Function at 0x10027b57
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100836f4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x320
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10028703
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1c8], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x204], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x1b8], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa0], eax
push 2
lea ecx, [ebp - 0x2b4]
call fcn.100171f5
and dword [ebp - 4], 0
push 1
lea ecx, [ebp - 0x2a8]
call fcn.100171f5
mov byte [ebp - 4], 1
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x234], 0xbb7ab61b
mov dword [ebp - 0x1c0], 0xe3e7631
push 2
lea ecx, [ebp - 0x2f0]
call fcn.100171f5
mov byte [ebp - 4], 2
mov dword [ebp - 0x20], 0
jmp 0x10027c0f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10027c28
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2b4]
call fcn.10017262
or dword [eax], 0xffffffff
jmp 0x10027c08
lea eax, [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x2a8]
push eax
call fcn.1002cc79
add esp, 0xc
mov dword [ebp - 0x20], 0
jmp 0x10027c4d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10027c69
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2f0]
call fcn.10017262
mov dword [eax], 0xaa9dade6
jmp 0x10027c46
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x2b4]
push eax
push 0x164f
push 0x5720
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x234]
push eax
push 0
lea eax, [ebp - 0x23c]
push eax
call fcn.1002b253
add esp, 0x20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2f0]
call fcn.1001725d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a8]
call fcn.1001725d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.1001725d
mov dword [ebp - 0x34], 0xb4ffb87
mov dword [ebp - 0x1c], 0x4ab274bf
mov dword [ebp - 0x70], 0
jmp 0x10027ceb
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10027d01
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xb0], 4
jmp 0x10027ce4
mov dword [ebp - 0x34], 0
jmp 0x10027d11
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10027e63
mov dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xb0]
cmp eax, dword [ebp - 0x1c]
jl 0x10027db7
mov dword [ebp - 0x244], 0x4f27
mov dword [ebp - 0x1c], 0
jmp 0x10027d5e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10027d74
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb0], 0
jmp 0x10027d57
push 0x70b4
push 0x49cc
push 0x30a9
lea eax, [ebp - 0x244]
push eax
push 0x16fa
push 0x7250
push 0x12a2
push 0x6bf7
push 1
push 0x1203
push 0x45a3
call fcn.10025a92
add esp, 0x2c
jmp 0x10027e5e
push 3
lea ecx, [ebp - 0x284]
call fcn.100171f5
mov dword [ebp - 4], 3
mov dword [ebp - 0x68], 0
jmp 0x10027ddb
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10027df7
push dword [ebp - 0x68]
lea ecx, [ebp - 0x284]
call fcn.10017262
mov dword [eax], 0x62daab72
jmp 0x10027dd4
push 2
lea ecx, [ebp - 0x284]
call fcn.10017262
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x124]
mov dword [ecx], eax
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x10027e4f
push 0x15e3
push 0x11e8
push 0x26c2
push 0
push 0x3f3b
push 0x23bc
push 0x1aeb
call fcn.10029640
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.1001725d
jmp 0x10027d0a
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jl 0x10027e77
mov dword [ebp - 0x19c], 1
jmp 0x10027e7e
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x1c], 0
je 0x10027e96
cmp dword [ebp - 0x1c], 0
je 0x10027e96
mov dword [ebp - 0xc8], 1
jmp 0x10027e9d
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0xc8]
jge 0x10027eb7
mov dword [ebp - 0x194], 1
jmp 0x10027ebe
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x204]
mov eax, dword [eax]
shl eax, 4
mov ecx, dword [ebp - 0x1b8]
mov ecx, dword [ecx]
lea eax, [eax + ecx*8 + 0x1008a84c]
mov ecx, dword [ebp - 0x22c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xa0]
mov eax, dword [eax + ecx*4]
mov dword [edx], eax
mov dword [ebp - 0x38], 0x4c506d44
mov dword [ebp - 0x78], 0
jmp 0x10027f0b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x10027f21
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1a8], 0x7fd5
jmp 0x10027f04
mov dword [ebp - 0x38], 2
jmp 0x10027f31
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x100280ae
mov dword [ebp - 0x60], 0x25f5
mov dword [ebp - 0xc4], 2
mov dword [ebp - 0xd8], 0x6b79df94
mov dword [ebp - 0x20c], 0x60e77906
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a8]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0xc4], 0x4f36
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x1a8]
cmp dword [ebp - 0xc4], eax
jg 0x10027f9b
mov dword [ebp - 0x168], 1
jmp 0x10027fa2
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x168], eax
jge 0x10027fb9
mov dword [ebp - 0x1ac], 1
jmp 0x10027fc0
and dword [ebp - 0x1ac], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
je 0x10027fe6
mov dword [ebp - 0xd0], 1
jmp 0x10027fed
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 0xec6e
jg 0x10028005
mov dword [ebp - 0x138], 1
jmp 0x1002800c
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xd8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
cmp dword [ebp - 0xd8], eax
je 0x1002803b
cmp dword [ebp - 0x60], 0
jne 0x1002803b
and dword [ebp - 0x190], 0
jmp 0x10028045
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x1a8]
cmp eax, dword [ebp - 0x190]
jl 0x10028063
mov dword [ebp - 0xe0], 1
jmp 0x1002806a
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xe0]
sub ecx, dword [ebp + eax*4 - 0x1a8]
shl ecx, 2
test ecx, ecx
je 0x10028096
mov eax, 0xd8fb8cef
test eax, eax
je 0x10028096
mov dword [ebp - 0x140], 1
jmp 0x1002809d
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x20c], eax
jmp 0x10027f2a
mov eax, dword [ebp - 0x1c8]
mov eax, dword [eax + 0x24]
and eax, 0x4000000
je 0x100286fe
mov dword [ebp - 0x14], 0x90be4438
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x278], 0x811fc80a
mov dword [ebp - 0x274], 0x811fc80a
mov dword [ebp - 0x270], 0x811fc80a
mov dword [ebp - 0x26c], 0x811fc80a
lea ecx, [ebp - 0x8d]
call fcn.10008cc3
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x32c]
call fcn.10017271
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x218]
call fcn.10017237
mov dword [ebp - 4], 4
mov dword [ebp - 0x40], 0x87292079
mov dword [ebp - 0x1d0], 0x7aeb
mov dword [ebp - 0x64], 0
jmp 0x1002815c
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10028172
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x88], 0xfdc8dfba
jmp 0x10028155
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jl 0x10028186
mov dword [ebp - 0xe8], 1
jmp 0x1002818d
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0x14], 0
je 0x100281aa
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x24]
je 0x100281aa
mov dword [ebp - 0x170], 1
jmp 0x100281b1
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x170]
jg 0x100281cb
mov dword [ebp - 0xf0], 1
jmp 0x100281d2
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0x18]
je 0x100281ed
xor eax, eax
je 0x100281ed
mov dword [ebp - 0x148], 1
jmp 0x100281f4
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x148], eax
jg 0x1002820b
mov dword [ebp - 0xf8], 1
jmp 0x10028212
and dword [ebp - 0xf8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf8]
mov dword [ebp + eax - 0x88], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x88], 1
xor eax, eax
add eax, 0xfffe
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x188], eax
push 2
lea ecx, [ebp - 0x218]
call fcn.10017262
mov ecx, dword [ebp - 0x188]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x188], eax
jle 0x10028272
mov dword [ebp - 0x100], 1
jmp 0x10028279
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x100], eax
jl 0x10028290
mov dword [ebp - 0x150], 1
jmp 0x10028297
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0x45bbbdeb
jg 0x100282af
mov dword [ebp - 0x108], 1
jmp 0x100282b6
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 0x72b9
je 0x100282ce
mov dword [ebp - 0x178], 1
jmp 0x100282d5
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x178]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x1002855e
mov dword [ebp - 0x98], 0xa6dad3f0
mov dword [ebp - 0x40], 2
jmp 0x10028309
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10028559
mov dword [ebp - 0x110], 0x239f
mov dword [ebp - 0xa8], 0xfffffff6
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x10028347
push 0x3b4a
push 0
push 0x2464
call fcn.1002e649
add esp, 0xc
mov dword [ebp - 0x14], 0
jmp 0x10028357
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x10028554
mov dword [ebp - 0x158], 0xfffd
mov dword [ebp - 0x24], 0
jmp 0x1002837b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x100284b1
mov dword [ebp - 0x118], 0x78029323
mov dword [ebp - 0x18], 0
jmp 0x1002839f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100283da
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x6c], 3
jmp 0x100283bc
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x100283d8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp + ecx*4 - 0x88], eax
jmp 0x100283b5
jmp 0x10028398
cmp dword [ebp - 0x110], 0
jne 0x100283f5
cmp dword [ebp - 0x110], 0
jne 0x100283f5
and dword [ebp - 0x230], 0
jmp 0x100283ff
mov dword [ebp - 0x230], 1
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x158], 0xf839
jge 0x10028423
mov dword [ebp - 0x198], 1
jmp 0x1002842a
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x88], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x198]
cmp dword [ebp - 0x120], eax
je 0x10028474
mov dword [ebp - 0x160], 1
jmp 0x1002847b
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0xffffffff
jne 0x10028490
mov dword [ebp - 0x128], 1
jmp 0x10028497
and dword [ebp - 0x128], 0
push 0
lea ecx, [ebp - 0x218]
call fcn.10017262
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
jmp 0x10028374
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x98], eax
jge 0x100284cb
mov dword [ebp - 0x180], 1
jmp 0x100284d2
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x180], eax
je 0x100284ec
mov dword [ebp - 0x130], 1
jmp 0x100284f3
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x88]
cmp eax, dword [ebp - 0x130]
je 0x10028511
mov dword [ebp - 0xc0], 1
jmp 0x10028518
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0xc0], eax
jne 0x10028532
mov dword [ebp - 0xcc], 1
jmp 0x10028539
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0xcc]
imul eax, eax, 0
mov dword [ebp - 0xa8], eax
jmp 0x10028350
jmp 0x10028302
jmp 0x100286da
mov dword [ebp - 0x48], 0xb5bc
mov dword [ebp - 0xdc], 0x6abe926f
mov dword [ebp - 0x14], 0
jmp 0x1002857f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x100286ad
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x88]
sub eax, 0x2446
imul eax, eax, 0
cmp eax, dword [ebp - 0xdc]
je 0x100285db
mov dword [ebp - 0xd4], 1
jmp 0x100285e2
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd4], eax
jle 0x100285f9
mov dword [ebp - 0xe4], 1
jmp 0x10028600
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xe4], eax
je 0x1002861a
mov dword [ebp - 0xf4], 1
jmp 0x10028621
and dword [ebp - 0xf4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xec], eax
push 2
lea ecx, [ebp - 0x218]
call fcn.10017262
mov ecx, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xf4]
je 0x10028669
mov dword [ebp - 0xfc], 1
jmp 0x10028670
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x88]
cmp eax, dword [ebp - 0xfc]
jle 0x1002868e
mov dword [ebp - 0x104], 1
jmp 0x10028695
and dword [ebp - 0x104], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x104]
mov dword [ebp + eax - 0x88], ecx
jmp 0x10028578
mov dword [ebp - 0x48], 0
jmp 0x100286bd
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x100286da
push 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.1002b0dd
add esp, 0xc
jmp 0x100286b6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x218]
call fcn.1001725d
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
or eax, 0x200
mov ecx, dword [ebp - 0xa0]
mov dword [ecx], eax
jmp 0x10028f6f
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x220], 0xffffffff
mov dword [ebp - 0x94], 0x5cbf7935
mov dword [ebp - 0x74], 0
jmp 0x10028746
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x1002875c
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x314], 0x94d0e834
jmp 0x1002873f
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x10], 0
je 0x1002883e
cmp dword [ebp - 0x10], 0
jne 0x1002881a
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x10], 0x6b71
jg 0x100287a9
mov dword [ebp - 0x10c], 1
jmp 0x100287b0
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jle 0x100287db
mov dword [ebp - 0x1d8], 1
jmp 0x100287e2
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x10], 0x8886
jge 0x100287fd
cmp dword [ebp - 0x10], 0
je 0x100287fd
mov dword [ebp - 0x114], 1
jmp 0x10028804
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
sub eax, 0x68729207
jne 0x1002881a
and dword [ebp - 0x240], 0
jmp 0x10028824
mov dword [ebp - 0x240], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x31c], eax
xor eax, eax
inc eax
je 0x1002883e
mov dword [ebp - 0x11c], 1
jmp 0x10028845
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x11c]
add eax, ecx
je 0x10028870
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x314], 0
je 0x10028870
mov dword [ebp - 0xbc], 1
jmp 0x10028877
and dword [ebp - 0xbc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x314]
cmp dword [ebp - 0xbc], eax
je 0x10028898
mov dword [ebp - 0x8c], 1
jmp 0x1002889f
and dword [ebp - 0x8c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8c]
mov dword [ebp + eax - 0x314], ecx
mov eax, dword [ebp - 0x8c]
add eax, 5
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x10], 8
jmp 0x100288d1
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2f
jge 0x10028986
mov dword [ebp - 0x7c], 0xc8c6dcff
mov dword [ebp - 0x1e0], 0xd8a0f839
cmp dword [ebp - 0x7c], 0xd6b22149
jae 0x10028901
mov dword [ebp - 0x134], 1
jmp 0x10028908
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x7c], 0xfffffffc
jge 0x1002891a
mov dword [ebp - 0x12c], 1
jmp 0x10028921
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
add eax, 0xd700
cmp eax, dword [ebp - 0x12c]
jle 0x10028949
mov dword [ebp - 0x13c], 1
jmp 0x10028950
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x7c]
jg 0x1002896e
mov dword [ebp - 0x144], 1
jmp 0x10028975
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x1e0], eax
jmp 0x100288ca
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x28], eax
push 4
lea ecx, [ebp - 0x29c]
call fcn.100171f5
mov dword [ebp - 4], 5
mov dword [ebp - 0x54], 0xdba76aab
mov dword [ebp - 0x228], 0x6fda0246
push 0x5931
push 0x538f
push 0
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.1002b168
add esp, 0x14
mov dword [ebp - 0x54], 0
jmp 0x100289fe
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x10028aa1
mov dword [ebp - 0x1e8], 0x7f2fb5a5
push 3
lea ecx, [ebp - 0x290]
call fcn.100171f5
mov byte [ebp - 4], 6
mov dword [ebp - 0x58], 0
jmp 0x10028a33
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10028a4f
push dword [ebp - 0x58]
lea ecx, [ebp - 0x290]
call fcn.10017262
mov dword [eax], 0x13a3dbc5
jmp 0x10028a2c
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x290]
push eax
push 0
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x29c]
push eax
call fcn.1002e531
add esp, 0x18
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x10028a8d
push 0
call fcn.10029611
pop ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x290]
call fcn.1001725d
jmp 0x100289f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29c]
call fcn.1001725d
and dword [ebp - 0x9c], 0
jmp 0x10028acf
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x28]
add eax, 0x28
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x9c], eax
jge 0x10028f6f
mov dword [ebp - 0x50], 0x5ab3e90a
push 4
lea ecx, [ebp - 0x250]
call fcn.100171f5
mov dword [ebp - 4], 7
mov dword [ebp - 0x1f0], 0xfffffff6
mov dword [ebp - 0x1f8], 1
mov dword [ebp - 0x2e4], 0xfffffffb
mov dword [ebp - 0x2c], 0
jmp 0x10028b2d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x10028b46
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x250]
call fcn.10017262
or dword [eax], 0xffffffff
jmp 0x10028b26
mov dword [ebp - 0x2c], 0
jmp 0x10028b56
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10028b6c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xb8], 0xa32f3f60
jmp 0x10028b4f
cmp dword [ebp - 0x50], 0
jne 0x10028c0c
cmp dword [ebp - 0x50], 0
jne 0x10028b8b
cmp dword [ebp - 0x50], 0
jne 0x10028b8b
and dword [ebp - 0x14c], 0
jmp 0x10028b95
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x154], eax
push 3
lea ecx, [ebp - 0x250]
call fcn.10017262
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
imul eax, dword [ebp - 0x14c], 0xffff
cmp dword [ebp - 0x154], eax
jg 0x10028bda
mov dword [ebp - 0x15c], 1
jmp 0x10028be1
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0
je 0x10028bf6
mov dword [ebp - 0x238], 1
jmp 0x10028bfd
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x50], 0
jne 0x10028c0c
and dword [ebp - 0x164], 0
jmp 0x10028c16
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x164], eax
jge 0x10028c30
mov dword [ebp - 0x16c], 1
jmp 0x10028c37
and dword [ebp - 0x16c], 0
imul eax, dword [ebp - 0x16c], 0
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 1
jne 0x10028c67
mov dword [ebp - 0x174], 1
jmp 0x10028c6e
and dword [ebp - 0x174], 0
push 3
pop eax
sub eax, dword [ebp - 0x174]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb8]
je 0x10028c92
mov dword [ebp - 0x17c], 1
jmp 0x10028c99
and dword [ebp - 0x17c], 0
push 3
lea ecx, [ebp - 0x250]
call fcn.10017262
and dword [eax], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb8]
add eax, dword [ebp - 0x17c]
test eax, eax
jg 0x10028ccc
mov dword [ebp - 0x208], 1
jmp 0x10028cd3
and dword [ebp - 0x208], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x1f8], 0x3b83
jg 0x10028cfe
mov dword [ebp - 0x184], 1
jmp 0x10028d05
and dword [ebp - 0x184], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x184]
mov dword [ebp + eax - 0xb8], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x250]
call fcn.1001725d
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x10], 0
jne 0x10028d6e
push 0x4b0d
lea eax, [ebp - 0xa4]
push eax
push 0x533d
push dword [ebp - 0x28]
push 0x59c8
push 0x4316
push 0x776f
push 0
push dword [ebp - 0x21c]
push dword [ebp - 0x18c]
call fcn.10028f7d
add esp, 0x28
jmp 0x10028ab9
mov dword [ebp - 0x264], 0xfffffff7
mov dword [ebp - 0x260], 0xfffffff7
mov dword [ebp - 0x25c], 0xfffffff7
mov dword [ebp - 0x258], 0xfffffff7
lea ecx, [ebp - 0xa9]
call fcn.10008cc3
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x324]
call fcn.10017271
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x300]
call fcn.10017237
mov dword [ebp - 4], 8
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x200], 0x9b8f
mov dword [ebp - 0x1b0], 0xffffffff
lea eax, [ebp - 0x200]
push eax
push 0x68de
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x224]
push eax
push 0x4d4a
push 0
lea eax, [ebp - 0x1b0]
push eax
push 0x37d5
call fcn.1002f9aa
add esp, 0x20
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10028e45
push 0
push 0x6cae
push 0x4328
call fcn.10029498
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x300]
call fcn.1001725d
push 4
push 0x1000
mov eax, dword [ebp - 0x28]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x18c]
add ecx, dword [eax + 0xc]
push ecx
push 0x1824
push 0x1a55
call fcn.10024fe1
pop ecx
pop ecx
call eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x28]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1b4]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xa4]
call fcn.10025095
add esp, 0xc
mov dword [ebp - 0x1dc], 0x6ec17e5c
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x1c4], 0xdf39
mov dword [ebp - 0x1cc], 0x711f64db
mov dword [ebp - 0x1bc], 0x5364
mov dword [ebp - 0x1fc], 1
mov dword [ebp - 0x1d4], 0
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1cc]
push eax
push 0x6ed6
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1ec]
push eax
push 0
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x1fc]
push eax
call fcn.10025a92
add esp, 0x2c
push 0x115
push 0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1002e695
add esp, 0x10
jmp 0x10028ab9
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret