Function at 0x100747e0
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x124
mov eax, dword [0x100e50d4]
xor eax, esp
mov dword [esp + 0x120], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, edx
mov dword [esp + 0x10], eax
mov ebx, ecx
push edi
cmp esi, 0x42
jne 0x1007481e
cmp ebx, 0x100
jne 0x1007481e
lea ecx, [esp + 0x40]
call fcn.1000f4f0
cmp byte [0x10103fe0], 0
je 0x1007563e
cmp byte [0x10103fe3], 0
je 0x1007563e
cmp byte [0x100f26cd], 0
jne 0x1007563e
mov ecx, dword [ebp + 0xc]
cmp ecx, 1
jne 0x10074866
test esi, esi
je 0x1007486f
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
cmp ecx, 2
jne 0x1007563e
mov eax, dword [0x100f2708]
test eax, eax
jle 0x100748a4
mov eax, dword [eax]
test eax, eax
jle 0x100748a4
cmp dword [eax + 0x1ac], 0
je 0x1007563e
mov eax, dword [eax + 0x3d0]
mov eax, dword [eax + 0x160]
cmp dword [eax + 0x138], 0
je 0x1007563e
mov edi, 1
cmp ecx, 2
jne 0x100748b6
cmp ebx, 0x100
je 0x100748bc
cmp dword [ebp + 0x10], 0
jle 0x10074931
mov byte [0x10103fa9], 0
cmp dword [0x10103f98], esi
jne 0x10074916
mov ecx, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor al, al
cmp dword [0x10103fa0], 0
je 0x10074904
call ecx
sub eax, dword [0x10103fa0]
movzx ecx, byte [0x10103fa9]
add eax, 0xfffffffa
cmp eax, 0x125
mov al, 1
cmovbe ecx, edi
mov byte [0x10103fa9], cl
mov ecx, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10103fa0], 0
test al, al
je 0x10074931
call ecx
jmp 0x1007492c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10103f98], esi
mov dword [0x10103fa4], 0
mov dword [0x10103fa0], eax
mov eax, dword [ebp + 0xc]
cmp eax, 1
jne 0x10075258
cmp ebx, 0x200
je 0x1007497f
cmp ebx, 0x202
je 0x1007497f
cmp ebx, 0x201
je 0x1007497f
cmp ebx, 0x205
je 0x1007497f
cmp ebx, 0x204
je 0x1007497f
cmp byte [0x100f2485], 0
jne 0x10074a2b
mov al, byte [0x100f25a1]
test al, al
jne 0x10074c02
lea eax, [esp + 0x30]
push eax
call fcn.10074720
mov edx, eax
add esp, 4
mov esi, 0x8000
mov dword [esp + 0x18], esi
movq xmm0, qword [edx]
mov ecx, dword [edx + 8]
movq qword [esp + 0x24], xmm0
cmp byte [esp + 0x24], 0
je 0x10074e2d
cmp ebx, 0x200
je 0x10074fb2
cmp ebx, 0x201
je 0x10074fa6
cmp ebx, 0x202
je 0x10074fa6
cmp ebx, 0x204
je 0x10074fa6
cmp ebx, 0x205
je 0x10074fa6
cmp ebx, 0x208
je 0x10074fa6
push ecx
push dword [esp + 0x2c]
cmp ebx, 0x20a
jne 0x10074de2
mov eax, dword [esp + 0x1c]
mov ecx, ebx
cmp word [eax + 0x16], 0
jle 0x10074dd0
mov edx, 5
call fcn.10073090
add esp, 8
jmp 0x10075065
cmp ebx, 0x20a
jne 0x10074ac9
mov eax, dword [esp + 0x14]
sub esp, 0x18
mov ecx, esp
movzx eax, word [eax + 0x16]
push 0x10
mov dword [ecx + 0x10], 0
mov edi, eax
mov dword [ecx + 0x14], 0xf
mov esi, eax
push str.SideShopOpenShop
mov byte [ecx], 0
call fcn.1000ecc0
call fcn.1006bfe0
mov ecx, dword [eax*4 + 0x1010481c]
xor eax, eax
test si, si
setle al
mov edx, dword [ecx + 0x1a3c]
mov ecx, dword [ecx + 0x1a34]
lea eax, [eax*4 + 5]
push eax
push ebx
call fcn.1006f1f0
add esp, 0x20
test al, al
je 0x10074ce6
xor edx, edx
mov ecx, ebx
test di, di
setle dl
lea edx, [edx*4 + 5]
call fcn.1006f230
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
mov dword [esp + 0x10], 0
cmp ebx, 0x20b
je 0x10074ae1
cmp ebx, 0x20c
jne 0x10074b16
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 0x16]
cmp ebx, 0x20b
jne 0x10074afd
mov eax, 0x2000
mov edx, 0x800
jmp 0x10074b0c
mov ebx, 0x20b
mov eax, 0x4000
mov edx, 0x1000
cmp ecx, 1
cmove eax, edx
mov dword [esp + 0x10], eax
xor edi, edi
mov eax, 0x400
cmp ebx, 0x208
mov ecx, 0x200
mov esi, ebx
cmove edi, eax
xor eax, eax
cmp ebx, 0x207
cmove eax, ecx
mov ecx, 0x400000
add edi, eax
xor eax, eax
cmp ebx, 0x202
cmove eax, ecx
mov ecx, 0x10000
add edi, eax
xor eax, eax
cmp ebx, 0x205
cmove eax, ecx
mov ecx, 0x8000
add edi, eax
xor eax, eax
cmp ebx, 0x204
cmove eax, ecx
add edi, eax
mov eax, 0x207
cmp ebx, 0x208
cmove ebx, eax
sub esp, 0x18
mov ecx, esp
push 0x10
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.SideShopOpenShop
mov byte [ecx], 0
call fcn.1000ecc0
call fcn.1006bfe0
cmp esi, 0x201
mov ecx, 0x20001
mov esi, 1
cmove esi, ecx
mov ecx, dword [eax*4 + 0x1010481c]
add esi, dword [esp + 0x28]
add esi, edi
push esi
mov edx, dword [ecx + 0x1a3c]
mov ecx, dword [ecx + 0x1a34]
push ebx
call fcn.1006f1f0
add esp, 0x20
test al, al
je 0x10074bfd
mov edx, esi
mov ecx, ebx
call fcn.1006f230
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
mov al, byte [0x100f25a1]
cmp ebx, 0x202
jne 0x10074cda
test al, al
je 0x10074c6b
cmp byte [0x100f25a2], 0
jne 0x10074c6b
mov ecx, dword [0x100f25a8]
cmp ecx, 0xffffffff
je 0x10074c6b
mov eax, dword [ecx*4 + 0x1010481c]
push 1
mov byte [eax], 0
mov eax, dword [ecx*4 + 0x1010481c]
push dword [eax + 0x3f0]
call fcn.10075dc0
mov ecx, dword [0x100f25a8]
push 8
mov eax, dword [ecx*4 + 0x1010481c]
mov byte [eax], 1
mov eax, dword [ecx*4 + 0x1010481c]
push dword [eax + 0x3f0]
call fcn.10075dc0
add esp, 0x10
sub esp, 0x18
mov ecx, esp
push 9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.SearchBar
mov byte [ecx], 0
call fcn.1000ecc0
call fcn.1006bfe0
add esp, 0x18
mov eax, dword [eax*4 + 0x1010481c]
cmp byte [eax], 0
je 0x1007563e
cmp byte [eax + 0x1a11], 0
jne 0x1007563e
push 0x200
push dword [eax + 0x190c]
call fcn.10075dc0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
cmp ebx, 0x20a
jne 0x1007563e
sub esp, 0x18
mov ecx, esp
push 9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.SearchBar
mov byte [ecx], 0
call fcn.1000ecc0
call fcn.1006bfe0
mov edi, eax
add esp, 0x18
mov eax, dword [esp + 0x14]
mov ecx, dword [edi*4 + 0x1010481c]
cmp byte [ecx + 0x1a11], 0
je 0x1007511b
mov ecx, dword [ecx + 0x1a08]
xor edx, edx
cmp word [eax + 0x16], dx
setg dl
mov bl, byte [ecx]
lea edx, [edx*2 - 1]
test bl, bl
je 0x10074d57
mov esi, dword [ecx + 0x34]
test esi, esi
jle 0x10074d57
movss xmm1, dword [esi + 0x1f4]
jmp 0x10074d5d
movss xmm1, dword [esp + 0x18]
movd xmm0, edx
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
cvttss2si edx, xmm0
test bl, bl
je 0x10074d81
mov esi, dword [ecx + 0x34]
test esi, esi
jle 0x10074d81
cvttss2si esi, dword [esi + 0x1ec]
jmp 0x10074d85
mov esi, dword [esp + 0x18]
cmp esi, edx
jg 0x1007511b
test bl, bl
je 0x10074da2
mov esi, dword [ecx + 0x34]
test esi, esi
jle 0x10074da2
cvttss2si esi, dword [esi + 0x1f0]
jmp 0x10074da6
mov esi, dword [esp + 0x18]
cmp esi, edx
jl 0x1007511b
push edx
call fcn.1001a060
mov eax, dword [edi*4 + 0x1010481c]
push 0
push dword [eax + 0x1a08]
call fcn.100813e0
add esp, 8
jmp 0x10075117
mov edx, 9
call fcn.10073090
add esp, 8
jmp 0x10075065
cmp ebx, 0x20b
jne 0x10074e0e
mov eax, dword [esp + 0x1c]
mov ecx, 0x801
mov edx, 0x2001
cmp word [eax + 0x16], di
cmove edx, ecx
mov ecx, ebx
call fcn.10073090
add esp, 8
jmp 0x10075065
mov eax, 0x201
cmp ebx, 0x207
mov ecx, ebx
cmove edi, eax
mov edx, edi
call fcn.10073090
add esp, 8
jmp 0x10074fa6
cmp byte [0x101041bd], 0
je 0x10074e93
cmp ebx, 0x202
jne 0x10074fa6
mov eax, dword [0x100f26e4]
cmp byte [eax + 0x100f2844], 0
je 0x10075065
cmp byte [0x10103fe5], 0
jne 0x10075065
cmp byte [0x10103fe1], 0
jne 0x10075065
movq xmm0, qword [edx]
sub esp, 0xc
mov eax, dword [edx + 8]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.10071a60
add esp, 0xc
call fcn.100743e0
jmp 0x10075065
cmp ebx, 0x200
je 0x10074fb2
cmp ebx, 0x202
je 0x10074fa6
xor edx, edx
cmp ebx, 0x20a
jne 0x10074ed3
mov eax, dword [esp + 0x14]
mov ecx, ebx
cmp word [eax + 0x16], dx
setle dl
lea edx, [edx*4 + 5]
call fcn.1006f230
jmp 0x10075065
cmp ebx, 0x20b
je 0x10074ee3
cmp ebx, 0x20c
jne 0x10074f14
mov eax, dword [esp + 0x14]
movzx eax, word [eax + 0x16]
cmp ebx, 0x20b
jne 0x10074eff
mov edx, 0x2000
mov ecx, 0x800
jmp 0x10074f0e
mov ebx, 0x20b
mov edx, 0x4000
mov ecx, 0x1000
cmp eax, 1
cmove edx, ecx
xor esi, esi
mov dword [esp + 0x10], 0x200
cmp ebx, 0x208
mov eax, 0x400
mov ecx, ebx
cmove esi, eax
xor eax, eax
cmp ebx, 0x207
cmove eax, dword [esp + 0x10]
add esi, eax
mov dword [esp + 0x10], 0x400000
xor eax, eax
cmp ebx, 0x202
cmove eax, dword [esp + 0x10]
add esi, eax
mov dword [esp + 0x10], 0x10000
xor eax, eax
cmp ebx, 0x205
cmove eax, dword [esp + 0x10]
add esi, eax
xor eax, eax
cmp ebx, 0x204
cmove eax, dword [esp + 0x18]
add esi, eax
cmp ebx, 0x208
mov eax, 0x207
cmove ebx, eax
cmp ecx, 0x201
mov eax, 0x20001
mov ecx, ebx
cmove edi, eax
add edx, edi
add edx, esi
call fcn.1006f230
mov esi, 0x8000
cmp ebx, 0x200
jne 0x10075065
cmp byte [0x100f2579], 0
je 0x10075065
mov eax, dword [0x100f2854]
sub esp, 8
mov byte [0x100f2561], 0
movss xmm3, dword [eax]
mov eax, dword [0x100f2898]
subss xmm3, dword [0x100f257c]
movss xmm2, dword [eax]
subss xmm2, dword [0x100f2570]
movaps xmm0, xmm3
movss dword [esp + 4], xmm3
mulss xmm0, xmm3
movaps xmm1, xmm2
movss dword [esp], xmm2
mulss xmm1, xmm2
addss xmm1, xmm0
xorps xmm0, xmm0
sqrtss xmm0, xmm1
movss dword [esp + 0x18], xmm0
call fcn.1008c060
fstp dword [esp + 0x20]
movss xmm0, dword [esp + 0x20]
add esp, 8
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x100daa58]
cvtpd2ps xmm0, xmm0
call fcn.100b6fd5
mov eax, dword [0x100f2840]
movaps xmm1, xmm0
mulss xmm1, dword [esp + 0x10]
shufps xmm0, xmm0, 1
mulss xmm0, dword [esp + 0x10]
addss xmm1, dword [eax]
mov eax, dword [0x100f283c]
addss xmm0, dword [eax]
call fcn.1008cb20
cmp byte [0x100f2553], 0
je 0x1007510b
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov edi, dword [0x100f2710]
and ax, si
mov esi, dword [0x100f26dc]
cmp ebx, 0x204
je 0x1007509d
cmp ebx, 0x205
jne 0x10075186
test ax, ax
jne 0x10075186
cmp byte [0x100f2541], al
je 0x10075186
test esi, esi
jle 0x10075186
mov eax, dword [edi]
mov eax, dword [eax + 0x3f4]
mov ecx, dword [eax + 0x238]
test ecx, ecx
jle 0x10075186
call fcn.1006eff0
test al, al
je 0x10075186
cmp dword [0x100f2510], 0xffffffff
jne 0x10075186
cmp dword [0x100f2514], 0xffffffff
jne 0x10075186
call fcn.1008cc00
test al, al
jne 0x10075186
mov byte [0x100f28f4], 1
cmp ebx, 0x20a
jne 0x1007563e
mov eax, dword [esp + 0x14]
cmp byte [0x100f2519], 0
je 0x1007563e
movzx edi, word [eax + 0x16]
sub esp, 0x18
mov ecx, esp
push 0x10
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.ChatWheelSliderV
mov byte [ecx], 0
call fcn.1000ecc0
call fcn.1006bfe0
mov esi, eax
add esp, 0x18
mov ecx, dword [esi*4 + 0x1010481c]
mov ecx, dword [ecx + 0xa34]
cmp byte [ecx], 0
je 0x10075202
mov edx, dword [ecx + 0x34]
test edx, edx
jle 0x10075202
movss xmm0, dword [edx + 0x1f4]
jmp 0x10075208
cmp ebx, 0x204
jne 0x100751da
test esi, esi
jle 0x1007563e
mov eax, dword [edi]
mov eax, dword [eax + 0x3f4]
mov ecx, dword [eax + 0x238]
test ecx, ecx
jle 0x1007563e
call fcn.1006eff0
test al, al
jne 0x1007563e
mov byte [0x100f2550], al
mov byte [0x100f2552], 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
cmp ebx, 0x205
jne 0x1007510b
mov byte [0x100f2552], 0
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
movss xmm0, dword [esp + 0x18]
xor edx, edx
test di, di
cvttss2si eax, xmm0
setg dl
lea edx, [edx*2 - 1]
add edx, eax
cmp edx, 0xa
ja 0x1007563e
push edx
call fcn.1001a060
mov eax, dword [esi*4 + 0x1010481c]
push 0
push dword [eax + 0xa34]
call fcn.100813e0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x1007563e
cmp ebx, 0x100
je 0x10075277
cmp ebx, 0x101
jne 0x1007563e
jmp 0x1007528f
cmp esi, 0x79
je 0x10075281
cmp esi, 0x7b
jne 0x1007528f
cmp byte [0x101041bd], 0
je 0x1007528f
call fcn.100743e0
lea eax, [esp + 0x30]
push eax
call fcn.10074720
mov edx, eax
add esp, 4
movq xmm0, qword [edx]
mov edi, dword [edx + 8]
movq qword [esp + 0x18], xmm0
movq qword [esp + 0x24], xmm0
cmp ebx, 0x100
jne 0x100752f9
cmp esi, 0x78
je 0x100752d5
cmp esi, 0x1b
jne 0x100752f9
call fcn.100747a0
test al, al
je 0x100752f9
cmp byte [0x10103fe4], 0
je 0x100752f9
movq xmm0, qword [edx]
sub esp, 0xc
mov ecx, esp
mov eax, edi
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.10071a60
add esp, 0xc
call fcn.100743e0
jmp 0x10075637
cmp byte [0x100f2485], 0
jne 0x1007554c
cmp byte [0x100f25a1], 0
jne 0x1007561a
cmp ebx, 0x100
jne 0x1007534d
mov eax, dword [0x100f26e4]
cmp byte [eax + 0x100f2844], 0
je 0x1007534d
cmp byte [0x101041bd], 0
je 0x1007534d
cmp esi, 0x25
je 0x10075346
cmp esi, 0x26
je 0x10075346
cmp esi, 0x27
je 0x10075346
cmp esi, 0x28
jne 0x1007534d
mov byte [0x100f28f4], 1
cmp byte [esp + 0x24], 0
je 0x1007541b
cmp ebx, 0x100
jne 0x1007563e
cmp esi, 0x1b
jne 0x100753b3
mov ecx, str.InterfaceClick
call dword [0x100f28dc]
movq xmm0, qword [esp + 0x18]
sub esp, 0xc
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], edi
call fcn.10071a60
add esp, 0xc
xor edx, edx
xor ecx, ecx
push 0
push 0
call fcn.10073090
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
cmp esi, 0x5b
je 0x1007563e
cmp esi, 0x5c
je 0x1007563e
cmp esi, 0x12
je 0x1007563e
cmp esi, 0x10
je 0x1007563e
cmp esi, 0x11
je 0x1007563e
cmp esi, 0x79
je 0x1007563e
cmp esi, 0x7b
je 0x1007563e
push edi
push dword [esp + 0x2c]
mov edx, 2
mov ecx, esi
call fcn.10073090
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
cmp byte [0x101041bd], 0
jne 0x1007549b
cmp esi, 0x1b
je 0x1007563e
cmp esi, 0x5b
je 0x1007563e
cmp esi, 0x5c
je 0x1007563e
cmp esi, 0x12
je 0x1007563e
cmp esi, 0x10
je 0x1007563e
cmp esi, 0x78
je 0x1007563e
cmp esi, 0x79
je 0x1007563e
cmp esi, 0x7b
je 0x1007563e
cmp ebx, 0x100
mov eax, 0x82
mov edx, 0x102
mov ecx, esi
cmove edx, eax
call fcn.1006f230
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
cmp ebx, 0x100
jne 0x1007563e
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x11
call edi
mov ebx, 0x8000
test bx, ax
jbe 0x1007563e
cmp esi, 9
jne 0x100754f5
push 0x10
call edi
test bx, ax
mov eax, dword [0x10103fe8]
jbe 0x100754e0
test eax, eax
jle 0x100754d9
dec eax
jmp 0x100754e6
mov eax, 2
jmp 0x10075521
cmp eax, 2
jge 0x100754f1
inc eax
cmp eax, 0xffffffff
je 0x1007563e
jmp 0x10075521
xor eax, eax
jmp 0x10075521
cmp esi, 0x31
je 0x100754f1
cmp esi, 0x32
jne 0x10075504
lea eax, [esi - 0x31]
jmp 0x10075521
cmp esi, 0x33
je 0x100754d9
cmp esi, 0x34
jne 0x10075513
lea eax, [esi - 0x31]
jmp 0x10075521
cmp esi, 0x35
jne 0x1007563e
mov eax, 4
imul eax, eax, 0x2b8
push 8
push dword [eax + 0x10105330]
call fcn.10075dc0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x120]
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret
cmp byte [0x101041bd], 0
jne 0x100755ca
cmp esi, 0x1b
je 0x100755ca
cmp esi, 0x5b
je 0x100755ca
cmp esi, 0x5c
je 0x100755ca
cmp esi, 0x12
je 0x100755ca
cmp esi, 0x10
je 0x100755ca
cmp esi, 0x78
je 0x100755ca
cmp esi, 0x79
je 0x100755ca
cmp esi, 0x7b
je 0x100755ca
sub esp, 0x18
mov ecx, esp
push 0x10
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.SideShopOpenShop
mov byte [ecx], 0
call fcn.1000ecc0
call fcn.1006bfe0
push 2
push esi
mov ecx, dword [eax*4 + 0x1010481c]
mov edx, dword [ecx + 0x1a3c]
mov ecx, dword [ecx + 0x1a34]
call fcn.1006f1f0
add esp, 0x20
test al, al
jne 0x1007546c
cmp ebx, 0x100
je 0x100755da
cmp ebx, 0x101
jne 0x10075611
cmp esi, 0xd
jne 0x10075611
mov byte [0x100f28f4], 1
cmp ebx, 0x100
jne 0x10075611
mov eax, dword [0x100f259c]
test eax, eax
jle 0x10075611
mov eax, dword [eax*4 + 0x1010481c]
push 0x400
push dword [eax + 0xa40]
call fcn.10075dc0
add esp, 8
cmp byte [0x100f25a1], 0
je 0x1007563e
cmp byte [0x101041bd], 0
je 0x1007563e
cmp esi, 0x25
je 0x10075637
cmp esi, 0x26
je 0x10075637
cmp esi, 0x27
je 0x10075637
cmp esi, 0x28
jne 0x1007563e
mov byte [0x100f28f4], 1
mov ecx, dword [esp + 0x12c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret