Function at 0x100290f8
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b4
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10029116
push 0
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x10029d15
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 4]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0xf0], 0x718bd850
mov dword [ebp - 0x144], 0x3d3b0cf5
cmp dword [ebp - 0x1c], 0
jne 0x100291ff
cmp dword [ebp - 0x1c], 0
jne 0x100291a1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1c], eax
jg 0x10029180
mov dword [ebp - 0x10c], 1
jmp 0x10029187
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x10c]
cmp eax, 0xa8fe
jle 0x100291a1
and dword [ebp - 0x138], 0
jmp 0x100291ab
mov dword [ebp - 0x138], 1
cmp dword [ebp - 0x138], 0x921e
jg 0x100291c3
mov dword [ebp - 0x140], 1
jmp 0x100291ca
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
sub eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1c], eax
jne 0x100291e4
mov dword [ebp - 0x124], 1
jmp 0x100291eb
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x124], eax
je 0x100291ff
and dword [ebp - 0xe8], 0
jmp 0x10029209
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xb691
jle 0x10029227
mov dword [ebp - 0x90], 1
jmp 0x1002922e
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x90]
imul eax, eax, 0xe1fc
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x14], 0x19
jmp 0x10029260
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe4
jle 0x1002929f
mov byte [ebp - 0x17], 0
movzx eax, byte [ebp - 0x17]
test eax, eax
je 0x10029286
push 0
push 0xed
push 0xd95
call fcn.100316d2
add esp, 0xc
mov byte [ebp - 0x15], 0
push 0x6f76
push 0
lea eax, [ebp - 0x15]
push eax
call fcn.10028d71
add esp, 0xc
jmp 0x10029259
mov dword [ebp - 0x38], 0xe53d8da8
mov dword [ebp - 0x174], 0xffff
mov dword [ebp - 0x98], 5
mov dword [ebp - 0x100], 0xab1943c6
cmp dword [ebp - 0x38], 0
jne 0x10029366
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x174]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jge 0x100292f1
mov dword [ebp - 0xf8], 1
jmp 0x100292f8
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0xf8], eax
je 0x10029312
mov dword [ebp - 0xa0], 1
jmp 0x10029319
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x1188
jg 0x1002933d
mov dword [ebp - 0xa8], 1
jmp 0x10029344
and dword [ebp - 0xa8], 0
imul eax, dword [ebp - 0xa8], 0x23a2
add eax, dword [ebp - 0x38]
jne 0x10029366
mov byte [ebp - 0x1d], 0
lea eax, [ebp - 0x1d]
push eax
push 0
call fcn.1002df9c
pop ecx
pop ecx
jmp 0x10029380
mov byte [ebp - 0x18], 0
movzx eax, byte [ebp - 0x18]
test eax, eax
je 0x10029380
push 0x4000
push 0
call fcn.1002c7c3
pop ecx
pop ecx
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x34], 1
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
cmp dword [ebp - 0x34], eax
jle 0x100293c7
mov dword [ebp - 0x108], 1
jmp 0x100293ce
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x34]
dec ecx
imul eax, ecx
cmp eax, dword [ebp - 0x108]
jge 0x10029552
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0xb8], 0xe9f9034e
mov dword [ebp - 0xc8], 4
mov dword [ebp - 0x128], 0xd800f4d4
mov dword [ebp - 0x60], 0
jmp 0x10029419
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1002942f
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x17c], 9
jmp 0x10029412
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x30]
cmp dword [ebp - 4], eax
jle 0x1002944f
mov dword [ebp - 0xb0], 1
jmp 0x10029456
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xb0], eax
jge 0x1002946a
mov dword [ebp - 0x70], 1
jmp 0x1002946e
and dword [ebp - 0x70], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x70]
mov dword [ebp + eax - 0x17c], ecx
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x70], eax
jle 0x10029492
mov dword [ebp - 0x110], 1
jmp 0x10029499
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x1f082
je 0x100294bd
mov dword [ebp - 0x170], 1
jmp 0x100294c4
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 4], 0
jbe 0x100294df
mov dword [ebp - 0x118], 1
jmp 0x100294e6
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x118], eax
jg 0x100294fd
mov dword [ebp - 0xc0], 1
jmp 0x10029504
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xc0], eax
jne 0x10029521
mov eax, 0x752b
test eax, eax
jne 0x10029521
and dword [ebp - 0x120], 0
jmp 0x1002952b
mov dword [ebp - 0x120], 1
imul eax, dword [ebp - 0x120], 5
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x34], eax
jmp 0x10029668
mov dword [ebp - 0x16c], 0xc46d
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x68], 0
jmp 0x1002957d
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10029593
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x190], 0x1ce43c7d
jmp 0x10029576
mov dword [ebp - 4], 0
jmp 0x100295a3
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x13
jg 0x10029648
mov dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 7
jbe 0x100295cc
mov dword [ebp - 0x130], 1
jmp 0x100295d3
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x130]
jge 0x100295ed
mov dword [ebp - 0xd4], 1
jmp 0x100295f4
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xa103363
jg 0x10029629
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xdc]
jne 0x10029629
mov dword [ebp - 0x134], 1
jmp 0x10029630
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x190], ecx
jmp 0x1002959c
mov dword [ebp - 0x2c], 0
jmp 0x10029658
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jle 0x10029668
cmp dword [ebp - 4], 0
je 0x10029666
jmp 0x10029668
jmp 0x10029651
and dword [ebp - 0x6c], 0
jmp 0x1002967e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x10]
add eax, 0x28
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x6c], eax
jge 0x10029d15
mov dword [ebp - 0x54], 0xc70bb743
mov dword [ebp - 0xe4], 0x8cf5a8b
mov dword [ebp - 0x74], 0xf7b6fe6d
mov dword [ebp - 8], 0
jmp 0x100296b8
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x100296cb
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x80], 0xc75286e8
jmp 0x100296b1
mov dword [ebp - 8], 0
jmp 0x100296db
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x100296f1
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x168], 4
jmp 0x100296d4
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x54]
mov dword [ebp + eax - 0x80], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x80]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x74], 5
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0xe4], eax
je 0x1002972c
mov dword [ebp - 0x114], 1
jmp 0x10029733
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x54], 0x8064
jl 0x10029745
mov eax, 0x4dd
test eax, eax
jne 0x10029749
cmp dword [ebp - 0x54], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x80], 0x9478
jg 0x10029765
mov dword [ebp - 0xec], 1
jmp 0x1002976c
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0xec]
jle 0x10029786
mov dword [ebp - 0x12c], 1
jmp 0x1002978d
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0x9968cb66
ja 0x100297a5
mov dword [ebp - 0xf4], 1
jmp 0x100297ac
and dword [ebp - 0xf4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x80]
cmp eax, dword [ebp - 0xf4]
je 0x100297ca
mov dword [ebp - 0x150], 1
jmp 0x100297d1
and dword [ebp - 0x150], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x80]
mov dword [ebp - 0x184], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
cmp dword [ebp - 0x54], eax
jne 0x10029805
cmp dword [ebp - 0x74], 0
je 0x10029805
mov dword [ebp - 0x11c], 1
jmp 0x1002980c
and dword [ebp - 0x11c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x11c]
mov dword [ebp + eax - 0x80], ecx
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x10], 0
jne 0x100299c9
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x28], 0
jmp 0x1002984a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xd
je 0x1002992d
mov dword [ebp - 0x178], 0x3837aced
mov dword [ebp - 0x64], 0
jmp 0x1002986e
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10029884
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x19c], 7
jmp 0x10029867
cmp dword [ebp - 0x28], 0x989b1ab4
je 0x10029899
mov dword [ebp - 0xfc], 1
jmp 0x100298a0
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xfc]
je 0x100298b7
mov dword [ebp - 0x13c], 1
jmp 0x100298be
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 4
jne 0x100298d3
mov dword [ebp - 0x158], 1
jmp 0x100298da
and dword [ebp - 0x158], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x19c], 0xd006
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1a4], eax
mov eax, 0xca96
imul eax, eax, 0xfffc
cmp eax, 0xf1bf
jne 0x10029915
mov dword [ebp - 0x104], 1
jmp 0x1002991c
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x160], eax
jmp 0x10029843
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x78]
push eax
push 0
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1002906b
add esp, 0x14
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x58], 0
jmp 0x10029964
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1002997a
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x1b4], 1
jmp 0x1002995d
mov dword [ebp - 0x48], 0
jmp 0x1002998a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x100299a1
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x1b4], 0
je 0x1002999f
jmp 0x100299a1
jmp 0x10029983
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x100299c4
push 0x89b
push 0x1f88
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x1002966e
mov dword [ebp - 0x24], 0xba31e468
mov dword [ebp - 0x154], 0x796840e
mov dword [ebp - 0xc], 0
jmp 0x100299ea
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x100299fd
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x50], 0x1177e8ed
jmp 0x100299e3
mov dword [ebp - 0xc], 0
jmp 0x10029a0d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x10029a20
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x44], 2
jmp 0x10029a06
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x44], 0
jmp 0x10029a42
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x44], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x44], 1
jg 0x10029cb9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x44], 0xfffffff9
jg 0x10029a6a
mov dword [ebp - 0x14c], 1
jmp 0x10029a71
and dword [ebp - 0x14c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
mov eax, dword [ebp + eax*4 - 0x50]
mov dword [ebp - 0x188], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x44]
cmp dword [ebp + eax*4 - 0x50], ecx
jle 0x10029aa8
mov dword [ebp - 0xcc], 1
jmp 0x10029aaf
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x10029aca
mov dword [ebp - 0xd0], 1
jmp 0x10029ad1
and dword [ebp - 0xd0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
mov eax, dword [ebp + eax*4 - 0x50]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x44]
sub eax, dword [ebp + ecx*4 - 0x50]
cmp eax, dword [ebp - 0xd0]
jle 0x10029aff
mov dword [ebp - 0xd8], 1
jmp 0x10029b06
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0xfff6
jb 0x10029b1e
mov dword [ebp - 0xe0], 1
jmp 0x10029b25
and dword [ebp - 0xe0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
mov eax, dword [ebp + eax*4 - 0x50]
cmp eax, dword [ebp - 0xe0]
jle 0x10029b46
mov dword [ebp - 0x88], 1
jmp 0x10029b4d
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x24], 0
jmp 0x10029b69
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jl 0x10029cb4
mov dword [ebp - 0x9c], 0x507af9ca
mov dword [ebp - 0x15c], 0xfc4b664f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
mov eax, dword [ebp + eax*4 - 0x50]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x194], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp + eax*4 - 0x50], 0xfffffffa
jge 0x10029bc2
mov dword [ebp - 0x8c], 1
jmp 0x10029bc9
and dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 1
jne 0x10029bde
mov dword [ebp - 0x94], 1
jmp 0x10029be5
and dword [ebp - 0x94], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
mov ecx, dword [ebp - 0x94]
sub ecx, dword [ebp - 0x9c]
dec ecx
cmp dword [ebp + eax*4 - 0x50], ecx
jne 0x10029c0d
mov dword [ebp - 0xa4], 1
jmp 0x10029c14
and dword [ebp - 0xa4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0xa4], eax
jne 0x10029c31
mov dword [ebp - 0xac], 1
jmp 0x10029c38
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
add eax, 0xfff9
cmp eax, dword [ebp - 0x24]
jne 0x10029c5d
mov eax, 0x6b99
test eax, eax
je 0x10029c5d
mov dword [ebp - 0xb4], 1
jmp 0x10029c64
and dword [ebp - 0xb4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
mov eax, dword [ebp + eax*4 - 0x50]
cmp dword [ebp - 0xb4], eax
jne 0x10029c85
mov dword [ebp - 0xbc], 1
jmp 0x10029c8c
and dword [ebp - 0xbc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + eax - 0x50], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x44]
mov eax, dword [ebp + eax*4 - 0x50]
mov dword [ebp - 0x15c], eax
jmp 0x10029b62
jmp 0x10029a2f
push 4
push 0x1000
mov eax, dword [ebp - 0x10]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc4]
add ecx, dword [eax + 0xc]
push ecx
push 0x11038
push 0x10244
call fcn.10026c46
pop ecx
pop ecx
call eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x10]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x164]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x78]
call fcn.10026cb0
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x78]
mov dword [eax + 8], ecx
jmp 0x1002966e
mov esp, ebp
pop ebp
ret