Function at 0x1002db23
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10083c73
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x248
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1002dba9
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
jmp 0x1002db87
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax], 2
jge 0x1002dba4
mov eax, dword [ebp - 0x34]
push dword [eax]
mov ecx, dword [ebp - 0x144]
call fcn.1001779a
and dword [eax], 0
jmp 0x1002db7c
jmp 0x1002e9be
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x58], eax
or dword [ebp - 0x1a8], 0xffffffff
or dword [ebp - 0x1a4], 0xffffffff
or dword [ebp - 0x1a0], 0xffffffff
or dword [ebp - 0x19c], 0xffffffff
lea ecx, [ebp - 0x79]
call fcn.10008f23
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x254]
call fcn.100177a9
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x24c]
call fcn.1001776f
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x40], 0
jmp 0x1002dc26
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x1002dc65
mov dword [ebp - 0x4c], 0
jmp 0x1002dc3c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1002dc52
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x228], 1
jmp 0x1002dc35
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x228], 0x462751c7
jmp 0x1002dc1f
lea ecx, [ebp - 0x24c]
call fcn.10017795
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 4]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x68], 0x9e885dc1
mov dword [ebp - 0xe8], 0xc5c6a81d
mov dword [ebp - 0x2c], 0xd4f509e1
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x158], 1
mov dword [ebp - 0x1f4], 0x967c74e2
mov dword [ebp - 0x1f0], 0x967c74e2
mov dword [ebp - 0x1ec], 0x967c74e2
mov dword [ebp - 0x1e8], 0x967c74e2
mov dword [ebp - 0x184], 0xfffffffd
mov dword [ebp - 0x64], 0
jmp 0x1002dcf1
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1002dd07
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x108], 0xfff6
jmp 0x1002dcea
mov eax, dword [ebp - 0x10]
inc eax
cmp eax, dword [ebp - 0x10]
jle 0x1002dd1c
mov dword [ebp - 0xbc], 1
jmp 0x1002dd23
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xbc], eax
jle 0x1002dd3a
mov dword [ebp - 0x124], 1
jmp 0x1002dd41
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x124]
lea eax, [ecx + eax - 1]
test eax, eax
jne 0x1002dd5f
xor eax, eax
jne 0x1002dd5f
and dword [ebp - 0x98], 0
jmp 0x1002dd69
mov dword [ebp - 0x98], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x98], eax
jg 0x1002dd80
mov dword [ebp - 0xe0], 1
jmp 0x1002dd87
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xe0]
jg 0x1002dd9e
mov dword [ebp - 0xa0], 1
jmp 0x1002dda5
and dword [ebp - 0xa0], 0
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xa0]
jge 0x1002ddc3
mov dword [ebp - 0x100], 1
jmp 0x1002ddca
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x100], eax
jl 0x1002dde1
mov dword [ebp - 0xa8], 1
jmp 0x1002dde8
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xe249
je 0x1002de0c
mov dword [ebp - 0xb0], 1
jmp 0x1002de13
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xb0]
jge 0x1002de22
cmp dword [ebp - 0x10], 0
mov eax, 0x86c7
test eax, eax
jne 0x1002de37
mov dword [ebp - 0x118], 1
jmp 0x1002de3e
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x118], eax
jne 0x1002de55
mov dword [ebp - 0xb8], 1
jmp 0x1002de5c
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xb8]
mov ecx, 0x54bc
sub ecx, eax
mov dword [ebp - 0x10], ecx
je 0x1002de9e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x108], 0
je 0x1002de9e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x108], 0
je 0x1002de9e
mov dword [ebp - 0xf0], 1
jmp 0x1002dea5
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x240], eax
push 5
pop eax
test eax, eax
je 0x1002ded1
push 4
pop eax
test eax, eax
je 0x1002ded1
mov dword [ebp - 0xc0], 1
jmp 0x1002ded8
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0xc0], 0xffff
je 0x1002def0
mov dword [ebp - 0x110], 1
jmp 0x1002def7
and dword [ebp - 0x110], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x110], eax
jle 0x1002df18
mov dword [ebp - 0x180], 1
jmp 0x1002df1f
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x108]
cmp eax, 1
jae 0x1002df4c
mov dword [ebp - 0xf8], 1
jmp 0x1002df53
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0xf8], eax
jle 0x1002df6d
mov dword [ebp - 0x134], 1
jmp 0x1002df74
and dword [ebp - 0x134], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x108], 0xfffffffb
jl 0x1002df8d
mov dword [ebp - 0x74], 1
jmp 0x1002df91
and dword [ebp - 0x74], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x74]
mov dword [ebp + eax - 0x1f4], ecx
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x2c], 0
jmp 0x1002dfb9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x2d
jne 0x1002dfe1
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x1002dfdf
push 0x7819
push 0
push 0x141e
call fcn.1002bbce
add esp, 0xc
jmp 0x1002dfb2
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x60], 0xa8eac8b
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1002e01d
push 0x2875
push 0
push 0x589f
call fcn.10029f2d
add esp, 0xc
mov dword [ebp - 0x60], 0xfffffff1
jmp 0x1002e02d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jne 0x1002e04e
push 0x2d6d
push 0
push 0x4810
push 0x3b1e
call fcn.1002fad4
add esp, 0x10
jmp 0x1002e026
and dword [ebp - 0x84], 0
jmp 0x1002e06d
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x84], eax
jge 0x1002e9be
push 3
lea ecx, [ebp - 0x1cc]
call fcn.1001770e
and dword [ebp - 4], 0
mov dword [ebp - 0x200], 0x64dc9ed9
push 3
lea ecx, [ebp - 0x1e4]
call fcn.1001770e
mov byte [ebp - 4], 1
mov dword [ebp - 0x208], 0x52bf
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0xd0], 0xfffd
mov dword [ebp - 0x6c], 0x3164c116
push 0x2909
lea eax, [ebp - 0x1cc]
push eax
push 0x6d0f
push 0x2087
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.10030c4a
add esp, 0x18
mov dword [ebp - 0x38], 0
jmp 0x1002e107
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1002e123
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1e4]
call fcn.1001779a
mov dword [eax], 1
jmp 0x1002e100
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x1002e137
push 0
call fcn.1002f928
pop ecx
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1001779a
cmp dword [eax], 0
jne 0x1002e156
mov eax, 0xb0e4
test eax, eax
je 0x1002e1e0
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x238], 1
push 4
lea ecx, [ebp - 0x220]
call fcn.1001770e
mov byte [ebp - 4], 2
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x50], 0
jmp 0x1002e195
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1002e1b1
push dword [ebp - 0x50]
lea ecx, [ebp - 0x220]
call fcn.1001779a
mov dword [eax], 0x85faafe3
jmp 0x1002e18e
push 0x58e1
lea eax, [ebp - 0xd0]
push eax
push 0
push 0x796d
call fcn.1002bf61
add esp, 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x220]
call fcn.10017795
jmp 0x1002e29c
mov dword [ebp - 0x204], 0x3d8e1ce4
mov dword [ebp - 0x210], 0x520c256f
mov dword [ebp - 0x23c], 0xffffffff
push 3
lea ecx, [ebp - 0x234]
call fcn.1001770e
mov byte [ebp - 4], 3
mov dword [ebp - 0x54], 0
jmp 0x1002e21f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1002e23b
push dword [ebp - 0x54]
lea ecx, [ebp - 0x234]
call fcn.1001779a
mov dword [eax], 1
jmp 0x1002e218
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x16c]
jne 0x1002e271
mov dword [ebp - 0x120], 1
jmp 0x1002e278
and dword [ebp - 0x120], 0
push 2
lea ecx, [ebp - 0x1e4]
call fcn.1001779a
mov ecx, dword [ebp - 0x120]
mov dword [eax], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x234]
call fcn.10017795
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1e4]
call fcn.10017795
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1cc]
call fcn.10017795
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
jne 0x1002e545
mov dword [ebp - 0x30], 0x3fbb
mov dword [ebp - 0xa4], 0xcb8ce3e6
mov dword [ebp - 0x94], 0x5d2d9150
push 1
lea ecx, [ebp - 0x1b4]
call fcn.1001770e
mov dword [ebp - 4], 4
mov dword [ebp - 0x154], 0x44cf5927
mov dword [ebp - 0x20c], 0x40a16501
mov dword [ebp - 0x5c], 0
jmp 0x1002e31a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1002e336
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1b4]
call fcn.1001779a
mov dword [eax], 0xa6c9cd49
jmp 0x1002e313
cmp dword [ebp - 0x30], 0x8edf
jge 0x1002e34b
mov dword [ebp - 0xd8], 1
jmp 0x1002e352
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0xd8]
sub eax, dword [ebp - 0x30]
jne 0x1002e36e
or eax, 0xffffffff
jne 0x1002e36e
and dword [ebp - 0x90], 0
jmp 0x1002e378
mov dword [ebp - 0x90], 1
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jne 0x1002e399
mov dword [ebp - 0x9c], 1
jmp 0x1002e3a0
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x9c], eax
jle 0x1002e3b7
mov dword [ebp - 0xac], 1
jmp 0x1002e3be
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xac]
jl 0x1002e3de
mov dword [ebp - 0x70], 1
jmp 0x1002e3e2
and dword [ebp - 0x70], 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.1001779a
mov ecx, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x70], eax
jle 0x1002e408
mov dword [ebp - 0xb4], 1
jmp 0x1002e40f
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0x3622ba39
jl 0x1002e427
mov dword [ebp - 0x8c], 1
jmp 0x1002e42e
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x154], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b4]
call fcn.10017795
push 0x3d96
push 0x6971
push 0x3fb4
push 0
push 0x3276
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x20]
push dword [ebp - 0x11c]
push dword [ebp - 0x17c]
call fcn.100274d3
add esp, 0x24
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0xc4], 0xa1a8f1ed
push 1
lea ecx, [ebp - 0x1c0]
call fcn.1001770e
mov dword [ebp - 4], 5
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x44], 0
jmp 0x1002e4bc
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1002e4d8
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1c0]
call fcn.1001779a
mov dword [eax], 0x3d478254
jmp 0x1002e4b5
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x1c0]
push eax
push 0x4c81
push 0x353
push 0x66f9
push 0x438a
call fcn.100274d3
add esp, 0x24
mov dword [ebp - 0x3c], 0
jmp 0x1002e51f
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff9
jne 0x1002e531
mov dword [ebp - 0xc4], 0x323fa9df
jmp 0x1002e518
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c0]
call fcn.10017795
jmp 0x1002e057
push 3
lea ecx, [ebp - 0x130]
call fcn.1001770e
mov dword [ebp - 4], 6
mov dword [ebp - 0x14], 0xef7d2668
mov dword [ebp - 0x18], 0
mov dword [ebp - 0xdc], 0x4e58
mov dword [ebp - 0x80], 0x2d683a7e
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x48], 0
jmp 0x1002e58f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1002e5ab
push dword [ebp - 0x48]
lea ecx, [ebp - 0x130]
call fcn.1001779a
mov dword [eax], 0x79753589
jmp 0x1002e588
cmp dword [ebp - 0x18], 1
jl 0x1002e5bd
mov dword [ebp - 0xcc], 1
jmp 0x1002e5c4
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0x18]
je 0x1002e5f6
push 2
lea ecx, [ebp - 0x130]
call fcn.1001779a
cmp dword [eax], 0
je 0x1002e5f6
cmp dword [ebp - 0xdc], 0
je 0x1002e5f6
mov dword [ebp - 0xd4], 1
jmp 0x1002e5fd
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xdc]
je 0x1002e61b
xor eax, eax
je 0x1002e61b
mov dword [ebp - 0xe4], 1
jmp 0x1002e622
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x80], eax
jne 0x1002e63f
mov dword [ebp - 0xec], 1
jmp 0x1002e646
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 1
jne 0x1002e664
cmp dword [ebp - 0x18], 0
jne 0x1002e664
cmp dword [ebp - 0x14], 0
jne 0x1002e664
and dword [ebp - 0xf4], 0
jmp 0x1002e66e
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x78], eax
mov esi, dword [ebp - 0x78]
push 1
lea ecx, [ebp - 0x130]
call fcn.1001779a
cmp esi, dword [eax]
jge 0x1002e697
mov dword [ebp - 0xfc], 1
jmp 0x1002e69e
and dword [ebp - 0xfc], 0
push 1
lea ecx, [ebp - 0x130]
call fcn.1001779a
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [eax]
jl 0x1002e6c1
mov dword [ebp - 0x10c], 1
jmp 0x1002e6c8
and dword [ebp - 0x10c], 0
xor eax, eax
sub eax, dword [ebp - 0x10c]
cmp eax, 0xffff
jb 0x1002e6e6
cmp dword [ebp - 0x18], 0
jne 0x1002e6e6
and dword [ebp - 0x114], 0
jmp 0x1002e6f0
mov dword [ebp - 0x114], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x114], eax
jl 0x1002e736
mov dword [ebp - 0x164], 0xffff
mov dword [ebp - 0x174], 0xffffffff
push 0x7e2
lea eax, [ebp - 0x174]
push eax
push 0x7412
push 1
lea eax, [ebp - 0x164]
push eax
call fcn.100298a2
add esp, 0x14
jmp 0x1002e832
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x18], 0
jmp 0x1002e75a
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe3
jne 0x1002e816
mov dword [ebp - 0x138], 0xae2ad21d
mov esi, dword [ebp - 0x13c]
push 1
lea ecx, [ebp - 0x130]
call fcn.1001779a
cmp esi, dword [eax]
je 0x1002e7ce
mov dword [ebp - 0x148], 0x57a8360e
mov dword [ebp - 0x150], 0x401cea02
push 0
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x7832
lea eax, [ebp - 0x160]
push eax
call fcn.100301df
add esp, 0x20
jmp 0x1002e7df
mov byte [ebp - 0x24], 0
lea eax, [ebp - 0x24]
push eax
push 0
call fcn.10029923
pop ecx
pop ecx
mov dword [ebp - 0x14], 2
jmp 0x1002e7ef
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002e811
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1002e80f
push 0x71b8
push 1
call fcn.10029923
pop ecx
pop ecx
jmp 0x1002e7e8
jmp 0x1002e753
lea eax, [ebp - 0x18]
push eax
push 0
push 0x5d19
push 0xc28
lea eax, [ebp - 0x80]
push eax
call fcn.10029d67
add esp, 0x14
mov dword [ebp - 0x14], 0
jmp 0x1002e842
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002e864
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x130]
push eax
push 0x13da
call fcn.10030bf4
add esp, 0x10
jmp 0x1002e83b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.10017795
push 4
push 0x1000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x11c]
add ecx, dword [eax + 0xc]
push ecx
push 0x912e
push 0x9604
call fcn.100269e7
pop ecx
pop ecx
call eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x168]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x88]
call fcn.10026ad6
add esp, 0xc
mov dword [ebp - 0x170], 0xfffffff8
push 1
lea ecx, [ebp - 0x1d8]
call fcn.1001770e
mov dword [ebp - 4], 7
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x1c], 0
jmp 0x1002e8ff
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002e915
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x194], 0
jmp 0x1002e8f8
mov dword [ebp - 0x1c], 0
jmp 0x1002e925
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002e93e
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d8]
call fcn.1001779a
or dword [eax], 0xffffffff
jmp 0x1002e91e
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x194], 0
jmp 0x1002e969
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x194]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x194], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x194], 0xd
jge 0x1002e99e
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0x7f60
push 0
lea eax, [ebp - 0x178]
push eax
call fcn.10029bd9
add esp, 0x14
jmp 0x1002e950
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d8]
call fcn.10017795
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
jmp 0x1002e057
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret