Function at 0x10023c7b
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x328
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100252af
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x40], 0xd5b611fb
mov dword [ebp - 0x114], 2
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x10], 0
jmp 0x10023cd2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10023ce8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2c4], 0xb999fb02
jmp 0x10023ccb
mov dword [ebp - 0x10], 0
jmp 0x10023cf8
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10023d0e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x308], 0xffffffff
jmp 0x10023cf1
mov dword [ebp - 0x4c], 0
jmp 0x10023d1e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jl 0x100241ac
mov dword [ebp - 0x50], 0
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x1b8], 0x2603
mov dword [ebp - 0xfc], 9
mov dword [ebp - 0x98], 0
jmp 0x10023d66
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10023d7f
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x60], 0
jmp 0x10023d59
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x58]
mov dword [ebp + eax - 0x2c4], ecx
mov dword [ebp - 0x58], 0xfffffff7
jmp 0x10023d9f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jle 0x100241a7
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x20], 0
jmp 0x10023dc0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10023dd6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1cc], 3
jmp 0x10023db9
mov dword [ebp - 0x20], 0
jmp 0x10023de6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10023dfc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x314], 0xfffffff8
jmp 0x10023ddf
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x50]
cmp dword [ebp + eax - 0x1cc], ecx
je 0x10023e1a
mov dword [ebp - 0xf8], 1
jmp 0x10023e21
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0x63090707
jne 0x10023e39
mov dword [ebp - 0x1c0], 1
jmp 0x10023e40
and dword [ebp - 0x1c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1cc]
imul eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0x40]
jl 0x10023e65
mov dword [ebp - 0x15c], 1
jmp 0x10023e6c
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x15c], eax
jg 0x10023e83
mov dword [ebp - 0x200], 1
jmp 0x10023e8a
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2f8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x308]
dec eax
mov dword [ebp - 0x1f8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp + eax - 0x308], ecx
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0xf4], eax
imul eax, dword [ebp - 0x5c], 0
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xf4], eax
jl 0x10023ef0
push 8
pop eax
test eax, eax
jne 0x10023ef0
and dword [ebp - 0x194], 0
jmp 0x10023efa
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xfc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xfc]
imul ecx, dword [ebp + eax - 0x314]
sub ecx, dword [ebp - 0x4c]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1cc], ecx
jg 0x10023f38
mov dword [ebp - 0x164], 1
jmp 0x10023f3f
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
add eax, 0x64ba389f
cmp eax, dword [ebp - 0x50]
jg 0x10023f5b
mov dword [ebp - 0x1d0], 1
jmp 0x10023f62
and dword [ebp - 0x1d0], 0
imul eax, dword [ebp - 0x114], 0xc02d
cmp eax, dword [ebp - 0x50]
jge 0x10023f7d
mov dword [ebp - 0x104], 1
jmp 0x10023f84
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x104]
mov dword [ebp + eax - 0x60], ecx
mov dword [ebp - 0x40], 0
jmp 0x10023fa4
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff8
jl 0x100241a2
mov dword [ebp - 0x64], 0
jmp 0x10023fbe
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10023fd4
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xb8], 0xffffffff
jmp 0x10023fb7
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x4c], 0
jne 0x100240c4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
jne 0x10024006
mov dword [ebp - 0x1bc], 1
jmp 0x1002400d
and dword [ebp - 0x1bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
cmp dword [ebp - 0x1bc], eax
jg 0x10024034
mov eax, 0x6b9b
test eax, eax
jne 0x10024034
and dword [ebp - 0x10c], 0
jmp 0x1002403e
mov dword [ebp - 0x10c], 1
mov eax, dword [ebp - 0x10c]
neg eax
cmp eax, dword [ebp - 0x238]
jl 0x1002405a
mov dword [ebp - 0x16c], 1
jmp 0x10024061
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
add eax, 0x6ec25aed
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x60]
jl 0x10024084
mov dword [ebp - 0x1f0], 1
jmp 0x1002408b
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
mov dword [ebp - 0x298], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 0
je 0x100240b4
mov eax, 0x8509ef6e
test eax, eax
jne 0x100240c4
push 4
pop eax
test eax, eax
jne 0x100240c4
and dword [ebp - 0x19c], 0
jmp 0x100240ce
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x19c], eax
jle 0x100240e8
mov dword [ebp - 0x11c], 1
jmp 0x100240ef
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0xb3bd
jg 0x10024107
mov dword [ebp - 0x174], 1
jmp 0x1002410e
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 5
jae 0x10024123
mov dword [ebp - 0xd4], 1
jmp 0x1002412a
and dword [ebp - 0xd4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd4]
mov dword [ebp + eax - 0x2c4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
cmp dword [ebp - 0xd4], eax
jle 0x1002415b
mov dword [ebp - 0x124], 1
jmp 0x10024162
and dword [ebp - 0x124], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1cc]
cmp dword [ebp - 0x124], eax
je 0x10024183
mov dword [ebp - 0x1b4], 1
jmp 0x1002418a
and dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0xb8], ecx
jmp 0x10023f9d
jmp 0x10023d98
jmp 0x10023d17
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x6c], 0x1928c176
mov dword [ebp - 0x6c], 0
jmp 0x100241cc
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xa
jl 0x10024270
mov dword [ebp - 0x94], 0
jmp 0x100241ef
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1002420b
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x268], 4
jmp 0x100241e2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x268], 0
jmp 0x10024239
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x268]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x268], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x268], 0xfffffff1
jle 0x1002426b
mov dword [ebp - 0x1dc], 0xfffffff7
mov dword [ebp - 0x214], 0xbc662a2b
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x214], eax
jmp 0x1002421e
jmp 0x100241c5
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x290], 0xf118c84b
mov dword [ebp - 0x28c], 0xf118c84b
mov dword [ebp - 0x288], 0xf118c84b
mov dword [ebp - 0x284], 0xf118c84b
mov dword [ebp - 0x14], 0
jmp 0x100242b1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100242c7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x274], 0x3342eb90
jmp 0x100242aa
mov dword [ebp - 0x14], 0
jmp 0x100242d7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100242ed
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb0], 0xfffffff7
jmp 0x100242d0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb0], 2
jmp 0x1002431b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb0], 0
jl 0x100244d0
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 0
jmp 0x10024346
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jg 0x10024363
mov dword [ebp - 0x1e4], 0xa956
cmp dword [ebp - 0x1e4], 0
je 0x10024361
jmp 0x10024363
jmp 0x1002433f
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xb0]
mov eax, dword [ebp + eax - 0xb0]
mov dword [ebp + ecx*4 - 0x274], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp + eax*4 - 0x274], 1
jg 0x100243a7
mov dword [ebp - 0x12c], 1
jmp 0x100243ae
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x12c]
jge 0x100243c5
mov dword [ebp - 0x17c], 1
jmp 0x100243cc
and dword [ebp - 0x17c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov eax, dword [ebp + eax*4 - 0x274]
cmp dword [ebp - 0x17c], eax
jne 0x100243f4
mov dword [ebp - 0x134], 1
jmp 0x100243fb
and dword [ebp - 0x134], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov ecx, dword [ebp - 0x134]
lea eax, [eax + ecx + 0xd9ba]
cmp eax, dword [ebp - 0x2c]
jge 0x10024426
mov dword [ebp - 0x1a4], 1
jmp 0x1002442d
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0]
imul eax, dword [ebp - 0x1a4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb0]
jl 0x1002445c
mov dword [ebp - 0x13c], 1
jmp 0x10024463
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x13c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb0]
je 0x10024488
mov dword [ebp - 0x224], 1
jmp 0x1002448f
and dword [ebp - 0x224], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb0], 0x37d02268
jl 0x100244ae
mov dword [ebp - 0x184], 1
jmp 0x100244b5
and dword [ebp - 0x184], 0
push 2
pop eax
sub eax, dword [ebp - 0x184]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x290], eax
jmp 0x10024300
mov dword [ebp - 0x78], 2
mov dword [ebp - 0x1c], 0
jmp 0x100244e7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100244fd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x29c], 4
jmp 0x100244e0
mov dword [ebp - 0x1c], 0
jmp 0x1002450d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10024523
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x320], 0xe52d8cb4
jmp 0x10024506
mov dword [ebp - 0x78], 0
jmp 0x10024533
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x1002454c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x320], 0x9532bb11
jmp 0x1002452c
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1002457b
push 0x1661
push 0x6a3e
push 0x788f
push 0
push 0x46fd
push 0x5330
call fcn.100252bd
add esp, 0x18
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 4]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x90], 0
jmp 0x100245a3
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x100245bc
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x80], 0xfffffff7
jmp 0x10024596
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x80], 0xffffffe6
jmp 0x100245e1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x80], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x80], 0x18
jg 0x10024610
mov dword [ebp - 0x1ec], 0xd05ba772
push 1
push 0x542c
lea eax, [ebp - 0x1ec]
push eax
call fcn.10022a53
add esp, 0xc
jmp 0x100245cc
push 0xeee
push 0
call fcn.10026a79
pop ecx
pop ecx
mov dword [ebp - 0xc], 0x632667a8
mov dword [ebp - 0x144], 0xfffffff8
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x2a4], 0x2aa787d3
mov dword [ebp - 4], 0
jmp 0x1002465d
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x10024670
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x54], 0x99ff
jmp 0x10024656
mov dword [ebp - 4], 0
jmp 0x10024680
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x10024696
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x280], 0x91ba8027
jmp 0x10024679
mov dword [ebp - 4], 0
jmp 0x100246a6
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x100246bc
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x210], 0xb88dcfd8
jmp 0x1002469f
mov dword [ebp - 0xc], 0
jmp 0x100246cc
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x10024925
mov dword [ebp - 0xa0], 0xfffffff6
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x54]
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x144], 0xfffffffb
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x54]
cmp dword [ebp - 0x144], eax
jl 0x10024744
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x54]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp + ecx*4 - 0x54]
cmp dword [ebp + eax*4 - 0x54], ecx
je 0x10024736
mov dword [ebp - 0x1c4], 1
jmp 0x1002473d
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x1ac]
add eax, 0x37e0d1b7
cmp eax, 0x48dc
jne 0x10024774
mov dword [ebp - 0x14c], 1
jmp 0x1002477b
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x14c], eax
jge 0x1002479b
mov eax, 0x6091
test eax, eax
jne 0x1002479b
and dword [ebp - 0xc8], 0
jmp 0x100247a5
mov dword [ebp - 0xc8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + eax - 0x280], ecx
cmp dword [ebp - 0xc8], 0
jne 0x100247d1
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x100247d1
and dword [ebp - 0x18c], 0
jmp 0x100247db
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x154], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x154]
mov dword [ebp + eax - 0x210], ecx
mov eax, dword [ebp - 0x154]
sub eax, 0x622b
je 0x1002481c
cmp dword [ebp - 0xa0], 0
je 0x1002481a
jmp 0x10024925
jmp 0x1002484d
mov dword [ebp - 0x28], 0xa
jmp 0x1002482c
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffec
jl 0x1002484d
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp + ecx - 0x210], eax
jmp 0x10024825
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x210], 0
jne 0x10024901
cmp dword [ebp - 0x28], 1
jne 0x10024873
mov dword [ebp - 0xc0], 1
jmp 0x1002487a
and dword [ebp - 0xc0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc0]
mov dword [ebp + eax - 0x280], ecx
cmp dword [ebp - 0xc0], 0
je 0x100248c4
mov eax, dword [ebp - 0x1ac]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x210]
cmp dword [ebp - 0xa0], eax
jle 0x100248c4
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x100248c4
mov dword [ebp - 0xec], 1
jmp 0x100248cb
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0xffff
je 0x100248e3
mov dword [ebp - 0xf0], 1
jmp 0x100248ea
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xf0], eax
jne 0x10024901
and dword [ebp - 0xe8], 0
jmp 0x1002490b
mov dword [ebp - 0xe8], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe8]
sub ecx, dword [ebp + eax - 0x210]
mov dword [ebp - 0x28], ecx
jmp 0x100246c5
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x88]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x18], eax
and dword [ebp - 0xd0], 0
jmp 0x1002495f
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xd0], eax
jge 0x100252ad
mov dword [ebp - 0x74], 0x5c8094a1
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0x70], 0
jmp 0x10024998
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x100249ae
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2e4], 3
jmp 0x10024991
mov dword [ebp - 0x74], 0
jmp 0x100249be
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x10024a1b
mov dword [ebp - 0x2f0], 0xfffffff7
mov dword [ebp - 0x294], 0x4d00693e
mov dword [ebp - 0x7c], 0
jmp 0x100249e8
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x100249fe
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x328], 1
jmp 0x100249e1
push 0x5b6a
push 0
push 0x6a0
lea eax, [ebp - 0x1f4]
push eax
call fcn.10026b38
add esp, 0x10
jmp 0x100249b7
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0
jne 0x10024a56
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x23c]
push eax
push 0
lea eax, [ebp - 0xcc]
push eax
push 0x4fd8
push 0x160e
lea eax, [ebp - 0x18]
push eax
call fcn.1002879b
add esp, 0x1c
jmp 0x10024949
mov dword [ebp - 0xe4], 0xfffffff9
mov dword [ebp - 0xe0], 0xfffffff9
mov dword [ebp - 0xdc], 0xfffffff9
mov dword [ebp - 0xd8], 0xfffffff9
mov dword [ebp - 0x24], 0x8651162f
mov dword [ebp - 0x110], 1
mov dword [ebp - 0x84], 0
jmp 0x10024aa8
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10024ac1
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x3c], 0x2bf35dd7
jmp 0x10024a9b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe4], 0x13
jmp 0x10024aef
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 0xfffffff1
je 0x10025066
mov dword [ebp - 0x48], 0
mov dword [ebp - 8], 0
jmp 0x10024b1a
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x10024b2d
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x44], 1
jmp 0x10024b13
mov dword [ebp - 8], 0
jmp 0x10024b3d
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x10024b53
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x24c], 0xfffffff7
jmp 0x10024b36
mov dword [ebp - 8], 0
jmp 0x10024b63
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x10024b79
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x25c], 0xba424acd
jmp 0x10024b5c
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xe4], 1
jle 0x10024b95
mov dword [ebp - 0x100], 1
jmp 0x10024b9c
and dword [ebp - 0x100], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
add eax, dword [ebp - 0x100]
cmp eax, 1
jne 0x10024bbd
mov dword [ebp - 0x108], 1
jmp 0x10024bc4
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x10024be9
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x10024be9
and dword [ebp - 0xb4], 0
jmp 0x10024bf3
mov dword [ebp - 0xb4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
mov dword [ebp + eax - 0x3c], ecx
mov eax, dword [ebp - 0xb4]
sub eax, 0xa7e9
imul eax, eax, 0x6cd0
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xe4]
jl 0x10024c2f
mov dword [ebp - 0x118], 1
jmp 0x10024c36
and dword [ebp - 0x118], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x118], eax
jge 0x10024c57
mov dword [ebp - 0x120], 1
jmp 0x10024c5e
and dword [ebp - 0x120], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0x120], eax
je 0x10024c7c
mov dword [ebp - 0x128], 1
jmp 0x10024c83
and dword [ebp - 0x128], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x24c], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24c], 0
je 0x10024e54
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x150], 2
mov dword [ebp - 0x24], 0
jmp 0x10024cce
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x10024e4f
mov dword [ebp - 0x8c], 0
jmp 0x10024cf1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10024d0d
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x2d4], 0xe903adfe
jmp 0x10024ce4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24c]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x24c]
je 0x10024d47
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24c], 0
je 0x10024d47
mov dword [ebp - 0x140], 1
jmp 0x10024d4e
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x24c]
jg 0x10024d75
mov dword [ebp - 0x130], 1
jmp 0x10024d7c
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x3c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x25c]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x3c]
mov dword [ebp - 0x138], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0x138], eax
jne 0x10024dc7
mov dword [ebp - 0xbc], 1
jmp 0x10024dce
and dword [ebp - 0xbc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + eax - 0x2d4], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp eax, dword [ebp - 0xbc]
jne 0x10024e05
cmp dword [ebp - 0x24], 0
jne 0x10024e05
and dword [ebp - 0x148], 0
jmp 0x10024e0f
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x148]
jl 0x10024e29
mov dword [ebp - 0x1fc], 1
jmp 0x10024e30
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x3c]
inc eax
mov dword [ebp - 0x150], eax
jmp 0x10024cc7
jmp 0x10025061
mov dword [ebp - 0x34], 0x2df500c3
mov dword [ebp - 0x68], 0x82e9
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2a0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x25c], 0
je 0x10024f69
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x34]
mov dword [ebp + eax - 0x24c], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x2e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0xfffd
je 0x10024eb4
mov dword [ebp - 0x158], 1
jmp 0x10024ebb
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x158], eax
jg 0x10024edc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
jne 0x10024edc
and dword [ebp - 0x160], 0
jmp 0x10024ee6
mov dword [ebp - 0x160], 1
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x160], eax
jge 0x10024efd
mov dword [ebp - 0x168], 1
jmp 0x10024f04
and dword [ebp - 0x168], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x25c]
add ecx, dword [ebp - 0x168]
cmp dword [ebp + eax - 0x3c], ecx
jge 0x10024f27
cmp dword [ebp - 0x34], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x25c], 0
je 0x10024f48
xor eax, eax
inc eax
je 0x10024f48
mov dword [ebp - 0x170], 1
jmp 0x10024f4f
and dword [ebp - 0x170], 0
imul eax, dword [ebp - 0x170], 0x99c0
test eax, eax
je 0x10024f69
mov dword [ebp - 0x218], 1
jmp 0x10024f70
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2a8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x34], 0
jl 0x10024f9b
mov dword [ebp - 0x178], 1
jmp 0x10024fa2
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x34]
je 0x10024fbd
mov dword [ebp - 0x204], 1
jmp 0x10024fc4
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x25c], 1
jbe 0x10025005
mov dword [ebp - 0x180], 1
jmp 0x1002500c
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 3
jmp 0x10025025
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10025061
mov dword [ebp - 0xc4], 0xc9dabc5d
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x25c]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + eax - 0x3c], ecx
jmp 0x1002501e
jmp 0x10024ad4
push 4
push 0x1000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x188]
add ecx, dword [eax + 0xc]
push ecx
push 0x3844
push 0x26d4
call fcn.10021fd2
pop ecx
pop ecx
call eax
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x21c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xcc]
call fcn.10022054
add esp, 0xc
mov dword [ebp - 0x1d4], 0xade
mov dword [ebp - 0x2cc], 0xebfb2c41
mov dword [ebp - 0x9c], 0
jmp 0x100250e7
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jge 0x10025103
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x234], 0xffffffff
jmp 0x100250da
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x234], 0xfffffff3
jmp 0x1002512e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x234], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x234], 0xe
je 0x1002529c
mov dword [ebp - 0x1e0], 0x78f4f823
cmp dword [ebp - 0x1d4], 0
je 0x10025257
mov dword [ebp - 0x190], 0xf5ed9a92
mov dword [ebp - 0xa4], 0
jmp 0x1002517b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10025197
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1d8], 0x8dc5336d
jmp 0x1002516e
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x190]
cmp dword [ebp + eax - 0x234], ecx
jg 0x100251b7
mov dword [ebp - 0x198], 1
jmp 0x100251be
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x198]
je 0x100251d8
mov dword [ebp - 0x1a8], 1
jmp 0x100251df
and dword [ebp - 0x1a8], 0
mov eax, 0xba20
test eax, eax
je 0x1002523b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d8]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x234]
je 0x1002521e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x234], 0
je 0x1002521e
mov dword [ebp - 0x1a0], 1
jmp 0x10025225
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
neg eax
je 0x1002523b
mov dword [ebp - 0x1b0], 1
jmp 0x10025242
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1a8]
imul eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1e0], eax
jmp 0x10025277
mov dword [ebp - 0x1e8], 0xdf9c
push 0x74d2
lea eax, [ebp - 0x1e8]
push eax
push 0
call fcn.10025ab2
add esp, 0xc
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x10025297
push 0x1b71
push 0
push 0x61b
call fcn.10025b7a
add esp, 0xc
jmp 0x10025115
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xcc]
mov dword [eax + 8], ecx
jmp 0x10024949
jmp 0x100252b9
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov esp, ebp
pop ebp
ret