Function at 0x10009290
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8a0
mov eax, dword [0x1008c3cc]
xor eax, ebp
mov dword [ebp - 8], eax
cmp byte [0x100905c0], 0
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 0x87c], esi
jne 0x100092f8
mov dword [0x10094360], 1
mov dword [0x10094380], 1
mov dword [0x10094384], 1
mov dword [0x10094408], 1
mov dword [0x10094410], 1
mov byte [0x100905a8], 1
mov byte [0x100905c0], 1
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 1
call edi
mov ebx, 0xffff8001
cmp ax, bx
push 2
sete byte [ebp - 0x86d]
call edi
cmp ax, bx
sete byte [ebp - 0x86e]
cmp dword [0x10094500], 0
jne 0x1000933e
push 0x2d
call edi
test al, 1
je 0x1000933e
cmp byte [0x100905a8], 0
sete byte [0x100905a8]
cmp dword [0x10094500], 1
jne 0x1000935d
push 0x24
call edi
test al, 1
je 0x1000935d
cmp byte [0x100905a8], 0
sete byte [0x100905a8]
cmp dword [0x10094500], 2
jne 0x100093a2
push 0x11
call edi
test ax, ax
je 0x10009378
push 0x78
call edi
test ax, ax
jne 0x1000938a
push 0x78
call edi
test ax, ax
je 0x1000938e
push 0x11
call edi
test ax, ax
je 0x1000938e
mov al, 1
jmp 0x10009390
xor al, al
test al, 1
je 0x100093a2
cmp byte [0x100905a8], 0
sete byte [0x100905a8]
cmp dword [0x10094500], 3
jne 0x100093e7
push 0x11
call edi
test ax, ax
je 0x100093bd
push 0x79
call edi
test ax, ax
jne 0x100093cf
push 0x79
call edi
test ax, ax
je 0x100093d3
push 0x11
call edi
test ax, ax
je 0x100093d3
mov al, 1
jmp 0x100093d5
xor al, al
test al, 1
je 0x100093e7
cmp byte [0x100905a8], 0
sete byte [0x100905a8]
cmp dword [0x10094500], 4
jne 0x1000940b
push ecx
call fcn.10009230
add esp, 4
test al, 1
je 0x1000940b
cmp byte [0x100905a8], 0
sete byte [0x100905a8]
cmp byte [0x100905a8], 0
je 0x1000a558
call dword [sym.imp.USER32.dll_GetActiveWindow]
test eax, eax
je 0x1000a558
lea eax, [ebp - 0x88c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x88c]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
push 0x10094328
push str.__SKYHT_D3D__
mov dword [0x100905bc], 0
call fcn.1000a570
push dword [0x10094328]
push 8
push 0x10094330
push 0x1008e078
push 0x10079334
call fcn.1000a5e0
push dword [0x10094328]
push 4
push 0x1009432c
push 0x1008e3d0
push 0x1007934c
call fcn.1000a5e0
push dword [0x10094328]
push 2
push 0x10094334
push 0x1008e130
push 0x10079364
call fcn.1000a5e0
push dword [0x10094328]
push 2
push 0x10094338
push 0x1008e130
push 0x10079388
call fcn.1000a5e0
push dword [0x10094328]
push 2
push 0x1009433c
push 0x1008e188
push 0x100793b0
call fcn.1000a5e0
push dword [0x10094328]
push 2
push 0x10094340
push 0x1008e130
push 0x100793cc
call fcn.1000a5e0
push 0x10094350
push 0x100793f0
call fcn.1000a570
push dword [0x10094350]
push 6
push 0x10094354
push 0x1008e0ac
push 0x10079408
call fcn.1000a5e0
push dword [0x10094350]
push 7
push 0x10094358
push 0x1008e160
push 0x10079424
call fcn.1000a5e0
push dword [0x10094350]
push 2
push 0x10094360
push 0x1008e1e0
push 0x10079438
call fcn.1000a5e0
push 0x10094368
push 0x10079450
call fcn.1000a570
push dword [0x10094368]
push 2
push 0x10094374
push 0x1008e130
push 0x10079470
call fcn.1000a5e0
push dword [0x10094368]
push 7
push 0x10094370
push 0x1008e160
push 0x10079480
call fcn.1000a5e0
push 0x1009437c
push 0x10079498
call fcn.1000a570
push dword [0x1009437c]
push 4
push 0x1009438c
push 0x1008e3c0
push 0x100794b4
call fcn.1000a5e0
push dword [0x1009437c]
push 2
push 0x10094390
push 0x1008e130
push 0x100794d8
call fcn.1000a5e0
push dword [0x1009437c]
push 2
push 0x10094394
push 0x1008e130
push 0x100794fc
call fcn.1000a5e0
push dword [0x1009437c]
push 4
push 0x1009439c
push 0x1008e3c0
push 0x1007951c
call fcn.1000a5e0
push dword [0x1009437c]
push 2
push 0x100943a0
push 0x1008e130
push 0x10079538
call fcn.1000a5e0
push dword [0x1009437c]
push 2
push 0x100943a4
push 0x1008e130
push 0x10079554
call fcn.1000a5e0
push dword [0x1009437c]
push 2
push 0x100943a8
push 0x1008e130
push 0x10079580
call fcn.1000a5e0
push dword [0x1009437c]
push 2
push 0x100943ac
push 0x1008e130
push 0x100795ac
call fcn.1000a5e0
push 0x100943b4
push str.__MEMORY_HACK__
call fcn.1000a570
push dword [0x100943b4]
push 2
push 0x100943bc
push 0x1008e130
push 0x100795f8
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x100943c4
push 0x1008e130
push str.Balo_X
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x100943c8
push 0x1008e130
push 0x1007963c
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x100943d0
push 0x1008e130
push 0x10079674
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x100943d8
push 0x1008e130
push 0x10079698
call fcn.1000a5e0
push dword [0x100943b4]
push 8
push 0x100943d4
push 0x1008e0e8
push 0x100796ac
call fcn.1000a5e0
push dword [0x100943b4]
push 6
push 0x100943dc
push 0x1008e118
push 0x100796c8
call fcn.1000a5e0
push dword [0x100943b4]
push 6
push 0x100943e4
push 0x1008e118
push 0x100796e4
call fcn.1000a5e0
push dword [0x100943b4]
push 6
push 0x100943e8
push 0x1008e118
push 0x10079708
call fcn.1000a5e0
cmp dword [0x100943e8], 0
je 0x100097d1
push dword [0x100943b4]
push 2
push 0x100943ec
push 0x1008e14c
push str.___Lo
call fcn.1000a5e0
push dword [0x100943b4]
push 6
push 0x100943f0
push 0x1008e118
push 0x1007974c
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x100943c0
push 0x1008e130
push 0x1007976c
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x100943f8
push 0x1008e130
push 0x1007979c
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x100943fc
push 0x1008e130
push str.Radio_Kh
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x10094408
push 0x1008e130
push 0x100797f0
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x10094400
push 0x1008e130
push str.Mod_N
call fcn.1000a5e0
push dword [0x100943b4]
push 2
push 0x10094404
push 0x1008e130
push 0x10079840
call fcn.1000a5e0
push 0x1009440c
push 0x1007985c
call fcn.1000a570
push dword [0x1009440c]
push 2
push 0x10094410
push 0x1008e130
push str.Bug_Kh
call fcn.1000a5e0
push dword [0x1009440c]
push 2
push 0x10094414
push 0x1008e130
push 0x100798a4
call fcn.1000a5e0
push dword [0x1009440c]
push 2
push 0x10094438
push 0x1008e130
push str.Kick
call fcn.1000a5e0
push dword [0x1009440c]
push 2
push 0x10094420
push 0x1008e218
push 0x100798ec
call fcn.1000a5e0
push dword [0x1009440c]
push 2
push 0x10094418
push 0x1008e130
push 0x10079918
call fcn.1000a5e0
push dword [0x1009440c]
push 2
push 0x1009441c
push 0x1008e130
push 0x10079948
call fcn.1000a5e0
push dword [0x1009440c]
push 3
push 0x10094428
push 0x1008e190
push str.Bay_Tr
call fcn.1000a5e0
push dword [0x1009440c]
push 3
push 0x1009442c
push 0x1008e220
push 0x10079990
call fcn.1000a5e0
push dword [0x1009440c]
push 3
push 0x10094424
push 0x1008e098
push 0x100799ac
call fcn.1000a5e0
push dword [0x1009440c]
push 2
push 0x10094440
push 0x1008e130
push 0x100799cc
call fcn.1000a5e0
push dword [0x1009440c]
push 2
push 0x10094430
push 0x1008e130
push 0x100799ec
call fcn.1000a5e0
push 0x10094444
push str.__WEAPON_HACK__
call fcn.1000a570
push dword [0x10094444]
push 2
push 0x100944a4
push 0x1008e130
push str.Hack_Skin
call fcn.1000a5e0
push dword [0x10094444]
push 2
push 0x100944a0
push 0x1008e130
push 0x10079a44
call fcn.1000a5e0
push dword [0x10094444]
push 2
push 0x100944a8
push 0x1008e130
push 0x10079a68
call fcn.1000a5e0
push dword [0x10094444]
push 2
push 0x100944ac
push 0x1008e130
push 0x10079a90
call fcn.1000a5e0
push dword [0x10094444]
push 6
push 0x1009445c
push 0x1008e118
push str.Thay
call fcn.1000a5e0
push dword [0x10094444]
push 6
push 0x10094468
push 0x1008e118
push 0x10079ad0
call fcn.1000a5e0
push dword [0x10094444]
push 2
push 0x1009446c
push 0x1008e1e8
push 0x10079af4
call fcn.1000a5e0
push dword [0x10094444]
push 5
push 0x10094470
push 0x1008e1fc
push 0x10079b14
call fcn.1000a5e0
push dword [0x10094444]
push 6
push 0x10094450
push 0x1008e118
push 0x10079b2c
call fcn.1000a5e0
push dword [0x10094444]
push 6
push 0x10094488
push 0x1008e118
push 0x10079b4c
call fcn.1000a5e0
push dword [0x10094444]
push 2
push 0x1009448c
push 0x1008e130
push 0x10079b78
call fcn.1000a5e0
push dword [0x10094444]
push 3
push 0x10094494
push 0x1008e1b0
push 0x10079ba8
call fcn.1000a5e0
push dword [0x10094444]
push 2
push 0x10094498
push 0x1008e130
push 0x10079bd0
call fcn.1000a5e0
push 0x100944b4
push str.__ZOMBIE_HACK__
call fcn.1000a570
push dword [0x100944b4]
push 2
push 0x100944b8
push 0x1008e130
push 0x10079c0c
call fcn.1000a5e0
push dword [0x100944b4]
push 3
push 0x100944bc
push 0x1008e1f0
push str.Bug_L
call fcn.1000a5e0
push dword [0x100944b4]
push 2
push 0x100944c0
push 0x1008e130
push 0x10079c68
call fcn.1000a5e0
push dword [0x100944b4]
push 2
push 0x100944c4
push 0x1008e130
push str.Sao_Ch
call fcn.1000a5e0
push dword [0x100944b4]
push 2
push 0x100944c8
push 0x1008e130
push 0x10079ca8
call fcn.1000a5e0
push 0x100944cc
push str.__MODE_ZOMBIE_AI__
call fcn.1000a570
push dword [0x100944cc]
push 2
push 0x100944d0
push 0x1008e130
push 0x10079cec
call fcn.1000a5e0
push dword [0x100944cc]
push 2
push 0x100944e4
push 0x1008e130
push 0x10079d14
call fcn.1000a5e0
push dword [0x100944cc]
push 2
push 0x100944d8
push 0x1008e130
push str.Auto_S
call fcn.1000a5e0
push dword [0x100944cc]
push 2
push 0x100944dc
push 0x1008e130
push 0x10079d70
call fcn.1000a5e0
push dword [0x100944cc]
push 2
push 0x100944f0
push 0x1008e130
push 0x10079d94
call fcn.1000a5e0
push 0x100944fc
push 0x10079dac
call fcn.1000a570
push dword [0x100944fc]
push 2
push 0x10094514
push 0x1008e130
push 0x10079dd0
call fcn.1000a5e0
push dword [0x100944fc]
push 2
push 0x10094510
push 0x1008e130
push 0x10079de8
call fcn.1000a5e0
push dword [0x100944fc]
push 2
push 0x1009450c
push 0x1008e130
push 0x10079e00
call fcn.1000a5e0
push dword [0x100944fc]
push 2
push 0x10094508
push 0x1008e130
push 0x10079e20
call fcn.1000a5e0
push dword [0x100944fc]
push 5
push 0x10094500
push 0x1008e138
push 0x10079e4c
call fcn.1000a5e0
push dword [0x100944fc]
push 2
push 0x10094504
push 0x1008e1a8
push 0x10079e68
call fcn.1000a5e0
mov eax, dword [0x100905bc]
push esi
push 0xf0000000
push 0x18
push dword [0x100905b4]
lea eax, [eax + eax*8]
push dword [0x100905b0]
lea eax, [eax*2 + 0xf]
push dword [0x100905ac]
mov dword [0x100905b8], eax
call fcn.100012e0
push esi
push 0xffffff00
push 0x18
push dword [0x100905b4]
push dword [0x100905b0]
push dword [0x100905ac]
call fcn.10001650
mov ecx, dword [0x100905b0]
mov eax, dword [0x100905ac]
add ecx, 5
add eax, 0xa
mov dword [ebp - 0x880], str.Skyht.CF_Vi
mov dword [ebp - 0x81c], eax
mov dword [ebp - 0x818], ecx
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x810], ecx
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x80c], ax
lea eax, [ebp - 0x80a]
push eax
call fcn.10040b90
add esp, 0xc
lea eax, [ebp - 0x87c]
push eax
push str.Skyht.CF_Vi
lea eax, [ebp - 0x80c]
push 0x400
push eax
call fcn.1003d4d4
mov eax, dword [0x10094314]
add esp, 0x10
mov ecx, dword [eax]
push 0xffffd700
push 0x100
lea edx, [ebp - 0x81c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x80c]
push edx
push 0
push eax
call dword [ecx + 0x3c]
mov eax, dword [0x100905b0]
push esi
push 0xc8000000
push dword [0x100905b8]
add eax, 0x18
push dword [0x100905b4]
push eax
push dword [0x100905ac]
call fcn.100012e0
mov eax, dword [0x100905b0]
push esi
push 0xffffff00
push dword [0x100905b8]
add eax, 0x18
push dword [0x100905b4]
push eax
push dword [0x100905ac]
call fcn.10001650
call fcn.1000a660
push eax
mov eax, dword [0x100905b0]
push 0xffffd700
add eax, 5
push eax
mov eax, dword [0x100905ac]
add eax, 0x96
push eax
push ecx
call fcn.100014c0
cmp dword [0x100905bc], 0
mov dword [ebp - 0x880], 0
jle 0x1000a558
mov edx, dword [0x100905ac]
xor ebx, ebx
mov edi, 0x1008e914
mov dword [ebp - 0x878], ebx
mov dword [ebp - 0x884], edi
jmp 0x10009ed0
cmp dword [edi - 0x6c], 1
jne 0x1000a014
mov ecx, dword [0x100905b0]
lea eax, [edx + 0xf]
mov dword [ebp - 0x81c], eax
mov dword [ebp - 0x814], eax
xor eax, eax
push 0x7fe
push eax
add ecx, 0x1e
mov word [ebp - 0x80c], ax
add ecx, ebx
lea eax, [ebp - 0x80a]
lea esi, [edi - 0x68]
push eax
mov dword [ebp - 0x874], esi
mov dword [ebp - 0x818], ecx
mov dword [ebp - 0x810], ecx
call fcn.10040b90
add esp, 0xc
lea eax, [ebp - 0x870]
push eax
push esi
lea eax, [ebp - 0x80c]
push 0x400
push eax
call fcn.1003d4d4
mov eax, dword [0x10094314]
add esp, 0x10
mov ecx, dword [eax]
push 0xff73f56e
push 0x100
lea edx, [ebp - 0x81c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x80c]
push edx
push 0
push eax
call dword [ecx + 0x3c]
mov eax, dword [edi]
push 0x7fe
mov ecx, dword [eax]
mov eax, dword [esi + 0x64]
mov esi, dword [eax + ecx*4]
mov eax, dword [0x100905ac]
mov ecx, dword [0x100905b0]
add eax, 0xd2
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0x824], eax
xor eax, eax
push eax
add ecx, 0x1e
mov word [ebp - 0x80c], ax
add ecx, ebx
lea eax, [ebp - 0x80a]
push eax
mov dword [ebp - 0x89c], esi
mov dword [ebp - 0x828], ecx
mov dword [ebp - 0x820], ecx
call fcn.10040b90
add esp, 0xc
lea eax, [ebp - 0x898]
push eax
push esi
lea eax, [ebp - 0x80c]
push 0x400
push eax
call fcn.1003d4d4
mov eax, dword [0x10094314]
add esp, 0x10
mov ecx, dword [eax]
push 0xff73f56e
push 0x102
lea edx, [ebp - 0x82c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x80c]
push edx
push 0
push eax
call dword [ecx + 0x3c]
mov edx, dword [0x100905ac]
mov esi, dword [ebp - 0x87c]
cmp dword [edi - 0x6c], 0
jne 0x1000a4ba
mov eax, dword [edi]
push esi
cmp dword [eax], 0
mov eax, dword [0x100905b0]
jle 0x1000a039
push 0xff00ff51
push 0xa
push 3
add eax, 0x20
jmp 0x1000a045
push 0xffff0000
push 0
push 0
add eax, 0x1e
add eax, ebx
push eax
lea eax, [edx + 8]
push eax
call fcn.100012e0
mov eax, dword [edi]
push esi
cmp dword [eax], 0
mov eax, dword [0x100905b0]
jle 0x1000a079
push 0xff00ff51
add eax, 0x20
push 0xa
add eax, ebx
push 3
push eax
mov eax, dword [0x100905ac]
add eax, 0xdc
jmp 0x1000a092
push 0xffff0000
add eax, 0x1e
push 0
add eax, ebx
push 0
push eax
mov eax, dword [0x100905ac]
add eax, 0xde
push eax
call fcn.100012e0
mov eax, dword [edi]
mov ecx, dword [ebp - 0x878]
cmp dword [eax], 0
mov eax, 0xffffd700
mov esi, 0xff969696
cmovg esi, eax
mov eax, dword [0x100905b0]
add eax, 0x1e
add ecx, eax
mov eax, dword [0x100905ac]
add eax, 0x14
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x834], eax
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x80c], ax
lea eax, [ebp - 0x80a]
lea ebx, [edi - 0x68]
push eax
mov dword [ebp - 0x874], ebx
mov dword [ebp - 0x838], ecx
mov dword [ebp - 0x830], ecx
call fcn.10040b90
add esp, 0xc
lea eax, [ebp - 0x870]
push eax
push ebx
lea eax, [ebp - 0x80c]
push 0x400
push eax
call fcn.1003d4d4
mov eax, dword [0x10094314]
add esp, 0x10
mov ecx, dword [eax]
push esi
push 0x100
lea edx, [ebp - 0x83c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x80c]
push edx
push 0
push eax
call dword [ecx + 0x3c]
mov eax, dword [edi]
mov edi, 0xff969696
mov ecx, dword [eax]
test ecx, ecx
mov eax, 0xffffd700
cmovg edi, eax
mov eax, dword [ebx + 0x64]
mov ebx, dword [ebp - 0x878]
mov esi, dword [eax + ecx*4]
mov eax, dword [0x100905ac]
mov ecx, dword [0x100905b0]
add eax, 0xd2
mov dword [ebp - 0x84c], eax
mov dword [ebp - 0x844], eax
xor eax, eax
push 0x7fe
push eax
add ecx, 0x1e
mov word [ebp - 0x80c], ax
add ecx, ebx
lea eax, [ebp - 0x80a]
push eax
mov dword [ebp - 0x894], esi
mov dword [ebp - 0x848], ecx
mov dword [ebp - 0x840], ecx
call fcn.10040b90
add esp, 0xc
lea eax, [ebp - 0x890]
push eax
push esi
lea eax, [ebp - 0x80c]
push 0x400
push eax
call fcn.1003d4d4
mov eax, dword [0x10094314]
add esp, 0x10
mov ecx, dword [eax]
push edi
push 0x102
lea edx, [ebp - 0x84c]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x80c]
push edx
push 0
push eax
call dword [ecx + 0x3c]
mov edi, dword [ebp - 0x884]
mov edx, dword [0x100905ac]
cmp dword [edi - 0x6c], 0
jne 0x1000a4ba
mov ecx, dword [ebp - 0x88c]
cmp ecx, edx
jle 0x1000a527
mov eax, dword [0x100905b4]
add eax, edx
cmp ecx, eax
jge 0x1000a4ba
mov eax, dword [0x100905b0]
mov ecx, dword [ebp - 0x888]
lea esi, [eax + 0x1e]
add esi, ebx
mov dword [ebp - 0x874], esi
cmp ecx, esi
jle 0x1000a4ba
add eax, 0x2d
add eax, ebx
cmp ecx, eax
jge 0x1000a4ba
mov esi, dword [ebp - 0x87c]
push esi
push 0xffffd700
push 0xf
push dword [0x100905b4]
push dword [ebp - 0x874]
push edx
call fcn.10001650
mov eax, dword [0x100905b0]
mov ecx, dword [0x100905b4]
push esi
push 0xf0000000
push 0xf
add eax, 0x1e
push ecx
add eax, ebx
push eax
mov eax, dword [0x100905ac]
add ecx, 5
add eax, ecx
push eax
call fcn.100012e0
mov eax, dword [0x100905b0]
mov ecx, dword [0x100905b4]
push esi
push 0xffffd700
push 0xf
add eax, 0x1e
push ecx
add eax, ebx
push eax
mov eax, dword [0x100905ac]
add ecx, 5
add eax, ecx
push eax
call fcn.10001650
mov eax, dword [0x100905b0]
mov ecx, dword [0x100905b4]
push 0
lea esi, [edi - 0x68]
push esi
push 0x100
add eax, 0x1e
add eax, ebx
push 0xff73f56e
push eax
mov eax, dword [0x100905ac]
add ecx, 0x19
add eax, ecx
push eax
mov dword [ebp - 0x874], esi
call fcn.10001400
push dword [ebp - 0x87c]
mov ecx, dword [esi + 0x6c]
mov eax, dword [0x100905b0]
shl ecx, 4
sub ecx, dword [esi + 0x6c]
push 0xf0000000
push ecx
mov ecx, dword [0x100905b4]
add eax, 0x2d
push ecx
add eax, ebx
push eax
mov eax, dword [0x100905ac]
add ecx, 5
add eax, ecx
push eax
call fcn.100012e0
push dword [ebp - 0x87c]
mov ecx, dword [esi + 0x6c]
mov eax, dword [0x100905b0]
shl ecx, 4
sub ecx, dword [esi + 0x6c]
push 0xffffd700
push ecx
mov ecx, dword [0x100905b4]
add eax, 0x2d
push ecx
add eax, ebx
push eax
mov eax, dword [0x100905ac]
add eax, 5
add eax, ecx
push eax
call fcn.10001650
lea edx, [edi - 0x68]
xor esi, esi
cmp dword [edx + 0x6c], esi
jle 0x1000a4b4
mov ecx, 0x2d
mov dword [ebp - 0x878], ecx
nop
mov eax, dword [edi]
push 0x7fe
cmp esi, dword [eax]
mov eax, dword [edx + 0x64]
lea edx, [ebx + ecx]
mov edi, dword [eax + esi*4]
mov eax, dword [0x100905ac]
mov ecx, dword [0x100905b4]
push 0
jne 0x1000a40b
add edx, dword [0x100905b0]
add ecx, 0x1e
add eax, ecx
mov dword [ebp - 0x86c], eax
mov dword [ebp - 0x864], eax
xor eax, eax
mov word [ebp - 0x80c], ax
lea eax, [ebp - 0x80a]
push eax
mov dword [ebp - 0x890], edi
mov dword [ebp - 0x868], edx
mov dword [ebp - 0x860], edx
call fcn.10040b90
add esp, 0xc
lea eax, [ebp - 0x88c]
push eax
push edi
lea eax, [ebp - 0x80c]
push 0x400
push eax
call fcn.1003d4d4
add esp, 0x10
lea edx, [ebp - 0x86c]
push 0xff00ff51
jmp 0x1000a473
add edx, dword [0x100905b0]
add ecx, 0x1e
add eax, ecx
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x854], eax
xor eax, eax
mov word [ebp - 0x80c], ax
lea eax, [ebp - 0x80a]
push eax
mov dword [ebp - 0x898], edi
mov dword [ebp - 0x858], edx
mov dword [ebp - 0x850], edx
call fcn.10040b90
add esp, 0xc
lea eax, [ebp - 0x894]
push eax
push edi
lea eax, [ebp - 0x80c]
push 0x400
push eax
call fcn.1003d4d4
add esp, 0x10
lea edx, [ebp - 0x85c]
push 0xffff0000
mov eax, dword [0x10094314]
push 0x100
mov ecx, dword [eax]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x80c]
push edx
push 0
push eax
call dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x878]
mov edx, dword [ebp - 0x874]
mov edi, dword [ebp - 0x884]
inc esi
add ecx, 0xf
mov dword [ebp - 0x878], ecx
cmp esi, dword [edx + 0x6c]
jl 0x1000a380
mov edx, dword [0x100905ac]
mov ecx, dword [ebp - 0x88c]
cmp ecx, edx
jle 0x1000a527
mov eax, dword [0x100905b4]
add eax, edx
cmp ecx, eax
jge 0x1000a527
mov esi, dword [0x100905b0]
mov ecx, dword [ebp - 0x888]
lea eax, [esi + 0x1e]
add eax, ebx
cmp ecx, eax
jle 0x1000a527
lea eax, [esi + 0x2d]
add eax, ebx
cmp ecx, eax
jge 0x1000a527
cmp byte [ebp - 0x86d], 0
je 0x1000a50d
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov esi, dword [ecx]
dec eax
cmp esi, eax
jge 0x1000a50d
lea eax, [esi + 1]
mov dword [ecx], eax
mov edx, dword [0x100905ac]
cmp byte [ebp - 0x86e], 0
je 0x1000a527
mov ecx, dword [edi]
mov eax, dword [ecx]
test eax, eax
jle 0x1000a527
dec eax
mov dword [ecx], eax
mov edx, dword [0x100905ac]
mov eax, dword [ebp - 0x880]
mov esi, dword [ebp - 0x87c]
inc eax
add ebx, 0x12
add edi, 0x74
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x878], ebx
mov dword [ebp - 0x884], edi
cmp eax, dword [0x100905bc]
jl 0x10009ed0
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1003cd0a
mov esp, ebp
pop ebp
ret 4