Function at 0x1002a540
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x268
mov dword [ebp - 0x1d4], edx
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 4], 0x31234567
mov eax, 0x5987
mov word [ebp - 0x28], ax
jmp 0x1002a572
movsx ecx, word [ebp - 0x28]
sub ecx, 0xb
mov word [ebp - 0x28], cx
movsx edx, word [ebp - 0x28]
cmp edx, 0x57ae
jle 0x1002a594
mov dword [ebp - 0x1d8], 0x3a8c441b
mov dword [ebp - 0x1dc], 0x3eb9cb01
jmp 0x1002a567
mov byte [ebp - 8], 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x363]
call ecx
mov edx, dword [ebp - 4]
mov dword [edx + 0xb6b8], eax
movzx eax, byte [ebp - 8]
push eax
call fcn.1001d430
add esp, 4
mov dword [ebp - 0x1e0], 0x608b9013
mov dword [ebp - 0x194], 0x5850ec76
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x7636], 1
je 0x1002ac78
mov edx, dword [ebp - 4]
mov dword [edx + 0x7636], 1
movzx eax, byte [ebp - 8]
push eax
mov ecx, dword [ebp - 0x194]
push ecx
call fcn.1001d680
add esp, 8
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x2ef]
test eax, eax
je 0x1002a655
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x312]
mov dword [ebp - 0x198], edx
push 0
push 0x80
push 1
push 0
push 0
push 0x40000000
mov eax, dword [ebp - 4]
add eax, 0xe7
push eax
call dword [ebp - 0x198]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x2f4], eax
mov edx, 0x58ce
mov word [ebp - 0x11c], dx
mov byte [ebp - 0x7d], 1
mov eax, 0xb08
mov word [ebp - 0x2c], ax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x38b]
mov dword [ebp - 0x19c], edx
push 0
call dword [ebp - 0x19c]
movzx eax, word [ebp - 0x2c]
push eax
call fcn.1001d430
add esp, 4
mov dword [ebp - 0xa4], 0x38b756a1
jmp 0x1002a6a0
mov ecx, dword [ebp - 0xa4]
sub ecx, 0x1bb
mov dword [ebp - 0xa4], ecx
cmp dword [ebp - 0xa4], 0x38b75518
jle 0x1002a6b2
mov byte [ebp - 0x7e], 1
jmp 0x1002a68e
movzx edx, word [ebp - 0x2c]
push edx
movzx eax, word [ebp - 0x2c]
push eax
push 0x81
call fcn.1001d980
add esp, 0xc
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xad97], 0xffffffff
mov edx, 0x550
mov word [ebp - 0x120], dx
mov dword [ebp - 0x94], 0
jmp 0x1002a6fd
mov eax, dword [ebp - 0x94]
add eax, 1
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 6
jae 0x1002a708
jmp 0x1002a6ee
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x7598], 0
je 0x1002a85e
mov edx, dword [ebp - 4]
cmp dword [edx + 0x7554], 0
je 0x1002a85e
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x7598]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x1a0], 0x4053eead
mov edx, dword [ebp - 0x1a0]
push edx
call fcn.1001d380
add esp, 4
mov dword [ebp - 0x1e4], 0x3e88ed2
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x60], 1
mov dword [ebp - 0xa8], 0x1681cc0b
jmp 0x1002a780
mov eax, dword [ebp - 0xa8]
add eax, 0x43
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x1681cd5c
jae 0x1002a7d4
mov dword [ebp - 0x1e8], 0x5122845e
mov ecx, 0x44f1
mov word [ebp - 0x124], cx
mov edx, 0x1d2e
mov word [ebp - 0x128], dx
mov eax, 0x73c8
mov word [ebp - 0x12c], ax
mov ecx, 0x101
mov word [ebp - 0x130], cx
mov edx, 0x1074
mov word [ebp - 0x134], dx
jmp 0x1002a771
cmp dword [ebp - 0x60], 0
je 0x1002a85e
cmp dword [ebp - 0x18], 0x4c
jae 0x1002a85e
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.1001f620
add esp, 8
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jne 0x1002a802
jmp 0x1002a85e
mov edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x18]
movzx eax, byte [edx]
cmp eax, 0xff
jne 0x1002a850
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x18]
movzx edx, byte [ecx - 1]
cmp edx, 0x50
jl 0x1002a850
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x18]
movzx ecx, byte [eax - 1]
cmp ecx, 0x5f
jg 0x1002a850
mov edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x18]
movzx eax, byte [edx - 2]
cmp eax, 0x50
jl 0x1002a850
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x18]
movzx edx, byte [ecx - 2]
cmp edx, 0x5f
jg 0x1002a850
jmp 0x1002a85e
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x18], eax
jmp 0x1002a7d4
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x75c4], 0
je 0x1002a9cd
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x75c4]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x7f], 0xf
push 1
call fcn.1001d650
add esp, 4
mov dword [ebp - 0x10], 0
mov ecx, 0x68cc
mov word [ebp - 0x138], cx
mov dword [ebp - 0x64], 1
mov edx, 0x31a5
mov word [ebp - 0x13c], dx
mov byte [ebp - 0x1d], 0xb4
movzx eax, byte [ebp - 0x1d]
push eax
call fcn.1001d380
add esp, 4
cmp dword [ebp - 0x64], 0
je 0x1002a9cd
cmp dword [ebp - 0x10], 0xd0
jae 0x1002a9cd
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.1001f620
add esp, 8
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x1002a8f7
jmp 0x1002a9cd
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x10]
movzx ecx, byte [eax]
cmp ecx, 0xff
jne 0x1002a9ad
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10]
movzx eax, byte [edx + 1]
cmp eax, 0x50
jl 0x1002a9ad
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x10]
movzx edx, byte [ecx + 1]
cmp edx, 0x5f
jg 0x1002a9ad
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x10]
movzx ecx, byte [eax + 2]
cmp ecx, 0x30
jl 0x1002a9ad
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10]
movzx eax, byte [edx + 2]
cmp eax, 0x60
jg 0x1002a9ad
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x10]
movzx edx, byte [ecx + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x75c4], edx
jmp 0x1002a9cd
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10]
movzx eax, byte [edx]
cmp eax, 0xcc
jne 0x1002a9bf
jmp 0x1002a9cd
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x64]
mov dword [ebp - 0x10], ecx
jmp 0x1002a8bf
mov edx, dword [ebp - 4]
cmp dword [edx + 0x7580], 0
jne 0x1002aa76
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74be]
mov edx, dword [ecx]
mov dword [ebp - 0x1a4], edx
mov eax, 0x23f6
mov word [ebp - 0x50], ax
mov dword [ebp - 0x58], 0
jmp 0x1002aa09
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 0x70
jae 0x1002aa76
mov edx, dword [ebp - 0x1a4]
add edx, dword [ebp - 0x58]
cmp dword [edx], 0x1008
jne 0x1002aa74
mov eax, dword [ebp - 0x58]
add eax, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x74eb], eax
movzx edx, word [ebp - 0x50]
push edx
call fcn.1001d430
add esp, 4
mov eax, 0x504d
mov word [ebp - 0x30], ax
jmp 0x1002aa76
jmp 0x1002aa00
mov dword [ebp - 0xb0], 0x413fa964
jmp 0x1002aa93
mov eax, dword [ebp - 0xb0]
add eax, 0x19f
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x413fabbb
jae 0x1002aab6
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x81], 0
mov dword [ebp - 0x1f4], 0x5a7d5dba
jmp 0x1002aa82
mov ecx, dword [ebp - 4]
add ecx, 0x856a
push ecx
mov edx, dword [ebp - 4]
add edx, 0x85b2
push edx
call fcn.1001dfb0
add esp, 8
test eax, eax
jne 0x1002ab29
mov dword [ebp - 0x1a8], 0
mov eax, 0x22c3
mov word [ebp - 0x34], ax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1ac], ecx
xor edx, edx
xor ecx, ecx
call dword [ebp - 0x1ac]
mov byte [ebp - 0x1e], 0x74
movzx edx, byte [ebp - 0x1e]
push edx
push 0
movsx eax, word [ebp - 0x34]
push eax
movsx ecx, word [ebp - 0x34]
push ecx
call fcn.1001d7c0
add esp, 0x10
movsx edx, word [ebp - 0x34]
push edx
call fcn.1001d380
add esp, 4
mov eax, dword [ebp - 4]
cmp dword [eax + 0x21], 3
jne 0x1002ac78
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0xb33e]
test edx, edx
je 0x1002ac78
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x756c]
mov dword [ebp - 0x1b0], ecx
mov edx, 0x434d
mov word [ebp - 0xf4], dx
mov eax, 0x18fd
mov word [ebp - 0x144], ax
mov dword [ebp - 0x1f8], 0x42037d10
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b4], ecx
push 0x400
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 0xb3ea]
push edx
mov eax, dword [ebp - 4]
add eax, 0xb35b
push eax
call fcn.1001de30
add esp, 4
push eax
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
lea ecx, [eax + edx + 0xb35b]
push ecx
xor edx, edx
xor ecx, ecx
call dword [ebp - 0x1b4]
mov dword [ebp - 0x1fc], 0x3a917261
mov edx, dword [ebp - 4]
add edx, 0xb3ea
push edx
call fcn.1001de30
add esp, 4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x74de]
mov dword [edx], eax
mov dword [ebp - 0x200], 0x6261486a
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
lea eax, [edx + ecx + 0xb3ea]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x74da]
mov dword [edx], eax
mov dword [ebp - 0xb4], 0x45b4bbe
jmp 0x1002ac37
mov eax, dword [ebp - 0xb4]
add eax, 0x1f7
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x45b4c8a
jge 0x1002ac6e
mov byte [ebp - 0x82], 1
mov byte [ebp - 0x83], 1
mov dword [ebp - 0x204], 0x33d345f4
mov byte [ebp - 0x84], 0xa8
mov dword [ebp - 0x208], 0x7a823634
jmp 0x1002ac26
mov dword [ebp - 0x20c], 0x4f9c0441
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x8053], 1
jne 0x1002acf6
mov dword [ebp - 0x5c], 0
jmp 0x1002ac96
mov edx, dword [ebp - 0x5c]
add edx, 8
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [eax + 0x8046]
jae 0x1002acdd
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x803e]
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x5c]
movsd xmm0, qword [ecx + 0xb82a]
movsd qword [eax + edx], xmm0
mov dword [ebp - 0x210], 0x7d560bdc
mov byte [ebp - 0x85], 1
mov byte [ebp - 0x87], 0xc5
jmp 0x1002ac8d
mov eax, dword [ebp - 4]
mov dword [eax + 0x8053], 2
mov ecx, 0x4fe0
mov word [ebp - 0x148], cx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x363]
call eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x214], 0x1545483b
mov byte [ebp - 6], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x68]
mov dword [ecx + 0x1d5f5], edx
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x452]
test ecx, ecx
je 0x1002ae77
mov edx, dword [ebp - 4]
mov byte [edx + 0x452], 0
mov dword [ebp - 0x1b8], 0x5c23565f
movzx eax, byte [ebp - 6]
push eax
movzx ecx, byte [ebp - 6]
push ecx
push 0x85
push 0x6f
call fcn.1001d590
add esp, 0x10
mov dword [ebp - 0x1bc], 0x689725be
mov edx, dword [ebp - 4]
mov dword [edx + 0x1d59a], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x2f], 0
mov dword [ebp - 0xb8], 0xb7a4866
jmp 0x1002ad9c
mov ecx, dword [ebp - 0xb8]
add ecx, 0x131
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0xb8], 0xb7a4a7d
jge 0x1002ade4
mov edx, 0x2ded
mov word [ebp - 0x14c], dx
mov dword [ebp - 0x218], 0x658b7ded
mov eax, 0xcbd
mov word [ebp - 0x154], ax
mov ecx, 0x2852
mov word [ebp - 0x158], cx
mov edx, 0x6242
mov word [ebp - 0x15c], dx
jmp 0x1002ad8a
mov eax, 0x7a71
mov word [ebp - 0x8c], ax
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x1ced1], 0
je 0x1002ae77
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.10020f70
add esp, 8
mov eax, dword [ebp - 0x1b8]
push eax
movzx ecx, word [ebp - 0x8c]
push ecx
movzx edx, byte [ebp - 6]
push edx
mov eax, dword [ebp - 0x1bc]
push eax
movzx cx, byte [ebp - 6]
movzx edx, cx
push edx
call fcn.1001daa0
add esp, 0x14
mov eax, 0x4a05
mov word [ebp - 0x38], ax
jmp 0x1002ae4c
movsx ecx, word [ebp - 0x38]
add ecx, 0x2a
mov word [ebp - 0x38], cx
movsx edx, word [ebp - 0x38]
cmp edx, 0x4aa7
jge 0x1002ae77
mov dword [ebp - 0x21c], 0x7c3b2fd0
mov eax, 0x4d62
mov word [ebp - 0x160], ax
mov byte [ebp - 0x88], 0x5d
jmp 0x1002ae41
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x45b]
test ecx, ecx
je 0x1002aee5
mov edx, dword [ebp - 4]
mov byte [edx + 0x45b], 0
push 0x57f7
push 0
push 0x43145c0e
push 0x10
push 0x75
call fcn.1001da20
add esp, 0x14
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1ced1], 0
je 0x1002aee5
push 1
push 1
mov ecx, dword [ebp - 4]
push ecx
movss xmm0, dword [ecx + 0x46a]
movss dword [esp], xmm0
mov edx, dword [ebp - 4]
push ecx
movss xmm0, dword [edx + 0x462]
movss dword [esp], xmm0
mov eax, dword [ebp - 4]
push eax
call fcn.10020bb0
add esp, 0x14
mov byte [ebp - 5], 1
movzx cx, byte [ebp - 5]
movzx edx, cx
push edx
movzx eax, byte [ebp - 5]
push eax
movzx ecx, byte [ebp - 5]
push ecx
movzx edx, byte [ebp - 5]
push edx
movzx eax, byte [ebp - 5]
push eax
call fcn.1001da20
add esp, 0x14
mov byte [ebp - 0x95], 1
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0xb815]
test edx, edx
je 0x1002af3a
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x37e]
mov dword [ebp - 0x1c0], ecx
push 0x14
call dword [ebp - 0x1c0]
mov dword [ebp - 0xbc], 0x32
mov edx, 0xb4c
mov word [ebp - 0x164], dx
mov byte [ebp - 0x96], 1
mov byte [ebp - 0x97], 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb6c4]
cmp ecx, dword [ebp - 0xbc]
jae 0x1002af8a
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xb6c4]
mov dword [ebp - 0xbc], eax
mov ecx, 0xda4
mov word [ebp - 0x168], cx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x3b0]
add eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 4]
cmp eax, dword [ecx + 0xb6b8]
jae 0x1002ba5d
mov dword [ebp - 0xc0], 0x45742077
jmp 0x1002afc6
mov edx, dword [ebp - 0xc0]
sub edx, 0xd0
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 0x45741ec7
jbe 0x1002affa
mov byte [ebp - 0x98], 0x3b
mov byte [ebp - 0x99], 0x70
mov dword [ebp - 0x220], 0x14395af7
mov byte [ebp - 0x9a], 0
mov byte [ebp - 0x9b], 0
jmp 0x1002afb4
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x759c]
push ecx
call fcn.1001ecd0
add esp, 8
mov edx, dword [ebp - 4]
mov dword [edx + 0xb844], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x1ced1], 0
mov dword [ebp - 0xc4], 0x64b86850
jmp 0x1002b03f
mov ecx, dword [ebp - 0xc4]
add ecx, 0x5a
mov dword [ebp - 0xc4], ecx
cmp dword [ebp - 0xc4], 0x64b8688f
jae 0x1002b05e
mov byte [ebp - 0x9c], 0
mov dword [ebp - 0x224], 0x32a5d969
jmp 0x1002b030
push 0x5b5b8793
push 0x6c47
push 0x7e
call fcn.1001d980
add esp, 0xc
mov edx, dword [ebp - 4]
mov dword [edx + 0x1ce5e], 0
mov dword [ebp - 0xc8], 0x4237b9c2
jmp 0x1002b09c
mov eax, dword [ebp - 0xc8]
sub eax, 0x139
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x4237b7d1
jbe 0x1002b0ce
mov byte [ebp - 0x9d], 1
mov byte [ebp - 0x9e], 0xa9
mov dword [ebp - 0x228], 0x66a4f1b6
mov ecx, 0x4192
mov word [ebp - 0x16c], cx
jmp 0x1002b08b
mov dword [ebp - 0x4c], 0x3b773d69
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x4c]
push eax
call fcn.1001d680
add esp, 8
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xb6b8]
mov dword [ecx + 0x3b0], eax
push 0x5926
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.1001d750
add esp, 0x14
mov dword [ebp - 0xcc], 0x3bec5c93
jmp 0x1002b132
mov edx, dword [ebp - 0xcc]
sub edx, 0x204
mov dword [ebp - 0xcc], edx
cmp dword [ebp - 0xcc], 0x3bec5c10
jle 0x1002b170
mov dword [ebp - 0x22c], 0x512b4bf1
mov eax, 0x2375
mov word [ebp - 0x170], ax
mov byte [ebp - 0x9f], 1
mov byte [ebp - 0xa0], 0xd5
mov ecx, 0x4b85
mov word [ebp - 0x174], cx
jmp 0x1002b120
mov edx, 0x5009
mov word [ebp - 0x178], dx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb844], 0
je 0x1002b2db
mov ecx, dword [ebp - 4]
push ecx
call fcn.1001ffc0
add esp, 4
movzx edx, al
test edx, edx
je 0x1002b2db
mov eax, dword [ebp - 4]
cmp dword [eax + 0x751b], 0
jne 0x1002b283
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x3a8]
add edx, 0x3e8
cmp edx, dword [ebp - 0x68]
jbe 0x1002b219
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x331]
mov dword [ebp - 0x1c4], ecx
mov ecx, dword [ebp - 0xe0]
call dword [ebp - 0x1c4]
jmp 0x1002ba78
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x35b]
mov dword [ebp - 0x1c8], ecx
push 0x200
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x74ba]
mov ecx, dword [eax]
push ecx
call dword [ebp - 0x1c8]
test eax, eax
je 0x1002b267
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x331]
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0xe0]
call dword [ebp - 0x1cc]
jmp 0x1002ba78
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x68]
mov dword [ecx + 0x3a8], edx
mov byte [ebp - 0x6e], 0xa3
mov eax, 0x7350
mov word [ebp - 0x180], ax
push 0x37
push 0x3fe8
call fcn.1001d820
add esp, 8
mov ecx, 0x64a3
mov word [ebp - 0x54], cx
mov dword [ebp - 0x230], 0x4d785f48
mov edx, dword [ebp - 4]
push edx
call fcn.10025160
add esp, 4
mov eax, dword [ebp - 4]
mov byte [eax + 0xb827], 0
movsx ecx, word [ebp - 0x54]
push ecx
movzx edx, word [ebp - 0x54]
push edx
push 0x6b
call fcn.1001d980
add esp, 0xc
mov eax, 0x2fdb
mov word [ebp - 0x184], ax
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x1ced1], 0
je 0x1002b433
mov byte [ebp - 9], 0x4d
mov edx, 0x4038
mov word [ebp - 0x40], dx
jmp 0x1002b307
movsx eax, word [ebp - 0x40]
add eax, 0x1b8
mov word [ebp - 0x40], ax
movsx ecx, word [ebp - 0x40]
cmp ecx, 0x41fb
jge 0x1002b34b
mov dword [ebp - 0x234], 0x18aacc87
mov edx, 0x2dcc
mov word [ebp - 0x188], dx
mov eax, 0x2030
mov word [ebp - 0x18c], ax
mov byte [ebp - 0x6f], 1
mov byte [ebp - 0x70], 1
mov ecx, 0x7de7
mov word [ebp - 0x190], cx
jmp 0x1002b2fa
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x68]
mov dword [edx + 0x1d5fe], eax
mov ecx, 0x14a
mov word [ebp - 0xe8], cx
mov edx, dword [ebp - 4]
push edx
call fcn.10028710
add esp, 4
mov dword [ebp - 0xd0], 0x2b19a99
jmp 0x1002b38c
mov eax, dword [ebp - 0xd0]
add eax, 0x1db
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x2b19c1e
jae 0x1002b3a8
mov byte [ebp - 0x7b], 1
mov dword [ebp - 0x238], 0x1f38f79a
jmp 0x1002b37b
movzx cx, byte [ebp - 9]
movzx edx, cx
push edx
movzx ax, byte [ebp - 9]
movzx ecx, ax
push ecx
call fcn.1001d510
add esp, 8
mov edx, dword [ebp - 4]
mov byte [edx + 0x1cee2], 1
mov dword [ebp - 0xd4], 0x420cf37f
jmp 0x1002b3e9
mov eax, dword [ebp - 0xd4]
add eax, 0x117
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x420cf474
jae 0x1002b417
mov dword [ebp - 0x23c], 0x190285e1
mov ecx, 0x3484
mov word [ebp - 0xec], cx
mov dword [ebp - 0x240], 0x196fdd95
jmp 0x1002b3d8
mov edx, dword [ebp - 4]
mov dword [edx + 0x87f4], 1
mov dword [ebp - 0x244], 0x570c04d1
jmp 0x1002ba5d
mov eax, dword [ebp - 4]
mov dword [eax + 0x763d], 1
mov dword [ebp - 0x248], 0x7973a7fc
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xb6b8]
mov dword [ecx + 0x433], eax
mov dword [ebp - 0x24c], 0x2a9b824f
mov ecx, dword [ebp - 4]
mov byte [ecx + 0xb6aa], 0
mov dword [ebp - 0xd8], 0x3092a81f
jmp 0x1002b48e
mov edx, dword [ebp - 0xd8]
add edx, 0x134
mov dword [ebp - 0xd8], edx
cmp dword [ebp - 0xd8], 0x3092a8b8
jge 0x1002b4ce
mov dword [ebp - 0x250], 0x1ddc69cd
mov byte [ebp - 0x71], 0
mov dword [ebp - 0x254], 0x4c45ef51
mov eax, 0x7c9f
mov word [ebp - 0xf0], ax
mov byte [ebp - 0x72], 0x1f
mov dword [ebp - 0x258], 0x3c523ae9
jmp 0x1002b47c
push 0xe2
push 0x2a88
call fcn.1001d820
add esp, 8
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0xb33e]
test edx, edx
je 0x1002b718
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb345], 0
jne 0x1002b718
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xb34d]
add edx, 0x3a98
mov eax, dword [ebp - 4]
cmp edx, dword [eax + 0xb6b8]
jae 0x1002b718
mov ecx, dword [ebp - 4]
push ecx
call fcn.1001ffc0
add esp, 4
movzx edx, al
test edx, edx
jne 0x1002b718
mov eax, dword [ebp - 4]
cmp dword [eax + 0x21], 3
je 0x1002b5a8
mov ecx, dword [ebp - 4]
add ecx, 0xb3a2
push ecx
mov edx, dword [ebp - 4]
add edx, 0xb35b
push edx
push 2
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x7604]
push ecx
call fcn.1001ebe0
add esp, 0x10
mov edx, 0x476f
mov word [ebp - 0x150], dx
mov byte [ebp - 0x73], 0
mov eax, 0x2ecd
mov word [ebp - 0x44], ax
jmp 0x1002b591
movzx ecx, word [ebp - 0x44]
add ecx, 0xaa
mov word [ebp - 0x44], cx
movzx edx, word [ebp - 0x44]
cmp edx, 0x30e0
jge 0x1002b5a3
mov byte [ebp - 0x74], 1
jmp 0x1002b583
jmp 0x1002b635
mov eax, dword [ebp - 4]
add eax, 0xb3a2
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xb3a2
push ecx
push 2
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x7604]
push eax
call fcn.1001ebe0
add esp, 0x10
mov byte [ebp - 0x75], 1
mov ecx, 0x40b1
mov word [ebp - 0x24], cx
jmp 0x1002b5ec
movsx edx, word [ebp - 0x24]
sub edx, 0x170
mov word [ebp - 0x24], dx
movsx eax, word [ebp - 0x24]
cmp eax, 0x3f4d
jle 0x1002b635
mov ecx, 0x1806
mov word [ebp - 0xf8], cx
mov edx, 0x3ac5
mov word [ebp - 0xfc], dx
mov dword [ebp - 0x25c], 0x4b8ef53a
mov eax, 0x3c16
mov word [ebp - 0x100], ax
mov byte [ebp - 0x76], 0x79
mov dword [ebp - 0x260], 0x50284d86
jmp 0x1002b5de
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x7610]
push edx
call fcn.1001ebe0
add esp, 8
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb67b]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0xe4], 0x74a335b2
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + edx*4 + 0xb651]
push ecx
imul edx, dword [ebp - 0x6c], 0x14
mov eax, dword [ebp - 4]
lea ecx, [eax + edx + 0xb557]
push ecx
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + edx*4 + 0xb627]
push ecx
imul edx, dword [ebp - 0x6c], 0x14
mov eax, dword [ebp - 4]
lea ecx, [eax + edx + 0xb487]
push ecx
push 4
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x7608]
push eax
call fcn.1001ebe0
add esp, 0x18
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xb345], 1
mov edx, 0x5872
mov word [ebp - 0x14], dx
mov eax, dword [ebp - 0xe4]
push eax
call fcn.1001d430
add esp, 4
movzx ecx, word [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0xe4]
push edx
movsx eax, word [ebp - 0x14]
push eax
movsx ecx, word [ebp - 0x14]
push ecx
movsx edx, word [ebp - 0x14]
push edx
call fcn.1001d750
add esp, 0x14
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xb6b8]
mov dword [eax + 0xb34d], edx
mov eax, 0x79c3
mov word [ebp - 0x104], ax
jmp 0x1002b8b0
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0xb33e]
test edx, edx
je 0x1002b7d0
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb345], 1
jne 0x1002b7d0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1001ffc0
add esp, 4
movzx edx, al
test edx, edx
je 0x1002b798
mov eax, dword [ebp - 4]
mov dword [eax + 0xb345], 2
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xb6b8]
mov dword [ecx + 0xb34d], eax
mov byte [ebp - 7], 1
movzx ecx, byte [ebp - 7]
push ecx
movzx edx, byte [ebp - 7]
push edx
movzx eax, byte [ebp - 7]
push eax
movzx ecx, byte [ebp - 7]
push ecx
call fcn.1001d7c0
add esp, 0x10
mov edx, 0x398
mov word [ebp - 0x108], dx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb34d]
add ecx, 0x4e20
mov edx, dword [ebp - 4]
cmp ecx, dword [edx + 0xb6b8]
jae 0x1002b7cb
mov eax, dword [ebp - 4]
mov dword [eax + 0xb345], 0
mov ecx, 0x3441
mov word [ebp - 0x10c], cx
jmp 0x1002b8b0
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0xb33e]
test eax, eax
je 0x1002b8b0
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xb345], 2
jne 0x1002b8b0
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1d5bb]
cmp eax, 2
jne 0x1002b87d
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xb34d]
add edx, 0x1388
mov eax, dword [ebp - 4]
cmp edx, dword [eax + 0xb6b8]
jae 0x1002b87d
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x21], 3
jne 0x1002b83e
push 0
push 0
push 2
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x75ec]
push eax
call fcn.1001ebe0
add esp, 0x10
jmp 0x1002b85c
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xb689]
push edx
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x75ec]
push ecx
call fcn.1001ebe0
add esp, 0xc
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb6b8]
mov dword [edx + 0xb34d], ecx
mov edx, dword [ebp - 4]
mov dword [edx + 0xb345], 0
jmp 0x1002b8b0
mov eax, dword [ebp - 4]
mov byte [eax + 0x1d5bb], 1
push 0x4476
push 0xf97676b
push 0x73f2f93d
push 0x645069dd
push 0x1b25acda
call fcn.1001d750
add esp, 0x14
mov byte [ebp - 0x77], 0xab
mov byte [ebp - 0x78], 0
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0xb33e]
test edx, edx
jne 0x1002ba53
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0xb79e]
test ecx, ecx
je 0x1002ba53
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1cee2]
test eax, eax
je 0x1002ba53
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x87f4], 1
jne 0x1002b992
mov edx, dword [ebp - 4]
mov dword [edx + 0x87f4], 2
mov dword [ebp - 0xdc], 0x5fec25b2
jmp 0x1002b91e
mov eax, dword [ebp - 0xdc]
sub eax, 0x5c
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x5fec2368
jle 0x1002b947
mov byte [ebp - 0x79], 0
mov ecx, 0x5ba9
mov word [ebp - 0x110], cx
mov byte [ebp - 0x7a], 0xf7
mov byte [ebp - 0x86], 0
jmp 0x1002b90f
mov byte [ebp - 0x7c], 0
mov edx, 0x5516
mov word [ebp - 0x114], dx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb6b8]
add ecx, 0x5dc
mov edx, dword [ebp - 4]
mov dword [edx + 0x3fd], ecx
mov eax, 0x3954
mov word [ebp - 0x90], ax
movzx ecx, word [ebp - 0x90]
push ecx
push 0x3c
call fcn.1001d9b0
add esp, 8
jmp 0x1002ba53
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0xb79e]
test eax, eax
je 0x1002ba53
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [ecx + 0x3fd]
cmp eax, dword [edx + 0xb6b8]
jae 0x1002ba53
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1cee2]
test edx, edx
je 0x1002ba53
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb6b8]
add ecx, 0x2710
mov edx, dword [ebp - 4]
mov dword [edx + 0x3fd], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0x21], 3
jne 0x1002ba15
push 0
push 0
push 2
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x75ec]
push edx
call fcn.1001ebe0
add esp, 0x10
mov eax, 0x1f6a
mov word [ebp - 0x118], ax
jmp 0x1002ba53
push 0
push 1
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x75ec]
push edx
call fcn.1001ebe0
add esp, 0xc
push 0x85
push 0xfe0a1bf
push 0
call fcn.1001d490
add esp, 0xc
mov dword [ebp - 0x264], 0x7c6bf17e
mov dword [ebp - 0x268], 0x1fd50ead
mov eax, dword [ebp - 4]
mov byte [eax + 0x7646], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x331]
mov dword [ebp - 0x1d0], edx
mov ecx, dword [ebp - 0xe0]
call dword [ebp - 0x1d0]
mov esp, ebp
pop ebp
ret