Function at 0x1002a3d2
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100846d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2b8
push esi
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1002b1c5
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xf0], 0xf251d69f
push 3
lea ecx, [ebp - 0x244]
call fcn.10026565
and dword [ebp - 4], 0
mov dword [ebp - 0x4c], 0
jmp 0x1002a443
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1002a459
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x288], 0
jmp 0x1002a43c
push 0x3ad2
push 0
lea eax, [ebp - 0x4c]
push eax
push 0x26b7
lea eax, [ebp - 0x244]
push eax
call fcn.1002b89d
add esp, 0x14
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0xf0]
push eax
push 0
push 0x76cd
call fcn.1002b75f
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x244]
call fcn.100265cd
and dword [ebp - 0x7c], 0
jmp 0x1002a4c6
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x7c], eax
jge 0x1002b1c0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x1002a4f1
mov dword [ebp - 0x108], 1
jmp 0x1002a4f8
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0xa4], 0xffffffff
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x150], 0x7ed6f186
mov dword [ebp - 0x90], 0x5a8b060d
mov dword [ebp - 0x110], 0xdde9ab5c
lea eax, [ebp - 0xa4]
push eax
push 0
push 0x526
call fcn.1002b5f4
add esp, 0xc
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xa4], eax
je 0x1002a572
mov dword [ebp - 0x104], 1
jmp 0x1002a579
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x104]
lea eax, [ecx + eax + 0x176df7e4]
cmp dword [ebp - 0x150], eax
jne 0x1002a5a0
mov dword [ebp - 0xac], 1
jmp 0x1002a5a7
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xac]
jne 0x1002a5c1
mov dword [ebp - 0x138], 1
jmp 0x1002a5c8
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0x93c1
jne 0x1002a5e2
or eax, 0xffffffff
jne 0x1002a5e2
and dword [ebp - 0x188], 0
jmp 0x1002a5ec
mov dword [ebp - 0x188], 1
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x110]
jl 0x1002a60c
mov dword [ebp - 0xbc], 1
jmp 0x1002a613
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x1002a638
mov dword [ebp - 0xc4], 1
jmp 0x1002a63f
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x64], 0x24a8c6a5
mov dword [ebp - 0x64], 7
jmp 0x1002a662
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x1a
jle 0x1002a80c
push 2
lea ecx, [ebp - 0x170]
call fcn.10026565
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x1002a690
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002a6a6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x254], 0xffffffff
jmp 0x1002a689
mov dword [ebp - 0x24], 0
jmp 0x1002a6b6
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1002a6cf
push dword [ebp - 0x24]
lea ecx, [ebp - 0x170]
call fcn.100265d2
and dword [eax], 0
jmp 0x1002a6af
push 1
lea ecx, [ebp - 0x170]
call fcn.100265d2
mov dword [eax], 2
jmp 0x1002a708
push 1
lea ecx, [ebp - 0x170]
call fcn.100265d2
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x118]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x170]
call fcn.100265d2
cmp dword [eax], 0
jl 0x1002a7d8
mov dword [ebp - 0x60], 0xfffffffd
push 1
lea ecx, [ebp - 0x1dc]
call fcn.10026565
mov byte [ebp - 4], 2
mov dword [ebp - 0x70], 0
jmp 0x1002a746
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1002a762
push dword [ebp - 0x70]
lea ecx, [ebp - 0x1dc]
call fcn.100265d2
mov dword [eax], 8
jmp 0x1002a73f
mov dword [ebp - 0x60], 2
jmp 0x1002a772
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x1002a7c4
push 1
lea ecx, [ebp - 0x170]
call fcn.100265d2
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x254]
push 0
lea ecx, [ebp - 0x1dc]
call fcn.100265d2
mov dword [eax], esi
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x1002a7c2
push 1
push 0x39f9
push 0x63d4
push 0x3e2a
call fcn.10029b8c
add esp, 0x10
jmp 0x1002a76b
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1dc]
call fcn.100265cd
jmp 0x1002a6e4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x254], 0
je 0x1002a7f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.100265cd
jmp 0x1002a80c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.100265cd
jmp 0x1002a65b
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1002a826
push 0x1873
push 0
call fcn.10031d2f
pop ecx
pop ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x1002a83f
mov dword [ebp - 0xcc], 1
jmp 0x1002a846
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x21c], 0x28c176b0
mov dword [ebp - 0x224], 0xfffffffb
mov dword [ebp - 0x22c], 0x2b165808
mov dword [ebp - 0x78], 0xfffffff9
push 2
lea ecx, [ebp - 0x264]
call fcn.10026565
mov dword [ebp - 4], 3
mov dword [ebp - 0x140], 0x57863718
mov dword [ebp - 0x44], 0
jmp 0x1002a8a5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002a8bb
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2a0], 0xfffffffb
jmp 0x1002a89e
push 0
push 0x7c85
push 0x3ae4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.1002d61b
add esp, 0x14
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x78], 0
jmp 0x1002a8f7
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x12
jl 0x1002a913
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x1002a911
push 1
call fcn.1002a36b
pop ecx
jmp 0x1002a8f0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.100265cd
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x1002a9fe
push 0x4000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
push dword [eax + 8]
push 0x807b
push 0x5240
call fcn.1005446f
pop ecx
pop ecx
call eax
mov dword [ebp - 0x234], 5
mov dword [ebp - 0x238], 0x94964a53
mov dword [ebp - 0x1f8], 0xffffffff
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x200], 0x849f845d
mov dword [ebp - 0x180], 0x3050
mov dword [ebp - 0x248], 0x30385d06
mov dword [ebp - 0x2c], 0
jmp 0x1002a9ad
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1002a9c3
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2b8], 9
jmp 0x1002a9a6
mov dword [ebp - 0x2c], 0
jmp 0x1002a9d3
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1002a9e9
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x294], 7
jmp 0x1002a9cc
lea eax, [ebp - 0x180]
push eax
push 0
call fcn.1002d594
pop ecx
pop ecx
jmp 0x1002a4b6
push dword [ebp - 0x20]
push dword [ebp - 0x1c4]
lea eax, [ebp - 0x178]
push eax
push dword [ebp - 0x184]
push 0x694d
push dword [ebp - 0x1c0]
push 0
call fcn.1002a3d2
add esp, 0x1c
mov dword [ebp - 0x1ec], 5
mov dword [ebp - 0x26c], 0x94964a53
mov dword [ebp - 0x210], 0xffffffff
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x218], 0x849f845d
mov dword [ebp - 0x174], 0x3050
mov dword [ebp - 0x274], 0x30385d06
mov dword [ebp - 0x28], 0
jmp 0x1002aa7f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002aa95
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2ac], 9
jmp 0x1002aa78
mov dword [ebp - 0x28], 0
jmp 0x1002aaa5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002aabb
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2c4], 7
jmp 0x1002aa9e
push 0x66e3
push 0x6b06
lea eax, [ebp - 0x174]
push eax
push 0x50c7
push 0
call fcn.1002cb73
add esp, 0x14
push 0
lea eax, [ebp - 0x100]
push eax
push dword [ebp - 0x20]
push dword [ebp - 0x74]
call fcn.10029b8c
add esp, 0x10
mov dword [ebp - 0x48], 0x3d06ce12
mov dword [ebp - 0x220], 0x1891f782
mov dword [ebp - 0x268], 0xaa810d21
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0x190], 5
mov dword [ebp - 0x6c], 0
jmp 0x1002ab31
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1002ab47
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x1a8], 0xfffffff6
jmp 0x1002ab2a
mov dword [ebp - 0x48], 0
jmp 0x1002ab57
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1002ab6d
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1a8], 0x16df251d
jmp 0x1002ab50
lea eax, [ebp - 0x190]
push eax
push 1
call fcn.1002a38c
pop ecx
pop ecx
cmp dword [ebp - 0x100], 0
jbe 0x1002b1bb
mov dword [ebp - 0x40], 0x5732aa6
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x14], 0x997
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x1b0], 0x41b6ba00
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x54], 0
jmp 0x1002abc7
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1002abda
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x10], 2
jmp 0x1002abc0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0xcd
jne 0x1002abf6
mov dword [ebp - 0xd4], 1
jmp 0x1002abfd
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0x18], 0
je 0x1002ac0e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
mov eax, 0x3187
sub eax, 0xffff
cmp eax, dword [ebp - 0x18]
jle 0x1002ac33
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jne 0x1002ac33
and dword [ebp - 0x120], 0
jmp 0x1002ac3d
mov dword [ebp - 0x120], 1
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x120]
add ecx, 0x67f8
add eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x10]
cmp eax, 0x93ee3274
jae 0x1002ac75
mov dword [ebp - 0x1b8], 1
jmp 0x1002ac7c
and dword [ebp - 0x1b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x14], eax
jle 0x1002ac97
mov dword [ebp - 0xdc], 1
jmp 0x1002ac9e
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
neg eax
sub eax, dword [ebp - 0x18]
je 0x1002acc0
mov eax, 0xe2e4e
test eax, eax
je 0x1002acc0
mov dword [ebp - 0x160], 1
jmp 0x1002acc7
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x18], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x18], eax
jne 0x1002aceb
mov dword [ebp - 0x198], 1
jmp 0x1002acf2
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x14], 0
jmp 0x1002ad1d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x1002b18f
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0x477d717f
mov dword [ebp - 0xd8], 0x819
mov dword [ebp - 0x270], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x1002ad6f
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x1002ad6f
mov dword [ebp - 0xe4], 1
jmp 0x1002ad76
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x14]
imul ecx, dword [ebp - 0xe4], 0x40cc
inc ecx
cmp dword [ebp + eax*4 - 0x10], ecx
jle 0x1002ad96
mov dword [ebp - 0x128], 1
jmp 0x1002ad9d
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x10]
add eax, dword [ebp - 0x128]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x10]
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0x10]
jg 0x1002adc9
mov dword [ebp - 0xec], 1
jmp 0x1002add0
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
add eax, 4
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0x10]
jle 0x1002adee
mov dword [ebp - 0x148], 1
jmp 0x1002adf5
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x10]
cmp dword [ebp - 0x148], eax
jle 0x1002ae10
mov dword [ebp - 0xf4], 1
jmp 0x1002ae17
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x10]
cmp eax, dword [ebp - 0xf4]
jg 0x1002ae32
mov dword [ebp - 0x130], 1
jmp 0x1002ae39
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x130], eax
jge 0x1002ae50
mov dword [ebp - 0xfc], 1
jmp 0x1002ae57
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0x3830ae73
jg 0x1002ae6f
mov dword [ebp - 0x158], 1
jmp 0x1002ae76
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x158], eax
jl 0x1002b013
mov dword [ebp - 0x68], 0x8d4885c3
mov eax, 0x55a
test eax, eax
je 0x1002af1e
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x80], 0
jne 0x1002aeba
mov eax, 0xb7b
test eax, eax
jne 0x1002aeba
and dword [ebp - 0x9c], 0
jmp 0x1002aec4
mov dword [ebp - 0x9c], 1
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x9c], eax
jl 0x1002aedb
mov dword [ebp - 0xa0], 1
jmp 0x1002aee2
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x88]
jle 0x1002af03
mov dword [ebp - 0xa8], 1
jmp 0x1002af0a
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0x6546d79
jl 0x1002af1e
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x10], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jne 0x1002af3d
mov eax, 0x2b9acce3
test eax, eax
jne 0x1002af3d
and dword [ebp - 0xb0], 0
jmp 0x1002af47
mov dword [ebp - 0xb0], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xb0], eax
jl 0x1002af6b
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x1002af6b
mov dword [ebp - 0xb8], 1
jmp 0x1002af72
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x68]
jge 0x1002af8c
mov dword [ebp - 0xc0], 1
jmp 0x1002af93
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0xc0], 0
jne 0x1002afab
cmp dword [ebp - 0x68], 0
jne 0x1002afab
and dword [ebp - 0xc8], 0
jmp 0x1002afb5
mov dword [ebp - 0xc8], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x10]
cmp eax, dword [ebp - 0xc8]
je 0x1002afd0
mov dword [ebp - 0xd0], 1
jmp 0x1002afd7
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x10]
mov ecx, dword [ebp - 0xd0]
lea eax, [ecx + eax + 0x487b]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x1002b011
push 0x68a0
push 0
push 0x10c8
call fcn.1002e65c
add esp, 0xc
jmp 0x1002b042
mov dword [ebp - 0x38], 0
jmp 0x1002b023
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x1002b042
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x1002b035
jmp 0x1002b042
cmp dword [ebp - 0xd8], 0
je 0x1002b040
jmp 0x1002b042
jmp 0x1002b01c
mov dword [ebp - 0x40], 0
jmp 0x1002b052
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1002b18a
mov dword [ebp - 0x84], 0x591552d4
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x18], 0
jmp 0x1002b083
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1002b185
mov dword [ebp - 0x17c], 0xfffffff9
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x10]
imul eax, dword [ebp - 0x14]
test eax, eax
jne 0x1002b0c1
cmp dword [ebp - 0x38], 0
jne 0x1002b0c1
and dword [ebp - 0xe0], 0
jmp 0x1002b0cb
mov dword [ebp - 0xe0], 1
cmp dword [ebp - 0xe0], 0
jge 0x1002b0e0
mov dword [ebp - 0x1a0], 1
jmp 0x1002b0e7
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x10], ecx
jl 0x1002b0ff
mov dword [ebp - 0xe8], 1
jmp 0x1002b106
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x14]
add eax, dword [ebp + ecx*4 - 0x10]
mov ecx, dword [ebp - 0x18]
cmp eax, dword [ebp + ecx*4 - 0x10]
jl 0x1002b12c
mov dword [ebp - 0x98], 1
jmp 0x1002b133
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x98]
add ecx, 0x1475504
cmp dword [ebp + eax*4 - 0x10], ecx
jne 0x1002b154
mov dword [ebp - 0xf8], 1
jmp 0x1002b15b
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x18]
add eax, dword [ebp + ecx*4 - 0x10]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x17c], eax
jmp 0x1002b07c
jmp 0x1002b04b
jmp 0x1002ad16
lea eax, [ebp - 0x1fc]
push eax
push dword [ebp - 0x178]
push dword [ebp - 0x100]
mov eax, dword [ebp - 0x20]
push dword [eax + 8]
push 0x807b
push 0x5c86
call fcn.1005446f
pop ecx
pop ecx
call eax
jmp 0x1002a4b6
jmp 0x1002b588
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1bc], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x18c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x194], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x94], eax
push 2
lea ecx, [ebp - 0x1e8]
call fcn.10026565
mov dword [ebp - 4], 4
mov dword [ebp - 0x50], 0xfffffffc
mov dword [ebp - 0x58], 0
jmp 0x1002b21d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1002b239
push dword [ebp - 0x58]
lea ecx, [ebp - 0x1e8]
call fcn.100265d2
mov dword [eax], 0x42eb90da
jmp 0x1002b216
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1002b253
push 0x5751
push 0
call fcn.10029ab1
pop ecx
pop ecx
mov dword [ebp - 0x50], 0
jmp 0x1002b263
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jg 0x1002b2a0
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1002b289
push 0
push 0x4a93
push 0x150f
call fcn.10029af2
add esp, 0xc
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1e8]
call fcn.100265d2
cmp dword [eax], 0
je 0x1002b29e
jmp 0x1002b25c
jmp 0x1002b25c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e8]
call fcn.100265cd
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
shl eax, 4
mov ecx, dword [ebp - 0x194]
mov ecx, dword [ecx]
lea eax, [eax + ecx*8 + 0x10676190]
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x94]
mov eax, dword [eax + ecx*4]
mov dword [edx], eax
mov dword [ebp - 0x1c], 0xc558
push 2
lea ecx, [ebp - 0x1d0]
call fcn.10026565
mov dword [ebp - 4], 5
mov dword [ebp - 0x1b4], 0xad3380ee
push 0x4f3e
lea eax, [ebp - 0x204]
push eax
push 1
lea eax, [ebp - 0x1d0]
push eax
call fcn.10029a34
add esp, 0x10
cmp dword [ebp - 0x1c], 0
jne 0x1002b336
mov eax, 0xc04ee7d2
test eax, eax
jne 0x1002b336
and dword [ebp - 0x154], 0
jmp 0x1002b340
mov dword [ebp - 0x154], 1
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x1002b35b
mov eax, 0x3af7
test eax, eax
je 0x1002b35b
mov dword [ebp - 0x10c], 1
jmp 0x1002b362
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x10c], eax
jg 0x1002b379
mov dword [ebp - 0x114], 1
jmp 0x1002b380
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x114], eax
je 0x1002b397
mov dword [ebp - 0x11c], 1
jmp 0x1002b39e
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0x5f7919ad
je 0x1002b3b6
mov dword [ebp - 0x124], 1
jmp 0x1002b3bd
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0x2134
jle 0x1002b3d5
mov dword [ebp - 0x12c], 1
jmp 0x1002b3dc
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x12c], eax
jg 0x1002b3f3
mov dword [ebp - 0x1a4], 1
jmp 0x1002b3fa
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x1c], 0xf9f7c8b1
jbe 0x1002b418
mov dword [ebp - 0x134], 1
jmp 0x1002b41f
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x134], eax
jge 0x1002b436
mov dword [ebp - 0x13c], 1
jmp 0x1002b43d
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x1c]
cmp eax, 0xa369
jg 0x1002b459
mov dword [ebp - 0x144], 1
jmp 0x1002b460
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
sub eax, 0x9c23
mov dword [ebp - 0x14c], eax
push 1
lea ecx, [ebp - 0x1d0]
call fcn.100265d2
mov ecx, dword [ebp - 0x14c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x14c], eax
jg 0x1002b49d
mov dword [ebp - 0x1ac], 1
jmp 0x1002b4a4
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x154], 0xffffffff
je 0x1002b4c2
mov dword [ebp - 0x15c], 1
jmp 0x1002b4c9
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x15c], eax
je 0x1002b4e0
mov dword [ebp - 0x164], 1
jmp 0x1002b4e7
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x1002b507
push 0
call fcn.1002d488
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d0]
call fcn.100265cd
mov eax, dword [ebp - 0x1bc]
mov eax, dword [eax + 0x24]
and eax, 0x4000000
je 0x1002b588
mov dword [ebp - 0x5c], 0xe0cf5720
push 0x6caa
push 0
call fcn.10031d96
pop ecx
pop ecx
mov dword [ebp - 0x5c], 0xffffffee
jmp 0x1002b54b
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffe5
jne 0x1002b573
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x1002b571
push 0x375
push 0
push 0x16bf
call fcn.10029b47
add esp, 0xc
jmp 0x1002b544
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
or eax, 0x200
mov ecx, dword [ebp - 0x94]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret