Function at 0x1002bc61
Capabilities:
Create pipe
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008ec3c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x380
push esi
movzx eax, byte [ebp + 0x34]
test eax, eax
je 0x1002cfbc
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x178], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
movzx eax, byte [eax]
test eax, eax
je 0x1002bd37
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
jmp 0x1002bd12
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
cmp dword [eax], 2
jge 0x1002bd32
mov eax, dword [ebp - 0x30]
push dword [eax]
mov ecx, dword [ebp - 0x1bc]
call fcn.100267ee
mov dword [eax], 1
jmp 0x1002bd07
jmp 0x1002cfb7
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x14c], 0x2246
mov dword [ebp - 0x180], 0x10009d94
cmp dword [ebp - 0x14c], 0x2327
jle 0x1002be33
and dword [ebp - 0x50], 0
jmp 0x1002bd89
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x6172
jge 0x1002be33
and dword [ebp - 0x8c], 0
jmp 0x1002bdac
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x2d0b
jge 0x1002be2e
and dword [ebp - 0x58], 0
jmp 0x1002bdc5
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x6c47
jge 0x1002be29
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x8c]
shl eax, cl
mov ecx, dword [ebp - 0x58]
sar eax, cl
cdq
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], edx
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x374]
call fcn.100127de
pop ecx
pop ecx
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x1dc]
call fcn.10026416
push eax
call fcn.10079103
pop ecx
lea ecx, [ebp - 0x374]
call fcn.1002640c
jmp 0x1002bdbe
jmp 0x1002bd9f
jmp 0x1002bd82
mov dword [ebp - 0x60], 0xd5e48d32
cmp dword [ebp - 0x14c], 0x218f
jge 0x1002be52
push dword [ebp - 0x180]
call fcn.10079103
pop ecx
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10026750
and dword [ebp - 4], 0
mov dword [ebp - 0x88], 0
jmp 0x1002be7c
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1002be9e
push dword [ebp - 0x88]
lea ecx, [ebp - 0x2c4]
call fcn.100267ee
mov dword [eax], 0xaf72
jmp 0x1002be6f
mov dword [ebp - 0x60], 2
jmp 0x1002beae
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffed
jg 0x1002bf76
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x2a0], 1
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x98], 0
jmp 0x1002beec
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x1002bf08
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x2f8], 0x83c8fc55
jmp 0x1002bedf
mov dword [ebp - 0x24], 3
jmp 0x1002bf18
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1002bf71
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x2f8], 0
je 0x1002bf37
jmp 0x1002bf71
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2f8]
mov dword [ebp - 0x2e8], eax
mov eax, 0xf5f49900
test eax, eax
jae 0x1002bf5c
mov dword [ebp - 0x148], 1
jmp 0x1002bf63
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x23c], eax
jmp 0x1002bf11
jmp 0x1002bea7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c4]
call fcn.100267d2
mov ecx, dword [ebp - 0xb0]
call fcn.1004ba67
movzx eax, al
test eax, eax
je 0x1002bfa5
mov eax, dword [ebp - 0xac]
mov byte [eax], 0
jmp 0x1002d0be
mov dword [ebp - 0xc4], 0
push 0x686e
push 0x4c42
push 0x4bda
push 0x6281
lea eax, [ebp - 0xc4]
push eax
push 0
call fcn.1004add7
add esp, 0x18
push 0x343d
push 0x40f2
push 0
push 0x47ad
push 0x933
push 1
push 0x32b1
lea eax, [ebp - 0xc4]
push eax
push 0x54df
push 0x53c9
push 0x62d6
push 1
call fcn.1002ae3b
add esp, 0x30
push 0
lea eax, [ebp - 0x44]
push eax
push 1
push 0x4db8
call fcn.1002b1e0
add esp, 0x10
mov dword [ebp - 0x110], 0x1f15
mov dword [ebp - 0x1f0], 0x10009db0
cmp dword [ebp - 0x110], 0x2001
jle 0x1002c131
and dword [ebp - 0x80], 0
jmp 0x1002c057
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1d01
jge 0x1002c123
and dword [ebp - 0x70], 0
jmp 0x1002c071
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x7f43
jge 0x1002c11e
and dword [ebp - 0x68], 0
jmp 0x1002c08b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x64cd
jge 0x1002c119
and dword [ebp - 0x90], 0
jmp 0x1002c0ae
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x78f3
jge 0x1002c114
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x90]
and eax, dword [ebp - 0x70]
xor eax, dword [ebp - 0x80]
cdq
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d0], edx
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x32c]
call fcn.100127de
pop ecx
pop ecx
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x188]
call fcn.10026416
push eax
call fcn.10079103
pop ecx
lea ecx, [ebp - 0x32c]
call fcn.1002640c
jmp 0x1002c0a1
jmp 0x1002c084
jmp 0x1002c06a
jmp 0x1002c050
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
cmp dword [ebp - 0x110], 0x1bd5
jge 0x1002c149
push dword [ebp - 0x1f0]
call fcn.10079103
pop ecx
push 2
lea ecx, [ebp - 0x1e8]
call fcn.10026750
mov dword [ebp - 4], 1
mov dword [ebp - 0xb8], 0x5bc8
mov dword [ebp - 0x21c], 0x10009e04
cmp dword [ebp - 0xb8], 0x5cc0
jle 0x1002c212
and dword [ebp - 0x78], 0
jmp 0x1002c18e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x75f0
jge 0x1002c212
and dword [ebp - 0x84], 0
jmp 0x1002c1ad
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1ad4
jge 0x1002c20d
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x84]
cdq
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], edx
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
lea ecx, [ebp - 0x344]
call fcn.100127de
pop ecx
pop ecx
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x190]
call fcn.10026416
push eax
call fcn.10079103
pop ecx
lea ecx, [ebp - 0x344]
call fcn.1002640c
jmp 0x1002c1a0
jmp 0x1002c187
push 0x17b5
push 0x198e
push 0x7b00
push 0x3dfa
push 1
lea eax, [ebp - 0x2c8]
push eax
push 0x593
lea eax, [ebp - 0x1e8]
push eax
push 0
call fcn.1002a40d
add esp, 0x24
cmp dword [ebp - 0xb8], 0x5a48
jge 0x1002c25d
push dword [ebp - 0x21c]
call fcn.10079103
pop ecx
push 1
lea ecx, [ebp - 0x1e8]
call fcn.100267ee
mov dword [eax], 0x1d
jmp 0x1002c296
push 1
lea ecx, [ebp - 0x1e8]
call fcn.100267ee
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1e8]
call fcn.100267ee
cmp dword [eax], 4
jne 0x1002c2f7
mov dword [ebp - 0x29c], 0x2526041
mov dword [ebp - 0x298], 0x2526041
mov dword [ebp - 0x294], 0x2526041
mov dword [ebp - 0x290], 0x2526041
push 1
push 0
push 0x1ad4
call fcn.1002a55e
add esp, 0xc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x29c], 0
je 0x1002c2f2
jmp 0x1002c2f7
jmp 0x1002c272
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e8]
call fcn.100267d2
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0xb0]
call fcn.100271b2
jmp 0x1002c31f
lea ecx, [ebp - 0x34]
call fcn.1004ba70
lea eax, [ebp - 0x2e0]
push eax
mov ecx, dword [ebp - 0xb0]
call fcn.100271c6
push eax
lea ecx, [ebp - 0x34]
call fcn.10026a7f
movzx eax, al
test eax, eax
je 0x1002ced2
mov dword [ebp - 0x274], 0x96dd1e1e
mov dword [ebp - 0x270], 0x96dd1e1e
mov dword [ebp - 0x26c], 0x96dd1e1e
mov dword [ebp - 0x268], 0x96dd1e1e
lea ecx, [ebp - 0xa5]
call fcn.100267fd
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x314]
call fcn.10026800
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd8]
call fcn.100267ac
mov dword [ebp - 4], 2
mov dword [ebp - 0x130], 0x5405
mov dword [ebp - 0x1f8], 0x10009e34
cmp dword [ebp - 0x130], 0x558e
jle 0x1002c448
and dword [ebp - 0x48], 0
jmp 0x1002c3d6
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x739c
jge 0x1002c448
and dword [ebp - 0x4c], 0
jmp 0x1002c3ec
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x6dac
jge 0x1002c446
mov eax, dword [ebp - 0x48]
xor eax, dword [ebp - 0x4c]
cdq
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], edx
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x35c]
call fcn.100127de
pop ecx
pop ecx
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x198]
call fcn.10026416
push eax
call fcn.10079103
pop ecx
lea ecx, [ebp - 0x35c]
call fcn.1002640c
jmp 0x1002c3e5
jmp 0x1002c3cf
mov dword [ebp - 0x54], 0xfffffff6
cmp dword [ebp - 0x130], 0x531f
jge 0x1002c467
push dword [ebp - 0x1f8]
call fcn.10079103
pop ecx
mov dword [ebp - 0xf0], 0xffffffff
push 0
lea eax, [ebp - 0xd8]
push eax
push 0
call fcn.1002e261
add esp, 0xc
mov dword [ebp - 0x54], 3
jmp 0x1002c494
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1002ca08
mov dword [ebp - 0x20], 0x121ac488
mov dword [ebp - 0x20], 0
jmp 0x1002c4b5
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x1002ca03
mov dword [ebp - 0x2d8], 0x10094604
mov dword [ebp - 0x10], 0
push 0
push 0x76e
lea eax, [ebp - 0x10]
push eax
push 1
push 0x107d
call fcn.1002a5ec
add esp, 0x14
mov dword [ebp - 0x10], 3
jmp 0x1002c4fa
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002c9fe
mov dword [ebp - 0x260], 2
mov dword [ebp - 0x25c], 2
mov dword [ebp - 0x258], 2
mov dword [ebp - 0x254], 2
lea ecx, [ebp - 0xb1]
call fcn.100267fd
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x30c]
call fcn.10026800
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2d4]
call fcn.100267ac
mov byte [ebp - 4], 3
mov dword [ebp - 0xe0], 0x2c72
mov dword [ebp - 0x1a0], 0x10009e68
cmp dword [ebp - 0xe0], 0x2ebc
jle 0x1002c5ea
and dword [ebp - 0x5c], 0
jmp 0x1002c592
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xc8e
jge 0x1002c5e0
and dword [ebp - 0x64], 0
jmp 0x1002c5a8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x79a2
jge 0x1002c5de
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x64]
shl eax, cl
cdq
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], edx
push dword [ebp - 0x214]
push dword [ebp - 0x218]
mov ecx, 0x10094c18
call fcn.10026436
jmp 0x1002c5a1
jmp 0x1002c58b
push 0
push 0
call dword [sym.imp.USER32.dll_SetMenu]
cmp dword [ebp - 0xe0], 0x2b19
jge 0x1002c606
mov edx, dword [ebp - 0x1a0]
mov ecx, 0x10094c18
call fcn.10029186
mov dword [ebp - 0x14], 0
jmp 0x1002c616
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002c629
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6c], 1
jmp 0x1002c60f
mov dword [ebp - 0x14], 0
jmp 0x1002c639
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002c64f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2b8], 0xb2a93f04
jmp 0x1002c632
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6c], 3
jmp 0x1002c674
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
jl 0x1002c9ea
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x118], 0x3a6e
mov dword [ebp - 0x1a8], 0x10009eb0
cmp dword [ebp - 0x118], 0x3c07
jle 0x1002c779
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
and dword [ebp - 0x74], 0
jmp 0x1002c6cb
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x6f70
jge 0x1002c779
and dword [ebp - 0x7c], 0
jmp 0x1002c6e5
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x541a
jge 0x1002c774
and dword [ebp - 0x94], 0
jmp 0x1002c708
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x7fa7
jge 0x1002c76f
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x7c]
sar eax, cl
mov ecx, dword [ebp - 0x94]
shl eax, cl
cdq
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], edx
push dword [ebp - 0x220]
push dword [ebp - 0x224]
lea ecx, [ebp - 0x38c]
call fcn.100127de
pop ecx
pop ecx
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x234]
call fcn.10026416
push eax
call fcn.10079103
pop ecx
lea ecx, [ebp - 0x38c]
call fcn.1002640c
jmp 0x1002c6fb
jmp 0x1002c6de
jmp 0x1002c6c4
mov dword [ebp - 0x138], 0x61e33ecd
cmp dword [ebp - 0x118], 0x36d8
jge 0x1002c79b
push dword [ebp - 0x1a8]
call fcn.10079103
pop ecx
mov dword [ebp - 0x2c], 0
jmp 0x1002c7ab
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x1002c9e5
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x20], eax
jg 0x1002c7c9
mov dword [ebp - 0xe8], 1
jmp 0x1002c7d0
and dword [ebp - 0xe8], 0
imul eax, dword [ebp - 0xe8], 0xb2c4
cmp eax, dword [ebp - 0x20]
jle 0x1002c7eb
mov dword [ebp - 0x140], 1
jmp 0x1002c7f2
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xf0], eax
mov esi, dword [ebp - 0xf0]
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd8]
call fcn.100267ee
cmp esi, dword [eax]
je 0x1002c822
mov dword [ebp - 0x120], 1
jmp 0x1002c829
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x120], eax
jg 0x1002c840
mov dword [ebp - 0xf8], 1
jmp 0x1002c847
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x100], eax
push 2
lea ecx, [ebp - 0x2d4]
call fcn.100267ee
mov ecx, dword [ebp - 0x100]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x138], eax
mov esi, dword [ebp - 0x138]
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd8]
call fcn.100267ee
mov eax, dword [eax]
add eax, dword [ebp - 0x100]
cmp eax, esi
jge 0x1002c89d
mov dword [ebp - 0x128], 1
jmp 0x1002c8a4
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 0x1fa6
jl 0x1002c8cc
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd8]
call fcn.100267ee
cmp dword [eax], 0
jne 0x1002c8cc
and dword [ebp - 0x108], 0
jmp 0x1002c8d6
mov dword [ebp - 0x108], 1
cmp dword [ebp - 0x108], 0xb5e4
jne 0x1002c8ee
mov dword [ebp - 0xbc], 1
jmp 0x1002c8f5
and dword [ebp - 0xbc], 0
mov esi, dword [ebp - 0xbc]
sub esi, 0x781b
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd8]
call fcn.100267ee
cmp esi, dword [eax]
jl 0x1002c91f
mov dword [ebp - 0xc0], 1
jmp 0x1002c926
and dword [ebp - 0xc0], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd8]
call fcn.100267ee
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc0]
je 0x1002c94a
mov dword [ebp - 0xc8], 1
jmp 0x1002c951
and dword [ebp - 0xc8], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xd8]
call fcn.100267ee
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [eax]
jne 0x1002c975
mov dword [ebp - 0xdc], 1
jmp 0x1002c97c
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0x3c5a4a10
jge 0x1002c98e
cmp dword [ebp - 0x20], 0
je 0x1002c9a5
mov dword [ebp - 0x204], 0x5533f2a6
cmp dword [ebp - 0x204], 0
je 0x1002c9a3
jmp 0x1002c9e5
jmp 0x1002c9e0
mov dword [ebp - 0x1b0], 0xffffffff
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x10]
cmp dword [ebp + eax - 0x2b8], ecx
jle 0x1002c9cd
mov dword [ebp - 0xe4], 1
jmp 0x1002c9d4
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1b0], eax
jmp 0x1002c7a4
jmp 0x1002c65f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2d4]
call fcn.100267d2
jmp 0x1002c4f3
jmp 0x1002c4ae
jmp 0x1002c48d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.100267d2
lea ecx, [ebp - 0x34]
call fcn.100272ac
movsx eax, byte [eax]
cmp eax, 0x30
jl 0x1002ca56
lea ecx, [ebp - 0x34]
call fcn.100272ac
movsx eax, byte [eax]
cmp eax, 0x39
jg 0x1002ca56
mov eax, dword [ebp - 0x44]
imul esi, dword [eax], 0xa
lea ecx, [ebp - 0x34]
call fcn.100272ac
movsx eax, byte [eax]
lea eax, [esi + eax - 0x30]
mov ecx, dword [ebp - 0x44]
mov dword [ecx], eax
jmp 0x1002cecd
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x13c], 0x5f4b3f4b
push 4
lea ecx, [ebp - 0x280]
call fcn.10026750
mov dword [ebp - 4], 4
mov dword [ebp - 0x1b8], 9
mov dword [ebp - 0x210], 0xfffb
mov dword [ebp - 0x1c0], 0xed4d
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x2b0]
push eax
push 0
push 0x2301
call fcn.1002d667
add esp, 0x10
mov dword [ebp - 0x1c], 0xc
jmp 0x1002cac6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
jne 0x1002cd39
push 2
lea ecx, [ebp - 0x158]
call fcn.10026750
mov byte [ebp - 4], 5
push 2
lea ecx, [ebp - 0x28c]
call fcn.10026750
mov byte [ebp - 4], 6
lea eax, [ebp - 0x28]
push eax
push 0
lea eax, [ebp - 0x158]
push eax
call fcn.1002d4e5
add esp, 0xc
mov dword [ebp - 0x28], 0
jmp 0x1002cb17
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002cb2d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x304], 5
jmp 0x1002cb10
push 0x5dcd
push 0x4552
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x28c]
push eax
mov dl, 1
mov cl, 1
call fcn.1002a1bb
add esp, 0x10
push 0
lea ecx, [ebp - 0x158]
call fcn.100267ee
and dword [eax], 0
jmp 0x1002cb84
push 0
lea ecx, [ebp - 0x158]
call fcn.100267ee
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xec]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x158]
call fcn.100267ee
cmp dword [eax], 9
jg 0x1002cd16
mov dword [ebp - 0x38], 0xfff7
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x304], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xf4]
jle 0x1002cbd4
mov dword [ebp - 0xfc], 1
jmp 0x1002cbdb
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0x2280643b
jne 0x1002cbf3
mov dword [ebp - 0x104], 1
jmp 0x1002cbfa
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
inc eax
cmp eax, 0x4dde9a
je 0x1002cc14
mov dword [ebp - 0x10c], 1
jmp 0x1002cc1b
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x10c], eax
je 0x1002cc32
mov dword [ebp - 0x228], 1
jmp 0x1002cc39
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x114], eax
push 0
lea ecx, [ebp - 0x28c]
call fcn.100267ee
mov ecx, dword [ebp - 0x114]
mov dword [eax], ecx
cmp dword [ebp - 0x114], 0
jne 0x1002cc78
cmp dword [ebp - 0x38], 0
jne 0x1002cc78
and dword [ebp - 0x11c], 0
jmp 0x1002cc82
mov dword [ebp - 0x11c], 1
push 1
lea ecx, [ebp - 0x158]
call fcn.100267ee
mov ecx, dword [ebp - 0x11c]
cmp ecx, dword [eax]
jg 0x1002ccae
mov eax, 0xb969b42c
test eax, eax
je 0x1002ccae
mov dword [ebp - 0x124], 1
jmp 0x1002ccb5
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x124]
je 0x1002ccdb
push 0
lea ecx, [ebp - 0x158]
call fcn.100267ee
cmp dword [eax], 0
jne 0x1002ccdb
and dword [ebp - 0x12c], 0
jmp 0x1002cce5
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x38]
neg eax
cmp eax, dword [ebp - 0x12c]
jle 0x1002ccfe
mov dword [ebp - 0x134], 1
jmp 0x1002cd05
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x13c], eax
jmp 0x1002cb60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28c]
call fcn.100267d2
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.100267d2
jmp 0x1002cabf
mov dword [ebp - 0x144], 0x162f
mov dword [ebp - 0x1d8], 0x10009ef8
cmp dword [ebp - 0x144], 0x1899
jle 0x1002ce09
and dword [ebp - 0x9c], 0
jmp 0x1002cd73
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x494c
jge 0x1002ce09
and dword [ebp - 0xa4], 0
jmp 0x1002cd99
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x4a04
jge 0x1002ce04
and dword [ebp - 0xa0], 0
jmp 0x1002cdbb
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x6415
jge 0x1002ce02
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xa4]
sar eax, cl
mov ecx, dword [ebp - 0xa0]
sar eax, cl
cdq
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], edx
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
mov ecx, 0x10094c18
call fcn.10026436
jmp 0x1002cdae
jmp 0x1002cd8c
jmp 0x1002cd66
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x280]
push eax
push 1
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x13c]
push eax
push 0
push 0x5b9b
push 0x6551
lea eax, [ebp - 0x210]
push eax
push 0x111f
lea eax, [ebp - 0x1c0]
push eax
push 0
call fcn.1002ae3b
add esp, 0x30
cmp dword [ebp - 0x144], 0x12d2
jge 0x1002ce69
mov edx, dword [ebp - 0x1d8]
mov ecx, 0x10094c18
call fcn.10029186
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x280]
call fcn.100267d2
push 0
push 0x717a
push 0x403f
lea eax, [ebp - 0x44]
push eax
push 0
push 0x3433
call fcn.1002b2b5
add esp, 0x18
mov dword [ebp - 0x1cc], 0x324ec2e0
push 0
push 0x1c28
lea eax, [ebp - 0x1cc]
push eax
call fcn.1002d4c3
add esp, 0xc
push 0
call fcn.1002e3a5
pop ecx
mov eax, dword [ebp - 0xac]
mov byte [eax], 0
jmp 0x1002d0be
jmp 0x1002c317
push 2
lea ecx, [ebp - 0x2ac]
call fcn.10026750
mov dword [ebp - 4], 7
mov dword [ebp - 0x18], 0
jmp 0x1002cef6
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1002cf12
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2ac]
call fcn.100267ee
mov dword [eax], 0x9b55bb2c
jmp 0x1002ceef
mov dword [ebp - 0x18], 0
jmp 0x1002cf22
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002cf38
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x24c], 1
jmp 0x1002cf1b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x24c], 1
jmp 0x1002cf66
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x24c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24c], 0
jl 0x1002cf9a
mov dword [ebp - 0x1ec], 0x17be1879
push 0
lea eax, [ebp - 0x1ec]
push eax
push 0x17ae
push 0
call fcn.1002aadb
add esp, 0x10
jmp 0x1002cf4b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ac]
call fcn.100267d2
mov eax, dword [ebp - 0xac]
mov byte [eax], 1
jmp 0x1002d0be
jmp 0x1002d0be
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x174], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
movzx eax, byte [eax]
test eax, eax
je 0x1002d05b
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
jmp 0x1002d039
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
cmp dword [eax], 1
jge 0x1002d059
mov eax, dword [ebp - 0x40]
push dword [eax]
mov ecx, dword [ebp - 0x18c]
call fcn.100267ee
mov dword [eax], 0x9725
jmp 0x1002d02e
jmp 0x1002d0be
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0
jmp 0x1002d09e
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 2
jge 0x1002d0be
mov eax, dword [ebp - 0x3c]
push dword [eax]
mov ecx, dword [ebp - 0x160]
call fcn.100267ee
mov dword [eax], 0x7f5aee0c
jmp 0x1002d093
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret