Function at 0x1002984a
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100802e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2b8
push esi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10029887
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
jmp 0x1002aab3
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x14], 0x324ec2e0
mov dword [ebp - 0x224], 0x1fe511bd
mov dword [ebp - 0x220], 0x1fe511bd
mov dword [ebp - 0x21c], 0x1fe511bd
mov dword [ebp - 0x218], 0x1fe511bd
lea ecx, [ebp - 0xb1]
call fcn.100091d3
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x2b0]
call fcn.1001642f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1f0]
call fcn.100163de
and dword [ebp - 4], 0
mov dword [ebp - 0xa0], 0x4e2e0f61
mov dword [ebp - 0x14], 0xfffffffd
jmp 0x10029921
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe7
jl 0x10029c8d
mov dword [ebp - 0x38], 0xcd329b3a
push 2
lea ecx, [ebp - 0x190]
call fcn.10016382
mov byte [ebp - 4], 1
mov dword [ebp - 0x50], 5
mov dword [ebp - 0x7c], 0
jmp 0x1002995a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10029976
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x190]
call fcn.10016420
mov dword [eax], 0xfffffffe
jmp 0x10029953
xor eax, eax
jne 0x10029a08
cmp dword [ebp - 0x38], 0
jae 0x10029990
mov dword [ebp - 0x1bc], 1
jmp 0x10029997
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x14], 0
jne 0x100299bb
cmp dword [ebp - 0x14], 0
jne 0x100299bb
cmp dword [ebp - 0x38], 0
jne 0x100299bb
and dword [ebp - 0x194], 0
jmp 0x100299c5
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x14]
add eax, 0xe075
cmp eax, 0x70e81de9
je 0x100299ec
cmp dword [ebp - 0x14], 0
jne 0x100299ec
and dword [ebp - 0x1c4], 0
jmp 0x100299f6
mov dword [ebp - 0x1c4], 1
mov eax, 0x21b0
test eax, eax
jne 0x10029a08
and dword [ebp - 0xd8], 0
jmp 0x10029a12
mov dword [ebp - 0xd8], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd8], eax
jle 0x10029a29
mov dword [ebp - 0xa8], 1
jmp 0x10029a30
and dword [ebp - 0xa8], 0
push 1
lea ecx, [ebp - 0x190]
call fcn.10016420
mov ecx, dword [ebp - 0xa8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x38]
jl 0x10029a6b
cmp dword [ebp - 0x14], 0
je 0x10029a6b
mov dword [ebp - 0x128], 1
jmp 0x10029a72
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 0x2589
jl 0x10029a8a
mov dword [ebp - 0x184], 1
jmp 0x10029a91
and dword [ebp - 0x184], 0
push 2
lea ecx, [ebp - 0x1f0]
call fcn.10016420
mov ecx, dword [ebp - 0x184]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0x1f0]
call fcn.10016420
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x268], eax
xor eax, eax
jne 0x10029acf
cmp dword [ebp - 0x38], 0
jne 0x10029acf
and dword [ebp - 0xc4], 0
jmp 0x10029ad9
mov dword [ebp - 0xc4], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xc4], eax
jl 0x10029af0
mov dword [ebp - 0x124], 1
jmp 0x10029af7
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
je 0x10029b68
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x158], 0x4db9bec7
mov dword [ebp - 0x1b4], 0xdbd3d38e
push 0x341e
lea eax, [ebp - 0xa0]
push eax
push 0
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10024d08
add esp, 0x14
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1b4], eax
jmp 0x10029c79
mov dword [ebp - 0x44], 0xb25bb54a
mov dword [ebp - 0x1d4], 0xaef1792f
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x270], eax
push 1
lea ecx, [ebp - 0x190]
call fcn.10016420
mov esi, dword [ebp - 0x50]
push 1
lea ecx, [ebp - 0x190]
call fcn.10016420
cmp esi, dword [eax]
jne 0x10029baf
mov dword [ebp - 0xd4], 1
jmp 0x10029bb6
and dword [ebp - 0xd4], 0
push 2
lea ecx, [ebp - 0x1f0]
call fcn.10016420
mov ecx, dword [ebp - 0xd4]
imul ecx, dword [eax]
sub ecx, dword [ebp - 0x50]
mov dword [ebp - 0x44], ecx
jne 0x10029bda
cmp dword [ebp - 0x44], 0
je 0x10029be0
cmp dword [ebp - 0x44], 0
jne 0x10029bef
cmp dword [ebp - 0x44], 0
jne 0x10029bef
and dword [ebp - 0x1a0], 0
jmp 0x10029bf9
mov dword [ebp - 0x1a0], 1
push 2
lea ecx, [ebp - 0x1f0]
call fcn.10016420
push 1
lea ecx, [ebp - 0x190]
call fcn.10016420
imul eax, dword [eax], 0xfffffffb
cmp eax, 0xffff
jb 0x10029c29
mov dword [ebp - 0x130], 1
jmp 0x10029c30
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0x15e
jl 0x10029c48
mov dword [ebp - 0xdc], 1
jmp 0x10029c4f
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xdc], eax
jg 0x10029c66
mov dword [ebp - 0x170], 1
jmp 0x10029c6d
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x190]
call fcn.10016404
jmp 0x1002991a
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x10029cad
push 0x6e9b
push 0
push 0x3d74
call fcn.1002c7e1
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f0]
call fcn.10016404
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x4c], 0x6f93bd5d
mov dword [ebp - 0x168], 0xc2f5a260
mov dword [ebp - 0x148], 1
mov dword [ebp - 0x20], 0
jmp 0x10029cf3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10029d06
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x18], 0x849
jmp 0x10029cec
mov dword [ebp - 0x20], 0
jmp 0x10029d16
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10029d2c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2c4], 0xe91c
jmp 0x10029d0f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x278], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jne 0x10029dac
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x280], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x288], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x4c], 0
je 0x10029d91
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x10029d91
mov dword [ebp - 0xe4], 1
jmp 0x10029d98
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0x4c]
jne 0x10029dac
and dword [ebp - 0x138], 0
jmp 0x10029db6
mov dword [ebp - 0x138], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x138], eax
jl 0x10029dd4
mov dword [ebp - 0xec], 1
jmp 0x10029ddb
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0xffffffff
jge 0x10029dfa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jne 0x10029dfa
and dword [ebp - 0x160], 0
jmp 0x10029e04
mov dword [ebp - 0x160], 1
cmp dword [ebp - 0x160], 0xd96711db
jae 0x10029e1c
mov dword [ebp - 0xf4], 1
jmp 0x10029e23
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xf4], eax
jge 0x10029e3a
mov dword [ebp - 0x140], 1
jmp 0x10029e41
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x140]
sub ecx, dword [ebp + eax - 0x18]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x18]
jl 0x10029e69
mov dword [ebp - 0xfc], 1
jmp 0x10029e70
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xfc], eax
jge 0x10029e91
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jne 0x10029e91
and dword [ebp - 0x180], 0
jmp 0x10029e9b
mov dword [ebp - 0x180], 1
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x180], eax
jl 0x10029eb5
mov dword [ebp - 0x104], 1
jmp 0x10029ebc
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
imul eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x148]
jg 0x10029ee1
mov dword [ebp - 0x1a8], 1
jmp 0x10029ee8
and dword [ebp - 0x1a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x148], 0x668d
jg 0x10029f10
mov dword [ebp - 0x10c], 1
jmp 0x10029f17
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x168], eax
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x10029f37
push 0
call fcn.1002bed8
pop ecx
mov dword [ebp - 0x3c], 0x3cdf
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x244], 0x5d580090
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x68], 0
jmp 0x10029f70
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10029f86
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x254], 0x4c996e15
jmp 0x10029f69
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x78], eax
jle 0x10029f9a
mov dword [ebp - 0x114], 1
jmp 0x10029fa1
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x1c]
jne 0x10029fc7
mov eax, 0x91509cf1
test eax, eax
jne 0x10029fc7
and dword [ebp - 0x150], 0
jmp 0x10029fd1
mov dword [ebp - 0x150], 1
cmp dword [ebp - 0x150], 0xfcfbce00
jb 0x10029fe9
mov dword [ebp - 0x11c], 1
jmp 0x10029ff0
and dword [ebp - 0x11c], 0
mov dword [ebp - 0x3c], 0xfffffff9
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x11c]
jne 0x1002a01e
mov dword [ebp - 0x178], 0x2eda8ed4
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
jmp 0x1002a2e1
mov dword [ebp - 0x27c], 4
mov dword [ebp - 0x210], 0x88a97331
mov dword [ebp - 0x20c], 0x88a97331
mov dword [ebp - 0x208], 0x88a97331
mov dword [ebp - 0x204], 0x88a97331
lea ecx, [ebp - 0x95]
call fcn.100091d3
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.1001642f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1fc]
call fcn.100163de
mov dword [ebp - 4], 2
mov dword [ebp - 0x25c], 0xcf16
push 2
lea ecx, [ebp - 0x230]
call fcn.10016382
mov byte [ebp - 4], 3
mov dword [ebp - 0x70], 0
jmp 0x1002a0b7
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1002a0d3
push dword [ebp - 0x70]
lea ecx, [ebp - 0x230]
call fcn.10016420
mov dword [eax], 0xce71
jmp 0x1002a0b0
mov dword [ebp - 0x3c], 0x17
jmp 0x1002a0e3
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
je 0x1002a17d
mov dword [ebp - 0x2a4], 0xfffffff9
mov dword [ebp - 0x264], 0x5f84255e
mov dword [ebp - 0x284], 0x61e70716
mov dword [ebp - 0x26c], 0x9e62b560
push 2
lea ecx, [ebp - 0x298]
call fcn.10016382
mov byte [ebp - 4], 4
mov dword [ebp - 0xbc], 0x45beac3e
mov dword [ebp - 0x60], 0
jmp 0x1002a140
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1002a15c
push dword [ebp - 0x60]
lea ecx, [ebp - 0x298]
call fcn.10016420
mov dword [eax], 0x41b87000
jmp 0x1002a139
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x298]
call fcn.10016404
jmp 0x1002a0dc
mov dword [ebp - 0x1c], 0
jmp 0x1002a18d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x1002a2c3
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x1002a1bb
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1002a1d1
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x250], 0x84a08deb
jmp 0x1002a1b4
push 1
lea ecx, [ebp - 0x230]
call fcn.10016420
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1fc]
call fcn.10016420
mov ecx, dword [ebp - 0x1d0]
cmp dword [eax], ecx
jne 0x1002a219
mov dword [ebp - 0xc8], 1
jmp 0x1002a220
and dword [ebp - 0xc8], 0
imul eax, dword [ebp - 0xc8], 0xffffffff
test eax, eax
je 0x1002a23d
cmp dword [ebp - 0x1c], 0
je 0x1002a23d
mov dword [ebp - 0xb0], 1
jmp 0x1002a244
and dword [ebp - 0xb0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb0]
mov dword [ebp + eax - 0x250], ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1fc]
call fcn.10016420
mov eax, dword [eax]
cmp eax, dword [ebp - 0xb0]
jge 0x1002a27b
mov dword [ebp - 0xd0], 1
jmp 0x1002a282
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 0x9e4a0435
je 0x1002a29a
mov dword [ebp - 0xb8], 1
jmp 0x1002a2a1
and dword [ebp - 0xb8], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1fc]
call fcn.10016420
mov ecx, dword [ebp - 0xb8]
imul ecx, dword [eax]
mov dword [ebp - 0x1b0], ecx
jmp 0x1002a186
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x230]
call fcn.10016404
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1fc]
call fcn.10016404
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x24], eax
push 3
lea ecx, [ebp - 0x90]
call fcn.10016382
mov dword [ebp - 4], 5
mov dword [ebp - 0x6c], 0xfffffff7
mov dword [ebp - 0x28], 0
jmp 0x1002a321
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002a33d
push dword [ebp - 0x28]
lea ecx, [ebp - 0x90]
call fcn.10016420
mov dword [eax], 0x540d7f82
jmp 0x1002a31a
mov dword [ebp - 0x28], 0
jmp 0x1002a34d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1002a360
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x10], 0xd8a87013
jmp 0x1002a346
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10], 2
jmp 0x1002a385
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jl 0x1002a66d
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x58], 0
jmp 0x1002a3b7
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1002a3cd
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x1b8], 0xffffffff
jmp 0x1002a3b0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
mov esi, dword [eax]
push 1
lea ecx, [ebp - 0x90]
call fcn.10016420
mov eax, dword [eax]
lea eax, [esi + eax - 0xe70]
test eax, eax
jne 0x1002a508
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x10]
mov dword [ebp - 0x54], eax
mov esi, dword [ebp - 0x54]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x10]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
cmp esi, dword [eax]
je 0x1002a460
mov dword [ebp - 0xe0], 1
jmp 0x1002a467
and dword [ebp - 0xe0], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
mov ecx, dword [ebp - 0xe0]
add ecx, dword [eax]
cmp ecx, 9
jne 0x1002a495
mov dword [ebp - 0xe8], 1
jmp 0x1002a49c
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0xea445a8c
ja 0x1002a4b4
mov dword [ebp - 0x1d8], 1
jmp 0x1002a4bb
and dword [ebp - 0x1d8], 0
push 1
lea ecx, [ebp - 0x90]
call fcn.10016420
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
imul esi, dword [eax], 0x9919
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
imul esi, dword [eax]
test esi, esi
jne 0x1002a508
and dword [ebp - 0xf0], 0
jmp 0x1002a512
mov dword [ebp - 0xf0], 1
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
mov ecx, dword [ebp - 0xf0]
sub ecx, dword [eax]
mov dword [ebp - 0x6c], ecx
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
cmp dword [eax], 0
jne 0x1002a55b
cmp dword [ebp - 0x54], 0
jne 0x1002a55b
and dword [ebp - 0xf8], 0
jmp 0x1002a565
mov dword [ebp - 0xf8], 1
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x90]
call fcn.10016420
cmp dword [eax], 6
jne 0x1002a58b
mov dword [ebp - 0x100], 1
jmp 0x1002a592
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x100]
jne 0x1002a5ac
mov dword [ebp - 0x108], 1
jmp 0x1002a5b3
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff7
jb 0x1002a5cb
mov dword [ebp - 0x110], 1
jmp 0x1002a5d2
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x110]
jle 0x1002a5ec
mov dword [ebp - 0x118], 1
jmp 0x1002a5f3
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x10]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x10]
jge 0x1002a622
mov dword [ebp - 0x94], 1
jmp 0x1002a629
and dword [ebp - 0x94], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
mov dword [ebp + eax - 0x1b8], ecx
cmp dword [ebp - 0x94], 0
je 0x1002a655
xor eax, eax
je 0x1002a655
mov dword [ebp - 0x120], 1
jmp 0x1002a65c
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x1c8], eax
jmp 0x1002a370
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.10016404
and dword [ebp - 0x9c], 0
jmp 0x1002a69b
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x24]
add eax, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x9c], eax
jge 0x1002aab3
mov dword [ebp - 0x5c], 6
mov dword [ebp - 0x5c], 0
jmp 0x1002a6c7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x1a
jge 0x1002a6e3
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1002a6e1
push 0
call fcn.1002abc3
pop ecx
jmp 0x1002a6c0
mov byte [ebp - 0x2b], 0
lea eax, [ebp - 0x2b]
push eax
push 0x249a
push 0x5e47
push 0
call fcn.100250d1
add esp, 0x10
mov eax, dword [ebp - 0x24]
cmp dword [eax + 0x10], 0
jne 0x1002a74e
lea eax, [ebp - 0xac]
push eax
push 0xcec
lea eax, [ebp - 0x24]
push eax
push 0xffc
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x17c]
push eax
push 0x3b3f
push 0x133b
push 0
push 0x19f4
push 0x2d01
call fcn.10024e84
add esp, 0x2c
jmp 0x1002a685
mov dword [ebp - 0x30], 0xb34e6d4f
push 4
lea ecx, [ebp - 0x1e4]
call fcn.10016382
mov dword [ebp - 4], 6
mov dword [ebp - 0x40], 0xfffffffe
mov dword [ebp - 0x48], 0x9f08664a
mov dword [ebp - 0x198], 0x3d1aa12a
mov dword [ebp - 0x16c], 0xa6ebbfad
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x84], 0
jmp 0x1002a7ae
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x1002a7d0
push dword [ebp - 0x84]
lea ecx, [ebp - 0x1e4]
call fcn.10016420
mov dword [eax], 1
jmp 0x1002a7a1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jg 0x1002a7e4
mov dword [ebp - 0x144], 1
jmp 0x1002a7eb
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x29c], eax
push 0
lea ecx, [ebp - 0x1e4]
call fcn.10016420
cmp dword [eax], 0xb8e9646b
jb 0x1002a815
mov dword [ebp - 0x12c], 1
jmp 0x1002a81c
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0x8555
jge 0x1002a834
mov dword [ebp - 0x1cc], 1
jmp 0x1002a83b
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x40]
neg eax
cmp eax, 0xff12
jg 0x1002a85c
mov dword [ebp - 0x134], 1
jmp 0x1002a863
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x134]
jg 0x1002a87a
mov dword [ebp - 0x13c], 1
jmp 0x1002a881
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x30]
jge 0x1002a89c
mov dword [ebp - 0x14c], 1
jmp 0x1002a8a3
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x14c]
jne 0x1002a8bd
mov dword [ebp - 0x154], 1
jmp 0x1002a8c4
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x154], eax
je 0x1002a8db
mov dword [ebp - 0x15c], 1
jmp 0x1002a8e2
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x15c]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], 0
jmp 0x1002a8ff
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xc
jle 0x1002aa3f
mov dword [ebp - 0x80], 0xfffffffe
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x1a4], 0xfef5379a
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x248], eax
push 0
lea ecx, [ebp - 0x1e4]
call fcn.10016420
push 0
lea ecx, [ebp - 0x1e4]
call fcn.10016420
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jne 0x1002a967
mov dword [ebp - 0x164], 1
jmp 0x1002a96e
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x164]
imul eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x19c]
jle 0x1002a996
cmp dword [ebp - 0x80], 0
je 0x1002a996
mov dword [ebp - 0x174], 1
jmp 0x1002a99d
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
add eax, dword [ebp - 0x174]
imul eax, eax, 7
imul eax, dword [ebp - 0x80]
test eax, eax
je 0x1002a9e0
push 0
lea eax, [ebp - 0x48]
push eax
push 0x43d8
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.10028de4
add esp, 0x14
jmp 0x1002aa3a
mov dword [ebp - 0x240], 0xb404
mov dword [ebp - 0x23c], 0xb404
mov dword [ebp - 0x238], 0xb404
mov dword [ebp - 0x234], 0xb404
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x240], 0
je 0x1002aa1a
jmp 0x1002aa3f
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1002aa3a
push 0x7b1f
push 0x17e1
push 0
call fcn.10023e8f
add esp, 0xc
jmp 0x1002a8f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.10016404
push 4
push 0x1000
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x17c]
add ecx, dword [eax + 0xc]
push ecx
push 0x3693
push 0x2cf4
call fcn.1002345d
pop ecx
pop ecx
call eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1ac]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xac]
call fcn.1002347f
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xac]
mov dword [eax + 8], ecx
jmp 0x1002a685
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret