Function at 0x10040e0a
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100727b4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x208
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x10040e64
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c0], eax
push dword [ebp - 0x154]
push 1
push dword [ebp - 0x1c0]
call fcn.10041d67
add esp, 0xc
jmp 0x10041d56
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x148], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x1b4]
movzx eax, byte [eax]
test eax, eax
je 0x10041cf6
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x4c], 0x31aa08e
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x170], 0xfffffffd
lea eax, [ebp - 0x4c]
push eax
push 0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x3cea
call fcn.100454d3
add esp, 0x14
mov dword [ebp - 0x50], 0
jmp 0x10040f16
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffffb
jg 0x100410ba
push 1
lea ecx, [ebp - 0x130]
call fcn.1001933d
and dword [ebp - 4], 0
push 0x1d4a
lea eax, [ebp - 0x130]
push eax
push 0
lea eax, [ebp - 0x1e0]
push eax
call fcn.10040d3a
add esp, 0x10
mov dword [ebp - 0x4c], 0
jmp 0x10040f5e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x39
je 0x10041083
mov dword [ebp - 0x38], 0
jmp 0x10040f78
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x1004107e
mov dword [ebp - 0x5c], 0xfffffffe
push 0x28c1
lea eax, [ebp - 0x130]
push eax
push 0xfa4
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.1003fb50
add esp, 0x14
mov dword [ebp - 0x5c], 0
jmp 0x10040fb8
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x10041079
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0x3c], 0
jmp 0x10040fd9
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10041040
mov dword [ebp - 0x64], 0x842b4cf2
mov dword [ebp - 0x64], 0
jmp 0x10040ff6
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x10041006
push 0
call fcn.10043fb4
pop ecx
jmp 0x10040fef
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x130]
call fcn.100193bb
cmp dword [eax], 0
jne 0x10041028
cmp dword [ebp - 0x3c], 0
jne 0x10041028
and dword [ebp - 0xc4], 0
jmp 0x10041032
mov dword [ebp - 0xc4], 1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x170], eax
jmp 0x10040fd2
push 0x8a7
push 0x1486
lea eax, [ebp - 0x130]
push eax
push 0
push 0x18
push 0x7675
push 0x23e8
push 0x50b5
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.1003c992
add esp, 0x28
jmp 0x10040fb1
jmp 0x10040f71
jmp 0x10040f57
push 0
lea ecx, [ebp - 0x130]
call fcn.100193bb
cmp dword [eax], 0
je 0x100410a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.1001939f
jmp 0x100410ba
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.1001939f
jmp 0x10040f0f
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + 4]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x14], 1
push 3
lea ecx, [ebp - 0x13c]
call fcn.1001933d
mov dword [ebp - 4], 1
mov dword [ebp - 0x18c], 0xfffffff7
mov dword [ebp - 0x16c], 0xffffffff
mov dword [ebp - 0x194], 0xfffffffd
lea eax, [ebp - 0x13c]
push eax
push 0x6ff8
lea eax, [ebp - 0x54]
push eax
push 0
call fcn.1003d022
add esp, 0x10
mov dword [ebp - 0x54], 0
jmp 0x10041130
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10041146
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1c8], 1
jmp 0x10041129
cmp dword [ebp - 0x18], 0xfffffffc
jne 0x10041158
mov dword [ebp - 0x124], 1
jmp 0x1004115f
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x124]
jg 0x10041176
mov dword [ebp - 0xa0], 1
jmp 0x1004117d
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x18]
add eax, 0x4b2a
imul eax, dword [ebp - 0xa0]
test eax, eax
jne 0x1004119f
cmp dword [ebp - 0x18], 0
jne 0x1004119f
and dword [ebp - 0xa4], 0
jmp 0x100411a9
mov dword [ebp - 0xa4], 1
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jle 0x100411c9
mov dword [ebp - 0x108], 1
jmp 0x100411d0
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 0
jg 0x100411e5
mov dword [ebp - 0x140], 1
jmp 0x100411ec
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x18], 0
je 0x100414a8
mov dword [ebp - 0x30], 1
mov dword [ebp - 0xc8], 0x132c2674
mov dword [ebp - 0x18], 2
jmp 0x10041220
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x100414a3
mov dword [ebp - 0x48], 0xbb5a2755
mov dword [ebp - 0x14], 0
jmp 0x10041241
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1004128d
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1004125b
push 0
call fcn.1003e95d
pop ecx
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x27d4
push 0x6990
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x13c]
push eax
push 0
push 0x431d
call fcn.1003b23f
add esp, 0x24
jmp 0x1004123a
mov dword [ebp - 0x14], 2
jmp 0x1004129d
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1004149e
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x48], 0
jmp 0x100412cb
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x10041499
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x184], 0xc5f7c0cb
mov dword [ebp - 0x30], 0
jmp 0x100412f9
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x10041494
push dword [ebp - 0x14]
lea ecx, [ebp - 0x13c]
call fcn.100193bb
cmp dword [eax], 0
je 0x1004145e
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + eax - 0x1c8], ecx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x15c]
jg 0x1004135f
mov dword [ebp - 0xf0], 1
jmp 0x10041366
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0xadd9
jge 0x1004137e
mov dword [ebp - 0xc0], 1
jmp 0x10041385
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0xc0], 0xc0f86f4c
jae 0x1004139d
mov dword [ebp - 0x118], 1
jmp 0x100413a4
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x118]
add eax, 0xb6e7
mov ecx, dword [ebp - 0xc8]
sub ecx, eax
cmp ecx, 0xfffffff6
jae 0x100413d4
mov dword [ebp - 0xf8], 1
jmp 0x100413db
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xf8], eax
jl 0x100413f5
mov dword [ebp - 0xd0], 1
jmp 0x100413fc
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 0x5c4
jl 0x10041414
mov dword [ebp - 0x110], 1
jmp 0x1004141b
and dword [ebp - 0x110], 0
imul eax, dword [ebp - 0x110], 0xf2ae
cmp dword [ebp - 0x30], eax
je 0x10041436
mov dword [ebp - 0xd8], 1
jmp 0x1004143d
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0xa0de8ed
jl 0x1004145e
mov eax, 0xa13e97a0
test eax, eax
je 0x1004145e
mov dword [ebp - 0x100], 1
jmp 0x10041465
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x100], eax
jl 0x1004147c
mov dword [ebp - 0xe0], 1
jmp 0x10041483
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x184], eax
jmp 0x100412f2
jmp 0x100412c4
jmp 0x10041296
jmp 0x10041219
jmp 0x1004162e
mov dword [ebp - 0x90], 0xae63
mov dword [ebp - 0xb4], 0xfffffff8
push 4
lea ecx, [ebp - 0x1dc]
call fcn.1001933d
mov byte [ebp - 4], 2
mov dword [ebp - 0xcc], 0xc4fb361f
lea eax, [ebp - 0x1e8]
push eax
push 0
lea eax, [ebp - 0x1dc]
push eax
push 0x7060
call fcn.1003fa10
add esp, 0x10
cmp dword [ebp - 0x90], 0
jne 0x1004152e
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x120], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x120]
mov dword [ebp + eax - 0x1c8], ecx
cmp dword [ebp - 0x120], 0
jne 0x1004152e
and dword [ebp - 0xbc], 0
jmp 0x10041538
mov dword [ebp - 0xbc], 1
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0xb4]
dec eax
cmp eax, dword [ebp - 0x14]
jl 0x1004155c
mov dword [ebp - 0xe8], 1
jmp 0x10041563
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xef404622
jb 0x10041585
xor eax, eax
je 0x10041585
mov dword [ebp - 0x164], 1
jmp 0x1004158c
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x20c], eax
xor eax, eax
je 0x100415ba
push 1
lea ecx, [ebp - 0x13c]
call fcn.100193bb
cmp dword [eax], 0
je 0x100415ba
mov dword [ebp - 0x9c], 1
jmp 0x100415c1
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0xb4]
mov dword [ebp - 0x98], eax
push 0
lea ecx, [ebp - 0x1dc]
call fcn.100193bb
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x98]
je 0x100415fe
cmp dword [ebp - 0x16c], 0
push 1
lea ecx, [ebp - 0x13c]
call fcn.100193bb
mov eax, dword [eax]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x194], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1dc]
call fcn.1001939f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x13c]
call fcn.1001939f
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x20], eax
push 1
lea ecx, [ebp - 0x208]
call fcn.1001933d
mov dword [ebp - 4], 3
mov dword [ebp - 0x80], 0
jmp 0x10041676
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10041692
push dword [ebp - 0x80]
lea ecx, [ebp - 0x208]
call fcn.100193bb
mov dword [eax], 0x64a6
jmp 0x1004166f
push 0
call fcn.1003c9dc
pop ecx
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x100416ba
push 0x2290
push 0xecb
push 0
call fcn.1004991b
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x208]
call fcn.1001939f
and dword [ebp - 0x8c], 0
jmp 0x100416e8
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x8c], eax
jge 0x10041cf4
mov dword [ebp - 0x44], 0x8bbca631
push 3
lea ecx, [ebp - 0xb0]
call fcn.1001933d
mov dword [ebp - 4], 4
mov dword [ebp - 0x7c], 0
jmp 0x10041728
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x10041744
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xb0]
call fcn.100193bb
mov dword [eax], 0xc4b4e126
jmp 0x10041721
mov byte [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x10041773
push 0x821
push 0x7240
push 0x15ae
push 0x18f2
push 0
push 0x1777
call fcn.10047a0f
add esp, 0x18
mov dword [ebp - 0x44], 0
jmp 0x10041783
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffef
jle 0x10041a4a
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x78], 0
jmp 0x100417a4
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x100417ba
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1d0], 0x52fa
jmp 0x1004179d
mov byte [ebp - 0x26], 0
lea eax, [ebp - 0x26]
push eax
push 0x7a7a
push 0
push 0x71be
call fcn.1003e1ab
add esp, 0x10
mov dword [ebp - 0x24], 0
jmp 0x100417e6
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x10041a45
mov dword [ebp - 0x40], 0xded68044
mov dword [ebp - 0x40], 0
jmp 0x10041807
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x10041a40
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb0]
call fcn.100193bb
push 1
lea ecx, [ebp - 0xb0]
call fcn.100193bb
cmp dword [ebp - 0x40], 0xd7af
je 0x10041841
mov dword [ebp - 0xd4], 1
jmp 0x10041848
and dword [ebp - 0xd4], 0
imul esi, dword [ebp - 0xd4], 0xb94d
inc esi
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb0]
call fcn.100193bb
cmp dword [eax], esi
jl 0x10041871
mov dword [ebp - 0x19c], 1
jmp 0x10041878
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x44], 0
jne 0x10041897
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d0], 0
jne 0x10041897
and dword [ebp - 0xdc], 0
jmp 0x100418a1
mov dword [ebp - 0xdc], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xdc], eax
jle 0x100418bb
cmp dword [ebp - 0x44], 0
jne 0x100418bb
and dword [ebp - 0xe4], 0
jmp 0x100418c5
mov dword [ebp - 0xe4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
imul eax, dword [ebp - 0xe4]
cmp eax, 2
ja 0x100418ea
mov dword [ebp - 0xec], 1
jmp 0x100418f1
and dword [ebp - 0xec], 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.100193bb
mov ecx, dword [ebp - 0xec]
cmp ecx, dword [eax]
jge 0x10041914
mov dword [ebp - 0x174], 1
jmp 0x1004191b
and dword [ebp - 0x174], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb0]
call fcn.100193bb
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb0]
call fcn.100193bb
mov dword [eax], 0xaf9031ea
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x10041a3b
mov dword [ebp - 0xf4], 0x36fe
mov dword [ebp - 0x1a0], 0x1000ca88
cmp dword [ebp - 0xf4], 0x387d
jle 0x100419e1
and dword [ebp - 0x84], 0
jmp 0x10041983
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x7bfc
jge 0x100419d7
and dword [ebp - 0x68], 0
jmp 0x1004199c
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x2a43
jge 0x100419d5
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x68]
shl eax, cl
cdq
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], edx
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
mov ecx, 0x1061a898
call fcn.10019034
jmp 0x10041995
jmp 0x10041976
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push 0x7d3d
push 0
call fcn.100456a0
pop ecx
pop ecx
mov byte [ebp - 4], 5
cmp dword [ebp - 0xf4], 0x3576
jge 0x10041a0f
mov edx, dword [ebp - 0x1a0]
mov ecx, 0x1061a898
call fcn.1001bd42
jmp 0x10041a2b
mov dword [ebp - 4], 4
jmp 0x10041a3b
jmp 0x10041800
jmp 0x100417df
jmp 0x1004177c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.1001939f
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
jne 0x10041b18
push dword [ebp - 0x180]
lea eax, [ebp - 0x94]
push eax
push 0x37e8
push dword [ebp - 0x20]
push 0
push 0x37f9
push dword [ebp - 0xfc]
call fcn.10042633
add esp, 0x1c
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x188], 0x4896e6a3
mov dword [ebp - 0x6c], 0
jmp 0x10041ab1
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10041ac7
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x218], 0xa8eac8b1
jmp 0x10041aaa
mov dword [ebp - 0x34], 2
jmp 0x10041ad7
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10041af9
mov dword [ebp - 0x1bc], 0x8876942a
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x218]
mov dword [ebp - 0x1bc], eax
jmp 0x10041ad0
push 0x7f2d
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x188]
push eax
push 0
call fcn.10040124
add esp, 0x10
jmp 0x100416d2
push 4
push 0x1000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xfc]
add ecx, dword [eax + 0xc]
push ecx
push 0xaead
push 0x931d
call fcn.10031f86
pop ecx
pop ecx
call eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1ac]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x94]
call fcn.10032600
add esp, 0xc
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x1b0], 0x5132d7af
mov dword [ebp - 0x74], 0
jmp 0x10041b94
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10041baa
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1f4], 0
jmp 0x10041b8d
cmp dword [ebp - 0x1c], 1
je 0x10041bbc
mov dword [ebp - 0x10c], 1
jmp 0x10041bc3
and dword [ebp - 0x10c], 0
mov eax, 0xfd9e2a8d
test eax, eax
je 0x10041c27
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jg 0x10041be0
mov dword [ebp - 0x190], 1
jmp 0x10041be7
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x58]
jge 0x10041bfb
mov dword [ebp - 0x104], 1
jmp 0x10041c02
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0x4f23
jge 0x10041c12
cmp dword [ebp - 0x58], 0
cmp dword [ebp - 0x1b0], 0
je 0x10041c27
mov dword [ebp - 0x198], 1
jmp 0x10041c2e
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x10c], 0x77904128
je 0x10041c4f
mov dword [ebp - 0x144], 1
jmp 0x10041c56
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x58]
add eax, 0x3bf58aae
cmp eax, dword [ebp - 0x58]
jle 0x10041c78
mov dword [ebp - 0x114], 1
jmp 0x10041c7f
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0
ja 0x10041c94
mov dword [ebp - 0x11c], 1
jmp 0x10041c9b
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x11c]
mov dword [ebp + eax - 0x1f4], ecx
mov dword [ebp - 0x1c], 0
jmp 0x10041cbe
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x10041cda
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10041cd8
push 0
call fcn.1003b206
pop ecx
jmp 0x10041cb7
push 0
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1003b21d
add esp, 0xc
jmp 0x100416d2
jmp 0x10041d56
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x60]
mov dword [eax], 0
jmp 0x10041d39
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov eax, dword [ebp - 0x60]
cmp dword [eax], 3
jge 0x10041d56
mov eax, dword [ebp - 0x60]
push dword [eax]
mov ecx, dword [ebp - 0x168]
call fcn.100193bb
or dword [eax], 0xffffffff
jmp 0x10041d2e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret