Function at 0x10027929
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10062d88
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x10027d47
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2f8], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x32c], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x2ec], eax
lea eax, [ebp + 0x38]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x318]
movzx eax, byte [eax]
test eax, eax
je 0x10027cdf
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x1e4], eax
mov eax, dword [0x10080f88]
and eax, 1
jne 0x10027a0e
mov eax, dword [0x10080f88]
or eax, 1
mov dword [0x10080f88], eax
and dword [ebp - 4], 0
mov ecx, 0x10080f48
call fcn.10011ab7
push 0x10063d3e
call fcn.100499dc
pop ecx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x210]
imul eax, dword [eax], 0x3e8
mov ecx, dword [ebp - 0x15c]
add eax, dword [ecx]
mov dword [ebp - 0x1f0], eax
movzx eax, byte [0x1008028c]
test eax, eax
je 0x10027c18
mov ecx, 0x10080f48
call fcn.1002a308
movzx eax, al
test eax, eax
jne 0x10027c18
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x1d0]
push eax
mov ecx, 0x10080f48
call fcn.10011aa2
lea eax, [ebp - 0x410]
push eax
mov ecx, 0x10080f48
call fcn.10011a94
push eax
lea ecx, [ebp - 0x1d0]
call fcn.10011b6e
movzx eax, al
test eax, eax
je 0x10027c18
mov dword [ebp - 0x1f8], 0x731f
mov dword [ebp - 0x288], str.sevmhsj_ffnmqc_cmvbhsh_berkp_xtf_hxtyppky
cmp dword [ebp - 0x1f8], 0x7423
jle 0x10027bb8
and dword [ebp - 0xf4], 0
jmp 0x10027ac6
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x63f
jge 0x10027bb8
and dword [ebp - 0x9c], 0
jmp 0x10027aec
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1eb9
jge 0x10027bb3
and dword [ebp - 0x128], 0
jmp 0x10027b12
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x41f8
jge 0x10027bae
and dword [ebp - 0x12c], 0
jmp 0x10027b38
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x4766
jge 0x10027ba9
mov ecx, dword [ebp - 0x128]
sub ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x9c]
sar eax, cl
and eax, dword [ebp - 0xf4]
cdq
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
push dword [ebp - 0x290]
push dword [ebp - 0x294]
lea ecx, [ebp - 0x4d0]
call fcn.10002a23
pop ecx
pop ecx
mov dword [ebp - 0x2fc], eax
mov ecx, dword [ebp - 0x2fc]
call fcn.10002bfc
push eax
call fcn.10049a06
pop ecx
lea ecx, [ebp - 0x4d0]
call fcn.10002bf2
jmp 0x10027b2b
jmp 0x10027b05
jmp 0x10027adf
jmp 0x10027ab9
lea ecx, [ebp - 0x1d0]
call fcn.1002a311
mov ecx, dword [ebp - 0x1e4]
mov eax, dword [eax + 4]
mov dword [ecx], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0x1f8], 0x6fe4
jge 0x10027bed
push dword [ebp - 0x288]
call fcn.10049a06
pop ecx
jmp 0x10027c09
or dword [ebp - 4], 0xffffffff
jmp 0x10027c13
jmp 0x10029c16
push dword [ebp - 0x210]
call fcn.1001e00e
pop ecx
mov dword [ebp - 0x234], eax
push 1
mov eax, dword [ebp - 0x15c]
push dword [eax]
push 0
push dword [ebp - 0x234]
call fcn.100225ec
add esp, 0x10
mov dword [ebp - 0x164], eax
push 0x3d4f
lea eax, [ebp - 0x164]
push eax
push 1
push 0x3f3e
push 1
push 0x374d
push 0x7b32
push 0x1059
push 0x1008028c
push 0x337d
push 0x4c87
push 0x7d46
push 0x3570
push 0x3b46
push 1
lea eax, [ebp - 0x1f0]
push eax
push 0x290a
push 0xca4
push 0x10080f48
push 0x3947
push 0x1105
push 0x5bc
push 0x16b0
push 0x4644
push 0x56ec
call fcn.10026b92
add esp, 0x64
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x164]
mov dword [eax], ecx
jmp 0x10029c16
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0
jmp 0x10027d22
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 3
jge 0x10027d42
mov eax, dword [ebp - 0x4c]
push dword [eax]
mov ecx, dword [ebp - 0x2e0]
call fcn.10001f76
mov dword [eax], 0xff444262
jmp 0x10027d17
jmp 0x10029c16
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x268], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x24c]
movzx eax, byte [eax]
test eax, eax
je 0x10029bb3
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x1e8], eax
push 2
lea ecx, [ebp - 0x150]
call fcn.10001ed7
mov dword [ebp - 4], 3
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x2e8], 0xba3f
mov dword [ebp - 0xa4], 0
jmp 0x10027dde
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x10027e00
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x150]
call fcn.10001f76
mov dword [eax], 4
jmp 0x10027dd1
push 0
lea ecx, [ebp - 0x150]
call fcn.10001f76
mov dword [eax], 0xa
jmp 0x10027e39
push 0
lea ecx, [ebp - 0x150]
call fcn.10001f76
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1bc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x150]
call fcn.10001f76
cmp dword [eax], 0xfffffff7
jle 0x1002803b
mov dword [ebp - 0x1ec], 0xf77722ab
mov dword [ebp - 0x20], 0
jmp 0x10027e69
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10027e7f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x43c], 1
jmp 0x10027e62
mov dword [ebp - 0x20], 0
jmp 0x10027e8f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10027ea5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x214], 0xc234ac01
jmp 0x10027e88
push 0
lea ecx, [ebp - 0x150]
call fcn.10001f76
cmp dword [eax], 0
je 0x10027f2d
push 0
lea ecx, [ebp - 0x150]
call fcn.10001f76
cmp dword [eax], 0x7631615e
jge 0x10027ed8
mov dword [ebp - 0x16c], 1
jmp 0x10027edf
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x43c]
imul eax, dword [ebp - 0x16c]
cmp eax, 0x28cae2fe
jge 0x10027f06
mov dword [ebp - 0x1fc], 1
jmp 0x10027f0d
and dword [ebp - 0x1fc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x43c]
cmp dword [ebp - 0x1fc], eax
jl 0x10027f2d
mov dword [ebp - 0x130], 1
jmp 0x10027f34
and dword [ebp - 0x130], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x214], ecx
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x174], eax
mov esi, dword [ebp - 0x174]
push 1
lea ecx, [ebp - 0x150]
call fcn.10001f76
cmp dword [eax], esi
jle 0x10027f76
mov dword [ebp - 0x1c4], 1
jmp 0x10027f7d
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0
jbe 0x10027fa1
push 0
lea ecx, [ebp - 0x150]
call fcn.10001f76
cmp dword [eax], 0
jne 0x10027fa1
and dword [ebp - 0x17c], 0
jmp 0x10027fab
mov dword [ebp - 0x17c], 1
imul eax, dword [ebp - 0x17c], 0xa4b1
test eax, eax
je 0x10027fce
cmp dword [ebp - 0x1ec], 0
je 0x10027fce
mov dword [ebp - 0x184], 1
jmp 0x10027fd5
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x184], eax
jne 0x10027fef
mov dword [ebp - 0x1cc], 1
jmp 0x10027ff6
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0xd09e
jg 0x1002800e
mov dword [ebp - 0x18c], 1
jmp 0x10028015
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x2e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x214], 0
je 0x10028036
jmp 0x10027e15
jmp 0x10027e15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x150]
call fcn.10001f5a
mov dword [ebp - 0x3ec], 0x3342eb90
push 0x56ba
push 0x24d5
push 0
push 0x34f4
call fcn.1001da2d
add esp, 0x10
push 1
push 0x36e6
push 0x2fc3
push 0x477b
push 0x6a7a
push 0
push 1
push 0x13de
push 0x3a92
call fcn.10025d54
add esp, 0x24
mov eax, dword [0x10080f88]
and eax, 2
jne 0x100280d0
mov eax, dword [0x10080f88]
or eax, 2
mov dword [0x10080f88], eax
mov dword [ebp - 4], 4
mov ecx, 0x10080f68
call fcn.10011ab7
push 0x10063d2f
call fcn.100499dc
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0xc7bf
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x144], 1
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x120], 0x15b01d97
mov dword [ebp - 0x30], 0x254f8d36
mov dword [ebp - 0x40], 0x7854c3eb
mov dword [ebp - 0x28], 0
jmp 0x1002811a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10028130
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x448], 9
jmp 0x10028113
mov dword [ebp - 0x28], 0
jmp 0x10028140
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10028156
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x478], 0xffffffff
jmp 0x10028139
cmp dword [ebp - 0x144], 1
jge 0x1002816b
mov dword [ebp - 0x194], 1
jmp 0x10028172
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
je 0x100281a3
xor eax, eax
je 0x100281a3
mov dword [ebp - 0x19c], 1
jmp 0x100281aa
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x19c], eax
jle 0x100281c4
mov dword [ebp - 0x25c], 1
jmp 0x100281cb
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x120], eax
imul eax, dword [ebp - 0x120], 0x25e4
cmp eax, dword [ebp - 0x30]
jl 0x10028204
mov dword [ebp - 0x1f4], 1
jmp 0x1002820b
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, 3
mov ecx, dword [ebp - 0x2c]
neg ecx
cmp ecx, eax
jg 0x10028236
mov dword [ebp - 0x1a4], 1
jmp 0x1002823d
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], 3
jmp 0x10028256
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x100282ba
mov dword [ebp - 0x40], 0
jmp 0x1002826c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x100282b8
mov dword [ebp - 0x38], 3
jmp 0x10028282
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x100282b6
mov dword [ebp - 0x2c], 0
jmp 0x10028298
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jg 0x100282b4
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x478]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp + ecx*4 - 0x448], eax
jmp 0x10028291
jmp 0x1002827b
jmp 0x10028265
jmp 0x1002824f
mov dword [ebp - 0x1dc], 0x5ccb
mov dword [ebp - 0x314], str.ffx_gxrytq_dphbsn_mhsgbq_btzi_auxobzn_szpqvsue_yat_ujoucvssb_twfdy_tdbjj_anpuz
cmp dword [ebp - 0x1dc], 0x5f94
jle 0x1002836c
push 0
push 0xe72
push 0xc38
push 0xb05
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
and dword [ebp - 0xac], 0
jmp 0x1002830b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x156d
jge 0x1002836c
and dword [ebp - 0xfc], 0
jmp 0x1002832d
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x4625
jge 0x1002836a
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], edx
push dword [ebp - 0x29c]
push dword [ebp - 0x2a0]
mov ecx, 0x1007f138
call fcn.10002c1c
jmp 0x10028320
jmp 0x100282fe
push dword [ebp - 0x154]
lea ecx, [ebp - 0x350]
call fcn.10011821
mov dword [ebp - 4], 5
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1dc], 0x5c4e
jge 0x100283a4
mov edx, dword [ebp - 0x314]
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x100283c0
mov dword [ebp - 4], 5
jmp 0x100283d0
mov dword [ebp - 0x26c], 0xfffffff8
push 2
lea ecx, [ebp - 0x3a8]
call fcn.10001ed7
mov byte [ebp - 4], 8
mov dword [ebp - 0x48], 0x1320f2d6
mov dword [ebp - 0x2f0], 0xa37d7c86
push 3
lea ecx, [ebp - 0x384]
call fcn.10001ed7
mov byte [ebp - 4], 9
push 1
lea eax, [ebp - 0x3a8]
push eax
push 0x550f
push 1
push 0x7428
push 0x261b
push 1
lea eax, [ebp - 0x264]
push eax
call fcn.1001a9fd
add esp, 0x20
lea eax, [ebp - 0x264]
push eax
push 0xcd8
push 0x74a7
push 0x7835
lea eax, [ebp - 0x384]
push eax
push 0
push 0x4409
call fcn.100278ef
add esp, 0x1c
push 0x1dce
push 0x5b18
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x2f0]
push eax
push 0xd35
push 1
lea eax, [ebp - 0x48]
push eax
push 1
push 0x344
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x26c]
push eax
push 1
call fcn.1001752b
add esp, 0x30
mov dword [ebp - 0x48], 0x1a
jmp 0x100284b6
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffff4
jl 0x100284ed
push 0x61a3
push 0x18ac
push 0x7714
push 1
push 1
push 0x4761
push 0x489a
push 0x2f8a
push 0x71e7
call fcn.1001ab54
add esp, 0x24
jmp 0x100284af
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x384]
call fcn.10001f5a
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3a8]
call fcn.10001f5a
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x350]
call fcn.10012280
push dword [eax]
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x350]
call fcn.10012294
push dword [eax]
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x350]
call fcn.10012280
push dword [eax]
mov edx, 0x10015ece
lea ecx, [ebp - 0x420]
call fcn.1002a69d
add esp, 0xc
lea ecx, [ebp - 0x350]
call fcn.10015e59
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x118], 1
mov dword [ebp - 0xb4], 0
jmp 0x1002858e
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x100285aa
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x480], 1
jmp 0x10028581
mov dword [ebp - 0x118], 0
jmp 0x100285c3
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jg 0x10028a16
mov dword [ebp - 0x1ac], 0x2e87
mov dword [ebp - 0x31c], str.kpkdohyz_qej_aere_wucfgxiqo_zik
cmp dword [ebp - 0x1ac], 0x2ea1
jle 0x100286cf
and dword [ebp - 0xc4], 0
jmp 0x1002860a
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x2e07
jge 0x100286cf
and dword [ebp - 0x90], 0
jmp 0x10028630
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x40ed
jge 0x100286ca
and dword [ebp - 0xbc], 0
jmp 0x10028656
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x4bad
jge 0x100286c5
and dword [ebp - 0x104], 0
jmp 0x10028678
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x6286
jge 0x100286c3
mov eax, dword [ebp - 0xbc]
and eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0xc4]
sub ecx, dword [ebp - 0x90]
xor eax, ecx
cdq
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], edx
push dword [ebp - 0x2a8]
push dword [ebp - 0x2ac]
mov ecx, 0x1007f138
call fcn.10002c1c
jmp 0x1002866b
jmp 0x10028649
jmp 0x10028623
jmp 0x100285fd
mov dword [ebp - 0xcc], 0
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x1ac], 0x2bf5
jge 0x100286f9
mov edx, dword [ebp - 0x31c]
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x10028715
mov dword [ebp - 4], 5
jmp 0x10028725
mov dword [ebp - 0xcc], 1
jmp 0x1002873e
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x10028a11
mov dword [ebp - 0x10c], 0xfffffff7
mov dword [ebp - 0x10c], 0
jmp 0x1002876e
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jg 0x10028a0c
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0xd4], 0
jmp 0x1002879e
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jg 0x100289ce
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x11c], 0
jmp 0x100287ce
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jg 0x100289c9
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x274], 1
mov dword [ebp - 0xdc], 1
jmp 0x10028808
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x100289c4
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x324], 0x2649
cmp dword [ebp - 0x324], 0x129b
jge 0x10028995
lea eax, [ebp - 0xe4]
push eax
push str._ld_n
call fcn.10049dfd
pop ecx
pop ecx
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x208]
call fcn.10011e07
mov byte [ebp - 4], 0xc
and dword [ebp - 0x114], 0
jmp 0x10028877
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0xe4]
jge 0x100288a5
push dword [ebp - 0x114]
lea ecx, [ebp - 0x208]
call fcn.10001f76
push eax
push 0x1006aae0
call fcn.10049dfd
pop ecx
pop ecx
jmp 0x1002886a
and dword [ebp - 0x124], 0
jmp 0x100288bb
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0xe4]
jge 0x10028986
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0x18], eax
jmp 0x100288e0
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x124]
jle 0x10028981
push dword [ebp - 0x18]
lea ecx, [ebp - 0x208]
call fcn.10001f76
mov esi, eax
mov eax, dword [ebp - 0x18]
dec eax
push eax
lea ecx, [ebp - 0x208]
call fcn.10001f76
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x1002897c
mov eax, dword [ebp - 0x18]
inc eax
push eax
push dword [ebp - 0x18]
push str._ld__ld_n
call fcn.10049a06
add esp, 0xc
mov eax, dword [ebp - 0x18]
dec eax
push eax
lea ecx, [ebp - 0x208]
call fcn.10001f76
mov eax, dword [eax]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x18]
dec eax
push eax
lea ecx, [ebp - 0x208]
call fcn.10001f76
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x208]
call fcn.10001f76
mov eax, dword [eax]
mov dword [esi], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x208]
call fcn.10001f76
mov ecx, dword [ebp - 0x27c]
mov dword [eax], ecx
jmp 0x100288d9
jmp 0x100288ae
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x208]
call fcn.10011e43
mov byte [ebp - 0x32], 0
push 1
push 0x6602
lea eax, [ebp - 0x32]
push eax
push 1
push 0x6292
push 0x68b0
push 0
push 0x4730
call fcn.1001a9fd
add esp, 0x20
jmp 0x100287fb
jmp 0x100287c1
jmp 0x10028791
push 0x4d62
push 0x1ccb
push 0x7428
push 0x6ba2
push 0x28f4
push 1
push 0x72a9
push 0x4910
push 0x363b
push 0x5c77
push 1
call fcn.1001bca3
add esp, 0x2c
jmp 0x10028761
jmp 0x10028731
jmp 0x100285b6
movzx eax, byte [0x10080284]
test eax, eax
je 0x10028e59
mov ecx, 0x10080f68
call fcn.1002a308
movzx eax, al
test eax, eax
jne 0x10028e59
mov dword [ebp - 0x20c], 0x42a2
mov dword [ebp - 0x284], str.abks_gvuec_xqgv_pytovcene_jubktp_vvzvdeyv_dptw_zrli_cybfq_vjgfjrl_grwdiw_vplptkujn
cmp dword [ebp - 0x20c], 0x436b
jle 0x10028b65
and dword [ebp - 0xa0], 0
jmp 0x10028a74
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x55ea
jge 0x10028b65
and dword [ebp - 0x98], 0
jmp 0x10028a9a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xe09
jge 0x10028b60
and dword [ebp - 0xec], 0
jmp 0x10028ac0
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x4578
jge 0x10028b5b
and dword [ebp - 0x94], 0
jmp 0x10028ae6
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x373
jge 0x10028b56
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x98]
and eax, dword [ebp - 0xa0]
cdq
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], edx
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x4a0]
call fcn.10002a23
pop ecx
pop ecx
mov dword [ebp - 0x320], eax
mov ecx, dword [ebp - 0x320]
call fcn.10002bfc
push eax
call fcn.10049a06
pop ecx
lea ecx, [ebp - 0x4a0]
call fcn.10002bf2
jmp 0x10028ad9
jmp 0x10028ab3
jmp 0x10028a8d
jmp 0x10028a67
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x198]
push eax
mov ecx, 0x10080f68
call fcn.10011aa2
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x20c], 0x419d
jge 0x10028b99
push dword [ebp - 0x284]
call fcn.10049a06
pop ecx
jmp 0x10028bb5
mov dword [ebp - 4], 5
jmp 0x10028bc5
mov dword [ebp - 0x24], 0xe1f6f084
mov dword [ebp - 0x1b4], 0x160cbeb9
mov dword [ebp - 0x178], 9
push 2
lea ecx, [ebp - 0x3b4]
call fcn.10001ed7
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x188], 0xffffffff
push 2
lea ecx, [ebp - 0x3cc]
call fcn.10001ed7
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x308], 0xb79dc866
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x3b4]
push eax
push 0x4fdb
push 0x4a7f
push 0x5f99
push 1
push 0x27f
push 0
call fcn.1001945f
add esp, 0x20
push 0x4dae
push 0x1f0f
lea eax, [ebp - 0x300]
push eax
push 0x46fb
lea eax, [ebp - 0x3cc]
push eax
push 1
push 0x48bd
push 1
call fcn.1001945f
add esp, 0x20
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x24], 0
jne 0x10028c9d
mov dword [ebp - 0x1b4], 0xffffffff
cmp dword [ebp - 0x1b4], 0
jne 0x10028c9d
and dword [ebp - 0x28c], 0
jmp 0x10028ca7
mov dword [ebp - 0x28c], 1
cmp dword [ebp - 0x24], 1
jg 0x10028cb9
mov dword [ebp - 0x158], 1
jmp 0x10028cc0
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0
jne 0x10028cd5
mov dword [ebp - 0x228], 1
jmp 0x10028cdc
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x24], 7
je 0x10028cee
mov dword [ebp - 0x160], 1
jmp 0x10028cf5
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x160], eax
jl 0x10028d0c
mov dword [ebp - 0x168], 1
jmp 0x10028d13
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x168], eax
jl 0x10028d2a
mov dword [ebp - 0x170], 1
jmp 0x10028d31
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0x73ff82f
jne 0x10028d49
mov dword [ebp - 0x298], 1
jmp 0x10028d50
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x180], eax
push 0
lea ecx, [ebp - 0x3b4]
call fcn.10001f76
mov ecx, dword [ebp - 0x180]
mov dword [eax], ecx
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xcea445a8
jne 0x10028da7
mov dword [ebp - 0x13c], 1
jmp 0x10028dae
and dword [ebp - 0x13c], 0
push 0
lea ecx, [ebp - 0x3cc]
call fcn.10001f76
mov ecx, dword [ebp - 0x13c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x13c], eax
jg 0x10028dda
mov dword [ebp - 0x190], 1
jmp 0x10028de1
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x308], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3cc]
call fcn.10001f5a
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3b4]
call fcn.10001f5a
lea eax, [ebp - 0x418]
push eax
mov ecx, 0x10080f68
call fcn.10011a94
push eax
lea ecx, [ebp - 0x198]
call fcn.10011b6e
movzx eax, al
test eax, eax
je 0x10028e59
lea ecx, [ebp - 0x198]
call fcn.1002a311
mov ecx, dword [ebp - 0x1e8]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.10011881
jmp 0x10029c16
push 2
lea ecx, [ebp - 0x390]
call fcn.10001ed7
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x1a8], 8
mov dword [ebp - 0x328], 0x37f20bab
mov dword [ebp - 0x2b0], 0xfffffffc
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x2a4], 0
push 0x3d1
push 1
lea eax, [ebp - 0x400]
push eax
push 0x61df
push 0x2672
push 0x5c
push 0x4289
lea eax, [ebp - 0x390]
push eax
push 0
call fcn.1001d384
add esp, 0x24
push 0x72ad
lea eax, [ebp - 0x2a4]
push eax
push 1
lea eax, [ebp - 0x390]
push eax
push 1
push 0x5445
lea eax, [ebp - 0x328]
push eax
push 0xeb
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.10019691
add esp, 0x2c
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x390]
call fcn.10001f5a
and dword [ebp - 0x3c], 0
mov dword [ebp - 0x1c0], 0x5f97
mov dword [ebp - 0x248], str.lqa_uyjg_ozm_lybkoxni_uxdsmv_icpsvtwi_taurtj
cmp dword [ebp - 0x1c0], 0x601a
jle 0x10028ffa
and dword [ebp - 0xa8], 0
jmp 0x10028f6a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x3bff
jge 0x10028ffa
and dword [ebp - 0xb0], 0
jmp 0x10028f90
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x43c9
jge 0x10028ff5
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xb0]
shl eax, cl
cdq
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], edx
push dword [ebp - 0x2c0]
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0x500]
call fcn.10002a23
pop ecx
pop ecx
mov dword [ebp - 0x310], eax
mov ecx, dword [ebp - 0x310]
call fcn.10002bfc
push eax
call fcn.10049a06
pop ecx
lea ecx, [ebp - 0x500]
call fcn.10002bf2
jmp 0x10028f83
jmp 0x10028f5d
mov dword [ebp - 0x364], 9
mov dword [ebp - 0x360], 9
mov dword [ebp - 0x35c], 9
mov dword [ebp - 0x358], 9
lea ecx, [ebp - 0x13d]
call fcn.10001f85
push eax
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x450]
call fcn.10001f88
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x40c]
call fcn.10001f34
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x1b0], 0x1654
mov dword [ebp - 0x2f4], str.bshscweu_cgjfyqvyb_hfjgj_qqs_lusbdi_ssvbavyvn_nqrg
cmp dword [ebp - 0x1b0], 0x198d
jle 0x10029154
and dword [ebp - 0xc8], 0
jmp 0x10029095
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x5112
jge 0x10029154
and dword [ebp - 0xb8], 0
jmp 0x100290bb
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x70c7
jge 0x1002914f
and dword [ebp - 0xc0], 0
jmp 0x100290e1
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x41d9
jge 0x1002914a
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0xc0]
xor eax, dword [ebp - 0xc8]
cdq
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
push dword [ebp - 0x2cc]
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x4e8]
call fcn.10002a23
pop ecx
pop ecx
mov dword [ebp - 0x2bc], eax
mov ecx, dword [ebp - 0x2bc]
call fcn.10002bfc
push eax
call fcn.10049a06
pop ecx
lea ecx, [ebp - 0x4e8]
call fcn.10002bf2
jmp 0x100290d4
jmp 0x100290ae
jmp 0x10029088
mov dword [ebp - 0x240], 7
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x1b0], 0x15c1
jge 0x1002917a
push dword [ebp - 0x2f4]
call fcn.10049a06
pop ecx
jmp 0x10029196
mov dword [ebp - 4], 0x12
jmp 0x100291a6
mov dword [ebp - 0x1b8], 0x505e
mov dword [ebp - 0x2c8], str.csgxbn_keprllhp_nvbevoz_jueektdir_wcbhcbruq_dwoqlasr_icrxiynp_hzk_notbbkcm
cmp dword [ebp - 0x1b8], 0x53ed
jle 0x100292bb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
and dword [ebp - 0xe0], 0
jmp 0x100291f4
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x6c64
jge 0x100292bb
and dword [ebp - 0xd0], 0
jmp 0x1002921a
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x496c
jge 0x100292b6
and dword [ebp - 0xd8], 0
jmp 0x10029240
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x2fcb
jge 0x100292b1
and dword [ebp - 0xe8], 0
jmp 0x10029262
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x6439
jge 0x100292af
mov ecx, dword [ebp - 0xd0]
add ecx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xe0]
shl eax, cl
mov ecx, dword [ebp - 0xe8]
sar eax, cl
cdq
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], edx
push dword [ebp - 0x2d8]
push dword [ebp - 0x2dc]
mov ecx, 0x1007f138
call fcn.10002c1c
jmp 0x10029255
jmp 0x10029233
jmp 0x1002920d
jmp 0x100291e7
push 2
lea ecx, [ebp - 0x3c0]
call fcn.10001ed7
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x1b8], 0x4ef1
jge 0x100292ec
mov edx, dword [ebp - 0x2c8]
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x10029308
mov dword [ebp - 4], 0x15
jmp 0x10029318
mov dword [ebp - 0x238], 0x307976b5
mov dword [ebp - 0x230], 0x214c259d
mov dword [ebp - 0x22c], 0
push 0x5096
lea eax, [ebp - 0x428]
push eax
push 0x26d
push 1
push 0x27a3
push 1
push 0x3942
lea eax, [ebp - 0x3c0]
push eax
push 0x3b08
call fcn.1001c034
add esp, 0x24
push 0x6e24
lea eax, [ebp - 0x22c]
push eax
push 1
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x238]
push eax
push 1
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x3c0]
push eax
call fcn.1001c13c
add esp, 0x24
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3c0]
call fcn.10001f5a
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x40c]
call fcn.10001f5a
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x1c0], 0x5dc8
jge 0x100293de
push dword [ebp - 0x248]
call fcn.10049a06
pop ecx
jmp 0x100293fa
mov dword [ebp - 4], 5
jmp 0x1002940a
lea eax, [ebp - 0x350]
push eax
call fcn.100174ac
pop ecx
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x100298bf
cmp dword [0x10080e28], 0
jne 0x100298a1
mov byte [ebp - 0x8c], 1
mov byte [ebp - 0x8b], 0x93
mov byte [ebp - 0x8a], 2
mov byte [ebp - 0x89], 0x17
mov byte [ebp - 0x88], 0xa
mov byte [ebp - 0x87], 0x1e
mov byte [ebp - 0x86], 8
mov byte [ebp - 0x85], 0x42
mov byte [ebp - 0x84], 7
mov byte [ebp - 0x83], 0x1c
mov byte [ebp - 0x82], 4
mov byte [ebp - 0x81], 0x57
mov byte [ebp - 0x80], 6
mov byte [ebp - 0x7f], 0x56
mov byte [ebp - 0x7e], 3
mov byte [ebp - 0x7d], 0x5d
mov byte [ebp - 0x7c], 0xb
mov byte [ebp - 0x7b], 2
mov byte [ebp - 0x7a], 5
mov byte [ebp - 0x79], 0
mov byte [ebp - 0x78], 9
mov byte [ebp - 0x77], 8
mov byte [ebp - 0x76], 0
mov byte [ebp - 0x75], 0x2f
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x8c]
and eax, 0xf6
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x8c]
or ecx, 0xf6
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x8c]
mov word [ebp + eax*2 - 0x3e8], cx
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x134], 0
jmp 0x1002950c
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x18
jae 0x100295a4
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x134]
movzx eax, byte [ebp + eax - 0x8e]
movzx eax, word [ebp + eax*2 - 0x3e8]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x8b]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x134]
movzx eax, byte [ebp + eax - 0x8e]
movzx eax, word [ebp + eax*2 - 0x3e8]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x8b]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x134]
movzx eax, byte [ebp + eax - 0x8e]
movzx eax, word [ebp + eax*2 - 0x3e8]
mov esi, dword [ebp - 0x1c]
movzx esi, byte [ebp + esi - 0x8b]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x8c]
mov word [ebp + eax*2 - 0x3e8], si
jmp 0x10029504
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x3e8], cx
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.1002a257
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x258], eax
mov byte [ebp - 4], 0x1a
push dword [ebp - 0x258]
call fcn.100174ac
pop ecx
mov dword [ebp - 0x1c8], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4b8]
call fcn.10011881
and dword [ebp - 0xf0], 0
jmp 0x10029613
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xd
jae 0x1002962e
xor eax, eax
mov ecx, dword [ebp - 0xf0]
mov word [ebp + ecx*2 - 0x3e8], ax
jmp 0x10029606
cmp dword [ebp - 0x1c8], 0
je 0x100298a1
mov byte [ebp - 0x74], 0xa
mov byte [ebp - 0x73], 0x62
mov byte [ebp - 0x72], 7
mov byte [ebp - 0x71], 0xb
mov byte [ebp - 0x70], 5
mov byte [ebp - 0x6f], 0x1b
mov byte [ebp - 0x6e], 4
mov byte [ebp - 0x6d], 0x25
mov byte [ebp - 0x6c], 8
mov byte [ebp - 0x6b], 0x2d
mov byte [ebp - 0x6a], 1
mov byte [ebp - 0x69], 0xe
mov byte [ebp - 0x68], 0xb
mov byte [ebp - 0x67], 0x38
mov byte [ebp - 0x66], 6
mov byte [ebp - 0x65], 0x35
mov byte [ebp - 0x64], 2
mov byte [ebp - 0x63], 3
mov byte [ebp - 0x62], 9
mov byte [ebp - 0x61], 0x13
mov byte [ebp - 0x60], 0
mov byte [ebp - 0x5f], 0x3e
mov byte [ebp - 0x5e], 4
mov byte [ebp - 0x5d], 0x56
mov byte [ebp - 0x5c], 0x80
mov byte [ebp - 0x5b], 0x7b
mov byte [ebp - 0x5a], 0xbd
mov byte [ebp - 0x59], 3
mov byte [ebp - 0x58], 0x28
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x74]
and eax, 0x1b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x74]
or ecx, 0x1b
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x74]
mov byte [ebp + eax - 0x224], cl
mov dword [ebp - 0x14], 2
and dword [ebp - 0x54], 0
jmp 0x100296f4
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1d
jae 0x10029821
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x74]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10029732
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x74]
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x74]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x100296ec
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x54]
movzx eax, byte [ebp + eax - 0x76]
movsx eax, byte [ebp + eax - 0x224]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x73]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x54]
movzx eax, byte [ebp + eax - 0x76]
movsx eax, byte [ebp + eax - 0x224]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x73]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x54]
movzx eax, byte [ebp + eax - 0x76]
movsx eax, byte [ebp + eax - 0x224]
mov esi, dword [ebp - 0x14]
movzx ebx, byte [ebp + esi - 0x73]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x74]
mov byte [ebp + eax - 0x224], bl
push 0x674c
push 0x237c
push 1
push 0x2e71
push 0x57f5
lea eax, [ebp - 0x54]
push eax
push 0x3563
push 0x29e7
push 0xa1a
push 0x2ef4
push 0x3d80
push 0x424f
push 0x4f61
push 0x1010
push 0x5760
push 0x64fb
push 0x7dbe
push 0x64d5
push 0x1e19
push 0x66f8
push 1
push 0x2062
push 0x588d
push 0x6cf8
push 0x4462
push 1
call fcn.1001c6af
add esp, 0x68
jmp 0x100296ec
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x224], 0
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x468]
call fcn.1002a27c
mov byte [ebp - 4], 0x1b
and dword [ebp - 0xf8], 0
jmp 0x1002985b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xd
jae 0x10029874
mov eax, dword [ebp - 0xf8]
mov byte [ebp + eax - 0x224], 0
jmp 0x1002984e
push 0
push 0
lea eax, [ebp - 0x468]
push eax
push dword [ebp - 0x1c8]
call fcn.100225ec
add esp, 0x10
mov dword [0x10080e28], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x468]
call fcn.1001194a
cmp dword [0x10080e28], 0
je 0x100298bf
mov ecx, dword [ebp - 0x154]
call fcn.100118e0
push eax
call dword [0x10080e28]
mov dword [ebp - 0x3c], eax
push 0x333f
push 1
push 0x5596
push 0x5897
push 0x4ad6
push 0x3cb3
push 0x776
push 0x5fab
push 1
call fcn.1001d384
add esp, 0x24
cmp dword [ebp - 0x3c], 0
je 0x1002995a
movzx eax, byte [0x10080284]
test eax, eax
je 0x10029910
mov ecx, 0x10080f68
call fcn.1002a308
movzx eax, al
test eax, eax
jne 0x1002995a
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 1
push 0x7dd5
push 0x4da7
push 1
push 0x10080f68
push 0x946
push 0x5b62
push 1
call fcn.1001d6b4
add esp, 0x28
push 0x3649
push 1
push 1
push 1
push 0x10080284
call fcn.1001a67c
add esp, 0x14
mov dword [ebp - 0x378], 4
mov dword [ebp - 0x374], 4
mov dword [ebp - 0x370], 4
mov dword [ebp - 0x36c], 4
lea ecx, [ebp - 0x135]
call fcn.10001f85
push eax
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x488]
call fcn.10001f88
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x338]
call fcn.10001f34
mov byte [ebp - 4], 0x1c
push 2
lea ecx, [ebp - 0x39c]
call fcn.10001ed7
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x100], 0
jmp 0x100299e5
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x10029a07
push dword [ebp - 0x100]
lea ecx, [ebp - 0x39c]
call fcn.10001f76
mov dword [eax], 0xdead9bac
jmp 0x100299d8
push 0
lea ecx, [ebp - 0x338]
call fcn.10001f76
and dword [eax], 0
jmp 0x10029a3d
push 0
lea ecx, [ebp - 0x338]
call fcn.10001f76
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1e0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x338]
call fcn.10001f76
cmp dword [eax], 0x15
jne 0x10029b68
mov dword [ebp - 0x108], 0x18d58162
mov dword [ebp - 0x108], 0
jmp 0x10029a76
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xffffffe2
jg 0x10029b63
mov dword [ebp - 0x44], 0x5dae5a6
mov dword [ebp - 0x44], 0x1b
jmp 0x10029a9a
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1a
jle 0x10029b3b
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x110], 0
jmp 0x10029ac7
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jg 0x10029b36
mov byte [ebp - 0x31], 0
push 0x2c24
push 0xc5d
push 0x62e6
push 0x7b58
push 0x255
push 0x7628
push 0x4491
push 0x1dc3
push 0x60e6
lea eax, [ebp - 0x31]
push eax
push 1
push 0x6b5
push 0x27e4
push 0x4237
push 1
push 0x5e0f
push 0x27c6
push 0x2fcc
push 0x31bc
call fcn.1001d835
add esp, 0x4c
jmp 0x10029aba
jmp 0x10029a93
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x39c]
push eax
push 1
push 1
push 1
push 0x133f
push 0x3416
call fcn.1001a89c
add esp, 0x1c
jmp 0x10029a69
jmp 0x10029a19
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x39c]
call fcn.10001f5a
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x338]
call fcn.10001f5a
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.10011881
jmp 0x10029c16
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x50]
mov dword [eax], 0
jmp 0x10029bf6
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
cmp dword [eax], 2
jge 0x10029c16
mov eax, dword [ebp - 0x50]
push dword [eax]
mov ecx, dword [ebp - 0x280]
call fcn.10001f76
mov dword [eax], 0x25260
jmp 0x10029beb
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret