Function at 0x1002fde7
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008dda6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30c
push esi
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1002fe70
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x58]
mov dword [eax], 0
jmp 0x1002fe4b
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, dword [ebp - 0x58]
cmp dword [eax], 1
jge 0x1002fe6b
mov eax, dword [ebp - 0x58]
push dword [eax]
mov ecx, dword [ebp - 0x22c]
call fcn.100189f7
mov dword [eax], 0x392f
jmp 0x1002fe40
jmp 0x100311b8
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x74], eax
push 4
lea ecx, [ebp - 0x44]
call fcn.1001898a
and dword [ebp - 4], 0
mov dword [ebp - 0x60], 9
mov dword [ebp - 0x30], 0x4edd6794
mov dword [ebp - 0x38], 0x996bd0c7
mov dword [ebp - 0xe4], 0xf98e72cc
push 4
lea ecx, [ebp - 0x20c]
call fcn.1001898a
mov byte [ebp - 4], 1
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x214], 0xfffffffa
mov dword [ebp - 0x278], 0xbdb3881a
mov dword [ebp - 0x274], 0xbdb3881a
mov dword [ebp - 0x270], 0xbdb3881a
mov dword [ebp - 0x26c], 0xbdb3881a
mov dword [ebp - 0x4c], 0
jmp 0x1002ff12
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1002ff28
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x88], 0xfffffffe
jmp 0x1002ff0b
lea eax, [ebp - 0x4c]
push eax
push 0
lea eax, [ebp - 0x44]
push eax
call fcn.1002a48b
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
push 0x5e86
push 0x5b94
push 0
lea eax, [ebp - 0x20c]
push eax
call fcn.1002f490
add esp, 0x14
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov dword [eax], 2
jmp 0x1002ff8c
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xfc]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
cmp dword [eax], 0
jl 0x10030752
mov dword [ebp - 0x10], 0xb11accba
push 1
lea ecx, [ebp - 0xb0]
call fcn.1001898a
mov byte [ebp - 4], 2
mov dword [ebp - 0x50], 0xd8475761
mov dword [ebp - 0x1b0], 0xdc1aabb7
mov dword [ebp - 0x1e0], 0xffffffff
mov dword [ebp - 0x1dc], 0x5494
mov dword [ebp - 0x224], 0x58d4
mov dword [ebp - 0x1c], 0
jmp 0x1002fff6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10030012
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb0]
call fcn.100189f7
mov dword [eax], 1
jmp 0x1002ffef
mov dword [ebp - 0x1c], 0
jmp 0x10030022
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10030038
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e4], 0x1a91f101
jmp 0x1003001b
mov dword [ebp - 0x10], 0
jmp 0x10030048
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x10030552
mov dword [ebp - 0x7c], 0
jmp 0x10030062
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10030078
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x23c], 0x3e3585ca
jmp 0x1003005b
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x88], 0
jne 0x100301d1
mov eax, 0x3fa3
test eax, eax
je 0x10030199
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x88], 0
jne 0x100300d7
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x88], 0
jge 0x100300bc
mov dword [ebp - 0x1c0], 1
jmp 0x100300c3
and dword [ebp - 0x1c0], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x1c0]
jne 0x100300d7
and dword [ebp - 0x1bc], 0
jmp 0x100300e1
mov dword [ebp - 0x1bc], 1
cmp dword [ebp - 0x1bc], 0x7a140552
jle 0x100300f9
mov dword [ebp - 0x148], 1
jmp 0x10030100
and dword [ebp - 0x148], 0
push 2
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0x148]
imul ecx, dword [eax]
cmp ecx, 7
jge 0x10030124
mov dword [ebp - 0xbc], 1
jmp 0x1003012b
and dword [ebp - 0xbc], 0
push 0
lea ecx, [ebp - 0xb0]
call fcn.100189f7
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [eax]
je 0x1003014e
mov dword [ebp - 0x19c], 1
jmp 0x10030155
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0xc0e
jne 0x10030168
push 2
pop eax
test eax, eax
jne 0x10030178
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x10030178
and dword [ebp - 0xc4], 0
jmp 0x10030182
mov dword [ebp - 0xc4], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xc4], eax
jl 0x10030199
mov dword [ebp - 0x1a4], 1
jmp 0x100301a0
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xb236
jl 0x100301b8
mov dword [ebp - 0x1ac], 1
jmp 0x100301bf
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
dec eax
jne 0x100301d1
and dword [ebp - 0xd0], 0
jmp 0x100301db
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0xd0], eax
jge 0x100301f9
mov dword [ebp - 0x188], 1
jmp 0x10030200
and dword [ebp - 0x188], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax - 0x23c], ecx
push 0
lea ecx, [ebp - 0xb0]
call fcn.100189f7
cmp dword [eax], 0
jne 0x100304e7
push 0
lea ecx, [ebp - 0xb0]
call fcn.100189f7
mov ecx, dword [ebp - 0x50]
cmp dword [eax], ecx
jle 0x10030249
mov dword [ebp - 0xd8], 1
jmp 0x10030250
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x88]
sub eax, dword [ebp - 0xd8]
mov dword [ebp - 0x150], 1
jmp 0x10030273
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x150], eax
jle 0x1003028a
mov dword [ebp - 0xe0], 1
jmp 0x10030291
and dword [ebp - 0xe0], 0
push 0
lea ecx, [ebp - 0xb0]
call fcn.100189f7
mov ecx, dword [ebp - 0xe0]
cmp ecx, dword [eax]
jne 0x100302b4
mov dword [ebp - 0x1a8], 1
jmp 0x100302bb
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 8
jne 0x100302d0
mov dword [ebp - 0xe8], 1
jmp 0x100302d7
and dword [ebp - 0xe8], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0xe8]
cmp ecx, dword [eax]
je 0x100302f7
mov dword [ebp - 0x158], 1
jmp 0x100302fe
and dword [ebp - 0x158], 0
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0x158]
cmp ecx, dword [eax]
jle 0x1003031e
mov dword [ebp - 0xf0], 1
jmp 0x10030325
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0xf0], eax
jg 0x10030343
mov dword [ebp - 0x190], 1
jmp 0x1003034a
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 0xfffffff7
jae 0x1003035f
mov dword [ebp - 0xf8], 1
jmp 0x10030366
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xf8], eax
jg 0x1003037d
mov dword [ebp - 0x234], 1
jmp 0x10030384
and dword [ebp - 0x234], 0
push 0
lea ecx, [ebp - 0xb0]
call fcn.100189f7
cmp dword [eax], 0xbffa
je 0x100303a5
mov dword [ebp - 0x160], 1
jmp 0x100303ac
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 8
jb 0x100303d0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x88], 0
je 0x100303d0
mov dword [ebp - 0x100], 1
jmp 0x100303d7
and dword [ebp - 0x100], 0
push 0
lea ecx, [ebp - 0xb0]
call fcn.100189f7
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax]
jl 0x100303fa
mov dword [ebp - 0x230], 1
jmp 0x10030401
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x88], 2
jne 0x10030423
mov dword [ebp - 0x1b8], 1
jmp 0x1003042a
and dword [ebp - 0x1b8], 0
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0x1b8]
cmp ecx, dword [eax]
jne 0x1003044a
mov dword [ebp - 0x108], 1
jmp 0x10030451
and dword [ebp - 0x108], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x2e4], ecx
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x10]
sub esi, dword [ebp + eax*4 - 0x88]
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
cmp esi, dword [eax]
jl 0x10030492
mov dword [ebp - 0x210], 1
jmp 0x10030499
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp - 0x2c8], eax
push 2
lea ecx, [ebp - 0x44]
call fcn.100189f7
cmp dword [eax], 0x5a815809
jg 0x100304c7
mov dword [ebp - 0x168], 1
jmp 0x100304ce
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
sub eax, 0xfff8
mov dword [ebp - 0x38], eax
jne 0x100304e7
and dword [ebp - 0x198], 0
jmp 0x100304f1
mov dword [ebp - 0x198], 1
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x23c]
mov dword [ebp - 0x110], eax
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0x110]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
add eax, dword [ebp - 0x198]
je 0x1003053a
cmp dword [ebp - 0x10], 0
je 0x1003053a
mov dword [ebp - 0x118], 1
jmp 0x10030541
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1b0], eax
jmp 0x10030041
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
cmp dword [ebp - 0x1e0], 0
je 0x100305dc
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2ac], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e4]
mov dword [ebp - 0x288], eax
push 0
lea ecx, [ebp - 0xb0]
call fcn.100189f7
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x1dc], 0
jl 0x100305b5
mov dword [ebp - 0x170], 1
jmp 0x100305bc
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x38], 0x49da
test eax, eax
je 0x100305dc
mov dword [ebp - 0x120], 1
jmp 0x100305e3
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x1b0], eax
push 1
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov esi, eax
push 2
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x10030617
mov dword [ebp - 0x128], 1
jmp 0x1003061e
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 0x8cfe7a21
jb 0x10030636
mov dword [ebp - 0x178], 1
jmp 0x1003063d
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x178], eax
jge 0x10030654
mov dword [ebp - 0x130], 1
jmp 0x1003065b
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0x1551026
jne 0x10030673
mov dword [ebp - 0x1a0], 1
jmp 0x1003067a
and dword [ebp - 0x1a0], 0
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0x1a0]
cmp ecx, dword [eax]
jne 0x1003069a
mov dword [ebp - 0x138], 1
jmp 0x100306a1
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x138], eax
jl 0x100306bb
mov dword [ebp - 0x180], 1
jmp 0x100306c2
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x180], eax
jg 0x100306d9
mov dword [ebp - 0x140], 1
jmp 0x100306e0
and dword [ebp - 0x140], 0
push 1
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0x140]
cmp ecx, dword [eax]
jle 0x10030700
mov dword [ebp - 0x1b4], 1
jmp 0x10030707
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1b4], eax
jl 0x1003071e
mov dword [ebp - 0xc8], 1
jmp 0x10030725
and dword [ebp - 0xc8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e4]
add eax, dword [ebp - 0xc8]
mov dword [ebp - 0xe4], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.100189f2
jmp 0x1002ff6b
mov esi, dword [ebp - 0x60]
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov dword [eax], esi
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
mov esi, dword [ebp - 0xa0]
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
cmp dword [eax], esi
jg 0x1003078e
mov dword [ebp - 0xcc], 1
jmp 0x10030795
and dword [ebp - 0xcc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
jne 0x100307b1
mov dword [ebp - 0xd4], 1
jmp 0x100307b8
and dword [ebp - 0xd4], 0
push 2
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov eax, dword [eax]
imul eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd4]
sub ecx, dword [ebp - 0x30]
cmp eax, ecx
jl 0x100307e4
mov dword [ebp - 0x1e4], 1
jmp 0x100307eb
and dword [ebp - 0x1e4], 0
push 1
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0x30]
cmp dword [eax], ecx
jle 0x10030808
mov dword [ebp - 0x8c], 1
jmp 0x1003080f
and dword [ebp - 0x8c], 0
push 3
lea ecx, [ebp - 0x44]
call fcn.100189f7
mov ecx, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x8c], eax
je 0x10030838
mov dword [ebp - 0xdc], 1
jmp 0x1003083f
and dword [ebp - 0xdc], 0
mov esi, dword [ebp - 0x30]
add esi, dword [ebp - 0xdc]
sub esi, dword [ebp - 0xe4]
push 1
lea ecx, [ebp - 0x20c]
call fcn.100189f7
add esi, dword [eax]
cmp esi, dword [ebp - 0x30]
jl 0x1003086e
mov dword [ebp - 0xec], 1
jmp 0x10030875
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0xfffffffa
ja 0x1003088a
mov dword [ebp - 0xf4], 1
jmp 0x10030891
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x214]
add eax, dword [ebp - 0xf4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x278]
jne 0x100308c7
push 0
lea ecx, [ebp - 0x20c]
call fcn.100189f7
cmp dword [eax], 0
jne 0x100308c7
and dword [ebp - 0xb4], 0
jmp 0x100308d1
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xb4], eax
jle 0x100308e8
mov dword [ebp - 0x104], 1
jmp 0x100308ef
and dword [ebp - 0x104], 0
mov dword [ebp - 0x38], 0xea3e
mov esi, dword [ebp - 0x38]
sub esi, dword [ebp - 0x104]
push 1
lea ecx, [ebp - 0x20c]
call fcn.100189f7
mov dword [eax], esi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20c]
call fcn.100189f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.100189f2
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x10c], 0x92443250
mov dword [ebp - 0x20], 0xc4ab274b
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x1ec], 0xc9e5
push 2
lea ecx, [ebp - 0x268]
call fcn.1001898a
mov dword [ebp - 4], 3
mov dword [ebp - 0x78], 0
jmp 0x1003097e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1003099a
push dword [ebp - 0x78]
lea ecx, [ebp - 0x268]
call fcn.100189f7
mov dword [eax], 0x4f27d270
jmp 0x10030977
mov dword [ebp - 0x10c], 0xffffffff
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x100309cf
mov dword [ebp - 0x11c], 1
jmp 0x100309d6
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x20], 0
jmp 0x100309f2
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x10030a0f
push dword [ebp - 0x20]
lea ecx, [ebp - 0x268]
call fcn.100189f7
cmp dword [eax], 0
je 0x10030a0d
jmp 0x10030a0f
jmp 0x100309eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x268]
call fcn.100189f2
push 2
lea ecx, [ebp - 0x25c]
call fcn.1001898a
mov dword [ebp - 4], 4
mov dword [ebp - 0x228], 0x260417be
push 0x2324
push 0x1047
lea eax, [ebp - 0x25c]
push eax
push 0x6ad5
push 0
lea eax, [ebp - 0x2a0]
push eax
call fcn.1002e04a
add esp, 0x18
push 0x5a99
push 0
lea eax, [ebp - 0x228]
push eax
push 0x4d6a
lea eax, [ebp - 0x25c]
push eax
push 0x5e75
call fcn.1003434a
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x25c]
call fcn.100189f2
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
push 3
lea ecx, [ebp - 0x2c0]
call fcn.1001898a
mov dword [ebp - 4], 5
mov dword [ebp - 0x2a8], 0xffffffff
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x250], 0xfffffffd
mov dword [ebp - 0x24c], 0xfffffffd
mov dword [ebp - 0x248], 0xfffffffd
mov dword [ebp - 0x244], 0xfffffffd
lea ecx, [ebp - 0x95]
call fcn.10009413
push eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x310]
call fcn.10018a06
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x300]
call fcn.100189cc
mov byte [ebp - 4], 6
mov dword [ebp - 0x2d4], 9
mov dword [ebp - 0x284], 0xc865
mov dword [ebp - 0x280], 0
push 0
push 0x6453
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.1002bf20
add esp, 0x10
mov dword [ebp - 0x54], 0
jmp 0x10030b7f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10030b95
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x2f4], 0x4145c174
jmp 0x10030b78
push 0x5ee3
push 0x5b99
push 0
call fcn.1002ba33
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2f4], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x300]
call fcn.100189f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.100189f2
and dword [ebp - 0x94], 0
jmp 0x10030c01
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x94], eax
jge 0x100311b8
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 0
jne 0x10030e50
mov dword [ebp - 0x6c], 0
jmp 0x10030c33
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10030c49
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x308], 0x2eb90da1
jmp 0x10030c2c
push 0
call fcn.10029717
pop ecx
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x10030c6b
push 0x1cb6
push 0
call fcn.1002b8bd
pop ecx
pop ecx
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x17c]
push eax
push 0x1268
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.1002df9f
add esp, 0x18
mov dword [ebp - 0x5c], 0x6580
mov dword [ebp - 0x18], 0xd53a38d0
mov dword [ebp - 0xa4], 0xfffffffb
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x164], 0x33bc6c2d
mov dword [ebp - 0x15c], 0x8cdb5cf
mov dword [ebp - 0x16c], 0x102d
mov dword [ebp - 0x1fc], 0xffffffff
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
lea eax, [ebp - 0xa4]
push eax
call fcn.1002bd34
add esp, 0x10
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x18], 0x4043ca31
jle 0x10030d14
mov dword [ebp - 0x124], 1
jmp 0x10030d1b
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x124], eax
je 0x10030d32
mov dword [ebp - 0x12c], 1
jmp 0x10030d39
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x12c], eax
jge 0x10030d50
mov dword [ebp - 0x134], 1
jmp 0x10030d57
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0xe76dcb0c
je 0x10030d6f
mov dword [ebp - 0x21c], 1
jmp 0x10030d76
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x5c], 0
jne 0x10030d82
cmp dword [ebp - 0x5c], 0
je 0x10030d94
cmp dword [ebp - 0x18], 0
je 0x10030d94
mov dword [ebp - 0x144], 1
jmp 0x10030d9b
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x144]
jg 0x10030dbe
mov dword [ebp - 0x14c], 1
jmp 0x10030dc5
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0x35412097
jne 0x10030ddd
mov dword [ebp - 0x154], 1
jmp 0x10030de4
and dword [ebp - 0x154], 0
mov dword [ebp - 0xa4], 0x3038
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x154]
cmp dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x15c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x16c], eax
jl 0x10030e38
mov dword [ebp - 0x174], 1
jmp 0x10030e3f
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1fc], eax
jmp 0x10030beb
mov dword [ebp - 0x28c], 6
mov dword [ebp - 0x1f0], 0xd7d393e7
mov dword [ebp - 0x1d0], 0xfff8
mov dword [ebp - 0x9c], 0x29c4ddb8
mov dword [ebp - 0x220], 8
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x2b4], 0xffffffff
mov dword [ebp - 0x294], 0x98bbeb92
mov dword [ebp - 0x2d0], 6
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x1d8], 0xfffffffd
mov dword [ebp - 0x1e8], 0xa44bab92
mov dword [ebp - 0x68], 0
jmp 0x10030ed8
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10030eee
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x318], 0
jmp 0x10030ed1
mov dword [ebp - 0x9c], 1
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0x212d
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x9c]
push eax
push 0
lea eax, [ebp - 0x1f0]
push eax
call fcn.1002b923
add esp, 0x20
push 4
push 0x1000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x17c]
add ecx, dword [eax + 0xc]
push ecx
push 0x249a
push 0x222a
call fcn.10028aee
pop ecx
pop ecx
call eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1f8]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x90]
call fcn.10028d1a
add esp, 0xc
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x200], 0xfffffffe
mov dword [ebp - 0x28], 0
jmp 0x10030fb9
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jl 0x100311a7
mov dword [ebp - 0x24], 0x64c7b7f6
mov dword [ebp - 0x64], 0x8ace4b0a
mov dword [ebp - 0x70], 0
jmp 0x10030fe1
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x10030ff7
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x1c8], 0xf51a
jmp 0x10030fda
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x64], 0x885ea6ed
jbe 0x10031027
mov dword [ebp - 0x184], 1
jmp 0x1003102e
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x24], 1
jle 0x10031049
mov dword [ebp - 0x18c], 1
jmp 0x10031050
and dword [ebp - 0x18c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c8]
cmp dword [ebp - 0x18c], eax
jle 0x10031071
mov dword [ebp - 0x194], 1
jmp 0x10031078
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 8
jle 0x1003108d
mov dword [ebp - 0xb8], 1
jmp 0x10031094
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c8]
add eax, dword [ebp - 0xb8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1c8]
jle 0x100310c2
mov dword [ebp - 0xc0], 1
jmp 0x100310c9
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xc0]
jl 0x100310f2
mov byte [ebp - 0x34], 0
push 0x53f5
push 0
lea eax, [ebp - 0x34]
push eax
push 0x2514
call fcn.1002b0a4
add esp, 0x10
jmp 0x10031165
mov dword [ebp - 0x24], 0xffffffe6
jmp 0x10031102
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xe
jge 0x1003111e
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x1003111c
push 1
call fcn.10029717
pop ecx
jmp 0x100310fb
mov dword [ebp - 0x48], 0
jmp 0x1003112e
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x10031165
mov dword [ebp - 0x64], 0
jmp 0x10031144
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1003115b
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x1c8], 0
je 0x10031159
jmp 0x1003115b
jmp 0x1003113d
cmp dword [ebp - 0x28], 0
je 0x10031163
jmp 0x10031127
jmp 0x10031127
mov eax, dword [ebp - 0x200]
add eax, 0x370c
je 0x1003118e
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1003118c
push 0
push 0x3877
call fcn.1002bede
pop ecx
pop ecx
jmp 0x100311a2
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x100311a2
push 0
call fcn.1002d65a
pop ecx
jmp 0x10030fb2
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
jmp 0x10030beb
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret