Function at 0x10002c7c
Capabilities:
Connect pipe
Create thread

Disassembly:
mov eax, 0x1005f0cd
call fcn.1005ea30
sub esp, 0x34
mov byte [ebp - 0x14], cl
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test dl, dl
je 0x10002d7e
test cl, cl
je 0x10002d69
mov dword [ebp - 0x24], 0x1672
cmp dword [ebp - 0x24], 0x19f0
jle 0x10002d0f
xor esi, esi
mov dword [ebp - 0x20], esi
xor ebx, ebx
mov dword [ebp - 0x1c], 0x6a12
mov dword [ebp - 0x18], ebx
xor edi, edi
mov ecx, edi
mov dword [ebp - 0x28], ebx
xor esi, esi
sar ebx, cl
mov ecx, esi
mov eax, ebx
sar eax, cl
mov ecx, 0x1007aeb8
cdq
push edx
push eax
call fcn.10003751
inc esi
cmp esi, 0x1f70
jl 0x10002cce
mov ebx, dword [ebp - 0x18]
inc edi
cmp edi, 0x1b60
jl 0x10002cc5
mov esi, dword [ebp - 0x20]
add ebx, esi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], ebx
jne 0x10002cc3
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x2351
jl 0x10002cb7
mov eax, dword [ebp + 0x24]
cmp byte [eax], 0
je 0x10002d2e
push 0xdd5
push 0x1ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
and dword [ebp - 4], 0
cmp dword [ebp - 0x24], 0x1381
jge 0x10002d4a
mov edx, str.heiuch_khzcd_firt_qdccz_teisqogaz_ljg_yyhxohfmt_jth_nwmlt_tyueoibi_hyirmiss_dhncecnd_vhjs_natu
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10002eb5
push ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp + 0x14]
push eax
call fcn.10004114
jmp 0x10002eb5
cmp byte [ebp + 0x20], 0
je 0x10002ea3
mov dword [ebp - 0x20], 0x3a9b
cmp dword [ebp - 0x20], 0x3b65
jle 0x10002e15
xor esi, esi
xor edi, edi
xor ebx, ebx
xor ecx, ecx
mov dword [ebp - 0x24], ecx
mov eax, ebx
sar eax, cl
lea ecx, [ebp - 0x40]
and eax, edi
or eax, esi
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002dc0
mov eax, dword [eax]
push eax
call fcn.10047ad3
pop ecx
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10003d9b
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x14d0
jl 0x10002da3
inc ebx
cmp ebx, 0x281e
jl 0x10002d9e
inc edi
cmp edi, 0x2589
jl 0x10002d9c
inc esi
cmp esi, 0x5109
jl 0x10002d9a
push 0
push 0x170c
push 0
push 0
push 0x15be
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [ebp - 0x20], 0x36d6
jge 0x10002e29
push str.zxeynsqd_vhh_prar_cpx_gbw_gww_lgxwxnec_ukytjlxg_qdwaautqa_ounetit
call fcn.10047ad3
pop ecx
mov edi, dword [ebp + 0x28]
xor ecx, ecx
mov esi, dword [ebp + 8]
mov eax, dword [edi]
mov eax, dword [edi]
cmp eax, 1
mov eax, dword [edi]
setle cl
xor edx, edx
cmp ecx, eax
mov ecx, dword [edi]
mov eax, dword [esi]
setge dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [esi]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [edi]
mov edx, dword [edi]
setge cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [esi]
setg bl
xor ecx, ecx
imul edx, ebx
cmp edx, eax
mov eax, dword [ebp + 0xc]
setge cl
mov dword [eax], ecx
imul eax, dword [eax], 0xb667
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov edx, dword [edi]
sub edx, dword [ecx]
xor ecx, ecx
mov eax, dword [ebp + 0x18]
mov dword [eax], edx
mov edx, dword [eax]
mov eax, dword [esi]
sub edx, eax
mov eax, dword [edi]
add eax, dword [edi]
cmp eax, edx
mov eax, dword [ebp + 0x2c]
setne cl
mov dword [eax], ecx
jmp 0x10002eb5
mov eax, dword [ebp + 0x1c]
cmp byte [eax], 0
je 0x10002eb5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret