Function at 0x672a80
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6fa8c9
mov eax, dword fs:[0]
push eax
sub esp, 0x1b0
mov eax, dword [0x766480]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [0x1a4ea6c]
test eax, eax
jne 0x672aec
push 0x14
call fcn.006df8c3
add esp, 4
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x672ade
push 0x1e
mov ecx, eax
call fcn.0067b350
jmp 0x672ae0
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x1a4ea6c], eax
push dword [edi + 4]
mov ecx, eax
call fcn.0067b810
mov dword [ebp - 0x1a4], eax
test eax, eax
je 0x673a4e
mov cl, byte [eax + 0x24]
mov edx, 0xfffffff7
mov esi, dword [ebp + 8]
mov byte [edi + 0x152], cl
mov cx, word [eax + 0x26]
mov word [edi + 0x154], cx
mov ecx, 0x19
movzx eax, byte [eax + 0x20]
mov byte [edi + 0x153], al
mov al, byte [ebp + 0x10]
mov byte [ebp - 0x1a5], al
mov byte [ebp - 0x1a7], al
lea eax, [edi + 0xc4]
mov dword [ebp - 0x1a0], edx
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x19c], ecx
mov eax, dword [eax]
test eax, eax
jne 0x672b62
cmp dword [esi], eax
je 0x672bde
jmp case.default.0x672b9c
mov ecx, dword [esi]
test ecx, ecx
je case.default.0x672b9c
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x672b88
test dl, dl
je 0x672b84
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x672b88
add eax, 2
add ecx, 2
test dl, dl
jne 0x672b68
xor eax, eax
jmp 0x672b8d
sbb eax, eax
or eax, 1
mov edx, dword [ebp - 0x1a0]
test eax, eax
je 0x672bce
cmp edx, 4
ja case.default.0x672b9c
jmp dword [edx*4 + 0x673a6c]
mov al, byte [edi + 0x153]
cmp al, 1
je 0x672bb1
cmp al, 2
jne case.default.0x672b9c
mov byte [ebp - 0x1a7], 1
jmp 0x672bce
mov byte [ebp - 0x1a5], 1
jmp 0x672bce
mov byte [edi + 0x151], 0
mov byte [ebp + 0x10], 1
mov ecx, dword [ebp - 0x1b8]
mov eax, dword [esi]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x1b8]
inc edx
add eax, 4
mov dword [ebp - 0x1a0], edx
add esi, 4
mov dword [ebp - 0x1b8], eax
sub ecx, 1
mov dword [ebp - 0x19c], ecx
jne 0x672b56
cmp dword [edi + 0x44], 0
mov eax, dword [ebp + 0xc]
mov ax, word [eax]
mov word [edi + 0x128], ax
je 0x673a4e
cmp dword [edi + 0xf8], 0
mov al, byte [edi + 0x151]
jne 0x672c3e
test al, al
je 0x6733d1
cmp al, 1
jne 0x6733d1
jmp 0x672c4a
cmp al, byte [edi + 0x150]
je 0x6733d1
mov byte [ebp + 0x10], 1
mov byte [edi + 0x1db], 0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [edi + 0x1dc], eax
mov byte [edi + 0x1e1], 0
mov word [edi + 0x194], 0
mov dword [edi + 0x178], 0
mov dword [edi + 0x17c], 0
mov dword [edi + 0x180], 0
mov eax, dword [0x1a4ea6c]
mov dword [0x1a4ea24], 0x3c23d70a
test eax, eax
jne 0x672cd6
push 0x14
call fcn.006df8c3
add esp, 4
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x672cc8
push 0x1e
mov ecx, eax
call fcn.0067b350
jmp 0x672cca
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x1a4ea6c], eax
push dword [edi + 4]
mov ecx, eax
call fcn.0067b810
cmp dword [edi + 0x190], 0x23
je 0x672d20
movzx eax, word [eax + 0x26]
cmp eax, 2
je 0x672cfc
cmp eax, 7
je 0x672cfc
cmp eax, 0x18
jne 0x672d0b
push 0x20
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 8
test al, al
jne 0x672d20
push 0x25
push 0x25
mov ecx, edi
call fcn.00671100
mov dword [edi + 0x168], 0
mov ecx, dword [edi + 0x44]
mov al, byte [ecx + 0x51]
mov byte [ebp - 0x195], al
test ecx, ecx
je 0x672d46
movq xmm0, qword [ecx + 0x1c]
movq qword [edi + 0x12c], xmm0
mov eax, dword [ecx + 0x24]
mov dword [edi + 0x134], eax
cmp dword [edi + 0xf8], 0
movq xmm0, qword [edi + 0x12c]
mov eax, dword [edi + 0x134]
movq qword [ebp - 0x1bc], xmm0
movq qword [ebp - 0x1b4], xmm0
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1ac], eax
je 0x67321e
mov al, byte [edi + 0x151]
cmp al, 1
je 0x67321e
test al, al
jne 0x6733b5
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x90]
mov ecx, dword [eax + 0x34]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x672da1
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strnicmp]
lea eax, [ebp - 0x90]
push 4
push str.mnt_
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x672fec
mov al, byte [edi + 0x153]
cmp al, 1
je 0x672f3e
cmp al, 2
je 0x672f3e
cmp al, 3
je 0x672df9
cmp al, 4
jne 0x6731ae
cmp al, 3
jne 0x672e9e
mov ecx, edi
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a0]
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x672e10
mov eax, dword [str._C.GCMDS]
mov dword [ecx], eax
mov eax, dword [0x7139fc]
mov dword [ecx + 4], eax
mov al, byte [0x713a00]
mov byte [ecx + 8], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x672e40
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push eax
lea ecx, [edi + 0x48]
call fcn.00451530
lea eax, [ebp - 0x90]
push eax
push edi
call fcn.00450800
mov ecx, eax
call fcn.0067e070
mov esi, eax
test esi, esi
je 0x6731ae
push str.NO_WEAPON
mov ecx, esi
call fcn.00621fb0
lea eax, [ebp - 0x1b4]
mov ecx, esi
push eax
call fcn.0044f520
movss xmm0, dword [ebp - 0x1a0]
jmp 0x673195
mov ecx, edi
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a0]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x672eb2
mov eax, dword [str._O.GCMDS]
mov dword [ecx], eax
mov eax, dword [0x713a08]
mov dword [ecx + 4], eax
mov al, byte [0x713a0c]
mov byte [ecx + 8], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x672ee0
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push eax
lea ecx, [edi + 0x48]
call fcn.00451530
lea eax, [ebp - 0x90]
push eax
push edi
call fcn.00450800
mov ecx, eax
call fcn.0067e070
mov esi, eax
test esi, esi
je 0x6731ae
push str.NO_WEAPON
mov ecx, esi
call fcn.00621fb0
lea eax, [ebp - 0x1b4]
mov ecx, esi
push eax
call fcn.0044f520
movss xmm0, dword [ebp - 0x1a0]
jmp 0x673195
mov eax, dword [ebp - 0x1a4]
mov ecx, edi
cmp byte [eax + 0x20], 1
jne 0x672f9c
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a4]
dec ecx
nop
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x672f60
mov eax, dword [str._M.GCMDS]
mov dword [ecx], eax
mov eax, dword [0x7139e0]
mov dword [ecx + 4], eax
mov al, byte [0x7139e4]
mov byte [ecx + 8], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x672f90
jmp 0x673147
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a4]
dec ecx
nop
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x672fb0
mov eax, dword [str._W.GCMDS]
mov dword [ecx], eax
mov eax, dword [0x7139f0]
mov dword [ecx + 4], eax
mov al, byte [0x7139f4]
mov byte [ecx + 8], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x672fe0
jmp 0x673147
push 5
lea eax, [ebp - 0x90]
push str.Rider
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x6731ba
mov al, byte [edi + 0x153]
cmp al, 1
jne 0x67305c
mov ecx, edi
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a4]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x673025
mov eax, dword [str._M.GCMDS]
mov dword [ecx], eax
mov eax, dword [0x7139e0]
mov dword [ecx + 4], eax
mov al, byte [0x7139e4]
mov byte [ecx + 8], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x673050
jmp 0x673147
cmp al, 2
jne 0x6730ac
mov ecx, edi
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a4]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x673074
mov eax, dword [str._W.GCMDS]
mov dword [ecx], eax
mov eax, dword [0x7139f0]
mov dword [ecx + 4], eax
mov al, byte [0x7139f4]
mov byte [ecx + 8], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x6730a0
jmp 0x673147
cmp al, 3
jne 0x6730f9
mov ecx, edi
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a4]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x6730c4
mov eax, dword [str._M.GCMDS]
mov dword [ecx], eax
mov eax, dword [0x7139e0]
mov dword [ecx + 4], eax
mov al, byte [0x7139e4]
mov byte [ecx + 8], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x6730f0
jmp 0x673147
cmp al, 4
jne 0x6731ae
mov ecx, edi
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a4]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x673115
mov eax, dword [str._W.GCMDS]
mov dword [ecx], eax
mov eax, dword [0x7139f0]
mov dword [ecx + 4], eax
mov al, byte [0x7139f4]
mov byte [ecx + 8], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x673140
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push eax
lea ecx, [edi + 0x48]
call fcn.00451530
lea eax, [ebp - 0x90]
push eax
push edi
call fcn.00450800
mov ecx, eax
call fcn.0067e070
mov esi, eax
test esi, esi
je 0x6731ae
push str.NO_WEAPON
mov ecx, esi
call fcn.00621fb0
lea eax, [ebp - 0x1b4]
mov ecx, esi
push eax
call fcn.0044f520
movss xmm0, dword [ebp - 0x1a4]
push ecx
mov ecx, esi
movss dword [esp], xmm0
call fcn.0044f4c0
push 0x7139e8
mov ecx, esi
call fcn.00621fb0
mov byte [edi + 0x151], 1
jmp 0x6733b5
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x6731c3
sub ecx, edx
je 0x6733b5
mov ecx, edi
call fcn.0066e710
lea ecx, [ebp - 0x90]
fstp dword [ebp - 0x1a4]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x6731e6
mov eax, dword [0x70b804]
mov dword [ecx], eax
mov ax, word [0x70b808]
mov word [ecx + 4], ax
mov al, byte [0x70b80a]
mov byte [ecx + 6], al
lea ecx, [ebp - 0x90]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x673212
jmp 0x673147
test ecx, ecx
je 0x67322b
mov eax, dword [ecx + 0x34]
mov dword [edi + 0x144], eax
movzx eax, byte [edi + 0x153]
movss xmm0, dword [edi + 0x144]
dec eax
movss dword [ebp - 0x1a4], xmm0
cmp eax, 3
ja case.default.0x67324c
jmp dword [eax*4 + 0x673a80]
mov eax, dword [0x700c18]
movq xmm0, qword [str.PC_MAN.GCMDS]
mov dword [ebp - 0x18c], eax
mov al, byte [0x700c1c]
movq qword [ebp - 0x194], xmm0
mov byte [ebp - 0x188], al
jmp case.default.0x67324c
mov eax, dword [0x700c28]
movq xmm0, qword [str.PC_WOMAN.GCMDS]
mov dword [ebp - 0x18c], eax
mov ax, word [0x700c2c]
mov word [ebp - 0x188], ax
mov al, byte [0x700c2e]
movq qword [ebp - 0x194], xmm0
mov byte [ebp - 0x186], al
jmp case.default.0x67324c
movups xmm0, xmmword [str.PC_Akhan_A.GCMDS]
mov al, byte [0x700c40]
jmp 0x6732ca
movups xmm0, xmmword [str.PC_Akhan_B.GCMDS]
mov al, byte [0x700c54]
mov byte [ebp - 0x184], al
movups xmmword [ebp - 0x194], xmm0
lea ecx, [ebp - 0x194]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x6732e0
sub ecx, edx
lea eax, [ebp - 0x194]
push ecx
push eax
lea ecx, [edi + 0x48]
call fcn.00451530
lea eax, [ebp - 0x194]
push eax
push edi
call fcn.00450800
mov ecx, eax
call fcn.0067e070
mov esi, eax
test esi, esi
je 0x6733ae
push str.NO_WEAPON
mov ecx, esi
call fcn.00621fb0
cvttss2si ecx, dword [ebp - 0x1b4]
test ecx, ecx
je 0x673361
cvttss2si eax, dword [ebp - 0x1ac]
test eax, eax
je 0x673361
movq xmm0, qword [esi + 0x1c]
mov eax, dword [esi + 0x24]
movq qword [esi + 0x28], xmm0
movq xmm0, qword [ebp - 0x1bc]
mov dword [esi + 0x30], eax
mov eax, dword [ebp - 0x1a0]
movq qword [esi + 0x1c], xmm0
mov dword [esi + 0x24], eax
movss xmm1, dword [0x700bf0]
movss xmm0, dword [ebp - 0x1a4]
addss xmm0, xmm1
comiss xmm0, xmm1
movss dword [esi + 0x34], xmm0
jbe 0x67338e
nop
subss xmm0, xmm1
comiss xmm0, xmm1
movss dword [esi + 0x34], xmm0
ja 0x673380
movss xmm2, dword [0x700bf4]
comiss xmm2, xmm0
jbe 0x6733ae
nop dword [eax + eax]
addss xmm0, xmm1
comiss xmm2, xmm0
movss dword [esi + 0x34], xmm0
ja 0x6733a0
mov byte [edi + 0x151], 0
cmp byte [ebp - 0x195], 0
je 0x6733d1
mov ecx, dword [edi + 0x44]
push 0xffffffffffffffff
push 1
push 0
push str.SWIM
call fcn.00621eb0
mov al, byte [edi + 0x129]
mov dl, byte [ebp - 0x1a5]
and al, 0xf
test dl, dl
jne 0x673441
test al, al
jne 0x6733f1
push 0
push 0
push 0
push 0
jmp 0x67342e
lea eax, [ebp - 0x196]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
call fcn.0066e730
push 0
shr esi, 8
movzx eax, byte [eax + 1]
and eax, 0xf
and esi, 0xf
push eax
mov eax, dword [edi + 0x14c]
push esi
push dword [edi + eax*4 + 0xf0]
mov ecx, dword [edi + 0x44]
push str.WEAPON
call fcn.00621750
mov dl, byte [ebp - 0x1a5]
movzx ecx, word [edi + 0x128]
mov ax, cx
shr ax, 0xc
test al, al
jne 0x673465
cmp byte [ebp - 0x1a7], al
jne 0x673465
push 0
push 0
push 0
push 0
jmp 0x6734aa
shr ecx, 8
test cl, 0xf
je 0x6734b7
test dl, dl
jne 0x6734b7
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x196]
push eax
call fcn.0066e730
push 0
shr esi, 0xc
push esi
movzx eax, word [eax]
shr eax, 0xc
push eax
mov eax, dword [edi + 0x14c]
push dword [edi + eax*4 + 0xe8]
mov ecx, dword [edi + 0x44]
push str.SHIELD
call fcn.00621750
mov al, byte [edi + 0x153]
cmp al, 2
je 0x67375f
cmp al, 1
je 0x67375f
cmp al, 3
je 0x6734d9
cmp al, 4
jne 0x673a2b
cmp byte [ebp + 0x10], 0
je 0x673712
mov ecx, dword [edi + 0x44]
call fcn.0061f5d0
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
mov al, byte [eax]
and al, 0xf
mov byte [ebp - 0x195], al
lea eax, [ebp - 0x1a8]
push eax
call fcn.0066e730
movzx ecx, byte [ebp - 0x195]
push ecx
mov ecx, dword [edi + 0x44]
movzx eax, byte [eax]
and eax, 0xf
push eax
push dword [edi + 0xc4]
push str.HEAD
call fcn.00622040
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x196]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
push esi
shr ax, 4
and eax, 0xf
push eax
push dword [edi + 0xd0]
push str.BODY
call fcn.00622040
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x196]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
push esi
shr ax, 4
and eax, 0xf
push eax
push dword [edi + 0xd8]
push str.PELVIS
call fcn.00622040
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x196]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
push esi
shr ax, 4
and eax, 0xf
push eax
push dword [edi + 0xd4]
push 0x713a4c
call fcn.00622040
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x196]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 0xc
movzx eax, word [eax]
shr eax, 0xc
push eax
push esi
push dword [edi + 0xe8]
push str.SKILL
call fcn.00622040
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x196]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
push esi
shr ax, 4
and eax, 0xf
push eax
push dword [edi + 0x124]
push str.COSTUME_HELM
call fcn.00622040
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x196]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
push esi
shr ax, 4
and eax, 0xf
push eax
push dword [edi + 0x120]
push str.COSTUME
call fcn.00622040
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x196]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
push 0
shr esi, 4
movzx eax, word [eax]
and esi, 0xf
shr ax, 4
and eax, 0xf
push eax
push esi
push dword [edi + 0x114]
push str.BACKSIDE
call fcn.00621750
mov ecx, dword [edi + 0x44]
call fcn.0061f7d0
cmp byte [ebp - 0x1a5], 0
je 0x673a2b
lea eax, [ebp - 0x1a6]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x1b6]
push eax
call fcn.0066e730
push 0
shr esi, 8
and esi, 0xf
movzx eax, byte [eax + 1]
push esi
and eax, 0xf
push eax
push dword [edi + 0xf0]
push str.WEAPON
jmp 0x673a23
cmp byte [ebp + 0x10], 0
je 0x673989
mov ecx, dword [edi + 0x44]
call fcn.0061f5d0
lea eax, [ebp - 0x19a]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
mov al, byte [eax]
and al, 0xf
mov byte [ebp - 0x195], al
lea eax, [ebp - 0x19e]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
movzx eax, byte [eax]
and eax, 0xf
push eax
movzx eax, byte [ebp - 0x195]
push eax
push dword [edi + 0xc4]
push str.HEAD
call fcn.00622040
mov ecx, dword [edi + 0x44]
push 0
push 0
push dword [edi + 0xc8]
push str.BODY
call fcn.00622040
mov ecx, dword [edi + 0x44]
push 0
push 0
push dword [edi + 0xcc]
push str.BODY
call fcn.00622040
lea eax, [ebp - 0x19e]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
shr ax, 4
and eax, 0xf
push eax
push esi
push dword [edi + 0xd0]
push str.BODY
call fcn.00622040
lea eax, [ebp - 0x19e]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
shr ax, 4
and eax, 0xf
push eax
push esi
push dword [edi + 0xd4]
push str.HAND
call fcn.00622040
lea eax, [ebp - 0x19e]
mov ecx, edi
push eax
call fcn.0066e730
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
mov ecx, edi
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
shr ax, 4
and eax, 0xf
push eax
push esi
push dword [edi + 0xd8]
push str.FOOT
call fcn.00622040
lea eax, [ebp - 0x19e]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
push esi
shr ax, 4
and eax, 0xf
push eax
push dword [edi + 0x124]
push str.COSTUME_HELM
call fcn.00622040
lea eax, [ebp - 0x19e]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
shr esi, 4
and esi, 0xf
movzx eax, word [eax]
shr ax, 4
and eax, 0xf
push eax
push esi
push dword [edi + 0x120]
push str.COSTUME
call fcn.00622040
lea eax, [ebp - 0x19e]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
push 0
shr esi, 4
movzx eax, word [eax]
and esi, 0xf
shr ax, 4
and eax, 0xf
push eax
push esi
push dword [edi + 0x114]
push str.BACKSIDE
call fcn.00621750
mov ecx, dword [edi + 0x44]
call fcn.0061f7d0
cmp byte [ebp - 0x1a5], 0
je 0x6739dc
lea eax, [ebp - 0x19e]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
call fcn.0066e730
mov ecx, dword [edi + 0x44]
push 0
shr esi, 8
movzx eax, byte [eax + 1]
and esi, 0xf
and eax, 0xf
push eax
mov eax, dword [edi + 0x14c]
push esi
push dword [edi + eax*4 + 0xf0]
push str.WEAPON
call fcn.00621750
cmp byte [ebp - 0x1a7], 0
je 0x673a2b
lea eax, [ebp - 0x19e]
mov ecx, edi
push eax
call fcn.0066e730
mov ecx, edi
movzx esi, word [eax]
lea eax, [ebp - 0x19a]
push eax
call fcn.0066e730
push 0
movzx eax, word [eax]
shr eax, 0xc
push eax
mov eax, dword [edi + 0x14c]
shr esi, 0xc
push esi
push dword [edi + eax*4 + 0xe8]
push str.SHIELD
mov ecx, dword [edi + 0x44]
call fcn.00621750
cmp byte [edi + 0x1d9], 0
je 0x673a38
push 0
jmp 0x673a47
cmp byte [edi + 0x151], 1
jne 0x673a45
push 2
jmp 0x673a47
push 1
mov ecx, edi
call fcn.0066f110
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006dfb52
mov esp, ebp
pop ebp
ret 0xc