Function at 0x1002b6f6
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005f1d1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x504
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x1002dad1
lea eax, [ebp + 0x14]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x318]
movzx eax, byte [eax]
test eax, eax
je 0x1002da51
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1fc], eax
push 1
lea ecx, [ebp - 0x35c]
call fcn.100100c6
and dword [ebp - 4], 0
push 1
lea ecx, [ebp - 0x344]
call fcn.100100c6
mov byte [ebp - 4], 1
mov dword [ebp - 0x238], 0xfffffffd
mov dword [ebp - 0x220], 0xe39f3faa
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x324], 0xfaa9634d
push 0xf64
push 0
push 0x5c3d
push 0x4d42
push 0x3a88
push 1
push 0x6dba
push 0x2a42
push 0x3a28
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.10028afc
add esp, 0x2c
mov dword [ebp - 0x1bc], 0x2b92
mov dword [ebp - 0x2c8], str.kltw_qkwtjx_yabvvwuq_szn_vufcezm_naki_xqhnepzwl_oyr_gjb_ysqbl
cmp dword [ebp - 0x1bc], 0x2d57
jle 0x1002b89b
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
and dword [ebp - 0xd8], 0
jmp 0x1002b83a
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x7b16
jge 0x1002b89b
and dword [ebp - 0xb4], 0
jmp 0x1002b85c
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x55d4
jge 0x1002b899
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0xb4]
cdq
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], edx
push dword [ebp - 0x284]
push dword [ebp - 0x288]
mov ecx, 0x10079ad8
call fcn.1000fde8
jmp 0x1002b84f
jmp 0x1002b82d
mov byte [ebp - 4], 2
cmp dword [ebp - 0x1bc], 0x2b4c
jge 0x1002b8bb
mov edx, dword [ebp - 0x2c8]
mov ecx, 0x10079ad8
call fcn.10012b8c
jmp 0x1002b8d7
mov dword [ebp - 4], 1
jmp 0x1002b8e7
push 0
push 0x4f8c
push 1
push 0x23d3
push 0x6a04
push 1
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x2d0]
push eax
push 0x4587
push 0x5781
call fcn.10029219
add esp, 0x28
push 1
push 1
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x238]
push eax
push 0x29f6
push 0x6156
push 0x5c72
push 1
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x228]
push eax
push 0x3fc2
call fcn.10028e6e
add esp, 0x30
push 0x2438
push 0x4f44
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x344]
push eax
push 0x71c6
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x324]
push eax
push 0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.10038632
add esp, 0x2c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x344]
call fcn.10010128
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x35c]
call fcn.10010128
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x200], 0x37831e42
mov dword [ebp - 0x150], 9
mov dword [ebp - 0x160], 0xf0dc4b63
push 0x12d4
push 0xecf
push 1
push 0
lea eax, [ebp - 0x200]
push eax
call fcn.100279bb
add esp, 0x14
mov dword [ebp - 0x74], 0
jmp 0x1002ba25
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xfffffffc
jl 0x1002bd24
mov dword [ebp - 0x208], 0x28ad64de
mov dword [ebp - 0xa0], 0
jmp 0x1002ba52
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1002ba6b
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x48], 0
jmp 0x1002ba45
mov dword [ebp - 0xbc], 0
jmp 0x1002ba84
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x1a
jne 0x1002bd1f
mov dword [ebp - 0x140], 0xe4c20f74
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x28], 0
jmp 0x1002bab5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002bacb
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x218], 0xb372ba29
jmp 0x1002baae
mov dword [ebp - 0x28], 0
jmp 0x1002badb
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002baf1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x410], 2
jmp 0x1002bad4
cmp dword [ebp - 0x200], 0
jne 0x1002bc57
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp + eax - 0x218]
jl 0x1002bb1c
mov dword [ebp - 0x20c], 1
jmp 0x1002bb23
and dword [ebp - 0x20c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x20c], eax
jge 0x1002bb41
mov dword [ebp - 0x138], 1
jmp 0x1002bb48
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x138], eax
jge 0x1002bb66
mov dword [ebp - 0x118], 1
jmp 0x1002bb6d
and dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x410], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218]
cmp dword [ebp - 0x118], eax
jge 0x1002bba1
mov dword [ebp - 0x1c0], 1
jmp 0x1002bba8
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x1c0]
jne 0x1002bbcc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0
jne 0x1002bbcc
and dword [ebp - 0x310], 0
jmp 0x1002bbd6
mov dword [ebp - 0x310], 1
mov eax, 0xca25
test eax, eax
jne 0x1002bbf1
mov eax, 0x951f
test eax, eax
jne 0x1002bbf1
and dword [ebp - 0x230], 0
jmp 0x1002bbfb
mov dword [ebp - 0x230], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x230]
je 0x1002bc25
mov dword [ebp - 0x148], 1
jmp 0x1002bc2c
and dword [ebp - 0x148], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x148]
sub ecx, dword [ebp + eax - 0x218]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x218], ecx
jl 0x1002bc57
and dword [ebp - 0x1c8], 0
jmp 0x1002bc61
mov dword [ebp - 0x1c8], 1
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x1002bc8b
mov eax, 0x52324067
test eax, eax
je 0x1002bc8b
mov dword [ebp - 0x158], 1
jmp 0x1002bc92
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x158], eax
jne 0x1002bcac
mov dword [ebp - 0x1d0], 1
jmp 0x1002bcb3
and dword [ebp - 0x1d0], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x1d0], 0
cmp ecx, dword [ebp + eax - 0x218]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x270]
sub ecx, dword [ebp + eax - 0x48]
mov dword [ebp - 0x160], ecx
push 0x3555
push 0
push 0x389
push 1
push 0x7383
push 0x88
push 0x4cdf
lea eax, [ebp - 0x160]
push eax
push 0x5ea6
push 0x5582
push 0x3397
push 1
call fcn.1002a1b7
add esp, 0x30
jmp 0x1002ba77
jmp 0x1002ba1e
mov eax, dword [0x101424a0]
and eax, 1
jne 0x1002bd5b
mov eax, dword [0x101424a0]
or eax, 1
mov dword [0x101424a0], eax
mov dword [ebp - 4], 4
mov ecx, 0x10142530
call fcn.100103db
push 0x1005fbd2
call fcn.10047269
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xa8], 0
jmp 0x1002bd74
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x1002bd90
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xc4], 0
jmp 0x1002bd67
push 0x1115
push 0
call fcn.1003933f
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc4], 0
jmp 0x1002bdcc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0x15
jl 0x1002be0d
mov byte [ebp - 0x31], 0
push 1
push 0x3732
push 1
push 0x7653
push 0x26a0
lea eax, [ebp - 0x31]
push eax
push 0x7702
push 0x60cb
push 1
call fcn.10029031
add esp, 0x24
jmp 0x1002bdb1
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x380]
call fcn.1000fefd
mov dword [ebp - 4], 5
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x380]
call fcn.10010989
push dword [eax]
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x380]
call fcn.1001099d
push dword [eax]
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x380]
call fcn.10010989
push dword [eax]
mov edx, 0x100276ca
lea ecx, [ebp - 0x3f4]
call fcn.1003b0cc
add esp, 0xc
lea ecx, [ebp - 0x380]
call fcn.10027655
mov dword [ebp - 0x1e4], eax
movzx eax, byte [0x10141016]
test eax, eax
je 0x1002c587
mov ecx, 0x10142530
call fcn.1003aadc
movzx eax, al
test eax, eax
jne 0x1002c587
push 1
push 0x7275
push 0x4af3
push 1
push 0x23f2
push 0x61cc
push 0xc89
call fcn.10027aa5
add esp, 0x1c
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x224]
push eax
mov ecx, 0x10142530
call fcn.100103b3
lea eax, [ebp - 0x424]
push eax
mov ecx, 0x10142530
call fcn.100103a5
push eax
lea ecx, [ebp - 0x224]
call fcn.100103c8
movzx eax, al
test eax, eax
je 0x1002c587
mov dword [ebp - 0x40], 1
push 3
lea ecx, [ebp - 0x350]
call fcn.100100c6
mov byte [ebp - 4], 6
push 4
lea ecx, [ebp - 0x3c0]
call fcn.100100c6
mov byte [ebp - 4], 7
push 1
push 1
lea eax, [ebp - 0x350]
push eax
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.10027f39
add esp, 0x14
mov dword [ebp - 0x38], 0
jmp 0x1002bf60
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1002bf76
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xcc], 0xffffffff
jmp 0x1002bf59
push 0x5495
lea eax, [ebp - 0x38]
push eax
push 0x481b
push 0x4cdb
push 1
push 1
lea eax, [ebp - 0x3c0]
push eax
call fcn.10027d25
add esp, 0x1c
mov dword [ebp - 0x40], 0x12
jmp 0x1002bfac
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x1c
jge 0x1002c53f
mov dword [ebp - 0x20], 0x4fc37f20
mov dword [ebp - 0x394], 0x8efb6675
mov dword [ebp - 0x390], 0x8efb6675
mov dword [ebp - 0x38c], 0x8efb6675
mov dword [ebp - 0x388], 0x8efb6675
lea ecx, [ebp - 0x10e]
call fcn.10010153
push eax
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x394]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.10010156
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x408]
call fcn.10010102
mov byte [ebp - 4], 8
mov dword [ebp - 0x94], 0
jmp 0x1002c037
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1002c053
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x100], 0x7ad95e17
jmp 0x1002c02a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x100], 0
jmp 0x1002c081
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x100], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 5
jg 0x1002c374
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x320], 0xfffffff9
mov dword [ebp - 0x1c], 0xfffffff0
jmp 0x1002c0b6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
je 0x1002c36f
mov dword [ebp - 0x30], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x30], 0xfff6
jb 0x1002c0ee
mov dword [ebp - 0x274], 1
jmp 0x1002c0f5
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x40], 0xffffffff
je 0x1002c107
mov dword [ebp - 0x22c], 1
jmp 0x1002c10e
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
neg eax
je 0x1002c124
mov dword [ebp - 0x168], 1
jmp 0x1002c12b
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 3
je 0x1002c140
mov dword [ebp - 0x1d8], 1
jmp 0x1002c147
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
sub eax, 0x4a30f524
cmp eax, dword [ebp - 0x30]
jne 0x1002c163
mov dword [ebp - 0x170], 1
jmp 0x1002c16a
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x170], eax
jne 0x1002c181
mov dword [ebp - 0x210], 1
jmp 0x1002c188
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x210], eax
jl 0x1002c19f
mov dword [ebp - 0x178], 1
jmp 0x1002c1a6
and dword [ebp - 0x178], 0
push 8
pop eax
sub eax, dword [ebp - 0x178]
je 0x1002c1c2
xor eax, eax
inc eax
je 0x1002c1c2
mov dword [ebp - 0x1e0], 1
jmp 0x1002c1c9
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1e0], eax
jl 0x1002c1e0
mov dword [ebp - 0x31c], 1
jmp 0x1002c1e7
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x1002c208
mov dword [ebp - 0x180], 1
jmp 0x1002c20f
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x428], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x460], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp eax, dword [ebp - 0x30]
jl 0x1002c255
cmp dword [ebp - 0x1c], 0
jne 0x1002c255
and dword [ebp - 0x278], 0
jmp 0x1002c25f
mov dword [ebp - 0x278], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x100], 0xb826
jle 0x1002c27e
mov dword [ebp - 0x2f8], 1
jmp 0x1002c285
and dword [ebp - 0x2f8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x1002c2b7
mov dword [ebp - 0x234], 1
jmp 0x1002c2be
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x234]
imul eax, eax, 0xffff
cmp eax, 0xd3f0
jge 0x1002c2e1
mov dword [ebp - 0x280], 1
jmp 0x1002c2e8
and dword [ebp - 0x280], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x20], 0xbf9f
je 0x1002c30f
mov dword [ebp - 0x120], 1
jmp 0x1002c316
and dword [ebp - 0x120], 0
push 2
lea ecx, [ebp - 0x350]
call fcn.10010144
mov ecx, dword [ebp - 0x120]
mov dword [eax], ecx
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x120], eax
jne 0x1002c345
mov dword [ebp - 0x188], 1
jmp 0x1002c34c
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax - 0xcc], ecx
cmp dword [ebp - 0x30], 0
je 0x1002c36a
jmp 0x1002c0af
jmp 0x1002c0af
jmp 0x1002c066
mov dword [ebp - 0x20], 0
jmp 0x1002c384
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1002c52b
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xcc], 0
jne 0x1002c3a8
xor eax, eax
jne 0x1002c3a8
and dword [ebp - 0x1a8], 0
jmp 0x1002c3b2
mov dword [ebp - 0x1a8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x468], eax
push 0
lea ecx, [ebp - 0x408]
call fcn.10010144
cmp dword [eax], 0
jne 0x1002c3e6
cmp dword [ebp - 0x20], 0
jne 0x1002c3e6
and dword [ebp - 0x1e8], 0
jmp 0x1002c3f0
mov dword [ebp - 0x1e8], 1
cmp dword [ebp - 0x1e8], 0xfffffffd
jae 0x1002c405
mov dword [ebp - 0x190], 1
jmp 0x1002c40c
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
neg eax
cmp dword [ebp - 0x40], eax
jg 0x1002c425
mov dword [ebp - 0x21c], 1
jmp 0x1002c42c
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp - 0x21c], eax
jle 0x1002c44d
mov dword [ebp - 0x198], 1
jmp 0x1002c454
and dword [ebp - 0x198], 0
push 2
lea ecx, [ebp - 0x350]
call fcn.10010144
mov ecx, dword [ebp - 0x198]
cmp ecx, dword [eax]
jg 0x1002c477
mov dword [ebp - 0x1f0], 1
jmp 0x1002c47e
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xcc]
cmp dword [ebp - 0x1f0], eax
jge 0x1002c49c
mov dword [ebp - 0x1a0], 1
jmp 0x1002c4a3
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 0x780915d2
jne 0x1002c4bb
mov dword [ebp - 0x23c], 1
jmp 0x1002c4c2
and dword [ebp - 0x23c], 0
imul eax, dword [ebp - 0x23c], 0x6db7
test eax, eax
je 0x1002c4ee
push 3
lea ecx, [ebp - 0x3c0]
call fcn.10010144
cmp dword [eax], 0
je 0x1002c4ee
mov dword [ebp - 0x1f8], 1
jmp 0x1002c4f5
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x1f8]
jge 0x1002c50f
mov dword [ebp - 0x1b0], 1
jmp 0x1002c516
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xcc], ecx
jmp 0x1002c37d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x408]
call fcn.10010128
jmp 0x1002bfa5
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3c0]
call fcn.10010128
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x350]
call fcn.10010128
lea ecx, [ebp - 0x224]
call fcn.1003aae5
mov ecx, dword [ebp - 0x1fc]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.1000ff5d
jmp 0x1002db0d
and dword [ebp - 0x50], 0
push 2
lea ecx, [ebp - 0x10c]
call fcn.100100c6
mov byte [ebp - 4], 9
push 1
lea ecx, [ebp - 0x248]
call fcn.100100c6
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xb8], 0x18c9a01c
mov dword [ebp - 0x124], 0x8af95342
mov dword [ebp - 0x300], 0xc295a527
mov dword [ebp - 0x298], 0xd734
mov dword [ebp - 0x450], 0xa97a
mov dword [ebp - 0x24], 0
jmp 0x1002c5ef
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1002c608
push dword [ebp - 0x24]
lea ecx, [ebp - 0x10c]
call fcn.10010144
and dword [eax], 0
jmp 0x1002c5e8
lea eax, [ebp - 0x248]
push eax
push 0
lea eax, [ebp - 0x24]
push eax
push 1
call fcn.10029ffc
add esp, 0x10
mov dword [ebp - 0x24], 0
jmp 0x1002c62f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002c645
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x17c], 0xc4779d44
jmp 0x1002c628
push 1
lea ecx, [ebp - 0x10c]
call fcn.10010144
push 1
lea ecx, [ebp - 0x10c]
call fcn.10010144
cmp dword [eax], 0xffffffff
jl 0x1002c670
mov dword [ebp - 0x1b8], 1
jmp 0x1002c677
and dword [ebp - 0x1b8], 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.10010144
mov ecx, dword [ebp - 0x1b8]
cmp ecx, dword [eax]
jne 0x1002c69a
mov dword [ebp - 0x130], 1
jmp 0x1002c6a1
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0xfffffffa
jbe 0x1002c6b6
mov dword [ebp - 0x134], 1
jmp 0x1002c6bd
and dword [ebp - 0x134], 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.10010144
mov esi, dword [ebp - 0x134]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x248]
call fcn.10010144
mov dword [eax], esi
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x458], eax
push 0
lea ecx, [ebp - 0x248]
call fcn.10010144
cmp dword [eax], 0xb09b
jle 0x1002c72c
push 0
lea ecx, [ebp - 0x10c]
call fcn.10010144
cmp dword [eax], 0
je 0x1002c72c
mov dword [ebp - 0x13c], 1
jmp 0x1002c733
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0x13c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x17c], eax
push 0
lea ecx, [ebp - 0x248]
call fcn.10010144
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x124], eax
xor eax, eax
inc eax
je 0x1002c787
push 0
lea ecx, [ebp - 0x248]
call fcn.10010144
cmp dword [eax], 0
je 0x1002c787
mov dword [ebp - 0x144], 1
jmp 0x1002c78e
and dword [ebp - 0x144], 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.10010144
mov ecx, dword [ebp - 0x144]
cmp ecx, dword [eax]
jge 0x1002c7b1
mov dword [ebp - 0x28c], 1
jmp 0x1002c7b8
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x420], eax
push 0
lea ecx, [ebp - 0x10c]
call fcn.10010144
mov esi, eax
push 0
lea ecx, [ebp - 0x10c]
call fcn.10010144
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x1002c7fb
cmp dword [ebp - 0x300], 0
je 0x1002c7fb
mov dword [ebp - 0x14c], 1
jmp 0x1002c802
and dword [ebp - 0x14c], 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.10010144
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [eax]
jne 0x1002c825
mov dword [ebp - 0x128], 1
jmp 0x1002c82c
and dword [ebp - 0x128], 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.10010144
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
cmp dword [ebp - 0x128], 0
je 0x1002c97e
mov dword [ebp - 0x114], 0x96f77d90
mov dword [ebp - 0x2c], 9
cmp dword [ebp - 0x298], 0
je 0x1002c87e
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2c]
test eax, eax
jle 0x1002c87e
mov dword [ebp - 0x154], 1
jmp 0x1002c885
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x154], eax
jl 0x1002c89c
mov dword [ebp - 0x15c], 1
jmp 0x1002c8a3
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x15c], eax
jl 0x1002c8ba
mov dword [ebp - 0x164], 1
jmp 0x1002c8c1
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x164]
cmp eax, 0x8647
jge 0x1002c8dd
mov dword [ebp - 0x16c], 1
jmp 0x1002c8e4
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x16c]
cmp eax, 0xe11771b7
jne 0x1002c910
mov dword [ebp - 0x174], 1
jmp 0x1002c917
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
inc eax
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x184], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x184]
mov dword [ebp + eax - 0x17c], ecx
push 0
lea ecx, [ebp - 0x248]
call fcn.10010144
mov eax, dword [eax]
cmp eax, dword [ebp - 0x184]
jge 0x1002c95d
mov dword [ebp - 0x18c], 1
jmp 0x1002c964
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
jmp 0x1002c9a3
mov byte [ebp - 0x32], 0
lea eax, [ebp - 0x32]
push eax
push 1
push 1
push 0x644f
push 0
push 0x4e18
push 0x1560
call fcn.10029935
add esp, 0x1c
push 0x79d3
push 0x383d
push 1
push 0x294d
push 1
call fcn.10029191
add esp, 0x14
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x248]
call fcn.10010128
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x10c]
call fcn.10010128
lea eax, [ebp - 0x380]
push eax
call fcn.1002794d
pop ecx
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x1002d5c7
push 0x7258
push 0x7a35
push 0
call fcn.1002e3d1
add esp, 0xc
mov dword [ebp - 0x1d4], 0x6f8b
mov dword [ebp - 0x304], str.pbcnc_ykevubjm_mzy_jndghprjd_xoq_axugihhd_krckdv_ggxamn
cmp dword [ebp - 0x1d4], 0x702f
jle 0x1002cb4b
and dword [ebp - 0xe0], 0
jmp 0x1002ca44
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x4283
jge 0x1002cb3c
and dword [ebp - 0xc8], 0
jmp 0x1002ca6a
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x7a2c
jge 0x1002cb37
and dword [ebp - 0xf4], 0
jmp 0x1002ca90
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x76f3
jge 0x1002cb32
and dword [ebp - 0xc0], 0
jmp 0x1002cab6
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x2a4d
jge 0x1002cb2d
mov ecx, dword [ebp - 0xf4]
add ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xe0]
cdq
idiv dword [ebp - 0xc8]
and edx, ecx
mov eax, edx
cdq
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
push dword [ebp - 0x290]
push dword [ebp - 0x294]
lea ecx, [ebp - 0x514]
call fcn.10001b3f
pop ecx
pop ecx
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x268]
call fcn.1000fdc8
push eax
call fcn.10047293
pop ecx
lea ecx, [ebp - 0x514]
call fcn.1000fdbe
jmp 0x1002caa9
jmp 0x1002ca83
jmp 0x1002ca5d
jmp 0x1002ca37
push 0
push 0x110a
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
cmp dword [0x10141018], 0
jne 0x1002d54b
push 4
lea ecx, [ebp - 0x368]
call fcn.100100c6
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x3a8], 0x8e5ccc90
mov dword [ebp - 0x3a4], 0x8e5ccc90
mov dword [ebp - 0x3a0], 0x8e5ccc90
mov dword [ebp - 0x39c], 0x8e5ccc90
lea ecx, [ebp - 0x10d]
call fcn.10010153
push eax
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x48c]
call fcn.10010156
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x254]
call fcn.10010102
mov byte [ebp - 4], 0xc
push 1
lea eax, [ebp - 0x3f0]
push eax
push 1
push 0x1589
push 0x73b2
push 1
push 0x4667
push 0x3039
push 0x4ee3
lea eax, [ebp - 0x368]
push eax
call fcn.10029219
add esp, 0x28
push 2
lea ecx, [ebp - 0x254]
call fcn.10010144
and dword [eax], 0
jmp 0x1002cc35
push 2
lea ecx, [ebp - 0x254]
call fcn.10010144
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x194]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x254]
call fcn.10010144
cmp dword [eax], 3
jg 0x1002cd7f
mov dword [ebp - 0x11c], 6
mov dword [ebp - 0x1ac], 0xfffffffd
mov dword [ebp - 0x308], 0
mov dword [ebp - 0xf0], 0
jmp 0x1002cc82
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x1002cc9e
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x2a4], 0xf42c
jmp 0x1002cc75
push 2
lea ecx, [ebp - 0x254]
call fcn.10010144
push dword [eax]
lea ecx, [ebp - 0x368]
call fcn.10010144
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
mov esi, dword [ebp - 0x11c]
push 2
lea ecx, [ebp - 0x254]
call fcn.10010144
push dword [eax]
lea ecx, [ebp - 0x368]
call fcn.10010144
cmp dword [eax], esi
jne 0x1002cd03
push 0
lea ecx, [ebp - 0x254]
call fcn.10010144
mov ecx, 0x11023dcd
sub ecx, dword [eax]
jne 0x1002cd03
cmp dword [ebp - 0x11c], 0
je 0x1002cd1f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a4], 0
je 0x1002cd1f
mov dword [ebp - 0x19c], 1
jmp 0x1002cd26
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0xad67a4be
ja 0x1002cd3e
mov dword [ebp - 0x1a4], 1
jmp 0x1002cd45
and dword [ebp - 0x1a4], 0
imul eax, dword [ebp - 0x1a4], 0xad72
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x308], eax
push 0x748e
push 0x5882
push 0x6a60
push 0
call fcn.10038f9f
add esp, 0x10
jmp 0x1002cc11
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x254]
call fcn.10010128
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x368]
call fcn.10010128
mov dword [ebp - 0x1b4], 0x3170
mov dword [ebp - 0x2b0], str.mzcnc_ykbghqh_cprauaxqx_bqwjzov
cmp dword [ebp - 0x1b4], 0x3182
jle 0x1002ce34
and dword [ebp - 0xd0], 0
jmp 0x1002cdd3
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x615c
jge 0x1002ce34
and dword [ebp - 0xe8], 0
jmp 0x1002cdf5
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x3dad
jge 0x1002ce32
mov eax, dword [ebp - 0xd0]
xor eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], edx
push dword [ebp - 0x29c]
push dword [ebp - 0x2a0]
mov ecx, 0x10079ad8
call fcn.1000fde8
jmp 0x1002cde8
jmp 0x1002cdc6
mov byte [ebp - 0x90], 0xa
mov byte [ebp - 0x8f], 0x80
mov byte [ebp - 0x8e], 6
mov byte [ebp - 0x8d], 0x5f
mov byte [ebp - 0x8c], 0
mov byte [ebp - 0x8b], 0x78
mov byte [ebp - 0x8a], 7
mov byte [ebp - 0x89], 0x79
mov byte [ebp - 0x88], 9
mov byte [ebp - 0x87], 0x56
mov byte [ebp - 0x86], 4
mov byte [ebp - 0x85], 1
mov byte [ebp - 0x84], 8
mov byte [ebp - 0x83], 0x4b
mov byte [ebp - 0x82], 3
mov byte [ebp - 0x81], 0x40
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x7f], 0xb
mov byte [ebp - 0x7e], 0xb
mov byte [ebp - 0x7d], 9
mov byte [ebp - 0x7c], 5
mov byte [ebp - 0x7b], 0
mov byte [ebp - 0x7a], 3
mov byte [ebp - 0x79], 0xa1
mov byte [ebp - 0x78], 0x43
mov byte [ebp - 0x77], 0xec
mov byte [ebp - 0x76], 2
mov byte [ebp - 0x75], 0x1e
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x1b4], 0x2e78
jge 0x1002cef4
mov edx, dword [ebp - 0x2b0]
mov ecx, 0x10079ad8
call fcn.10012b8c
jmp 0x1002cf10
mov dword [ebp - 4], 5
jmp 0x1002cf20
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x90]
and eax, 0xec
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x90]
or ecx, 0xec
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x90]
mov word [ebp + eax*2 - 0x3e8], cx
mov dword [ebp - 0x18], 2
and dword [ebp - 0x54], 0
jmp 0x1002cf74
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1c
jae 0x1002d05f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x90]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1002cfbb
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x90]
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x90]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1002cf6c
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x54]
movzx eax, byte [ebp + eax - 0x92]
movzx eax, word [ebp + eax*2 - 0x3e8]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x8f]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x54]
movzx eax, byte [ebp + eax - 0x92]
movzx eax, word [ebp + eax*2 - 0x3e8]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x8f]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x54]
movzx eax, byte [ebp + eax - 0x92]
movzx eax, word [ebp + eax*2 - 0x3e8]
mov esi, dword [ebp - 0x18]
movzx esi, byte [ebp + esi - 0x8f]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x90]
mov word [ebp + eax*2 - 0x3e8], si
lea eax, [ebp - 0x54]
push eax
push 1
push 0x5c86
push 0x6269
push 0
push 0x35b6
call fcn.1002aa7e
add esp, 0x18
jmp 0x1002cf6c
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x3e8], cx
push 1
lea ecx, [ebp - 0x3cc]
call fcn.100100c6
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2cc], 6
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x2c4], 1
mov dword [ebp - 0x1c4], 0xfffffffe
mov dword [ebp - 0x2f4], 1
mov dword [ebp - 0x12c], 0x5361
mov dword [ebp - 0x2bc], str.qzm_qozvmdr_xizc_gfxepya_rsoejih
cmp dword [ebp - 0x12c], 0x5737
jle 0x1002d1ab
and dword [ebp - 0x9c], 0
jmp 0x1002d0ec
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x5f3b
jge 0x1002d1ab
and dword [ebp - 0xb0], 0
jmp 0x1002d112
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x661f
jge 0x1002d1a6
and dword [ebp - 0x98], 0
jmp 0x1002d138
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x3bf
jge 0x1002d1a1
mov eax, dword [ebp - 0xb0]
and eax, dword [ebp - 0x98]
xor eax, dword [ebp - 0x9c]
cdq
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], edx
push dword [ebp - 0x2a8]
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x4fc]
call fcn.10001b3f
pop ecx
pop ecx
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x328]
call fcn.1000fdc8
push eax
call fcn.10047293
pop ecx
lea ecx, [ebp - 0x4fc]
call fcn.1000fdbe
jmp 0x1002d12b
jmp 0x1002d105
jmp 0x1002d0df
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x12c], 0x5315
jge 0x1002d1c7
push dword [ebp - 0x2bc]
call fcn.10047293
pop ecx
jmp 0x1002d1e3
mov dword [ebp - 4], 0xf
jmp 0x1002d1f3
mov dword [ebp - 0xa4], 0
jmp 0x1002d20c
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x1002d22e
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x3cc]
call fcn.10010144
mov dword [eax], 0x44555950
jmp 0x1002d1ff
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2c4]
push eax
push 1
lea eax, [ebp - 0x3cc]
push eax
push 0x34f3
push 1
lea eax, [ebp - 0x2f4]
push eax
push 0x5aac
lea eax, [ebp - 0x1c4]
push eax
push 0x1a43
lea eax, [ebp - 0x2cc]
push eax
call fcn.100294ac
add esp, 0x2c
push 0x6bf0
push 0x1528
push 1
push 1
push 0x1924
lea eax, [ebp - 0x1c4]
push eax
call fcn.10029839
add esp, 0x18
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3cc]
call fcn.10010128
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x4e4]
call fcn.1001d3bd
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 4], 0x12
push dword [ebp - 0x2d4]
call fcn.1002794d
pop ecx
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4e4]
call fcn.1000ff5d
and dword [ebp - 0xac], 0
jmp 0x1002d303
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xd
jae 0x1002d31e
xor eax, eax
mov ecx, dword [ebp - 0xac]
mov word [ebp + ecx*2 - 0x3e8], ax
jmp 0x1002d2f6
push 0x5b45
push 1
push 1
push 0x45f9
push 1
push 0x1611
push 0x7cad
call fcn.10029935
add esp, 0x1c
cmp dword [ebp - 0x1cc], 0
je 0x1002d54b
mov byte [ebp - 0x70], 0
mov byte [ebp - 0x6f], 0x53
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x6d], 0xb2
mov byte [ebp - 0x6c], 8
mov byte [ebp - 0x6b], 0x2d
mov byte [ebp - 0x6a], 9
mov byte [ebp - 0x69], 0x13
mov byte [ebp - 0x68], 0xb
mov byte [ebp - 0x67], 0x25
mov byte [ebp - 0x66], 1
mov byte [ebp - 0x65], 0x38
mov byte [ebp - 0x64], 5
mov byte [ebp - 0x63], 6
mov byte [ebp - 0x62], 4
mov byte [ebp - 0x61], 0x25
mov byte [ebp - 0x60], 3
mov byte [ebp - 0x5f], 0x28
mov byte [ebp - 0x5e], 0xa
mov byte [ebp - 0x5d], 0x1d
mov byte [ebp - 0x5c], 2
mov byte [ebp - 0x5b], 0x18
mov byte [ebp - 0x5a], 7
mov byte [ebp - 0x59], 0x13
mov byte [ebp - 0x58], 6
mov byte [ebp - 0x57], 0x10
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x70]
and eax, 0x1f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x70]
or ecx, 0x1f
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x70]
mov byte [ebp + eax - 0x264], cl
mov dword [ebp - 0x14], 2
and dword [ebp - 0x4c], 0
jmp 0x1002d3fa
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1a
jae 0x1002d4cb
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x70]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1002d438
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x70]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x70]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x1002d3f2
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x72]
movsx eax, byte [ebp + eax - 0x264]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x6f]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x72]
movsx eax, byte [ebp + eax - 0x264]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x6f]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x72]
movsx eax, byte [ebp + eax - 0x264]
mov esi, dword [ebp - 0x14]
movzx ebx, byte [ebp + esi - 0x6f]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x70]
mov byte [ebp + eax - 0x264], bl
push 1
push 0
push 0xb31
push 0x6693
lea eax, [ebp - 0x4c]
push eax
push 0x4d4e
push 0x2c2e
call fcn.1002b499
add esp, 0x1c
jmp 0x1002d3f2
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x264], 0
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.1003aa50
mov byte [ebp - 4], 0x13
and dword [ebp - 0xd4], 0
jmp 0x1002d505
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xd
jae 0x1002d51e
mov eax, dword [ebp - 0xd4]
mov byte [ebp + eax - 0x264], 0
jmp 0x1002d4f8
push 0
push 0
lea eax, [ebp - 0x4ac]
push eax
push dword [ebp - 0x1cc]
call fcn.10035f8c
add esp, 0x10
mov dword [0x10141018], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4ac]
call fcn.10010026
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x1d4], 0x6eba
jge 0x1002d567
push dword [ebp - 0x304]
call fcn.10047293
pop ecx
jmp 0x1002d583
mov dword [ebp - 4], 5
jmp 0x1002d593
push 0x4cd7
push 1
push 0x54ff
push 1
call fcn.10029ffc
add esp, 0x10
cmp dword [0x10141018], 0
je 0x1002d5c7
mov ecx, dword [ebp - 0x1dc]
call fcn.1000ffbc
push eax
call dword [0x10141018]
mov dword [ebp - 0x50], eax
push 0x592c
push 1
lea eax, [ebp - 0x50]
push eax
push 1
lea eax, [ebp - 0x1e4]
push eax
push 0x10141016
push 0x2d83
push 0x3f07
push 0x10142530
push 0x450b
push 0x4622
push 1
call fcn.1002a1b7
add esp, 0x30
push 3
lea ecx, [ebp - 0x3b4]
call fcn.100100c6
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x338], 1
mov dword [ebp - 0x334], 1
mov dword [ebp - 0x330], 1
mov dword [ebp - 0x32c], 1
push 1
lea ecx, [ebp - 0x2e8]
call fcn.100100c6
mov byte [ebp - 4], 0x17
push 1
push 0xc99
push 0
push 0x21d3
lea eax, [ebp - 0x3c]
push eax
push 0
push 0x7d9b
push 0xcd7
lea eax, [ebp - 0x3b4]
push eax
push 0x760f
call fcn.10029219
add esp, 0x28
mov dword [ebp - 0x3c], 0
jmp 0x1002d68f
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002d6a5
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x494], 4
jmp 0x1002d688
push 0x50a5
push 1
push 1
push 0x21c2
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x72bd
call fcn.1002a572
add esp, 0x1c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x338], 0
jmp 0x1002d6f6
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x338]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x338], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x338], 2
jg 0x1002d78f
push 2
lea ecx, [ebp - 0x41c]
call fcn.100100c6
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x2dc], 0xfffffff7
push 0x2cf7
lea eax, [ebp - 0x3ec]
push eax
push 1
push 0x617e
push 0x404d
lea eax, [ebp - 0x41c]
push eax
push 0x273
push 1
push 1
call fcn.1002a759
add esp, 0x24
push 0x6050
push 0
push 1
push 0x72a6
push 0x6b4a
push 0x7ae6
lea eax, [ebp - 0x2dc]
push eax
call fcn.1002a572
add esp, 0x1c
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x41c]
call fcn.10010128
jmp 0x1002d6dd
push 0
lea ecx, [ebp - 0x2e8]
call fcn.10010144
mov dword [eax], 2
jmp 0x1002d7c8
push 0
lea ecx, [ebp - 0x2e8]
call fcn.10010144
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1ec]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2e8]
call fcn.10010144
cmp dword [eax], 0
jl 0x1002da03
push 3
lea ecx, [ebp - 0x44c]
call fcn.100100c6
mov byte [ebp - 4], 0x19
push 4
lea ecx, [ebp - 0x43c]
call fcn.100100c6
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x44], 0xfffffff6
push 0x5b93
push 1
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x44c]
push eax
push 1
push 0x493d
call fcn.1002aa7e
add esp, 0x18
push 0
push 0
push 0x4948
push 0x5899
push 0x5024
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.1002b499
add esp, 0x1c
push 1
push 0x40b4
push 1
lea eax, [ebp - 0x44]
push eax
push 0x4b37
push 0
push 0x297a
push 0x1ad4
push 0x34a4
push 0x6139
call fcn.10029219
add esp, 0x28
mov dword [ebp - 0x1f4], 0x2ff7
mov dword [ebp - 0x314], str.ibatvl_llutvzq_wige_xrnnkvjgz_hxryxq_baqv_hpgbhkk_wjlabkz_denprtzgh_lfrtgq_rybnd_bkvofmyfu_ocjhwx_bizxl
cmp dword [ebp - 0x1f4], 0x32cf
jle 0x1002d94e
and dword [ebp - 0xdc], 0
jmp 0x1002d8be
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x65fc
jge 0x1002d94e
and dword [ebp - 0xe4], 0
jmp 0x1002d8e4
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x6c4b
jge 0x1002d949
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xe4]
sar eax, cl
cdq
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], edx
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x4cc]
call fcn.10001b3f
pop ecx
pop ecx
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2ec]
call fcn.1000fdc8
push eax
call fcn.10047293
pop ecx
lea ecx, [ebp - 0x4cc]
call fcn.1000fdbe
jmp 0x1002d8d7
jmp 0x1002d8b1
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x1f4], 0x2cfd
jge 0x1002d96a
push dword [ebp - 0x314]
call fcn.10047293
pop ecx
jmp 0x1002d986
mov dword [ebp - 4], 0x1a
jmp 0x1002d996
mov dword [ebp - 0x44], 0
jmp 0x1002d9a6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x1002d9e0
push 0x328a
push 1
push 0
push 0x5071
call fcn.10038a71
add esp, 0x10
push 1
lea eax, [ebp - 0x44]
push eax
push 0x61e2
lea eax, [ebp - 0x3b4]
push eax
push 1
call fcn.1002b658
add esp, 0x14
jmp 0x1002d99f
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x43c]
call fcn.10010128
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x44c]
call fcn.10010128
jmp 0x1002d7a4
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x2e8]
call fcn.10010128
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3b4]
call fcn.10010128
mov eax, dword [ebp - 0x1fc]
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.1000ff5d
jmp 0x1002db0d
mov dword [ebp - 0x454], 0xffffffff
mov dword [ebp - 0x45c], 0x2971c1e
mov dword [ebp - 0x464], 0x124f84b8
mov dword [ebp - 0x46c], 4
mov dword [ebp - 0x474], 2
mov dword [ebp - 0x204], 0xfffffff8
mov dword [ebp - 0xec], 0
jmp 0x1002daa6
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x1002dac2
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x47c], 0x9978f3c
jmp 0x1002da99
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
jmp 0x1002db0d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x26c], eax
push 0xb4d
push 0x81a
push 0x711
push 0x1ae1
push 0x45e2
push 0
push dword [ebp - 0x26c]
push 0x54f6
push 0x6a32
call fcn.100278fd
add esp, 0x24
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret