Function at 0x1002d20d
Capabilities:
Connect pipe

Disassembly:
mov eax, 0x100637e3
call fcn.10061fc8
sub esp, 0x220
push ebx
mov dword [ebp - 0x1c], 0x204e2db5
xor ebx, ebx
mov dword [ebp - 0x30], 0xfffffff8
push esi
mov dword [ebp - 0x34], 0xffffffff
push edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1002d293
mov dword [ebp - 0x20], 0x7ca0029b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1002d279
push 0x130f
push ebx
push 0xcab
push 0x793
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov dword [ebp - 0x20], 0xfffffff1
jmp 0x1002d28a
cmp dword [ebp - 0x20], ebx
jne 0x1002d290
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffef
jl 0x1002d282
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff8
je 0x1002d254
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
cmp eax, 0xe974a520
mov ecx, dword [ebp - 0x30]
setne dl
sub edx, 0x8753
neg edx
sbb edx, edx
inc edx
dec ecx
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
setle al
xor ecx, ecx
add eax, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x6c], 0xd045705
mov dword [ebp - 0x68], 0x1b062600
mov word [ebp - 0x64], 0x3302
mov byte [ebp - 0x62], cl
mov dword [ebp - 0x61], 0xc0f00303
mov word [ebp - 0x5d], 0x369
mov byte [ebp - 0x5b], 0xe
mov dword [ebp - 0x20], 0x2c70bb74
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], 0xf7e44142
mov dword [ebp - 0x1c], ebx
jmp 0x1002d322
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x190], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002d311
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x1002d415
mov dword [ebp - 0x24], 0xff55e00f
mov dword [ebp - 0x38], 0xc4185a1f
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 2
jg 0x1002d40d
mov dword [ebp - 0x1c], ebx
jmp 0x1002d362
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x184], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002d355
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1002d382
push ebx
push 0x26f5
push 0x2618
push ebx
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
mov dword [ebp - 0x30], 0x3794
cmp dword [ebp - 0x30], 0x37c6
jle 0x1002d3e4
push ebx
push 0x3a4
call dword [sym.imp.USER32.dll_ValidateRect]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x1fc]
push edx
push eax
call fcn.10001381
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002d3bd
mov eax, dword [eax]
push eax
call fcn.10049bf0
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.10001612
inc edi
cmp edi, 0x15f2
jl 0x1002d3a2
inc esi
cmp esi, 0x64df
jl 0x1002d3a0
inc dword [ebp - 0x180]
cmp dword [ebp - 0x30], 0x35d9
jge 0x1002d3fe
push str.nopsls_diifcutpz_uvxnorut_dnublvfy_yeudmrvzx_gqq_esw_lkuh_xkullguk_tiaycaxy
call fcn.10049bf0
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
inc dword [ebp - 0x24]
inc ecx
jmp 0x1002d346
inc dword [ebp - 0x20]
jmp 0x1002d32b
cmp dword [ebp - 0x2c], ebx
je 0x1002d421
mov edx, ecx
cmp dword [ebp - 0x34], ebx
jne 0x1002d423
mov edx, ebx
mov eax, dword [ebp - 0x18c]
add eax, dword [ebp - 0x2c]
cmp eax, edx
je 0x1002d436
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x20], ecx
xor esi, esi
mov cl, byte [ebp - 0x6b]
mov al, cl
and cl, 0x3b
or al, 0x3b
movzx edx, al
movzx eax, cl
sub dx, ax
movzx eax, byte [ebp - 0x6c]
push 0xfffffffffffffffc
pop ecx
inc esi
mov word [ebp + eax*2 - 0x17c], dx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0x72a8358b
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x28], 0x3fe5e81a
mov dword [ebp - 0x38], 0x443ac46d
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xdbdf7cd9
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x38], 0x9b2b534
mov dword [ebp - 0x38], 0x85ea6eda
mov dword [ebp - 0x38], 0xd73df2ef
mov dword [ebp - 0x24], 0xed162c5d
mov dword [ebp - 0x2c], 0xd4a79744
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1002d4d7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1e4], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002d4ca
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
mov ecx, esi
cmove ecx, ebx
dec dword [ebp - 0x24]
cmp eax, ecx
mov eax, esi
push 2
cmovl eax, ebx
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x34]
pop edi
setne cl
sub eax, ecx
mov ecx, ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], edi
cmp edi, 0x12
jae 0x1002d845
movzx eax, byte [ebp - 0x6c]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1002d80e
mov dword [ebp - 0x24], 0x6de
cmp dword [ebp - 0x24], 0x958
jle 0x1002d57e
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], 0x1fcd
mov dword [ebp - 0x30], eax
cdq
mov ecx, 0x10080098
push edx
push eax
call fcn.1000b94d
mov eax, dword [ebp - 0x30]
add eax, edi
dec dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
jne 0x1002d548
inc edi
cmp edi, 0x3861
jl 0x1002d53c
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x598
jge 0x1002d59d
mov edx, str.ghoevveps_qxvt_aehgcg_ltwi_aamw_lnkn_feyg_smlyspuho
mov ecx, 0x10080098
call fcn.1000f355
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1002d5df
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x138], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002d5ce
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002d5f6
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x134], 0xffffffef
cmp dword [ebp - 0x134], 5
jle 0x1002d801
push esi
lea ecx, [ebp - 0xb0]
call fcn.100014b5
mov dword [ebp - 4], 4
mov dword [ebp - 0x30], 0x47d2038e
mov dword [ebp - 0x1c], ebx
jmp 0x1002d63f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0x1fe77dd6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002d62c
mov eax, dword [ebp - 0xb0]
mov dword [eax], ebx
cmp dword [eax], 0xfffffff6
jne 0x1002d7d9
mov dword [ebp - 0x30], 0xffffffff
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x30], 0x6a3735b2
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xb0]
neg edx
sbb edx, edx
neg edx
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
add ecx, edx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0x2972
setge al
neg eax
add eax, eax
je 0x1002d6fc
mov dword [ebp - 0x1c], 0xfffffffc
inc dword [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xffffffe6
jmp 0x1002d6f1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002d6ee
push ebx
push 0x1257
push 0x1a07
push 0x1718
push 0xa60
push 0x119b
push 0x1364
push 0x2de
push 0x25a4
push 0x1d28
push 0x55b
call dword [sym.imp.GDI32.dll_StretchBlt]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xc
jge 0x1002d6ac
jmp 0x1002d7bd
mov dword [ebp - 0x24], 0x618f
cmp dword [ebp - 0x24], 0x6567
jle 0x1002d765
push ebx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, eax
mov edx, ebx
mov eax, edi
mov dword [ebp - 0x30], edx
shl eax, cl
mov dword [ebp - 0x34], eax
mov ecx, edx
sar eax, cl
mov ecx, 0x10080098
cdq
push edx
push eax
call fcn.1000b94d
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
inc edx
mov dword [ebp - 0x30], edx
cmp edx, 0x32c1
jl 0x1002d728
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x4859
jl 0x1002d71a
inc edi
cmp edi, 0x26c9
jl 0x1002d715
mov edi, dword [ebp - 0x20]
mov byte [ebp - 0x15], bl
mov byte [ebp - 4], 5
cmp dword [ebp - 0x24], 0x6184
jge 0x1002d7a8
mov edx, str.cktf_rvf_wai_wnjkd_woy
mov ecx, 0x10080098
call fcn.1000f355
jmp 0x1002d7a8
mov dword [ebp - 4], 4
cmp byte [ebp - 0x15], 0
je 0x1002d7bd
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002d7cc
call dword [sym.imp.USER32.dll_DestroyCaret]
mov eax, dword [ebp - 0xb0]
dec dword [eax]
jmp 0x1002d64c
or dword [ebp - 4], 0xffffffff
push eax
call fcn.10049cc1
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
inc dword [ebp - 0x134]
pop ecx
jmp 0x1002d600
movzx eax, byte [ebp + edi - 0x6c]
dec edi
add edi, eax
lea ecx, [eax + 1]
jmp 0x1002d83d
movzx edx, byte [ebp + edi - 0x6b]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x6e]
movzx ecx, word [ebp + eax*2 - 0x17c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x6c]
add ecx, edx
mov word [ebp + eax*2 - 0x17c], cx
mov ecx, ebx
add edi, 2
jmp 0x1002d50b
mov dword [ebp - 0x1c], 0xfffffff7
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x20], 0xffffffff
push 2
call fcn.100014b5
mov dword [ebp - 4], 7
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], 0x6bf5
cmp dword [ebp - 0x28], 0x6e5b
jle 0x1002d8c7
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x3c], 0x6e0d
mov edi, dword [ebp - 0x2c]
mov eax, ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], 0x574f
cdq
mov ecx, 0x10080098
push edx
push eax
call fcn.1000b94d
mov eax, dword [ebp - 0x30]
add eax, edi
dec dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
jne 0x1002d896
mov edi, dword [ebp - 0x20]
add dword [ebp - 0x2c], edi
dec dword [ebp - 0x3c]
jne 0x1002d887
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0xcda
jl 0x1002d87d
mov dword [ebp - 0x38], 0x66febfb2
mov byte [ebp - 4], 8
cmp dword [ebp - 0x28], 0x6ae3
jge 0x1002d90b
mov edx, str.tgp_kuepep_fxj_idkprbjze
mov ecx, 0x10080098
call fcn.1000f355
jmp 0x1002d90b
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x38], esi
push 2
call fcn.100014b5
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1002d93d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1002d92e
mov dword [ebp - 0x20], ebx
jmp 0x1002d95b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 0xb0befcdf
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1002d948
cmp dword [ebp - 0x1c], ebx
je 0x1002d9d8
push esi
lea ecx, [ebp - 0x11c]
call fcn.100014b5
mov dword [ebp - 0x1c], ebx
jmp 0x1002d98a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0x7fa5c62e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002d977
mov dword [ebp - 0x1c], 7
jmp 0x1002d9a5
mov dword [ebp - 0x28], 0xd9a924c0
inc dword [ebp - 0x28]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
jle 0x1002d998
cmp dword [ebp - 0x11c], 0
je 0x1002da4e
push dword [ebp - 0x11c]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
jmp 0x1002da4e
mov dword [ebp - 0x20], ebx
jmp 0x1002d9f2
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x1002d9dd
mov dword [ebp - 0x20], ebx
jmp 0x1002da49
push esi
lea ecx, [ebp - 0x154]
call fcn.100014b5
mov dword [ebp - 0x1c], ebx
jmp 0x1002da20
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 0xe0184dcc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002da0d
mov eax, dword [ebp - 0x154]
push eax
dec dword [eax]
call fcn.10049cc1
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
inc dword [ebp - 0x20]
pop ecx
cmp dword [ebp - 0x20], esi
jle 0x1002d9fc
dec dword [ebp - 0x30]
cmp dword [ebp - 0x104], 0
je 0x1002da78
push dword [ebp - 0x104]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xbc], 0
je 0x1002daa3
push dword [ebp - 0xbc]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
xor eax, eax
lea ecx, [ebp - 0xa4]
push 3
mov word [ebp - 0x16e], ax
call fcn.100014b5
mov dword [ebp - 0x1c], 0xba07e4fc
mov dword [ebp - 0x24], 0xa6ebbfad
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x38], 0x6fae7a48
mov dword [ebp - 0x20], ebx
jmp 0x1002daea
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x98], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1002dadd
mov dword [ebp - 0x20], ebx
jmp 0x1002db07
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa4]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1002daf4
mov edi, dword [ebp - 0xa4]
mov dword [edi + 4], ebx
mov dword [ebp - 0x1c], 0x45db34e6
mov dword [ebp - 0x1c], ebx
jmp 0x1002db3e
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002db3b
push 0x11ae
push 0x23bb
call dword [sym.imp.USER32.dll_GetWindowLongW]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1002db22
dec dword [edi + 4]
jns 0x1002db16
mov dword [ebp - 0x1c], 0xfffffff8
cmp dword [ebp - 0x1c], 0xa
jl 0x1002dc62
mov dword [ebp - 0x20], 0x46c2
mov dword [ebp - 0x2c], 0x791f9e6a
mov dword [ebp - 0x28], 0x5e0c0a10
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002db87
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov eax, dword [ebp - 0xa4]
xor edx, edx
mov ecx, dword [edi + 4]
cmp ecx, dword [eax]
setne dl
cmp edx, dword [ebp - 0x24]
jne 0x1002dba9
mov eax, dword [ebp - 0xa4]
cmp dword [eax + 8], ebx
je 0x1002dba9
mov ebx, esi
cmp ebx, 0xb752bf39
push 0
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x24]
sub eax, 0x7fef
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x98]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
sete cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne bl
xor ecx, ecx
cmp ebx, eax
pop ebx
setle cl
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
sub eax, 9
cmp eax, 0x46b8d963
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
imul ecx, ecx, 0x1ddb
add ecx, 0x21f6a05e
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xa
jge 0x1002db59
push dword [ebp - 0xa4]
call fcn.10049cc1
xor eax, eax
mov dword [ebp - 0xa4], ebx
pop ecx
mov word [ebp - 0x1a8], ax
lea ecx, [ebp - 0x1a8]
lea eax, [ebp - 0x17c]
mov dword [ebp - 0xa0], ebx
push eax
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x194], 7
mov dword [ebp - 0x198], ebx
call fcn.1000bfc1
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x3c], 0xde9bf9f
mov dword [ebp - 0x2c], 0x3f
cmp dword [ebp - 0x2c], 0x36c
jle 0x1002dd1b
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x28], 0x6aa5
mov eax, edi
lea ecx, [ebp - 0x214]
cdq
push edx
push eax
call fcn.10001381
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002dcf2
mov eax, dword [eax]
push eax
call fcn.10049bf0
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x214]
call fcn.10001612
dec edi
dec dword [ebp - 0x28]
jne 0x1002dcd8
mov edi, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x6509
jl 0x1002dcce
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x2c], 0xffffff74
jge 0x1002dd32
push str.lewfbwxxLpxroyl_nve_znibkcb_dvnrz_lfvzuzw_asairnfzb_oxekuby_cnyp
call fcn.10049bf0
pop ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1c], ebx
jmp 0x1002dd48
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x40], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002dd3e
mov dword [ebp - 0x3c], esi
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x1c], 0x2570d978
push 3
call fcn.100014b5
mov dword [ebp - 0x34], 0xecea67f4
mov dword [ebp - 0x20], ebx
jmp 0x1002dd89
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1002dd76
mov dword [ebp - 0x20], ebx
jmp 0x1002de24
mov dword [ebp - 0x2c], 0xf8393131
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x40]
cmp eax, 0xd997
mov eax, dword [ebp - 0x1c]
sete cl
sub eax, ecx
je 0x1002ddc5
mov edx, esi
cmp dword [ebp - 0x2c], ebx
jne 0x1002ddc7
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x1c]
imul eax, edx
dec eax
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x40]
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
mov dword [ebp + eax*4 - 0x40], edx
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
inc eax
neg eax
jne 0x1002de16
mov eax, ebx
cmp dword [ebp - 0x40], ebx
je 0x1002de18
mov eax, esi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x20]
xor ecx, ecx
cmp dword [ebp - 0x20], ebx
jle 0x1002dd97
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
cmp eax, 0xa3fa0b5b
mov eax, dword [ebp - 0xc8]
setne cl
mov dword [eax + 4], ecx
cmp ecx, dword [ebp - 0x3c]
jne 0x1002de4e
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov ecx, esi
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jl 0x1002de60
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
add eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, eax
mov eax, dword [ebp - 0x3c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setg cl
cmp dword [ebp - 0xc8], 0
mov dword [ebp - 0x34], ecx
je 0x1002dea9
push dword [ebp - 0xc8]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
push dword [ebp - 0x148]
xor eax, eax
lea edi, [ebp - 0x17c]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x1dc]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1000ba62
mov byte [ebp - 4], 0xe
mov eax, 0xf7e2799a
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x124], 0xfffffff4
jmp 0x1002df0b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002df05
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_HeapFree]
dec dword [ebp - 0x124]
cmp dword [ebp - 0x124], 0xfffffff1
jne 0x1002def3
mov dword [ebp - 0x20], 0xfffffff8
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], 0x66e9f086
push 4
call fcn.100014b5
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x1c], 0x2bf390f3
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0xe75688af
mov dword [ebp - 0x3c], ebx
jmp 0x1002df66
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], 0xd1aa12af
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 4
jl 0x1002df53
cmp dword [ebp - 0x20], ebx
jne 0x1002dfd9
mov eax, dword [ebp - 0x84]
cmp dword [eax], esi
jg 0x1002df82
cmp dword [eax], 0
mov edx, esi
jne 0x1002df84
mov edx, ebx
mov eax, dword [ebp - 0x24]
add edx, 0x64bd
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov eax, dword [ebp - 0x84]
imul edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x28]
cmp eax, edx
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, edx
mov eax, dword [ebp - 0x84]
setle cl
xor edx, edx
cmp ecx, dword [eax + 4]
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x84]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x2c]
setne dl
add eax, edx
jne 0x1002dff7
mov ecx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x1002dff9
mov ecx, esi
mov eax, dword [ebp - 0x24]
add ecx, 0xffff9a73
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, 0x67c8fa1b
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1002e10f
mov dword [ebp - 0x30], 0x3231
xor ecx, ecx
mov dword [ebp - 0x2c], 0x4dbc0ba
mov dword [ebp - 0x28], 3
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
dec edx
cmp edx, eax
setne cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x376a
jg 0x1002e0e3
mov dword [ebp - 0x28], 0xfbf73ecb
lea ecx, [ebp - 0x78]
push esi
call fcn.100014b5
mov dword [ebp - 0x3c], ebx
jmp 0x1002e08d
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x78]
mov dword [eax + ecx*4], 0xb5720603
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], esi
jl 0x1002e07d
cmp dword [ebp - 0x20], ebx
jne 0x1002e11b
cmp dword [ebp - 0x34], ebx
je 0x1002e0aa
mov eax, dword [ebp - 0x28]
mov ecx, esi
sub eax, dword [ebp - 0x28]
jne 0x1002e0ac
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
inc eax
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x30], eax
je 0x1002e0c7
mov ecx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x1002e0c9
mov ecx, esi
mov eax, dword [ebp - 0x78]
push eax
mov dword [eax], ecx
mov dword [ebp - 0x2c], ecx
call fcn.10049cc1
pop ecx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
jmp 0x1002e109
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0xf7dd
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002e109
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [ebp - 0x2c], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x15
jg 0x1002e033
jmp 0x1002e133
cmp dword [ebp - 0x78], 0
je 0x1002e133
push dword [ebp - 0x78]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov byte [ebp - 4], 0xe
push dword [ebp - 0x84]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0x84], ebx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x1c], 0xcdbe8e56
push esi
call fcn.100014b5
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x24], ebx
jmp 0x1002e17a
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002e16b
cmp dword [ebp - 0x1c], ebx
jne 0x1002e187
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x110]
mov dword [eax], ecx
test ecx, ecx
je 0x1002e1b4
mov dword [ebp - 0x34], 0xe5a6
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002e1af
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
dec dword [ebp - 0x34]
jmp 0x1002e1da
mov dword [ebp - 0x1c], 0xfffffff9
jmp 0x1002e1d4
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002e1d1
push 0x25e2
call dword [sym.imp.USER32.dll_IsZoomed]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xc
jne 0x1002e1bd
mov dword [ebp - 0x28], 0x20c5
cmp dword [ebp - 0x28], 0x20cf
jle 0x1002e257
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov ecx, edi
mov dword [ebp - 0x38], ebx
shl eax, cl
mov edi, ebx
mov dword [ebp - 0x2c], eax
or eax, edi
lea ecx, [ebp - 0x22c]
cdq
push edx
push eax
call fcn.10001381
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e21a
mov eax, dword [eax]
push eax
call fcn.10049bf0
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x22c]
call fcn.10001612
mov eax, dword [ebp - 0x2c]
inc edi
cmp edi, 0x7aa
jl 0x1002e200
mov edi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x4421
jl 0x1002e1f4
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x92
jl 0x1002e1ef
cmp dword [ebp - 0x28], 0x1e74
jge 0x1002e26b
push str.rlonsumrg_mqii_zqn
call fcn.10049bf0
pop ecx
mov dword [ebp - 4], 0xe
push dword [ebp - 0x110]
call fcn.10049cc1
pop ecx
push 0x5c
pop eax
push 2
mov dword [ebp - 0x110], ebx
mov ecx, ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x58], 0x9b046c00
mov word [ebp - 0x54], 0x407
mov byte [ebp - 0x52], 0xbf
mov word [ebp - 0x4c], ax
pop edi
cmp edi, 2
jne 0x1002e2b9
push 5
pop ecx
push ecx
pop edi
jmp 0x1002e2e0
movzx edx, byte [ebp + edi - 0x57]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5a]
movzx eax, word [ebp + eax*2 - 0x4c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x58]
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add edi, 2
cmp edi, 7
jb 0x1002e2ad
xor eax, eax
lea ecx, [ebp - 0xe0]
push 4
mov word [ebp - 0x4a], ax
call fcn.100014b5
mov dword [ebp - 0x1c], 0xa18885c6
mov dword [ebp - 0x24], ebx
jmp 0x1002e31a
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xb3198a8f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1002e307
mov dword [ebp - 0x1c], ebx
jmp 0x1002e33a
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x1002e325
cmp dword [ebp - 0xe0], 0
je 0x1002e367
push dword [ebp - 0xe0]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
xor eax, eax
mov dword [ebp - 0x158], 7
mov word [ebp - 0x16c], ax
lea ecx, [ebp - 0x16c]
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x15c], ebx
push eax
call fcn.1000bfc1
push esi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x13
call fcn.100014b5
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1002e3b6
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002e3a7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002e3cd
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1002e434
mov dword [ebp - 0x3c], 0x1fe77dd6
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], ebx
jl 0x1002e42c
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1002e409
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002e404
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
dec dword [ebp - 0x24]
jns 0x1002e3f3
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x90]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x3c]
jns 0x1002e3e4
dec dword [ebp - 0x1c]
jns 0x1002e3d5
xor esi, esi
inc esi
cmp dword [ebp - 0x90], 0
je 0x1002e45b
push dword [ebp - 0x90]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x24], 0xac64a684
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002e477
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
mov dword [ebp - 0x24], ebx
jmp 0x1002e489
mov dword [ebp - 0x34], 0xa3399244
dec dword [ebp - 0x34]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe3
jge 0x1002e47c
push 0x5f
pop eax
push 2
mov dword [ebp - 0x48], 0x26025e00
mov ecx, ebx
mov byte [ebp - 0x44], 0x11
mov word [ebp - 0x50], ax
pop edi
cmp edi, 2
jne 0x1002e4b2
push 3
pop ecx
push ecx
pop edi
jmp 0x1002e4d9
movzx edx, byte [ebp + edi - 0x47]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx eax, word [ebp + eax*2 - 0x50]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x48]
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add edi, 2
cmp edi, 5
jb 0x1002e4a6
xor eax, eax
lea ecx, [ebp - 0xd4]
mov word [ebp - 0x4e], ax
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x20], 0xffffffff
push 2
call fcn.100014b5
push 2
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xf8]
pop edi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0x66febfb2
mov dword [ebp - 0x38], esi
push edi
call fcn.100014b5
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1002e53d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1002e52e
mov dword [ebp - 0x20], ebx
jmp 0x1002e55a
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0xb0befcdf
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1002e547
cmp dword [ebp - 0x1c], ebx
je 0x1002e5d6
push esi
lea ecx, [ebp - 0xec]
call fcn.100014b5
mov dword [ebp - 0x24], ebx
jmp 0x1002e588
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 0x7fa5c62e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002e575
mov dword [ebp - 0x1c], 7
jmp 0x1002e5a3
mov dword [ebp - 0x34], 0xd9a924c0
inc dword [ebp - 0x34]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
jle 0x1002e596
cmp dword [ebp - 0xec], 0
je 0x1002e64c
push dword [ebp - 0xec]
call fcn.10049cc1
pop ecx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
jmp 0x1002e64c
mov dword [ebp - 0x20], ebx
jmp 0x1002e5f0
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x1002e5db
mov dword [ebp - 0x20], ebx
jmp 0x1002e647
push esi
lea ecx, [ebp - 0x144]
call fcn.100014b5
mov dword [ebp - 0x24], ebx
jmp 0x1002e61e
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0xe0184dcc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002e60b
mov eax, dword [ebp - 0x144]
push eax
dec dword [eax]
call fcn.10049cc1
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
inc dword [ebp - 0x20]
pop ecx
cmp dword [ebp - 0x20], esi
jle 0x1002e5fa
dec dword [ebp - 0x28]
cmp dword [ebp - 0xf8], 0
je 0x1002e676