Function at 0x10346ccb
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x103bd9bc
mov eax, dword fs:[0]
push eax
mov eax, 0x241c
call fcn.102965a0
mov eax, dword [0x106a6100]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1b08], ecx
mov dword [ebp - 0x1a8c], 0
mov ecx, 0x10a21b93
call fcn.103a4800
mov dword [ebp - 4], 0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x1f60], eax
movzx ecx, byte [ebp - 0x1b39]
push ecx
mov ecx, dword [ebp - 0x1f60]
call fcn.1006cbe0
lea ecx, [ebp - 0x34]
call fcn.10066f10
nop
mov dword [ebp - 4], 1
cmp dword [ebp + 8], 0
je 0x10345e8b
cmp dword [0x108db454], 0
jne 0x10345ea0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.10063170
nop
jmp 0x10349345
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1c6c], eax
xor ecx, ecx
mov byte [ebp - 0x1b3a], cl
mov dword [ebp - 0x22e4], 0xd791104e
mov dword [ebp - 0x1f8c], 0xd791104e
mov edx, dword [ebp - 0x1f8c]
mov dword [ebp - 0x1c70], edx
mov eax, dword [0x10a197a4]
and eax, 1
jne 0x10345f81
mov ecx, dword [0x10a197a4]
or ecx, 1
mov dword [0x10a197a4], ecx
mov byte [ebp - 4], 2
xor edx, edx
mov byte [ebp - 0x1b3b], dl
mov dword [ebp - 0x22cc], 0xda7d68cb
mov dword [ebp - 0x1f90], 0xda7d68cb
mov eax, dword [ebp - 0x1f90]
mov dword [ebp - 0x1fd8], eax
xor ecx, ecx
mov byte [ebp - 0x1bca], cl
mov dword [ebp - 0x22d0], 0x990704d7
mov dword [ebp - 0x1fd4], 0x990704d7
mov edx, dword [ebp - 0x1fd4]
push edx
lea eax, [ebp - 0x2394]
push eax
call fcn.102f3e20
add esp, 8
mov dword [ebp - 0x1ffc], eax
mov ecx, dword [ebp - 0x1fd8]
push ecx
mov edx, dword [ebp - 0x1ffc]
push edx
push 0x10a197a8
call fcn.102f2f10
add esp, 0xc
push 0x103bf240
call fcn.101f5a40
add esp, 4
mov byte [ebp - 4], 1
cmp dword [0x10a197a8], 0
je 0x10345f97
mov eax, dword [0x10a197a8]
mov dword [ebp - 0x1c4c], eax
jmp 0x10345fa1
mov dword [ebp - 0x1c4c], 0
mov ecx, dword [ebp - 0x1c4c]
mov dword [ebp - 0x2000], ecx
mov edx, dword [ebp - 0x2000]
call edx
mov dword [ebp - 0x2080], eax
mov eax, dword [ebp - 0x2080]
mov dword [ebp - 0x1b40], eax
cmp dword [ebp - 0x1c6c], 0
je 0x10345fe2
cmp dword [ebp - 0x1c70], 0
je 0x10345fe2
cmp dword [ebp - 0x1b40], 0
jne 0x10345ff1
mov dword [ebp - 0x1b4c], 0
jmp 0x10346142
mov ecx, dword [ebp - 0x1c6c]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1a98], edx
jmp 0x10346011
mov eax, dword [ebp - 0x1a98]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a98], ecx
cmp dword [ebp - 0x1a98], 0
je 0x10346138
mov edx, dword [ebp - 0x1b40]
mov eax, dword [edx]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x20b0], ecx
mov edx, dword [ebp - 0x1a98]
mov eax, dword [edx]
and eax, 0xffffff
push eax
mov ecx, dword [ebp - 0x1b40]
call dword [ebp - 0x20b0]
mov dword [ebp - 0x1b44], eax
cmp dword [ebp - 0x1b44], 0
je 0x10346133
mov dword [ebp - 0x1b48], 0x811c9dc5
mov dword [ebp - 0x1a70], 0
mov ecx, dword [ebp - 0x1a70]
add ecx, 1
mov dword [ebp - 0x1a70], ecx
mov edx, dword [ebp - 0x1b44]
add edx, dword [ebp - 0x1a70]
movsx eax, byte [edx]
test eax, eax
je 0x10346094
jmp 0x10346070
xor ecx, ecx
je 0x103460a7
mov edx, dword [ebp - 0x1a70]
add edx, 1
mov dword [ebp - 0x1a70], edx
mov eax, dword [ebp - 0x1a70]
mov dword [ebp - 0x20b4], eax
mov ecx, dword [ebp - 0x20b4]
mov dword [ebp - 0x2174], ecx
mov dword [ebp - 0x1b0c], 0
jmp 0x103460da
mov edx, dword [ebp - 0x1b0c]
add edx, 1
mov dword [ebp - 0x1b0c], edx
mov eax, dword [ebp - 0x1b0c]
cmp eax, dword [ebp - 0x2174]
jae 0x1034610b
mov ecx, dword [ebp - 0x1b44]
add ecx, dword [ebp - 0x1b0c]
movsx edx, byte [ecx]
xor edx, dword [ebp - 0x1b48]
imul eax, edx, 0x1000193
mov dword [ebp - 0x1b48], eax
jmp 0x103460cb
mov ecx, dword [ebp - 0x1b48]
mov dword [ebp - 0x2184], ecx
mov edx, dword [ebp - 0x2184]
cmp edx, dword [ebp - 0x1c70]
jne 0x10346133
mov eax, dword [ebp - 0x1a98]
mov dword [ebp - 0x1b4c], eax
jmp 0x10346142
jmp 0x10346002
mov dword [ebp - 0x1b4c], 0
mov ecx, dword [ebp - 0x1b4c]
mov dword [ebp - 0x1a9c], ecx
mov dword [ebp - 0x1a4c], 0
mov edx, dword [ebp - 0x1a9c]
movsx eax, byte [edx + 0x10]
mov dword [ebp - 0x1b10], eax
mov ecx, dword [ebp - 0x1b10]
sub ecx, 1
mov dword [ebp - 0x1b10], ecx
cmp dword [ebp - 0x1b10], 6
ja case.0x1034618a.1
mov edx, dword [ebp - 0x1b10]
jmp dword [edx*4 + 0x10349360]
mov eax, dword [ebp - 0x1a9c]
mov ecx, dword [eax + 4]
push ecx
call fcn.10250330
add esp, 4
mov dword [ebp - 0x1a4c], eax
jmp 0x10346238
mov edx, dword [ebp - 0x1a9c]
mov eax, dword [edx + 8]
push eax
call fcn.10250230
add esp, 4
mov dword [ebp - 0x1a4c], eax
jmp 0x10346238
mov ecx, dword [ebp - 0x1a9c]
vmovss xmm0, dword [ecx + 0xc]
vmovss dword [ebp - 0x2188], xmm0
fld dword [ebp - 0x2188]
fstp qword [ebp - 0x2280]
vxorps xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x2280], 1
vmovsd qword [ebp - 0x2288], xmm0
fld qword [ebp - 0x2288]
fstp dword [ebp - 0x218c]
vmovss xmm0, dword [ebp - 0x218c]
vcvttss2si edx, xmm0
mov dword [ebp - 0x1a4c], edx
jmp 0x10346238
mov dword [ebp - 0x1a4c], 0
jmp 0x10346238
mov eax, dword [ebp - 0x1a9c]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x1a4c], ecx
cmp dword [ebp - 0x1a4c], 0
je 0x1034624f
mov edx, dword [ebp - 0x1a4c]
mov dword [ebp - 0x1c74], edx
jmp 0x10346259
mov dword [ebp - 0x1c74], 0
mov eax, dword [ebp - 0x1c74]
mov dword [ebp - 0x2190], eax
mov ecx, dword [ebp - 0x2190]
mov dword [ebp - 0x1cc0], ecx
mov edx, dword [0x109f27f4]
mov dword [ebp - 0x1c7c], edx
lea eax, [ebp - 0x2198]
mov dword [ebp - 0x1c78], eax
mov ecx, dword [ebp - 0x1c78]
mov edx, dword [ebp - 0x1c7c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1c78]
mov dword [ebp - 0x2194], eax
mov ecx, dword [ebp - 0x2194]
mov dword [ebp - 0x22d4], ecx
mov edx, dword [ebp - 0x2198]
mov eax, dword [edx]
mov dword [ebp - 0x219c], eax
mov ecx, 9
shl ecx, 2
mov edx, dword [ebp - 0x219c]
mov eax, dword [edx + ecx]
mov dword [ebp - 0x21a0], eax
mov ecx, dword [ebp - 0x21a0]
mov dword [ebp - 0x1cb8], ecx
mov edx, dword [ebp - 0x1cb8]
mov dword [ebp - 0x1cbc], edx
mov eax, dword [ebp - 0x1cbc]
mov dword [ebp - 0x1cc4], eax
mov ecx, dword [ebp - 0x1cc0]
push ecx
mov ecx, dword [ebp - 0x1c7c]
call dword [ebp - 0x1cc4]
mov dword [ebp - 0x1cc8], eax
mov edx, dword [ebp - 0x1cc8]
mov dword [ebp - 0x1b60], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1c88], ecx
xor edx, edx
mov byte [ebp - 0x1bc9], dl
mov dword [ebp - 0x22e8], 0x11ab48ff
mov dword [ebp - 0x1ccc], 0x11ab48ff
mov eax, dword [ebp - 0x1ccc]
mov dword [ebp - 0x1c8c], eax
mov ecx, dword [0x10a197a4]
and ecx, 1
jne 0x103463ff
mov edx, dword [0x10a197a4]
or edx, 1
mov dword [0x10a197a4], edx
mov byte [ebp - 4], 3
xor eax, eax
mov byte [ebp - 0x1bc8], al
mov dword [ebp - 0x22ec], 0xda7d68cb
mov dword [ebp - 0x1cd0], 0xda7d68cb
mov ecx, dword [ebp - 0x1cd0]
mov dword [ebp - 0x1cd8], ecx
xor edx, edx
mov byte [ebp - 0x1bc7], dl
mov dword [ebp - 0x22e0], 0x990704d7
mov dword [ebp - 0x1cd4], 0x990704d7
mov eax, dword [ebp - 0x1cd4]
push eax
lea ecx, [ebp - 0x23a0]
push ecx
call fcn.102f3e20
add esp, 8
mov dword [ebp - 0x1cdc], eax
mov edx, dword [ebp - 0x1cd8]
push edx
mov eax, dword [ebp - 0x1cdc]
push eax
push 0x10a197a8
call fcn.102f2f10
add esp, 0xc
push 0x103bf240
call fcn.101f5a40
add esp, 4
mov byte [ebp - 4], 1
cmp dword [0x10a197a8], 0
je 0x10346416
mov ecx, dword [0x10a197a8]
mov dword [ebp - 0x1c84], ecx
jmp 0x10346420
mov dword [ebp - 0x1c84], 0
mov edx, dword [ebp - 0x1c84]
mov dword [ebp - 0x1ce0], edx
mov eax, dword [ebp - 0x1ce0]
call eax
mov dword [ebp - 0x1ce4], eax
mov ecx, dword [ebp - 0x1ce4]
mov dword [ebp - 0x1b50], ecx
cmp dword [ebp - 0x1c88], 0
je 0x10346461
cmp dword [ebp - 0x1c8c], 0
je 0x10346461
cmp dword [ebp - 0x1b50], 0
jne 0x10346470
mov dword [ebp - 0x1b5c], 0
jmp 0x103465c2
mov edx, dword [ebp - 0x1c88]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x1aa0], eax
jmp 0x10346490
mov ecx, dword [ebp - 0x1aa0]
mov edx, dword [ecx + 0x14]
mov dword [ebp - 0x1aa0], edx
cmp dword [ebp - 0x1aa0], 0
je 0x103465b8
mov eax, dword [ebp - 0x1b50]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x1ce8], edx
mov eax, dword [ebp - 0x1aa0]
mov ecx, dword [eax]
and ecx, 0xffffff
push ecx
mov ecx, dword [ebp - 0x1b50]
call dword [ebp - 0x1ce8]
mov dword [ebp - 0x1b54], eax
cmp dword [ebp - 0x1b54], 0
je 0x103465b3
mov dword [ebp - 0x1b58], 0x811c9dc5
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
add edx, 1
mov dword [ebp - 0x1a74], edx
mov eax, dword [ebp - 0x1b54]
add eax, dword [ebp - 0x1a74]
movsx ecx, byte [eax]
test ecx, ecx
je 0x10346514
jmp 0x103464f0
xor edx, edx
je 0x10346527
mov eax, dword [ebp - 0x1a74]
add eax, 1
mov dword [ebp - 0x1a74], eax
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1cec], ecx
mov edx, dword [ebp - 0x1cec]
mov dword [ebp - 0x1cf0], edx
mov dword [ebp - 0x1b14], 0
jmp 0x1034655a
mov eax, dword [ebp - 0x1b14]
add eax, 1
mov dword [ebp - 0x1b14], eax
mov ecx, dword [ebp - 0x1b14]
cmp ecx, dword [ebp - 0x1cf0]
jae 0x1034658b
mov edx, dword [ebp - 0x1b54]
add edx, dword [ebp - 0x1b14]
movsx eax, byte [edx]
xor eax, dword [ebp - 0x1b58]
imul ecx, eax, 0x1000193
mov dword [ebp - 0x1b58], ecx
jmp 0x1034654b
mov edx, dword [ebp - 0x1b58]
mov dword [ebp - 0x1cf4], edx
mov eax, dword [ebp - 0x1cf4]
cmp eax, dword [ebp - 0x1c8c]
jne 0x103465b3
mov ecx, dword [ebp - 0x1aa0]
mov dword [ebp - 0x1b5c], ecx
jmp 0x103465c2
jmp 0x10346481
mov dword [ebp - 0x1b5c], 0
mov edx, dword [ebp - 0x1b5c]
mov dword [ebp - 0x1aa4], edx
mov dword [ebp - 0x1a50], 0
mov eax, dword [ebp - 0x1aa4]
movsx ecx, byte [eax + 0x10]
mov dword [ebp - 0x1b18], ecx
mov edx, dword [ebp - 0x1b18]
sub edx, 1
mov dword [ebp - 0x1b18], edx
cmp dword [ebp - 0x1b18], 6
ja case.0x1034660a.1
mov eax, dword [ebp - 0x1b18]
jmp dword [eax*4 + 0x1034937c]
mov ecx, dword [ebp - 0x1aa4]
mov edx, dword [ecx + 4]
push edx
call fcn.10250330
add esp, 4
mov dword [ebp - 0x1a50], eax
jmp 0x103466b8
mov eax, dword [ebp - 0x1aa4]
mov ecx, dword [eax + 8]
push ecx
call fcn.10250230
add esp, 4
mov dword [ebp - 0x1a50], eax
jmp 0x103466b8
mov edx, dword [ebp - 0x1aa4]
vmovss xmm0, dword [edx + 0xc]
vmovss dword [ebp - 0x1cf8], xmm0
fld dword [ebp - 0x1cf8]
fstp qword [ebp - 0x2290]
vxorps xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x2290], 1
vmovsd qword [ebp - 0x2298], xmm0
fld qword [ebp - 0x2298]
fstp dword [ebp - 0x1cfc]
vmovss xmm0, dword [ebp - 0x1cfc]
vcvttss2si eax, xmm0
mov dword [ebp - 0x1a50], eax
jmp 0x103466b8
mov dword [ebp - 0x1a50], 0
jmp 0x103466b8
mov ecx, dword [ebp - 0x1aa4]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x1a50], edx
cmp dword [ebp - 0x1a50], 0
je 0x103466cf
mov eax, dword [ebp - 0x1a50]
mov dword [ebp - 0x1bdc], eax
jmp 0x103466d9
mov dword [ebp - 0x1bdc], 0
mov ecx, dword [ebp - 0x1bdc]
mov dword [ebp - 0x1d00], ecx
mov edx, dword [ebp - 0x1d00]
mov dword [ebp - 0x1d1c], edx
mov eax, dword [0x109f27f4]
mov dword [ebp - 0x1c94], eax
lea ecx, [ebp - 0x1d08]
mov dword [ebp - 0x1c90], ecx
mov edx, dword [ebp - 0x1c90]
mov eax, dword [ebp - 0x1c94]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1c90]
mov dword [ebp - 0x1d04], ecx
mov edx, dword [ebp - 0x1d04]
mov dword [ebp - 0x22f4], edx
mov eax, dword [ebp - 0x1d08]
mov ecx, dword [eax]
mov dword [ebp - 0x1d0c], ecx
mov edx, 9
shl edx, 2
mov eax, dword [ebp - 0x1d0c]
mov ecx, dword [eax + edx]
mov dword [ebp - 0x1d10], ecx
mov edx, dword [ebp - 0x1d10]
mov dword [ebp - 0x1d14], edx
mov eax, dword [ebp - 0x1d14]
mov dword [ebp - 0x1d18], eax
mov ecx, dword [ebp - 0x1d18]
mov dword [ebp - 0x1d20], ecx
mov edx, dword [ebp - 0x1d1c]
push edx
mov ecx, dword [ebp - 0x1c94]
call dword [ebp - 0x1d20]
mov dword [ebp - 0x1d24], eax
mov eax, dword [ebp - 0x1d24]
mov dword [ebp - 0x1a68], eax
cmp dword [ebp - 0x1b60], 1
jl 0x103467c0
cmp dword [ebp - 0x1b60], 0x40
jg 0x103467c0
cmp dword [ebp - 0x1a68], 1
jl 0x103467c0
cmp dword [ebp - 0x1a68], 0x40
jle 0x103467da
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.10063170
nop
jmp 0x10349345
mov ecx, dword [0x109f27f4]
mov dword [ebp - 0x1c9c], ecx
lea edx, [ebp - 0x1d2c]
mov dword [ebp - 0x1c98], edx
mov eax, dword [ebp - 0x1c98]
mov ecx, dword [ebp - 0x1c9c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1c98]
mov dword [ebp - 0x1d28], edx
mov eax, dword [ebp - 0x1d28]
mov dword [ebp - 0x22f8], eax
mov ecx, dword [ebp - 0x1d2c]
mov edx, dword [ecx]
mov dword [ebp - 0x1d30], edx
mov eax, 0xc
shl eax, 2
mov ecx, dword [ebp - 0x1d30]
mov edx, dword [ecx + eax]
mov dword [ebp - 0x1d34], edx
mov eax, dword [ebp - 0x1d34]
mov dword [ebp - 0x1d38], eax
mov ecx, dword [ebp - 0x1d38]
mov dword [ebp - 0x1d3c], ecx
mov edx, dword [ebp - 0x1d3c]
mov dword [ebp - 0x1d40], edx
mov ecx, dword [ebp - 0x1c9c]
call dword [ebp - 0x1d40]
mov dword [ebp - 0x1d44], eax
mov eax, dword [ebp - 0x1d44]
cmp dword [ebp - 0x1b60], eax
jne 0x1034692c
mov ecx, dword [0x109f27f4]
mov dword [ebp - 0x1ca4], ecx
lea edx, [ebp - 0x1d4c]
mov dword [ebp - 0x1ca0], edx
mov eax, dword [ebp - 0x1ca0]
mov ecx, dword [ebp - 0x1ca4]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1ca0]
mov dword [ebp - 0x1d48], edx
mov eax, dword [ebp - 0x1d48]
mov dword [ebp - 0x2274], eax
mov ecx, dword [ebp - 0x1d4c]
mov edx, dword [ecx]
mov dword [ebp - 0x1d50], edx
mov eax, 0xc
shl eax, 2
mov ecx, dword [ebp - 0x1d50]
mov edx, dword [ecx + eax]
mov dword [ebp - 0x1d54], edx
mov eax, dword [ebp - 0x1d54]
mov dword [ebp - 0x1d58], eax
mov ecx, dword [ebp - 0x1d58]
mov dword [ebp - 0x1d5c], ecx
mov edx, dword [ebp - 0x1d5c]
mov dword [ebp - 0x1d60], edx
mov ecx, dword [ebp - 0x1ca4]
call dword [ebp - 0x1d60]
mov dword [ebp - 0x1d64], eax
mov eax, dword [ebp - 0x1d64]
cmp dword [ebp - 0x1a68], eax
jne 0x10346941
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.10063170
nop
jmp 0x10349345
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1cac], edx
xor eax, eax
mov byte [ebp - 0x1bc6], al
mov dword [ebp - 0x2278], 0x2a7e565d
mov dword [ebp - 0x1d68], 0x2a7e565d
mov ecx, dword [ebp - 0x1d68]
mov dword [ebp - 0x1cb0], ecx
mov edx, dword [0x10a197a4]
and edx, 1
jne 0x10346a21
mov eax, dword [0x10a197a4]
or eax, 1
mov dword [0x10a197a4], eax
mov byte [ebp - 4], 4
xor ecx, ecx
mov byte [ebp - 0x1bc5], cl
mov dword [ebp - 0x22d8], 0xda7d68cb
mov dword [ebp - 0x1d6c], 0xda7d68cb
mov edx, dword [ebp - 0x1d6c]
mov dword [ebp - 0x1d74], edx
xor eax, eax
mov byte [ebp - 0x1bc4], al
mov dword [ebp - 0x22dc], 0x990704d7
mov dword [ebp - 0x1d70], 0x990704d7
mov ecx, dword [ebp - 0x1d70]
push ecx
lea edx, [ebp - 0x23ac]
push edx
call fcn.102f3e20
add esp, 8
mov dword [ebp - 0x1d78], eax
mov eax, dword [ebp - 0x1d74]
push eax
mov ecx, dword [ebp - 0x1d78]
push ecx
push 0x10a197a8
call fcn.102f2f10
add esp, 0xc
push 0x103bf240
call fcn.101f5a40
add esp, 4
mov byte [ebp - 4], 1
cmp dword [0x10a197a8], 0
je 0x10346a38
mov edx, dword [0x10a197a8]
mov dword [ebp - 0x1ca8], edx
jmp 0x10346a42
mov dword [ebp - 0x1ca8], 0
mov eax, dword [ebp - 0x1ca8]
mov dword [ebp - 0x1d7c], eax
mov ecx, dword [ebp - 0x1d7c]
call ecx
mov dword [ebp - 0x1d80], eax
mov edx, dword [ebp - 0x1d80]
mov dword [ebp - 0x1b64], edx
cmp dword [ebp - 0x1cac], 0
je 0x10346a83
cmp dword [ebp - 0x1cb0], 0
je 0x10346a83
cmp dword [ebp - 0x1b64], 0
jne 0x10346a92
mov dword [ebp - 0x1b70], 0
jmp 0x10346be4
mov eax, dword [ebp - 0x1cac]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x1aa8], ecx
jmp 0x10346ab2
mov edx, dword [ebp - 0x1aa8]
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x1aa8], eax
cmp dword [ebp - 0x1aa8], 0
je 0x10346bda
mov ecx, dword [ebp - 0x1b64]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x1d84], eax
mov ecx, dword [ebp - 0x1aa8]
mov edx, dword [ecx]
and edx, 0xffffff
push edx
mov ecx, dword [ebp - 0x1b64]
call dword [ebp - 0x1d84]
mov dword [ebp - 0x1b68], eax
cmp dword [ebp - 0x1b68], 0
je 0x10346bd5
mov dword [ebp - 0x1b6c], 0x811c9dc5
mov dword [ebp - 0x1a78], 0
mov eax, dword [ebp - 0x1a78]
add eax, 1
mov dword [ebp - 0x1a78], eax
mov ecx, dword [ebp - 0x1b68]
add ecx, dword [ebp - 0x1a78]
movsx edx, byte [ecx]
test edx, edx
je 0x10346b36
jmp 0x10346b12
xor eax, eax
je 0x10346b49
mov ecx, dword [ebp - 0x1a78]
add ecx, 1
mov dword [ebp - 0x1a78], ecx
mov edx, dword [ebp - 0x1a78]
mov dword [ebp - 0x1d88], edx
mov eax, dword [ebp - 0x1d88]
mov dword [ebp - 0x1d8c], eax
mov dword [ebp - 0x1b1c], 0
jmp 0x10346b7c
mov ecx, dword [ebp - 0x1b1c]
add ecx, 1
mov dword [ebp - 0x1b1c], ecx
mov edx, dword [ebp - 0x1b1c]
cmp edx, dword [ebp - 0x1d8c]
jae 0x10346bad
mov eax, dword [ebp - 0x1b68]
add eax, dword [ebp - 0x1b1c]
movsx ecx, byte [eax]
xor ecx, dword [ebp - 0x1b6c]
imul edx, ecx, 0x1000193
mov dword [ebp - 0x1b6c], edx
jmp 0x10346b6d
mov eax, dword [ebp - 0x1b6c]
mov dword [ebp - 0x1d90], eax
mov ecx, dword [ebp - 0x1d90]
cmp ecx, dword [ebp - 0x1cb0]
jne 0x10346bd5
mov edx, dword [ebp - 0x1aa8]
mov dword [ebp - 0x1b70], edx
jmp 0x10346be4
jmp 0x10346aa3
mov dword [ebp - 0x1b70], 0
mov eax, dword [ebp - 0x1b70]
mov dword [ebp - 0x1aac], eax
mov dword [ebp - 0x1a54], 0
mov ecx, dword [ebp - 0x1aac]
movsx edx, byte [ecx + 0x10]
mov dword [ebp - 0x1b20], edx
mov eax, dword [ebp - 0x1b20]
sub eax, 1
mov dword [ebp - 0x1b20], eax
cmp dword [ebp - 0x1b20], 6
ja case.0x10346c2c.1
mov ecx, dword [ebp - 0x1b20]
jmp dword [ecx*4 + 0x10349398]
mov edx, dword [ebp - 0x1aac]
mov eax, dword [edx + 4]
push eax
call fcn.10250330
add esp, 4
mov dword [ebp - 0x1a54], eax
jmp 0x10346cda
mov ecx, dword [ebp - 0x1aac]
mov edx, dword [ecx + 8]
push edx
call fcn.10250230
add esp, 4
mov dword [ebp - 0x1a54], eax
jmp 0x10346cda
mov eax, dword [ebp - 0x1aac]
vmovss xmm0, dword [eax + 0xc]
vmovss dword [ebp - 0x1d94], xmm0
fld dword [ebp - 0x1d94]
fstp qword [ebp - 0x22a0]
vxorps xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x22a0], 1
vmovsd qword [ebp - 0x22a8], xmm0
fld qword [ebp - 0x22a8]
fstp dword [ebp - 0x1d98]
vmovss xmm0, dword [ebp - 0x1d98]
vcvttss2si ecx, xmm0
mov dword [ebp - 0x1a54], ecx
jmp 0x10346cda
mov dword [ebp - 0x1a54], 0
jmp 0x10346cda
mov edx, dword [ebp - 0x1aac]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1a54], eax
cmp dword [ebp - 0x1a54], 0
je 0x10346cf1
mov ecx, dword [ebp - 0x1a54]
mov dword [ebp - 0x1bd0], ecx
jmp 0x10346cfb
mov dword [ebp - 0x1bd0], 0
mov edx, dword [ebp - 0x1bd0]
mov dword [ebp - 0x1d9c], edx
mov eax, dword [ebp - 0x1d9c]
mov dword [ebp - 0x1a64], eax
cmp dword [ebp - 0x1a64], 0xa
jne 0x10346d31
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.10063170
nop
jmp 0x10349345
mov ecx, dword [0x109f27f8]
mov dword [ebp - 0x1bd8], ecx
lea edx, [ebp - 0x1da4]
mov dword [ebp - 0x1bd4], edx
mov eax, dword [ebp - 0x1bd4]
mov ecx, dword [ebp - 0x1bd8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1bd4]
mov dword [ebp - 0x1da0], edx
mov eax, dword [ebp - 0x1da0]
mov dword [ebp - 0x22f0], eax
mov ecx, dword [ebp - 0x1da4]
mov edx, dword [ecx]
mov dword [ebp - 0x1da8], edx
mov eax, 3
shl eax, 2
mov ecx, dword [ebp - 0x1da8]
mov edx, dword [ecx + eax]
mov dword [ebp - 0x1dac], edx
mov eax, dword [ebp - 0x1dac]
mov dword [ebp - 0x1db0], eax
mov ecx, dword [ebp - 0x1db0]
mov dword [ebp - 0x1db4], ecx
mov edx, dword [ebp - 0x1db4]
mov dword [ebp - 0x1db8], edx
mov eax, dword [ebp - 0x1a68]
push eax
mov ecx, dword [ebp - 0x1bd8]
call dword [ebp - 0x1db8]
mov dword [ebp - 0x1dbc], eax
mov ecx, dword [ebp - 0x1dbc]
mov dword [ebp - 0x1a84], ecx
cmp dword [ebp - 0x1a84], 0
jne 0x10346dfb
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.10063170
nop
jmp 0x10349345
mov edx, dword [0x109f27f4]
mov dword [ebp - 0x1be0], edx
lea eax, [ebp - 0x1dc4]
mov dword [ebp - 0x1c48], eax
mov ecx, dword [ebp - 0x1c48]
mov edx, dword [ebp - 0x1be0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1c48]
mov dword [ebp - 0x1dc0], eax
mov ecx, dword [ebp - 0x1dc0]
mov dword [ebp - 0x21e4], ecx
mov edx, dword [ebp - 0x1dc4]
mov eax, dword [edx]
mov dword [ebp - 0x1dc8], eax
mov ecx, 8
shl ecx, 2
mov edx, dword [ebp - 0x1dc8]
mov eax, dword [edx + ecx]
mov dword [ebp - 0x1dcc], eax
mov ecx, dword [ebp - 0x1dcc]
mov dword [ebp - 0x1dd0], ecx
mov edx, dword [ebp - 0x1dd0]
mov dword [ebp - 0x1dd4], edx
mov eax, dword [ebp - 0x1dd4]
mov dword [ebp - 0x1dd8], eax
lea ecx, [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x1a68]
push edx
mov ecx, dword [ebp - 0x1be0]
call dword [ebp - 0x1dd8]
mov byte [ebp - 0x1a48], al
movzx eax, byte [ebp - 0x1a48]
test eax, eax
jne 0x10346ec2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.10063170
nop
jmp 0x10349345
lea ecx, [ebp - 0x21c]
push ecx
lea ecx, [ebp - 0x23d4]
call fcn.10063390
mov dword [ebp - 0x1ddc], eax
mov edx, dword [ebp - 0x1ddc]
mov dword [ebp - 0x1de0], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1de0]
mov dword [ebp - 0x1de8], eax
lea ecx, [ebp - 0x1bc3]
mov dword [ebp - 0x1de4], ecx
mov edx, dword [ebp - 0x1de4]
push edx
push 0x18
push 0
mov eax, dword [ebp - 0x1de8]
push eax
lea ecx, [ebp - 0x2338]
call fcn.100da550
mov ecx, dword [ebp - 0x1a8c]
or ecx, 1
mov dword [ebp - 0x1a8c], ecx
lea edx, [ebp - 0x2338]
mov dword [ebp - 0x1dec], edx
mov eax, dword [ebp - 0x1dec]
mov dword [ebp - 0x1df0], eax
mov ecx, dword [ebp - 0x1df0]
push ecx
lea ecx, [ebp - 0x34]
call fcn.10063240
lea ecx, [ebp - 0x2338]
call fcn.10063170
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x23d4]
call fcn.10063170
nop
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1be8], eax
xor ecx, ecx
mov byte [ebp - 0x1bc2], cl
mov dword [ebp - 0x21e8], 0xa0d9523e
mov dword [ebp - 0x1df4], 0xa0d9523e
mov edx, dword [ebp - 0x1df4]
mov dword [ebp - 0x1bec], edx
mov eax, dword [0x10a197a4]
and eax, 1
jne 0x10347051
mov ecx, dword [0x10a197a4]
or ecx, 1
mov dword [0x10a197a4], ecx
mov byte [ebp - 4], 6
xor edx, edx
mov byte [ebp - 0x1bc1], dl
mov dword [ebp - 0x21ec], 0xda7d68cb
mov dword [ebp - 0x1df8], 0xda7d68cb
mov eax, dword [ebp - 0x1df8]
mov dword [ebp - 0x1e00], eax
xor ecx, ecx
mov byte [ebp - 0x1bc0], cl
mov dword [ebp - 0x21f0], 0x990704d7
mov dword [ebp - 0x1dfc], 0x990704d7
mov edx, dword [ebp - 0x1dfc]
push edx
lea eax, [ebp - 0x23b8]
push eax
call fcn.102f3e20
add esp, 8
mov dword [ebp - 0x1e04], eax
mov ecx, dword [ebp - 0x1e00]
push ecx
mov edx, dword [ebp - 0x1e04]
push edx
push 0x10a197a8
call fcn.102f2f10
add esp, 0xc
push 0x103bf240
call fcn.101f5a40
add esp, 4
mov byte [ebp - 4], 1
cmp dword [0x10a197a8], 0
je 0x10347067
mov eax, dword [0x10a197a8]
mov dword [ebp - 0x1be4], eax
jmp 0x10347071
mov dword [ebp - 0x1be4], 0
mov ecx, dword [ebp - 0x1be4]
mov dword [ebp - 0x1e08], ecx
mov edx, dword [ebp - 0x1e08]
call edx
mov dword [ebp - 0x1e0c], eax
mov eax, dword [ebp - 0x1e0c]
mov dword [ebp - 0x1b74], eax
cmp dword [ebp - 0x1be8], 0
je 0x103470b2
cmp dword [ebp - 0x1bec], 0
je 0x103470b2
cmp dword [ebp - 0x1b74], 0
jne 0x103470c1
mov dword [ebp - 0x1b80], 0
jmp 0x10347212
mov ecx, dword [ebp - 0x1be8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1ab0], edx
jmp 0x103470e1
mov eax, dword [ebp - 0x1ab0]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1ab0], ecx
cmp dword [ebp - 0x1ab0], 0
je 0x10347208
mov edx, dword [ebp - 0x1b74]
mov eax, dword [edx]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x1e10], ecx
mov edx, dword [ebp - 0x1ab0]
mov eax, dword [edx]
and eax, 0xffffff
push eax
mov ecx, dword [ebp - 0x1b74]
call dword [ebp - 0x1e10]
mov dword [ebp - 0x1b78], eax
cmp dword [ebp - 0x1b78], 0
je 0x10347203
mov dword [ebp - 0x1b7c], 0x811c9dc5
mov dword [ebp - 0x1a7c], 0
mov ecx, dword [ebp - 0x1a7c]
add ecx, 1
mov dword [ebp - 0x1a7c], ecx
mov edx, dword [ebp - 0x1b78]
add edx, dword [ebp - 0x1a7c]
movsx eax, byte [edx]
test eax, eax
je 0x10347164
jmp 0x10347140
xor ecx, ecx
je 0x10347177
mov edx, dword [ebp - 0x1a7c]
add edx, 1
mov dword [ebp - 0x1a7c], edx
mov eax, dword [ebp - 0x1a7c]
mov dword [ebp - 0x1e14], eax
mov ecx, dword [ebp - 0x1e14]
mov dword [ebp - 0x1e18], ecx
mov dword [ebp - 0x1b24], 0
jmp 0x103471aa
mov edx, dword [ebp - 0x1b24]
add edx, 1
mov dword [ebp - 0x1b24], edx
mov eax, dword [ebp - 0x1b24]
cmp eax, dword [ebp - 0x1e18]
jae 0x103471db
mov ecx, dword [ebp - 0x1b78]
add ecx, dword [ebp - 0x1b24]
movsx edx, byte [ecx]
xor edx, dword [ebp - 0x1b7c]
imul eax, edx, 0x1000193
mov dword [ebp - 0x1b7c], eax
jmp 0x1034719b
mov ecx, dword [ebp - 0x1b7c]
mov dword [ebp - 0x1e1c], ecx
mov edx, dword [ebp - 0x1e1c]
cmp edx, dword [ebp - 0x1bec]
jne 0x10347203
mov eax, dword [ebp - 0x1ab0]
mov dword [ebp - 0x1b80], eax
jmp 0x10347212
jmp 0x103470d2
mov dword [ebp - 0x1b80], 0
mov ecx, dword [ebp - 0x1b80]
mov dword [ebp - 0x1ab4], ecx
mov dword [ebp - 0x1a58], 0
mov edx, dword [ebp - 0x1ab4]
movsx eax, byte [edx + 0x10]
mov dword [ebp - 0x1b28], eax
mov ecx, dword [ebp - 0x1b28]
sub ecx, 1
mov dword [ebp - 0x1b28], ecx
cmp dword [ebp - 0x1b28], 6
ja case.0x1034725a.1
mov edx, dword [ebp - 0x1b28]
jmp dword [edx*4 + 0x103493b4]
mov eax, dword [ebp - 0x1ab4]
mov ecx, dword [eax + 4]
push ecx
call fcn.10250330
add esp, 4
mov dword [ebp - 0x1a58], eax
jmp 0x10347308
mov edx, dword [ebp - 0x1ab4]
mov eax, dword [edx + 8]
push eax
call fcn.10250230
add esp, 4
mov dword [ebp - 0x1a58], eax
jmp 0x10347308
mov ecx, dword [ebp - 0x1ab4]
vmovss xmm0, dword [ecx + 0xc]
vmovss dword [ebp - 0x1e20], xmm0
fld dword [ebp - 0x1e20]
fstp qword [ebp - 0x22b0]
vxorps xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x22b0], 1
vmovsd qword [ebp - 0x22b8], xmm0
fld qword [ebp - 0x22b8]
fstp dword [ebp - 0x1e24]
vmovss xmm0, dword [ebp - 0x1e24]
vcvttss2si edx, xmm0
mov dword [ebp - 0x1a58], edx
jmp 0x10347308
mov dword [ebp - 0x1a58], 0
jmp 0x10347308
mov eax, dword [ebp - 0x1ab4]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x1a58], ecx
cmp dword [ebp - 0x1a58], 0
je 0x1034731f
mov edx, dword [ebp - 0x1a58]
mov dword [ebp - 0x1bf0], edx
jmp 0x10347329
mov dword [ebp - 0x1bf0], 0
mov eax, dword [ebp - 0x1bf0]
mov dword [ebp - 0x1e28], eax
mov ecx, dword [ebp - 0x1e28]
vcvtsi2ss xmm0, xmm0, ecx
vmovss dword [ebp - 0x1b00], xmm0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1bf8], eax
xor ecx, ecx
mov byte [ebp - 0x1bbf], cl
mov dword [ebp - 0x21f4], 0x6b98ed8f
mov dword [ebp - 0x1e2c], 0x6b98ed8f
mov edx, dword [ebp - 0x1e2c]
mov dword [ebp - 0x1bfc], edx
mov eax, dword [0x10a197a4]
and eax, 1
jne 0x10347428
mov ecx, dword [0x10a197a4]
or ecx, 1
mov dword [0x10a197a4], ecx
mov byte [ebp - 4], 7
xor edx, edx
mov byte [ebp - 0x1bb6], dl
mov dword [ebp - 0x21f8], 0xda7d68cb
mov dword [ebp - 0x1e30], 0xda7d68cb
mov eax, dword [ebp - 0x1e30]
mov dword [ebp - 0x1e38], eax
xor ecx, ecx
mov byte [ebp - 0x1bbe], cl
mov dword [ebp - 0x21fc], 0x990704d7
mov dword [ebp - 0x1e34], 0x990704d7
mov edx, dword [ebp - 0x1e34]
push edx
lea eax, [ebp - 0x237c]
push eax
call fcn.102f3e20
add esp, 8
mov dword [ebp - 0x1e3c], eax
mov ecx, dword [ebp - 0x1e38]
push ecx
mov edx, dword [ebp - 0x1e3c]
push edx
push 0x10a197a8
call fcn.102f2f10
add esp, 0xc
push 0x103bf240
call fcn.101f5a40
add esp, 4
mov byte [ebp - 4], 1
cmp dword [0x10a197a8], 0
je 0x1034743e
mov eax, dword [0x10a197a8]
mov dword [ebp - 0x1bf4], eax
jmp 0x10347448
mov dword [ebp - 0x1bf4], 0
mov ecx, dword [ebp - 0x1bf4]
mov dword [ebp - 0x1e40], ecx
mov edx, dword [ebp - 0x1e40]
call edx
mov dword [ebp - 0x1e44], eax
mov eax, dword [ebp - 0x1e44]
mov dword [ebp - 0x1b84], eax
cmp dword [ebp - 0x1bf8], 0
je 0x10347489
cmp dword [ebp - 0x1bfc], 0
je 0x10347489
cmp dword [ebp - 0x1b84], 0
jne 0x10347498
mov dword [ebp - 0x1b90], 0
jmp 0x103475e9
mov ecx, dword [ebp - 0x1bf8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1ab8], edx
jmp 0x103474b8
mov eax, dword [ebp - 0x1ab8]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1ab8], ecx
cmp dword [ebp - 0x1ab8], 0
je 0x103475df
mov edx, dword [ebp - 0x1b84]
mov eax, dword [edx]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x1e48], ecx
mov edx, dword [ebp - 0x1ab8]
mov eax, dword [edx]
and eax, 0xffffff
push eax
mov ecx, dword [ebp - 0x1b84]
call dword [ebp - 0x1e48]
mov dword [ebp - 0x1b88], eax
cmp dword [ebp - 0x1b88], 0
je 0x103475da
mov dword [ebp - 0x1b8c], 0x811c9dc5
mov dword [ebp - 0x1a80], 0
mov ecx, dword [ebp - 0x1a80]
add ecx, 1
mov dword [ebp - 0x1a80], ecx
mov edx, dword [ebp - 0x1b88]
add edx, dword [ebp - 0x1a80]
movsx eax, byte [edx]
test eax, eax
je 0x1034753b
jmp 0x10347517
xor ecx, ecx
je 0x1034754e
mov edx, dword [ebp - 0x1a80]
add edx, 1
mov dword [ebp - 0x1a80], edx
mov eax, dword [ebp - 0x1a80]
mov dword [ebp - 0x1e4c], eax
mov ecx, dword [ebp - 0x1e4c]
mov dword [ebp - 0x1e50], ecx
mov dword [ebp - 0x1b2c], 0
jmp 0x10347581
mov edx, dword [ebp - 0x1b2c]
add edx, 1
mov dword [ebp - 0x1b2c], edx
mov eax, dword [ebp - 0x1b2c]
cmp eax, dword [ebp - 0x1e50]
jae 0x103475b2
mov ecx, dword [ebp - 0x1b88]
add ecx, dword [ebp - 0x1b2c]
movsx edx, byte [ecx]
xor edx, dword [ebp - 0x1b8c]
imul eax, edx, 0x1000193
mov dword [ebp - 0x1b8c], eax
jmp 0x10347572
mov ecx, dword [ebp - 0x1b8c]
mov dword [ebp - 0x1e54], ecx
mov edx, dword [ebp - 0x1e54]
cmp edx, dword [ebp - 0x1bfc]
jne 0x103475da
mov eax, dword [ebp - 0x1ab8]
mov dword [ebp - 0x1b90], eax
jmp 0x103475e9
jmp 0x103474a9
mov dword [ebp - 0x1b90], 0
mov ecx, dword [ebp - 0x1b90]
mov dword [ebp - 0x1abc], ecx
mov dword [ebp - 0x1a5c], 0
mov edx, dword [ebp - 0x1abc]
movsx eax, byte [edx + 0x10]
mov dword [ebp - 0x1b30], eax
mov ecx, dword [ebp - 0x1b30]
sub ecx, 1
mov dword [ebp - 0x1b30], ecx
cmp dword [ebp - 0x1b30], 6
ja case.0x10347631.1
mov edx, dword [ebp - 0x1b30]
jmp dword [edx*4 + 0x103493d0]
mov eax, dword [ebp - 0x1abc]
mov ecx, dword [eax + 4]
push ecx
call fcn.10250330
add esp, 4
mov dword [ebp - 0x1a5c], eax
jmp 0x103476df
mov edx, dword [ebp - 0x1abc]
mov eax, dword [edx + 8]
push eax
call fcn.10250230
add esp, 4
mov dword [ebp - 0x1a5c], eax
jmp 0x103476df
mov ecx, dword [ebp - 0x1abc]
vmovss xmm0, dword [ecx + 0xc]
vmovss dword [ebp - 0x1e58], xmm0
fld dword [ebp - 0x1e58]
fstp qword [ebp - 0x22c0]
vxorps xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x22c0], 1
vmovsd qword [ebp - 0x22c8], xmm0
fld qword [ebp - 0x22c8]
fstp dword [ebp - 0x1e5c]
vmovss xmm0, dword [ebp - 0x1e5c]
vcvttss2si edx, xmm0
mov dword [ebp - 0x1a5c], edx
jmp 0x103476df
mov dword [ebp - 0x1a5c], 0
jmp 0x103476df
mov eax, dword [ebp - 0x1abc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x1a5c], ecx
cmp dword [ebp - 0x1a5c], 0
je 0x103476f6
mov edx, dword [ebp - 0x1a5c]
mov dword [ebp - 0x1c00], edx
jmp 0x10347700
mov dword [ebp - 0x1c00], 0
mov eax, dword [ebp - 0x1c00]
mov dword [ebp - 0x1e60], eax
mov ecx, dword [ebp - 0x1e60]
mov dword [ebp - 0x18], ecx
mov edx, dword [0x10a105c4]
sub edx, 0x36
xor edx, 0x95641a92
mov dword [ebp - 0x1e64], edx
mov eax, dword [ebp - 0x1e64]
mov dword [ebp - 0x1e68], eax
mov ecx, dword [0x108db454]
add ecx, dword [ebp - 0x1e68]
mov dword [ebp - 0x1e6c], ecx
mov edx, dword [ebp - 0x1e6c]
mov dword [ebp - 0x1e70], edx
mov eax, dword [ebp - 0x1e70]
vcvtsi2ss xmm0, xmm0, dword [eax]
mov ecx, dword [0x109f2854]
vmovss xmm1, dword [ecx + 0x20]
vmulss xmm0, xmm1, xmm0
vmovss dword [ebp - 0x1e74], xmm0
vmovss xmm0, dword [ebp - 0x1e74]
vmovss dword [ebp - 0x2200], xmm0
mov byte [ebp - 0x14], 0
mov byte [ebp - 0x13], 0
mov byte [ebp - 0x12], 0
mov byte [ebp - 0x11], 0
mov dword [ebp - 0x14], 0
call fcn.102bc670
movzx edx, al
test edx, edx
je 0x1034780d
vmovss xmm0, dword [0x10686d74]
vmovss dword [0x10a1965c], xmm0
mov eax, dword [0x109f2854]
vmovss xmm0, dword [eax + 0x10]
vmovss dword [0x10a19654], xmm0
vmovss xmm0, dword [0x10a19654]
vaddss xmm0, xmm0, dword [0x10a1965c]
vmovss dword [0x10a19658], xmm0
cmp dword [ebp - 0x18], 1
jge 0x103477fc
cmp dword [ebp - 0x1a64], 1
jne 0x103477fc
mov ecx, dword [0x10a12074]
mov dword [ebp - 0x14], ecx
jmp 0x10347805
mov edx, dword [0x10a12054]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
mov dword [0x10a19660], eax
mov ecx, dword [0x10a10600]
sub ecx, 0x45
xor ecx, 0x95641aa1
mov dword [ebp - 0x1e78], ecx
mov edx, dword [ebp - 0x1e78]
mov dword [ebp - 0x1e7c], edx
mov eax, dword [ebp - 0x1a84]
add eax, dword [ebp - 0x1e7c]
mov dword [ebp - 0x1e80], eax
mov ecx, dword [ebp - 0x1e80]
mov dword [ebp - 0x1e84], ecx
mov edx, dword [ebp - 0x1e84]
movzx eax, byte [edx]
test eax, eax
je 0x10347eba
cmp dword [ebp - 0x1a64], 1
jne 0x10347eba
mov ecx, dword [0x109f27e8]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1f5c], eax
cmp dword [ebp - 0x1a64], 1
jne 0x10347890
mov dword [ebp - 0x1c14], 1
jmp 0x1034789a
mov dword [ebp - 0x1c14], 0
mov dword [ebp - 0x1b94], 0x80
lea ecx, [ebp - 0x1a2c]
mov dword [ebp - 0x1b98], ecx
mov edx, dword [ebp - 0x1b94]
mov dword [ebp - 0x1e88], edx
mov eax, dword [ebp - 0x1b94]
sub eax, 1
mov dword [ebp - 0x1b94], eax
cmp dword [ebp - 0x1e88], 0
jbe 0x103478fb
mov dword [ebp - 0x1e8c], 0x100572f0
mov ecx, dword [ebp - 0x1b98]
call dword [ebp - 0x1e8c]
mov ecx, dword [ebp - 0x1b98]
add ecx, 0x30
mov dword [ebp - 0x1b98], ecx
jmp 0x103478b0
mov edx, dword [ebp - 0x1a84]
add edx, 4
mov dword [ebp - 0x1e90], edx
lea eax, [ebp - 0x1e98]
mov dword [ebp - 0x1c04], eax
mov ecx, dword [ebp - 0x1e90]
mov edx, dword [ebp - 0x1c04]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1c04]
mov dword [ebp - 0x1e94], eax
mov ecx, dword [ebp - 0x1e94]
mov dword [ebp - 0x2204], ecx
mov edx, dword [ebp - 0x1e98]
mov eax, dword [edx]
mov dword [ebp - 0x1e9c], eax
mov ecx, 8
shl ecx, 2
mov edx, dword [ebp - 0x1e9c]
mov eax, dword [edx + ecx]
mov dword [ebp - 0x1ea0], eax
mov ecx, dword [ebp - 0x1ea0]
mov dword [ebp - 0x1ea4], ecx
mov edx, dword [ebp - 0x1ea4]
mov dword [ebp - 0x1ea8], edx
mov eax, dword [ebp - 0x1ea8]
mov dword [ebp - 0x1eb4], eax
mov ecx, dword [ebp - 0x1a84]
add ecx, 4
mov dword [ebp - 0x1eac], ecx
mov edx, dword [ebp - 0x1eac]
mov dword [ebp - 0x1eb0], edx
mov ecx, dword [ebp - 0x1eb0]
call dword [ebp - 0x1eb4]
mov dword [ebp - 0x1eb8], eax
mov eax, dword [ebp - 0x1eb8]
mov dword [ebp - 0x1c0c], eax
cmp dword [ebp - 0x1c0c], 0
je 0x10347e3d
mov ecx, dword [0x109f282c]
mov dword [ebp - 0x1c10], ecx
lea edx, [ebp - 0x1ec0]
mov dword [ebp - 0x1c08], edx
mov eax, dword [ebp - 0x1c08]
mov ecx, dword [ebp - 0x1c10]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1c08]
mov dword [ebp - 0x1ebc], edx
mov eax, dword [ebp - 0x1ebc]
mov dword [ebp - 0x2208], eax
mov ecx, dword [ebp - 0x1ec0]
mov edx, dword [ecx]
mov dword [ebp - 0x1ec4], edx
mov eax, 0x1e
shl eax, 2
mov ecx, dword [ebp - 0x1ec4]
mov edx, dword [ecx + eax]
mov dword [ebp - 0x1ec8], edx
mov eax, dword [ebp - 0x1ec8]
mov dword [ebp - 0x1ecc], eax
mov ecx, dword [ebp - 0x1ecc]
mov dword [ebp - 0x1ed0], ecx
mov edx, dword [ebp - 0x1ed0]
mov dword [ebp - 0x1ed4], edx
mov eax, dword [ebp - 0x1c0c]
push eax
mov ecx, dword [ebp - 0x1c10]
call dword [ebp - 0x1ed4]
mov dword [ebp - 0x1ed8], eax
mov ecx, dword [ebp - 0x1ed8]
mov dword [ebp - 0x1b9c], ecx
cmp dword [ebp - 0x1b9c], 0
je 0x10347e3d
mov edx, dword [ebp - 0x1b9c]
mov eax, dword [ebp - 0x1b9c]
add eax, dword [edx + 0xb0]
xor ecx, ecx
imul edx, ecx, 0xc
add eax, edx
mov dword [ebp - 0x1edc], eax
mov eax, dword [ebp - 0x1edc]
mov dword [ebp - 0x1ba0], eax
cmp dword [ebp - 0x1ba0], 0
jne 0x10347ac4
mov dword [ebp - 0x1c18], 0
jmp 0x10347aee
mov ecx, dword [ebp - 0x1ba0]
mov edx, dword [ebp - 0x1ba0]
add edx, dword [ecx + 8]
imul eax, dword [ebp - 0x1c14], 0x44
add edx, eax
mov dword [ebp - 0x1ee0], edx
mov ecx, dword [ebp - 0x1ee0]
mov dword [ebp - 0x1c18], ecx
mov edx, dword [ebp - 0x1c18]
mov dword [ebp - 0x1ac0], edx
cmp dword [ebp - 0x1ac0], 0
je 0x10347e3d
mov dword [ebp - 0x1ee4], 0x80
mov eax, dword [ebp - 0x1ee4]
mov dword [ebp - 0x1f0c], eax
lea ecx, [ebp - 0x1a2c]
mov dword [ebp - 0x1ee8], ecx
mov edx, dword [ebp - 0x1ee8]
mov dword [ebp - 0x1f10], edx
mov eax, dword [ebp - 0x1a84]
add eax, 4
mov dword [ebp - 0x1eec], eax
lea ecx, [ebp - 0x1ef4]
mov dword [ebp - 0x1c1c], ecx
mov edx, dword [ebp - 0x1eec]
mov eax, dword [ebp - 0x1c1c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1c1c]
mov dword [ebp - 0x1ef0], ecx
mov edx, dword [ebp - 0x1ef0]
mov dword [ebp - 0x220c], edx
mov eax, dword [ebp - 0x1ef4]
mov ecx, dword [eax]
mov dword [ebp - 0x1ef8], ecx
mov edx, 0xd
shl edx, 2
mov eax, dword [ebp - 0x1ef8]
mov ecx, dword [eax + edx]
mov dword [ebp - 0x1efc], ecx
mov edx, dword [ebp - 0x1efc]
mov dword [ebp - 0x1f00], edx
mov eax, dword [ebp - 0x1f00]
mov dword [ebp - 0x1f04], eax
mov ecx, dword [ebp - 0x1f04]
mov dword [ebp - 0x1f18], ecx
mov edx, dword [ebp - 0x1a84]
add edx, 4
mov dword [ebp - 0x1f08], edx
mov eax, dword [ebp - 0x1f08]
mov dword [ebp - 0x1f14], eax
push ecx
vxorps xmm0, xmm0, xmm0
vmovss dword [esp], xmm0
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x1f0c]
push ecx
mov edx, dword [ebp - 0x1f10]
push edx
mov ecx, dword [ebp - 0x1f14]
call dword [ebp - 0x1f18]
mov byte [ebp - 0x1a5d], al
movzx eax, byte [ebp - 0x1a5d]
test eax, eax
je 0x10347e3d
mov ecx, dword [ebp - 0x1ac0]
mov edx, dword [ecx]
mov dword [ebp - 0x1c20], edx
cmp dword [ebp - 0x1c20], 0x80
jb 0x10347c38
call fcn.1017fa80
nop
imul eax, dword [ebp - 0x1c20], 0x30
lea ecx, [ebp + eax - 0x1a2c]
mov dword [ebp - 0x1f1c], ecx
mov edx, dword [ebp - 0x1f1c]
push edx
mov eax, dword [ebp - 0x1ac0]
add eax, 8
push eax
lea ecx, [ebp - 0xac]
push ecx
call fcn.1035b570
add esp, 0xc
mov edx, dword [ebp - 0x1ac0]
mov eax, dword [edx]
mov dword [ebp - 0x1c24], eax
cmp dword [ebp - 0x1c24], 0x80
jb 0x10347c8c
call fcn.1017fa80
nop
imul ecx, dword [ebp - 0x1c24], 0x30
lea edx, [ebp + ecx - 0x1a2c]
mov dword [ebp - 0x1f20], edx
mov eax, dword [ebp - 0x1f20]
push eax
mov ecx, dword [ebp - 0x1ac0]
add ecx, 0x14
push ecx
lea edx, [ebp - 0xb8]
push edx
call fcn.1035b570
add esp, 0xc
vmovss xmm0, dword [ebp - 0xac]
vaddss xmm0, xmm0, dword [ebp - 0xb8]
vmovss dword [ebp - 0x1f24], xmm0
vmovss xmm0, dword [ebp - 0xa8]
vaddss xmm0, xmm0, dword [ebp - 0xb4]
vmovss dword [ebp - 0x1f28], xmm0
vmovss xmm0, dword [ebp - 0xa4]
vaddss xmm0, xmm0, dword [ebp - 0xb0]
vmovss dword [ebp - 0x1f2c], xmm0
vmovss xmm0, dword [ebp - 0x1f24]
vmovss dword [ebp - 0x21c4], xmm0
vmovss xmm0, dword [ebp - 0x1f28]
vmovss dword [ebp - 0x21c0], xmm0
vmovss xmm0, dword [ebp - 0x1f2c]
vmovss dword [ebp - 0x21bc], xmm0
lea eax, [ebp - 0x21c4]
mov dword [ebp - 0x1f30], eax
mov ecx, dword [ebp - 0x1f30]
mov dword [ebp - 0x1ba4], ecx
mov edx, dword [ebp - 0x1ba4]
vmovss xmm0, dword [edx]
vmulss xmm0, xmm0, dword [0x10686d28]
vmovss dword [ebp - 0x1f34], xmm0
mov eax, dword [ebp - 0x1ba4]
vmovss xmm0, dword [eax + 4]
vmulss xmm0, xmm0, dword [0x10686d28]
vmovss dword [ebp - 0x1f38], xmm0
mov ecx, dword [ebp - 0x1ba4]
vmovss xmm0, dword [ecx + 8]
vmulss xmm0, xmm0, dword [0x10686d28]
vmovss dword [ebp - 0x1f3c], xmm0
vmovss xmm0, dword [ebp - 0x1f34]
vmovss dword [ebp - 0x21d0], xmm0
vmovss xmm0, dword [ebp - 0x1f38]
vmovss dword [ebp - 0x21cc], xmm0
vmovss xmm0, dword [ebp - 0x1f3c]
vmovss dword [ebp - 0x21c8], xmm0
lea edx, [ebp - 0x21d0]
mov dword [ebp - 0x1f40], edx
mov eax, dword [ebp - 0x1f40]
mov dword [ebp - 0x1f44], eax
mov ecx, dword [ebp - 0x1f44]
mov dword [ebp - 0x1f48], ecx
mov dl, byte [0x10686648]
mov byte [ebp - 0x1bbd], dl
mov eax, dword [ebp - 0x1f48]
mov dword [ebp - 0x1f4c], eax
lea ecx, [ebp - 0x21e0]
mov edx, dword [ebp - 0x1f4c]
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov edx, dword [edx + 8]
mov dword [ecx + 8], edx
mov byte [ebp - 0x21d4], 1
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x1c28], eax
jmp 0x10347e5c
mov cl, byte [0x10686649]
mov byte [ebp - 0x1bbc], cl
mov byte [ebp - 0x21d4], 0
lea edx, [ebp - 0x21e0]
mov dword [ebp - 0x1c28], edx
mov eax, dword [ebp - 0x1c28]
mov dword [ebp - 0x1c2c], eax
mov ecx, dword [ebp - 0x1c2c]
movzx edx, byte [ecx + 0xc]
test edx, edx
jne 0x10347e7c
call fcn.1017cf60
nop
mov eax, dword [ebp - 0x1c2c]
mov dword [ebp - 0x1f50], eax
mov ecx, dword [ebp - 0x1f50]
mov dword [ebp - 0x1f54], ecx
mov edx, dword [ebp - 0x1f54]
mov dword [ebp - 0x1f58], edx
push 0
push 1
push 2
mov eax, dword [ebp - 0x1f58]
push eax
mov ecx, dword [0x109f27e8]
call dword [ebp - 0x1f5c]
nop
mov dword [ebp - 0x54], 3
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x1f64], ecx
lea edx, [ebp - 0x1f64]
mov dword [ebp - 0x1f68], edx
mov eax, dword [ebp - 0x1f68]
mov ecx, dword [eax]
mov dword [ebp - 0x1f6c], ecx
mov edx, dword [ebp - 0x1f6c]
mov dword [ebp - 0x1f70], edx
mov dword [ebp - 0x1f74], 0x10a0ff2c
mov dword [ebp - 0x1f78], 0x10a0ff2c
mov eax, dword [ebp - 0x1f70]
push eax
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x2210], esp
push ecx
mov ecx, dword [ebp - 0x1f74]
call fcn.1005ee40
sub esp, 0xc
mov edx, esp
mov dword [ebp - 0x2214], esp
push edx
mov ecx, dword [ebp - 0x1f78]
call fcn.1005eed0
lea eax, [ebp - 0x2304]
push eax
call fcn.1006b1e0
add esp, 0x20
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov dword [ebp - 0x1f80], ecx
mov edx, dword [ebp - 0x1f80]
mov dword [ebp - 0x1c30], edx
mov dword [ebp - 0x1f84], 0x10a0ff2c
lea eax, [ebp - 0x2310]
push eax
mov ecx, dword [ebp - 0x1f84]
call fcn.1005ee40
mov dword [ebp - 0x1f88], eax
mov ecx, dword [ebp - 0x1f88]
mov dword [ebp - 0x1c34], ecx
mov edx, dword [ebp - 0x1c34]
push edx
mov ecx, dword [ebp - 0x1c30]
call fcn.100642b0
mov eax, dword [ebp - 0x1c30]
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 8]
jne 0x10347fc6
mov dword [ebp - 0x1c38], 1
jmp 0x10347fd0
mov dword [ebp - 0x1c38], 0
mov al, byte [ebp - 0x1c38]
mov byte [ebp - 0x1a2d], al
movzx ecx, byte [ebp - 0x1a2d]
test ecx, ecx
jne 0x10347ff3
mov dword [ebp - 0x1c3c], 1
jmp 0x10347ffd
mov dword [ebp - 0x1c3c], 0
mov dl, byte [ebp - 0x1c3c]
mov byte [ebp - 0x1a2e], dl
mov al, byte [ebp - 0x1a2e]
mov byte [ebp - 0x1a2f], al
push 3
lea ecx, [ebp - 0x58]
call fcn.101b24a0
lea ecx, [ebp - 0x2310]
call fcn.100539d0
lea ecx, [ebp - 0x58]
call fcn.101b2590
nop
push 3
lea ecx, [ebp - 0x5c]
call fcn.101b24a0
lea ecx, [ebp - 0x2304]
call fcn.100539d0
lea ecx, [ebp - 0x5c]
call fcn.101b2590
nop
mov cl, byte [ebp - 0x1a2f]
mov byte [ebp - 0x1a30], cl
movzx edx, byte [ebp - 0x1a30]
test edx, edx
je 0x103480a6
mov eax, dword [0x109f284c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f94], edx
push ecx
vxorps xmm0, xmm0, xmm0
vmovss dword [esp], xmm0
push 0
push 0x64
push ecx
vmovss xmm0, dword [0x10686f88]
vmovss dword [esp], xmm0
push 0x10600958
mov ecx, dword [0x109f284c]
call dword [ebp - 0x1f94]
nop
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1c44], ecx
xor edx, edx
mov byte [ebp - 0x1bb8], dl
mov dword [ebp - 0x2218], 0x6f332041
mov dword [ebp - 0x1f98], 0x6f332041
mov eax, dword [ebp - 0x1f98]
mov dword [ebp - 0x1cb4], eax
mov ecx, dword [0x10a197a4]
and ecx, 1
jne 0x10348188
mov edx, dword [0x10a197a4]
or edx, 1
mov dword [0x10a197a4], edx
mov byte [ebp - 4], 8
xor eax, eax
mov byte [ebp - 0x1bb7], al
mov dword [ebp - 0x221c], 0xda7d68cb
mov dword [ebp - 0x1f9c], 0xda7d68cb
mov ecx, dword [ebp - 0x1f9c]
mov dword [ebp - 0x1fa4], ecx
xor edx, edx
mov byte [ebp - 0x1bb5], dl
mov dword [ebp - 0x2220], 0x990704d7
mov dword [ebp - 0x1fa0], 0x990704d7
mov eax, dword [ebp - 0x1fa0]
push eax
lea ecx, [ebp - 0x2388]
push ecx
call fcn.102f3e20
add esp, 8
mov dword [ebp - 0x1fa8], eax
mov edx, dword [ebp - 0x1fa4]
push edx
mov eax, dword [ebp - 0x1fa8]
push eax
push 0x10a197a8
call fcn.102f2f10
add esp, 0xc
push 0x103bf240
call fcn.101f5a40
add esp, 4
mov byte [ebp - 4], 1
cmp dword [0x10a197a8], 0
je 0x1034819f
mov ecx, dword [0x10a197a8]
mov dword [ebp - 0x1c40], ecx
jmp 0x103481a9
mov dword [ebp - 0x1c40], 0
mov edx, dword [ebp - 0x1c40]
mov dword [ebp - 0x1fac], edx
mov eax, dword [ebp - 0x1fac]
call eax
mov dword [ebp - 0x1fb0], eax
mov ecx, dword [ebp - 0x1fb0]
mov dword [ebp - 0x1ba8], ecx
cmp dword [ebp - 0x1c44], 0
je 0x103481ea
cmp dword [ebp - 0x1cb4], 0
je 0x103481ea
cmp dword [ebp - 0x1ba8], 0
jne 0x103481f9
mov dword [ebp - 0x1bb4], 0
jmp 0x1034834b
mov edx, dword [ebp - 0x1c44]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x1ac4], eax
jmp 0x10348219
mov ecx, dword [ebp - 0x1ac4]
mov edx, dword [ecx + 0x14]
mov dword [ebp - 0x1ac4], edx
cmp dword [ebp - 0x1ac4], 0
je 0x10348341
mov eax, dword [ebp - 0x1ba8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x1fb4], edx
mov eax, dword [ebp - 0x1ac4]
mov ecx, dword [eax]
and ecx, 0xffffff
push ecx
mov ecx, dword [ebp - 0x1ba8]
call dword [ebp - 0x1fb4]
mov dword [ebp - 0x1bac], eax
cmp dword [ebp - 0x1bac], 0
je 0x1034833c
mov dword [ebp - 0x1bb0], 0x811c9dc5
mov dword [ebp - 0x1a88], 0
mov edx, dword [ebp - 0x1a88]
add edx, 1
mov dword [ebp - 0x1a88], edx
mov eax, dword [ebp - 0x1bac]
add eax, dword [ebp - 0x1a88]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1034829d
jmp 0x10348279
xor edx, edx
je 0x103482b0
mov eax, dword [ebp - 0x1a88]
add eax, 1
mov dword [ebp - 0x1a88], eax
mov ecx, dword [ebp - 0x1a88]
mov dword [ebp - 0x1fb8], ecx
mov edx, dword [ebp - 0x1fb8]
mov dword [ebp - 0x1fbc], edx
mov dword [ebp - 0x1b34], 0
jmp 0x103482e3
mov eax, dword [ebp - 0x1b34]
add eax, 1
mov dword [ebp - 0x1b34], eax
mov ecx, dword [ebp - 0x1b34]
cmp ecx, dword [ebp - 0x1fbc]
jae 0x10348314
mov edx, dword [ebp - 0x1bac]
add edx, dword [ebp - 0x1b34]
movsx eax, byte [edx]
xor eax, dword [ebp - 0x1bb0]
imul ecx, eax, 0x1000193
mov dword [ebp - 0x1bb0], ecx
jmp 0x103482d4
mov edx, dword [ebp - 0x1bb0]
mov dword [ebp - 0x1fc0], edx
mov eax, dword [ebp - 0x1fc0]
cmp eax, dword [ebp - 0x1cb4]
jne 0x1034833c
mov ecx, dword [ebp - 0x1ac4]
mov dword [ebp - 0x1bb4], ecx
jmp 0x1034834b
jmp 0x1034820a
mov dword [ebp - 0x1bb4], 0
mov edx, dword [ebp - 0x1bb4]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0xd4]
call fcn.10063390
mov byte [ebp - 4], 9
push 0x1060097c
lea ecx, [ebp - 0xd4]
call fcn.100e1c40
mov byte [ebp - 0x1a31], al
movzx ecx, byte [ebp - 0x1a31]
test ecx, ecx
je 0x10348494
mov edx, dword [0x10a12054]
mov dword [ebp - 0x1fd0], edx
vcvttss2si eax, dword [ebp - 0x1b00]
mov dword [ebp - 0x1fc4], eax
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x1fc4]
push edx
lea eax, [ebp - 0x34]
push eax
push str.naded__s_for__i_damage___i_health_remaining__n
lea ecx, [ebp - 0x23f0]
push ecx
call fcn.101803f0
add esp, 0x14
mov dword [ebp - 0x1fc8], eax
mov edx, dword [ebp - 0x1fc8]
mov dword [ebp - 0x1fcc], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x1fcc]
mov dword [ebp - 0x1fdc], eax
vmovss xmm0, dword [0x10686ecc]
vmovss dword [ebp - 0x50], xmm0
mov ecx, dword [ebp - 0x1fd0]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c80], 0x10a104b8
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x1fdc]
push ecx
lea edx, [ebp - 0x21a8]
push edx
call fcn.10087630
add esp, 0x10
mov dword [ebp - 0x1fe0], eax
mov eax, dword [ebp - 0x1fe0]
mov dword [ebp - 0x1fe4], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1c80]
call fcn.10085530
mov ecx, dword [ebp - 0x1fe4]
mov dword [ebp - 0x1fe8], ecx
mov edx, dword [ebp - 0x1fe8]
push edx
mov ecx, dword [ebp - 0x1c80]
call fcn.10087d00
nop
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x21a4], 0
je 0x1034847f
mov ecx, dword [ebp - 0x21a4]
call fcn.10053e00
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x23f0]
call fcn.10063170
nop
jmp 0x103490bf
push str.inferno
lea ecx, [ebp - 0xd4]
call fcn.100e1c40
mov byte [ebp - 0x1a32], al
movzx eax, byte [ebp - 0x1a32]
test eax, eax
je 0x103485c4
mov ecx, dword [0x10a12054]
mov dword [ebp - 0x1ff8], ecx
vcvttss2si edx, dword [ebp - 0x1b00]
mov dword [ebp - 0x1fec], edx
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x1fec]
push ecx
lea edx, [ebp - 0x34]
push edx
push str.burnt__s_for__i_damage___i_health_remaining__n
lea eax, [ebp - 0x240c]
push eax
call fcn.101803f0
add esp, 0x14
mov dword [ebp - 0x1ff0], eax
mov ecx, dword [ebp - 0x1ff0]
mov dword [ebp - 0x1ff4], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x1ff4]
mov dword [ebp - 0x2004], edx
vmovss xmm0, dword [0x10686ecc]
vmovss dword [ebp - 0x48], xmm0
mov eax, dword [ebp - 0x1ff8]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x1c50], 0x10a104b8
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x2004]
push eax
lea ecx, [ebp - 0x21b0]
push ecx
call fcn.10087630
add esp, 0x10
mov dword [ebp - 0x2008], eax
mov edx, dword [ebp - 0x2008]
mov dword [ebp - 0x200c], edx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1c50]
call fcn.10085530
mov eax, dword [ebp - 0x200c]
mov dword [ebp - 0x2010], eax
mov ecx, dword [ebp - 0x2010]
push ecx
mov ecx, dword [ebp - 0x1c50]
call fcn.10087d00
nop
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x21ac], 0
je 0x103485af
mov ecx, dword [ebp - 0x21ac]
call fcn.10053e00
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x240c]
call fcn.10063170
nop
jmp 0x103490bf
mov edx, dword [0x10a12054]
mov dword [ebp - 0x20ac], edx
vcvttss2si eax, dword [ebp - 0x1b00]
mov dword [ebp - 0x209c], eax
push 0x10686610
lea ecx, [ebp - 0xa0]
call fcn.10063390
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x1a64]
mov dword [ebp - 0x1b38], ecx
mov edx, dword [ebp - 0x1b38]
sub edx, 1
mov dword [ebp - 0x1b38], edx
cmp dword [ebp - 0x1b38], 7
ja case.default.0x10348620
mov eax, dword [ebp - 0x1b38]
jmp dword [eax*4 + 0x103493ec]
mov dword [ebp - 0x1ac8], str.head
mov ecx, dword [ebp - 0x1ac8]
add ecx, 1
mov dword [ebp - 0x2014], ecx
mov edx, dword [ebp - 0x1ac8]
mov al, byte [edx]
mov byte [ebp - 0x1a33], al
add dword [ebp - 0x1ac8], 1
cmp byte [ebp - 0x1a33], 0
jne 0x10348640
mov ecx, dword [ebp - 0x1ac8]
sub ecx, dword [ebp - 0x2014]
mov dword [ebp - 0x2018], ecx
mov edx, dword [ebp - 0x2018]
mov dword [ebp - 0x201c], edx
mov eax, dword [ebp - 0x201c]
mov dword [ebp - 0x2020], eax
mov ecx, dword [ebp - 0x2020]
push ecx
push str.head
lea ecx, [ebp - 0xa0]
call fcn.1007e890
mov dword [ebp - 0x2224], eax
jmp case.default.0x10348620
mov dword [ebp - 0x1acc], str.neck
mov edx, dword [ebp - 0x1acc]
add edx, 1
mov dword [ebp - 0x2024], edx
mov eax, dword [ebp - 0x1acc]
mov cl, byte [eax]
mov byte [ebp - 0x1a34], cl
add dword [ebp - 0x1acc], 1
cmp byte [ebp - 0x1a34], 0
jne 0x103486c3
mov edx, dword [ebp - 0x1acc]
sub edx, dword [ebp - 0x2024]
mov dword [ebp - 0x2028], edx
mov eax, dword [ebp - 0x2028]
mov dword [ebp - 0x202c], eax
mov ecx, dword [ebp - 0x202c]
mov dword [ebp - 0x2030], ecx
mov edx, dword [ebp - 0x2030]
push edx
push str.neck
lea ecx, [ebp - 0xa0]
call fcn.1007e890
mov dword [ebp - 0x2228], eax
jmp case.default.0x10348620
mov dword [ebp - 0x1ad0], str.chest
mov eax, dword [ebp - 0x1ad0]
add eax, 1
mov dword [ebp - 0x2034], eax
mov ecx, dword [ebp - 0x1ad0]
mov dl, byte [ecx]
mov byte [ebp - 0x1a35], dl
add dword [ebp - 0x1ad0], 1
cmp byte [ebp - 0x1a35], 0
jne 0x10348746
mov eax, dword [ebp - 0x1ad0]
sub eax, dword [ebp - 0x2034]
mov dword [ebp - 0x2038], eax
mov ecx, dword [ebp - 0x2038]
mov dword [ebp - 0x203c], ecx
mov edx, dword [ebp - 0x203c]
mov dword [ebp - 0x2040], edx
mov eax, dword [ebp - 0x2040]
push eax
push str.chest
lea ecx, [ebp - 0xa0]
call fcn.1007e890
mov dword [ebp - 0x222c], eax
jmp case.default.0x10348620
mov dword [ebp - 0x1ad4], str.stomach
mov ecx, dword [ebp - 0x1ad4]
add ecx, 1
mov dword [ebp - 0x2044], ecx
mov edx, dword [ebp - 0x1ad4]
mov al, byte [edx]
mov byte [ebp - 0x1a47], al
add dword [ebp - 0x1ad4], 1
cmp byte [ebp - 0x1a47], 0
jne 0x103487c9
mov ecx, dword [ebp - 0x1ad4]
sub ecx, dword [ebp - 0x2044]
mov dword [ebp - 0x2048], ecx
mov edx, dword [ebp - 0x2048]
mov dword [ebp - 0x204c], edx
mov eax, dword [ebp - 0x204c]
mov dword [ebp - 0x2050], eax
mov ecx, dword [ebp - 0x2050]
push ecx
push str.stomach
lea ecx, [ebp - 0xa0]
call fcn.1007e890
mov dword [ebp - 0x2230], eax
jmp case.default.0x10348620
mov dword [ebp - 0x1ad8], str.arms
mov edx, dword [ebp - 0x1ad8]
add edx, 1
mov dword [ebp - 0x2054], edx
mov eax, dword [ebp - 0x1ad8]
mov cl, byte [eax]
mov byte [ebp - 0x1a36], cl
add dword [ebp - 0x1ad8], 1
cmp byte [ebp - 0x1a36], 0
jne 0x1034884c
mov edx, dword [ebp - 0x1ad8]
sub edx, dword [ebp - 0x2054]
mov dword [ebp - 0x2058], edx
mov eax, dword [ebp - 0x2058]
mov dword [ebp - 0x205c], eax
mov ecx, dword [ebp - 0x205c]
mov dword [ebp - 0x2060], ecx
mov edx, dword [ebp - 0x2060]
push edx
push str.arms
lea ecx, [ebp - 0xa0]
call fcn.1007e890
mov dword [ebp - 0x2234], eax
jmp case.default.0x10348620
mov dword [ebp - 0x1adc], str.arms
mov eax, dword [ebp - 0x1adc]
add eax, 1
mov dword [ebp - 0x2064], eax
mov ecx, dword [ebp - 0x1adc]
mov dl, byte [ecx]
mov byte [ebp - 0x1a37], dl
add dword [ebp - 0x1adc], 1
cmp byte [ebp - 0x1a37], 0
jne 0x103488cf
mov eax, dword [ebp - 0x1adc]
sub eax, dword [ebp - 0x2064]
mov dword [ebp - 0x2068], eax
mov ecx, dword [ebp - 0x2068]
mov dword [ebp - 0x206c], ecx
mov edx, dword [ebp - 0x206c]
mov dword [ebp - 0x2070], edx
mov eax, dword [ebp - 0x2070]
push eax
push str.arms
lea ecx, [ebp - 0xa0]
call fcn.1007e890
mov dword [ebp - 0x2238], eax
jmp case.default.0x10348620
mov dword [ebp - 0x1ae0], str.legs
mov ecx, dword [ebp - 0x1ae0]
add ecx, 1
mov dword [ebp - 0x2074], ecx
mov edx, dword [ebp - 0x1ae0]
mov al, byte [edx]
mov byte [ebp - 0x1a38], al
add dword [ebp - 0x1ae0], 1
cmp byte [ebp - 0x1a38], 0
jne 0x10348952
mov ecx, dword [ebp - 0x1ae0]
sub ecx, dword [ebp - 0x2074]
mov dword [ebp - 0x2078], ecx
mov edx, dword [ebp - 0x2078]
mov dword [ebp - 0x207c], edx
mov eax, dword [ebp - 0x207c]
mov dword [ebp - 0x2180], eax
mov ecx, dword [ebp - 0x2180]
push ecx
push str.legs
lea ecx, [ebp - 0xa0]
call fcn.1007e890
mov dword [ebp - 0x223c], eax
jmp case.default.0x10348620
mov dword [ebp - 0x1ae4], str.legs
mov edx, dword [ebp - 0x1ae4]
add edx, 1
mov dword [ebp - 0x2084], edx
mov eax, dword [ebp - 0x1ae4]
mov cl, byte [eax]
mov byte [ebp - 0x1a39], cl
add dword [ebp - 0x1ae4], 1
cmp byte [ebp - 0x1a39], 0
jne 0x103489d2
mov edx, dword [ebp - 0x1ae4]
sub edx, dword [ebp - 0x2084]
mov dword [ebp - 0x2088], edx
mov eax, dword [ebp - 0x2088]
mov dword [ebp - 0x208c], eax
mov ecx, dword [ebp - 0x208c]
mov dword [ebp - 0x2090], ecx
mov edx, dword [ebp - 0x2090]
push edx
push str.legs
lea ecx, [ebp - 0xa0]
call fcn.1007e890
mov dword [ebp - 0x2240], eax
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x2354]
call fcn.100632b0
mov ecx, dword [ebp - 0x1a8c]
or ecx, 2
mov dword [ebp - 0x1a8c], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xa0]
call fcn.10063170
lea edx, [ebp - 0x2354]
mov dword [ebp - 0x2094], edx
mov eax, dword [ebp - 0x2094]
mov dword [ebp - 0x2098], eax
mov ecx, dword [ebp - 0x2098]
mov dword [ebp - 0x20a0], ecx
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x209c]
push eax
mov ecx, dword [ebp - 0x20a0]
push ecx
lea edx, [ebp - 0x34]
push edx
push 0x10600a88
lea eax, [ebp - 0x2428]
push eax
call fcn.10180520
add esp, 0x18
mov dword [ebp - 0x20a4], eax
mov ecx, dword [ebp - 0x20a4]
mov dword [ebp - 0x20a8], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x20a8]
mov dword [ebp - 0x20b8], edx
vmovss xmm0, dword [0x10686ecc]
vmovss dword [ebp - 0x40], xmm0
mov eax, dword [ebp - 0x20ac]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x1c54], 0x10a104b8
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
mov eax, dword [ebp - 0x20b8]
push eax
lea ecx, [ebp - 0x21b8]
push ecx
call fcn.10087630
add esp, 0x10
mov dword [ebp - 0x20bc], eax
mov edx, dword [ebp - 0x20bc]
mov dword [ebp - 0x20c0], edx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x1c54]
call fcn.10085530
mov eax, dword [ebp - 0x20c0]
mov dword [ebp - 0x20c4], eax
mov ecx, dword [ebp - 0x20c4]
push ecx
mov ecx, dword [ebp - 0x1c54]
call fcn.10087d00
nop
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x21b4], 0
je 0x10348b72
mov ecx, dword [ebp - 0x21b4]
call fcn.10053e00
nop
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2428]
call fcn.10063170
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2354]
call fcn.10063170
nop
mov edx, dword [0x10a12054]
mov dword [ebp - 0x20c8], edx
vcvttss2si eax, dword [ebp - 0x1b00]
mov dword [ebp - 0x2154], eax
sub esp, 8
vmovsd xmm0, qword [0x10686e50]
vmovsd qword [esp], xmm0
mov ecx, dword [ebp - 0x20c8]
push ecx
push 0x10686610
lea ecx, [ebp - 0x84]
call fcn.10063390
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x1a64]
mov dword [ebp - 0x1b04], edx
mov eax, dword [ebp - 0x1b04]
sub eax, 1
mov dword [ebp - 0x1b04], eax
cmp dword [ebp - 0x1b04], 7
ja case.default.0x10348c04
mov ecx, dword [ebp - 0x1b04]
jmp dword [ecx*4 + 0x1034940c]
mov dword [ebp - 0x1ae8], str.head
mov edx, dword [ebp - 0x1ae8]
add edx, 1
mov dword [ebp - 0x20cc], edx
mov eax, dword [ebp - 0x1ae8]
mov cl, byte [eax]
mov byte [ebp - 0x1a3a], cl
add dword [ebp - 0x1ae8], 1
cmp byte [ebp - 0x1a3a], 0
jne 0x10348c24
mov edx, dword [ebp - 0x1ae8]
sub edx, dword [ebp - 0x20cc]
mov dword [ebp - 0x20d0], edx
mov eax, dword [ebp - 0x20d0]
mov dword [ebp - 0x20d4], eax
mov ecx, dword [ebp - 0x20d4]
mov dword [ebp - 0x20d8], ecx
mov edx, dword [ebp - 0x20d8]
push edx
push str.head
lea ecx, [ebp - 0x84]
call fcn.1007e890
mov dword [ebp - 0x2244], eax
jmp case.default.0x10348c04
mov dword [ebp - 0x1aec], str.neck
mov eax, dword [ebp - 0x1aec]
add eax, 1
mov dword [ebp - 0x20dc], eax
mov ecx, dword [ebp - 0x1aec]
mov dl, byte [ecx]
mov byte [ebp - 0x1a3b], dl
add dword [ebp - 0x1aec], 1
cmp byte [ebp - 0x1a3b], 0
jne 0x10348ca7
mov eax, dword [ebp - 0x1aec]
sub eax, dword [ebp - 0x20dc]
mov dword [ebp - 0x20e0], eax
mov ecx, dword [ebp - 0x20e0]
mov dword [ebp - 0x20e4], ecx
mov edx, dword [ebp - 0x20e4]
mov dword [ebp - 0x20e8], edx
mov eax, dword [ebp - 0x20e8]
push eax
push str.neck
lea ecx, [ebp - 0x84]
call fcn.1007e890
mov dword [ebp - 0x2248], eax
jmp case.default.0x10348c04
mov dword [ebp - 0x1af0], str.chest
mov ecx, dword [ebp - 0x1af0]
add ecx, 1
mov dword [ebp - 0x20ec], ecx
mov edx, dword [ebp - 0x1af0]
mov al, byte [edx]
mov byte [ebp - 0x1a3c], al
add dword [ebp - 0x1af0], 1
cmp byte [ebp - 0x1a3c], 0
jne 0x10348d2a
mov ecx, dword [ebp - 0x1af0]
sub ecx, dword [ebp - 0x20ec]
mov dword [ebp - 0x20f0], ecx
mov edx, dword [ebp - 0x20f0]
mov dword [ebp - 0x20f4], edx
mov eax, dword [ebp - 0x20f4]
mov dword [ebp - 0x20f8], eax
mov ecx, dword [ebp - 0x20f8]
push ecx
push str.chest
lea ecx, [ebp - 0x84]
call fcn.1007e890
mov dword [ebp - 0x2270], eax
jmp case.default.0x10348c04
mov dword [ebp - 0x1af4], str.stomach
mov edx, dword [ebp - 0x1af4]
add edx, 1
mov dword [ebp - 0x20fc], edx
mov eax, dword [ebp - 0x1af4]
mov cl, byte [eax]
mov byte [ebp - 0x1a3d], cl
add dword [ebp - 0x1af4], 1
cmp byte [ebp - 0x1a3d], 0
jne 0x10348dad
mov edx, dword [ebp - 0x1af4]
sub edx, dword [ebp - 0x20fc]
mov dword [ebp - 0x2100], edx
mov eax, dword [ebp - 0x2100]
mov dword [ebp - 0x2104], eax
mov ecx, dword [ebp - 0x2104]
mov dword [ebp - 0x2108], ecx
mov edx, dword [ebp - 0x2108]
push edx
push str.stomach
lea ecx, [ebp - 0x84]
call fcn.1007e890
mov dword [ebp - 0x224c], eax
jmp case.default.0x10348c04
mov dword [ebp - 0x1af8], str.arms
mov eax, dword [ebp - 0x1af8]
add eax, 1
mov dword [ebp - 0x210c], eax
mov ecx, dword [ebp - 0x1af8]
mov dl, byte [ecx]
mov byte [ebp - 0x1a3e], dl
add dword [ebp - 0x1af8], 1
cmp byte [ebp - 0x1a3e], 0
jne 0x10348e30
mov eax, dword [ebp - 0x1af8]
sub eax, dword [ebp - 0x210c]
mov dword [ebp - 0x2110], eax
mov ecx, dword [ebp - 0x2110]
mov dword [ebp - 0x2114], ecx
mov edx, dword [ebp - 0x2114]
mov dword [ebp - 0x2118], edx
mov eax, dword [ebp - 0x2118]
push eax
push str.arms
lea ecx, [ebp - 0x84]
call fcn.1007e890
mov dword [ebp - 0x2250], eax
jmp case.default.0x10348c04
mov dword [ebp - 0x1afc], str.arms
mov ecx, dword [ebp - 0x1afc]
add ecx, 1
mov dword [ebp - 0x211c], ecx
mov edx, dword [ebp - 0x1afc]
mov al, byte [edx]
mov byte [ebp - 0x1a3f], al
add dword [ebp - 0x1afc], 1
cmp byte [ebp - 0x1a3f], 0
jne 0x10348eb3
mov ecx, dword [ebp - 0x1afc]
sub ecx, dword [ebp - 0x211c]
mov dword [ebp - 0x2120], ecx
mov edx, dword [ebp - 0x2120]
mov dword [ebp - 0x2124], edx
mov eax, dword [ebp - 0x2124]
mov dword [ebp - 0x2128], eax
mov ecx, dword [ebp - 0x2128]
push ecx
push str.arms
lea ecx, [ebp - 0x84]
call fcn.1007e890
mov dword [ebp - 0x2254], eax
jmp case.default.0x10348c04
mov dword [ebp - 0x1a94], str.legs
mov edx, dword [ebp - 0x1a94]
add edx, 1
mov dword [ebp - 0x212c], edx
mov eax, dword [ebp - 0x1a94]
mov cl, byte [eax]
mov byte [ebp - 0x1a40], cl
add dword [ebp - 0x1a94], 1
cmp byte [ebp - 0x1a40], 0
jne 0x10348f36
mov edx, dword [ebp - 0x1a94]
sub edx, dword [ebp - 0x212c]
mov dword [ebp - 0x2130], edx
mov eax, dword [ebp - 0x2130]
mov dword [ebp - 0x2134], eax
mov ecx, dword [ebp - 0x2134]
mov dword [ebp - 0x2138], ecx
mov edx, dword [ebp - 0x2138]
push edx
push str.legs
lea ecx, [ebp - 0x84]
call fcn.1007e890
mov dword [ebp - 0x2258], eax
jmp case.default.0x10348c04
mov dword [ebp - 0x1a90], str.legs
mov eax, dword [ebp - 0x1a90]
add eax, 1
mov dword [ebp - 0x213c], eax
mov ecx, dword [ebp - 0x1a90]
mov dl, byte [ecx]
mov byte [ebp - 0x1a41], dl
add dword [ebp - 0x1a90], 1
cmp byte [ebp - 0x1a41], 0
jne 0x10348fb6
mov eax, dword [ebp - 0x1a90]
sub eax, dword [ebp - 0x213c]
mov dword [ebp - 0x2140], eax
mov ecx, dword [ebp - 0x2140]
mov dword [ebp - 0x2144], ecx
mov edx, dword [ebp - 0x2144]
mov dword [ebp - 0x2148], edx
mov eax, dword [ebp - 0x2148]
push eax
push str.legs
lea ecx, [ebp - 0x84]
call fcn.1007e890
mov dword [ebp - 0x225c], eax
lea ecx, [ebp - 0x84]
push ecx
lea ecx, [ebp - 0x2370]
call fcn.100632b0
mov edx, dword [ebp - 0x1a8c]
or edx, 4
mov dword [ebp - 0x1a8c], edx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x84]
call fcn.10063170
lea eax, [ebp - 0x2370]
mov dword [ebp - 0x214c], eax
mov ecx, dword [ebp - 0x214c]
mov dword [ebp - 0x2150], ecx
mov edx, dword [ebp - 0x2150]
mov dword [ebp - 0x2158], edx
mov byte [ebp - 4], 0x13
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x2260], esp
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x2154]
push edx
mov ecx, dword [ebp - 0x2158]
push ecx
lea edx, [ebp - 0x34]
push edx
push str.hit__s_in_the__s_for__i_damage___i_health_remaining__n
push eax
call fcn.10180520
add esp, 0x18
push 0x108db450
call fcn.102ca9b0
add esp, 0x2c
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2370]
call fcn.10063170
nop
mov eax, dword [ebp - 0x1b08]
add eax, 0xe4
mov dword [ebp - 0x215c], eax
mov ecx, dword [ebp - 0x215c]
add ecx, 0x10
mov dword [ebp - 0x2160], ecx
mov edx, dword [ebp - 0x2160]
cmp dword [edx], 0
jne 0x103490f6
mov dword [ebp - 0x1c58], 1
jmp 0x10349100
mov dword [ebp - 0x1c58], 0
mov al, byte [ebp - 0x1c58]
mov byte [ebp - 0x1a42], al
movzx ecx, byte [ebp - 0x1a42]
test ecx, ecx
je 0x10349126
mov dword [ebp - 0x1c68], 0
jmp 0x10349289
xor edx, edx
mov byte [ebp - 0x1a43], dl
mov al, byte [ebp - 0x1a43]
mov byte [ebp - 0x1a44], al
mov cl, byte [ebp - 0x1a44]
mov byte [ebp - 0x1a45], cl
mov edx, dword [ebp - 0x1b08]
add edx, 0xe4
mov dword [ebp - 0x2164], edx
mov eax, dword [ebp - 0x1b08]
add eax, 0xe4
mov dword [ebp - 0x2168], eax
movzx ecx, byte [ebp - 0x1a45]
push ecx
sub esp, 0xc
mov edx, esp
mov dword [ebp - 0x2264], esp
push edx
mov ecx, dword [ebp - 0x2164]
call fcn.1017eb50
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x2268], esp
push eax
mov ecx, dword [ebp - 0x2168]
call fcn.1017ec00
lea ecx, [ebp - 0x68]
push ecx
call fcn.10180150
add esp, 0x20
mov dword [ebp - 0x226c], eax
mov edx, dword [ebp - 0x1b08]
add edx, 0xe4
mov dword [ebp - 0x216c], edx
lea eax, [ebp - 0x231c]
push eax
mov ecx, dword [ebp - 0x216c]
call fcn.1017eb50
mov dword [ebp - 0x1c5c], eax
mov ecx, dword [ebp - 0x1c5c]
push ecx
lea ecx, [ebp - 0x68]
call fcn.1017f2b0
mov edx, dword [ebp - 0x1c5c]
mov eax, dword [ebp - 0x60]
cmp eax, dword [edx + 8]
jne 0x10349204
mov dword [ebp - 0x1c60], 1
jmp 0x1034920e
mov dword [ebp - 0x1c60], 0
mov cl, byte [ebp - 0x1c60]
mov byte [ebp - 0x1a46], cl
movzx edx, byte [ebp - 0x1a46]
test edx, edx
je 0x10349231
mov dword [ebp - 0x1c64], 0
jmp 0x1034924b
lea ecx, [ebp - 0x68]
call fcn.1017f410
mov dword [ebp - 0x2170], eax
mov eax, dword [ebp - 0x2170]
mov dword [ebp - 0x1c64], eax
mov ecx, dword [ebp - 0x1c64]
mov dword [ebp - 0x2178], ecx
push 3
lea ecx, [ebp - 0x38]
call fcn.101b24a0
lea ecx, [ebp - 0x231c]
call fcn.100539d0
lea ecx, [ebp - 0x38]
call fcn.101b2590
nop
lea ecx, [ebp - 0x68]
call fcn.1017dc90
mov edx, dword [ebp - 0x2178]
mov dword [ebp - 0x1c68], edx
mov eax, dword [ebp - 0x1c68]
mov dword [ebp - 0x1a6c], eax
cmp dword [ebp - 0x1a6c], 0
je 0x103492bb
mov ecx, dword [ebp - 0x1a6c]
cmp dword [ecx + 0xc], 0
je 0x103492dc
mov edx, dword [ebp - 0x1a6c]
mov eax, dword [edx + 0x4c]
cmp eax, dword [ebp - 0x1a68]
je 0x103492dc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd4]
call fcn.10063170
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.10063170
nop
jmp 0x10349345
mov ecx, dword [ebp - 0x1a6c]
mov edx, dword [ebp - 0x1a64]
mov dword [ecx + 0x70], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x217c], edx
push 0
push str.dmg_health
mov ecx, dword [ebp + 8]
call dword [ebp - 0x217c]
mov ecx, dword [ebp - 0x1a6c]
mov dword [ecx + 0x74], eax
mov edx, dword [ebp - 0x1a6c]
mov eax, dword [0x109f2868]
mov ecx, dword [eax + 0x16c]
mov dword [edx + 0x6c], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd4]
call fcn.10063170
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.10063170
nop
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101f5040
mov esp, ebp
pop ebp
ret 4