Function at 0x1002ad5d
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080693
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2a8
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1002ade3
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x60]
mov dword [eax], 0
jmp 0x1002adc1
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov eax, dword [ebp - 0x60]
cmp dword [eax], 2
jge 0x1002adde
mov eax, dword [ebp - 0x60]
push dword [eax]
mov ecx, dword [ebp - 0x234]
call fcn.1001694b
or dword [eax], 0xffffffff
jmp 0x1002adb6
jmp 0x1002c13f
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x88], 3
mov dword [ebp - 0x98], 3
push 1
lea ecx, [ebp - 0x230]
call fcn.100168de
and dword [ebp - 4], 0
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x1002ae3a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002ae56
push dword [ebp - 0x34]
lea ecx, [ebp - 0x230]
call fcn.1001694b
mov dword [eax], 0x17f75960
jmp 0x1002ae33
mov dword [ebp - 0x34], 0
jmp 0x1002ae66
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002ae7c
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xd0], 0xaafa0b2b
jmp 0x1002ae5f
mov dword [ebp - 0x88], 0xfffffff2
jmp 0x1002ae95
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffe6
jg 0x1002b1a6
mov dword [ebp - 0x21c], 1
mov dword [ebp - 0x214], 0x551da622
mov dword [ebp - 0x170], 0x79e672ca
mov dword [ebp - 0x190], 0x4da86284
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x84], 0
jmp 0x1002aeed
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x1002af09
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x244], 0x7adf1adb
jmp 0x1002aee0
push 0
lea eax, [ebp - 0x168]
push eax
push 0x5341
push 0x3807
call fcn.10029420
add esp, 0x10
mov esi, dword [ebp - 0x214]
push 0
lea ecx, [ebp - 0x230]
call fcn.1001694b
cmp esi, dword [eax]
jge 0x1002af47
mov dword [ebp - 0x178], 1
jmp 0x1002af4e
and dword [ebp - 0x178], 0
mov dword [ebp - 0x98], 6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x244]
cmp eax, dword [ebp - 0x98]
jl 0x1002af79
mov dword [ebp - 0x1a0], 1
jmp 0x1002af80
and dword [ebp - 0x1a0], 0
push 0
lea ecx, [ebp - 0x230]
call fcn.1001694b
mov ecx, dword [ebp - 0x1a0]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x244]
jl 0x1002afb1
mov dword [ebp - 0x198], 1
jmp 0x1002afb8
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
dec eax
dec eax
mov dword [ebp - 0xb8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + eax - 0xd0], ecx
mov eax, dword [ebp - 0x19c]
add eax, dword [ebp - 0xb8]
jne 0x1002b002
mov eax, 0x914a1265
test eax, eax
jne 0x1002b002
cmp dword [ebp - 0x98], 0
jne 0x1002b002
and dword [ebp - 0x160], 0
jmp 0x1002b00c
mov dword [ebp - 0x160], 1
push 0
lea ecx, [ebp - 0x230]
call fcn.1001694b
mov ecx, dword [ebp - 0x160]
sub ecx, dword [eax]
jne 0x1002b033
push 8
pop eax
test eax, eax
jne 0x1002b033
and dword [ebp - 0xc0], 0
jmp 0x1002b03d
mov dword [ebp - 0xc0], 1
imul eax, dword [ebp - 0xc0], 0xfffffff8
sub eax, 6
je 0x1002b05e
cmp dword [ebp - 0x168], 0
je 0x1002b05e
mov dword [ebp - 0xc8], 1
jmp 0x1002b065
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x270], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
imul eax, dword [ebp - 0x190]
test eax, eax
jne 0x1002b0ae
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd0], 0
jne 0x1002b0ae
and dword [ebp - 0xd8], 0
jmp 0x1002b0b8
mov dword [ebp - 0xd8], 1
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0xd8]
jg 0x1002b0d2
mov dword [ebp - 0x180], 1
jmp 0x1002b0d9
and dword [ebp - 0x180], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
cmp dword [ebp - 0x180], eax
je 0x1002b0fa
mov dword [ebp - 0xe0], 1
jmp 0x1002b101
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0
jl 0x1002b116
mov dword [ebp - 0x188], 1
jmp 0x1002b11d
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
cmp dword [ebp - 0x188], eax
jge 0x1002b13e
mov dword [ebp - 0xe8], 1
jmp 0x1002b145
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0xe8], eax
jg 0x1002b15f
mov dword [ebp - 0xf0], 1
jmp 0x1002b166
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0xf0], eax
je 0x1002b180
mov dword [ebp - 0xf8], 1
jmp 0x1002b187
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0xf8]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x244], eax
jmp 0x1002ae88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.10016946
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x70], 0x48261f9c
mov dword [ebp - 0x70], 0xffffffee
jmp 0x1002b1d8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jl 0x1002b275
push 1
lea ecx, [ebp - 0x26c]
call fcn.100168de
mov dword [ebp - 4], 1
mov dword [ebp - 0x8c], 0
jmp 0x1002b20f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1002b231
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x26c]
call fcn.1001694b
mov dword [eax], 0x34e6d4f2
jmp 0x1002b202
push 0
lea eax, [ebp - 0x26c]
push eax
call fcn.10029d4b
pop ecx
pop ecx
mov byte [ebp - 0x48], 0
movzx eax, byte [ebp - 0x48]
test eax, eax
je 0x1002b261
push 0x4fab
push 0x5e69
push 0
call fcn.1002780e
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x26c]
call fcn.10016946
jmp 0x1002b1d1
push 3
lea ecx, [ebp - 0x1c8]
call fcn.100168de
mov dword [ebp - 4], 2
mov dword [ebp - 0x38], 0x5020f89b
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x1dc], 0xfffffffa
mov dword [ebp - 0x94], 0
jmp 0x1002b2bd
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1002b2df
push dword [ebp - 0x94]
lea ecx, [ebp - 0x1c8]
call fcn.1001694b
mov dword [eax], 0xdc85f70a
jmp 0x1002b2b0
mov dword [ebp - 0x38], 2
jmp 0x1002b2ef
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1002b477
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x1e8], 0x349b8ae0
mov dword [ebp - 0x20c], 0x4674
mov dword [ebp - 0x20], 2
jmp 0x1002b324
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1002b43e
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x1002b342
push 0
call fcn.10027c5e
pop ecx
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1c8]
call fcn.1001694b
mov ecx, dword [ebp - 0x20]
add ecx, dword [eax]
je 0x1002b369
cmp dword [ebp - 0x20], 0
je 0x1002b369
mov dword [ebp - 0x1a4], 1
jmp 0x1002b370
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jg 0x1002b38a
mov dword [ebp - 0x100], 1
jmp 0x1002b391
and dword [ebp - 0x100], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1c8]
call fcn.1001694b
imul eax, dword [eax], 0xe780
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
neg eax
cmp eax, dword [ebp - 0x100]
je 0x1002b3c7
mov dword [ebp - 0x1ac], 1
jmp 0x1002b3ce
and dword [ebp - 0x1ac], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1c8]
call fcn.1001694b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1ac]
jl 0x1002b42b
mov dword [ebp - 0x1e0], 8
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1002ab24
add esp, 0x1c
cmp dword [ebp - 0x20], 0
je 0x1002b429
jmp 0x1002b31d
jmp 0x1002b439
push 0x6c32
push 0
call fcn.10027d82
pop ecx
pop ecx
jmp 0x1002b31d
push 0xcba
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x1e8]
push eax
push 0x2253
lea eax, [ebp - 0x1c8]
push eax
push 0
call fcn.1002c14e
add esp, 0x20
jmp 0x1002b2e8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c8]
call fcn.10016946
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x30], eax
and dword [ebp - 0xac], 0
jmp 0x1002b4ba
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x30]
add eax, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xac], eax
jge 0x1002c13f
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x10], 0
jne 0x1002bbc7
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x50], 0xccb97252
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x3c], 0xe13f5e3
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x5c], 0x390f3bd7
mov dword [ebp - 0x1f8], 0xb93b5720
mov dword [ebp - 0x218], 0x251b
mov dword [ebp - 0x24], 0
jmp 0x1002b52a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002b53d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x40], 0x45db
jmp 0x1002b523
mov dword [ebp - 0x24], 0
jmp 0x1002b54d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002b560
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x80], 2
jmp 0x1002b546
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x80]
cmp dword [ebp + eax - 0x80], ecx
jl 0x1002b582
mov dword [ebp - 0x210], 1
jmp 0x1002b589
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x44]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x80]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x80]
cmp eax, dword [ebp - 0x3c]
je 0x1002b5b1
mov dword [ebp - 0x108], 1
jmp 0x1002b5b8
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x50], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
cmp dword [ebp - 0x50], eax
je 0x1002b5dd
mov dword [ebp - 0x1b4], 1
jmp 0x1002b5e4
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
add eax, dword [ebp - 0x54]
cmp eax, 0xae9f9034
jae 0x1002b62f
mov dword [ebp - 0x1bc], 1
jmp 0x1002b636
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
neg eax
je 0x1002b652
cmp dword [ebp - 0x54], 0
je 0x1002b652
mov dword [ebp - 0x114], 1
jmp 0x1002b659
and dword [ebp - 0x114], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
cmp dword [ebp - 0x114], eax
jle 0x1002b677
mov dword [ebp - 0x1f0], 1
jmp 0x1002b67e
and dword [ebp - 0x1f0], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x80], 0xffff
jae 0x1002b69a
mov dword [ebp - 0x220], 1
jmp 0x1002b6a1
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x40], 0xe44
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x80], 8
je 0x1002b6c8
mov dword [ebp - 0xa0], 1
jmp 0x1002b6cf
and dword [ebp - 0xa0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + eax - 0x80], ecx
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x5c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0xfffe
jbe 0x1002b704
mov dword [ebp - 0x1b8], 1
jmp 0x1002b70b
and dword [ebp - 0x1b8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5c]
cmp dword [ebp + eax - 0x80], ecx
jle 0x1002b725
mov dword [ebp - 0x16c], 1
jmp 0x1002b72c
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
cmp dword [ebp - 0x16c], eax
je 0x1002b74a
mov dword [ebp - 0x11c], 1
jmp 0x1002b751
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x54]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x40]
add ecx, dword [ebp - 0x11c]
sub eax, ecx
cmp eax, dword [ebp - 0x54]
jl 0x1002b780
cmp dword [ebp - 0x1c], 0
jne 0x1002b780
cmp dword [ebp - 0x3c], 0
jne 0x1002b780
and dword [ebp - 0x194], 0
jmp 0x1002b78a
mov dword [ebp - 0x194], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x194]
sub ecx, dword [ebp + eax - 0x40]
je 0x1002b7b4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x80], 0
je 0x1002b7b4
mov dword [ebp - 0x124], 1
jmp 0x1002b7bb
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x50], eax
or eax, 0xffffffff
cmp eax, 0x883e
jne 0x1002b7da
mov dword [ebp - 0x174], 1
jmp 0x1002b7e1
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x174]
neg eax
jne 0x1002b7fd
cmp dword [ebp - 0x44], 0
jne 0x1002b7fd
and dword [ebp - 0x12c], 0
jmp 0x1002b807
mov dword [ebp - 0x12c], 1
imul eax, dword [ebp - 0x12c], 0x1734
cmp dword [ebp - 0x1b8], eax
jg 0x1002b8d7
mov dword [ebp - 0x3c], 0
jmp 0x1002b82d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x1002b8d5
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x40]
sub eax, 0x116104db
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x80], eax
mov dword [ebp - 0x44], 0
jmp 0x1002b86a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x1002b8d0
mov dword [ebp - 0x50], 0
jmp 0x1002b880
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1002b8ce
mov dword [ebp - 0x1c], 0
jmp 0x1002b896
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1002b8cc
mov dword [ebp - 0x5c], 0
jmp 0x1002b8ac
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x1002b8ca
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp + ecx*4 - 0x40], eax
push 0
call fcn.10027cbe
pop ecx
jmp 0x1002b8a5
jmp 0x1002b88f
jmp 0x1002b879
jmp 0x1002b863
jmp 0x1002b826
jmp 0x1002b91d
mov dword [ebp - 0x200], 0xdfd6825d
mov dword [ebp - 0x208], 0
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x208]
push eax
push 0
call fcn.10029206
add esp, 0x18
push 0
call fcn.10027c80
pop ecx
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.1002784f
add esp, 0x14
mov dword [ebp - 0x14], 0x29949dfc
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x74], 0
jmp 0x1002b968
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1002b97b
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x58], 0x996f377c
jmp 0x1002b961
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x28]
imul eax, ecx
cmp eax, dword [ebp - 0x28]
jl 0x1002b99f
mov dword [ebp - 0x134], 1
jmp 0x1002b9a6
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jge 0x1002b9ba
mov dword [ebp - 0x17c], 1
jmp 0x1002b9c1
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x134]
sub eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x28]
jne 0x1002b9e1
mov dword [ebp - 0x13c], 1
jmp 0x1002b9e8
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0
jmp 0x1002ba01
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x1002bbc2
push 4
lea ecx, [ebp - 0x250]
call fcn.100168de
mov dword [ebp - 4], 3
mov dword [ebp - 0x184], 0xfffffff9
mov dword [ebp - 0x1e4], 9
lea eax, [ebp - 0x250]
push eax
push 0
lea eax, [ebp - 0x294]
push eax
call fcn.100278d6
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x58]
mov dword [ebp - 0x298], eax
push 2
lea ecx, [ebp - 0x250]
call fcn.1001694b
cmp dword [ebp - 0x28], 0
jb 0x1002ba87
mov dword [ebp - 0xb0], 1
jmp 0x1002ba8e
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x58]
cmp dword [ebp - 0xb0], eax
jle 0x1002baa9
mov dword [ebp - 0x144], 1
jmp 0x1002bab0
and dword [ebp - 0x144], 0
mov eax, 0xfb8c
sub eax, dword [ebp - 0x144]
mov dword [ebp - 0x184], eax
mov esi, dword [ebp - 0x184]
neg esi
sub esi, 0x797
push 2
lea ecx, [ebp - 0x250]
call fcn.1001694b
cmp esi, dword [eax]
jg 0x1002baec
mov dword [ebp - 0x14c], 1
jmp 0x1002baf3
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14c]
sub ecx, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x58], ecx
jg 0x1002bb11
mov dword [ebp - 0x1b0], 1
jmp 0x1002bb18
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 1
je 0x1002bb2d
mov dword [ebp - 0x154], 1
jmp 0x1002bb34
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
add eax, 0xd7c6
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x58]
jne 0x1002bb57
mov dword [ebp - 0x18c], 1
jmp 0x1002bb5e
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x18c], eax
jge 0x1002bb78
mov dword [ebp - 0x15c], 1
jmp 0x1002bb7f
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x58]
add eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 0x49], 0
push 0x348d
push 0
push 0x2098
lea eax, [ebp - 0x49]
push eax
call fcn.1002c2d6
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x250]
call fcn.10016946
jmp 0x1002b9fa
jmp 0x1002b4a4
push 4
push 0x1000
mov eax, dword [ebp - 0x30]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1a8]
add ecx, dword [eax + 0xc]
push ecx
push 0x3e72
push 0x533f
call fcn.10023f19
pop ecx
pop ecx
call eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x30]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1ec]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xa4]
call fcn.10023fe6
add esp, 0xc
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x9c], 0x8b243e5e
mov dword [ebp - 0x278], 0x726f2c0e
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x1002bc50
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002bc63
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x18], 1
jmp 0x1002bc49
mov dword [ebp - 0x2c], 0
jmp 0x1002bc73
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002bc89
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2a4], 2
jmp 0x1002bc6c
mov dword [ebp - 0x10], 0
jmp 0x1002bc99
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x1002c11a
mov dword [ebp - 0x104], 0xdbf12959
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x68], 0
jmp 0x1002bcc7
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x1002bcdd
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x260], 0xffffffff
jmp 0x1002bcc0
mov byte [ebp - 0x47], 0
lea eax, [ebp - 0x47]
push eax
push 0
push 0x6ca
call fcn.1002681c
add esp, 0xc
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x18], 0
je 0x1002bef2
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x18], 0xffffffff
ja 0x1002bd25
mov dword [ebp - 0x164], 1
jmp 0x1002bd2c
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0x9a275ff4
jbe 0x1002bd44
mov dword [ebp - 0x10c], 1
jmp 0x1002bd4b
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
cmp dword [ebp - 0x10c], eax
je 0x1002bd66
mov dword [ebp - 0x110], 1
jmp 0x1002bd6d
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x1002bd97
mov eax, 0x1521
test eax, eax
je 0x1002bd97
mov dword [ebp - 0x118], 1
jmp 0x1002bd9e
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x118]
test eax, eax
jne 0x1002bdbf
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x18], 0
jne 0x1002bdbf
and dword [ebp - 0x1f4], 0
jmp 0x1002bdc9
mov dword [ebp - 0x1f4], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x18]
cmp dword [ebp + eax - 0x18], ecx
jge 0x1002bdeb
mov dword [ebp - 0x120], 1
jmp 0x1002bdf2
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x120], eax
jne 0x1002be09
mov dword [ebp - 0x128], 1
jmp 0x1002be10
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x18]
jle 0x1002be2e
mov dword [ebp - 0x1fc], 1
jmp 0x1002be35
and dword [ebp - 0x1fc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x260], 0xd68c
jge 0x1002be54
mov dword [ebp - 0x130], 1
jmp 0x1002be5b
and dword [ebp - 0x130], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
cmp dword [ebp - 0x130], eax
jg 0x1002be7c
mov dword [ebp - 0x138], 1
jmp 0x1002be83
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
add eax, dword [ebp - 0x138]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x260]
jge 0x1002beae
mov dword [ebp - 0x140], 1
jmp 0x1002beb5
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x140], eax
jl 0x1002bed3
mov dword [ebp - 0x148], 1
jmp 0x1002beda
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0x5b6d
jge 0x1002bef2
mov dword [ebp - 0x150], 1
jmp 0x1002bef9
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0xd72276b8
jb 0x1002bf11
mov dword [ebp - 0xa8], 1
jmp 0x1002bf18
and dword [ebp - 0xa8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa8]
mov dword [ebp + eax - 0x260], ecx
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xa8], eax
jg 0x1002bf42
mov dword [ebp - 0x158], 1
jmp 0x1002bf49
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
cmp dword [ebp - 0x158], eax
jge 0x1002bf64
mov dword [ebp - 0xb4], 1
jmp 0x1002bf6b
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xb4], eax
jne 0x1002bf82
mov dword [ebp - 0xbc], 1
jmp 0x1002bf89
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x10], 0
je 0x1002bfff
mov dword [ebp - 0x280], 1
mov dword [ebp - 0x6c], 0
jmp 0x1002bfb5
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x1002bfcb
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2b4], 0xcbf698ba
jmp 0x1002bfae
push 0
push 0x69a9
push 0x170b
push 0x1eb6
call fcn.100293ba
add esp, 0x10
push 0x1308
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.1002681c
add esp, 0xc
jmp 0x1002c115
mov dword [ebp - 0x204], 0x92a1dd6b
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0xd4], 0x6bfe21da
mov byte [ebp - 0x45], 0
push 0x1e82
push 0x76ff
lea eax, [ebp - 0x45]
push eax
push 0
call fcn.10027cfc
add esp, 0x10
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xc4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
cmp eax, dword [ebp - 0xc4]
jne 0x1002c066
mov dword [ebp - 0xec], 1
jmp 0x1002c06d
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x1d0]
neg eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x1002c09c
mov dword [ebp - 0xdc], 1
jmp 0x1002c0a3
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0x936a74b4
jne 0x1002c0bb
mov dword [ebp - 0xe4], 1
jmp 0x1002c0c2
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xe4], eax
jle 0x1002c0dc
mov dword [ebp - 0xf4], 1
jmp 0x1002c0e3
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0xf4]
cmp eax, 0xbc1f
jne 0x1002c102
mov dword [ebp - 0xfc], 1
jmp 0x1002c109
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x104], eax
jmp 0x1002bc92
push 0x7d50
push 0x2318
push 0
call fcn.10027b8b
add esp, 0xc
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xa4]
mov dword [eax + 8], ecx
jmp 0x1002b4a4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret