Function at 0x1001f090
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x40
mov eax, dword [0x1007d664]
xor eax, esp
mov dword [esp + 0x3c], eax
mov ecx, 2
cmp dword [0x10085038], ecx
jne 0x1001f0be
xor eax, eax
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x10081e7c]
mov eax, dword [esp + 0x44]
push ebx
push esi
xor ebx, ebx
xor esi, esi
cmp eax, edx
jne 0x1001f10b
cmp dword [0x10081e64], ebx
push 1
je 0x1001f0f2
push 0x10050dac
mov dword [0x10081e64], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050d9c
mov dword [0x10081e64], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081a38]
cmp eax, edx
jne 0x1001f16f
cmp dword [0x1008173c], ebx
je 0x1001f135
push 1
push 0x10050d90
mov dword [0x1008173c], ebx
call fcn.10001160
jmp 0x1002005f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 1
push 0x10050d84
mov dword [0x10081700], eax
mov dword [0x10081704], eax
mov dword [0x10081708], eax
mov dword [0x1008170c], eax
mov dword [0x10081710], eax
mov dword [0x1008173c], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081a3c]
cmp eax, edx
jne 0x1001f1b2
cmp dword [0x10082020], ebx
push 1
je 0x1001f199
push 0x10050b28
mov dword [0x10082020], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050b34
mov dword [0x10082020], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081e80]
cmp eax, edx
jne 0x1001f1f5
cmp dword [0x10081e68], ebx
push 1
je 0x1001f1dc
push 0x10050d74
mov dword [0x10081e68], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050d64
mov dword [0x10081e68], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081a20]
cmp eax, edx
jne 0x1001f21e
cmp byte [0x10081e40], bl
mov dword [0x10081db4], ebx
push 6
je 0x1001fcd4
call fcn.100240f0
jmp 0x1002005f
movzx edx, byte [0x10081a1c]
cmp eax, edx
jne 0x1001f262
mov eax, dword [0x100817f0]
test eax, eax
push 1
je 0x1001f249
push 0x10050d5c
mov dword [0x100817f0], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050d54
mov dword [0x100817f0], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x100819f0]
cmp eax, edx
jne 0x1001f2d9
cmp dword [0x10081e4c], ebx
push 1
je 0x1001f2a6
push 0x10050d48
mov dword [0x10081e4c], ebx
call fcn.10001160
mov esi, 1
call fcn.10009630
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 0x10050d3c
mov dword [0x10081e4c], 1
call fcn.10001160
mov esi, 1
call fcn.10009630
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x10081a28]
cmp eax, edx
jne 0x1001f31c
cmp dword [0x10081fa4], ebx
push 1
je 0x1001f303
push 0x10050d30
mov dword [0x10081fa4], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050d24
mov dword [0x10081fa4], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081a2c]
cmp eax, edx
jne 0x1001f35f
cmp dword [0x10081fa0], ebx
push 1
je 0x1001f346
push 0x10050d1c
mov dword [0x10081fa0], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050d14
mov dword [0x10081fa0], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081a30]
cmp eax, edx
jne 0x1001f374
call fcn.1001d900
jmp 0x1002005f
movzx edx, byte [0x10081a34]
cmp eax, edx
jne 0x1001f38e
push 0x9c7
call fcn.10025ea0
jmp 0x1002005f
movzx edx, byte [0x100819f4]
cmp eax, edx
jne 0x1001f3a3
call fcn.1001d830
jmp 0x1002005f
movzx edx, byte [0x100821b0]
cmp eax, edx
jne 0x1001f3f4
cmp dword [0x10081da8], ebx
je 0x1001f3d5
push 0x470
call fcn.1002c980
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 0xe2
call fcn.1002c980
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x100821bc]
cmp eax, edx
jne 0x1001f461
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10081968]
add ecx, 0x4b0
cmp ecx, eax
jae 0x10020064
cmp dword [0x10081da8], ebx
mov dword [0x10081968], eax
je 0x1001f445
push 0x452
call fcn.1002c980
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 0x27
call fcn.1002c980
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x100821b4]
cmp eax, edx
jne 0x1001f4b2
cmp dword [0x10081da8], ebx
je 0x1001f493
push 0x2735
call fcn.10027210
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 0x272f
call fcn.10027210
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x100821b8]
cmp eax, edx
jne 0x1001f503
cmp dword [0x10081da8], ebx
je 0x1001f4e4
push 0x2733
call fcn.10027210
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 0x272c
call fcn.10027210
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x10081e48]
cmp eax, edx
jne 0x1001f550
cmp dword [0x10081e18], ebx
push 1
je 0x1001f532
push 0x10050d08
mov dword [0x10081e18], ebx
call fcn.10001160
call fcn.10009630
jmp 0x1002005f
push 0x10050cfc
mov dword [0x10081e18], 1
call fcn.10001160
call fcn.10009630
jmp 0x1002005f
movzx edx, byte [0x10081e5c]
cmp eax, edx
jne 0x1001f5cf
call fcn.10028fd0
push eax
call fcn.10029120
mov eax, dword [0x10081e44]
lea ecx, [eax + 1]
lea esi, [eax + 7]
cmp ecx, esi
jae 0x1002005f
lea esp, [esp]
mov eax, 0xaaaaaaab
mul ecx
shr edx, 2
lea eax, [edx + edx*2]
add eax, eax
mov edx, ecx
sub edx, eax
mov eax, dword [edx*4 + 0x10081e1c]
lea eax, [eax + eax*2]
cmp word [eax*4 + 0x10081dd0], bx
jne 0x1001f5b3
add ecx, 1
cmp ecx, esi
jb 0x1001f580
jmp 0x1002005f
mov eax, 0xaaaaaaab
mul ecx
shr edx, 2
lea edx, [edx + edx*2]
add edx, edx
sub ecx, edx
mov dword [0x10081e44], ecx
jmp 0x1002005f
movzx edx, byte [0x10081ac8]
cmp eax, edx
jne 0x1001f61a
mov al, byte [0x1007f3b5]
test al, al
push 1
je 0x1001f5ff
push 0x10050cf4
mov byte [0x1007f3b5], bl
call fcn.10001160
call fcn.1000f0c0
jmp 0x1002005f
push 0x10050cec
mov byte [0x1007f3b5], 1
call fcn.10001160
call fcn.1000f0c0
jmp 0x1002005f
movzx edx, byte [0x10081adc]
cmp eax, edx
jne 0x1001f687
mov esi, 1
cmp dword [0x10081db4], esi
push esi
jne 0x1001f65d
push 0x10050ce4
mov dword [0x10081db4], ebx
call fcn.10001160
call fcn.1000f0c0
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 0x10050cdc
mov dword [0x10081db4], esi
call fcn.10001160
call fcn.1000f0c0
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x10081ae0]
cmp eax, edx
jne 0x1001f753
cmp byte [0x10081e3f], bl
jne 0x1001f6d8
cmp dword [0x10081e60], ebx
jne 0x1001f71c
push 1
push 0x10050ccc
mov byte [0x10081e3f], 1
call fcn.10001160
mov esi, 1
call fcn.10009630
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
cmp dword [0x10081e60], ebx
jne 0x1001f71c
push 1
push 0x10050cbc
mov byte [0x10081e3f], 1
mov dword [0x10081e60], 1
call fcn.10001160
mov esi, 1
call fcn.10009630
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 1
push 0x10050cb0
mov byte [0x10081e3f], bl
mov dword [0x10081e60], ebx
call fcn.10001160
mov esi, 1
call fcn.10009630
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x10081ad0]
cmp eax, edx
jne 0x1001f7b6
mov esi, 1
cmp dword [0x10081b04], esi
push esi
jne 0x1001f791
push 0x10050ca4
mov dword [0x10081b04], ebx
call fcn.10001160
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 0x10042b84
mov dword [0x10081b04], esi
call fcn.10001160
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x10081ad8]
cmp eax, edx
jne 0x1001f7eb
push 7
call fcn.10001020
test eax, eax
je 0x1002005f
cmp dword [0x10082518], ebx
jne 0x1002005f
mov dword [0x10082518], 1
jmp 0x1002005f
movzx edx, byte [0x10081ad4]
cmp eax, edx
jne 0x1001f84e
mov esi, 1
cmp dword [0x10081ae4], esi
push esi
jne 0x1001f829
push 0x10050c98
mov dword [0x10081ae4], ebx
call fcn.10001160
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
push 0x10050c8c
mov dword [0x10081ae4], esi
call fcn.10001160
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx edx, byte [0x10081acc]
cmp eax, edx
jne 0x1001f8fc
mov eax, dword [0x10081af8]
cmp eax, 5
je 0x1001f8e1
cmp eax, 1
jne 0x1001f882
push eax
push 0x10050c7c
mov dword [0x10081af8], ecx
call fcn.10001160
jmp 0x1002005f
cmp eax, ecx
jne 0x1001f8a1
push 1
push 0x10050c6c
mov dword [0x10081af8], 3
call fcn.10001160
jmp 0x1002005f
cmp eax, 3
jne 0x1001f8c1
push 1
push 0x10050c5c
mov dword [0x10081af8], 4
call fcn.10001160
jmp 0x1002005f
cmp eax, 4
jne 0x1001f8e1
push 1
push 0x10050c4c
mov dword [0x10081af8], 5
call fcn.10001160
jmp 0x1002005f
push 1
push 0x10050c3c
mov dword [0x10081af8], 1
call fcn.10001160
jmp 0x1002005f
movzx ecx, byte [0x10081ac4]
cmp eax, ecx
jne 0x1001f93f
cmp dword [0x10081db0], ebx
push 1
je 0x1001f926
push 0x10050c30
mov dword [0x10081db0], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050c24
mov dword [0x10081db0], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081a14]
cmp eax, edx
jne 0x1001f982
cmp dword [0x10081d3c], ebx
push 1
je 0x1001f969
push 0x10050c18
mov dword [0x10081d3c], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050c0c
mov dword [0x10081d3c], 1
call fcn.10001160
jmp 0x1002005f
movzx ecx, byte [0x10081a18]
cmp eax, ecx
jne 0x1001f9c5
cmp dword [0x10081ff8], ebx
push 1
je 0x1001f9ac
push 0x10050c00
mov dword [0x10081ff8], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050bf4
mov dword [0x10081ff8], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081abc]
cmp eax, edx
jne 0x1001fa08
cmp dword [0x10081dac], ebx
push 1
je 0x1001f9ef
push 0x10050be8
mov dword [0x10081dac], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050bdc
mov dword [0x10081dac], 1
call fcn.10001160
jmp 0x1002005f
movzx ecx, byte [0x10081ac0]
cmp eax, ecx
jne 0x1001fa6a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x10081674], ebx
mov dword [0x100815fc], eax
mov dword [0x10081600], eax
mov dword [0x10081604], eax
mov dword [0x10081608], eax
mov dword [0x1008160c], eax
push 1
je 0x1001fa51
push 0x10050bd4
mov dword [0x10081674], ebx
call fcn.10001160
jmp 0x1002005f
push 0x10050bcc
mov dword [0x10081674], 1
call fcn.10001160
jmp 0x1002005f
movzx edx, byte [0x10081ab8]
cmp eax, edx
jne 0x1001fa8b
push 1
push 0x10050bc0
call fcn.10001160
call fcn.1001d6f0
jmp 0x1002005f
movzx ecx, byte [0x10081aa0]
cmp eax, ecx
jne 0x1001faac
push 1
push 0x10050bb4
call fcn.10001160
call fcn.10008890
jmp 0x1002005f
movzx edx, byte [0x10081a9c]
cmp eax, edx
jne 0x1001facd
push 1
push 0x10050ba8
call fcn.10001160
call fcn.1000c2a0
jmp 0x1002005f
movzx ecx, byte [0x10081a94]
cmp eax, ecx
jne 0x1001faee
push 1
push 0x10050ba0
call fcn.10001160
call fcn.10023f40
jmp 0x1002005f
movzx edx, byte [0x10081ab0]
cmp eax, edx
jne 0x1001fb11
push 1
push 0x10050b94
call fcn.10001160
push 1
call fcn.10025170
jmp 0x1002005f
movzx ecx, byte [0x10081ab4]
cmp eax, ecx
jne 0x1001fb37
push 1
push 0x10042ae8
call fcn.10001160
push 0xec1b
call fcn.10025ea0
jmp 0x1002005f
movzx edx, byte [0x10081a98]
cmp eax, edx
jne 0x1001fb6a
push 1
push 0x10050b88
call fcn.10001160
cmp byte [0x10081e89], bl
sete al
mov byte [0x10081e89], al
movzx eax, al
push eax
call fcn.10001810
jmp 0x1002005f
movzx ecx, byte [0x10081aa4]
cmp eax, ecx
jne 0x1001fb98
push 1
push 0x10050b80
call fcn.10001160
cmp byte [0x10081e40], bl
setne dl
add dl, 1
push edx
call fcn.100241d0
jmp 0x1002005f
movzx ecx, byte [0x10081aa8]
cmp eax, ecx
jne 0x1001fc53
mov eax, dword [0x10082330]
sub eax, 3
push ebx
je 0x1001fc0c
sub eax, 1
je 0x1001fbf7
push 0x10042f90
call fcn.10001160
cmp dword [0x10076864], 0x10
mov ecx, dword [0x10076850]
mov dword [0x10082330], 3
jae 0x1001fbdf
mov ecx, 0x10076850
mov edx, 0x10082260
mov al, byte [ecx]
mov byte [edx], al
add ecx, 1
add edx, 1
cmp al, bl
jne 0x1001fbe4
jmp 0x1002005f
push 0x10042f78
call fcn.10001160
mov dword [0x10082330], ebx
jmp 0x1002005f
push 0x10042f84
call fcn.10001160
cmp dword [0x1007689c], 0x10
mov ecx, dword [0x10076888]
mov dword [0x10082330], 4
jae 0x1001fc34
mov ecx, 0x10076888
mov edx, 0x10082260
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
add ecx, 1
add edx, 1
cmp al, bl
jne 0x1001fc40
jmp 0x1002005f
movzx edx, byte [0x10081aac]
cmp eax, edx
jne 0x1001fcac
cmp byte [0x10081e88], bl
je 0x1001fc88
push ebx
mov byte [0x10081e88], bl
call fcn.1000a830
push 1
push 0x10050b78
call fcn.10001160
call fcn.1000f0c0
jmp 0x1002005f
push 1
mov byte [0x10081e88], 1
call fcn.1000a830
push 1
push 0x10050b70
call fcn.10001160
call fcn.1000f0c0
jmp 0x1002005f
movzx ecx, byte [0x10081a90]
cmp eax, ecx
jne 0x1001fcde
push 1
push 0x10050b68
call fcn.10001160
cmp byte [0x10081e40], bl
je 0x1001fcd2
push 3
call fcn.100240f0
push 3
call fcn.10023ff0
jmp 0x1002005f
movzx edx, byte [0x10081a64]
cmp eax, edx
jne 0x1001fd27
push 0x3b
lea eax, [esp + 0xd]
push ebx
push eax
call fcn.1002f170
lea ecx, [esp + 0x16]
push 0x10050b58
push ecx
mov byte [esp + 0x1c], 3
mov byte [esp + 0x1d], 7
call fcn.10030078
add esp, 0x14
push 3
lea edx, [esp + 0xc]
push edx
mov byte [esp + 0x4b], bl
call fcn.10025390
jmp 0x1002005f
movzx ecx, byte [0x10081a4c]
cmp eax, ecx
jne 0x1001fd48
push ebx
push 0x10050b4c
call fcn.10001160
push ebx
call fcn.10025170
jmp 0x1002005f
movzx edx, byte [0x10081a68]
cmp eax, edx
jne 0x1001fd6d
call fcn.10012c10
mov eax, esi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8
movzx ecx, byte [0x10081a50]
cmp eax, ecx
jne 0x1001fda3
push ebx
push 0x10050b40
call fcn.10001160
xor eax, eax
cmp dword [0x10081da4], ebx
sete al
cmp eax, ebx
setne dl
mov dword [0x10081da4], eax
push edx
call fcn.1000f2c0
jmp 0x1002005f
movzx ecx, byte [0x100819fc]
cmp eax, ecx
jne 0x1001fdbd
push 0x2b5d
call fcn.1001afa0
jmp 0x1002005f
movzx edx, byte [0x10081a00]
cmp eax, edx
jne 0x1001fdd7
push 0x2b62
call fcn.1001afa0
jmp 0x1002005f
movzx ecx, byte [0x10081a04]
cmp eax, ecx
jne 0x1001fdf1
push 0x2bcb
call fcn.1001afa0
jmp 0x1002005f
movzx edx, byte [0x10081a08]
cmp eax, edx
jne 0x1001fe0b
push 0x2bc6
call fcn.1001afa0
jmp 0x1002005f
movzx ecx, byte [0x10081a0c]
cmp eax, ecx
jne 0x1001fe25
push 0x2bc1
call fcn.1001afa0
jmp 0x1002005f
movzx edx, byte [0x10081a10]
cmp eax, edx
jne 0x1001fe3f
push 0x2b67
call fcn.1001afa0
jmp 0x1002005f
movzx ecx, byte [0x10081cec]
cmp eax, ecx
jne 0x1001fe6c
mov edx, dword [0x100817f0]
test edx, edx
je 0x1001fe6c
cmp dword [0x10081ce8], ebx
je 0x1001fe6c
mov eax, dword [0x100816bc]
push eax
call fcn.1002bee0
jmp 0x1002005f
movzx ecx, byte [0x10081cf8]
cmp eax, ecx
jne 0x1001fe99
mov edx, dword [0x100817f0]
test edx, edx
je 0x1001fe99
cmp dword [0x10081cf4], ebx
je 0x1001fe99
mov eax, dword [0x100816c0]
push eax
call fcn.1002bee0
jmp 0x1002005f
movzx ecx, byte [0x10081d04]
cmp eax, ecx
jne 0x1001fec6
mov edx, dword [0x100817f0]
test edx, edx
je 0x1001fec6
cmp dword [0x10081d00], ebx
je 0x1001fec6
mov eax, dword [0x100816c4]
push eax
call fcn.1002bee0
jmp 0x1002005f
movzx ecx, byte [0x10081d10]
cmp eax, ecx
jne 0x1001fef3
mov edx, dword [0x100817f0]
test edx, edx
je 0x1001fef3
cmp dword [0x10081d0c], ebx
je 0x1001fef3
mov eax, dword [0x100816c8]
push eax
call fcn.1002bee0
jmp 0x1002005f
movzx ecx, byte [0x10081d1c]
cmp eax, ecx
jne 0x1001ff20
mov edx, dword [0x100817f0]
test edx, edx
je 0x1001ff20
cmp dword [0x10081d18], ebx
je 0x1001ff20
mov eax, dword [0x100816cc]
push eax
call fcn.1002bee0
jmp 0x1002005f
movzx ecx, byte [0x10081b0c]
cmp eax, ecx
jne 0x1001ff8d
mov edx, dword [0x100817f0]
test edx, edx
je 0x1001ff8d
cmp dword [0x10081b08], ebx
je 0x1001ff8d
mov eax, dword [0x100818ac]
mov ecx, dword [eax*4 + 0x10081698]
add eax, 1
push ecx
mov dword [0x100818ac], eax
call fcn.1002beb0
mov eax, dword [0x100818ac]
cmp eax, 3
jne 0x1001ff68
xor eax, eax
mov dword [0x100818ac], eax
mov eax, dword [eax*4 + 0x10081698]
push eax
call fcn.1002beb0
cmp dword [0x100818ac], 3
jne 0x1002005f
mov dword [0x100818ac], ebx
jmp 0x1002005f
movzx ecx, byte [0x10081bac]
cmp eax, ecx
jne 0x1001fff3
mov edx, dword [0x100817f0]
test edx, edx
je 0x1001fff3
cmp dword [0x10081ba8], ebx
je 0x1001fff3
mov eax, dword [0x100818b0]
mov ecx, dword [eax*4 + 0x100816a4]
add eax, 1
push ecx
mov dword [0x100818b0], eax
call fcn.1002beb0
mov eax, dword [0x100818b0]
cmp eax, 3
jne 0x1001ffd5
xor eax, eax
mov dword [0x100818b0], eax
mov eax, dword [eax*4 + 0x100816a4]
push eax
call fcn.1002beb0
cmp dword [0x100818b0], 3
jne 0x1002005f
mov dword [0x100818b0], ebx
jmp 0x1002005f
cmp dword [0x10085038], ebx
je 0x10020064
movzx ecx, byte [0x10081c4c]
cmp eax, ecx
jne 0x10020064
mov edx, dword [0x100817f0]
test edx, edx
je 0x10020064
cmp dword [0x10081c48], ebx
je 0x10020064
mov eax, dword [0x100818b4]
mov ecx, dword [eax*4 + 0x100816b0]
add eax, 1
push ecx
mov dword [0x100818b4], eax
call fcn.1002beb0
mov eax, dword [0x100818b4]
cmp eax, 3
jne 0x10020043
xor eax, eax
mov dword [0x100818b4], eax
mov eax, dword [eax*4 + 0x100816b0]
push eax
call fcn.1002beb0
cmp dword [0x100818b4], 3
jne 0x1002005f
mov dword [0x100818b4], ebx
mov esi, 1
mov ecx, dword [esp + 0x44]
mov eax, esi
pop esi
pop ebx
xor ecx, esp
call fcn.1002eae3
add esp, 0x40
ret 8