Function at 0x1009ee4c
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 4], 0
push 8
call fcn.1014defa
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jne 0x100a2cb1
call fcn.100565f1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x15
je 0x1009eec9
call fcn.10041d88
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 6
je 0x1009eec9
xor eax, eax
jmp 0x1009eece
mov eax, 1
test eax, eax
je 0x1009ef13
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push 0x16d
push 1
push 0x15a
push 1
push dword [0xc]
call fcn.10043833
push 0x7d0
call fcn.10040d09
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push 0x14
push 1
push 0x32
push 1
push dword [0xc]
call fcn.10043833
call fcn.1008f48f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jne 0x1009ef86
push 0x12c
call fcn.10040d09
push 0
push 0xc030
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.10040da9
jmp 0x1009ef46
push 0
push 0xc0bd
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
push 0xdac
call fcn.10040d09
mov eax, 0xc046
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.10095d2b
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009efd1
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 1
jne 0x1009f5e9
push 0
push 0x83e
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x1009f086
call fcn.10095e1a
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x45e
jne 0x1009f056
mov eax, 0x83e
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1009602f
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f051
push ebx
call fcn.1014df0c
add esp, 4
jmp 0x1009f077
mov eax, 0x83e
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.10051b8f
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f077
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
jmp 0x1009f5e9
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009f0b2
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f0d8
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x14]
cmp dword [0xcc], eax
jle 0x1009f593
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0xc068
push dword [ebp - 0x10]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f124
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009f14f
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009f175
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x18]
push 0xc07b
push dword [ebp - 0x20]
push 0x4c9
push dword [ebp - 0x1c]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009f22a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009f23a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009f24a
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1009f25d
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009f28a
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009f2d2
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f2f8
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0xf5]
fstp qword [ebp - 0x24]
push 0x80000601
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009f355
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x10]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f39d
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009f3eb
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009f3fb
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009f40b
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009f41b
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [0xc8]
call fcn.10041118
push ebx
push ecx
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009f454
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f47a
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x14]
dec eax
jns 0x1009f497
push 0x6b6
push 0x4072dd9
push 4
call fcn.1014df00
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x1009f4b4
push 0x6b6
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 1
mov eax, 0x4c9
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
push 1
lea eax, [ebp - 8]
push eax
call fcn.1004ba42
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009f4f4
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 0
cmp eax, ecx
jl 0x1009f51c
push 0x6e5
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 1
cmp eax, ecx
jl 0x1009f569
push 0x715
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x1009f5e9
push 0
push 0xc08a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.1004b1cc
mov ebx, 6
call fcn.1004fd48
push 0x80000301
push 0
push 0
push 0x80000004
push 0
push 0xc0a6
push 4
mov ebx, 0x300
call fcn.1014df12
add esp, 0x34
mov eax, 0xc0d2
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009f602
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x1009f646
push 0x8dc
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x10], eax
push 0
push dword [ebp - 0x10]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f683
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xc134
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009f6cd
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f6f3
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0xffffffff
je 0x1009f764
mov eax, 0xc13f
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009f716
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x1009f75a
push 0xb07
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xc26e
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009f7ae
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f7d4
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0xffffffff
je 0x1009fe31
mov eax, 0xc277
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009f7f7
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x1009f83b
push 0x132f
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x1009f8c9
call fcn.10095e1a
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x45e
jne 0x1009f899
mov eax, 0x829
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1009602f
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f894
push ebx
call fcn.1014df0c
add esp, 4
jmp 0x1009f8ba
mov eax, 0x829
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.10051b8f
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f8ba
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
jmp 0x1009fe2c
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009f8f5
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f91b
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x14]
cmp dword [0xcc], eax
jle 0x1009fdd6
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0xc068
push dword [ebp - 0x10]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009f967
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009f992
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009f9b8
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x18]
push 0xc318
push dword [ebp - 0x20]
push 0x4c9
push dword [ebp - 0x1c]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009fa6d
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009fa7d
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009fa8d
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1009faa0
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009facd
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009fb15
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009fb3b
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0xf5]
fstp qword [ebp - 0x24]
push 0x80000601
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009fb98
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x10]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009fbe0
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009fc2e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009fc3e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009fc4e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009fc5e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [0xc8]
call fcn.10041118
push ebx
push ecx
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009fc97
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009fcbd
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x14]
dec eax
jns 0x1009fcda
push 0x16ef
push 0x4072dd9
push 4
call fcn.1014df00
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x1009fcf7
push 0x16ef
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 1
mov eax, 0x4c9
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
push 1
lea eax, [ebp - 8]
push eax
call fcn.1004ba42
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009fd37
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 0
cmp eax, ecx
jl 0x1009fd5f
push 0x171e
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 1
cmp eax, ecx
jl 0x1009fdac
push 0x174e
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x1009fe2c
push 0
push 0xc08a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.1004b1cc
mov ebx, 6
call fcn.1004fd48
push 0x80000301
push 0
push 0
push 0x80000004
push 0
push 0xc0a6
push 4
mov ebx, 0x300
call fcn.1014df12
add esp, 0x34
jmp 0x100a0f98
mov eax, 0xc35b
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009fe4a
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x1009fe8e
push 0x18d0
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x10], eax
push 0
push dword [ebp - 0x10]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009fecb
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xc32f
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009ff15
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009ff3b
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0xffffffff
je 0x1009ff5b
push dword [0x1c]
call fcn.1004c4bb
push dword [0x1c]
call fcn.1004c4bb
call fcn.10041bde
mov dword [ebp - 0x10], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x833
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1009ff94
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009ffba
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0xffffffff
je 0x100a06bd
inc dword [0x2f4]
push 0x80000301
push 0
push dword [0x2f4]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x833
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0014
push ebx
call fcn.1014df0c
add esp, 4
push 0
push dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a003f
push ebx
call fcn.1014df0c
add esp, 4
push 0x3e8
call fcn.10040d09
mov eax, 0xc277
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a0062
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a00a6
push 0x1ce6
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0x7d0
call fcn.10040d09
cmp dword [0x2f4], 0x32
jl 0x100a06b8
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100a014b
call fcn.10095e1a
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x45e
jne 0x100a011b
mov eax, 0x833
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1009602f
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0116
push ebx
call fcn.1014df0c
add esp, 4
jmp 0x100a013c
mov eax, 0x833
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.10051b8f
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a013c
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
jmp 0x100a06b8
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a0177
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a019d
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x14]
cmp dword [0xcc], eax
jle 0x100a0658
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0xc068
push dword [ebp - 0x10]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a01e9
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x100a0214
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a023a
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x18]
push 0xc39f
push dword [ebp - 0x20]
push 0x4c9
push dword [ebp - 0x1c]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a02ef
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a02ff
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a030f
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100a0322
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100a034f
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a0397
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a03bd
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0xf5]
fstp qword [ebp - 0x24]
push 0x80000601
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a041a
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x10]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0462
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a04b0
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a04c0
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a04d0
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a04e0
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [0xc8]
call fcn.10041118
push ebx
push ecx
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a0519
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a053f
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x14]
dec eax
jns 0x100a055c
push 0x2225
push 0x4072dd9
push 4
call fcn.1014df00
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x100a0579
push 0x2225
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 1
mov eax, 0x4c9
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
push 1
lea eax, [ebp - 8]
push eax
call fcn.1004ba42
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a05b9
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 0
cmp eax, ecx
jl 0x100a05e1
push 0x2254
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 1
cmp eax, ecx
jl 0x100a062e
push 0x2284
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x100a06ae
push 0
push 0xc08a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.1004b1cc
mov ebx, 6
call fcn.1004fd48
push 0x80000301
push 0
push 0
push 0x80000004
push 0
push 0xc0a6
push 4
mov ebx, 0x300
call fcn.1014df12
add esp, 0x34
mov dword [0x2f4], 0
jmp 0x100a0f98
mov eax, 0xc35b
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a06d6
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a071a
push 0x242b
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x10], eax
push 0
push dword [ebp - 0x10]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0757
push ebx
call fcn.1014df0c
add esp, 4
call fcn.10041bde
mov dword [ebp - 0x10], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xcbb7
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a0790
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a07b6
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0xffffffff
je 0x100a0e13
mov eax, 0xc277
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a07d9
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a081d
push 0x25f7
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100a08ab
call fcn.10095e1a
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x45e
jne 0x100a087b
mov eax, 0x82e
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1009602f
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0876
push ebx
call fcn.1014df0c
add esp, 4
jmp 0x100a089c
mov eax, 0x82e
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.10051b8f
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a089c
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
jmp 0x100a0e0e
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a08d7
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a08fd
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x14]
cmp dword [0xcc], eax
jle 0x100a0db8
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0xc068
push dword [ebp - 0x10]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0949
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x100a0974
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a099a
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x18]
push 0xc3b9
push dword [ebp - 0x20]
push 0x4c9
push dword [ebp - 0x1c]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a0a4f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a0a5f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a0a6f
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100a0a82
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100a0aaf
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a0af7
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0b1d
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0xf5]
fstp qword [ebp - 0x24]
push 0x80000601
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a0b7a
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x10]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0bc2
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a0c10
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a0c20
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a0c30
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a0c40
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [0xc8]
call fcn.10041118
push ebx
push ecx
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a0c79
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0c9f
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x14]
dec eax
jns 0x100a0cbc
push 0x29b7
push 0x4072dd9
push 4
call fcn.1014df00
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x100a0cd9
push 0x29b7
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 1
mov eax, 0x4c9
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
push 1
lea eax, [ebp - 8]
push eax
call fcn.1004ba42
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a0d19
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 0
cmp eax, ecx
jl 0x100a0d41
push 0x29e6
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 1
cmp eax, ecx
jl 0x100a0d8e
push 0x2a16
push 0x4072dd9
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x100a0e0e
push 0
push 0xc08a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.1004b1cc
mov ebx, 6
call fcn.1004fd48
push 0x80000301
push 0
push 0
push 0x80000004
push 0
push 0xc0a6
push 4
mov ebx, 0x300
call fcn.1014df12
add esp, 0x34
jmp 0x100a0f98
mov eax, 0xc0d2
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a0e2c
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a0e70
push 0x2bc9
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x10], eax
push 0
push dword [ebp - 0x10]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0ead
push ebx
call fcn.1014df0c
add esp, 4
call fcn.10041bde
mov dword [ebp - 0x10], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xc3c6
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a0ee6
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a0f0c
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0xffffffff
je 0x100a0f98
mov eax, 0xc3cf
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a0f2f
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a0f73
push 0x2e21
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0x3e8
call fcn.10040d09
push dword [0x1c]
call fcn.1004c4bb
push dword [0x1c]
call fcn.1004c4bb
jmp 0x100a0f98
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100a0fc0
jmp 0x100a2cb1
inc dword [0xc4]
push 0x80000301
push 0
push dword [0xc4]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0xcbbd
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1010
push ebx
call fcn.1014df0c
add esp, 4
push 0
push dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a103b
push ebx
call fcn.1014df0c
add esp, 4
push 0x3e8
call fcn.10040d09
cmp dword [0xc4], 0x46
jl 0x100a10a6
mov dword [0xc4], 0
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100a10a1
call fcn.1004b1cc
push 0
push 0xccb3
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x100a2cb1
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x64
push dword [ebp - 0x10]
call fcn.10040ed5
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a10ed
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x100a2c77
mov dword [ebp - 0xc], 1
call fcn.100565f1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jne 0x100a1129
call fcn.10041d88
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jne 0x100a1129
mov eax, 1
jmp 0x100a112e
mov eax, 0
test eax, eax
je 0x100a13de
push 0
push 0xcbe1
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
push 0xffffffffffffffff
push 8
push 0x16022af7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a117f
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a11a5
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fsub qword [0xf5]
fstp qword [ebp - 0x24]
push 0x80000601
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xc413
push dword [ebp - 0x28]
push 0xc426
mov ecx, 3
call fcn.10040fdd
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a1204
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a121b
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a125f
push 0x3380
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
push 0x3e8
call fcn.10040d09
call fcn.1008f48f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jne 0x100a128c
push 0x12c
call fcn.10040d09
call fcn.10040da9
jmp 0x100a1269
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a12e3
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a12f3
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a1303
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1313
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x20], 8
jne 0x100a13b5
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100a1374
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100a1384
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100a1394
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a13a4
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x38], 3
jne 0x100a13b5
mov eax, 1
jmp 0x100a13ba
mov eax, 0
test eax, eax
je 0x100a13c7
jmp 0x100a13de
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xa
jl 0x100a13d9
jmp 0x100a13de
jmp 0x100a10fe
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a143c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a144c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a145c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a146c
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x20], 8
jne 0x100a150e
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100a14cd
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100a14dd
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100a14ed
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a14fd
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x38], 3
jne 0x100a150e
mov eax, 1
jmp 0x100a1513
mov eax, 0
test eax, eax
je 0x100a1877
push 0x2bc
call fcn.10040d09
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a157c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a158c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a159c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a15ac
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x20], 9
jne 0x100a164e
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100a160d
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100a161d
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100a162d
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a163d
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x38], 3
jne 0x100a164e
mov eax, 1
jmp 0x100a1653
mov eax, 0
test eax, eax
je 0x100a1660
jmp 0x100a1877
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a16b7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a16c7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a16d7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a16e7
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x20], 0xf
jne 0x100a1789
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100a1748
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100a1758
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100a1768
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a1778
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x38], 5
jne 0x100a1789
mov eax, 1
jmp 0x100a178e
mov eax, 0
test eax, eax
je 0x100a179b
jmp 0x100a1877
push 0
push 0xc476
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
cmp dword [ebp - 0xc], 1
jne 0x100a182b
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10096f5d
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1811
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a1821
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
call fcn.1008f48f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jne 0x100a184e
push 0x12c
call fcn.10040d09
call fcn.10040da9
jmp 0x100a182b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x1e
jl 0x100a1860
jmp 0x100a1877
push 0
mov ebx, 0x350
call fcn.1014df12
add esp, 4
jmp 0x100a13e5
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100a189f
jmp 0x100a2cb1
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a18fd
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a190d
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a191d
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a192d
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x20], 0xf
jne 0x100a19cf
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100a198e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100a199e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100a19ae
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a19be
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x38], 5
jne 0x100a19cf
mov eax, 1
jmp 0x100a19d4
mov eax, 0
test eax, eax
je 0x100a22bb
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.100974c5
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1a11
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 1
jne 0x100a1c52
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0xc721
push dword [ebp - 0x10]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1a58
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x100a1a83
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a1aa9
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x18]
push 0xcbee
push dword [ebp - 0x20]
push 0x4c9
push dword [ebp - 0x1c]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a1b5e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a1b6e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a1b7e
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100a1b91
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100a1bbe
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
mov eax, 0x3d4
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1004a1ea
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1bfb
push ebx
call fcn.1014df0c
add esp, 4
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x100a1c52
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x100a1c52
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x100a1c52
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1009e897
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1c87
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0x1e
jl 0x100a1dd9
push 0
push 0xc6f0
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
cmp dword [ebp - 0xc], 1
jne 0x100a1cbd
call fcn.100993c8
push 0xbb8
call fcn.10040d09
push 0xffffffffffffffff
push 0x12
push 0x16022aec
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jne 0x100a1da1
push 1
push 2
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 0x137
push 1
push 0x155
push 1
push dword [0xc]
call fcn.10043833
push 0x12c
call fcn.10040d09
push 0xffffffffffffffff
push 8
push 0x16022aed
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push dword [0xc]
call fcn.100a2cfa
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1d5a
push ebx
call fcn.1014df0c
add esp, 4
push 0x96
call fcn.10040d09
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push 0x159
push 1
push 0x1c6
push 1
push dword [0xc]
call fcn.10043833
push 0x7d0
call fcn.10040d09
call fcn.10041d88
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 6
jne 0x100a1dd4
push 0x3e8
call fcn.10040d09
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xa
jle 0x100a1dcf
jmp 0x100a22bb
jmp 0x100a1dd4
jmp 0x100a22b1
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x64
push dword [ebp - 0x10]
call fcn.10040ed5
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1e20
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x100a22b1
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0xc721
push dword [ebp - 0x10]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1e67
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x100a1e92
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a1eb8
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1009e897
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a1f0f
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x14]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x24]
push 0xccc9
push dword [ebp - 0x18]
push 0x4c9
push dword [ebp - 0x2c]
push 0x4c9
push dword [ebp - 0x28]
mov ecx, 7
call fcn.10040fdd
add esp, 0x1c
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a1fc9
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100a1fd9
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a1fe9
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100a1ff9
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x100a200c
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100a2039
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a2081
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a20a7
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0xf5]
fstp qword [ebp - 0x24]
push 0x80000601
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a2104
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x10], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x10]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a214c
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a219a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a21aa
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a21ba
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a21ca
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a21f6
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a221c
push ebx
call fcn.1014df0c
add esp, 4
call fcn.10097336
cmp dword [ebp - 0x14], eax
jle 0x100a22a2
mov eax, 0x3d4
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1004a1ea
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a224b
push ebx
call fcn.1014df0c
add esp, 4
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x100a22a2
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x100a22a2
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x100a22a2
push 0x7d0
call fcn.10040d09
jmp 0x100a22b1
call fcn.10040da9
jmp 0x100a18a6
call fcn.10041d88
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 6
jne 0x100a28f5
push 0x1388
call fcn.10040d09
mov dword [0xc4], 0
mov dword [0x2f4], 0
mov dword [0x190], 0
mov dword [0x194], 0
mov dword [0x198], 0
mov dword [0x19c], 0
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 0x1b
push dword [0xc]
call fcn.10089bd2
push 0x12c
call fcn.10040d09
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 0x1b
push dword [0xc]
call fcn.10089bd2
push 0x12c
call fcn.10040d09
push dword [0xc]
call fcn.100995a5
mov eax, 0x2a8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1004a1ea
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a23a3
push ebx
call fcn.1014df0c
add esp, 4
call fcn.10041340
mov dword [0x30c], eax
cmp dword [0x30c], 0x1c8
jl 0x100a23d1
cmp dword [0x30c], 0x1ce
jg 0x100a23d1
xor eax, eax
jmp 0x100a23d6
mov eax, 1
test eax, eax
je 0x100a252b
xor ecx, ecx
lea eax, [ebp - 0xc]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0x16
jg 0x100a2528
cmp dword [0x30c], 0x31a
je 0x100a2427
cmp dword [0x30c], 0x31b
je 0x100a2427
cmp dword [0x30c], 0x31c
je 0x100a2427
xor eax, eax
jmp 0x100a242c
mov eax, 1
test eax, eax
je 0x100a2453
call fcn.10095e1a
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xf9f
jne 0x100a244e
jmp 0x100a2453
jmp 0x100a2528
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100a247b
jmp 0x100a2528
fld qword [0xc752]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x14]
fsub qword [ebp - 0x14]
fstp qword [ebp - 0x1c]
push 0x80000601
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0xbe88
push dword [ebp - 0x20]
push 0xc75a
mov ecx, 3
call fcn.10040fdd
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100a24da
push ebx
call fcn.1014df0c
add esp, 4
push 0
push dword [ebp - 0x24]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x100a2505
push ebx
call fcn.1014df0c
add esp, 4
push 0x3e8
call fcn.10040d09
push 0
mov ebx, 0x350
call fcn.1014df12
add esp, 4
pop ebx
pop ecx
jmp 0x100a23e5
add esp, 8
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 0x1b
push dword [0xc]
call fcn.10089bd2
push 0x12c
call fcn.10040d09
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 0x1b
push dword [0xc]
call fcn.10089bd2
push 0x12c
call fcn.10040d09
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push 0x22c
push 1
push 0x113
push 1
push dword [0xc]
call fcn.10043833
push 0x12c
call fcn.10040d09
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push 0xbb
push 1
push 0x25c
push 1
push dword [0xc]
call fcn.10043833
push 0x12c
call fcn.10040d09
mov eax, 0xc75f
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a2622
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a2666
push 0x4deb
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 0x20
push dword [0xc]
call fcn.10089bd2
push 0x7d0
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a26b3
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a26d9
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0xf5]
fstp qword [ebp - 0x24]
push 0xffffffffffffffff
push 8
push 0x16022af7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x100a2717
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a273d
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x2c]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x24]
fsub qword [ebp - 0x34]
ftst
fnstsw ax
test ah, 1
je 0x100a2754
fchs
fcomp qword [0x4d0]
fnstsw ax
test ah, 0x41
jne 0x100a27df
push 0
push 0xccda
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov eax, 0xccf3
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a279b
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a27df
push 0x501d
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
mov eax, 0xc797
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x100a27f8
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x10], esp
je 0x100a283c
push 0x50fc
push 0x4072dd9
push 6
call fcn.1014df00
add esp, 0xc
call fcn.10052521
mov dword [ebp - 0x10], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x852
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x100a2875
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a289b
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0xffffffff
je 0x100a28aa
jmp 0x100a28f0
call fcn.10051686
mov dword [ebp - 0x10], eax
mov eax, dword [0x78]
push eax
push dword [ebp - 0x10]
call fcn.10040ed5
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a28e1
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x100a28f0
call fcn.1005185d
jmp 0x100a2c72
push 0x7d0
call fcn.10040d09
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a2956
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a2966
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a2976
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a2986
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x20], 9
jne 0x100a2a28
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100a29e7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100a29f7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100a2a07
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a2a17
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x38], 3
jne 0x100a2a28
mov eax, 1
jmp 0x100a2a2d
mov eax, 0
test eax, eax
je 0x100a2c72
push 0
push 0xc824
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov dword [ebp - 0xc], 0
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x3c
jge 0x100a2a7c
call fcn.10041d88
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 5
je 0x100a2a7c
xor eax, eax
jmp 0x100a2a81
mov eax, 1
test eax, eax
je 0x100a2a95
mov dword [ebp - 0xc], 0
jmp 0x100a2af9
push 0x3e8
call fcn.10040d09
push 0
push 0xc83b
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov eax, 0xcc1a
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.10095d2b
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a2ae0
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x14], 1
jne 0x100a2aef
jmp 0x100a2af9
call fcn.10040da9
jmp 0x100a2a59
push 0x3e8
call fcn.10040d09
mov dword [ebp - 0xc], 0
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100a2b32
jmp 0x100a2cb1
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100a2b89
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100a2b99
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100a2ba9
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100a2bb9
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x20], 9
jne 0x100a2c5b
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100a2c1a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100a2c2a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x100a2c3a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100a2c4a
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x38], 3
jne 0x100a2c5b
mov eax, 1
jmp 0x100a2c60
mov eax, 0
test eax, eax
je 0x100a2c6d
call fcn.1009eba6
jmp 0x100a2c72
jmp 0x100a2cb1
push 0
push 0xc85a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
push 0
push 0
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x100a2ccf
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x100a2ccb
imul eax, dword [ebx]
jmp 0x100a2cc0
mov ecx, eax
test ecx, ecx
je 0x100a2cee
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x100a2ce7
push ebx
push eax
call fcn.1014df0c
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x100a2cd5
call fcn.1014df0c
add esp, 4
mov esp, ebp
pop ebp
ret