Function at 0x1002d3ec
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008b087
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x288
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002d44d
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
movzx eax, byte [eax]
test eax, eax
je 0x1002d448
push 0
push 0x16a6
call dword [0x1067f278]
push eax
call dword [0x1067f280]
jmp 0x1002e672
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x74], eax
push 2
lea ecx, [ebp - 0x208]
call fcn.100177a3
and dword [ebp - 4], 0
mov dword [ebp - 0x14], 0x7ce53d8d
mov dword [ebp - 0x1f4], 0xc946
mov dword [ebp - 0x64], 0
jmp 0x1002d497
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1002d4b3
push dword [ebp - 0x64]
lea ecx, [ebp - 0x208]
call fcn.10017810
mov dword [eax], 0xfffffff6
jmp 0x1002d490
mov dword [ebp - 0x14], 0
jmp 0x1002d4c3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1002d4e2
mov byte [ebp - 0x35], 0
push 0x6af2
push 0
lea eax, [ebp - 0x35]
push eax
call fcn.1002be21
add esp, 0xc
jmp 0x1002d4bc
mov dword [ebp - 0x14], 0
jmp 0x1002d4f2
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff3
jl 0x1002d623
mov dword [ebp - 0x1a8], 0xed1d25bb
mov dword [ebp - 0x58], 0
jmp 0x1002d516
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1002d529
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x6c], 0x8108531d
jmp 0x1002d50f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
jne 0x1002d57c
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x1f4]
add eax, dword [ebp - 0x14]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x6c]
jne 0x1002d560
mov dword [ebp - 0xcc], 1
jmp 0x1002d567
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0xb42be197
jne 0x1002d57c
and dword [ebp - 0x17c], 0
jmp 0x1002d586
mov dword [ebp - 0x17c], 1
cmp dword [ebp - 0x17c], 0xfffffff7
jb 0x1002d59b
mov dword [ebp - 0x1fc], 1
jmp 0x1002d5a2
and dword [ebp - 0x1fc], 0
mov eax, 0x21046671
test eax, eax
jne 0x1002d5b4
cmp dword [ebp - 0x1a8], 0
je 0x1002d5bf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
cmp dword [ebp - 0x14], 0xfffc
jae 0x1002d5d4
mov dword [ebp - 0x120], 1
jmp 0x1002d5db
and dword [ebp - 0x120], 0
push 1
lea ecx, [ebp - 0x208]
call fcn.10017810
mov eax, dword [eax]
cmp eax, dword [ebp - 0x120]
jl 0x1002d5fb
mov dword [ebp - 0x78], 1
jmp 0x1002d5ff
and dword [ebp - 0x78], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x78]
mov dword [ebp + eax - 0x6c], ecx
push 0
lea ecx, [ebp - 0x208]
call fcn.10017810
mov ecx, dword [ebp - 0x78]
mov dword [eax], ecx
jmp 0x1002d4eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x208]
call fcn.1001780b
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x60], 0xffffffff
jmp 0x1002d66a
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x17
jg 0x1002d746
mov dword [ebp - 0x21c], 0xcba2afe0
mov dword [ebp - 0x218], 0xcba2afe0
mov dword [ebp - 0x214], 0xcba2afe0
mov dword [ebp - 0x210], 0xcba2afe0
lea ecx, [ebp - 0x91]
call fcn.100091a3
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x294]
call fcn.1001781f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x228]
call fcn.100177e5
mov dword [ebp - 4], 1
mov dword [ebp - 0x174], 0x735e4b78
mov dword [ebp - 0x1e4], 0xab76d609
push 0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.10029da9
add esp, 0x10
push 0
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x228]
push eax
push 0x5ce3
push 0x2863
push 0x6bd
call fcn.1002e80c
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x228]
call fcn.1001780b
jmp 0x1002d663
and dword [ebp - 0x98], 0
jmp 0x1002d765
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x24]
add eax, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x98], eax
jge 0x1002e672
mov dword [ebp - 0x44], 0x477862fd
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x44], 3
jmp 0x1002d79f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xc
jg 0x1002dbd5
push 3
lea ecx, [ebp - 0x188]
call fcn.100177a3
mov dword [ebp - 4], 2
mov dword [ebp - 0x70], 0xfffa
push 0xba6
lea eax, [ebp - 0x240]
push eax
push 1
push 0x1351
lea eax, [ebp - 0x188]
push eax
call fcn.10027b20
add esp, 0x14
push 1
lea ecx, [ebp - 0x188]
call fcn.10017810
mov dword [eax], 4
jmp 0x1002d81f
push 1
lea ecx, [ebp - 0x188]
call fcn.10017810
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x188]
call fcn.10017810
cmp dword [eax], 5
jl 0x1002d852
mov dword [ebp - 0x1ac], 1
lea eax, [ebp - 0x40]
push eax
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.10031420
add esp, 0xc
jmp 0x1002d7fb
mov dword [ebp - 0x40], 0x11
jmp 0x1002d862
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x11
jne 0x1002dbc1
mov dword [ebp - 0x4c], 2
mov dword [ebp - 0x128], 0xc8fbfc75
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x68], 0
jmp 0x1002d897
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1002d8ad
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xa0], 1
jmp 0x1002d890
push 1
lea ecx, [ebp - 0x188]
call fcn.10017810
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x1002da20
mov dword [ebp - 0x34], 0xfffffffa
cmp dword [ebp - 0x44], 0
jne 0x1002d981
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa0]
mov dword [ebp - 0x1a4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa0], eax
cmp dword [ebp - 0x1a4], 9
jbe 0x1002d91d
mov dword [ebp - 0x11c], 1
jmp 0x1002d924
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x4c], 0
je 0x1002d941
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x34]
dec ecx
sub eax, ecx
je 0x1002d941
mov dword [ebp - 0x118], 1
jmp 0x1002d948
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x118], eax
jl 0x1002d95f
mov dword [ebp - 0xb8], 1
jmp 0x1002d966
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x11c], eax
jle 0x1002d981
and dword [ebp - 0xc0], 0
jmp 0x1002d98b
mov dword [ebp - 0xc0], 1
cmp dword [ebp - 0xc0], 1
jle 0x1002d9a0
mov dword [ebp - 0x150], 1
jmp 0x1002d9a7
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x150], eax
jg 0x1002d9c1
mov dword [ebp - 0xc8], 1
jmp 0x1002d9c8
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 0
jmp 0x1002d9e1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x34
jge 0x1002da1e
mov byte [ebp - 0x2c], 0
push 0x17cb
push 0x21ed
push 0
push 0x78d9
lea eax, [ebp - 0x2c]
push eax
call fcn.1002bebf
add esp, 0x14
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x1002da1c
push 0
call dword [0x1067f21c]
jmp 0x1002d9da
jmp 0x1002da34
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x1002da34
push 0
call fcn.10031489
pop ecx
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x254], eax
mov eax, 0x21f9
test eax, eax
jne 0x1002da55
mov dword [ebp - 0xd0], 1
jmp 0x1002da5c
and dword [ebp - 0xd0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0xd0], eax
jl 0x1002da7d
mov dword [ebp - 0x168], 1
jmp 0x1002da84
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp eax, dword [ebp - 0x168]
jne 0x1002daa5
mov dword [ebp - 0xd8], 1
jmp 0x1002daac
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xd8], eax
je 0x1002dac3
mov dword [ebp - 0x1e8], 1
jmp 0x1002daca
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x26c], eax
push 2
lea ecx, [ebp - 0x188]
call fcn.10017810
cmp dword [ebp - 0x48], 0x315bfeb1
je 0x1002db07
mov dword [ebp - 0x130], 1
jmp 0x1002db0e
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xa0]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
dec eax
jne 0x1002db42
mov eax, 0xd5b4
test eax, eax
jne 0x1002db42
and dword [ebp - 0xe0], 0
jmp 0x1002db4c
mov dword [ebp - 0xe0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp eax, dword [ebp - 0xe0]
jle 0x1002db6d
mov dword [ebp - 0x158], 1
jmp 0x1002db74
and dword [ebp - 0x158], 0
imul eax, dword [ebp - 0x158], 0
test eax, eax
je 0x1002db8b
mov dword [ebp - 0xe8], 1
jmp 0x1002db92
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0xe8], eax
jl 0x1002dba9
mov dword [ebp - 0x138], 1
jmp 0x1002dbb0
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1b0], eax
jmp 0x1002d85b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.1001780b
jmp 0x1002d798
mov eax, dword [ebp - 0x24]
cmp dword [eax + 0x10], 0
jne 0x1002e27f
mov dword [ebp - 0x18], 0x6c05
mov dword [ebp - 0x1b8], 0xef307d7
mov dword [ebp - 0x50], 0
jmp 0x1002dc03
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1002dc19
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1d8], 2
jmp 0x1002dbfc
cmp dword [ebp - 0x18], 0
je 0x1002dc71
mov dword [ebp - 0x18], 0x11
jmp 0x1002dc2f
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 8
je 0x1002dc48
mov byte [ebp - 0x2a], 0
push 0
lea eax, [ebp - 0x2a]
push eax
call fcn.1002a082
pop ecx
pop ecx
jmp 0x1002dc28
mov dword [ebp - 0x18], 0
jmp 0x1002dc58
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1002dc6f
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1d8], 0
je 0x1002dc6d
jmp 0x1002dc6f
jmp 0x1002dc51
jmp 0x1002dcac
mov dword [ebp - 0x1f8], 0x7b84
push 0x3357
lea eax, [ebp - 0x1b8]
push eax
push 0x72c
push 0x39de
push 0
push 0x4f2
push 0x388b
lea eax, [ebp - 0x1f8]
push eax
call fcn.1003261d
add esp, 0x20
mov byte [ebp - 0x2b], 0
lea eax, [ebp - 0x2b]
push eax
push 0
push 0x37ad
push 0x6494
call fcn.100324d7
add esp, 0x10
push 0x45fd
push 0
push 0x58a
push 0x6d47
push 0x930
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x104]
push eax
push 0x7007
lea eax, [ebp - 0x1c0]
push eax
push 0x31d7
call fcn.100309f5
add esp, 0x2c
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x1c], 0
jmp 0x1002dd20
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002dd33
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 0x3e018ebd
jmp 0x1002dd19
mov dword [ebp - 0x1c], 0
jmp 0x1002dd43
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002dd59
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x88], 5
jmp 0x1002dd3c
mov byte [ebp - 0x2d], 0
lea eax, [ebp - 0x2d]
push eax
push 0
call fcn.1002a0cc
pop ecx
pop ecx
cmp dword [ebp - 0x20], 0
jne 0x1002de23
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1002dd88
mov dword [ebp - 0x1e0], 1
jmp 0x1002dd8f
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x274], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x3c]
cmp eax, 0xbf74
jne 0x1002ddc0
mov dword [ebp - 0xf0], 1
jmp 0x1002ddc7
and dword [ebp - 0xf0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0xf0], eax
jne 0x1002ddef
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1002ddef
mov dword [ebp - 0x1c8], 1
jmp 0x1002ddf6
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x20], 2
je 0x1002de11
mov dword [ebp - 0x178], 1
jmp 0x1002de18
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x178]
jge 0x1002de3f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x1002de3f
mov dword [ebp - 0xf8], 1
jmp 0x1002de46
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
sub eax, 3
cmp eax, 1
jle 0x1002de60
mov dword [ebp - 0x1f0], 1
jmp 0x1002de67
and dword [ebp - 0x1f0], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x88], 0x7963f6d1
jg 0x1002de86
mov dword [ebp - 0x140], 1
jmp 0x1002de8d
and dword [ebp - 0x140], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
add eax, dword [ebp - 0x140]
jne 0x1002deb1
cmp dword [ebp - 0x20], 0
jne 0x1002deb1
and dword [ebp - 0x100], 0
jmp 0x1002debb
mov dword [ebp - 0x100], 1
mov eax, dword [ebp - 0x100]
add eax, 0x3783312e
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x88]
jle 0x1002dee1
mov dword [ebp - 0x160], 1
jmp 0x1002dee8
and dword [ebp - 0x160], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x160], eax
jl 0x1002df15
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x88], 0
jne 0x1002df15
and dword [ebp - 0x108], 0
jmp 0x1002df1f
mov dword [ebp - 0x108], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x108], eax
jg 0x1002df40
mov dword [ebp - 0x148], 1
jmp 0x1002df47
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0xd3610cb4
jbe 0x1002df5f
mov dword [ebp - 0x90], 1
jmp 0x1002df66
and dword [ebp - 0x90], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x90]
mov dword [ebp + eax - 0x88], ecx
cmp dword [ebp - 0x90], 0x48968f25
jne 0x1002e260
mov dword [ebp - 0x10], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
jne 0x1002e05f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x10], eax
je 0x1002dfbc
mov dword [ebp - 0x170], 1
jmp 0x1002dfc3
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x280], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
je 0x1002dff4
cmp dword [ebp - 0x10], 0
je 0x1002dff4
mov dword [ebp - 0x110], 1
jmp 0x1002dffb
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x170]
test eax, eax
ja 0x1002e01b
mov dword [ebp - 0xa8], 1
jmp 0x1002e022
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xa8], eax
jle 0x1002e03a
xor eax, eax
jne 0x1002e03a
and dword [ebp - 0x1d0], 0
jmp 0x1002e044
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x244], eax
mov eax, 0x53d1
test eax, eax
jne 0x1002e05f
and dword [ebp - 0xac], 0
jmp 0x1002e069
mov dword [ebp - 0xac], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0xac], eax
je 0x1002e08a
mov dword [ebp - 0xb4], 1
jmp 0x1002e091
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xb4], eax
jg 0x1002e0a8
mov dword [ebp - 0xbc], 1
jmp 0x1002e0af
and dword [ebp - 0xbc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
add eax, dword [ebp - 0xbc]
je 0x1002e183
push 3
lea ecx, [ebp - 0x234]
call fcn.100177a3
mov dword [ebp - 4], 3
lea eax, [ebp - 0x234]
push eax
push 0
lea eax, [ebp - 0x248]
push eax
call fcn.1002a10a
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x1002e104
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002e14b
mov byte [ebp - 0x2f], 0
push 0x4d4f
push 0x3ddc
lea eax, [ebp - 0x2f]
push eax
push 0x4709
push 0
push 0x2e34
push 0x69e
push 0x7c9e
push 0x1cf2
push 0x5f8a
push 0x4811
call fcn.1002f429
add esp, 0x2c
jmp 0x1002e0fd
push 0
lea ecx, [ebp - 0x234]
call fcn.10017810
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.1001780b
jmp 0x1002e25e
mov dword [ebp - 0xec], 0xffffffff
mov eax, 0x464e
test eax, eax
je 0x1002e237
mov eax, dword [ebp - 0x10]
add eax, 0x52b186ec
cmp dword [ebp - 0x10], eax
je 0x1002e1b3
mov dword [ebp - 0xa4], 1
jmp 0x1002e1ba
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0x829a
jge 0x1002e1d2
mov dword [ebp - 0xd4], 1
jmp 0x1002e1d9
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xd4]
jne 0x1002e1f7
mov dword [ebp - 0xdc], 1
jmp 0x1002e1fe
and dword [ebp - 0xdc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
imul eax, dword [ebp - 0xdc]
cmp eax, 0xfffffffd
jne 0x1002e220
mov dword [ebp - 0xe4], 1
jmp 0x1002e227
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0xeea3
jl 0x1002e237
cmp dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xec], eax
jg 0x1002e24e
mov dword [ebp - 0xf4], 1
jmp 0x1002e255
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10], eax
jmp 0x1002e27a
mov dword [ebp - 0x1a0], 0x224
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x1a0], eax
jmp 0x1002d74f
push 3
lea ecx, [ebp - 0x194]
call fcn.100177a3
mov dword [ebp - 4], 4
push 4
lea ecx, [ebp - 0x28c]
call fcn.100177a3
mov byte [ebp - 4], 5
lea eax, [ebp - 0x19c]
push eax
push 0x21f1
push 0x2668
push 0
lea eax, [ebp - 0x194]
push eax
call fcn.1002f298
add esp, 0x14
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x19c]
push eax
push 0
call fcn.1002f342
add esp, 0xc
push 2
lea ecx, [ebp - 0x194]
call fcn.10017810
and dword [eax], 0
jmp 0x1002e314
push 2
lea ecx, [ebp - 0x194]
call fcn.10017810
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xfc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x194]
call fcn.10017810
cmp dword [eax], 0xffffffe4
jg 0x1002e3b1
mov dword [ebp - 0x1b4], 0xd97a888a
mov dword [ebp - 0x24c], 0xfffffffa
mov dword [ebp - 0x250], 0xfffffffe
mov dword [ebp - 0x278], 0xfffffff7
mov dword [ebp - 0x258], 0x844ba928
mov dword [ebp - 0x270], 0xc4e7ccce
mov dword [ebp - 0x1bc], 0xa151cd25
push 0x4bfd
push 0x5768
lea eax, [ebp - 0x1b4]
push eax
push 0x48a1
lea eax, [ebp - 0x194]
push eax
push 0x196f
push 1
call fcn.10029515
add esp, 0x1c
push 0
lea eax, [ebp - 0x1bc]
push eax
call fcn.1002f3f7
pop ecx
pop ecx
jmp 0x1002e2f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28c]
call fcn.1001780b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.1001780b
push 4
push 0x1000
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x104]
add ecx, dword [eax + 0xc]
push ecx
push 0x1927
push 0x14b9
call fcn.100270a3
pop ecx
pop ecx
call eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c4]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x8c]
call fcn.10027123
add esp, 0xc
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x7c], 0x11914cc5
mov dword [ebp - 0x13c], 0x4adc6f79
mov dword [ebp - 0x54], 0xfffffffb
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x1dc], 0x9a7e1289
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jg 0x1002e50d
xor eax, eax
sub eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jle 0x1002e478
cmp dword [ebp - 0x28], 0
jne 0x1002e478
and dword [ebp - 0x10c], 0
jmp 0x1002e482
mov dword [ebp - 0x10c], 1
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x7c], eax
jge 0x1002e4a8
mov eax, 0x40ee
test eax, eax
je 0x1002e4a8
mov dword [ebp - 0x114], 1
jmp 0x1002e4af
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x114]
cmp eax, 0xffffffff
jg 0x1002e4ca
mov dword [ebp - 0x124], 1
jmp 0x1002e4d1
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 1
jl 0x1002e4e9
cmp dword [ebp - 0x7c], 0
jne 0x1002e4e9
and dword [ebp - 0x12c], 0
jmp 0x1002e4f3
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x12c]
test eax, eax
je 0x1002e50d
mov dword [ebp - 0x134], 1
jmp 0x1002e514
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jne 0x1002e535
mov dword [ebp - 0x144], 1
jmp 0x1002e53c
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0x17a68fa
jne 0x1002e554
mov dword [ebp - 0x14c], 1
jmp 0x1002e55b
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x54], eax
jl 0x1002e578
mov dword [ebp - 0x1cc], 1
jmp 0x1002e57f
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x23c], eax
mov eax, 0xcf8fb6f8
cmp eax, 0x6c0f1a01
jb 0x1002e5a9
mov dword [ebp - 0x1d4], 1
jmp 0x1002e5b0
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x5c], 0
je 0x1002e5c8
cmp dword [ebp - 0x54], 0
je 0x1002e5c8
mov dword [ebp - 0x154], 1
jmp 0x1002e5cf
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x154]
cmp eax, 0xfff9
jb 0x1002e5ec
mov dword [ebp - 0x15c], 1
jmp 0x1002e5f3
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 9
jl 0x1002e608
mov dword [ebp - 0x164], 1
jmp 0x1002e60f
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x164]
test eax, eax
je 0x1002e629
mov dword [ebp - 0x16c], 1
jmp 0x1002e630
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1002e661
push 1
push 0x54bf
push 0x7fac
push 0x3906
call fcn.10029da9
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 8], ecx
jmp 0x1002d74f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret