Function at 0x1001f25c
Capabilities:
Accept command line arguments
Create pipe
Get file attributes
Terminate process

Disassembly:
mov eax, 0x10054baf
call fcn.10053f54
sub esp, 0x1e0
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x1c], 0x34d8
push edi
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x34], edx
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1001f2a7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x12c], 0xab76d609
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001f296
push 2
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1001f2c6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c], 0xdbc56e70
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001f2b5
mov dword [ebp - 0x18], ebx
jmp 0x1001f2e1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa4], 0x36378284
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001f2d0
mov eax, dword [ebp - 0x9c]
xor esi, esi
inc dword [ebp - 0x9c]
inc esi
cmp eax, esi
mov edi, esi
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x1c]
cmovge edi, ebx
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x12c]
add eax, ecx
imul edx, eax
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setle cl
xor eax, eax
cmp edi, ecx
setne al
xor ecx, ecx
imul eax, eax, 0x97a8
test eax, eax
mov eax, 0x996a5308
sets cl
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x28], 0x320525c7
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], 0xc2c6
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x1001f395
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xac]
cmp eax, esi
setge cl
cmp dword [ebp - 0x18], ecx
jne 0x1001f3e9
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001f457
push 0x217
push 0x115
push 0x1436
push 0x496
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
jmp 0x1001f457
mov dword [ebp - 0x1c], 0xfff9
mov dword [ebp - 0x28], 0x5f402be2
cmp dword [ebp - 0xac], ebx
jge 0x1001f406
mov edi, esi
cmp dword [ebp - 0x18], ebx
jne 0x1001f408
mov edi, ebx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, edi
setg al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1c]
je 0x1001f42e
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x1001f430
mov eax, esi
mov edx, dword [ebp - 0x1c]
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1c], 0xffffffff
mov edi, dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x1001f49a
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001f47b
push ebx
call edi
mov dword [ebp - 0x28], 0x1ec6
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xac]
sub ecx, eax
mov eax, dword [ebp - 0x28]
add eax, ecx
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x1c]
jns 0x1001f469
mov dword [ebp - 0x18], 0x1f2
mov dword [ebp - 0x24], 0xa41449c9
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x1c], 0x91df82d8
mov dword [ebp - 0x1c], ebx
jmp 0x1001f4c8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x198], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001f4bb
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x18]
test eax, eax
jne 0x1001f505
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0x54fd
setl al
cmp eax, dword [ebp - 0x18]
jg 0x1001f505
mov eax, ebx
jmp 0x1001f508
xor eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x1001f538
mov dword [ebp - 0x18], ebx
jmp 0x1001f52d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x198], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001f51c
dec dword [ebp - 0x1c]
jns 0x1001f517
mov dword [ebp - 0x60], 0xd013004
mov eax, 0x996a5308
mov dword [ebp - 0x5c], 0x3020005
mov dword [ebp - 0x58], 0x51023306
mov dword [ebp - 0x54], 0x3e03b6
mov byte [ebp - 0x50], 0x25
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x28], 0x320525c7
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x28], 0xc2c6
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x1001f5a2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
cmp eax, 1
setge cl
cmp dword [ebp - 0x18], ecx
jne 0x1001f671
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001f5f5
push 0x217
push 0x115
push 0x1436
push 0x496
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
xor esi, esi
inc esi
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x1001f635
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001f616
push ebx
call edi
mov dword [ebp - 0x28], 0x1ec6
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xc0]
sub ecx, eax
mov eax, dword [ebp - 0x28]
add eax, ecx
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x1c]
jns 0x1001f604
push 0x61
pop eax
mov word [ebp - 0x114], ax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0xafe01bd9
mov dword [ebp - 0x2c], 0xdae8c9f3
mov dword [ebp - 0x2c], 0x6092
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x1c], 0xfffffff3
jmp 0x1001f706
mov dword [ebp - 0x1c], 0xfff9
mov dword [ebp - 0x28], 0x5f402be2
cmp dword [ebp - 0xc0], ebx
jge 0x1001f691
cmp dword [ebp - 0x18], ebx
je 0x1001f691
xor esi, esi
inc esi
jmp 0x1001f693
mov esi, ebx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, esi
setg al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1c]
je 0x1001f6be
cmp dword [ebp - 0x1c], ebx
jne 0x1001f6be
xor esi, esi
mov eax, ebx
inc esi
jmp 0x1001f6c3
xor esi, esi
inc esi
mov eax, esi
mov edx, dword [ebp - 0x1c]
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], 0xffffffff
jmp 0x1001f5f8
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x2c], 0x735e4b78
inc dword [ebp - 0x28]
dec dword [ebp - 0x24]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x15
jne 0x1001f6ef
push 2
mov ecx, ebx
pop edi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1001f726
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x90], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001f719
mov dword [ebp - 0x90], 0xffffffe8
cmp dword [ebp - 0x90], 0xffffffe3
jl 0x1001f760
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001f74e
push ebx
call dword [sym.imp.GDI32.dll_CreatePalette]
dec dword [ebp - 0x90]
cmp dword [ebp - 0x90], 0xffffffe3
jge 0x1001f73f
mov ecx, dword [ebp - 0x24]
cmp edi, 0xa
jne 0x1001f773
push 3
pop ecx
push 0xb
mov dword [ebp - 0x24], ecx
pop edi
jmp 0x1001f84b
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0xafe01bd9
mov dword [ebp - 0x2c], 0xdae8c9f3
mov dword [ebp - 0x2c], 0x6092
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x1c], 0xfffffff3
jmp 0x1001f7b9
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x2c], 0x735e4b78
inc dword [ebp - 0x28]
dec dword [ebp - 0x24]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x15
jne 0x1001f7a2
movzx edx, byte [ebp + edi - 0x5f]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0x11c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x60]
add ecx, edx
mov word [ebp + eax*2 - 0x11c], cx
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x30], 0x50e6da50
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001f825
push ebx
push 0x21df
push 0x1766
push 0x2214
push 0x59
push 0xfe6
push 0x17f1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov dword [ebp - 0x1c], 0x1a
jmp 0x1001f841
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 6
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jg 0x1001f82e
mov ecx, ebx
mov dword [ebp - 0x24], ebx
add edi, 2
cmp edi, 0x11
jb 0x1001f714
mov dword [ebp - 0x1c], 0xd6c05baf
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0xb0866193
mov dword [ebp - 0x30], 0x98aac1e0
mov dword [ebp - 0x18], ebx
jmp 0x1001f881
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a8], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001f874
mov dword [ebp - 0x18], ebx
jmp 0x1001f89d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x160], 0x674fa72d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001f88c
mov dword [ebp - 0x1c], ebx
jmp 0x1001f8d9
mov dword [ebp - 0x2c], 8
xor ecx, ecx
mov dword [ebp - 0x2c], 0x3d2717f4
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x28], 0x8f0a
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
test eax, eax
setg cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff9
jle 0x1001f8a7
xor eax, eax
mov dword [ebp - 0x130], 7
mov word [ebp - 0x10e], ax
lea ecx, [ebp - 0x144]
mov word [ebp - 0x144], ax
lea eax, [ebp - 0x11c]
push eax
mov dword [ebp - 0x134], ebx
call fcn.10014086
push dword [ebp - 0x34]
mov dword [ebp - 4], ebx
lea edi, [ebp - 0x11c]
xor eax, eax
lea ecx, [ebp - 0x17c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10003e3e
mov byte [ebp - 4], 1
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1001f954
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001f94e
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1a
jle 0x1001f93e
mov dword [ebp - 0x24], 0x31966c47
mov dword [ebp - 0x18], ebx
jmp 0x1001f974
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0xc03342eb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001f966
mov dword [ebp - 0x18], ebx
jmp 0x1001f990
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1bc], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001f97f
mov dword [ebp - 0x18], ebx
jmp 0x1001f9ac
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe4], 0xda7209c3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001f99b
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], 7
je 0x1001fb08
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x2c], 0x82eac453
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x28], 0x14b0
cmp dword [ebp - 0x28], 0x184e
jle 0x1001fa31
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov eax, ebx
mov ecx, 0x1006d158
xor eax, esi
xor eax, edi
cdq
push edx
push eax
call fcn.100021b6
inc ebx
cmp ebx, 0x6435
jl 0x1001fa00
inc esi
push 0
pop ebx
cmp esi, 0x2ec3
jl 0x1001f9fd
inc edi
cmp edi, 0x5a72
jl 0x1001f9fb
mov dword [ebp - 0x2c], 0x8f576c51
mov byte [ebp - 4], 2
cmp dword [ebp - 0x28], 0x13a2
jge 0x1001fa72
mov edx, str.gxuumo_ckdv_hxcb_vucqfqk
mov ecx, 0x1006d158
call fcn.100037d8
jmp 0x1001fa72
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x34], 0xa205b290
mov dword [ebp - 0x28], 8
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1001fabc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a0], 0xc587c7ab
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001faab
inc dword [ebp - 0xe4]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x30], ebx
jne 0x1001fafa
mov eax, dword [ebp - 0x34]
sub eax, 0x49a54b2e
jne 0x1001fae3
cmp dword [ebp - 0x24], ebx
jne 0x1001fae3
mov edx, ebx
jmp 0x1001fae6
xor edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
setle cl
dec ecx
cmp ecx, 2
jbe 0x1001fafa
mov eax, ebx
jmp 0x1001fafd
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x44]
jmp 0x1001f9b5
push 0x5c
pop eax
push 2
pop esi
push 5
mov byte [ebp - 0x3c], bl
mov ecx, ebx
mov dword [ebp - 0x3b], 0xa009027f
mov word [ebp - 0x40], ax
pop edi
cmp esi, 2
jne 0x1001fb2d
push 3
pop ecx
push ecx
pop esi
jmp 0x1001fb56
movzx edx, byte [ebp + esi - 0x3b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x3e]
movzx ecx, word [ebp + eax*2 - 0x40]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x3c]
add ecx, edx
mov word [ebp + eax*2 - 0x40], cx
mov ecx, ebx
add esi, 2
cmp esi, edi
jb 0x1001fb21
xor eax, eax
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x3e], ax
lea ecx, [ebp - 0x10c]
mov word [ebp - 0x10c], ax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0xfc], ebx
call fcn.10014086
mov byte [ebp - 4], 4
mov dword [ebp - 0x18], 0xfffffffe
mov dword [ebp - 0x24], 0x6173948b
mov dword [ebp - 0x24], edi
push 2
mov dword [ebp - 0x1c], ebx
pop edi
jmp 0x1001fbb7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1b0], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001fba6
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0x30de
setg cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
sub ecx, edi
neg eax
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setne dl
add edx, 0x45cd16d
neg edx
sbb edx, edx
inc edx
imul ecx, edx, 0x2749
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, dword [ebp - 0x18]
je 0x1001fc65
mov eax, 0x72b9
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x24], ebx
jmp 0x1001fc57
mov dword [ebp - 0x1c], ebx
jmp 0x1001fc48
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x18c], 0x5fa2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001fc37
dec dword [ebp - 0x180]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x1001fc32
xor esi, esi
inc esi
jmp 0x1001fd10
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x30], 0x3f81
cmp dword [ebp - 0x30], 0x420b
jle 0x1001fcdc
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov ecx, ebx
xor esi, esi
mov dword [ebp - 0x1c], ecx
inc esi
mov eax, ebx
mov dword [ebp - 0x28], ebx
or eax, ecx
lea ecx, [ebp - 0x1d4]
cdq
push edx
push eax
call fcn.10001311
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001fca9
mov eax, dword [eax]
push eax
call fcn.1003bcd0
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1d4]
call fcn.10001623
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x27f3
jl 0x1001fc8f
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x3666
jl 0x1001fc8a
jmp 0x1001fcdf
xor esi, esi
inc esi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 3
mov eax, dword [ebp - 0x24]
setl cl
sub eax, ecx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x30], 0x3e36
jge 0x1001fd09
push str.vxrgharp_ejsjfbs_gido_fvpbn_erasjhp_zevevkpq_stoni_xvlc_xjutthrul_sxd_lezy
call fcn.1003bcd0
pop ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x18], 0xfffffffa
jmp 0x1001fd5f
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x1001fd36
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001fd31
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
dec dword [ebp - 0x24]
jns 0x1001fd21
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001fd5c
push ebx
push 0x181d
push 0x226
push ebx
push 0x772
push 0x100b
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x37
je 0x1001fd19
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x18], 0x6f9b
mov dword [ebp - 0x24], 0xfa8f90a3
mov dword [ebp - 0x30], 0x20348f4a
mov dword [ebp - 0x1c], 0x11fb8eb5
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x34], 0xc63704ba
mov dword [ebp - 0x2c], 0x47cf
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1001fdaf
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c], 4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001fda1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], 0x8fde
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0x10000
cmp eax, ecx
setge dl
mov dword [ebp - 0x48], edx
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x18]
je 0x1001fdfa
mov ecx, ebx
cmp dword [ebp - 0x4c], ebx
je 0x1001fdfc
mov ecx, esi
mov eax, dword [ebp - 0x18]
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
cmp eax, 0x4f34d89b
mov eax, dword [ebp - 0x48]
setg cl
xor edx, edx
cmp ecx, 0x5de0
push 6
setle dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4c]
setg cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x24]
pop ecx
sub eax, ecx
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0xf13a
cmp eax, dword [ebp - 0x28]
je 0x1001fe64
mov eax, esi
cmp dword [ebp - 0x24], ebx
jne 0x1001fe66
mov eax, ebx
inc eax
cmp eax, dword [ebp - 0x4c]
je 0x1001fe6f
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
sub eax, 0x92f88b31
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x1c], ebx
je 0x10020132
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x34], 0xffffffff
inc dword [ebp - 0x18]
mov dword [ebp - 0x18], ebx
jmp 0x1001fff4
mov dword [ebp - 0x2c], 0xffffffff
xor edx, edx
mov dword [ebp - 0x24], 0xfffffffa
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x7c]
sub edx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x88]
sub edx, eax
je 0x1001ff51
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001ffeb
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x1001ffeb
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0x76bd76df
mov dword [ebp - 0x2c], 0xf323e629
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x1001ffe5
mov dword [ebp - 0x24], ebx
jmp 0x1001ff81
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xec], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1001ff74
mov dword [ebp - 0x24], ebx
jmp 0x1001ff9c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x94], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1001ff8b
cmp dword [ebp - 0xec], ebx
jne 0x1001ffaf
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
push 3
mov eax, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
pop eax
mov dword [ebp - 0x94], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x1001ff6f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1001fec3
push 0x5f
pop eax
mov byte [ebp - 0x68], bl
mov byte [ebp - 0x67], 0xd3
mov word [ebp - 0x64], ax
mov dword [ebp - 0x18], 0x60c9
cmp dword [ebp - 0x18], 0x648a
jle 0x100200ac
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
cdq
idiv ecx
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x2c], edx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
cdq
idiv ecx
lea ecx, [ebp - 0x1ec]
xor edx, dword [ebp - 0x2c]
mov eax, edx
cdq
push edx
push eax
call fcn.10001311
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002005a
mov eax, dword [eax]
push eax
call fcn.1003bcd0
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1ec]
call fcn.10001623
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x5b8c
jl 0x1002003a
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x5915
jl 0x10020035
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x7999
jl 0x1002002a
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x2a09
jl 0x10020025
cmp dword [ebp - 0x18], 0x5e99
jge 0x100200c0
push str.gxzm_bqiytqz_qkgeareqk_hhqq_kfwqet
call fcn.1003bcd0
pop ecx
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x15c]
xor eax, eax
mov dword [ebp - 0x148], 7
mov word [ebp - 0x62], ax
mov word [ebp - 0x15c], ax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x14c], ebx
call fcn.10014086
mov byte [ebp - 4], 9
mov dword [ebp - 0x1c], 5
push 6
pop eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x1c], ebx
je 0x10020269
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x34], 0xffffffff
inc dword [ebp - 0x18]
mov dword [ebp - 0x18], ebx
jmp 0x1002025d
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001fffe
push 0x1df4
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 0x2c], 0xffffffff
xor edx, edx
mov dword [ebp - 0x24], 0xfffffffa
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
sub edx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
sub edx, eax
je 0x100201c3
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10020254
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x10020254
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0x76bd76df
mov dword [ebp - 0x2c], 0xf323e629
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x1002024e
mov dword [ebp - 0x24], ebx
jmp 0x100201f3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x100201e6
mov dword [ebp - 0x24], ebx
jmp 0x1002020e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb8], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100201fd
cmp dword [ebp - 0xf4], ebx
jne 0x1002021e
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
push 3
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
pop eax
mov dword [ebp - 0xb8], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x100201e1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1002014a
jmp 0x10020276
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
jne 0x1002013f
mov dword [ebp - 0x64], ebx
push dword [ebp - 0xfc]
cmp dword [ebp - 0xf8], 8
lea eax, [ebp - 0x10c]
push ebx
cmovae eax, dword [ebp - 0x10c]
lea ecx, [ebp - 0x17c]
push eax
call fcn.100204f2
cmp eax, 0xffffffff
je 0x100202be
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x15c]
push ecx
push esi
push eax
lea ecx, [ebp - 0x17c]
call fcn.100043dd
jmp 0x10020279
mov ecx, dword [ebp - 0xcc]
lea eax, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x144]
call fcn.10020595
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x15c]
call fcn.10003fdb
push ebx
push esi
lea ecx, [ebp - 0x10c]
call fcn.10003fdb
push ebx
push esi
lea ecx, [ebp - 0x17c]
call fcn.10003fdb
push ebx
push esi
lea ecx, [ebp - 0x144]
call fcn.10003fdb
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xcc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret