Function at 0x1002f346
Capabilities:
Enumerate pe sections

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x464
mov eax, dword [0x10057940]
xor eax, ebp
mov dword [ebp - 4], eax
test byte [0x10116d14], 4
mov eax, dword [ebp + 8]
push ebx
mov dword [ebp - 0x438], eax
mov eax, dword [ebp + 0xc]
push esi
mov ebx, 0x10058a80
push edi
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x418], ebx
je 0x1002f38e
mov dword [ebp - 0x418], 0x10058a82
mov eax, dword [0x10115084]
xor ecx, ecx
mov dword [0x10116ca0], ecx
mov dword [0x10116ca4], ecx
mov dword [0x10116d68], ecx
mov eax, dword [eax + 4]
push ecx
push eax
call fcn.100267f5
mov edi, dword [sym.imp.MSVCR100.dll_sprintf_s]
mov esi, eax
push esi
push 0x10009288
push 0x20000
push ebx
mov dword [ebp - 0x42c], esi
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
push 1
lea eax, [ebp - 0x414]
push eax
mov dword [ebp - 0x414], esi
mov esi, 0x100084ac
push esi
push 0x10009278
mov eax, 0x1000926c
push eax
push eax
call fcn.1002c050
mov eax, dword [0x10115084]
mov ecx, dword [eax + 0x18]
movzx edx, word [ecx + 6]
movzx ecx, word [ecx + 0x14]
imul edx, edx, 0x28
add edx, ecx
mov ecx, dword [eax]
cmp dword [eax + 0xc], 0
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x54]
mov ecx, dword [ecx + 0x3c]
push 1
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x414]
push eax
lea ecx, [edx + ecx + 0x18]
push esi
mov dword [ebp - 0x40c], ecx
push 0x10009278
je 0x1002f57d
mov eax, 0x1000925c
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
push 1
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x414]
push eax
push esi
push 0x10009278
mov eax, 0x10009248
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x430]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x440], eax
div dword [ebp - 0x42c]
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
test eax, eax
jns 0x1002f4b6
fadd dword [0x10009244]
push 0
fstp dword [ebp - 0x414]
lea eax, [ebp - 0x414]
push eax
mov eax, 0x10009238
push eax
push eax
mov eax, 0x1000925c
push eax
push eax
call fcn.1002c050
fild dword [ebp - 0x42c]
mov eax, dword [ebp - 0x440]
fstp qword [ebp - 0x450]
fild dword [ebp - 0x440]
test eax, eax
jns 0x1002f4fa
fadd qword [0x10009230]
fdiv qword [ebp - 0x450]
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x40c]
push dword [ebp - 0x430]
push 0x100091f8
push 0x20000
push ebx
call edi
add esp, 0x1c
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10115084]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x74]
and dword [ebp - 0x41c], 0
and dword [ebp - 0x40c], 0
test ecx, ecx
je 0x1002f6a9
add eax, 0x7c
cmp dword [ebp - 0x40c], 0xf
je 0x1002f567
mov edx, dword [eax]
add dword [ebp - 0x41c], edx
inc dword [ebp - 0x40c]
add eax, 8
cmp dword [ebp - 0x40c], ecx
jb 0x1002f556
jmp 0x1002f6a9
push 0x1000925c
push 0x100091e8
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
push 1
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x414]
push eax
push esi
push 0x10009278
push 0x10009248
push 0x100091d0
call fcn.1002c050
mov eax, dword [ebp - 0x430]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x440], eax
div dword [ebp - 0x42c]
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
test eax, eax
jns 0x1002f5e3
fadd dword [0x10009244]
push 0
fstp dword [ebp - 0x414]
lea eax, [ebp - 0x414]
push eax
mov eax, 0x10009238
push eax
push eax
push 0x1000925c
push 0x100091e8
call fcn.1002c050
fild dword [ebp - 0x42c]
mov eax, dword [ebp - 0x440]
fstp qword [ebp - 0x450]
fild dword [ebp - 0x440]
test eax, eax
jns 0x1002f62a
fadd qword [0x10009230]
fdiv qword [ebp - 0x450]
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x40c]
push dword [ebp - 0x430]
push 0x100091f8
push 0x20000
push ebx
call edi
add esp, 0x1c
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10115084]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x84]
and dword [ebp - 0x41c], 0
and dword [ebp - 0x40c], 0
test ecx, ecx
je 0x1002f6a9
add eax, 0x8c
cmp dword [ebp - 0x40c], 0xe
je 0x1002f698
mov edx, dword [eax]
add dword [ebp - 0x41c], edx
inc dword [ebp - 0x40c]
add eax, 8
cmp dword [ebp - 0x40c], ecx
jb 0x1002f687
mov eax, dword [ebp - 0x41c]
push 1
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x414]
push eax
push esi
push 0x10009278
mov eax, 0x100091bc
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x41c]
imul eax, eax, 0x64
mov dword [ebp - 0x448], eax
cdq
idiv dword [ebp - 0x42c]
push 0
mov dword [ebp - 0x414], eax
fild dword [ebp - 0x414]
lea eax, [ebp - 0x414]
push eax
push 0x100091b4
fstp dword [ebp - 0x414]
push 0x10009238
mov eax, 0x100091bc
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x41c]
lea eax, [ebp - 0x404]
push 0x10009198
push 0x400
push eax
call edi
fild dword [ebp - 0x448]
add esp, 8
lea eax, [ebp - 0x404]
fdiv qword [ebp - 0x450]
fstp qword [esp]
push eax
push 0x10009184
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10115084]
cmp dword [eax + 0xc], 0
mov eax, dword [eax + 0x18]
movzx eax, word [eax + 6]
movzx eax, ax
push 1
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x414]
push eax
push 0x10009178
push 0x10009168
mov eax, 0x10009154
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
push 0x10009134
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x438]
mov eax, dword [eax]
push 1
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x414]
push eax
push esi
push 0x10003e54
mov eax, 0x10009124
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x438]
mov eax, dword [eax]
imul eax, eax, 0x64
xor edx, edx
div dword [ebp - 0x42c]
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
test eax, eax
jns 0x1002f821
fadd dword [0x10009244]
push 0
fstp dword [ebp - 0x414]
lea eax, [ebp - 0x414]
push eax
push 0x100091b4
push 0x10009238
mov eax, 0x10009124
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x438]
push dword [eax]
lea eax, [ebp - 0x404]
push 0x10009108
push 0x400
push eax
call edi
mov eax, dword [ebp - 0x438]
mov eax, dword [eax]
imul eax, eax, 0x64
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
test eax, eax
jns 0x1002f882
fadd qword [0x10009230]
fdiv qword [ebp - 0x450]
add esp, 8
lea eax, [ebp - 0x404]
fstp qword [esp]
push eax
push 0x10009184
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116090]
push 1
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x414]
push eax
push esi
push esi
mov eax, 0x100090f4
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x440]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x448], eax
div dword [ebp - 0x42c]
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
test eax, eax
jns 0x1002f90b
fadd dword [0x10009244]
push 0
fstp dword [ebp - 0x414]
lea eax, [ebp - 0x414]
push eax
push 0x100091b4
push 0x10009238
mov eax, 0x100090f4
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x440]
lea eax, [ebp - 0x404]
push 0x100090d8
push 0x400
push eax
call edi
fild dword [ebp - 0x448]
mov eax, dword [ebp - 0x448]
test eax, eax
jns 0x1002f95f
fadd qword [0x10009230]
fdiv qword [ebp - 0x450]
add esp, 8
lea eax, [ebp - 0x404]
fstp qword [esp]
push eax
push 0x10009184
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x438]
and dword [ebp - 0x444], 0
push 6
add eax, 0x1c
pop ecx
mov edx, dword [eax]
add dword [ebp - 0x444], edx
add eax, 8
dec ecx
jne 0x1002f9a6
mov eax, dword [ebp - 0x444]
push 1
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x414]
push eax
push esi
push esi
mov eax, 0x100090c4
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x444]
imul eax, eax, 0x64
mov dword [ebp - 0x448], eax
cdq
idiv dword [ebp - 0x42c]
push 0
mov dword [ebp - 0x414], eax
fild dword [ebp - 0x414]
lea eax, [ebp - 0x414]
push eax
push 0x100091b4
fstp dword [ebp - 0x414]
push 0x10009238
mov eax, 0x100090c4
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x444]
lea eax, [ebp - 0x404]
push 0x100090a8
push 0x400
push eax
call edi
fild dword [ebp - 0x448]
add esp, 8
lea eax, [ebp - 0x404]
fdiv qword [ebp - 0x450]
fstp qword [esp]
push eax
push 0x10009184
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
xor eax, eax
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x430], eax
mov eax, dword [0x10116cac]
mov ecx, dword [eax]
push 0x6000000
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0x414], eax
xor eax, eax
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x414], eax
jb 0x1002fc18
mov eax, dword [0x10116cac]
mov ecx, dword [eax]
lea edx, [ebp - 0x464]
push edx
lea edx, [ebp - 0x448]
push edx
mov edx, dword [ebp - 0x40c]
or edx, 0x6000000
push edx
push eax
call dword [ecx + 0xc4]
test eax, eax
js 0x1002fc00
cmp dword [ebp - 0x448], 0
je 0x1002fc00
mov eax, dword [ebp - 0x464]
and eax, 3
je 0x1002fb1a
cmp eax, 2
jne 0x1002fc00
mov ecx, dword [0x10115084]
inc dword [ebp - 0x430]
lea eax, [ebp - 0x460]
push eax
push dword [ebp - 0x448]
call fcn.1001b643
mov ecx, dword [ebp - 0x460]
mov al, byte [ecx]
mov dl, al
and dl, 7
cmp dl, 3
jne 0x1002fbde
movzx eax, byte [ecx + 1]
inc dword [ebp - 0x45c]
shr eax, 4
shl eax, 2
add dword [ebp - 0x434], eax
mov dword [ebp - 0x420], eax
mov eax, dword [ecx + 4]
add dword [ebp - 0x43c], eax
add eax, dword [ebp - 0x420]
add eax, ecx
mov dword [ebp - 0x408], eax
call fcn.100267d8
test eax, eax
je 0x1002fc00
test byte [eax], 0x40
mov dword [ebp - 0x420], eax
je 0x1002fbb3
movzx ecx, byte [eax + 3]
movzx edx, byte [eax + 2]
inc dword [ebp - 0x458]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 1]
shl ecx, 8
or ecx, edx
jmp 0x1002fbbd
inc dword [ebp - 0x454]
movzx ecx, byte [eax + 1]
add eax, ecx
mov ecx, dword [ebp - 0x420]
add eax, 3
and eax, 0xfffffffc
test byte [ecx], 0x80
jne 0x1002fb8a
sub eax, dword [ebp - 0x408]
add dword [ebp - 0x434], eax
jmp 0x1002fc00
mov cl, al
and cl, 3
cmp cl, 2
jne 0x1002fc00
inc dword [ebp - 0x440]
inc dword [ebp - 0x434]
movzx eax, al
shr eax, 2
add dword [ebp - 0x43c], eax
inc dword [ebp - 0x40c]
mov eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x414]
jbe 0x1002fac8
mov eax, dword [ebp - 0x434]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10009094
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x434]
imul eax, eax, 0x64
mov dword [ebp - 0x420], eax
cdq
idiv dword [ebp - 0x42c]
push 0
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
lea eax, [ebp - 0x408]
push eax
push 0x100091b4
fstp dword [ebp - 0x408]
push 0x10009238
mov eax, 0x10009094
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x434]
lea eax, [ebp - 0x404]
push 0x10009078
push 0x400
push eax
call edi
fild dword [ebp - 0x420]
add esp, 8
lea eax, [ebp - 0x404]
fdiv qword [ebp - 0x450]
fstp qword [esp]
push eax
push 0x10009184
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x43c]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10009068
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x43c]
imul eax, eax, 0x64
mov dword [ebp - 0x420], eax
cdq
idiv dword [ebp - 0x42c]
push 0
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
lea eax, [ebp - 0x408]
push eax
push 0x100091b4
fstp dword [ebp - 0x408]
push 0x10009238
mov eax, 0x10009068
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x43c]
lea eax, [ebp - 0x404]
push 0x1000904c
push 0x400
push eax
call edi
fild dword [ebp - 0x420]
add esp, 8
lea eax, [ebp - 0x404]
fdiv qword [ebp - 0x450]
fstp qword [esp]
push eax
push 0x10009184
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10115084]
cmp dword [eax + 0xc], 0
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x20]
push 1
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
mov eax, 0x10009044
push esi
push eax
push eax
je 0x1002fe3f
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x420], eax
div dword [ebp - 0x42c]
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
test eax, eax
jns 0x1002fdf3
fadd dword [0x10009244]
push 0
fstp dword [ebp - 0x408]
lea eax, [ebp - 0x408]
push eax
push 0x100091b4
push 0x10009238
mov eax, 0x10009044
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
lea eax, [ebp - 0x404]
push 0x10009028
push 0x400
push eax
call edi
fild dword [ebp - 0x420]
mov eax, dword [ebp - 0x420]
jmp 0x1002febb
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x420], eax
div dword [ebp - 0x42c]
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
test eax, eax
jns 0x1002fe71
fadd dword [0x10009244]
push 0
fstp dword [ebp - 0x408]
lea eax, [ebp - 0x408]
push eax
push 0x100091b4
push 0x10009238
mov eax, 0x10009044
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
lea eax, [ebp - 0x404]
push 0x10009028
push 0x400
push eax
call edi
fild dword [ebp - 0x420]
mov eax, dword [ebp - 0x420]
test eax, eax
jns 0x1002fec5
fadd qword [0x10009230]
fdiv qword [ebp - 0x450]
add esp, 8
lea eax, [ebp - 0x404]
fstp qword [esp]
push eax
push 0x10009184
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10115084]
mov ecx, dword [eax + 0x18]
mov eax, dword [ebp - 0x42c]
sub eax, dword [ecx + 0x54]
mov ecx, dword [ebp - 0x438]
sub eax, dword [ebp - 0x40c]
push 1
sub eax, dword [0x10116090]
sub eax, dword [ebp - 0x43c]
sub eax, dword [ebp - 0x434]
sub eax, dword [ebp - 0x444]
sub eax, dword [ebp - 0x41c]
sub eax, dword [ecx]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x1000901c
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
imul eax, eax, 0x64
mov dword [ebp - 0x420], eax
cdq
idiv dword [ebp - 0x42c]
push 0
mov dword [ebp - 0x408], eax
fild dword [ebp - 0x408]
lea eax, [ebp - 0x408]
push eax
push 0x100091b4
fstp dword [ebp - 0x408]
push 0x10009238
mov eax, 0x1000901c
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
lea eax, [ebp - 0x404]
push 0x10009000
push 0x400
push eax
call edi
fild dword [ebp - 0x420]
add esp, 8
lea eax, [ebp - 0x404]
fdiv qword [ebp - 0x450]
fstp qword [esp]
push eax
push 0x10009184
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10115084]
cmp dword [eax + 0xc], 0
mov eax, dword [eax + 0x18]
movzx eax, word [eax + 6]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x408], eax
push 1
lea eax, [ebp - 0x408]
push eax
push esi
mov eax, 0x10009154
push esi
push eax
push eax
je 0x100300f2
call fcn.1002c050
push 0x10002e97
push dword [ebp - 0x410]
call fcn.10011965
push dword [ebp - 0x40c]
push 0x10009134
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
cmp dword [ebp - 0x40c], 0
mov eax, dword [0x10115084]
mov eax, dword [eax + 0x18]
movzx ecx, word [eax + 0x14]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x41c], eax
jbe 0x100301b4
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x41c]
mov ecx, dword [eax + 0x10]
push 1
mov dword [ebp - 0x408], ecx
lea ecx, [ebp - 0x408]
push ecx
push esi
push esi
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x41c]
push dword [eax + 0x10]
push eax
push 0x10008ff0
push 0x20000
push ebx
call edi
add esp, 0x14
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
add dword [ebp - 0x41c], 0x28
dec dword [ebp - 0x414]
jne 0x10030092
jmp 0x100301b4
call fcn.1002c050
push 0x10002e97
push dword [ebp - 0x410]
call fcn.10011965
push dword [ebp - 0x40c]
push 0x10009134
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
cmp dword [ebp - 0x40c], 0
mov eax, dword [0x10115084]
mov eax, dword [eax + 0x18]
movzx ecx, word [eax + 0x14]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x41c], eax
jbe 0x100301b4
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x41c]
mov ecx, dword [eax + 0x10]
push 1
mov dword [ebp - 0x408], ecx
lea ecx, [ebp - 0x408]
push ecx
push esi
push esi
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x41c]
push dword [eax + 0x10]
push eax
push 0x10008ff0
push 0x20000
push ebx
call edi
add esp, 0x14
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
add dword [ebp - 0x41c], 0x28
dec dword [ebp - 0x414]
jne 0x10030159
mov eax, dword [0x10114c6c]
mov ecx, dword [eax]
push 0x10116d64
push 0x10002764
push eax
call dword [ecx]
test eax, eax
jns 0x100301f2
push 0x10008fc4
push 0x20000
push ebx
call edi
add esp, 0xc
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
jmp 0x10031182
cmp dword [0x10116d64], 0
jne 0x1003020d
push 0xfde9
push 0x1b5
call fcn.10026985
push eax
jmp 0x100301e2
mov eax, dword [0x10116090]
push 1
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x100090f4
push eax
push eax
call fcn.1002c050
push 0x10002e97
push dword [ebp - 0x410]
call fcn.10011965
push dword [ebp - 0x420]
push 0x10008fa8
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116d64]
xor ecx, ecx
push ecx
push ecx
push ecx
mov dword [0x10116d68], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x428]
push ecx
lea ecx, [ebp - 0x424]
push ecx
push 0
push eax
call dword [edx + 0x24]
mov eax, dword [0x10116ca4]
mov ecx, dword [ebp - 0x428]
mov dword [0x10116ca4], eax
mov eax, dword [ebp - 0x424]
or dword [0x10116ca0], 1
imul eax, ecx
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008f98
push eax
push eax
mov dword [ebp - 0x408], ecx
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008f88
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
push dword [ebp - 0x428]
push 0x10008f80
push 0x10008490
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116cac]
mov ecx, dword [eax]
push 0x2000000
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0x428], eax
test eax, eax
je 0x100304fc
and dword [ebp - 0x42c], 0
and dword [ebp - 0x41c], 0
xor ecx, ecx
inc ecx
mov dword [ebp - 0x40c], ecx
cmp eax, ecx
jb 0x100303c8
mov eax, dword [0x10116cac]
mov ecx, dword [eax]
push 0
lea edx, [ebp - 0x414]
push edx
mov edx, dword [ebp - 0x40c]
or edx, 0x2000000
push edx
push eax
call dword [ecx + 0x9c]
test eax, eax
js 0x100303b4
test byte [ebp - 0x414], 0x20
je 0x100303a5
inc dword [ebp - 0x42c]
test byte [ebp - 0x414], 0x10
je 0x100303b4
inc dword [ebp - 0x41c]
inc dword [ebp - 0x40c]
mov eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x428]
jbe 0x1003036e
mov eax, dword [0x10116d64]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x428]
push ecx
lea ecx, [ebp - 0x424]
push ecx
push 2
push eax
call dword [edx + 0x24]
mov eax, dword [0x10116ca4]
mov ecx, dword [ebp - 0x428]
mov dword [0x10116ca4], eax
mov eax, dword [ebp - 0x424]
or dword [0x10116ca0], 4
imul eax, ecx
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008f70
push eax
push eax
mov dword [ebp - 0x408], ecx
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008f60
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x42c]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008f54
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x41c]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008f44
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
lea eax, [ebp - 0x404]
push dword [ebp - 0x428]
push 0x10008f20
push 0x400
push eax
call edi
push dword [ebp - 0x41c]
lea eax, [ebp - 0x404]
push dword [ebp - 0x42c]
push eax
push 0x10008ef4
push 0x20000
push ebx
call edi
add esp, 0x2c
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116d64]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x428]
push ecx
lea ecx, [ebp - 0x424]
push ecx
push 1
push eax
call dword [edx + 0x24]
mov ecx, dword [ebp - 0x428]
or dword [0x10116ca0], 2
mov eax, dword [0x10116ca4]
mov dword [0x10116ca4], eax
test ecx, ecx
je 0x100305c7
mov eax, dword [ebp - 0x424]
imul eax, ecx
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008ee4
push eax
push eax
mov dword [ebp - 0x408], ecx
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008ed4
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
push dword [ebp - 0x428]
push 0x10004094
push 0x10008490
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116cac]
mov ecx, dword [eax]
push 0x6000000
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0x428], eax
test eax, eax
je 0x100307a4
and dword [ebp - 0x41c], 0
xor ecx, ecx
inc ecx
mov dword [ebp - 0x40c], ecx
cmp eax, ecx
jb 0x10030649
mov eax, dword [0x10116cac]
mov ecx, dword [eax]
lea edx, [ebp - 0x408]
push edx
mov edx, dword [ebp - 0x40c]
or edx, 0x6000000
push edx
push eax
call dword [ecx + 0xc0]
test eax, eax
js 0x10031193
test dword [ebp - 0x408], 0x400
je 0x10030635
inc dword [ebp - 0x41c]
inc dword [ebp - 0x40c]
mov eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x428]
jbe 0x100305f9
mov eax, dword [0x10116d64]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x424]
push ecx
push 6
push eax
call dword [edx + 0x24]
mov ecx, dword [ebp - 0x428]
or dword [0x10116ca0], 0x40
mov eax, dword [0x10116ca4]
mov dword [0x10116ca4], eax
test ecx, ecx
je 0x100307a4
mov eax, dword [ebp - 0x424]
imul eax, ecx
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x420]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008ec0
push eax
push eax
mov dword [ebp - 0x420], ecx
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
push 1
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x420]
push eax
push esi
push esi
mov eax, 0x10008eac
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x41c]
push 1
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x420]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10001c40
push eax
push eax
call fcn.1002c050
and dword [ebp - 0x420], 0
push 1
lea eax, [ebp - 0x420]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10001d4c
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x430]
push 1
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x420]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008e9c
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
lea eax, [ebp - 0x404]
push dword [ebp - 0x428]
push 0x10008e78
push 0x400
push eax
call edi
push dword [ebp - 0x430]
lea eax, [ebp - 0x404]
push 0
push dword [ebp - 0x41c]
push eax
push 0x10008e4c
push 0x20000
push ebx
call edi
add esp, 0x30
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116cac]
mov ecx, dword [eax]
push 0x4000000
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0x428], eax
test eax, eax
je 0x10030927
and dword [ebp - 0x41c], 0
xor ecx, ecx
inc ecx
mov dword [ebp - 0x40c], ecx
cmp eax, ecx
jb 0x10030827
mov eax, dword [0x10116cac]
mov ecx, dword [eax]
lea edx, [ebp - 0x408]
push edx
mov edx, dword [ebp - 0x40c]
or edx, 0x4000000
push edx
push eax
call dword [ecx + 0xcc]
test eax, eax
js 0x100311b4
mov eax, dword [ebp - 0x408]
and eax, 0x30
cmp al, 0x30
jne 0x10030813
inc dword [ebp - 0x41c]
inc dword [ebp - 0x40c]
mov eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x428]
jbe 0x100307d6
mov eax, dword [0x10116d64]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x424]
push ecx
push 4
push eax
call dword [edx + 0x24]
mov ecx, dword [ebp - 0x428]
mov eax, dword [ebp - 0x424]
imul eax, ecx
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x420]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008e38
push eax
push eax
mov dword [ebp - 0x420], ecx
call fcn.1002c050
mov eax, dword [ebp - 0x40c]
push 1
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x420]
push eax
push esi
push esi
mov eax, 0x10008e24
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x41c]
push 1
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x420]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008e18
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x40c]
lea eax, [ebp - 0x404]
push dword [ebp - 0x428]
push 0x10008df4
push 0x400
push eax
call edi
push dword [ebp - 0x41c]
lea eax, [ebp - 0x404]
push eax
push 0x10008ddc
push 0x20000
push ebx
call edi
add esp, 0x28
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116ca4]
or dword [0x10116ca0], 0x10
mov dword [0x10116ca4], eax
push dword [ebp - 0x410]
push 0x10004034
push 0xa
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x100040bc
push 8
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008dd0
push 0x19
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008dc4
push 0xb
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10004040
push 0xc
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008db8
push 0xd
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008dac
push 0xf
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008da0
push 0x10
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d90
push 0x11
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10004084
push 9
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d84
push 0x15
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10004058
push 0x17
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d74
push 0x18
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d68
push 0xe
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10004064
push 0x1b
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d5c
push 0x1a
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10005bf8
push 0x20
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d48
push 0x21
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d3c
push 0x22
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d30
push 0x23
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d18
push 0x24
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d08
push 0x25
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008d00
push 0x26
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008cf0
push 0x27
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008cdc
push 0x28
call fcn.1002c31d
push dword [ebp - 0x410]
push 0x10008cd0
push 0x29
call fcn.1002c31d
mov eax, dword [0x10116d64]
mov ecx, dword [eax]
lea edx, [ebp - 0x428]
push edx
push eax
call dword [ecx + 0x1c]
and dword [ebp - 0x40c], 0
cmp dword [ebp - 0x428], 0
jbe 0x10030b52
push dword [ebp - 0x40c]
call fcn.1002c2f0
test eax, eax
jne 0x10030b3e
push dword [ebp - 0x410]
push eax
push dword [ebp - 0x40c]
call fcn.1002c31d
inc dword [ebp - 0x40c]
mov eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x428]
jb 0x10030b1d
mov eax, dword [0x10116d64]
mov ecx, dword [eax]
lea edx, [ebp - 0x424]
push edx
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x424]
test eax, eax
je 0x10030bb8
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008cc8
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x424]
push 0x10008ca8
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116d64]
mov ecx, dword [eax]
lea edx, [ebp - 0x424]
push edx
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0x424]
test eax, eax
je 0x10030c1e
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008ca0
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x424]
push 0x10008c80
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116d64]
mov ecx, dword [eax]
lea edx, [ebp - 0x424]
push edx
push eax
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x424]
test eax, eax
je 0x10030c84
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008c74
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x424]
push 0x10008c54
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116d64]
mov ecx, dword [eax]
lea edx, [ebp - 0x424]
push edx
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x424]
test eax, eax
je 0x10030cea
add dword [0x10116d68], eax
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008c4c
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x424]
push 0x10008c2c
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116090]
sub eax, dword [0x10116d68]
je 0x10030d41
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008c1c
push eax
push eax
call fcn.1002c050
mov eax, dword [0x10116090]
sub eax, dword [0x10116d68]
push eax
push 0x10008bfc
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
cmp dword [ebp - 0x444], 0
je 0x10030ea4
mov eax, dword [ebp - 0x444]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008be8
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x444]
push 0x10008bcc
push 0x20000
push ebx
call edi
add esp, 0x10
push 0x10002e97
push dword [ebp - 0x410]
call fcn.10011965
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x438]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x10030dfc
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008bb8
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x438]
push dword [eax + 0x2c]
push 0x10008b9c
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x438]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x10030e50
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008b8c
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x438]
push dword [eax + 0x34]
push 0x10008b70
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x438]
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x10030ea4
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10008b64
push eax
push eax
call fcn.1002c050
mov eax, dword [ebp - 0x438]
push dword [eax + 0x1c]
push 0x10008b48
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x434]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10009094
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x434]
push 0x10008b2c
push 0x20000
push ebx
call edi
add esp, 0x10
push 0x10002e97
push dword [ebp - 0x410]
call fcn.10011965
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x430]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008b14
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x430]
push 0x10008af4
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x45c]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008ae0
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x45c]
push 0x10008ac0
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x440]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008aac
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x440]
push 0x10008a8c
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
cmp dword [ebp - 0x458], 0
jne 0x10031006
cmp dword [ebp - 0x454], 0
je 0x100310a4
mov eax, dword [ebp - 0x458]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008a78
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x458]
push 0x10008a58
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x454]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
mov eax, 0x100084b4
push eax
push eax
mov eax, 0x10008a40
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x454]
push 0x10008a20
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [ebp - 0x43c]
push 1
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x10009068
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x43c]
push 0x10008a08
push 0x20000
push ebx
call edi
add esp, 0x10
push 0x10002e97
push dword [ebp - 0x410]
call fcn.10011965
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
cmp dword [ebp - 0x430], 0
je 0x1003115e
mov eax, dword [ebp - 0x43c]
cdq
idiv dword [ebp - 0x430]
push 1
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x408]
push eax
push esi
push esi
mov eax, 0x100089f8
push eax
push eax
call fcn.1002c050
push dword [ebp - 0x420]
push 0x100089dc
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x418]
push dword [ebp - 0x410]
call fcn.10011965
mov eax, dword [0x10116d64]
test eax, eax
je 0x1003116d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [0x10116ce4], 0
je 0x10031182
push dword [0x10116ce8]
call dword [0x10001128]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1004a51e
leave
ret 8
mov eax, dword [ebp - 0x40c]
or eax, 0x6000000
push eax
push 0x100089b8
push 0x20000
push ebx
call edi
add esp, 0x10
jmp 0x100301dc
mov eax, dword [ebp - 0x40c]
or eax, 0x4000000
push eax
push 0x10008998
jmp 0x100311a4