Function at 0x1008aee4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x100db422
call fcn.100d1b40
sub esp, 0x194
push ebx
push esi
mov esi, ecx
mov eax, 0x4000
push edi
mov dword [ebp - 0x28], esi
mov ecx, dword [esi + 4]
mov dword [ebp - 0x10], esp
cmp ecx, eax
jae 0x1008af29
xor edi, edi
push eax
mov dword [esi + 8], edi
mov ecx, esi
mov dword [esi + 0xc], edi
call fcn.10088d69
cmp dword [esi], edi
jne 0x1008af29
mov eax, 0x8007000e
jmp 0x1008bd8c
and byte [esi + 0x20], 0
and byte [ebp - 0x13], 0
xor edi, edi
cmp byte [esi + 0x85], 0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], edi
je 0x1008b34a
cmp byte [esi + 0x86], 0
je 0x1008b34a
mov eax, dword [esi + 0x48]
mov ecx, dword [esi + 0x4c]
add eax, 4
adc ecx, edi
push ecx
push eax
push dword [esi + 0x68]
mov ecx, esi
call fcn.1008860a
mov eax, dword [esi + 0x24]
and byte [esi + 0x22], 0
cmp eax, 0x6064b50
jne 0x1008b0e3
mov ecx, esi
mov byte [esi + 0x79], 1
call fcn.100890d0
mov edi, edx
mov ebx, eax
test edi, edi
ja 0x1008afb0
jb 0x1008b1c7
cmp ebx, 0x2c
jb 0x1008b1c7
cmp edi, 0x40000000
jb 0x1008afc6
ja 0x1008b1c7
test ebx, ebx
jae 0x1008b1c7
lea eax, [ebp - 0x1a0]
push 0x2c
push eax
mov ecx, esi
call fcn.10089049
push 0x30
lea eax, [ebp - 0xfc]
push 0
push eax
call sub.MSVCRT.dll_memset
and byte [ebp - 0xfc], 0
add esp, 0xc
lea eax, [ebp - 0x1a0]
lea ecx, [ebp - 0xfc]
push eax
call fcn.1008843f
cmp dword [ebp - 0xf4], 0
jne 0x1008b1c7
cmp dword [ebp - 0xf0], 0
jne 0x1008b1c7
mov eax, dword [ebp - 0xec]
or eax, dword [ebp - 0xe8]
jne 0x1008b1c7
mov eax, dword [ebp - 0xe4]
or eax, dword [ebp - 0xe0]
jne 0x1008b1c7
mov eax, dword [ebp - 0xdc]
or eax, dword [ebp - 0xd8]
jne 0x1008b1c7
mov eax, dword [ebp - 0xd4]
or eax, dword [ebp - 0xd0]
jne 0x1008b1c7
sub ebx, 0x2c
push 0
sbb edi, 0
mov ecx, esi
push edi
push ebx
call fcn.10089133
test eax, eax
jne 0x1008bd8c
mov ecx, esi
call fcn.100890e8
cmp dword [esi + 0x24], 0x7064b50
jne 0x1008b1c7
lea eax, [ebp - 0x9c]
push 0x10
push eax
mov ecx, esi
call fcn.10089049
cmp dword [ebp - 0x9c], 0
jne 0x1008b1c7
cmp dword [ebp - 0x90], 0
jne 0x1008b1c7
mov eax, dword [ebp - 0x98]
or eax, dword [ebp - 0x94]
jne 0x1008b1c7
mov ecx, esi
call fcn.100890e8
mov eax, dword [esi + 0x24]
cmp eax, 0x6054b50
je 0x1008b0ea
jmp 0x1008b1c7
cmp eax, 0x6054b50
jne 0x1008b155
lea eax, [ebp - 0x9c]
push 0x12
push eax
mov ecx, esi
call fcn.10089049
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0x88]
push eax
call fcn.100883b8
lea ecx, [ebp - 0x88]
call fcn.100889cf
test al, al
je 0x1008b1c7
push dword [esi + 0x4c]
mov eax, dword [esi + 0x40]
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x44]
push dword [esi + 0x48]
mov ecx, esi
mov dword [esi + 0x3c], eax
mov byte [esi + 0x78], 1
push dword [esi + 0x68]
call fcn.1008860a
test eax, eax
jne 0x1008bd8c
mov ecx, esi
call fcn.100890e8
xor edi, edi
jmp 0x1008b37d
lea ecx, [ebp - 0x174]
call fcn.10089726
and byte [ebp - 0x100], 0
and dword [ebp - 4], 0
lea eax, [ebp - 0x174]
push eax
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.1008942a
test al, al
je 0x1008b1b8
lea eax, [ebp - 0x60]
mov ecx, esi
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 4], 1
push dword [ebp + 8]
mov byte [esi + 0x78], 1
call fcn.1008a24a
test eax, eax
mov dword [ebp - 0x18], eax
jne 0x1008b1df
mov ecx, esi
call fcn.100890e8
jmp 0x1008b1df
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.10086bc3
push 1
pop eax
jmp 0x1008bd8c
and dword [ebp - 4], 0
push 1
pop eax
cmp dword [ebp - 0x18], eax
je 0x1008b336
cmp dword [ebp - 0x18], 0
je 0x1008b20c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.10086bc3
mov eax, dword [ebp - 0x18]
jmp 0x1008bd8c
mov ecx, dword [ebp + 8]
mov ebx, dword [ecx + 4]
test ebx, ebx
jne 0x1008b21e
mov dword [ebp - 0x18], eax
jmp 0x1008b336
mov eax, dword [esi + 0x4c]
mov edx, dword [esi + 0x3c]
mov ecx, dword [esi + 0x48]
mov edi, dword [esi + 0x38]
cmp eax, edx
jg 0x1008b240
jl 0x1008b234
cmp ecx, edi
jae 0x1008b240
mov dword [ebp - 0x18], 1
jmp 0x1008b336
sub ecx, edi
sbb eax, edx
or edi, 0xffffffff
cmp byte [esi + 0x7b], 0
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x7c], edi
jne 0x1008b272
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0x174]
call fcn.1008bd9d
jmp 0x1008b2ed
and dword [ebp - 0x1c], 0
test ebx, ebx
jbe 0x1008b234
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x20]
cmp edx, dword [ebp - 0x154]
jne 0x1008b2ae
mov eax, dword [ecx + 0x48]
cmp eax, dword [ebp - 0x12c]
jne 0x1008b2ae
mov eax, dword [ecx + 0x4c]
cmp eax, dword [ebp - 0x128]
jne 0x1008b2ae
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x1c], 0
je 0x1008b2cc
cmp edx, dword [ebp - 0x24]
jb 0x1008b2cc
jne 0x1008b2d8
mov eax, dword [ecx + 0x4c]
cmp eax, edi
ja 0x1008b2d8
jb 0x1008b2cc
mov eax, dword [ecx + 0x48]
cmp eax, dword [ebp - 0x7c]
jae 0x1008b2d8
mov eax, dword [ecx + 0x48]
mov edi, dword [ecx + 0x4c]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x7c], eax
inc dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x1c]
add dword [ebp - 0x30], 4
cmp ecx, dword [eax + 4]
jb 0x1008b282
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
je 0x1008b234
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx]
mov edx, dword [ecx + eax*4]
lea ecx, [ebp - 0x174]
call fcn.10089788
test al, al
je 0x1008b234
cmp byte [esi + 0x7b], 0
mov byte [esi + 0x6c], 1
je 0x1008b326
mov eax, dword [ebp - 0x7c]
mov dword [esi + 0x60], eax
mov dword [esi + 0x64], edi
jmp 0x1008b336
mov eax, dword [ebx]
mov eax, dword [eax]
mov ecx, dword [eax + 0x48]
mov dword [esi + 0x60], ecx
mov eax, dword [eax + 0x4c]
mov dword [esi + 0x64], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.10086bc3
jmp 0x1008b14e
lea eax, [ebp - 0x60]
mov ecx, esi
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [esi + 0x78], 1
push dword [ebp + 8]
call fcn.1008a24a
cmp eax, edi
mov dword [ebp - 0x18], eax
jne 0x1008b374
mov ecx, esi
call fcn.100890e8
jmp 0x1008b37d
cmp eax, 1
jne 0x1008bd8c
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], edi
mov eax, dword [ebp + 8]
and byte [ebp - 0x1d], 0
cmp dword [ebp - 0x18], edi
mov dword [ebp - 4], 5
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
je 0x1008b64d
mov ecx, dword [ebp + 8]
call fcn.10086fca
and byte [esi + 0x20], 0
and byte [esi + 0x7c], 0
and byte [esi + 0x7d], 0
and byte [esi + 0x7e], 0
xor ebx, ebx
mov byte [ebp - 0x13], 1
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
cmp byte [esi + 0x85], bl
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
jne 0x1008b406
cmp byte [esi + 0x87], bl
jne 0x1008b3e5
push 1
pop edi
jmp 0x1008bc79
cmp dword [esi + 0xac], ebx
jne 0x1008b3dd
push dword [esi + 0x4c]
push dword [esi + 0x48]
push ebx
mov ecx, esi
call fcn.1008860a
cmp eax, ebx
je 0x1008b425
mov edi, eax
jmp 0x1008bc79
mov eax, dword [esi + 0x40]
or eax, dword [esi + 0x44]
je 0x1008b41a
mov eax, dword [esi + 0x48]
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x4c]
mov dword [esi + 0x3c], eax
push dword [esi + 0x4c]
push dword [esi + 0x48]
push dword [esi + 0x68]
jmp 0x1008b3f4
mov dword [esi + 0x18], ebx
mov ecx, esi
mov dword [esi + 0x1c], ebx
call fcn.100890e8
push dword [ebp + 8]
mov ecx, esi
mov byte [esi + 0x80], 1
call fcn.1008a384
cmp eax, ebx
jne 0x1008b3ff
mov edi, dword [esi + 0x24]
mov ebx, 0x2014b50
cmp edi, ebx
je 0x1008b507
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0
je 0x1008b3dd
cmp edi, 0x18
mov byte [ebp - 0x11], 1
jb 0x1008b4f5
cmp edi, 0x100000
ja 0x1008b4f5
mov ecx, esi
call fcn.100890bc
test eax, eax
jne 0x1008b4f5
and dword [ebp - 0x2c], eax
and dword [ebp - 0x28], eax
push edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.100043b0
push edi
mov ecx, esi
push dword [ebp - 0x2c]
call fcn.10089049
mov ecx, esi
call fcn.100890e8
mov eax, dword [ebp - 0x2c]
cmp dword [esi + 0x24], ebx
lea eax, [eax + edi - 0x18]
jne 0x1008b4e2
mov edx, dword [eax]
xor ecx, ecx
cmp edx, edi
jne 0x1008b4e2
mov edx, dword [eax + 4]
cmp edx, ecx
jne 0x1008b4e2
push 0x10
add eax, 8
push str.APK_Sig_Block_42
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x1008b4e2
and byte [ebp - 0x11], al
mov byte [esi + 0x7a], 1
push dword [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.1000334c
cmp byte [ebp - 0x11], 0
pop ecx
je 0x1008b507
mov byte [esi + 0x82], 1
mov byte [esi + 0x7c], 1
xor edi, edi
jmp 0x1008bc79
mov eax, dword [esi + 0x10]
mov byte [esi + 0x20], 1
mov ecx, dword [esi + 0xc]
xor edx, edx
sub eax, ecx
mov ecx, dword [esi + 0x14]
sbb ecx, edx
mov edx, dword [esi + 8]
xor edi, edi
add eax, edx
adc ecx, edi
sub eax, 4
mov ebx, dword [esi + 0x18]
mov dword [ebp - 0x40], eax
mov eax, dword [esi + 0x9c]
sbb ecx, edi
mov dword [ebp - 0x58], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x30], eax
call fcn.10089726
and byte [ebp - 0x100], 0
lea eax, [ebp - 0x174]
mov ecx, esi
push eax
mov byte [ebp - 4], 7
call fcn.10089c1b
mov edi, eax
test edi, edi
jne 0x1008b5ee
lea eax, [ebp - 0x174]
lea ecx, [ebp - 0x54]
push eax
call fcn.1008c384
mov ecx, dword [esi + 0x34]
test ecx, ecx
je 0x1008b5b8
test word [ebp - 0x50], 0xfff
jne 0x1008b5b8
mov eax, dword [ebp + 8]
and dword [ebp - 0x28], edi
lea edx, [ebp - 0x7c]
mov eax, dword [eax + 4]
push edx
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x7c], eax
mov eax, dword [esi + 0x1c]
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x78], eax
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0x10]
mov edi, eax
test edi, edi
jne 0x1008b5ee
mov ecx, esi
call fcn.100890e8
cmp dword [esi + 0x24], 0x2014b50
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x174]
jne 0x1008b602
call fcn.10086bc3
lea ecx, [ebp - 0x174]
call fcn.10089726
and byte [ebp - 0x100], 0
jmp 0x1008b552
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 5
call fcn.10086bc3
jmp 0x1008bc79
call fcn.10086bc3
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x1c]
sub eax, ebx
mov edx, dword [ebp - 0x3c]
sbb ecx, dword [ebp - 0x30]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x50]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x40]
sub ecx, dword [esi + 0x38]
mov dword [ebp - 0x1c], eax
sbb edx, dword [esi + 0x3c]
mov dword [ebp - 0x48], ecx
test eax, eax
mov dword [ebp - 0x44], edx
je 0x1008b64d
mov eax, dword [ebp - 0x54]
mov byte [esi + 0x6c], 1
mov eax, dword [eax]
mov ecx, dword [eax + 0x48]
mov dword [esi + 0x60], ecx
mov eax, dword [eax + 0x4c]
mov dword [esi + 0x64], eax
xor edi, edi
push 0x30
lea eax, [ebp - 0xcc]
push edi
push eax
call sub.MSVCRT.dll_memset
mov edx, dword [esi + 0xc]
mov eax, dword [esi + 8]
and byte [ebp - 0xcc], 0
and byte [ebp - 0x11], 0
add esp, 0xc
xor ebx, ebx
xor ecx, ecx
sub eax, edx
sbb ecx, ebx
add eax, dword [esi + 0x10]
mov dword [ebp - 0x94], edi
mov dword [ebp - 0x90], edi
adc ecx, dword [esi + 0x14]
sub eax, 4
mov dword [ebp - 0x34], eax
sbb ecx, edi
or dword [ebp - 0x28], 0xffffffff
cmp dword [esi + 0x24], 0x6064b50
mov dword [ebp - 0x30], ecx
jne 0x1008b760
mov eax, dword [esi + 0x9c]
mov ecx, esi
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x11], 1
mov byte [esi + 0x79], 1
call fcn.100890d0
mov edi, edx
mov ebx, eax
test edi, edi
ja 0x1008b6cd
cmp ebx, 0x2c
jb 0x1008b72a
cmp edi, 0x40000000
ja 0x1008b72a
jb 0x1008b6db
test ebx, ebx
jae 0x1008b72a
lea eax, [ebp - 0x1a0]
push 0x2c
push eax
mov ecx, esi
call fcn.10089049
lea eax, [ebp - 0x1a0]
lea ecx, [ebp - 0xcc]
push eax
call fcn.1008843f
mov eax, dword [ebp + 8]
sub ebx, 0x2c
sbb edi, 0
mov ecx, esi
push dword [eax + 4]
push edi
push ebx
call fcn.10089133
test eax, eax
jne 0x1008b3ff
mov ecx, esi
call fcn.100890e8
cmp dword [esi + 0x24], 0x7064b50
je 0x1008b735
xor edi, edi
mov byte [esi + 0x7c], 1
jmp 0x1008bc79
lea eax, [ebp - 0x84]
push 0x10
push eax
mov ecx, esi
call fcn.10089049
mov eax, dword [ebp - 0x80]
mov ecx, esi
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x90], eax
call fcn.100890e8
xor edi, edi
cmp dword [esi + 0x24], 0x6054b50
mov bl, byte [ebp - 0x11]
jne 0x1008bd7a
and byte [esi + 0x22], 0
lea eax, [ebp - 0x88]
push 0x12
push eax
mov ecx, esi
call fcn.10089049
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x74]
push eax
call fcn.100883b8
test bl, bl
je 0x1008b79f
cmp word [ebp - 0x74], 0xffff
je 0x1008b7a9
movzx eax, word [ebp - 0x74]
mov dword [ebp - 0xc4], eax
test bl, bl
je 0x1008b7b5
cmp word [ebp - 0x72], 0xffff
je 0x1008b7bf
movzx eax, word [ebp - 0x72]
mov dword [ebp - 0xc0], eax
test bl, bl
je 0x1008b7cb
cmp word [ebp - 0x70], 0xffff
je 0x1008b7dc
movzx eax, word [ebp - 0x70]
cdq
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], edx
test bl, bl
je 0x1008b7e8
cmp word [ebp - 0x6e], 0xffff
je 0x1008b7f9
movzx eax, word [ebp - 0x6e]
cdq
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], edx
test bl, bl
je 0x1008b803
cmp dword [ebp - 0x6c], 0xffffffff
je 0x1008b812
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xac], eax
test bl, bl
je 0x1008b81c
cmp dword [ebp - 0x68], 0xffffffff
je 0x1008b82b
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x60]
mov byte [ebp - 0x12], 1
cmp dword [ebp - 0xac], ecx
je 0x1008b83e
and byte [ebp - 0x12], 0
test bl, bl
je 0x1008b86e
mov edx, dword [ebp - 0xb4]
xor eax, eax
cmp edx, dword [ebp - 0x1c]
jne 0x1008b86a
cmp dword [ebp - 0xb0], eax
jne 0x1008b86a
cmp dword [ebp - 0xac], ecx
jne 0x1008b86a
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x5c]
je 0x1008b86e
and byte [ebp - 0x12], 0
cmp byte [esi + 0x87], 0
je 0x1008b898
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x58], eax
je 0x1008b886
mov byte [esi + 0x7c], 1
mov ebx, dword [ebp + 8]
cmp byte [ebp - 0x12], 0
jne 0x1008b9dd
jmp 0x1008b9d9
cmp byte [ebp - 0x1d], 0
je 0x1008b886
cmp byte [ebp - 0x12], 0
je 0x1008b9d6
mov edi, dword [esi + 0x38]
mov edx, dword [esi + 0x3c]
test bl, bl
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edx
je 0x1008b91f
mov eax, dword [ebp - 0x28]
cmp eax, dword [esi + 0xa8]
jne 0x1008b992
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x94]
sbb eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x30]
jg 0x1008b992
jl 0x1008b8ed
cmp ecx, dword [ebp - 0x34]
ja 0x1008b992
cmp byte [ebp - 0x13], 0
je 0x1008b907
cmp eax, dword [esi + 0x4c]
jl 0x1008b907
jg 0x1008b98e
cmp ecx, dword [esi + 0x48]
ja 0x1008b98e
mov edx, dword [ebp - 0x40]
mov dword [esi + 0x38], ecx
sub edx, ecx
mov ecx, dword [ebp - 0x3c]
sbb ecx, eax
mov dword [esi + 0x3c], eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], ecx
jmp 0x1008b992
cmp dword [ebp - 0x1c], 0
je 0x1008b992
mov eax, dword [ebp - 0x58]
cmp eax, dword [esi + 0xa8]
jne 0x1008b992
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0xa4]
sbb eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x3c]
jg 0x1008b98e
jl 0x1008b94e
cmp ecx, dword [ebp - 0x40]
ja 0x1008b98e
cmp byte [ebp - 0x13], 0
je 0x1008b974
cmp eax, dword [esi + 0x4c]
jl 0x1008b974
jg 0x1008b960
cmp ecx, dword [esi + 0x48]
jbe 0x1008b974
sub ecx, edi
sbb eax, edx
test ecx, ecx
mov dword [ebp - 0x3c], eax
jne 0x1008b98e
mov byte [esi + 0x83], 1
jmp 0x1008b992
mov dword [esi + 0x38], ecx
mov dword [esi + 0x3c], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x44], eax
jmp 0x1008b992
and byte [ebp - 0x12], 0
cmp byte [ebp - 0x13], 0
je 0x1008b886
mov edx, dword [ebp - 0x7c]
mov edi, dword [ebp - 0x78]
sub edx, dword [esi + 0x38]
sbb edi, dword [esi + 0x3c]
mov eax, edx
or eax, edi
je 0x1008b886
mov ebx, dword [ebp + 8]
xor ecx, ecx
cmp dword [ebx + 4], ecx
jbe 0x1008b889
mov eax, dword [ebx]
mov eax, dword [eax + ecx*4]
add dword [eax + 0x48], edx
adc dword [eax + 0x4c], edi
inc ecx
cmp ecx, dword [ebx + 4]
jb 0x1008b9c0
jmp 0x1008b889
mov ebx, dword [ebp + 8]
mov byte [esi + 0x7c], 1
mov eax, dword [ebp - 0xc4]
cmp byte [esi + 0x87], 0
mov dword [esi + 0x8c], eax
jne 0x1008ba53
xor edi, edi
cmp eax, edi
jne 0x1008ba21
cmp byte [esi + 0xa6], 0
lea ecx, [esi + 0xa6]
je 0x1008ba21
cmp byte [esi + 0xa2], 0
je 0x1008ba21
lea eax, [esi + 0xc4]
mov dword [eax + 4], edi
mov eax, dword [eax]
mov word [eax], di
and byte [ecx], 0
cmp byte [ebp - 0x13], 0
je 0x1008ba4a
cmp dword [esi + 0x8c], edi
je 0x1008ba4a
xor ecx, ecx
cmp dword [ebx + 4], edi
jbe 0x1008ba4a
mov eax, dword [ebx]
mov edx, dword [esi + 0x8c]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [eax + 0x20], edx
cmp ecx, dword [ebx + 4]
jb 0x1008ba36
mov byte [esi + 0x88], 1
jmp 0x1008ba55
xor edi, edi
cmp byte [ebp - 0x11], 0
je 0x1008bae5
cmp dword [ebp - 0xc4], edi
jne 0x1008ba8b
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x3c]
add eax, dword [ebp - 0x94]
adc ecx, dword [ebp - 0x90]
cmp dword [ebp - 0x34], eax
jne 0x1008bd7a
cmp dword [ebp - 0x30], ecx
jne 0x1008bd7a
mov ecx, dword [ebp - 0xb4]
xor eax, eax
cmp ecx, dword [ebp - 0x1c]
jne 0x1008bd7a
cmp dword [ebp - 0xb0], eax
jne 0x1008bd7a
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x60]
jne 0x1008bd7a
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x5c]
jne 0x1008bd7a
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x48]
jne 0x1008badc
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x44]
je 0x1008bae5
cmp dword [ebx + 4], edi
jne 0x1008bd7a
cmp byte [ebp - 0x12], 0
je 0x1008bcbf
cmp dword [ebp - 0x50], edi
je 0x1008bcbf
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 8
mov dword [ebp - 0x24], edi
mov byte [esi + 0x81], 1
mov dword [ebp - 0x18], edi
jbe 0x1008bc8c
mov ecx, dword [esi + 0x34]
test ecx, ecx
je 0x1008bb51
test word [ebp - 0x18], 0x3fff
jne 0x1008bb51
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x34]
and dword [ebp - 0x3c], 0
mov eax, dword [eax + 4]
add edx, eax
mov dword [ebp - 0x40], edx
mov eax, dword [ecx]
lea edx, [esi + 0x18]
push edx
lea edx, [ebp - 0x40]
push edx
push ecx
call dword [eax + 0x10]
mov edi, eax
test edi, edi
jne 0x1008bc70
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x18]
or dword [ebp - 0x28], 0xffffffff
mov edi, dword [eax + ecx*4]
mov eax, dword [ebp - 0x24]
cmp eax, 0xffffffff
je 0x1008bbb9
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 4]
jae 0x1008bbb9
mov ecx, dword [ecx]
mov ecx, dword [ecx + eax*4]
mov eax, dword [ecx + 0x20]
cmp eax, dword [edi + 0x20]
jne 0x1008bbad
mov edx, dword [edi + 0x48]
mov eax, dword [ecx + 0x48]
mov ebx, dword [edi + 0x4c]
cmp eax, edx
jne 0x1008bb8f
mov eax, dword [ecx + 0x4c]
cmp eax, ebx
je 0x1008bba5
cmp byte [esi + 0x83], 0
je 0x1008bbad
mov ecx, dword [ecx + 0x48]
xor eax, eax
cmp ecx, edx
jne 0x1008bbad
cmp eax, ebx
jne 0x1008bbad
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x24]
jmp 0x1008bbb4
or dword [ebp - 0x24], 0xffffffff
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
jne 0x1008bbeb
mov ecx, dword [ebp + 8]
mov edx, edi
call fcn.1008bd9d
cmp eax, 0xffffffff
jne 0x1008bbeb
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38]
call fcn.1001b6b1
mov byte [esi + 0x7c], 1
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x50]
jb 0x1008bb18
jmp 0x1008bc8c
mov ecx, dword [ebp + 8]
lea edx, [edi + 0x24]
mov ecx, dword [ecx]
mov ebx, dword [ecx + eax*4]
lea ecx, [ebx + 0x24]
call fcn.10066cb5
test al, al
jne 0x1008bbd3
mov eax, dword [ebx + 0x10]
cmp eax, dword [edi + 0x10]
jne 0x1008bbd3
mov eax, dword [ebx + 0x14]
cmp eax, dword [edi + 0x14]
jne 0x1008bbd3
mov eax, dword [ebx + 8]
cmp eax, dword [edi + 8]
jne 0x1008bbd3
mov eax, dword [ebx + 0xc]
cmp eax, dword [edi + 0xc]
jne 0x1008bbd3
mov edx, edi
mov ecx, ebx
call fcn.10089829
test al, al
je 0x1008bbd3
mov eax, dword [ebx + 0x1c]
cmp eax, dword [edi + 0x1c]
jne 0x1008bbd3
mov ax, word [edi + 0x40]
lea ecx, [ebx + 0x50]
mov word [ebx + 0x40], ax
lea eax, [edi + 0x50]
push eax
call fcn.100898c2
mov ax, word [edi + 0x42]
lea ecx, [ebx + 0x60]
mov word [ebx + 0x42], ax
mov eax, dword [edi + 0x44]
mov dword [ebx + 0x44], eax
lea eax, [edi + 0x60]
push eax
call fcn.1002d64a
mov al, byte [edi + 0x69]
mov byte [ebx + 0x69], al
jmp 0x1008bbd7
push dword [ebp - 0x38]
call fcn.1000334c
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.10086f79
mov eax, edi
jmp 0x1008bd8c
xor edi, edi
cmp dword [ebp - 0x34], edi
jbe 0x1008bcad
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x54]
mov eax, dword [eax + edi*4]
push dword [ecx + eax*4]
mov ecx, dword [ebp + 8]
call fcn.1008c384
inc edi
cmp edi, dword [ebp - 0x34]
jb 0x1008bc93
push dword [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.1000334c
mov ebx, dword [ebp + 8]
pop ecx
xor edi, edi
mov cx, word [ebp - 0x6e]
cmp cx, word [ebp - 0x70]
jae 0x1008bccd
mov byte [esi + 0x7c], 1
cmp word [ebp - 0x74], di
jne 0x1008bcdd
cmp cx, word [ebp - 0x70]
je 0x1008bcdd
mov byte [esi + 0x7c], 1
cmp byte [ebp - 0x11], 0
mov eax, dword [ebx + 4]
je 0x1008bd0e
xor ecx, ecx
cmp dword [ebp - 0xb4], eax
jne 0x1008bd08
cmp dword [ebp - 0xb0], ecx
jne 0x1008bd08
movzx ecx, word [ebp - 0x6e]
cmp ecx, eax
je 0x1008bd3e
cmp word [ebp - 0x6e], 0xffff
je 0x1008bd3e
mov byte [esi + 0x7c], 1
jmp 0x1008bd3e
movzx ecx, cx
cmp ecx, eax
jbe 0x1008bd19
mov byte [esi + 0x7c], 1
mov ecx, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0xb4], ecx
jne 0x1008bd2e
cmp dword [ebp - 0xb0], eax
je 0x1008bd3e
cmp word [ebp - 0xb4], cx
jne 0x1008bd08
mov byte [esi + 0x84], 1
movzx eax, word [ebp - 0x64]
push eax
lea eax, [esi + 0x70]
push eax
mov ecx, esi
call fcn.10089090
mov ax, word [ebp - 0x1c]
and byte [esi + 0x20], 0
cmp word [ebp - 0xb4], ax
jne 0x1008bd7a
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x60]
jne 0x1008bd7a
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x48]
je 0x1008bd7e
cmp dword [ebx + 4], edi
je 0x1008bd7e
mov byte [esi + 0x7c], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.10086f79
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4