Function at 0x10012faa
Capabilities:
Connect pipe
Create process on windows
Encode data using xor
Query environment variable

Disassembly:
mov eax, 0x10058f85
call fcn.100582b8
sub esp, 0x278
push ebx
xor ebx, ebx
mov dword [ebp - 0x24], 5
push esi
mov byte [ebp - 0x15], bl
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x1b4], ebx
cmp byte [ebp - 0x15], bl
je 0x10012feb
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1001301b
push 0x445
push 0xbe3
push 0x22c8
push 0x232f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
mov dword [ebp - 0x30], 0xceafd94
mov dword [ebp - 0x28], 0x6f6dd8d1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x24], 0x3d1bca9d
mov dword [ebp - 0x2c], 0xffff
mov dword [ebp - 0x20], ebx
jmp 0x10013054
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1e4], 0x7a98815
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10013043
dec dword [ebp - 0x2c]
jne 0x100130a4
mov eax, dword [ebp - 0x1e0]
xor ebx, ebx
mov ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setg bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x2c]
sete dl
xor ecx, ecx
cmp eax, edx
mov eax, 0xc4365dea
setle cl
cmp eax, ecx
sbb eax, eax
xor ebx, ebx
neg eax
cmp eax, dword [ebp - 0x28]
jne 0x100130a0
cmp dword [ebp - 0x28], ebx
jne 0x100130a4
mov eax, ebx
jmp 0x100130a7
xor eax, eax
inc eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x160]
mov eax, dword [ebp - 0x30]
sub eax, 0xc809
neg eax
push 2
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
call fcn.10001bdd
mov dword [ebp - 0x1c], ebx
jmp 0x100130db
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100130cc
mov dword [ebp - 0x1c], ebx
jmp 0x100130f7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x170], 0x9bdba76a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100130e6
mov dword [ebp - 0x164], 1
cmp dword [ebp - 0x164], ebx
jl 0x1001315e
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x10013135
mov ecx, dword [ebp - 0x160]
cmp dword [ecx + 4], ebx
jne 0x10013135
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x1c]
jns 0x10013128
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x10013156
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10013151
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
dec dword [ebp - 0x1c]
jns 0x10013141
dec dword [ebp - 0x164]
jns 0x1001310f
lea ecx, [ebp - 0x160]
call fcn.10001c3a
mov dword [ebp - 0x6c], 0x2b001a05
mov dword [ebp - 0x68], 0x3e062503
mov dword [ebp - 0x64], 0xd013d04
mov dword [ebp - 0x60], 0xbf7db504
mov word [ebp - 0x5c], 0x264
mov byte [ebp - 0x5a], 3
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x30], 0x1d00
cmp dword [ebp - 0x30], 0x1f26
jle 0x100131fc
mov esi, ebx
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x268]
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100131c9
mov eax, dword [eax]
push eax
call fcn.100400a6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x268]
call fcn.10001eb4
inc edi
cmp edi, 0x17b3
jl 0x100131aa
inc esi
cmp esi, 0x49c
jl 0x100131a8
push ebx
push 0x882
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov dword [ebp - 0x28], 0xea2a3b3f
cmp dword [ebp - 0x30], 0x1ba6
jge 0x10013217
push str.amma_eteadsx_dgn_blyl_qqdnqnkn
call fcn.100400a6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], 0x8d9dcee3
mov dword [ebp - 0x20], ebx
jmp 0x1001323c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x58], 0x1476
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1001322e
dec dword [ebp - 0x28]
jne 0x1001326e
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x58], ebx
je 0x1001325b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x8af8
jle 0x1001326e
mov ecx, ebx
jmp 0x10013271
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x58]
xor edx, edx
cmp eax, ecx
setge dl
xor ecx, ecx
neg edx
cmp edx, 0x5b3847d2
setge cl
xor eax, eax
cmp ecx, 0xaf86
setg al
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100132b3
push ebx
push ebx
push ebx
push ebx
push 0x17f6
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push 0x6c
pop eax
push 3
lea ecx, [ebp - 0x148]
mov word [ebp - 0x11a], ax
call fcn.10001bdd
mov dword [ebp - 4], 2
mov dword [ebp - 0x28], 0x40f2fdad
mov dword [ebp - 0x24], 0x7d1afd06
mov dword [ebp - 0x24], 0x829ed890
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x24], 0xd70cadd6
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0x65c4
cmp dword [ebp - 0x24], 0x67ac
jle 0x10013384
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x2c], 0x2b8b
mov dword [ebp - 0x20], eax
mov esi, eax
mov dword [ebp - 0x30], 0x5e2c
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x22c]
or eax, edi
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10013344
mov eax, dword [eax]
push eax
call fcn.100400a6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x22c]
call fcn.10001eb4
inc edi
cmp edi, 0x23cc
jl 0x10013328
dec esi
dec dword [ebp - 0x30]
jne 0x10013326
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
add eax, esi
dec dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
jne 0x1001331d
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x54e6
jl 0x10013311
cmp dword [ebp - 0x24], 0x61f4
jge 0x10013398
push str.lnxfum_fin_jnriikemn_vpcaet
call fcn.100400a6
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x100133b0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x148]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1001339d
cmp dword [ebp - 0x28], 0x81479b69
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x148]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, dword [esi + 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, 0xc7e43439
setl dl
cmp eax, edx
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [esi + 8], 0xfbb9cf7d
jb 0x10013419
cmp dword [ebp - 0x20], ebx
jne 0x10013419
mov eax, ebx
jmp 0x1001341c
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x148]
or dword [ebp - 4], 0xffffffff
call fcn.10001c3a
push 2
pop esi
mov edi, ebx
cmp esi, 0xc
jne 0x10013443
push 5
pop edi
push 0xf
pop esi
jmp 0x100135f8
mov dword [ebp - 0x24], 0xfffffffc
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x24], 0xfffffffb
mov dword [ebp - 0x24], 0xdae8c9f3
push 1
call fcn.10001bdd
xor edx, edx
inc edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], 0x7d92
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x20], ebx
jmp 0x1001348d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1001347e
dec dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
push 0xfffffffffffffffd
pop ecx
sub ecx, eax
mov eax, dword [ebp - 0x130]
mov dword [eax], ecx
lea ecx, [ebp - 0x130]
call fcn.10001c3a
movzx edx, byte [ebp + esi - 0x6b]
mov eax, esi
sub eax, edi
push 1
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x124]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x6c]
mov word [ebp + eax*2 - 0x124], cx
mov eax, 0x18795010
mov dword [ebp - 0x80], eax
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], 0xffffffff
call fcn.10001bdd
mov dword [ebp - 0x24], 0x1ee3199f
push 3
mov dword [ebp - 0x30], 0x5d07a051
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x1001352a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x13c], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10013519
mov dword [ebp - 0x1c], ebx
jmp 0x10013547
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10013534
mov dword [ebp - 0x1c], ebx
jmp 0x10013563
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1f0], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10013552
cmp dword [ebp - 0x74], ebx
jne 0x10013571
mov ecx, ebx
jmp 0x10013574
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x74]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x74]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x134], ecx
test ecx, ecx
je 0x10013598
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x20], 0xffffffff
sbb ecx, ecx
neg ecx
add ecx, 0x20cb0022
imul ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x154]
mov dword [eax], ecx
lea ecx, [ebp - 0x154]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1f0]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x30], eax
call fcn.10001c3a
mov edi, ebx
add esi, 2
cmp esi, 0x13
jb 0x10013433
mov dword [ebp - 0x24], 0x255d
cmp dword [ebp - 0x24], 0x111b
jge 0x10013847
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x34]
push eax
push str._ld__ld
call fcn.10040302
mov edi, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x44], edi
add esp, 0xc
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 5
cmp dword [ebp - 0x90], 0
mov dword [ebp - 0x24], ebx
jle 0x10013742
lea eax, [ebp - 0xd4]
push eax
push 0x10060b0c
call fcn.10040302
cmp dword [ebp - 0xd4], 1
pop ecx
pop ecx
jne 0x1001369e
lea eax, [ebp - 0xd0]
push eax
push 0x10062590
call fcn.10040302
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x34]
cdq
idiv dword [ebp - 0x34]
pop ecx
pop ecx
mov dword [ebp - 0x1c], edx
jmp 0x1001372f
mov eax, esi
sub eax, edi
test eax, 0xfffffffc
je 0x100136c2
mov eax, dword [ebp - 0x1c]
and eax, 0x80000001
jns 0x100136b8
dec eax
or eax, 0xfffffffe
inc eax
cmp dword [esi - 4], eax
jne 0x100136c2
add esi, 0xfffffffc
jmp 0x1001372c
mov eax, dword [ebp - 0x1c]
and eax, 0x80000001
jns 0x100136d1
dec eax
or eax, 0xfffffffe
inc eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x70], eax
cmp ecx, esi
jae 0x1001370c
cmp edi, ecx
ja 0x1001370c
mov eax, ecx
sub eax, edi
sar eax, 2
mov dword [ebp - 0x30], eax
cmp esi, dword [ebp - 0x3c]
jne 0x10013703
push ecx
lea ecx, [ebp - 0x44]
call fcn.100149a2
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
test esi, esi
je 0x10013729
mov eax, dword [edi + eax*4]
jmp 0x10013727
cmp esi, dword [ebp - 0x3c]
jne 0x10013723
push ecx
lea ecx, [ebp - 0x44]
call fcn.100149a2
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
test esi, esi
je 0x10013729
mov dword [esi], eax
add esi, 4
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, dword [ebp - 0x90]
jl 0x10013657
push dword [ebp - 0x34]
lea ecx, [ebp - 0x8c]
call fcn.100116be
mov ecx, dword [ebp - 0x34]
sub esi, edi
sar esi, 2
test esi, esi
jne 0x10013779
mov edx, ebx
test ecx, ecx
jle 0x100137cd
mov esi, dword [ebp - 0x8c]
lea eax, [edx + 1]
mov dword [esi + edx*4], eax
mov edx, eax
mov ecx, dword [ebp - 0x34]
cmp edx, ecx
jl 0x10013768
jmp 0x100137d3
mov edi, ebx
test ecx, ecx
jle 0x100137cd
mov edx, esi
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
add eax, edi
and eax, 0x80000001
jns 0x10013797
dec eax
or eax, 0xfffffffe
inc eax
jne 0x1001379e
inc edi
mov eax, edx
jmp 0x100137b2
lea eax, [edi + 1]
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, esi
div ecx
sub edi, edx
lea eax, [ecx + edi]
mov edi, dword [ebp - 0x30]
xor edx, edx
div ecx
mov eax, dword [ebp - 0x8c]
mov dword [eax + edx*4], edi
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
inc edx
mov dword [ebp - 0x24], edx
cmp edi, ecx
jl 0x10013784
mov esi, dword [ebp - 0x8c]
mov edi, ebx
test ecx, ecx
jle 0x10013804
mov eax, dword [ebp - 0x1c]
neg eax
mov dword [ebp - 0x1c], eax
add eax, ecx
cdq
idiv ecx
push dword [esi + edx*4]
push str._ld
call fcn.100400a6
mov eax, dword [ebp - 0x1c]
inc edi
pop ecx
pop ecx
mov ecx, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x1c], eax
cmp edi, ecx
jl 0x100137e1
push 0x10060971
call fcn.10040bc6
pop ecx
test esi, esi
je 0x1001382c
push esi
call fcn.10040217
pop ecx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x10013847
push eax
call fcn.10040217
pop ecx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
xor eax, eax
lea ecx, [ebp - 0xc4]
push 3
mov word [ebp - 0x116], ax
call fcn.10001bdd
mov dword [ebp - 4], 6
mov dword [ebp - 0x20], 0xd45db34e
mov dword [ebp - 0x1c], ebx
jmp 0x10013881
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x214], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10013870
mov dword [ebp - 0x24], 0x701f
cmp dword [ebp - 0x24], 0x70e3
jle 0x100138be
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10072ab8
xor eax, esi
cdq
push edx
push eax
call fcn.10001ac8
inc edi
cmp edi, 0x3509
jl 0x1001389b
inc esi
cmp esi, 0x4d6e
jl 0x10013899
mov dword [ebp - 0x1c], ebx
jmp 0x100138d2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100138c3
mov byte [ebp - 4], 7
mov dword [ebp - 0x30], 0x2515
cmp dword [ebp - 0x30], 0x552
jge 0x10013a25
lea eax, [ebp - 0x94]
push eax
call fcn.100144ab
push 0xffffffffffffffff
push ecx
push ecx
call fcn.100145fc
mov edi, dword [ebp - 0x94]
mov eax, edi
dec edi
mov dword [ebp - 0x94], edi
test eax, eax
je 0x10013a25
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], ebx
mov byte [ebp - 0xb8], bl
push 0x10060971
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 8
call fcn.10001a6f
mov byte [ebp - 4], 9
mov eax, dword [0x10072bd8]
push 0xa
mov ecx, dword [eax + 4]
add ecx, 0x10072bd8
call fcn.10015387
push eax
lea edx, [ebp - 0xb8]
mov ecx, 0x10072bd8
call fcn.10016a00
mov eax, dword [ebp - 0xa8]
mov esi, ebx
mov edx, dword [ebp - 0xb8]
pop ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x28], eax
cmp esi, eax
jge 0x100139ee
cmp ecx, 0x10
lea eax, [ebp - 0xb8]
cmovae eax, edx
cmp byte [esi + eax], 0x20
je 0x100139e8
cmp ecx, 0x10
lea eax, [ebp - 0xb8]
lea ecx, [ebp - 0x208]
cmovae eax, edx
mov al, byte [esi + eax]
mov byte [ebp - 0x30], al
push dword [ebp - 0x30]
push 1
call fcn.100147dd
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xb8]
cmp ecx, 0x10
lea eax, [ebp - 0xb8]
cmovae eax, edx
cmp byte [esi + eax], 0x20
mov eax, dword [ebp - 0x28]
je 0x100139eb
inc esi
cmp esi, eax
jl 0x100139cc
jmp 0x100139eb
mov eax, dword [ebp - 0x28]
inc esi
jmp 0x10013988
lea edx, [ebp - 0x208]
call fcn.10016375
push eax
call fcn.10016525
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x208]
call fcn.10001eb4
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 7
call fcn.10001eb4
jmp 0x1001390b
cmp dword [ebp - 0x24], 0x6d21
jge 0x10013a5b
mov edx, str.edl_lvns_hqzrpenb_eim_rczkzdy_fjouhxoof_phpyvi_yyhh_basxthr_smbycz_kvac_ahnxrsb_zizl
mov ecx, 0x10072ab8
call fcn.1000350a
jmp 0x10013a5b
mov eax, dword [ebp - 0xc4]
mov dword [eax], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10013a8b
push ebx
push 0x149f
push 0xad2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov eax, dword [ebp - 0xc4]
inc dword [eax]
cmp dword [eax], 2
jle 0x10013a63
mov dword [ebp - 0x20], ebx
jmp 0x10013aed
mov dword [ebp - 0x24], 0xb7d8cf4c
mov dword [ebp - 0x2c], ebx
jmp 0x10013aba
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xfc], 8
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x10013aa9
mov dword [ebp - 0xf0], ebx
jmp 0x10013ae1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc4]
neg ecx
mov dword [eax], ecx
dec dword [ebp - 0xf0]
cmp dword [ebp - 0xf0], 0xffffffe8
jl 0x10013ac8
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffb
je 0x10013a9d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4]
call fcn.10001c3a
xor eax, eax
mov dword [ebp - 0x19c], 7
mov word [ebp - 0x1b0], ax
lea ecx, [ebp - 0x1b0]
lea eax, [ebp - 0x124]
mov dword [ebp - 0x1a0], ebx
push eax
call fcn.1000c915
mov dword [ebp - 4], 0xb
lea edi, [ebp - 0x124]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x24], 0xfec
cmp dword [ebp - 0x24], 0x1117
jle 0x10013b77
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10072ab8
and eax, esi
cdq
push edx
push eax
call fcn.10001ac8
inc edi
cmp edi, 0x27ae
jl 0x10013b54
inc esi
cmp esi, 0x36bf
jl 0x10013b52
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x24], 0xd12
jge 0x10013bb1
mov edx, str.iif_dfsttnuoj_szbke_sbkqemgm_dvwtl_psmjw_hujrtd_zgoyr_zwpx_zqqkk_rytdjfwdu_cocj_tnvg_stzbqt
mov ecx, 0x10072ab8
call fcn.1000350a
jmp 0x10013bb1
push 1
lea ecx, [ebp - 0x198]
mov dword [ebp - 4], 0xb
call fcn.10001bdd
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x28], 0x4c506d44
mov dword [ebp - 0x24], 0x1d2f
cmp dword [ebp - 0x24], 0x1f11
jle 0x10013c27
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x250]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10013c00
mov eax, dword [eax]
push eax
call fcn.100400a6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x250]
call fcn.10001eb4
inc edi
cmp edi, 0x505e
jl 0x10013be4
inc esi
cmp esi, 0x2f1c
jl 0x10013be2
cmp dword [ebp - 0x24], 0x1b05
jge 0x10013c3b
push str.jpglfa_vsiqg_gijkem_iwptz_prw_eplvdwwp_bncogyumx_ixlsvype_ymzrm_nrk_ekwslwx_ecy_lrcmof_xwwsdoa
call fcn.100400a6
pop ecx
xor edx, edx
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x10013c5d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x198]
mov dword [eax + ecx*4], 0x5b57fd54
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10013c4a
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x10013c79
mov dword [ebp - 0x24], 0x29949dfc
mov dword [ebp - 0x24], edx
dec dword [ebp - 0x28]
jns 0x10013c6a
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0xb
call fcn.10001c3a
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x1d4]
call fcn.1000c6fe
mov byte [ebp - 4], 0x11
push 3
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 0xd
pop edi
cmp dword [ebp - 0x1c], 0x1b
jl 0x10013d3b
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x20], ebx
jmp 0x10013cd5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x238], 0x88ad
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10013cc4
inc dword [ebp - 0x2c]
mov dword [ebp - 0x2c], ebx
jmp 0x10013d26
push 4
lea ecx, [ebp - 0xec]
call fcn.10001bdd
mov dword [ebp - 0x20], ebx
jmp 0x10013d07
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 0xefa2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10013cf4
mov eax, dword [ebp - 0xec]
lea ecx, [ebp - 0xec]
cmp dword [eax + 0xc], ebx
jne 0x10013d2e
call fcn.10001c3a
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jle 0x10013ce2
jmp 0x10013d33
call fcn.10001c3a
inc dword [ebp - 0x1c]
jmp 0x10013cae
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x20], 0x5d6c05ba
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10013d64
push 0x198b
push 0x17d9
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [ebp - 0x20], 0xffffffe6
jmp 0x10013d90
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10013d8d
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push ebx
push 0x1d98
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jne 0x10013d6d
push 0x5c
pop eax
push 2
pop esi
push 7
mov word [ebp - 0x48], ax
mov ecx, ebx
mov dword [ebp - 0x54], 0xe504d800
mov word [ebp - 0x50], 0xd02b
mov byte [ebp - 0x4e], 0x20
pop eax
cmp esi, 2
jne 0x10013dc2
push 5
pop ecx
push ecx
pop esi
jmp 0x10013dee
movzx edx, byte [ebp + esi - 0x53]
mov eax, esi
sub eax, ecx
push 7
movzx eax, byte [ebp + eax - 0x56]
movzx ecx, word [ebp + eax*2 - 0x48]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x54]
add ecx, edx
mov word [ebp + eax*2 - 0x48], cx
mov ecx, ebx
pop eax
add esi, 2
cmp esi, eax
jb 0x10013db6
xor ecx, ecx
mov word [ebp - 0x46], cx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], 0xffffffe3
jmp 0x10013e2b
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0xfffe
mov dword [ebp - 0x20], 0xffffffea
jmp 0x10013e22
cmp dword [ebp - 0x24], ebx
jne 0x10013e28
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff2
jge 0x10013e1a
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1d
jle 0x10013e07
mov dword [ebp - 0x100], eax
lea ecx, [ebp - 0x114]
xor eax, eax
mov dword [ebp - 0x104], ebx
mov word [ebp - 0x114], ax
lea eax, [ebp - 0x48]
push eax
call fcn.1000c915
push 0x5f
pop eax
mov byte [ebp - 4], 0x12
mov ecx, ebx
push 2
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x38], 0x19019c00
mov word [ebp - 0x4c], ax
pop esi
cmp esi, 2
jne 0x10013e78
push esi
pop ecx
jmp 0x10013ea1
movzx edx, byte [ebp + esi - 0x37]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x3a]
movzx ecx, word [ebp + eax*2 - 0x4c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x38]
add ecx, edx
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10013e6f
xor eax, eax
mov word [ebp - 0x4a], ax
mov dword [ebp - 0x2c], 0xac204e2d
mov dword [ebp - 0x28], 0x48e0
cmp dword [ebp - 0x28], 0x4b7b
jle 0x10013f29
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], 0x2bd5
mov dword [ebp - 0x24], ecx
mov eax, edi
and eax, ecx
lea ecx, [ebp - 0x280]
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10013ef2
mov eax, dword [eax]
push eax
call fcn.100400a6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x280]
call fcn.10001eb4
mov ecx, dword [ebp - 0x24]
add ecx, esi
dec dword [ebp - 0x30]
mov dword [ebp - 0x24], ecx
jne 0x10013ed6
inc esi
cmp esi, 0x7e30
jl 0x10013eca
inc edi
cmp edi, 0x632c
jl 0x10013ec8
push 3
pop edi
mov dword [ebp - 0x1c], 0x8530de9b
cmp dword [ebp - 0x28], 0x451c
jge 0x10013f44
push str.pwsuli_xioi_dvxtjneby_tku
call fcn.100400a6
pop ecx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], 0xcef3cf68
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x2c], ebx
jmp 0x10013f75
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xe0], 0xfff8
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jl 0x10013f64
mov dword [ebp - 0x2c], 0xffffffe3
jmp 0x10013fdb
mov dword [ebp - 0x28], 0x390197f0
mov dword [ebp - 0x28], ebx
jmp 0x10013fa0
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x174], 0xfffffffe
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 1
jl 0x10013f8f
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x10013fc9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10013fc4
push ebx
push ebx
push 0x37c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
dec dword [ebp - 0x28]
jns 0x10013fae
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10013fd8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 6
jl 0x10013f83
mov eax, dword [ebp - 0x30]
xor ecx, ecx
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 9
sbb eax, eax
xor ecx, ecx
neg eax
add eax, dword [ebp - 0x24]
cmp eax, 0x83e7
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd8]
setne cl
neg edx
sub edx, ecx
neg edx
sbb edx, edx
lea ecx, [edx + 1]
add ecx, eax
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0xd8]
cmp ecx, eax
jg 0x10014052
xor eax, eax
inc eax
jmp 0x10014054
mov eax, ebx
xor edx, edx
cmp eax, 0x90a
mov eax, dword [ebp - 0x1c]
sete dl
xor ecx, ecx
cmp eax, edx
setg cl
add ecx, dword [ebp - 0x30]
cmp ecx, 0x68dd2ac3
jge 0x1001407e
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x2c], eax
jmp 0x100140c5
push 2
mov dword [ebp - 0x1c], ebx
pop eax
jmp 0x100140a3
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x100140a0
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
jne 0x10014167
dec dword [ebp - 0x20]
jns 0x1001408e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x10014086
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100140c5
push 0x1577
push ebx
push ebx
push ebx
push 0x1dca
push ebx
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
xor eax, eax
mov dword [ebp - 0x178], 7
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x18c]
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x17c], ebx
push eax
call fcn.1000c915
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x24], 0x61f9c28a
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10014108
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001411e
push 0x1916
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x104]
cmp dword [ebp - 0x100], 8
lea eax, [ebp - 0x114]
push ebx
cmovae eax, dword [ebp - 0x114]
lea ecx, [ebp - 0x1d4]
push eax
call fcn.100117ac
cmp eax, 0xffffffff
je 0x10014172
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x18c]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1d4]
call fcn.10011ec1
jmp 0x10014121
push 0x254f
call dword [sym.imp.KERNEL32.dll_ExitThread]
push 1
lea ecx, [ebp - 0xa0]
call fcn.10001bdd
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0xb275cf8b
mov dword [ebp - 0x1c], ebx
jmp 0x100141a1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 0x9f9b3198
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1001418e
mov dword [ebp - 0x1c], ebx
jmp 0x100141b9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1bc], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100141ac
mov eax, dword [ebp - 0xa0]
mov dword [eax], edi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], 0x8e136dc9
cmp dword [ebp - 0x20], ebx
jne 0x10014249
mov eax, dword [ebp - 0xa0]
cmp dword [eax], ebx
je 0x10014200
mov eax, dword [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x30]
je 0x10014200
xor ecx, ecx
inc ecx
jmp 0x10014202
mov ecx, ebx
mov eax, dword [ebp - 0xa0]
mov edx, dword [eax]
xor eax, eax
cmp ecx, edx
setle al
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, edx
setl al
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
add ecx, 0x5fd0
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x20]
jl 0x10014249
mov eax, ebx
jmp 0x1001424c
xor eax, eax
inc eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xa0]
dec dword [eax]
cmp dword [eax], 0xffffffe2
jne 0x100141c7
lea ecx, [ebp - 0xa0]
call fcn.10001c3a
mov ecx, dword [ebp - 0xcc]
lea eax, [ebp - 0x1d4]
push eax
lea edx, [ebp - 0x1b0]
call fcn.10016557
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x18c]
call fcn.1000ca37
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.1000ca37
push ebx
push 1
lea ecx, [ebp - 0x1d4]
call fcn.1000ca37
push ebx
push 1
lea ecx, [ebp - 0x1b0]
call fcn.1000ca37
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xcc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret