Function at 0x1002b1cc
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100875d9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x284
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1002c2cb
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x64], eax
push 3
lea ecx, [ebp - 0x22c]
call fcn.1001855e
and dword [ebp - 4], 0
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x1c4], 0xffffffff
push 2
lea ecx, [ebp - 0x1e8]
call fcn.1001855e
mov byte [ebp - 4], 1
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x23c], 0xfffffffc
push 0x7e6d
push 0
push 0x259c
lea eax, [ebp - 0x22c]
push eax
push 0x1754
lea eax, [ebp - 0x48]
push eax
call fcn.1002b1cc
add esp, 0x18
mov dword [ebp - 0x48], 0
jmp 0x1002b291
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1002b2ad
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1e8]
call fcn.100185ee
mov dword [eax], 0xb6eab3cf
jmp 0x1002b28a
lea eax, [ebp - 0x38]
push eax
push 0x5fcf
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x58]
push eax
push 0x129d
lea eax, [ebp - 0x1ac]
push eax
push 0x6ce
push 0x438c
push 0xe9e
push 0x28c1
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x1c4]
push eax
push 0
call fcn.100309ab
add esp, 0x34
mov dword [ebp - 0x58], 0x1a
jmp 0x1002b309
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffff2
jg 0x1002b34c
mov dword [ebp - 0x38], 1
jmp 0x1002b31f
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1002b33c
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1e8]
call fcn.100185ee
cmp dword [eax], 0
je 0x1002b33a
jmp 0x1002b33c
jmp 0x1002b318
push 0x54d5
push 0
call fcn.1002d1de
pop ecx
pop ecx
jmp 0x1002b302
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1e8]
call fcn.100185e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.100185e9
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x18], 0x8a062b00
mov dword [ebp - 0x1cc], 0xfdb69689
mov dword [ebp - 0x40], 0xee56e31b
push 0x6e42
push 0x78b7
push 0x2765
push 0x7370
push 0x1f74
push 0x341f
push 0xc30
lea eax, [ebp - 0x1cc]
push eax
push 0x554b
lea eax, [ebp - 0x18]
push eax
push 0xc4c
lea eax, [ebp - 0x40]
push eax
push 0
call fcn.10028695
add esp, 0x34
mov dword [ebp - 0x40], 0
jmp 0x1002b3e4
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe2
jle 0x1002b4a2
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x68], 0
jmp 0x1002b408
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1002b41e
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x254], 0x2549
jmp 0x1002b401
mov dword [ebp - 0x18], 0xffffffe4
jmp 0x1002b42e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1002b465
mov byte [ebp - 0x2b], 0
lea eax, [ebp - 0x2b]
push eax
push 0x7aa2
push 0x42ac
push 0
call fcn.1002c337
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x254]
mov dword [ebp - 0x1a8], eax
jmp 0x1002b427
mov dword [ebp - 0x18], 0
jmp 0x1002b475
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1002b49d
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x1002b49b
push 0x6acd
push 0x3de9
push 0
call fcn.100322f4
add esp, 0xc
jmp 0x1002b46e
jmp 0x1002b3dd
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x1c], 0x9e71b35d
push 2
lea ecx, [ebp - 0x214]
call fcn.1001855e
mov dword [ebp - 4], 2
mov dword [ebp - 0x70], 0
jmp 0x1002b4e9
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1002b505
push dword [ebp - 0x70]
lea ecx, [ebp - 0x214]
call fcn.100185ee
mov dword [eax], 0x8d81
jmp 0x1002b4e2
cmp dword [ebp - 0x10], 0
je 0x1002b637
cmp dword [ebp - 0x10], 0
je 0x1002b56c
cmp dword [ebp - 0x10], 0
jne 0x1002b52a
cmp dword [ebp - 0x10], 0
jne 0x1002b52a
and dword [ebp - 0xe4], 0
jmp 0x1002b534
mov dword [ebp - 0xe4], 1
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xe4]
jge 0x1002b54b
mov dword [ebp - 0x160], 1
jmp 0x1002b552
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x160]
dec eax
dec eax
je 0x1002b56c
mov dword [ebp - 0x108], 1
jmp 0x1002b573
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x108], eax
jg 0x1002b58a
mov dword [ebp - 0x14c], 1
jmp 0x1002b591
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x10]
jle 0x1002b5ac
mov dword [ebp - 0xb8], 1
jmp 0x1002b5b3
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xb8], eax
jne 0x1002b5ca
mov dword [ebp - 0x1bc], 1
jmp 0x1002b5d1
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x10], 0
jne 0x1002b5f8
cmp dword [ebp - 0x1c], 0
jne 0x1002b5f8
and dword [ebp - 0x148], 0
jmp 0x1002b602
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x148], eax
jge 0x1002b619
mov dword [ebp - 0xc0], 1
jmp 0x1002b620
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xc0], eax
je 0x1002b637
mov dword [ebp - 0x110], 1
jmp 0x1002b63e
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0x1ef9
jl 0x1002b656
mov dword [ebp - 0xc8], 1
jmp 0x1002b65d
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0
jmp 0x1002b676
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jle 0x1002b7cc
mov dword [ebp - 0x28], 0xaa5d732a
mov dword [ebp - 0x138], 0
push 4
lea ecx, [ebp - 0x220]
call fcn.1001855e
mov byte [ebp - 4], 3
mov dword [ebp - 0x60], 0
jmp 0x1002b6b2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1002b6ce
push dword [ebp - 0x60]
lea ecx, [ebp - 0x220]
call fcn.100185ee
mov dword [eax], 0x93c5815d
jmp 0x1002b6ab
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.10031fb9
pop ecx
pop ecx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1c]
je 0x1002b6ff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x1002b6ff
mov eax, dword [ebp - 0x28]
neg eax
mov dword [ebp - 0x138], eax
jmp 0x1002b7b8
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x174], 0xfffffff8
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1002b733
push 0x6c46
push 0
push 0x2943
call fcn.1002d689
add esp, 0xc
mov dword [ebp - 0x28], 0
jmp 0x1002b743
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x1002b7b8
mov dword [ebp - 0x164], 0xa323
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x2532
lea eax, [ebp - 0x214]
push eax
push 0x4f5d
lea eax, [ebp - 0x28]
push eax
push 0x9ad
push 1
call fcn.10028695
add esp, 0x34
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1002b7b6
push 0
call fcn.1002c3d2
pop ecx
jmp 0x1002b73c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x220]
call fcn.100185e9
jmp 0x1002b66f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x214]
call fcn.100185e9
and dword [ebp - 0x78], 0
jmp 0x1002b7f1
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x24]
add eax, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x78], eax
jge 0x1002c2c9
mov eax, dword [ebp - 0x24]
cmp dword [eax + 0x10], 0
jne 0x1002bd7a
push 1
lea ecx, [ebp - 0x9c]
call fcn.1001855e
mov dword [ebp - 4], 4
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x230], 0x8a0c
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0x194], 0x26cefc6e
mov dword [ebp - 0x50], 0
jmp 0x1002b85c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1002b872
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1dc], 0x40d7f825
jmp 0x1002b855
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x2a41
push 0x1df2
push 0
call fcn.1002d0fa
add esp, 0x14
push 0
lea ecx, [ebp - 0x9c]
call fcn.100185ee
and dword [eax], 0
jmp 0x1002b8c7
push 0
lea ecx, [ebp - 0x9c]
call fcn.100185ee
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9c]
call fcn.100185ee
cmp dword [eax], 3
jg 0x1002bd0d
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x244], 0xffffffff
mov dword [ebp - 0x184], 0x8670fc24
mov dword [ebp - 0x24c], 0x8e487928
push 3
lea ecx, [ebp - 0x1f4]
call fcn.1001855e
mov byte [ebp - 4], 5
mov dword [ebp - 0xbc], 0xdd5d57d3
push 0x7600
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x258]
push eax
push 0
push 0x3351
push 0x1ed3
push 0x5af8
push 0x2871
call fcn.1002d9bc
add esp, 0x20
push 0
lea ecx, [ebp - 0x9c]
call fcn.100185ee
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x1dc], 0
je 0x1002b97b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1f4]
call fcn.100185e9
jmp 0x1002bd0d
mov dword [ebp - 0x30], 3
jmp 0x1002b98b
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1002bcf9
mov dword [ebp - 0x18c], 0x2c593c86
mov dword [ebp - 0x264], 0xffffffff
mov dword [ebp - 0xb4], 0x69035a60
mov dword [ebp - 0x26c], 0xffffffff
mov dword [ebp - 0x288], 0xfffffff8
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x238], 0xffffffff
mov dword [ebp - 0x84], 0xf484
cmp dword [ebp - 0x30], 0xfffffff6
je 0x1002b9f7
mov dword [ebp - 0x118], 1
jmp 0x1002b9fe
and dword [ebp - 0x118], 0
push 0
lea ecx, [ebp - 0x9c]
call fcn.100185ee
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x1dc]
cmp eax, dword [ebp - 0x118]
jl 0x1002ba28
mov dword [ebp - 0xd8], 1
jmp 0x1002ba2f
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0x41a9c213
jg 0x1002ba47
mov dword [ebp - 0x15c], 1
jmp 0x1002ba4e
and dword [ebp - 0x15c], 0
push 0
lea ecx, [ebp - 0x9c]
call fcn.100185ee
mov esi, eax
push 0
lea ecx, [ebp - 0x9c]
call fcn.100185ee
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1002ba7c
mov dword [ebp - 0xe0], 1
jmp 0x1002ba83
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0xe0]
jle 0x1002ba9d
mov dword [ebp - 0x120], 1
jmp 0x1002baa4
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
sub eax, 0x257e
je 0x1002bae0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x44], 0
jmp 0x1002bac8
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x1002bade
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1dc], 1
jmp 0x1002bac1
jmp 0x1002bb1b
mov dword [ebp - 0x17c], 0xfffc
cmp dword [ebp - 0x17c], 0
jne 0x1002bb01
or eax, 0xffffffff
jne 0x1002bb01
and dword [ebp - 0xe8], 0
jmp 0x1002bb0b
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1dc], ecx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x140], eax
push 0
lea ecx, [ebp - 0x9c]
call fcn.100185ee
mov eax, dword [eax]
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x1dc], ecx
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x84]
dec ecx
mov dword [ebp - 0x84], ecx
test eax, eax
je 0x1002bbcc
imul eax, dword [ebp - 0xbc], 0x70aa
mov dword [ebp - 0xf0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf0]
mov dword [ebp + eax - 0x1dc], ecx
cmp dword [ebp - 0xf0], 0
je 0x1002bb9b
cmp dword [ebp - 0xb4], 0
je 0x1002bb9b
mov dword [ebp - 0x8c], 1
jmp 0x1002bba2
and dword [ebp - 0x8c], 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.100185ee
mov ecx, dword [ebp - 0x8c]
mov dword [eax], ecx
cmp dword [ebp - 0x8c], 0
je 0x1002bbcc
mov dword [ebp - 0x128], 1
jmp 0x1002bbd3
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 1
jne 0x1002bbe8
mov dword [ebp - 0xf8], 1
jmp 0x1002bbef
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xffff
jne 0x1002bc09
or eax, 0xffffffff
jne 0x1002bc09
and dword [ebp - 0x150], 0
jmp 0x1002bc13
mov dword [ebp - 0x150], 1
cmp dword [ebp - 0x150], 6
jl 0x1002bc28
mov dword [ebp - 0x100], 1
jmp 0x1002bc2f
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x100], eax
jge 0x1002bc46
mov dword [ebp - 0x130], 1
jmp 0x1002bc4d
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0x2b79
jg 0x1002bc65
mov dword [ebp - 0xb0], 1
jmp 0x1002bc6c
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xb0], eax
jne 0x1002bc86
mov dword [ebp - 0x1c8], 1
jmp 0x1002bc8d
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x184], 0xfffffffc
jne 0x1002bcae
mov dword [ebp - 0x1b0], 1
jmp 0x1002bcb5
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0xc4]
jge 0x1002bce1
mov dword [ebp - 0xcc], 1
jmp 0x1002bce8
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x194], eax
jmp 0x1002b984
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1f4]
call fcn.100185e9
jmp 0x1002b8a3
mov byte [ebp - 0x2c], 0
movzx eax, byte [ebp - 0x2c]
test eax, eax
je 0x1002bd2d
push 0
push 0x4879
push 0x2cb5
call fcn.1002b184
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.100185e9
push 0
push dword [ebp - 0x1b8]
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0xd4]
push 0x754a
push 0x6e28
push dword [ebp - 0x24]
push 0x6bf9
push 0x3e14
push 0x7aad
call fcn.1002c476
add esp, 0x28
jmp 0x1002b7e1
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x19c], 0xfffffff7
mov byte [ebp - 0x32], 0
push 0
lea eax, [ebp - 0x32]
push eax
push 0x3bde
call fcn.10030deb
add esp, 0xc
mov dword [ebp - 0x4c], 0
jmp 0x1002bdb2
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffee
jle 0x1002be37
mov dword [ebp - 0x54], 0x1f665683
mov dword [ebp - 0x16c], 0x729694d2
mov dword [ebp - 0x54], 0xa
jmp 0x1002bdd9
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffe5
jle 0x1002be32
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x1a4], 0x1f6f
mov dword [ebp - 0x170], 0
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.1002b050
add esp, 0x1c
jmp 0x1002bdd2
jmp 0x1002bdab
push 4
push 0x1000
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xd4]
add ecx, dword [eax + 0xc]
push ecx
push 0x61a3
push 0x50ab
call fcn.10027c74
pop ecx
pop ecx
call eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x180]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x88]
call fcn.10027c96
add esp, 0xc
push 3
lea ecx, [ebp - 0xa8]
call fcn.1001855e
mov dword [ebp - 4], 6
mov dword [ebp - 0x3c], 0x5020f89b
mov dword [ebp - 0x7c], 0xa5ea964a
mov dword [ebp - 0x208], 0xce695ef
mov dword [ebp - 0x204], 0xce695ef
mov dword [ebp - 0x200], 0xce695ef
mov dword [ebp - 0x1fc], 0xce695ef
lea ecx, [ebp - 0x8d]
call fcn.100091f3
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x208]
push eax
lea ecx, [ebp - 0x290]
call fcn.100185fd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x27c]
call fcn.100185bf
mov byte [ebp - 4], 7
mov dword [ebp - 0x20], 0
jmp 0x1002bf1e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1002bf3a
push dword [ebp - 0x20]
lea ecx, [ebp - 0xa8]
call fcn.100185ee
mov dword [eax], 0xdc85f70a
jmp 0x1002bf17
mov dword [ebp - 0x20], 0
jmp 0x1002bf4a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1002bf60
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x158], 0xbdfadf62
jmp 0x1002bf43
mov dword [ebp - 0x3c], 0
jmp 0x1002bf70
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jg 0x1002c291
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x14], 2
jmp 0x1002bf98
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002c272
mov dword [ebp - 0x74], 6
mov dword [ebp - 0x6c], 0
jmp 0x1002bfb9
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1002bfcf
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x284], 0xb56fe18
jmp 0x1002bfb2
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa8]
call fcn.100185ee
mov ecx, dword [ebp - 0x14]
cmp dword [eax], ecx
je 0x1002c025
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 3
je 0x1002c000
mov dword [ebp - 0xdc], 1
jmp 0x1002c007
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xdc], eax
je 0x1002c025
mov dword [ebp - 0xac], 1
jmp 0x1002c02c
and dword [ebp - 0xac], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa8]
call fcn.100185ee
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xac], eax
jne 0x1002c05a
mov dword [ebp - 0x188], 1
jmp 0x1002c061
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0xec], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa8]
call fcn.100185ee
mov ecx, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0xec], eax
jle 0x1002c0a3
mov dword [ebp - 0xf4], 1
jmp 0x1002c0aa
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x80], eax
jge 0x1002c0c7
mov dword [ebp - 0x104], 1
jmp 0x1002c0ce
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
mov dword [ebp - 0xfc], eax
push 1
lea ecx, [ebp - 0xa8]
call fcn.100185ee
mov ecx, dword [ebp - 0xfc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x104]
jne 0x1002c19c
push 4
pop eax
imul eax, eax, 0
imul esi, dword [ebp + eax - 0x158], 0xffff
push 4
pop eax
imul eax, eax, 0
sub esi, dword [ebp + eax - 0x158]
inc esi
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa8]
call fcn.100185ee
cmp esi, dword [eax]
jg 0x1002c145
mov dword [ebp - 0x10c], 1
jmp 0x1002c14c
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0xfffffffb
jb 0x1002c16e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x284], 0
jne 0x1002c16e
and dword [ebp - 0x114], 0
jmp 0x1002c178
mov dword [ebp - 0x114], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa8]
call fcn.100185ee
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [eax]
je 0x1002c19c
mov dword [ebp - 0x11c], 1
jmp 0x1002c1a3
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0xee1d
jg 0x1002c1bb
mov dword [ebp - 0x124], 1
jmp 0x1002c1c2
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0x406c
jne 0x1002c1da
mov dword [ebp - 0x12c], 1
jmp 0x1002c1e1
and dword [ebp - 0x12c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x12c], eax
jle 0x1002c202
mov dword [ebp - 0x134], 1
jmp 0x1002c209
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x134], eax
jne 0x1002c220
mov dword [ebp - 0x13c], 1
jmp 0x1002c227
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x14]
je 0x1002c258
push 2
lea ecx, [ebp - 0x27c]
call fcn.100185ee
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x144]
mov dword [ecx], eax
jmp 0x1002c26d
mov dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 0
je 0x1002c26d
jmp 0x1002c272
jmp 0x1002bf91
lea eax, [ebp - 0x3c]
push eax
push 0
push 0x3da0
lea eax, [ebp - 0xa8]
push eax
call fcn.10030d95
add esp, 0x10
jmp 0x1002bf69
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x27c]
call fcn.100185e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa8]
call fcn.100185e9
push 1
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.1002b184
add esp, 0xc
jmp 0x1002b7e1
jmp 0x1002c328
mov eax, dword [ebp + 8]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0
jmp 0x1002c308
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
cmp dword [eax], 3
jge 0x1002c328
mov eax, dword [ebp - 0x5c]
push dword [eax]
mov ecx, dword [ebp - 0x1b4]
call fcn.100185ee
mov dword [eax], 0xea53061e
jmp 0x1002c2fd
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret