Function at 0x10026131
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007077d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x2dc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x1002734b
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x120], 0x1f32
mov dword [ebp - 0x1cc], 0x1000857c
cmp dword [ebp - 0x120], 0x20c0
jle 0x100261f6
and dword [ebp - 0x4c], 0
jmp 0x100261aa
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x43dd
jge 0x100261f6
and dword [ebp - 0x58], 0
jmp 0x100261c0
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x1eb
jge 0x100261f4
mov eax, dword [ebp - 0x4c]
or eax, dword [ebp - 0x58]
cdq
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], edx
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
mov ecx, 0x106177f8
call fcn.1000ef24
jmp 0x100261b9
jmp 0x100261a3
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x208], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x120], 0x1e80
jge 0x1002621f
mov edx, dword [ebp - 0x1cc]
mov ecx, 0x106177f8
call fcn.100115a3
jmp 0x1002623b
or dword [ebp - 4], 0xffffffff
jmp 0x10026245
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1e0], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
movzx eax, byte [eax]
test eax, eax
je 0x100264c0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
jmp 0x100262ea
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax], 2
jg 0x100264bb
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
mov esi, eax
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
mov eax, dword [eax]
cmp eax, dword [esi]
jl 0x10026324
mov dword [ebp - 0xac], 1
jmp 0x1002632b
and dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 0x82aa
jl 0x10026343
mov dword [ebp - 0x158], 1
jmp 0x1002634a
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x61fbc9fa
jle 0x10026362
mov dword [ebp - 0xa8], 1
jmp 0x10026369
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0x182b4746
jg 0x10026381
mov dword [ebp - 0x104], 1
jmp 0x10026388
and dword [ebp - 0x104], 0
mov esi, dword [ebp - 0x104]
add esi, 0xc207
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
cmp esi, dword [eax]
jne 0x100263b1
mov dword [ebp - 0xb4], 1
jmp 0x100263b8
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
cmp dword [ebp - 0xb4], eax
jl 0x100263d1
mov dword [ebp - 0x144], 1
jmp 0x100263d8
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
mov ecx, dword [ebp - 0x144]
add ecx, dword [eax]
je 0x100263f8
mov eax, dword [ebp - 0x134]
cmp dword [eax], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
cmp esi, dword [eax]
jg 0x1002642b
mov dword [ebp - 0x10c], 1
jmp 0x10026432
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x10c]
jne 0x10026455
mov dword [ebp - 0xc4], 1
jmp 0x1002645c
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
mov ecx, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x134]
cmp dword [eax], 0
jne 0x10026497
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
cmp dword [eax], 0
jne 0x10026497
and dword [ebp - 0xcc], 0
jmp 0x100264a1
mov dword [ebp - 0xcc], 1
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.1000f21a
mov ecx, dword [ebp - 0xcc]
mov dword [eax], ecx
jmp 0x100262df
jmp 0x10027349
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x70], 0
jmp 0x1002650b
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x10026521
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x9c], 0xffffffff
jmp 0x10026504
push 0
push 1
push 0x771d
push 0x4a72
call fcn.10018d4f
add esp, 0x10
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x10026691
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x9c]
cmp ecx, dword [ebp + eax - 0x9c]
jl 0x1002656c
or eax, 0xffffffff
jne 0x1002656c
and dword [ebp - 0x114], 0
jmp 0x10026576
mov dword [ebp - 0x114], 1
cmp dword [ebp - 0x114], 0x33a4d1b4
je 0x1002658e
mov dword [ebp - 0xd4], 1
jmp 0x10026595
and dword [ebp - 0xd4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9c]
cmp dword [ebp - 0xd4], eax
jg 0x100265b5
mov dword [ebp - 0x154], 1
jmp 0x100265bc
and dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 0
jl 0x100265d5
push 7
pop eax
test eax, eax
jne 0x100265d5
and dword [ebp - 0xdc], 0
jmp 0x100265df
mov dword [ebp - 0xdc], 1
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x28], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x28]
sub ecx, 6
cmp ecx, dword [ebp + eax - 0x9c]
jge 0x10026609
mov dword [ebp - 0x11c], 1
jmp 0x10026610
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 4
jne 0x10026620
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x1002662f
cmp dword [ebp - 0x18], 0
jne 0x1002662f
and dword [ebp - 0x1ec], 0
jmp 0x10026639
mov dword [ebp - 0x1ec], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9c]
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x18], 0
jge 0x1002665d
mov dword [ebp - 0xe4], 1
jmp 0x10026664
and dword [ebp - 0xe4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9c]
add eax, dword [ebp - 0xe4]
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x9c], eax
jge 0x10026691
mov dword [ebp - 0x13c], 1
jmp 0x10026698
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0
jne 0x100266b0
cmp dword [ebp - 0x18], 0
jne 0x100266b0
and dword [ebp - 0xec], 0
jmp 0x100266ba
mov dword [ebp - 0xec], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xec], eax
jne 0x10026a80
push 1
lea ecx, [ebp - 0x200]
call fcn.1000f17c
mov dword [ebp - 4], 2
mov dword [ebp - 0x168], 0xffffffff
mov dword [ebp - 0x164], 0xffffffff
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x38], 0xfe617092
push 0x3635
push 0x5889
push 0x3fd5
push 0xfc3
push 0
push 0
push 0x5afc
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x2b0]
push eax
push 0x67d0
push 0x273
call fcn.100174a7
add esp, 0x2c
or eax, 0xffffffff
je 0x10026775
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x168]
mov dword [ebp - 0x254], eax
mov eax, 0x66e6
test eax, eax
je 0x10026775
mov dword [ebp - 0x124], 1
jmp 0x1002677c
and dword [ebp - 0x124], 0
imul eax, dword [ebp - 0x124], 0xffffffff
test eax, eax
je 0x100267a3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c], 0
je 0x100267a3
mov dword [ebp - 0xf4], 1
jmp 0x100267aa
and dword [ebp - 0xf4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x168]
cmp eax, dword [ebp - 0xf4]
je 0x100267c7
mov dword [ebp - 0x80], 1
jmp 0x100267cb
and dword [ebp - 0x80], 0
push 0
lea ecx, [ebp - 0x200]
call fcn.1000f21a
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x80]
mov dword [ebp + eax - 0x168], ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x80]
jge 0x1002680b
mov dword [ebp - 0x14c], 1
jmp 0x10026812
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x14c], eax
jge 0x10026829
mov dword [ebp - 0xfc], 1
jmp 0x10026830
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0
jb 0x10026845
mov dword [ebp - 0x12c], 1
jmp 0x1002684c
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x12c], eax
jg 0x10026863
mov dword [ebp - 0xa4], 1
jmp 0x1002686a
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa4], eax
je 0x10026881
mov dword [ebp - 0xb0], 1
jmp 0x10026888
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
sub eax, 0x5c2caaab
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0xfffffffe
jmp 0x100268a6
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xe
jle 0x10026a6f
mov dword [ebp - 0x40], 0x1d979388
mov dword [ebp - 0x28], 0xfffffff5
jmp 0x100268c7
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff2
jle 0x10026a6a
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x18], 0
jmp 0x100268eb
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x10026a65
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x1d4], 1
xor eax, eax
jne 0x10026a04
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x168]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp + eax*4 - 0x168]
push 0
lea ecx, [ebp - 0x200]
call fcn.1000f21a
cmp dword [eax], esi
jg 0x10026948
mov dword [ebp - 0xb8], 1
jmp 0x1002694f
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c]
cmp dword [ebp - 0xb8], eax
jne 0x10026970
mov dword [ebp - 0x1ac], 1
jmp 0x10026977
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x1d4]
jne 0x10026991
mov dword [ebp - 0xc0], 1
jmp 0x10026998
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0xc0], 4
jge 0x100269ad
mov dword [ebp - 0xc8], 1
jmp 0x100269b4
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp + eax*4 - 0x168]
mov eax, dword [ebp - 0xc8]
neg eax
push 4
pop ecx
shl ecx, 1
mov edi, dword [ebp + ecx - 0x168]
sub edi, eax
imul edi, dword [ebp - 0x28]
imul edi, dword [ebp - 0xd0]
push 0
lea ecx, [ebp - 0x200]
call fcn.1000f21a
sub edi, dword [eax]
cmp edi, esi
jge 0x100269fb
cmp dword [ebp - 0x1b4], 0
jne 0x10026a04
and dword [ebp - 0xd8], 0
jmp 0x10026a0e
mov dword [ebp - 0xd8], 1
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], 0
jmp 0x10026a27
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x10026a60
mov dword [ebp - 0x204], 0x42ac96aa
push 0
push 0x3255
push 0x585c
push 1
push 0x6dc
push 0x6bd9
lea eax, [ebp - 0x204]
push eax
call fcn.1001c25d
add esp, 0x1c
jmp 0x10026a20
jmp 0x100268e4
jmp 0x100268c0
jmp 0x1002689f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.1000f1fe
jmp 0x10026a99
mov byte [ebp - 0x2f], 0
push 0x7702
lea eax, [ebp - 0x2f]
push eax
push 1
push 0
call fcn.10017e2d
add esp, 0x10
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x1c], 0
jmp 0x10026ac1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10026ad7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x25c], 0x7008b15e
jmp 0x10026aba
mov dword [ebp - 0x1c], 0
jmp 0x10026ae7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10026afd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e0], 0xb9c279a2
jmp 0x10026ae0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x10026b94
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x2c]
jle 0x10026b2d
mov dword [ebp - 0xe0], 1
jmp 0x10026b34
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xe0], eax
je 0x10026b51
cmp dword [ebp - 0x2c], 0
je 0x10026b51
mov dword [ebp - 0x1bc], 1
jmp 0x10026b58
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jg 0x10026b75
mov dword [ebp - 0xe8], 1
jmp 0x10026b7c
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0x78ac
jne 0x10026b94
mov dword [ebp - 0x88], 1
jmp 0x10026b9b
and dword [ebp - 0x88], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x88]
mov dword [ebp + eax - 0x25c], ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x6c]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2e0], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x24], eax
push 1
push 0
call fcn.100245fe
pop ecx
pop ecx
and dword [ebp - 0x78], 0
jmp 0x10026c0c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x24]
add eax, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x78], eax
jge 0x10027349
push 0x4437
push 0
call fcn.100133f2
pop ecx
pop ecx
mov eax, dword [ebp - 0x24]
cmp dword [eax + 0x10], 0
jne 0x1002719a
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x5c], 0
jmp 0x10026c50
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10026c66
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1e8], 0xb13638ec
jmp 0x10026c49
push 4
pop eax
shl eax, 0
push 0xfffffffffffffffa
pop ecx
sub ecx, dword [ebp + eax - 0x1e8]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x3c], 1
jmp 0x10026c89
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10026d20
push 2
lea ecx, [ebp - 0x234]
call fcn.1000f17c
mov dword [ebp - 4], 3
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x234]
push eax
push 0
push 0x3caa
push 0
push 0x3bf0
call fcn.1001b967
add esp, 0x18
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ebp + ecx*4 - 0x1e8]
cmp ecx, dword [ebp + eax - 0x1e8]
jg 0x10026cf0
mov dword [ebp - 0xf8], 1
jmp 0x10026cf7
and dword [ebp - 0xf8], 0
push 0
lea ecx, [ebp - 0x234]
call fcn.1000f21a
mov ecx, dword [ebp - 0xf8]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.1000f1fe
jmp 0x10026c82
push 1
lea eax, [ebp - 0x90]
push eax
push 0x7cef
push dword [ebp - 0x138]
push 0x6580
push 0
push 0x3cdd
push dword [ebp - 0x24]
push 0x7b0e
push 0x3f77
push dword [ebp - 0x174]
call fcn.1001f575
add esp, 0x2c
mov dword [ebp - 0x68], 0x99841b3c
mov dword [ebp - 0x184], 0x2d149fe
mov dword [ebp - 0x180], 0x2d149fe
mov dword [ebp - 0x17c], 0x2d149fe
mov dword [ebp - 0x178], 0x2d149fe
mov dword [ebp - 0x2ac], 0x585ed065
mov dword [ebp - 0x2b4], 0x83cc47d1
mov dword [ebp - 0x288], 0xfffffff6
mov dword [ebp - 0x130], 0x30688cdf
mov dword [ebp - 0x264], 0xe404
mov dword [ebp - 0x1a0], 0xfffffffc
mov dword [ebp - 0x1a8], 0xfffffff8
mov dword [ebp - 0x60], 0
jmp 0x10026de0
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10026df6
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x2ec], 8
jmp 0x10026dd9
mov dword [ebp - 0x68], 0
jmp 0x10026e06
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jne 0x10027189
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x2a8], 4
mov dword [ebp - 0x84], 0xfffffffd
mov dword [ebp - 0x50], 0
jmp 0x10026e45
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x10026e5b
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2c8], 0xc7e43439
jmp 0x10026e3e
mov dword [ebp - 0x44], 3
jmp 0x10026e6b
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10027184
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x290], 0xfffffffc
push 2
lea ecx, [ebp - 0x2a4]
call fcn.1000f17c
mov dword [ebp - 4], 4
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x188], 0xffffffff
push 1
push 0
push 0x2434
lea eax, [ebp - 0x2b8]
push eax
push 0xe94
push 0x46a9
push 0x563d
lea eax, [ebp - 0x2a4]
push eax
push 0x4756
push 0x745
call fcn.1001e3f7
add esp, 0x28
push 0x4cbd
push 0x6d30
push 0x6fd
push 0
push 0
push 0x4512
call fcn.10013132
add esp, 0x18
mov dword [ebp - 0x34], 3
jmp 0x10026f20
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10027170
mov dword [ebp - 0x278], 0xffffffff
mov dword [ebp - 0x298], 0xffffffff
mov dword [ebp - 0x21c], 6
mov dword [ebp - 0x218], 6
mov dword [ebp - 0x214], 6
mov dword [ebp - 0x210], 6
lea ecx, [ebp - 0x89]
call fcn.1000f229
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.1000f22c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x240]
call fcn.1000f1d8
mov byte [ebp - 4], 5
push 1
lea ecx, [ebp - 0x24c]
call fcn.1000f17c
mov byte [ebp - 4], 6
mov dword [ebp - 0x54], 0
jmp 0x10026fc0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10026fdc
push dword [ebp - 0x54]
lea ecx, [ebp - 0x24c]
call fcn.1000f21a
mov dword [eax], 0xdf27
jmp 0x10026fb9
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x184], 0
je 0x10027098
mov eax, 0x66969e96
sub eax, dword [ebp - 0x188]
cmp eax, 0x73722ab3
jg 0x1002700d
xor eax, eax
inc eax
jne 0x1002700d
and dword [ebp - 0x100], 0
jmp 0x10027017
mov dword [ebp - 0x100], 1
push 1
lea ecx, [ebp - 0x240]
call fcn.1000f21a
mov ecx, dword [ebp - 0x100]
imul ecx, dword [eax]
mov dword [ebp - 0x108], ecx
push 0
lea ecx, [ebp - 0x240]
call fcn.1000f21a
mov ecx, dword [ebp - 0x108]
mov dword [eax], ecx
cmp dword [ebp - 0x108], 0
jae 0x1002705d
mov dword [ebp - 0x110], 1
jmp 0x10027064
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x184]
imul eax, dword [ebp - 0x110]
imul esi, eax, 0xc544
push 0
lea ecx, [ebp - 0x24c]
call fcn.1000f21a
cmp esi, dword [eax]
jge 0x10027098
mov dword [ebp - 0x118], 1
jmp 0x1002709f
and dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x118], eax
jg 0x100270bd
mov dword [ebp - 0x7c], 1
jmp 0x100270c1
and dword [ebp - 0x7c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7c]
mov dword [ebp + eax - 0x2c8], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x184]
sub eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x184], ecx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0xa0]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x198]
jg 0x1002713a
mov dword [ebp - 0x128], 1
jmp 0x10027141
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x130], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x24c]
call fcn.1000f1fe
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x240]
call fcn.1000f1fe
jmp 0x10026f19
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
call fcn.1000f1fe
jmp 0x10026e64
jmp 0x10026dff
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
jmp 0x10026bfc
push 4
push 0x1000
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x138]
add ecx, dword [eax + 0xc]
push ecx
push 0x2373
push 0x1f49
call fcn.10042e7b
pop ecx
pop ecx
call eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1b0]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x90]
call fcn.10043348
add esp, 0xc
mov dword [ebp - 0x48], 0x3099cfe0
mov dword [ebp - 0x148], 1
push 1
lea ecx, [ebp - 0x228]
call fcn.1000f17c
mov dword [ebp - 4], 7
mov dword [ebp - 0x1c8], 0xffffffff
push 1
push 0
push 0x62f9
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x280]
push eax
call fcn.1001cc68
add esp, 0x14
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
jg 0x10027250
mov dword [ebp - 0x140], 1
jmp 0x10027257
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
sub eax, dword [ebp - 0x48]
add eax, 7
cmp eax, dword [ebp - 0x148]
jne 0x10027277
mov dword [ebp - 0x1b8], 1
jmp 0x1002727e
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x148]
jg 0x10027295
mov dword [ebp - 0x150], 1
jmp 0x1002729c
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x150]
je 0x100272b3
mov dword [ebp - 0x1c0], 1
jmp 0x100272ba
and dword [ebp - 0x1c0], 0
push 0
lea ecx, [ebp - 0x228]
call fcn.1000f21a
cmp dword [ebp - 0x1c8], 0
je 0x100272f4
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x100272f2
push 0
push 0x529a
push 0x202e
push 0
call fcn.10018b13
add esp, 0x10
jmp 0x1002730d
mov byte [ebp - 0x2d], 0
push 0
push 0xaef
push 0
lea eax, [ebp - 0x2d]
push eax
call fcn.1001c46a
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x228]
call fcn.1000f1fe
lea eax, [ebp - 0x90]
push eax
push 1
push 1
push 0
lea eax, [ebp - 0x24]
push eax
push 0x3e29
push 0x48d5
push 0x40ba
call fcn.10018311
add esp, 0x20
jmp 0x10026bfc
jmp 0x1002735f
push 0x64ba
push 0
push 0x681f
call fcn.10017e15
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret