Function at 0x10028a80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1e0
mov eax, dword [ebp + 8]
mov edi, ecx
call 0x10028a99
pop esi
movzx ecx, byte [eax]
cmp cl, 0x4b
jne 0x100296c5
mov ecx, dword [eax + 4]
mov ebx, dword [edx + 8]
mov dword [esp + 0x1c], esi
mov esi, dword [eax + 0xc]
mov dword [esp + 0x44], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x4c], ecx
movzx ecx, byte [eax + 8]
mov eax, dword [ebx + 0x120]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x7c], esi
cmp eax, 2
mov byte [esp + 0x78], cl
jne 0x10029a63
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 8
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 8
mov dword [esp + 0xf0], 0
mov dword [esp + 0xd0], 0
lea eax, [esi + 0xa8]
mov ecx, dword [esi + 0xf0]
mov edi, dword [esi + 0xc4]
mov edx, dword [esi + 0xc0]
add ecx, 8
test edi, edi
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], eax
mov dword [esp + 8], edi
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], 0
je 0x10029928
mov edx, dword [esp + 0x4c]
mov ecx, dword [esi + 0x100]
mov edi, esi
mov dword [esp + 0xdc], 8
mov dword [esp + 0x74], 0
mov ebx, dword [edi + 0xc8]
mov esi, dword [edx + 0x64]
mov eax, ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x13c], esi
sub esi, ecx
xor ecx, ecx
mov dword [esp + 0x130], esi
mov esi, ebx
and esi, 0xff00
mov dword [esp + 0x12c], esi
mov esi, ebx
shr esi, 0x10
cmp si, 5
mov dword [esp + 0x120], esi
mov esi, 0
cmovb esi, eax
setae cl
cmp byte [edx + 0x78], 0
mov eax, 0
mov dword [esp + 0x11c], ecx
cmove esi, eax
mov eax, dword [edx + 0xc]
mov dword [esp + 0x138], esi
mov esi, dword [edi + 0xf8]
mov dword [esp + 0xc0], eax
sub eax, esi
mov dword [esp + 0x48], esi
mov esi, dword [edx + 0x60]
mov dword [esp + 0xc4], eax
mov eax, ecx
shl eax, 3
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x114], esi
add eax, esi
mov dword [esp + 0x104], eax
mov eax, dword [edi + 0xe8]
mov dword [esp + 0x118], eax
movzx eax, bh
mov dword [esp + 0x134], eax
mov eax, dword [edx + 8]
mov edx, dword [esp + 0x48]
mov dword [esp + 0xf8], eax
lea eax, [eax + edx]
mov dword [esp + 0xe4], eax
movzx eax, bl
mov dword [esp + 0x108], eax
mov eax, dword [edi + 0xec]
mov edi, esi
mov dword [esp + 0xf4], eax
lea eax, [ecx*8 + 4]
mov dword [esp + 0x124], eax
mov eax, 0
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], eax
xor eax, eax
mov edi, dword [esp + 0x98]
cmp byte [ecx + 0x21], 8
mov edx, dword [ecx + 0x1c]
mov esi, dword [ecx + 0x24]
mov dword [esp + 0x10], edi
lea ebx, [edi + 1]
sete al
add edx, dword [ecx + 0x18]
add esi, edi
xor edi, edi
xor ecx, ecx
lea eax, [esi + eax*8]
xor esi, esi
sub eax, edx
add eax, 4
mov dword [esp + 0x20], eax
mov eax, dword [esp + 8]
dec eax
nop dword [eax + eax]
movzx edx, byte [ebx - 1]
cmp ecx, 0x3f
jne 0x10028cf2
cmp dl, 2
jae 0x100296fe
mov byte [esp + 0x80], dl
mov dword [esp], esi
xor esi, esi
mov dword [esp + 0xc], eax
mov eax, edi
mov edi, 0
movzx edx, byte [esp + 0x80]
and dl, 0x7f
movzx edx, dl
shld esi, edx, cl
shl edx, cl
test cl, 0x20
cmovne esi, edx
cmovne edx, edi
mov edi, eax
or dword [esp], esi
or edi, edx
movzx edx, byte [esp + 0x80]
mov esi, dword [esp]
test dl, dl
jns 0x10028d4d
mov eax, dword [esp + 0xc]
add ecx, 7
inc ebx
add eax, 0xffffffff
jb 0x10028ce0
jmp 0x10029710
mov eax, dword [esp + 0xc]
mov ecx, edi
mov dword [esp + 0x98], ebx
or ecx, esi
mov dword [esp + 0x9c], eax
je 0x10028ec5
mov eax, dword [esp + 0xa4]
test esi, esi
jne 0x10028d87
lea ecx, [edi - 1]
cmp ecx, dword [eax + 8]
jae 0x10028d87
imul ebx, ecx, 0x68
add ebx, dword [eax + 4]
jmp 0x10028e4e
mov ebx, dword [eax + 0xc]
mov cl, 0x12
test ebx, ebx
je 0x1002970e
mov eax, dword [eax + 0x10]
mov dword [esp + 0xb8], eax
movzx eax, word [ebx + 0x4d6]
mov dword [esp + 0x10], ebx
mov ebx, 0xffffffff
lea ecx, [eax*8]
mov dword [esp + 0xe0], eax
nop dword [eax]
test ecx, ecx
je 0x10028e15
mov eax, dword [esp + 0x10]
mov edx, dword [eax + ebx*8 + 8]
mov dword [esp + 0xc], edx
mov edx, dword [eax + ebx*8 + 0xc]
xor eax, eax
mov dword [esp + 8], edx
xor edx, esi
mov esi, dword [esp + 0xc]
xor esi, edi
or esi, edx
mov esi, dword [esp]
setne al
cmp edi, dword [esp + 0xc]
mov edx, esi
sbb edx, dword [esp + 8]
mov edx, 0xff
cmovb eax, edx
movzx edx, byte [esp + 0x80]
inc ebx
add ecx, 0xfffffff8
cmp al, 1
je 0x10028dc0
movzx eax, al
test eax, eax
jne 0x10028e1c
jmp 0x10028e43
mov ebx, dword [esp + 0xe0]
mov eax, dword [esp + 0xb8]
sub eax, 1
jb 0x100297f5
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ebx, dword [ecx + ebx*4 + 0x4d8]
jmp 0x10028d9e
mov ecx, dword [esp + 0x10]
imul eax, ebx, 0x68
lea ebx, [ecx + eax + 0x58]
cmp byte [ebx + 0x62], 1
jne 0x10028e5b
inc dword [esp + 0xa8]
cmp word [ebx + 0x60], 0x2e
mov dword [esp + 0x70], ebx
jne 0x10028ed6
mov ecx, ebx
call fcn.1000d160
mov ecx, eax
mov eax, dword [esp + 4]
mov esi, edx
test edx, edx
je 0x10028f15
shl esi, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xfc], 0
mov dword [esp], 0
jmp 0x10028f6a
dec dword [esp + 0xa8]
mov dword [esp + 0x70], 0
jmp 0x10028f11
mov ecx, ebx
call fcn.1000d160
mov edi, dword [esp + 0xa0]
mov esi, edx
lea ecx, [esp + 0x140]
lea edx, [esp + 0x98]
push esi
push eax
push dword [edi + 0x20]
call fcn.1002af60
add esp, 0xc
movzx eax, byte [esp + 0x140]
cmp al, 0x4b
jne 0x100298dc
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x9c]
test ecx, ecx
mov dword [esp + 8], ecx
jne 0x10028c94
jmp 0x100297fc
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb0], ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x80]
add ecx, 0x10
add esi, 0xfffffff0
je 0x10029330
movq xmm0, qword [ecx]
movq xmm1, qword [ecx + 8]
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x80], ecx
movq qword [esp + 0x30], xmm1
movq qword [esp + 0x28], xmm0
lea edi, [esp + 0x28]
lea ecx, [esp + 0x140]
lea edx, [esp + 0x98]
push edi
push dword [eax + 0x20]
call fcn.10021980
add esp, 8
mov eax, dword [esp + 0x140]
xor eax, 0x2e
or eax, dword [esp + 0x144]
je 0x100297d2
movzx eax, word [esp + 0x150]
cmp eax, 0x11
je 0x1002911b
cmp eax, 0x12
je 0x10029078
cmp eax, 0x55
jne 0x10028f53
lea ecx, [esp + 0x28]
lea edx, [esp + 0x140]
call fcn.10026ab0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x30]
mov edx, ecx
and dl, 0x3f
cmp dl, 0x16
je 0x100291b9
cmp ecx, 0x18
mov dword [esp], 0
jne 0x10028f53
mov ecx, dword [esp + 0x13c]
cmp ecx, dword [esp + 0x14]
jb 0x1002a90b
mul dword [esp + 0x134]
jo 0x1002a914
mov ecx, dword [esp + 0x130]
sub ecx, eax
jb 0x1002a91b
add eax, dword [esp + 0x104]
cmp dword [esp + 0x12c], 0x800
jne 0x1002923f
cmp ecx, 8
jb 0x1002a957
cmp dword [eax + 4], 0
je 0x10029248
jmp 0x1002a989
lea ecx, [esp + 0x60]
lea edx, [esp + 0x140]
call fcn.10026ab0
mov eax, dword [esp + 0x60]
test al, 0x3f
je 0x10029208
mov ecx, dword [esp + 0x80]
cmp eax, 7
je 0x100291d3
cmp eax, 0xc
jne 0x10029236
mov eax, dword [esp + 0xc0]
cmp eax, dword [esp + 0x48]
jb 0x10029903
mov eax, dword [esp + 0x68]
mul dword [esp + 0x108]
jo 0x1002990c
mov edx, dword [esp + 0xc4]
sub edx, eax
jb 0x10029913
movzx ebx, byte [esp + 0xbc]
dec ebx
cmp ebx, 7
ja 0x1002a9ca
mov ebx, dword [ebx*4 + 0x1002ab8c]
mov ecx, dword [esp + 0xe4]
add ebx, dword [esp + 0x1c]
add ecx, eax
jmp ebx
lea ecx, [esp + 0x60]
lea edx, [esp + 0x140]
call fcn.10026ab0
mov eax, dword [esp + 0x60]
test al, 0x3f
je 0x10028f2d
cmp eax, 0xc
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x80]
jne 0x10028f5e
mov eax, dword [esp + 0xc0]
cmp eax, dword [esp + 0x48]
jb 0x10029903
mov eax, dword [esp + 0x68]
mul dword [esp + 0x108]
jo 0x1002990c
mov edx, dword [esp + 0xc4]
sub edx, eax
jb 0x10029913
movzx ebx, byte [esp + 0xbc]
dec ebx
cmp ebx, 7
ja 0x1002a9ca
mov ebx, dword [ebx*4 + 0x1002abac]
mov ecx, dword [esp + 0xe4]
add ebx, dword [esp + 0x1c]
add ecx, eax
jmp ebx
add eax, dword [esp + 0x138]
mov dword [esp], 1
mov dword [esp + 0x100], eax
jmp 0x10028f53
mov eax, dword [esp + 0x68]
mov dword [esp + 0xfc], 0
mov dword [esp + 0xe0], 1
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 4]
jmp 0x10028f5e
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xb8], 1
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], ecx
jmp 0x10028f53
mov eax, dword [esp + 4]
jmp 0x10028f5e
cmp ecx, 4
jb 0x1002a951
mov eax, dword [eax]
mov dword [esp], 1
add eax, dword [esp + 0x14]
mov dword [esp + 0x100], eax
jmp 0x10028f53
cmp dword [esp], 0
je 0x1002942a
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x124]
mov edx, dword [esp + 0x128]
mov eax, dword [ecx + eax + 0x58]
mov ecx, dword [ecx + edx + 0x58]
mov edx, dword [esp + 0x100]
sub eax, edx
jb 0x1002aa32
add ecx, edx
mov edx, dword [esp + 0x118]
mov dword [esp + 0x140], edx
mov edx, dword [esp + 0xf4]
mov dword [esp + 0x144], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 0x148], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x14c], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x150], edx
mov edx, dword [esp + 0xbc]
mov word [esp + 0x154], dx
mov edx, dword [esp + 0x120]
mov word [esp + 0x156], dx
mov dword [esp + 0x158], ecx
mov dword [esp + 0x15c], eax
mov eax, dword [esp + 0x11c]
mov byte [esp + 0x160], al
mov byte [esp + 0x163], 0
mov word [esp + 0x161], 0
lea ecx, [esp + 0x28]
lea edx, [esp + 0x140]
call fcn.10023140
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, eax
xor edx, 2
or edx, ecx
jne 0x100294a4
mov eax, dword [esp + 0x30]
cmp al, 0x4b
je 0x10029579
jmp 0x1002aa3c
mov ecx, dword [esp + 8]
or dword [esp + 0xc], ecx
je 0x10028f15
mov ecx, dword [esp + 0xb8]
or ecx, dword [esp + 0x10]
je 0x1002958b
mov esi, dword [esp + 0xd8]
mov eax, dword [esp + 0xb0]
mov edi, dword [esp + 0xd4]
cmp dword [esp + 0xb4], esi
sbb eax, edi
jae 0x10028f11
mov eax, dword [esp + 0x74]
cmp eax, dword [esp + 0xc8]
jne 0x100295f2
lea ecx, [esp + 0xc8]
call fcn.1002ade0
mov eax, dword [esp + 0xcc]
mov esi, dword [esp + 0xd8]
mov edi, dword [esp + 0xd4]
jmp 0x100295eb
mov dword [esp], 0
jmp 0x10029507
mov edx, dword [esp + 0x74]
mov esi, dword [esp + 0xdc]
movdqa xmm0, xmmword [esp + 0x80]
mov ecx, dword [esp + 4]
lea eax, [edx + edx*2]
inc edx
movdqu xmmword [esi + eax*8], xmm0
mov dword [esi + eax*8 + 0x10], ecx
mov al, 1
mov dword [esp + 0x74], edx
mov dword [esp + 0xd0], edx
mov dword [esp], eax
lea ecx, [esp + 0x28]
lea edx, [esp + 0x140]
call fcn.10023140
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, eax
xor edx, 2
or edx, ecx
je 0x10029419
xor eax, 1
or eax, ecx
jne 0x10029572
movdqu xmm1, xmmword [esp + 0x30]
pshufd xmm0, xmm1, 0x55
pshufd xmm2, xmm1, 0xff
movd ecx, xmm1
movdqa xmmword [esp + 0x80], xmm1
pshufd xmm1, xmm1, 0xee
movd esi, xmm1
movd eax, xmm0
movd edx, xmm2
cmp ecx, esi
sbb eax, edx
jae 0x100294e2
mov eax, dword [esp + 0x74]
cmp eax, dword [esp + 0xc8]
jne 0x100294ad
lea ecx, [esp + 0xc8]
call fcn.1002ade0
mov eax, dword [esp + 0xcc]
mov dword [esp + 0xdc], eax
jmp 0x100294ad
mov eax, dword [esp]
and al, 1
mov ah, al
test ah, 1
je 0x10028f11
mov eax, dword [esp + 4]
jmp 0x10029633
mov ecx, dword [esp + 0xfc]
or dword [esp + 0xe0], ecx
je 0x10028f15
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb0]
mov esi, eax
mov edi, ecx
add esi, dword [esp + 0x110]
adc edi, dword [esp + 0x10c]
cmp eax, esi
mov eax, ecx
sbb eax, edi
jae 0x10028f11
mov eax, dword [esp + 0x74]
cmp eax, dword [esp + 0xc8]
jne 0x100295f2
lea ecx, [esp + 0xc8]
call fcn.1002ade0
mov eax, dword [esp + 0xcc]
mov dword [esp + 0xdc], eax
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xdc]
mov ecx, dword [esp + 0xb0]
lea eax, [edx + edx*2]
inc edx
mov dword [ebx + eax*8 + 4], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x74], edx
mov dword [ebx + eax*8], ecx
mov dword [ebx + eax*8 + 8], esi
mov esi, dword [esp + 4]
mov dword [ebx + eax*8 + 0xc], edi
mov dword [ebx + eax*8 + 0x10], esi
mov eax, esi
mov dword [esp + 0xd0], edx
mov ecx, dword [esp + 0x20]
cmp eax, dword [esp + 0xe8]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x148], 2
jne 0x1002965e
lea ecx, [esp + 0xe8]
call fcn.1002ae80
mov edx, dword [esp + 4]
mov eax, dword [esp + 0xec]
movsd xmm0, qword [esp + 0x160]
lea ecx, [edx + edx*4]
movsd qword [eax + ecx*8 + 0x20], xmm0
movsd xmm0, qword [esp + 0x158]
movsd qword [eax + ecx*8 + 0x18], xmm0
movsd xmm0, qword [esp + 0x150]
movsd qword [eax + ecx*8 + 0x10], xmm0
movq xmm0, qword [esp + 0x140]
movq xmm1, qword [esp + 0x148]
movq qword [eax + ecx*8 + 8], xmm1
movq qword [eax + ecx*8], xmm0
mov eax, edx
inc eax
mov dword [esp + 0xf0], eax
jmp 0x10028f15
movzx edx, byte [eax + 3]
mov esi, dword [eax + 4]
mov byte [edi + 0xb], dl
movzx edx, word [eax + 1]
mov word [edi + 9], dx
movzx edx, word [eax + 9]
mov word [edi + 0x11], dx
movzx edx, byte [eax + 0xb]
mov byte [edi + 0x13], dl
movzx edx, byte [eax + 8]
mov eax, dword [eax + 0xc]
mov byte [edi + 8], cl
mov dword [edi + 0xc], esi
mov byte [edi + 0x10], dl
mov dword [edi + 0x14], eax
jmp 0x1002a008
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], eax
mov cl, 6
jmp 0x1002972e
mov esi, dword [esp + 0x10]
xor eax, eax
mov cl, 0x13
add esi, dword [esp + 8]
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], 0
mov byte [esp + 0x30], cl
mov byte [esp + 0x31], dl
mov edx, dword [esp + 0x70]
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], eax
cmp dword [esp + 0xc8], 0
mov dword [esp + 0x28], 1
je 0x10029769
mov ecx, dword [esp + 0xcc]
mov edx, 8
call fcn.10006c20
mov edi, dword [esp + 4]
mov ebx, dword [esp + 0xec]
test edi, edi
je 0x100297b3
lea esi, [ebx + 0x18]
jmp 0x10029786
add esi, 0x28
dec edi
je 0x100297b3
cmp dword [esi - 0x10], 0
jne 0x10029780
cmp dword [esi - 8], 0
je 0x1002979f
mov ecx, dword [esi - 0xc]
mov edx, 8
call fcn.10006c20
cmp dword [esi], 0
je 0x10029780
mov ecx, dword [esi - 4]
mov edx, 8
call fcn.10006c20
jmp 0x10029780
cmp dword [esp + 0xe8], 0
je 0x10029a1f
mov ecx, ebx
mov edx, 8
call fcn.10006c20
jmp 0x10029a1f
movq xmm0, qword [esp + 0x148]
movq xmm1, qword [esp + 0x150]
movq qword [esp + 0x38], xmm1
movq qword [esp + 0x30], xmm0
jmp 0x10029746
mov cl, 0x12
jmp 0x1002972e
mov edx, dword [esp + 0x74]
cmp edx, 2
jb 0x10029928
mov ecx, dword [esp + 0xcc]
cmp edx, 0x15
jae 0x10029923
lea eax, [edx + edx*2]
lea esi, [ecx + 0x18]
mov edx, ecx
mov dword [esp + 0xc], ecx
lea eax, [ecx + eax*8]
mov dword [esp + 0x80], eax
xor eax, eax
jmp 0x10029870
mov ecx, dword [esp + 0xc]
mov dword [ecx], edi
mov dword [ecx + 4], ebx
mov esi, dword [esp]
movq xmm0, qword [esp + 0x140]
movq xmm1, qword [esp + 0x148]
movq qword [ecx + 8], xmm0
movq qword [ecx + 0x10], xmm1
mov edx, esi
add esi, 0x18
add eax, 0xffffffe8
cmp esi, dword [esp + 0x80]
je 0x10029928
mov edi, dword [edx + 0x18]
mov ebx, dword [edx + 0x1c]
cmp edi, dword [edx]
mov ecx, ebx
sbb ecx, dword [edx + 4]
jae 0x1002985b
movsd xmm0, qword [edx + 0x20]
movsd xmm1, qword [edx + 0x28]
mov edx, eax
mov dword [esp], esi
movsd qword [esp + 0x148], xmm1
movsd qword [esp + 0x140], xmm0
movsd xmm0, qword [esi - 8]
test edx, edx
movsd qword [esi + 0x10], xmm0
movq xmm0, qword [esi - 0x18]
movq xmm1, qword [esi - 0x10]
movq qword [esi + 8], xmm1
movq qword [esi], xmm0
je 0x10029833
add edx, 0x18
cmp edi, dword [esi - 0x30]
mov ecx, ebx
sbb ecx, dword [esi - 0x2c]
lea ecx, [esi - 0x18]
mov esi, ecx
jb 0x100298a0
jmp 0x10029837
movq xmm1, qword [esp + 0x148]
movq xmm0, qword [esp + 0x141]
movq qword [esp + 0x38], xmm1
movq qword [esp + 0x31], xmm0
mov byte [esp + 0x30], al
jmp 0x10029746
mov eax, dword [esp + 0xf8]
jmp 0x1002991a
mov al, 0x35
jmp 0x1002aa09
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x58], eax
jmp 0x1002a9ff
call fcn.1002ad00
mov edi, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
cmp dword [esp + 0xe8], edi
jbe 0x10029978
test edi, edi
je 0x10029981
lea eax, [edi*8]
lea esi, [eax + eax*4]
push esi
push ecx
push 0
push dword [0x1008b098]
call sub.KERNEL32.dll_HeapReAlloc
test eax, eax
mov dword [esp + 0x80], eax
jne 0x10029996
mov ecx, 8
mov edx, esi
call fcn.10006fb0
jmp 0x1002a88e
mov dword [esp + 0x80], ecx
jmp 0x10029996
mov edx, 8
call fcn.10006c20
mov dword [esp + 0x80], 8
mov ebx, dword [esp + 0xd0]
mov ecx, dword [esp + 0xcc]
cmp dword [esp + 0xc8], ebx
jbe 0x100299ed
test ebx, ebx
je 0x100299f1
lea eax, [ebx*8]
lea eax, [eax + eax*2]
mov dword [esp], eax
push eax
push ecx
push 0
push dword [0x1008b098]
mov dword [esp + 0x1c], ecx
call sub.KERNEL32.dll_HeapReAlloc
mov esi, eax
test eax, eax
jne 0x10029a00
mov esi, dword [esp + 0xc]
mov edx, dword [esp]
mov ecx, 8
call fcn.10006fb0
jmp 0x1002a88e
mov esi, ecx
jmp 0x10029a00
mov edx, 8
mov esi, 8
call fcn.10006c20
mov eax, dword [esp + 0x80]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x44]
lea esi, [eax + 0x120]
cmp dword [esi], 2
jne 0x10029a54
movsd xmm0, qword [esp + 0x38]
movsd qword [esi + 0x10], xmm0
movq xmm0, qword [esp + 0x28]
movq xmm1, qword [esp + 0x30]
movq qword [esi + 8], xmm1
movq qword [esi], xmm0
jmp 0x10029a5d
lea ecx, [esp + 0x28]
call fcn.1002b8b0
mov edx, dword [esp + 0x18]
mov eax, dword [esi]
test eax, eax
je 0x10029ab1
mov ecx, dword [esp + 0x24]
movzx eax, byte [ecx + 0x128]
mov ecx, dword [ecx + 0x12c]
cmp al, 0x4b
je 0x10029abb
mov esi, dword [esp + 0x24]
mov ah, byte [esi + 0x12b]
mov ebx, dword [esi + 0x134]
mov edx, dword [esi + 0x130]
mov byte [edi + 0xb], ah
movzx esi, word [esi + 0x129]
mov word [edi + 9], si
mov byte [edi + 8], al
mov dword [edi + 0xc], ecx
mov dword [edi + 0x10], edx
mov dword [edi + 0x14], ebx
jmp 0x1002a008
mov eax, dword [esp + 0x24]
lea ecx, [eax + 0x124]
mov eax, dword [edx]
mov esi, dword [edx + 4]
mov edx, dword [ecx + 0xc]
test edx, edx
mov dword [esp + 0x80], eax
mov dword [esp + 0x48], esi
je 0x10029b80
mov eax, dword [ecx + 8]
mov esi, dword [esp + 0x48]
mov ebx, edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], eax
xor eax, eax
jmp 0x10029b13
mov eax, dword [esp + 4]
mov ebx, dword [esp + 8]
mov ecx, eax
cmp edi, dword [esp + 0x10]
mov edi, esi
sbb edi, dword [esp]
cmovb ebx, edx
cmovae eax, ecx
mov edx, ebx
sub edx, eax
jbe 0x10029d14
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x1c]
shr edx, 1
mov dword [esp + 4], eax
add edx, eax
lea ecx, [edx + edx*2]
mov edi, dword [ebx + ecx*8 + 4]
mov eax, dword [ebx + ecx*8]
mov dword [esp], edi
mov edi, dword [ebx + ecx*8 + 0xc]
cmp dword [esp + 0x80], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov edi, esi
sbb edi, dword [esp]
mov edi, dword [ebx + ecx*8 + 8]
jb 0x10029b5d
cmp dword [esp + 0x80], edi
mov ebx, esi
sbb ebx, dword [esp + 0xc]
jb 0x10029b87
mov ebx, dword [esp + 0x80]
mov ecx, esi
cmp ebx, edi
mov edi, ebx
sbb ecx, dword [esp + 0xc]
jb 0x10029af0
mov ebx, dword [esp + 8]
mov eax, dword [esp + 4]
lea ecx, [edx + 1]
jmp 0x10029afa
xor ecx, ecx
jmp 0x10029dee
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + ecx*8 + 0x10]
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 4]
cmp ecx, edx
jae 0x1002aa79
mov edx, dword [eax]
lea ecx, [ecx + ecx*4]
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x7c]
lea eax, [edx + ecx*8]
mov dword [esp + 0x10], eax
mov eax, dword [edx + ecx*8 + 8]
cmp eax, 2
jne 0x10029dab
movzx eax, byte [esi + 0xc9]
mov ebx, dword [edx + ecx*8]
mov ecx, dword [esi + 0xcc]
xor edx, edx
cmp al, 8
mov byte [esp + 0x74], al
mov dword [esp + 0xc], ecx
mov eax, dword [esi + 0xc4]
mov dword [esp + 4], ebx
sete dl
lea ecx, [ecx + edx*8 + 4]
mov dword [esp + 8], edx
mov edx, esi
mov esi, ebx
lea esi, [edx + 0xa8]
mov edx, dword [edx + 0xf0]
mov dword [esp], ecx
sub ecx, eax
sub ebx, ecx
lea ecx, [edx + 8]
mov dword [esp + 0x14], ecx
jb 0x10029d1f
mov ecx, eax
sub ecx, ebx
jbe 0x10029d1f
mov edi, dword [esp + 0x7c]
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x70], 0
mov edi, dword [edi + 0xc0]
add ebx, edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], edx
lea edx, [edi + eax]
mov dword [esp + 0x38], 0
xor esi, esi
mov dword [esp + 0x14], edx
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0xc4], ecx
mov ecx, dword [esp + 8]
lea ecx, [ecx*8 + 4]
sub eax, ecx
mov ecx, dword [esp + 4]
sub eax, dword [esp + 0xc]
mov dword [esp + 0xc], 0
mov edx, ecx
not edx
add eax, edi
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x18], edx
nop word [eax + eax]
movzx edx, byte [eax + edi]
cmp ecx, 0x3f
jne 0x10029cb2
cmp dl, 2
jae 0x10029d3a
mov ebx, edx
mov dword [esp + 8], eax
mov eax, 0
mov dword [esp + 0x1c], edx
and bl, 0x7f
movzx edi, bl
xor ebx, ebx
shld ebx, edi, cl
shl edi, cl
test cl, 0x20
cmovne ebx, edi
cmovne edi, eax
or dword [esp + 0xc], ebx
or esi, edi
test dl, dl
jns 0x1002a187
mov edx, dword [esp]
mov eax, dword [esp + 8]
mov edi, dword [esp + 4]
add ecx, 7
dec edx
inc eax
cmp edi, edx
mov dword [esp], edx
jne 0x10029ca0
mov al, 0x13
mov edi, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
jmp 0x10029d4a
mov edi, dword [esp + 0x44]
xor ecx, ecx
jmp 0x10029dee
mov al, 0x38
mov edx, dword [esp + 0x14]
mov dword [esp], esi
xor esi, esi
xor ecx, ecx
mov dword [esp + 0x70], 0
mov dword [esp + 0x20], eax
jmp 0x10029d46
mov al, 6
mov edi, dword [esp + 0x44]
mov ecx, edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 8]
cmp eax, 2
jne 0x10029dab
mov dword [esp + 8], esi
mov esi, dword [esp + 0x70]
mov eax, ecx
mov ecx, 1
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x10]
movzx eax, al
shl eax, 8
mov dword [edx + 8], ecx
mov ecx, dword [esp + 0x18]
mov dword [edx + 0xc], ecx
mov ecx, dword [esp + 8]
shl ecx, 0x10
or eax, ecx
movzx ecx, byte [esp + 0x20]
or ecx, eax
mov eax, edx
mov dword [edx + 0x10], ecx
mov ecx, dword [esp]
mov dword [edx + 0x14], ecx
mov ecx, dword [esp + 0x14]
mov dword [edx + 0x18], ecx
mov dword [edx + 0x1c], esi
mov esi, dword [esp + 0x1c]
mov dword [edx + 0x20], ebx
mov dword [edx + 0x24], esi
mov eax, dword [eax + 8]
test eax, eax
je 0x10029de5
mov esi, dword [esp + 0x10]
movzx eax, byte [esi + 0x10]
mov ecx, dword [esi + 0x14]
cmp al, 0x4b
je 0x10029dee
mov ah, byte [esi + 0x13]
mov ebx, ecx
mov ecx, dword [esi + 0x1c]
mov edx, dword [esi + 0x18]
mov byte [edi + 0xb], ah
movzx esi, word [esi + 0x11]
mov word [edi + 9], si
mov byte [edi + 8], al
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], edx
mov dword [edi + 0x14], ecx
jmp 0x1002a008
mov eax, dword [esp + 0x10]
add eax, 0xc
mov ecx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x18], 2
add eax, 1
adc ecx, 0
mov dword [esp + 0x78], eax
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x10]
xor edx, 0x2f
or edx, dword [ecx + 0x14]
jne 0x10029e4d
mov eax, dword [esp + 0x7c]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x18]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x80]
mov dword [edi + 0xc], esi
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], edx
mov dword [edi + 0x1c], ecx
mov dword [edi + 0x18], eax
xor eax, eax
jmp 0x1002a00d
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x108]
cmp eax, 2
jne 0x10029ec5
mov ebx, dword [esp + 0x24]
lea esi, [ebx + 0x108]
lea edx, [ebx + 0x10]
lea ecx, [esp + 0x140]
call fcn.100246c0
lea ecx, [esp + 0x28]
mov edx, ebx
push dword [esp + 0x4c]
lea eax, [esp + 0x144]
push eax
call fcn.10024a20
add esp, 8
cmp dword [ebx + 0x108], 2
jne 0x10029eba
movsd xmm0, qword [esp + 0x38]
movsd qword [esi + 0x10], xmm0
movq xmm0, qword [esp + 0x28]
movq xmm1, qword [esp + 0x30]
movq qword [esi + 8], xmm1
movq qword [esi], xmm0
jmp 0x10029ec3
lea ecx, [esp + 0x28]
call fcn.10026a20
mov eax, dword [esi]
test eax, eax
je 0x10029eee
mov ecx, dword [esp + 0x24]
movzx eax, byte [ecx + 0x110]
mov esi, dword [ecx + 0x114]
cmp eax, 0x4b
jne 0x10029fd4
test esi, esi
mov ebx, esi
jne 0x10029ef8
jmp 0x10029e22
mov ebx, dword [esp + 0x24]
add ebx, 0x10c
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
mov dword [esp + 0x20], ebx
test ecx, ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x4c], ecx
je 0x1002a017
mov edx, ecx
mov ebx, ecx
mov ecx, dword [esp + 0x80]
mov esi, dword [esp + 0x48]
xor eax, eax
jmp 0x10029f68
mov eax, dword [esp + 0x10]
mov edx, dword [esp]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x1c], eax
mov esi, dword [esp + 4]
mov ecx, dword [esp + 0x80]
cmp ecx, esi
mov esi, dword [esp + 0x48]
mov edi, esi
sbb edi, dword [esp + 8]
cmovae eax, dword [esp + 0x1c]
cmovb ebx, edx
mov edx, ebx
sub edx, eax
jbe 0x1002a02d
mov edi, dword [esp + 0x24]
shr edx, 1
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
add edx, eax
lea ebx, [edx + edx*2]
mov dword [esp], edx
mov edx, dword [edi + ebx*8 + 8]
mov eax, dword [edi + ebx*8 + 0xc]
mov dword [esp + 4], edx
cmp ecx, edx
mov edx, esi
mov dword [esp + 8], eax
sbb edx, eax
mov edx, dword [edi + ebx*8 + 0x14]
mov ebx, dword [edi + ebx*8 + 0x10]
jb 0x10029fb3
mov edi, dword [esp + 0x48]
cmp ecx, ebx
mov esi, dword [esp + 0x48]
mov ecx, dword [esp + 0x80]
sbb edi, edx
jb 0x1002a024
cmp ecx, ebx
sbb esi, edx
jb 0x10029f30
mov edx, dword [esp]
mov ebx, dword [esp + 0xc]
lea eax, [edx + 1]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
jmp 0x10029f3f
mov ebx, dword [esp + 0x24]
movzx ecx, byte [ebx + 0x113]
movzx edx, word [ebx + 0x111]
shl edx, 8
shl ecx, 0x18
or ecx, edx
mov edx, dword [ebx + 0x11c]
or ecx, eax
mov eax, dword [ebx + 0x118]
mov dword [edi + 8], ecx
mov dword [edi + 0xc], esi
mov dword [edi + 0x14], edx
mov dword [edi + 0x10], eax
mov eax, 1
mov dword [edi], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
cmp ecx, dword [esp + 0x4c]
jb 0x1002a048
jmp 0x10029e22
mov edi, dword [esp + 0x44]
mov ecx, dword [esp]
jmp 0x1002a03a
test eax, eax
mov edi, dword [esp + 0x44]
cmovne eax, dword [esp + 0x4c]
mov ecx, eax
mov eax, dword [esp + 0x24]
cmp ecx, dword [esp + 0x4c]
jae 0x10029e22
lea edx, [ecx + ecx*2]
mov ebx, ecx
mov eax, dword [eax + edx*8 + 4]
mov dword [esp + 0x1c], edx
test eax, eax
je 0x1002a0f9
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov edi, eax
mov dword [esp], ebx
mov ecx, dword [ecx + edx*8]
mov dword [esp + 4], ecx
xor ecx, ecx
jmp 0x1002a08d
mov ebx, dword [esp]
mov ecx, dword [esp + 8]
mov eax, edi
sub eax, ecx
jbe 0x1002a0ee
shr eax, 1
mov dword [esp + 8], ecx
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x48]
add eax, ecx
mov ecx, dword [esp + 4]
lea esi, [eax + eax*2]
mov ebx, dword [ecx + esi*8]
mov esi, dword [ecx + esi*8 + 4]
mov ecx, esi
mov edx, ebx
xor ecx, edi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x80]
xor edx, ecx
or edx, dword [esp + 0xc]
je 0x1002a0e5
cmp ecx, ebx
sbb edi, esi
mov edi, eax
jb 0x1002a0d0
mov edi, dword [esp + 0x10]
cmp ebx, dword [esp + 0x80]
sbb esi, dword [esp + 0x48]
jae 0x1002a080
mov ebx, dword [esp]
inc eax
mov ecx, eax
jmp 0x1002a087
mov edi, dword [esp + 0x44]
mov ebx, dword [esp]
jmp 0x1002a0fb
mov edi, dword [esp + 0x44]
sub ecx, 1
mov eax, ecx
jae 0x1002a0fb
xor eax, eax
mov ecx, dword [esp + 0x4c]
cmp ebx, ecx
jae 0x10029e22
mov esi, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esi + edx*8 + 0xc]
mov dword [esp + 0x80], ecx
mov ecx, dword [esp + 0x78]
cmp dword [esi + edx*8 + 8], ecx
mov ecx, edx
mov edx, dword [esp + 0x80]
sbb edx, dword [esp + 0x14]
jae 0x10029e22
lea esi, [esi + ecx*8]
cmp eax, dword [esi + 4]
jae 0x1002a295
mov ecx, dword [esi]
mov ebx, dword [esp + 0x78]
lea eax, [eax + eax*2]
mov edx, dword [ecx + eax*8 + 4]
cmp dword [ecx + eax*8], ebx
sbb edx, dword [esp + 0x14]
jae 0x10029e22
lea edx, [ecx + eax*8]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx + 8]
cmp dword [ecx + 4], eax
jbe 0x1002a795
mov ecx, dword [ecx]
lea esi, [eax + eax*2]
mov eax, dword [ecx + esi*4 + 4]
mov ecx, dword [ecx + esi*4 + 8]
mov dword [esp + 0x80], eax
jmp 0x1002a7a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
lea eax, [ecx + eax + 1]
mov ecx, dword [esp + 0xc]
add edx, dword [esp]
mov dword [esp + 0x28], eax
or esi, ecx
mov dword [esp + 0x2c], edx
je 0x1002aa83
test ecx, ecx
mov edi, dword [esp + 0x44]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0xc0]
jne 0x1002a1da
mov eax, dword [esp + 0x14]
dec eax
cmp eax, dword [edx + 0x10]
jae 0x1002a1da
imul ecx, eax, 0x68
add ecx, dword [edx + 0xc]
jmp 0x1002a2e8
mov esi, dword [edx + 0x14]
mov al, 0x12
mov dword [esp + 0x20], eax
test esi, esi
je 0x1002a50d
mov eax, dword [edx + 0x18]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x10]
movzx ecx, word [esi + 0x4d6]
mov dword [esp + 0x18], esi
mov dword [esp + 0xc0], ecx
lea esi, [ecx*8]
mov ecx, 0xffffffff
test esi, esi
je 0x1002a270
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
xor ebx, ebx
mov edi, dword [eax + ecx*8 + 8]
mov eax, dword [eax + ecx*8 + 0xc]
mov dword [esp], eax
xor eax, dword [esp + 0xc]
mov dword [esp + 8], edi
xor edi, edx
or edi, eax
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 0x44]
setne bl
cmp edx, dword [esp + 8]
mov edx, 0xff
sbb eax, dword [esp]
mov eax, dword [esp + 0x10]
cmovb ebx, edx
inc ecx
add esi, 0xfffffff8
cmp bl, 1
je 0x1002a217
movzx eax, bl
test eax, eax
je 0x1002a2dd
mov eax, dword [esp + 0x10]
jmp 0x1002a277
mov ecx, dword [esp + 0xc0]
mov esi, dword [esp + 0x18]
sub dword [esp + 0xbc], 1
jb 0x1002a926
mov esi, dword [esi + ecx*4 + 0x4d8]
jmp 0x1002a1f9
mov ecx, dword [esp + 0x4c]
lea eax, [ebx + 1]
cmp eax, ecx
je 0x10029e22
not ebx
mov eax, dword [esp + 0x24]
add ebx, ecx
mov ecx, dword [esp + 0x1c]
lea esi, [eax + ecx*8 + 0x18]
mov ecx, dword [esp + 0x78]
mov eax, dword [esi + 0xc]
cmp dword [esi + 8], ecx
sbb eax, dword [esp + 0x14]
jae 0x10029e22
cmp dword [esi + 4], 0
jne 0x1002a7bd
add esi, 0x18
dec ebx
jne 0x1002a2b8
jmp 0x10029e22
imul eax, ecx, 0x68
mov ecx, dword [esp + 0x18]
lea ecx, [ecx + eax + 0x58]
cmp byte [ecx + 0x62], 1
jne 0x1002a2f6
mov dword [esp + 0x38], 1
call fcn.1000d160
movzx ecx, byte [esp + 0x78]
mov esi, eax
test edx, edx
mov dword [esp + 0x14], ecx
je 0x1002a516
mov eax, dword [esp + 0x7c]
shl edx, 4
mov dword [esp + 0xc], 0
mov eax, dword [eax + 0xf4]
mov dword [esp + 0x18], eax
movzx eax, byte [esp + 0x74]
mov dword [esp + 0x78], eax
jmp 0x1002a34d
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp]
add esi, 0x10
add edx, 0xfffffff0
mov dword [esp + 0xc], eax
je 0x1002a51e
movq xmm0, qword [esi]
movq xmm1, qword [esi + 8]
mov eax, dword [esp + 0x30]
mov dword [esp], edx
mov dword [esp + 8], esi
movq qword [esp + 0xa0], xmm1
movq qword [esp + 0x98], xmm0
lea esi, [esp + 0x98]
lea ecx, [esp + 0x140]
lea edx, [esp + 0x28]
push esi
push dword [eax + 0x20]
call fcn.10021980
add esp, 8
mov eax, dword [esp + 0x140]
xor eax, 0x2e
or eax, dword [esp + 0x144]
je 0x1002a762
movzx eax, word [esp + 0x150]
cmp eax, 0x46
jle 0x1002a422
mov edx, dword [esp]
mov esi, dword [esp + 8]
cmp eax, 0x47
je 0x1002a437
cmp eax, 0x6e
je 0x1002a3d1
cmp eax, 0x2007
jne 0x1002a504
lea ebx, [esp + 0x98]
lea edx, [esp + 0x140]
mov ecx, ebx
call fcn.10026ab0
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x60]
push ebx
push dword [esp + 0x1c]
push dword [esp + 0x80]
call fcn.1002ccc0
add esp, 0xc
cmp byte [esp + 0x60], 0x4b
mov eax, dword [esp + 0xc]
jne 0x1002a33a
mov eax, dword [esp + 0x68]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x64]
jmp 0x1002a33a
mov edx, dword [esp]
mov esi, dword [esp + 8]
cmp eax, 3
je 0x1002a4a9
cmp eax, 0x31
jne 0x1002a504
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x1002a33d
lea ecx, [esp + 0x98]
lea edx, [esp + 0x140]
call fcn.10026ab0
mov edx, dword [esp + 0x98]
lea ecx, [esp + 0x60]
push 0x10
push dword [esp + 0x50]
push dword [esp + 0xcc]
push dword [esp + 0x88]
push dword [esp + 0x24]
push dword [esp + 0xb4]
push dword [esp + 0xb4]
call fcn.1002cec0
add esp, 0x1c
movzx eax, byte [esp + 0x60]
cmp al, 0x4b
jne 0x1002a92b
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
jmp 0x1002a336
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x1002a33d
lea ebx, [esp + 0x98]
lea edx, [esp + 0x140]
mov ecx, ebx
call fcn.10026ab0
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x60]
push ebx
push dword [esp + 0x1c]
push dword [esp + 0x80]
call fcn.1002ccc0
add esp, 0xc
xor eax, eax
cmp byte [esp + 0x60], 0x4b
jne 0x1002a332
mov eax, dword [esp + 0x68]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x64]
jmp 0x1002a332
mov eax, dword [esp + 0xc]
jmp 0x1002a33d
mov eax, dword [esp + 0x10]
jmp 0x10029d4a
mov dword [esp + 0xc], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 8
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 8
mov dword [esp + 0x68], 0
mov dword [esp + 0xa0], 0
lea eax, [esp + 0x98]
lea edx, [esp + 0x28]
lea esi, [esp + 0x60]
lea ecx, [esp + 0x140]
push 0
push eax
push esi
push dword [esp + 0x58]
push dword [esp + 0xd4]
push dword [esp + 0x90]
push dword [esp + 0x2c]
push 0
call fcn.1002b930
add esp, 0x20
movzx eax, byte [esp + 0x140]
cmp al, 0x4b
jne 0x1002a6d9
mov edx, dword [esp + 0xa0]
cmp edx, 2
jb 0x1002a7cb
mov esi, dword [esp + 0x9c]
cmp edx, 0x15
jae 0x1002a7c4
lea eax, [edx + edx*2]
mov ecx, esi
mov dword [esp + 0x7c], 0
lea eax, [esi + eax*8]
mov dword [esp + 0x20], eax
lea eax, [esi + 0x18]
jmp 0x1002a61a
mov ecx, esi
mov edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x70]
mov edx, dword [esp]
mov dword [ecx], edx
mov edx, dword [esp + 8]
mov dword [ecx + 4], edx
mov edx, dword [esp + 0x14]
mov dword [ecx + 0xc], ebx
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x78]
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], edx
mov ecx, dword [esp + 0x18]
add dword [esp + 0x7c], 0x18
lea eax, [ecx + 0x18]
cmp eax, dword [esp + 0x20]
je 0x1002a7cb
mov dword [esp + 0x18], eax
mov eax, dword [ecx + 0x28]
mov ebx, dword [ecx + 0x10]
mov edx, dword [ecx + 0x18]
cmp eax, ebx
mov ebx, dword [ecx + 0x1c]
mov dword [esp], edx
mov dword [esp + 8], ebx
jb 0x1002a649
ja 0x1002a604
mov edx, dword [esp]
mov edi, dword [esp + 8]
cmp edx, dword [ecx]
sbb edi, dword [ecx + 4]
mov edi, dword [esp + 0x44]
jae 0x1002a604
mov edx, dword [ecx + 0x20]
movsd xmm1, qword [ecx + 8]
mov ebx, dword [ecx + 0x24]
movq xmm0, qword [ecx]
cmp ecx, esi
mov dword [esp + 0x14], edx
mov edx, dword [ecx + 0x2c]
mov dword [esp + 0x78], edx
mov edx, dword [esp + 0x18]
movsd qword [edx + 8], xmm1
movq xmm1, qword [ecx + 0x10]
mov ecx, esi
movq qword [edx], xmm0
movq qword [edx + 0x10], xmm1
je 0x1002a5e4
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x70], ebx
jmp 0x1002a6b3
movsd xmm0, qword [ebx + 0x10]
add edi, 0xffffffe8
movsd qword [ecx + 0x10], xmm0
movq xmm0, qword [ebx]
movq xmm1, qword [ebx + 8]
movq qword [ecx + 8], xmm1
movq qword [ecx], xmm0
je 0x1002a5da
cmp eax, dword [esi + edi - 8]
lea ecx, [esi + edi]
lea ebx, [esi + edi - 0x18]
jb 0x1002a68e
ja 0x1002a5dc
mov edx, dword [esp]
cmp edx, dword [ebx]
mov edx, dword [esp + 8]
sbb edx, dword [ebx + 4]
jb 0x1002a68e
jmp 0x1002a5dc
mov edx, dword [esp + 0x144]
movzx ecx, byte [esp + 0x141]
movzx esi, word [esp + 0x142]
mov ebx, dword [esp + 0x14c]
cmp dword [esp + 0x98], 0
mov dword [esp + 0x20], eax
mov dword [esp], edx
mov edx, dword [esp + 0x148]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x1c], ecx
mov dword [esp + 8], esi
je 0x1002a738
mov ecx, dword [esp + 0x9c]
mov esi, edx
mov edx, 8
call fcn.10006c20
mov edx, esi
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 8]
cmp dword [esp + 0x60], 0
je 0x10029d46
mov ecx, dword [esp + 0x64]
mov esi, edx
mov edx, 8
call fcn.10006c20
mov edx, esi
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 8]
jmp 0x10029d46
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x148]
mov edx, dword [esp + 0x150]
mov dword [esp], ecx
mov ecx, dword [esp + 0x154]
mov esi, eax
mov dword [esp + 0x20], eax
shr esi, 0x10
mov dword [esp + 0x70], ecx
mov cl, ah
jmp 0x10029d46
mov dword [esp + 0x80], 0
mov esi, dword [edx + 0x10]
mov edx, dword [edx + 0x14]
xor eax, eax
test esi, esi
setne al
xor ebx, ebx
test edx, edx
setne bl
mov dword [esp + 0x18], eax
jmp 0x10029e22
xor eax, eax
jmp 0x1002a141
mov ecx, esi
call fcn.1002cbe0
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x60]
mov esi, dword [esp + 0x64]
cmp eax, ecx
mov edx, ecx
mov dword [esp + 0x20], ecx
jbe 0x1002a818
test ecx, ecx
je 0x1002a827
shl eax, 3
lea edx, [eax + eax*4]
lea eax, [ecx*8]
lea ebx, [eax + eax*4]
mov ecx, esi
push ebx
push 8
call fcn.10006c40
add esp, 8
test eax, eax
mov dword [esp + 0x18], eax
jne 0x1002a83b
mov ecx, 8
mov edx, ebx
call fcn.10006fb0
jmp 0x1002a88e
mov dword [esp + 0x18], esi
jmp 0x1002a83b
mov ecx, esi
mov edx, 8
mov dword [esp + 0x18], 8
call fcn.10006c20
mov eax, dword [esp + 0x98]
mov esi, dword [esp + 0xa0]
mov ebx, dword [esp + 0x9c]
cmp eax, esi
jbe 0x1002a890
test esi, esi
je 0x1002a895
shl eax, 3
lea edx, [eax + eax*2]
lea eax, [esi*8]
lea eax, [eax + eax*2]
mov ecx, ebx
mov dword [esp + 8], eax
push eax
push 8
call fcn.10006c40
add esp, 8
test eax, eax
mov dword [esp], eax
jne 0x1002a8a8
mov edx, dword [esp + 8]
mov ecx, 8
call fcn.10006fb0
ud2
mov dword [esp], ebx
jmp 0x1002a8a8
mov ecx, ebx
mov edx, 8
mov dword [esp], 8
call fcn.10006c20
mov eax, dword [esp + 0x10]
cmp dword [eax + 8], 2
jne 0x1002a8d4
mov edx, dword [esp + 0x20]
mov dword [esp + 0x14], esi
mov esi, dword [esp + 4]
mov ebx, dword [esp + 0xc]
xor ecx, ecx
mov eax, edx
shr eax, 0x10
mov dword [esp + 8], eax
mov al, dh
jmp 0x10029d65
cmp dword [esp + 0x20], 0
je 0x1002a8ed
mov ecx, dword [esp + 0x18]
mov edx, 8
call fcn.10006c20
mov eax, dword [esp + 0x10]
test esi, esi
je 0x10029da8
mov ecx, dword [esp]
mov edx, 8
call fcn.10006c20
mov eax, dword [esp + 0x10]
jmp 0x10029da8
mov esi, dword [esp + 0x114]
jmp 0x1002a922
mov cl, 0x35
jmp 0x1002a99e
mov esi, dword [esp + 0x104]
mov cl, 0x13
jmp 0x1002a99e
jmp 0x10029d0e
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x64]
movzx ecx, byte [esp + 0x61]
movzx esi, word [esp + 0x62]
mov edx, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x70], eax
jmp 0x10029d46
mov esi, eax
mov cl, 0x13
jmp 0x1002a98b
mov dword [esp + 0x67], eax
movzx edx, word [esp + 0x68]
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
mov word [esp + 0x59], dx
mov dh, byte [esp + 0x6a]
mov byte [esp + 0x5b], dh
mov dword [esp + 0x55], eax
mov dword [esp + 0x51], ecx
shld eax, ecx, 8
mov cl, 0x13
mov esi, dword [esp + 0x58]
jmp 0x1002a98b
mov cl, 0x35
movzx edx, byte [esp + 0x53]
movzx edi, word [esp + 0x51]
mov byte [esp + 0x62], dl
mov word [esp + 0x60], di
movzx edi, word [esp + 0x60]
movzx edx, byte [esp + 0x62]
mov byte [esp + 0x30], cl
mov word [esp + 0x31], di
mov byte [esp + 0x33], dl
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], 0
jmp 0x10029746
mov eax, dword [esp + 0xbc]
mov byte [esp + 0x51], al
mov al, 0x17
jmp 0x1002aa09
mov dword [esp + 0x5c], 0
mov al, 0x13
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x51]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x34], edx
mov dword [esp + 0x31], ecx
mov ecx, dword [esp + 0x58]
mov byte [esp + 0x30], al
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], ecx
jmp 0x10029746
xor edx, edx
mov al, 0x13
xor esi, esi
mov ah, dl
jmp 0x1002aa54
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
mov esi, eax
shr esi, 0x10
mov dword [esp + 0xf4], ecx
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x30], al
mov byte [esp + 0x31], ah
mov word [esp + 0x32], si
mov esi, dword [esp + 0xf4]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
jmp 0x10029746
push 0x1007b894
call fcn.10007930
mov ecx, 0x1007b8e0
call fcn.10009070
jmp 0x1002ab52
push dword [esp]
call fcn.1004d8d0
mov dword [esp], eax
lea ecx, [esp + 0xe8]
call fcn.1002b7d0
mov bl, 1
jmp 0x1002ab57
mov dword [esp], eax
xor ebx, ebx
cmp dword [esp + 0xc8], 0
je 0x1002ab72
mov ecx, dword [esp + 0xcc]
mov edx, 8
call fcn.10006c20
test bl, bl
jne 0x1002ab37
lea ecx, [esp + 0xe8]
call fcn.1002b7d0
push dword [esp]
call fcn.1004d8d0
nop
insd dword es:[edi], dx
push es
add byte [eax], al
or byte cs:[eax], al
add byte [ecx], dh
pop ds
add byte [eax], al
pop esi
or byte [eax], al
add byte [ecx], dh
pop ds
add byte [eax], al
xor dword [edi], ebx
add byte [eax], al
xor dword [edi], ebx
add byte [eax], al
cmp al, 8
add byte [eax], al
or eax, dword [edi]
add byte [eax], al
enter 7, 0
xor dword [edi], ebx
add byte [eax], al
clc
pop es
add byte [eax], al
xor dword [edi], ebx
add byte [eax], al
xor dword [edi], ebx
add byte [eax], al
xor dword [edi], ebx
add byte [eax], al
salc
pop es
add byte [eax], al
nop dword [eax]