Function at 0x1003f560
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0xf8
mov eax, dword [0x10066ffc]
xor eax, esp
mov dword [esp + 0xf4], eax
xor eax, eax
push ebx
mov ebx, dword [esp + 0x10c]
push ebp
mov ebp, dword [esp + 0x104]
push esi
mov esi, dword [ebp + 0x34]
mov dword [esp + 0x58], ebp
mov dword [esp + 0x7c], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0xec], eax
mov byte [esp + 0xf0], al
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x44], esi
cmp ecx, eax
jne 0x1003f5e0
pop esi
pop ebp
mov eax, 7
pop ebx
mov ecx, dword [esp + 0xf4]
xor ecx, esp
call fcn.100595c0
add esp, 0xf8
ret
movzx ecx, word [ebp + 0x12]
movzx edx, byte [ebp + 1]
push edi
lea edi, [edx + ecx]
cmp edi, 2
jl 0x1003f613
cmp dword [esp + 0x110], eax
je 0x1003f60c
mov eax, dword [esp + 0x110]
cmp eax, edi
jne 0x1003f60b
lea eax, [edi + ebx - 2]
jmp 0x1003f60c
dec eax
mov edi, 2
sub edi, ebx
mov dword [esp + 0x54], eax
sub eax, edx
add eax, edi
lea ebx, [edi + 1]
mov dword [esp + 0x24], ebx
cmp eax, ecx
jne 0x1003f633
movzx eax, byte [ebp + 6]
mov ecx, dword [ebp + 0x38]
lea eax, [eax + ecx + 8]
jmp 0x1003f64a
mov edx, dword [ebp + 0x40]
mov ax, word [edx + eax*2]
movzx edx, word [ebp + 0x14]
mov ch, al
mov cl, ah
movzx eax, cx
and eax, edx
add eax, dword [ebp + 0x38]
mov dword [esp + 0x38], eax
call fcn.10002e30
push 0
push 0
lea ebx, [esp + edi*4 + 0x68]
push ebx
push esi
mov dword [esp + 0x60], eax
call fcn.1003eba0
add esp, 0x10
mov dword [esp + 0x14], eax
test eax, eax
jne 0x1003f7ba
mov eax, dword [esp + 0x54]
add eax, edi
jmp 0x1003f684
mov eax, dword [esp + 0x44]
mov ebx, dword [ebx]
movzx edx, byte [ebx + 1]
add edx, dword [esp + 0x10]
movzx ecx, word [ebx + 0x12]
lea ecx, [edx + ecx + 1]
mov edx, edi
dec eax
dec edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x44], eax
test edx, edx
je 0x1003f7d6
movzx ecx, word [ebp + 0x16]
cmp eax, ecx
jne 0x1003f6e7
cmp byte [ebp + 1], 0
je 0x1003f6e7
mov ecx, dword [ebp + 0x20]
mov eax, ecx
mov dword [esp + edi*4 + 0xf8], ecx
call fcn.10002e30
mov edx, dword [ebp + 0x4c]
push ecx
push ebp
mov dword [esp + 0x58], eax
call edx
movzx eax, ax
add esp, 8
mov dword [esp + edi*4 + 0x6c], eax
mov byte [ebp + 1], 0
jmp 0x1003f798
movzx ecx, byte [ebp + 1]
mov edx, dword [esp + 0x54]
mov eax, dword [ebp + 0x40]
sub edx, ecx
add edx, edi
mov cx, word [eax + edx*2]
mov dh, cl
mov dl, ch
movzx ecx, word [ebp + 0x14]
movzx eax, dx
mov edx, dword [ebp + 0x38]
and eax, ecx
lea ecx, [eax + edx]
mov eax, ecx
mov dword [esp + edi*4 + 0xf8], ecx
call fcn.10002e30
push ecx
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0x4c]
push ebp
call eax
movzx ebx, ax
add esp, 8
test byte [esi + 0x16], 4
mov dword [esp + edi*4 + 0x6c], ebx
je 0x1003f777
mov esi, dword [esp + edi*4 + 0xf8]
mov edx, dword [esp + 0x48]
mov eax, esi
sub eax, dword [ebp + 0x38]
lea ecx, [ebx + eax]
cmp ecx, dword [edx + 0x24]
jg 0x100403c4
mov ecx, dword [esp + 0x80]
push ebx
add ecx, eax
push esi
push ecx
call sub.msvcrt.dll_memcpy
sub esi, dword [ebp + 0x38]
add esp, 0xc
add esi, dword [esp + 0x80]
mov dword [esp + edi*4 + 0xf8], esi
movzx eax, byte [ebp + 1]
mov ecx, dword [esp + 0x54]
lea edx, [esp + 0x14]
push edx
sub ecx, eax
add ecx, edi
push ebx
push ecx
mov esi, ebp
call fcn.10028910
mov esi, dword [esp + 0x54]
add esp, 0xc
mov eax, dword [esp + 0x50]
push 0
push 0
lea ebx, [esp + edi*4 + 0x68]
push ebx
push esi
call fcn.1003eba0
add esp, 0x10
mov dword [esp + 0x14], eax
test eax, eax
je 0x1003f680
lea edx, [edi*4 + 4]
push edx
lea eax, [esp + 0x64]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
jmp 0x100403e9
mov edi, dword [esp + 0x10]
mov edx, dword [esi + 0x20]
add edi, 3
and edi, 0xfffffffc
lea ecx, [edi + edi*2]
lea eax, [edx + ecx*2]
call fcn.1000df90
mov dword [esp + 0x30], eax
test eax, eax
jne 0x1003f803
mov dword [esp + 0x14], 7
jmp 0x100403e9
mov eax, dword [esp + 0x30]
lea ebp, [eax + edi*4]
mov eax, dword [esp + 0x60]
movzx dx, byte [eax + 5]
add dx, dx
lea ecx, [ebp + edi*2]
add dx, dx
mov dword [esp + 0x44], ecx
movzx ecx, dx
movzx edx, byte [eax + 3]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x18], 0
test ecx, ecx
jle 0x1003fa4b
lea esp, [esp]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + eax*4 + 0x60]
movzx ecx, word [edi + 0x12]
movzx edx, word [edi + 0x14]
mov ebx, dword [edi + 0x38]
movzx esi, word [edi + 0xe]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], ecx
mov ecx, dword [eax + 0x38]
mov dword [esp + 0x3c], edx
mov dl, byte [ebx]
add esi, ebx
cmp dl, byte [ecx]
jne 0x1003fb7c
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x28]
lea ecx, [eax + eax]
push ecx
lea eax, [ebp + edx*2]
push 0
push eax
call sub.msvcrt.dll_memset
mov al, byte [edi + 1]
add esp, 0xc
test al, al
jbe 0x1003f943
mov edx, dword [esp + 0x10]
movzx ecx, al
mov eax, dword [esp + 0x28]
add ecx, ecx
push ecx
add edx, eax
lea ecx, [ebp + edx*2]
push 0
push ecx
call sub.msvcrt.dll_memset
movzx eax, word [edi + 0x16]
add esp, 0xc
test eax, eax
jle 0x1003f903
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x28]
mov dx, word [esi]
mov ch, dl
add esi, 2
inc eax
mov cl, dh
movzx edx, cx
movzx ecx, word [esp + 0x3c]
and edx, ecx
mov ecx, dword [esp + 0x30]
add edx, ebx
sub dword [esp + 0x10], 1
mov dword [ecx + eax*4 - 4], edx
jne 0x1003f8d7
mov dword [esp + 0x28], eax
jmp 0x1003f90b
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x28]
cmp byte [edi + 1], 0
mov dword [esp + 0x20], 0
jbe 0x1003f947
lea edx, [edi + 0x20]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x10]
mov edx, dword [edx]
inc dword [esp + 0x20]
add dword [esp + 0x10], 4
mov dword [ecx + eax*4], edx
movzx edx, byte [edi + 1]
inc eax
cmp dword [esp + 0x20], edx
jl 0x1003f920
mov dword [esp + 0x28], eax
jmp 0x1003f947
mov eax, dword [esp + 0x28]
movzx edx, word [edi + 0xe]
movzx ecx, word [edi + 0x12]
add edx, ebx
lea ecx, [edx + ecx*2]
mov dword [esp + 0x20], ecx
cmp esi, ecx
jae 0x1003f98b
movzx ecx, word [esp + 0x3c]
mov dword [esp + 0x10], ecx
mov dx, word [esi]
mov ch, dl
add esi, 2
inc eax
mov cl, dh
movzx edx, cx
and edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x30]
add edx, ebx
mov dword [ecx + eax*4 - 4], edx
cmp esi, dword [esp + 0x20]
jb 0x1003f965
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
dec edx
cmp ecx, edx
mov dword [esp + ecx*4 + 0xdc], eax
jge 0x1003fa38
cmp dword [esp + 0x4c], 0
jne 0x1003fa38
movzx eax, word [esp + ecx*4 + 0x6c]
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
mov word [ebp + ebx*2], ax
movzx eax, ax
add esi, edx
push eax
add edx, eax
mov eax, dword [esp + ecx*4 + 0xfc]
push eax
push esi
mov dword [esp + 0x4c], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x3c]
movzx edx, ax
add edx, esi
mov dword [ecx + ebx*4], edx
sub word [ebp + ebx*2], ax
add esp, 0xc
cmp byte [edi + 5], 0
jne 0x1003fa09
mov eax, dword [edi + 0x38]
mov ecx, dword [ecx + ebx*4]
mov edx, dword [eax + 8]
mov dword [ecx], edx
jmp 0x1003fa2f
cmp word [ebp + ebx*2], 4
jae 0x1003fa2f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov byte [ecx + eax], 0
inc word [ebp + ebx*2]
inc eax
cmp word [ebp + ebx*2], 4
mov dword [esp + 0x40], eax
jb 0x1003fa11
mov ecx, dword [esp + 0x18]
inc ebx
mov dword [esp + 0x28], ebx
inc ecx
cmp ecx, dword [esp + 0x24]
mov dword [esp + 0x18], ecx
jl 0x1003f850
mov ecx, dword [esp + 0x24]
movzx eax, word [esp + 0x58]
mov edx, dword [esp + 0x48]
mov edx, dword [edx + 0x24]
lea eax, [eax + edx - 0xc]
mov dword [esp + 0x40], eax
xor eax, eax
mov dword [esp + 0x18], eax
test ecx, ecx
jle 0x1003fad7
lea esp, [esp]
mov esi, dword [esp + eax*4 + 0x60]
movzx edx, word [esi + 0x10]
mov edi, dword [esp + 0x40]
sub edi, edx
mov dword [esp + eax*4 + 0x6c], edi
js 0x1003fb92
xor ebp, ebp
cmp byte [esi + 1], 0
jbe 0x1003fac0
lea ebx, [esi + 0x20]
mov eax, dword [ebx]
mov ecx, dword [esi + 0x4c]
push eax
push esi
call ecx
movzx edx, ax
movzx eax, byte [esi + 1]
inc ebp
add esp, 8
add ebx, 4
cmp ebp, eax
lea edi, [edi + edx + 2]
jl 0x1003fa93
mov ecx, dword [esp + 0x18]
mov dword [esp + ecx*4 + 0x6c], edi
mov eax, ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + eax*4 + 0xdc]
mov dword [esp + eax*4 + 0x88], edx
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x1003fa70
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], ebx
jle 0x1003fc86
lea eax, [esp + 0x88]
sub eax, 4
mov dword [esp + 0x10], 1
mov dword [esp + 0x3c], eax
nop
mov eax, dword [esp + 0x40]
cmp dword [esp + ebx + 0x6c], eax
jle 0x1003fbc3
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
cmp eax, ebp
jl 0x1003fb3d
lea ebp, [eax + 1]
cmp ebp, 5
mov dword [esp + 0x20], ebp
jg 0x1003fd4b
mov ecx, dword [esp + 0x28]
mov dword [esp + ebx + 0x70], 0
mov dword [esp + ebx + 0x8c], ecx
mov esi, dword [esp + ebx + 0x88]
lea edi, [esi - 1]
mov eax, edi
lea ecx, [esp + 0x28]
call fcn.10007010
movzx eax, ax
add eax, 2
sub dword [esp + ebx + 0x6c], eax
cmp dword [esp + 0x4c], 0
jne 0x1003fbaa
cmp esi, dword [esp + 0x28]
jge 0x1003fba8
mov eax, esi
lea ecx, [esp + 0x28]
call fcn.10007010
movzx eax, ax
add eax, 2
jmp 0x1003fbaa
push 0xede7
call fcn.10026140
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x100403e9
push 0xee4a
call fcn.10026140
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x100403e9
xor eax, eax
mov edx, dword [esp + 0x40]
add dword [esp + ebx + 0x70], eax
cmp dword [esp + ebx + 0x6c], edx
mov dword [esp + ebx + 0x88], edi
jg 0x1003fb12
mov eax, dword [esp + 0x28]
cmp dword [esp + ebx + 0x88], eax
jge 0x1003fc3b
mov ebp, dword [esp + 0x4c]
mov edi, eax
jmp 0x1003fbe0
mov esi, dword [esp + ebx + 0x88]
mov eax, esi
lea ecx, [esp + 0x28]
call fcn.10007010
mov edx, dword [esp + ebx + 0x6c]
movzx ecx, ax
add ecx, 2
lea eax, [edx + ecx]
cmp eax, dword [esp + 0x40]
jg 0x1003fc3b
mov dword [esp + ebx + 0x6c], eax
lea eax, [esi + 1]
mov dword [esp + ebx + 0x88], eax
test ebp, ebp
jne 0x1003fc2e
cmp eax, edi
jge 0x1003fc2c
lea ecx, [esp + 0x28]
call fcn.10007010
movzx ecx, ax
add ecx, 2
jmp 0x1003fc2e
xor ecx, ecx
sub dword [esp + ebx + 0x70], ecx
cmp dword [esp + ebx + 0x88], edi
jl 0x1003fbe0
mov ecx, dword [esp + ebx + 0x88]
cmp ecx, dword [esp + 0x28]
jl 0x1003fc52
mov eax, dword [esp + 0x10]
mov dword [esp + 0x20], eax
jmp 0x1003fc6c
cmp dword [esp + 0x18], 0
jle 0x1003fc62
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + ebx]
jmp 0x1003fc64
xor eax, eax
cmp ecx, eax
jle 0x1003fd61
mov eax, dword [esp + 0x18]
inc dword [esp + 0x10]
inc eax
add ebx, 4
cmp eax, dword [esp + 0x20]
mov dword [esp + 0x18], eax
jl 0x1003fb00
mov ebx, dword [esp + 0x20]
dec ebx
test ebx, ebx
jle 0x1003fd8b
mov eax, dword [esp + ebx*4 + 0x68]
mov edi, dword [esp + ebx*4 + 0x6c]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x88]
mov esi, dword [eax + ebx*4 - 4]
sub eax, 4
dec esi
mov ebp, esi
sub ebp, dword [esp + 0x4c]
mov dword [esp + 0x3c], eax
inc ebp
mov eax, ebp
lea ecx, [esp + 0x28]
call fcn.10007010
mov ecx, dword [esp + 0x34]
lea ebp, [ecx + ebp*2]
jmp 0x1003fcd0
mov eax, esi
lea ecx, [esp + 0x28]
call fcn.10007010
test edi, edi
je 0x1003fd06
cmp dword [esp + 0x118], 0
jne 0x1003fd30
mov edx, dword [esp + 0x34]
movzx eax, word [edx + esi*2]
mov ecx, dword [esp + 0x10]
movzx edx, word [ebp]
sub ecx, eax
sub ecx, 2
lea eax, [edx + edi + 2]
cmp eax, ecx
jg 0x1003fd30
movzx ecx, word [ebp]
mov edx, dword [esp + 0x34]
movzx eax, word [edx + esi*2]
mov edx, dword [esp + 0x3c]
lea edi, [edi + ecx + 2]
mov ecx, 0xfffffffe
sub ecx, eax
add dword [esp + 0x10], ecx
mov dword [edx + ebx*4], esi
dec esi
sub ebp, 2
test esi, esi
jge 0x1003fcd0
cmp ebx, 1
mov eax, dword [esp + 0x10]
mov dword [esp + ebx*4 + 0x6c], edi
mov dword [esp + ebx*4 + 0x68], eax
jle 0x1003fd77
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + ebx*4 - 4]
jmp 0x1003fd79
push 0xee56
call fcn.10026140
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x100403e9
push 0xee77
call fcn.10026140
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x100403e9
xor eax, eax
mov edx, dword [esp + 0x3c]
cmp dword [edx + ebx*4], eax
jle 0x1003fde4
dec ebx
test ebx, ebx
jg 0x1003fc93
mov eax, dword [esp + 0x60]
mov ecx, dword [eax + 0x38]
movzx edx, byte [ecx]
xor edi, edi
cmp dword [esp + 0x20], edi
mov dword [esp + 0x10], edx
jle 0x1003fe90
mov ebp, dword [esp + 0x20]
lea esp, [esp]
cmp edi, dword [esp + 0x24]
jge 0x1003fdfa
mov eax, dword [esp + edi*4 + 0x60]
mov dword [esp + edi*4 + 0x9c], eax
mov dword [esp + 0x44], eax
mov eax, dword [eax + 0x48]
mov dword [esp + edi*4 + 0x60], 0
call fcn.10037020
inc dword [esp + 0x1c]
mov dword [esp + 0x14], eax
test eax, eax
jmp 0x1003fe81
push 0xeea1
call fcn.10026140
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x100403e9
cmp dword [esp + 0x118], 0
mov eax, 1
jne 0x1003fe0d
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x48]
push 0
push eax
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x50]
push ecx
push ebx
call fcn.1003b9b0
add esp, 0x14
mov dword [esp + 0x14], eax
test eax, eax
jne 0x100403e9
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x44]
push edx
call fcn.10028690
inc dword [esp + 0x20]
mov eax, dword [esp + 0x2c]
add esp, 4
cmp byte [ebx + 0x11], 0
mov dword [esp + edi*4 + 0x9c], esi
mov dword [esp + edi*4 + 0xdc], eax
je 0x1003fe87
mov edx, dword [esp + 0x5c]
mov eax, dword [edx + 0x54]
lea ecx, [esp + 0x14]
push ecx
push eax
mov eax, dword [esi + 0x54]
push 5
mov ecx, ebx
call fcn.100379f0
add esp, 0xc
cmp dword [esp + 0x14], 0
jne 0x100403e9
inc edi
cmp edi, ebp
jl 0x1003fdb0
mov edi, dword [esp + 0x1c]
xor eax, eax
test edi, edi
jle 0x1003fee7
lea ebx, [ebx]
mov ecx, dword [esp + eax*4 + 0x9c]
mov edx, dword [ecx + 0x54]
mov ecx, dword [ecx + 0x48]
mov cx, word [ecx + 0x18]
mov word [esp + eax*2 + 0xf8], cx
xor ecx, ecx
mov dword [esp + eax*4 + 0xc4], edx
mov dword [esp + eax*4 + 0xb0], edx
test eax, eax
jle 0x1003fee2
lea ecx, [ecx]
cmp dword [esp + ecx*4 + 0xc4], edx
je 0x10040033
inc ecx
cmp ecx, eax
jl 0x1003fed0
inc eax
cmp eax, edi
jl 0x1003fea0
xor ebx, ebx
mov dword [esp + 0x18], ebx
test edi, edi
jle 0x1003ff85
xor esi, esi
lea eax, [esi + 1]
cmp edi, eax
jle 0x1003ff20
xor edx, edx
lea ecx, [eax*4]
mov ebp, dword [esp + ecx + 0xb0]
cmp ebp, dword [esp + edx + 0xb0]
jae 0x1003ff1b
mov esi, eax
mov edx, ecx
inc eax
cmp eax, edi
jl 0x1003ff00
mov ebp, dword [esp + esi*4 + 0xb0]
mov dword [esp + esi*4 + 0xb0], 0xffffffff
cmp esi, ebx
je 0x1003ff78
jle 0x1003ff54
mov edx, dword [esp + 0x48]
mov eax, dword [edx + 0x2c]
mov ecx, dword [esp + esi*4 + 0x9c]
mov ecx, dword [ecx + 0x48]
lea edi, [eax + esi + 1]
xor eax, eax
call fcn.10005ac0
mov ebx, dword [esp + ebx*4 + 0x9c]
mov ax, word [esp + esi*2 + 0xf8]
mov ecx, dword [ebx + 0x48]
mov edi, ebp
call fcn.10005ac0
mov edi, dword [esp + 0x1c]
mov dword [ebx + 0x54], ebp
mov ebx, dword [esp + 0x18]
inc ebx
cmp ebx, edi
mov dword [esp + 0x18], ebx
jl 0x1003fef5
mov edx, dword [esp + edi*4 + 0x98]
mov eax, dword [edx + 0x54]
mov ecx, dword [esp + 0x38]
call fcn.10002e40
test byte [esp + 0x10], 8
jne 0x1003ffc4
mov eax, dword [esp + 0x24]
cmp edi, eax
je 0x1003ffc4
lea ecx, [esp + 0x9c]
jg 0x1003ffb4
lea ecx, [esp + 0x60]
mov eax, dword [ecx + eax*4 - 4]
mov ecx, dword [eax + 0x38]
mov edx, dword [edx + 0x38]
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [esp + 0x48]
cmp byte [ecx + 0x11], 0
mov eax, dword [esp + 0x9c]
je 0x1004011e
mov edx, dword [eax + 0x38]
movzx ebx, word [eax + 0x12]
mov ecx, dword [ecx + 0x24]
mov esi, eax
movzx eax, byte [eax + 1]
xor ebp, ebp
add ebx, eax
cmp dword [esp + 0x28], ebp
mov dword [esp + 0x50], edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], ebp
mov dword [esp + 0x10], ebp
jle 0x1004011e
mov dword [esp + 0x44], ebp
jmp 0x10040010
mov edx, dword [esp + 0x30]
mov edi, dword [edx + ebp*4]
cmp ebp, ebx
jne 0x1004006c
mov eax, dword [esp + 0x10]
inc eax
cmp eax, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
jge 0x10040049
mov eax, dword [esp + eax*4 + 0x9c]
jmp 0x1004004d
push 0xeeeb
call fcn.10026140
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x100403e9
mov eax, dword [esp + eax*4 + 0x60]
movzx edx, byte [eax + 1]
movzx ecx, word [eax + 0x12]
mov eax, dword [eax + 0x38]
add ecx, edx
xor edx, edx
cmp dword [esp + 0x4c], edx
mov dword [esp + 0x50], eax
sete dl
add edx, ebx
lea ebx, [edx + ecx]
mov ecx, dword [esp + 0x44]
cmp ebp, dword [esp + ecx + 0x88]
jne 0x1004009c
mov eax, dword [esp + 0x38]
inc eax
mov dword [esp + 0x38], eax
add eax, eax
add eax, eax
cmp dword [esp + 0x4c], 0
mov esi, dword [esp + eax + 0x9c]
mov dword [esp + 0x44], eax
je 0x10040113
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x1c]
jge 0x100400c4
mov edx, dword [esi + 0x54]
cmp edx, dword [esp + eax*4 + 0xc4]
jne 0x100400c4
mov eax, dword [esp + 0x50]
cmp edi, eax
jb 0x100400c4
mov ecx, dword [esp + 0x3c]
add ecx, eax
cmp edi, ecx
jb 0x10040113
cmp word [esp + 0x58], 0
jne 0x100400ea
mov eax, dword [esi + 0x54]
lea edx, [esp + 0x14]
push edx
push eax
push 5
mov eax, edi
call fcn.10002e30
mov ecx, dword [esp + 0x54]
call fcn.100379f0
add esp, 0xc
mov eax, ebp
lea ecx, [esp + 0x28]
call fcn.10007010
cmp ax, word [esi + 0xc]
jbe 0x10040108
lea ecx, [esp + 0x14]
push ecx
call fcn.10037ac0
add esp, 4
cmp dword [esp + 0x14], 0
jne 0x100403e9
inc ebp
cmp ebp, dword [esp + 0x28]
jl 0x10040010
mov ecx, dword [esp + 0x1c]
lea eax, [ecx - 1]
xor ebp, ebp
test eax, eax
jle 0x1004021b
nop
mov ecx, dword [esp + ebp*4 + 0x88]
mov eax, dword [esp + 0x34]
movzx eax, word [eax + ecx*2]
mov edx, dword [esp + 0x30]
mov ebx, dword [edx + ecx*4]
movzx edx, word [esp + 0x58]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + ebp*4 + 0x9c]
mov dword [esp + 0x38], eax
movzx eax, ax
add eax, edx
mov edx, dword [esp + 0x80]
add esi, edx
cmp byte [edi + 5], 0
jne 0x1004017b
mov ecx, dword [edi + 0x38]
mov edx, dword [ebx]
mov dword [ecx + 8], edx
jmp 0x100401d9
cmp dword [esp + 0x4c], 0
je 0x100401bd
mov edx, dword [esp + 0x30]
lea eax, [esp + 0xc4]
push eax
mov eax, dword [edx + ecx*4 - 4]
mov ecx, dword [edi + 0x50]
push eax
push edi
call ecx
mov edx, dword [esp + 0xd4]
mov eax, dword [esp + 0xd0]
push edx
mov ebx, esi
push eax
add esi, 4
call fcn.10002bb0
add esp, 0x14
add eax, 4
xor esi, esi
jmp 0x100401d9
sub ebx, 4
cmp word [esp + 0x38], 4
jne 0x100401d9
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 0x4c]
push ebx
push eax
call ecx
add esp, 8
movzx eax, ax
mov ecx, dword [edi + 0x54]
add dword [esp + 0x84], eax
lea edx, [esp + 0x14]
push edx
mov edx, dword [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x64]
push eax
add edx, ebp
push ebx
push edx
mov eax, esi
call fcn.10037d30
add esp, 0x14
cmp dword [esp + 0x14], 0
jne 0x100403e9
mov ecx, dword [esp + 0x1c]
inc ebp
lea eax, [ecx - 1]
cmp ebp, eax
jl 0x10040130
mov ebx, 1
sub ebx, ecx
cmp ebx, ecx
jge 0x100402f7
mov eax, ebx
neg eax
mov dword [esp + 0x38], eax
mov esi, eax
test ebx, ebx
jl 0x1004023a
mov esi, ebx
cmp byte [esp + esi + 0xf0], 0
jne 0x100402e9
test ebx, ebx
jge 0x10040260
mov edx, dword [esp + esi*4 + 0xd8]
cmp edx, dword [esp + esi*4 + 0x84]
jl 0x100402e9
test esi, esi
jne 0x10040271
mov eax, dword [esp + 0x88]
xor edx, edx
xor ecx, ecx
jmp 0x100402a6
cmp esi, dword [esp + 0x24]
jge 0x10040289
xor edx, edx
cmp dword [esp + 0x4c], edx
sete dl
add edx, dword [esp + esi*4 + 0xd8]
jmp 0x1004028d
mov edx, dword [esp + 0x28]
mov eax, dword [esp + esi*4 + 0x88]
xor ecx, ecx
cmp dword [esp + 0x4c], ecx
sete cl
add ecx, dword [esp + esi*4 + 0x84]
sub eax, ecx
mov edi, dword [esp + esi*4 + 0x9c]
lea ebp, [esp + 0x28]
push ebp
push eax
push ecx
push edx
mov eax, edi
call fcn.10028d40
add esp, 0x10
mov dword [esp + 0x14], eax
test eax, eax
jne 0x100403e9
mov ax, word [esp + 0x40]
sub ax, word [esp + esi*4 + 0x6c]
mov ecx, dword [esp + 0x1c]
mov word [edi + 0x10], ax
mov eax, dword [esp + 0x38]
mov byte [esp + esi + 0xf0], 1
inc ebx
dec eax
cmp ebx, ecx
mov dword [esp + 0x38], eax
jl 0x10040232
cmp dword [esp + 0x114], 0
je 0x10040348
mov eax, dword [esp + 0x5c]
cmp word [eax + 0x12], 0
jne 0x10040348
movzx cx, byte [eax + 6]
mov edx, dword [esp + 0x9c]
cmp cx, word [edx + 0x10]
ja 0x10040348
mov edi, edx
call fcn.10027c60
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x60]
push edi
call fcn.10037e80
add esp, 8
lea esi, [esp + 0x14]
mov eax, edi
call fcn.1003c210
jmp 0x1004039c
mov ecx, dword [esp + 0x48]
cmp byte [ecx + 0x11], 0
je 0x1004039c
cmp word [esp + 0x58], 0
jne 0x1004039c
xor esi, esi
cmp dword [esp + 0x1c], esi
jle 0x1004039c
mov edi, dword [esp + 0x1c]
mov ebx, ecx
jmp 0x10040370
mov eax, dword [esp + esi*4 + 0x9c]
mov ecx, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
lea edx, [esp + 0x14]
push edx
push ecx
push 5
add eax, 8
call fcn.10002e30
mov ecx, ebx
call fcn.100379f0
inc esi
add esp, 0xc
cmp esi, edi
jl 0x10040370
mov edi, dword [esp + 0x1c]
cmp edi, dword [esp + 0x24]
jge 0x100403e9
mov ebx, dword [esp + 0x24]
lea ebx, [ebx]
mov eax, dword [esp + edi*4 + 0x60]
lea esi, [esp + 0x14]
call fcn.1003c210
inc edi
cmp edi, ebx
jl 0x100403b0
jmp 0x100403e9
push 0xeda4
call fcn.10026140
lea edx, [edi*4 + 4]
push edx
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x68]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x10
mov esi, dword [esp + 0x30]
call fcn.1000e050
mov edi, dword [esp + 0x24]
xor esi, esi
test edi, edi
jle 0x1004040e
lea esp, [esp]
mov eax, dword [esp + esi*4 + 0x60]
call fcn.1003a8b0
inc esi
cmp esi, edi
jl 0x10040400
mov edi, dword [esp + 0x1c]
xor esi, esi
test edi, edi
jle 0x10040431
jmp 0x10040420
mov eax, dword [esp + esi*4 + 0x9c]
call fcn.1003a8b0
inc esi
cmp esi, edi
jl 0x10040420
mov ecx, dword [esp + 0x104]
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.100595c0
add esp, 0xf8
ret