Function at 0x100226e2
Capabilities:
Check os version

Disassembly:
mov eax, 0x10064899
call fcn.10063468
sub esp, 0x22c
cmp byte [ebp + 0x20], 0
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x70], esi
je 0x100229c6
cmp byte [ebp + 0xc], 0
je 0x100229a5
xor ebx, ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov edi, dword [ebp + 0x18]
mov dword [ebp - 4], ebx
cmp dword [edi + 0x10], ebx
je 0x10022986
push 0x2e
pop eax
push 2
mov dword [ebp - 0x60], 0xc5049100
mov ecx, ebx
mov word [ebp - 0x5c], 0x6b8e
mov byte [ebp - 0x5a], 0x19
mov word [ebp - 0x38], ax
pop esi
cmp esi, 2
jne 0x1002275d
push 5
pop ecx
push ecx
pop esi
jmp 0x10022784
movzx edx, byte [ebp + esi - 0x5f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x62]
movzx eax, word [ebp + eax*2 - 0x38]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x60]
mov word [ebp + eax*2 - 0x38], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x10022751
xor eax, eax
mov dword [ebp - 0x198], 7
mov word [ebp - 0x36], ax
lea ecx, [ebp - 0x1ac]
mov word [ebp - 0x1ac], ax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x19c], ebx
call fcn.100194c0
lea eax, [ebp - 0x1ac]
mov byte [ebp - 4], 1
push eax
mov edx, edi
lea ecx, [ebp - 0x98]
call fcn.10021802
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 3
call fcn.10011831
mov edi, dword [ebp - 0x94]
mov eax, edi
mov esi, dword [ebp - 0x98]
sub eax, esi
push 0x18
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x38], ebx
test eax, eax
jne 0x10022974
push 0x2d
pop eax
push 2
pop edi
mov ecx, ebx
mov word [ebp - 0x4c], 0x3200
mov byte [ebp - 0x4a], 3
mov esi, edi
mov byte [ebp - 0x49], al
mov word [ebp - 0x48], 0x7469
mov word [ebp - 0x74], ax
mov dword [ebp - 0x84], ecx
cmp esi, edi
jne 0x1002283c
push 4
pop ecx
push ecx
mov dword [ebp - 0x84], ecx
pop esi
jmp 0x10022885
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4e]
movzx ecx, word [ebp + eax*2 - 0x74]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
add ecx, edx
mov edx, 0x3d43
push ecx
push 1
mov word [ebp + eax*2 - 0x74], cx
lea eax, [ebp - 0x84]
push eax
mov ecx, 0x715c
call fcn.10022646
mov ecx, dword [ebp - 0x84]
add esp, 0xc
add esi, edi
cmp esi, 6
jb 0x1002282b
xor eax, eax
mov dword [ebp - 0x1c8], 7
mov word [ebp - 0x72], ax
lea ecx, [ebp - 0x1dc]
mov word [ebp - 0x1dc], ax
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x1cc], ebx
call fcn.100194c0
mov edx, dword [ebp + 0x18]
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 4
call fcn.10021802
pop ecx
mov esi, eax
lea eax, [ebp - 0x98]
cmp eax, esi
je 0x10022907
mov ecx, eax
call fcn.1002652c
mov ecx, dword [esi]
mov dword [ebp - 0x98], ecx
mov eax, dword [esi + 4]
mov dword [ebp - 0x94], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x90], eax
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
lea ecx, [ebp - 0x1f8]
call fcn.1002652c
push ebx
push 1
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 3
call fcn.10011831
mov edi, dword [ebp - 0x94]
mov esi, dword [ebp - 0x98]
jmp 0x10022974
push esi
lea ecx, [ebp - 0x21c]
call fcn.10010c55
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 6
push eax
push 1
lea eax, [ebp - 0x21c]
push 0x4521
push eax
call fcn.100225ed
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x21c]
push ebx
push 1
call fcn.10011831
add esi, 0x18
cmp esi, edi
jne 0x10022932
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], bl
call fcn.1002652c
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0xd4]
push eax
call fcn.100263aa
lea ecx, [ebp - 0xd4]
call fcn.10026605
jmp 0x100236ae
mov eax, dword [ebp + 0x24]
cmp byte [eax], 0
je 0x100236ae
xor ebx, ebx
push ebx
push ebx
push 0x82e
push ebx
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
jmp 0x100236ae
xor ebx, ebx
cmp byte [ebp + 0x14], bl
je 0x10023581
inc ebx
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x144]
push ebx
call fcn.10001ed2
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x14], ebx
push 3
call fcn.10001ed2
push 0x686b
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 8
push eax
push 0x422f
push 0x7871
lea eax, [ebp - 0x1c]
mov edx, 0x3f44
push eax
push 0xf67
push ebx
push 0x7da
push ebx
push 0x4830
push 0x132c
push 0x4d8b
push 0x792
xor ebx, ebx
mov ecx, 0x20af
push ebx
call fcn.10022187
add esp, 0x38
mov dword [ebp - 0x1c], ebx
jmp 0x10022a64
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x114], 0x95e3b372
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10022a53
mov dword [ebp - 0x1c], ebx
jmp 0x10022a80
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x170], 0xfffffff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10022a6f
push ecx
lea eax, [ebp - 0x12c]
push eax
push ecx
push ebx
push ecx
lea ecx, [ebp - 0x1c]
call fcn.10024842
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov edx, dword [ebp - 0x144]
add esp, 0x14
cmp eax, dword [edx]
setl cl
mov dword [ebp - 0x110], ecx
mov ecx, dword [edx]
xor edx, edx
lea eax, [ecx + 1]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x170], ecx
cmp ecx, dword [ebp - 0x20]
jge 0x10022adc
cmp dword [ebp - 0x14], ebx
jne 0x10022adc
mov eax, ebx
jmp 0x10022adf
xor eax, eax
inc eax
cmp dword [ebp - 0x110], 0xfffffffd
mov ecx, dword [ebp - 0x12c]
mov dword [ecx + 4], eax
jne 0x10022afd
cmp dword [ebp - 0x10c], ebx
jne 0x10022afd
mov eax, ebx
jmp 0x10022b00
xor eax, eax
inc eax
mov dword [ecx + 4], eax
xor edx, edx
mov ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x14]
cmp dword [ecx + 8], eax
lea ecx, [ebp - 0x12c]
setg dl
xor eax, eax
cmp edx, 0xda2a
setne al
imul eax, eax, 0x378cabcc
mov dword [ebp - 0x110], eax
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.10001f55
push 4
lea ecx, [ebp - 0x168]
call fcn.10001ed2
push 0x5f4c
push 0xc91
push 0x70f1
push 0x27f8
push 0x1dea
lea eax, [ebp - 0x194]
mov dword [ebp - 4], 9
push eax
push 0x705d
push 0x5382
push 1
push 0x729c
push 0x7531
lea eax, [ebp - 0x168]
mov dword [ebp - 0x14], ebx
push 1
push eax
mov edx, 0xd78
mov cl, 1
call fcn.10021ba8
mov dword [ebp - 0x14], 3
add esp, 0x34
cmp dword [ebp - 0x14], ebx
jl 0x10022bca
lea eax, [ebp + 0x23]
mov byte [ebp + 0x23], bl
push eax
push ecx
call fcn.100225d1
dec dword [ebp - 0x14]
pop ecx
pop ecx
jns 0x10022bb6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.10001f55
push 0x7c
pop eax
push 2
pop edi
mov ecx, ebx
mov dword [ebp - 0x58], 0xe2042000
mov word [ebp - 0x54], 0x2847
mov esi, edi
mov byte [ebp - 0x52], 0xa9
mov word [ebp - 0x44], ax
mov dword [ebp - 0x8c], ecx
cmp esi, edi
jne 0x10022c0f
push 5
pop ecx
push ecx
mov dword [ebp - 0x8c], ecx
pop esi
jmp 0x10022c85
movzx edx, byte [ebp + esi - 0x57]
mov eax, esi
sub eax, ecx
push 0x2220
push 0x31d7
push 0x1057
movzx eax, byte [ebp + eax - 0x5a]
movzx eax, word [ebp + eax*2 - 0x44]
mov ecx, eax
and eax, edx
or ecx, edx
mov edx, 0x7460
sub ecx, eax
movzx eax, byte [ebp + esi - 0x58]
mov word [ebp + eax*2 - 0x44], cx
lea eax, [ebp - 0x8c]
push eax
push 0x1816
push 0x20ca
push 0x5247
push 0xfca
push ebx
push 0x5e28
push 0x672f
push 1
push 0x5330
xor cl, cl
call fcn.10021ba8
mov ecx, dword [ebp - 0x8c]
add esp, 0x34
add esi, edi
cmp esi, 7
jb 0x10022bfe
xor eax, eax
lea ecx, [ebp - 0x138]
mov word [ebp - 0x42], ax
mov dword [ebp - 0x20], 0xfffffff8
push edi
call fcn.10001ed2
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0x1dc]
push dword [ebp + 0x20]
movdqa xmm0, xmmword [0x10072f60]
lea ecx, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x1ec]
mov dword [ebp - 0x18], 0x26c312fb
push eax
mov dword [ebp - 0x14], 0x32fd2d1a
mov dword [ebp - 0x14], 8
push ebx
movdqu xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
call fcn.10001fbb
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x138]
mov edx, 0x1374
push eax
xor cl, cl
call fcn.10022630
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0x1d
pop ecx
pop ecx
jl 0x10022ed4
mov esi, dword [ebp - 0x138]
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x24], 0x1df82d83
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x10022d5e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x238], 0xadf890ba
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10022d4d
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [esi + 4], 0x91e2
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xffffffff
setne cl
imul ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x10022e44
push 3
lea ecx, [ebp - 0x15c]
call fcn.10001ed2
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 0xc
push eax
push ebx
push 1
lea edx, [ebp - 0x30]
mov cl, 1
call fcn.10021fd0
add esp, 0xc
mov dword [ebp - 0x30], ebx
jmp 0x10022dd7
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x204], ebx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x10022dca
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [esi + 4], 0xd4b4b26d
setne al
imul eax, eax, 0xdd61
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x15c]
cmp eax, dword [ecx]
mov esi, dword [ecx + 8]
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xe4]
setne cl
xor edx, edx
sub ecx, esi
cmp esi, ecx
lea ecx, [ebp - 0x15c]
setg dl
imul edx, dword [eax + 8]
mov dword [ebp - 0x204], edx
mov byte [ebp - 4], 0xb
call fcn.10001f55
mov esi, dword [ebp - 0x3c]
jmp 0x10022e71
push 1
push 0x30ae
push ecx
push ecx
mov dword [ebp - 0x78], 0x8663c10b
lea ecx, [ebp - 0x108]
push 0x3fe1
mov dword [ebp - 0x108], 0x204
call fcn.1002191e
add esp, 0x14
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x10022ec7
mov dword [ebp - 0x24], ebx
jmp 0x10022ebc
push 0xe9d
push 1
push ebx
push 0xe98
push 0x3b62
push 0x222b
lea eax, [ebp - 0x25]
mov byte [ebp - 0x25], bl
push eax
push 0x1305
push 0xa17
mov dl, 1
mov ecx, 0x5c5c
call fcn.100249ae
add esp, 0x24
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x10022e82
dec dword [ebp - 0x14]
jns 0x10022e7d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1d
jge 0x10022d3a
lea ecx, [ebp - 0xe4]
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.10001f55
xor eax, eax
mov dword [ebp - 0x1b0], 7
mov word [ebp - 0x1c4], ax
lea ecx, [ebp - 0x1c4]
lea eax, [ebp - 0x44]
mov dword [ebp - 0x1b4], ebx
push eax
call fcn.100194c0
mov edx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x100]
mov dword [ebp - 4], 0xd
call fcn.10021802
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0xf
call fcn.10011831
mov eax, 0x256915a
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x14], ebx
jmp 0x10022f74
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x228], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10022f67
push ecx
push 0x6cbe
mov byte [ebp - 0x26], bl
lea ecx, [ebp - 0x26]
push 1
call fcn.10021f20
add esp, 0xc
mov dword [ebp - 0xec], edi
cmp dword [ebp - 0xec], ebx
jl 0x10022fbe
push ecx
push 0x2dc7
push 1
push ecx
lea eax, [ebp - 0x27]
mov byte [ebp - 0x27], bl
push eax
call fcn.10021f6f
add esp, 0x14
dec dword [ebp - 0xec]
jns 0x10022f9e
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x34], 0xe1757117
mov dword [ebp - 0x18], 0x526d
cmp dword [ebp - 0x18], 0x5599
jle 0x10023012
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov ecx, ebx
mov eax, esi
sar eax, cl
mov ecx, 0x10080838
or eax, edi
cdq
push edx
push eax
call fcn.10010b40
inc ebx
cmp ebx, 0x52f4
jl 0x10022fdf
inc esi
push 0
pop ebx
cmp esi, 0x5dd
jl 0x10022fdc
inc edi
cmp edi, 0x7394
jl 0x10022fda
mov dword [ebp - 0xc8], 0xffffffff
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x18], 0x51aa
jge 0x10023059
mov edx, str.qsaz_ixwxnyl_jwqsq
mov ecx, 0x10080838
call fcn.10013913
jmp 0x10023059
push 0x20
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x150]
pop esi
mov dword [ebp - 0xb8], 0x951bb35b
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0xc0], 1
push 4
call fcn.10001ed2
push ecx
push ecx
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.10023b5f
add esp, 0x10
mov dword [ebp - 0x34], ebx
jmp 0x1002313f
push ecx
push 0x531b
push ecx
push 1
mov dword [ebp - 0xbc], 8
push ecx
mov dword [ebp - 0xb0], 0x1eb7e595
mov ecx, 0x7eaf
mov dword [ebp - 0xb4], 0xfffffff8
call fcn.10024842
lea eax, [ebp - 0xb8]
xor cl, cl
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x104]
push eax
push 0xc70
lea eax, [ebp - 0xc8]
push eax
push 0x1274
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xb0]
push eax
push 1
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xbc]
push eax
push 1
push 0x709d
lea edx, [ebp - 0x150]
call fcn.10021ba8
add esp, 0x48
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
je 0x100230b2
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0xf
call fcn.10001f55
push 2
mov ecx, ebx
mov word [ebp - 0xa2], si
mov word [ebp - 0x6c], 0x9803
mov byte [ebp - 0x6a], bl
mov dword [ebp - 0x69], 0x1030229
mov dword [ebp - 0x65], 0xad080207
pop esi
mov dword [ebp - 0x80], ecx
cmp esi, 8
jne 0x1002318e
push 3
pop ecx
push 9
mov dword [ebp - 0x80], ecx
pop esi
jmp 0x100231ce
movzx edx, byte [ebp + esi - 0x6b]
mov eax, esi
sub eax, ecx
push ebx
push 1
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0xa8]
mov ecx, eax
and eax, edx
or ecx, edx
lea edx, [ebp - 0x80]
sub ecx, eax
movzx eax, byte [ebp + esi - 0x6c]
mov word [ebp + eax*2 - 0xa8], cx
mov ecx, 0x2ec4
call fcn.10024e75
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
add esi, 2
cmp esi, 0xb
jb 0x1002317e
xor eax, eax
mov word [ebp - 0xa0], ax
mov dword [ebp - 0x2c], 0x8bbca631
mov dword [ebp - 0xc4], 0xae77ab39
mov dword [ebp - 0x2c], 0xffffffe7
jmp 0x1002322e
lea eax, [ebp - 0xc4]
mov edx, 0x2798
push eax
push 0x4135
push ebx
lea ecx, [ebp - 0x2c]
call fcn.10024ee6
push 0x4035
push 1
push 1
mov edx, 0x45b7
mov cl, 1
call fcn.10021fd0
add esp, 0x18
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffffc
jge 0x100231f9
xor eax, eax
mov dword [ebp - 0x174], 7
mov word [ebp - 0x188], ax
lea ecx, [ebp - 0x188]
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x178], ebx
push eax
call fcn.100194c0
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], 0x1440
cmp dword [ebp - 0x24], 0x17f8
jle 0x100232d9
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov eax, esi
mov dword [ebp - 0x3c], ebx
cdq
idiv edi
mov ebx, dword [ebp - 0x14]
mov edi, 0x19c0
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x78], edx
mov eax, ebx
mov ecx, 0x10080838
or eax, esi
cdq
push edx
push eax
call fcn.10010b40
add esi, dword [ebp - 0x78]
dec edi
jne 0x10023296
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x18], edi
push 0
pop ebx
cmp edi, 0x7d
jl 0x10023280
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x50c8
jl 0x1002327b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x165f
jl 0x10023276
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x24], 0x142a
jge 0x10023313
mov edx, str.irdqqd_uuzdyi_lnm_ozbdlvjg_eqdv_yixvgxovq_gbgch_zzy_gza_vcayg_gewavnu_ndewa_jqan_huh
mov ecx, 0x10080838
call fcn.10013913
jmp 0x10023313
push 2
pop edi
push 1
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], 0x13
call fcn.10001ed2
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x50], edi
mov dword [ebp - 0xac], 0xe469
mov dword [ebp - 0x14], ebx
jmp 0x10023353
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0xac8b13ec
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10023340
push 0x546f
xor dl, dl
mov ecx, 0x77a7
call fcn.10024cff
pop ecx
mov dword [ebp - 0x50], ebx
cmp dword [ebp - 0x50], ebx
jg 0x100234cf
mov dword [ebp - 0x40], 0x1fe77dd6
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], ebx
jl 0x100234c7
push 0x2c8b
push 0x57f9
push 0x1577
push 0x2e20
push 0x60cf
lea eax, [ebp - 0x120]
mov dword [ebp - 0x9c], 0x8f3d4210
push eax
push ebx
lea eax, [ebp - 0x9c]
mov edx, 0x5ac6
push 1
push eax
mov cl, 1
call fcn.10021a16
mov dword [ebp - 0x18], 0x1537
add esp, 0x24
cmp dword [ebp - 0x18], 0x157e
jle 0x10023429
push ebx
push 0x76e
push ebx
call dword [sym.imp.ADVAPI32.dll_ControlService]
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x78], ebx
mov ecx, ebx
lea eax, [edi + esi]
sar eax, cl
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
inc ebx
cmp ebx, 0x281c
jl 0x100233f7
inc edi
push 0
pop ebx
cmp edi, 0x18de
jl 0x100233f4
inc esi
cmp esi, 0x4e08
jl 0x100233f2
push 0x5923
push 0xd82
lea eax, [ebp - 0x50]
mov edx, 0x16f5
push eax
push 0x249c
push 0x1e80
push 0x2004
push 1
lea eax, [ebp - 0x40]
mov ecx, 0x3813
push eax
push 1
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x9c]
push eax
push 1
call fcn.10022187
add esp, 0x38
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x18], 0x146d
jge 0x100234b8
mov edx, str.zdh_tnljds_cpp_spfevevg_eipta_rqnybqr_xhqjym_voeyxazsi_vxz_nwkuchljg_qnhvxnibj_bkqd_maldi_ftkvoxmb
mov ecx, 0x10080838
call fcn.10013913
jmp 0x100234b8
mov dword [ebp - 4], 0x16
dec dword [ebp - 0x40]
jmp 0x10023387
inc dword [ebp - 0x50]
jmp 0x1002336e
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x13
call fcn.10001f55
xor eax, eax
mov dword [ebp - 0x88], ebx
lea edi, [ebp - 0xa8]
stosd dword es:[edi], eax
push 0x18
pop ecx
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0x100]
cdq
idiv ecx
mov esi, eax
test esi, esi
je 0x10023554
push 0x1434
push 0x107b
lea eax, [ebp - 0x100]
mov cl, 1
push eax
lea eax, [ebp - 0x188]
push eax
push 0x2b90
push 0x7906
push 1
push 1
push 0x3207
lea edx, [ebp - 0x88]
call fcn.10021a16
mov eax, dword [ebp - 0x88]
add esp, 0x24
inc eax
mov dword [ebp - 0x88], eax
cmp eax, esi
jb 0x10023508
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x100]
push eax
call fcn.10026175
push ebx
push 1
lea ecx, [ebp - 0x188]
call fcn.10011831
lea ecx, [ebp - 0x100]
call fcn.1002652c
jmp 0x100236ae
mov dword [ebp - 0x18], 0x69a9
cmp dword [ebp - 0x18], 0x69ee
jle 0x100235ce
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x7c], ebx
mov ecx, ebx
mov eax, esi
sar eax, cl
mov ecx, 0x10080838
and eax, edi
cdq
push edx
push eax
call fcn.10010b40
inc ebx
cmp ebx, 0x6042
jl 0x10023598
inc esi
push 0
pop ebx
cmp esi, 0x657e
jl 0x10023595
inc edi
cmp edi, 0x25ad
jl 0x10023593
mov esi, dword [ebp - 0x70]
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x18], 0x66bf
jge 0x100235ed
mov edx, str.jvtt_xuucfgfr_jdez_pyqbktqe_nyxx_ylhx_rgrnaryae_lsmukmtg_rsjq_zclcol
mov ecx, 0x10080838
call fcn.10013913
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x885
cmp dword [ebp - 0x18], 0x900
jle 0x1002362d
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
inc esi
cmp esi, 0x728e
jl 0x10023605
inc edi
cmp edi, 0x3aff
jl 0x10023603
mov esi, dword [ebp - 0x70]
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x18], 0x5dd
jge 0x10023695
mov edx, str.kgewp_plsefawzv_rvg_rqnp_camnb_xuwzuki_kgv
mov ecx, 0x10080838
call fcn.10013913
jmp 0x10023695
mov dword [esi], ebx
cmp dword [esi], 1
jge 0x100236ae
mov edx, dword [ebp + 0x1c]
mov ecx, dword [esi]
mov eax, dword [edx]
or dword [eax + ecx*4], 0xffffffff
inc dword [esi]
cmp dword [esi], 1
jl 0x1002369f
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret