Function at 0xb175a4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100b02f4
push eax
mov dword fs:[0], esp
sub esp, 0x284
push ebx
push ebp
push esi
mov esi, dword [esp + 0x2ac]
mov ebp, ecx
push edi
mov ecx, esi
mov edi, dword [esp + 0x2ac]
lea eax, [ebp + 0x140]
xor ebx, ebx
mov edx, dword [ecx]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
xor eax, eax
xor ecx, ecx
mov dword [ebp + 0x12c], eax
mov dword [ebp + 0x130], ecx
mov edx, dword [edi]
cmp dword [edx - 8], ebx
jne 0xb1761d
mov eax, dword [esp + 0x2a4]
xor edx, edx
mov dword [eax], ecx
mov dword [eax + 4], edx
jmp 0xb19d60
push edi
lea eax, [esp + 0x38]
push 0x10118a34
push eax
call fcn.00b4d7f2
push eax
mov ecx, edi
mov dword [esp + 0x2a0], ebx
call fcn.00b4d622
lea ecx, [esp + 0x34]
mov dword [esp + 0x29c], 0xffffffff
call fcn.00b4d535
push 0x10118a2c
mov ecx, edi
call fcn.00b4d8c5
mov ecx, dword [ebp + 0x134]
mov edx, dword [esi]
mov eax, dword [esi + 4]
mov dword [esp + 0x144], ecx
push 0x1013ff54
lea ecx, [esp + 0x2c]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
call fcn.00b4d5a3
push 0x1013ff54
lea ecx, [esp + 0x18]
mov dword [esp + 0x2a0], 1
call fcn.00b4d5a3
push 0x1013ff54
lea ecx, [esp + 0x14]
mov byte [esp + 0x2a0], 2
call fcn.00b4d5a3
push 0x1013ff54
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 3
call fcn.00b4d5a3
mov eax, dword [0x101230a8]
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x230], eax
mov ecx, dword [esp + 0x2b4]
lea edx, [esp + 0x20]
push ecx
push edx
mov ecx, ebp
mov byte [esp + 0x2a4], 5
call fcn.00b1a634
mov eax, dword [edi]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x40], ebx
mov eax, dword [eax - 8]
cmp eax, ebx
jle 0xb19c0a
jmp 0xb17724
mov edi, dword [esp + 0x2ac]
lea ecx, [esp + 0x40]
lea edx, [esp + 0x14]
push ecx
push edx
lea eax, [esp + 0x168]
push edi
push eax
mov ecx, ebp
call fcn.00b1c4f4
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2a0], 6
call fcn.00b4d622
lea ecx, [esp + 0x160]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov ecx, dword [esp + 0x28]
cmp dword [ecx - 8], ebx
je 0xb1793c
mov eax, dword [ebp + 0x78]
dec eax
je 0xb177dc
dec eax
je 0xb177d1
dec eax
jne 0xb177e5
lea ecx, [esp + 0x28]
call fcn.00b4d9fd
mov edx, dword [esp + 0x28]
xor eax, eax
mov dword [esp + 0x1c], eax
cmp dword [edx - 8], ebx
jle 0xb177e5
mov cl, byte [eax + edx]
cmp cl, 0x61
jl 0xb177c3
cmp cl, 0x7a
jg 0xb177c3
cmp eax, ebx
je 0xb177ad
cmp byte [eax + edx - 1], 0x20
jne 0xb177c3
sub cl, 0x20
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.00b4da0f
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
mov ecx, dword [edx - 8]
cmp eax, ecx
jl 0xb17795
jmp 0xb177e5
lea ecx, [esp + 0x28]
call fcn.00b4d9fd
jmp 0xb177e5
lea ecx, [esp + 0x28]
call fcn.00b4d9eb
lea edx, [esp + 0x28]
mov ecx, ebp
push edx
call fcn.00b1def4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0xb4]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x2b4]
mov ecx, dword [eax + 8]
push ecx
call dword [0x100b20fc]
mov edx, dword [esp + 0x2b4]
mov ebx, dword [esp + 0xb8]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
push edx
push ebx
push eax
lea edx, [esp + 0x278]
push ecx
push edx
mov ecx, ebp
call fcn.00b1a3a4
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x2b4]
test eax, eax
jne 0xb17917
mov eax, dword [esp + 0xb4]
sub esp, 0x10
mov edx, esp
add eax, esi
lea ecx, [ebx + edi]
mov dword [edx], esi
mov dword [edx + 4], edi
mov dword [edx + 8], eax
mov dword [edx + 0xc], ecx
mov ecx, ebp
call fcn.00b19ec4
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x2a8]
mov ecx, dword [eax - 8]
mov ebx, dword [edx]
push ecx
push eax
push edi
push esi
mov ecx, edx
call dword [ebx + 0x5c]
mov eax, dword [ebp + 0x3c]
test eax, eax
je 0xb17920
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x44]
xor ecx, ecx
cmp ebx, 0x2bc
setge cl
inc ecx
push eax
push ecx
push 0
call dword [0x100b20a8]
mov esi, dword [esp + 0x2a8]
test esi, esi
jne 0xb178c2
xor ecx, ecx
jmp 0xb178c5
mov ecx, dword [esi + 4]
mov ebx, dword [0x100b20a0]
push eax
push ecx
call ebx
mov edx, dword [esp + 0x24]
mov edi, eax
mov eax, dword [esp + 0x20]
push edx
lea ecx, [esp + 0x280]
push eax
push ecx
mov ecx, esi
call fcn.00b53d18
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x24]
add ecx, eax
push edx
push ecx
mov ecx, esi
call fcn.00b53d64
test esi, esi
jne 0xb1790e
push edi
push esi
call ebx
jmp 0xb17920
mov esi, dword [esi + 4]
push edi
push esi
call ebx
jmp 0xb17920
mov edx, dword [ebp + 0x68]
mov dword [ebp + 0xb4], edx
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x20]
add ecx, eax
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x28]
call fcn.00b4d4c0
xor ebx, ebx
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 8], ebx
je 0xb19bf2
lea ecx, [esp + 0x14]
call fcn.00b4d9fd
lea esi, [ebp + 0x24]
mov ecx, esi
call fcn.00b4d4c0
lea edx, [esp + 0x1c]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x138]
push eax
push ecx
mov ecx, ebp
xor edi, edi
mov dword [esp + 0x28], ebx
call fcn.00b1cc34
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2a0], 7
call fcn.00b4d622
lea ecx, [esp + 0x134]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0xb19bf2
cmp byte [eax], 0x2f
jne 0xb179f8
mov eax, dword [eax - 8]
lea edx, [esp + 0x15c]
dec eax
lea ecx, [esp + 0x10]
push eax
push edx
mov edi, 1
call fcn.00b4ad67
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2a0], 8
call fcn.00b4d622
lea ecx, [esp + 0x15c]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov eax, dword [esp + 0x10]
push 0x10118a28
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17a4d
push 0x10118a20
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb17a40
mov edx, dword [ebp + 0x2c]
mov eax, 0x384
shl edx, 1
mov ecx, edx
mov dword [ebp + 0x2c], edx
cmp ecx, eax
jle 0xb17a40
mov dword [ebp + 0x2c], eax
mov eax, dword [esp + 0x2a8]
push eax
jmp 0xb19beb
mov ecx, dword [esp + 0x10]
push 0x10118a1c
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19bba
mov edx, dword [esp + 0x10]
push 0x10118a18
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19bba
mov eax, dword [esp + 0x10]
push 0x10118a14
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17ad1
push 0x10118a08
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb17ac4
mov eax, dword [ebp + 0x34]
xor ecx, ecx
cmp eax, ebx
sete cl
mov dword [ebp + 0x34], ecx
mov edx, dword [esp + 0x2a8]
push edx
jmp 0xb19beb
mov eax, dword [esp + 0x10]
push 0x10118a04
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19b87
mov ecx, dword [esp + 0x10]
push 0x101189fc
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19b87
mov edx, dword [esp + 0x10]
push 0x101189f4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17d93
push 0x101189f4
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb19be3
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax - 8]
cmp ecx, eax
jge 0xb19be3
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x150]
push edx
push eax
mov ecx, ebp
call fcn.00b1c734
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2a0], 9
call fcn.00b4d622
lea ecx, [esp + 0x14c]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov ecx, dword [esp + 0x10]
cmp dword [ecx - 8], ebx
je 0xb17d7b
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x10117f6c
call fcn.00b4d5a3
lea edx, [esp + 0x20]
push 0x3d
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x178]
push eax
push ecx
mov ecx, ebp
call fcn.00b1caf4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 0xa
call fcn.00b4d622
lea ecx, [esp + 0x16c]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov edx, dword [esp + 0x10]
push 0x101189ec
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17c73
push ecx
lea esi, [ebp + 0x40]
mov ecx, esp
mov dword [esp + 0x30], esp
push esi
call fcn.00b4d2aa
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
mov byte [esp + 0x2a8], 0xb
call fcn.00b4d2aa
lea ecx, [esp + 0x15c]
mov byte [esp + 0x2a4], 5
push ecx
mov ecx, ebp
call fcn.00b1d594
push eax
mov ecx, esi
mov byte [esp + 0x2a0], 0xc
call fcn.00b4d622
lea ecx, [esp + 0x154]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
jmp 0xb17d7b
mov edx, dword [esp + 0x10]
push 0x101189e4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17ca3
mov eax, dword [ebp + 0x28]
push 1
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, ebp
call fcn.00b1be54
mov dword [ebp + 0x28], eax
jmp 0xb17d7b
mov edx, dword [esp + 0x10]
push 0x101189dc
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17cd1
mov eax, dword [ebp + 0x44]
lea ecx, [esp + 0x18]
push eax
push ecx
mov ecx, ebp
call fcn.00b1bce4
mov dword [ebp + 0x44], eax
jmp 0xb17d7b
mov edx, dword [esp + 0x10]
push 0x101189d4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17cf8
lea eax, [esp + 0x18]
mov ecx, ebp
push eax
call fcn.00b1d624
jmp 0xb17d7b
mov ecx, dword [esp + 0x10]
push 0x101189cc
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17d23
mov edx, dword [ebp + 0x2c]
lea eax, [esp + 0x18]
push edx
push eax
mov ecx, ebp
call fcn.00b1bab4
mov dword [ebp + 0x2c], eax
jmp 0xb17d7b
mov ecx, dword [esp + 0x10]
push 0x101189c4
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17d7b
mov edx, dword [esp + 0x18]
push 0x101189b8
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb17d61
mov eax, dword [esp + 0x18]
cmp dword [eax - 8], ebx
jne 0xb17d61
mov dword [ebp + 0x5c], 1
jmp 0xb17d7b
mov ecx, dword [ebp + 0x48]
lea edx, [esp + 0x18]
push ecx
push edx
mov ecx, ebp
mov dword [ebp + 0x5c], 2
call fcn.00b1bce4
mov dword [ebp + 0x48], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax - 8]
cmp ecx, eax
jl 0xb17b56
jmp 0xb19be3
mov edx, dword [esp + 0x10]
push 0x101189b4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18153
push esi
lea ecx, [esp + 0x1b8]
call fcn.00b4d622
mov eax, dword [esi + 4]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x1b8], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 0x1bc], ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c0], edx
mov edx, dword [esi + 0x18]
lea eax, [esi + 0x1c]
mov dword [esp + 0x1c8], ecx
push eax
lea ecx, [esp + 0x1d4]
mov dword [esp + 0x1d0], edx
call fcn.00b4d622
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x28]
mov edx, dword [esi + 0x24]
mov dword [esp + 0x1d4], ecx
mov ecx, dword [esi + 0x2c]
mov dword [esp + 0x1dc], eax
mov eax, dword [esi + 0x34]
mov dword [esp + 0x1d8], edx
mov edx, dword [esi + 0x30]
mov dword [esp + 0x1e0], ecx
mov ecx, dword [esi + 0x38]
mov dword [esp + 0x1e8], eax
mov dword [esp + 0x1e4], edx
mov edx, dword [esi + 0x3c]
lea eax, [esi + 0x40]
mov dword [esp + 0x1ec], ecx
push eax
lea ecx, [esp + 0x1f8]
mov dword [esp + 0x1f4], edx
call fcn.00b4d622
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
mov eax, dword [esi + 0x4c]
mov dword [esp + 0x1f8], ecx
mov ecx, dword [esi + 0x50]
mov dword [esp + 0x1fc], edx
mov edx, dword [esi + 0x54]
mov dword [esp + 0x200], eax
mov eax, dword [esi + 0x58]
mov dword [esp + 0x204], ecx
mov ecx, dword [esi + 0x5c]
mov dword [esp + 0x208], edx
mov edx, dword [esi + 0x60]
mov dword [esp + 0x20c], eax
mov eax, dword [esi + 0x64]
mov dword [esp + 0x210], ecx
mov ecx, dword [esi + 0x68]
mov dword [esp + 0x214], edx
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x218], eax
mov eax, dword [esi + 0x70]
mov dword [esp + 0x21c], ecx
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x220], edx
mov edx, dword [esi + 0x78]
add esi, 0x7c
mov dword [esp + 0x228], ecx
push esi
lea ecx, [esp + 0x234]
mov dword [esp + 0x228], eax
mov dword [esp + 0x230], edx
call fcn.00b4d622
lea eax, [esp + 0x1b4]
mov edi, 1
push eax
push 0x101189b4
mov ecx, ebp
mov dword [esp + 0x20c], edi
call fcn.00b19f84
mov ecx, dword [esp + 0x14]
mov esi, 0x64
mov eax, dword [ecx - 8]
cmp dword [esp + 0x1c], eax
jge 0xb18089
lea edx, [esp + 0x1c]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x134]
push eax
push ecx
mov ecx, ebp
call fcn.00b1c734
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2a0], 0xd
call fcn.00b4d622
lea ecx, [esp + 0x130]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov edx, dword [esp + 0x10]
cmp dword [edx - 8], ebx
je 0xb18072
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x10117f6c
call fcn.00b4d5a3
lea eax, [esp + 0x20]
push 0x3d
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x14c]
push ecx
push edx
mov ecx, ebp
call fcn.00b1caf4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 0xe
call fcn.00b4d622
lea ecx, [esp + 0x140]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov eax, dword [esp + 0x10]
push 0x101189ac
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb1800d
lea ecx, [esp + 0x18]
push ecx
mov ecx, ebp
call fcn.00b1d7b4
push ebx
lea edx, [esp + 0x1c]
push 0x64
push edx
mov ecx, ebp
mov edi, eax
call fcn.00b1be54
mov esi, eax
jmp 0xb18072
mov eax, dword [esp + 0x10]
push 0x101189e4
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18041
mov ecx, dword [esp + 0x204]
push ebx
lea edx, [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00b1be54
mov dword [esp + 0x204], eax
jmp 0xb18072
mov eax, dword [esp + 0x10]
push 0x101189dc
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18072
mov ecx, dword [esp + 0x1d4]
lea edx, [esp + 0x18]
push ecx
push edx
mov ecx, ebp
call fcn.00b1bce4
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax - 8]
cmp ecx, eax
jl 0xb17f38
cmp edi, ebx
je 0xb180a2
cmp dword [esp + 0x2b4], ebx
je 0xb180df
mov eax, dword [ebp + 0xb0]
add eax, esi
xor esi, esi
mov dword [ebp + 0xb0], eax
cmp dword [esp + 0x2b4], ebx
je 0xb180f9
mov edx, dword [esp + 0x204]
mov ecx, dword [ebp + 0xa8]
lea eax, [edx + 8]
cmp ecx, eax
jle 0xb180c1
mov eax, ecx
mov dword [ebp + 0xa8], eax
mov eax, dword [ebp + 0x68]
mov dword [ebp + 0xb4], eax
mov eax, dword [esp + 0x20]
add eax, esi
mov dword [esp + 0x20], eax
jmp 0xb19bf2
mov ecx, dword [ebp + 0x148]
mov edx, dword [ebp + 0x140]
push 0x64
sub ecx, edx
push esi
push ecx
call dword [0x100b238c]
mov esi, eax
cmp dword [esp + 0x2a8], ebx
jne 0xb18106
xor edi, edi
jmp 0xb18110
mov ecx, dword [esp + 0x2a8]
mov edi, dword [ecx + 4]
mov eax, dword [ebp + 0xa8]
mov ecx, dword [esp + 0x204]
cdq
sub eax, edx
mov edx, dword [esp + 0x24]
sar eax, 1
add eax, edx
mov edx, dword [esp + 0x1d4]
push ecx
mov ecx, dword [esp + 0x24]
push 1
push edx
lea edx, [esi + ecx]
push eax
push edx
push eax
push ecx
push edi
lea ecx, [ebp + 0xb8]
call fcn.00b248a4
add dword [esp + 0x20], esi
jmp 0xb19bf2
mov eax, dword [esp + 0x10]
push 0x101189a8
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19ae7
mov ecx, dword [esp + 0x10]
push 0x101189a4
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19ae7
mov edx, dword [esp + 0x10]
push 0x101189a0
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19a4c
mov eax, dword [esp + 0x10]
push 0x1011899c
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19a4c
mov ecx, dword [esp + 0x10]
push 0x10118994
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18201
push 0x10118994
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb181f4
mov dword [ebp + 0x68], ebx
mov edx, dword [esp + 0x2a8]
push edx
jmp 0xb19beb
mov eax, dword [esp + 0x10]
push 0x1011898c
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18247
push 0x1011898c
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb19be3
mov dword [ebp + 0x68], 1
jmp 0xb19be3
mov edx, dword [esp + 0x10]
push 0x10118984
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18291
push 0x10118984
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb18284
mov dword [ebp + 0x68], 2
mov eax, dword [esp + 0x2a8]
push eax
jmp 0xb19beb
mov ecx, dword [esp + 0x10]
push 0x10118978
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb182db
push 0x10118978
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb182ce
mov dword [ebp + 0x6c], 3
mov edx, dword [esp + 0x2a8]
push edx
jmp 0xb19beb
mov eax, dword [esp + 0x10]
push 0x10118974
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb1831d
push 0x10118974
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb19be3
mov dword [ebp + 0x6c], ebx
jmp 0xb19be3
mov edx, dword [esp + 0x10]
push 0x1011896c
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19a18
mov eax, dword [esp + 0x10]
push 0x10118964
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb19a18
mov ecx, dword [esp + 0x10]
push 0x1011895c
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb1839b
push 0x1011895c
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb1838e
mov dword [ebp + 0x6c], 2
mov edx, dword [esp + 0x2a8]
push edx
jmp 0xb19beb
mov eax, dword [esp + 0x10]
push 0x10118958
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18711
mov eax, dword [0x101230a8]
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], eax
mov ecx, 1
mov eax, 0x64
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], ecx
lea ecx, [esp + 0xf4]
mov byte [esp + 0x29c], 0x11
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xf0], 0xff00ff
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], ebx
call fcn.00b4d4c0
lea ecx, [esp + 0xf8]
call fcn.00b4d4c0
lea ecx, [esp + 0xbc]
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, ebp
call fcn.00b1d184
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xf4]
mov esi, dword [esp + 0xc8]
mov edx, dword [esp + 0xc4]
cmp eax, ebx
jne 0xb1848a
cmp edx, ebx
jne 0xb1848a
cmp esi, ebx
jne 0xb1848a
cmp dword [ecx - 8], ebx
je 0xb186e2
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x38], 1
je 0xb184a6
push eax
mov ecx, ebp
call fcn.00b13224
mov esi, eax
mov dword [esp + 0x30], esi
jmp 0xb184ed
cmp dword [ecx - 8], ebx
je 0xb184bb
push ecx
mov ecx, ebp
call fcn.00b13264
mov esi, eax
mov dword [esp + 0x30], esi
jmp 0xb184ed
cmp edx, ebx
je 0xb184d7
mov eax, dword [esp + 0xf8]
mov ecx, ebp
push eax
push edx
call fcn.00b13284
mov esi, eax
mov dword [esp + 0x30], esi
jmp 0xb184ed
cmp esi, ebx
je 0xb186e2
mov dword [esp + 0x30], esi
mov dword [esp + 0x38], 0
xor ebx, ebx
cmp esi, ebx
je 0xb186e2
lea ecx, [esp + 0xbc]
push ecx
mov ecx, ebp
call fcn.00b1af14
lea edx, [esp + 0x28c]
push esi
lea ecx, [ebp + 0xb8]
push edx
mov dword [esp + 0x44], eax
call fcn.00b22064
mov ecx, eax
mov eax, dword [ecx]
mov esi, dword [ecx + 4]
mov ecx, dword [esp + 0xe8]
test ecx, ecx
je 0xb18543
mov edx, dword [esp + 0xd4]
push 0x64
push edx
push eax
call dword [0x100b238c]
mov ebx, eax
jmp 0xb1854a
mov ebx, dword [esp + 0xd4]
mov eax, dword [esp + 0xec]
test eax, eax
je 0xb18568
mov eax, dword [esp + 0xd8]
push 0x64
push eax
push esi
call dword [0x100b238c]
jmp 0xb1856f
mov eax, dword [esp + 0xd8]
test ebx, ebx
mov dword [esp + 0x104], eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], eax
je 0xb185ab
test eax, eax
je 0xb185ab
mov eax, dword [esp + 0x3c]
test eax, eax
je 0xb185ab
mov eax, dword [ebp + 0x164]
mov ecx, dword [ebp + 0x168]
lea edx, [ebx + eax]
mov eax, dword [esp + 0x54]
add eax, ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x2b4]
test eax, eax
je 0xb185bf
mov eax, dword [ebp + 0x68]
mov dword [ebp + 0xb4], eax
mov ecx, dword [esp + 0x2b4]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
lea edx, [esp + 0x290]
push ecx
push edx
mov ecx, ebp
call fcn.00b1a454
mov esi, dword [eax]
test ebx, ebx
mov edi, dword [eax + 4]
je 0xb186c1
mov eax, dword [esp + 0x104]
test eax, eax
je 0xb186c1
mov eax, dword [esp + 0x2b4]
test eax, eax
jne 0xb186c1
mov ecx, dword [esp + 0x50]
sub esp, 0x10
mov eax, dword [esp + 0x64]
mov edx, esp
add ecx, esi
add eax, edi
mov dword [edx], esi
mov dword [edx + 4], edi
mov dword [edx + 8], ecx
mov ecx, ebp
mov dword [edx + 0xc], eax
call fcn.00b19ec4
mov eax, dword [ebp + 0x9c]
test eax, eax
je 0xb1865b
mov eax, dword [ebp + 0x154]
mov ecx, dword [ebp + 0x150]
cmp eax, ecx
jne 0xb1865b
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0xdc], ecx
mov edx, dword [ebp + 0x178]
mov eax, dword [ebp + 0x170]
mov ecx, dword [ebp + 0x16c]
push edx
mov edx, dword [ebp + 0x168]
push eax
mov eax, dword [ebp + 0x164]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0xec]
push eax
mov eax, dword [esp + 0x104]
push ecx
mov ecx, dword [esp + 0xfc]
push edx
mov edx, dword [esp + 0x4c]
push eax
mov eax, dword [esp + 0x124]
push ecx
mov ecx, dword [esp + 0x2cc]
push edx
push eax
push ebx
mov edx, dword [ecx + 4]
push edi
push esi
push edx
lea ecx, [ebp + 0xb8]
call fcn.00b23b64
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x20]
add ecx, eax
mov eax, dword [esp + 0x38]
test eax, eax
mov dword [esp + 0x20], ecx
je 0xb186e2
mov ecx, dword [esp + 0x30]
push ecx
call dword [0x100b2190]
lea ecx, [esp + 0xf8]
mov byte [esp + 0x29c], 0x12
call fcn.00b4d535
lea ecx, [esp + 0xf4]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
xor ebx, ebx
jmp 0xb19bf2
mov edx, dword [esp + 0x10]
push 0x10118950
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18a33
mov eax, dword [0x101230a8]
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1b0], eax
mov edi, dword [0x100b25a0]
xor esi, esi
push 0xb
mov byte [esp + 0x2a0], 0x13
mov dword [esp + 0x17c], esi
mov dword [esp + 0x180], esi
mov dword [esp + 0x184], esi
call edi
push 0xc
mov dword [esp + 0x190], eax
mov dword [esp + 0x1a4], esi
call edi
lea ecx, [esp + 0x1ac]
mov dword [esp + 0x190], eax
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x194], esi
mov dword [esp + 0x198], esi
call fcn.00b4d4c0
lea ecx, [esp + 0x1b0]
call fcn.00b4d4c0
lea eax, [esp + 0x174]
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, ebp
call fcn.00b1d184
mov edx, dword [esp + 0x178]
mov ebx, dword [esp + 0x180]
mov edi, dword [esp + 0x17c]
cmp edx, esi
mov esi, dword [esp + 0x1ac]
jne 0xb187f4
test edi, edi
jne 0xb187f4
test ebx, ebx
jne 0xb187f4
mov eax, dword [esi - 8]
test eax, eax
je 0xb18a04
mov eax, dword [esp + 0x18c]
mov ecx, dword [esp + 0x190]
test edx, edx
mov dword [esp + 0x38], 1
je 0xb1881c
push ecx
push eax
push edx
mov ecx, ebp
call fcn.00b13144
mov ebx, eax
jmp 0xb1885b
mov edx, dword [esi - 8]
test edx, edx
je 0xb18831
push ecx
push eax
push esi
mov ecx, ebp
call fcn.00b13184
mov ebx, eax
jmp 0xb1885b
test edi, edi
je 0xb1884b
mov edx, dword [esp + 0x1b0]
push edx
push ecx
push eax
push edi
mov ecx, ebp
call fcn.00b131a4
mov ebx, eax
jmp 0xb1885b
test ebx, ebx
je 0xb18a04
mov dword [esp + 0x38], 0
test ebx, ebx
je 0xb18a04
lea eax, [esp + 0x174]
mov ecx, ebp
push eax
call fcn.00b1af14
lea edx, [esp + 0x25c]
mov esi, eax
push ebx
lea ecx, [ebp + 0xb8]
push edx
mov dword [esp + 0x3c], esi
call fcn.00b21fe4
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov edi, ecx
mov eax, edx
test ecx, ecx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], eax
je 0xb188d5
test edx, edx
je 0xb188d5
test esi, esi
je 0xb188d5
mov eax, dword [ebp + 0x164]
mov ecx, dword [ebp + 0x168]
mov edx, edi
add edx, eax
mov eax, dword [esp + 0x4c]
add eax, ecx
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x2b4]
test eax, eax
je 0xb188e9
mov ecx, dword [ebp + 0x68]
mov dword [ebp + 0xb4], ecx
mov edx, dword [esp + 0x2b4]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
push eax
push ecx
lea eax, [esp + 0x260]
push edx
push eax
mov ecx, ebp
call fcn.00b1a454
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov eax, dword [esp + 0xa8]
test eax, eax
je 0xb189e7
mov eax, dword [esp + 0xac]
test eax, eax
je 0xb189e7
mov eax, dword [esp + 0x2b4]
test eax, eax
jne 0xb189e7
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
sub esp, 0x10
lea eax, [edi + ecx]
lea ecx, [esi + edx]
mov edx, esp
mov dword [edx], esi
mov dword [edx + 4], edi
mov dword [edx + 8], ecx
mov ecx, ebp
mov dword [edx + 0xc], eax
call fcn.00b19ec4
mov eax, dword [ebp + 0x9c]
test eax, eax
je 0xb1898e
mov eax, dword [ebp + 0x154]
mov ecx, dword [ebp + 0x150]
cmp eax, ecx
jne 0xb1898e
mov ecx, dword [esp + 0x198]
mov dword [esp + 0x194], ecx
mov edx, dword [ebp + 0x178]
mov eax, dword [ebp + 0x170]
mov ecx, dword [ebp + 0x16c]
push edx
mov edx, dword [ebp + 0x168]
push eax
mov eax, dword [ebp + 0x164]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x1a4]
push eax
mov eax, dword [esp + 0xc0]
push ecx
mov ecx, dword [esp + 0xc0]
push edx
mov edx, dword [esp + 0x2c4]
push ebx
push eax
push ecx
mov eax, dword [edx + 4]
push edi
push esi
push eax
lea ecx, [ebp + 0xb8]
call fcn.00b23df4
mov eax, dword [esp + 0x38]
test eax, eax
je 0xb189f6
push ebx
call dword [0x100b250c]
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x20]
add eax, ecx
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x29c], 0x14
call fcn.00b4d535
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
xor ebx, ebx
jmp 0xb19bf2
mov edx, dword [esp + 0x10]
push 0x10118948
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb193a5
mov eax, dword [esp + 0x10]
push 0x10118940
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb193a5
mov ecx, dword [esp + 0x10]
push 0x10118938
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18d88
push 0x1013ff54
lea ecx, [esp + 0x9c]
xor esi, esi
call fcn.00b4d5a3
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov byte [esp + 0x29c], 0x17
mov eax, dword [edx - 8]
cmp ecx, eax
jge 0xb18d6f
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x174]
push ecx
push edx
mov ecx, ebp
call fcn.00b1c734
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2a0], 0x18
call fcn.00b4d622
lea ecx, [esp + 0x170]
mov byte [esp + 0x29c], 0x17
call fcn.00b4d535
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0xb18c26
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x10117f6c
call fcn.00b4d5a3
lea ecx, [esp + 0x20]
push 0x3d
lea edx, [esp + 0x1c]
push ecx
lea eax, [esp + 0x148]
push edx
push eax
mov ecx, ebp
call fcn.00b1caf4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 0x19
call fcn.00b4d622
lea ecx, [esp + 0x13c]
mov byte [esp + 0x29c], 0x17
call fcn.00b4d535
mov ecx, dword [esp + 0x10]
push 0x10118930
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18b78
push ebx
lea edx, [esp + 0x1c]
push esi
push edx
mov ecx, ebp
call fcn.00b1be54
mov esi, eax
jmp 0xb18c26
mov eax, dword [esp + 0x10]
push 0x10118928
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18ba3
push ebx
lea ecx, [esp + 0x1c]
push ebx
push ecx
mov ecx, ebp
call fcn.00b1be54
mov esi, eax
jmp 0xb18c26
mov edx, dword [esp + 0x10]
push 0x10118920
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb18c26
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00b4d2aa
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
mov byte [esp + 0x2a8], 0x1a
call fcn.00b4d2aa
lea eax, [esp + 0x110]
mov ecx, ebp
push eax
mov byte [esp + 0x2a8], 0x17
call fcn.00b1d594
push eax
lea ecx, [esp + 0x9c]
mov byte [esp + 0x2a0], 0x1b
call fcn.00b4d622
lea ecx, [esp + 0x108]
mov byte [esp + 0x29c], 0x17
call fcn.00b4d535
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
jl 0xb18aaf
cmp esi, ebx
je 0xb18d6f
push 0x1013ff54
lea ecx, [esp + 0x48]
call fcn.00b4d5a3
lea edx, [esp + 0x148]
push esi
push edx
mov ecx, ebp
mov byte [esp + 0x2a4], 0x1c
call fcn.00b13304
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x2a0], 0x1d
call fcn.00b4d622
lea ecx, [esp + 0x148]
mov byte [esp + 0x29c], 0x1c
call fcn.00b4d535
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
call fcn.00b1def4
mov eax, dword [esp + 0x44]
mov ecx, dword [eax - 8]
cmp ecx, ebx
je 0xb18d5e
lea edx, [esp + 0x10c]
push edx
push ecx
push eax
mov eax, dword [esp + 0x2b4]
mov ecx, dword [eax + 8]
push ecx
call dword [0x100b20fc]
cmp dword [esp + 0x2b4], ebx
je 0xb18cd5
mov edx, dword [ebp + 0x68]
mov dword [ebp + 0xb4], edx
mov eax, dword [esp + 0x2b4]
mov ebx, dword [esp + 0x110]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push eax
push ebx
push ecx
lea eax, [esp + 0x280]
push edx
push eax
mov ecx, ebp
call fcn.00b1a3a4
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x2b4]
test eax, eax
jne 0xb18d4b
mov ecx, dword [esp + 0x10c]
sub esp, 0x10
mov edx, esp
lea eax, [esi + ecx]
lea ecx, [edi + ebx]
mov dword [edx], esi
mov dword [edx + 4], edi
mov dword [edx + 8], eax
mov dword [edx + 0xc], ecx
mov ecx, ebp
call fcn.00b19ec4
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x2a8]
mov ecx, dword [eax - 8]
mov ebx, dword [edx]
push ecx
push eax
push edi
push esi
mov ecx, edx
call dword [ebx + 0x5c]
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x20]
add ecx, eax
xor ebx, ebx
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x44]
mov byte [esp + 0x29c], 0x17
call fcn.00b4d535
lea ecx, [esp + 0x98]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
jmp 0xb19bf2
mov ecx, dword [esp + 0x10]
push 0x101187dc
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov edx, dword [esp + 0x10]
push 0x1011891c
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov eax, dword [esp + 0x10]
push 0x10118918
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov ecx, dword [esp + 0x10]
push 0x10118914
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov edx, dword [esp + 0x10]
push 0x10118910
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov eax, dword [esp + 0x10]
push 0x1011890c
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov ecx, dword [esp + 0x10]
push 0x10118908
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov edx, dword [esp + 0x10]
push 0x10118904
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov eax, dword [esp + 0x10]
push 0x101188fc
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov ecx, dword [esp + 0x10]
push 0x101188f8
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov edx, dword [esp + 0x10]
push 0x101188f4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov eax, dword [esp + 0x10]
push 0x101188ec
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov ecx, dword [esp + 0x10]
push 0x101188e8
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov edx, dword [esp + 0x10]
push 0x101188e4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1936b
mov eax, dword [esp + 0x10]
push 0x101188dc
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb191c3
mov ecx, dword [esp + 0x10]
push 0x101188d8
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb191c3
mov edx, dword [esp + 0x10]
push 0x101188d4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb19bf2
push 0x101188cc
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb191b6
lea edi, [ebp + 0xa0]
mov dword [ebp + 0x9c], 2
mov ecx, edi
call fcn.00b4d4c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax - 8]
cmp ecx, eax
jge 0xb19177
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x118]
push edx
push eax
mov ecx, ebp
call fcn.00b1c734
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2a0], 0x24
call fcn.00b4d622
lea ecx, [esp + 0x114]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov ecx, dword [esp + 0x10]
cmp dword [ecx - 8], ebx
je 0xb19164
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x10117f6c
call fcn.00b4d5a3
lea edx, [esp + 0x20]
push 0x3d
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x15c]
push eax
push ecx
mov ecx, ebp
call fcn.00b1caf4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 0x25
call fcn.00b4d622
lea ecx, [esp + 0x150]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov edx, dword [esp + 0x10]
push 0x101188c4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb1905a
mov eax, dword [esp + 0x10]
push 0x101188c0
push eax
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb190c9
push ecx
mov dword [ebp + 0x9c], 1
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x1013ff54
call fcn.00b4d5a3
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
mov byte [esp + 0x2a8], 0x26
call fcn.00b4d2aa
lea eax, [esp + 0x128]
mov ecx, ebp
push eax
mov byte [esp + 0x2a8], 5
call fcn.00b1d594
push eax
mov ecx, edi
mov byte [esp + 0x2a0], 0x27
call fcn.00b4d622
lea ecx, [esp + 0x120]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov ecx, dword [esp + 0x10]
push 0x101188bc
push ecx
call fcn.00b3cd48
add esp, 8
test eax, eax
je 0xb190f5
mov edx, dword [esp + 0x10]
push 0x101188b4
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb19164
push ecx
mov dword [ebp + 0x9c], 2
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x1013ff54
call fcn.00b4d5a3
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
mov byte [esp + 0x2a8], 0x28
call fcn.00b4d2aa
lea ecx, [esp + 0x160]
mov byte [esp + 0x2a4], 5
push ecx
mov ecx, ebp
call fcn.00b1d594
push eax
mov ecx, edi
mov byte [esp + 0x2a0], 0x29
call fcn.00b4d622
lea ecx, [esp + 0x158]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [edx - 8]
cmp ecx, eax
jl 0xb18f90
mov edx, dword [ebp + 0x154]
mov ecx, dword [ebp + 0x150]
inc edx
push esi
mov eax, edx
mov dword [ebp + 0x154], edx
cmp eax, ecx
jne 0xb191aa
push 0x101188ac
mov ecx, ebp
call fcn.00b19f84
mov eax, dword [esp + 0x2a8]
push eax
jmp 0xb19beb
push 0x101188a4
mov ecx, ebp
call fcn.00b19f84
mov eax, dword [esp + 0x2a8]
push eax
jmp 0xb19beb
push 0x101188dc
mov ecx, esi
call fcn.00b4d672
cmp edi, ebx
jne 0xb1934d
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x130]
push edx
push eax
mov ecx, ebp
call fcn.00b1c734
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2a0], 0x1f
call fcn.00b4d622
lea ecx, [esp + 0x12c]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov ecx, dword [esp + 0x10]
cmp dword [ecx - 8], ebx
je 0xb19bf2
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x10117f6c
call fcn.00b4d5a3
lea edx, [esp + 0x20]
push 0x3d
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x108]
push eax
push ecx
mov ecx, ebp
call fcn.00b1caf4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 0x20
call fcn.00b4d622
lea ecx, [esp + 0xfc]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
mov edx, dword [esp + 0x10]
push 0x1011889c
push edx
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb19bf2
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x1013ff54
call fcn.00b4d5a3
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
mov byte [esp + 0x2a8], 0x21
call fcn.00b4d2aa
lea ecx, [esp + 0xac]
mov byte [esp + 0x2a4], 5
push ecx
mov ecx, ebp
call fcn.00b1d594
push ebx
mov ecx, ebp
mov byte [esp + 0x2a0], 0x22
call fcn.00b19fb4
test eax, eax
je 0xb19334
lea edx, [esp + 0xa4]
lea eax, [esp + 0x168]
push edx
push 0x10118898
push eax
call fcn.00b4d7f2
mov eax, dword [eax]
push esi
push eax
mov ecx, ebp
mov byte [esp + 0x2a4], 0x23
call fcn.00b19f84
lea ecx, [esp + 0x168]
mov byte [esp + 0x29c], 0x22
call fcn.00b4d535
mov ecx, dword [esp + 0x2a8]
push ecx
mov ecx, ebp
call fcn.00b1a2c4
lea ecx, [esp + 0xa4]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
jmp 0xb19bf2
push 1
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
mov edx, dword [esp + 0x2a8]
push edx
jmp 0xb19beb
lea eax, [esp + 0x10]
mov ecx, esi
push eax
call fcn.00b4d622
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb19398
mov ecx, dword [esp + 0x10]
push esi
push ecx
mov ecx, ebp
call fcn.00b19f84
mov edx, dword [esp + 0x2a8]
push edx
jmp 0xb19beb
mov eax, dword [0x101230a8]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov esi, dword [0x100b25a0]
mov eax, 0x64
mov edi, 1
push 0xb
mov byte [esp + 0x2a0], 0x15
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x74], eax
mov dword [esp + 0x88], edi
mov dword [esp + 0x78], eax
mov dword [esp + 0x8c], edi
mov dword [esp + 0x84], ebx
mov dword [esp + 0x90], 0xff00ff
call esi
push 0xc
mov dword [esp + 0x6c], eax
call esi
lea ecx, [esp + 0x90]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
call fcn.00b4d4c0
lea ecx, [esp + 0x94]
call fcn.00b4d4c0
lea eax, [esp + 0x58]
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, ebp
call fcn.00b1d184
lea edx, [esp + 0x58]
mov ecx, ebp
push edx
call fcn.00b1af14
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x64]
mov esi, dword [esp + 0x60]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x5c]
cmp eax, ebx
jne 0xb19698
cmp esi, ebx
jne 0xb19698
cmp edx, ebx
jne 0xb19698
cmp dword [ecx - 8], ebx
jne 0xb19698
lea eax, [ebp + 0x100]
cmp eax, ebx
je 0xb199e9
mov ecx, dword [eax + 4]
test ecx, ecx
je 0xb199e9
mov eax, dword [ebp + 0x104]
push eax
call dword [0x100b2028]
mov ecx, dword [esp + 0x58]
cmp ecx, eax
jge 0xb199e9
push 0
push ecx
mov ecx, dword [ebp + 0x104]
push ecx
call dword [0x100b2020]
test eax, eax
mov dword [esp + 0x38], eax
je 0xb199e9
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x74]
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x11c], esi
test eax, eax
je 0xb19507
mov edx, dword [ebp + 0x108]
push 0x64
push ebx
push edx
call dword [0x100b238c]
mov ebx, eax
mov eax, dword [esp + 0x88]
test eax, eax
je 0xb1952f
mov eax, dword [esp + 0x74]
mov ecx, dword [ebp + 0x10c]
push 0x64
push eax
push ecx
call dword [0x100b238c]
mov esi, eax
mov dword [esp + 0x11c], esi
mov ecx, esi
mov dword [esp + 0x9c], ebx
test ebx, ebx
mov dword [esp + 0xa0], ecx
je 0xb1956d
test esi, esi
je 0xb1956d
mov eax, dword [esp + 0x3c]
test eax, eax
je 0xb1956d
mov eax, dword [ebp + 0x164]
add eax, ebx
mov dword [esp + 0x9c], eax
mov eax, dword [ebp + 0x168]
add ecx, eax
mov dword [esp + 0xa0], ecx
mov eax, dword [esp + 0x2b4]
test eax, eax
je 0xb19581
mov edx, dword [ebp + 0x68]
mov dword [ebp + 0xb4], edx
mov eax, dword [esp + 0x2b4]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x270]
push eax
push ecx
mov ecx, ebp
call fcn.00b1a454
mov esi, dword [eax]
test ebx, ebx
mov edi, dword [eax + 4]
je 0xb19682
mov eax, dword [esp + 0x11c]
test eax, eax
je 0xb19682
mov eax, dword [esp + 0x2b4]
test eax, eax
jne 0xb19682
mov edx, dword [esp + 0x9c]
sub esp, 0x10
mov ecx, dword [esp + 0xb0]
lea eax, [esi + edx]
mov edx, esp
add ecx, edi
mov dword [edx], esi
mov dword [edx + 4], edi
mov dword [edx + 8], eax
mov dword [edx + 0xc], ecx
mov ecx, ebp
call fcn.00b19ec4
mov eax, dword [ebp + 0x9c]
test eax, eax
je 0xb19621
mov eax, dword [ebp + 0x154]
mov ecx, dword [ebp + 0x150]
cmp eax, ecx
jne 0xb19621
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x78], ecx
mov edx, dword [ebp + 0x178]
mov eax, dword [ebp + 0x170]
mov ecx, dword [ebp + 0x16c]
push edx
mov edx, dword [ebp + 0x168]
push eax
mov eax, dword [ebp + 0x164]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x88]
push eax
mov eax, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x134]
push edx
mov edx, dword [esp + 0x2c4]
push eax
push ecx
push ebx
mov eax, dword [edx + 4]
push edi
push esi
push eax
lea ecx, [ebp + 0xb8]
call fcn.00b23df4
mov ecx, dword [esp + 0x38]
push ecx
call dword [0x100b250c]
mov edx, dword [esp + 0x9c]
mov eax, dword [esp + 0x20]
add eax, edx
mov dword [esp + 0x20], eax
jmp 0xb199e9
cmp eax, ebx
mov dword [esp + 0x34], edi
je 0xb196aa
push eax
mov ecx, ebp
call fcn.00b13224
jmp 0xb196df
cmp dword [ecx - 8], ebx
je 0xb196b9
push ecx
mov ecx, ebp
call fcn.00b13264
jmp 0xb196df
cmp esi, ebx
je 0xb196cf
mov eax, dword [esp + 0x94]
mov ecx, ebp
push eax
push esi
call fcn.00b13284
jmp 0xb196df
cmp edx, ebx
je 0xb199e9
xor ebx, ebx
mov eax, edx
mov dword [esp + 0x34], ebx
cmp eax, ebx
mov dword [esp + 0x30], eax
je 0xb199e9
mov eax, dword [esp + 0x68]
test eax, eax
je 0xb199e9
mov eax, dword [esp + 0x6c]
test eax, eax
je 0xb199e9
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x244]
push edx
lea ecx, [ebp + 0xb8]
push eax
call fcn.00b22064
mov ebx, dword [eax]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x84]
test eax, eax
mov dword [esp + 0x240], ecx
je 0xb1974c
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x68]
push 0x64
push edx
push eax
call dword [0x100b238c]
mov ecx, eax
mov dword [esp + 0x70], ecx
jmp 0xb19750
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x88]
test eax, eax
je 0xb19777
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x6c]
push 0x64
push ecx
push edx
call dword [0x100b238c]
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x74], eax
jmp 0xb1977b
mov eax, dword [esp + 0x74]
mov edi, ecx
mov esi, eax
test ecx, ecx
mov dword [esp + 0x234], edi
je 0xb197ad
test eax, eax
je 0xb197ad
mov edx, dword [esp + 0x3c]
test edx, edx
je 0xb197ad
mov edi, dword [ebp + 0x164]
mov esi, dword [ebp + 0x168]
add edi, ecx
add esi, eax
mov dword [esp + 0x234], edi
mov eax, ebx
mov ebx, dword [esp + 0x58]
cdq
idiv dword [esp + 0x68]
mov ecx, eax
mov eax, dword [esp + 0x240]
cdq
idiv dword [esp + 0x6c]
mov dword [esp + 0x2c], ecx
mov edx, eax
imul edx, ecx
cmp ebx, edx
jge 0xb199d6
test ecx, ecx
je 0xb199d6
test eax, eax
je 0xb199d6
mov ebx, dword [esp + 0x2b4]
test ebx, ebx
je 0xb197fb
mov eax, dword [ebp + 0x68]
mov dword [ebp + 0xb4], eax
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push ebx
push esi
push ecx
lea eax, [esp + 0x258]
push edx
push eax
mov ecx, ebp
call fcn.00b1a454
mov edx, dword [esp + 0x70]
mov ecx, eax
test edx, edx
mov eax, dword [ecx]
mov dword [esp + 0x124], eax
mov ecx, dword [ecx + 4]
mov dword [esp + 0x128], ecx
je 0xb199d2
mov edx, dword [esp + 0x74]
test edx, edx
je 0xb199d2
test ebx, ebx
jne 0xb199d2
sub esp, 0x10
add edi, eax
mov edx, esp
add esi, ecx
mov dword [edx], eax
mov dword [edx + 4], ecx
mov ecx, ebp
mov dword [edx + 8], edi
mov dword [edx + 0xc], esi
call fcn.00b19ec4
mov eax, dword [ebp + 0x9c]
test eax, eax
je 0xb19888
mov eax, dword [ebp + 0x154]
mov ecx, dword [ebp + 0x150]
cmp eax, ecx
jne 0xb19888
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x78], ecx
mov ebx, dword [esp + 0x2a8]
mov edi, dword [0x100b20e0]
mov edx, dword [ebx + 4]
push edx
call edi
mov esi, eax
mov eax, dword [ebx + 4]
push eax
call edi
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x68]
mov edi, eax
mov eax, dword [ebx + 4]
push ecx
push edx
push eax
call dword [0x100b2094]
mov ecx, dword [esp + 0x30]
mov ebx, eax
push ecx
push esi
call dword [0x100b20a0]
push ebx
push edi
mov dword [esp + 0x40], eax
call dword [0x100b20a0]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x58]
xor edx, edx
div ecx
push 0xcc0020
xor edx, edx
imul eax, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x60]
div ecx
mov eax, dword [esp + 0x70]
imul edx, eax
push edx
mov edx, dword [esp + 0x78]
push esi
push edx
push eax
push 0
push 0
push edi
call dword [0x100b20dc]
mov eax, dword [esp + 0x38]
push eax
push esi
call dword [0x100b20a0]
mov ecx, dword [esp + 0xb0]
push ecx
push edi
call dword [0x100b20a0]
push esi
mov esi, dword [0x100b20d0]
call esi
push edi
call esi
mov edx, dword [esp + 0x38]
mov esi, dword [0x100b2190]
push edx
call esi
mov eax, dword [esp + 0xb0]
push eax
call esi
mov ecx, dword [ebp + 0x178]
mov edx, dword [ebp + 0x170]
mov eax, dword [ebp + 0x16c]
push ecx
mov ecx, dword [ebp + 0x168]
push edx
mov edx, dword [ebp + 0x164]
push eax
mov eax, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x88]
push edx
push eax
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0x98]
push ecx
mov ecx, dword [esp + 0x90]
push edx
mov edx, dword [esp + 0x90]
push eax
mov eax, dword [esp + 0x14c]
push ebx
push ecx
mov ecx, dword [esp + 0x150]
push edx
mov edx, dword [esp + 0x2d8]
push eax
push ecx
lea ecx, [ebp + 0xb8]
mov eax, dword [edx + 4]
push eax
call fcn.00b23b64
push ebx
call esi
mov edi, dword [esp + 0x234]
add dword [esp + 0x20], edi
mov eax, dword [esp + 0x34]
test eax, eax
je 0xb199e9
mov ecx, dword [esp + 0x30]
push ecx
call dword [0x100b2190]
lea ecx, [esp + 0x94]
mov byte [esp + 0x29c], 0x16
call fcn.00b4d535
lea ecx, [esp + 0x90]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
xor ebx, ebx
jmp 0xb19bf2
push 0x10118964
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb19a3f
mov dword [ebp + 0x6c], 1
mov edx, dword [esp + 0x2a8]
push edx
jmp 0xb19beb
push 0x10118894
mov ecx, esi
call fcn.00b4d672
mov eax, dword [esp + 0x10]
push 0x1011899c
push eax
mov esi, 1
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb19ad5
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x10117f6c
call fcn.00b4d5a3
lea ecx, [esp + 0x20]
push 0x3d
lea edx, [esp + 0x1c]
push ecx
lea eax, [esp + 0x144]
push edx
push eax
mov ecx, ebp
call fcn.00b1caf4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 0x10
call fcn.00b4d622
lea ecx, [esp + 0x138]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
push ebx
lea ecx, [esp + 0x1c]
push esi
push ecx
mov ecx, ebp
call fcn.00b1be54
mov esi, eax
lea edx, [esp + 0x20]
push esi
push edx
mov ecx, ebp
call fcn.00b1a6e4
jmp 0xb19bf2
push 0x10118888
mov ecx, esi
call fcn.00b4d672
mov eax, dword [esp + 0x10]
push 0x101189a8
push eax
mov esi, 1
call fcn.00b3cd48
add esp, 8
test eax, eax
jne 0xb19b70
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x10117f6c
call fcn.00b4d5a3
lea ecx, [esp + 0x20]
push 0x3d
lea edx, [esp + 0x1c]
push ecx
lea eax, [esp + 0x170]
push edx
push eax
mov ecx, ebp
call fcn.00b1caf4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 0xf
call fcn.00b4d622
lea ecx, [esp + 0x164]
mov byte [esp + 0x29c], 5
call fcn.00b4d535
push ebx
lea ecx, [esp + 0x1c]
push esi
push ecx
mov ecx, ebp
call fcn.00b1be54
mov esi, eax
mov edx, dword [esp + 0x2b4]
lea eax, [esp + 0x20]
push edx
push esi
push eax
mov ecx, ebp
call fcn.00b1a564
jmp 0xb19bf2
push 0x1011887c
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb19bb0
mov eax, dword [ebp + 0x38]
xor ecx, ecx
cmp eax, ebx
sete cl
mov dword [ebp + 0x38], ecx
mov edx, dword [esp + 0x2a8]
push edx
jmp 0xb19beb
push 0x10118874
mov ecx, esi
call fcn.00b4d672
push edi
mov ecx, ebp
call fcn.00b19fb4
test eax, eax
je 0xb19bf2
cmp edi, ebx
jne 0xb19be3
mov ecx, dword [ebp + 0x30]
xor eax, eax
cmp ecx, ebx
sete al
mov dword [ebp + 0x30], eax
mov ecx, dword [esp + 0x2a8]
push ecx
mov ecx, ebp
call fcn.00b1a2c4
mov edx, dword [esp + 0x2ac]
mov ecx, dword [esp + 0x40]
mov eax, dword [edx]
mov eax, dword [eax - 8]
cmp ecx, eax
jl 0xb1771d
mov ecx, dword [esp + 0x2b4]
lea edx, [esp + 0x20]
push ecx
push 1
push edx
mov ecx, ebp
call fcn.00b1a564
mov eax, dword [esp + 0x24]
mov ecx, dword [ebp + 0x144]
mov edx, dword [esp + 0x144]
sub eax, ecx
mov dword [ebp + 0x130], eax
mov eax, dword [ebp + 0x134]
cmp edx, eax
mov dword [esp + 0x40], edx
jge 0xb19caf
lea ebx, [ebp + 0xa4]
mov eax, dword [ebp + 0x20c]
lea ecx, [edx + edx*4]
mov edi, ebx
lea esi, [eax + ecx*4]
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0xb0]
test eax, eax
je 0xb19ca0
mov edx, dword [ebp + 0x12c]
push 0x64
push edx
push eax
lea ebx, [ebp + 0xa4]
call dword [0x100b238c]
mov esi, dword [ebx]
mov ecx, dword [ebp + 0x12c]
add esi, eax
mov eax, esi
mov dword [ebx], esi
cmp ecx, eax
jle 0xb19c96
mov eax, ecx
mov edx, dword [esp + 0x40]
mov dword [ebp + 0x12c], eax
mov eax, dword [ebp + 0x134]
inc edx
cmp edx, eax
mov dword [esp + 0x40], edx
jl 0xb19c4d
mov esi, dword [esp + 0x2a4]
mov eax, dword [ebp + 0x12c]
mov dword [esi], eax
mov ecx, dword [ebp + 0x130]
mov dword [esi + 4], ecx
lea ecx, [esp + 0x230]
mov byte [esp + 0x29c], 0x2c
call fcn.00b4d535
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x29c], 0x2b
call fcn.00b4d535
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x29c], 0x2a
call fcn.00b4d535
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x29c], 4
call fcn.00b4d535
lea ecx, [esp + 0x18]
mov byte [esp + 0x29c], 3
call fcn.00b4d535
lea ecx, [esp + 0x10]
mov byte [esp + 0x29c], 2
call fcn.00b4d535
lea ecx, [esp + 0x14]
mov byte [esp + 0x29c], 1
call fcn.00b4d535
lea ecx, [esp + 0x28]
mov dword [esp + 0x29c], 0xffffffff
call fcn.00b4d535
mov eax, esi
mov ecx, dword [esp + 0x294]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x290
ret 0x14