Function at 0x10015a6f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
mov edx, 0x2a
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x10015a76
mov edx, dword [esp + 0xb4]
lea ecx, [esp]
call fcn.10033000
mov edx, dword [esp + 0xb8]
lea ecx, [esp + 4]
call fcn.10033000
mov word [esp + 0x30], 5
movzx ebx, word [esp + 0x30]
mov eax, 5
cmp ebx, eax
jl 0x10015ac6
movzx ebx, word [esp + 0x30]
dec ebx
push ebx
pop eax
mov word [esp + 0x34], ax
jmp 0x10015ad3
movzx ebx, word [esp + 0x30]
inc ebx
push ebx
pop eax
mov word [esp + 0x34], ax
movzx ebx, word [esp + 0x34]
push ebx
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x10015aed
add esp, 4
jmp 0x10017447
mov ebx, 5
cmp ebx, dword [esp]
jne 0x10015b05
movzx eax, word [esp + 0x38]
push eax
pop eax
mov word [esp + 0x34], ax
jmp 0x10015b1c
mov ebx, 4
cmp ebx, dword [esp]
jne 0x10015b1c
movzx ebx, word [esp + 0x38]
inc ebx
push ebx
pop eax
mov word [esp + 0x34], ax
pop eax
push dword [esp]
lea edx, [0x1003f028]
pop ecx
call fcn.100331d0
jne 0x10015b42
push dword [esp + 4]
lea edx, [0x1003f028]
pop ecx
call fcn.100331d0
jne 0x10015b42
jmp 0x10015b49
mov eax, 1
jmp 0x10015b4b
xor eax, eax
and eax, eax
je 0x10015b59
xor eax, eax
movsx eax, al
jmp 0x10017447
mov word [esp + 0x38], 9
movzx ebx, word [esp + 0x38]
mov eax, 2
cmp ebx, eax
jl 0x10015b7d
movzx ebx, word [esp + 0x38]
dec ebx
push ebx
pop eax
mov word [esp + 0x3c], ax
jmp 0x10015b8a
movzx ebx, word [esp + 0x38]
inc ebx
push ebx
pop eax
mov word [esp + 0x3c], ax
movzx ebx, word [esp + 0x3c]
push ebx
mov ebx, 0xe
cmp ebx, dword [esp]
jne 0x10015ba4
add esp, 4
jmp 0x10017447
mov ebx, 6
cmp ebx, dword [esp]
jne 0x10015bbc
movzx eax, word [esp + 0x40]
push eax
pop eax
mov word [esp + 0x3c], ax
jmp 0x10015bd3
mov ebx, 3
cmp ebx, dword [esp]
jne 0x10015bd3
movzx ebx, word [esp + 0x40]
inc ebx
push ebx
pop eax
mov word [esp + 0x3c], ax
pop eax
lea eax, [esp + 0xc]
lea edx, [0x1003f0f2]
push edx
push 1
push eax
call fcn.1003ce30
lea eax, [esp + 0x28]
lea edx, [0x10040996]
push edx
push 2
push eax
call fcn.1003ce30
push 0x12
call fcn.1000fbc1
mov dword [esp + 0x2c], eax
mov ebx, dword [esp + 0x2c]
and ebx, ebx
jne 0x10015c9f
xor eax, eax
movsx eax, al
jmp 0x10017447
lea edx, [esp + 0x48]
push edx
push 0x10040fc0
push 8
push 0x13
push 4
call fcn.1003c3c2
lea edx, str.horror
lea ecx, [esp + 0x50]
call fcn.10033008
push dword [esp + 0x48]
mov ebp, dword [esp + 0x30]
push ebp
pop eax
push dword [ebp]
call fcn.1003c686
push dword [esp + 0x2c]
call fcn.1003c910
mov dword [esp + 0x2c], 0
push dword [0x10046b70]
push 0x3b
call fcn.10013868
lea eax, [esp + 0x28]
push 1
push eax
call fcn.1003ce00
mov dword [esp + 0x1c], 0
mov word [esp + 0x54], 0xa
movzx ebx, word [esp + 0x54]
mov eax, 2
cmp ebx, eax
jl 0x10015d3a
movzx ebx, word [esp + 0x54]
dec ebx
push ebx
pop eax
mov word [esp + 0x58], ax
jmp 0x10015d47
movzx ebx, word [esp + 0x54]
inc ebx
push ebx
pop eax
mov word [esp + 0x58], ax
movzx ebx, word [esp + 0x58]
push ebx
mov ebx, 0x11
cmp ebx, dword [esp]
jne 0x10015d61
add esp, 4
jmp 0x10017447
mov ebx, 8
cmp ebx, dword [esp]
jne 0x10015d79
movzx eax, word [esp + 0x5c]
push eax
pop eax
mov word [esp + 0x58], ax
jmp 0x10015d90
mov ebx, 4
cmp ebx, dword [esp]
jne 0x10015d90
movzx ebx, word [esp + 0x5c]
inc ebx
push ebx
pop eax
mov word [esp + 0x58], ax
pop eax
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x40]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x1004115e
push ebp
mov ebp, 0x10041159
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041167
push ebp
mov ebp, 0x1004115e
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x48]
push edx
call fcn.1003cd20
push dword [0x10046b70]
push 0x28
call fcn.10013868
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 4]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x1004116a
push ebp
mov ebp, 0x10041167
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100418c7
push ebp
mov ebp, 0x100418aa
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 4]
push edx
call fcn.1003cd20
push dword [0x10046b70]
push 0x29
call fcn.10013868
pop eax
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
push 0x7d
call fcn.10013868
pop eax
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x78
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0xc]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x2e
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov word [esp + 0x5c], 6
movzx ebx, word [esp + 0x5c]
mov eax, 2
cmp ebx, eax
jl 0x1001609c
movzx ebx, word [esp + 0x5c]
dec ebx
push ebx
pop eax
mov word [esp + 0x60], ax
jmp 0x100160a9
movzx ebx, word [esp + 0x5c]
inc ebx
push ebx
pop eax
mov word [esp + 0x60], ax
movzx ebx, word [esp + 0x60]
push ebx
mov ebx, 0xf
cmp ebx, dword [esp]
jne 0x100160c3
add esp, 4
jmp 0x10017447
mov ebx, 9
cmp ebx, dword [esp]
jne 0x100160db
movzx eax, word [esp + 0x64]
push eax
pop eax
mov word [esp + 0x60], ax
jmp 0x100160f2
mov ebx, 3
cmp ebx, dword [esp]
jne 0x100160f2
movzx ebx, word [esp + 0x64]
inc ebx
push ebx
pop eax
mov word [esp + 0x60], ax
pop eax
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x10]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x65
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x14]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x73
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x18]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x6c
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x1c]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x74
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
lea edx, str.spears
lea ecx, [esp + 0x64]
call fcn.10033008
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x20]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x4d
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
lea edx, str.belt
lea ecx, [esp + 0x68]
call fcn.10033008
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x61
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov word [esp + 0x6c], 3
movzx ebx, word [esp + 0x6c]
mov eax, 3
cmp ebx, eax
jl 0x1001650d
movzx ebx, word [esp + 0x6c]
dec ebx
push ebx
pop eax
mov word [esp + 0x70], ax
jmp 0x1001651a
movzx ebx, word [esp + 0x6c]
inc ebx
push ebx
pop eax
mov word [esp + 0x70], ax
movzx ebx, word [esp + 0x70]
push ebx
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x10016534
add esp, 4
jmp 0x10017447
mov ebx, 7
cmp ebx, dword [esp]
jne 0x1001654c
movzx eax, word [esp + 0x74]
push eax
pop eax
mov word [esp + 0x70], ax
jmp 0x10016563
mov ebx, 2
cmp ebx, dword [esp]
jne 0x10016563
movzx ebx, word [esp + 0x74]
inc ebx
push ebx
pop eax
mov word [esp + 0x70], ax
pop eax
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x28]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x70
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
lea edx, str.cialis
lea ecx, [esp + 0x74]
call fcn.10033008
push dword [0x10046b70]
push dword [0x10046b70]
push 0x5c
call fcn.10013868
push dword [0x10046b70]
push 0x5c
call fcn.10013868
pop eax
add dword [0x10046b70], 2
push dword [0x10046b70]
push 0x5c
call fcn.10013868
add dword [0x10046b70], 2
push dword [esp + 0x10]
mov edx, dword [0x10041b0c]
add dword [esp + 4], edx
mov edx, dword [0x10041b0c]
add dword [esp + 8], edx
call fcn.1000be02
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea eax, [esp + 0x24]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x30]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
mov edx, dword [esp + 0x24]
push edx
call fcn.1003cd20
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
lea edx, [0x1003f028]
lea ecx, [esp + 0x20]
call fcn.10033008
mov word [esp + 0x78], 8
movzx ebx, word [esp + 0x78]
mov eax, 1
cmp ebx, eax
jl 0x10016753
movzx ebx, word [esp + 0x78]
dec ebx
push ebx
pop eax
mov word [esp + 0x7c], ax
jmp 0x10016760
movzx ebx, word [esp + 0x78]
inc ebx
push ebx
pop eax
mov word [esp + 0x7c], ax
movzx ebx, word [esp + 0x7c]
push ebx
mov ebx, 0xf
cmp ebx, dword [esp]
jne 0x1001677a
add esp, 4
jmp 0x10017447
mov ebx, 5
cmp ebx, dword [esp]
jne 0x10016795
movzx eax, word [esp + 0x80]
push eax
pop eax
mov word [esp + 0x7c], ax
jmp 0x100167af
mov ebx, 4
cmp ebx, dword [esp]
jne 0x100167af
movzx ebx, word [esp + 0x80]
inc ebx
push ebx
pop eax
mov word [esp + 0x7c], ax
pop eax
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 8]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push dword [0x10046b70]
push dword [0x10046b70]
mov ebp, 0x10041875
push ebp
mov ebp, 0x10041871
push ebp
call fcn.1000ada6
add dword [0x10046b70], 2
push 1
push dword [0x1004233c]
mov edx, dword [0x10041b0c]
add dword [esp + 8], edx
call fcn.10033d00
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x34]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0xc]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x1c]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x1c]
push edx
call fcn.1003cd20
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x38]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 8]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x34]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x20
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 8]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x34]
push edx
call fcn.1003cd20
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x3c]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x20]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x14]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x14]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x18]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0xc]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x10]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x10]
push edx
call fcn.1003cd20
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041153
push ebp
mov ebp, 0x1004114f
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x2c]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x48]
push edx
call fcn.1003cd20
push dword [0x10046b70]
push 0x28
call fcn.10013868
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x14]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x68
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x10]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x6c
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x6c
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0xc]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x28]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100411cf
push ebp
mov ebp, 0x100411cc
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x28]
push edx
call fcn.1003cd20
lea edx, [0x100405c6]
push edx
call fcn.1003cd20
mov edx, dword [ebp + 0x18]
push edx
call fcn.1003cd20
lea edx, [0x100405c6]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x1003f294]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x100405c6]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x1003f26c]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x100405c6]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x1003f268]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x100405c6]
push edx
call fcn.1003cd20
mov edx, dword [ebp + 0x1c]
push edx
call fcn.1003cd20
lea edx, [0x100405c6]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x1003f294]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x100405c6]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x1003f2fc]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x100405c6]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [0x1003f2bc]
push edx
call fcn.1003cd20
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
push 0x29
call fcn.10013868
pop eax
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x2c]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x100418d5
push ebp
mov ebp, 0x100418c7
push ebp
call fcn.1000ada6
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x3c]
push edx
call fcn.1003cd20
push dword [0x10046b70]
push 0x2c
call fcn.10013868
pop eax
push dword [0x10046b70]
push 0x20
call fcn.10013868
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x38]
push edx
call fcn.1003cd20
push dword [0x10046b70]
push 0x2c
call fcn.10013868
pop eax
push dword [0x10046b70]
push 0x20
call fcn.10013868
pop eax
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x30]
push edx
call fcn.1003cd20
push dword [0x10046b70]
push 0x2c
call fcn.10013868
pop eax
push dword [0x10046b70]
push 0x20
call fcn.10013868
pop eax
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x10]
push 1
push edx
call fcn.1003ce60
push dword [0x10046b70]
mov ebp, 0x100418da
push ebp
mov ebp, 0x100418d5
push ebp
call fcn.1000ada6
pop eax
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
lea edx, str.alien
lea ecx, [esp + 0x80]
call fcn.10033008
mov edx, dword [esp + 8]
push dword [0x10046b70]
push edx
call fcn.1003cd20
mov ebp, dword [esp + 0x4c]
mov edx, dword [ebp + 0x40]
push edx
call fcn.1003cd20
push dword [0x10046b70]
mov ebp, 0x10041175
push ebp
mov ebp, 0x10041172
push ebp
call fcn.1000ada6
pop eax
push dword [0x10046b70]
push dword [0x10046b70]
push 0x3e7
push 1
call fcn.100157f7
cdq
push edx
push eax
call fcn.100336d0
pop eax
lea edx, [esp + 0x28]
push 1
push edx
call fcn.1003ce60
lea edx, [esp + 0x2c]
push 2
push edx
call fcn.1003ce60
lea eax, [esp + 0xc]
push eax
call fcn.1003cd80
lea edx, str.distances
lea ecx, [esp + 0x84]
call fcn.10033008
push dword [esp + 0x48]
call fcn.1003c578
push dword [esp + 8]
call fcn.100336a0
mov dword [esp + 0x10], eax
mov word [esp + 0x88], 2
movzx ebx, word [esp + 0x88]
mov eax, 1
cmp ebx, eax
jl 0x10017204
movzx ebx, word [esp + 0x88]
dec ebx
push ebx
pop eax
mov word [esp + 0x8c], ax
jmp 0x10017217
movzx ebx, word [esp + 0x88]
inc ebx
push ebx
pop eax
mov word [esp + 0x8c], ax
movzx ebx, word [esp + 0x8c]
push ebx
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x10017234
add esp, 4
jmp 0x10017447
mov ebx, 5
cmp ebx, dword [esp]
jne 0x10017252
movzx eax, word [esp + 0x90]
push eax
pop eax
mov word [esp + 0x8c], ax
jmp 0x1001726f
mov ebx, 4
cmp ebx, dword [esp]
jne 0x1001726f
movzx ebx, word [esp + 0x90]
inc ebx
push ebx
pop eax
mov word [esp + 0x8c], ax
pop eax
mov ebx, dword [esp + 0x10]
add ebx, 2
push ebx
call fcn.1003c7a0
mov dword [esp + 0x14], eax
mov word [esp + 0x90], 0xa
movzx ebx, word [esp + 0x90]
mov eax, 1
cmp ebx, eax
jl 0x100172b1
movzx ebx, word [esp + 0x90]
dec ebx
push ebx
pop eax
mov word [esp + 0x94], ax
jmp 0x100172c4
movzx ebx, word [esp + 0x90]
inc ebx
push ebx
pop eax
mov word [esp + 0x94], ax
movzx ebx, word [esp + 0x94]
push ebx
mov ebx, 0xd
cmp ebx, dword [esp]
jne 0x100172e1
add esp, 4
jmp 0x10017447
mov ebx, 5
cmp ebx, dword [esp]
jne 0x100172ff
movzx eax, word [esp + 0x98]
push eax
pop eax
mov word [esp + 0x94], ax
jmp 0x1001731c
mov ebx, 3
cmp ebx, dword [esp]
jne 0x1001731c
movzx ebx, word [esp + 0x98]
inc ebx
push ebx
pop eax
mov word [esp + 0x94], ax
pop eax
mov ebx, dword [esp + 0x14]
and ebx, ebx
jne 0x1001732f
xor eax, eax
movsx eax, al
jmp 0x10017447
push 0x18
push 0xffffffff
push dword [esp + 0x10]
push dword [esp + 0x20]
call fcn.1003c7c0
lea edx, [0x1003f028]
lea ecx, [esp + 8]
call fcn.10033008
mov word [esp + 0x98], 5
movzx ebx, word [esp + 0x98]
mov eax, 5
cmp ebx, eax
jl 0x10017385
movzx ebx, word [esp + 0x98]
dec ebx
push ebx
pop eax
mov word [esp + 0x9c], ax
jmp 0x10017398
movzx ebx, word [esp + 0x98]
inc ebx
push ebx
pop eax
mov word [esp + 0x9c], ax
movzx ebx, word [esp + 0x9c]
push ebx
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x100173b5
add esp, 4
jmp 0x10017447
mov ebx, 5
cmp ebx, dword [esp]
jne 0x100173d3
movzx eax, word [esp + 0xa0]
push eax
pop eax
mov word [esp + 0x9c], ax
jmp 0x100173f0
mov ebx, 2
cmp ebx, dword [esp]
jne 0x100173f0
movzx ebx, word [esp + 0xa0]
inc ebx
push ebx
pop eax
mov word [esp + 0x9c], ax
pop eax
push dword [esp + 0x10]
push dword [esp + 0x18]
push dword [esp + 8]
call fcn.10031d53
mov ebx, eax
cmp ebx, 1
jne 0x10017420
lea edx, str.blossom
lea ecx, [esp + 0xa0]
call fcn.10033008
mov byte [esp + 0x18], 1
lea edx, str.museums
lea ecx, [esp + 0xa4]
call fcn.10033008
push dword [esp + 0x14]
call fcn.1003c910
movsx eax, byte [esp + 0x18]
movsx eax, al
jmp 0x10017447
push dword [esp + 0x80]
call fcn.1003ccf0
push dword [esp + 8]
call fcn.1003ccf0
push dword [esp + 0xa4]
call fcn.1003ccf0
push dword [esp + 0x20]
call fcn.1003ccf0
push dword [esp + 0x50]
call fcn.1003ccf0
push dword [esp + 0x74]
call fcn.1003ccf0
push dword [esp + 0x84]
call fcn.1003ccf0
push dword [esp]
call fcn.1003ccf0
push dword [esp + 0x68]
call fcn.1003ccf0
push dword [esp + 0xa0]
call fcn.1003ccf0
push dword [esp + 4]
call fcn.1003ccf0
push dword [esp + 0x64]
call fcn.1003ccf0
push eax
push dword [esp + 0x4c]
call fcn.1003c57d
pop eax
add esp, 0xa8
pop ebx
pop ebp
ret 8