Function at 0x10029f43
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007a038
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18c
push esi
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10029f8d
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
and dword [eax], 0
jmp 0x1002a966
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x50], 0xd5e48d32
mov dword [ebp - 0x170], 0x3c8fc558
mov dword [ebp - 0x50], 0x1a
jmp 0x10029fc6
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffff1
jl 0x10029fd6
push 0
call fcn.10025a3a
pop ecx
jmp 0x10029fbf
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 4]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x130], 5
mov dword [ebp - 0x12c], 5
mov dword [ebp - 0x128], 5
mov dword [ebp - 0x124], 5
lea ecx, [ebp - 0x65]
call fcn.10015a7d
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x198]
call fcn.10015a80
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x74]
call fcn.10015a2c
and dword [ebp - 4], 0
mov dword [ebp - 0x54], 1
push 3
lea ecx, [ebp - 0x13c]
call fcn.100159d0
mov byte [ebp - 4], 1
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x11c], 0x7b400765
lea eax, [ebp - 0x34]
push eax
push 0x77f5
lea eax, [ebp - 0x13c]
push eax
push 0
call fcn.100252a7
add esp, 0x10
mov dword [ebp - 0x34], 0
jmp 0x1002a093
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1002a0a9
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x190], 0xfffffff7
jmp 0x1002a08c
push 0
lea ecx, [ebp - 0x74]
call fcn.10015a6e
push 3
lea ecx, [ebp - 0x74]
call fcn.10015a6e
mov esi, eax
push 2
lea ecx, [ebp - 0x74]
call fcn.10015a6e
mov esi, dword [esi]
imul esi, dword [eax]
dec esi
dec esi
push 3
lea ecx, [ebp - 0x74]
call fcn.10015a6e
cmp esi, dword [eax]
jne 0x1002a0ea
mov dword [ebp - 0xb4], 1
jmp 0x1002a0f1
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x17f
jne 0x1002a10f
cmp dword [ebp - 0x54], 0
jne 0x1002a10f
and dword [ebp - 0x60], 0
jmp 0x1002a116
mov dword [ebp - 0x60], 1
push 2
lea ecx, [ebp - 0x13c]
call fcn.10015a6e
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
cmp dword [ebp - 0x60], 0xf2f3
jle 0x1002a13d
mov dword [ebp - 0x9c], 1
jmp 0x1002a144
and dword [ebp - 0x9c], 0
push 3
lea ecx, [ebp - 0x74]
call fcn.10015a6e
mov ecx, dword [ebp - 0x9c]
imul ecx, dword [eax]
cmp ecx, 0xbd3e018e
jae 0x1002a16b
mov dword [ebp - 0xd8], 1
jmp 0x1002a172
and dword [ebp - 0xd8], 0
push 3
lea ecx, [ebp - 0x74]
call fcn.10015a6e
mov ecx, dword [ebp - 0xd8]
cmp ecx, dword [eax]
jle 0x1002a192
mov dword [ebp - 0x84], 1
jmp 0x1002a199
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x1002a1ba
mov dword [ebp - 0x8c], 1
jmp 0x1002a1c1
and dword [ebp - 0x8c], 0
push 3
lea ecx, [ebp - 0x74]
call fcn.10015a6e
imul eax, dword [eax], 0x7329
mov ecx, dword [ebp - 0x8c]
neg ecx
cmp eax, ecx
jl 0x1002a1e9
mov dword [ebp - 0xe8], 1
jmp 0x1002a1f0
and dword [ebp - 0xe8], 0
push 3
lea ecx, [ebp - 0x74]
call fcn.10015a6e
mov esi, dword [eax]
imul esi, dword [ebp - 0xe8]
push 0
lea ecx, [ebp - 0x74]
call fcn.10015a6e
sub esi, dword [eax]
je 0x1002a21d
mov dword [ebp - 0x94], 1
jmp 0x1002a224
and dword [ebp - 0x94], 0
cmp dword [ebp - 0x94], 0xe10d32de
jne 0x1002a23c
mov dword [ebp - 0xf0], 1
jmp 0x1002a243
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xf0], eax
jne 0x1002a25d
mov dword [ebp - 0xf8], 1
jmp 0x1002a264
and dword [ebp - 0xf8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xf8]
mov dword [ebp + eax - 0x190], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13c]
call fcn.10015a52
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74]
call fcn.10015a52
mov dword [ebp - 0x20], 1
push 3
lea ecx, [ebp - 0x168]
call fcn.100159d0
mov dword [ebp - 4], 2
mov dword [ebp - 0x16c], 0xfcfbce00
mov dword [ebp - 0x4c], 0
jmp 0x1002a2c6
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1002a2e2
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x168]
call fcn.10015a6e
mov dword [eax], 0x4ebb0cb8
jmp 0x1002a2bf
mov dword [ebp - 0x20], 0
jmp 0x1002a2f2
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x11
jge 0x1002a35e
mov dword [ebp - 0x44], 0xcdf98a59
mov byte [ebp - 0x22], 0
lea eax, [ebp - 0x22]
push eax
push 0
push 0x6c7a
call fcn.10025d9e
add esp, 0xc
mov dword [ebp - 0x44], 0
jmp 0x1002a326
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffffb
je 0x1002a35c
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1002a340
push 0
call fcn.1002443f
pop ecx
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x1002a35a
push 0
push 0x55f5
call fcn.10025955
pop ecx
pop ecx
jmp 0x1002a31f
jmp 0x1002a2eb
mov dword [ebp - 0x20], 0
jmp 0x1002a36e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x1002a405
mov dword [ebp - 0x48], 0xc79e672c
mov dword [ebp - 0x3c], 0
jmp 0x1002a38f
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1002a3a5
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x150], 0xfffffffb
jmp 0x1002a388
mov dword [ebp - 0x48], 2
jmp 0x1002a3b5
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1002a400
mov dword [ebp - 0x158], 0x40ed
mov dword [ebp - 0x14c], 0xfffffffb
mov dword [ebp - 0x154], 0x9cf13e1
mov dword [ebp - 0x10c], 0x92eda8ed
push 0
push 0x2b14
push 0x6b1f
lea eax, [ebp - 0x10c]
push eax
call fcn.100272cf
add esp, 0x10
jmp 0x1002a3ae
jmp 0x1002a367
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.10015a52
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x647dc4b4
push 1
lea ecx, [ebp - 0x148]
call fcn.100159d0
mov dword [ebp - 4], 3
mov dword [ebp - 0xdc], 0xfffffffb
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x30], 0
jmp 0x1002a468
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1002a47e
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xd4], 0x2733582f
jmp 0x1002a461
push 0x5b91
push 0x119b
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.1002513a
add esp, 0x14
cmp dword [ebp - 0x10], 0
je 0x1002a4b5
cmp dword [ebp - 0x10], 0
je 0x1002a4b5
mov dword [ebp - 0xc4], 1
jmp 0x1002a4bc
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x10], 0xfffffff6
jle 0x1002a4e0
mov eax, 0x4d0f4f23
test eax, eax
je 0x1002a4e0
mov dword [ebp - 0xcc], 1
jmp 0x1002a4e7
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0
jne 0x1002a4fc
mov dword [ebp - 0xa4], 1
jmp 0x1002a503
and dword [ebp - 0xa4], 0
imul eax, dword [ebp - 0xa4], 0x7af2
cmp eax, dword [ebp - 0x10]
je 0x1002a521
cmp dword [ebp - 0x10], 0
jne 0x1002a521
and dword [ebp - 0xac], 0
jmp 0x1002a52b
mov dword [ebp - 0xac], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xe4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe4]
mov dword [ebp + eax - 0xd4], ecx
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xac]
jne 0x1002a55e
mov dword [ebp - 0x58], 1
jmp 0x1002a562
and dword [ebp - 0x58], 0
push 0
lea ecx, [ebp - 0x148]
call fcn.10015a6e
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
cmp dword [ebp - 0x58], 0xfffffff9
jle 0x1002a593
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 0
je 0x1002a593
mov dword [ebp - 0x78], 1
jmp 0x1002a597
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x78], eax
je 0x1002a5ab
mov dword [ebp - 0xf4], 1
jmp 0x1002a5b2
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
add eax, 0xffff
cmp eax, dword [ebp - 0x10]
jl 0x1002a5ce
mov dword [ebp - 0xbc], 1
jmp 0x1002a5d5
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xc4], eax
je 0x1002a5fb
mov dword [ebp - 0xec], 1
jmp 0x1002a602
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x10], 0
jmp 0x1002a61e
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2e
jl 0x1002a64f
mov dword [ebp - 0x110], 0xe80a7c6d
mov byte [ebp - 0x24], 0
movzx eax, byte [ebp - 0x24]
test eax, eax
je 0x1002a642
push 1
call fcn.1002443f
pop ecx
cmp dword [ebp - 0x110], 0
je 0x1002a64d
jmp 0x1002a617
jmp 0x1002a617
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x148]
call fcn.10015a52
and dword [ebp - 0x5c], 0
jmp 0x1002a674
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x5c], eax
jge 0x1002a966
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0
jne 0x1002a74e
lea eax, [ebp - 0x18]
push eax
push 0x62a1
push 0
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.10025a75
add esp, 0x18
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x98], 0x44d0
mov dword [ebp - 0x14], 0
jmp 0x1002a6d9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002a6ef
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x180], 0xfffffffb
jmp 0x1002a6d2
mov dword [ebp - 0x14], 0
jmp 0x1002a6ff
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002a715
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x15c], 0xffffffff
jmp 0x1002a6f8
mov dword [ebp - 0x2c], 2
jmp 0x1002a725
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1002a73c
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x180], 0
je 0x1002a73a
jmp 0x1002a73c
jmp 0x1002a71e
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
jmp 0x1002a664
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x38], 0xffffffff
push 0x31eb
lea eax, [ebp - 0x28]
push eax
push 0
lea eax, [ebp - 0x38]
push eax
push 0x57e7
call fcn.10025f61
add esp, 0x14
mov dword [ebp - 0x28], 0xffffffe5
jmp 0x1002a788
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe4
jl 0x1002a8e8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x100], 1
imul eax, dword [ebp - 0x38], 0x7412df3e
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
imul eax, dword [ebp - 0x38], 0xcb6a
cmp eax, dword [ebp - 0x1c]
jle 0x1002a7cb
mov dword [ebp - 0xa0], 1
jmp 0x1002a7d2
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0
ja 0x1002a7e7
mov dword [ebp - 0xa8], 1
jmp 0x1002a7ee
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x1c], eax
je 0x1002a808
mov dword [ebp - 0xb0], 1
jmp 0x1002a80f
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xb0], eax
jle 0x1002a826
mov dword [ebp - 0xb8], 1
jmp 0x1002a82d
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xaa12afd7
jae 0x1002a845
mov dword [ebp - 0xc0], 1
jmp 0x1002a84c
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xc0], eax
jle 0x1002a863
mov dword [ebp - 0xc8], 1
jmp 0x1002a86a
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xc8], eax
jge 0x1002a881
mov dword [ebp - 0xd0], 1
jmp 0x1002a888
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xd0]
jg 0x1002a8a0
xor eax, eax
je 0x1002a8a0
mov dword [ebp - 0x7c], 1
jmp 0x1002a8a4
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x7c]
jne 0x1002a8b5
mov dword [ebp - 0x80], 1
jmp 0x1002a8b9
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x80]
cmp eax, 1
ja 0x1002a8d0
mov dword [ebp - 0x88], 1
jmp 0x1002a8d7
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x100], eax
jmp 0x1002a781
push 4
push 0x1000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x90]
add ecx, dword [eax + 0xc]
push ecx
push 0x343
push 0x1a4
call fcn.1002395a
pop ecx
pop ecx
call eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x114]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x64]
call fcn.10023a42
add esp, 0xc
push 0x77b5
lea eax, [ebp - 0x18]
push eax
push 0x16b1
push 0x4b47
push 0x5583
lea eax, [ebp - 0x64]
push eax
push 0
push 0x3eb9
call fcn.100247d3
add esp, 0x20
jmp 0x1002a664
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret