Function at 0x10279700
Capabilities:
Inspect section memory permissions

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, 0x2544
call fcn.102d9eb0
mov eax, dword [0x10411968]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0x1a60], ecx
mov dword [ebp - 0x1a3c], 0
mov dword [ebp - 0x1a40], 0
mov dword [ebp - 0x1a4c], 0
mov dword [ebp - 0x1a50], 0
mov dword [ebp - 0x1a58], 0
mov dword [ebp - 0x1a44], 0
mov dword [ebp - 0x1a48], 0
mov dword [ebp - 0x1a54], 0
mov dword [ebp - 0x1a5c], 0
call fcn.101cb130
test eax, eax
jne 0x10279799
jmp 0x10283016
movzx eax, byte [0x10550304]
test eax, eax
jne 0x102797bc
mov ecx, 0x10551adc
call fcn.102acab0
mov byte [0x10551abc], 1
mov byte [0x10550304], 1
mov ecx, dword [ebp - 0x1a60]
movzx edx, byte [ecx + 8]
test edx, edx
je 0x102798f9
mov eax, dword [ebp - 0x1a60]
mov ecx, dword [eax + 4]
call fcn.101a9210
mov ecx, dword [ebp - 0x1a60]
mov ecx, dword [ecx + 4]
call fcn.101a93d0
mov ecx, dword [ebp - 0x1a60]
call fcn.10283030
movzx edx, byte [0x10551abc]
test edx, edx
je 0x10279822
movss xmm0, dword [0x10549890]
divss xmm0, dword [0x103359ec]
addss xmm0, dword [0x10550308]
movss dword [0x10550308], xmm0
jmp 0x10279846
movss xmm0, dword [0x10549890]
divss xmm0, dword [0x103359ec]
movss xmm1, dword [0x10550308]
subss xmm1, xmm0
movss dword [0x10550308], xmm1
movss xmm0, dword [0x10333068]
movss dword [ebp - 0x237c], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x20d8], xmm0
lea eax, [ebp - 0x237c]
push eax
lea ecx, [ebp - 0x20d8]
push ecx
push 0x10550308
call fcn.101778c0
add esp, 0xc
movss xmm0, dword [eax]
movss dword [0x10550308], xmm0
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x20e4], eax
movss xmm0, dword [0x10550308]
mulss xmm0, dword [0x1033307c]
mulss xmm0, dword [0x10336e60]
push ecx
movss dword [esp], xmm0
call fcn.1017fdc0
add esp, 4
fstp dword [ebp - 0x20dc]
movss xmm0, dword [ebp - 0x20dc]
mulss xmm0, dword [0x10333410]
movss dword [ebp - 0x20e0], xmm0
push ecx
movss xmm0, dword [ebp - 0x20e0]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x20e4]
call fcn.101a8d40
jmp 0x10282ec3
push 0x29c
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1bb4], eax
cmp dword [ebp - 0x1bb4], 0
je 0x10279928
mov ecx, dword [ebp - 0x1bb4]
call fcn.10296db0
mov dword [ebp - 0x1bb8], eax
jmp 0x10279932
mov dword [ebp - 0x1bb8], 0
mov ecx, dword [ebp - 0x1a60]
mov edx, dword [ebp - 0x1bb8]
mov dword [ecx + 4], edx
push ecx
movss xmm0, dword [0x10361da0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10361d9c]
movss dword [esp], xmm0
lea ecx, [ebp - 0x20d4]
call fcn.1017f430
mov eax, dword [ebp - 0x1a60]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x20e8], ecx
mov edx, dword [ebp - 0x20d0]
push edx
mov eax, dword [ebp - 0x20d4]
push eax
mov ecx, dword [ebp - 0x20e8]
call fcn.101a8c00
mov ecx, dword [ebp - 0x1a60]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x20ec], edx
mov eax, dword [0x10549a44]
mov eax, dword [eax + 0xc3c]
cdq
sub eax, edx
sar eax, 1
cvtsi2ss xmm0, eax
movss xmm1, dword [ebp - 0x20d0]
divss xmm1, dword [0x1033306c]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
mov ecx, dword [0x10549a44]
mov eax, dword [ecx + 0xc38]
cdq
sub eax, edx
sar eax, 1
cvtsi2ss xmm0, eax
movss xmm1, dword [ebp - 0x20d4]
divss xmm1, dword [0x1033306c]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x2510]
call fcn.1017f430
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x23a0], edx
mov dword [ebp - 0x239c], eax
mov ecx, dword [ebp - 0x239c]
push ecx
mov edx, dword [ebp - 0x23a0]
push edx
mov ecx, dword [ebp - 0x20ec]
call fcn.101a8be0
mov eax, 4
shl eax, 0
add eax, 0x1055017c
push eax
push 0x81f
push 0x10406730
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
push 0x2a8
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1bbc], eax
cmp dword [ebp - 0x1bbc], 0
je 0x10279ae9
mov ecx, dword [ebp - 0x1a60]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x20f0], edx
mov eax, 4
shl eax, 0
mov ecx, dword [eax + 0x1055017c]
mov dword [ebp - 0x20f4], ecx
mov edx, dword [ebp - 0x20f0]
push edx
mov eax, dword [ebp - 0x20f4]
push eax
push 1
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x7b8]
push ecx
lea ecx, [ebp - 0x1a86]
call fcn.1028dca0
or dword [ebp - 0x1a3c], 1
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1bbc]
call fcn.10296cc0
mov dword [ebp - 0x1bc0], eax
jmp 0x10279af3
mov dword [ebp - 0x1bc0], 0
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x20f8], eax
mov ecx, dword [ebp - 0x1bc0]
push ecx
mov ecx, dword [ebp - 0x20f8]
call fcn.101a90b0
mov edx, dword [ebp - 0x1a3c]
and edx, 1
je 0x10279b31
and dword [ebp - 0x1a3c], 0xfffffffe
lea ecx, [ebp - 0x7b8]
call fcn.10179000
push 0x2c0
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1bc4], eax
cmp dword [ebp - 0x1bc4], 0
je 0x10279ba5
mov eax, dword [ebp - 0x1a60]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x20fc], ecx
mov edx, dword [ebp - 0x20fc]
push edx
push 1
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x7a0]
push eax
lea ecx, [ebp - 0x1a87]
call fcn.1028dcc0
or dword [ebp - 0x1a3c], 2
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1bc4]
call fcn.102961c0
mov dword [ebp - 0x1bc8], eax
jmp 0x10279baf
mov dword [ebp - 0x1bc8], 0
mov ecx, dword [ebp - 0x1bc8]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1a3c]
and edx, 2
je 0x10279bd8
and dword [ebp - 0x1a3c], 0xfffffffd
lea ecx, [ebp - 0x7a0]
call fcn.10179000
push ecx
movss xmm0, dword [0x103575c8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10337848]
movss dword [esp], xmm0
lea ecx, [ebp - 0x2518]
call fcn.1017f430
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a8c00
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10361d90]
movss dword [esp], xmm0
lea ecx, [ebp - 0x2520]
call fcn.1017f430
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a8be0
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1bcc], eax
cmp dword [ebp - 0x1bcc], 0
je 0x10279ca5
push 0
push 0x10551584
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x788]
push eax
lea ecx, [ebp - 0x1a88]
call fcn.1028dce0
or dword [ebp - 0x1a3c], 4
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1bcc]
call fcn.10296140
mov dword [ebp - 0x1bd0], eax
jmp 0x10279caf
mov dword [ebp - 0x1bd0], 0
mov ecx, dword [ebp - 0x1bd0]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 4
je 0x10279cde
and dword [ebp - 0x1a3c], 0xfffffffb
lea ecx, [ebp - 0x788]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x2010], eax
cmp dword [ebp - 0x2010], 0
je 0x10279d41
push fcn.1028dc70
push 0x10551585
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x770]
push eax
lea ecx, [ebp - 0x1a89]
call fcn.1028dd00
or dword [ebp - 0x1a3c], 8
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x2010]
call fcn.10296140
mov dword [ebp - 0x200c], eax
jmp 0x10279d4b
mov dword [ebp - 0x200c], 0
mov ecx, dword [ebp - 0x200c]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 8
je 0x10279d7a
and dword [ebp - 0x1a3c], 0xfffffff7
lea ecx, [ebp - 0x770]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x2008], eax
cmp dword [ebp - 0x2008], 0
je 0x10279ddd
push fcn.1028dc70
push 0x1055158c
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x758]
push eax
lea ecx, [ebp - 0x1a8a]
call fcn.1028dd20
or dword [ebp - 0x1a3c], 0x10
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x2008]
call fcn.10296140
mov dword [ebp - 0x2004], eax
jmp 0x10279de7
mov dword [ebp - 0x2004], 0
mov ecx, dword [ebp - 0x2004]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 0x10
je 0x10279e16
and dword [ebp - 0x1a3c], 0xffffffef
lea ecx, [ebp - 0x758]
call fcn.10179000
push 0x70
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x2000], eax
cmp dword [ebp - 0x2000], 0
je 0x10279ec1
push fcn.1028dc70
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x728]
push eax
lea ecx, [ebp - 0x1a8b]
call fcn.1028dd60
or dword [ebp - 0x1a3c], 0x20
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x1033341c]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0x10551588
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x740]
push ecx
lea ecx, [ebp - 0x1a8c]
call fcn.1028dd40
or dword [ebp - 0x1a3c], 0x40
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x2000]
call fcn.10296b40
mov dword [ebp - 0x1ffc], eax
jmp 0x10279ecb
mov dword [ebp - 0x1ffc], 0
mov edx, dword [ebp - 0x1ffc]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov eax, dword [ebp - 0x1a3c]
and eax, 0x40
je 0x10279efa
and dword [ebp - 0x1a3c], 0xffffffbf
lea ecx, [ebp - 0x740]
call fcn.10179000
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0x20
je 0x10279f17
and dword [ebp - 0x1a3c], 0xffffffdf
lea ecx, [ebp - 0x728]
call fcn.10179000
push 0x64
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ff8], eax
cmp dword [ebp - 0x1ff8], 0
je 0x1027a092
lea ecx, [ebp - 0x1a8d]
call fcn.10171590
mov dword [ebp - 0x2100], eax
lea edx, [ebp - 0x500]
push edx
lea ecx, [ebp - 0x1a8e]
call fcn.1028dda0
or dword [ebp - 0x1a3c], 0x80
mov ecx, eax
call fcn.1017c760
push eax
lea ecx, [ebp - 0x15c0]
call fcn.1018afc0
or dword [ebp - 0x1a3c], 0x100
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x1a8f]
call fcn.1028ddc0
or dword [ebp - 0x1a3c], 0x200
mov ecx, eax
call fcn.1017c760
push eax
lea ecx, [ebp - 0x15a8]
call fcn.1018afc0
or dword [ebp - 0x1a3c], 0x400
lea ecx, [ebp - 0x530]
push ecx
lea ecx, [ebp - 0x1a90]
call fcn.1028dde0
or dword [ebp - 0x1a3c], 0x800
mov ecx, eax
call fcn.1017c760
push eax
lea ecx, [ebp - 0x1590]
call fcn.1018afc0
or dword [ebp - 0x1a3c], 0x1000
or dword [ebp - 0x1a3c], 0x2000
lea edx, [ebp - 0x1578]
push edx
lea eax, [ebp - 0x15c0]
push eax
lea ecx, [ebp - 0x2528]
call fcn.10178950
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x23a8], ecx
mov dword [ebp - 0x23a4], edx
push 0
push fcn.1028dc70
sub esp, 0xc
mov ecx, esp
mov eax, dword [ebp - 0x2100]
push eax
mov edx, dword [ebp - 0x23a4]
push edx
mov eax, dword [ebp - 0x23a8]
push eax
call fcn.101aabb0
push 0x10551590
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x548]
push ecx
lea ecx, [ebp - 0x1a91]
call fcn.1028dd80
or dword [ebp - 0x1a3c], 0x4000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ff8]
call fcn.10296330
mov dword [ebp - 0x1ff4], eax
jmp 0x1027a09c
mov dword [ebp - 0x1ff4], 0
mov edx, dword [ebp - 0x1ff4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov eax, dword [ebp - 0x1a3c]
and eax, 0x4000
je 0x1027a0d0
and dword [ebp - 0x1a3c], 0xffffbfff
lea ecx, [ebp - 0x548]
call fcn.10179000
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0x2000
je 0x1027a0fd
and dword [ebp - 0x1a3c], 0xffffdfff
push fcn.10179000
push 3
push 0x18
lea edx, [ebp - 0x15c0]
push edx
call fcn.1017f760
mov eax, dword [ebp - 0x1a3c]
and eax, 0x800
je 0x1027a11f
and dword [ebp - 0x1a3c], 0xfffff7ff
lea ecx, [ebp - 0x530]
call fcn.10179000
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0x200
je 0x1027a142
and dword [ebp - 0x1a3c], 0xfffffdff
lea ecx, [ebp - 0x518]
call fcn.10179000
mov edx, dword [ebp - 0x1a3c]
and edx, 0x80
je 0x1027a165
and dword [ebp - 0x1a3c], 0xffffff7f
lea ecx, [ebp - 0x500]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ff0], eax
cmp dword [ebp - 0x1ff0], 0
je 0x1027a1cb
push fcn.1028dc70
push 0x10551595
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x4e8]
push eax
lea ecx, [ebp - 0x1a92]
call fcn.1028de00
or dword [ebp - 0x1a3c], 0x8000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ff0]
call fcn.10296140
mov dword [ebp - 0x1fec], eax
jmp 0x1027a1d5
mov dword [ebp - 0x1fec], 0
mov ecx, dword [ebp - 0x1fec]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 0x8000
je 0x1027a20a
and dword [ebp - 0x1a3c], 0xffff7fff
lea ecx, [ebp - 0x4e8]
call fcn.10179000
push 0x70
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fe8], eax
cmp dword [ebp - 0x1fe8], 0
je 0x1027a2d3
lea ecx, [ebp - 0x1a93]
call fcn.1028deb0
mov dword [ebp - 0x2104], eax
mov eax, dword [ebp - 0x2104]
push eax
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x4b8]
push ecx
lea ecx, [ebp - 0x1a94]
call fcn.1028de40
or dword [ebp - 0x1a3c], 0x10000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10333410]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10336418]
movss dword [esp], xmm0
push 0x10551598
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x4d0]
push edx
lea ecx, [ebp - 0x1a95]
call fcn.1028de20
or dword [ebp - 0x1a3c], 0x20000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1fe8]
call fcn.10296b40
mov dword [ebp - 0x1fe4], eax
jmp 0x1027a2dd
mov dword [ebp - 0x1fe4], 0
mov eax, dword [ebp - 0x1fe4]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0x20000
je 0x1027a312
and dword [ebp - 0x1a3c], 0xfffdffff
lea ecx, [ebp - 0x4d0]
call fcn.10179000
mov edx, dword [ebp - 0x1a3c]
and edx, 0x10000
je 0x1027a335
and dword [ebp - 0x1a3c], 0xfffeffff
lea ecx, [ebp - 0x4b8]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fe0], eax
cmp dword [ebp - 0x1fe0], 0
je 0x1027a39b
push fcn.1028dc70
push 0x10551594
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0x1a96]
call fcn.1028dec0
or dword [ebp - 0x1a3c], 0x40000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1fe0]
call fcn.10296140
mov dword [ebp - 0x1fdc], eax
jmp 0x1027a3a5
mov dword [ebp - 0x1fdc], 0
mov ecx, dword [ebp - 0x1fdc]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 0x40000
je 0x1027a3da
and dword [ebp - 0x1a3c], 0xfffbffff
lea ecx, [ebp - 0x4a0]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fd8], eax
cmp dword [ebp - 0x1fd8], 0
je 0x1027a443
push fcn.1028dc70
push 0x105515a8
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x488]
push eax
lea ecx, [ebp - 0x1a97]
call fcn.1028dee0
or dword [ebp - 0x1a3c], 0x80000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1fd8]
call fcn.102965d0
mov dword [ebp - 0x1fd4], eax
jmp 0x1027a44d
mov dword [ebp - 0x1fd4], 0
mov ecx, dword [ebp - 0x1fd4]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 0x80000
je 0x1027a482
and dword [ebp - 0x1a3c], 0xfff7ffff
lea ecx, [ebp - 0x488]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fd0], eax
cmp dword [ebp - 0x1fd0], 0
je 0x1027a4eb
push fcn.1028dc70
push 0x105515b4
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x1a98]
call fcn.1028df00
or dword [ebp - 0x1a3c], 0x100000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1fd0]
call fcn.102965d0
mov dword [ebp - 0x1fcc], eax
jmp 0x1027a4f5
mov dword [ebp - 0x1fcc], 0
mov ecx, dword [ebp - 0x1fcc]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 0x100000
je 0x1027a52a
and dword [ebp - 0x1a3c], 0xffefffff
lea ecx, [ebp - 0x470]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fc8], eax
cmp dword [ebp - 0x1fc8], 0
je 0x1027a593
push fcn.1028dc70
push 0x1055159c
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x458]
push eax
lea ecx, [ebp - 0x1a99]
call fcn.1028df20
or dword [ebp - 0x1a3c], 0x200000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1fc8]
call fcn.102965d0
mov dword [ebp - 0x1fc4], eax
jmp 0x1027a59d
mov dword [ebp - 0x1fc4], 0
mov ecx, dword [ebp - 0x1fc4]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 0x200000
je 0x1027a5d2
and dword [ebp - 0x1a3c], 0xffdfffff
lea ecx, [ebp - 0x458]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fc0], eax
cmp dword [ebp - 0x1fc0], 0
je 0x1027a64e
lea ecx, [ebp - 0x1a9a]
call fcn.1028dfb0
mov dword [ebp - 0x2108], eax
mov eax, dword [ebp - 0x2108]
push eax
push 0x105515c4
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x440]
push ecx
lea ecx, [ebp - 0x1a9b]
call fcn.1028df40
or dword [ebp - 0x1a3c], 0x400000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1fc0]
call fcn.102965d0
mov dword [ebp - 0x1fbc], eax
jmp 0x1027a658
mov dword [ebp - 0x1fbc], 0
mov edx, dword [ebp - 0x1fbc]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov eax, dword [ebp - 0x1a3c]
and eax, 0x400000
je 0x1027a68c
and dword [ebp - 0x1a3c], 0xffbfffff
lea ecx, [ebp - 0x440]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fb8], eax
cmp dword [ebp - 0x1fb8], 0
je 0x1027a705
lea ecx, [ebp - 0x1a9c]
call fcn.1028e030
mov dword [ebp - 0x210c], eax
mov ecx, dword [ebp - 0x210c]
push ecx
push 0x105515d0
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x428]
push edx
lea ecx, [ebp - 0x1a9d]
call fcn.1028dfc0
or dword [ebp - 0x1a3c], 0x800000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1fb8]
call fcn.10296140
mov dword [ebp - 0x1fb4], eax
jmp 0x1027a70f
mov dword [ebp - 0x1fb4], 0
mov eax, dword [ebp - 0x1fb4]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.101a9080
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0x800000
je 0x1027a744
and dword [ebp - 0x1a3c], 0xff7fffff
lea ecx, [ebp - 0x428]
call fcn.10179000
mov ecx, dword [ebp - 0x1a74]
call fcn.1019c6d0
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x2110], eax
mov ecx, dword [ebp - 0x1a74]
push ecx
mov ecx, dword [ebp - 0x2110]
call fcn.101a9080
mov edx, 4
imul eax, edx, 0
add eax, 0x10550160
push eax
push 0x3a6
push 0x10406f50
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
mov ecx, 4
shl ecx, 0
add ecx, 0x10550160
push ecx
push 0x4f8
push 0x10408058
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
mov edx, 4
shl edx, 1
add edx, 0x10550160
push edx
push 0x42c
push 0x10408550
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
mov eax, 4
imul ecx, eax, 3
add ecx, 0x10550160
push ecx
push 0x39a
push 0x104072f8
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
mov edx, 4
shl edx, 2
add edx, 0x10550160
push edx
push 0x419
push 0x10407c38
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
mov eax, 4
imul ecx, eax, 5
add ecx, 0x10550160
push ecx
push 0x2b2
push 0x10407980
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
mov edx, 4
imul eax, edx, 6
add eax, 0x10550160
push eax
push 0x2e7
push 0x10407698
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
push 0x60
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f78], eax
cmp dword [ebp - 0x1f78], 0
je 0x1027adc0
push 0x20
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fb0], eax
cmp dword [ebp - 0x1fb0], 0
je 0x1027a935
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [edx + 0x10550160]
mov dword [ebp - 0x2114], eax
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x368]
push ecx
lea ecx, [ebp - 0x1a9e]
call fcn.1028e060
or dword [ebp - 0x1a3c], 0x1000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10361d74]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x2114]
push edx
mov ecx, dword [ebp - 0x1fb0]
call fcn.102964f0
mov dword [ebp - 0x1fac], eax
jmp 0x1027a93f
mov dword [ebp - 0x1fac], 0
mov eax, dword [ebp - 0x1fac]
mov dword [ebp - 0x1a38], eax
push 0x20
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fa8], eax
cmp dword [ebp - 0x1fa8], 0
je 0x1027a9d0
mov ecx, 4
shl ecx, 0
mov edx, dword [ecx + 0x10550160]
mov dword [ebp - 0x2118], edx
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0x1a9f]
call fcn.1028e080
or dword [ebp - 0x1a3c], 0x2000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10361d7c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x2118]
push ecx
mov ecx, dword [ebp - 0x1fa8]
call fcn.102964f0
mov dword [ebp - 0x1fa4], eax
jmp 0x1027a9da
mov dword [ebp - 0x1fa4], 0
mov edx, dword [ebp - 0x1fa4]
mov dword [ebp - 0x1a34], edx
push 0x20
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1fa0], eax
cmp dword [ebp - 0x1fa0], 0
je 0x1027aa6a
mov eax, 4
shl eax, 1
mov ecx, dword [eax + 0x10550160]
mov dword [ebp - 0x211c], ecx
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x398]
push edx
lea ecx, [ebp - 0x1aa0]
call fcn.1028e0a0
or dword [ebp - 0x1a3c], 0x4000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10361d80]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x211c]
push eax
mov ecx, dword [ebp - 0x1fa0]
call fcn.102964f0
mov dword [ebp - 0x1f9c], eax
jmp 0x1027aa74
mov dword [ebp - 0x1f9c], 0
mov ecx, dword [ebp - 0x1f9c]
mov dword [ebp - 0x1a30], ecx
push 0x20
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f98], eax
cmp dword [ebp - 0x1f98], 0
je 0x1027ab05
mov edx, 4
imul eax, edx, 3
mov ecx, dword [eax + 0x10550160]
mov dword [ebp - 0x2120], ecx
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x3b0]
push edx
lea ecx, [ebp - 0x1aa1]
call fcn.1028e0c0
or dword [ebp - 0x1a3c], 0x8000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10361d84]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x2120]
push eax
mov ecx, dword [ebp - 0x1f98]
call fcn.102964f0
mov dword [ebp - 0x1f94], eax
jmp 0x1027ab0f
mov dword [ebp - 0x1f94], 0
mov ecx, dword [ebp - 0x1f94]
mov dword [ebp - 0x1a2c], ecx
push 0x20
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f90], eax
cmp dword [ebp - 0x1f90], 0
je 0x1027aba0
mov edx, 4
shl edx, 2
mov eax, dword [edx + 0x10550160]
mov dword [ebp - 0x2124], eax
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x3c8]
push ecx
lea ecx, [ebp - 0x1aa2]
call fcn.1028e0e0
or dword [ebp - 0x1a3c], 0x10000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x1034c1d4]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x2124]
push edx
mov ecx, dword [ebp - 0x1f90]
call fcn.102964f0
mov dword [ebp - 0x1f8c], eax
jmp 0x1027abaa
mov dword [ebp - 0x1f8c], 0
mov eax, dword [ebp - 0x1f8c]
mov dword [ebp - 0x1a28], eax
push 0x20
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f88], eax
cmp dword [ebp - 0x1f88], 0
je 0x1027ac3b
mov ecx, 4
imul edx, ecx, 5
mov eax, dword [edx + 0x10550160]
mov dword [ebp - 0x2128], eax
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x3e0]
push ecx
lea ecx, [ebp - 0x1aa3]
call fcn.1028e100
or dword [ebp - 0x1a3c], 0x20000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10333408]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x2128]
push edx
mov ecx, dword [ebp - 0x1f88]
call fcn.102964f0
mov dword [ebp - 0x1f84], eax
jmp 0x1027ac45
mov dword [ebp - 0x1f84], 0
mov eax, dword [ebp - 0x1f84]
mov dword [ebp - 0x1a24], eax
push 0x20
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f80], eax
cmp dword [ebp - 0x1f80], 0
je 0x1027acd6
mov ecx, 4
imul edx, ecx, 6
mov eax, dword [edx + 0x10550160]
mov dword [ebp - 0x212c], eax
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x3f8]
push ecx
lea ecx, [ebp - 0x1aa4]
call fcn.1028e120
or dword [ebp - 0x1a3c], 0x40000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10361174]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x212c]
push edx
mov ecx, dword [ebp - 0x1f80]
call fcn.102964f0
mov dword [ebp - 0x1f7c], eax
jmp 0x1027ace0
mov dword [ebp - 0x1f7c], 0
mov eax, dword [ebp - 0x1f7c]
mov dword [ebp - 0x1a20], eax
lea ecx, [ebp - 0x1aa5]
call fcn.1028e170
mov dword [ebp - 0x2130], eax
mov ecx, dword [ebp - 0x1a60]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x2134], edx
lea ecx, [ebp - 0x1aa6]
call fcn.10171590
mov dword [ebp - 0x2138], eax
lea eax, [ebp - 0x1a1c]
push eax
lea ecx, [ebp - 0x1a38]
push ecx
lea ecx, [ebp - 0x2530]
call fcn.10178950
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x23b0], edx
mov dword [ebp - 0x23ac], eax
mov ecx, dword [ebp - 0x2130]
push ecx
push 0
push 1
mov edx, dword [ebp - 0x2134]
push edx
sub esp, 0xc
mov ecx, esp
mov eax, dword [ebp - 0x2138]
push eax
mov edx, dword [ebp - 0x23ac]
push edx
mov eax, dword [ebp - 0x23b0]
push eax
call fcn.10295f20
push 0x10551728
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x410]
push ecx
lea ecx, [ebp - 0x1aa7]
call fcn.1028e040
or dword [ebp - 0x1a3c], 0x80000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f78]
call fcn.10296a10
mov dword [ebp - 0x1f74], eax
jmp 0x1027adca
mov dword [ebp - 0x1f74], 0
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x213c], eax
mov ecx, dword [ebp - 0x1f74]
push ecx
mov ecx, dword [ebp - 0x213c]
call fcn.101a9080
mov edx, dword [ebp - 0x1a3c]
and edx, 0x80000000
je 0x1027ae0e
and dword [ebp - 0x1a3c], 0x7fffffff
lea ecx, [ebp - 0x410]
call fcn.10179000
mov eax, dword [ebp - 0x1a3c]
and eax, 0x40000000
je 0x1027ae30
and dword [ebp - 0x1a3c], 0xbfffffff
lea ecx, [ebp - 0x3f8]
call fcn.10179000
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0x20000000
je 0x1027ae53
and dword [ebp - 0x1a3c], 0xdfffffff
lea ecx, [ebp - 0x3e0]
call fcn.10179000
mov edx, dword [ebp - 0x1a3c]
and edx, 0x10000000
je 0x1027ae76
and dword [ebp - 0x1a3c], 0xefffffff
lea ecx, [ebp - 0x3c8]
call fcn.10179000
mov eax, dword [ebp - 0x1a3c]
and eax, 0x8000000
je 0x1027ae98
and dword [ebp - 0x1a3c], 0xf7ffffff
lea ecx, [ebp - 0x3b0]
call fcn.10179000
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0x4000000
je 0x1027aebb
and dword [ebp - 0x1a3c], 0xfbffffff
lea ecx, [ebp - 0x398]
call fcn.10179000
mov edx, dword [ebp - 0x1a3c]
and edx, 0x2000000
je 0x1027aede
and dword [ebp - 0x1a3c], 0xfdffffff
lea ecx, [ebp - 0x380]
call fcn.10179000
mov eax, dword [ebp - 0x1a3c]
and eax, 0x1000000
je 0x1027af00
and dword [ebp - 0x1a3c], 0xfeffffff
lea ecx, [ebp - 0x368]
call fcn.10179000
mov ecx, dword [ebp - 0x1a60]
call fcn.1028c1f0
mov ecx, 4
shl ecx, 1
add ecx, 0x1055017c
push ecx
push 0x86e
push 0x10403670
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
push 0x2a8
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f70], eax
cmp dword [ebp - 0x1f70], 0
je 0x1027afc2
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x2140], eax
mov ecx, 4
shl ecx, 1
mov edx, dword [ecx + 0x1055017c]
mov dword [ebp - 0x2144], edx
mov eax, dword [ebp - 0x2140]
push eax
mov ecx, dword [ebp - 0x2144]
push ecx
push 2
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x350]
push edx
lea ecx, [ebp - 0x1aa8]
call fcn.1028e180
or dword [ebp - 0x1a40], 1
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f70]
call fcn.10296cc0
mov dword [ebp - 0x1f6c], eax
jmp 0x1027afcc
mov dword [ebp - 0x1f6c], 0
mov eax, dword [ebp - 0x1a60]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2148], ecx
mov edx, dword [ebp - 0x1f6c]
push edx
mov ecx, dword [ebp - 0x2148]
call fcn.101a90b0
mov eax, dword [ebp - 0x1a40]
and eax, 1
je 0x1027b00a
and dword [ebp - 0x1a40], 0xfffffffe
lea ecx, [ebp - 0x350]
call fcn.10179000
push 0x2c0
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f68], eax
cmp dword [ebp - 0x1f68], 0
je 0x1027b07e
mov ecx, dword [ebp - 0x1a60]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x214c], edx
mov eax, dword [ebp - 0x214c]
push eax
push 2
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x338]
push ecx
lea ecx, [ebp - 0x1aa9]
call fcn.1028e1a0
or dword [ebp - 0x1a40], 2
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f68]
call fcn.102961c0
mov dword [ebp - 0x1f64], eax
jmp 0x1027b088
mov dword [ebp - 0x1f64], 0
mov edx, dword [ebp - 0x1f64]
mov dword [ebp - 0x1a70], edx
mov eax, dword [ebp - 0x1a40]
and eax, 2
je 0x1027b0b1
and dword [ebp - 0x1a40], 0xfffffffd
lea ecx, [ebp - 0x338]
call fcn.10179000
push ecx
movss xmm0, dword [0x103575c8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10337848]
movss dword [esp], xmm0
lea ecx, [ebp - 0x2538]
call fcn.1017f430
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a8c00
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x24c0]
call fcn.1017f430
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a8be0
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f60], eax
cmp dword [ebp - 0x1f60], 0
je 0x1027b176
push 0
push 0x10551730
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x1aaa]
call fcn.1028e1c0
or dword [ebp - 0x1a40], 4
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f60]
call fcn.10296140
mov dword [ebp - 0x1f5c], eax
jmp 0x1027b180
mov dword [ebp - 0x1f5c], 0
mov ecx, dword [ebp - 0x1f5c]
push ecx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov edx, dword [ebp - 0x1a40]
and edx, 4
je 0x1027b1ac
and dword [ebp - 0x1a40], 0xfffffffb
lea ecx, [ebp - 0x50]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f58], eax
cmp dword [ebp - 0x1f58], 0
je 0x1027b222
lea ecx, [ebp - 0x1aab]
call fcn.1028e220
mov dword [ebp - 0x2150], eax
mov eax, dword [ebp - 0x2150]
push eax
push 0x10551750
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x308]
push ecx
lea ecx, [ebp - 0x1aac]
call fcn.1028e1e0
or dword [ebp - 0x1a40], 8
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f58]
call fcn.10296140
mov dword [ebp - 0x1f54], eax
jmp 0x1027b22c
mov dword [ebp - 0x1f54], 0
mov edx, dword [ebp - 0x1f54]
push edx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov eax, dword [ebp - 0x1a40]
and eax, 8
je 0x1027b25b
and dword [ebp - 0x1a40], 0xfffffff7
lea ecx, [ebp - 0x308]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f50], eax
cmp dword [ebp - 0x1f50], 0
je 0x1027b2d4
lea ecx, [ebp - 0x1aad]
call fcn.1028e270
mov dword [ebp - 0x2154], eax
mov ecx, dword [ebp - 0x2154]
push ecx
push 0x10551744
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x2f0]
push edx
lea ecx, [ebp - 0x1aae]
call fcn.1028e230
or dword [ebp - 0x1a40], 0x10
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f50]
call fcn.102965d0
mov dword [ebp - 0x1f4c], eax
jmp 0x1027b2de
mov dword [ebp - 0x1f4c], 0
mov eax, dword [ebp - 0x1f4c]
push eax
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov ecx, dword [ebp - 0x1a40]
and ecx, 0x10
je 0x1027b30d
and dword [ebp - 0x1a40], 0xffffffef
lea ecx, [ebp - 0x2f0]
call fcn.10179000
push 0x70
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f48], eax
cmp dword [ebp - 0x1f48], 0
je 0x1027b3cb
lea ecx, [ebp - 0x1aaf]
call fcn.1028e2e0
mov dword [ebp - 0x2158], eax
mov edx, dword [ebp - 0x2158]
push edx
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x1ab0]
call fcn.1028e2a0
or dword [ebp - 0x1a40], 0x20
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10336770]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0x105517b4
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x2d8]
push ecx
lea ecx, [ebp - 0x1ab1]
call fcn.1028e280
or dword [ebp - 0x1a40], 0x40
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f48]
call fcn.10296b40
mov dword [ebp - 0x1f44], eax
jmp 0x1027b3d5
mov dword [ebp - 0x1f44], 0
mov edx, dword [ebp - 0x1f44]
push edx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov eax, dword [ebp - 0x1a40]
and eax, 0x40
je 0x1027b404
and dword [ebp - 0x1a40], 0xffffffbf
lea ecx, [ebp - 0x2d8]
call fcn.10179000
mov ecx, dword [ebp - 0x1a40]
and ecx, 0x20
je 0x1027b421
and dword [ebp - 0x1a40], 0xffffffdf
lea ecx, [ebp - 0x2c0]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f40], eax
cmp dword [ebp - 0x1f40], 0
je 0x1027b49a
lea ecx, [ebp - 0x1ab2]
call fcn.1028e330
mov dword [ebp - 0x215c], eax
mov edx, dword [ebp - 0x215c]
push edx
push 0x10551738
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x1ab3]
call fcn.1028e2f0
or dword [ebp - 0x1a40], 0x80
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f40]
call fcn.10296140
mov dword [ebp - 0x1f3c], eax
jmp 0x1027b4a4
mov dword [ebp - 0x1f3c], 0
mov ecx, dword [ebp - 0x1f3c]
push ecx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov edx, dword [ebp - 0x1a40]
and edx, 0x80
je 0x1027b4d9
and dword [ebp - 0x1a40], 0xffffff7f
lea ecx, [ebp - 0x2a8]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f38], eax
cmp dword [ebp - 0x1f38], 0
je 0x1027b552
lea ecx, [ebp - 0x1ab4]
call fcn.1028e3b0
mov dword [ebp - 0x2160], eax
mov eax, dword [ebp - 0x2160]
push eax
push 0x10551739
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x290]
push ecx
lea ecx, [ebp - 0x1ab5]
call fcn.1028e340
or dword [ebp - 0x1a40], 0x100
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f38]
call fcn.10296140
mov dword [ebp - 0x1f34], eax
jmp 0x1027b55c
mov dword [ebp - 0x1f34], 0
mov edx, dword [ebp - 0x1f34]
push edx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov eax, dword [ebp - 0x1a40]
and eax, 0x100
je 0x1027b590
and dword [ebp - 0x1a40], 0xfffffeff
lea ecx, [ebp - 0x290]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f30], eax
cmp dword [ebp - 0x1f30], 0
je 0x1027b609
lea ecx, [ebp - 0x1ab6]
call fcn.1028e400
mov dword [ebp - 0x2164], eax
mov ecx, dword [ebp - 0x2164]
push ecx
push 0x1055173a
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x278]
push edx
lea ecx, [ebp - 0x1ab7]
call fcn.1028e3c0
or dword [ebp - 0x1a40], 0x200
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f30]
call fcn.10296140
mov dword [ebp - 0x1f2c], eax
jmp 0x1027b613
mov dword [ebp - 0x1f2c], 0
mov eax, dword [ebp - 0x1f2c]
push eax
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov ecx, dword [ebp - 0x1a40]
and ecx, 0x200
je 0x1027b648
and dword [ebp - 0x1a40], 0xfffffdff
lea ecx, [ebp - 0x278]
call fcn.10179000
push 0x70
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f28], eax
cmp dword [ebp - 0x1f28], 0
je 0x1027b70c
lea ecx, [ebp - 0x1ab8]
call fcn.1028e4a0
mov dword [ebp - 0x2168], eax
mov edx, dword [ebp - 0x2168]
push edx
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x1ab9]
call fcn.1028e430
or dword [ebp - 0x1a40], 0x400
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10333410]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0x1055173c
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x1aba]
call fcn.1028e410
or dword [ebp - 0x1a40], 0x800
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f28]
call fcn.10296b40
mov dword [ebp - 0x1f24], eax
jmp 0x1027b716
mov dword [ebp - 0x1f24], 0
mov edx, dword [ebp - 0x1f24]
push edx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov eax, dword [ebp - 0x1a40]
and eax, 0x800
je 0x1027b74a
and dword [ebp - 0x1a40], 0xfffff7ff
lea ecx, [ebp - 0x260]
call fcn.10179000
mov ecx, dword [ebp - 0x1a40]
and ecx, 0x400
je 0x1027b76d
and dword [ebp - 0x1a40], 0xfffffbff
lea ecx, [ebp - 0x248]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f20], eax
cmp dword [ebp - 0x1f20], 0
je 0x1027b7e6
lea ecx, [ebp - 0x1abb]
call fcn.1028e520
mov dword [ebp - 0x216c], eax
mov edx, dword [ebp - 0x216c]
push edx
push 0x10551740
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x1abc]
call fcn.1028e4b0
or dword [ebp - 0x1a40], 0x1000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f20]
call fcn.10296140
mov dword [ebp - 0x1f1c], eax
jmp 0x1027b7f0
mov dword [ebp - 0x1f1c], 0
mov ecx, dword [ebp - 0x1f1c]
push ecx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov edx, dword [ebp - 0x1a40]
and edx, 0x1000
je 0x1027b825
and dword [ebp - 0x1a40], 0xffffefff
lea ecx, [ebp - 0x230]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f18], eax
cmp dword [ebp - 0x1f18], 0
je 0x1027b88b
push fcn.1028dc80
push 0x10551751
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1abd]
call fcn.1028e530
or dword [ebp - 0x1a40], 0x2000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f18]
call fcn.10296140
mov dword [ebp - 0x1f14], eax
jmp 0x1027b895
mov dword [ebp - 0x1f14], 0
mov ecx, dword [ebp - 0x1f14]
push ecx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov edx, dword [ebp - 0x1a40]
and edx, 0x2000
je 0x1027b8ca
and dword [ebp - 0x1a40], 0xffffdfff
lea ecx, [ebp - 0x218]
call fcn.10179000
push 0x5c
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f10], eax
cmp dword [ebp - 0x1f10], 0
je 0x1027b913
lea ecx, [ebp - 0x1abe]
call fcn.1028e5b0
mov dword [ebp - 0x2170], eax
mov eax, dword [ebp - 0x2170]
push eax
push 0x1055180c
mov ecx, dword [ebp - 0x1f10]
call fcn.10296260
mov dword [ebp - 0x1f0c], eax
jmp 0x1027b91d
mov dword [ebp - 0x1f0c], 0
mov ecx, dword [ebp - 0x1f0c]
push ecx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f08], eax
cmp dword [ebp - 0x1f08], 0
je 0x1027b9a8
lea ecx, [ebp - 0x1abf]
call fcn.1028e630
mov dword [ebp - 0x2174], eax
mov edx, dword [ebp - 0x2174]
push edx
push 0x1055180b
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x1ac0]
call fcn.1028e5c0
or dword [ebp - 0x1a40], 0x4000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f08]
call fcn.10296140
mov dword [ebp - 0x1f04], eax
jmp 0x1027b9b2
mov dword [ebp - 0x1f04], 0
mov ecx, dword [ebp - 0x1f04]
push ecx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov edx, dword [ebp - 0x1a40]
and edx, 0x4000
je 0x1027b9e7
and dword [ebp - 0x1a40], 0xffffbfff
lea ecx, [ebp - 0x200]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1f00], eax
cmp dword [ebp - 0x1f00], 0
je 0x1027ba60
lea ecx, [ebp - 0x1ac1]
call fcn.1028e6b0
mov dword [ebp - 0x2178], eax
mov eax, dword [ebp - 0x2178]
push eax
push 0x10551752
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x1ac2]
call fcn.1028e640
or dword [ebp - 0x1a40], 0x8000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1f00]
call fcn.10296140
mov dword [ebp - 0x2014], eax
jmp 0x1027ba6a
mov dword [ebp - 0x2014], 0
mov edx, dword [ebp - 0x2014]
push edx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov eax, dword [ebp - 0x1a40]
and eax, 0x8000
je 0x1027ba9e
and dword [ebp - 0x1a40], 0xffff7fff
lea ecx, [ebp - 0x1e8]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ef8], eax
cmp dword [ebp - 0x1ef8], 0
je 0x1027bb1a
lea ecx, [ebp - 0x1ac3]
call fcn.1028e730
mov dword [ebp - 0x217c], eax
mov ecx, dword [ebp - 0x217c]
push ecx
push 0x10551754
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x1d0]
push edx
lea ecx, [ebp - 0x1ac4]
call fcn.1028e6c0
or dword [ebp - 0x1a40], 0x10000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ef8]
call fcn.102965d0
mov dword [ebp - 0x1ef4], eax
jmp 0x1027bb24
mov dword [ebp - 0x1ef4], 0
mov eax, dword [ebp - 0x1ef4]
push eax
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov ecx, dword [ebp - 0x1a40]
and ecx, 0x10000
je 0x1027bb59
and dword [ebp - 0x1a40], 0xfffeffff
lea ecx, [ebp - 0x1d0]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ef0], eax
cmp dword [ebp - 0x1ef0], 0
je 0x1027bbd5
lea ecx, [ebp - 0x1ac5]
call fcn.1028e7b0
mov dword [ebp - 0x2180], eax
mov edx, dword [ebp - 0x2180]
push edx
push 0x10551760
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x1ac6]
call fcn.1028e740
or dword [ebp - 0x1a40], 0x20000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ef0]
call fcn.102965d0
mov dword [ebp - 0x1eec], eax
jmp 0x1027bbdf
mov dword [ebp - 0x1eec], 0
mov ecx, dword [ebp - 0x1eec]
push ecx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov edx, dword [ebp - 0x1a40]
and edx, 0x20000
je 0x1027bc14
and dword [ebp - 0x1a40], 0xfffdffff
lea ecx, [ebp - 0x1b8]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ee8], eax
cmp dword [ebp - 0x1ee8], 0
je 0x1027bc90
lea ecx, [ebp - 0x1ac7]
call fcn.1028e830
mov dword [ebp - 0x2184], eax
mov eax, dword [ebp - 0x2184]
push eax
push 0x1055176c
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x1a0]
push ecx
lea ecx, [ebp - 0x1ac8]
call fcn.1028e7c0
or dword [ebp - 0x1a40], 0x40000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ee8]
call fcn.102965d0
mov dword [ebp - 0x1ee4], eax
jmp 0x1027bc9a
mov dword [ebp - 0x1ee4], 0
mov edx, dword [ebp - 0x1ee4]
push edx
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov eax, dword [ebp - 0x1a40]
and eax, 0x40000
je 0x1027bcce
and dword [ebp - 0x1a40], 0xfffbffff
lea ecx, [ebp - 0x1a0]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ee0], eax
cmp dword [ebp - 0x1ee0], 0
je 0x1027bd4a
lea ecx, [ebp - 0x1ac9]
call fcn.1028e8b0
mov dword [ebp - 0x2188], eax
mov ecx, dword [ebp - 0x2188]
push ecx
push 0x10551778
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x188]
push edx
lea ecx, [ebp - 0x1aca]
call fcn.1028e840
or dword [ebp - 0x1a40], 0x80000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ee0]
call fcn.102965d0
mov dword [ebp - 0x1edc], eax
jmp 0x1027bd54
mov dword [ebp - 0x1edc], 0
mov eax, dword [ebp - 0x1edc]
push eax
mov ecx, dword [ebp - 0x1a70]
call fcn.101a9080
mov ecx, dword [ebp - 0x1a40]
and ecx, 0x80000
je 0x1027bd89
and dword [ebp - 0x1a40], 0xfff7ffff
lea ecx, [ebp - 0x188]
call fcn.10179000
mov ecx, dword [ebp - 0x1a70]
call fcn.1019c6d0
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x218c], eax
mov ecx, dword [ebp - 0x1a70]
push ecx
mov ecx, dword [ebp - 0x218c]
call fcn.101a9080
push 0x2c0
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ed8], eax
cmp dword [ebp - 0x1ed8], 0
je 0x1027be2c
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x2190], eax
mov ecx, dword [ebp - 0x2190]
push ecx
push 2
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x170]
push edx
lea ecx, [ebp - 0x1acb]
call fcn.1028e8c0
or dword [ebp - 0x1a40], 0x100000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ed8]
call fcn.102961c0
mov dword [ebp - 0x1ed4], eax
jmp 0x1027be36
mov dword [ebp - 0x1ed4], 0
mov eax, dword [ebp - 0x1ed4]
mov dword [ebp - 0x1a80], eax
mov ecx, dword [ebp - 0x1a40]
and ecx, 0x100000
je 0x1027be65
and dword [ebp - 0x1a40], 0xffefffff
lea ecx, [ebp - 0x170]
call fcn.10179000
push ecx
movss xmm0, dword [0x103575c8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10337848]
movss dword [esp], xmm0
lea ecx, [ebp - 0x24c8]
call fcn.1017f430
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x1a80]
call fcn.101a8c00
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10361d90]
movss dword [esp], xmm0
lea ecx, [ebp - 0x24d0]
call fcn.1017f430
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x1a80]
call fcn.101a8be0
push 0x64
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ed0], eax
cmp dword [ebp - 0x1ed0], 0
je 0x1027c04d
lea ecx, [ebp - 0x1acc]
call fcn.10171590
mov dword [ebp - 0x2194], eax
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x1acd]
call fcn.1028e900
or dword [ebp - 0x1a40], 0x200000
mov ecx, eax
call fcn.1017c760
push eax
lea ecx, [ebp - 0x1480]
call fcn.1018afc0
or dword [ebp - 0x1a40], 0x400000
lea ecx, [ebp - 0x128]
push ecx
lea ecx, [ebp - 0x1ace]
call fcn.1028e920
or dword [ebp - 0x1a40], 0x800000
mov ecx, eax
call fcn.1017c760
push eax
lea ecx, [ebp - 0x1468]
call fcn.1018afc0
or dword [ebp - 0x1a40], 0x1000000
lea edx, [ebp - 0x140]
push edx
lea ecx, [ebp - 0x1acf]
call fcn.1028e940
or dword [ebp - 0x1a40], 0x2000000
mov ecx, eax
call fcn.1017c760
push eax
lea ecx, [ebp - 0x1450]
call fcn.1018afc0
or dword [ebp - 0x1a40], 0x4000000
or dword [ebp - 0x1a40], 0x8000000
lea eax, [ebp - 0x1438]
push eax
lea ecx, [ebp - 0x1480]
push ecx
lea ecx, [ebp - 0x24d8]
call fcn.10178950
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x23b8], edx
mov dword [ebp - 0x23b4], eax
push 0
push fcn.1028dc80
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x2194]
push edx
mov eax, dword [ebp - 0x23b4]
push eax
mov edx, dword [ebp - 0x23b8]
push edx
call fcn.101aabb0
push 0x10551784
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x1ad0]
call fcn.1028e8e0
or dword [ebp - 0x1a40], 0x10000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ed0]
call fcn.10296330
mov dword [ebp - 0x1ecc], eax
jmp 0x1027c057
mov dword [ebp - 0x1ecc], 0
mov ecx, dword [ebp - 0x1ecc]
push ecx
mov ecx, dword [ebp - 0x1a80]
call fcn.101a9080
mov edx, dword [ebp - 0x1a40]
and edx, 0x10000000
je 0x1027c08c
and dword [ebp - 0x1a40], 0xefffffff
lea ecx, [ebp - 0x158]
call fcn.10179000
mov eax, dword [ebp - 0x1a40]
and eax, 0x8000000
je 0x1027c0b8
and dword [ebp - 0x1a40], 0xf7ffffff
push fcn.10179000
push 3
push 0x18
lea ecx, [ebp - 0x1480]
push ecx
call fcn.1017f760
mov edx, dword [ebp - 0x1a40]
and edx, 0x2000000
je 0x1027c0db
and dword [ebp - 0x1a40], 0xfdffffff
lea ecx, [ebp - 0x140]
call fcn.10179000
mov eax, dword [ebp - 0x1a40]
and eax, 0x800000
je 0x1027c0fd
and dword [ebp - 0x1a40], 0xff7fffff
lea ecx, [ebp - 0x128]
call fcn.10179000
mov ecx, dword [ebp - 0x1a40]
and ecx, 0x200000
je 0x1027c120
and dword [ebp - 0x1a40], 0xffdfffff
lea ecx, [ebp - 0x110]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ec8], eax
cmp dword [ebp - 0x1ec8], 0
je 0x1027c199
lea ecx, [ebp - 0x1ad1]
call fcn.1028e9d0
mov dword [ebp - 0x2198], eax
mov edx, dword [ebp - 0x2198]
push edx
push 0x10551788
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x1ad2]
call fcn.1028e960
or dword [ebp - 0x1a40], 0x20000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ec8]
call fcn.10296140
mov dword [ebp - 0x1ec4], eax
jmp 0x1027c1a3
mov dword [ebp - 0x1ec4], 0
mov ecx, dword [ebp - 0x1ec4]
push ecx
mov ecx, dword [ebp - 0x1a80]
call fcn.101a9080
mov edx, dword [ebp - 0x1a40]
and edx, 0x20000000
je 0x1027c1d8
and dword [ebp - 0x1a40], 0xdfffffff
lea ecx, [ebp - 0xf8]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ec0], eax
cmp dword [ebp - 0x1ec0], 0
je 0x1027c251
lea ecx, [ebp - 0x1ad3]
call fcn.1028ea50
mov dword [ebp - 0x219c], eax
mov eax, dword [ebp - 0x219c]
push eax
push 0x10551789
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0xe0]
push ecx
lea ecx, [ebp - 0x1ad4]
call fcn.1028e9e0
or dword [ebp - 0x1a40], 0x40000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ec0]
call fcn.10296140
mov dword [ebp - 0x1ebc], eax
jmp 0x1027c25b
mov dword [ebp - 0x1ebc], 0
mov edx, dword [ebp - 0x1ebc]
push edx
mov ecx, dword [ebp - 0x1a80]
call fcn.101a9080
mov eax, dword [ebp - 0x1a40]
and eax, 0x40000000
je 0x1027c28f
and dword [ebp - 0x1a40], 0xbfffffff
lea ecx, [ebp - 0xe0]
call fcn.10179000
push 0x70
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1eb8], eax
cmp dword [ebp - 0x1eb8], 0
je 0x1027c350
lea ecx, [ebp - 0x1ad5]
call fcn.1028eaf0
mov dword [ebp - 0x21a0], eax
mov ecx, dword [ebp - 0x21a0]
push ecx
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0x1ad6]
call fcn.1028ea80
or dword [ebp - 0x1a40], 0x80000000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10338c28]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0x1055178c
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x1ad7]
call fcn.1028ea60
or dword [ebp - 0x1a4c], 1
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1eb8]
call fcn.10296b40
mov dword [ebp - 0x1eb4], eax
jmp 0x1027c35a
mov dword [ebp - 0x1eb4], 0
mov ecx, dword [ebp - 0x1eb4]
push ecx
mov ecx, dword [ebp - 0x1a80]
call fcn.101a9080
mov edx, dword [ebp - 0x1a4c]
and edx, 1
je 0x1027c389
and dword [ebp - 0x1a4c], 0xfffffffe
lea ecx, [ebp - 0xc8]
call fcn.10179000
mov eax, dword [ebp - 0x1a40]
and eax, 0x80000000
je 0x1027c3ab
and dword [ebp - 0x1a40], 0x7fffffff
lea ecx, [ebp - 0xb0]
call fcn.10179000
push 0x70
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1eb0], eax
cmp dword [ebp - 0x1eb0], 0
je 0x1027c466
lea ecx, [ebp - 0x1ad8]
call fcn.1028eb90
mov dword [ebp - 0x21a4], eax
mov ecx, dword [ebp - 0x21a4]
push ecx
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x1ad9]
call fcn.1028eb20
or dword [ebp - 0x1a4c], 2
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
push ecx
movss xmm0, dword [0x10333410]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0x10551790
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x1ada]
call fcn.1028eb00
or dword [ebp - 0x1a4c], 4
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1eb0]
call fcn.10296b40
mov dword [ebp - 0x1eac], eax
jmp 0x1027c470
mov dword [ebp - 0x1eac], 0
mov ecx, dword [ebp - 0x1eac]
push ecx
mov ecx, dword [ebp - 0x1a80]
call fcn.101a9080
mov edx, dword [ebp - 0x1a4c]
and edx, 4
je 0x1027c49f
and dword [ebp - 0x1a4c], 0xfffffffb
lea ecx, [ebp - 0x98]
call fcn.10179000
mov eax, dword [ebp - 0x1a4c]
and eax, 2
je 0x1027c4b9
and dword [ebp - 0x1a4c], 0xfffffffd
lea ecx, [ebp - 0x80]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ea8], eax
cmp dword [ebp - 0x1ea8], 0
je 0x1027c52f
lea ecx, [ebp - 0x1adb]
call fcn.1028ec10
mov dword [ebp - 0x21a8], eax
mov ecx, dword [ebp - 0x21a8]
push ecx
push 0x1055179c
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x1adc]
call fcn.1028eba0
or dword [ebp - 0x1a4c], 8
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ea8]
call fcn.102965d0
mov dword [ebp - 0x1ea4], eax
jmp 0x1027c539
mov dword [ebp - 0x1ea4], 0
mov eax, dword [ebp - 0x1ea4]
push eax
mov ecx, dword [ebp - 0x1a80]
call fcn.101a9080
mov ecx, dword [ebp - 0x1a4c]
and ecx, 8
je 0x1027c565
and dword [ebp - 0x1a4c], 0xfffffff7
lea ecx, [ebp - 0x68]
call fcn.10179000
push 0x80
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1ea0], eax
cmp dword [ebp - 0x1ea0], 0
je 0x1027c5de
lea ecx, [ebp - 0x1add]
call fcn.1028ec60
mov dword [ebp - 0x21ac], eax
mov edx, dword [ebp - 0x21ac]
push edx
push 0x105517a8
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0x1ade]
call fcn.1028ec20
or dword [ebp - 0x1a4c], 0x10
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1ea0]
call fcn.102965d0
mov dword [ebp - 0x1e9c], eax
jmp 0x1027c5e8
mov dword [ebp - 0x1e9c], 0
mov ecx, dword [ebp - 0x1e9c]
push ecx
mov ecx, dword [ebp - 0x1a80]
call fcn.101a9080
mov edx, dword [ebp - 0x1a4c]
and edx, 0x10
je 0x1027c617
and dword [ebp - 0x1a4c], 0xffffffef
lea ecx, [ebp - 0x8d8]
call fcn.10179000
mov ecx, dword [ebp - 0x1a80]
call fcn.1019c6d0
mov eax, dword [ebp - 0x1a60]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x21b0], ecx
mov edx, dword [ebp - 0x1a80]
push edx
mov ecx, dword [ebp - 0x21b0]
call fcn.101a9080
mov eax, 4
imul ecx, eax, 3
add ecx, 0x1055017c
push ecx
push 0x693
push 0x104053a0
mov ecx, dword [0x1054fc20]
call fcn.1017cb10
push eax
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
push 0x2a8
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e98], eax
cmp dword [ebp - 0x1e98], 0
je 0x1027c6fc
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x21b4], eax
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [edx + 0x1055017c]
mov dword [ebp - 0x21b8], eax
mov ecx, dword [ebp - 0x21b4]
push ecx
mov edx, dword [ebp - 0x21b8]
push edx
push 3
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x1adf]
call fcn.1028ec70
or dword [ebp - 0x1a4c], 0x20
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1e98]
call fcn.10296cc0
mov dword [ebp - 0x1e94], eax
jmp 0x1027c706
mov dword [ebp - 0x1e94], 0
mov ecx, dword [ebp - 0x1a60]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x21bc], edx
mov eax, dword [ebp - 0x1e94]
push eax
mov ecx, dword [ebp - 0x21bc]
call fcn.101a90b0
mov ecx, dword [ebp - 0x1a4c]
and ecx, 0x20
je 0x1027c744
and dword [ebp - 0x1a4c], 0xffffffdf
lea ecx, [ebp - 0x8c0]
call fcn.10179000
mov ecx, dword [ebp - 0x1a60]
call fcn.102837b0
push 0x2c0
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e90], eax
cmp dword [ebp - 0x1e90], 0
je 0x1027c7c3
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov dword [ebp - 0x21c0], eax
mov ecx, dword [ebp - 0x21c0]
push ecx
push 3
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x8a8]
push edx
lea ecx, [ebp - 0x1ae0]
call fcn.1028ec90
or dword [ebp - 0x1a4c], 0x40
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1e90]
call fcn.102961c0
mov dword [ebp - 0x1e8c], eax
jmp 0x1027c7cd
mov dword [ebp - 0x1e8c], 0
mov eax, dword [ebp - 0x1e8c]
mov dword [ebp - 0x1a6c], eax
mov ecx, dword [ebp - 0x1a4c]
and ecx, 0x40
je 0x1027c7f6
and dword [ebp - 0x1a4c], 0xffffffbf
lea ecx, [ebp - 0x8a8]
call fcn.10179000
push ecx
movss xmm0, dword [0x10334058]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10337848]
movss dword [esp], xmm0
lea ecx, [ebp - 0x24e0]
call fcn.1017f430
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a8c00
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x24e8]
call fcn.1017f430
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a8be0
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e88], eax
cmp dword [ebp - 0x1e88], 0
je 0x1027c8c1
push 0
push 0x105517b8
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x890]
push eax
lea ecx, [ebp - 0x1ae1]
call fcn.1028ecb0
or dword [ebp - 0x1a4c], 0x80
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1e88]
call fcn.10296140
mov dword [ebp - 0x1e84], eax
jmp 0x1027c8cb
mov dword [ebp - 0x1e84], 0
mov ecx, dword [ebp - 0x1e84]
push ecx
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
mov edx, dword [ebp - 0x1a4c]
and edx, 0x80
je 0x1027c900
and dword [ebp - 0x1a4c], 0xffffff7f
lea ecx, [ebp - 0x890]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e80], eax
cmp dword [ebp - 0x1e80], 0
je 0x1027c966
push fcn.1028dc90
push 0x105517ba
sub esp, 0x18
mov esi, esp
lea eax, [ebp - 0x878]
push eax
lea ecx, [ebp - 0x1ae2]
call fcn.1028ecd0
or dword [ebp - 0x1a4c], 0x100
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1e80]
call fcn.10296140
mov dword [ebp - 0x1e7c], eax
jmp 0x1027c970
mov dword [ebp - 0x1e7c], 0
mov ecx, dword [ebp - 0x1e7c]
push ecx
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
mov edx, dword [ebp - 0x1a4c]
and edx, 0x100
je 0x1027c9a5
and dword [ebp - 0x1a4c], 0xfffffeff
lea ecx, [ebp - 0x878]
call fcn.10179000
push 0x5c
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e78], eax
cmp dword [ebp - 0x1e78], 0
je 0x1027c9ee
lea ecx, [ebp - 0x1ae3]
call fcn.1028ed40
mov dword [ebp - 0x21c4], eax
mov eax, dword [ebp - 0x21c4]
push eax
push 0x105517bc
mov ecx, dword [ebp - 0x1e78]
call fcn.10296260
mov dword [ebp - 0x1e74], eax
jmp 0x1027c9f8
mov dword [ebp - 0x1e74], 0
mov ecx, dword [ebp - 0x1e74]
push ecx
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e70], eax
cmp dword [ebp - 0x1e70], 0
je 0x1027ca70
push fcn.1028dc90
push 0x105517bb
sub esp, 0x18
mov esi, esp
lea edx, [ebp - 0x860]
push edx
lea ecx, [ebp - 0x1ae4]
call fcn.1028ed50
or dword [ebp - 0x1a4c], 0x200
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1e70]
call fcn.10296140
mov dword [ebp - 0x1e6c], eax
jmp 0x1027ca7a
mov dword [ebp - 0x1e6c], 0
mov eax, dword [ebp - 0x1e6c]
push eax
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
mov ecx, dword [ebp - 0x1a4c]
and ecx, 0x200
je 0x1027caaf
and dword [ebp - 0x1a4c], 0xfffffdff
lea ecx, [ebp - 0x860]
call fcn.10179000
push 0x5c
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e68], eax
cmp dword [ebp - 0x1e68], 0
je 0x1027caf8
lea ecx, [ebp - 0x1ae5]
call fcn.1028edc0
mov dword [ebp - 0x21c8], eax
mov edx, dword [ebp - 0x21c8]
push edx
push 0x105517d6
mov ecx, dword [ebp - 0x1e68]
call fcn.10296260
mov dword [ebp - 0x1e64], eax
jmp 0x1027cb02
mov dword [ebp - 0x1e64], 0
mov eax, dword [ebp - 0x1e64]
push eax
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e60], eax
cmp dword [ebp - 0x1e60], 0
je 0x1027cb7a
push fcn.1028dc90
push 0x105517d5
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x848]
push ecx
lea ecx, [ebp - 0x1ae6]
call fcn.1028edd0
or dword [ebp - 0x1a4c], 0x400
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1e60]
call fcn.10296140
mov dword [ebp - 0x1e5c], eax
jmp 0x1027cb84
mov dword [ebp - 0x1e5c], 0
mov edx, dword [ebp - 0x1e5c]
push edx
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
mov eax, dword [ebp - 0x1a4c]
and eax, 0x400
je 0x1027cbb8
and dword [ebp - 0x1a4c], 0xfffffbff
lea ecx, [ebp - 0x848]
call fcn.10179000
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e58], eax
cmp dword [ebp - 0x1e58], 0
je 0x1027cc1e
push fcn.1028dc90
push 0x105517c0
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x830]
push ecx
lea ecx, [ebp - 0x1ae7]
call fcn.1028edf0
or dword [ebp - 0x1a4c], 0x800
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1e58]
call fcn.10296140
mov dword [ebp - 0x1e54], eax
jmp 0x1027cc28
mov dword [ebp - 0x1e54], 0
mov edx, dword [ebp - 0x1e54]
push edx
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
mov eax, dword [ebp - 0x1a4c]
and eax, 0x800
je 0x1027cc5c
and dword [ebp - 0x1a4c], 0xfffff7ff
lea ecx, [ebp - 0x830]
call fcn.10179000
push 0x5c
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e50], eax
cmp dword [ebp - 0x1e50], 0
je 0x1027cca5
lea ecx, [ebp - 0x1ae8]
call fcn.1028ee60
mov dword [ebp - 0x21cc], eax
mov ecx, dword [ebp - 0x21cc]
push ecx
push 0x105519f5
mov ecx, dword [ebp - 0x1e50]
call fcn.10296260
mov dword [ebp - 0x1e4c], eax
jmp 0x1027ccaf
mov dword [ebp - 0x1e4c], 0
mov edx, dword [ebp - 0x1e4c]
push edx
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
push 0x40
call fcn.102d9455
add esp, 4
mov dword [ebp - 0x1e48], eax
cmp dword [ebp - 0x1e48], 0
je 0x1027cd3a
lea ecx, [ebp - 0x1ae9]
call fcn.1028eee0
mov dword [ebp - 0x21d0], eax
mov eax, dword [ebp - 0x21d0]
push eax
push 0x105519f4
sub esp, 0x18
mov esi, esp
lea ecx, [ebp - 0x818]
push ecx
lea ecx, [ebp - 0x1aea]
call fcn.1028ee70
or dword [ebp - 0x1a4c], 0x1000
mov ecx, eax
call fcn.1017c760
push eax
mov ecx, esi
call fcn.1018afc0
mov ecx, dword [ebp - 0x1e48]
call fcn.10296140
mov dword [ebp - 0x1e44], eax
jmp 0x1027cd44
mov dword [ebp - 0x1e44], 0
mov edx, dword [ebp - 0x1e44]
push edx
mov ecx, dword [ebp - 0x1a6c]
call fcn.101a9080
mov eax, dword [ebp - 0x1a4c]
and eax, 0x1000
je 0x1027cd78
mov ecx, dword [ebp - 0x1a60]
mov ecx, dword [ecx + 4]
call fcn.101a9000
fstp dword [ebp - 0x2378]
movss xmm0, dword [ebp - 0x2378]
comiss xmm0, dword [0x1033304c]
jbe 0x10282ef4
mov dword [ebp - 0x1d40], 1
jmp 0x10282efe
mov dword [ebp - 0x1d40], 0
call fcn.101cb1f0
mov dl, byte [ebp - 0x1d40]
mov byte [eax + 0xa8], dl
lea eax, [ebp - 0x2390]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea ecx, [ebp - 0x2390]
push ecx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
cvtsi2ss xmm0, dword [ebp - 0x2390]
movss dword [0x105501c4], xmm0
cvtsi2ss xmm0, dword [ebp - 0x238c]
movss dword [0x105501c8], xmm0
mov edx, dword [ebp - 0x1a60]
movzx eax, byte [edx + 9]
test eax, eax
je 0x10282f73
mov ecx, dword [ebp - 0x1a60]
call fcn.1028c1f0
mov ecx, dword [ebp - 0x1a60]
mov byte [ecx + 9], 0
mov edx, dword [ebp - 0x1a60]
movzx eax, byte [edx + 0xa]
test eax, eax
je 0x10282f96
mov ecx, dword [ebp - 0x1a60]
call fcn.102837b0
mov ecx, dword [ebp - 0x1a60]
mov byte [ecx + 0xa], 0
mov edx, dword [ebp - 0x1a60]
movzx eax, byte [edx + 0xb]
test eax, eax
je 0x10282fb9
mov ecx, dword [ebp - 0x1a60]
call fcn.1028b9f0
mov ecx, dword [ebp - 0x1a60]
mov byte [ecx + 0xb], 0
mov edx, dword [ebp - 0x1a60]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x1a60]
mov edx, dword [eax]
mov ecx, dword [ecx + 4]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x1a60]
mov edx, dword [ecx + 4]
cmp dword [edx + 0x28c], 0
je 0x10283006
mov eax, dword [ebp - 0x1a60]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0x28c]
movzx eax, word [edx + 0xc]
cmp eax, 0xc
jne 0x10283006
push 1
call fcn.101d5c50
add esp, 4
mov ecx, dword [0x10549a44]
mov dword [ecx + 0x549c], 0
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.102d9498
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret