Function at 0x1002904e
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080c23
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x284
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x100290d6
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x38]
mov dword [eax], 0
jmp 0x100290b1
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax], 4
jge 0x100290d1
mov eax, dword [ebp - 0x38]
push dword [eax]
mov ecx, dword [ebp - 0x1b4]
call fcn.10017169
mov dword [eax], 0x13b28858
jmp 0x100290a6
jmp 0x10029ff5
mov eax, dword [ebp + 8]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x30], 0xcff0ea75
mov dword [ebp - 0x168], 0x8f8256a9
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x174], 0x999d94b4
mov dword [ebp - 0x104], 0x21f1eb32
mov dword [ebp - 0x230], 0xfffffffb
mov dword [ebp - 0x244], 0
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0x58], 0xfffffffe
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x10029168
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffeb
jge 0x100294a6
mov dword [ebp - 0xb4], 0xfffffffd
push 2
lea ecx, [ebp - 0x164]
call fcn.100170df
and dword [ebp - 4], 0
mov dword [ebp - 0x144], 0x5900b088
mov dword [ebp - 0x14], 0
jmp 0x100291a7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100291c0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x164]
call fcn.10017169
and dword [eax], 0
jmp 0x100291a0
mov dword [ebp - 0x14], 0
jmp 0x100291d0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100291e6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c4], 0x37c57f39
jmp 0x100291c9
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
push 1
lea ecx, [ebp - 0x164]
call fcn.10017169
push 1
lea ecx, [ebp - 0x164]
call fcn.10017169
mov eax, dword [ebp - 0x58]
add eax, 0xfffffff7
mov dword [ebp - 0x1a8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x1c4], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c4]
sub eax, 0x4073
sub eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0xb4]
jl 0x1002925b
mov dword [ebp - 0xe8], 1
jmp 0x10029262
and dword [ebp - 0xe8], 0
push 1
lea ecx, [ebp - 0x164]
call fcn.10017169
mov eax, dword [eax]
add eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x58]
jle 0x10029288
mov dword [ebp - 0x11c], 1
jmp 0x1002928f
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0
je 0x1002945c
mov dword [ebp - 0x3c], 1
push 0
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.1002afbf
add esp, 0xc
cmp dword [ebp - 0x3c], 0xffffffff
jg 0x100292ca
mov dword [ebp - 0x94], 1
jmp 0x100292d1
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x8c], eax
jg 0x100292e8
mov dword [ebp - 0x148], 1
jmp 0x100292ef
and dword [ebp - 0x148], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c4]
cmp dword [ebp - 0x148], eax
jl 0x10029310
mov dword [ebp - 0xf0], 1
jmp 0x10029317
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xf0], eax
jge 0x10029331
mov dword [ebp - 0xf4], 1
jmp 0x10029338
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0xf4]
jne 0x10029358
cmp dword [ebp - 0x30], 0
je 0x10029358
mov dword [ebp - 0x9c], 1
jmp 0x1002935f
and dword [ebp - 0x9c], 0
cmp dword [ebp - 0x9c], 1
jne 0x10029374
mov dword [ebp - 0x134], 1
jmp 0x1002937b
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0xc84a
jg 0x10029393
mov dword [ebp - 0xa4], 1
jmp 0x1002939a
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xac], eax
push 1
lea ecx, [ebp - 0x164]
call fcn.10017169
mov ecx, dword [ebp - 0xac]
mov dword [eax], ecx
cmp dword [ebp - 0xac], 0
je 0x100293e2
cmp dword [ebp - 0x3c], 0
je 0x100293e2
mov dword [ebp - 0x124], 1
jmp 0x100293e9
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
cmp eax, dword [ebp - 0x124]
jl 0x1002940d
cmp dword [ebp - 0x3c], 0
jne 0x1002940d
and dword [ebp - 0xbc], 0
jmp 0x10029417
mov dword [ebp - 0xbc], 1
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0xbc]
cmp eax, 0xfffffffd
jne 0x1002943d
mov dword [ebp - 0x5c], 1
jmp 0x10029441
and dword [ebp - 0x5c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp + eax - 0x1c4], ecx
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x174], eax
jmp 0x10029492
mov dword [ebp - 0x1ac], 0x863e3202
push 0x6423
push 1
lea eax, [ebp - 0x144]
push eax
push 0x48cb
push 0x1a7e
lea eax, [ebp - 0x1ac]
push eax
push 0x7ad6
call fcn.10025d63
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164]
call fcn.10017164
jmp 0x10029161
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0x254], 0x3f17e2f9
mov dword [ebp - 0x25c], 6
mov dword [ebp - 0x17c], 0x1f145ba1
mov dword [ebp - 0x264], 0x86fd5d70
mov dword [ebp - 0x194], 0x4ccfd66c
mov dword [ebp - 0x26c], 0xfffffffc
mov dword [ebp - 0x1c8], 6
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x184], 3
mov dword [ebp - 0x1b0], 0x68fdadf8
push 1
lea ecx, [ebp - 0x204]
call fcn.100170df
mov dword [ebp - 4], 1
mov dword [ebp - 0xc4], 0xabef
mov dword [ebp - 0x4c], 0
jmp 0x10029549
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10029562
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x204]
call fcn.10017169
or dword [eax], 0xffffffff
jmp 0x10029542
mov dword [ebp - 0x54], 0
jmp 0x10029572
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x16
jge 0x10029624
mov dword [ebp - 0x218], 0xffffffff
mov dword [ebp - 0x278], 0x443250e6
mov dword [ebp - 0x250], 0xc4ab274b
mov dword [ebp - 0x224], 0x5c9e53e5
mov dword [ebp - 0x268], 0x7d2703d9
mov dword [ebp - 0x22c], 0x5362daab
mov dword [ebp - 0x258], 0x35ca4204
mov dword [ebp - 0x234], 3
mov dword [ebp - 0x238], 0xa32a17d0
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x240], 0x29c8ddac
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x270], 0xfffffffb
mov dword [ebp - 0x21c], 9
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
jmp 0x1002956b
cmp dword [ebp - 0x17c], 0
jne 0x10029698
cmp dword [ebp - 0x1cc], 1
jg 0x1002963d
cmp dword [ebp - 0x184], 0
imul eax, dword [ebp - 0x1b0], 0x69ed
cmp eax, dword [ebp - 0x18c]
jl 0x1002965b
mov dword [ebp - 0x10c], 1
jmp 0x10029662
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x10c], eax
jne 0x1002967c
mov dword [ebp - 0xcc], 1
jmp 0x10029683
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0x8bee6dab
jb 0x10029698
and dword [ebp - 0x12c], 0
jmp 0x100296a2
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x12c]
jle 0x100296bc
mov dword [ebp - 0xd4], 1
jmp 0x100296c3
and dword [ebp - 0xd4], 0
push 0
lea ecx, [ebp - 0x204]
call fcn.10017169
mov ecx, dword [ebp - 0xd4]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.10017164
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x64], 0x65c2dd7
mov dword [ebp - 0x48], 0
jmp 0x10029713
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x10029729
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x158], 2
jmp 0x1002970c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x158], 0
jmp 0x10029754
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x158]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x158], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x158], 0xb
jle 0x100298b9
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x19c], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x158]
cmp dword [ebp + eax - 0x158], ecx
jne 0x100297a2
mov dword [ebp - 0x114], 1
jmp 0x100297a9
and dword [ebp - 0x114], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x158], 0x5bfb66fe
jle 0x100297c7
mov dword [ebp - 0xdc], 1
jmp 0x100297ce
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0xdc]
lea eax, [eax + ecx + 0x36632064]
cmp eax, 0xffffffff
je 0x100297f8
mov dword [ebp - 0x13c], 1
jmp 0x100297ff
and dword [ebp - 0x13c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x158]
mov ecx, dword [ebp - 0x13c]
add ecx, 0x649f
sub eax, ecx
sub eax, 0x4f5a
je 0x10029832
cmp dword [ebp - 0x64], 0
je 0x10029832
mov dword [ebp - 0xe4], 1
jmp 0x10029839
and dword [ebp - 0xe4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0xe4], eax
jle 0x10029859
mov dword [ebp - 0xec], 1
jmp 0x10029860
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x1b8]
imul eax, dword [ebp - 0xec]
add eax, 0x35c0
je 0x10029885
xor eax, eax
inc eax
je 0x10029885
mov dword [ebp - 0x84], 1
jmp 0x1002988c
and dword [ebp - 0x84], 0
cmp dword [ebp - 0x84], 0xffffffff
jle 0x100298a1
mov dword [ebp - 0x88], 1
jmp 0x100298a8
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x19c], eax
jmp 0x1002973b
and dword [ebp - 0x70], 0
jmp 0x100298cf
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x70], eax
jge 0x10029ff5
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
jne 0x10029cc1
mov dword [ebp - 0x288], 0x177e8edf
mov dword [ebp - 0x284], 0x177e8edf
mov dword [ebp - 0x280], 0x177e8edf
mov dword [ebp - 0x27c], 0x177e8edf
mov dword [ebp - 0x40], 0
jmp 0x10029926
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1002993c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x214], 0
jmp 0x1002991f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x214], 0
jmp 0x1002996a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x214]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x214], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x214], 3
jg 0x100299ad
mov byte [ebp - 0x23], 0
push 0x4940
push 0
lea eax, [ebp - 0x23]
push eax
call fcn.1002aee6
add esp, 0xc
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x100299ab
push 0
push 0x2302
call fcn.1002b20f
pop ecx
pop ecx
jmp 0x1002994f
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x1a4]
push eax
push 0
call fcn.1002cd77
add esp, 0x14
mov dword [ebp - 0x28], 0xc865b49d
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x6c], 0xc00eadd5
mov dword [ebp - 0x1f8], 0xf888c554
mov dword [ebp - 0x1f4], 0xf888c554
mov dword [ebp - 0x1f0], 0xf888c554
mov dword [ebp - 0x1ec], 0xf888c554
lea ecx, [ebp - 0x65]
call fcn.10008a53
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea ecx, [ebp - 0x290]
call fcn.10017178
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1d8]
call fcn.1001713e
mov dword [ebp - 4], 2
mov dword [ebp - 0x80], 0xd6cd
cmp dword [ebp - 0x28], 1
jae 0x10029a5c
mov dword [ebp - 0xd8], 1
jmp 0x10029a63
and dword [ebp - 0xd8], 0
mov dword [ebp - 0x6c], 0xfbb9cf7d
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x6c], eax
jg 0x10029a7e
mov dword [ebp - 0x90], 1
jmp 0x10029a85
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x90], eax
jne 0x10029a9c
mov dword [ebp - 0x98], 1
jmp 0x10029aa3
and dword [ebp - 0x98], 0
push 0
lea ecx, [ebp - 0x1d8]
call fcn.10017169
mov ecx, dword [ebp - 0x98]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x28]
jge 0x10029ac9
mov dword [ebp - 0xa0], 1
jmp 0x10029ad0
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0xfffffffb
jg 0x10029ae5
mov dword [ebp - 0xa8], 1
jmp 0x10029aec
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xa8], eax
jl 0x10029b03
mov dword [ebp - 0xb0], 1
jmp 0x10029b0a
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0x3068
je 0x10029b22
mov dword [ebp - 0xb8], 1
jmp 0x10029b29
and dword [ebp - 0xb8], 0
push 0
lea ecx, [ebp - 0x1d8]
call fcn.10017169
mov ecx, dword [ebp - 0xb8]
cmp ecx, dword [eax]
jge 0x10029b4c
mov dword [ebp - 0xc0], 1
jmp 0x10029b53
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0xc0]
imul eax, eax, 0x2bc8
cmp eax, 1
jl 0x10029b73
mov dword [ebp - 0x16c], 1
jmp 0x10029b7a
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x28], 0
je 0x10029b9b
cmp dword [ebp - 0x28], 0
je 0x10029b9b
mov dword [ebp - 0xc8], 1
jmp 0x10029ba2
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0xd0], eax
push 0
lea ecx, [ebp - 0x1d8]
call fcn.10017169
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd0]
sub eax, 0x69438ed5
neg eax
cmp dword [ebp - 0xd8], eax
je 0x10029be7
mov dword [ebp - 0xe0], 1
jmp 0x10029bee
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
sub eax, 0x479e
jne 0x10029bff
cmp dword [ebp - 0x60], 0
cmp dword [ebp - 0x6c], 0xffff
jne 0x10029c14
mov dword [ebp - 0xf8], 1
jmp 0x10029c1b
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xf8], eax
jle 0x10029c32
mov dword [ebp - 0x100], 1
jmp 0x10029c39
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
inc eax
cmp eax, 0xfffffffb
jle 0x10029c51
mov dword [ebp - 0x108], 1
jmp 0x10029c58
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 0xfffffffd
je 0x10029c6d
mov dword [ebp - 0x110], 1
jmp 0x10029c74
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0
jne 0x10029c99
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x10029c97
push 0x4e42
push 0
call fcn.1002c75e
pop ecx
pop ecx
jmp 0x10029cad
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x10029cad
push 0
call fcn.1001dff0
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d8]
call fcn.10017164
jmp 0x100298bf
push 4
push 0x1000
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x118]
add ecx, dword [eax + 0xc]
push ecx
push 0x6a26
push 0x72fc
call fcn.10025253
pop ecx
pop ecx
call eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x170]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x74]
call fcn.10025366
add esp, 0xc
mov dword [ebp - 0x44], 0xffffffff
push 4
lea ecx, [ebp - 0x1e4]
call fcn.100170df
mov dword [ebp - 4], 3
mov dword [ebp - 0x190], 0x79c90e69
push 0x394a
push 0x35cf
push 0
push 0x472
push 0x26e0
lea eax, [ebp - 0x228]
push eax
push 0x1d4d
lea eax, [ebp - 0x1e4]
push eax
call fcn.10030bb0
add esp, 0x20
mov dword [ebp - 0x44], 0
jmp 0x10029d75
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffe6
jne 0x10029fbb
mov dword [ebp - 0x18], 0
jmp 0x10029d8f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10029da2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x34], 1
jmp 0x10029d88
mov dword [ebp - 0x18], 0
jmp 0x10029db2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10029dc5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0xffffffff
jmp 0x10029dab
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x34], 0xfffffffd
jmp 0x10029dea
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x34], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0xfffffffb
je 0x10029fb6
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x10], 1
jmp 0x10029e12
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10029fb1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
mov dword [ebp - 0x120], eax
push 3
lea ecx, [ebp - 0x1e4]
call fcn.10017169
mov ecx, dword [ebp - 0x120]
mov dword [eax], ecx
cmp dword [ebp - 0x120], 0xfffffffd
jg 0x10029e53
mov dword [ebp - 0x178], 1
jmp 0x10029e5a
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x10]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
cmp dword [ebp + eax*4 - 0x7c], ecx
jle 0x10029e79
mov dword [ebp - 0x180], 1
jmp 0x10029e80
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x10]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
cmp dword [ebp + eax*4 - 0x7c], ecx
jge 0x10029e9f
mov dword [ebp - 0x128], 1
jmp 0x10029ea6
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp eax, dword [ebp - 0x128]
jl 0x10029ec1
mov dword [ebp - 0x130], 1
jmp 0x10029ec8
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0x130], eax
jl 0x10029ee3
mov dword [ebp - 0x138], 1
jmp 0x10029eea
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0xffffffff
ja 0x10029eff
mov dword [ebp - 0x140], 1
jmp 0x10029f06
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0xffffffff
jge 0x10029f1f
cmp dword [ebp - 0x10], 0
je 0x10029f1a
jmp 0x10029fb1
jmp 0x10029fac
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x20], 0xffffffe7
jmp 0x10029f36
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe7
jge 0x10029f70
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x10029f5f
push 0xd0a
push 0
push 0x2bd
push 0x1278
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
je 0x10029f6e
jmp 0x10029f2f
jmp 0x10029f2f
mov dword [ebp - 0x20], 1
jmp 0x10029f80
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10029fac
mov dword [ebp - 0x188], 1
lea eax, [ebp - 0x10]
push eax
push 0x199f
push 0
lea eax, [ebp - 0x188]
push eax
call fcn.1002a003
add esp, 0x10
jmp 0x10029f79
jmp 0x10029e0b
jmp 0x10029dd5
jmp 0x10029d6e
push 0
push 0xf62
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.1002c8ec
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.10017164
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x74]
mov dword [eax + 8], ecx
jmp 0x100298bf
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret