Function at 0x1002a9d7
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x300
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1002aa1e
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
movzx eax, byte [eax]
test eax, eax
je 0x1002aa19
push 0
push 0x15db
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x1002bd79
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x64], 0
jmp 0x1002aa5a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1002aa70
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x300], 0x8bbca631
jmp 0x1002aa53
mov dword [ebp - 0x54], 1
jmp 0x1002aa80
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1002aaa3
push 0x6517
push 0x1e1
push 0
lea eax, [ebp - 0x1e0]
push eax
call fcn.10028cdd
add esp, 0x10
jmp 0x1002aa79
mov byte [ebp - 0x37], 0
lea eax, [ebp - 0x37]
push eax
push 0x25d6
push 0x4c52
push 0x4c8b
push 0x1210
push 0x6b1b
push 0
call fcn.1002d6b1
add esp, 0x1c
mov eax, dword [ebp - 0x84]
mov eax, dword [eax + 4]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x1e4], 0x25429297
mov dword [ebp - 0x228], 0x493876a4
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x5c], 0
jmp 0x1002ab12
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1002ab28
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x2ec], 0xa32f
jmp 0x1002ab0b
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jge 0x1002ab3f
mov dword [ebp - 0x22c], 1
jmp 0x1002ab46
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x10], 0x26d8d383
jl 0x1002ab64
mov dword [ebp - 0xe0], 1
jmp 0x1002ab6b
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
dec eax
cmp eax, dword [ebp - 0x10]
jne 0x1002ab83
mov dword [ebp - 0x8c], 1
jmp 0x1002ab8a
and dword [ebp - 0x8c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8c]
mov dword [ebp + eax - 0x2ec], ecx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x8c]
cmp eax, 0x785b
jg 0x1002abb9
mov dword [ebp - 0xdc], 1
jmp 0x1002abc0
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x10]
jg 0x1002abd7
mov eax, 0x238e486a
test eax, eax
jne 0x1002abe9
cmp dword [ebp - 0x1e4], 0
jne 0x1002abe9
and dword [ebp - 0x1a0], 0
jmp 0x1002abf3
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x1a0]
add eax, 0xf9732ac
je 0x1002ac19
mov dword [ebp - 0xc0], 0xe6fc2e60
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
jmp 0x1002ac70
mov dword [ebp - 0x210], 0xb26d5d64
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.10025147
add esp, 0x14
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x1002ac70
push 0x4644
push 0x5f48
push 1
push 0x722f
push 0x18a2
call fcn.10025147
add esp, 0x14
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x1002ac84
push 0
call fcn.1002615a
pop ecx
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x14], 0xfffffff6
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x1f0], 0xfff8
mov dword [ebp - 0x94], 0xcc013cef
mov dword [ebp - 0xb0], 0x4a2c6eb8
mov dword [ebp - 0x288], 0xfffffff9
mov dword [ebp - 0x80], 0
jmp 0x1002acef
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1002ad05
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x238], 0xcafa32fd
jmp 0x1002ace8
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfa
jl 0x1002add1
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2c]
je 0x1002ad35
mov eax, 0xc93cc254
test eax, eax
je 0x1002ad35
mov dword [ebp - 0xc8], 1
jmp 0x1002ad3c
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1a8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x238], ecx
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0xc8]
je 0x1002ad78
mov dword [ebp - 0x1b0], 1
jmp 0x1002ad7f
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 1
je 0x1002ad94
mov dword [ebp - 0xd0], 1
jmp 0x1002ad9b
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0xd0], eax
jge 0x1002adb5
mov dword [ebp - 0x218], 1
jmp 0x1002adbc
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x2c], 0x9387
jge 0x1002adda
mov eax, 0xffff
test eax, eax
je 0x1002adea
xor eax, eax
je 0x1002adea
mov dword [ebp - 0x1f8], 1
jmp 0x1002adf1
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x94], 0x593f6a08
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x14]
cmp dword [ebp - 0xb0], eax
je 0x1002ae3c
mov dword [ebp - 0x1b8], 1
jmp 0x1002ae43
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0xfffffffc
je 0x1002ae58
mov dword [ebp - 0x23c], 1
jmp 0x1002ae5f
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x94]
jg 0x1002ae86
mov dword [ebp - 0x200], 1
jmp 0x1002ae8d
and dword [ebp - 0x200], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x238]
mov dword [ebp - 0x220], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x220]
mov dword [ebp + eax - 0x238], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c], 0
je 0x1002aed4
cmp dword [ebp - 0x2c], 0
je 0x1002aed4
mov dword [ebp - 0x1c0], 1
jmp 0x1002aedb
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x94], eax
and dword [ebp - 0xa4], 0
jmp 0x1002af06
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xa4], eax
jge 0x1002bd79
mov dword [ebp - 0x18], 0
jmp 0x1002af2e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1002af44
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c], 0xfffffff6
jmp 0x1002af27
mov dword [ebp - 0x18], 0
jmp 0x1002af54
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1002af6a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2d0], 5
jmp 0x1002af4d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
neg eax
mov dword [ebp - 0xd8], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xd8]
mov dword [ebp + eax - 0x2d0], ecx
cmp dword [ebp - 0xd8], 0
je 0x1002b10b
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xac], 0
cmp dword [ebp - 0x7c], 0
je 0x1002afd5
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x7c]
mov dword [ebp + eax - 0x2d0], ecx
jmp 0x1002b109
mov dword [ebp - 0x6c], 0
jmp 0x1002afe5
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1002affb
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x90], 0xfffffffb
jmp 0x1002afde
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
cmp dword [ebp - 0x7c], eax
jg 0x1002b019
mov dword [ebp - 0x1a4], 1
jmp 0x1002b020
and dword [ebp - 0x1a4], 0
imul eax, dword [ebp - 0x1a4], 0xffffffff
cmp eax, dword [ebp - 0x7c]
je 0x1002b038
mov dword [ebp - 0xe4], 1
jmp 0x1002b03f
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0xac], eax
jle 0x1002b06c
mov dword [ebp - 0x154], 1
jmp 0x1002b073
and dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 5
jb 0x1002b088
mov dword [ebp - 0xec], 1
jmp 0x1002b08f
and dword [ebp - 0xec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
sub eax, dword [ebp - 0xf4]
neg eax
imul ecx, dword [ebp - 0xec], 0x7230
imul eax, ecx
cmp eax, 8
jb 0x1002b0bd
cmp dword [ebp - 0xac], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 0
je 0x1002b0e9
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2d0], 0
je 0x1002b0e9
mov dword [ebp - 0x18c], 1
jmp 0x1002b0f0
and dword [ebp - 0x18c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18c]
sub ecx, dword [ebp + eax - 0x90]
mov dword [ebp - 0xf4], ecx
jmp 0x1002b13c
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1002b125
push 0x4e5
push 0
call fcn.10029ed3
pop ecx
pop ecx
mov byte [ebp - 0x27], 0
push 0x279
push 0
lea eax, [ebp - 0x27]
push eax
call fcn.1002c7d6
add esp, 0xc
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
jne 0x1002b568
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x74], 0
jmp 0x1002b18f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1002b1a5
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x2b4], 0x34392f20
jmp 0x1002b188
mov eax, dword [ebp - 4]
mov dword [ebp - 0x274], eax
push 5
pop eax
test eax, eax
je 0x1002b218
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jl 0x1002b1db
mov dword [ebp - 0x15c], 1
jmp 0x1002b1e2
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x15c]
imul eax, ecx
cmp eax, dword [ebp - 4]
jl 0x1002b202
mov dword [ebp - 0x208], 1
jmp 0x1002b209
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0
je 0x1002b222
cmp dword [ebp - 0x24], 0
imul eax, dword [ebp - 4], 0xffff
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2b4], eax
mov dword [ebp - 0x24], 0
jmp 0x1002b246
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffffd
jge 0x1002b4a4
mov dword [ebp - 0x104], 0x540f
mov dword [ebp - 0x98], 0
mov dword [ebp - 4], 2
jmp 0x1002b274
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x1002b49f
mov dword [ebp - 0x1dc], 0x6fbd
mov dword [ebp - 0x60], 0
jmp 0x1002b298
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1002b2ae
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x250], 9
jmp 0x1002b291
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x284], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x250]
cmp dword [ebp + eax - 0x268], ecx
je 0x1002b2f5
mov dword [ebp - 0xfc], 1
jmp 0x1002b2fc
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0xfc], eax
jg 0x1002b316
mov dword [ebp - 0x1b4], 1
jmp 0x1002b31d
and dword [ebp - 0x1b4], 0
imul eax, dword [ebp - 0x1b4], 0xd538
cmp eax, dword [ebp - 0x104]
jge 0x1002b33b
mov dword [ebp - 0x230], 1
jmp 0x1002b342
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x28c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 0x2a227283
jl 0x1002b36d
mov dword [ebp - 0x164], 1
jmp 0x1002b374
and dword [ebp - 0x164], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0x164], eax
jne 0x1002b394
mov dword [ebp - 0x10c], 1
jmp 0x1002b39b
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0x29ae
jne 0x1002b3b3
mov dword [ebp - 0x194], 1
jmp 0x1002b3ba
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0xba2d3c5e
jae 0x1002b3d2
mov dword [ebp - 0x114], 1
jmp 0x1002b3d9
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0xf1111919
jne 0x1002b3f1
mov dword [ebp - 0x16c], 1
jmp 0x1002b3f8
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x16c], eax
jg 0x1002b412
mov dword [ebp - 0x11c], 1
jmp 0x1002b419
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
cmp dword [ebp - 0x11c], eax
je 0x1002b43a
mov dword [ebp - 0x1ac], 1
jmp 0x1002b441
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1dc]
cmp eax, dword [ebp - 0x1ac]
jle 0x1002b45b
mov dword [ebp - 0x124], 1
jmp 0x1002b462
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0x124], eax
jle 0x1002b483
mov dword [ebp - 0x174], 1
jmp 0x1002b48a
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x2b4], ecx
jmp 0x1002b26d
jmp 0x1002b23f
push 0x4c79
push 0
push dword [ebp - 0x1c]
push dword [ebp - 0xcc]
push dword [ebp - 0x1d8]
lea eax, [ebp - 0xa8]
push eax
call fcn.10026180
add esp, 0x18
mov dword [ebp - 0xc], 6
mov dword [ebp - 0x68], 0
jmp 0x1002b4e0
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1002b4f6
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x258], 0x1928
jmp 0x1002b4d9
mov dword [ebp - 0xc], 1
jmp 0x1002b506
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x1002b53d
mov dword [ebp - 0x1ec], 0x62a2b3b7
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x1002b52a
push 0
call fcn.10029f13
pop ecx
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp + eax*4 - 0x258], 0xfffffff9
mov dword [ebp - 0x1ec], eax
jmp 0x1002b4ff
mov dword [ebp - 0xc], 0
jmp 0x1002b54d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x1002b563
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x258], 0
jmp 0x1002b546
jmp 0x1002aef0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x44], 0xb9abc19a
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0xa0], 0xfffffffe
mov dword [ebp - 0x188], 8
mov dword [ebp - 8], 0
jmp 0x1002b5af
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x1002b5c2
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x50], 0xbb8bffbe
jmp 0x1002b5a8
mov dword [ebp - 8], 0
jmp 0x1002b5d2
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x1002b5e8
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1d0], 1
jmp 0x1002b5cb
mov dword [ebp - 8], 0
jmp 0x1002b5f8
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x1002b60e
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x2f8], 0x50740728
jmp 0x1002b5f1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
sub eax, 0x49b4a391
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x50]
jne 0x1002b633
mov dword [ebp - 0x144], 1
jmp 0x1002b63a
and dword [ebp - 0x144], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x2bc], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x50]
cmp dword [ebp + eax - 0x50], ecx
jle 0x1002b66a
mov dword [ebp - 0x12c], 1
jmp 0x1002b671
and dword [ebp - 0x12c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x12c], eax
jl 0x1002b68f
mov dword [ebp - 0x1f4], 1
jmp 0x1002b696
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x294], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50], 0x9892657
jle 0x1002b6bb
mov dword [ebp - 0x19c], 1
jmp 0x1002b6c2
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x20], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x20], eax
je 0x1002b6e6
mov dword [ebp - 0x134], 1
jmp 0x1002b6ed
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
add eax, 0xfbde
sub eax, dword [ebp - 0x34]
cmp eax, 0x904e20ee
ja 0x1002b70e
mov dword [ebp - 0x17c], 1
jmp 0x1002b715
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x17c], eax
je 0x1002b72c
mov dword [ebp - 0x13c], 1
jmp 0x1002b733
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
neg eax
jne 0x1002b74c
cmp dword [ebp - 0x20], 0
jne 0x1002b74c
and dword [ebp - 0x1bc], 0
jmp 0x1002b756
mov dword [ebp - 0x1bc], 1
cmp dword [ebp - 0x1bc], 9
je 0x1002b76b
mov dword [ebp - 0x1fc], 1
jmp 0x1002b772
and dword [ebp - 0x1fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x298], eax
push 2
pop eax
neg eax
cmp eax, dword [ebp - 0x34]
jne 0x1002b798
mov dword [ebp - 0x184], 1
jmp 0x1002b79f
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x184]
jl 0x1002b7b9
mov dword [ebp - 0x204], 1
jmp 0x1002b7c0
and dword [ebp - 0x204], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x20], eax
je 0x1002b7e4
mov dword [ebp - 0x14c], 1
jmp 0x1002b7eb
and dword [ebp - 0x14c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x14c], eax
jne 0x1002b808
mov dword [ebp - 0xd4], 1
jmp 0x1002b80f
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x50]
cmp eax, dword [ebp - 0x34]
jge 0x1002b83b
mov dword [ebp - 0xb4], 1
jmp 0x1002b842
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0xfffffffd
jne 0x1002b857
mov dword [ebp - 0x20c], 1
jmp 0x1002b85e
and dword [ebp - 0x20c], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1d0], 0
jne 0x1002b880
mov eax, 0x2547
test eax, eax
jne 0x1002b880
and dword [ebp - 0xe8], 0
jmp 0x1002b88a
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jle 0x1002ba03
mov dword [ebp - 0x70], 0x299b5f27
mov dword [ebp - 0x100], 0xfffffff6
mov dword [ebp - 0x120], 0x71bf3935
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2a0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0x2dc], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1d0], 0
je 0x1002b8f6
cmp dword [ebp - 0x70], 0
je 0x1002b8f6
mov dword [ebp - 0xf0], 1
jmp 0x1002b8fd
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
sub eax, 0x6f8f
imul eax, eax, 0
cmp dword [ebp - 0x70], eax
jle 0x1002b91c
mov dword [ebp - 0xf8], 1
jmp 0x1002b923
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jne 0x1002b947
cmp dword [ebp - 0x70], 0
jne 0x1002b947
and dword [ebp - 0x108], 0
jmp 0x1002b951
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x108], eax
jl 0x1002b968
mov dword [ebp - 0x110], 1
jmp 0x1002b96f
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0
jg 0x1002b984
mov dword [ebp - 0x118], 1
jmp 0x1002b98b
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x120]
jge 0x1002b9a9
mov dword [ebp - 0x128], 1
jmp 0x1002b9b0
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x128], eax
jle 0x1002b9ca
mov dword [ebp - 0x130], 1
jmp 0x1002b9d1
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0xfffffff7
jle 0x1002b9e6
mov dword [ebp - 0x138], 1
jmp 0x1002b9ed
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xa0], eax
push 0
call fcn.10029e92
pop ecx
jmp 0x1002ba17
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1002ba17
push 0
call fcn.10025a31
pop ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x3c], 0
jne 0x1002ba32
mov dword [ebp - 0x140], 1
jmp 0x1002ba39
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0xf129
jl 0x1002ba51
mov dword [ebp - 0x148], 1
jmp 0x1002ba58
and dword [ebp - 0x148], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x148], eax
jle 0x1002ba75
mov dword [ebp - 0x150], 1
jmp 0x1002ba7c
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 7
jbe 0x1002ba91
mov dword [ebp - 0x158], 1
jmp 0x1002ba98
and dword [ebp - 0x158], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x158], eax
jne 0x1002bab6
mov dword [ebp - 0x160], 1
jmp 0x1002babd
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x188]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xa0]
jg 0x1002bae0
mov dword [ebp - 0x168], 1
jmp 0x1002bae7
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d0]
cmp dword [ebp - 0x168], eax
jl 0x1002bb11
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0
jne 0x1002bb11
and dword [ebp - 0x214], 0
jmp 0x1002bb1b
mov dword [ebp - 0x214], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x278], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1d0]
cmp dword [ebp - 0x3c], eax
jg 0x1002bb42
mov dword [ebp - 0x170], 1
jmp 0x1002bb49
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0x8afaef9a
jae 0x1002bb61
mov dword [ebp - 0x178], 1
jmp 0x1002bb68
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
sub eax, dword [ebp - 0x40]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1d0]
jge 0x1002bb8c
mov dword [ebp - 0x180], 1
jmp 0x1002bb93
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x180]
jne 0x1002bbaa
mov dword [ebp - 0x190], 1
jmp 0x1002bbb1
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x190], eax
jg 0x1002bbcb
mov dword [ebp - 0x198], 1
jmp 0x1002bbd2
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x20], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp eax, dword [ebp - 0x20]
jge 0x1002bbf6
mov dword [ebp - 0xb8], 1
jmp 0x1002bbfd
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d0]
cmp dword [ebp - 0xb8], eax
jge 0x1002bc1d
mov dword [ebp - 0x21c], 1
jmp 0x1002bc24
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0x280], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
sub eax, 9
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2f8]
jl 0x1002bc5e
mov dword [ebp - 0xbc], 1
jmp 0x1002bc65
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0xbc], eax
je 0x1002bc7c
mov dword [ebp - 0xc4], 1
jmp 0x1002bc83
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
push 4
push 0x1000
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xcc]
add ecx, dword [eax + 0xc]
push ecx
push 0x6328
push 0x9217
call fcn.10024377
pop ecx
pop ecx
call eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x224]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xa8]
call fcn.100243d8
add esp, 0xc
mov dword [ebp - 0x78], 0
jmp 0x1002bcf6
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1002bd09
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x58], 0x3ae35568
jmp 0x1002bcef
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x58], 0xfffffffe
jmp 0x1002bd2e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0xfffffff3
jne 0x1002bd5f
push 0x702c
push 1
call fcn.100259da
pop ecx
pop ecx
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1002bd5d
push 1
call fcn.10025a31
pop ecx
jmp 0x1002bd19
push 0
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1002c78b
add esp, 0xc
jmp 0x1002aef0
mov esp, ebp
pop ebp
ret