Function at 0x1002cc4f
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008a98f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x230
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002db47
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x74], 0xfffffff9
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x6c], 0
jmp 0x1002ccc0
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1002ccd6
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x170], 0xe2
jmp 0x1002ccb9
cmp dword [ebp - 0x20], 0
je 0x1002cdd1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jg 0x1002cd06
mov dword [ebp - 0xb8], 1
jmp 0x1002cd0d
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x74], eax
jg 0x1002cd2a
mov dword [ebp - 0x1b0], 1
jmp 0x1002cd31
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x74], 0
jne 0x1002cd49
mov eax, 0x168a
test eax, eax
jne 0x1002cd49
and dword [ebp - 0xac], 0
jmp 0x1002cd53
mov dword [ebp - 0xac], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xac], eax
jle 0x1002cd6a
mov dword [ebp - 0x150], 1
jmp 0x1002cd71
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 1
je 0x1002cd86
mov dword [ebp - 0xa4], 1
jmp 0x1002cd8d
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xa4]
jg 0x1002cdaa
cmp dword [ebp - 0x98], 0
jne 0x1002cdaa
and dword [ebp - 0xa8], 0
jmp 0x1002cdb4
mov dword [ebp - 0xa8], 1
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0xa8]
test eax, eax
je 0x1002cdd1
mov dword [ebp - 0x13c], 1
jmp 0x1002cdd8
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 1
jne 0x1002cdf3
mov eax, 0xf393
test eax, eax
jne 0x1002cdf3
and dword [ebp - 0xb4], 0
jmp 0x1002cdfd
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0xb4]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0
jmp 0x1002ce1c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x1002ce33
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x170], 0
je 0x1002ce31
jmp 0x1002ce33
jmp 0x1002ce15
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x214], 7
mov dword [ebp - 0x21c], 0xfffffffa
mov dword [ebp - 0x84], 0x8b108f82
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x1c0], 0xfc3eee2f
mov dword [ebp - 0x94], 0xf7d65121
mov dword [ebp - 0x230], 0x99d94b4b
mov dword [ebp - 0x22c], 0xf1eb32a8
mov dword [ebp - 0x1dc], 0xfffffffc
mov dword [ebp - 0x1d4], 0xfffffffb
mov dword [ebp - 0x7c], 0x3c407858
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x210], 0xfffffff6
mov dword [ebp - 0x1ec], 0xfffffff6
mov dword [ebp - 0x184], 1
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x17c], 1
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x70], 0
jmp 0x1002cf0a
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1002cf20
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x8c], 0x537c57f3
jmp 0x1002cf03
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x184]
mov dword [ebp - 0x1f4], eax
mov eax, 0x9cff29c2
test eax, eax
je 0x1002cf73
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x184], 0
je 0x1002cf73
mov dword [ebp - 0x104], 1
jmp 0x1002cf7a
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x1002d006
cmp dword [ebp - 0x7c], 0
je 0x1002cfa4
cmp dword [ebp - 0x94], 0
je 0x1002cfa4
mov dword [ebp - 0xbc], 1
jmp 0x1002cfab
and dword [ebp - 0xbc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp dword [ebp - 0xbc], eax
jl 0x1002cfcc
mov dword [ebp - 0x12c], 1
jmp 0x1002cfd3
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x184]
jne 0x1002d006
cmp dword [ebp - 0x84], 0
jne 0x1002d006
and dword [ebp - 0x1b8], 0
jmp 0x1002d010
mov dword [ebp - 0x1b8], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x184]
add eax, 0x7fc0336a
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x94], eax
jg 0x1002d041
mov dword [ebp - 0xc4], 1
jmp 0x1002d048
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 0x9711
jl 0x1002d060
mov dword [ebp - 0x10c], 1
jmp 0x1002d067
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x16c], 0x5bb2c213
mov dword [ebp - 0x168], 0x5bb2c213
mov dword [ebp - 0x164], 0x5bb2c213
mov dword [ebp - 0x160], 0x5bb2c213
mov dword [ebp - 0x5c], 0
jmp 0x1002d0ab
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1002d0be
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x4c], 0x351f2000
jmp 0x1002d0a4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4c], 0
jmp 0x1002d0e3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 3
jg 0x1002d3d9
mov dword [ebp - 0x1c], 0x7a73d2d6
mov dword [ebp - 0x78], 0x370cc321
mov dword [ebp - 0xec], 0x5848308f
mov dword [ebp - 0x9c], 0x4be18a16
mov dword [ebp - 0x1c], 3
jmp 0x1002d126
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1002d3ce
mov dword [ebp - 0x54], 0x95ff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp + eax*4 - 0x16c], 0
jne 0x1002d3a2
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x218], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x16c]
mov dword [ebp - 0x78], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x78], eax
jge 0x1002d183
mov dword [ebp - 0xcc], 1
jmp 0x1002d18a
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xcc], eax
jle 0x1002d1a1
mov dword [ebp - 0x14c], 1
jmp 0x1002d1a8
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x14c], eax
jg 0x1002d1c6
mov dword [ebp - 0xd4], 1
jmp 0x1002d1cd
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xd4], eax
jg 0x1002d1e4
mov dword [ebp - 0x114], 1
jmp 0x1002d1eb
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x114], eax
jl 0x1002d202
mov dword [ebp - 0xdc], 1
jmp 0x1002d209
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xdc], eax
jle 0x1002d220
mov dword [ebp - 0x134], 1
jmp 0x1002d227
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0xfb29d945
jne 0x1002d23f
mov dword [ebp - 0xe4], 1
jmp 0x1002d246
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
add eax, 0xfddf
cmp eax, 0xeabfd090
jbe 0x1002d264
mov dword [ebp - 0x11c], 1
jmp 0x1002d26b
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x1002d295
mov eax, 0x3fb1
test eax, eax
je 0x1002d295
mov dword [ebp - 0x144], 1
jmp 0x1002d29c
and dword [ebp - 0x144], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
mov eax, dword [ebp + eax*4 - 0x16c]
imul eax, dword [ebp - 0x144]
cmp eax, 0xf2dc
jg 0x1002d2c7
mov dword [ebp - 0xf4], 1
jmp 0x1002d2ce
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0x9c]
cmp eax, 0x492a4153
jle 0x1002d2ed
mov dword [ebp - 0x124], 1
jmp 0x1002d2f4
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
add eax, 3
mov ecx, 0xe7528ace
sub ecx, eax
cmp ecx, dword [ebp - 0x54]
jle 0x1002d315
mov dword [ebp - 0xfc], 1
jmp 0x1002d31c
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xfc], eax
jg 0x1002d333
mov dword [ebp - 0xa0], 1
jmp 0x1002d33a
and dword [ebp - 0xa0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0xa0], eax
jle 0x1002d358
mov dword [ebp - 0xb0], 1
jmp 0x1002d35f
and dword [ebp - 0xb0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
mov eax, dword [ebp + eax*4 - 0x16c]
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfcb6
imul eax, ecx
imul eax, eax, 0x2467
test eax, eax
jne 0x1002d3a2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x16c], 0
jne 0x1002d3a2
and dword [ebp - 0xc0], 0
jmp 0x1002d3ac
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xc0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x4c]
mov dword [ebp + ecx*4 - 0x16c], eax
jmp 0x1002d11f
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
jmp 0x1002d0ce
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x18], eax
push 0x2b74
push 0
call fcn.1002dee9
pop ecx
pop ecx
and dword [ebp - 0x80], 0
jmp 0x1002d412
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x80], eax
jge 0x1002db45
mov dword [ebp - 0x1fc], 0x39b642c
mov dword [ebp - 0x228], 0xd837bc75
mov dword [ebp - 0x50], 0xfffffff9
mov dword [ebp - 0x58], 0
jmp 0x1002d44f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1002d465
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x23c], 0x1d976ff5
jmp 0x1002d448
push 1
lea eax, [ebp - 0x50]
push eax
push 0x243b
call fcn.100298f3
add esp, 0xc
mov dword [ebp - 0x50], 0xb
jmp 0x1002d488
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x23
jle 0x1002d4ba
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1002d4b8
push 0xdd5
push 1
push 0x26a9
push 0x6bbd
push 0x1373
call fcn.1002a6d7
add esp, 0x14
jmp 0x1002d481
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0
jne 0x1002d98d
mov dword [ebp - 0x2c], 0xcd16
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x34], 0xc7b7f609
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x1c4], 0x4b0ad8ea
push 2
lea ecx, [ebp - 0x15c]
call fcn.1001b2a6
and dword [ebp - 4], 0
mov dword [ebp - 0x40], 0x5d177cce
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x204]
push eax
push 0
push 0x25d7
call fcn.1002e26e
add esp, 0x10
cmp dword [ebp - 0x2c], 0
jne 0x1002d549
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
je 0x1002d55b
cmp dword [ebp - 0x34], 0
je 0x1002d55b
mov dword [ebp - 0xd0], 1
jmp 0x1002d562
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0x1c4], 0
jne 0x1002d579
or eax, 0xffffffff
jne 0x1002d579
and dword [ebp - 0xd8], 0
jmp 0x1002d583
mov dword [ebp - 0xd8], 1
push 1
lea ecx, [ebp - 0x15c]
call fcn.1001b330
cmp dword [eax], 1
jne 0x1002d5a1
mov dword [ebp - 0xe0], 1
jmp 0x1002d5a8
and dword [ebp - 0xe0], 0
push 1
lea ecx, [ebp - 0x15c]
call fcn.1001b330
mov ecx, dword [ebp - 0xe0]
cmp ecx, dword [eax]
jg 0x1002d5cb
mov dword [ebp - 0xe8], 1
jmp 0x1002d5d2
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0x498d20b
jge 0x1002d5ea
mov dword [ebp - 0xf0], 1
jmp 0x1002d5f1
and dword [ebp - 0xf0], 0
push 1
lea ecx, [ebp - 0x15c]
call fcn.1001b330
mov ecx, dword [ebp - 0xf0]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x2c]
je 0x1002d617
mov dword [ebp - 0xf8], 1
jmp 0x1002d61e
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xf8], eax
jne 0x1002d635
mov dword [ebp - 0x100], 1
jmp 0x1002d63c
and dword [ebp - 0x100], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.1001b330
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax]
jne 0x1002d78a
mov dword [ebp - 0x40], 0
jmp 0x1002d667
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x1002d788
mov byte [ebp - 0x25], 0
lea eax, [ebp - 0x25]
push eax
push 0xfa7
push 0x582
push 0x446c
push 0
call fcn.1002eb9c
add esp, 0x14
mov dword [ebp - 0x2c], 0
jmp 0x1002d6a2
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x1002d6e9
mov dword [ebp - 0x18c], 1
push 0x209a
push 0
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x40]
push eax
push 0x2a0c
push 0x74ed
push 0x1fa7
lea eax, [ebp - 0x18c]
push eax
push 0x37b7
call fcn.100328d8
add esp, 0x24
jmp 0x1002d69b
mov dword [ebp - 0x10], 0
jmp 0x1002d6f9
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1002d783
mov dword [ebp - 0x34], 0
jmp 0x1002d713
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jg 0x1002d77e
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1002d757
push 0x752f
push 0x27f7
push 0x2d24
push 0
push 0x2da8
push 0x5a04
push 0x7dd3
push 0x3d7e
push 0x7ab2
call fcn.1002dbb2
add esp, 0x24
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1002d77c
push 0x22ea
push 0x9b4
push 0x28e9
push 0
call fcn.10032738
add esp, 0x10
jmp 0x1002d70c
jmp 0x1002d6f2
jmp 0x1002d660
jmp 0x1002d7b0
mov dword [ebp - 0x10], 0
jmp 0x1002d79a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1002d7b0
push 0x6e16
push 0
call fcn.1002df8f
pop ecx
pop ecx
jmp 0x1002d793
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c]
call fcn.1001b32b
lea eax, [ebp - 0x140]
push eax
push 0x6e4
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x4a54
lea eax, [ebp - 0x90]
push eax
push 0
call fcn.1002de0d
add esp, 0x1c
mov dword [ebp - 0x14], 0x576c5165
mov dword [ebp - 0x110], 0x7084bc9c
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x128], 0xfffffff7
mov dword [ebp - 0x60], 0
jmp 0x1002d821
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1002d837
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x20c], 0
jmp 0x1002d81a
mov dword [ebp - 0x110], 0xfffffff9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x110], eax
je 0x1002d864
mov dword [ebp - 0x118], 1
jmp 0x1002d86b
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x118], eax
jne 0x1002d882
mov dword [ebp - 0x120], 1
jmp 0x1002d889
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x14]
sub eax, 0x7aa764a8
sub eax, dword [ebp - 0x14]
add eax, 0x28d9ba60
cmp dword [ebp - 0x120], eax
jl 0x1002d8ad
mov dword [ebp - 0x194], 1
jmp 0x1002d8b4
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x14]
jne 0x1002d8de
mov dword [ebp - 0x130], 1
jmp 0x1002d8e5
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0xa01c77dc
jae 0x1002d8fd
mov dword [ebp - 0x138], 1
jmp 0x1002d904
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0x97b09b37
ja 0x1002d91c
mov dword [ebp - 0x1bc], 1
jmp 0x1002d923
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1f0], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x20c], 0xffffffff
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x1002d988
push 0
push 0x1780
push 0x5b17
push 0xa10
push 0x2400
push 0x69b7
push 0x3c1
push 0x4e92
call fcn.10033d0e
add esp, 0x20
jmp 0x1002d402
push 4
push 0x1000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x140]
add ecx, dword [eax + 0xc]
push ecx
push 0x28fc
push 0x20cf
call fcn.10028e4a
pop ecx
pop ecx
call eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x19c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x90]
call fcn.10028ef8
add esp, 0xc
mov dword [ebp - 0x68], 0xfffffffe
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x188], 0xf5e3d1aa
push 1
lea ecx, [ebp - 0x1d0]
call fcn.1001b2a6
mov dword [ebp - 4], 1
lea eax, [ebp - 0x1d0]
push eax
push 0xd1b
push 0
push 0x2b2a
push 0x610f
lea eax, [ebp - 0x1f8]
push eax
call fcn.1002cc4f
add esp, 0x18
mov dword [ebp - 0x68], 0xffffffe8
jmp 0x1002da47
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffe4
jg 0x1002db09
mov dword [ebp - 0x148], 0x34e6d4f2
mov dword [ebp - 0x174], 0xfffffffc
mov byte [ebp - 0x24], 0
lea eax, [ebp - 0x24]
push eax
push 0x24de
push 0
call fcn.1003286b
add esp, 0xc
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x148], eax
je 0x1002daf9
mov dword [ebp - 0x1a4], 0x703acb6d
mov dword [ebp - 0x1b4], 0x122d800
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x88]
push eax
push 0x52eb
push 0x7c60
push 0
call fcn.100324aa
add esp, 0x28
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x1002daf7
push 0
call fcn.10031987
pop ecx
jmp 0x1002db04
cmp dword [ebp - 0x88], 0
je 0x1002db04
jmp 0x1002db09
jmp 0x1002da40
mov byte [ebp - 0x36], 0
lea eax, [ebp - 0x36]
push eax
push 0
push 0x1e4f
push 0x58ea
call fcn.1002dd8c
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d0]
call fcn.1001b32b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
jmp 0x1002d402
jmp 0x1002dba4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x44]
mov dword [eax], 0
jmp 0x1002db84
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x44]
mov dword [ecx], eax
mov eax, dword [ebp - 0x44]
cmp dword [eax], 1
jge 0x1002dba4
mov eax, dword [ebp - 0x44]
push dword [eax]
mov ecx, dword [ebp - 0x1a0]
call fcn.1001b330
mov dword [eax], 0x8a6ebbfa
jmp 0x1002db79
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret