Function at 0x100290b9
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a8
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002912b
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x168]
mov ecx, dword [ecx]
add ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
mov dword [eax], ecx
jmp 0x1002a06b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
push 1
call fcn.10024bf2
pop ecx
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 8], eax
and dword [ebp - 0x7c], 0
jmp 0x10029164
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 8]
add eax, 0x28
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x7c], eax
jge 0x1002a06b
mov dword [ebp - 0x98], 0x16f93bd5
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x150], 0x9f486485
mov dword [ebp - 0x1c], 0
jmp 0x100291a4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x100291ba
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x208], 0xffffffff
jmp 0x1002919d
mov dword [ebp - 0x1c], 0
jmp 0x100291ca
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100291e0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8c], 0
jmp 0x100291c3
mov byte [ebp - 0x2a], 0
push 1
push 0x7ce4
lea eax, [ebp - 0x2a]
push eax
push 0x4013
push 0x39e8
push 0x56c5
call fcn.10025d81
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x208]
mov dword [ebp - 0x238], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x208]
mov dword [ebp - 0x218], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c], 0xe7ad53a
jg 0x1002924b
mov dword [ebp - 0x194], 1
jmp 0x10029252
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
mov dword [ebp - 0x20c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
mov dword [ebp - 0x240], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x208]
cmp dword [ebp - 0xf8], eax
jl 0x10029299
mov dword [ebp - 0xec], 1
jmp 0x100292a0
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x98], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp dword [ebp - 0x98], eax
jg 0x100292cd
mov dword [ebp - 0x14c], 1
jmp 0x100292d4
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp dword [ebp - 0x14c], eax
jge 0x100292f5
mov dword [ebp - 0x120], 1
jmp 0x100292fc
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
sub eax, 0xf5a2
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x8c]
jge 0x10029322
mov dword [ebp - 0xa0], 1
jmp 0x10029329
and dword [ebp - 0xa0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x208]
cmp eax, dword [ebp - 0xa0]
jge 0x1002934a
mov dword [ebp - 0xa8], 1
jmp 0x10029351
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0xa8]
cmp eax, 6
je 0x1002936e
mov dword [ebp - 0x138], 1
jmp 0x10029375
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x1002939a
mov dword [ebp - 0xb0], 1
jmp 0x100293a1
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x188], eax
mov dword [ebp - 4], 0xed9ba07e
mov dword [ebp - 0x74], 0xd9ee1c97
mov dword [ebp - 0x30], 0xfd77ccca
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x174], 0xfffffffe
push 0
call fcn.10027032
pop ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x74], 0x85faafe3
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
je 0x10029414
mov dword [ebp - 0x100], 1
jmp 0x1002941b
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x100], eax
jl 0x10029435
cmp dword [ebp - 0x30], 0
jne 0x10029435
and dword [ebp - 0xb8], 0
jmp 0x1002943f
mov dword [ebp - 0xb8], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 4], eax
jge 0x10029456
mov dword [ebp - 0x128], 1
jmp 0x1002945d
and dword [ebp - 0x128], 0
imul eax, dword [ebp - 0x128], 0x78ef
sub eax, 0xffff
cmp eax, 2
je 0x1002947d
mov dword [ebp - 0xc0], 1
jmp 0x10029484
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xc0], eax
jle 0x1002949b
mov dword [ebp - 0x108], 1
jmp 0x100294a2
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x108], eax
je 0x100294b9
mov dword [ebp - 0xc8], 1
jmp 0x100294c0
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xc8], eax
jne 0x100294d7
mov dword [ebp - 0x148], 1
jmp 0x100294de
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x148]
je 0x100294f5
mov dword [ebp - 0xd0], 1
jmp 0x100294fc
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x30]
jge 0x10029516
mov dword [ebp - 0x110], 1
jmp 0x1002951d
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x110]
imul eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1ac]
jl 0x1002953e
mov dword [ebp - 0xd8], 1
jmp 0x10029545
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xd8], eax
jg 0x1002955e
or eax, 0xffffffff
jne 0x1002955e
and dword [ebp - 0x130], 0
jmp 0x10029568
mov dword [ebp - 0x130], 1
mov eax, dword [ebp - 0x130]
neg eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1af6658d
jne 0x1002958d
or eax, 0xffffffff
je 0x1002958d
mov dword [ebp - 0xe0], 1
jmp 0x10029594
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x100295c8
mov dword [ebp - 0x118], 1
jmp 0x100295cf
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x6c], 0x22e9
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0xac], 0xfffe
mov dword [ebp - 0xc], 0
jmp 0x10029606
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x10029619
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x40], 0xfffffff7
jmp 0x100295ff
mov dword [ebp - 0xc], 0
jmp 0x10029629
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x1002963f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x264], 0xfffffff6
jmp 0x10029622
push 4
pop eax
test eax, eax
je 0x1002970f
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x6c]
sub ecx, 0x4111d018
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x40]
jge 0x10029671
mov dword [ebp - 0xe8], 1
jmp 0x10029678
and dword [ebp - 0xe8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
cmp eax, dword [ebp - 0xe8]
jl 0x10029696
mov dword [ebp - 0x140], 1
jmp 0x1002969d
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0xffffffff
jg 0x100296b2
mov dword [ebp - 0x19c], 1
jmp 0x100296b9
and dword [ebp - 0x19c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0x220], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0xf0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xf0]
mov dword [ebp + eax - 0x264], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
imul eax, dword [ebp - 0xf0]
sub eax, 0x36efa05e
je 0x1002970f
mov dword [ebp - 0x94], 1
jmp 0x10029716
and dword [ebp - 0x94], 0
cmp dword [ebp - 0x94], 0xc576
jne 0x1002972e
mov dword [ebp - 0x9c], 1
jmp 0x10029735
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
sub eax, 0x61a6b719
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x40]
sub eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
je 0x1002975f
mov dword [ebp - 0xa4], 1
jmp 0x10029766
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x10029798
mov dword [ebp - 0xb4], 1
jmp 0x1002979f
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x100298e3
push 0x4000
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
mov eax, dword [ebp - 8]
push dword [eax + 8]
push 0x52a2
push 0x4bc0
call fcn.100233f8
pop ecx
pop ecx
call eax
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x1a4], 3
mov dword [ebp - 0x20], 0xfffffffa
jmp 0x10029801
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xe
jne 0x100298bb
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0x184], 0x5b7d
mov dword [ebp - 0x54], 0
jmp 0x10029836
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1002984c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x298], 8
jmp 0x1002982f
mov dword [ebp - 0x70], 3
jmp 0x1002985c
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x100298a3
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x5c], 3
jmp 0x10029879
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x100298a1
push 0
lea eax, [ebp - 0x1bc]
push eax
push 0xea4
push 0x22b0
push 0x1e69
call fcn.1002641c
add esp, 0x14
jmp 0x10029872
jmp 0x10029855
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x298]
mov dword [ebp - 0x184], eax
jmp 0x100297fa
mov dword [ebp - 0x20], 0xfffffffd
jmp 0x100298cb
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe6
jge 0x100298de
cmp dword [ebp - 0x1a4], 0
je 0x100298dc
jmp 0x100298de
jmp 0x100298c4
jmp 0x10029154
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x38], 0x70c3099c
mov dword [ebp - 0x18c], 0xfd9d0890
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x154], 0x9b69
mov dword [ebp - 0x21c], 0xdad816f9
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x1ec], 1
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x1e0], 1
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x14], 0
jmp 0x10029972
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10029988
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1f8], 0x3718bd85
jmp 0x1002996b
mov dword [ebp - 0x14], 0
jmp 0x10029998
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100299ae
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1cc], 0
jmp 0x10029991
mov dword [ebp - 0x84], 0xfffffff9
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x84], eax
jne 0x100299cf
mov dword [ebp - 0xbc], 1
jmp 0x100299d6
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x38], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1cc]
sub eax, 0x30b6
cmp eax, dword [ebp - 0x38]
jg 0x10029a01
mov dword [ebp - 0xc4], 1
jmp 0x10029a08
and dword [ebp - 0xc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
cmp dword [ebp - 0xc4], eax
jle 0x10029a29
mov dword [ebp - 0xd4], 1
jmp 0x10029a30
and dword [ebp - 0xd4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
mov dword [ebp - 0xcc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov dword [ebp + eax - 0x1f8], ecx
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xd4]
jle 0x10029a70
mov dword [ebp - 0xdc], 1
jmp 0x10029a77
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0xdc], eax
jne 0x10029a91
mov dword [ebp - 0x1b4], 1
jmp 0x10029a98
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x38]
cmp eax, 0x8491f199
ja 0x10029ac0
mov dword [ebp - 0xf4], 1
jmp 0x10029ac7
and dword [ebp - 0xf4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1ec]
dec eax
mov dword [ebp - 0xe4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe4]
mov dword [ebp + eax - 0x1ec], ecx
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jl 0x10029b19
mov dword [ebp - 0xfc], 1
jmp 0x10029b20
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
shl eax, 3
cmp dword [ebp - 0x84], eax
jl 0x10029b3d
mov dword [ebp - 0x104], 1
jmp 0x10029b44
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0xc769867f
je 0x10029b5c
mov dword [ebp - 0x170], 1
jmp 0x10029b63
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x230], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x244], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1cc]
cmp dword [ebp - 0x178], eax
je 0x10029b96
xor eax, eax
je 0x10029bb2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f8], 0
je 0x10029bb2
mov dword [ebp - 0x10c], 1
jmp 0x10029bb9
and dword [ebp - 0x10c], 0
imul eax, dword [ebp - 0x10c], 0xf455
mov dword [ebp - 0x180], eax
push 0x3270
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x190]
push eax
push 0x3a53
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1b8]
push eax
push 0
push 0x4188
lea eax, [ebp - 0x198]
push eax
call fcn.10026543
add esp, 0x24
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x10], 0
jmp 0x10029c19
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10029c2f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x288], 0xe48d327c
jmp 0x10029c12
mov dword [ebp - 0x10], 0
jmp 0x10029c3f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10029c55
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1dc], 0xdb505206
jmp 0x10029c38
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1dc], 0
jmp 0x10029c83
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1dc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1dc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1dc], 4
jge 0x10029cad
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1dc]
mov dword [ebp + eax*4 - 0x288], 0
jmp 0x10029c68
mov dword [ebp - 0x78], 0xfffffff8
jmp 0x10029cbd
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffffa
jne 0x10029ceb
mov dword [ebp - 0x1a0], 0x3707
cmp dword [ebp - 0x1a0], 0
je 0x10029cd8
jmp 0x10029ceb
mov byte [ebp - 0x31], 0
lea eax, [ebp - 0x31]
push eax
push 0
call fcn.100274f8
pop ecx
pop ecx
jmp 0x10029cb6
push dword [ebp - 0x64]
push 0x22da
push dword [ebp - 8]
push 0
lea eax, [ebp - 0x144]
push eax
call fcn.1002661e
add esp, 0x14
mov dword [ebp - 0x24], 0x32b1cecb
mov dword [ebp - 0x58], 0xfffffffa
mov dword [ebp - 0x18], 0
jmp 0x10029d25
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10029d38
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0
jmp 0x10029d1e
mov dword [ebp - 0x18], 0
jmp 0x10029d48
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10029d5e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2a8], 0x8d239be9
jmp 0x10029d41
mov dword [ebp - 0x24], 0
jmp 0x10029d6e
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10029fd4
mov dword [ebp - 0x3c], 0x9f7fd1e8
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x22c], 0x145c
mov dword [ebp - 0x1b0], 0xa4087b33
mov dword [ebp - 0x48], 0
jmp 0x10029daa
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10029dc0
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x270], 4
jmp 0x10029da3
mov dword [ebp - 0x3c], 0
jmp 0x10029dd0
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10029e9b
mov dword [ebp - 0x28], 0xb9dd952e
mov dword [ebp - 0x4c], 0xfffffffd
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0x234], 0x253a34c8
mov dword [ebp - 0x28], 0
jmp 0x10029e0c
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10029e2e
mov dword [ebp - 0x1a8], 0xffffffff
lea eax, [ebp - 0x1a8]
push eax
push 0
call fcn.100273c2
pop ecx
pop ecx
jmp 0x10029e05
mov dword [ebp - 0x4c], 0
jmp 0x10029e3e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10029e96
mov dword [ebp - 0x28], 0
jmp 0x10029e54
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10029e94
mov dword [ebp - 0x50], 0
jmp 0x10029e6a
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10029e92
mov byte [ebp - 0x2b], 0
movzx eax, byte [ebp - 0x2b]
test eax, eax
je 0x10029e90
push 0
push 0x6d18
push 0x33f3
call fcn.1002d65c
add esp, 0xc
jmp 0x10029e63
jmp 0x10029e4d
jmp 0x10029e37
jmp 0x10029dc9
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x114], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0x270], ecx
cmp dword [ebp - 0x114], 0
je 0x10029eed
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0x58], eax
jl 0x10029eed
or eax, 0xffffffff
je 0x10029eed
mov dword [ebp - 0x11c], 1
jmp 0x10029ef4
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x11c]
jge 0x10029f0b
mov dword [ebp - 0x124], 1
jmp 0x10029f12
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0xb2bc
jge 0x10029f2a
mov dword [ebp - 0x12c], 1
jmp 0x10029f31
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x12c], eax
je 0x10029f48
mov dword [ebp - 0x134], 1
jmp 0x10029f4f
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 7
jae 0x10029f64
mov dword [ebp - 0x13c], 1
jmp 0x10029f6b
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0x254], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x44], 0xc28c
test eax, eax
jne 0x10029fa8
cmp dword [ebp - 0x3c], 0
jne 0x10029fa8
and dword [ebp - 0x80], 0
jmp 0x10029faf
mov dword [ebp - 0x80], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x80]
mov dword [ebp + eax - 0x2a8], ecx
mov eax, dword [ebp - 0x1b0]
add eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x24]
mov dword [ebp + ecx*4 - 0x44], eax
jmp 0x10029d67
cmp dword [ebp - 0x144], 0
jbe 0x1002a066
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x60], 0
jmp 0x10029ff8
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1002a00e
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x278], 0x1713
jmp 0x10029ff1
mov dword [ebp - 0x68], 0
jmp 0x1002a01e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jg 0x1002a03a
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1002a038
push 0
call fcn.1002c370
pop ecx
jmp 0x1002a017
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x1b8]
push dword [ebp - 0x144]
mov eax, dword [ebp - 8]
push dword [eax + 8]
push 0x52a2
push 0x82d0
call fcn.100233f8
pop ecx
pop ecx
call eax
jmp 0x10029154
mov esp, ebp
pop ebp
ret