Function at 0x10026add
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x248
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10026b04
push 0
push 0xa35
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x100278e6
mov eax, dword [ebp + 8]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], 0xfffffffe
mov dword [ebp - 0x58], 0
jmp 0x10026b33
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10026b49
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x224], 0xfd5464b5
jmp 0x10026b2c
mov dword [ebp - 0x4c], 0
jmp 0x10026b59
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jg 0x10026b7b
mov byte [ebp - 0x1b], 0
movzx eax, byte [ebp - 0x1b]
test eax, eax
je 0x10026b79
push 0
push 0x76fd
call fcn.1002423d
pop ecx
pop ecx
jmp 0x10026b52
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + 4]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x118], 0xfffffffd
mov dword [ebp - 0x148], 0xc2c9ebf4
mov dword [ebp - 0x174], 7
mov dword [ebp - 0x1c8], 0
mov byte [ebp - 0x19], 0
lea eax, [ebp - 0x19]
push eax
push 0
call fcn.100236e2
pop ecx
pop ecx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x60], eax
je 0x10026bee
mov dword [ebp - 0xac], 1
jmp 0x10026bf5
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xac], eax
jge 0x10026c0c
mov dword [ebp - 0x90], 1
jmp 0x10026c13
and dword [ebp - 0x90], 0
cmp dword [ebp - 0x90], 1
je 0x10026c28
mov dword [ebp - 0x88], 1
jmp 0x10026c2f
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x88], eax
jg 0x10026c46
mov dword [ebp - 0x13c], 1
jmp 0x10026c4d
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x13c], eax
jne 0x10026c64
mov dword [ebp - 0x144], 1
jmp 0x10026c6b
and dword [ebp - 0x144], 0
mov dword [ebp - 0x118], 4
imul eax, dword [ebp - 0x144], 7
cmp dword [ebp - 0x118], eax
jl 0x10026c90
mov dword [ebp - 0x98], 1
jmp 0x10026c97
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x98]
jge 0x10026cae
mov dword [ebp - 0xf0], 1
jmp 0x10026cb5
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0xf0]
jle 0x10026ccf
cmp dword [ebp - 0x34], 0
jne 0x10026ccf
and dword [ebp - 0xa0], 0
jmp 0x10026cd9
mov dword [ebp - 0xa0], 1
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
and dword [ebp - 0x74], 0
jmp 0x10026d10
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x74], eax
jge 0x100278e6
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 0
jne 0x1002750f
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x154], 0x3809
mov dword [ebp - 0x16c], 0xcd9d7
mov dword [ebp - 0x158], 0x34f1
mov dword [ebp - 0xc], 0
jmp 0x10026d64
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x10026d7a
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1ac], 0xfffffffc
jmp 0x10026d5d
mov dword [ebp - 0xc], 0
jmp 0x10026d8a
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x10026d9d
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x7c], 0xf5fa
jmp 0x10026d83
cmp dword [ebp - 0x30], 0xffff
jb 0x10026db2
mov dword [ebp - 0x130], 1
jmp 0x10026db9
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
add eax, 3
je 0x10026e4c
mov dword [ebp - 0x1c4], 7
mov dword [ebp - 0x1cc], 0x1dfe4b28
mov dword [ebp - 0x20c], 0xfffffff8
mov dword [ebp - 0x10], 0
jmp 0x10026df6
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10026e0c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x248], 1
jmp 0x10026def
mov dword [ebp - 0x10], 0
jmp 0x10026e1c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10026e32
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x23c], 0x1d2250db
jmp 0x10026e15
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7c], eax
jmp 0x100270b9
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x24], 0xf5ab171c
mov eax, 0x168aa2
test eax, eax
je 0x10027060
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x30]
test eax, eax
je 0x10026e8b
cmp dword [ebp - 0x30], 0
je 0x10026e8b
mov dword [ebp - 0xa8], 1
jmp 0x10026e92
and dword [ebp - 0xa8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0xa8], eax
jg 0x10026eb0
mov dword [ebp - 0xf8], 1
jmp 0x10026eb7
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xf8], eax
jne 0x10026ece
mov dword [ebp - 0xb0], 1
jmp 0x10026ed5
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
sub eax, 0xdeb9
je 0x10026efb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
je 0x10026efb
mov dword [ebp - 0x120], 1
jmp 0x10026f02
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x6c], eax
xor eax, eax
sub eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x54]
jne 0x10026f24
mov dword [ebp - 0xb8], 1
jmp 0x10026f2b
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0xb8], eax
je 0x10026f58
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1ac], 0
je 0x10026f58
mov dword [ebp - 0x100], 1
jmp 0x10026f5f
and dword [ebp - 0x100], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ac]
cmp dword [ebp - 0x100], eax
je 0x10026f80
mov dword [ebp - 0xc0], 1
jmp 0x10026f87
and dword [ebp - 0xc0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc0]
mov dword [ebp + eax - 0x1ac], ecx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x21c], eax
mov eax, 0x826
cmp eax, 0x2365
jge 0x10026fc4
mov dword [ebp - 0x140], 1
jmp 0x10026fcb
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x16c], eax
jl 0x10026feb
mov dword [ebp - 0xc8], 1
jmp 0x10026ff2
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x30], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c], 0xfffffffd
je 0x10027014
mov dword [ebp - 0x108], 1
jmp 0x1002701b
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x108], eax
je 0x10027035
mov dword [ebp - 0xd0], 1
jmp 0x1002703c
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0xd0], eax
jg 0x10027060
mov byte [ebp - 0x1e], 0
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x1002705e
push 0
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x100270b9
mov dword [ebp - 0x5c], 0
jmp 0x10027070
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10027086
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x128], 0x19ef
jmp 0x10027069
mov dword [ebp - 0x24], 0
jmp 0x10027096
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x100270b9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x128], eax
jmp 0x1002708f
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x100270cd
push 0
call fcn.10026982
pop ecx
push 0x710d
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.10027940
add esp, 0x18
mov dword [ebp - 0x160], 0xcbad
mov dword [ebp - 0x150], 0xb5131d8b
mov dword [ebp - 0x64], 0xfffffffd
mov dword [ebp - 0x1b8], 0x2bd42ca8
mov dword [ebp - 0x218], 0xfffffff9
mov dword [ebp - 0x1c0], 7
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x1b0], 0xebf495e3
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0xc4], 0x75d5f8d9
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x208], 0x20f746e3
mov dword [ebp - 0x68], 0xc099a567
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x18], 0
jmp 0x10027199
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x100271af
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18c], 0
jmp 0x10027192
mov dword [ebp - 0x18], 0
jmp 0x100271bf
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100271d5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1f8], 1
jmp 0x100271b8
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 8], 0xfffffffc
jl 0x100271f4
mov dword [ebp - 0x110], 1
jmp 0x100271fb
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x110], eax
jg 0x10027212
mov dword [ebp - 0xe0], 1
jmp 0x10027219
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xe0], eax
jg 0x10027236
cmp dword [ebp - 0x68], 0
jne 0x10027236
and dword [ebp - 0x138], 0
jmp 0x10027240
mov dword [ebp - 0x138], 1
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0xe8]
xor ecx, ecx
sub ecx, eax
xor eax, eax
inc eax
sub eax, ecx
cmp dword [ebp - 0x160], eax
je 0x10027279
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8], 0
je 0x10027279
mov dword [ebp - 0x8c], 1
jmp 0x10027280
and dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 1
jl 0x10027295
mov dword [ebp - 0x94], 1
jmp 0x1002729c
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x94], eax
jge 0x100273d2
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x50], 0
jmp 0x100272c5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x100272db
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x234], 1
jmp 0x100272be
mov dword [ebp - 8], 0
jmp 0x100272eb
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x10
jl 0x100273cd
mov dword [ebp - 0x178], 1
mov eax, 0x2536
test eax, eax
je 0x1002732a
mov dword [ebp - 0x64], 0x4dae
cmp dword [ebp - 0x64], 0
je 0x1002732a
mov eax, 0xfbca
test eax, eax
je 0x1002732a
mov dword [ebp - 0x9c], 1
jmp 0x10027331
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x9c], eax
jge 0x1002734b
mov dword [ebp - 0xa4], 1
jmp 0x10027352
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x168]
add eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xc4]
jle 0x1002736f
mov dword [ebp - 0x80], 1
jmp 0x10027373
and dword [ebp - 0x80], 0
cmp dword [ebp - 0x80], 0xd6cad8e6
jb 0x10027398
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x18c], 0
je 0x10027398
mov dword [ebp - 0xb4], 1
jmp 0x1002739f
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
add eax, 9
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x234], eax
mov byte [ebp - 0x1f], 0
movzx eax, byte [ebp - 0x1f]
test eax, eax
je 0x100273c8
push 0
call fcn.10023629
pop ecx
jmp 0x100272e4
jmp 0x100274c8
mov dword [ebp - 0xcc], 0x188a746c
mov dword [ebp - 0x48], 0
jmp 0x100273ec
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10027402
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1d8], 1
jmp 0x100273e5
cmp dword [ebp - 0xcc], 0
jne 0x10027477
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp - 0x68], eax
jle 0x10027429
mov dword [ebp - 0xbc], 1
jmp 0x10027430
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 1
jge 0x1002744b
cmp dword [ebp - 0x150], 0
jne 0x1002744b
and dword [ebp - 0x14c], 0
jmp 0x10027455
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0xcc]
dec eax
je 0x1002746e
xor eax, eax
jne 0x10027477
and dword [ebp - 0xd4], 0
jmp 0x10027481
mov dword [ebp - 0xd4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8]
cmp eax, dword [ebp - 0xd4]
jl 0x100274a2
mov dword [ebp - 0xdc], 1
jmp 0x100274a9
and dword [ebp - 0xdc], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1d8], 0x46a6
mov eax, dword [ebp - 0xdc]
add eax, 0x46a6
mov dword [ebp - 0x68], eax
mov dword [ebp - 8], 0
jmp 0x100274d8
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xfffffff7
jle 0x1002750a
mov byte [ebp - 0x1a], 0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x10027508
push 0x47e7
push 1
push 0x7117
push 0x29c4
push 0x57f1
call fcn.1002143c
add esp, 0x14
jmp 0x100274d1
jmp 0x10026d00
mov dword [ebp - 4], 0
jmp 0x1002751f
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x10027532
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x28], 1
jmp 0x10027518
mov dword [ebp - 4], 0
jmp 0x10027542
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x10027558
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1e4], 5
jmp 0x1002753b
mov dword [ebp - 4], 0
jmp 0x10027568
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x1002757e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x184], 0xa3191b49
jmp 0x10027561
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x1ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0xb263
je 0x100275aa
mov dword [ebp - 0xe4], 1
jmp 0x100275b1
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 1
jl 0x100275c6
mov dword [ebp - 0xec], 1
jmp 0x100275cd
and dword [ebp - 0xec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0xec], eax
jge 0x100275eb
mov dword [ebp - 0xf4], 1
jmp 0x100275f2
and dword [ebp - 0xf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0xf4]
jl 0x10027610
mov dword [ebp - 0xfc], 1
jmp 0x10027617
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
add eax, 5
cmp eax, 0x51af
jne 0x10027633
mov dword [ebp - 0x104], 1
jmp 0x1002763a
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
add eax, dword [ebp - 0x104]
jne 0x10027662
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x10027662
and dword [ebp - 0x10c], 0
jmp 0x1002766c
mov dword [ebp - 0x10c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10c]
mov dword [ebp + eax - 0x1e4], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x184], 0
jmp 0x100276ad
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x184], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x184], 0xffffffe6
jge 0x10027762
mov dword [ebp - 0x38], 0x6123d4a1
mov dword [ebp - 0x1e8], 0xd2668451
mov dword [ebp - 0x1fc], 0xfffffff7
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x1b4], 0x5878ed7c
mov dword [ebp - 0x38], 0
jmp 0x10027700
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1002775d
mov dword [ebp - 0x3c], 0
jmp 0x10027716
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002772c
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x194], 0xfffa
jmp 0x1002770f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x194]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x194], eax
mov byte [ebp - 0x1c], 0
movzx eax, byte [ebp - 0x1c]
test eax, eax
je 0x1002775b
push 1
call fcn.10023629
pop ecx
jmp 0x100276f9
jmp 0x10027692
push 4
push 0x1000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x114]
add ecx, dword [eax + 0xc]
push ecx
push 0x948
push 0xa54
call fcn.10020997
pop ecx
pop ecx
call eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x15c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x70]
call fcn.10020a3d
add esp, 0xc
mov dword [ebp - 0x2c], 0xa75c96dd
push 0
lea eax, [ebp - 0x2c]
push eax
call fcn.100253df
pop ecx
pop ecx
mov dword [ebp - 0x2c], 0xfffffff3
jmp 0x100277d4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x3c
jle 0x100278c5
mov dword [ebp - 0x164], 0x373a4c92
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x40], 0
jmp 0x10027802
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10027818
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1a0], 9
jmp 0x100277fb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a0], 0
je 0x10027886
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a0]
mov dword [ebp - 0x11c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x11c]
mov dword [ebp + eax - 0x1a0], ecx
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x11c], eax
jle 0x10027865
mov dword [ebp - 0x12c], 1
jmp 0x1002786c
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x12c], eax
je 0x10027886
mov dword [ebp - 0x134], 1
jmp 0x1002788d
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0xfffffffa
jne 0x100278a2
mov dword [ebp - 0x84], 1
jmp 0x100278a9
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x2c], 0
je 0x100278c0
jmp 0x100277cd
jmp 0x100277cd
lea eax, [ebp - 0x14]
push eax
push 0xf0b
push 0x48e8
lea eax, [ebp - 0x70]
push eax
push 0
call fcn.10024361
add esp, 0x14
jmp 0x10026d00
mov esp, ebp
pop ebp
ret