Function at 0x10030049
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x19c
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x11c], 0x1bb000e2
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x44], 0
jmp 0x10030087
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1003009d
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x134], 5
jmp 0x10030080
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x38], 0
je 0x100300d1
mov byte [ebp - 0x18], 0
push 0x64a4
push 1
lea eax, [ebp - 0x18]
push eax
call fcn.1002e463
add esp, 0xc
jmp 0x10030263
mov dword [ebp - 0x58], 0
jmp 0x100300e1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x100300f4
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x20], 0x87110e6b
jmp 0x100300da
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1003022a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0xf0], eax
imul eax, dword [ebp - 0xf0], 0xfffffff8
cmp eax, 0x7bc9
jle 0x10030126
mov dword [ebp - 0x60], 1
jmp 0x1003012a
and dword [ebp - 0x60], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x60]
mov dword [ebp + eax - 0x134], ecx
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x60], eax
jle 0x1003014e
mov dword [ebp - 0x114], 1
jmp 0x10030155
and dword [ebp - 0x114], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
add eax, dword [ebp - 0x114]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x20]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x20]
jge 0x10030187
mov dword [ebp - 0xf4], 1
jmp 0x1003018e
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x20]
jg 0x100301b7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
je 0x100301b7
mov dword [ebp - 0x80], 1
jmp 0x100301bb
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jne 0x100301d4
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x100301e7
push 6
pop eax
test eax, eax
je 0x100301e7
mov dword [ebp - 0x88], 1
jmp 0x100301ee
and dword [ebp - 0x88], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x88], eax
jge 0x1003020c
mov dword [ebp - 0xfc], 1
jmp 0x10030213
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0xfc]
jg 0x1003022a
mov dword [ebp - 0x90], 1
jmp 0x10030231
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0x13], 0
lea eax, [ebp - 0x13]
push eax
push 0x33b6
push 0xbf4
push 1
push 0x40b0
push 0x6949
call fcn.1002e4e1
add esp, 0x18
push 1
call fcn.1002eb63
pop ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
inc eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc], eax
mov dword [ebp - 0x3c], 0xfffffff6
mov dword [ebp - 0x118], 0xf8d98c68
mov dword [ebp - 0xac], 0x4e133846
mov dword [ebp - 0x50], 0
jmp 0x100302b7
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x100302ca
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x70], 0xfffffffa
jmp 0x100302b0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x70], 0
jmp 0x100302ec
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x70]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x70], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x70], 0xfffffff5
jg 0x100308bd
mov dword [ebp - 0x10], 0xa624cdb8
mov dword [ebp - 0xe8], 0xb91ee4cf
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x140], 0x81f9d3f5
mov dword [ebp - 4], 0
jmp 0x10030331
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x10030347
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x150], 0x88dd0bb2
jmp 0x1003032a
mov dword [ebp - 4], 0
jmp 0x10030357
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x1003036d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x8c], 6
jmp 0x10030350
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp - 0x10], eax
jge 0x100306b0
mov dword [ebp - 0x158], 1
mov dword [ebp - 0x5c], 0
jmp 0x1003039a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x100303b0
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x168], 0xfffffff8
jmp 0x10030393
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x168], 0
jne 0x100303d6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x70], 0
jne 0x100303d6
and dword [ebp - 0xd4], 0
jmp 0x100303e0
mov dword [ebp - 0xd4], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xd4]
dec ecx
cmp dword [ebp + eax - 0x70], ecx
jne 0x100303ff
mov dword [ebp - 0x98], 1
jmp 0x10030406
and dword [ebp - 0x98], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x168]
imul ecx, dword [ebp - 0x98]
push 4
pop edx
shl edx, 0
imul ecx, dword [ebp + edx - 0x70]
cmp dword [ebp + eax - 0x70], ecx
jle 0x1003043c
mov dword [ebp - 0xd8], 1
jmp 0x10030443
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xd8]
cmp eax, 0x58e1
jle 0x1003045f
mov dword [ebp - 0xa0], 1
jmp 0x10030466
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xa0], eax
jne 0x10030480
cmp dword [ebp - 0x10], 0
jne 0x10030480
and dword [ebp - 0xe0], 0
jmp 0x1003048a
mov dword [ebp - 0xe0], 1
cmp dword [ebp - 0xe0], 0xe07ea4c5
jb 0x100304a2
mov dword [ebp - 0x144], 1
jmp 0x100304a9
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x188], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
cmp dword [ebp - 0x3c], eax
jne 0x100304d3
mov dword [ebp - 0xa8], 1
jmp 0x100304da
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
add eax, 0xfff8
je 0x10030672
mov dword [ebp - 0xc8], 0x5bf8
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1003051b
push 0x162a
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8]
cmp dword [ebp + eax - 0x168], ecx
jl 0x1003053c
mov dword [ebp - 0xb0], 1
jmp 0x10030543
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0xed76
jl 0x10030558
mov dword [ebp - 0x74], 1
jmp 0x1003055c
and dword [ebp - 0x74], 0
cmp dword [ebp - 0x74], 1
jne 0x1003056e
mov dword [ebp - 0xb8], 1
jmp 0x10030575
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xb8]
jle 0x1003058c
mov dword [ebp - 0xf8], 1
jmp 0x10030593
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0xf8]
jne 0x100305ad
mov dword [ebp - 0xc0], 1
jmp 0x100305b4
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0x10]
jne 0x100305d5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x70], 0
jne 0x100305d5
and dword [ebp - 0x100], 0
jmp 0x100305df
mov dword [ebp - 0x100], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x168]
cmp dword [ebp - 0x100], eax
jg 0x100305f9
or eax, 0xffffffff
jne 0x1003060b
mov eax, 0x20a048c8
test eax, eax
jne 0x1003060b
and dword [ebp - 0x108], 0
jmp 0x10030615
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x108], eax
jne 0x1003062f
mov dword [ebp - 0xd0], 1
jmp 0x10030636
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xd0], eax
jge 0x10030656
mov eax, 0xf6b4
test eax, eax
je 0x10030656
mov dword [ebp - 0x110], 1
jmp 0x1003065d
and dword [ebp - 0x110], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x110]
mov dword [ebp + eax - 0x150], ecx
jmp 0x1003069d
mov dword [ebp - 0x3c], 0x1a
jmp 0x10030682
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x22
jl 0x1003069d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x168]
mov dword [ebp - 0x158], eax
jmp 0x1003067b
cmp dword [ebp - 0x138], 0
je 0x100306ab
jmp 0x100302d9
jmp 0x100308b8
mov dword [ebp - 0x24], 0xfffffffd
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jne 0x1003081b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x70], 0
je 0x100306e5
mov dword [ebp - 0xdc], 1
jmp 0x100306ec
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0xdc], eax
jl 0x10030706
mov dword [ebp - 0x104], 1
jmp 0x1003070d
and dword [ebp - 0x104], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x70]
add eax, dword [ebp - 0x104]
jne 0x1003072d
cmp dword [ebp - 0x24], 0
jne 0x1003072d
and dword [ebp - 0x154], 0
jmp 0x10030737
mov dword [ebp - 0x154], 1
mov eax, 0x66a4
cmp eax, 5
jg 0x1003074d
mov dword [ebp - 0xe4], 1
jmp 0x10030754
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe4]
cmp eax, 0x5b17
jne 0x10030770
mov dword [ebp - 0x128], 1
jmp 0x10030777
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 0x66c3c348
jg 0x1003078f
mov dword [ebp - 0xec], 1
jmp 0x10030796
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xec]
je 0x100307ad
mov dword [ebp - 0x10c], 1
jmp 0x100307b4
and dword [ebp - 0x10c], 0
imul eax, dword [ebp - 0x10c], 0x8855
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x70]
jle 0x100307d2
mov dword [ebp - 0x78], 1
jmp 0x100307d6
and dword [ebp - 0x78], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
add eax, dword [ebp - 0x78]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x8c]
jle 0x100307fb
mov dword [ebp - 0x7c], 1
jmp 0x100307ff
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x7c]
inc eax
je 0x1003081b
mov eax, 0xd2618108
test eax, eax
jne 0x1003081b
and dword [ebp - 0x84], 0
jmp 0x10030825
mov dword [ebp - 0x84], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x150]
imul eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x24]
jg 0x1003084a
mov dword [ebp - 0x94], 1
jmp 0x10030851
and dword [ebp - 0x94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp dword [ebp - 0x94], eax
jge 0x10030872
mov dword [ebp - 0x9c], 1
jmp 0x10030879
and dword [ebp - 0x9c], 0
cmp dword [ebp - 0x9c], 0
jne 0x1003088e
mov dword [ebp - 0xa4], 1
jmp 0x10030895
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
imul eax, dword [ebp - 0xac], 0
sub eax, dword [ebp - 0x24]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x150], eax
jmp 0x100302d9
mov byte [ebp - 0x17], 0
movzx eax, byte [ebp - 0x17]
test eax, eax
je 0x100308e2
push 0x4e54
push 1
push 0x5a4b
push 0x1314
call fcn.1002ebad
add esp, 0x10
mov eax, dword [ebp + 0x10]
cmp dword [eax], 0
je 0x10030cad
mov dword [ebp - 0x30], 0xac204e2
mov dword [ebp - 0x30], 0
jmp 0x10030905
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1d
je 0x10030b68
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x48], 0
jmp 0x10030926
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10030939
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x28], 0xfffffffb
jmp 0x1003091f
mov dword [ebp - 0x2c], 0
jmp 0x10030949
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10030b63
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x34], 0
jmp 0x1003096a
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10030b5e
mov dword [ebp - 8], 0
jmp 0x10030984
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x1003099a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x178], 0x41b66baf
jmp 0x1003097d
mov dword [ebp - 8], 0
jmp 0x100309aa
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x100309c0
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x124], 0xef3cf687
jmp 0x100309a3
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x178], 0
jmp 0x100309ee
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x178]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x178], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x178], 0
jg 0x10030b04
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x28], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x30], eax
jl 0x10030a1e
mov dword [ebp - 0xb4], 1
jmp 0x10030a25
and dword [ebp - 0xb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0xb4]
jg 0x10030a43
mov dword [ebp - 0xbc], 1
jmp 0x10030a4a
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0xb0a6
jl 0x10030a6c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x10030a6c
and dword [ebp - 0x148], 0
jmp 0x10030a76
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0x2c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x28]
cmp dword [ebp + eax*4 - 0x28], ecx
jg 0x10030aa4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x178], 0
je 0x10030aa4
mov dword [ebp - 0xc4], 1
jmp 0x10030aab
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x30]
jg 0x10030ac5
mov dword [ebp - 0xcc], 1
jmp 0x10030acc
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0x948b
jne 0x10030aeb
mov byte [ebp - 0x19], 0
push 1
lea eax, [ebp - 0x19]
push eax
call fcn.1002ec0f
pop ecx
pop ecx
jmp 0x10030aff
mov byte [ebp - 0x1a], 0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x10030aff
push 1
call fcn.1002ec5d
pop ecx
jmp 0x100309d3
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x124], 0
jmp 0x10030b32
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x124], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x124], 1
jge 0x10030b59
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp + eax*4 - 0x28], 0x5596
jmp 0x10030b17
jmp 0x10030963
jmp 0x10030942
jmp 0x100308fe
mov byte [ebp - 0x14], 0
push 1
lea eax, [ebp - 0x14]
push eax
push 0x5658
call fcn.1002ecbf
add esp, 0xc
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
add ecx, dword [eax]
mov eax, dword [ebp + 0x18]
mov dword [eax], ecx
mov dword [ebp - 0xc], 0
jmp 0x10030b9c
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x10030bb2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x130], 1
jmp 0x10030b95
mov dword [ebp - 0xc], 0
jmp 0x10030bc2
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x10030bd5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x54], 0x3c633843
jmp 0x10030bbb
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x130], 0xfffffff4
jmp 0x10030c03
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x130], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x130], 0xfffffff1
jge 0x10030c55
mov dword [ebp - 0x4c], 0xfffffff9
mov dword [ebp - 0x4c], 0xffffffe5
jmp 0x10030c2a
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffe2
jle 0x10030c53
mov byte [ebp - 0x11], 0
push 0x4f91
push 1
push 0x67c8
push 0x3a7c
lea eax, [ebp - 0x11]
push eax
call fcn.1002ed25
add esp, 0x14
jmp 0x10030c23
jmp 0x10030be8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54], 0
jmp 0x10030c7a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0xffffffec
jg 0x10030c9a
mov byte [ebp - 0x16], 0
push 1
lea eax, [ebp - 0x16]
push eax
call fcn.1002fe6d
pop ecx
pop ecx
jmp 0x10030c65
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
add ecx, dword [eax + 0x10]
mov eax, dword [ebp + 0x1c]
mov dword [eax], ecx
jmp 0x10030d68
mov dword [ebp - 0x17c], 0xfffffffe
mov dword [ebp - 0x19c], 5
mov dword [ebp - 0x198], 5
mov dword [ebp - 0x194], 5
mov dword [ebp - 0x190], 5
mov dword [ebp - 0x18c], 0xca9869ec
mov dword [ebp - 0x40], 0xec01e6e2
push 1
lea eax, [ebp - 0x40]
push eax
call fcn.1002feb6
pop ecx
pop ecx
mov dword [ebp - 0x40], 0
jmp 0x10030d0d
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x10030d3f
mov byte [ebp - 0x12], 0
movzx eax, byte [ebp - 0x12]
test eax, eax
je 0x10030d3d
push 0x3240
push 1
push 0x6a89
push 0x4c67
push 0x23da
call fcn.1002feef
add esp, 0x14
jmp 0x10030d06
lea eax, [ebp + 0x14]
push eax
push 0x24fb
push 0
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.100316b7
add esp, 0x14
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
add ecx, dword [eax + 0x10]
mov eax, dword [ebp + 0x1c]
mov dword [eax], ecx
mov esp, ebp
pop ebp
ret