Function at 0x1001da21
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006adec
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x234
and dword [ebp - 0xf8], 0
mov dword [ebp - 0x34], 0x1824a8c6
mov dword [ebp - 0x114], 0x9150faeb
mov dword [ebp - 0x164], 0xffffffff
mov dword [ebp - 0x34], 0xfffffffb
jmp 0x1001da71
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffffd
jl 0x1001dacc
mov dword [ebp - 0x50], 0x7b1891f7
mov dword [ebp - 0x54], 0
jmp 0x1001da8e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1001daa4
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1d0], 0xffffffff
jmp 0x1001da87
mov dword [ebp - 0x50], 0
jmp 0x1001dab4
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1001daca
mov byte [ebp - 0x1e], 0
lea eax, [ebp - 0x1e]
push eax
call fcn.1001d4e7
pop ecx
jmp 0x1001daad
jmp 0x1001da6a
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.1001d50b
add esp, 0xc
mov dword [ebp - 0x18], 0xa276
mov dword [ebp - 0xc4], 0x50f6b34c
mov dword [ebp - 0xc0], 0x45d764ce
mov dword [ebp - 0x10c], 0xcd95ff7
mov dword [ebp - 0xf4], 0xee72c34c
push 3
lea ecx, [ebp - 0x170]
call fcn.1000b98b
and dword [ebp - 4], 0
mov dword [ebp - 0x154], 0xf4c6f444
mov dword [ebp - 0x48], 0
jmp 0x1001db40
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1001db5c
push dword [ebp - 0x48]
lea ecx, [ebp - 0x170]
call fcn.1000ba29
mov dword [eax], 0x70cc
jmp 0x1001db39
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jg 0x1001db70
mov dword [ebp - 0x150], 1
jmp 0x1001db77
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d4], eax
imul eax, dword [ebp - 0x18], 0xae9a
test eax, eax
jne 0x1001db9a
cmp dword [ebp - 0x18], 0
jne 0x1001db9a
and dword [ebp - 0x100], 0
jmp 0x1001dba4
mov dword [ebp - 0x100], 1
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jne 0x1001dbcb
mov eax, 0xbed162c5
test eax, eax
jne 0x1001dbcb
and dword [ebp - 0x108], 0
jmp 0x1001dbd5
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0xc0]
je 0x1001dc01
cmp dword [ebp - 0xc0], 0
je 0x1001dc01
mov dword [ebp - 0x110], 1
jmp 0x1001dc08
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x110]
jg 0x1001dc1f
mov dword [ebp - 0xcc], 1
jmp 0x1001dc26
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x10c], eax
jl 0x1001dc49
mov dword [ebp - 0xd4], 1
jmp 0x1001dc50
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xf4]
jne 0x1001dc70
mov dword [ebp - 0xdc], 1
jmp 0x1001dc77
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0xdc]
je 0x1001dc8e
mov dword [ebp - 0x104], 1
jmp 0x1001dc95
and dword [ebp - 0x104], 0
push 1
lea ecx, [ebp - 0x170]
call fcn.1000ba29
mov ecx, dword [ebp - 0x104]
cmp ecx, dword [eax]
jl 0x1001dcb8
mov dword [ebp - 0xe4], 1
jmp 0x1001dcbf
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x154], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.1000ba0d
mov byte [ebp - 0x9c], 0x11
mov byte [ebp - 0x9b], 0x19
mov byte [ebp - 0x9a], 0x17
mov byte [ebp - 0x99], 0xa
mov byte [ebp - 0x98], 3
mov byte [ebp - 0x97], 0x1c
mov byte [ebp - 0x96], 2
mov byte [ebp - 0x95], 7
mov byte [ebp - 0x94], 0x18
mov byte [ebp - 0x93], 0x1a
mov byte [ebp - 0x92], 5
mov byte [ebp - 0x91], 0x1f
mov byte [ebp - 0x90], 7
mov byte [ebp - 0x8f], 0xe
mov byte [ebp - 0x8e], 0x15
mov byte [ebp - 0x8d], 0x1e
mov byte [ebp - 0x8c], 0x12
mov byte [ebp - 0x8b], 5
mov byte [ebp - 0x8a], 9
mov byte [ebp - 0x89], 0x19
mov byte [ebp - 0x88], 0xd
mov byte [ebp - 0x87], 4
mov byte [ebp - 0x86], 0xa
mov byte [ebp - 0x85], 5
mov byte [ebp - 0x84], 1
mov byte [ebp - 0x83], 9
mov byte [ebp - 0x82], 8
mov byte [ebp - 0x81], 0xb
mov byte [ebp - 0x80], 0x19
mov byte [ebp - 0x7f], 0x13
mov byte [ebp - 0x7e], 0x13
mov byte [ebp - 0x7d], 0xe
mov byte [ebp - 0x7c], 0x14
mov byte [ebp - 0x7b], 1
mov byte [ebp - 0x7a], 0xc
mov byte [ebp - 0x79], 0x18
mov byte [ebp - 0x78], 0x13
mov byte [ebp - 0x77], 0xc6
mov byte [ebp - 0x76], 0x2e
mov byte [ebp - 0x75], 0x2c
mov byte [ebp - 0x74], 0xe9
mov byte [ebp - 0x73], 0xc0
mov byte [ebp - 0x72], 0x1c
mov byte [ebp - 0x71], 0x77
mov byte [ebp - 0x70], 0x36
mov byte [ebp - 0x6f], 0x83
mov byte [ebp - 0x6e], 0xc6
mov byte [ebp - 0x6d], 0x66
mov byte [ebp - 0x6c], 0xd1
mov byte [ebp - 0x6b], 0x61
mov byte [ebp - 0x6a], 0x6b
mov byte [ebp - 0x69], 0x54
mov byte [ebp - 0x68], 0xa5
mov byte [ebp - 0x67], 0x65
mov byte [ebp - 0x66], 0x4f
mov byte [ebp - 0x65], 0x85
mov byte [ebp - 0x64], 0xe
mov byte [ebp - 0x63], 2
mov byte [ebp - 0x62], 4
mov byte [ebp - 0x61], 0xa
mov byte [ebp - 0x60], 0xf
mov byte [ebp - 0x5f], 0x15
mov byte [ebp - 0x5e], 6
mov byte [ebp - 0x5d], 0x17
mov byte [ebp - 0x5c], 0xb
mov byte [ebp - 0x5b], 0xb
mov byte [ebp - 0x5a], 0
mov byte [ebp - 0x59], 0xd
mov byte [ebp - 0x58], 0x10
mov byte [ebp - 0x57], 0x10
mov byte [ebp - 0x56], 0x16
mov byte [ebp - 0x55], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x9c]
or eax, 0x6b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x9c]
and ecx, 0x6b
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x9c]
mov byte [ebp + ecx - 0x1a4], al
mov dword [ebp - 0x10], 2
and dword [ebp - 0x30], 0
jmp 0x1001de9c
mov eax, dword [ebp - 0x10]
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x48
jae 0x1001e266
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x9c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x10], eax
jne 0x1001e1de
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x9c]
inc eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x1c8], 0x60f57a7c
mov dword [ebp - 0x1c0], 0x70ade216
mov dword [ebp - 0x1bc], 0x70ade216
mov dword [ebp - 0x1b8], 0x70ade216
mov dword [ebp - 0x1b4], 0x70ade216
mov dword [ebp - 0xfc], 0x49f6d4a0
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x134], 0x24cd
cmp dword [ebp - 0x134], 0xef2
jge 0x1001e1bf
mov dword [ebp - 0x1a8], 4
and dword [ebp - 0x38], 0
jmp 0x1001df54
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1001df7f
mov eax, dword [ebp - 0x38]
lea eax, [ebp + eax*4 - 0xbc]
push eax
mov eax, dword [ebp - 0x38]
lea eax, [ebp + eax*4 - 0xac]
push eax
push 0x10007ae8
call fcn.1005162b
add esp, 0xc
jmp 0x1001df4d
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xbc]
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0xac]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xbc]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xac]
call fcn.1001d9f9
add esp, 0x10
movzx eax, al
test eax, eax
je 0x1001e007
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0xbc]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xac]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xbc]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xac]
call fcn.1001d9f9
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x1001e08b
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xbc]
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0xac]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xbc]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xac]
call fcn.1001d9f9
add esp, 0x10
movzx eax, al
test eax, eax
je 0x1001e09b
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0xbc]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xac]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xbc]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xac]
call fcn.1001d9f9
add esp, 0x10
movzx eax, al
test eax, eax
je 0x1001e09b
push 0x10007af0
call fcn.10051a06
pop ecx
jmp 0x1001e1bf
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xbc]
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0xac]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xbc]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xac]
call section..wqdmxp
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x1001e123
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0xbc]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xac]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xbc]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xac]
call section..wqdmxp
add esp, 0x10
movzx eax, al
test eax, eax
je 0x1001e1b4
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xbc]
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0xac]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xbc]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xac]
call section..wqdmxp
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x1001e1a7
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0xbc]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xac]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xbc]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xac]
call section..wqdmxp
add esp, 0x10
movzx eax, al
test eax, eax
je 0x1001e1b4
push 0x10007af8
call fcn.10051a06
pop ecx
jmp 0x1001e1bf
push 0x10007b00
call fcn.10051a06
pop ecx
call fcn.1001d63a
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x9c]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x10], eax
jmp 0x1001de94
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x9b]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x9e]
movsx ecx, byte [ebp + ecx - 0x1a4]
add eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x9b]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x30]
movzx edx, byte [ebp + edx - 0x9e]
movsx edx, byte [ebp + edx - 0x1a4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x9b]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x30]
movzx edx, byte [ebp + edx - 0x9e]
movsx edx, byte [ebp + edx - 0x1a4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x9c]
mov byte [ebp + ecx - 0x1a4], al
and dword [ebp - 0x30], 0
jmp 0x1001de94
push 2
lea ecx, [ebp - 0x144]
call fcn.1000b98b
mov dword [ebp - 4], 1
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x24], 0xc71bc7dc
mov dword [ebp - 0x1dc], 0xe3e76316
mov dword [ebp - 0x4c], 0
jmp 0x1001e2a2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1001e2be
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x144]
call fcn.1000ba29
mov dword [eax], 1
jmp 0x1001e29b
mov dword [ebp - 0x1c], 1
jmp 0x1001e2ce
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1001e399
mov dword [ebp - 0x2c], 0x3111738a
mov dword [ebp - 0x1ac], 1
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1001e2fa
call fcn.1001d665
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x2c], 0
jmp 0x1001e311
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x1001e394
mov dword [ebp - 0x3c], 0
jmp 0x1001e327
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1001e33d
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x204], 0x443eb606
jmp 0x1001e320
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x204], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x144]
call fcn.1000ba29
mov dword [ebp - 0xec], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x144]
call fcn.1000ba29
mov ecx, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
jmp 0x1001e30a
jmp 0x1001e2c7
mov dword [ebp - 0x24], 1
jmp 0x1001e3a9
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1001e3e3
mov dword [ebp - 0x1c], 0
jmp 0x1001e3bf
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1001e3e1
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.1001d684
pop ecx
pop ecx
cmp dword [ebp - 0x24], 0
je 0x1001e3df
jmp 0x1001e3b8
jmp 0x1001e3b8
jmp 0x1001e3a2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.1000ba0d
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x1a4], 0
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x228]
call fcn.10022d69
mov dword [ebp - 4], 2
push 3
lea ecx, [ebp - 0x17c]
call fcn.1000b98b
mov byte [ebp - 4], 3
mov dword [ebp - 0x158], 0xd3672969
mov dword [ebp - 0x138], 0xf7919adb
push 1
lea ecx, [ebp - 0x188]
call fcn.1000b98b
mov byte [ebp - 4], 4
mov dword [ebp - 0x15c], 0xb16e
mov dword [ebp - 0x130], 0x38d679bd
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0x128], 2
mov dword [ebp - 0x14c], 0xa7fad540
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.1001d6bb
pop ecx
pop ecx
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.1001d700
pop ecx
pop ecx
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x1001e4bc
call fcn.1001d748
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.1001d766
add esp, 0x24
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x188]
call fcn.1000ba0d
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c]
call fcn.1000ba0d
and dword [ebp - 0x40], 0
jmp 0x1001e52e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x1b
jae 0x1001e541
mov eax, dword [ebp - 0x40]
mov byte [ebp + eax - 0x1a4], 0
jmp 0x1001e527
mov dword [ebp - 0x14], 6
mov dword [ebp - 0xd0], 0xfffffff9
mov dword [ebp - 0x44], 0
jmp 0x1001e562
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1001e578
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x210], 1
jmp 0x1001e55b
mov eax, 0xd058a835
test eax, eax
je 0x1001e617
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0x14], 0xffff
jbe 0x1001e5a3
mov dword [ebp - 0xc8], 1
jmp 0x1001e5aa
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0x14]
cmp eax, 0xb15e
jle 0x1001e5cf
mov eax, 0xfff6
test eax, eax
je 0x1001e5cf
mov dword [ebp - 0x148], 1
jmp 0x1001e5d6
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd0], eax
jg 0x1001e5f6
mov dword [ebp - 0xd8], 1
jmp 0x1001e5fd
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x1001e617
mov dword [ebp - 0xe0], 1
jmp 0x1001e61e
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x1001e638
mov dword [ebp - 0xe8], 1
jmp 0x1001e63f
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xe8]
jg 0x1001e656
mov dword [ebp - 0x118], 1
jmp 0x1001e65d
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1b0], eax
xor eax, eax
cmp eax, 0xffffffff
ja 0x1001e682
mov dword [ebp - 0xf0], 1
jmp 0x1001e689
and dword [ebp - 0xf0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf0]
mov dword [ebp + eax - 0x210], ecx
lea eax, [ebp - 0x14]
push eax
call fcn.1001d9ae
pop ecx
push 0x1000775d
lea ecx, [ebp - 0x1f4]
call fcn.10022d69
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1f4]
call fcn.1000be59
cmp eax, dword [ebp + 0xc]
je 0x1001e741
lea eax, [ebp - 0x228]
push eax
push 0x382
push 0
push 0x6372
lea eax, [ebp - 0x11c]
push eax
call fcn.1001eca5
add esp, 0x14
push 1
push dword [ebp - 0x11c]
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x228]
call fcn.10022dee
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x12c], eax
mov byte [ebp - 4], 6
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x1f4]
call fcn.10022d98
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.100147ee
jmp 0x1001e6ba
lea eax, [ebp - 0x1f4]
push eax
mov ecx, dword [ebp + 8]
call fcn.10014795
mov eax, dword [ebp - 0xf8]
or eax, 1
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1f4]
call fcn.100147ee
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x228]
call fcn.100147ee
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret