Function at 0x10029f1d
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x440
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x1002a84b
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 4], 0xfe7d8a87
mov dword [ebp - 0x25c], 0xdfac86e8
mov dword [ebp - 0x30c], 0xe226996d
mov dword [ebp - 0x368], 0x38b4fd08
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x38c], 0x3f91a665
mov dword [ebp - 0x14], 0
jmp 0x10029f96
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10029fa9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0xfffffff9
jmp 0x10029f8f
mov dword [ebp - 0x14], 0
jmp 0x10029fb9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10029fcf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x414], 0xc7d0e75f
jmp 0x10029fb2
mov dword [ebp - 4], 2
jmp 0x10029fdf
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x1002a4fa
mov dword [ebp - 8], 8
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x394], 0x9e8ee08a
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x3b0], 0xfffffffe
mov dword [ebp - 0x1d4], 2
mov dword [ebp - 0x80], 0
jmp 0x1002a03c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x1002a052
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x430], 0
jmp 0x1002a035
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x64]
mov dword [ebp + ecx*4 - 0x64], eax
mov dword [ebp - 8], 2
jmp 0x1002a070
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x1002a3e6
mov dword [ebp - 0x2f4], 0x445a8cce
mov dword [ebp - 0xc0], 0xfffffff7
mov dword [ebp - 0x58], 0x5aba9a9
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0x64]
cmp dword [ebp + eax - 0x64], ecx
je 0x1002a0b4
mov dword [ebp - 0x158], 1
jmp 0x1002a0bb
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x14af12a8
je 0x1002a0d3
mov dword [ebp - 0x270], 1
jmp 0x1002a0da
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x270]
test eax, eax
je 0x1002a104
cmp dword [ebp - 4], 0
je 0x1002a104
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x64], 0
je 0x1002a104
mov dword [ebp - 0x28c], 1
jmp 0x1002a10b
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0x64]
cmp dword [ebp + eax*4 - 0x64], ecx
je 0x1002a130
mov dword [ebp - 0x124], 1
jmp 0x1002a137
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x64]
add eax, dword [ebp - 0x124]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x64]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc0], eax
or eax, 0xffffffff
jne 0x1002a16e
cmp dword [ebp - 8], 0
jne 0x1002a16e
and dword [ebp - 0x238], 0
jmp 0x1002a178
mov dword [ebp - 0x238], 1
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x64], 0x4448110c
jl 0x1002a19d
mov dword [ebp - 0xf4], 1
jmp 0x1002a1a4
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xf4], eax
jg 0x1002a1bb
mov dword [ebp - 0x240], 1
jmp 0x1002a1c2
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x64]
cmp eax, dword [ebp - 0x240]
jg 0x1002a1e3
cmp dword [ebp - 8], 0
je 0x1002a1e3
mov dword [ebp - 0xfc], 1
jmp 0x1002a1ea
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x58], 0
jmp 0x1002a203
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jg 0x1002a3e1
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x64], 0x8e4c12f6
jne 0x1002a22e
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xc0], eax
je 0x1002a22e
and dword [ebp - 0x11c], 0
jmp 0x1002a238
mov dword [ebp - 0x11c], 1
cmp dword [ebp - 0xc0], 0xffffffff
jne 0x1002a254
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x64], 0
jne 0x1002a254
and dword [ebp - 0x248], 0
jmp 0x1002a25e
mov dword [ebp - 0x248], 1
cmp dword [ebp - 0x248], 0x70783db4
je 0x1002a276
mov dword [ebp - 0x104], 1
jmp 0x1002a27d
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0xfffffffe
jbe 0x1002a292
mov dword [ebp - 0x250], 1
jmp 0x1002a299
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
neg eax
mov ecx, dword [ebp - 8]
cmp eax, dword [ebp + ecx*4 - 0x64]
jg 0x1002a2b6
mov dword [ebp - 0x10c], 1
jmp 0x1002a2bd
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 8
jae 0x1002a2d2
mov dword [ebp - 0x258], 1
jmp 0x1002a2d9
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0xffffffff
jl 0x1002a2f7
mov eax, 0x9426
test eax, eax
je 0x1002a2f7
mov dword [ebp - 0x114], 1
jmp 0x1002a2fe
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x114], eax
je 0x1002a315
mov dword [ebp - 0x260], 1
jmp 0x1002a31c
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x64]
add eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0x64]
jg 0x1002a33e
mov dword [ebp - 0x268], 1
jmp 0x1002a345
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x268], eax
jne 0x1002a35c
mov dword [ebp - 0x120], 1
jmp 0x1002a363
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x120]
imul eax, eax, 0
neg eax
jne 0x1002a394
mov eax, 0x926a
test eax, eax
jne 0x1002a394
and dword [ebp - 0x1cc], 0
jmp 0x1002a39e
mov dword [ebp - 0x1cc], 1
cmp dword [ebp - 0x1cc], 0
jg 0x1002a3b3
mov dword [ebp - 0x2fc], 1
jmp 0x1002a3ba
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x64]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x90], 0xfffffffc
cmp dword [ebp - 4], 0
je 0x1002a3dc
jmp 0x1002a1fc
jmp 0x1002a1fc
jmp 0x1002a069
mov dword [ebp - 8], 0
jmp 0x1002a3f6
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jg 0x1002a4f5
mov dword [ebp - 0x400], 0
mov dword [ebp - 0x408], 0
mov dword [ebp - 0xbc], 0
jmp 0x1002a42d
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 4
jge 0x1002a449
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x440], 0xb77d8654
jmp 0x1002a420
mov dword [ebp - 0x90], 0x251a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x64], ecx
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x12c]
jne 0x1002a489
mov dword [ebp - 0x304], 1
jmp 0x1002a490
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x358], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 4], eax
jne 0x1002a4cd
cmp dword [ebp - 0x25c], 0
jne 0x1002a4cd
or eax, 0xffffffff
jne 0x1002a4cd
and dword [ebp - 0x134], 0
jmp 0x1002a4d7
mov dword [ebp - 0x134], 1
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
jmp 0x1002a3ef
jmp 0x10029fd8
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax - 0x414], ecx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx + 0x10]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
cmp dword [eax], 0
jne 0x1002a846
mov dword [ebp - 0xac], 0
jmp 0x1002a546
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 4
jge 0x1002a562
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x34c], 0x4ec2e0cf
jmp 0x1002a539
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x35]
push eax
push 0x67f1
push 0
call fcn.1002f301
add esp, 0xc
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x34c], 0
jmp 0x1002a5a4
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x34c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x34c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x34c], 0xffffffed
jle 0x1002a5fc
mov dword [ebp - 0xb4], 0
jmp 0x1002a5cc
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1002a5e8
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x2ec], 7
jmp 0x1002a5bf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ec], 0
je 0x1002a5fa
jmp 0x1002a5fc
jmp 0x1002a58b
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 0x24]
and eax, 0x40
je 0x1002a62c
lea eax, [ebp - 0x1e4]
push eax
push 0x493d
lea eax, [ebp - 0xa8]
push eax
push 0
call fcn.1002bf5e
add esp, 0x10
jmp 0x1002a846
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 0x24]
and eax, 0x80
je 0x1002a846
mov dword [ebp - 0x24c], 0x24b54114
mov dword [ebp - 0x29c], 0xde574131
mov dword [ebp - 0xc], 0
jmp 0x1002a664
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x1002a67a
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x288], 0xffffffff
jmp 0x1002a65d
mov dword [ebp - 0xc], 0
jmp 0x1002a68a
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x1002a6a0
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x3a0], 1
jmp 0x1002a683
mov dword [ebp - 0xc], 0
jmp 0x1002a6b0
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x1002a6c6
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x324], 0x81438367
jmp 0x1002a6a9
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x288]
dec ecx
cmp dword [ebp + eax - 0x288], ecx
jg 0x1002a6ed
mov dword [ebp - 0x13c], 1
jmp 0x1002a6f4
and dword [ebp - 0x13c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x224], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x224]
mov dword [ebp + eax - 0x3a0], ecx
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x224]
jle 0x1002a733
mov dword [ebp - 0x144], 1
jmp 0x1002a73a
and dword [ebp - 0x144], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x288], 0x890c5440
jae 0x1002a758
mov dword [ebp - 0x298], 1
jmp 0x1002a75f
and dword [ebp - 0x298], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x288], 0xfffffffd
jne 0x1002a77a
mov dword [ebp - 0x1dc], 1
jmp 0x1002a781
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x144]
add eax, dword [ebp - 0x1dc]
jne 0x1002a7a1
mov eax, 0x7637
test eax, eax
jne 0x1002a7a1
and dword [ebp - 0x14c], 0
jmp 0x1002a7ab
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x24c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x24c]
mov dword [ebp + eax - 0x324], ecx
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x288]
cmp dword [ebp + eax - 0x324], ecx
jge 0x1002a7f1
mov dword [ebp - 0x154], 1
jmp 0x1002a7f8
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x29c], eax
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1002a833
push 0
push 0x6dc
push 0x2adf
push 0x2531
push 0x44f7
push 0x19c4
call fcn.1002c024
add esp, 0x18
mov eax, dword [ebp - 0x1e4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [eax + 0x24]
mov dword [ecx], eax
jmp 0x1002bb0d
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x15c], 0xfffffff6
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0x16c], 0xf196e6c8
mov dword [ebp - 0x2f8], 0xffffffff
mov dword [ebp - 0x2ac], 0xe469209a
mov dword [ebp - 0x2e8], 0xfffffffe
mov dword [ebp - 0x98], 0
jmp 0x1002a8ca
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1002a8e3
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x7c], 0x597a
jmp 0x1002a8bd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x3b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x360], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe4]
cmp dword [ebp + eax - 0x7c], ecx
jne 0x1002a922
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c], 0
jne 0x1002a934
cmp dword [ebp - 0xe4], 0
jne 0x1002a934
and dword [ebp - 0x22c], 0
jmp 0x1002a93e
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x15c], 0x735b
mov eax, dword [ebp - 0x15c]
imul eax, dword [ebp - 0x22c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x7c]
jg 0x1002a96d
mov dword [ebp - 0x164], 1
jmp 0x1002a974
and dword [ebp - 0x164], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp eax, dword [ebp - 0x164]
jge 0x1002a992
mov dword [ebp - 0x2e4], 1
jmp 0x1002a999
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x3fc], eax
mov eax, 0xcf041577
cmp eax, 0x11e043ee
jae 0x1002a9c1
mov dword [ebp - 0x2a4], 1
jmp 0x1002a9c8
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x350], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c], 0
jne 0x1002a9f7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c], 0
jne 0x1002a9f7
and dword [ebp - 0x1ec], 0
jmp 0x1002aa01
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
imul eax, dword [ebp - 0x2f8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x7c]
jg 0x1002aa32
mov dword [ebp - 0x26c], 1
jmp 0x1002aa39
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0xc39c
jle 0x1002aa51
mov dword [ebp - 0x174], 1
jmp 0x1002aa58
and dword [ebp - 0x174], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x174], eax
jge 0x1002aa76
mov dword [ebp - 0x1f4], 1
jmp 0x1002aa7d
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x2ac]
imul eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x2e8], eax
push 0x79fb
push 0x57c3
push 0x22d
push 0x24fd
push 0x4128
push 0
call fcn.100290c8
add esp, 0x18
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], 0x83111738
mov dword [ebp - 0xc8], 0x6986d6d
mov dword [ebp - 0x4c], 4
mov dword [ebp - 0x70], 0xfffffff7
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x1a4], 0x2560131b
mov dword [ebp - 0xb8], 0
jmp 0x1002ab1a
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x1002ab36
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x3d0], 0xfffffffe
jmp 0x1002ab0d
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0x30], 0
jne 0x1002ab63
mov dword [ebp - 0x17c], 1
jmp 0x1002ab6a
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0xfffc
jb 0x1002ab82
mov dword [ebp - 0x234], 1
jmp 0x1002ab89
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x234], eax
jle 0x1002ab9b
cmp dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x4c], eax
jle 0x1002abb2
mov dword [ebp - 0x184], 1
jmp 0x1002abb9
and dword [ebp - 0x184], 0
cmp dword [ebp - 0x184], 0x2e71cc54
jl 0x1002abd1
mov dword [ebp - 0x2b4], 1
jmp 0x1002abd8
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c4], eax
mov eax, 0xff529126
cmp eax, 0xfffffff8
jb 0x1002ac09
mov dword [ebp - 0x1fc], 1
jmp 0x1002ac10
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
add eax, 0x3ac274d
je 0x1002ac2f
cmp dword [ebp - 0x4c], 0
je 0x1002ac2f
mov dword [ebp - 0x18c], 1
jmp 0x1002ac36
and dword [ebp - 0x18c], 0
cmp dword [ebp - 0x18c], 0xd4fe9304
jae 0x1002ac4e
mov dword [ebp - 0x254], 1
jmp 0x1002ac55
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x254]
imul eax, eax, 0xfc33
sub eax, dword [ebp - 0x70]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x380], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d0]
mov dword [ebp - 0x404], eax
push 4
pop eax
imul eax, eax, 0
push 0xfffffffffffffff7
pop ecx
sub ecx, dword [ebp + eax - 0x3d0]
cmp ecx, dword [ebp - 0x30]
jl 0x1002acb4
mov dword [ebp - 0x204], 1
jmp 0x1002acbb
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
add eax, 0xb0be
cmp dword [ebp - 0x30], eax
jle 0x1002acd7
mov dword [ebp - 0x19c], 1
jmp 0x1002acde
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
sub eax, 0x5d44
cmp eax, dword [ebp - 0x4c]
jne 0x1002acfa
mov dword [ebp - 0x23c], 1
jmp 0x1002ad01
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
neg eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1a4], eax
and dword [ebp - 0xd8], 0
jmp 0x1002ad37
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x28]
add eax, 0x28
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xd8], eax
jge 0x1002bb0d
mov dword [ebp - 0x1ac], 0xf4727cad
mov dword [ebp - 0x8c], 3
mov dword [ebp - 0xd0], 0xf1fe
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x2bc], 0xf874340c
mov dword [ebp - 0x20], 0
jmp 0x1002ad9b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1002adb1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x27c], 0xccc9
jmp 0x1002ad94
mov dword [ebp - 0x20], 0
jmp 0x1002adc1
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1002add7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xb0], 9
jmp 0x1002adba
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c]
cmp eax, dword [ebp - 0xd0]
jg 0x1002ae05
mov dword [ebp - 0x118], 1
jmp 0x1002ae0c
and dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp - 0x388], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov dword [ebp - 0x20c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20c]
mov dword [ebp + eax - 0xb0], ecx
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
shl eax, 3
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x27c]
imul eax, eax, 0xdb9e
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x27c]
jge 0x1002ae88
mov dword [ebp - 0x264], 1
jmp 0x1002ae8f
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0xa87187d
je 0x1002aea7
mov dword [ebp - 0x1b4], 1
jmp 0x1002aeae
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0x5c1e
jne 0x1002aec6
mov dword [ebp - 0x214], 1
jmp 0x1002aecd
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0xfffffff6
jge 0x1002aef2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 0
je 0x1002aef2
mov dword [ebp - 0x1bc], 1
jmp 0x1002aef9
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x1bc], eax
je 0x1002af13
mov dword [ebp - 0x244], 1
jmp 0x1002af1a
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x244], eax
jle 0x1002af34
mov dword [ebp - 0x1c4], 1
jmp 0x1002af3b
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0x85e8
jl 0x1002af53
mov dword [ebp - 0x21c], 1
jmp 0x1002af5a
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 1
jbe 0x1002af6f
mov dword [ebp - 0x128], 1
jmp 0x1002af76
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x118]
sub eax, dword [ebp - 0x128]
jne 0x1002af90
mov dword [ebp - 0x308], 1
jmp 0x1002af97
and dword [ebp - 0x308], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp - 0x3d4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov dword [ebp - 0x130], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
cmp eax, dword [ebp - 0x130]
jl 0x1002afde
mov dword [ebp - 0x138], 1
jmp 0x1002afe5
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
je 0x1002b00b
or eax, 0xffffffff
je 0x1002b00b
mov dword [ebp - 0x148], 1
jmp 0x1002b012
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x148], eax
jge 0x1002b02c
mov dword [ebp - 0x150], 1
jmp 0x1002b033
and dword [ebp - 0x150], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
add eax, dword [ebp - 0x150]
je 0x1002b05d
cmp dword [ebp - 0x8c], 0
je 0x1002b05d
mov dword [ebp - 0xe8], 1
jmp 0x1002b064
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x10], 0
jne 0x1002b49b
mov dword [ebp - 0x9c], 8
mov dword [ebp - 0x168], 0xffffffff
mov dword [ebp - 0xe0], 0xfffffffc
mov dword [ebp - 0x2cc], 0x56123d4a
mov dword [ebp - 0x180], 0xfffe
mov dword [ebp - 0x94], 0
jmp 0x1002b0c8
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1002b0e4
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x178], 0x29729cf3
jmp 0x1002b0bb
cmp dword [ebp - 0x9c], 0
jne 0x1002b151
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x2f0]
cmp eax, dword [ebp - 0x2c4]
jge 0x1002b12c
mov dword [ebp - 0x160], 1
jmp 0x1002b133
and dword [ebp - 0x160], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
cmp dword [ebp - 0x160], eax
jl 0x1002b151
and dword [ebp - 0x170], 0
jmp 0x1002b15b
mov dword [ebp - 0x170], 1
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x170], eax
je 0x1002b181
mov dword [ebp - 0x300], 1
jmp 0x1002b188
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
push 0
push dword [ebp - 0x2d4]
push dword [ebp - 0x28]
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0x210]
call fcn.1002bb11
add esp, 0x14
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x34], 0x2b74c38b
mov dword [ebp - 0x2a0], 5
mov dword [ebp - 0xa4], 0
jmp 0x1002b232
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x1002b24b
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x68], 0xfffffffe
jmp 0x1002b225
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x68], 3
jmp 0x1002b270
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
jl 0x1002b496
mov dword [ebp - 0x40], 0x62751c76
mov dword [ebp - 0x84], 0
jmp 0x1002b2a1
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1002b2bd
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x420], 0x452a2c7a
jmp 0x1002b294
mov dword [ebp - 0x40], 0
jmp 0x1002b2cd
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x1002b45c
mov dword [ebp - 0x18], 0xe1b61bab
mov byte [ebp - 0x46], 0
push 0x269e
push 0
lea eax, [ebp - 0x46]
push eax
call fcn.1002bfb2
add esp, 0xc
mov dword [ebp - 0x18], 0
jmp 0x1002b305
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x1002b457
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1002b328
cmp dword [ebp - 0x18], 0
je 0x1002b328
mov dword [ebp - 0x294], 1
jmp 0x1002b32f
and dword [ebp - 0x294], 0
push 2
pop eax
test eax, eax
je 0x1002b349
push 7
pop eax
test eax, eax
je 0x1002b349
mov dword [ebp - 0x188], 1
jmp 0x1002b350
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0xffffffff
ja 0x1002b365
mov dword [ebp - 0x190], 1
jmp 0x1002b36c
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x190], eax
je 0x1002b383
mov dword [ebp - 0x198], 1
jmp 0x1002b38a
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x198]
je 0x1002b3a1
mov dword [ebp - 0x1a0], 1
jmp 0x1002b3a8
and dword [ebp - 0x1a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x1a0], eax
jl 0x1002b3c6
mov dword [ebp - 0x290], 1
jmp 0x1002b3cd
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x31c], 0x3532
jge 0x1002b407
mov dword [ebp - 0x1a8], 1
jmp 0x1002b40e
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1a8]
add eax, dword [ebp - 0x40]
cmp eax, 0x218f0ed6
jle 0x1002b42d
mov dword [ebp - 0x1b0], 1
jmp 0x1002b434
and dword [ebp - 0x1b0], 0
mov dword [ebp - 0x34], 1
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x1b0]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x420], eax
jmp 0x1002b2fe
jmp 0x1002b2c6
mov dword [ebp - 0x34], 3
jmp 0x1002b46c
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1002b491
push 0x2535
push 0
call fcn.1002f2c4
pop ecx
pop ecx
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x31c], 0
je 0x1002b48f
jmp 0x1002b491
jmp 0x1002b465
jmp 0x1002b25b
jmp 0x1002ad21
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x1d0], 0x5fcb
mov dword [ebp - 0x1c], 0
jmp 0x1002b4bc
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1002b4d2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x32c], 0xfffffff6
jmp 0x1002b4b5
mov dword [ebp - 0x1c], 0
jmp 0x1002b4e2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002b4f8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e0], 1
jmp 0x1002b4db
mov dword [ebp - 0x3c], 0
jmp 0x1002b508
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jg 0x1002b7f3
mov dword [ebp - 0x10], 0xfff6
mov dword [ebp - 0x50], 0x83a0f0f5
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x32c]
imul eax, eax, 0xb2c5
cmp eax, 0x1e5c8a52
jg 0x1002b556
mov dword [ebp - 0x1b8], 1
jmp 0x1002b55d
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
jle 0x1002b57a
mov dword [ebp - 0x1c0], 1
jmp 0x1002b581
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0xcca69919
je 0x1002b599
mov dword [ebp - 0x2a8], 1
jmp 0x1002b5a0
and dword [ebp - 0x2a8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2e0]
mov dword [ebp - 0x3ac], eax
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x2e0], 0x161d
imul eax, dword [ebp - 0x1d0]
cmp eax, 0xffff
je 0x1002b5dc
mov dword [ebp - 0x1c8], 1
jmp 0x1002b5e3
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x1c8]
lea eax, [eax + ecx - 0xe1f6]
test eax, eax
je 0x1002b60c
cmp dword [ebp - 0x1d0], 0
je 0x1002b60c
mov dword [ebp - 0x1d8], 1
jmp 0x1002b613
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1d8], eax
jg 0x1002b622
cmp dword [ebp - 0x10], 0
cmp dword [ebp - 0x3c], 0x5aba9a98
jl 0x1002b63d
cmp dword [ebp - 0x3c], 0
je 0x1002b63d
mov dword [ebp - 0x1e0], 1
jmp 0x1002b644
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1e0], eax
jle 0x1002b65b
mov dword [ebp - 0xc4], 1
jmp 0x1002b662
and dword [ebp - 0xc4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + eax - 0x2e0], ecx
cmp dword [ebp - 0xc4], 0
je 0x1002b78c
cmp dword [ebp - 0x24], 0
je 0x1002b78c
mov dword [ebp - 0x2b0], 0x37280dda
mov dword [ebp - 0x10], 0
jmp 0x1002b6a5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1002b78a
mov dword [ebp - 0x50], 1
jmp 0x1002b6bf
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1002b785
mov dword [ebp - 0x24], 1
jmp 0x1002b6d9
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1002b780
mov dword [ebp - 0x1e8], 0xdee6ee3e
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x24], eax
jle 0x1002b719
mov dword [ebp - 0x1f0], 1
jmp 0x1002b720
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1f0]
jl 0x1002b73a
mov dword [ebp - 0x1f8], 1
jmp 0x1002b741
and dword [ebp - 0x1f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x32c]
cmp dword [ebp - 0x1f8], eax
jge 0x1002b762
mov dword [ebp - 0x200], 1
jmp 0x1002b769
and dword [ebp - 0x200], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x200]
mov dword [ebp + eax - 0x2e0], ecx
jmp 0x1002b6d2
jmp 0x1002b6b8
jmp 0x1002b69e
jmp 0x1002b7c8
mov dword [ebp - 0x208], 5
mov dword [ebp - 0x35c], 0x3df4
mov dword [ebp - 0x364], 0x87f9bd85
mov eax, dword [ebp - 0x208]
dec eax
mov dword [ebp - 0x208], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2e0], 1
mov dword [ebp - 0x10], 0
jmp 0x1002b7d8
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1002b7ee
push 1
push 0x4640
call fcn.10027602
pop ecx
pop ecx
jmp 0x1002b7d1
jmp 0x1002b501
push 4
push 0x1000
mov eax, dword [ebp - 0x28]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x210]
add ecx, dword [eax + 0xc]
push ecx
push 0x45b
push 0x431
call fcn.10026b0a
pop ecx
pop ecx
call eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x28]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2b8]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xd4]
call fcn.10026c03
add esp, 0xc
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x74], 0xfffffffb
mov dword [ebp - 0x54], 0xcdb8faaa
mov dword [ebp - 0x6c], 0xffff
mov dword [ebp - 0xf0], 9
mov dword [ebp - 0x33c], 0xb91ee4c
mov dword [ebp - 0x338], 0xb91ee4c
mov dword [ebp - 0x334], 0xb91ee4c
mov dword [ebp - 0x330], 0xb91ee4c
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x2d0], 5
mov dword [ebp - 0x2c], 0
jmp 0x1002b8b9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002b8cf
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xcc], 0xfffffffd
jmp 0x1002b8b2
mov dword [ebp - 0x2c], 0
jmp 0x1002b8df
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1002b8f5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3e0], 0xfffffff6
jmp 0x1002b8d8
mov dword [ebp - 0x44], 0
jmp 0x1002b905
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1002b920
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xcc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x54], eax
jmp 0x1002b8fe
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x218], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x218]
mov dword [ebp + eax - 0x33c], ecx
cmp dword [ebp - 0x218], 0x40271dbc
je 0x1002b95c
mov dword [ebp - 0x2c0], 1
jmp 0x1002b963
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x74], 0xffffffff
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp + eax - 0x3e0], ecx
mov eax, 0xc5ad
sub eax, dword [ebp - 0x6c]
cmp eax, 0xd37f4a1d
jne 0x1002b9b3
mov dword [ebp - 0x220], 1
jmp 0x1002b9ba
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
sub eax, 0xfa89
cmp eax, 0x62b2
jl 0x1002b9d8
mov dword [ebp - 0x228], 1
jmp 0x1002b9df
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
add eax, dword [ebp - 0x228]
cmp eax, 0xc938
jne 0x1002ba05
mov dword [ebp - 0x230], 1
jmp 0x1002ba0c
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x230], eax
je 0x1002ba23
mov dword [ebp - 0xec], 1
jmp 0x1002ba2a
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
sub eax, 6
cmp dword [ebp - 0x54], eax
jg 0x1002ba54
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3e0], 0
je 0x1002ba54
mov dword [ebp - 0xf8], 1
jmp 0x1002ba5b
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x6c]
jl 0x1002ba87
mov dword [ebp - 0x100], 1
jmp 0x1002ba8e
and dword [ebp - 0x100], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
cmp dword [ebp - 0x100], eax
jl 0x1002baaf
mov dword [ebp - 0x108], 1
jmp 0x1002bab6
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x110]
add eax, 0xdb20
mov dword [ebp - 0x2d0], eax
push 0x6c73
push 0x18f6
push 0x3de8
push 0
lea eax, [ebp - 0xd4]
push eax
push 0x1113
push 0x5262
lea eax, [ebp - 0x28]
push eax
call fcn.10030ec6
add esp, 0x20
jmp 0x1002ad21
mov esp, ebp
pop ebp
ret