Function at 0x1002bc80
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10058fa6
mov eax, dword fs:[0]
push eax
sub esp, 0x5d0
mov eax, dword [0x1006a010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x3bc], 0
lea ecx, [ebp - 0x5dc]
call fcn.10009ae0
mov ecx, str.WantedLevelEditor.xml
mov dword [ebp - 4], 0
call fcn.1003bb90
push eax
lea ecx, [ebp - 0x5dc]
call fcn.10009f70
test eax, eax
jne 0x1002d868
mov edx, str.boats
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x1002d868
mov edx, str.none
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x1002bd26
movzx eax, byte [0x100ec940]
push eax
mov eax, 0x580750
call eax
add esp, 4
push 5
push str.boats
mov ecx, 0x1006ad80
call fcn.10037420
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006b1b8]
inc eax
mov dword [ebp - 0x18], 0
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x3bc], 1
call fcn.10038e60
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x1006359c
cmp eax, 1
jb 0x1002bd9d
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
jmp 0x1002bdb4
mov byte [ebp - 0x3c0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x3c0]
push 1
call fcn.10038840
push 0x1006b1a8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x10063598
cmp eax, 1
jb 0x1002bdfb
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
lea eax, [ebp - 0x28]
jmp 0x1002be12
mov byte [ebp - 0x3c0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x3c0]
push 1
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0x3bc], 3
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af38
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10037170
mov ecx, 0x1006b3b8
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1c0], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x1c0]
push eax
movq qword [ebp - 0x1b0], xmm0
call fcn.100372d0
mov edx, dword [ebp - 0x1ac]
cmp edx, 0x10
jb 0x1002bed0
mov ecx, dword [ebp - 0x1c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002bec6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d88e
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x1002bf08
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002befe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d893
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
cmp edx, 0x10
jb 0x1002bf52
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002bf48
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d898
push edx
push ecx
call fcn.1003bfed
add esp, 8
cmp dword [0x1006b3cc], 0x10
mov eax, 0x1006b3b8
cmovae eax, dword [0x1006b3b8]
mov dword [0x1013c9b0], eax
mov eax, dword [0x1025c244]
test al, 1
jne 0x1002bf9e
or eax, 1
mov dword [0x1025b6cc], 0x1006353c
mov dword [0x1025c244], eax
mov dword [0x1025b6d4], 0
mov dword [0x1025b6d0], 0
call fcn.1000c4c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
mov esi, 0x582029
mov dword [ebp - 0x1c], 4
push 4
push esi
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 7
cmp byte [ebp - 0x14], 0
je 0x1002bfe9
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x3c0]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x3c0], eax
push dword [ebp - 0x20]
call edi
mov eax, dword [0x1025c244]
test al, 1
jne 0x1002c01d
or eax, 1
mov dword [0x1025b6cc], 0x1006353c
mov dword [0x1025c244], eax
mov dword [0x1025b6d4], 0
mov dword [0x1025b6d0], 0
call fcn.1000c4c0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 4
push eax
push 0x40
mov esi, 0x582432
push 4
push esi
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 6
cmp byte [ebp - 0x14], 0
je 0x1002c062
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x3c0]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x3c0], eax
push dword [ebp - 0x20]
call edi
push ecx
mov dl, 6
mov ecx, 0x58242b
call fcn.1003b5b0
add esp, 4
mov eax, 0x582300
push 1
push 1
push 1
push 3
sub esp, 0xc
mov dword [esp + 8], 0x435c0000
mov dword [esp + 4], 0x432a0000
mov dword [esp], 0x41e80000
push dword [0x1013c9b0]
push 0
call eax
movzx eax, al
add esp, 0x24
mov dword [0x100ec940], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x3bc], 0xe
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model1
cmp eax, 0xc
jb 0x1002c136
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x1002c14d
mov byte [ebp - 0x3c0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x3c0]
push 0xc
call fcn.10038840
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xa8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1002c1c1
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002c1b7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d89d
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x3c4], 0x1ed
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x3bc], 0x36
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model2
cmp eax, 0xc
jb 0x1002c253
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x1002c26a
mov byte [ebp - 0x3c0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x3c0]
push 0xc
call fcn.10038840
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x90], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1002c2de
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002c2d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d8a2
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x3c8], 0x1ed
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x3bc], 0xd6
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model3
cmp eax, 0xc
jb 0x1002c370
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x1002c387
mov byte [ebp - 0x3c0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x3c0]
push 0xc
call fcn.10038840
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1002c3f2
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002c3e8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d8a7
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x3cc], 0x1ed
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x3bc], 0x356
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model4
cmp eax, 0xc
jb 0x1002c484
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x1002c49b
mov byte [ebp - 0x3c0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x3c0]
push 0xc
call fcn.10038840
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1002c503
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002c4f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d8ac
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x3d0], 0x1ed
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x3bc], 0xd56
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model5
cmp eax, 0xc
jb 0x1002c595
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x1002c5ac
mov byte [ebp - 0x3c0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x3c0]
push 0xc
call fcn.10038840
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1002c614
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002c60a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d8b1
push edx
push ecx
call fcn.1003bfed
add esp, 8
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x3d4], 0x1ed
call fcn.10037a80
push str._boat_model6
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x100]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x14
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x3d8], 0x1ed
lea ecx, [ebp - 0xe8]
call fcn.10037a80
push str._boat_occupants1
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x118]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x17
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x3ec], 3
lea ecx, [ebp - 0xd0]
call fcn.10037a80
push str._boat_occupants2
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x130]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x1a
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x3f0], 3
lea ecx, [ebp - 0xe8]
call fcn.10037a80
push str._boat_occupants3
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x148]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x1d
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x3e8], 3
lea ecx, [ebp - 0xd0]
call fcn.10037a80
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x160]
push str._boat_occupants4
mov edx, eax
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x20
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x3e4], 3
lea ecx, [ebp - 0xe8]
call fcn.10037a80
push str._boat_occupants5
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x178]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x23
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x3e0], 3
lea ecx, [ebp - 0xd0]
call fcn.10037a80
push str._boat_occupants6
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x190]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x26
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x3dc], 3
lea ecx, [ebp - 0xe8]
call fcn.10037a80
push str._max_boats
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1a8]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x29
call fcn.10037280
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov edi, dword [ebp - 0x5c0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x3f4], 1
mov dword [ebp - 0x3bc], eax
test edi, edi
je 0x1002c8e4
nop dword [eax + eax]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax]
call eax
mov esi, eax
test esi, esi
je 0x1002c8dd
cmp dword [ebp - 0x3bc], 0
je 0x1002c8e6
mov edx, dword [esi]
mov ecx, esi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002c8b8
xor eax, eax
jmp 0x1002c8c0
lea ecx, [esi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002c8e6
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002c8e6
mov edi, dword [edi + 0x28]
test edi, edi
jne 0x1002c890
xor esi, esi
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
mov esi, dword [esi + 0x1c]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x3bc], eax
test esi, esi
je 0x1002c95b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1002c954
cmp dword [ebp - 0x3bc], 0
je 0x1002c95d
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x1002c92f
xor eax, eax
jmp 0x1002c937
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002c95d
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002c95d
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002c907
xor edi, edi
lea eax, [ebp - 0x3c4]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x3bc], eax
test esi, esi
je 0x1002c9e4
nop
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1002c9dd
cmp dword [ebp - 0x3bc], 0
je 0x1002c9e6
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002c9b8
xor eax, eax
jmp 0x1002c9c0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002c9e6
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002c9e6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002c990
xor edi, edi
cmp dword [ebp - 0x8c], 0x10
lea eax, [ebp - 0xa0]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x3bc], eax
test esi, esi
je 0x1002ca5b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1002ca54
cmp dword [ebp - 0x3bc], 0
je 0x1002ca5d
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x1002ca2f
xor eax, eax
jmp 0x1002ca37
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002ca5d
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002ca5d
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002ca07
xor edi, edi
lea eax, [ebp - 0x3c8]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x3bc], eax
test esi, esi
je 0x1002cae4
nop
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1002cadd
cmp dword [ebp - 0x3bc], 0
je 0x1002cae6
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002cab8
xor eax, eax
jmp 0x1002cac0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002cae6
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002cae6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002ca90
xor edi, edi
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0x3bc], eax
test esi, esi
je 0x1002cb58
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1002cb51
cmp dword [ebp - 0x3bc], 0
je 0x1002cb5a
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x1002cb2c
xor eax, eax
jmp 0x1002cb34
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002cb5a
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002cb5a
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cb04
xor edi, edi
lea eax, [ebp - 0x3cc]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x3bc], eax
test esi, esi
je 0x1002cbe4
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1002cbdd
cmp dword [ebp - 0x3bc], 0
je 0x1002cbe6
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002cbb8
xor eax, eax
jmp 0x1002cbc0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002cbe6
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002cbe6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cb90
xor edi, edi
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x70]
mov dword [ebp - 0x3bc], eax
test esi, esi
je 0x1002cc54
nop
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1002cc4d
cmp dword [ebp - 0x3bc], 0
je 0x1002cc56
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x1002cc28
xor eax, eax
jmp 0x1002cc30
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002cc56
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002cc56
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cc00
xor edi, edi
lea eax, [ebp - 0x3d0]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x3bc], eax
test esi, esi
je 0x1002ccdb
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1002ccd4
cmp dword [ebp - 0x3bc], 0
je 0x1002ccdd
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002ccaf
xor eax, eax
jmp 0x1002ccb7
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x3bc]
cmp eax, ecx
je 0x1002ccdd
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002ccdd
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cc87
xor edi, edi
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x58]
mov dword [ebp - 0x3c0], eax
test esi, esi
je 0x1002cd0e
push eax
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cd10
mov esi, dword [esi + 0x28]
mov eax, dword [ebp - 0x3c0]
test esi, esi
jne 0x1002ccf5
xor eax, eax
lea ecx, [ebp - 0x3d4]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x1002cd53
nop dword [eax + eax]
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cd55
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cd40
xor eax, eax
cmp dword [ebp - 0xec], 0x10
lea edi, [ebp - 0x100]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x100]
test esi, esi
je 0x1002cd83
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cd85
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cd70
xor eax, eax
lea ecx, [ebp - 0x3d8]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x1002cdc3
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cdc5
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cdb0
xor eax, eax
cmp dword [ebp - 0x104], 0x10
lea edi, [ebp - 0x118]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x118]
test esi, esi
je 0x1002cdf3
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cdf5
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cde0
xor eax, eax
lea ecx, [ebp - 0x3ec]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x1002ce33
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002ce35
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002ce20
xor eax, eax
cmp dword [ebp - 0x11c], 0x10
lea edi, [ebp - 0x130]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x130]
test esi, esi
je 0x1002ce63
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002ce65
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002ce50
xor eax, eax
lea ecx, [ebp - 0x3f0]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x1002cea3
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cea5
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002ce90
xor eax, eax
cmp dword [ebp - 0x134], 0x10
lea edi, [ebp - 0x148]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x148]
test esi, esi
je 0x1002ced3
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002ced5
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cec0
xor eax, eax
lea ecx, [ebp - 0x3e8]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x1002cf13
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cf15
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cf00
xor eax, eax
cmp dword [ebp - 0x14c], 0x10
lea edi, [ebp - 0x160]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x160]
test esi, esi
je 0x1002cf43
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cf45
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cf30
xor eax, eax
lea ecx, [ebp - 0x3e4]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x1002cf83
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cf85
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cf70
xor eax, eax
cmp dword [ebp - 0x164], 0x10
lea edi, [ebp - 0x178]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x178]
test esi, esi
je 0x1002cfb3
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cfb5
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cfa0
xor eax, eax
lea ecx, [ebp - 0x3e0]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x1002cff3
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002cff5
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002cfe0
xor eax, eax
cmp dword [ebp - 0x17c], 0x10
lea edi, [ebp - 0x190]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x190]
test esi, esi
je 0x1002d023
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002d025
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002d010
xor eax, eax
lea ecx, [ebp - 0x3dc]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x5c0]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x1002d063
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002d065
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002d050
xor eax, eax
cmp dword [ebp - 0x194], 0x10
lea edi, [ebp - 0x1a8]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x1a8]
test esi, esi
je 0x1002d093
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x1002d095
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x1002d080
xor eax, eax
lea ecx, [ebp - 0x3f4]
push ecx
mov ecx, eax
call fcn.10009370
mov edx, dword [ebp - 0x3c4]
lea ecx, [ebp - 0xd0]
sub edx, 0x190
mov dword [ebp - 0x3c4], edx
call fcn.1000c860
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xe8]
mov edx, dword [ebp - 0x3c8]
sub edx, 0x190
mov dword [ebp - 0x3c8], edx
call fcn.1000c860
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1d8]
mov edx, dword [ebp - 0x3cc]
sub edx, 0x190
mov dword [ebp - 0x3cc], edx
call fcn.1000c860
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1f0]
mov edx, dword [ebp - 0x3d0]
sub edx, 0x190
mov dword [ebp - 0x3d0], edx
call fcn.1000c860
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x208]
mov edx, dword [ebp - 0x3d4]
sub edx, 0x190
mov dword [ebp - 0x3d4], edx
call fcn.1000c860
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x220]
mov edx, dword [ebp - 0x3d8]
sub edx, 0x190
mov dword [ebp - 0x3d8], edx
call fcn.1000c860
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x238]
mov edx, dword [ebp - 0x3ec]
call fcn.1000c860
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x250]
mov edx, dword [ebp - 0x3f0]
call fcn.1000c860
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x268]
mov edx, dword [ebp - 0x3e8]
call fcn.1000c860
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x280]
mov edx, dword [ebp - 0x3e4]
call fcn.1000c860
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x3e0]
call fcn.1000c860
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 0x3dc]
call fcn.1000c860
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1c0]
mov edx, dword [ebp - 0x3f4]
call fcn.1000c860
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0xd0]
mov edx, 0x100637f4
push eax
lea ecx, [ebp - 0x340]
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0xb8]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x340]
call fcn.10037280
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
mov edx, 0x100637f4
lea ecx, [ebp - 0x358]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0xe8]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0xa0]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x358]
call fcn.10037280
cmp dword [ebp - 0x8c], 0x10
lea eax, [ebp - 0xa0]
mov edx, 0x100637f4
lea ecx, [ebp - 0x370]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x410], eax
lea eax, [ebp - 0x1d8]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x88]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x370]
call fcn.10037280
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov edx, 0x100637f4
lea ecx, [ebp - 0x388]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x70]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x388]
call fcn.10037280
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
mov edx, 0x100637f4
lea ecx, [ebp - 0x3a0]
cmovae eax, dword [ebp - 0x70]
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x208]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x58]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x3a0]
call fcn.10037280
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
mov edx, 0x100637f4
lea ecx, [ebp - 0x328]
cmovae eax, dword [ebp - 0x58]
mov dword [ebp - 0x3bc], eax
lea eax, [ebp - 0x220]
push eax
call fcn.10037c50
add esp, 4
push eax
lea ecx, [ebp - 0x100]
call fcn.100372d0
lea ecx, [ebp - 0x328]
call fcn.10037280
cmp dword [ebp - 0xec], 0x10
lea eax, [ebp - 0x100]
mov edx, 0x10064f08
lea ecx, [ebp - 0x3b8]
cmovae eax, dword [ebp - 0x100]
mov dword [ebp - 0x3c0], eax
lea eax, [ebp - 0x238]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x118]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x3b8]
call fcn.10037280
cmp dword [ebp - 0x104], 0x10
lea eax, [ebp - 0x118]
mov edx, 0x10064f08
lea ecx, [ebp - 0x298]
cmovae eax, dword [ebp - 0x118]
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x250]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x130]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x298]
call fcn.10037280
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
mov edx, 0x10064f08
lea ecx, [ebp - 0x2b0]
cmovae eax, dword [ebp - 0x130]
mov dword [ebp - 0x3f8], eax
lea eax, [ebp - 0x268]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x148]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x2b0]
call fcn.10037280
cmp dword [ebp - 0x134], 0x10
lea eax, [ebp - 0x148]
mov edx, 0x10064f08
lea ecx, [ebp - 0x2c8]
cmovae eax, dword [ebp - 0x148]
mov dword [ebp - 0x3fc], eax
lea eax, [ebp - 0x280]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x160]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x2c8]
call fcn.10037280
cmp dword [ebp - 0x14c], 0x10
lea eax, [ebp - 0x160]
mov edx, 0x10064f08
lea ecx, [ebp - 0x2e0]
cmovae eax, dword [ebp - 0x160]
mov dword [ebp - 0x400], eax
lea eax, [ebp - 0x28]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x178]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x2e0]
call fcn.10037280
lea eax, [ebp - 0x178]
cmp dword [ebp - 0x164], 0x10
lea ecx, [ebp - 0x2f8]
mov edx, 0x10064f08
cmovae eax, dword [ebp - 0x178]
mov dword [ebp - 0x404], eax
lea eax, [ebp - 0x40]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x190]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x2f8]
call fcn.10037280
cmp dword [ebp - 0x17c], 0x10
lea eax, [ebp - 0x190]
mov edx, 0x10064c4c
lea ecx, [ebp - 0x310]
cmovae eax, dword [ebp - 0x190]
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x1c0]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x1a8]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x310]
call fcn.10037280
cmp dword [ebp - 0x194], 0x10
lea edi, [ebp - 0x1a8]
mov ecx, 0xc9bee4
cmovae edi, dword [ebp - 0x1a8]
call fcn.1003b890
mov ecx, 0xc9bee8
mov word [0x1023ca64], ax
call fcn.1003b890
mov ax, word [0x1023ca64]
mov ecx, 0xc9bee4
shr ax, 1
mov word [0x1009c908], ax
call fcn.1003b890
mov ecx, 0xc9bee8
mov word [0x1023ca64], ax
call fcn.1003b890
mov si, word [0x1023ca64]
mov eax, 0x66666667
movzx ecx, si
shr ecx, 1
imul ecx
shr si, 2
sar edx, 1
mov eax, edx
mov word [0x1017ca00], si
shr eax, 0x1f
add eax, edx
mov word [0x1009c908], ax
movzx eax, si
mov esi, 0x582050
push eax
movzx eax, byte [0x100ec940]
push 0
push eax
call esi
movzx eax, word [0x1017ca00]
push eax
movzx eax, byte [0x100ec940]
push 1
push eax
call esi
movzx eax, word [0x1017ca00]
push eax
movzx eax, byte [0x100ec940]
push 2
push eax
call esi
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, byte [0x100ec940]
mov esi, 0x581e00
push str.DUMMY
push dword [ebp - 0x3c0]
push dword [ebp - 0x3bc]
push dword [ebp - 0x41c]
push dword [ebp - 0x418]
push dword [ebp - 0x410]
push dword [ebp - 0x40c]
push str.BOATS_
push 0
push eax
call esi
add esp, 0x60
movzx eax, byte [0x100ec940]
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.max_bot
push str.ELINE
push str.ELINE
push str.ELINE
push str.ELINE
push str.ELINE
push str.ELINE
push str.SEILR
push 1
push eax
call esi
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, byte [0x100ec940]
push edi
push dword [ebp - 0x408]
push dword [ebp - 0x404]
push dword [ebp - 0x400]
push dword [ebp - 0x3fc]
push dword [ebp - 0x3f8]
push dword [ebp - 0x414]
push 0x10064f08
push 2
push eax
call esi
mov eax, dword [0xb7cb84]
lea ecx, [ebp - 0x1c0]
add esp, 0x78
mov dword [0x1025b6c8], eax
mov byte [0x1006c842], 0xff
call fcn.10037280
lea ecx, [ebp - 0x40]
call fcn.10037280
lea ecx, [ebp - 0x28]
call fcn.10037280
lea ecx, [ebp - 0x280]
call fcn.10037280
lea ecx, [ebp - 0x268]
call fcn.10037280
lea ecx, [ebp - 0x250]
call fcn.10037280
lea ecx, [ebp - 0x238]
call fcn.10037280
lea ecx, [ebp - 0x220]
call fcn.10037280
lea ecx, [ebp - 0x208]
call fcn.10037280
lea ecx, [ebp - 0x1f0]
call fcn.10037280
lea ecx, [ebp - 0x1d8]
call fcn.10037280
lea ecx, [ebp - 0xe8]
call fcn.10037280
lea ecx, [ebp - 0xd0]
call fcn.10037280
lea ecx, [ebp - 0x1a8]
call fcn.10037280
lea ecx, [ebp - 0x190]
call fcn.10037280
lea ecx, [ebp - 0x178]
call fcn.10037280
lea ecx, [ebp - 0x160]
call fcn.10037280
lea ecx, [ebp - 0x148]
call fcn.10037280
lea ecx, [ebp - 0x130]
call fcn.10037280
lea ecx, [ebp - 0x118]
call fcn.10037280
lea ecx, [ebp - 0x100]
call fcn.10037280
lea ecx, [ebp - 0x58]
call fcn.10037280
lea ecx, [ebp - 0x70]
call fcn.10037280
lea ecx, [ebp - 0x88]
call fcn.10037280
lea ecx, [ebp - 0xa0]
call fcn.10037280
lea ecx, [ebp - 0xb8]
call fcn.10037280
lea ecx, [ebp - 0x5dc]
call fcn.10009d40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003bfa7
mov esp, ebp
pop ebp
ret
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
int3