Function at 0x1002293e
Capabilities:
Connect pipe
Terminate process

Disassembly:
mov eax, 0x1005fc12
call fcn.1005ea30
sub esp, 0x240
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x10], esp
inc eax
mov dword [ebp - 0x94], ecx
xor ebx, ebx
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0xa0]
push eax
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0x184], ebx
call fcn.100039f2
mov dword [ebp - 4], ebx
xor edx, edx
mov dword [ebp - 0x38], 0x80eec299
inc edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x20], ebx
jmp 0x100229a0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5c], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10022996
mov dword [ebp - 0x20], ebx
jmp 0x100229b9
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x100229aa
mov dword [ebp - 0x5c], ebx
cmp dword [ebp - 0x5c], 8
jne 0x10022b36
mov dword [ebp - 0x38], 0xbc6e5c7a
mov dword [ebp - 0x38], 0x6c74aa0d
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x38], 0x3f5047c4
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x54], 0x9c9
cmp dword [ebp - 0x54], 0xd8b
jle 0x10022aa9
push 0x4ea
push 0x25e1
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov dword [ebp - 0x58], ebx
mov esi, ebx
mov dword [ebp - 0x48], ebx
lea ecx, [esi + edi]
mov dword [ebp - 0x40], ebx
mov esi, eax
mov edi, ebx
sar esi, cl
mov eax, esi
lea ecx, [ebp - 0x200]
or eax, edi
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10022a58
mov eax, dword [eax]
push eax
call fcn.10047ad3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x200]
call fcn.10003d9b
inc edi
cmp edi, 0x1fbc
jl 0x10022a3c
mov esi, dword [ebp - 0x48]
mov edi, dword [ebp - 0x58]
inc esi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], esi
cmp esi, 0x76e5
jl 0x10022a30
inc edi
mov dword [ebp - 0x58], edi
cmp edi, 0x1ef7
jl 0x10022a2b
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x48cc
jl 0x10022a26
push ebx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov dword [ebp - 0x38], 0xb76eea53
cmp dword [ebp - 0x54], 0x998
jge 0x10022ac4
push str.uuqzs_spdehjrx_vuz_eht_fpuybns_hgtrz_zmyeuryz_olluf_uthwwn_xjxdynaf_auareaycl_hqco_bfhdhvhx
call fcn.10047ad3
pop ecx
push 2
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 4], ebx
call fcn.100039f2
mov dword [ebp - 0x38], 0x7b44
mov dword [ebp - 0x48], 9
mov dword [ebp - 0x28], ebx
jmp 0x10022afa
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1ac]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10022ae7
inc dword [ebp - 0x48]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10022b23
push ebx
push 0xe35
push ebx
push 0x1aed
push 0x11ec
call dword [sym.imp.GDI32.dll_ExtCreatePen]
lea ecx, [ebp - 0x1ac]
call fcn.10003a4f
inc dword [ebp - 0x5c]
jmp 0x100229c1
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x10022bf4
xor edx, edx
inc edx
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x1c], 0x85d5fca4
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
cmp dword [eax + ecx*4], ebx
je 0x10022b69
mov dword [ebp - 0x5c], edx
jmp 0x10022b71
mov dword [ebp - 0x5c], ebx
cmp dword [ebp - 0x5c], ebx
je 0x10022b74
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ecx + eax*4]
imul eax, dword [ecx]
neg eax
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xa0]
dec eax
cmp dword [ecx + esi*4], eax
mov eax, dword [ebp - 0xa0]
setne dl
xor ebx, ebx
cmp edx, dword [eax]
setg bl
xor ecx, ecx
cmp ebx, dword [eax + edi*4]
setg cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x50]
jge 0x10022bc8
cmp dword [ebp - 0x5c], ebx
je 0x10022bc8
xor edx, edx
inc edx
mov esi, edx
jmp 0x10022bcd
xor edx, edx
mov esi, ebx
inc edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], esi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x20]
jns 0x10022b45
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0]
call fcn.10003a4f
mov dword [ebp - 0x90], 0xd042905
mov dword [ebp - 0x8c], 0x33060e02
mov dword [ebp - 0x88], 0x25003e03
mov dword [ebp - 0x84], 0x24178904
mov word [ebp - 0x80], 0x152
mov byte [ebp - 0x7e], 0x2b
mov dword [ebp - 0x24], 0x6e87
mov dword [ebp - 0x1c], 0x643
mov dword [ebp - 0x48], 0xfffffffc
mov dword [ebp - 0x48], 0xcd9796a
mov dword [ebp - 0x48], 0x85734cb4
mov dword [ebp - 0x40], 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10022c7d
push 1
push ebx
push 0x1301
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, 1
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
cmp ecx, eax
push 0x6c
setge dl
imul edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setge cl
mov dword [ebp - 0x48], ecx
imul eax, dword [ebp - 0x48], 0xb667
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
mov dword [ebp - 0x48], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
cmp eax, edx
pop eax
setne cl
mov word [ebp - 0xfe], ax
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x24], 1
push 2
call fcn.100039f2
mov dword [ebp - 0x40], 0x3b6f9b69
mov dword [ebp - 0x28], ebx
jmp 0x10022d2e
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 0xfd9d0890
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10022d1b
mov dword [ebp - 0x24], ebx
jmp 0x10022d6d
mov dword [ebp - 0x50], 0xf6e2
mov dword [ebp - 0x40], 0x6f93bd5d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
je 0x10022d65
cmp dword [ebp - 0x50], ebx
je 0x10022d65
xor eax, eax
inc eax
jmp 0x10022d67
mov eax, ebx
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffffb
jle 0x10022d39
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x138]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
call fcn.10003a4f
push 2
pop edi
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x1c], edi
cmp edi, 0x13
jae 0x10023745
movzx eax, byte [ebp - 0x90]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x100231ed
movzx esi, byte [ebp + edi - 0x90]
mov dword [ebp - 0x24], 0xee1c9741
mov dword [ebp - 0x20], 0xdca2
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], 6
lea eax, [esi + 1]
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 0x1e64
cmp dword [ebp - 0x40], 0x1168
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], eax
jge 0x1002305f
push 0x100d8d90
push 0x1006b370
call fcn.100477eb
push 0x100d8d90
call fcn.10047760
mov esi, eax
add esp, 0xc
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x58], edi
mov edx, ebx
mov dword [ebp - 0x2c], ecx
lea eax, [esi - 2]
test esi, esi
jle 0x10022e51
mov cl, byte [edx + 0x100d8d90]
xor eax, eax
cmp cl, 0x30
sete al
add edi, eax
xor eax, eax
cmp cl, 0x31
mov ecx, dword [ebp - 0x2c]
sete al
add ecx, eax
inc edx
mov dword [ebp - 0x2c], ecx
cmp edx, esi
jl 0x10022e26
mov dword [ebp - 0x58], edi
lea eax, [esi - 2]
movd xmm0, dword [ebp - 0x2c]
mov edi, esi
cdq
sub edi, ecx
mov ecx, dword [ebp - 0x58]
sub eax, edx
sar eax, 1
sub edi, ecx
sub eax, ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], eax
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
push ecx
push ecx
cvtdq2pd xmm0, xmm0
mulsd xmm1, qword [0x1006db00]
movsd qword [ebp - 0x3c], xmm0
movsd qword [ebp - 0x7c], xmm1
movsd qword [esp], xmm1
call fcn.100485b0
fsub qword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
add eax, 2
fstp qword [ebp - 0x44]
cvttsd2si edx, qword [ebp - 0x44]
push 0
pop ecx
cmovs eax, ecx
test edx, edx
cmovs edx, ecx
test eax, eax
jle 0x10022ec1
add eax, edx
cmp eax, edi
jne 0x10022ecc
push 0x1006b374
call fcn.10047d92
pop ecx
movsd xmm0, qword [ebp - 0x7c]
mov edi, dword [ebp - 0x30]
push ecx
push ecx
inc edi
movsd qword [esp], xmm0
call fcn.100485b0
fsub qword [ebp - 0x3c]
xor edx, edx
test edi, edi
pop ecx
pop ecx
fld1
mov ecx, edi
faddp st(1)
cmovs ecx, edx
fstp qword [ebp - 0x44]
cvttsd2si eax, qword [ebp - 0x44]
test eax, eax
cmovs eax, edx
test ecx, ecx
jg 0x10022f08
test eax, eax
jle 0x10022f0f
add eax, ecx
cmp eax, dword [ebp - 0x28]
jne 0x10022f18
cmp byte [esi + 0x100d8d8f], 0x31
je 0x10022f5f
cmp byte [esi + 0x100d8d8f], 0x3f
jne 0x10022f6a
movsd xmm0, qword [ebp - 0x7c]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.100485b0
fsub qword [ebp - 0x3c]
xor edx, edx
test edi, edi
pop ecx
pop ecx
mov ecx, edi
fstp qword [ebp - 0x44]
cvttsd2si eax, qword [ebp - 0x44]
cmovs ecx, edx
test eax, eax
cmovs eax, edx
test ecx, ecx
jg 0x10022f55
test eax, eax
jle 0x10022f5f
add ecx, eax
mov eax, dword [ebp - 0x28]
dec eax
cmp ecx, eax
jne 0x10022f6a
push 0x1006b378
call fcn.10047d92
pop ecx
movsd xmm0, qword [ebp - 0x7c]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.100485b0
fsub qword [ebp - 0x3c]
pop ecx
pop ecx
xor ecx, ecx
test edi, edi
fld1
faddp st(1)
cmovs edi, ecx
fstp qword [ebp - 0x44]
cvttsd2si eax, qword [ebp - 0x44]
test eax, eax
cmovs eax, ecx
test edi, edi
jg 0x10022fa0
test eax, eax
jle 0x10022fab
add eax, edi
mov edi, dword [ebp - 0x28]
cmp eax, edi
jne 0x10022fb7
jmp 0x10022fae
mov edi, dword [ebp - 0x28]
cmp byte [esi + 0x100d8d8f], 0x30
je 0x10023006
cmp byte [esi + 0x100d8d8f], 0x3f
jne 0x10023011
movsd xmm0, qword [ebp - 0x7c]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.100485b0
fsub qword [ebp - 0x3c]
xor esi, esi
mov edx, dword [ebp - 0x30]
test edx, edx
pop ecx
fld1
faddp st(1)
pop ecx
mov ecx, edx
cmovs ecx, esi
xor edx, edx
fstp qword [ebp - 0x44]
cvttsd2si eax, qword [ebp - 0x44]
test eax, eax
cmovs eax, edx
test ecx, ecx
jg 0x10022ffd
test eax, eax
jle 0x10023006
add ecx, eax
lea eax, [edi - 1]
cmp ecx, eax
jne 0x10023011
push 0x1006b37c
call fcn.10047d92
pop ecx
movsd xmm0, qword [ebp - 0x7c]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.100485b0
fsub qword [ebp - 0x3c]
pop ecx
xor edx, edx
pop ecx
mov ecx, dword [ebp - 0x30]
test ecx, ecx
fadd qword [0x1006db10]
cmovs ecx, edx
fstp qword [ebp - 0x3c]
cvttsd2si eax, qword [ebp - 0x3c]
test eax, eax
cmovs eax, edx
test eax, eax
jle 0x1002304e
add eax, ecx
cmp eax, edi
jne 0x10023059
push 0x1006b380
call fcn.10047d92
pop ecx
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x4c]
push 3
mov dword [ebp - 0x4c], 0xe4f20077
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0x1ef4
mov dword [ebp - 0x28], ebx
jmp 0x10023089
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1d0], 0x4e2095e0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10023078
cmp dword [ebp - 0x24], 0x5514
jg 0x1002309a
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, 0x2f3c
setle cl
sub eax, ecx
xor ecx, ecx
add eax, dword [ebp - 0x24]
cmp eax, 0x66e9f086
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp ecx, 0xffffffff
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl bl
xor ecx, ecx
cmp ebx, eax
mov eax, 0xfff9
setl cl
cmp eax, ecx
sbb eax, eax
xor ebx, ebx
neg eax
sub eax, dword [ebp - 0x20]
je 0x10023103
cmp dword [ebp - 0x24], ebx
je 0x10023103
xor edx, edx
inc edx
jmp 0x10023105
mov edx, ebx
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp edx, eax
sete cl
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x58], 0xe105
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
sub edx, 0xf62763f
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
xor eax, eax
cmp ecx, 8
setge al
dec edi
mov dword [ebp - 0x1c], eax
add edi, esi
mov dword [ebp - 0x30], 0x7e2799ac
mov dword [ebp - 0x30], ebx
jmp 0x100231d8
push 2
lea ecx, [ebp - 0xe0]
call fcn.100039f2
mov dword [ebp - 0x28], ebx
jmp 0x1002319a
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0x4d2edc75
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10023187
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100231c0
push 0xdd5
push 0x1ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
mov eax, dword [ebp - 0xe0]
lea ecx, [ebp - 0xe0]
cmp dword [eax], ebx
jne 0x100231e3
call fcn.10003a4f
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xe
jge 0x10023175
jmp 0x1002373d
call fcn.10003a4f
jmp 0x1002373d
mov dword [ebp - 0x20], 0x1928c176
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x2c], 0x3748
cmp dword [ebp - 0x2c], 0x3a62
jle 0x10023265
mov eax, ebx
mov dword [ebp - 0x54], ebx
mov edi, ebx
mov dword [ebp - 0x58], ebx
mov edx, eax
mov ecx, edi
shl edx, cl
mov esi, ebx
mov dword [ebp - 0x4c], edx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007aeb8
or eax, edx
cdq
push edx
push eax
call fcn.10003751
mov edx, dword [ebp - 0x4c]
inc edi
cmp edi, 0x5df0
jl 0x1002321e
inc esi
cmp esi, 0x3d13
jl 0x1002321c
mov edi, dword [ebp - 0x58]
mov eax, dword [ebp - 0x54]
inc edi
mov dword [ebp - 0x58], edi
cmp edi, 0x5674
jl 0x10023211
inc eax
mov dword [ebp - 0x54], eax
cmp eax, 0x2963
jl 0x1002320c
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 4], 3
cmp dword [ebp - 0x2c], 0x36ff
jge 0x10023287
mov edx, str.eqyhavvry_vataftkwc_jwcankp_spizugs_uuuu_nojzpyah_rqu_zql
mov ecx, 0x1007aeb8
call fcn.10005cf1
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], 0x8cdb5cf
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100232a9
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xfffffff2
je 0x100236c3
push 1
lea ecx, [ebp - 0xb8]
call fcn.100039f2
mov dword [ebp - 4], 5
mov dword [ebp - 0x24], 0x22b16580
mov dword [ebp - 0x4c], 0xfffffffb
mov dword [ebp - 0x58], 0xb6dad816
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], 0xfffffffd
mov dword [ebp - 0x28], ebx
jmp 0x10023326
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0xac70c309
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 1
jl 0x10023313
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x100236ac
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x30], 0x657e3b6f
mov dword [ebp - 0x40], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002335d
push ebx
push 1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jg 0x100236a4
mov dword [ebp - 0x38], 0x4dc41fd9
mov dword [ebp - 0x4c], 0x1f35
mov dword [ebp - 0x54], 0x157c
cmp dword [ebp - 0x54], 0x1256
jge 0x100234ef
mov edi, ebx
mov esi, ebx
test edi, edi
jne 0x100233b4
test esi, esi
jne 0x100233b4
push 0x1006b3e4
call fcn.10047760
pop ecx
push eax
push 0x1006b3e4
mov ecx, 0x100f1440
call fcn.10003d22
jmp 0x1002341a
push 0x1006b3e8
call fcn.10047760
pop ecx
imul ecx, edi, 0x32
push eax
push 0x1006b3e8
mov dword [ebp - 0x2c], ecx
add ecx, esi
imul ecx, ecx, 0x18
lea ecx, [ecx + 0x100f1440]
mov dword [ebp - 0x54], ecx
call fcn.10003d22
test edi, edi
jle 0x10023405
mov eax, dword [ebp - 0x2c]
add eax, 0xffffffce
add eax, esi
imul ecx, eax, 0x18
mov eax, dword [ebp - 0x54]
add ecx, 0x100f1440
cmp eax, ecx
je 0x10023408
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.10003c8e
mov eax, dword [ebp - 0x54]
test esi, esi
jle 0x1002341a
cmp edi, esi
jl 0x1002341a
lea edx, [eax - 0x18]
mov ecx, eax
call fcn.10022875
inc esi
cmp esi, 0x32
jle 0x1002338f
inc edi
cmp edi, 0x32
jle 0x1002338d
push 0x100d8d84
push 0x100d8d88
push str._d__d
call fcn.100477eb
mov eax, dword [0x100d8d88]
add esp, 0xc
mov ecx, dword [0x100d8d84]
test eax, eax
jne 0x1002345c
test ecx, ecx
je 0x100234ef
imul eax, eax, 0x32
add eax, ecx
lea ecx, [ebp - 0xd4]
imul eax, eax, 0x18
add eax, 0x100f1440
push eax
call fcn.100036c1
mov edi, dword [ebp - 0xc0]
lea ecx, [ebp - 0xd4]
mov esi, dword [ebp - 0xc4]
lea edx, [ebp - 0xd4]
cmp edi, 0x10
cmovae ecx, dword [ebp - 0xd4]
add esi, ecx
cmp edi, 0x10
cmovae edx, dword [ebp - 0xd4]
cmp edx, esi
je 0x100234bf
dec esi
cmp edx, esi
je 0x100234b9
mov cl, byte [edx]
mov al, byte [esi]
mov byte [edx], al
inc edx
mov byte [esi], cl
cmp edx, esi
jne 0x100234a7
mov edi, dword [ebp - 0xc0]
cmp edi, 0x10
lea eax, [ebp - 0xd4]
cmovae eax, dword [ebp - 0xd4]
push eax
push 0x1006b3ec
call fcn.10047ad3
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xd4]
call fcn.10003d9b
jmp 0x1002342e
cmp dword [ebp - 0x4c], 0x2138
jle 0x1002357e
push ebx
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
mov edx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x54], ebx
mov esi, ebx
lea ecx, [esi + eax]
mov edi, ebx
mov eax, edx
shl eax, cl
mov dword [ebp - 0x78], eax
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x230]
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023537
mov eax, dword [eax]
push eax
call fcn.10047ad3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x230]
call fcn.10003d9b
mov eax, dword [ebp - 0x78]
inc edi
cmp edi, 0x77e5
jl 0x1002351b
mov eax, dword [ebp - 0x54]
inc esi
mov edx, dword [ebp - 0x2c]
cmp esi, 0x17b
jl 0x1002350f
inc eax
mov dword [ebp - 0x54], eax
cmp eax, 0x4619
jl 0x1002350d
inc edx
mov dword [ebp - 0x2c], edx
cmp edx, 0x4f04
jl 0x10023508
cmp dword [ebp - 0x4c], 0x1da3
jge 0x10023592
push str.ihegnmta_osjwrv_jdib_gwamcnzs_dffhiyya_mvdigbci_adlxu_icu_zhifbu_laropydwh
call fcn.10047ad3
pop ecx
mov dword [ebp - 4], 5
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100235c0
push 1
push 0xccd
push 0x1158
push 0x41b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [eax + edx*4]
xor eax, eax
cmp ecx, 0x39c01058
setne al
xor edx, edx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, 4
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x4c]
test eax, eax
jne 0x1002360d
cmp dword [ebp - 0x20], ebx
jne 0x1002360d
mov ecx, ebx
jmp 0x10023610
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x30]
add eax, ecx
je 0x10023626
mov eax, dword [ebp - 0xb8]
cmp dword [eax], ebx
je 0x10023626
xor esi, esi
inc esi
jmp 0x10023628
mov esi, ebx
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x50]
cmp esi, eax
mov eax, dword [ebp - 0xb8]
setg dl
add edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
cmp edx, eax
setle cl
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x40], ebx
jne 0x10023665
cmp dword [ebp - 0x30], ebx
jne 0x10023665
mov edx, ebx
jmp 0x10023668
xor edx, edx
inc edx
mov eax, dword [ebp - 0x58]
mov ecx, 0x863718bd
mov dword [ebp - 0x4c], eax
sub ecx, edx
mov eax, dword [ebp - 0x4c]
dec dword [ebp - 0x58]
cmp eax, ecx
jge 0x10023684
xor eax, eax
inc eax
jmp 0x10023686
mov eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], 0xad37
inc dword [ebp - 0x28]
jmp 0x10023360
dec dword [ebp - 0x24]
jmp 0x1002332f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb8]
call fcn.10003a4f
dec dword [ebp - 0x20]
jmp 0x100232ac
mov edi, dword [ebp - 0x1c]
mov eax, edi
sub eax, dword [ebp - 0x48]
movzx edx, byte [ebp + edi - 0x8f]
movzx eax, byte [ebp + eax - 0x92]
movzx ecx, word [ebp + eax*2 - 0x108]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x90]
add ecx, edx
mov word [ebp + eax*2 - 0x108], cx
mov dword [ebp - 0x30], 0xd6f2ee76
mov dword [ebp - 0x40], 0xf89b5461
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], ebx
jmp 0x10023734
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x78], 0xfafd11d9
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x40], 3
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x3c
jg 0x10023716
mov dword [ebp - 0x48], ebx
add edi, 2
jmp 0x10022d8f
xor eax, eax
mov dword [ebp - 0x160], 7
mov word [ebp - 0xfa], ax
lea ecx, [ebp - 0x174]
mov word [ebp - 0x174], ax
lea eax, [ebp - 0x108]
push eax
mov dword [ebp - 0x164], ebx
call fcn.100202ec
mov dword [ebp - 4], 8
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x38], 0x2ca96836
mov dword [ebp - 0x30], ebx
jmp 0x100237fd
push 4
lea ecx, [ebp - 0x120]
call fcn.100039f2
mov dword [ebp - 0x1c], ebx
jmp 0x100237b6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100237a3
cmp dword [ebp - 0x30], ebx
je 0x100237d3
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100237ef
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x100237ef
mov dword [ebp - 0x38], 0xda37bb00
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x120]
cmp dword [eax + 8], 1
setle cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x120]
call fcn.10003a4f
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff3
jge 0x10023791
xor eax, eax
lea edi, [ebp - 0x108]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x40], 0x3d94
cmp dword [ebp - 0x40], 0x4001
jle 0x10023846
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007aeb8
xor eax, esi
cdq
push edx
push eax
call fcn.10003751
inc edi
cmp edi, 0x1427
jl 0x10023823
inc esi
cmp esi, 0x3e40
jl 0x10023821
mov byte [ebp - 4], 9
cmp dword [ebp - 0x40], 0x39cd
jge 0x10023880
mov edx, str.ivxg_fmb_jxjon_hcho_jtuilyv_ymaovytni_bgqx_zpuvk_ibsiswea_vkbvlabs
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10023880
mov dword [ebp - 4], 8
mov dword [ebp - 0x38], 0x49fe387
mov dword [ebp - 0x38], 0x971c1ec2
mov dword [ebp - 0x50], 0x7ef0
cmp dword [ebp - 0x50], 0x81b6
jle 0x10023905
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x48], ebx
mov edi, ebx
mov dword [ebp - 0x40], ebx
mov esi, edi
mov dword [ebp - 0x38], ebx
xor esi, eax
mov edi, ebx
xor esi, ecx
mov eax, esi
mov ecx, 0x1007aeb8
or eax, edi
cdq
push edx
push eax
call fcn.10003751
inc edi
cmp edi, 0x6e86
jl 0x100238bf
mov edi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
inc edi
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x40], edi
cmp edi, 0x31c8
jl 0x100238b4
inc eax
mov dword [ebp - 0x48], eax
cmp eax, 0x3114
jl 0x100238af
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x4acd
jl 0x100238aa
mov dword [ebp - 0x38], 0x4f84b811
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x50], 0x7c69
jge 0x10023946
mov edx, str.lflptxq_vuglkqgi_iozuii_leowsy_lvvjl_iuttptexl_dcdnp_rhnjcskm_mlcf_vvchquyq_ceeiohhc_rcqfsth
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10023946
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x38], 0xaa39ed08
mov dword [ebp - 0x38], 0x509978f3
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0x653d4237
mov dword [ebp - 0x38], 0x5cc25bfc
mov dword [ebp - 0x38], 1
push 3
call fcn.100039f2
mov dword [ebp - 0x40], 0xb564
mov dword [ebp - 0x1c], ebx
jmp 0x100239a3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x180]
mov dword [eax + ecx*4], 0x591b68de
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10023990
inc dword [ebp - 0x40]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100239c3
push ebx
push ebx
push 0x20ee
push ebx
call dword [sym.imp.USER32.dll_AppendMenuA]
lea ecx, [ebp - 0x180]
call fcn.10003a4f
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x1c4]
call fcn.10003866
push 1
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xd
call fcn.100039f2
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1c], 0x9a3df603
mov dword [ebp - 0x1c], ebx
jmp 0x10023a13
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 0x1124f01c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10023a00
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x10023afc
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jg 0x10023af4
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10023aec
mov dword [ebp - 0x4c], 0x5e80
cmp dword [ebp - 0x4c], 0x5fb2
jle 0x10023ab6
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x40], 0x7979
mov esi, dword [ebp - 0x48]
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x1e8]
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023a81
mov eax, dword [eax]
push eax
call fcn.10047ad3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1e8]
call fcn.10003d9b
inc edi
cmp edi, 0x2950
jl 0x10023a63
mov esi, dword [ebp - 0x50]
add dword [ebp - 0x48], esi
dec dword [ebp - 0x40]
jne 0x10023a5e
inc esi
mov dword [ebp - 0x50], esi
cmp esi, 0x4df5
jl 0x10023a54
push ebx
push 0x1077
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
cmp dword [ebp - 0x4c], 0x5b48
jge 0x10023ae5
push str.szj_pbhpmggz_lkytfuyop_ujuoj_kcnledtk_vrbzvku_obt_uyzhcmuo_hmgi_rjryghj
call fcn.10047ad3
pop ecx
mov dword [ebp - 4], 0xe
inc dword [ebp - 0x2c]
jmp 0x10023a2b
inc dword [ebp - 0x1c]
jmp 0x10023a1c
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xd
call fcn.10003a4f
push 0x5c
pop eax
push 2
mov dword [ebp - 0x68], 0xa1010600
mov ecx, ebx
mov word [ebp - 0x6c], ax
pop esi
cmp esi, 2
jne 0x10023b27
push esi
pop ecx
jmp 0x10023b4e
movzx edx, byte [ebp + esi - 0x67]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x6a]
movzx eax, word [ebp + eax*2 - 0x6c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x68]
mov word [ebp + eax*2 - 0x6c], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10023b1e
xor eax, eax
mov dword [ebp - 0xe4], 7
mov word [ebp - 0x6a], ax
lea ecx, [ebp - 0xf8]
mov word [ebp - 0xf8], ax
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0xe8], ebx
call fcn.100202ec
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x24], 0xe223
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x50], 0x4b4b
cmp dword [ebp - 0x50], 0x4c48
jle 0x10023bf7
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x218]
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023bd0
mov eax, dword [eax]
push eax
call fcn.10047ad3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x218]
call fcn.10003d9b
inc esi
cmp esi, 0x5fa
jl 0x10023bb5
inc edi
cmp edi, 0x2e4d
jl 0x10023bb3
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x114]
push 1
call fcn.100039f2
mov dword [ebp - 0x38], 0x2d0da0bd
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10023c29
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0x20002526
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10023c16
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10023c4d
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x24], ebx
jmp 0x10023ca4
mov dword [ebp - 0x1c], 0x8358bd4d
mov dword [ebp - 0x38], 0x1a7ecc24
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0xe8fe7528
mov dword [ebp - 0x1c], ebx
jmp 0x10023c8e
mov dword [ebp - 0x38], 0x5da2
mov dword [ebp - 0x38], 0xdac842f8
inc dword [ebp - 0x40]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10023c7a
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x114]
cmp dword [eax + ecx*4], ebx
jne 0x10023ca9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10023c52
lea ecx, [ebp - 0x114]
call fcn.10003a4f
cmp dword [ebp - 0x50], 0x4822
jge 0x10023cc8
push str.itl_uuoeey_ieqcspq_invi_zjglxg_fqwz_wxvda
call fcn.10047ad3
pop ecx
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x20], 0xfe0a8eac
push 2
call fcn.100039f2
push 4
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x14
call fcn.100039f2
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x38], 0xfffffff6
mov dword [ebp - 0x20], ebx
jmp 0x10023d1a
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0xc9ca
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10023d07
mov dword [ebp - 0x20], ebx
jmp 0x10023d34
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10023d25
mov dword [ebp - 0x20], 9
cmp dword [ebp - 0x20], 0xffffffe3
jl 0x10023ec0
mov dword [ebp - 0x28], 0xf951fe77
lea ecx, [ebp - 0x150]
push 1
call fcn.100039f2
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1c], ebx
jmp 0x10023d7b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0x2972
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10023d68
mov dword [ebp - 0x40], 0x4d60
cmp dword [ebp - 0x40], 0x4fd3
jle 0x10023deb
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov esi, ebx
add eax, edi
lea ecx, [ebp - 0x248]
or eax, esi
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023db6
mov eax, dword [eax]
push eax
call fcn.10047ad3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x248]
call fcn.10003d9b
mov eax, dword [ebp - 0x2c]
inc esi
cmp esi, 0x1c2f
jl 0x10023d9a
inc edi
cmp edi, 0x1781
jl 0x10023d98
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x4f04
jl 0x10023d96
mov dword [ebp - 0x28], ebx
jmp 0x10023e88
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 0xffffffe5
jmp 0x10023e7b
mov dword [ebp - 0x2c], 0x16b471df
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x10023e78
mov dword [ebp - 0x30], 0xe864896e
mov dword [ebp - 0x30], ebx
jmp 0x10023e6e
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x150]
cmp dword [eax + ecx*4], ebx
jne 0x10023e73
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jl 0x10023e64
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10023e4f
call esi
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10023e6b
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x10023e6b
mov dword [ebp - 0x38], 1
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jle 0x10023e21
dec dword [ebp - 0x2c]
jns 0x10023e15
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x12
jle 0x10023dff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x17
jl 0x10023df3
cmp dword [ebp - 0x40], 0x4c47
jge 0x10023ea6
push str.xlizdfy_nluueynfc_xjmoxjp_tza
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 4], 0x15
call fcn.10003a4f
dec dword [ebp - 0x20]
jmp 0x10023d41
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 1
jg 0x10023f0c
mov esi, dword [ebp - 0x12c]
mov dword [ebp - 0x40], 0x79096a9c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x40]
add eax, dword [ecx + edx*4]
mov dword [esi + 4], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x10023ecf
lea ecx, [ebp - 0x12c]
call fcn.10003a4f
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x11
call fcn.10003a4f
push 0x5f
pop eax
push 2
mov edi, ebx
mov dword [ebp - 0x64], 0xed02ca00
mov byte [ebp - 0x60], 0x46
mov word [ebp - 0x70], ax
pop esi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x48], esi
cmp esi, 5
jae 0x10024039
mov dword [ebp - 0x4c], 0xfc9
cmp dword [ebp - 0x4c], 0x1107
jle 0x10023f9f
mov dword [ebp - 0x50], ebx
mov esi, ebx
mov dword [ebp - 0x40], 0x4799
mov edi, ebx
mov eax, edi
mov ecx, 0x1007aeb8
or eax, esi
cdq
push edx
push eax
call fcn.10003751
inc edi
cmp edi, 0x484e
jl 0x10023f6a
mov eax, dword [ebp - 0x50]
add esi, eax
dec dword [ebp - 0x40]
jne 0x10023f68
inc eax
mov dword [ebp - 0x50], eax
cmp eax, 0x2b17
jl 0x10023f5f
mov esi, dword [ebp - 0x48]
mov edi, dword [ebp - 0x2c]
movzx eax, byte [ebp - 0x64]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10023fbe
movzx eax, byte [ebp + esi - 0x64]
dec esi
add esi, eax
lea edi, [eax + 1]
mov dword [ebp - 0x2c], edi
jmp 0x10024031
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x4c], 0xf27
jge 0x10023ffe
mov edx, str.vgcpwsg_tyjku_whbzpbpey_khuisxfm_aipehcxl
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10023ffe
mov eax, esi
mov dword [ebp - 4], 0x11
movzx edx, byte [ebp + esi - 0x63]
sub eax, edi
mov edi, ebx
mov dword [ebp - 0x2c], ebx
movzx eax, byte [ebp + eax - 0x66]
movzx ecx, word [ebp + eax*2 - 0x70]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
add ecx, edx
mov word [ebp + eax*2 - 0x70], cx
add esi, 2
jmp 0x10023f40
xor eax, eax
mov word [ebp - 0x6e], ax
mov dword [ebp - 0x38], 0x5720e83c
mov dword [ebp - 0x38], 0x4f37831e
mov dword [ebp - 0x38], 0x532bb11a
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x40], 9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], al
je 0x10024076
push 0xbfa
push ebx
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
dec dword [ebp - 0x40]
lea ecx, [ebp - 0x1a0]
xor eax, eax
mov dword [ebp - 0x18c], 7
mov word [ebp - 0x1a0], ax
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x190], ebx
call fcn.100202ec
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x28], 0x1a049fe3
mov dword [ebp - 0x28], 0xfffffffd
jmp 0x1002410e
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100240cd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x188], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100240c0
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x1002410b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100240ec
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10024106
push 0x6b6
push 0x6e1
push ebx
call dword [sym.imp.GDI32.dll_PtInRegion]
dec dword [ebp - 0x2c]
jns 0x100240db
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x11
jge 0x100240b8
push dword [ebp - 0xe8]
cmp dword [ebp - 0xe4], 8
lea eax, [ebp - 0xf8]
push ebx
cmovae eax, dword [ebp - 0xf8]
lea ecx, [ebp - 0x1c4]
push eax
call fcn.100246d9
cmp eax, 0xffffffff
je 0x1002415a
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1a0]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1c4]
call fcn.10015235
jmp 0x10024114
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x38], 0xc84060a3
mov dword [ebp - 0x78], 0x4ab19f88
mov dword [ebp - 0x1c], ebx
jmp 0x1002418c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xac], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002417b
mov dword [ebp - 0x50], 0x2cac
cmp dword [ebp - 0x50], 0x2ee1
jle 0x100241f2
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x40], ebx
add eax, esi
add ecx, edi
and eax, ecx
mov ecx, 0x1007aeb8
cdq
push edx
push eax
call fcn.10003751
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x1307
jl 0x100241b0
inc esi
cmp esi, 0x7953
jl 0x100241ab
inc edi
cmp edi, 0x3a20
jl 0x100241a9
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x8042
jl 0x100241a7
mov byte [ebp - 0x15], bl
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x50], 0x2b48
jge 0x1002422f
mov edx, str.jow_lajotnkk_imspmoqxp_qolwonuyg_ewjrd_byr_rrj_blhbziwo
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x1002422f
mov dword [ebp - 4], 0x1b
cmp byte [ebp - 0x15], 0
je 0x10024244
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
push 2
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x100243d3
mov dword [ebp - 0x30], 0xe1265ab3
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], ebx
jl 0x100243d0
mov dword [ebp - 0x28], 0x40271dbc
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xac]
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x20]
setle cl
sub eax, ecx
cmp eax, 0xffff
jne 0x100243a4
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], edx
jg 0x10024341
mov dword [ebp - 0x38], 0xf4a1d2da
xor edx, edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x30]
cmp ecx, eax
sete dl
sub edx, dword [ebp - 0xa4]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x28], edx
jne 0x100242e9
cmp dword [ebp - 0x20], ebx
jne 0x100242e9
mov edx, ebx
jmp 0x100242ec
xor edx, edx
inc edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
sete cl
xor edx, edx
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
add eax, 0x3922c12e
add ecx, eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xac]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
mov eax, dword [ebp + eax*4 - 0xac]
add eax, edx
cmp eax, 1
jb 0x1002432e
cmp dword [ebp - 0x20], ebx
jne 0x1002432e
mov eax, ebx
jmp 0x10024331
xor eax, eax
inc eax
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x100242b2
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, dword [ebp - 0x20]
sub ecx, eax
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x24]
je 0x10024371
cmp dword [ebp - 0x24], ebx
je 0x10024371
xor ecx, ecx
inc ecx
jmp 0x10024373
mov ecx, ebx
xor eax, eax
mov dword [ebp - 0x40], 0xffffffff
cmp ecx, 0x27649690
push 2
setne al
xor edx, edx
cmp eax, 0x5bf8
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
add edx, 4
cmp eax, edx
pop edx
setg cl
mov dword [ebp - 0x38], ecx
jmp 0x100243c7
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], ebx
jl 0x100243c7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
jne 0x10024444
dec dword [ebp - 0x28]
jns 0x100243b5
dec dword [ebp - 0x30]
jns 0x10024262
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jle 0x1002424f
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x1c4]
push eax
lea edx, [ebp - 0x174]
call fcn.1002477c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.10003f0d
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.10003f0d
push ebx
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10003f0d
push ebx
push 1
lea ecx, [ebp - 0x174]
call fcn.10003f0d
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x94]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push 0x504
call dword [sym.imp.KERNEL32.dll_ExitProcess]