Function at 0x1002cc14
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100853cb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24c
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1002da3d
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc0], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x14], 0x42c70bb7
mov dword [ebp - 0x224], 0x5e00fe1c
mov dword [ebp - 0x4c], 0x4185a1fa
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x148], 0x1860ec01
mov dword [ebp - 0x20], 0xde9a
mov dword [ebp - 0x2c], 0
jmp 0x1002cc9b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1002ccb1
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x178], 8
jmp 0x1002cc94
mov dword [ebp - 0x2c], 0
jmp 0x1002ccc1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002ccd4
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x38], 0xbd3aeb59
jmp 0x1002ccba
mov dword [ebp - 0x14], 2
jmp 0x1002cce4
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002cece
push 4
lea ecx, [ebp - 0x1d4]
call fcn.10018e04
and dword [ebp - 4], 0
mov dword [ebp - 0x40], 1
push 0
push 0x16b9
push 0x19e0
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.1002f03c
add esp, 0x14
lea eax, [ebp - 0x20]
push eax
push 1
call fcn.1002b742
pop ecx
pop ecx
mov dword [ebp - 0x20], 0
jmp 0x1002cd45
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x1002ceba
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x178], 0
je 0x1002cd61
jmp 0x1002ceba
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x178]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
je 0x1002cd8e
mov dword [ebp - 0xa4], 1
jmp 0x1002cd95
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x178]
add eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x6c]
jge 0x1002cdb6
mov dword [ebp - 0x108], 1
jmp 0x1002cdbd
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x178]
cmp eax, dword [ebp - 0x108]
jg 0x1002cdd8
mov dword [ebp - 0x74], 1
jmp 0x1002cddc
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x178]
cmp dword [ebp - 0x74], eax
je 0x1002cdf7
mov dword [ebp - 0x110], 1
jmp 0x1002cdfe
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0
jl 0x1002ce4c
mov dword [ebp - 0x7c], 0x4abf0a64
push 2
lea ecx, [ebp - 0x1d4]
call fcn.10018ea2
or dword [eax], 0xffffffff
mov eax, dword [ebp - 0x7c]
dec eax
cmp dword [ebp - 0x7c], eax
jne 0x1002ce33
mov dword [ebp - 0x118], 1
jmp 0x1002ce3a
and dword [ebp - 0x118], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x38], ecx
jmp 0x1002ceb5
mov dword [ebp - 0x4c], 0
jmp 0x1002ce5c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1002ceb5
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1002ce87
push 0x2789
push 0x756f
push 1
push 0x566d
call fcn.1002b77b
add esp, 0x10
mov dword [ebp - 0x40], 0
jmp 0x1002ce97
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x1002ceb3
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1002ceb1
push 1
call fcn.1002c6e7
pop ecx
jmp 0x1002ce90
jmp 0x1002ce55
jmp 0x1002cd3e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.10018e86
jmp 0x1002ccdd
mov dword [ebp - 0x14], 0
jmp 0x1002cede
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002cfbb
mov dword [ebp - 0x168], 0x64f8
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x38]
cmp dword [ebp + eax*4 - 0x38], ecx
jge 0x1002cf0e
mov dword [ebp - 0x8c], 1
jmp 0x1002cf15
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x148]
cmp dword [ebp + eax*4 - 0x38], ecx
jle 0x1002cf30
mov dword [ebp - 0x84], 1
jmp 0x1002cf37
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x84]
jg 0x1002cf51
mov dword [ebp - 0x120], 1
jmp 0x1002cf58
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x120], 1
jg 0x1002cf65
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x38]
cmp dword [ebp - 0x8c], eax
jge 0x1002cf80
mov dword [ebp - 0x128], 1
jmp 0x1002cf87
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x38]
cmp dword [ebp - 0x128], eax
jg 0x1002cfa2
mov dword [ebp - 0x94], 1
jmp 0x1002cfa9
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x38], ecx
jmp 0x1002ced7
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax + 4]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x1f4], 1
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x30], 0xf5aa05d7
mov dword [ebp - 0x160], 9
mov dword [ebp - 0xa8], 0x626a9d9e
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x50], 0
jmp 0x1002d010
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1002d026
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x258], 0xf67d50f8
jmp 0x1002d009
cmp dword [ebp - 0x30], 0
jl 0x1002d038
mov dword [ebp - 0x130], 1
jmp 0x1002d03f
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x130], eax
jge 0x1002d056
mov dword [ebp - 0x9c], 1
jmp 0x1002d05d
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x54], eax
jg 0x1002d07e
mov dword [ebp - 0x138], 1
jmp 0x1002d085
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x54], 7
jg 0x1002d0a3
mov dword [ebp - 0xf4], 1
jmp 0x1002d0aa
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xa8], eax
jle 0x1002d0cd
mov dword [ebp - 0xf0], 1
jmp 0x1002d0d4
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
inc eax
cmp eax, dword [ebp - 0x30]
je 0x1002d0ec
mov dword [ebp - 0xb0], 1
jmp 0x1002d0f3
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0
jl 0x1002d108
mov dword [ebp - 0x134], 1
jmp 0x1002d10f
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x134], eax
je 0x1002d126
mov dword [ebp - 0xb8], 1
jmp 0x1002d12d
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xea5d840d
jb 0x1002d145
mov dword [ebp - 0xfc], 1
jmp 0x1002d14c
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
push 8
pop ecx
imul ecx, ecx, 5
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x28], 0xc869b7d6
mov dword [ebp - 0x1c8], 0x3e267a5e
mov dword [ebp - 0x1c4], 0x3e267a5e
mov dword [ebp - 0x1c0], 0x3e267a5e
mov dword [ebp - 0x1bc], 0x3e267a5e
lea ecx, [ebp - 0x5a]
call fcn.100092d3
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x23c]
call fcn.10018eb1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x204]
call fcn.10018e60
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x1002d1f2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002d205
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x18], 0xfffc
jmp 0x1002d1eb
mov dword [ebp - 0x24], 0
jmp 0x1002d215
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002d22b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x248], 0xd053a657
jmp 0x1002d20e
mov dword [ebp - 0x10], 0
jmp 0x1002d23b
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002d696
push 3
lea ecx, [ebp - 0x144]
call fcn.10018e04
mov byte [ebp - 4], 2
mov dword [ebp - 0x184], 0x1dd6b9ec
push 0x75a1
push 0x16b9
push 0x34e3
push 0x4075
lea eax, [ebp - 0x144]
push eax
push 0x6641
push 0x41f
push 0x19b0
lea eax, [ebp - 0x1e8]
push eax
push 1
call fcn.1002c70d
add esp, 0x28
mov eax, 0x7c4d
test eax, eax
je 0x1002d3f4
push 4
pop eax
imul eax, eax, 0
mov ecx, 0xf2d
sub ecx, dword [ebp + eax - 0x18]
jne 0x1002d2c8
cmp dword [ebp - 0x28], 0
jne 0x1002d2c8
and dword [ebp - 0x11c], 0
jmp 0x1002d2d2
mov dword [ebp - 0x11c], 1
cmp dword [ebp - 0x11c], 0xfff7
jae 0x1002d2f1
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x18], 0
jne 0x1002d2f1
and dword [ebp - 0xc8], 0
jmp 0x1002d2fb
mov dword [ebp - 0xc8], 1
cmp dword [ebp - 0xc8], 0xfffe
jne 0x1002d313
mov dword [ebp - 0x104], 1
jmp 0x1002d31a
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
cmp eax, dword [ebp - 0x104]
jle 0x1002d332
mov dword [ebp - 0x60], 1
jmp 0x1002d336
and dword [ebp - 0x60], 0
push 0
lea ecx, [ebp - 0x144]
call fcn.10018ea2
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
cmp dword [ebp - 0x60], 0
jne 0x1002d361
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x18], 0
jne 0x1002d361
and dword [ebp - 0xd0], 0
jmp 0x1002d36b
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
cmp eax, dword [ebp - 0x28]
jle 0x1002d38c
mov dword [ebp - 0x12c], 1
jmp 0x1002d393
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
add eax, dword [ebp - 0x12c]
cmp eax, 0xbf26
jg 0x1002d3b3
mov dword [ebp - 0xd8], 1
jmp 0x1002d3ba
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0xfffffffa
jge 0x1002d3cf
mov dword [ebp - 0x10c], 1
jmp 0x1002d3d6
and dword [ebp - 0x10c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
add eax, dword [ebp - 0x10c]
je 0x1002d3f4
mov dword [ebp - 0x188], 1
jmp 0x1002d3fb
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x22c], eax
push 0
lea ecx, [ebp - 0x144]
call fcn.10018ea2
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x18]
cmp dword [eax], ecx
jg 0x1002d432
mov dword [ebp - 0xe0], 1
jmp 0x1002d439
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
cmp eax, dword [ebp - 0xe0]
jne 0x1002d45d
mov eax, 0xb187b35f
test eax, eax
je 0x1002d45d
mov dword [ebp - 0x124], 1
jmp 0x1002d464
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
sub eax, 8
cmp eax, 6
jne 0x1002d47e
mov dword [ebp - 0xe8], 1
jmp 0x1002d485
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
cmp dword [ebp - 0xe8], eax
jge 0x1002d4a0
mov dword [ebp - 0x114], 1
jmp 0x1002d4a7
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
imul eax, dword [ebp - 0x114]
test eax, eax
je 0x1002d63f
mov dword [ebp - 0x58], 0xd89d6848
mov dword [ebp - 0xdc], 0xfff8
cmp dword [ebp - 0x58], 0
jne 0x1002d4e0
mov dword [ebp - 0x15c], 1
jmp 0x1002d4e7
and dword [ebp - 0x15c], 0
mov esi, dword [ebp - 0x10]
push 0
lea ecx, [ebp - 0x144]
call fcn.10018ea2
cmp esi, dword [eax]
jg 0x1002d507
mov dword [ebp - 0xa0], 1
jmp 0x1002d50e
and dword [ebp - 0xa0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0xa0], eax
jge 0x1002d529
mov dword [ebp - 0x64], 1
jmp 0x1002d52d
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
cmp dword [ebp - 0x64], eax
jg 0x1002d54b
cmp dword [ebp - 0x58], 0
je 0x1002d54b
mov dword [ebp - 0xac], 1
jmp 0x1002d552
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x18]
add eax, dword [ebp - 0xac]
cmp eax, 1
ja 0x1002d570
mov dword [ebp - 0xb4], 1
jmp 0x1002d577
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0xfffffffe
jae 0x1002d58c
mov dword [ebp - 0xbc], 1
jmp 0x1002d593
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xbc], eax
jle 0x1002d5b6
mov eax, 0xb631114
test eax, eax
je 0x1002d5b6
mov dword [ebp - 0xc4], 1
jmp 0x1002d5bd
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xc4], eax
jg 0x1002d5d4
mov dword [ebp - 0xcc], 1
jmp 0x1002d5db
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0xbc0ae227
jne 0x1002d5f3
mov dword [ebp - 0xd4], 1
jmp 0x1002d5fa
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0xdc], 0
jg 0x1002d624
mov dword [ebp - 0x164], 1
jmp 0x1002d62b
and dword [ebp - 0x164], 0
mov esi, dword [ebp - 0x58]
push 1
lea ecx, [ebp - 0x144]
call fcn.10018ea2
mov dword [eax], esi
jmp 0x1002d650
mov byte [ebp - 0x3a], 0
lea eax, [ebp - 0x3a]
push eax
push 1
call fcn.1002c89a
pop ecx
pop ecx
mov dword [ebp - 0x28], 0
jmp 0x1002d660
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x1002d682
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x28]
push eax
push 1
push 0x50be
call fcn.1002c8d5
add esp, 0x10
jmp 0x1002d659
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x144]
call fcn.10018e86
jmp 0x1002d234
push 0x1d2e
lea eax, [ebp - 0x204]
push eax
push 0xb37
push 1
call fcn.1002c937
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.10018e86
mov eax, dword [ebp - 0x88]
cmp dword [eax + 4], 0
jbe 0x1002da3b
mov dword [ebp - 0x1c], 0x6158
push 4
lea ecx, [ebp - 0x194]
call fcn.10018e04
mov dword [ebp - 4], 3
push 4
lea ecx, [ebp - 0x1a0]
call fcn.10018e04
mov byte [ebp - 4], 4
mov dword [ebp - 0x16c], 0xfffffffe
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x1e4], 0xe8f7cf8
mov dword [ebp - 0x1e0], 0xe8f7cf8
mov dword [ebp - 0x1dc], 0xe8f7cf8
mov dword [ebp - 0x1d8], 0xe8f7cf8
mov dword [ebp - 0x48], 0
jmp 0x1002d745
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x1002d761
push dword [ebp - 0x48]
lea ecx, [ebp - 0x194]
call fcn.10018ea2
mov dword [eax], 9
jmp 0x1002d73e
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x643
push 1
call fcn.1002c9ba
add esp, 0x10
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x1002d7a1
mov dword [ebp - 0x17c], 1
jmp 0x1002d7a8
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x1c], 0
jge 0x1002d7ba
mov dword [ebp - 0xe4], 1
jmp 0x1002d7c1
and dword [ebp - 0xe4], 0
push 3
lea ecx, [ebp - 0x194]
call fcn.10018ea2
mov ecx, dword [ebp - 0xe4]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.10018ea2
mov dword [eax], 3
mov eax, 0x2ccd
test eax, eax
je 0x1002d810
push 3
lea ecx, [ebp - 0x194]
call fcn.10018ea2
cmp dword [eax], 0
je 0x1002d810
mov dword [ebp - 0xec], 1
jmp 0x1002d817
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xec], eax
je 0x1002d83d
push 3
lea ecx, [ebp - 0x194]
call fcn.10018ea2
cmp dword [eax], 0
jne 0x1002d83d
and dword [ebp - 0xf8], 0
jmp 0x1002d847
mov dword [ebp - 0xf8], 1
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x16c], eax
push 1
lea ecx, [ebp - 0x1a0]
call fcn.10018ea2
mov ecx, dword [ebp - 0x1c]
cmp dword [eax], ecx
jl 0x1002d873
mov dword [ebp - 0x100], 1
jmp 0x1002d87a
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x68]
jg 0x1002d893
xor eax, eax
inc eax
jne 0x1002d893
and dword [ebp - 0x70], 0
jmp 0x1002d89a
mov dword [ebp - 0x70], 1
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x70], eax
jl 0x1002d8ae
mov dword [ebp - 0x180], 1
jmp 0x1002d8b5
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1f8], eax
mov eax, 0xcbedfa9
test eax, eax
je 0x1002d8d9
mov eax, 0x4acc0136
test eax, eax
je 0x1002d8d9
mov dword [ebp - 0x78], 1
jmp 0x1002d8dd
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x78]
jg 0x1002d8ee
mov dword [ebp - 0x80], 1
jmp 0x1002d8f2
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x80]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1e4], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1a0]
call fcn.10018e86
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.10018e86
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x98]
add ecx, dword [eax]
mov dword [ebp - 0x90], ecx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0
jbe 0x1002da3b
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x1a8], 1
lea ecx, [ebp - 0x59]
call fcn.100092d3
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x234]
call fcn.10018eb1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x21c]
call fcn.10018e60
mov dword [ebp - 4], 5
mov dword [ebp - 0x44], 0x84c506d4
mov dword [ebp - 0x14c], 1
mov dword [ebp - 0x44], 0
jmp 0x1002d9c9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x1002da08
mov dword [ebp - 0x150], 0x14801465
lea eax, [ebp - 0x21c]
push eax
push 0x1da7
push 0x6d56
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x150]
push eax
push 1
call fcn.1002ca35
add esp, 0x1c
jmp 0x1002d9c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.10018e86
mov eax, dword [ebp - 0x158]
push dword [eax]
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x98]
push 1
call fcn.1002a6bd
add esp, 0x10
jmp 0x1002d938
jmp 0x1002da4a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_HideCaret]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret