Function at 0x100286a2
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006d819
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x3ec
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x10029ec4
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x258], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x29c]
movzx eax, byte [eax]
test eax, eax
je 0x10029e5b
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1002873c
jmp 0x1002a2bf
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 0x4550
je 0x1002875b
jmp 0x1002a2bf
mov dword [ebp - 0x160], 0x1d9d
mov dword [ebp - 0x28c], 0x10007f9c
cmp dword [ebp - 0x160], 0x2092
jle 0x1002888f
push 0
call dword [0x106181b8]
and dword [ebp - 0xf0], 0
jmp 0x1002879d
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x7dcf
jge 0x1002888f
and dword [ebp - 0xfc], 0
jmp 0x100287c3
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x3c1c
jge 0x1002888a
and dword [ebp - 0x104], 0
jmp 0x100287e9
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x2d68
jge 0x10028885
and dword [ebp - 0x10c], 0
jmp 0x1002880f
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xad7
jge 0x10028880
mov eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x10c]
sar eax, cl
and eax, dword [ebp - 0xf0]
cdq
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x260], edx
push dword [ebp - 0x260]
push dword [ebp - 0x264]
lea ecx, [ebp - 0x33c]
call fcn.1000a3af
pop ecx
pop ecx
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x284]
call fcn.1001f4ba
push eax
call fcn.1005488f
pop ecx
lea ecx, [ebp - 0x33c]
call fcn.1001f4b0
jmp 0x10028802
jmp 0x100287dc
jmp 0x100287b6
jmp 0x10028790
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x34], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x160], 0x1d36
jge 0x100288bb
push dword [ebp - 0x28c]
call fcn.1005488f
pop ecx
jmp 0x100288d7
or dword [ebp - 4], 0xffffffff
jmp 0x100288e1
mov eax, dword [ebp - 0x34]
cmp dword [eax + 4], 0
jne 0x100288ef
jmp 0x1002a2bf
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x4c]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x60], eax
and dword [ebp - 0x110], 0
jmp 0x10028923
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x60]
add eax, 0x28
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x110], eax
jge 0x1002899c
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x168]
jb 0x10028997
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x60]
push dword [eax + 8]
call fcn.1002630e
pop ecx
pop ecx
add eax, dword [ebp - 0x168]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x294]
jae 0x10028997
push 0x6f4f
push 1
push 1
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x60]
push eax
push 0x32d4
call fcn.10026361
add esp, 0x18
jmp 0x1002899c
jmp 0x1002890d
cmp dword [ebp - 0x28], 0
jne 0x100289a7
jmp 0x1002a2bf
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
call fcn.10024daa
push eax
call fcn.1005685f
pop ecx
mov byte [ebp - 0xb0], 8
mov byte [ebp - 0xaf], 0xb8
mov byte [ebp - 0xae], 5
mov byte [ebp - 0xad], 1
mov byte [ebp - 0xac], 9
mov byte [ebp - 0xab], 1
mov byte [ebp - 0xaa], 7
mov byte [ebp - 0xa9], 6
mov byte [ebp - 0xa8], 1
mov byte [ebp - 0xa7], 3
mov byte [ebp - 0xa6], 6
mov byte [ebp - 0xa5], 4
mov byte [ebp - 0xa4], 3
mov byte [ebp - 0xa3], 6
mov byte [ebp - 0xa2], 4
mov byte [ebp - 0xa1], 0xf
mov byte [ebp - 0xa0], 2
mov byte [ebp - 0x9f], 0xf
mov byte [ebp - 0x9e], 1
mov byte [ebp - 0x9d], 0x8e
mov byte [ebp - 0x9c], 0
mov byte [ebp - 0x9b], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xb0]
or eax, 0x88
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xb0]
and ecx, 0x88
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xb0]
mov byte [ebp + ecx - 0x1ac], al
mov dword [ebp - 0x30], 2
and dword [ebp - 0xdc], 0
jmp 0x10028ab3
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x16
jae 0x10028b69
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xb0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x10028afd
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0xb0]
inc eax
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0xb0]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
jmp 0x10028aab
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0xaf]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0xdc]
movzx ecx, byte [ebp + ecx - 0xb2]
movsx ecx, byte [ebp + ecx - 0x1ac]
or eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0xaf]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0xdc]
movzx edx, byte [ebp + edx - 0xb2]
movsx edx, byte [ebp + edx - 0x1ac]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0xb0]
mov byte [ebp + ecx - 0x1ac], al
and dword [ebp - 0xdc], 0
jmp 0x10028aab
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x1ac], 0
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x3b4]
call fcn.1001f870
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 4], 2
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x2a4]
call fcn.10024d6f
pop ecx
mov dword [ebp - 0x218], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b4]
call fcn.1001f893
and dword [ebp - 0xec], 0
jmp 0x10028bdd
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xb
jae 0x10028d3b
mov dword [ebp - 0x184], 0xceb
mov dword [ebp - 0x2b4], 0x10007fec
cmp dword [ebp - 0x184], 0xe74
jle 0x10028ce3
and dword [ebp - 0xf4], 0
jmp 0x10028c24
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x7ad6
jge 0x10028ce3
and dword [ebp - 0xcc], 0
jmp 0x10028c4a
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x5ebe
jge 0x10028cde
and dword [ebp - 0xe4], 0
jmp 0x10028c70
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x22b
jge 0x10028cd9
mov eax, dword [ebp - 0xf4]
xor eax, dword [ebp - 0xcc]
xor eax, dword [ebp - 0xe4]
cdq
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], edx
push dword [ebp - 0x26c]
push dword [ebp - 0x270]
lea ecx, [ebp - 0x384]
call fcn.1000a3af
pop ecx
pop ecx
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2b8]
call fcn.1001f4ba
push eax
call fcn.1005488f
pop ecx
lea ecx, [ebp - 0x384]
call fcn.1001f4b0
jmp 0x10028c63
jmp 0x10028c3d
jmp 0x10028c17
mov eax, dword [ebp - 0xec]
mov byte [ebp + eax - 0x1ac], 0
mov dword [ebp - 4], 3
cmp dword [ebp - 0x184], 0xa2a
jge 0x10028d10
push dword [ebp - 0x2b4]
call fcn.1005488f
pop ecx
jmp 0x10028d2c
or dword [ebp - 4], 0xffffffff
jmp 0x10028d36
jmp 0x10028bd0
mov byte [ebp - 0x78], 2
mov byte [ebp - 0x77], 0x46
mov byte [ebp - 0x76], 5
mov byte [ebp - 0x75], 6
mov byte [ebp - 0x74], 0
mov byte [ebp - 0x73], 0
mov byte [ebp - 0x72], 2
mov byte [ebp - 0x71], 0x67
mov byte [ebp - 0x70], 0xd
mov byte [ebp - 0x6f], 8
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x6d], 6
mov byte [ebp - 0x6c], 9
mov byte [ebp - 0x6b], 9
mov byte [ebp - 0x6a], 9
mov byte [ebp - 0x69], 7
mov byte [ebp - 0x68], 6
mov byte [ebp - 0x67], 1
mov byte [ebp - 0x66], 0
mov byte [ebp - 0x65], 4
mov byte [ebp - 0x64], 2
mov byte [ebp - 0x63], 3
mov byte [ebp - 0x62], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x78]
or eax, 0x71
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x78]
and ecx, 0x71
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x78]
mov byte [ebp + ecx - 0x1a0], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x88], 0
jmp 0x10028ddf
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x17
jae 0x10028eba
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x78]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x10028e20
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x78]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x78]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x10028dd7
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x77]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x88]
movzx ecx, byte [ebp + ecx - 0x7a]
movsx ecx, byte [ebp + ecx - 0x1a0]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x77]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x88]
movzx edx, byte [ebp + edx - 0x7a]
movsx edx, byte [ebp + edx - 0x1a0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x77]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x88]
movzx edx, byte [ebp + edx - 0x7a]
movsx edx, byte [ebp + edx - 0x1a0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x78]
mov byte [ebp + ecx - 0x1a0], al
push 0x6a1b
push 1
push 0x7fbb
lea eax, [ebp - 0x88]
push eax
push 0x3c78
push 1
call fcn.10027a9f
add esp, 0x18
jmp 0x10028dd7
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x1a0], 0
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x3e4]
call fcn.1001f870
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x210], eax
mov dword [ebp - 4], 5
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x210]
call fcn.10024d6f
pop ecx
mov dword [ebp - 0x1d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e4]
call fcn.1001f893
and dword [ebp - 0xd8], 0
jmp 0x10028f2e
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xb
jae 0x10028f47
mov eax, dword [ebp - 0xd8]
mov byte [ebp + eax - 0x1a0], 0
jmp 0x10028f21
push dword [ebp - 0x1d4]
push dword [ebp - 0x218]
call fcn.100260ee
pop ecx
pop ecx
mov dword [ebp - 0x134], eax
push 1
push 0
lea eax, [ebp - 0x4c]
push eax
push 0x3f11
push 0x6101
push 0x60bf
push 0x4bac
push 0x5db9
push 0x19ac
push 0x28a2
lea eax, [ebp - 0x134]
push eax
push 0x3729
push 0x193d
call fcn.10027f6e
add esp, 0x34
push 0x2f9e
lea eax, [ebp - 0x1c]
push eax
push 0x5ff4
push 0
lea eax, [ebp - 0x134]
push eax
push 0x21ba
push 0x6914
push 0
call fcn.100279b7
add esp, 0x20
mov dword [ebp - 0x1dc], 0x23af
cmp dword [ebp - 0x1dc], 0x65f
jge 0x10029265
lea ecx, [ebp - 0x1c4]
call fcn.1001f470
mov dword [ebp - 4], 6
lea eax, [ebp - 0x8c]
push eax
mov ecx, 0x10614f90
call fcn.1001f4da
lea edx, [ebp - 0x1c4]
mov ecx, eax
call fcn.1002a990
cmp dword [ebp - 0x8c], 1
jne 0x10029071
mov edx, 0x1000802c
lea ecx, [ebp - 0x1c4]
call fcn.1002a9ca
movzx eax, al
test eax, eax
je 0x10029056
push fcn.1002a998
mov edx, 0x10007e4c
mov ecx, 0x10614ed8
call fcn.10023bd1
mov ecx, eax
call fcn.1002a49a
jmp 0x10029071
push fcn.1002a998
mov edx, 0x10007e48
mov ecx, 0x10614ed8
call fcn.10023bd1
mov ecx, eax
call fcn.1002a49a
cmp dword [ebp - 0x8c], 2
jne 0x100290e0
mov edx, 0x10008030
lea ecx, [ebp - 0x1c4]
call fcn.1002a9ca
movzx eax, al
test eax, eax
jne 0x100290a8
mov edx, 0x10008034
lea ecx, [ebp - 0x1c4]
call fcn.1002a9ca
movzx eax, al
test eax, eax
je 0x100290c5
push fcn.1002a998
mov edx, 0x10007e4c
mov ecx, 0x10614ed8
call fcn.10023bd1
mov ecx, eax
call fcn.1002a49a
jmp 0x100290e0
push fcn.1002a998
mov edx, 0x10007e48
mov ecx, 0x10614ed8
call fcn.10023bd1
mov ecx, eax
call fcn.1002a49a
mov dword [ebp - 0x5c], 1
jmp 0x100290f0
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x8c]
jge 0x10029156
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
movsx esi, byte [eax]
mov eax, dword [ebp - 0x5c]
dec eax
push eax
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
movsx eax, byte [eax]
cmp esi, eax
jne 0x10029154
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
movsx eax, byte [eax]
cmp eax, 0x31
jne 0x10029154
push fcn.1002a998
mov edx, 0x10008038
mov ecx, 0x10614ed8
call fcn.10023bd1
mov ecx, eax
call fcn.1002a49a
jmp 0x100290e9
and dword [ebp - 0x50], 0
jmp 0x10029163
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x8c]
jge 0x1002923b
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
movsx eax, byte [eax]
cmp eax, 0x30
jne 0x10029236
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
mov byte [eax], 0x31
mov byte [ebp - 0x35], 1
mov dword [ebp - 0x58], 1
jmp 0x100291b1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x8c]
jge 0x10029202
push dword [ebp - 0x58]
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
movsx esi, byte [eax]
mov eax, dword [ebp - 0x58]
dec eax
push eax
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
movsx eax, byte [eax]
cmp esi, eax
jne 0x10029200
push dword [ebp - 0x58]
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
movsx eax, byte [eax]
cmp eax, 0x31
jne 0x10029200
mov byte [ebp - 0x35], 0
jmp 0x10029202
jmp 0x100291aa
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1c4]
call fcn.100216ed
mov byte [eax], 0x30
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x10029236
push fcn.1002a998
mov edx, 0x10008038
mov ecx, 0x10614ed8
call fcn.10023bd1
mov ecx, eax
call fcn.1002a49a
jmp 0x1002915c
push fcn.1002a998
mov edx, 0x1000803c
mov ecx, 0x10614ed8
call fcn.10023bd1
mov ecx, eax
call fcn.1002a49a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c4]
call fcn.1001f4b0
and dword [ebp - 0x7c], 0
push 1
push 0x3655
push 0x7c1c
push 0x73e8
push 1
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x1da3
push 0x601
call fcn.10027c42
add esp, 0x24
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x7c]
mov dword [ebp - 0x54], eax
and dword [ebp - 0x100], 0
jmp 0x100292c1
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x54]
jge 0x10029360
lea eax, [ebp - 0x28]
push eax
push 0x736c
push 0x89
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x220]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x39a9
lea eax, [ebp - 0x100]
push eax
push 0x6b26
push 1
call fcn.10027d55
add esp, 0x30
push 1
push 0x3155
lea eax, [ebp - 0x24]
push eax
push 0x2851
lea eax, [ebp - 0x28]
push eax
push 0x473c
lea eax, [ebp - 0x220]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.10026924
add esp, 0x24
push 0x31d
push 1
push 0x60a0
push 0x533d
lea eax, [ebp - 0x14]
push eax
push 0
call fcn.10027a9f
add esp, 0x18
jmp 0x100292b4
push 1
push 0x72d9
lea eax, [ebp - 0x7c]
push eax
push 0x1b4c
lea eax, [ebp - 0x1c]
push eax
push 0x292b
call fcn.10027eac
add esp, 0x18
push 1
push 1
push 0x13ac
push 0x72f7
push 0x2ce0
push 0x2a89
lea eax, [ebp - 0x54]
push eax
push 0x4596
push 0x50bf
push 0x7c45
push 0x268c
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10027f6e
add esp, 0x34
and dword [ebp - 0x124], 0
jmp 0x100293d7
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x54]
jge 0x10029414
push 0x3e4f
push 0x5f1b
lea eax, [ebp - 0x28]
push eax
push 1
push 0x1842
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
push eax
push 0
call fcn.100279b7
add esp, 0x20
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x14], eax
jmp 0x100293ca
mov dword [ebp - 0x1e4], 0x2455
cmp dword [ebp - 0x1e4], 0x6a8
jge 0x100295e0
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x10007a3c
call fcn.1005465b
add esp, 0xc
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x194]
call fcn.1001f907
mov dword [ebp - 4], 7
and dword [ebp - 0xe0], 0
jmp 0x10029471
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x3c]
jge 0x1002949c
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x194]
call fcn.1001f985
push eax
push 0x10008040
call fcn.1005465b
pop ecx
pop ecx
jmp 0x10029464
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x194]
call fcn.1002a5a7
push dword [eax]
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x194]
call fcn.1001fa69
push dword [eax]
call fcn.1002aa28
pop ecx
pop ecx
and dword [ebp - 0x11c], 0
and dword [ebp - 0xb4], 0
jmp 0x100294e8
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x3c]
jge 0x10029551
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x194]
call fcn.1001f985
mov esi, eax
mov eax, dword [ebp - 0x3c]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0xb4]
cdq
idiv dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x194]
call fcn.1001f985
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x10029536
mov dword [ebp - 0x180], 1
jmp 0x1002953d
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x180]
mov dword [ebp - 0x11c], eax
jmp 0x100294db
push dword [ebp - 0x11c]
push 0x100078d0
call fcn.1005488f
pop ecx
pop ecx
and dword [ebp - 0x94], 0
jmp 0x10029579
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x3c]
jge 0x100295c6
mov eax, dword [ebp - 0x3c]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x94]
cdq
idiv dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x194]
call fcn.1001f985
push dword [eax]
push dword [ebp - 0x94]
lea ecx, [ebp - 0x194]
call fcn.1001f985
push dword [eax]
push 0x10008048
call fcn.1005488f
add esp, 0xc
jmp 0x1002956c
push 0x10007695
call fcn.10054a46
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.1001f969
mov eax, dword [ebp - 0x54]
shl eax, 2
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x20], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x18]
sub eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x18], eax
push 0x601f
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x75ec
push 0
push 0x5761
push 0x6628
push 0x4b70
push 0x7e61
push 1
push 0x4cd0
lea eax, [ebp - 0x54]
push eax
call fcn.100286a2
add esp, 0x3c
push 0x628
lea eax, [ebp - 0x14]
push eax
push 0x33e0
push 0x3aff
lea eax, [ebp - 0x54]
push eax
push 0x1528
push 1
push 0x3a9b
push 1
push 0x3e40
lea eax, [ebp - 0x1c]
push eax
call fcn.10026ac9
add esp, 0x2c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x324]
call fcn.1001f870
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x324]
call fcn.1001f8df
mov dword [ebp - 0x13c], eax
push dword [ebp - 0x13c]
mov eax, dword [ebp - 0x13c]
shr eax, 1
push eax
call fcn.100260ee
pop ecx
pop ecx
mov dword [ebp - 0x98], eax
mov byte [ebp - 0x48], 0
mov byte [ebp - 0x47], 0x15
mov byte [ebp - 0x46], 1
mov byte [ebp - 0x45], 0x90
mov byte [ebp - 0x44], 1
mov byte [ebp - 0x43], 0x4a
mov byte [ebp - 0x42], 2
mov byte [ebp - 0x41], 8
mov byte [ebp - 0x40], 3
mov byte [ebp - 0x3f], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x48]
or eax, 0x3b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x48]
and ecx, 0x3b
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x48]
mov byte [ebp + ecx - 0xbc], al
mov dword [ebp - 0x2c], 2
and dword [ebp - 0xf8], 0
jmp 0x10029737
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xa
jae 0x100297f5
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x48]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x10029778
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x48]
inc eax
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x48]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x1002972f
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x47]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0xf8]
movzx ecx, byte [ebp + ecx - 0x4a]
movsx ecx, byte [ebp + ecx - 0xbc]
or eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x47]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0xf8]
movzx edx, byte [ebp + edx - 0x4a]
movsx edx, byte [ebp + edx - 0xbc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x48]
mov byte [ebp + ecx - 0xbc], al
push 0
push 0x3c38
push 0x56d
push 0x7a7e
push 1
push 0x1cbf
lea eax, [ebp - 0xf8]
push eax
call fcn.10028284
add esp, 0x1c
jmp 0x1002972f
xor eax, eax
inc eax
shl eax, 2
mov byte [ebp + eax - 0xbc], 0
cmp dword [ebp - 0x98], 4
jle 0x100298c3
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x3cc]
call fcn.1001f870
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x18]
or eax, 1
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x98]
sub eax, 4
push eax
lea eax, [ebp - 0x39c]
push eax
call fcn.10026213
pop ecx
pop ecx
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 4], 0xa
mov eax, dword [ebp - 0x18]
or eax, 2
mov dword [ebp - 0x18], eax
push dword [ebp - 0x230]
mov edx, dword [ebp - 0x1f4]
lea ecx, [ebp - 0x36c]
call fcn.1002aa4c
pop ecx
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x18]
or eax, 4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x16c], eax
jmp 0x100298f2
push dword [ebp - 0x98]
lea eax, [ebp - 0x354]
push eax
call fcn.10026213
pop ecx
pop ecx
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x18]
or eax, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x204], eax
push dword [ebp - 0x204]
lea ecx, [ebp - 0x30c]
call fcn.1002a4cc
mov dword [ebp - 4], 0xc
mov eax, dword [ebp - 0x18]
and eax, 8
je 0x1002992d
and dword [ebp - 0x18], 0xfffffff7
lea ecx, [ebp - 0x354]
call fcn.1001f893
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x18]
and eax, 4
je 0x10029948
and dword [ebp - 0x18], 0xfffffffb
lea ecx, [ebp - 0x36c]
call fcn.1001f893
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x18]
and eax, 2
je 0x10029963
and dword [ebp - 0x18], 0xfffffffd
lea ecx, [ebp - 0x39c]
call fcn.1001f893
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x18]
and eax, 1
je 0x1002997e
and dword [ebp - 0x18], 0xfffffffe
lea ecx, [ebp - 0x3cc]
call fcn.1001f893
and dword [ebp - 0xe8], 0
jmp 0x10029994
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 5
jae 0x100299ad
mov eax, dword [ebp - 0xe8]
mov byte [ebp + eax - 0xbc], 0
jmp 0x10029987
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov dword [eax + 0xc], ecx
push 0
push dword [ebp - 0x98]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x30c]
call fcn.1002a532
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x98]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 0x65de
push 0x84f
push 1
push 0x5599
push 0x5a74
lea eax, [ebp - 0x24]
push eax
push 1
push 0x3417
push 0x4a73
lea eax, [ebp - 0x28]
push eax
push 0x95f
push 0
push 0x79a7
push 0x7422
call fcn.100286a2
add esp, 0x3c
lea eax, [ebp - 0x14]
push eax
push 1
push 1
push 0x691d
push 0x2094
push 0x217a
push 0x280
call fcn.100281f1
add esp, 0x1c
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x18], 0
jbe 0x10029aab
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
div dword [ecx + 0x18]
cmp eax, 0xc
jbe 0x10029a7f
mov dword [ebp - 0x144], 0xc
jmp 0x10029a9d
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
div dword [ecx + 0x18]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x174], eax
jmp 0x10029ab2
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x14c], eax
and dword [ebp - 0x108], 0
jmp 0x10029ad4
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x108]
cmp ecx, dword [eax + 0x18]
jae 0x10029c34
push dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
cdq
sub eax, edx
sar eax, 1
push eax
call fcn.100260ee
pop ecx
pop ecx
mov dword [ebp - 0x114], eax
push dword [ebp - 0x114]
lea eax, [ebp - 0x2f4]
push eax
call fcn.10026213
pop ecx
pop ecx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0x20]
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax*4], edx
lea eax, [ebp - 0x2f4]
push eax
push 1
push 0xc3d
lea eax, [ebp - 0x24]
push eax
push 0
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x75f7
call fcn.10027b2c
add esp, 0x24
push 0x5ca4
push 0x70f8
push 1
push 0x711
push 1
push 0x4d22
lea eax, [ebp - 0x114]
push eax
push 0x1178
push 1
push 0x5acc
push 0x7a80
lea eax, [ebp - 0x14]
push eax
push 0x20d2
push 0x17c8
call fcn.10028460
add esp, 0x38
push 0x7171
lea eax, [ebp - 0x28]
push eax
push 1
push 0x1bb9
push 0
push 0x3b91
push 0x34b4
push 0x2d55
push 0
push 0x565f
lea eax, [ebp - 0x14]
push eax
push 0x609f
lea eax, [ebp - 0x24]
push eax
push 0x730b
call fcn.10028460
add esp, 0x38
push 0x4e34
lea eax, [ebp - 0x14]
push eax
push 0x5361
push 0x33cf
push 0x382b
push 0x1073
push 1
push 0x6ea5
push 0
push 0x330
call fcn.10027876
add esp, 0x28
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2f4]
call fcn.1001f893
jmp 0x10029ac7
and dword [ebp - 0x90], 0
jmp 0x10029c4a
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
cmp dword [ebp - 0x90], eax
jae 0x10029e29
lea eax, [ebp - 0x28]
push eax
push 0x75e1
push 1
lea eax, [ebp - 0x90]
push eax
push 0
lea eax, [ebp - 0x24]
push eax
push 0x3cff
push 0x2e58
push 1
push 0x7a41
push 0x711d
push 0x1b23
push 0x685f
lea eax, [ebp - 0x14]
push eax
call fcn.10028460
add esp, 0x38
mov dword [ebp - 0x17c], 0xfee
mov dword [ebp - 0x250], 0x10008054
cmp dword [ebp - 0x17c], 0x1193
jle 0x10029ddc
and dword [ebp - 0xc4], 0
jmp 0x10029ce4
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xbe9
jge 0x10029ddc
and dword [ebp - 0xd4], 0
jmp 0x10029d0a
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x395a
jge 0x10029dd7
and dword [ebp - 0xc0], 0
jmp 0x10029d30
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x7988
jge 0x10029dd2
and dword [ebp - 0xd0], 0
jmp 0x10029d56
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x2b68
jge 0x10029dcd
mov eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd4]
sub ecx, eax
mov eax, dword [ebp - 0xc4]
shl eax, cl
cdq
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x278], edx
push dword [ebp - 0x278]
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x3fc]
call fcn.1000a3af
pop ecx
pop ecx
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
call fcn.1001f4ba
push eax
call fcn.1005488f
pop ecx
lea ecx, [ebp - 0x3fc]
call fcn.1001f4b0
jmp 0x10029d49
jmp 0x10029d23
jmp 0x10029cfd
jmp 0x10029cd7
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x17c], 0xf27
jge 0x10029df8
push dword [ebp - 0x250]
call fcn.1005488f
pop ecx
jmp 0x10029e14
mov dword [ebp - 4], 0xf
jmp 0x10029e24
jmp 0x10029c3d
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x30c]
call fcn.1001f893
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.1001f893
jmp 0x10029ebf
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x274]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x22c]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x2ac]
mov ecx, dword [ecx]
mov byte [ecx + eax], 0
jmp 0x1002a2bf
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x23c], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x1d8], eax
lea eax, [ebp + 0x34]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x288], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x234]
movzx eax, byte [eax]
test eax, eax
je 0x1002a021
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1cc], eax
and dword [ebp - 0xc8], 0
jmp 0x10029fb4
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [eax]
jge 0x1002a01c
mov eax, dword [ebp - 0x1cc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x154]
mov ecx, dword [ecx]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0xc8]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x178]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x154]
mov edx, dword [edx]
mov esi, dword [ebp - 0x118]
add edx, dword [esi]
mov esi, dword [ebp - 0x178]
mov esi, dword [esi]
mov ax, word [ecx + eax]
mov word [esi + edx], ax
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
inc eax
inc eax
mov ecx, dword [ebp - 0x118]
mov dword [ecx], eax
jmp 0x10029fa7
jmp 0x1002a2bf
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x200], eax
push 1
lea ecx, [ebp - 0x130]
call fcn.1001f907
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x138], 3
mov dword [ebp - 0x1f0], 0xc47d1afd
mov dword [ebp - 0x80], 0
jmp 0x1002a07d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1002a093
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x2c4], 0x1b3c692b
jmp 0x1002a076
push 0
push 0x1ad9
push 0x41d6
push 0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x130]
push eax
push 0x7a27
push 0x5937
push 0x7a04
call fcn.100266e9
add esp, 0x24
push 0
lea ecx, [ebp - 0x130]
call fcn.1001f985
and dword [eax], 0
jmp 0x1002a0f9
push 0
lea ecx, [ebp - 0x130]
call fcn.1001f985
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x15c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x130]
call fcn.1001f985
cmp dword [eax], 2
jg 0x1002a255
mov dword [ebp - 0x84], 8
mov dword [ebp - 0x170], 0x79253a34
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x1f8], 0xd70cadd6
push 0
lea ecx, [ebp - 0x130]
call fcn.1001f985
mov esi, eax
push 0
lea ecx, [ebp - 0x130]
call fcn.1001f985
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1002a165
mov dword [ebp - 0x164], 1
jmp 0x1002a16c
and dword [ebp - 0x164], 0
push 0
lea ecx, [ebp - 0x130]
call fcn.1001f985
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x2c4]
mov dword [ebp - 0x188], eax
push 0
lea ecx, [ebp - 0x130]
call fcn.1001f985
mov eax, dword [eax]
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x2c4], ecx
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x2d8], eax
push 0
lea ecx, [ebp - 0x130]
call fcn.1001f985
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x2c4], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jbe 0x1002a227
mov dword [ebp - 0x140], 1
jmp 0x1002a22e
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1f0], eax
push 0x4e14
lea eax, [ebp - 0x1f8]
push eax
push 0
call fcn.100281ca
add esp, 0xc
jmp 0x1002a0d5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.1001f969
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x120]
mov eax, dword [eax]
sub eax, dword [ecx]
jne 0x1002a27f
and dword [ebp - 0x150], 0
jmp 0x1002a2a9
call fcn.1005683e
mov esi, eax
call fcn.1005683e
imul esi, eax
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x120]
mov edi, dword [eax]
sub edi, dword [ecx]
mov eax, esi
cdq
idiv edi
mov dword [ebp - 0x150], edx
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
add eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x200]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret