Function at 0x10999100
Capabilities:
Inspect section memory permissions
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x7310
call fcn.10a2a170
push ebx
push esi
push edi
mov dword [ebp - 0xc], 0
jmp 0x1095ab0d
xor eax, eax
test eax, eax
jne 0x1095ab07
push 0x84
push 0
push 0x10b3c360
call fcn.10a29e70
add esp, 0xc
mov ecx, dword [0x10a417f8]
mov dword [0x10b3c3ae], ecx
mov dword [0x10b383c4], 0
mov edx, dword [0x10b3c3ae]
and edx, 0x400
test edx, edx
je 0x1095ab57
mov dword [0x10b383c4], 1
mov dword [0x10b3e9e0], 0
mov eax, dword [0x10b3c3ae]
and eax, 0x200
test eax, eax
je 0x1095ab79
mov dword [0x10b3e9e0], 1
jmp 0x10969856
jmp 0x10969873
mov cx, word [0x10b27574]
add cx, 1
mov word [0x10b27574], cx
call fcn.109cb5b0
call fcn.109cb860
push 0x800
push 0
push 0x10b3ea40
call fcn.10a29e70
add esp, 0xc
push 0x8001
call dword [0x10b41794]
mov dword [0x10b2755c], eax
mov edx, dword [0x10b3c3ae]
and edx, 2
test edx, edx
je 0x10969bcd
push 0x18
push 0x10a92698
push 0x10b3d4e0
call fcn.10a29b30
add esp, 0xc
mov dword [0x10b38660], 0x16
jmp 0x109698f1
mov eax, dword [0x10b38660]
sub eax, 1
mov dword [0x10b38660], eax
cmp dword [0x10b38660], 0
jl 0x10969920
mov ecx, dword [0x10b38660]
mov edx, dword [0x10b38660]
mov al, byte [ecx + 0x10b3d4e0]
xor al, byte [edx + 0x10b3d4e1]
mov ecx, dword [0x10b38660]
mov byte [ecx + 0x10b3d4e0], al
jmp 0x109698e4
push 0x18
push 0x10b3d4e0
push 0x10b3d080
call fcn.10a29b30
add esp, 0xc
mov byte [0x10b3d098], 0
push 0x10b27654
push 0x20019
push 0
push 0x10b3d080
push 0x80000002
call dword [0x10b38b40]
test eax, eax
jne 0x10969972
mov edx, dword [0x10b27654]
push edx
call dword [0x10b38cac]
mov dword [0x10a68b00], 1
mov dword [0x10acdd1d], 0
cmp dword [0x10a68b00], 0
je 0x10969bcd
push 0x10a75db8
call fcn.109d8520
add esp, 4
push 0
call dword [0x10b3b138]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0x109d4a20
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x30], 0x10a926b4
mov dword [ebp - 0x2c], 0x10a926c0
lea ecx, [ebp - 0x50]
push ecx
call dword [0x10b3dc60]
mov word [ebp - 0x9c], ax
push 0x10
call dword [0x10b3da40]
mov dword [ebp - 0x28], eax
push 0x11
call dword [0x10b3da40]
mov dword [ebp - 0x54], eax
mov dword [0x10b3ea00], 0x12c
mov dword [0x10b3f320], 0xc8
mov dword [0x10b276e0], 0
push 0
mov edx, dword [ebp - 0x10]
push edx
push 0
push 0
mov eax, dword [0x10b3f320]
push eax
mov ecx, dword [0x10b3ea00]
push ecx
mov eax, dword [ebp - 0x54]
sub eax, dword [0x10b3f320]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x28]
sub eax, dword [0x10b3ea00]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x80040000
push 0x10a926cc
push 0x10a926d8
push 0x80
call dword [0x10b3dbb4]
mov dword [0x10b276e0], eax
cmp dword [0x10b276e0], 0
je 0x10969bcd
push 0xa
mov edx, dword [0x10b276e0]
push edx
call dword [0x10b3d070]
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [0x10b276e0]
push ecx
call dword [0x10b3f510]
mov dword [ebp - 0x98], eax
push 0x10b3cff0
mov edx, dword [0x10b276e0]
push edx
call dword [0x10b38ca4]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
call fcn.109d8110
add esp, 8
mov edx, dword [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0xa4]
push eax
push 0xa
mov ecx, dword [0x10b3ea00]
sub ecx, dword [ebp - 0xa4]
sub ecx, 0x14
push ecx
mov edx, dword [ebp - 0x98]
push edx
call fcn.109d8170
add esp, 0x14
push 0x10
push 0x10b3cff0
lea eax, [ebp - 0x20]
push eax
call fcn.10a29b30
add esp, 0xc
mov eax, dword [0x10b3cffc]
sub eax, dword [0x10b3cff4]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [0x10b3cff4]
lea edx, [ecx + eax - 0x28]
mov dword [ebp - 0x1c], edx
push 0x10
lea eax, [ebp - 0x20]
push eax
push 0x10b3cff0
call fcn.10a29b30
add esp, 0xc
push 0x10a3ebf8
call fcn.109c9390
add esp, 4
push 0x10a3ebf8
call fcn.109c9870
add esp, 4
lea ecx, [ebp - 0x94]
push ecx
mov edx, dword [0x10b276e0]
push edx
call dword [0x10b41640]
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [0x10b276e0]
push ecx
call dword [0x10b38ca4]
push 1
lea edx, [ebp - 0x20]
push edx
mov eax, dword [0x10b276e0]
push eax
call dword [0x10b3ea28]
mov ecx, dword [0x10b276e0]
push ecx
call dword [0x10b3d4c4]
lea edx, [ebp - 0x24]
push edx
push 0
push 0
push 0x109d4cf0
push 0x3e8
push 0
call dword [0x10b3c220]
mov dword [ebp - 0xa0], eax
mov ax, word [0x10b27574]
add ax, 1
mov word [0x10b27574], ax
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
call fcn.109d6150
push 0
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969c5c
mov ecx, dword [ebp - 0x11b8]
push ecx
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969c5c
push 0x400
mov edx, dword [ebp - 0x11b8]
push edx
push 0x10a37bf8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a37bf8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a37bf8
call fcn.109c92b0
add esp, 8
push 5
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969cc2
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969cc2
push 0x1000
mov ecx, dword [ebp - 0x11b8]
push ecx
push 0x10a403f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a403f8
call fcn.109e1980
add esp, 8
push 0x1000
push 0x10a403f8
call fcn.109c92b0
add esp, 8
push 6
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969d28
mov edx, dword [ebp - 0x11b8]
push edx
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969d28
push 0x400
mov eax, dword [ebp - 0x11b8]
push eax
push 0x10a413f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a413f8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a413f8
call fcn.109c92b0
add esp, 8
push 1
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969d8e
mov ecx, dword [ebp - 0x11b8]
push ecx
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969d8e
push 0x400
mov edx, dword [ebp - 0x11b8]
push edx
push 0x10a383f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a383f8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a383f8
call fcn.109c92b0
add esp, 8
push 2
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969df4
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969df4
push 0x400
mov ecx, dword [ebp - 0x11b8]
push ecx
push 0x10a387f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a387f8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a387f8
call fcn.109c92b0
add esp, 8
push 3
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969e5a
mov edx, dword [ebp - 0x11b8]
push edx
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969e5a
push 0x400
mov eax, dword [ebp - 0x11b8]
push eax
push 0x10a393f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a393f8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a393f8
call fcn.109c92b0
add esp, 8
push 4
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969ec0
mov ecx, dword [ebp - 0x11b8]
push ecx
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969ec0
push 0x400
mov edx, dword [ebp - 0x11b8]
push edx
push 0x10a3b3f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a3b3f8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a3b3f8
call fcn.109c92b0
add esp, 8
push 7
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969f26
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969f26
push 0x400
mov ecx, dword [ebp - 0x11b8]
push ecx
push 0x10a3bbf8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a3bbf8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a3bbf8
call fcn.109c92b0
add esp, 8
push 8
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969f8c
mov edx, dword [ebp - 0x11b8]
push edx
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969f8c
push 0x400
mov eax, dword [ebp - 0x11b8]
push eax
push 0x10a3bff8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a3bff8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a3bff8
call fcn.109c92b0
add esp, 8
push 9
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x10969ff2
mov ecx, dword [ebp - 0x11b8]
push ecx
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10969ff2
push 0x400
mov edx, dword [ebp - 0x11b8]
push edx
push 0x10a3c3f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a3c3f8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a3c3f8
call fcn.109c92b0
add esp, 8
push 0xa
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x1096a058
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x1096a058
push 0x400
mov ecx, dword [ebp - 0x11b8]
push ecx
push 0x10a3c7f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a3c7f8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a3c7f8
call fcn.109c92b0
add esp, 8
push 0xb
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x1096a0be
mov edx, dword [ebp - 0x11b8]
push edx
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x1096a0be
push 0x400
mov eax, dword [ebp - 0x11b8]
push eax
push 0x10a397f8
call fcn.109c94c0
add esp, 0xc
push 0
push 0x10a397f8
call fcn.109e1980
add esp, 8
push 0x400
push 0x10a397f8
call fcn.109c92b0
add esp, 8
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x11b0]
push edx
call fcn.10a29ed0
add esp, 8
lea eax, [ebp - 0x11b0]
push eax
call fcn.10a3565d
add esp, 4
push 0x10a926e4
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x11b0]
push ecx
call fcn.10a2b000
add esp, 8
mov dword [ebp - 0x15c0], eax
cmp dword [ebp - 0x15c0], 0
je 0x1096a118
mov dword [ebp - 0x1ac], 1
jmp 0x1096a14e
push 0x10a926fc
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x11b0]
push edx
call fcn.10a2b000
add esp, 8
mov dword [ebp - 0x15c0], eax
cmp dword [ebp - 0x15c0], 0
je 0x1096a14e
mov dword [ebp - 0x1b0], 1
cmp dword [ebp - 0x1b0], 0
je 0x1096a491
mov dword [0x10b38600], 0
jmp 0x1096a174
mov eax, dword [0x10b38600]
add eax, 1
mov dword [0x10b38600], eax
cmp dword [0x10b38600], 0xc
jge 0x1096a491
cmp dword [0x10b38600], 0
jne 0x1096a1ac
push 0x10a92710
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x26c0]
push ecx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 1
jne 0x1096a1d7
push 0x10a92724
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x26c0]
push edx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 2
jne 0x1096a202
push 0x10a92738
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x26c0]
push eax
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 3
jne 0x1096a22d
push 0x10a92748
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x26c0]
push ecx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 4
jne 0x1096a258
push 0x10a9275c
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x26c0]
push edx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 5
jne 0x1096a283
push 0x10a92774
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x26c0]
push eax
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 6
jne 0x1096a2ae
push 0x10a92790
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x26c0]
push ecx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 7
jne 0x1096a2d9
push 0x10a927a8
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x26c0]
push edx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 8
jne 0x1096a304
push 0x10a927c0
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x26c0]
push eax
call fcn.10a29ed0
add esp, 8
jmp 0x1096a167
cmp dword [0x10b38600], 9
jne 0x1096a32c
push 0x10a927e0
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x26c0]
push ecx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a37d
cmp dword [0x10b38600], 0xa
jne 0x1096a357
push 0x10a927fc
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x26c0]
push edx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a167
cmp dword [0x10b38600], 0xb
jne 0x1096a37d
push 0x10a92818
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x26c0]
push eax
call fcn.10a29ed0
add esp, 8
push 0x1000
push 0
lea ecx, [ebp - 0x25c0]
push ecx
call fcn.10a29e70
add esp, 0xc
mov edx, dword [0x10b38600]
push edx
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x1096a404
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x1096a404
push 0x1000
mov ecx, dword [ebp - 0x11b8]
push ecx
lea edx, [ebp - 0x25c0]
push edx
call fcn.109c94c0
add esp, 0xc
push 0
lea eax, [ebp - 0x25c0]
push eax
call fcn.109e1980
add esp, 8
push 0x1000
lea ecx, [ebp - 0x25c0]
push ecx
call fcn.109c92b0
add esp, 8
push 0xfff
lea edx, [ebp - 0x25c0]
push edx
lea eax, [ebp - 0x11b0]
push eax
call fcn.10a29b30
add esp, 0xc
mov dword [0x10b38660], 0xffd
jmp 0x1096a43a
mov ecx, dword [0x10b38660]
sub ecx, 1
mov dword [0x10b38660], ecx
cmp dword [0x10b38660], 0
jl 0x1096a46b
mov edx, dword [0x10b38660]
mov eax, dword [0x10b38660]
mov cl, byte [ebp + edx - 0x11b0]
xor cl, byte [ebp + eax - 0x11af]
mov edx, dword [0x10b38660]
mov byte [ebp + edx - 0x11b0], cl
jmp 0x1096a42b
mov byte [ebp - 0x1b1], 0
push 0x40
lea eax, [ebp - 0x26c0]
push eax
lea ecx, [ebp - 0x11b0]
push ecx
push 0
call fcn.109c89f0
add esp, 0x10
jmp 0x1096a167
cmp dword [ebp - 0x1ac], 0
je 0x1096ac98
lea edx, [ebp - 0x15b8]
push edx
lea eax, [ebp - 0x11b4]
push eax
call fcn.109d6500
add esp, 8
test eax, eax
je 0x1096ac98
mov dword [ebp - 0x2ac4], 0
push 0x100
lea ecx, [ebp - 0x4fc4]
push ecx
call dword [0x10b46c98]
push 0x5c
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a2a0b0
add esp, 8
mov dword [ebp - 0x15c0], eax
cmp dword [ebp - 0x15c0], 0
je 0x1096a521
mov eax, dword [ebp - 0x15c0]
mov byte [eax + 1], 0
push 0x10a92830
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.10a29ee0
add esp, 8
jmp 0x1096a53e
push 0x10a92844
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a29ed0
add esp, 8
lea eax, [ebp - 0x4fc4]
push eax
lea ecx, [ebp - 0x1a8]
push ecx
call fcn.10a29ed0
add esp, 8
push 0x10a9285c
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a2afdf
add esp, 8
mov dword [ebp - 0x2ac4], eax
mov dword [ebp - 0x15bc], 0
jmp 0x1096a589
mov eax, dword [ebp - 0x15bc]
add eax, 1
mov dword [ebp - 0x15bc], eax
mov ecx, dword [ebp - 0x15bc]
cmp ecx, dword [ebp - 0x11b4]
jge 0x1096ac2c
mov byte [ebp - 0x4fc8], 0
mov edx, dword [ebp - 0x15bc]
mov eax, dword [ebp + edx*4 - 0x15b8]
push eax
call fcn.109d64d0
add esp, 4
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 4
push 0x10a92860
call fcn.10a2aeb5
add esp, 0x10
mov dword [ebp - 0x4fcc], 0
jmp 0x1096a5eb
mov edx, dword [ebp - 0x4fcc]
add edx, 1
mov dword [ebp - 0x4fcc], edx
cmp dword [ebp - 0x4fcc], 0x20
jge 0x1096a60e
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 0x10
push 0x10a92868
call fcn.10a2aeb5
add esp, 0x10
jmp 0x1096a5dc
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 4
push 0x10a9287c
call fcn.10a2aeb5
add esp, 0x10
lea edx, [ebp - 0x4ec4]
push edx
mov eax, dword [ebp - 0x15bc]
mov ecx, dword [ebp + eax*4 - 0x15b8]
push ecx
call fcn.109d65d0
add esp, 8
lea edx, [ebp - 0x4ec4]
push edx
mov eax, dword [ebp - 0x15bc]
mov ecx, dword [ebp + eax*4 - 0x15b8]
push ecx
push 0x10a92884
lea edx, [ebp - 0x2ac0]
push edx
call fcn.10a29fc0
add esp, 0x10
lea eax, [ebp - 0x2ac0]
push eax
call fcn.10a2a020
add esp, 4
mov dword [ebp - 0x4fd4], eax
mov dword [ebp - 0x4fcc], 0
jmp 0x1096a69c
mov ecx, dword [ebp - 0x4fcc]
add ecx, 1
mov dword [ebp - 0x4fcc], ecx
mov edx, dword [ebp - 0x4fcc]
cmp edx, dword [ebp - 0x4fd4]
jge 0x1096a6e7
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 1
mov ecx, dword [ebp - 0x4fcc]
lea edx, [ebp + ecx - 0x2ac0]
push edx
call fcn.10a2aeb5
add esp, 0x10
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 1
lea ecx, [ebp - 0x4fc8]
push ecx
call fcn.10a2aeb5
add esp, 0x10
jmp 0x1096a68d
mov edx, dword [ebp - 0x2ac4]
push edx
push 1
push 4
push 0x10a928a8
call fcn.10a2aeb5
add esp, 0x10
mov dword [ebp - 0x4fd0], 0
jmp 0x1096a71a
mov eax, dword [ebp - 0x4fd0]
add eax, 1
mov dword [ebp - 0x4fd0], eax
cmp dword [ebp - 0x4fd0], 0xc
jge 0x1096ac27
cmp dword [ebp - 0x4fd0], 0
jne 0x1096a752
push 0x10a928b0
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 1
jne 0x1096a77d
push 0x10a928c0
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 2
jne 0x1096a7a8
push 0x10a928d0
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 3
jne 0x1096a7d3
push 0x10a928dc
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 4
jne 0x1096a7fe
push 0x10a928ec
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 5
jne 0x1096a829
push 0x10a92900
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 6
jne 0x1096a854
push 0x10a92918
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 7
jne 0x1096a87f
push 0x10a9292c
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 8
jne 0x1096a8aa
push 0x10a92940
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.10a29ed0
add esp, 8
jmp 0x1096a70b
cmp dword [ebp - 0x4fd0], 9
jne 0x1096a8d2
push 0x10a9295c
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a923
cmp dword [ebp - 0x4fd0], 0xa
jne 0x1096a8fd
push 0x10a92974
call fcn.109dee80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a29ed0
add esp, 8
jmp 0x1096a70b
cmp dword [ebp - 0x4fd0], 0xb
jne 0x1096a923
push 0x10a9298c
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.10a29ed0
add esp, 8
push 0x1000
push 0
lea ecx, [ebp - 0x25c0]
push ecx
call fcn.10a29e70
add esp, 0xc
mov edx, dword [ebp - 0x4fd0]
push edx
call fcn.109d7830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x1096a9aa
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x1096a9aa
push 0x1000
mov ecx, dword [ebp - 0x11b8]
push ecx
lea edx, [ebp - 0x25c0]
push edx
call fcn.109c94c0
add esp, 0xc
push 0
lea eax, [ebp - 0x25c0]
push eax
call fcn.109e1980
add esp, 8
push 0x1000
lea ecx, [ebp - 0x25c0]
push ecx
call fcn.109c92b0
add esp, 8
push 0xfff
lea edx, [ebp - 0x25c0]
push edx
lea eax, [ebp - 0x11b0]
push eax
call fcn.10a29b30
add esp, 0xc
mov dword [0x10b38660], 0xffd
jmp 0x1096a9e0
mov ecx, dword [0x10b38660]
sub ecx, 1
mov dword [0x10b38660], ecx
cmp dword [0x10b38660], 0
jl 0x1096aa11
mov edx, dword [0x10b38660]
mov eax, dword [0x10b38660]
mov cl, byte [ebp + edx - 0x11b0]
xor cl, byte [ebp + eax - 0x11af]
mov edx, dword [0x10b38660]
mov byte [ebp + edx - 0x11b0], cl
jmp 0x1096a9d1
mov byte [ebp - 0x1b1], 0
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 4
push 0x10a929a0
call fcn.10a2aeb5
add esp, 0x10
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 2
push 0x10a929a8
call fcn.10a2aeb5
add esp, 0x10
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a2a020
add esp, 4
mov dword [ebp - 0x4fd4], eax
mov dword [ebp - 0x4fcc], 0
jmp 0x1096aa78
mov eax, dword [ebp - 0x4fcc]
add eax, 1
mov dword [ebp - 0x4fcc], eax
mov ecx, dword [ebp - 0x4fcc]
cmp ecx, dword [ebp - 0x4fd4]
jge 0x1096aac3
mov edx, dword [ebp - 0x2ac4]
push edx
push 1
push 1
mov eax, dword [ebp - 0x4fcc]
lea ecx, [ebp + eax - 0x4fc4]
push ecx
call fcn.10a2aeb5
add esp, 0x10
mov edx, dword [ebp - 0x2ac4]
push edx
push 1
push 1
lea eax, [ebp - 0x4fc8]
push eax
call fcn.10a2aeb5
add esp, 0x10
jmp 0x1096aa69
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 2
push 0x10a929ac
call fcn.10a2aeb5
add esp, 0x10
mov edx, dword [ebp - 0x2ac4]
push edx
push 1
push 4
push 0x10a929b0
call fcn.10a2aeb5
add esp, 0x10
lea eax, [ebp - 0x11b0]
push eax
call fcn.109ec7f0
add esp, 4
test eax, eax
je 0x1096ab5f
push 0x2000
push 0
lea ecx, [ebp - 0x4ac4]
push ecx
call fcn.10a29e70
add esp, 0xc
lea edx, [ebp - 0x4ac4]
push edx
lea eax, [ebp - 0x11b0]
push eax
call fcn.109ec820
add esp, 8
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 2
lea edx, [ebp - 0x4ac4]
push edx
call fcn.10a2ae98
add esp, 4
push eax
lea eax, [ebp - 0x4ac4]
push eax
call fcn.10a2aeb5
add esp, 0x10
jmp 0x1096ac0a
lea ecx, [ebp - 0x11b0]
push ecx
call fcn.10a2a020
add esp, 4
mov dword [ebp - 0x4fd4], eax
mov dword [ebp - 0x4fcc], 0
jmp 0x1096ab8f
mov edx, dword [ebp - 0x4fcc]
add edx, 1
mov dword [ebp - 0x4fcc], edx
mov eax, dword [ebp - 0x4fcc]
cmp eax, dword [ebp - 0x4fd4]
jge 0x1096ac0a
mov ecx, dword [ebp - 0x4fcc]
movsx edx, byte [ebp + ecx - 0x11b0]
cmp edx, 0xa
jne 0x1096abca
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 4
push 0x10a929b8
call fcn.10a2aeb5
add esp, 0x10
jmp 0x1096ac05
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 1
mov edx, dword [ebp - 0x4fcc]
lea eax, [ebp + edx - 0x11b0]
push eax
call fcn.10a2aeb5
add esp, 0x10
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 1
lea edx, [ebp - 0x4fc8]
push edx
call fcn.10a2aeb5
add esp, 0x10
jmp 0x1096ab80
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 4
push 0x10a929c0
call fcn.10a2aeb5
add esp, 0x10
jmp 0x1096a70b
jmp 0x1096a57a
call fcn.109d64f0
mov ecx, dword [ebp - 0x2ac4]
push ecx
call fcn.10a2ad8b
add esp, 4
mov edx, dword [ebp - 0x2ac4]
push edx
call fcn.10a2ad35
add esp, 4
push 0x10a929c8
call fcn.109dee80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.10a29ed0
add esp, 8
lea ecx, [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0x4fc4]
push edx
call fcn.10a29ee0
add esp, 8
push 0x40
push 0x10b2777c
lea eax, [ebp - 0x4fc4]
push eax
push 0
call dword [0x10b46e90]
call fcn.109d7740
cmp dword [ebp - 0x1b0], 0
jne 0x1096acaf
cmp dword [ebp - 0x1ac], 0
je 0x1096acb6
push 0
call fcn.10a29a52
mov ecx, dword [0x10b3c3ae]
and ecx, 0x80
test ecx, ecx
je 0x1096afed
push 0x10a3fbf8
call fcn.109c9390
add esp, 4
push 0x10a3fbf8
lea edx, [ebp - 0x5054]
push edx
call fcn.10a29ed0
add esp, 8
push 0x10a3fbf8
call fcn.109c9350
add esp, 4
cmp dword [0x10a68af0], 0
je 0x1096ad29
lea eax, [ebp - 0x5054]
push eax
push 0x10a929e4
push 0x10b39e00
call fcn.10a29fc0
add esp, 0xc
push 0x10b39e00
push 0
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x1096acf8
lea edx, [ebp - 0x5054]
push edx
call fcn.109c9400
add esp, 4
mov dword [ebp - 0x5058], eax
cmp dword [ebp - 0x5058], 0
je 0x1096afb6
push 0xff
push 0x10a92a40
call fcn.109dee80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.109c9520
add esp, 0xc
push 1
push 0x10a92a50
call fcn.109dee80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.109c9520
add esp, 0xc
push 2
push 0x10a92a60
call fcn.109dee80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.109c9520
add esp, 0xc
push 5
push 0x10a92a6c
call fcn.109dee80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.109c9520
add esp, 0xc
push 0xd
push 0x10a92a7c
call fcn.109dee80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.109c9520
add esp, 0xc
push 0xf
push 0x10a92a90
call fcn.109dee80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.109c9520
add esp, 0xc
push 0x10
push 0x10a92aa4
call fcn.109dee80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.109c9520
add esp, 0xc
push 0x11
push 0x10a92ac0
call fcn.109dee80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.109c9520
add esp, 0xc
push 0x12
push 0x10a92ad8
call fcn.109dee80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.109c9520
add esp, 0xc
push 0x14
push 0x10a92af0
call fcn.109dee80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.109c9520
add esp, 0xc
push 0x13
push 0x10a92b00
call fcn.109dee80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.109c9520
add esp, 0xc
push 0x1a
push 0x10a92b10
call fcn.109dee80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.109c9520
add esp, 0xc
push 0x1b
push 0x10a92b1c
call fcn.109dee80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.109c9520
add esp, 0xc
push 0x1c
push 0x10a92b2c
call fcn.109dee80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.109c9520
add esp, 0xc
push 0x1d
push 0x10a92b3c
call fcn.109dee80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.109c9520
add esp, 0xc
push 0x1e
push 0x10a92b48
call fcn.109dee80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.109c9520
add esp, 0xc
push 0x100
push 0x10a92b58
call fcn.109dee80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.109c9520
add esp, 0xc
push 0x101
push 0x10a92b70
call fcn.109dee80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.109c9520
add esp, 0xc
push 6
push 0x10a92b84
call fcn.109dee80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.109c9520
add esp, 0xc
mov ecx, dword [ebp - 0x5058]
push ecx
call dword [0x10b38cac]
jmp 0x1096afed
cmp dword [0x10a68af0], 0
je 0x1096afe7
lea edx, [ebp - 0x5054]
push edx
push 0x10a92b98
push 0x10b39e00
call fcn.10a29fc0
add esp, 0xc
push 0x10b39e00
push 0
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x1096afb6
jmp 0x10973e7b
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x605c]
push edx
call fcn.10a29ed0
add esp, 8
lea eax, [ebp - 0x605c]
push eax
call fcn.10a3565d
add esp, 4
push 0x10a92bd4
call fcn.109dee80
add esp, 4
push eax
lea ecx, [ebp - 0x605c]
push ecx
call fcn.10a2b000
add esp, 8
mov dword [ebp - 0x6068], eax
cmp dword [ebp - 0x6068], 0
je 0x10973fd9
mov dword [0x10a68af0], 1
push 0x10a92be4
call fcn.109dee80
add esp, 4
push eax
call fcn.10a2a020
add esp, 4
mov dword [ebp - 0x6064], eax
mov edx, dword [ebp - 0x6068]
lea eax, [ebp - 0x605c]
sub edx, eax
mov ecx, dword [ebp + 0x10]
add ecx, edx
mov dword [ebp - 0x505c], ecx
mov edx, dword [ebp - 0x6068]
push edx
call fcn.10a2a020
add esp, 4
sub eax, dword [ebp - 0x6064]
mov dword [ebp - 0x6060], eax
mov eax, dword [ebp - 0x6060]
push eax
mov ecx, dword [ebp - 0x6064]
mov edx, dword [ebp - 0x6068]
lea eax, [edx + ecx + 1]
push eax
mov ecx, dword [ebp - 0x6068]
push ecx
call fcn.10a2aa00
add esp, 0xc
mov edx, dword [ebp - 0x6060]
push edx
mov eax, dword [ebp - 0x6064]
mov ecx, dword [ebp - 0x505c]
lea edx, [ecx + eax + 1]
push edx
mov eax, dword [ebp - 0x505c]
push eax
call fcn.10a2aa00
add esp, 0xc
mov ecx, dword [ebp - 0x6060]
mov edx, dword [ebp - 0x6068]
lea eax, [edx + ecx - 1]
mov dword [ebp - 0x6068], eax
mov ecx, dword [ebp - 0x6060]
mov edx, dword [ebp - 0x505c]
lea eax, [edx + ecx - 1]
mov dword [ebp - 0x505c], eax
mov ecx, dword [ebp - 0x6064]
add ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x6068]
push edx
call fcn.10a29e70
add esp, 0xc
mov eax, dword [ebp - 0x6064]
add eax, 1
push eax
push 0
mov ecx, dword [ebp - 0x505c]
push ecx
call fcn.10a29e70
add esp, 0xc
jmp 0x10973fe3
mov dword [0x10a68af0], 0
mov edx, dword [0x10b3c3ae]
and edx, 0x40
test edx, edx
je 0x10973ffa
mov dword [0x10a68af0], 1
cmp dword [0x10a68af0], 0
je 0x109741c7
push 0x3ff
push 0x10a37bf8
lea eax, [ebp - 0x7068]
push eax
call fcn.10a29b30
add esp, 0xc
mov dword [0x10b38660], 0x3fd
jmp 0x1097403b
mov ecx, dword [0x10b38660]
sub ecx, 1
mov dword [0x10b38660], ecx
cmp dword [0x10b38660], 0
jl 0x1097406c
mov edx, dword [0x10b38660]
mov eax, dword [0x10b38660]
mov cl, byte [ebp + edx - 0x7068]
xor cl, byte [ebp + eax - 0x7067]
mov edx, dword [0x10b38660]
mov byte [ebp + edx - 0x7068], cl
jmp 0x1097402c
mov byte [ebp - 0x6c69], 0
mov dword [0x10b38660], 0xffd
jmp 0x1097408c
mov eax, dword [0x10b38660]
sub eax, 1
mov dword [0x10b38660], eax
cmp dword [0x10b38660], 0
jl 0x109740bb
mov ecx, dword [0x10b38660]
mov edx, dword [0x10b38660]
mov al, byte [ecx + 0x10a403f8]
xor al, byte [edx + 0x10a403f9]
mov ecx, dword [0x10b38660]
mov byte [ecx + 0x10a403f8], al
jmp 0x1097407f
push 0xfff
push 0x10a403f8
lea edx, [ebp - 0x605c]
push edx
call fcn.10a29b30
add esp, 0xc
mov byte [ebp - 0x505d], 0
push 0x10a403f8
call fcn.10a2a020
add esp, 4
test eax, eax
jbe 0x10974130
push 0x44
lea eax, [ebp - 0x7068]
push eax
lea ecx, [ebp - 0x605c]
push ecx
push 0
call fcn.109c89f0
add esp, 0x10
cmp eax, 6
je 0x10974130
cmp dword [0x10a68af0], 0
je 0x10974123
push 0x10a92bf4
push 4
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x1097410b
push 0
call fcn.10a29a52
call fcn.109dc7c0
test eax, eax
je 0x109741c7
mov dword [0x10b38660], 0x3fd
jmp 0x10974156
mov eax, dword [0x10b38660]
sub eax, 1
mov dword [0x10b38660], eax
cmp dword [0x10b38660], 0
jl 0x10974185
mov ecx, dword [0x10b38660]
mov edx, dword [0x10b38660]
mov al, byte [ecx + 0x10a413f8]
xor al, byte [edx + 0x10a413f9]
mov ecx, dword [0x10b38660]
mov byte [ecx + 0x10a413f8], al
jmp 0x10974149
push 0x3ff
push 0x10a413f8
lea edx, [ebp - 0x605c]
push edx
call fcn.10a29b30
add esp, 0xc
mov byte [ebp - 0x5c5d], 0
lea eax, [ebp - 0x7068]
push eax
push 0x34
call fcn.109dc750
add esp, 8
lea ecx, [ebp - 0x605c]
push ecx
push 0x33
call fcn.109dc750
add esp, 8
cmp dword [0x10a68af0], 0
je 0x109741df
push 0x10a92bfc
push 0
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x109741c7
mov eax, dword [0x10b3c3ae]
and eax, 0x2000
test eax, eax
je 0x10974211
cmp dword [0x10a68af0], 0
je 0x1097420b
push 0x10a92c24
push 0
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x109741f3
call fcn.109dc850
mov edx, dword [0x10b3c3ae]
and edx, 0x20
test edx, edx
je 0x1097424b
mov dword [0x10a87aa8], 0
cmp dword [0x10a68af0], 0
je 0x10974245
push 0x10a92c5c
push 0
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x1097422d
mov dword [0x10a733a8], 0x10a37b94
mov dword [0x10b4172c], 1
mov ecx, dword [0x10b4172c]
mov dword [0x10b40578], ecx
mov edx, dword [0x10b40578]
mov dword [0x10b38330], edx
mov dword [0x10b38ca8], 1
mov eax, dword [0x10b38ca8]
mov dword [0x10b3d064], eax
mov ecx, dword [0x10b3d064]
mov dword [0x10b38cc0], ecx
mov dword [0x10b3e9ec], 0x10a37358
call dword [0x10b3b174]
mov dword [0x10b27518], eax
call dword [0x10b3d494]
mov dword [0x10b27520], eax
cmp dword [0x10a68af0], 0
je 0x109742cf
push 0x10a92d04
push 2
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x109742b7
push 0xb
push 0x10a92d8c
push 0x10b3d4e0
call fcn.10a29b30
add esp, 0xc
mov dword [0x10b38660], 9
jmp 0x10974302
mov eax, dword [0x10b38660]
sub eax, 1
mov dword [0x10b38660], eax
cmp dword [0x10b38660], 0
jl 0x10974331
mov ecx, dword [0x10b38660]
mov edx, dword [0x10b38660]
mov al, byte [ecx + 0x10b3d4e0]
xor al, byte [edx + 0x10b3d4e1]
mov ecx, dword [0x10b38660]
mov byte [ecx + 0x10b3d4e0], al
jmp 0x109742f5
push 0xb
push 0x10b3d4e0
push 0x10b3d080
call fcn.10a29b30
add esp, 0xc
mov byte [0x10b3d08b], 0
push 0x10b3d080
push 0
push 0
call dword [0x10b4057c]
mov dword [0x10b27514], eax
cmp dword [0x10b27514], 0
jne 0x109743ac
cmp dword [0x10a68af0], 0
je 0x10974381
push 0x10a92d98
push 0
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10974369
cmp dword [0x10a68af0], 0
je 0x1097439f
push 0x10b27780
push 4
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x10974387
push 0
call fcn.10a29a52
call dword [0x10b3cfe0]
cmp eax, 0xb7
jne 0x1097448f
cmp dword [0x10b27514], 0
je 0x109743e0
mov ecx, dword [0x10b27514]
push ecx
call dword [0x10b38b44]
mov edx, dword [0x10b27514]
push edx
call dword [0x10b38334]
cmp dword [0x10b274fc], 0
je 0x109743f5
mov eax, dword [0x10b274fc]
push eax
call dword [0x10b383c0]
cmp dword [0x10b27500], 0
je 0x1097440b
mov ecx, dword [0x10b27500]
push ecx
call dword [0x10b383c0]
cmp dword [0x10b27504], 0
je 0x10974421
mov edx, dword [0x10b27504]
push edx
call dword [0x10b383c0]
cmp dword [0x10b27508], 0
je 0x10974436
mov eax, dword [0x10b27508]
push eax
call dword [0x10b383c0]
cmp dword [0x10b2750c], 0
je 0x1097444c
mov ecx, dword [0x10b2750c]
push ecx
call dword [0x10b383c0]
cmp dword [0x10a68af0], 0
je 0x10974464
push 0x10a92e20
push 0x20
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x1097444c
cmp dword [0x10a68af0], 0
je 0x10974482
push 0x10b27784
push 4
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x1097446a
push 0
call fcn.10a29a52
cmp dword [0x10a68af0], 0
je 0x109744a7
push 0x10a92e88
push 2
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x1097448f
jmp 0x109800a0
push 0xffffffffffffffff
mov edx, dword [0x10b27514]
push edx
call dword [0x10b3f330]
mov eax, 0x1098011e
mov dword [0x10b3db68], eax
mov eax, 0x10999100
mov dword [0x10b41714], eax
cmp dword [0x10a68af0], 0
je 0x109800db
push 0x10a92f00
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x109800c3
cmp dword [0x10b276e0], 0
je 0x10980104
mov ecx, dword [0x10b3c3ae]
and ecx, 2
test ecx, ecx
je 0x10980104
mov edx, dword [0x10b276e0]
push edx
call dword [0x10b3d4c4]
call fcn.1094f9d0
call dword [0x10b3db6c]
mov dword [0x10b27718], eax
mov eax, dword [0x10b27718]
mov dword [0x10b27714], eax
mov edi, 0x403000
mov esi, 0x404120
mov ecx, dword [0x10b38b54]
push ecx
call fcn.10a2a19f
add esp, 4
mov dword [0x10b385fc], 0
jmp 0x10980152
mov edx, dword [0x10b385fc]
add edx, 1
mov dword [0x10b385fc], edx
cmp dword [0x10b385fc], 0x18
jge 0x10980221
mov eax, dword [0x10b385fc]
shl eax, 5
xor eax, 0xd5294a
cdq
mov ecx, 6
idiv ecx
add edx, 1
mov dword [ebp - 0x706c], edx
mov edx, dword [ebp - 0x706c]
mov dword [ebp - 0x7300], edx
mov eax, dword [ebp - 0x7300]
sub eax, 1
mov dword [ebp - 0x7300], eax
cmp dword [ebp - 0x7300], 5
ja case.default.0x109801a7
mov ecx, dword [ebp - 0x7300]
jmp dword [ecx*4 + 0x109c891a]
mov edx, dword [0x10b385fc]
mov dword [edx*4 + 0x10a5e648], 0x109d9b90
jmp case.default.0x109801a7
mov eax, dword [0x10b385fc]
mov dword [eax*4 + 0x10a5e648], 0x109d9ce0
jmp case.default.0x109801a7
mov ecx, dword [0x10b385fc]
mov dword [ecx*4 + 0x10a5e648], 0x109d9da0
jmp case.default.0x109801a7
mov edx, dword [0x10b385fc]
mov dword [edx*4 + 0x10a5e648], 0x109d9e90
jmp case.default.0x109801a7
mov eax, dword [0x10b385fc]
mov dword [eax*4 + 0x10a5e648], 0x109d9f60
jmp case.default.0x109801a7
mov ecx, dword [0x10b385fc]
mov dword [ecx*4 + 0x10a5e648], 0x109da030
jmp 0x10980143
push 0
push 0
push 0
push 0
call dword [0x10b38ad8]
mov dword [0x10b274f8], eax
call fcn.1095aab0
mov edx, dword [0x10b27558]
or edx, 0x40000
mov dword [0x10b27558], edx
mov eax, dword [0x10b27558]
or eax, 0x1000000
mov dword [0x10b27558], eax
cmp dword [0x10a68af0], 0
je 0x10980272
push 0x10a92f88
push 2
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x1098025a
call fcn.109ccae0
mov edx, 1
test edx, edx
je 0x109802d3
cmp dword [0x10b2752c], 1
jne 0x1098029c
call fcn.109cae30
mov dword [ebp - 0x7070], eax
jmp 0x109802bc
cmp dword [0x10b2752c], 0
jne 0x109802b2
call fcn.109cb590
mov dword [ebp - 0x7070], eax
jmp 0x109802bc
call fcn.109cae20
call fcn.109cb580
mov eax, dword [ebp - 0x7070]
mov dword [0x10acdf3f], eax
mov ecx, dword [ebp - 0x7070]
mov dword [0x10acddeb], ecx
call fcn.109c9180
jmp 0x1098d53e
cmp dword [0x10b2752c], 0
jne 0x1098d575
cmp dword [0x10b3e9e8], 0
je 0x1098d575
cmp dword [0x10a68af0], 0
je 0x1098d568
push 0x10a92fb0
push 2
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x1098d550
call fcn.109d1140
jmp 0x1098d5a8
cmp dword [0x10a68af0], 0
je 0x1098d5a8
cmp dword [0x10b2752c], 0
jne 0x1098d5a8
push 0x10a93018
push 0x10b3f560
call fcn.10a29ed0
add esp, 8
push 0x10b3f560
push 2
call fcn.109dc750
add esp, 8
cmp dword [0x10a68af0], 0
je 0x1098d5c0
push 0x10a930f0
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x1098d5a8
call dword [0x10b3dc9c]
mov dword [0x10b38b58], eax
mov ecx, dword [0x10b38b58]
add ecx, 0x1d4c0
cmp ecx, 0x1d4c0
jae 0x1098d5ef
mov dword [0x10b38b58], 0xffffffff
mov edx, fcn.10953ee0
sub edx, fcn.109503e0
mov dword [0x10b41754], edx
mov dword [fcn.109503e0], 0x109503e0
push 4
call fcn.10a2a208
add esp, 4
mov dword [0x10b3832c], eax
mov eax, dword [0x10b3832c]
mov dword [eax], 0
push 4
call fcn.10a2a208
add esp, 4
mov dword [0x10b38ae8], eax
mov ecx, dword [0x10b38ae8]
mov dword [ecx], 0
cmp dword [0x10b276e0], 0
je 0x1098d661
mov edx, dword [0x10b3c3ae]
and edx, 2
test edx, edx
je 0x1098d661
mov eax, dword [0x10b276e0]
push eax
call dword [0x10b3d4c4]
mov dword [0x10b385fc], 0
jmp 0x1098d67c
mov ecx, dword [0x10b385fc]
add ecx, 1
mov dword [0x10b385fc], ecx
mov edx, dword [0x10b41754]
shr edx, 2
cmp dword [0x10b385fc], edx
jge 0x1098d6ac
mov eax, dword [0x10b3832c]
mov ecx, dword [eax]
mov edx, dword [0x10b385fc]
mov eax, dword [fcn.109503e0]
add ecx, dword [eax + edx*4]
mov edx, dword [0x10b3832c]
mov dword [edx], ecx
jmp 0x1098d66d
cmp dword [0x10b2752c], 0
je 0x1098d74e
cmp dword [0x10b38adc], 5
jb 0x1098d74e
cmp dword [0x10a68af0], 0
je 0x1098d6de
push 0x10a93138
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x1098d6c6
call fcn.10957700
test eax, eax
jne 0x1098d726
mov dword [0x10b276bc], 1
mov ecx, dword [0x10b2758c]
or ecx, 2
mov dword [0x10b2758c], ecx
cmp dword [0x10a68af0], 0
je 0x1098d71e
push 0x10a931a0
push 3
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x1098d706
jmp 0x1098d74e
mov dword [0x10b276bc], 0
cmp dword [0x10a68af0], 0
je 0x1098d748
push 0x10a932d8
push 0
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x1098d730
push 0x1094f0b0
call dword [0x10b38474]
cmp dword [0x10a68af0], 0
je 0x1098d771
push 0x10a933b0
push 2
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x1098d759
call fcn.109ceb20
cmp dword [0x10a68af0], 0
je 0x1098d794
push 0x10a93448
push 2
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x1098d77c
cmp dword [0x10b276e0], 0
je 0x1098d7bc
mov eax, dword [0x10b3c3ae]
and eax, 2
test eax, eax
je 0x1098d7bc
mov ecx, dword [0x10b276e0]
push ecx
call dword [0x10b3d4c4]
mov dword [0x10b385fc], 0
jmp 0x1098d7d7
mov edx, dword [0x10b385fc]
add edx, 1
mov dword [0x10b385fc], edx
cmp dword [0x10b385fc], 0xc
jge 0x1098d7fd
mov eax, dword [0x10b385fc]
push eax
call fcn.109c8cd0
add esp, 4
mov ecx, dword [0x10b385fc]
mov dword [ecx*4 + 0x10a41808], eax
jmp 0x1098d7c8
mov dword [ebp - 0x7084], 0x10a68b08
mov dword [ebp - 0x70e4], 0x200
mov dword [ebp - 0x70e0], 0
jmp 0x1098d82c
mov edx, dword [ebp - 0x70e0]
add edx, 1
mov dword [ebp - 0x70e0], edx
mov eax, dword [ebp - 0x70e4]
cdq
and edx, 3
add eax, edx
sar eax, 2
cmp dword [ebp - 0x70e0], eax
jge 0x1098d874
mov eax, dword [ebp - 0x70e0]
shl eax, 3
xor eax, dword [0x10b3c388]
mov ecx, dword [ebp - 0x70e0]
mov edx, dword [ebp - 0x7084]
mov ecx, dword [edx + ecx*4]
xor ecx, eax
mov edx, dword [ebp - 0x70e0]
mov eax, dword [ebp - 0x7084]
mov dword [eax + edx*4], ecx
jmp 0x1098d81d
lea ecx, [ebp - 0x70dc]
push ecx
call fcn.109e06d0
add esp, 4
push 0x200
push 0x10a68b08
lea edx, [ebp - 0x70dc]
push edx
call fcn.109e0710
add esp, 0xc
lea eax, [ebp - 0x70dc]
push eax
lea ecx, [ebp - 0x7080]
push ecx
call fcn.109e0840
add esp, 8
mov edx, dword [ebp - 0x7080]
mov dword [ebp - 0x70e8], edx
mov eax, dword [ebp - 0x70e8]
xor eax, dword [ebp - 0x707c]
mov dword [ebp - 0x70e8], eax
mov ecx, dword [ebp - 0x70e8]
xor ecx, dword [ebp - 0x7078]
mov dword [ebp - 0x70e8], ecx
mov edx, dword [ebp - 0x70e8]
xor edx, dword [ebp - 0x7074]
mov dword [ebp - 0x70e8], edx
mov eax, dword [ebp - 0x70e8]
shr eax, 0x18
and eax, 0xff
mov ecx, dword [ebp - 0x70e8]
shr ecx, 0x10
and ecx, 0xff
shl ecx, 8
add eax, ecx
mov edx, dword [ebp - 0x70e8]
shr edx, 8
and edx, 0xff
shl edx, 0x10
add eax, edx
mov ecx, dword [ebp - 0x70e8]
and ecx, 0xff
shl ecx, 0x18
add eax, ecx
mov dword [ebp - 0x70e8], eax
mov edx, dword [ebp - 0x70e8]
cmp edx, dword [0x10a68d08]
je 0x1098d996
cmp dword [0x10b27700], 1
jne 0x1098d996
mov eax, dword [0x10b3c3ae]
and eax, 8
test eax, eax
je 0x1098d996
cmp dword [0x10a68af0], 0
je 0x1098d97c
push 0x10a93510
push 0x21
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x1098d964
push 0x10
push 0x10a68b08
push fcn.109540e0
call fcn.10a29b30
add esp, 0xc
call fcn.109cfca0
jmp 0x1098d9bb
cmp dword [0x10a68af0], 0
je 0x1098d9d3
push 0x10a935a8
push 2
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x1098d9bb
call fcn.109d0a80
jmp 0x10998a6a
mov eax, dword [0x10a37b98]
xor eax, dword [0x10b3b170]
mov dword [0x10a37b98], eax
mov dword [0x10b385fc], 0
jmp 0x10998a95
mov ecx, dword [0x10b385fc]
add ecx, 1
mov dword [0x10b385fc], ecx
cmp dword [0x10b385fc], 9
jge 0x10998ac3
mov edx, dword [0x10b385fc]
mov eax, dword [0x10b385fc]
mov cl, byte [edx + 0x10a37b98]
sub cl, byte [eax + 0x10b38c80]
mov edx, dword [0x10b385fc]
mov byte [edx + 0x10a37b98], cl
jmp 0x10998a86
mov dword [0x10b385fc], 0x1e
jmp 0x10998adc
mov eax, dword [0x10b385fc]
sub eax, 1
mov dword [0x10b385fc], eax
cmp dword [0x10b385fc], 0
jl 0x10998b0b
mov ecx, dword [0x10b385fc]
mov edx, dword [0x10b385fc]
mov al, byte [ecx + 0x10a37b60]
xor al, byte [edx + 0x10a37b61]
mov ecx, dword [0x10b385fc]
mov byte [ecx + 0x10a37b60], al
jmp 0x10998acf
push 0
push 0
push 0
push 0
call dword [0x10b38ad8]
mov dword [0x10b4058c], eax
cmp dword [0x10a68af0], 0
je 0x10998b36
push 0x10a93670
push 2
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10998b1e
push 1
call dword [0x10b3ae6c]
test eax, eax
jne 0x10998b7a
cmp dword [0x10a68af0], 0
je 0x10998b60
push 0x10a936b8
push 0x20
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x10998b48
push 0xb
call fcn.1094f0d0
add esp, 4
mov eax, 0xb
jmp 0x109c8911
mov dword [0x10b27530], 1
cmp dword [0x10a68af0], 0
je 0x10998b9c
push 0x10a93740
push 2
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x10998b84
push 0x10b385f0
call dword [0x10b3f328]
push 0x10b27788
push 0x10b3dc20
call fcn.10a29ed0
add esp, 8
cmp dword [0x10a68af0], 0
je 0x10998bd7
push 0x10a937b8
push 2
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10998bbf
call dword [0x10b3b204]
test eax, eax
jne 0x10998bf8
push 0
call fcn.1094f0d0
add esp, 4
xor eax, eax
jmp 0x109c8911
cmp dword [0x10a68af0], 0
je 0x10998c10
push 0x10a93800
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x10998bf8
push 0x10b3ae60
push 0x10b41770
call dword [0x10b41758]
test eax, eax
jne 0x10998c7d
call dword [0x10b3b134]
cmp dword [0x10a68af0], 0
je 0x10998c48
push 0x10a93848
push 0x20
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x10998c30
push 1
call fcn.1094f0d0
add esp, 4
cmp dword [0x10a68af0], 0
je 0x10998c70
push 0x10a93880
push 4
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10998c58
push 1
call fcn.10a29a52
cmp dword [0x10a68af0], 0
je 0x10998cb7
mov eax, dword [0x10b3ae60]
add eax, 0x61
push eax
mov ecx, dword [0x10b41770]
push ecx
push 0x10a93888
push 0x10b39e00
call fcn.10a29fc0
add esp, 0x10
push 0x10b39e00
push 0
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10998c7d
cmp dword [0x10b2752c], 0
je 0x10998ce6
cmp dword [0x10a68af0], 0
je 0x10998cde
push 0x10a93918
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x10998cc6
jmp 0x10998d04
cmp dword [0x10a68af0], 0
je 0x10998cfe
push 0x10a939a0
push 2
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x10998ce6
nop
nop
nop
nop
nop
call fcn.109d5f20
cmp dword [0x10b2752c], 0
je 0x10998dde
mov dword [0x10b385fc], 0
jmp 0x10998d36
mov edx, dword [0x10b385fc]
add edx, 1
mov dword [0x10b385fc], edx
cmp dword [0x10b385fc], 8
jae 0x10998d5c
mov eax, dword [0x10b385fc]
xor ecx, ecx
mov cl, byte [eax + 0x10b3c488]
mov edx, dword [0x10b27720]
xor edx, ecx
mov dword [0x10b27720], edx
jmp 0x10998d27
mov dword [0x10b385fc], 0
jmp 0x10998d75
mov eax, dword [0x10b385fc]
add eax, 1
mov dword [0x10b385fc], eax
cmp dword [0x10b385fc], 0x10
jae 0x10998d9a
mov ecx, dword [0x10b385fc]
xor edx, edx
mov dl, byte [ecx + 0x10b3c490]
mov eax, dword [0x10b27720]
xor eax, edx
mov dword [0x10b27720], eax
jmp 0x10998d68
mov dword [0x10b385fc], 0
jmp 0x10998db5
mov ecx, dword [0x10b385fc]
add ecx, 1
mov dword [0x10b385fc], ecx
cmp dword [0x10b385fc], 4
jae 0x10998ddc
mov edx, dword [0x10b385fc]
xor eax, eax
mov al, byte [edx + 0x10b3c4a0]
mov ecx, dword [0x10b27720]
xor ecx, eax
mov dword [0x10b27720], ecx
jmp 0x10998da6
jmp 0x10998e1e
mov dword [0x10b385fc], 0
jmp 0x10998df9
mov edx, dword [0x10b385fc]
add edx, 1
mov dword [0x10b385fc], edx
cmp dword [0x10b385fc], 0x40
jae 0x10998e1e
mov eax, dword [0x10b385fc]
movsx ecx, byte [eax + 0x10b3ae20]
mov edx, dword [0x10b27720]
xor edx, ecx
mov dword [0x10b27720], edx
jmp 0x10998dea
cmp dword [0x10b27680], 0
je 0x10998ece
cmp dword [0x10a68af0], 0
je 0x10998e43
push 0x10a93a18
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x10998e2b
call fcn.109d14e0
cmp dword [0x10b27684], 0
jne 0x10998e61
mov dword [0x10b27680], 0
cmp dword [0x10b27684], 0
je 0x10998eb0
cmp dword [0x10a68af0], 0
je 0x10998ea8
mov ecx, dword [0x10b27678]
push ecx
mov edx, dword [0x10b27674]
push edx
mov eax, dword [0x10b27670]
push eax
push 0x10a93ab0
push 0x10b39e00
call fcn.10a29fc0
add esp, 0x14
push 0x10b39e00
push 0
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x10998e6a
jmp 0x10998ece
cmp dword [0x10a68af0], 0
je 0x10998ec8
push 0x10a93b34
push 0x20
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10998eb0
cmp dword [0x10a68af0], 0
je 0x10998ee6
push 0x10a93c0c
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x10998ece
call fcn.109ce1c0
cmp dword [0x10a68af0], 0
je 0x10998f29
mov ecx, dword [0x10b40568]
push ecx
mov edx, dword [0x10b39de0]
push edx
push 0x10a93c94
push 0x10b39e00
call fcn.10a29fc0
add esp, 0x10
push 0x10b39e00
push 1
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x10998ef1
cmp dword [0x10b2752c], 0
jne 0x10998f41
cmp dword [0x10b27680], 0
je 0x10998f64
cmp dword [0x10a68af0], 0
je 0x10998f59
push 0x10a93d64
push 2
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x10998f41
call fcn.109ce350
cmp dword [0x10a68af0], 0
je 0x10998f7c
push 0x10a93dbc
push 2
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10998f64
push 0x800
push 0x10b3ea40
push 0x10b405a0
call fcn.10a29b30
add esp, 0xc
call fcn.109ce360
cmp dword [0x10a68af0], 0
je 0x10998fb6
push 0x10a93de4
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x10998f9e
push 0x800
push 0x10b3ea40
push 0x10b405a0
call fcn.10a29b30
add esp, 0xc
call fcn.109ce810
jmp 0x10998ff9
cmp dword [0x10a68af0], 0
je 0x10999011
push 0x10a93e2c
push 2
call fcn.109dc750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x10998ff9
call dword [0x10b3b134]
cmp dword [0x10a87aa8], 0
je 0x10999053
call fcn.109c8fe0
mov dword [0x10a87aac], 1
cmp dword [0x10a68af0], 0
je 0x1099904d
push 0x10a93e64
push 0
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10999035
cmp dword [0x10b276e0], 0
je 0x10999075
mov eax, dword [0x10b3c3ae]
and eax, 2
test eax, eax
je 0x10999075
mov ecx, dword [0x10b276e0]
push ecx
call dword [0x10b3d4c4]
cmp dword [0x10a68af0], 0
je 0x1099908d
push 0x10a93ebc
push 2
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x10999075
mov eax, dword [0x10b27510]
push eax
push 0x10b3c450
push 0x10b3dc20
mov ecx, dword [0x10b38ae0]
push ecx
call fcn.109503e0
mov dword [0x10b41720], eax
push 0x40
call fcn.10a2a208
add esp, 4
mov dword [0x10b3c340], eax
push 0x40
push 0x10a37318
push 0x10b41660
call fcn.10a29b30
add esp, 0xc
cmp dword [0x10b2752c], 0
je 0x10999100
cmp dword [0x10b27510], 0
je 0x10999100
mov edx, dword [0x10b27510]
push edx
call dword [0x10b38334]
mov dword [0x10b27510], 0
mov eax, 0x10917000
sub eax, 0x10914f29
push edx
push ebx
dec eax
mov ebx, 0x8128
mul ebx
nop
add eax, 0x7c6c
nop
pop ebx
pop edx
push eax
jmp 0x109a8a5a
mov dword [entry0], eax
jmp 0x109a8a84
mov dword [0x10b3ce80], eax
cmp dword [0x10b276e0], 0
je 0x109a8aab
mov eax, dword [0x10b3c3ae]
and eax, 2
test eax, eax
je 0x109a8aab
mov ecx, dword [0x10b276e0]
push ecx
call dword [0x10b3d4c4]
cmp dword [0x10a87aa8], 0
je 0x109a8aea
cmp dword [0x10a87aac], 0
je 0x109a8aea
call fcn.109c9170
mov dword [0x10a87aac], 0
cmp dword [0x10a68af0], 0
je 0x109a8ae4
push 0x10a93f14
push 0
call fcn.109dc750
add esp, 8
xor edx, edx
test edx, edx
jne 0x109a8acc
cmp dword [0x10a68af0], 0
je 0x109a8b02
push 0x10a93f5c
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x109a8aea
jmp 0x109b3ae3
call fcn.109540e0
cmp dword [0x10b276e0], 0
je 0x109b3b0b
mov ecx, dword [0x10b3c3ae]
and ecx, 2
test ecx, ecx
je 0x109b3b0b
mov edx, dword [0x10b276e0]
push edx
call dword [0x10b3d4c4]
cmp dword [0x10a68af0], 0
je 0x109b3b23
push 0x10a93fc4
push 2
call fcn.109dc750
add esp, 8
xor eax, eax
test eax, eax
jne 0x109b3b0b
call fcn.109d5f20
mov dword [0x10b385fc], 0
mov ecx, dword [0x10b385fc]
imul ecx, ecx, 0xa
cmp dword [ecx + 0x10a5ecf4], 0
je 0x109b3cfe
cmp dword [0x10b385fc], 0x80
jge 0x109b3cfe
push 0
call dword [0x10b46cb4]
mov dword [ebp - 0x70f4], eax
mov ecx, dword [ebp - 0x70f4]
mov edx, dword [ebp - 0x70f4]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x70f0], edx
mov eax, dword [ebp - 0x70f0]
add eax, 0x80
mov dword [ebp - 0x70ec], eax
push 0x10b3aec4
push 4
push 8
mov ecx, dword [ebp - 0x70ec]
push ecx
call dword [0x10b46ce0]
test eax, eax
jne 0x109b3d6a
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10