Function at 0x10099b27
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc4
mov dword [ebp - 4], 0
push 8
call fcn.1014defa
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jne 0x1009e83e
call fcn.100565f1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x15
je 0x10099bab
call fcn.10041d88
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 6
je 0x10099bab
xor eax, eax
jmp 0x10099bb0
mov eax, 1
test eax, eax
je 0x10099bf5
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x16d
push 1
push 0x15a
push 1
push dword [0xc]
call fcn.10043833
push 0x7d0
call fcn.10040d09
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x14
push 1
push 0x32
push 1
push dword [0xc]
call fcn.10043833
call fcn.1008f48f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jne 0x10099c68
push 0x12c
call fcn.10040d09
push 0
push 0xc030
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.10040da9
jmp 0x10099c28
push 0
push 0xc0bd
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
push 0xdac
call fcn.10040d09
mov eax, 0xc046
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.10095d2b
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10099cb3
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 1
je 0x10099cef
mov eax, 0xc055
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.10095d2b
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10099ce1
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x24], 1
je 0x10099cef
xor eax, eax
jmp 0x10099cf4
mov eax, 1
test eax, eax
je 0x1009a30a
push 0
push 0x83e
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x10099da7
call fcn.10095e1a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x45e
jne 0x10099d77
mov eax, 0x83e
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1009602f
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10099d72
push ebx
call fcn.1014df0c
add esp, 4
jmp 0x10099d98
mov eax, 0x83e
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.10051b8f
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10099d98
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
jmp 0x1009a30a
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10099dd3
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10099df9
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
cmp dword [0xcc], eax
jle 0x1009a2b4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0xc068
push dword [ebp - 0x14]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10099e45
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x10099e70
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10099e96
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x1c]
push 0xc07b
push dword [ebp - 0x24]
push 0x4c9
push dword [ebp - 0x20]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10099f4b
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10099f5b
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10099f6b
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x10099f7e
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10099fab
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10099ff3
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a019
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xf5]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0
push dword [ebp - 0x2c]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009a076
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x14]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a0be
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009a10c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009a11c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009a12c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009a13c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [0xc8]
call fcn.10041118
push ebx
push ecx
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009a175
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a19b
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
dec eax
jns 0x1009a1b8
push 0x710
push 0x4072d90
push 4
call fcn.1014df00
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x1009a1d5
push 0x710
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4c9
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
push 1
lea eax, [ebp - 8]
push eax
call fcn.1004ba42
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009a215
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 0
cmp eax, ecx
jl 0x1009a23d
push 0x73f
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
push 0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 1
cmp eax, ecx
jl 0x1009a28a
push 0x76f
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
push 0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x1009a30a
push 0
push 0xc08a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.1004b1cc
mov ebx, 6
call fcn.1004fd48
push 0x80000301
push 0
push 0
push 0x80000004
push 0
push 0xc0a6
push 4
mov ebx, 0x300
call fcn.1014df12
add esp, 0x34
mov eax, 0xc0d2
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009a323
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009a367
push 0x936
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x14], eax
push 0
push dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a3a4
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xc134
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009a3ee
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a414
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0xffffffff
je 0x1009a485
mov eax, 0xc13f
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009a437
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009a47b
push 0xb61
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xc26e
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009a4cf
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a4f5
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0xffffffff
je 0x1009ab52
mov eax, 0xc277
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009a518
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009a55c
push 0x1389
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1009a5ea
call fcn.10095e1a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x45e
jne 0x1009a5ba
mov eax, 0x829
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1009602f
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a5b5
push ebx
call fcn.1014df0c
add esp, 4
jmp 0x1009a5db
mov eax, 0x829
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.10051b8f
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a5db
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
jmp 0x1009ab4d
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009a616
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a63c
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
cmp dword [0xcc], eax
jle 0x1009aaf7
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0xc068
push dword [ebp - 0x14]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a688
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x1009a6b3
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009a6d9
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x1c]
push 0xc318
push dword [ebp - 0x24]
push 0x4c9
push dword [ebp - 0x20]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009a78e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009a79e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009a7ae
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1009a7c1
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009a7ee
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009a836
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a85c
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xf5]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0
push dword [ebp - 0x2c]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009a8b9
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x14]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a901
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009a94f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009a95f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009a96f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009a97f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [0xc8]
call fcn.10041118
push ebx
push ecx
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009a9b8
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009a9de
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
dec eax
jns 0x1009a9fb
push 0x1749
push 0x4072d90
push 4
call fcn.1014df00
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x1009aa18
push 0x1749
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4c9
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
push 1
lea eax, [ebp - 8]
push eax
call fcn.1004ba42
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009aa58
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 0
cmp eax, ecx
jl 0x1009aa80
push 0x1778
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
push 0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 1
cmp eax, ecx
jl 0x1009aacd
push 0x17a8
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
push 0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x1009ab4d
push 0
push 0xc08a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.1004b1cc
mov ebx, 6
call fcn.1004fd48
push 0x80000301
push 0
push 0
push 0x80000004
push 0
push 0xc0a6
push 4
mov ebx, 0x300
call fcn.1014df12
add esp, 0x34
jmp 0x1009bcb9
mov eax, 0xc35b
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009ab6b
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009abaf
push 0x192a
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x14], eax
push 0
push dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009abec
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xc32f
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009ac36
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009ac5c
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0xffffffff
je 0x1009ac7c
push dword [0x1c]
call fcn.1004c4bb
push dword [0x1c]
call fcn.1004c4bb
call fcn.10041bde
mov dword [ebp - 0x14], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x833
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009acb5
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009acdb
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0xffffffff
je 0x1009b3de
inc dword [0x2f4]
push 0x80000301
push 0
push dword [0x2f4]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push 0x833
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009ad35
push ebx
call fcn.1014df0c
add esp, 4
push 0
push dword [ebp - 0x18]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009ad60
push ebx
call fcn.1014df0c
add esp, 4
push 0x3e8
call fcn.10040d09
mov eax, 0xc277
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009ad83
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009adc7
push 0x1d40
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0x7d0
call fcn.10040d09
cmp dword [0x2f4], 0x32
jl 0x1009b3d9
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1009ae6c
call fcn.10095e1a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x45e
jne 0x1009ae3c
mov eax, 0x833
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1009602f
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009ae37
push ebx
call fcn.1014df0c
add esp, 4
jmp 0x1009ae5d
mov eax, 0x833
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.10051b8f
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009ae5d
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
jmp 0x1009b3d9
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009ae98
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009aebe
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
cmp dword [0xcc], eax
jle 0x1009b379
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0xc068
push dword [ebp - 0x14]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009af0a
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x1009af35
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009af5b
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x1c]
push 0xc39f
push dword [ebp - 0x24]
push 0x4c9
push dword [ebp - 0x20]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009b010
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009b020
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009b030
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1009b043
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009b070
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009b0b8
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b0de
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xf5]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0
push dword [ebp - 0x2c]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009b13b
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x14]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b183
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009b1d1
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009b1e1
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009b1f1
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009b201
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [0xc8]
call fcn.10041118
push ebx
push ecx
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009b23a
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b260
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
dec eax
jns 0x1009b27d
push 0x227f
push 0x4072d90
push 4
call fcn.1014df00
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x1009b29a
push 0x227f
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4c9
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
push 1
lea eax, [ebp - 8]
push eax
call fcn.1004ba42
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009b2da
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 0
cmp eax, ecx
jl 0x1009b302
push 0x22ae
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
push 0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 1
cmp eax, ecx
jl 0x1009b34f
push 0x22de
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
push 0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x1009b3cf
push 0
push 0xc08a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.1004b1cc
mov ebx, 6
call fcn.1004fd48
push 0x80000301
push 0
push 0
push 0x80000004
push 0
push 0xc0a6
push 4
mov ebx, 0x300
call fcn.1014df12
add esp, 0x34
mov dword [0x2f4], 0
jmp 0x1009bcb9
mov eax, 0xc35b
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009b3f7
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009b43b
push 0x2485
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x14], eax
push 0
push dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b478
push ebx
call fcn.1014df0c
add esp, 4
call fcn.10041bde
mov dword [ebp - 0x14], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xcbb7
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009b4b1
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b4d7
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0xffffffff
je 0x1009bb34
mov eax, 0xc277
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009b4fa
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009b53e
push 0x2651
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0xffffffffffffffff
push 0x12
push 0x16022aef
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1009b5cc
call fcn.10095e1a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x45e
jne 0x1009b59c
mov eax, 0x82e
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1009602f
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b597
push ebx
call fcn.1014df0c
add esp, 4
jmp 0x1009b5bd
mov eax, 0x82e
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.10051b8f
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b5bd
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
jmp 0x1009bb2f
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009b5f8
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b61e
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
cmp dword [0xcc], eax
jle 0x1009bad9
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0xc068
push dword [ebp - 0x14]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b66a
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x1009b695
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009b6bb
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x1c]
push 0xc3b9
push dword [ebp - 0x24]
push 0x4c9
push dword [ebp - 0x20]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009b770
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009b780
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009b790
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1009b7a3
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009b7d0
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009b818
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b83e
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xf5]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0
push dword [ebp - 0x2c]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009b89b
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x14]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b8e3
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009b931
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009b941
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009b951
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009b961
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [0xc8]
call fcn.10041118
push ebx
push ecx
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009b99a
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009b9c0
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x18]
dec eax
jns 0x1009b9dd
push 0x2a11
push 0x4072d90
push 4
call fcn.1014df00
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x1009b9fa
push 0x2a11
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4c9
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
push 1
lea eax, [ebp - 8]
push eax
call fcn.1004ba42
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009ba3a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 0
cmp eax, ecx
jl 0x1009ba62
push 0x2a40
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
push 0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
call fcn.10041118
mov eax, 1
cmp eax, ecx
jl 0x1009baaf
push 0x2a70
push 0x4072d90
push 1
call fcn.1014df00
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
push 0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df24
add esp, 0x18
jmp 0x1009bb2f
push 0
push 0xc08a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
call fcn.1004b1cc
mov ebx, 6
call fcn.1004fd48
push 0x80000301
push 0
push 0
push 0x80000004
push 0
push 0xc0a6
push 4
mov ebx, 0x300
call fcn.1014df12
add esp, 0x34
jmp 0x1009bcb9
mov eax, 0xc0d2
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009bb4d
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009bb91
push 0x2c23
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0x190
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x14], eax
push 0
push dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009bbce
push ebx
call fcn.1014df0c
add esp, 4
call fcn.10041bde
mov dword [ebp - 0x14], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0xc3c6
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009bc07
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009bc2d
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0xffffffff
je 0x1009bcb9
mov eax, 0xc3cf
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009bc50
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009bc94
push 0x2e7b
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0x3e8
call fcn.10040d09
push dword [0x1c]
call fcn.1004c4bb
push dword [0x1c]
call fcn.1004c4bb
jmp 0x1009bcb9
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1009bce1
jmp 0x1009e83e
inc dword [0xc4]
push 0x80000301
push 0
push dword [0xc4]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push 0xcbbd
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009bd31
push ebx
call fcn.1014df0c
add esp, 4
push 0
push dword [ebp - 0x18]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009bd5c
push ebx
call fcn.1014df0c
add esp, 4
push 0x3e8
call fcn.10040d09
cmp dword [0xc4], 0x96
jl 0x1009be1f
mov dword [0xc4], 0
call fcn.1004b1cc
push 0
push 0xcbcc
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov eax, 0x833
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004a1ea
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009bdc3
push ebx
call fcn.1014df0c
add esp, 4
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009be1a
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009be1a
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009be1a
jmp 0x1009be1f
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x64
push dword [ebp - 0x14]
call fcn.10040ed5
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009be66
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x1009e804
mov dword [ebp - 0xc], 1
call fcn.100565f1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jne 0x1009bea2
call fcn.10041d88
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jne 0x1009bea2
mov eax, 1
jmp 0x1009bea7
mov eax, 0
test eax, eax
je 0x1009c157
push 0
push 0xcbe1
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
push 0xffffffffffffffff
push 8
push 0x16022af7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009bef8
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009bf1e
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fsub qword [0xf5]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0xc413
push dword [ebp - 0x2c]
push 0xc426
mov ecx, 3
call fcn.10040fdd
add esp, 0xc
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009bf7d
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009bf94
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009bfd8
push 0x346b
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
push 0x3e8
call fcn.10040d09
call fcn.1008f48f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jne 0x1009c005
push 0x12c
call fcn.10040d09
call fcn.10040da9
jmp 0x1009bfe2
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009c05c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009c06c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009c07c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c08c
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x24], 8
jne 0x1009c12e
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1009c0ed
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009c0fd
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009c10d
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009c11d
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x3c], 3
jne 0x1009c12e
mov eax, 1
jmp 0x1009c133
mov eax, 0
test eax, eax
je 0x1009c140
jmp 0x1009c157
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xa
jl 0x1009c152
jmp 0x1009c157
jmp 0x1009be77
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009c1b5
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009c1c5
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009c1d5
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c1e5
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x24], 8
jne 0x1009c287
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1009c246
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009c256
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009c266
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009c276
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x3c], 3
jne 0x1009c287
mov eax, 1
jmp 0x1009c28c
mov eax, 0
test eax, eax
je 0x1009c5f0
push 0x2bc
call fcn.10040d09
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009c2f5
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009c305
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009c315
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c325
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x24], 9
jne 0x1009c3c7
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1009c386
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009c396
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009c3a6
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009c3b6
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x3c], 3
jne 0x1009c3c7
mov eax, 1
jmp 0x1009c3cc
mov eax, 0
test eax, eax
je 0x1009c3d9
jmp 0x1009c5f0
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009c430
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009c440
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009c450
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c460
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x24], 0xf
jne 0x1009c502
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1009c4c1
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009c4d1
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009c4e1
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009c4f1
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x3c], 5
jne 0x1009c502
mov eax, 1
jmp 0x1009c507
mov eax, 0
test eax, eax
je 0x1009c514
jmp 0x1009c5f0
push 0
push 0xc476
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
cmp dword [ebp - 0xc], 1
jne 0x1009c5a4
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10096f5d
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c58a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009c59a
push ebx
call fcn.1014df0c
add esp, 4
push 0x7d0
call fcn.10040d09
call fcn.1008f48f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jne 0x1009c5c7
push 0x12c
call fcn.10040d09
call fcn.10040da9
jmp 0x1009c5a4
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x1e
jl 0x1009c5d9
jmp 0x1009c5f0
push 0
mov ebx, 0x350
call fcn.1014df12
add esp, 4
jmp 0x1009c15e
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1009c618
jmp 0x1009e83e
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009c676
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009c686
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009c696
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c6a6
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x24], 0xf
jne 0x1009c748
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1009c707
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009c717
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009c727
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009c737
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x3c], 5
jne 0x1009c748
mov eax, 1
jmp 0x1009c74d
mov eax, 0
test eax, eax
je 0x1009ddb6
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.100974c5
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c78a
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 1
jne 0x1009c9cb
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0xc721
push dword [ebp - 0x14]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c7d1
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x1009c7fc
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009c822
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x1c]
push 0xcbee
push dword [ebp - 0x24]
push 0x4c9
push dword [ebp - 0x20]
mov ecx, 5
call fcn.10040fdd
add esp, 0x14
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009c8d7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009c8e7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009c8f7
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1009c90a
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009c937
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
mov eax, 0x3d4
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004a1ea
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009c974
push ebx
call fcn.1014df0c
add esp, 4
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009c9cb
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009c9cb
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009c9cb
call fcn.10097336
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jne 0x1009cb57
mov eax, 0xeb
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1009e897
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009ca01
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x18]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, 0xeb
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1009e969
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009ca44
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0xeb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1009ea02
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009ca68
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x2c]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0xeb
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.1009ead4
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009caab
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x38]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x3c], eax
push 0xcc01
push dword [ebp - 0x3c]
push 0xcc0
push dword [ebp - 0x30]
push 0xcc0
push dword [ebp - 0x24]
push 0xcc0
push dword [ebp - 0x1c]
mov ecx, 8
call fcn.10040fdd
add esp, 0x20
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009cb0a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009cb1a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009cb2a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1009cb3a
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009cb4e
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
jmp 0x1009d9a2
call fcn.10097336
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jne 0x1009ce66
mov eax, 0xeb
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1009e897
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009cb8d
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x18]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, 0xeb
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1009e969
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009cbd0
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0xeb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1009ea02
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009cbf4
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x2c]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0xeb
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.1009ead4
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009cc37
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x38]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov eax, 0x3b7
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.1009e897
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1009cc7a
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x44]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x48], eax
mov eax, 0x3b7
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.1009e969
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1009ccbd
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0x3b7
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.1009ea02
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x1009cced
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x58]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov eax, 0x3b7
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
call fcn.1009ead4
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x1009cd42
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x64]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x68], eax
push 0xcc01
push dword [ebp - 0x68]
push 0xcc0
push dword [ebp - 0x5c]
push 0xcc0
push dword [ebp - 0x50]
push 0xcc0
push dword [ebp - 0x48]
push 0xcc0
push dword [ebp - 0x3c]
push 0xcc0
push dword [ebp - 0x30]
push 0xcc0
push dword [ebp - 0x24]
push 0xcc0
push dword [ebp - 0x1c]
mov ecx, 0x10
call fcn.10040fdd
add esp, 0x40
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009cdd0
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009cde0
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009cdf0
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1009ce00
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1009ce10
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1009ce20
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x1009ce33
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x1009ce46
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009ce5d
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
jmp 0x1009d9a2
call fcn.10097336
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jne 0x1009d322
mov eax, 0xeb
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1009e897
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009cea2
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x18]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, 0xeb
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1009e969
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009cee5
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0xeb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1009ea02
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009cf09
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x2c]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0xeb
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.1009ead4
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009cf4c
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x38]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov eax, 0x3b7
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.1009e897
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1009cf8f
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x44]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x48], eax
mov eax, 0x3b7
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.1009e969
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1009cfd2
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0x3b7
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.1009ea02
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x1009d002
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x58]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov eax, 0x3b7
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
call fcn.1009ead4
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x1009d057
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x64]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x68], eax
mov eax, 0xc8fc
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.1009e897
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x1009d0ac
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x70]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x74], eax
mov eax, 0xc8fc
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
call fcn.1009e969
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x1009d101
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0xc8fc
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
call fcn.1009ea02
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x1009d131
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x84]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x88], eax
mov eax, 0xc8fc
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.1009ead4
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x1009d186
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x90]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x94], eax
push 0xcc01
push dword [ebp - 0x94]
push 0xcc0
push dword [ebp - 0x88]
push 0xcc0
push dword [ebp - 0x7c]
push 0xcc0
push dword [ebp - 0x74]
push 0xcc0
push dword [ebp - 0x68]
push 0xcc0
push dword [ebp - 0x5c]
push 0xcc0
push dword [ebp - 0x50]
push 0xcc0
push dword [ebp - 0x48]
push 0xcc0
push dword [ebp - 0x3c]
push 0xcc0
push dword [ebp - 0x30]
push 0xcc0
push dword [ebp - 0x24]
push 0xcc0
push dword [ebp - 0x1c]
mov ecx, 0x18
call fcn.10040fdd
add esp, 0x60
mov dword [ebp - 0x98], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009d240
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009d250
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009d260
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1009d270
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1009d280
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1009d290
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x1009d2a3
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x1009d2b6
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x1009d2c9
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x1009d2dc
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x1009d2ef
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x1009d302
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x98]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009d319
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
jmp 0x1009d9a2
call fcn.10097336
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jne 0x1009d988
mov eax, 0xeb
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1009e897
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009d35e
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x18]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, 0xeb
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1009e969
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009d3a1
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0xeb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1009ea02
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009d3c5
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x2c]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0xeb
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.1009ead4
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009d408
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x38]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov eax, 0x3b7
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.1009e897
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1009d44b
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x44]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x48], eax
mov eax, 0x3b7
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.1009e969
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1009d48e
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0x3b7
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.1009ea02
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x1009d4be
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x58]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov eax, 0x3b7
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
call fcn.1009ead4
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x1009d513
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x64]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x68], eax
mov eax, 0xc8fc
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.1009e897
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x1009d568
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x70]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x74], eax
mov eax, 0xc8fc
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
call fcn.1009e969
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x1009d5bd
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0xc8fc
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
call fcn.1009ea02
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x1009d5ed
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x84]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x88], eax
mov eax, 0xc8fc
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.1009ead4
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x1009d642
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x90]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x94], eax
mov eax, 0x986
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
call fcn.1009e897
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x1009d697
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x9c]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0xa0], eax
mov eax, 0x986
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa4]
push eax
call fcn.1009e969
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x1009d6ec
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0x986
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0xac]
push eax
call fcn.1009ea02
mov dword [ebp - 0xb0], eax
mov ebx, dword [ebp - 0xac]
test ebx, ebx
je 0x1009d71c
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0xb0]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0xb4], eax
mov eax, 0x986
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xb8]
push eax
call fcn.1009ead4
mov dword [ebp - 0xbc], eax
mov ebx, dword [ebp - 0xb8]
test ebx, ebx
je 0x1009d771
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0xbc]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0xc0], eax
push 0xcc01
push dword [ebp - 0xc0]
push 0xcc0
push dword [ebp - 0xb4]
push 0xcc0
push dword [ebp - 0xa8]
push 0xcc0
push dword [ebp - 0xa0]
push 0xcc0
push dword [ebp - 0x94]
push 0xcc0
push dword [ebp - 0x88]
push 0xcc0
push dword [ebp - 0x7c]
push 0xcc0
push dword [ebp - 0x74]
push 0xcc0
push dword [ebp - 0x68]
push 0xcc0
push dword [ebp - 0x5c]
push 0xcc0
push dword [ebp - 0x50]
push 0xcc0
push dword [ebp - 0x48]
push 0xcc0
push dword [ebp - 0x3c]
push 0xcc0
push dword [ebp - 0x30]
push 0xcc0
push dword [ebp - 0x24]
push 0xcc0
push dword [ebp - 0x1c]
mov ecx, 0x20
call fcn.10040fdd
add esp, 0x80
mov dword [ebp - 0xc4], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009d85a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009d86a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009d87a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1009d88a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1009d89a
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1009d8aa
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x1009d8bd
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x1009d8d0
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x1009d8e3
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x1009d8f6
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x1009d909
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x1009d91c
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x1009d92f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x1009d942
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0xb4]
test ebx, ebx
je 0x1009d955
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0xc0]
test ebx, ebx
je 0x1009d968
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0xc4]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009d97f
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
jmp 0x1009d9a2
mov eax, 0xcc07
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009d99e
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x64
push dword [ebp - 0x14]
call fcn.10040ed5
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009d9e9
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x1009ddac
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0xc721
push dword [ebp - 0x14]
mov ecx, 2
call fcn.10040fdd
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009da30
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x1009da5b
mov eax, 0x64
push eax
push 3
mov ebx, 0x270
call fcn.1014df12
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009da81
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x290
call fcn.1014df12
add esp, 0x10
push 0
mov ebx, 0x210
call fcn.1014df12
add esp, 4
push 0x80000003
push edx
push eax
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push 8
push 0x16022ad3
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0xffffffffffffffff
push 8
push 0x16022ad5
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x1c]
push 0xcc0
push dword [ebp - 0x10]
push 0xcc0
push dword [ebp - 0x24]
push 0xcc0
push dword [ebp - 0x20]
mov ecx, 7
call fcn.10040fdd
add esp, 0x1c
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009db3e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009db4e
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009db5e
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1009db71
mov eax, 0x64
push eax
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0x2a8
call fcn.1014df12
add esp, 0x1c
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009db9e
push ebx
call fcn.1014df0c
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x278
call fcn.1014df12
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009dbe6
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009dc0c
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xf5]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0
push dword [ebp - 0x2c]
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009dc69
push ebx
call fcn.1014df0c
add esp, 4
push 0
mov ebx, 0x104
call fcn.1014df12
add esp, 4
mov dword [ebp - 0x14], eax
push 0x3a4
push dword [0x68]
push 0x69c
push dword [ebp - 0x14]
mov ecx, 4
call fcn.10040fdd
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009dcb1
push ebx
call fcn.1014df0c
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16022af6
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x5ee
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov eax, 0x3b7
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1004fc75
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009dcff
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009dd0f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009dd1f
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009dd2f
push ebx
call fcn.1014df0c
add esp, 4
mov eax, 0x3d4
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004a1ea
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009dd50
push ebx
call fcn.1014df0c
add esp, 4
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009dda7
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009dda7
push 0x4b0
call fcn.10040d09
push dword [0x1c]
call fcn.1004c49c
test eax, eax
je 0x1009dda7
jmp 0x1009ddac
call fcn.10040da9
jmp 0x1009c61f
call fcn.10041d88
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 6
jne 0x1009e482
push 0x1388
call fcn.10040d09
mov dword [0xc4], 0
mov dword [0x2f4], 0
mov dword [0x190], 0
mov dword [0x194], 0
mov dword [0x198], 0
mov dword [0x19c], 0
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x1b
push dword [0xc]
call fcn.10089bd2
push 0x12c
call fcn.10040d09
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x1b
push dword [0xc]
call fcn.10089bd2
push 0x12c
call fcn.10040d09
push dword [0xc]
call fcn.100995a5
mov eax, 0x2a8
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1004a1ea
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009de9e
push ebx
call fcn.1014df0c
add esp, 4
call fcn.10041340
mov dword [0x30c], eax
cmp dword [0x30c], 0x1c8
jl 0x1009decc
cmp dword [0x30c], 0x1ce
jg 0x1009decc
xor eax, eax
jmp 0x1009ded1
mov eax, 1
test eax, eax
je 0x1009e026
xor ecx, ecx
lea eax, [ebp - 0xc]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0x16
jg 0x1009e023
cmp dword [0x30c], 0x31a
je 0x1009df22
cmp dword [0x30c], 0x31b
je 0x1009df22
cmp dword [0x30c], 0x31c
je 0x1009df22
xor eax, eax
jmp 0x1009df27
mov eax, 1
test eax, eax
je 0x1009df4e
call fcn.10095e1a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xf9f
jne 0x1009df49
jmp 0x1009df4e
jmp 0x1009e023
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1009df76
jmp 0x1009e023
fld qword [0xc752]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fsub qword [ebp - 0x18]
fstp qword [ebp - 0x20]
push 0x80000601
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0xbe88
push dword [ebp - 0x24]
push 0xc75a
mov ecx, 3
call fcn.10040fdd
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1009dfd5
push ebx
call fcn.1014df0c
add esp, 4
push 0
push dword [ebp - 0x28]
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1009e000
push ebx
call fcn.1014df0c
add esp, 4
push 0x3e8
call fcn.10040d09
push 0
mov ebx, 0x350
call fcn.1014df12
add esp, 4
pop ebx
pop ecx
jmp 0x1009dee0
add esp, 8
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x1b
push dword [0xc]
call fcn.10089bd2
push 0x12c
call fcn.10040d09
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x1b
push dword [0xc]
call fcn.10089bd2
push 0x12c
call fcn.10040d09
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x22c
push 1
push 0x113
push 1
push dword [0xc]
call fcn.10043833
push 0x12c
call fcn.10040d09
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xbb
push 1
push 0x25c
push 1
push dword [0xc]
call fcn.10043833
push 0x12c
call fcn.10040d09
mov eax, 0xc75f
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009e11d
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009e161
push 0x5366
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x20
push dword [0xc]
call fcn.10089bd2
push 0x7d0
call fcn.10040d09
call fcn.10041bde
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009e1ae
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009e1d4
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fadd qword [0xf5]
fstp qword [ebp - 0x28]
push 0xffffffffffffffff
push 8
push 0x16022af7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x1009e212
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009e238
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x28]
fsub qword [ebp - 0x38]
ftst
fnstsw ax
test ah, 1
je 0x1009e24f
fchs
fcomp qword [0x4d0]
fnstsw ax
test ah, 0x41
jne 0x1009e36c
push 0xffffffffffffffff
push 8
push 0x16022af7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009e28c
mov eax, 0x64
push eax
push 1
mov ebx, 0x9dc
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009e2b2
push ebx
call fcn.1014df0c
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fsub qword [0xf5]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 1
mov ebx, 0x168
call fcn.1014df12
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x171
push dword [ebp - 0x2c]
push 0xc784
mov ecx, 3
call fcn.10040fdd
add esp, 0xc
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009e311
push ebx
call fcn.1014df0c
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009e328
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009e36c
push 0x54fc
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
mov eax, 0xc797
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x1009e385
push ebx
call fcn.1014df0c
add esp, 4
pop eax
mov dword [4], eax
mov dword [ebp - 0x14], esp
push 0
push 0
push 0x77f
push dword [0xc]
mov eax, 6
call fcn.1014df06
cmp dword [ebp - 0x14], esp
je 0x1009e3c9
push 0x55db
push 0x4072d90
push 6
call fcn.1014df00
add esp, 0xc
call fcn.10052521
mov dword [ebp - 0x14], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x852
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1009e402
mov eax, 0x64
push eax
push 4
mov ebx, 0x14c
call fcn.1014df12
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009e428
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0xffffffff
je 0x1009e437
jmp 0x1009e47d
call fcn.10051686
mov dword [ebp - 0x14], eax
mov eax, dword [0x78]
push eax
push dword [ebp - 0x14]
call fcn.10040ed5
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009e46e
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x1009e47d
call fcn.1005185d
jmp 0x1009e7ff
push 0x7d0
call fcn.10040d09
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009e4e3
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009e4f3
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009e503
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009e513
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x24], 9
jne 0x1009e5b5
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1009e574
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009e584
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009e594
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009e5a4
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x3c], 3
jne 0x1009e5b5
mov eax, 1
jmp 0x1009e5ba
mov eax, 0
test eax, eax
je 0x1009e7ff
push 0
push 0xc824
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov dword [ebp - 0xc], 0
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x3c
jge 0x1009e609
call fcn.10041d88
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 5
je 0x1009e609
xor eax, eax
jmp 0x1009e60e
mov eax, 1
test eax, eax
je 0x1009e622
mov dword [ebp - 0xc], 0
jmp 0x1009e686
push 0x3e8
call fcn.10040d09
push 0
push 0xc83b
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov eax, 0xcc1a
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.10095d2b
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009e66d
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x18], 1
jne 0x1009e67c
jmp 0x1009e686
call fcn.10040da9
jmp 0x1009e5e6
push 0x3e8
call fcn.10040d09
mov dword [ebp - 0xc], 0
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df2a
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1009e6bf
jmp 0x1009e83e
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0x138
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1009e716
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1009e726
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1009e736
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1009e746
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x24], 9
jne 0x1009e7e8
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x3c
push dword [0x1c]
call fcn.10096a03
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1009e7a7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1009e7b7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1009e7c7
push ebx
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1009e7d7
push ebx
call fcn.1014df0c
add esp, 4
cmp dword [ebp - 0x3c], 3
jne 0x1009e7e8
mov eax, 1
jmp 0x1009e7ed
mov eax, 0
test eax, eax
je 0x1009e7fa
call fcn.1009eba6
jmp 0x1009e7ff
jmp 0x1009e83e
push 0
push 0xc85a
push 0xffffffffffffffff
push 8
push 0x16011ea7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
push 0
push 0
push 0xffffffffffffffff
push 6
push 0x16011eb7
push 0x52011de2
call fcn.1014df24
add esp, 0x18
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x1009e85c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x1009e858
imul eax, dword [ebx]
jmp 0x1009e84d
mov ecx, eax
test ecx, ecx
je 0x1009e87b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x1009e874
push ebx
push eax
call fcn.1014df0c
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1009e862
call fcn.1014df0c
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1009e893
push ebx
call fcn.1014df0c
add esp, 4
mov esp, ebp
pop ebp
ret