760
call fcn.1006d115
cmp dword [eax + 0x124], 0
jne 0x100c7ce5
call fcn.1006d115
mov eax, dword [eax + 0x154]
push eax
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
test ecx, ecx
je 0x100c7928
push 0x19
push 0x7d
push 0x7d
push 0x7d
lea ecx, [ebp - 0x448]
call fcn.1006a230
mov dword [ebp - 0x8cc], eax
jmp 0x100c7964
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x458], edx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x454], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x450], ecx
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x44c], edx
lea eax, [ebp - 0x458]
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
sub esp, 0x10
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
sub esp, 0x18
mov edx, esp
mov eax, dword [ebp - 0x120]
mov dword [edx], eax
mov ecx, dword [ebp - 0x11c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x118]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x114]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x110]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0x10c]
mov dword [edx + 0x14], ecx
mov ecx, dword [0x108c6388]
call fcn.1006bf22
push 0xff
push 0
push 0
push 0
lea ecx, [ebp - 0x468]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x490], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x48c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x488], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x484], edx
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x4a0], eax
mov ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x49c], ecx
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x480], ecx
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x474], ecx
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x470], edx
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x46c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x4a0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x49c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x498]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x494]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov ecx, esp
mov edx, dword [ebp - 0x480]
mov dword [ecx], edx
mov eax, dword [ebp - 0x47c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x478]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x474]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x470]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x46c]
mov dword [ecx + 0x14], eax
push 3
mov ecx, dword [0x108c6388]
call fcn.1006b37e
call fcn.1006d115
mov eax, dword [eax + 0x154]
push eax
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
test ecx, ecx
je 0x100c7b41
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x4b0], edx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x4ac], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x4a4], edx
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0x8cc], eax
jmp 0x100c7b5a
push 0x19
push 0x7d
push 0x7d
push 0x7d
lea ecx, [ebp - 0x4c0]
call fcn.1006a230
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
sub esp, 0x10
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
sub esp, 0x18
mov edx, esp
mov eax, dword [ebp - 0x108]
mov dword [edx], eax
mov ecx, dword [ebp - 0x104]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x100]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xfc]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0xf8]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 0x14], ecx
mov ecx, dword [0x108c6388]
call fcn.1006bf22
push 0xff
push 0
push 0
push 0
lea ecx, [ebp - 0x4d0]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x4f8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x4f4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x4f0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x4ec], edx
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x4f0]
mov dword [ebp - 0x500], edx
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4fc], eax
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x4e0], eax
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x4dc], ecx
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x4d8], edx
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x4d4], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x508]
mov dword [ecx], edx
mov eax, dword [ebp - 0x504]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x500]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x4fc]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov ecx, esp
mov edx, dword [ebp - 0x4e8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x4e4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x4e0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x4dc]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x4d8]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x4d4]
mov dword [ecx + 0x14], eax
push 3
mov ecx, dword [0x108c6388]
call fcn.1006b37e
jmp 0x100c80d1
call fcn.1006d115
mov eax, dword [eax + 0x154]
push eax
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
test ecx, ecx
je 0x100c7d3c
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x518], edx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x510], ecx
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x50c], edx
lea eax, [ebp - 0x518]
mov dword [ebp - 0x8cc], eax
jmp 0x100c7d55
push 0x19
push 0x7d
push 0x7d
push 0x7d
lea ecx, [ebp - 0x528]
call fcn.1006a230
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
sub esp, 0x10
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
sub esp, 0x18
mov edx, esp
mov eax, dword [ebp - 0x120]
mov dword [edx], eax
mov ecx, dword [ebp - 0x11c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x118]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x114]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x110]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0x10c]
mov dword [edx + 0x14], ecx
mov ecx, dword [0x108c6388]
call fcn.1006bf22
push 0xff
push 0
push 0
push 0
lea ecx, [ebp - 0x538]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x560], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x55c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x558], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x554], edx
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x570], eax
mov ecx, dword [ebp - 0x55c]
mov dword [ebp - 0x56c], ecx
mov edx, dword [ebp - 0x558]
mov dword [ebp - 0x568], edx
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x564], eax
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x550], ecx
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x54c], edx
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x548], eax
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x544], ecx
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x540], edx
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x53c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x570]
mov dword [ecx], edx
mov eax, dword [ebp - 0x56c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x568]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x564]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov ecx, esp
mov edx, dword [ebp - 0x550]
mov dword [ecx], edx
mov eax, dword [ebp - 0x54c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x548]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x544]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x540]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x53c]
mov dword [ecx + 0x14], eax
push 3
mov ecx, dword [0x108c6388]
call fcn.1006b37e
call fcn.1006d115
mov eax, dword [eax + 0x154]
push eax
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
test ecx, ecx
je 0x100c7f0f
push 0x19
push 0x7d
push 0x7d
push 0x7d
lea ecx, [ebp - 0x580]
call fcn.1006a230
mov dword [ebp - 0x8cc], eax
jmp 0x100c7f4b
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x58c], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x588], ecx
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x584], edx
lea eax, [ebp - 0x590]
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
sub esp, 0x10
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
sub esp, 0x18
mov edx, esp
mov eax, dword [ebp - 0x108]
mov dword [edx], eax
mov ecx, dword [ebp - 0x104]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x100]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xfc]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0xf8]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 0x14], ecx
mov ecx, dword [0x108c6388]
call fcn.1006bf22
push 0xff
push 0
push 0
push 0
lea ecx, [ebp - 0x5a0]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x5c8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x5c4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x5c0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x5bc], edx
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x5d8], eax
mov ecx, dword [ebp - 0x5c4]
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5c0]
mov dword [ebp - 0x5d0], edx
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x5cc], eax
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x5b8], ecx
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x5b4], edx
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x5b0], eax
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x5ac], ecx
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x5a8], edx
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x5a4], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x5d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x5d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x5d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x5cc]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov ecx, esp
mov edx, dword [ebp - 0x5b8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x5b4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x5b0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x5ac]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x5a8]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x5a4]
mov dword [ecx + 0x14], eax
push 3
mov ecx, dword [0x108c6388]
call fcn.1006b37e
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x100c8646
call fcn.1006d115
mov eax, dword [eax + 0x2c8]
mov dword [ebp - 0x8cc], eax
call fcn.1006d115
mov ecx, dword [eax + 0x2c4]
mov dword [ebp - 0x8d0], ecx
call fcn.1006d115
mov edx, dword [eax + 0x2c0]
mov dword [ebp - 0x8d4], edx
push 0xff
mov eax, dword [ebp - 0x8cc]
push eax
mov ecx, dword [ebp - 0x8d0]
push ecx
mov edx, dword [ebp - 0x8d4]
push edx
lea ecx, [ebp - 0x130]
call fcn.1006a230
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
sub eax, 8
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, 0x18
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x148]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, 0x28
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x140]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
add eax, 8
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, 0x18
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x138]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
add eax, 8
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x17
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x160]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x27
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x158]
call fcn.1006c760
mov eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
sub eax, 8
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x17
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x150]
call fcn.1006c760
movzx eax, byte [0x1016501f]
test eax, eax
je 0x100c82b9
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x5e8], ecx
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x5e4], edx
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x5e0], eax
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x5dc], ecx
lea edx, [ebp - 0x5e8]
mov dword [ebp - 0x8cc], edx
jmp 0x100c82d5
push 0xb9
push 0x7d
push 0x7d
push 0x7d
lea ecx, [ebp - 0x5f8]
call fcn.1006a230
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x8cc]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov ecx, esp
mov edx, dword [ebp - 0x160]
mov dword [ecx], edx
mov eax, dword [ebp - 0x15c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x158]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x154]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x150]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x14c]
mov dword [ecx + 0x14], eax
mov ecx, dword [0x108c6388]
call fcn.1006bf22
push 0xff
push 0
push 0
push 0
lea ecx, [ebp - 0x608]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x630], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x62c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x628], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x624], edx
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0x62c]
mov dword [ebp - 0x63c], ecx
mov edx, dword [ebp - 0x628]
mov dword [ebp - 0x638], edx
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x634], eax
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x620], ecx
mov edx, dword [ebp - 0x15c]
mov dword [ebp - 0x61c], edx
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x618], eax
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x614], ecx
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x610], edx
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x60c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x640]
mov dword [ecx], edx
mov eax, dword [ebp - 0x63c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x638]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x634]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov ecx, esp
mov edx, dword [ebp - 0x620]
mov dword [ecx], edx
mov eax, dword [ebp - 0x61c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x618]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x614]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x610]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x60c]
mov dword [ecx + 0x14], eax
push 3
mov ecx, dword [0x108c6388]
call fcn.1006b37e
movzx eax, byte [0x1016501f]
test eax, eax
je 0x100c8484
push 0xb9
push 0x7d
push 0x7d
push 0x7d
lea ecx, [ebp - 0x650]
call fcn.1006a230
mov dword [ebp - 0x8cc], eax
jmp 0x100c84c0
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x660], ecx
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x65c], edx
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x658], eax
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x654], ecx
lea edx, [ebp - 0x660]
mov dword [ebp - 0x8cc], edx
mov eax, dword [ebp - 0x8cc]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov ecx, esp
mov edx, dword [ebp - 0x148]
mov dword [ecx], edx
mov eax, dword [ebp - 0x144]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x140]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x13c]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x138]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x134]
mov dword [ecx + 0x14], eax
mov ecx, dword [0x108c6388]
call fcn.1006bf22
push 0xff
push 0
push 0
push 0
lea ecx, [ebp - 0x670]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x698], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x694], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x690], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x68c], edx
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x694]
mov dword [ebp - 0x6a4], ecx
mov edx, dword [ebp - 0x690]
mov dword [ebp - 0x6a0], edx
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x69c], eax
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x688], ecx
mov edx, dword [ebp - 0x15c]
mov dword [ebp - 0x684], edx
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x67c], ecx
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x678], edx
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x674], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x6a8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x6a4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x6a0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x69c]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov ecx, esp
mov edx, dword [ebp - 0x688]
mov dword [ecx], edx
mov eax, dword [ebp - 0x684]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x680]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x67c]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x678]
mov dword [ecx + 0x10], edx
mov eax, dword [ebp - 0x674]
mov dword [ecx + 0x14], eax
push 3
mov ecx, dword [0x108c6388]
call fcn.1006b37e
movzx eax, byte [0x1016505a]
test eax, eax
je 0x100c88ed
mov eax, dword [0x108c2fa4]
mov dword [ebp - 0x8cc], eax
push 0xff
push 0xff
push 0xff
push 0xff
lea ecx, [ebp - 0x6b8]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x6c8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6c4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6c0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x6bc], edx
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x6d8], eax
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x6d4], ecx
mov edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6d0], edx
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6cc], eax
push str.Choke
push 1
mov ecx, dword [ebp - 0x8cc]
push ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x6d8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x6d4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x6d0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x6cc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0xe
push edx
mov eax, dword [ebp - 0xa0]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x1c]
sub ecx, 5
sub ecx, dword [ebp - 0xe0]
add ecx, eax
push ecx
mov edx, dword [0x108c6388]
push edx
call fcn.1006ad8e
add esp, 0x28
push 0xb9
push 0
push 0
push 0
lea ecx, [ebp - 0x6e8]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6f4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6f0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x6ec], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x6f8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x6f4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x6f0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x6ec]
mov dword [eax + 0xc], edx
push 4
mov eax, dword [ebp - 0xa0]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
sub edx, 5
sub edx, dword [ebp - 0xe0]
push edx
mov ecx, dword [0x108c6388]
call fcn.1006a082
push 0xff
mov eax, dword [ebp - 0xdc]
push eax
mov ecx, dword [ebp - 0xd4]
push ecx
mov edx, dword [ebp - 0xd8]
push edx
lea ecx, [ebp - 0x708]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x718], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x714], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x710], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x70c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x718]
mov dword [eax], ecx
mov edx, dword [ebp - 0x714]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x710]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x70c]
mov dword [eax + 0xc], edx
push 4
cvttss2si eax, dword [ebp - 0xc0]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
sub edx, 5
sub edx, dword [ebp - 0xe0]
push edx
mov ecx, dword [0x108c6388]
call fcn.1006a082
push 0xff
push 0
push 0
push 0
lea ecx, [ebp - 0x728]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x738], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x734], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x730], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x72c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x738]
mov dword [eax], ecx
mov edx, dword [ebp - 0x734]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x730]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x72c]
mov dword [eax + 0xc], edx
push 4
mov eax, dword [ebp - 0xa0]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
sub edx, 5
sub edx, dword [ebp - 0xe0]
push edx
mov ecx, dword [0x108c6388]
call fcn.1006b504
mov eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0xa0]
mov dword [ebp - 0xe0], eax
movzx eax, byte [0x10165059]
test eax, eax
je 0x100c8b94
mov eax, dword [0x108c2fa4]
mov dword [ebp - 0x8cc], eax
push 0xff
push 0xff
push 0xff
push 0xff
lea ecx, [ebp - 0x748]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x758], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x754], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x750], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x74c], edx
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x768], eax
mov ecx, dword [ebp - 0x754]
mov dword [ebp - 0x764], ecx
mov edx, dword [ebp - 0x750]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x75c], eax
push str.Fake
push 1
mov ecx, dword [ebp - 0x8cc]
push ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x768]
mov dword [edx], eax
mov ecx, dword [ebp - 0x764]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x760]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x75c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0xe
push edx
mov eax, dword [ebp - 0x90]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x1c]
sub ecx, 5
sub ecx, dword [ebp - 0xe0]
add ecx, eax
push ecx
mov edx, dword [0x108c6388]
push edx
call fcn.1006ad8e
add esp, 0x28
push 0xb9
push 0
push 0
push 0
lea ecx, [ebp - 0x778]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x788], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x784], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x780], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x77c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x788]
mov dword [eax], ecx
mov edx, dword [ebp - 0x784]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x780]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x77c]
mov dword [eax + 0xc], edx
push 4
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
sub edx, 5
sub edx, dword [ebp - 0xe0]
push edx
mov ecx, dword [0x108c6388]
call fcn.1006a082
push 0xff
mov eax, dword [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0xc8]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
lea ecx, [ebp - 0x798]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x7a8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x7a4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x7a0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x79c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x7a8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x7a4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7a0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x79c]
mov dword [eax + 0xc], edx
push 4
cvttss2si eax, dword [ebp - 0xbc]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
sub edx, 5
sub edx, dword [ebp - 0xe0]
push edx
mov ecx, dword [0x108c6388]
call fcn.1006a082
push 0xff
push 0
push 0
push 0
lea ecx, [ebp - 0x7b8]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x7c8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x7c4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x7c0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x7bc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x7c8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x7c4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x7bc]
mov dword [eax + 0xc], edx
push 4
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x1c]
sub edx, 5
sub edx, dword [ebp - 0xe0]
push edx
mov ecx, dword [0x108c6388]
call fcn.1006b504
mov eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0x90]
mov dword [ebp - 0xe0], eax
call fcn.1006d115
movzx eax, byte [eax + 0xb]
test eax, eax
je 0x100c91c5
lea eax, [ebp - 0x7d4]
push eax
mov ecx, dword [0x10166a24]
call fcn.1006c3f5
mov ecx, eax
call fcn.1006c279
fstp dword [ebp - 0x164]
movss xmm0, dword [ebp - 0x164]
comiss xmm0, dword [0x1014ddc8]
jb 0x100c8d9f
push ecx
movss xmm0, dword [ebp - 0x164]
movss dword [esp], xmm0
call fcn.1006d2ff
add esp, 4
fstp dword [ebp - 0x16c]
cvtss2sd xmm0, dword [ebp - 0x16c]
sub esp, 8
movsd qword [esp], xmm0
push 0x10151338
push 4
lea eax, [ebp - 0x168]
push eax
call fcn.1006c22e
add esp, 0x14
mov eax, dword [0x108c2fa8]
mov dword [ebp - 0x8cc], eax
push 0xff
push 0
cvtss2sd xmm0, dword [ebp - 0x16c]
mulsd xmm0, qword [0x101531e8]
cvttsd2si ecx, xmm0
push ecx
cvtss2sd xmm0, dword [ebp - 0x16c]
mulsd xmm0, qword [0x101531e8]
movsd xmm1, qword [0x10153220]
subsd xmm1, xmm0
cvttsd2si edx, xmm1
push edx
lea ecx, [ebp - 0x7e4]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x7f8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x7f4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x7f0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x7ec], edx
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x808], eax
mov ecx, dword [ebp - 0x7f4]
mov dword [ebp - 0x804], ecx
mov edx, dword [ebp - 0x7f0]
mov dword [ebp - 0x800], edx
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x808]
mov dword [ebp - 0x818], ecx
mov edx, dword [ebp - 0x804]
mov dword [ebp - 0x814], edx
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x810], eax
mov ecx, dword [ebp - 0x7fc]
mov dword [ebp - 0x80c], ecx
mov edx, dword [ebp - 0x818]
mov dword [ebp - 0x828], edx
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x824], eax
mov ecx, dword [ebp - 0x810]
mov dword [ebp - 0x820], ecx
mov edx, dword [ebp - 0x80c]
mov dword [ebp - 0x81c], edx
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
mov edx, dword [ebp - 0x20]
sub edx, eax
mov dword [ebp - 0x8d0], edx
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x8d4], eax
lea eax, [ebp - 0x168]
push eax
push 1
mov ecx, dword [ebp - 0x8cc]
push ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x828]
mov dword [edx], eax
mov ecx, dword [ebp - 0x824]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x820]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x81c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x8d0]
push edx
mov eax, dword [ebp - 0x8d4]
push eax
mov ecx, dword [0x108c6388]
push ecx
call fcn.1006ad8e
add esp, 0x28
jmp 0x100c91c5
movss xmm0, dword [0x10153268]
comiss xmm0, dword [ebp - 0x164]
jb 0x100c8f8f
movss xmm0, dword [ebp - 0x164]
comiss xmm0, dword [0x1014f9e8]
jb 0x100c8f8f
push ecx
movss xmm0, dword [ebp - 0x164]
movss dword [esp], xmm0
call fcn.1006d2ff
add esp, 4
fstp dword [ebp - 0x174]
cvtss2sd xmm0, dword [ebp - 0x174]
sub esp, 8
movsd qword [esp], xmm0
push 0x10151338
push 3
lea eax, [ebp - 0x170]
push eax
call fcn.1006c22e
add esp, 0x14
mov eax, dword [0x108c2fa8]
mov dword [ebp - 0x8cc], eax
push 0xff
push 0
cvtss2sd xmm0, dword [ebp - 0x174]
mulsd xmm0, qword [0x101531e8]
cvttsd2si ecx, xmm0
push ecx
cvtss2sd xmm0, dword [ebp - 0x174]
mulsd xmm0, qword [0x101531e8]
movsd xmm1, qword [0x10153220]
subsd xmm1, xmm0
cvttsd2si edx, xmm1
push edx
lea ecx, [ebp - 0x838]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x848], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x844], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x840], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x83c], edx
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x858], eax
mov ecx, dword [ebp - 0x844]
mov dword [ebp - 0x854], ecx
mov edx, dword [ebp - 0x840]
mov dword [ebp - 0x850], edx
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x84c], eax
mov ecx, dword [ebp - 0x858]
mov dword [ebp - 0x868], ecx
mov edx, dword [ebp - 0x854]
mov dword [ebp - 0x864], edx
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x84c]
mov dword [ebp - 0x85c], ecx
mov edx, dword [ebp - 0x868]
mov dword [ebp - 0x878], edx
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x860]
mov dword [ebp - 0x870], ecx
mov edx, dword [ebp - 0x85c]
mov dword [ebp - 0x86c], edx
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
mov edx, dword [ebp - 0x20]
sub edx, eax
mov dword [ebp - 0x8d0], edx
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x8d4], eax
lea eax, [ebp - 0x170]
push eax
push 1
mov ecx, dword [ebp - 0x8cc]
push ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x878]
mov dword [edx], eax
mov ecx, dword [ebp - 0x874]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x870]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x86c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x8d0]
push edx
mov eax, dword [ebp - 0x8d4]
push eax
mov ecx, dword [0x108c6388]
push ecx
call fcn.1006ad8e
add esp, 0x28
jmp 0x100c91c5
movss xmm0, dword [0x10153230]
comiss xmm0, dword [ebp - 0x164]
jb 0x100c91c5
call fcn.1006d115
cmp dword [eax + 0x130], 0
jle 0x100c9004
call fcn.1006d115
cmp dword [eax + 0x130], 2
jne 0x100c8fde
push ecx
movss xmm0, dword [ebp - 0x164]
movss dword [esp], xmm0
call fcn.1006d2ff
add esp, 4
fstp dword [ebp - 0x17c]
jmp 0x100c9002
movss xmm0, dword [ebp - 0x164]
subss xmm0, dword [0x1014dd88]
push ecx
movss dword [esp], xmm0
call fcn.1006d2ff
add esp, 4
fstp dword [ebp - 0x17c]
jmp 0x100c9020
push ecx
movss xmm0, dword [ebp - 0x164]
movss dword [esp], xmm0
call fcn.1006d2ff
add esp, 4
fstp dword [ebp - 0x17c]
cvtss2sd xmm0, dword [ebp - 0x17c]
sub esp, 8
movsd qword [esp], xmm0
push 0x10151338
push 2
lea eax, [ebp - 0x178]
push eax
call fcn.1006c22e
add esp, 0x14
mov eax, dword [0x108c2fa8]
mov dword [ebp - 0x8cc], eax
push 0xff
push 0
cvtss2sd xmm0, dword [ebp - 0x17c]
mulsd xmm0, qword [0x101531e8]
cvttsd2si ecx, xmm0
push ecx
cvtss2sd xmm0, dword [ebp - 0x17c]
mulsd xmm0, qword [0x101531e8]
movsd xmm1, qword [0x10153220]
subsd xmm1, xmm0
cvttsd2si edx, xmm1
push edx
lea ecx, [ebp - 0x888]
call fcn.1006a230
mov ecx, dword [eax]
mov dword [ebp - 0x898], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x894], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x890], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x88c], edx
mov eax, dword [ebp - 0x898]
mov dword [ebp - 0x8a8], eax
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x8a4], ecx
mov edx, dword [ebp - 0x890]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x8a8]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x8b0], eax
mov ecx, dword [ebp - 0x89c]
mov dword [ebp - 0x8ac], ecx
mov edx, dword [ebp - 0x8b8]
mov dword [ebp - 0x8c8], edx
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8b0]
mov dword [ebp - 0x8c0], ecx
mov edx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8bc], edx
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 5
idiv ecx
mov edx, dword [ebp - 0x20]
sub edx, eax
mov dword [ebp - 0x8d0], edx
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x8d4], eax
lea eax, [ebp - 0x178]
push eax
push 1
mov ecx, dword [ebp - 0x8cc]
push ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x8c8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x8c0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x8bc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x8d0]
push edx
mov eax, dword [ebp - 0x8d4]
push eax
mov ecx, dword [0x108c6388]
push ecx
call fcn.1006ad8e
add esp, 0x28
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1006b644
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret