Function at 0x10014750
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
mov edx, 0x28
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x10014757
mov edx, dword [esp + 0xac]
lea ecx, [esp]
call fcn.10031000
mov edx, dword [esp + 0xb0]
lea ecx, [esp + 4]
call fcn.10031000
mov word [esp + 8], 1
movzx ebx, word [esp + 8]
mov eax, 4
cmp ebx, eax
jl 0x100147a7
movzx ebx, word [esp + 8]
dec ebx
push ebx
pop eax
mov word [esp + 0xc], ax
jmp 0x100147b4
movzx ebx, word [esp + 8]
inc ebx
push ebx
pop eax
mov word [esp + 0xc], ax
movzx ebx, word [esp + 0xc]
push ebx
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x100147ce
add esp, 4
jmp 0x10015f45
mov ebx, 5
cmp ebx, dword [esp]
jne 0x100147e6
movzx eax, word [esp + 0x10]
push eax
pop eax
mov word [esp + 0xc], ax
jmp 0x100147fd
mov ebx, 3
cmp ebx, dword [esp]
jne 0x100147fd
movzx ebx, word [esp + 0x10]
inc ebx
push ebx
pop eax
mov word [esp + 0xc], ax
pop eax
push dword [esp]
lea edx, [0x1003d028]
pop ecx
call fcn.100311d0
jne 0x10014823
push dword [esp + 4]
lea edx, [0x1003d028]
pop ecx
call fcn.100311d0
jne 0x10014823
jmp 0x1001482a
mov eax, 1
jmp 0x1001482c
xor eax, eax
and eax, eax
je 0x1001483a
xor eax, eax
movsx eax, al
jmp 0x10015f45
lea edx, str.domains
lea ecx, [esp + 0x38]
call fcn.10031008
lea eax, [esp + 0x14]
lea edx, [0x1003d0c6]
push edx
push 1
push eax
call fcn.1003ae30
lea eax, [esp + 0x30]
lea edx, [0x1003ea9c]
push edx
push 2
push eax
call fcn.1003ae30
lea edx, str.question
lea ecx, [esp + 0x3c]
call fcn.10031008
push 0x12
call fcn.1000ecea
mov dword [esp + 0x34], eax
mov ebx, dword [esp + 0x34]
and ebx, ebx
jne 0x100148c2
lea edx, str.divisions
lea ecx, [esp + 0x40]
call fcn.10031008
xor eax, eax
movsx eax, al
jmp 0x10015f45
mov word [esp + 0x48], 6
movzx ebx, word [esp + 0x48]
mov eax, 3
cmp ebx, eax
jl 0x100148e6
movzx ebx, word [esp + 0x48]
dec ebx
push ebx
pop eax
mov word [esp + 0x4c], ax
jmp 0x100148f3
movzx ebx, word [esp + 0x48]
inc ebx
push ebx
pop eax
mov word [esp + 0x4c], ax
movzx ebx, word [esp + 0x4c]
push ebx
mov ebx, 0xe
cmp ebx, dword [esp]
jne 0x1001490d
add esp, 4
jmp 0x10015f45
mov ebx, 8
cmp ebx, dword [esp]
jne 0x10014925
movzx eax, word [esp + 0x50]
push eax
pop eax
mov word [esp + 0x4c], ax
jmp 0x1001493c
mov ebx, 3
cmp ebx, dword [esp]
jne 0x1001493c
movzx ebx, word [esp + 0x50]
inc ebx
push ebx
pop eax
mov word [esp + 0x4c], ax
pop eax
lea edx, [esp + 0x50]
push edx
push 0x1003f1c8
push 8
push 0x13
push 4
call fcn.1003a3c2
lea edx, str.clutch
lea ecx, [esp + 0x58]
call fcn.10031008
push dword [esp + 0x50]
mov ebp, dword [esp + 0x38]
push ebp
pop eax
push dword [ebp]
call fcn.1003a686
push dword [esp + 0x34]
call fcn.1003a910
mov dword [esp + 0x34], 0
push dword [0x10044d80]
push 0x3b
call fcn.1001251d
lea eax, [esp + 0x30]
push 1
push eax
call fcn.1003ae00
mov word [esp + 0x5c], 8
movzx ebx, word [esp + 0x5c]
mov eax, 2
cmp ebx, eax
jl 0x100149d0
movzx ebx, word [esp + 0x5c]
dec ebx
push ebx
pop eax
mov word [esp + 0x60], ax
jmp 0x100149dd
movzx ebx, word [esp + 0x5c]
inc ebx
push ebx
pop eax
mov word [esp + 0x60], ax
movzx ebx, word [esp + 0x60]
push ebx
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x100149f7
add esp, 4
jmp 0x10015f45
mov ebx, 7
cmp ebx, dword [esp]
jne 0x10014a0f
movzx eax, word [esp + 0x64]
push eax
pop eax
mov word [esp + 0x60], ax
jmp 0x10014a26
mov ebx, 2
cmp ebx, dword [esp]
jne 0x10014a26
movzx ebx, word [esp + 0x64]
inc ebx
push ebx
pop eax
mov word [esp + 0x60], ax
pop eax
mov dword [esp + 0x24], 0
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x40]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f373
push ebp
mov ebp, 0x1003f36e
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f37c
push ebp
mov ebp, 0x1003f373
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x48]
push edx
call fcn.1003ad20
push dword [0x10044d80]
push 0x28
call fcn.1001251d
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 4]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f37f
push ebp
mov ebp, 0x1003f37c
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003fadc
push ebp
mov ebp, 0x1003fabf
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 4]
push edx
call fcn.1003ad20
push dword [0x10044d80]
push 0x29
call fcn.1001251d
pop eax
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
push 0x7d
call fcn.1001251d
pop eax
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
lea edx, str.plate
lea ecx, [esp + 0x64]
call fcn.10031008
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x78
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0xc]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x2e
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x10]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x65
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov word [esp + 0x68], 9
movzx ebx, word [esp + 0x68]
mov eax, 1
cmp ebx, eax
jl 0x10014ded
movzx ebx, word [esp + 0x68]
dec ebx
push ebx
pop eax
mov word [esp + 0x6c], ax
jmp 0x10014dfa
movzx ebx, word [esp + 0x68]
inc ebx
push ebx
pop eax
mov word [esp + 0x6c], ax
movzx ebx, word [esp + 0x6c]
push ebx
mov ebx, 0x11
cmp ebx, dword [esp]
jne 0x10014e14
add esp, 4
jmp 0x10015f45
mov ebx, 4
cmp ebx, dword [esp]
jne 0x10014e2c
movzx eax, word [esp + 0x70]
push eax
pop eax
mov word [esp + 0x6c], ax
jmp 0x10014e43
mov ebx, 4
cmp ebx, dword [esp]
jne 0x10014e43
movzx ebx, word [esp + 0x70]
inc ebx
push ebx
pop eax
mov word [esp + 0x6c], ax
pop eax
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x14]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x73
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x18]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x6c
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x1c]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x74
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x20]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x4d
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x24]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x61
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x28]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x70
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
push dword [0x10044d80]
push dword [0x10044d80]
push 0x5c
call fcn.1001251d
push dword [0x10044d80]
push 0x5c
call fcn.1001251d
pop eax
add dword [0x10044d80], 2
push dword [0x10044d80]
push 0x5c
call fcn.1001251d
add dword [0x10044d80], 2
push dword [esp + 0x10]
mov edx, dword [0x1003fd28]
add dword [esp + 4], edx
mov edx, dword [0x1003fd28]
add dword [esp + 8], edx
call fcn.1000b361
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea eax, [esp + 0x2c]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x30]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
mov edx, dword [esp + 0x2c]
push edx
call fcn.1003ad20
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
lea edx, [0x1003d028]
lea ecx, [esp + 0x28]
call fcn.10031008
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 8]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push dword [0x10044d80]
push dword [0x10044d80]
mov ebp, 0x1003fa8a
push ebp
mov ebp, 0x1003fa86
push ebp
call fcn.1000a328
add dword [0x10044d80], 2
push 1
push dword [0x10040548]
mov edx, dword [0x1003fd28]
add dword [esp + 8], edx
call fcn.10031d00
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x34]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0xc]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x1c]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x1c]
push edx
call fcn.1003ad20
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x38]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 8]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x34]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x20
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 8]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x34]
push edx
call fcn.1003ad20
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x3c]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x20]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x14]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x14]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x18]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0xc]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x10]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x10]
push edx
call fcn.1003ad20
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f368
push ebp
mov ebp, 0x1003f364
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x2c]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x48]
push edx
call fcn.1003ad20
push dword [0x10044d80]
push 0x28
call fcn.1001251d
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x14]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x68
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x10]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x6c
call fcn.1001251d
pop eax
push dword [0x10044d80]
push 0x6c
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0xc]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x24]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x28]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x28]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f3e4
push ebp
mov ebp, 0x1003f3e1
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x18]
push edx
call fcn.1003ad20
lea edx, [0x1003e772]
push edx
call fcn.1003ad20
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [0x1003d57a]
push edx
call fcn.1003ad20
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [0x1003e772]
push edx
call fcn.1003ad20
mov edx, dword [ebp + 0x1c]
push edx
call fcn.1003ad20
lea edx, [0x1003e772]
push edx
call fcn.1003ad20
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [0x1003ee1c]
push edx
call fcn.1003ad20
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
push 0x29
call fcn.1001251d
pop eax
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x2c]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003faea
push ebp
mov ebp, 0x1003fadc
push ebp
call fcn.1000a328
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x3c]
push edx
call fcn.1003ad20
push dword [0x10044d80]
push 0x2c
call fcn.1001251d
pop eax
push dword [0x10044d80]
push 0x20
call fcn.1001251d
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x38]
push edx
call fcn.1003ad20
push dword [0x10044d80]
push 0x2c
call fcn.1001251d
pop eax
push dword [0x10044d80]
push 0x20
call fcn.1001251d
pop eax
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x30]
push edx
call fcn.1003ad20
push dword [0x10044d80]
push 0x2c
call fcn.1001251d
pop eax
push dword [0x10044d80]
push 0x20
call fcn.1001251d
pop eax
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x18]
push 1
push edx
call fcn.1003ae60
push dword [0x10044d80]
mov ebp, 0x1003faef
push ebp
mov ebp, 0x1003faea
push ebp
call fcn.1000a328
pop eax
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
lea edx, str.attractions
lea ecx, [esp + 0x70]
call fcn.10031008
mov edx, dword [esp + 0x10]
push dword [0x10044d80]
push edx
call fcn.1003ad20
mov ebp, dword [esp + 0x54]
mov edx, dword [ebp + 0x40]
push edx
call fcn.1003ad20
push dword [0x10044d80]
mov ebp, 0x1003f38a
push ebp
mov ebp, 0x1003f387
push ebp
call fcn.1000a328
pop eax
push dword [0x10044d80]
push dword [0x10044d80]
push 0x3e7
push 1
call fcn.10014574
cdq
push edx
push eax
call fcn.100316d0
pop eax
lea edx, [esp + 0x30]
push 1
push edx
call fcn.1003ae60
lea edx, [esp + 0x34]
push 2
push edx
call fcn.1003ae60
lea eax, [esp + 0x14]
push eax
call fcn.1003ad80
push dword [esp + 0x50]
call fcn.1003a578
push dword [esp + 0x10]
call fcn.100316a0
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x18]
add ebx, 2
push ebx
call fcn.1003a7a0
mov dword [esp + 0x1c], eax
lea edx, str.seek
lea ecx, [esp + 0x74]
call fcn.10031008
mov ebx, dword [esp + 0x1c]
and ebx, ebx
jne 0x10015c77
xor eax, eax
movsx eax, al
jmp 0x10015f45
mov word [esp + 0x78], 1
movzx ebx, word [esp + 0x78]
mov eax, 1
cmp ebx, eax
jl 0x10015c9b
movzx ebx, word [esp + 0x78]
dec ebx
push ebx
pop eax
mov word [esp + 0x7c], ax
jmp 0x10015ca8
movzx ebx, word [esp + 0x78]
inc ebx
push ebx
pop eax
mov word [esp + 0x7c], ax
movzx ebx, word [esp + 0x7c]
push ebx
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x10015cc2
add esp, 4
jmp 0x10015f45
mov ebx, 5
cmp ebx, dword [esp]
jne 0x10015cdd
movzx eax, word [esp + 0x80]
push eax
pop eax
mov word [esp + 0x7c], ax
jmp 0x10015cf7
mov ebx, 5
cmp ebx, dword [esp]
jne 0x10015cf7
movzx ebx, word [esp + 0x80]
inc ebx
push ebx
pop eax
mov word [esp + 0x7c], ax
pop eax
push 0x18
push 0xffffffff
push dword [esp + 0x18]
push dword [esp + 0x28]
call fcn.1003a7c0
mov word [esp + 0x80], 1
movzx ebx, word [esp + 0x80]
mov eax, 5
cmp ebx, eax
jl 0x10015d3f
movzx ebx, word [esp + 0x80]
dec ebx
push ebx
pop eax
mov word [esp + 0x84], ax
jmp 0x10015d52
movzx ebx, word [esp + 0x80]
inc ebx
push ebx
pop eax
mov word [esp + 0x84], ax
movzx ebx, word [esp + 0x84]
push ebx
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x10015d6f
add esp, 4
jmp 0x10015f45
mov ebx, 7
cmp ebx, dword [esp]
jne 0x10015d8d
movzx eax, word [esp + 0x88]
push eax
pop eax
mov word [esp + 0x84], ax
jmp 0x10015daa
mov ebx, 4
cmp ebx, dword [esp]
jne 0x10015daa
movzx ebx, word [esp + 0x88]
inc ebx
push ebx
pop eax
mov word [esp + 0x84], ax
pop eax
lea edx, [0x1003d028]
lea ecx, [esp + 0x10]
call fcn.10031008
lea edx, str.rides
lea ecx, [esp + 0x88]
call fcn.10031008
mov word [esp + 0x8c], 2
movzx ebx, word [esp + 0x8c]
mov eax, 2
cmp ebx, eax
jl 0x10015dfc
movzx ebx, word [esp + 0x8c]
dec ebx
push ebx
pop eax
mov word [esp + 0x90], ax
jmp 0x10015e0f
movzx ebx, word [esp + 0x8c]
inc ebx
push ebx
pop eax
mov word [esp + 0x90], ax
movzx ebx, word [esp + 0x90]
push ebx
mov ebx, 0x11
cmp ebx, dword [esp]
jne 0x10015e2c
add esp, 4
jmp 0x10015f45
mov ebx, 5
cmp ebx, dword [esp]
jne 0x10015e4a
movzx eax, word [esp + 0x94]
push eax
pop eax
mov word [esp + 0x90], ax
jmp 0x10015e67
mov ebx, 3
cmp ebx, dword [esp]
jne 0x10015e67
movzx ebx, word [esp + 0x94]
inc ebx
push ebx
pop eax
mov word [esp + 0x90], ax
pop eax
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 8]
call fcn.1002ffe0
mov ebx, eax
cmp ebx, 1
jne 0x10015e97
lea edx, str.fires
lea ecx, [esp + 0x94]
call fcn.10031008
mov byte [esp + 0x20], 1
push dword [esp + 0x1c]
call fcn.1003a910
mov word [esp + 0x98], 7
movzx ebx, word [esp + 0x98]
mov eax, 1
cmp ebx, eax
jl 0x10015ed0
movzx ebx, word [esp + 0x98]
dec ebx
push ebx
pop eax
mov word [esp + 0x9c], ax
jmp 0x10015ee3
movzx ebx, word [esp + 0x98]
inc ebx
push ebx
pop eax
mov word [esp + 0x9c], ax
movzx ebx, word [esp + 0x9c]
push ebx
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x10015efd
add esp, 4
jmp 0x10015f45
mov ebx, 9
cmp ebx, dword [esp]
jne 0x10015f1b
movzx eax, word [esp + 0xa0]
push eax
pop eax
mov word [esp + 0x9c], ax
jmp 0x10015f38
mov ebx, 2
cmp ebx, dword [esp]
jne 0x10015f38
movzx ebx, word [esp + 0xa0]
inc ebx
push ebx
pop eax
mov word [esp + 0x9c], ax
pop eax
movsx eax, byte [esp + 0x20]
movsx eax, al
jmp 0x10015f45
push dword [esp + 0x10]
call fcn.1003acf0
push dword [esp + 0x38]
call fcn.1003acf0
push dword [esp + 0x28]
call fcn.1003acf0
push dword [esp + 0x74]
call fcn.1003acf0
push dword [esp + 0x94]
call fcn.1003acf0
push dword [esp + 0x70]
call fcn.1003acf0
push dword [esp + 0x40]
call fcn.1003acf0
push dword [esp]
call fcn.1003acf0
push dword [esp + 0x64]
call fcn.1003acf0
push dword [esp + 0x58]
call fcn.1003acf0
push dword [esp + 0x3c]
call fcn.1003acf0
push dword [esp + 4]
call fcn.1003acf0
push dword [esp + 0x88]
call fcn.1003acf0
push dword [esp + 0x44]
call fcn.1003acf0
push eax
push dword [esp + 0x54]
call fcn.1003a57d
pop eax
add esp, 0xa0
pop ebx
pop ebp
ret 8