Function at 0x1002ce68
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007de93
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x200
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1002cfc0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x24], eax
push 0x14
push 0
push 0x9aa8
push 0x94b6
call fcn.100237ce
pop ecx
pop ecx
call eax
push eax
push 0x9aa8
push 0xa09a
call fcn.100237ce
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
and dword [eax + 0xc], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
and dword [eax + 8], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
and dword [eax + 0x10], 0
push 4
push 0x1000
mov eax, dword [ebp - 0x80]
push dword [eax + 0x50]
mov eax, dword [ebp - 0x74]
push dword [eax]
push 0x9aa8
push 0x82e0
call fcn.100237ce
pop ecx
pop ecx
call eax
push 4
push 0x1000
mov eax, dword [ebp - 0x80]
push dword [eax + 0x54]
mov eax, dword [ebp - 0x74]
push dword [eax]
push 0x9aa8
push 0x82e0
call fcn.100237ce
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x80]
add eax, dword [ecx + 0x54]
push eax
push dword [ebp - 0x9c]
mov eax, dword [ebp - 0x8c]
push dword [eax]
call fcn.100238ad
add esp, 0xc
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x9c]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
mov dword [ecx], eax
lea eax, [ebp - 0x74]
push eax
push 1
push 0x58b7
lea eax, [ebp - 0x24]
push eax
push 0x3912
call fcn.1002cdde
add esp, 0x14
jmp 0x1002dc53
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 4]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x18], 0x4e2db58
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x50], 0xfffffff7
mov dword [ebp - 0x18], 0
jmp 0x1002d009
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1a
jne 0x1002d345
mov dword [ebp - 0x40], 0xfffffffa
push 1
lea ecx, [ebp - 0x170]
call fcn.10015a80
and dword [ebp - 4], 0
mov dword [ebp - 0x3c], 0xfffffffe
mov dword [ebp - 0x64], 0
jmp 0x1002d042
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1002d05e
push dword [ebp - 0x64]
lea ecx, [ebp - 0x170]
call fcn.10015b1e
mov dword [eax], 0xfffffff8
jmp 0x1002d03b
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1002677a
add esp, 0x14
mov dword [ebp - 0x2c], 0xfffffffe
jmp 0x1002d08b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 5
jg 0x1002d331
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x34], 0xe6b93388
mov dword [ebp - 0x84], 0xc30bca0b
mov dword [ebp - 0x13c], 0xb221494f
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x34], eax
jl 0x1002d10a
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x7c], eax
jne 0x1002d0eb
mov dword [ebp - 0x138], 1
jmp 0x1002d0f2
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x2c], 4
jne 0x1002d10a
and dword [ebp - 0xbc], 0
jmp 0x1002d114
mov dword [ebp - 0xbc], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xbc], eax
jg 0x1002d12b
mov dword [ebp - 0x144], 1
jmp 0x1002d132
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x18], eax
jne 0x1002d155
cmp dword [ebp - 0x50], 0
jne 0x1002d155
and dword [ebp - 0xb0], 0
jmp 0x1002d15f
mov dword [ebp - 0xb0], 1
push 0
lea ecx, [ebp - 0x170]
call fcn.10015b1e
mov ecx, dword [ebp - 0xb0]
cmp ecx, dword [eax]
jg 0x1002d182
mov dword [ebp - 0xac], 1
jmp 0x1002d189
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x50], 0x18
jmp 0x1002d1ab
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffef
jle 0x1002d32c
mov dword [ebp - 0xb8], 0x79a46bb2
mov dword [ebp - 0x40], 0
jmp 0x1002d1cf
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1002d1fc
mov dword [ebp - 0x34], 0
jmp 0x1002d1e5
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x1002d1fa
lea eax, [ebp - 0x3c]
push eax
push 0
call fcn.1002b58c
pop ecx
pop ecx
jmp 0x1002d1de
jmp 0x1002d1c8
mov dword [ebp - 0x3c], 0xfffffff8
jmp 0x1002d20c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1d
jg 0x1002d327
mov dword [ebp - 0x148], 0xd2ca
mov dword [ebp - 0x118], 0xffffffff
mov dword [ebp - 0xd8], 0xfd208dd2
mov dword [ebp - 0x128], 0x4e19c781
push 0x2476
lea eax, [ebp - 0xd8]
push eax
push 0x4d48
push 0x5416
push 0xbf0
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x148]
push eax
push 0x3365
push 0x7f1a
push 0x1816
push 0
call fcn.1002a6f8
add esp, 0x30
cmp dword [ebp - 0x84], 0
jne 0x1002d2a2
mov eax, 0xffff
test eax, eax
jne 0x1002d2a2
and dword [ebp - 0x120], 0
jmp 0x1002d2ac
mov dword [ebp - 0x120], 1
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0xb8], 0xfff7
jb 0x1002d2d0
mov dword [ebp - 0xf8], 1
jmp 0x1002d2d7
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xf8], eax
jge 0x1002d2ee
mov dword [ebp - 0x15c], 1
jmp 0x1002d2f5
and dword [ebp - 0x15c], 0
mov eax, 0xf149
neg eax
neg eax
cmp eax, 0xffffffff
jae 0x1002d30f
mov dword [ebp - 0xc0], 1
jmp 0x1002d316
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x128], eax
jmp 0x1002d205
jmp 0x1002d1a4
jmp 0x1002d084
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.10015b02
jmp 0x1002d002
mov dword [ebp - 0x10], 0xd5e48d32
push 0
push 0x45a5
lea eax, [ebp - 0x10]
push eax
call fcn.100280b3
add esp, 0xc
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jne 0x1002d373
mov dword [ebp - 0xe0], 1
jmp 0x1002d37a
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0xa9a9
jl 0x1002d474
push 1
lea ecx, [ebp - 0x17c]
call fcn.10015a80
mov dword [ebp - 4], 1
mov dword [ebp - 0x78], 0
jmp 0x1002d3ae
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1002d3ca
push dword [ebp - 0x78]
lea ecx, [ebp - 0x17c]
call fcn.10015b1e
mov dword [eax], 0xfffffffb
jmp 0x1002d3a7
mov dword [ebp - 0x10], 0
jmp 0x1002d3da
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002d3fc
push 0x2ae7
push 0
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1002642f
add esp, 0x10
jmp 0x1002d3d3
mov dword [ebp - 0x10], 0
jmp 0x1002d40c
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002d460
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x48], 0
jmp 0x1002d429
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1002d445
push dword [ebp - 0x48]
lea ecx, [ebp - 0x17c]
call fcn.10015b1e
mov dword [eax], 0xb2aee5a9
jmp 0x1002d422
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1002d45e
push 0x946
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x1002d405
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17c]
call fcn.10015b02
jmp 0x1002d4fd
push 1
lea ecx, [ebp - 0x19c]
call fcn.10015a80
mov dword [ebp - 4], 2
lea eax, [ebp - 0x19c]
push eax
push 0x5b47
push 0
push 0x13ed
lea eax, [ebp - 0x1c8]
push eax
call fcn.1002850f
add esp, 0x14
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x1002d4d4
push 0
push 0x2788
push 0x2854
push 0xb1c
push 0x4ff3
call fcn.100264ac
add esp, 0x14
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x19c]
push eax
push 0x12bb
push 0
call fcn.10026899
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.10015b02
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x70], 9
mov dword [ebp - 0x70], 0xfffffff4
jmp 0x1002d529
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff8
jl 0x1002d56a
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x68], 0
jmp 0x1002d546
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x15
je 0x1002d568
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1002d566
push 0x1a35
push 0
call fcn.100262fc
pop ecx
pop ecx
jmp 0x1002d53f
jmp 0x1002d522
and dword [ebp - 0x88], 0
jmp 0x1002d589
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x88], eax
jge 0x1002dc53
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x90], 0xfbefa5f9
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0xa8], 0x8e045dce
mov dword [ebp - 0x164], 0x1bca3396
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x1002d5e7
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff9
jg 0x1002d731
mov dword [ebp - 0x6c], 0x8c08872f
mov dword [ebp - 0xe8], 0xfffffffb
mov dword [ebp - 0x130], 0xd2fc
mov dword [ebp - 0x160], 0x14ba09a1
cmp dword [ebp - 0x6c], 0
je 0x1002d693
push 0xfffffffffffffffe
pop eax
sub eax, dword [ebp - 0xe8]
je 0x1002d693
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x90]
add eax, 0x39112e1f
jne 0x1002d668
xor eax, eax
jne 0x1002d668
and dword [ebp - 0xc8], 0
jmp 0x1002d672
mov dword [ebp - 0xc8], 1
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x1002d693
mov dword [ebp - 0x158], 1
jmp 0x1002d69a
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x6c], eax
jl 0x1002d6ae
mov dword [ebp - 0xf0], 1
jmp 0x1002d6b5
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xf0], eax
jg 0x1002d6d5
mov eax, 0xdca1
test eax, eax
je 0x1002d6d5
mov dword [ebp - 0xd0], 1
jmp 0x1002d6dc
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x130]
push eax
push 0x6b2d
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.1002b896
add esp, 0x28
jmp 0x1002d5e0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
jne 0x1002db14
mov dword [ebp - 0x190], 0xffff
mov dword [ebp - 0x18c], 0xffff
mov dword [ebp - 0x188], 0xffff
mov dword [ebp - 0x184], 0xffff
lea ecx, [ebp - 0x91]
call fcn.10008e13
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x20c]
call fcn.10015b2d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1f4]
call fcn.10015adc
mov dword [ebp - 4], 3
mov dword [ebp - 0x1d8], 0xb8bc588e
mov dword [ebp - 0x1e8], 0x934215e1
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x5c], 0
jmp 0x1002d7d0
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1002d7e3
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x4c], 0xd4081c29
jmp 0x1002d7c9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4c], 0
jmp 0x1002d808
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 3
jg 0x1002d8df
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x60], 0
jmp 0x1002d833
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1002d849
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x1a8], 1
jmp 0x1002d82c
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x4c]
lea ecx, [ebp - 0x1f4]
call fcn.10015b1e
cmp dword [eax], 0
jae 0x1002d86f
mov dword [ebp - 0xb4], 1
jmp 0x1002d876
and dword [ebp - 0xb4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x110], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1a8], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x110]
jg 0x1002d8c7
mov dword [ebp - 0xa4], 1
jmp 0x1002d8ce
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x114], eax
jmp 0x1002d7f3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f4]
call fcn.10015b02
push 0x2c7a
push dword [ebp - 0xfc]
push dword [ebp - 0x11c]
push 1
push dword [ebp - 0x1c]
push 0x6663
lea eax, [ebp - 0xa0]
push eax
call fcn.100242a8
add esp, 0x1c
mov dword [ebp - 0x14], 0x60b4ffb8
push 4
lea ecx, [ebp - 0x154]
call fcn.10015a80
mov dword [ebp - 4], 4
mov dword [ebp - 0x44], 0
jmp 0x1002d943
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002d959
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x108], 0xfffffff6
jmp 0x1002d93c
push 0x6b5
push 0x1c9b
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x154]
push eax
push 0
call fcn.1002a8f7
add esp, 0x14
mov dword [ebp - 0x14], 2
jmp 0x1002d988
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002dae6
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x108]
mov dword [ebp - 0x1e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x1cc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x108], 0
jge 0x1002d9d0
mov dword [ebp - 0xc4], 1
jmp 0x1002d9d7
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 0xc4]
sub esi, dword [ebp + eax*4 - 0x108]
push 0
lea ecx, [ebp - 0x154]
call fcn.10015b1e
add esi, dword [eax]
je 0x1002da16
push 3
lea ecx, [ebp - 0x154]
call fcn.10015b1e
cmp dword [eax], 0
je 0x1002da16
mov dword [ebp - 0xcc], 1
jmp 0x1002da1d
and dword [ebp - 0xcc], 0
push 0
lea ecx, [ebp - 0x154]
call fcn.10015b1e
mov ecx, dword [ebp - 0xcc]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0x108]
jle 0x1002da4a
mov dword [ebp - 0xd4], 1
jmp 0x1002da51
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
sub eax, 0xffff
cmp eax, 0xe6bb
jle 0x1002da6f
mov dword [ebp - 0xdc], 1
jmp 0x1002da76
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xdc]
jl 0x1002da8d
mov dword [ebp - 0xe4], 1
jmp 0x1002da94
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xe4], eax
jne 0x1002daab
mov dword [ebp - 0xec], 1
jmp 0x1002dab2
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0x4325
jne 0x1002daca
mov dword [ebp - 0xf4], 1
jmp 0x1002dad1
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x108], ecx
jmp 0x1002d981
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1002db00
push 0x732b
push 0
call fcn.10025f26
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x154]
call fcn.10015b02
jmp 0x1002d573
push 4
push 0x1000
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xfc]
add ecx, dword [eax + 0xc]
push ecx
push 0x9aa8
push 0x82e0
call fcn.100237ce
pop ecx
pop ecx
call eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x124]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xa0]
call fcn.100238ad
add esp, 0xc
mov dword [ebp - 0x12c], 6
push 1
lea ecx, [ebp - 0x1b4]
call fcn.10015a80
mov dword [ebp - 4], 5
push 1
lea ecx, [ebp - 0x204]
call fcn.10015a80
mov byte [ebp - 4], 6
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x1f8], 0
lea eax, [ebp - 0x54]
push eax
push 0x3fee
push 0
lea eax, [ebp - 0x1b4]
push eax
call fcn.10026600
add esp, 0x10
mov dword [ebp - 0x54], 0
jmp 0x1002dbd5
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1002dbf1
push dword [ebp - 0x54]
lea ecx, [ebp - 0x204]
call fcn.10015b1e
mov dword [eax], 0x976ff55e
jmp 0x1002dbce
mov esi, dword [ebp - 0x12c]
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10015b1e
mov dword [eax], esi
lea eax, [ebp - 0x134]
push eax
push 1
call fcn.10025f26
pop ecx
pop ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x204]
call fcn.10015b02
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b4]
call fcn.10015b02
lea eax, [ebp - 0xa0]
push eax
push 0x730d
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.100281bc
add esp, 0x10
jmp 0x1002d573
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret