Function at 0x1002c671
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f4
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1002c76d
mov dword [ebp - 0x188], 0xf89b5461
mov dword [ebp - 0x80], 4
mov dword [ebp - 0x148], 0xf8d19c92
mov dword [ebp - 0x1a0], 0xfffffff8
mov dword [ebp - 0x7c], 0
jmp 0x1002c6bb
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x1002c6d1
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x1b4], 0x69bd
jmp 0x1002c6b4
mov byte [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x1002c6e5
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x80], eax
jne 0x1002c733
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b4], 5
jle 0x1002c709
mov dword [ebp - 0x120], 1
jmp 0x1002c710
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x80], eax
jne 0x1002c733
mov dword [ebp - 0x150], 1
jmp 0x1002c73a
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0
jne 0x1002c74f
mov dword [ebp - 0xb0], 1
jmp 0x1002c756
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1a0], eax
jmp 0x1002d5cc
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0xc], 0xbac64a68
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x54], 0
jmp 0x1002c7ad
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1002c7c0
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x34], 0xdba33992
jmp 0x1002c7a6
mov dword [ebp - 0xc], 0
jmp 0x1002c7d0
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x1d
je 0x1002c805
mov dword [ebp - 0x30], 0xda5043c4
mov dword [ebp - 0x30], 0
jmp 0x1002c7ed
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x1002c803
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp + ecx*4 - 0x34], eax
jmp 0x1002c7e6
jmp 0x1002c7c9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x34]
cmp eax, dword [ebp - 0xc]
jne 0x1002c833
mov dword [ebp - 0xf8], 1
jmp 0x1002c83a
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xfe924f63
je 0x1002c852
mov dword [ebp - 0xb8], 1
jmp 0x1002c859
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xb8], eax
jl 0x1002c870
mov dword [ebp - 0x100], 1
jmp 0x1002c877
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x100], eax
jge 0x1002c88e
mov dword [ebp - 0xc0], 1
jmp 0x1002c895
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x976d9935
jne 0x1002c8b9
mov dword [ebp - 0xc8], 1
jmp 0x1002c8c0
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0xc8]
jle 0x1002c8d7
mov dword [ebp - 0x110], 1
jmp 0x1002c8de
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x110]
imul eax, eax, 0xf34e
cmp eax, dword [ebp - 0x14]
jg 0x1002c908
mov eax, 0xed25e425
test eax, eax
je 0x1002c908
mov dword [ebp - 0xd0], 1
jmp 0x1002c90f
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xd0]
jle 0x1002c926
mov dword [ebp - 0x118], 1
jmp 0x1002c92d
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x118]
sub eax, dword [ebp - 0xc]
jne 0x1002c94e
mov eax, 0xc6a6
test eax, eax
jne 0x1002c94e
and dword [ebp - 0xd8], 0
jmp 0x1002c958
mov dword [ebp - 0xd8], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0xc]
jle 0x1002c973
mov dword [ebp - 0xa8], 1
jmp 0x1002c97a
and dword [ebp - 0xa8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0xa8]
jg 0x1002c998
mov dword [ebp - 0xe0], 1
jmp 0x1002c99f
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xe0], eax
jge 0x1002c9b6
mov dword [ebp - 0x128], 1
jmp 0x1002c9bd
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x34]
cmp eax, dword [ebp - 0xc]
je 0x1002c9e4
mov dword [ebp - 0xe8], 1
jmp 0x1002c9eb
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax + 4]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x38], 0x4504cd45
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 3
jmp 0x1002ca1e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x13
je 0x1002caf9
mov dword [ebp - 0x6c], 0xea983111
mov dword [ebp - 0x6c], 0xfffffffd
jmp 0x1002ca3f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x16
jne 0x1002caf4
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x74], 0
jmp 0x1002ca60
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1002ca76
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1f4], 0x3244d513
jmp 0x1002ca59
mov byte [ebp - 0x2b], 0
movzx eax, byte [ebp - 0x2b]
test eax, eax
je 0x1002ca93
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
mov dword [ebp - 0x70], 0xffffffe6
jmp 0x1002caa3
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffe7
jle 0x1002caef
mov dword [ebp - 0x68], 0x7dcd66a0
mov dword [ebp - 0x68], 2
jmp 0x1002cac0
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1002caed
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x1002caeb
push 0x34f3
push 0xf5
push 0x6943
push 0
call fcn.1002eeea
add esp, 0x10
jmp 0x1002cab9
jmp 0x1002ca9c
jmp 0x1002ca38
jmp 0x1002ca17
mov dword [ebp - 0x1a4], 0xef6f0c3d
mov dword [ebp - 0x1ac], 0xa0197cbb
mov dword [ebp - 4], 0
jmp 0x1002cb1d
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x1002cb33
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x184], 0xf70ad6f2
jmp 0x1002cb16
mov dword [ebp - 4], 0
jmp 0x1002cb43
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x1002cb56
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x60], 1
jmp 0x1002cb3c
mov dword [ebp - 4], 0
jmp 0x1002cb66
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x1002cb7c
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x190], 0xffffffff
jmp 0x1002cb5f
mov dword [ebp - 4], 0
jmp 0x1002cb8c
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x1002cba2
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x160], 0x2044653f
jmp 0x1002cb85
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x60], 0
jmp 0x1002cbc7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x60], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x60], 2
jg 0x1002ce7c
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x48], 0
jmp 0x1002cbef
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x1002cc89
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x24], 2
jmp 0x1002cc10
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1002cc29
mov byte [ebp - 0x27], 0
push 0
lea eax, [ebp - 0x27]
push eax
call fcn.10027ece
pop ecx
pop ecx
jmp 0x1002cc09
mov dword [ebp - 0x24], 0
jmp 0x1002cc39
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x1002cc84
mov dword [ebp - 0x44], 0xfffffff7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
cmp dword [ebp + eax*4 - 0x184], 0
je 0x1002cc5c
jmp 0x1002cc84
mov dword [ebp - 0x44], 0
jmp 0x1002cc6c
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002cc82
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x184], 0x7e780ca9
jmp 0x1002cc65
jmp 0x1002cc32
jmp 0x1002cbe8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x160]
cmp dword [ebp + eax*4 - 0x184], ecx
jle 0x1002ccb5
mov dword [ebp - 0x130], 1
jmp 0x1002ccbc
and dword [ebp - 0x130], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x130]
inc ecx
cmp dword [ebp + eax - 0x160], ecx
jne 0x1002ccde
mov dword [ebp - 0xf0], 1
jmp 0x1002cce5
and dword [ebp - 0xf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
cmp dword [ebp - 0xf0], eax
jl 0x1002cd06
mov dword [ebp - 0x18c], 1
jmp 0x1002cd0d
and dword [ebp - 0x18c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x160]
mov dword [ebp - 0x1d0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x160], 0
jne 0x1002cd4d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
cmp dword [ebp + eax*4 - 0x184], 0
jne 0x1002cd4d
and dword [ebp - 0x138], 0
jmp 0x1002cd57
mov dword [ebp - 0x138], 1
cmp dword [ebp - 0x138], 0x334a
jge 0x1002cd6f
mov dword [ebp - 0x140], 1
jmp 0x1002cd76
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
mov eax, dword [ebp + eax*4 - 0x184]
mov dword [ebp - 0xfc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x190], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
imul eax, dword [ebp - 0x140]
inc eax
mov ecx, dword [ebp - 0xfc]
sub ecx, eax
je 0x1002cdc5
mov eax, 0xb8d2
test eax, eax
jne 0x1002cdd7
mov eax, 0x1210cbed
test eax, eax
jne 0x1002cdd7
and dword [ebp - 0x134], 0
jmp 0x1002cde1
mov dword [ebp - 0x134], 1
cmp dword [ebp - 0x134], 0xffffffff
jne 0x1002cdf6
mov dword [ebp - 0x104], 1
jmp 0x1002cdfd
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x104], eax
jne 0x1002ce17
mov dword [ebp - 0x154], 1
jmp 0x1002ce1e
and dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 0
jl 0x1002ce33
mov dword [ebp - 0x10c], 1
jmp 0x1002ce3a
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x10c], eax
jle 0x1002ce51
mov dword [ebp - 0x94], 1
jmp 0x1002ce58
and dword [ebp - 0x94], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x94]
mov dword [ebp + eax - 0x160], ecx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1ac], eax
jmp 0x1002cbb2
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c4], 0x720e
push 0x48c9
push 0
call fcn.10028049
pop ecx
pop ecx
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1002cebd
push 0
call fcn.1002aa13
pop ecx
and dword [ebp - 0x88], 0
jmp 0x1002cedc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x88], eax
jge 0x1002d5cc
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x18], 0
jmp 0x1002cf08
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002cf1e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1dc], 0xffffffff
jmp 0x1002cf01
mov dword [ebp - 0x18], 0
jmp 0x1002cf2e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002cf44
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c0], 0xfffffff9
jmp 0x1002cf27
mov dword [ebp - 0x58], 2
jmp 0x1002cf54
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1002d125
mov dword [ebp - 0x4c], 0
jmp 0x1002cf6e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x1002cf84
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x170], 0x5a654fdd
jmp 0x1002cf67
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x170], 2
jmp 0x1002cfaf
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x170]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x170], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x170], 0
jl 0x1002d10c
mov dword [ebp - 0x10], 0x449c9fb3
mov dword [ebp - 0x1a8], 4
mov dword [ebp - 0x10], 2
jmp 0x1002cfe3
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002d01b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x170]
cmp dword [ebp + eax*4 - 0x1dc], 0
je 0x1002d001
jmp 0x1002d01b
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x170]
mov dword [ebp + ecx - 0x1c0], eax
jmp 0x1002cfdc
mov dword [ebp - 0x10], 0
jmp 0x1002d02b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x1002d107
mov dword [ebp - 0x158], 0xffffffff
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1c0]
mov dword [ebp - 0x1cc], eax
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x170], 9
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x170]
jl 0x1002d079
mov dword [ebp - 0x13c], 1
jmp 0x1002d080
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x13c]
jne 0x1002d09d
cmp dword [ebp - 0x10], 0
je 0x1002d09d
mov dword [ebp - 0x114], 1
jmp 0x1002d0a4
and dword [ebp - 0x114], 0
imul eax, dword [ebp - 0x114], 0x8e48
sub eax, dword [ebp - 0x10]
jne 0x1002d0c6
cmp dword [ebp - 0x10], 0
jne 0x1002d0c6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x170], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x170]
cmp dword [ebp - 0x158], eax
jl 0x1002d0ec
cmp dword [ebp - 0x158], 0
jne 0x1002d0ec
and dword [ebp - 0x11c], 0
jmp 0x1002d0f6
mov dword [ebp - 0x11c], 1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1a8], eax
jmp 0x1002d024
jmp 0x1002cf96
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x1002d120
push 0
call fcn.100265cb
pop ecx
jmp 0x1002cf4d
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
jne 0x1002d4e2
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x1c], 0
jmp 0x1002d14c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1002d162
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x178], 0xffffffff
jmp 0x1002d145
mov dword [ebp - 0x1c], 0
jmp 0x1002d172
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002d188
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x90], 1
jmp 0x1002d16b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x178], 0
je 0x1002d27d
mov dword [ebp - 0x3c], 0x5ae649f6
mov dword [ebp - 0x198], 0x3d6c1dfe
imul eax, dword [ebp - 0x3c], 0
cmp dword [ebp - 0x3c], eax
jle 0x1002d1c2
mov dword [ebp - 0x98], 1
jmp 0x1002d1c9
and dword [ebp - 0x98], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x98]
mov dword [ebp + eax - 0x90], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x178]
imul eax, dword [ebp - 0x98]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x144], eax
jl 0x1002d20d
mov dword [ebp - 0x124], 1
jmp 0x1002d214
and dword [ebp - 0x124], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x178]
imul eax, dword [ebp - 0x124]
mov dword [ebp - 0x3c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ebp + eax - 0x178], ecx
jl 0x1002d249
mov dword [ebp - 0x14c], 1
jmp 0x1002d250
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0xcdf11bbb
jae 0x1002d268
mov dword [ebp - 0x12c], 1
jmp 0x1002d26f
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x198], eax
jmp 0x1002d2ab
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1002d291
push 1
call fcn.100265cb
pop ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp + ecx - 0x90], eax
push 0x2f21
lea eax, [ebp - 0x8c]
push eax
push 0x4833
push 0
push 0x436
push dword [ebp - 0xec]
push dword [ebp - 0x194]
push 0x6f19
push dword [ebp - 0x20]
push 0x689a
call fcn.10027084
add esp, 0x28
mov dword [ebp - 8], 0xfffffffa
mov dword [ebp - 0x64], 0
jmp 0x1002d2fb
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1002d311
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xa4], 0xfffffffa
jmp 0x1002d2f4
mov dword [ebp - 8], 0
jmp 0x1002d321
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jg 0x1002d33f
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa4]
neg eax
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0xa4], eax
jmp 0x1002d31a
mov dword [ebp - 8], 0
jmp 0x1002d34f
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jg 0x1002d4dd
mov dword [ebp - 0xe4], 0x9968cb66
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp + ecx*4 - 0xa4]
cmp dword [ebp + eax - 0xa4], ecx
jne 0x1002d387
mov dword [ebp - 0xf4], 1
jmp 0x1002d38e
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
add eax, 0x93c1
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xa4]
jge 0x1002d3b3
mov dword [ebp - 0xac], 1
jmp 0x1002d3ba
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp eax, dword [ebp - 0xac]
jle 0x1002d3d8
mov dword [ebp - 0xb4], 1
jmp 0x1002d3df
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0xb060
jle 0x1002d3f7
mov dword [ebp - 0xbc], 1
jmp 0x1002d3fe
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp eax, dword [ebp - 0xbc]
je 0x1002d41c
mov dword [ebp - 0xc4], 1
jmp 0x1002d423
and dword [ebp - 0xc4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa4]
add eax, dword [ebp - 0xc4]
jne 0x1002d44a
mov eax, 0x3b8a277e
test eax, eax
jne 0x1002d44a
and dword [ebp - 0xcc], 0
jmp 0x1002d454
mov dword [ebp - 0xcc], 1
cmp dword [ebp - 0xcc], 0xffffffff
jle 0x1002d469
mov dword [ebp - 0xd4], 1
jmp 0x1002d470
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp eax, dword [ebp - 0xd4]
jg 0x1002d494
cmp dword [ebp - 8], 0
je 0x1002d494
mov dword [ebp - 0x84], 1
jmp 0x1002d49b
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xa4], ecx
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x84], eax
je 0x1002d4c5
mov dword [ebp - 0xdc], 1
jmp 0x1002d4cc
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xe4], eax
jmp 0x1002d348
jmp 0x1002cec6
mov dword [ebp - 0x40], 0x860b4ffb
mov dword [ebp - 0x50], 0
jmp 0x1002d4f9
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1002d50f
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1e8], 0xffffffff
jmp 0x1002d4f2
push 0x4a6
push 0x2f6d
push 0x1151
push 0
call fcn.1002ee79
add esp, 0x10
mov dword [ebp - 0x40], 0
jmp 0x1002d538
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x1002d54f
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x1e8], 0
je 0x1002d54d
jmp 0x1002d54f
jmp 0x1002d531
push 4
push 0x1000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xec]
add ecx, dword [eax + 0xc]
push ecx
push 0x1a8d
push 0x1943
call fcn.10024a71
pop ecx
pop ecx
call eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x19c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x8c]
call fcn.10024b71
add esp, 0xc
push 0
push 0x7d2a
push 0x218b
push 0xfb8
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.1002964e
add esp, 0x18
jmp 0x1002cec6
mov esp, ebp
pop ebp
ret