Function at 0x1002a279
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006767e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x384
push esi
push edi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1002a35a
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x258]
movzx eax, byte [eax]
test eax, eax
je 0x1002a332
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x58]
mov dword [eax], 0
jmp 0x1002a310
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, dword [ebp - 0x58]
cmp dword [eax], 1
jge 0x1002a330
mov eax, dword [ebp - 0x58]
push dword [eax]
mov ecx, dword [ebp - 0x260]
call fcn.100166d5
mov dword [eax], 0xb25b3b9d
jmp 0x1002a305
jmp 0x1002a355
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x1002a355
push 0
push 0xca
push 0x1336
push 0x2be
call dword [sym.imp.USER32.dll_SetDlgItemInt]
jmp 0x1002bd61
lea eax, [ebp + 0x14]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x244]
movzx eax, byte [eax]
test eax, eax
je 0x1002bd4b
mov dword [ebp - 0x204], 0x1c70
cmp dword [ebp - 0x204], 0xaf6
jge 0x1002a487
push 0x1074dbc8
push 0x1065909c
push 0x100078e4
call fcn.1004ed2b
add esp, 0xc
mov dword [ebp - 0xa4], 1
jmp 0x1002a3c7
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
xor eax, eax
inc eax
mov ecx, dword [0x1065909c]
shl eax, cl
cmp dword [ebp - 0xa4], eax
jg 0x1002a3f6
mov eax, dword [ebp - 0xa4]
lea eax, [eax*4 + 0x16cb8658]
push eax
push 0x100077e4
call fcn.1004ed2b
pop ecx
pop ecx
jmp 0x1002a3ba
push dword [0x1065909c]
xor eax, eax
inc eax
mov ecx, dword [0x1065909c]
shl eax, cl
push eax
push 1
push 1
call fcn.10029fc6
add esp, 0x10
and dword [ebp - 0xa8], 0
jmp 0x1002a42a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
cmp eax, dword [0x1074dbc8]
jge 0x1002a487
push 0x16db865c
push 0x166cfd54
push 0x100078e4
call fcn.1004ed2b
add esp, 0xc
push dword [0x1065909c]
xor eax, eax
inc eax
mov ecx, dword [0x1065909c]
shl eax, cl
push eax
push 1
push 1
call fcn.1002a089
add esp, 0x10
push 4
pop eax
shl eax, 0
push dword [eax + 0x168b8470]
push 0x100078ec
call fcn.1004f5a5
pop ecx
pop ecx
jmp 0x1002a41d
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x7c], eax
push 2
lea ecx, [ebp - 0x1e4]
call fcn.100165ef
and dword [ebp - 4], 0
mov dword [ebp - 0x28], 0
jmp 0x1002a4b1
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002a4c7
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x370], 0xfffffff9
jmp 0x1002a4aa
mov dword [ebp - 0x28], 0
jmp 0x1002a4d7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002a4f3
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1e4]
call fcn.100166d5
mov dword [eax], 0xecb45710
jmp 0x1002a4d0
mov dword [ebp - 0x264], 0x21dd
cmp dword [ebp - 0x264], 0x7e8
jge 0x1002a61b
lea eax, [ebp - 0x200]
push eax
push 0x100077e4
call fcn.1004ed2b
pop ecx
pop ecx
mov dword [ebp - 0x98], 1
jmp 0x1002a539
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x200]
jg 0x1002a61b
lea eax, [ebp - 0x138]
push eax
push 0x100077e4
call fcn.1004ed2b
pop ecx
pop ecx
mov byte [ebp - 0x11], 0
and dword [ebp - 0x70], 0
jmp 0x1002a56f
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x138]
jge 0x1002a5a4
mov eax, dword [ebp - 0x70]
lea eax, [eax*4 + 0x166cfd58]
push eax
push 0x100077e4
call fcn.1004ed2b
pop ecx
pop ecx
mov eax, dword [ebp - 0x70]
cmp dword [eax*4 + 0x166cfd58], 0
jne 0x1002a5a2
mov byte [ebp - 0x11], 1
jmp 0x1002a568
push 0x1a440
push 0xffffffffffffffff
push 0x1074dbd0
call fcn.100408d1
add esp, 0xc
push 0xa4
mov eax, dword [ebp - 0x138]
dec eax
push eax
call fcn.1002a161
pop ecx
pop ecx
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jne 0x1002a5ec
movzx eax, byte [ebp - 0x11]
test eax, eax
jne 0x1002a5ec
or dword [ebp - 0x1b8], 0xffffffff
jmp 0x1002a5fd
mov eax, dword [ebp - 0x184]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x1b8], eax
push dword [ebp - 0x1b8]
push dword [ebp - 0x98]
push 0x10007ab0
call fcn.1004f5a5
add esp, 0xc
jmp 0x1002a52c
mov byte [ebp - 0x37], 0
push 0
push 0x7fef
push 0x317
lea eax, [ebp - 0x37]
push eax
call fcn.1002c327
add esp, 0x10
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100166d5
and dword [eax], 0
jmp 0x1002a66d
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100166d5
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100166d5
cmp dword [eax], 2
jg 0x1002a6b5
mov byte [ebp - 0x45], 0
push 0
lea eax, [ebp - 0x45]
push eax
call fcn.1002c115
pop ecx
pop ecx
push 4
pop eax
imul esi, eax, 0
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100166d5
mov eax, dword [eax]
mov ecx, dword [ebp + esi - 0x370]
mov dword [ebp + eax*4 - 0x370], ecx
jmp 0x1002a649
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.10016651
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x18], eax
and dword [ebp - 0xbc], 0
jmp 0x1002a6f8
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xbc], eax
jge 0x1002bd49
push 4
lea ecx, [ebp - 0x2e8]
call fcn.100165ef
mov dword [ebp - 4], 1
mov dword [ebp - 0x1e8], 0x6dfc9b99
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x208], 0x9c1477a1
mov dword [ebp - 0x90], 0
jmp 0x1002a762
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1002a784
push dword [ebp - 0x90]
lea ecx, [ebp - 0x2e8]
call fcn.100166d5
mov dword [eax], 1
jmp 0x1002a755
push 0x2b8b
lea eax, [ebp - 0x2e8]
push eax
push 0x7ac8
lea eax, [ebp - 0x1e8]
push eax
push 1
push 1
call fcn.100290e7
add esp, 0x18
push 0x383e
lea eax, [ebp - 0x208]
push eax
push 0x7207
push 0
call fcn.10030ece
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e8]
call fcn.10016651
push 3
lea ecx, [ebp - 0x1c4]
call fcn.100165ef
mov dword [ebp - 4], 2
push 2
lea ecx, [ebp - 0x88]
call fcn.100165ef
mov byte [ebp - 4], 3
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x11c], 0x6a7f4ea1
mov dword [ebp - 0x94], 0xf5e3d1aa
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x8c], 0x800f4d4e
lea eax, [ebp - 0x26c]
push eax
push 0
lea eax, [ebp - 0x1c4]
push eax
call fcn.10030b98
add esp, 0xc
lea eax, [ebp - 0x26c]
push eax
push 1
push 0x3f60
push 1
push 0x4c1a
lea eax, [ebp - 0x88]
push eax
push 0x31c6
push 0x19c1
call fcn.1002936f
add esp, 0x20
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
mov dword [eax], 2
jmp 0x1002a8a2
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xdc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
cmp dword [eax], 0
jl 0x1002aac0
mov dword [ebp - 0x68], 0xfffffffd
mov dword [ebp - 0x37c], 0x2466e9f0
mov dword [ebp - 0x210], 0x11600d54
mov dword [ebp - 0x278], 0xc4e2bf5
mov dword [ebp - 0x68], 0
jmp 0x1002a8ed
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x1002aabb
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x318], 0x1b6fd43d
mov dword [ebp - 0x310], 0x289fff12
mov dword [ebp - 0xb4], 0xfffffff8
mov dword [ebp - 0xa0], 0
jmp 0x1002a938
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1002a954
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x378], 0x4709ba87
jmp 0x1002a92b
mov dword [ebp - 0x150], 0xffffffff
mov esi, dword [ebp - 0x150]
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
push dword [eax]
lea ecx, [ebp - 0x1c4]
call fcn.100166d5
cmp dword [eax], esi
jl 0x1002a98e
mov dword [ebp - 0xf4], 1
jmp 0x1002a995
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0x218]
jge 0x1002a9d4
mov dword [ebp - 0xe4], 1
jmp 0x1002a9db
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xe4], eax
jl 0x1002a9f5
mov dword [ebp - 0x154], 1
jmp 0x1002a9fc
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x154], eax
jne 0x1002aa23
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x378], 0
jne 0x1002aa23
and dword [ebp - 0xec], 0
jmp 0x1002aa2d
mov dword [ebp - 0xec], 1
cmp dword [ebp - 0xec], 4
jge 0x1002aa42
mov dword [ebp - 0x1ac], 1
jmp 0x1002aa49
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x1ac], eax
jge 0x1002aa60
mov dword [ebp - 0x15c], 1
jmp 0x1002aa67
and dword [ebp - 0x15c], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
push dword [eax]
lea ecx, [ebp - 0x1c4]
call fcn.100166d5
mov ecx, dword [ebp - 0xf4]
sub ecx, dword [eax]
imul ecx, dword [ebp - 0x15c]
test ecx, ecx
jne 0x1002aaa3
cmp dword [ebp - 0x68], 0
jne 0x1002aaa3
and dword [ebp - 0xfc], 0
jmp 0x1002aaad
mov dword [ebp - 0xfc], 1
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x20], eax
jmp 0x1002a8e6
jmp 0x1002a87e
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x320], eax
mov esi, dword [ebp - 0x8c]
push 0
lea ecx, [ebp - 0x1c4]
call fcn.100166d5
cmp esi, dword [eax]
jge 0x1002aaef
mov dword [ebp - 0x104], 1
jmp 0x1002aaf6
and dword [ebp - 0x104], 0
push 2
lea ecx, [ebp - 0x1c4]
call fcn.100166d5
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x20]
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
cmp esi, dword [eax]
jg 0x1002ab28
mov dword [ebp - 0x18c], 1
jmp 0x1002ab2f
and dword [ebp - 0x18c], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
mov ecx, dword [ebp - 0x18c]
cmp ecx, dword [eax]
jle 0x1002ab58
cmp dword [ebp - 0x94], 0
jne 0x1002ab58
and dword [ebp - 0x164], 0
jmp 0x1002ab62
mov dword [ebp - 0x164], 1
mov esi, dword [ebp - 0x104]
sub esi, 0x832c1a4
imul esi, dword [ebp - 0x164]
push 1
lea ecx, [ebp - 0x1c4]
call fcn.100166d5
imul esi, dword [eax]
cmp esi, 0x43c7d757
jl 0x1002ab99
mov dword [ebp - 0x10c], 1
jmp 0x1002aba0
and dword [ebp - 0x10c], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
mov ecx, dword [ebp - 0x10c]
add ecx, dword [eax]
jne 0x1002abbd
cmp dword [ebp - 0x20], 0
je 0x1002abf9
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1002abf9
mov dword [ebp - 0x220], 1
push 0x6f2b
push 0x1401
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x220]
push eax
push 1
push 0x7171
call fcn.1002c9ed
add esp, 0x1c
jmp 0x1002ae0c
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x12c], 0x7dd1a1fb
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x288], 0xfffffffb
mov dword [ebp - 0x20], 2
jmp 0x1002ac2e
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1002ac4a
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1002ac48
push 0
call fcn.1002ed85
pop ecx
jmp 0x1002ac27
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
mov ecx, dword [ebp - 0x24]
cmp dword [eax], ecx
je 0x1002ac6a
mov dword [ebp - 0x1a4], 1
jmp 0x1002ac71
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1a4], eax
jge 0x1002ac88
mov dword [ebp - 0x114], 1
jmp 0x1002ac8f
and dword [ebp - 0x114], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
mov ecx, dword [ebp - 0x114]
imul ecx, dword [eax]
imul ecx, dword [ebp - 0x24]
inc ecx
cmp ecx, dword [ebp - 0x24]
jl 0x1002acbb
mov dword [ebp - 0x268], 1
jmp 0x1002acc2
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x8c], eax
jne 0x1002ace2
mov dword [ebp - 0x228], 1
jmp 0x1002ace9
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x8c]
sub eax, 5
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x11c]
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
imul esi, dword [eax]
cmp esi, 1
jle 0x1002ad25
mov dword [ebp - 0x16c], 1
jmp 0x1002ad2c
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x24]
jle 0x1002ad47
mov dword [ebp - 0x194], 1
jmp 0x1002ad4e
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x194], eax
jge 0x1002ad68
mov dword [ebp - 0x124], 1
jmp 0x1002ad6f
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x124], eax
jl 0x1002ad8f
cmp dword [ebp - 0x12c], 0
je 0x1002ad8f
mov dword [ebp - 0x174], 1
jmp 0x1002ad96
and dword [ebp - 0x174], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.100166d5
mov ecx, dword [ebp - 0x174]
cmp ecx, dword [eax]
jge 0x1002adb9
mov dword [ebp - 0x1b4], 1
jmp 0x1002adc0
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x12c]
add eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x1002adf9
cmp dword [ebp - 0x24], 0
je 0x1002adf9
mov dword [ebp - 0x17c], 1
jmp 0x1002ae00
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x288], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x88]
call fcn.10016651
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c4]
call fcn.10016651
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x1002ae43
mov dword [ebp - 0x13c], 1
jmp 0x1002ae4a
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x240], eax
push 2
lea ecx, [ebp - 0x300]
call fcn.100165ef
mov dword [ebp - 4], 4
push 2
lea ecx, [ebp - 0x1d8]
call fcn.100165ef
mov byte [ebp - 4], 5
push 0
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x31ee
call fcn.1002e827
add esp, 0x10
mov dword [ebp - 0x5c], 0
jmp 0x1002aea5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1002aec1
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1d8]
call fcn.100166d5
mov dword [eax], 2
jmp 0x1002ae9e
push 0
lea ecx, [ebp - 0x1d8]
call fcn.100166d5
and dword [eax], 0
jmp 0x1002aef7
push 0
lea ecx, [ebp - 0x1d8]
call fcn.100166d5
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x19c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1d8]
call fcn.100166d5
cmp dword [eax], 2
jge 0x1002af2b
push 0
lea ecx, [ebp - 0x1d8]
call fcn.100166d5
push dword [eax]
lea ecx, [ebp - 0x300]
call fcn.100166d5
mov dword [eax], 0x4c506d44
jmp 0x1002aed3
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1d8]
call fcn.10016651
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x300]
call fcn.10016651
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x1002af62
mov dword [ebp - 0x144], 1
jmp 0x1002af69
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x10], 0xd15de05d
mov dword [ebp - 0x14c], 0x7f37c04c
mov dword [ebp - 0x128], 0xffffffff
mov dword [ebp - 0x130], 0xffffffff
push 1
lea ecx, [ebp - 0x2dc]
call fcn.100165ef
mov dword [ebp - 4], 6
mov dword [ebp - 0x270], 0x82a6f944
push 1
push 0xe86
push 0
push 1
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x348]
push eax
call fcn.1003367a
add esp, 0x18
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x10], eax
je 0x1002aff9
mov dword [ebp - 0x110], 1
jmp 0x1002b000
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
cmp eax, 0x9ef4a042
jne 0x1002b019
mov dword [ebp - 0xd4], 1
jmp 0x1002b020
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0x494abc24
je 0x1002b038
mov dword [ebp - 0xd0], 1
jmp 0x1002b03f
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 1
je 0x1002b054
mov dword [ebp - 0xe0], 1
jmp 0x1002b05b
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x10]
cmp eax, 0x89a9b8fa
jne 0x1002b07b
mov dword [ebp - 0xe8], 1
jmp 0x1002b082
and dword [ebp - 0xe8], 0
imul eax, dword [ebp - 0xe8], 0xffff
cmp eax, dword [ebp - 0x10]
jle 0x1002b09d
mov dword [ebp - 0xf0], 1
jmp 0x1002b0a4
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xf0], eax
jg 0x1002b0bb
mov dword [ebp - 0xf8], 1
jmp 0x1002b0c2
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xf8], eax
jge 0x1002b0d9
mov dword [ebp - 0x100], 1
jmp 0x1002b0e0
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x100]
je 0x1002b0f7
mov dword [ebp - 0x108], 1
jmp 0x1002b0fe
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x108], eax
jne 0x1002b115
mov dword [ebp - 0x230], 1
jmp 0x1002b11c
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x110]
dec eax
dec eax
jne 0x1002b147
cmp dword [ebp - 0x10], 0
jne 0x1002b147
and dword [ebp - 0x118], 0
jmp 0x1002b151
mov dword [ebp - 0x118], 1
cmp dword [ebp - 0x118], 0
jae 0x1002b166
mov dword [ebp - 0x120], 1
jmp 0x1002b16d
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xcc], eax
push 0
lea ecx, [ebp - 0x2dc]
call fcn.100166d5
mov ecx, dword [ebp - 0xcc]
mov dword [eax], ecx
cmp dword [ebp - 0xcc], 9
je 0x1002b1bb
mov dword [ebp - 0x140], 1
jmp 0x1002b1c2
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x270], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2dc]
call fcn.10016651
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x1002b1f6
mov dword [ebp - 0x148], 1
jmp 0x1002b1fd
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x160], 0xfffffffc
mov dword [ebp - 0x6c], 0xdfe012d2
push 2
lea ecx, [ebp - 0x2f4]
call fcn.100165ef
mov dword [ebp - 4], 7
mov dword [ebp - 0x238], 0x1708
cmp dword [ebp - 0x238], 0xf9e
jge 0x1002b49d
push 0x16cb8654
push 0x16db8658
push 0x168b846c
push 0x1074dbcc
mov ecx, 0x10657dd0
call fcn.10015f8e
mov ecx, eax
call fcn.10015f8e
mov ecx, eax
call fcn.10015f8e
mov ecx, eax
call fcn.10015f8e
mov eax, dword [0x168b846c]
cmp eax, dword [0x16db8658]
jle 0x1002b2aa
mov eax, dword [0x1074dbcc]
sub eax, dword [0x16db8658]
inc eax
mov dword [0x16db8658], eax
mov eax, dword [0x1074dbcc]
sub eax, dword [0x168b846c]
inc eax
mov dword [0x168b846c], eax
mov eax, dword [0x16db8658]
dec eax
mov dword [0x1074dbcc], eax
imul eax, dword [0x168b846c], 0x4e24
push 4
pop ecx
imul ecx, ecx, 0
mov dword [eax + ecx + 0x10768010], 1
mov dword [ebp - 0x1c], 1
jmp 0x1002b2e0
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [0x16cb8654]
jg 0x1002b424
mov dword [ebp - 0x4c], 1
jmp 0x1002b2ff
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x1074dbcc]
jg 0x1002b34a
imul eax, dword [ebp - 0x4c], 0x4e24
mov ecx, dword [ebp - 0x4c]
dec ecx
imul ecx, ecx, 0x4e24
mov edx, dword [ebp - 0x1c]
mov eax, dword [eax + edx*4 + 0x1076800c]
mov edx, dword [ebp - 0x1c]
add eax, dword [ecx + edx*4 + 0x1076800c]
cdq
mov ecx, 0x3b9aca07
idiv ecx
imul eax, dword [ebp - 0x4c], 0x4e24
mov ecx, dword [ebp - 0x1c]
mov dword [eax + ecx*4 + 0x1076800c], edx
jmp 0x1002b2f8
mov dword [ebp - 0x30], 1
jmp 0x1002b35a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [0x1074dbcc]
jg 0x1002b41f
mov eax, dword [0x16db8658]
add eax, dword [ebp - 0x30]
and eax, 0x80000001
jns 0x1002b37d
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1002b38d
mov dword [ebp - 0x158], 1
jmp 0x1002b394
and dword [ebp - 0x158], 0
mov eax, dword [0x16db8658]
add eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
sub eax, dword [ebp - 0x158]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x30]
dec eax
imul eax, eax, 0x4e24
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax + ecx*4 + 0x1076800c]
cdq
mov ecx, 0x3b9aca07
idiv ecx
mov ecx, edx
imul eax, dword [ebp - 0x280], 0x4e24
imul edx, dword [ebp - 0x30], 0x4e24
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x1c]
mov eax, dword [eax + esi*4 + 0x1076800c]
sub eax, dword [edx + edi*4 + 0x1076800c]
add eax, 0x3b9aca07
cdq
mov esi, 0x3b9aca07
idiv esi
add ecx, edx
mov eax, ecx
cdq
mov ecx, 0x3b9aca07
idiv ecx
imul eax, dword [ebp - 0x30], 0x4e24
mov ecx, dword [ebp - 0x1c]
mov dword [eax + ecx*4 + 0x10768010], edx
jmp 0x1002b353
jmp 0x1002b2d9
and dword [ebp - 0xc4], 0
mov dword [ebp - 0x9c], 1
jmp 0x1002b444
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
cmp eax, dword [0x1074dbcc]
jg 0x1002b481
imul eax, dword [ebp - 0x9c], 0x4e24
mov ecx, dword [0x16cb8654]
mov edx, dword [ebp - 0xc4]
add edx, dword [eax + ecx*4 + 0x10768010]
mov eax, edx
cdq
mov ecx, 0x3b9aca07
idiv ecx
mov dword [ebp - 0xc4], edx
jmp 0x1002b437
push fcn.1001aff1
push dword [ebp - 0xc4]
mov ecx, 0x10657d18
call fcn.10016189
mov ecx, eax
call fcn.1001617d
push 0x48e9
lea eax, [ebp - 0x64]
push eax
push 1
push 1
push 0
push 0x2dfa
lea eax, [ebp - 0x2f4]
push eax
call fcn.10029d18
add esp, 0x1c
mov dword [ebp - 0x64], 0
jmp 0x1002b4d0
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1002b4e6
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x334], 0xed40a165
jmp 0x1002b4c9
mov byte [ebp - 0x47], 0
push 0x1b5
push 1
push 0x5b58
push 1
push 0x690
lea eax, [ebp - 0x47]
push eax
call fcn.1002960a
add esp, 0x18
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
jl 0x1002b529
mov dword [ebp - 0x168], 1
jmp 0x1002b530
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
jne 0x1002b54a
mov dword [ebp - 0x170], 1
jmp 0x1002b551
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0
ja 0x1002b56f
cmp dword [ebp - 0x6c], 0
jne 0x1002b56f
cmp dword [ebp - 0x6c], 0
jne 0x1002b56f
and dword [ebp - 0x178], 0
jmp 0x1002b579
mov dword [ebp - 0x178], 1
push 1
lea ecx, [ebp - 0x2f4]
call fcn.100166d5
mov ecx, dword [ebp - 0x178]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6c]
mov dword [ebp + eax - 0x334], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f4]
call fcn.10016651
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x1002b5e3
push 0x4000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
push dword [eax + 8]
push 0x79e8
push 0x883c
call fcn.1004065c
pop ecx
pop ecx
call eax
jmp 0x1002a6e2
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x74], 0
jmp 0x1002b5fa
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffe3
jl 0x1002b616
push 0x249b
push 0x45a1
push 0
call fcn.10029fa7
add esp, 0xc
jmp 0x1002b5f3
lea eax, [ebp - 0x74]
push eax
push 0
push 1
push 0x4ce8
call fcn.1002c07c
add esp, 0x10
push dword [ebp - 0x240]
push dword [ebp - 0x18]
lea eax, [ebp - 0x23c]
push eax
push 1
push dword [ebp - 0x25c]
push dword [ebp - 0x1f0]
push 1
call fcn.10028dcd
add esp, 0x1c
push 0
push dword [ebp - 0x7c]
push 0x12d0
push dword [ebp - 0x18]
push 0xb6a
lea eax, [ebp - 0x1b0]
push eax
call fcn.1002d643
add esp, 0x18
mov dword [ebp - 0x32c], 0x6240
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x1002b6ac
push 0x2d63
push 0x2062
push 1
push 1
push 1
push 0x63f7
push 0x4c6d
call fcn.10029d18
add esp, 0x1c
push 1
push 1
push 0x4c47
call fcn.10029ea2
add esp, 0xc
cmp dword [ebp - 0x1b0], 0
jbe 0x1002bd44
mov dword [ebp - 0x34], 0xfffffff8
and dword [ebp - 0x2d0], 0
and dword [ebp - 0x2cc], 0
and dword [ebp - 0x2c8], 0
and dword [ebp - 0x2c4], 0
lea ecx, [ebp - 0xc5]
call fcn.10016739
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x390]
call fcn.1001673c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x250]
call fcn.1001662b
mov dword [ebp - 4], 8
mov dword [ebp - 0x1ec], 0xffffffff
push 3
lea ecx, [ebp - 0x30c]
call fcn.100165ef
mov byte [ebp - 4], 9
push 2
lea ecx, [ebp - 0x388]
call fcn.100165ef
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x234], 1
mov dword [ebp - 0x60], 0
jmp 0x1002b76f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1002b78b
push dword [ebp - 0x60]
lea ecx, [ebp - 0x30c]
call fcn.100166d5
mov dword [eax], 0x2885
jmp 0x1002b768
push 1
push 0x2bf4
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x60]
push eax
push 0
push 0x6a3d
call fcn.10034c43
add esp, 0x18
mov dword [ebp - 0x34], 0x10
jmp 0x1002b7bc
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffe6
jle 0x1002b948
mov byte [ebp - 0x3d], 0
mov dword [ebp - 0x1f4], 0x1d76
cmp dword [ebp - 0x1f4], 0xaa8
jge 0x1002b933
lea eax, [ebp - 0xac]
push eax
push 0x100077e8
call fcn.1004ed2b
pop ecx
pop ecx
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0x1fc], 0
je 0x1002b933
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x10007828
call fcn.1004ed2b
add esp, 0xc
mov eax, dword [ebp - 0x50]
and eax, 0x80000001
jns 0x1002b841
dec eax
or eax, 0xfffffffe
inc eax
mov ecx, dword [ebp - 0x3c]
and ecx, 0x80000001
jns 0x1002b851
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp eax, ecx
jne 0x1002b8af
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x3c]
jl 0x1002b8af
push 0x10007a10
call fcn.1004f8f6
pop ecx
mov dword [ebp - 0xb0], 1
jmp 0x1002b881
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x3c]
jge 0x1002b899
push 0x10007ac0
call fcn.1004f5a5
pop ecx
jmp 0x1002b874
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x3c]
inc eax
push eax
push 0x10007844
call fcn.1004f5a5
pop ecx
pop ecx
jmp 0x1002b92e
mov eax, dword [ebp - 0x50]
and eax, 0x80000001
jns 0x1002b8be
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1002b923
mov eax, dword [ebp - 0x3c]
shl eax, 1
cmp dword [ebp - 0x50], eax
jl 0x1002b923
push 0x10007a10
call fcn.1004f8f6
pop ecx
mov dword [ebp - 0xb8], 1
jmp 0x1002b8f0
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x3c]
jge 0x1002b908
push 0x10007ac4
call fcn.1004f5a5
pop ecx
jmp 0x1002b8e3
mov eax, dword [ebp - 0x3c]
shl eax, 1
mov ecx, dword [ebp - 0x50]
sub ecx, eax
inc ecx
inc ecx
push ecx
push 0x10007844
call fcn.1004f5a5
pop ecx
pop ecx
jmp 0x1002b92e
push 0x10007a14
call fcn.1004f8f6
pop ecx
jmp 0x1002b7f7
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1002b943
push 0
call fcn.1002cebe
pop ecx
jmp 0x1002b7b5
mov dword [ebp - 0x34], 0
jmp 0x1002b958
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x1002bceb
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x338], 0x24f63abe
mov dword [ebp - 0x344], 0xffffffff
mov dword [ebp - 0x2c], 3
jmp 0x1002b98d
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1002bcd8
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x54], 0xffffffff
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x34c], eax
mov esi, dword [ebp - 0x2c]
push 3
lea ecx, [ebp - 0x250]
call fcn.100166d5
sub esi, dword [eax]
je 0x1002b9d2
push 0
lea ecx, [ebp - 0x30c]
call fcn.100166d5
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jne 0x1002b9e6
mov dword [ebp - 0x180], 1
jmp 0x1002b9ed
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0x66c4
je 0x1002ba05
mov dword [ebp - 0x188], 1
jmp 0x1002ba0c
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x1002ba2d
mov eax, 0xffff
test eax, eax
jne 0x1002ba2d
and dword [ebp - 0x190], 0
jmp 0x1002ba37
mov dword [ebp - 0x190], 1
push 1
lea ecx, [ebp - 0x250]
call fcn.100166d5
mov ecx, dword [ebp - 0x190]
cmp ecx, dword [eax]
jl 0x1002ba5d
cmp dword [ebp - 0x44], 0
jne 0x1002ba5d
and dword [ebp - 0x198], 0
jmp 0x1002ba67
mov dword [ebp - 0x198], 1
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x250]
call fcn.100166d5
mov eax, dword [eax]
cmp eax, dword [ebp - 0x198]
jne 0x1002ba8b
mov dword [ebp - 0x1a0], 1
jmp 0x1002ba92
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x54], eax
or eax, 0xffffffff
je 0x1002bb2a
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x54], 0
jmp 0x1002babe
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x1002bb25
mov dword [ebp - 0x20c], 0xd52a2848
cmp dword [ebp - 0x20c], 0
je 0x1002bad9
jmp 0x1002bb25
mov dword [ebp - 0x44], 3
jmp 0x1002bae9
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1002bb23
push 0
push 0x1f01
lea eax, [ebp - 0x214]
push eax
push 0x5780
push 0x3f45
push 1
lea eax, [ebp - 0x54]
push eax
push 0x60d5
lea eax, [ebp - 0x250]
push eax
call fcn.1002d741
add esp, 0x24
jmp 0x1002bae2
jmp 0x1002bab7
jmp 0x1002bcd3
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x21c], 0x1ded
cmp dword [ebp - 0x21c], 0xdcc
jge 0x1002bcc8
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2b4]
push eax
push 0x10007ac8
call fcn.1004ed2b
add esp, 0xc
lea eax, [ebp - 0xc0]
push eax
push 0x100078ec
call fcn.1004ed2b
pop ecx
pop ecx
movsd xmm0, qword [0x10007de8]
movsd qword [ebp - 0x1cc], xmm0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0x224], 0
je 0x1002bcac
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x294]
push eax
push 0x10007ad4
call fcn.1004ed2b
add esp, 0x10
movsd xmm0, qword [ebp - 0x294]
subsd xmm0, qword [ebp - 0x2b4]
movsd xmm1, qword [ebp - 0x294]
subsd xmm1, qword [ebp - 0x2b4]
mulsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x29c]
subsd xmm1, qword [ebp - 0x2ac]
movsd xmm2, qword [ebp - 0x29c]
subsd xmm2, qword [ebp - 0x2ac]
mulsd xmm1, xmm2
addsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1004fc74
pop ecx
pop ecx
fstp qword [ebp - 0x35c]
movsd xmm0, qword [ebp - 0x35c]
divsd xmm0, qword [ebp - 0x340]
movsd qword [ebp - 0x2bc], xmm0
movsd xmm0, qword [ebp - 0x2bc]
comisd xmm0, xmmword [ebp - 0x1cc]
jbe 0x1002bc87
movsd xmm0, qword [ebp - 0x1cc]
movsd qword [ebp - 0x2a4], xmm0
jmp 0x1002bc97
movsd xmm0, qword [ebp - 0x2bc]
movsd qword [ebp - 0x2a4], xmm0
movsd xmm0, qword [ebp - 0x2a4]
movsd qword [ebp - 0x1cc], xmm0
jmp 0x1002bba3
push ecx
push ecx
movsd xmm0, qword [ebp - 0x1cc]
movsd qword [esp], xmm0
push 0x10007ae4
call fcn.1004f5a5
add esp, 0xc
cmp dword [ebp - 0x22c], 0
je 0x1002bcd3
jmp 0x1002bcd8
jmp 0x1002b986
cmp dword [ebp - 0x234], 0
je 0x1002bce6
jmp 0x1002b951
jmp 0x1002b951
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x388]
call fcn.10016651
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x30c]
call fcn.10016651
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x250]
call fcn.10016651
lea eax, [ebp - 0x354]
push eax
push dword [ebp - 0x23c]
push dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x18]
push dword [eax + 8]
push 0x79e8
push 0x72be
call fcn.1004065c
pop ecx
pop ecx
call eax
jmp 0x1002a6e2
jmp 0x1002bd61
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x1002bd61
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret