Function at 0x10023669
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10082944
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x4bb4
call fcn.10082270
mov dword [ebp - 0x4bb8], ecx
mov eax, dword [ebp - 0x4bb8]
xor ecx, ecx
mov cl, byte [eax + 0x1158]
test ecx, ecx
je 0x100237bc
cmp dword [0x1018d640], 0
je 0x100237bc
mov ecx, 0x10150eb8
call fcn.1002c516
and eax, 0xff
test eax, eax
je 0x100236cc
jmp 0x100237bc
push 0
push 0x100bb66c
mov ecx, 0x100a5a88
call fcn.1002fe87
test eax, eax
je 0x10023727
movsx edx, byte [0x10111638]
test edx, edx
je 0x10023727
push 0x100bac6c
push 0x10111638
call fcn.100821f4
add esp, 8
test eax, eax
je 0x10023727
push 0x100bacec
push 0x10111638
call fcn.100821f4
add esp, 8
test eax, eax
je 0x10023727
mov ecx, 0x10111738
call fcn.1007f407
jmp 0x100237bc
push 1
push 0x100af3ec
mov ecx, 0x100a5a88
call fcn.1002f1d7
push 0x100af3ec
push 0x100a8380
push 0x10089070
lea eax, [ebp - 0x10c]
push eax
call dword [0x100831ec]
add esp, 0x10
cmp dword [0x1012673c], 0
je 0x1002376f
push 0x10089078
mov ecx, 0x10126730
call fcn.10065fae
mov ecx, dword [ebp - 0x4bb8]
cmp dword [ecx + 4], 0
je 0x1002378a
push 0x10089084
mov ecx, 0x10152920
call fcn.100262ac
cmp dword [0x10107260], 0xffffffff
je 0x100237a6
mov edx, dword [0x10107260]
mov eax, dword [0x100d928c]
mov dword [eax + edx*4 + 0x24], 0
lea ecx, [ebp - 0x10c]
push ecx
mov ecx, 0x10105e60
call fcn.10020297
jmp 0x10025d6b
movsx edx, byte [0x101817b0]
test edx, edx
je 0x100237dd
push 0x101817b0
mov ecx, 0x100a5a88
call fcn.100306cb
mov dword [0x10173f28], eax
jmp 0x100237e7
mov dword [0x10173f28], 0
cmp dword [0x10173f28], 0
je 0x10023d26
mov eax, dword [0x10152934]
mov dword [ebp - 0x11c], eax
mov ecx, 0x100a5a88
call fcn.1003c6de
mov byte [ebp - 0x124], al
mov ecx, dword [ebp - 0x124]
and ecx, 0xff
test ecx, ecx
jne 0x1002383e
cmp dword [ebp - 0x11c], 2
jge 0x1002383e
mov edx, dword [0x100d928c]
cmp dword [edx + 0xc], 1
je 0x1002383e
mov dword [ebp - 0x11c], 2
xor eax, eax
mov al, byte [0x10153a78]
test eax, eax
je 0x10023863
mov ecx, dword [0x10152938]
mov dword [ebp - 0x110], ecx
mov edx, dword [0x1015293c]
mov dword [ebp - 0x120], edx
jmp 0x10023890
mov eax, dword [0x10173f28]
push eax
mov ecx, 0x100a5a88
call fcn.10004420
mov dword [ebp - 0x110], eax
mov ecx, dword [0x10173f28]
push ecx
mov ecx, 0x100a5a88
call fcn.10004450
mov dword [ebp - 0x120], eax
mov edx, dword [ebp - 0x120]
push edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, 0x100a5a88
call fcn.10031733
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x110]
push edx
mov ecx, 0x100a5a88
call fcn.100317c8
mov dword [ebp - 0x114], eax
cmp dword [0x1018d640], 0
je 0x10023970
mov eax, dword [ebp - 0x124]
and eax, 0xff
test eax, eax
jne 0x10023970
cmp dword [ebp - 0x114], 1
jg 0x10023970
cmp dword [ebp - 0x118], 2
jg 0x10023970
cmp dword [0x10092368], 0
jne 0x10023919
mov byte [0x1009236c], 0
call dword [0x10083088]
mov dword [0x10092368], eax
call dword [0x10083088]
sub eax, dword [0x10092368]
cmp eax, 0x1770
jbe 0x1002394e
mov dword [0x10092368], 0
mov byte [0x1009236c], 0
xor ecx, ecx
mov cl, byte [0x1011168c]
test ecx, ecx
jne 0x1002394e
call fcn.1004ac97
xor edx, edx
mov dl, byte [0x1009236c]
test edx, edx
jne 0x1002396b
mov byte [0x1009236c], 1
mov ecx, 0x100a5a88
call fcn.10039752
jmp 0x10023d21
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x11c]
jle 0x10023b7b
xor ecx, ecx
mov cl, byte [0x10106135]
test ecx, ecx
jne 0x1002399a
xor edx, edx
mov dl, byte [0x1009236d]
test edx, edx
je 0x10023a02
lea ecx, [ebp - 0x213c]
call fcn.1006ba40
mov dword [ebp - 4], 0
mov eax, dword [0x10106150]
push eax
mov ecx, dword [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x110]
push edx
lea eax, [ebp - 0x213c]
push eax
mov ecx, 0x101236d8
call fcn.10062516
mov dword [ebp - 0x2140], eax
cmp dword [ebp - 0x2140], 0
jg 0x100239e9
mov byte [0x1009236d], 1
jmp 0x100239f0
mov byte [0x1009236d], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x213c]
call fcn.1006ba7e
xor ecx, ecx
mov cl, byte [0x1009236d]
test ecx, ecx
je 0x10023a2f
cmp dword [ebp + 8], 0x7e
jne 0x10023a20
mov ecx, 0x101236d8
call fcn.1005ca51
jmp 0x10023a2a
mov ecx, 0x101236d8
call fcn.1005ca51
jmp 0x10023b6f
mov dword [0x10092368], 0
cmp dword [0x1018d640], 0
je 0x10023b32
xor edx, edx
mov dl, byte [0x1011168c]
test edx, edx
jne 0x10023b32
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004420
mov ecx, dword [ebp - 0x4bb8]
cmp dword [ecx + 0x24], eax
jne 0x10023ae9
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004450
mov edx, dword [ebp - 0x4bb8]
cmp dword [edx + 0x28], eax
jne 0x10023ae9
mov eax, dword [ebp - 0x4bb8]
cmp dword [eax + 0x2c], 0
jne 0x10023ab3
call dword [0x10083088]
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x2c], eax
jmp 0x10023ae7
call dword [0x10083088]
mov edx, dword [ebp - 0x4bb8]
sub eax, dword [edx + 0x2c]
cmp eax, 0x320
jbe 0x10023ae7
call fcn.1004ac97
mov eax, dword [ebp - 0x4bb8]
mov dword [eax + 0x2c], 0
mov byte [0x10106135], 0
jmp 0x10025d6b
jmp 0x10023b32
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x2c], 0
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004420
mov edx, dword [ebp - 0x4bb8]
mov dword [edx + 0x24], eax
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004450
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x28], eax
cmp dword [ebp - 0x110], 0
je 0x10023b6f
cmp dword [ebp - 0x120], 0
je 0x10023b6f
push 0x30
mov edx, dword [ebp - 0x11c]
push edx
mov eax, dword [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0x110]
push ecx
mov ecx, 0x10105e60
call fcn.1001fa8a
mov dword [0x10173ba4], 0
mov byte [0x10106135], 0
jmp 0x10023d21
cmp dword [ebp - 0x114], 1
jle 0x10023cbd
mov edx, dword [0x10173f28]
push edx
mov ecx, 0x101236d8
call fcn.10061a1f
and eax, 0xff
test eax, eax
jne 0x10023cbd
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004420
mov ecx, dword [ebp - 0x4bb8]
cmp dword [ecx + 0x24], eax
jne 0x10023c39
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004450
mov edx, dword [ebp - 0x4bb8]
cmp dword [edx + 0x28], eax
jne 0x10023c39
mov eax, dword [ebp - 0x4bb8]
cmp dword [eax + 0x2c], 0
jne 0x10023c03
call dword [0x10083088]
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x2c], eax
jmp 0x10023c37
call dword [0x10083088]
mov edx, dword [ebp - 0x4bb8]
sub eax, dword [edx + 0x2c]
cmp eax, 0xbb8
jbe 0x10023c37
call fcn.1004ac97
mov eax, dword [ebp - 0x4bb8]
mov dword [eax + 0x2c], 0
mov byte [0x10106135], 0
jmp 0x10025d6b
jmp 0x10023c82
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x2c], 0
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004420
mov edx, dword [ebp - 0x4bb8]
mov dword [edx + 0x24], eax
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004450
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x28], eax
push 0x30
push 2
mov edx, dword [ebp - 0x120]
push edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, 0x10105e60
call fcn.1001fa8a
mov dword [0x10173ba4], 0
xor ecx, ecx
mov cl, byte [0x10106135]
test ecx, ecx
je 0x10023cbb
mov byte [0x10106135], 0
jmp 0x10023d21
mov edx, dword [ebp - 0x4bb8]
mov dword [edx + 0x2c], 0
xor eax, eax
mov al, byte [0x10106135]
test eax, eax
je 0x10023cdc
mov byte [0x10106135], 0
cmp dword [0x1018d31c], 0
je 0x10023cef
mov ecx, 0x100a5a88
call fcn.10039752
mov dword [0x10173ba4], 0
cmp dword [0x1018d640], 0
je 0x10023d21
xor ecx, ecx
mov cl, byte [0x1011168c]
test ecx, ecx
je 0x10023d21
cmp dword [0x10181780], 0
jne 0x10023d21
mov ecx, 0x100a5a88
call fcn.1003caf2
jmp 0x10025d6b
cmp dword [0x1018d640], 0
je 0x1002480b
mov edx, dword [ebp - 0x4bb8]
xor eax, eax
mov al, byte [edx + 0x1158]
test eax, eax
je 0x1002480b
cmp dword [ebp + 8], 4
je 0x10023d59
cmp dword [ebp + 8], 0
jne 0x1002480b
xor ecx, ecx
mov cl, byte [0x101236f5]
test ecx, ecx
jne 0x10023d75
xor edx, edx
mov dl, byte [0x101236f6]
test edx, edx
je 0x1002480b
mov eax, dword [ebp - 0x4bb8]
cmp dword [eax + 0x20], 4
je 0x10023d91
mov ecx, dword [ebp - 0x4bb8]
cmp dword [ecx + 0x20], 0
jne 0x10023f7a
mov edx, dword [ebp - 0x4bb8]
mov eax, dword [edx + 0x20]
cmp eax, dword [ebp + 8]
jne 0x10023f7a
mov ecx, dword [ebp - 0x4bb8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ebp - 0x4bb8]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 0x3c
jae 0x10023ebe
push 0x30
push 2
mov edx, dword [ebp - 0x4bb8]
mov eax, dword [edx + 0x1c]
push eax
mov ecx, dword [ebp - 0x4bb8]
mov edx, dword [ecx + 0x18]
push edx
mov ecx, 0x10105e60
call fcn.1001fa8a
xor eax, eax
mov al, byte [0x10106135]
test eax, eax
je 0x10023eb9
mov byte [0x10106135], 0
cmp dword [0x1018d640], 0
je 0x10023eb9
cmp dword [0x10092370], 0
jne 0x10023e28
call dword [0x10083088]
mov dword [0x10092370], eax
jmp 0x10025d6b
cmp dword [0x1018d640], 0
je 0x10023eb9
call dword [0x10083088]
sub eax, dword [0x10092370]
cmp eax, 0xbb8
jbe 0x10023eb9
mov dword [0x10092370], 0
mov ecx, dword [0x10152938]
mov dword [ebp - 0x2144], ecx
mov edx, dword [ebp - 0x2144]
push edx
mov ecx, 0x100a5a88
call fcn.10021820
mov dword [ebp - 0x2144], eax
mov eax, dword [0x1015293c]
push eax
mov ecx, dword [ebp - 0x2144]
push ecx
mov edx, dword [0x10152940]
push edx
push 0x100ae9ec
push 0x10089090
lea eax, [ebp - 0x2244]
push eax
call dword [0x100831ec]
add esp, 0x18
lea ecx, [ebp - 0x2244]
push ecx
mov ecx, 0x1018d660
call fcn.10054dc7
jmp 0x10025d6b
jmp 0x10023f75
cmp dword [0x1018d640], 0
je 0x10023f75
cmp dword [0x10092374], 0
jne 0x10023ee4
call dword [0x10083088]
mov dword [0x10092374], eax
jmp 0x10025d6b
cmp dword [0x1018d640], 0
je 0x10023f75
call dword [0x10083088]
sub eax, dword [0x10092374]
cmp eax, 0xbb8
jbe 0x10023f75
mov dword [0x10092374], 0
mov edx, dword [0x10152938]
mov dword [ebp - 0x2248], edx
mov eax, dword [ebp - 0x2248]
push eax
mov ecx, 0x100a5a88
call fcn.10021820
mov dword [ebp - 0x2248], eax
mov ecx, dword [0x1015293c]
push ecx
mov edx, dword [ebp - 0x2248]
push edx
mov eax, dword [0x10152940]
push eax
push 0x100ae9ec
push 0x1008909c
lea ecx, [ebp - 0x2348]
push ecx
call dword [0x100831ec]
add esp, 0x18
lea edx, [ebp - 0x2348]
push edx
mov ecx, 0x1018d660
call fcn.10054dc7
jmp 0x10025d6b
jmp 0x10024806
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004420
mov ecx, dword [ebp - 0x4bb8]
cmp dword [ecx + 0x24], eax
jne 0x1002405c
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004450
mov edx, dword [ebp - 0x4bb8]
cmp dword [edx + 0x28], eax
jne 0x1002405c
mov eax, dword [ebp - 0x4bb8]
cmp dword [eax + 0x2c], 0
jne 0x10023fdf
call dword [0x10083088]
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x2c], eax
jmp 0x1002405c
call dword [0x10083088]
mov edx, dword [ebp - 0x4bb8]
sub eax, dword [edx + 0x2c]
cmp eax, 0x1f40
jbe 0x10024013
call fcn.1004ac97
mov eax, dword [ebp - 0x4bb8]
mov dword [eax + 0x2c], 0
mov byte [0x10106135], 0
jmp 0x10025d6b
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x2c], 0
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004420
mov edx, dword [ebp - 0x4bb8]
mov dword [edx + 0x24], eax
mov ecx, 0x100a5a88
call fcn.10004470
push eax
mov ecx, 0x100a5a88
call fcn.10004450
mov ecx, dword [ebp - 0x4bb8]
mov dword [ecx + 0x28], eax
cmp dword [0x10092378], 0
jne 0x10024070
call dword [0x10083088]
mov dword [0x10092378], eax
mov edx, dword [ebp - 0x4bb8]
mov eax, dword [edx + 0x20]
mov dword [ebp - 0x4bbc], eax
cmp dword [ebp - 0x4bbc], 0x4b
jg 0x100240c6
cmp dword [ebp - 0x4bbc], 0x4b
je case.0x1002415c.2
mov ecx, dword [ebp - 0x4bbc]
sub ecx, 1
mov dword [ebp - 0x4bbc], ecx
cmp dword [ebp - 0x4bbc], 0x48
ja case.0x1002415c.3
mov eax, dword [ebp - 0x4bbc]
xor edx, edx
mov dl, byte [eax + 0x10025d8b]
jmp dword [edx*4 + 0x10025d7b]
cmp dword [ebp - 0x4bbc], 0xab
jg 0x10024113
cmp dword [ebp - 0x4bbc], 0xab
je case.0x1002415c.0
mov ecx, dword [ebp - 0x4bbc]
sub ecx, 0x53
mov dword [ebp - 0x4bbc], ecx
cmp dword [ebp - 0x4bbc], 0x4e
ja case.0x1002415c.3
mov eax, dword [ebp - 0x4bbc]
xor edx, edx
mov dl, byte [eax + 0x10025de0]
jmp dword [edx*4 + 0x10025dd4]
cmp dword [ebp - 0x4bbc], 0x133
jg 0x10024163
cmp dword [ebp - 0x4bbc], 0x133
je case.0x1002415c.2
mov ecx, dword [ebp - 0x4bbc]
sub ecx, 0xb5
mov dword [ebp - 0x4bbc], ecx
cmp dword [ebp - 0x4bbc], 0x7b
ja case.0x1002415c.3
mov eax, dword [ebp - 0x4bbc]
xor edx, edx
mov dl, byte [eax + 0x10025e3f]
jmp dword [edx*4 + 0x10025e2f]
cmp dword [ebp - 0x4bbc], 0x140
je 0x10024194
cmp dword [ebp - 0x4bbc], 0x30c
je 0x10024346
cmp dword [ebp - 0x4bbc], 0x30f
je 0x10024346
jmp case.0x1002415c.3
mov ecx, dword [0x10152938]
sub ecx, 0x7fa6
push ecx
call fcn.100822a0
add esp, 4
cmp eax, 0x10
jge 0x1002420d
mov edx, dword [0x1015293c]
sub edx, 0x8058
push edx
call fcn.100822a0
add esp, 4
cmp eax, 0x10
jge 0x1002420d
movsx eax, byte [0x100bc7ec]
test eax, eax
je 0x1002420b
push 1
push 0x100bc7ec
mov ecx, 0x100a5a88
call fcn.1002fe87
test eax, eax
je 0x1002420b
push 0x1770
push 0x100bc7ec
mov ecx, 0x100a5a88
call fcn.1002f1d7
push 0x100bc7ec
mov ecx, 0x1018d660
call fcn.10054dc7
jmp 0x10024218
mov ecx, dword [ebp - 0x4bb8]
call fcn.1002695e
jmp 0x10024806
call dword [0x10083088]
sub eax, dword [0x10092378]
cmp eax, 0x3e8
jbe 0x10024245
push 0
push 0
push 5
push 0x100bacec
mov ecx, 0x100a5a88
call fcn.1003de18
jmp 0x10024806
push 0x8026
push 0x80b2
mov ecx, dword [ebp - 0x4bb8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ebp - 0x4bb8]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x100a5a88
call fcn.100315e9
cmp eax, 0x18
jae 0x100242a1
call dword [0x10083088]
sub eax, dword [0x10092378]
cmp eax, 0x3e8
jbe 0x1002429f
push 0
push 0
push 5
push 0x100bacec
mov ecx, 0x100a5a88
call fcn.1003de18
jmp 0x100242b2
mov byte [0x10106135], 0
mov ecx, 0x101236d8
call fcn.1005ca51
jmp 0x10024806
mov byte [0x10106135], 0
mov ecx, 0x101236d8
call fcn.1005ca51
jmp 0x10024806
call dword [0x10083088]
sub eax, dword [0x10092378]
cmp eax, 0x3e8
jbe 0x10024341
mov eax, dword [0x10152940]
sub eax, 0x6f
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebp - 0x234c], eax
mov edx, dword [ebp - 0x234c]
add edx, 0x2a
shl edx, 7
add edx, 0x100ba4ec
push edx
push 0x100890a8
lea eax, [ebp - 0x244c]
push eax
call dword [0x100831ec]
add esp, 0xc
push 0
push 0
push 5
mov ecx, dword [ebp - 0x234c]
add ecx, 0x2a
shl ecx, 7
add ecx, 0x100ba4ec
push ecx
mov ecx, 0x100a5a88
call fcn.1003de18
jmp 0x10024806
cmp dword [0x10105e6c], 0
je 0x10024380
push 0x30
push 0
mov edx, dword [0x10105e6c]
push edx
mov ecx, 0x100a5a88
call fcn.10004450
push eax
mov eax, dword [0x10105e6c]
push eax
mov ecx, 0x100a5a88
call fcn.10004420
push eax
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x10024806
mov ecx, dword [ebp - 0x4bb8]
mov edx, dword [ecx + 0x20]
cmp edx, dword [0x101060dc]
jne 0x100243d3
push 1
push 0x10105f9a
mov ecx, 0x100a5a88
call fcn.1002fe87
test eax, eax
je 0x100243ce
push 0x1770
push 0x10105f9a
mov ecx, 0x100a5a88
call fcn.1002f1d7
push 0x10105f9a
mov ecx, 0x1018d660
call fcn.10054dc7
jmp 0x10025d6b
mov ecx, 0x10105dd8
call fcn.10021a90
test eax, eax
jbe 0x100247df
mov dword [ebp - 0x2450], 0
jmp 0x10024400
mov eax, dword [ebp - 0x2450]
add eax, 1
mov dword [ebp - 0x2450], eax
mov ecx, 0x10105dd8
call fcn.10021a90
cmp dword [ebp - 0x2450], eax
jae 0x100247ce
mov ecx, dword [ebp - 0x2450]
push ecx
mov ecx, 0x10105dd8
call fcn.10021ad0
mov edx, dword [0x10152940]
cmp edx, dword [eax]
jne 0x100247c9
mov eax, dword [ebp - 0x2450]
push eax
mov ecx, 0x10105e08
call fcn.10021ad0
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax]
jne 0x100247c9
mov edx, dword [ebp - 0x2450]
push edx
mov ecx, 0x10105df8
call fcn.10021b50
mov ecx, eax
call dword [0x100830e4]
push eax
lea eax, [ebp - 0x2554]
push eax
call fcn.100822a6
add esp, 8
mov ecx, dword [ebp - 0x2450]
push ecx
mov ecx, 0x10105e18
call fcn.10021ad0
mov edx, dword [eax]
mov dword [ebp - 0x255c], edx
lea eax, [ebp - 0x2554]
push eax
mov ecx, 0x100a5a88
call fcn.100305b6
mov dword [ebp - 0x2454], eax
cmp dword [ebp - 0x2454], 0
jne 0x100244e0
mov ecx, dword [ebp - 0x2450]
push ecx
mov ecx, 0x10105e28
call fcn.10021ad0
mov edx, dword [eax]
push edx
mov eax, dword [ebp - 0x255c]
push eax
mov ecx, 0x100a5a88
call fcn.10031733
mov dword [ebp - 0x2558], eax
jmp 0x10024514
mov ecx, dword [ebp - 0x2454]
push ecx
mov ecx, 0x100a5a88
call fcn.10004450
push eax
mov edx, dword [ebp - 0x2454]
push edx
mov ecx, 0x100a5a88
call fcn.10004420
push eax
mov ecx, 0x100a5a88
call fcn.10031733
mov dword [ebp - 0x2558], eax
cmp dword [ebp - 0x2454], 0
je 0x1002452a
cmp dword [ebp - 0x2558], 3
jle 0x100245de
mov eax, dword [0x100aa458]
push eax
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
cmp eax, 1
je 0x1002455e
mov ecx, dword [0x100aa45c]
push ecx
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
test eax, eax
je 0x10024573
push 1
push 0x1b
push 0x100
mov edx, dword [0x100a8330]
push edx
call fcn.1006b7f7
cmp dword [ebp - 0x2454], 0
je 0x100245b0
push 0x20
push 2
mov eax, dword [ebp - 0x2454]
push eax
mov ecx, 0x100a5a88
call fcn.10004450
push eax
mov ecx, dword [ebp - 0x2454]
push ecx
mov ecx, 0x100a5a88
call fcn.10004420
push eax
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x100245d9
push 0x20
push 2
mov edx, dword [ebp - 0x2450]
push edx
mov ecx, 0x10105e28
call fcn.10021ad0
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x255c]
push ecx
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x100247c4
call dword [0x10083088]
sub eax, dword [0x1009237c]
cmp eax, 0x7d0
jbe 0x100247c4
call dword [0x10083088]
mov dword [0x1009237c], eax
mov edx, dword [0x100aa45c]
push edx
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
test eax, eax
jne 0x1002463b
mov eax, dword [ebp - 0x2454]
push eax
mov ecx, 0x100a5a88
call fcn.1003c978
call dword [0x10083088]
mov dword [0x10092380], eax
jmp 0x100247c4
call dword [0x10083088]
sub eax, dword [0x10092380]
cmp eax, 0x3a98
jbe 0x10024687
push 1
push 0x1b
push 0x100
mov ecx, dword [0x100a8330]
push ecx
call fcn.1006b7f7
push 0x1770
push 0x100890ac
mov ecx, 0x100a5a88
call fcn.1002f1d7
call dword [0x10083088]
mov dword [0x10092380], eax
jmp 0x100247c4
mov edx, dword [ebp - 0x2450]
mov dword [ebp - 0x2560], edx
jmp 0x100246a4
mov eax, dword [ebp - 0x2560]
add eax, 1
mov dword [ebp - 0x2560], eax
mov ecx, 0x10105dd8
call fcn.10021a90
cmp dword [ebp - 0x2560], eax
jae 0x100246ed
mov ecx, dword [ebp - 0x2560]
push ecx
mov ecx, 0x10105dd8
call fcn.10021ad0
mov edx, dword [0x10152940]
cmp edx, dword [eax]
jne 0x100246e9
mov eax, dword [ebp - 0x2560]
push eax
mov ecx, 0x10105e08
call fcn.10021ad0
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax]
je 0x100246eb
jmp 0x100246ed
jmp 0x10024695
mov edx, dword [ebp - 0x2560]
sub edx, 1
mov dword [ebp - 0x2560], edx
mov eax, dword [ebp - 0x2450]
cmp eax, dword [ebp - 0x2560]
jne 0x10024741
mov ecx, dword [ebp - 0x2450]
push ecx
mov ecx, 0x10105e48
call fcn.10021ad0
mov edx, dword [eax]
push edx
mov eax, dword [ebp - 0x2450]
push eax
mov ecx, 0x10105e38
call fcn.10021ad0
mov ecx, dword [eax]
push ecx
mov ecx, 0x100a5a88
call fcn.1003b305
jmp 0x100247c4
mov edx, dword [0x10092384]
cmp edx, dword [ebp - 0x2450]
jl 0x1002475c
mov eax, dword [0x10092384]
cmp eax, dword [ebp - 0x2560]
jle 0x1002476a
mov ecx, dword [ebp - 0x2450]
mov dword [0x10092384], ecx
jmp 0x10024792
mov edx, dword [0x10092384]
add edx, 1
mov dword [0x10092384], edx
mov eax, dword [0x10092384]
cmp eax, dword [ebp - 0x2560]
jle 0x10024792
mov ecx, dword [ebp - 0x2450]
mov dword [0x10092384], ecx
mov edx, dword [0x10092384]
push edx
mov ecx, 0x10105e48
call fcn.10021ad0
mov eax, dword [eax]
push eax
mov ecx, dword [0x10092384]
push ecx
mov ecx, 0x10105e38
call fcn.10021ad0
mov edx, dword [eax]
push edx
mov ecx, 0x100a5a88
call fcn.1003b305
jmp 0x10025d6b
jmp 0x100243f1
mov eax, dword [ebp + 8]
push eax
push 0x100890d0
call fcn.1006c25c
add esp, 8
call dword [0x10083088]
sub eax, dword [0x10092378]
cmp eax, 0x1388
jbe 0x10024806
mov ecx, 0x10111738
call fcn.1007f407
mov dword [0x10092378], 0
jmp 0x10025d6b
cmp dword [0x10173ba4], 0x1e
jge 0x10025d6b
cmp dword [0x10152940], 0x30c
je 0x10024830
cmp dword [0x10152940], 0x30f
jne 0x10024870
cmp dword [0x10105e6c], 0
je 0x1002486b
push 0x30
push 0
mov ecx, dword [0x10105e6c]
push ecx
mov ecx, 0x100a5a88
call fcn.10004450
push eax
mov edx, dword [0x10105e6c]
push edx
mov ecx, 0x100a5a88
call fcn.10004420
push eax
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x10024ad2
cmp dword [ebp + 8], 0x218
jne 0x10024910
cmp dword [0x10152940], 0x1d3
je 0x10024910
push 0x8012
push 0x7fd6
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 0xa
jbe 0x100248d2
push 0x30
push 2
push 0x8012
push 0x7fd6
mov ecx, 0x10105e60
call fcn.1001fa8a
xor eax, eax
mov al, byte [0x10106135]
test eax, eax
je 0x100248d0
mov byte [0x10106135], 0
jmp 0x1002490b
mov ecx, dword [0x10152940]
cmp ecx, dword [ebp + 8]
jne 0x100248fa
push 0x30
push 2
mov edx, dword [0x1015293c]
push edx
mov eax, dword [0x10152938]
push eax
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x1002490b
mov byte [0x10106135], 0
mov ecx, 0x101236d8
call fcn.1005ca51
jmp 0x10024ad2
cmp dword [ebp + 8], 0x1d3
jne 0x10024996
cmp dword [0x10152940], 0x1c9
je 0x10024996
push 0x806a
push 0x7f28
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 6
jae 0x10024958
push 0x30
push 2
push 0x806a
push 0x7f48
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x10024991
mov ecx, dword [0x10152940]
cmp ecx, dword [ebp + 8]
jne 0x10024980
push 0x30
push 2
mov edx, dword [0x1015293c]
push edx
mov eax, dword [0x10152938]
push eax
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x10024991
mov byte [0x10106135], 0
mov ecx, 0x101236d8
call fcn.1005ca51
jmp 0x10024ad2
cmp dword [ebp + 8], 0x1c9
jne 0x10024ad2
cmp dword [0x10152940], 0x1c3
je 0x10024ad2
push 0x8053
push 0x7f34
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 6
jae 0x100249fc
push 0x30
push 2
push 0x8064
push 0x7f44
mov ecx, 0x10105e60
call fcn.1001fa8a
xor ecx, ecx
mov cl, byte [0x10106135]
test ecx, ecx
je 0x100249f7
mov byte [0x10106135], 0
jmp 0x10024ad2
mov edx, dword [0x10152940]
cmp edx, dword [ebp + 8]
jne 0x10024a27
push 0x30
push 2
mov eax, dword [0x1015293c]
push eax
mov ecx, dword [0x10152938]
push ecx
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x10024ad2
cmp dword [0x10152940], 0x1d0
jne 0x10024a6b
push 0x8065
push 0x7f58
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 3
jbe 0x10024a69
push 0x30
push 3
push 0x8065
push 0x7f58
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x10025d6b
jmp 0x10024aad
cmp dword [0x10152940], 0x1cc
jne 0x10024aad
push 0x8060
push 0x7f50
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 3
jbe 0x10024aad
push 0x30
push 3
push 0x8060
push 0x7f50
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x10025d6b
mov byte [0x10106135], 0
mov ecx, 0x101236d8
call fcn.1005ca51
cmp eax, 0xffffffff
jne 0x10024ad2
mov edx, dword [0x10173ba4]
add edx, 1
mov dword [0x10173ba4], edx
cmp dword [0x10152938], 0
je 0x10025d4e
cmp dword [0x1015293c], 0
je 0x10025d4e
mov eax, dword [ebp + 8]
cmp eax, dword [0x10152940]
jne 0x10024b9c
cmp dword [0x10152940], 0
je 0x10024b11
cmp dword [0x10152940], 4
jne 0x10024b9c
push 0x30
push 2
mov ecx, dword [0x1015293c]
push ecx
mov edx, dword [0x10152938]
push edx
mov ecx, 0x10105e60
call fcn.1001fa8a
xor eax, eax
mov al, byte [0x10106135]
test eax, eax
je 0x10024b97
push 0x1770
push str.AdvPet:_control_Teleport
mov ecx, 0x100a5a88
call fcn.1002f1d7
cmp dword [0x10092388], 0
jne 0x10024b65
call dword [0x10083088]
mov dword [0x10092388], eax
jmp 0x10025d6b
cmp dword [0x1018d640], 0
je 0x10024b90
call dword [0x10083088]
sub eax, dword [0x10092388]
cmp eax, 0xbb8
jbe 0x10024b90
mov ecx, 0x10111738
call fcn.1007f407
jmp 0x10025d6b
mov byte [0x10106135], 0
jmp 0x10025d6b
mov ecx, dword [ebp + 8]
cmp ecx, dword [0x10152940]
jne 0x10024c8e
cmp dword [ebp + 8], 0x48
jne 0x10024c8e
lea ecx, [ebp - 0x467c]
call fcn.1006ba40
mov dword [ebp - 4], 1
push 0x40
mov edx, dword [0x1015293c]
push edx
mov eax, dword [0x10152938]
push eax
lea ecx, [ebp - 0x467c]
push ecx
mov ecx, 0x101236d8
call fcn.10062516
mov dword [ebp - 0x4680], eax
cmp dword [ebp - 0x4680], 0
jl 0x10024c13
push 0x40
push 2
mov edx, dword [0x1015293c]
push edx
mov eax, dword [0x10152938]
push eax
mov ecx, 0x10105e60
call fcn.1001fa8a
jmp 0x10024c7a
push 0x40
push 0x8053
push 0x7fb8
lea ecx, [ebp - 0x467c]
push ecx
mov ecx, 0x101236d8
call fcn.10062516
mov dword [ebp - 0x4680], eax
push 0x40
push 0x8041
push 0x7fce
lea edx, [ebp - 0x467c]
push edx
mov ecx, 0x101236d8
call fcn.10062516
mov dword [ebp - 0x4680], eax
cmp dword [ebp - 0x4680], 0
jl 0x10024c7a
push 0x40
push 2
push 0x8041
push 0x7fce
mov ecx, 0x10105e60
call fcn.1001fa8a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x467c]
call fcn.1006ba7e
jmp 0x10024cf9
mov eax, dword [ebp + 8]
cmp eax, dword [0x10152940]
jne 0x10024cf9
cmp dword [0x1018d640], 0
je 0x10024cf9
call dword [0x10083088]
sub eax, dword [0x1009238c]
cmp eax, 0x3e8
jbe 0x10024ce1
mov ecx, 0x10105e60
call fcn.10021424
and eax, 0xff
test eax, eax
je 0x10024cd4
mov byte [0x10088ef9], 0
jmp 0x10025d6b
call dword [0x10083088]
mov dword [0x1009238c], eax
jmp 0x10024cf9
xor ecx, ecx
mov cl, byte [0x10088ef9]
test ecx, ecx
jne 0x10024cf9
call fcn.1004ac97
mov byte [0x10088ef9], 1
mov edx, dword [0x10152940]
mov dword [ebp - 0x4bc0], edx
cmp dword [ebp - 0x4bc0], 0x8d
jg 0x10024d52
cmp dword [ebp - 0x4bc0], 0x8d
je case.0x10024d9d.0
mov eax, dword [ebp - 0x4bc0]
sub eax, 0xf
mov dword [ebp - 0x4bc0], eax
cmp dword [ebp - 0x4bc0], 0x74
ja case.0x10024dd3.4
mov edx, dword [ebp - 0x4bc0]
xor ecx, ecx
mov cl, byte [edx + 0x10025ed7]
jmp dword [ecx*4 + 0x10025ebb]
cmp dword [ebp - 0x4bc0], 0x12f
jg 0x10024da4
cmp dword [ebp - 0x4bc0], 0x12f
je 0x10025719
mov eax, dword [ebp - 0x4bc0]
sub eax, 0x97
mov dword [ebp - 0x4bc0], eax
cmp dword [ebp - 0x4bc0], 0x95
ja case.0x10024dd3.4
mov edx, dword [ebp - 0x4bc0]
xor ecx, ecx
mov cl, byte [edx + 0x10025f58]
jmp dword [ecx*4 + 0x10025f4c]
mov eax, dword [ebp - 0x4bc0]
sub eax, 0x140
mov dword [ebp - 0x4bc0], eax
cmp dword [ebp - 0x4bc0], 0xcc
ja case.0x10024dd3.4
mov edx, dword [ebp - 0x4bc0]
xor ecx, ecx
mov cl, byte [edx + 0x10026002]
jmp dword [ecx*4 + 0x10025fee]
mov byte [0x10106135], 0
mov ecx, 0x101236d8
call fcn.1005ca51
jmp 0x10025d4c
cmp dword [ebp + 8], 0x7e
jne 0x10024e80
mov eax, dword [0x10088efc]
push eax
push 0x801e
mov ecx, 0x100a5a88
call fcn.10031733
test eax, eax
jne 0x10024e33
mov ecx, 0x101236d8
call fcn.1005ca51
cmp eax, 0xffffffff
jne 0x10024e31
mov ecx, dword [0x10173ba4]
add ecx, 1
mov dword [0x10173ba4], ecx
jmp 0x10024e7e
push 0x30
push 0
mov edx, dword [0x10088efc]
push edx
push 0x801e
mov ecx, 0x10105e60
call fcn.1001fa8a
xor eax, eax
mov al, byte [0x10106135]
test eax, eax
je 0x10024e7e
mov eax, dword [0x10088efc]
sub eax, 0x8060
xor edx, edx
mov ecx, 4
div ecx
add edx, 0x8061
mov dword [0x10088efc], edx
mov byte [0x10106135], 0
jmp 0x10024e91
push 2
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
mov eax, dword [ebp + 8]
cmp eax, dword [0x10152940]
je 0x10024f05
push 1
push 0x100bacec
mov ecx, 0x100a5a88
call fcn.1002fe87
test eax, eax
je 0x10024ecd
push 0
push 0
push 5
push 0x100bacec
mov ecx, 0x100a5a88
call fcn.1003de18
jmp 0x10024f03
cmp dword [0x1018d640], 1
jne 0x10024f03
mov ecx, dword [ebp - 0x4bb8]
cmp dword [ecx + 4], 0
je 0x10024f03
mov edx, dword [ebp - 0x4bb8]
mov dword [edx + 4], 0
mov ecx, 0x10152958
call fcn.1006ae35
mov dword [0x101817a4], 0
jmp 0x10024f16
push 2
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
mov ecx, dword [ebp + 8]
cmp ecx, dword [0x10152940]
je 0x10024fb4
push 0x8026
push 0x80b2
mov edx, dword [0x1015293c]
push edx
mov eax, dword [0x10152938]
push eax
mov ecx, 0x100a5a88
call fcn.100315e9
cmp eax, 0x18
jae 0x10024fb2
push 1
push 0x100bacec
mov ecx, 0x100a5a88
call fcn.1002fe87
test eax, eax
je 0x10024f7c
push 0
push 0
push 5
push 0x100bacec
mov ecx, 0x100a5a88
call fcn.1003de18
jmp 0x10024fb2
cmp dword [0x1018d640], 1
jne 0x10024fb2
mov ecx, dword [ebp - 0x4bb8]
cmp dword [ecx + 4], 0
je 0x10024fb2
mov edx, dword [ebp - 0x4bb8]
mov dword [edx + 4], 0
mov ecx, 0x10152958
call fcn.1006ae35
mov dword [0x101817a4], 0
jmp 0x10024fc5
push 2
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
cmp dword [ebp + 8], 0x140
je 0x1002505d
mov ecx, dword [0x10152938]
sub ecx, 0x7fa6
push ecx
call fcn.100822a0
add esp, 4
cmp eax, 0x10
jge 0x10025050
mov edx, dword [0x1015293c]
sub edx, 0x8058
push edx
call fcn.100822a0
add esp, 4
cmp eax, 0x10
jge 0x10025050
movsx eax, byte [0x100bc7ec]
test eax, eax
je 0x1002504e
push 1
push 0x100bc7ec
mov ecx, 0x100a5a88
call fcn.1002fe87
test eax, eax
je 0x1002504e
push 0x1770
push 0x100bc7ec
mov ecx, 0x100a5a88
call fcn.1002f1d7
push 0x100bc7ec
mov ecx, 0x1018d660
call fcn.10054dc7
jmp 0x1002505b
mov ecx, dword [ebp - 0x4bb8]
call fcn.1002695e
jmp 0x1002506e
push 2
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
cmp dword [ebp + 8], 0x20a
jne 0x1002512e
push 0x8080
push 0x7f7e
mov ecx, 0x100a5a88
call fcn.10031733
mov dword [ebp - 0x4684], eax
cmp dword [ebp - 0x4684], 0x10
jge 0x1002512c
cmp dword [ebp - 0x4684], 2
jle 0x100250f9
push 0x30
push 2
push 0x8080
push 0x7f7e
mov ecx, 0x10105e60
call fcn.1001fa8a
xor edx, edx
mov dl, byte [0x10106135]
test edx, edx
je 0x100250f7
mov ecx, 0x101236d8
call fcn.1005ca51
cmp eax, 0xffffffff
jne 0x100250f0
mov eax, dword [0x10173ba4]
add eax, 1
mov dword [0x10173ba4], eax
mov byte [0x10106135], 0
jmp 0x1002512c
call dword [0x10083088]
sub eax, dword [0x10092390]
cmp eax, 0x5dc
jbe 0x1002512c
push 0
push 0
push 5
push 0x100bc8ec
mov ecx, 0x100a5a88
call fcn.1003de18
call dword [0x10083088]
mov dword [0x10092390], eax
jmp 0x1002513f
push 2
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
cmp dword [ebp + 8], 0x20b
jne 0x100251ff
push 0x8080
push 0x7f78
mov ecx, 0x100a5a88
call fcn.10031733
mov dword [ebp - 0x4688], eax
cmp dword [ebp - 0x4688], 0x10
jge 0x100251fd
cmp dword [ebp - 0x4688], 2
jle 0x100251ca
push 0x30
push 2
push 0x8080
push 0x7f78
mov ecx, 0x10105e60
call fcn.1001fa8a
xor edx, edx
mov dl, byte [0x10106135]
test edx, edx
je 0x100251c8
mov ecx, 0x101236d8
call fcn.1005ca51
cmp eax, 0xffffffff
jne 0x100251c1
mov eax, dword [0x10173ba4]
add eax, 1
mov dword [0x10173ba4], eax
mov byte [0x10106135], 0
jmp 0x100251fd
call dword [0x10083088]
sub eax, dword [0x10092394]
cmp eax, 0x5dc
jbe 0x100251fd
push 0
push 0
push 5
push 0x100bce6c
mov ecx, 0x100a5a88
call fcn.1003de18
call dword [0x10083088]
mov dword [0x10092394], eax
jmp 0x10025210
push 2
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
cmp dword [ebp + 8], 0x1b8
jne 0x100252f0
push 0x80d5
push 0x7f3c
mov ecx, 0x100a5a88
call fcn.10031733
mov dword [ebp - 0x468c], eax
cmp dword [ebp - 0x468c], 0x10
jge 0x100252d0
cmp dword [ebp - 0x468c], 2
jle 0x1002529b
push 0x30
push 2
push 0x80d5
push 0x7f3c
mov ecx, 0x10105e60
call fcn.1001fa8a
xor edx, edx
mov dl, byte [0x10106135]
test edx, edx
je 0x10025299
mov ecx, 0x101236d8
call fcn.1005ca51
cmp eax, 0xffffffff
jne 0x10025292
mov eax, dword [0x10173ba4]
add eax, 1
mov dword [0x10173ba4], eax
mov byte [0x10106135], 0
jmp 0x100252ce
call dword [0x10083088]
sub eax, dword [0x10092398]
cmp eax, 0x5dc
jbe 0x100252ce
push 0
push 0
push 5
push 0x100bbe6c
mov ecx, 0x100a5a88
call fcn.1003de18
call dword [0x10083088]
mov dword [0x10092398], eax
jmp 0x100252ee
mov ecx, 0x101236d8
call fcn.1005ca51
cmp eax, 0xffffffff
jne 0x100252ee
mov ecx, dword [0x10173ba4]
add ecx, 1
mov dword [0x10173ba4], ecx
jmp 0x10025301
push 2
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
mov eax, dword [ebp + 8]
cmp eax, dword [0x10152940]
jne 0x10025324
push 2
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025335
push 2
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
cmp dword [ebp + 8], 0x65
jne 0x1002565a
mov eax, dword [0x10152940]
mov dword [ebp - 0x4690], eax
cmp dword [ebp - 0x4690], 0x6f
jl 0x1002565a
cmp dword [ebp - 0x4690], 0xb5
jg 0x1002565a
mov eax, dword [ebp - 0x4690]
sub eax, 0x6f
cdq
mov ecx, 0xa
idiv ecx
test edx, edx
jne 0x1002565a
mov eax, dword [ebp - 0x4690]
sub eax, 0x6f
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebp - 0x4694], eax
cmp dword [ebp + 8], 0x65
jne 0x100255f7
push 1
mov edx, dword [ebp - 0x4694]
add edx, 0x39
shl edx, 7
add edx, 0x100ba4ec
push edx
mov ecx, 0x100a5a88
call fcn.1002fe87
test eax, eax
je 0x100255f7
mov byte [ebp - 0x4698], 0
push 0x8032
push 0x8064
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 6
jae 0x1002542c
push 0x8032
push 0x8064
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 2
jbe 0x10025420
push 0x18
push 2
push 0x8032
push 0x8064
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x10025427
mov byte [ebp - 0x4698], 1
jmp 0x1002552c
push 0x8032
push 0x801a
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 6
jae 0x10025484
push 0x8032
push 0x801a
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 2
jbe 0x10025478
push 0x18
push 2
push 0x8032
push 0x801a
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x1002547f
mov byte [ebp - 0x4698], 1
jmp 0x1002552c
push 0x800d
push 0x801a
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 6
jae 0x100254d9
push 0x800d
push 0x801a
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 2
jbe 0x100254d0
push 0x18
push 2
push 0x800d
push 0x801a
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x100254d7
mov byte [ebp - 0x4698], 1
jmp 0x1002552c
push 0x800d
push 0x8064
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 6
jae 0x1002552c
push 0x800d
push 0x8064
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 2
jbe 0x10025525
push 0x18
push 2
push 0x800d
push 0x8064
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x1002552c
mov byte [ebp - 0x4698], 1
mov eax, dword [ebp - 0x4698]
and eax, 0xff
cmp eax, 1
jne 0x100255f5
mov ecx, dword [ebp - 0x4694]
add ecx, 0x39
shl ecx, 7
add ecx, 0x100ba4ec
push ecx
push 0x10089104
lea edx, [ebp - 0x4798]
push edx
call dword [0x100831ec]
add esp, 0xc
push 0
push 0
push 5
mov eax, dword [ebp - 0x4694]
add eax, 0x39
shl eax, 7
add eax, 0x100ba4ec
push eax
mov ecx, 0x100a5a88
call fcn.1003de18
and eax, 0xff
test eax, eax
jne 0x100255f5
mov ecx, dword [ebp - 0x4694]
add ecx, 0x2a
shl ecx, 7
add ecx, 0x100ba4ec
push ecx
push 0x10089108
lea edx, [ebp - 0x4898]
push edx
call dword [0x100831ec]
add esp, 0xc
push 0
push 0
push 5
mov eax, dword [ebp - 0x4694]
add eax, 0x2a
shl eax, 7
add eax, 0x100ba4ec
push eax
mov ecx, 0x100a5a88
call fcn.1003de18
and eax, 0xff
test eax, eax
jne 0x100255f5
mov ecx, dword [0x10173ba4]
add ecx, 1
mov dword [0x10173ba4], ecx
jmp 0x1002565a
mov edx, dword [ebp - 0x4694]
add edx, 0x2a
shl edx, 7
add edx, 0x100ba4ec
push edx
push 0x1008910c
lea eax, [ebp - 0x4998]
push eax
call dword [0x100831ec]
add esp, 0xc
push 0
push 0
push 5
mov ecx, dword [ebp - 0x4694]
add ecx, 0x2a
shl ecx, 7
add ecx, 0x100ba4ec
push ecx
mov ecx, 0x100a5a88
call fcn.1003de18
and eax, 0xff
test eax, eax
jne 0x1002565a
mov edx, dword [0x10173ba4]
add edx, 1
mov dword [0x10173ba4], edx
mov eax, dword [ebp + 8]
cmp eax, dword [0x10152940]
je 0x10025703
mov ecx, dword [0x10152940]
add ecx, 1
cmp dword [ebp + 8], ecx
je 0x10025703
call dword [0x10083088]
sub eax, dword [0x1009239c]
cmp eax, 0xbb8
jbe 0x100256a0
call fcn.1004ac97
call dword [0x10083088]
mov dword [0x1009239c], eax
jmp 0x10025701
mov eax, dword [0x10152940]
sub eax, 0x6f
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebp - 0x499c], eax
mov edx, dword [ebp - 0x499c]
add edx, 0x2a
shl edx, 7
add edx, 0x100ba4ec
push edx
push 0x10089110
lea eax, [ebp - 0x4a9c]
push eax
call dword [0x100831ec]
add esp, 0xc
push 0
push 0
push 5
mov ecx, dword [ebp - 0x499c]
add ecx, 0x2a
shl ecx, 7
add ecx, 0x100ba4ec
push ecx
mov ecx, 0x100a5a88
call fcn.1003de18
jmp 0x10025714
push 2
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
cmp dword [ebp + 8], 4
jne 0x10025886
push 0x100afaec
mov ecx, 0x100a5a88
call fcn.100305b6
mov dword [ebp - 0x4aa0], eax
cmp dword [ebp - 0x4aa0], 0
je 0x10025774
mov eax, dword [ebp - 0x4aa0]
push eax
mov ecx, 0x100a5a88
call fcn.10004450
push eax
mov ecx, dword [ebp - 0x4aa0]
push ecx
mov ecx, 0x100a5a88
call fcn.10004420
push eax
mov ecx, 0x100a5a88
call fcn.10031733
cmp eax, 3
jbe 0x100257df
mov edx, dword [0x100aa458]
push edx
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
cmp eax, 1
je 0x100257a8
mov eax, dword [0x100aa45c]
push eax
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
test eax, eax
je 0x100257bd
push 1
push 0x1b
push 0x100
mov ecx, dword [0x100a8330]
push ecx
call fcn.1006b7f7
mov edx, dword [0x10106150]
push edx
push 1
push 0x809c
push 0x8974
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x10025884
call dword [0x10083088]
sub eax, dword [0x100923a0]
cmp eax, 0xbb8
jbe 0x10025884
call dword [0x10083088]
mov dword [0x100923a0], eax
mov eax, dword [0x100aa45c]
push eax
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
test eax, eax
jne 0x10025838
mov ecx, dword [ebp - 0x4aa0]
push ecx
mov ecx, 0x100a5a88
call fcn.1003c978
call dword [0x10083088]
mov dword [0x100923a4], eax
jmp 0x10025884
cmp dword [0x100923a4], 0
je 0x10025876
call dword [0x10083088]
sub eax, dword [0x100923a4]
cmp eax, 0x7530
jbe 0x10025876
push 1
push 0x1b
push 0x100
mov edx, dword [0x100a8330]
push edx
call fcn.1006b7f7
call dword [0x10083088]
mov dword [0x100923a4], eax
jmp 0x10025884
push 0x4b
push 0x4b
mov ecx, 0x100a5a88
call fcn.1003b305
jmp 0x10025897
push 2
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d4c
mov ecx, dword [0x10152940]
cmp ecx, dword [0x101060dc]
jne 0x100258f2
mov edx, dword [ebp + 8]
cmp edx, dword [0x10152940]
je 0x100258f2
push 1
push 0x10105f9a
mov ecx, 0x100a5a88
call fcn.1002fe87
test eax, eax
je 0x100258f2
push 0x1770
push 0x10105f9a
mov ecx, 0x100a5a88
call fcn.1002f1d7
push 0x10105f9a
mov ecx, 0x1018d660
call fcn.10054dc7
jmp 0x10025d4c
mov ecx, 0x10105dd8
call fcn.10021a90
test eax, eax
jbe 0x10025d3b
mov dword [ebp - 0x4aa4], 0
jmp 0x1002591f
mov eax, dword [ebp - 0x4aa4]
add eax, 1
mov dword [ebp - 0x4aa4], eax
mov ecx, 0x10105dd8
call fcn.10021a90
cmp dword [ebp - 0x4aa4], eax
jae 0x10025cf3
mov ecx, dword [ebp - 0x4aa4]
push ecx
mov ecx, 0x10105dd8
call fcn.10021ad0
mov edx, dword [0x10152940]
cmp edx, dword [eax]
jne 0x10025cee
mov eax, dword [ebp - 0x4aa4]
push eax
mov ecx, 0x10105e08
call fcn.10021ad0
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax]
jne 0x10025cee
mov edx, dword [ebp - 0x4aa4]
push edx
mov ecx, 0x10105df8
call fcn.10021b50
mov ecx, eax
call dword [0x100830e4]
push eax
lea eax, [ebp - 0x4ba8]
push eax
call fcn.100822a6
add esp, 8
mov ecx, dword [ebp - 0x4aa4]
push ecx
mov ecx, 0x10105e18
call fcn.10021ad0
mov edx, dword [eax]
mov dword [ebp - 0x4bb0], edx
lea eax, [ebp - 0x4ba8]
push eax
mov ecx, 0x100a5a88
call fcn.100305b6
mov dword [ebp - 0x4aa8], eax
cmp dword [ebp - 0x4aa8], 0
jne 0x100259ff
mov ecx, dword [ebp - 0x4aa4]
push ecx
mov ecx, 0x10105e28
call fcn.10021ad0
mov edx, dword [eax]
push edx
mov eax, dword [ebp - 0x4bb0]
push eax
mov ecx, 0x100a5a88
call fcn.10031733
mov dword [ebp - 0x4bac], eax
jmp 0x10025a33
mov ecx, dword [ebp - 0x4aa8]
push ecx
mov ecx, 0x100a5a88
call fcn.10004450
push eax
mov edx, dword [ebp - 0x4aa8]
push edx
mov ecx, 0x100a5a88
call fcn.10004420
push eax
mov ecx, 0x100a5a88
call fcn.10031733
mov dword [ebp - 0x4bac], eax
cmp dword [ebp - 0x4aa8], 0
je 0x10025a49
cmp dword [ebp - 0x4bac], 3
jle 0x10025afd
mov eax, dword [0x100aa458]
push eax
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
cmp eax, 1
je 0x10025a7d
mov ecx, dword [0x100aa45c]
push ecx
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
test eax, eax
je 0x10025a92
push 1
push 0x1b
push 0x100
mov edx, dword [0x100a8330]
push edx
call fcn.1006b7f7
cmp dword [ebp - 0x4aa8], 0
je 0x10025acf
push 0x20
push 2
mov eax, dword [ebp - 0x4aa8]
push eax
mov ecx, 0x100a5a88
call fcn.10004450
push eax
mov ecx, dword [ebp - 0x4aa8]
push ecx
mov ecx, 0x100a5a88
call fcn.10004420
push eax
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x10025af8
push 0x20
push 2
mov edx, dword [ebp - 0x4aa4]
push edx
mov ecx, 0x10105e28
call fcn.10021ad0
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x4bb0]
push ecx
mov ecx, 0x10105e60
call fcn.1000db29
jmp 0x10025ce3
call dword [0x10083088]
sub eax, dword [0x100923a8]
cmp eax, 0x7d0
jbe 0x10025ce3
call dword [0x10083088]
mov dword [0x100923a8], eax
mov edx, dword [0x100aa45c]
push edx
mov ecx, 0x100a5a88
call fcn.10039606
and eax, 0xff
test eax, eax
jne 0x10025b5a
mov eax, dword [ebp - 0x4aa8]
push eax
mov ecx, 0x100a5a88
call fcn.1003c978
call dword [0x10083088]
mov dword [0x100923ac], eax
jmp 0x10025ce3
call dword [0x10083088]
sub eax, dword [0x100923ac]
cmp eax, 0x3a98
jbe 0x10025ba6
push 1
push 0x1b
push 0x100
mov ecx, dword [0x100a8330]
push ecx
call fcn.1006b7f7
push 0x1770
push 0x10089114
mov ecx, 0x100a5a88
call fcn.1002f1d7
call dword [0x10083088]
mov dword [0x100923ac], eax
jmp 0x10025ce3
mov edx, dword [ebp - 0x4aa4]
mov dword [ebp - 0x4bb4], edx
jmp 0x10025bc3
mov eax, dword [ebp - 0x4bb4]
add eax, 1
mov dword [ebp - 0x4bb4], eax
mov ecx, 0x10105dd8
call fcn.10021a90
cmp dword [ebp - 0x4bb4], eax
jae 0x10025c0c
mov ecx, dword [ebp - 0x4bb4]
push ecx
mov ecx, 0x10105dd8
call fcn.10021ad0
mov edx, dword [0x10152940]
cmp edx, dword [eax]
jne 0x10025c08
mov eax, dword [ebp - 0x4bb4]
push eax
mov ecx, 0x10105e08
call fcn.10021ad0
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax]
je 0x10025c0a
jmp 0x10025c0c
jmp 0x10025bb4
mov edx, dword [ebp - 0x4bb4]
sub edx, 1
mov dword [ebp - 0x4bb4], edx
mov eax, dword [ebp - 0x4aa4]
cmp eax, dword [ebp - 0x4bb4]
jne 0x10025c60
mov ecx, dword [ebp - 0x4aa4]
push ecx
mov ecx, 0x10105e48
call fcn.10021ad0
mov edx, dword [eax]
push edx
mov eax, dword [ebp - 0x4aa4]
push eax
mov ecx, 0x10105e38
call fcn.10021ad0
mov ecx, dword [eax]
push ecx
mov ecx, 0x100a5a88
call fcn.1003b305
jmp 0x10025ce3
mov edx, dword [0x100923b0]
cmp edx, dword [ebp - 0x4aa4]
jl 0x10025c7b
mov eax, dword [0x100923b0]
cmp eax, dword [ebp - 0x4bb4]
jle 0x10025c89
mov ecx, dword [ebp - 0x4aa4]
mov dword [0x100923b0], ecx
jmp 0x10025cb1
mov edx, dword [0x100923b0]
add edx, 1
mov dword [0x100923b0], edx
mov eax, dword [0x100923b0]
cmp eax, dword [ebp - 0x4bb4]
jle 0x10025cb1
mov ecx, dword [ebp - 0x4aa4]
mov dword [0x100923b0], ecx
mov edx, dword [0x100923b0]
push edx
mov ecx, 0x10105e48
call fcn.10021ad0
mov eax, dword [eax]
push eax
mov ecx, dword [0x100923b0]
push ecx
mov ecx, 0x10105e38
call fcn.10021ad0
mov edx, dword [eax]
push edx
mov ecx, 0x100a5a88
call fcn.1003b305
cmp dword [ebp - 0x4aa8], 0
je 0x10025cee
jmp 0x10025d6b
jmp 0x10025910
mov eax, dword [0x10152940]
push eax
mov ecx, 0x101236d8
call fcn.10063aa0
and eax, 0xff
test eax, eax
je 0x10025d3b
mov ecx, dword [ebp + 8]
push ecx
mov ecx, 0x101236d8
call fcn.10063aa0
and eax, 0xff
test eax, eax
je 0x10025d3b
push 2
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
mov byte [0x10173f0c], 1
push 2
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x4bb8]
call fcn.10026619
jmp 0x10025d6b
cmp dword [0x1018d640], 0
je 0x10025d6b
mov dword [0x10173ba4], 0
mov ecx, 0x10111738
call fcn.1007f407
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4