Function at 0x1002e5f4
Capabilities:
Create thread

Disassembly:
mov eax, 0x100587cd
call fcn.100573b8
sub esp, 0xd8
cmp byte [ebp + 0x40], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x20], edx
je 0x1002e6d3
cmp byte [ebp + 0x28], 0
je 0x1002e6b9
mov eax, dword [ebp + 8]
xor ebx, ebx
cmp dword [eax], ebx
jne 0x1002e695
mov edx, dword [ebp + 0x20]
mov eax, dword [edx]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
inc dword [eax]
test ecx, ecx
je 0x1002e64b
mov eax, dword [edx]
mov eax, dword [esi]
mov eax, dword [esi]
cmp dword [esi], 0x1355
je 0x1002e64b
inc ebx
mov eax, dword [edx]
xor ecx, ecx
mov edi, dword [ebp + 0x24]
cmp ebx, eax
mov eax, dword [ebp + 0x44]
mov ebx, dword [ebp - 0x20]
setge cl
mov dword [eax], ecx
mov eax, dword [eax]
mov eax, dword [edi]
mov eax, dword [ebx]
mov ecx, dword [esi]
imul ecx, dword [eax]
mov eax, dword [ebp + 0x1c]
mov dword [eax], ecx
mov eax, dword [eax]
mov ecx, dword [ebp + 0x14]
mov dword [esi], eax
mov eax, dword [esi]
sub eax, 0x1687
jne 0x1002e681
mov eax, dword [ecx]
mov eax, dword [ebp + 0x30]
mov dword [eax], 0xc0198ab7
mov eax, dword [ebp + 0x38]
mov eax, dword [eax]
mov eax, dword [ecx]
mov eax, dword [edx]
jmp 0x1002e69a
mov edi, dword [ebp + 0x24]
mov ebx, edx
mov eax, dword [ebp + 0x10]
xor edx, edx
mov eax, dword [eax]
cmp eax, 9
mov eax, dword [edi]
mov ecx, dword [ebx]
setne dl
imul eax, edx
sub eax, dword [ecx + 4]
mov dword [ecx + 4], eax
jmp 0x1002eeaf
sub esp, 0xc
mov byte [ebp + 0x43], 0
lea eax, [ebp + 0x43]
push eax
push ecx
push ecx
call fcn.1002f3a3
add esp, 0x18
jmp 0x1002eeaf
cmp byte [ebp + 0x3c], 0
je 0x1002e700
mov eax, dword [ebp + 0x34]
cmp byte [eax], 0
je 0x1002eeaf
xor ebx, ebx
push ebx
push 0x141
push ebx
push ebx
push 0x1329
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1002eeaf
xor esi, esi
mov dword [ebp - 0x24], 0x5954
xor ebx, ebx
inc esi
cmp dword [ebp - 0x24], 0x5cea
jle 0x1002e77d
mov edi, ebx
mov dword [ebp - 0x30], edi
mov eax, ebx
mov dword [ebp - 0x20], ebx
and eax, edi
mov edi, ebx
mov dword [ebp - 0x18], eax
xor eax, edi
lea ecx, [ebp - 0xd4]
cdq
push edx
push eax
call fcn.10001a51
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e740
mov eax, dword [eax]
push eax
call fcn.1003fd76
pop ecx
push ebx
push esi
lea ecx, [ebp - 0xd4]
call fcn.10002015
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, 0x6bb7
jl 0x1002e726
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x7101
jl 0x1002e71f
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x7e5a
jl 0x1002e71a
cmp dword [ebp - 0x24], 0x57cf
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x60], ecx
jge 0x1002e797
push str.lhinmz_qnrrua_dmhcjgqx_uum_ffaukwjvy_xify_scpincdri_ianngsysw_tujmk_drqlv_xevyodebr_pzogfdoji
call fcn.1003fd76
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x20], 0x69393dda
push 0xfffffffffffffffa
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1002e7cc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002e7be
cmp dword [ebp - 0x24], ebx
je 0x1002eaa1
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], 0xcb3a3fc4
mov eax, dword [ebp - 0x14]
cmp eax, esi
setge cl
xor edx, edx
cmp ecx, 0x13d8c537
setne dl
cmp dword [ebp - 0x20], 0xfffffffd
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, edx
setge cl
cmp ecx, dword [ebp - 0x24]
jne 0x1002e82f
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x24], esi
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ebx
jmp 0x1002ea96
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], ebx
jl 0x1002ea93
mov dword [ebp - 0x18], ebx
jmp 0x1002e879
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x58], 0x8f87
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e86b
mov dword [ebp - 0x18], ebx
jmp 0x1002ea81
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3c], 8
mov dword [ebp - 0x24], 0x1943
cmp dword [ebp - 0x24], 0xcf2
jge 0x1002e9f0
push 0x10073350
push 0x1007335c
mov ecx, 0x100721d8
call fcn.10026da9
mov ecx, eax
call fcn.10026da9
mov eax, dword [0x1007335c]
mov dword [ebp - 0x24], ebx
test eax, eax
jle 0x1002e945
mov edi, 0x100734b0
mov edx, edi
mov ecx, 0x100721d8
call fcn.100126fe
mov edx, dword [0x10073350]
mov ecx, ebx
test edx, edx
jle 0x1002e929
cmp dword [edi + 0x14], 0x10
jb 0x1002e914
mov eax, dword [edi]
jmp 0x1002e916
mov eax, edi
movsx eax, byte [eax + ecx]
sub eax, 0x30
add dword [ecx*4 + 0x10073360], eax
inc ecx
cmp ecx, edx
jl 0x1002e90a
mov eax, dword [ebp - 0x24]
add edi, 0x18
inc eax
mov dword [ebp - 0x24], eax
cmp eax, dword [0x1007335c]
jl 0x1002e8f2
mov eax, dword [0x1007335c]
xor esi, esi
inc esi
jmp 0x1002e94b
mov edx, dword [0x10073350]
mov dword [ebp - 0x24], ebx
test eax, eax
jle 0x1002e9e5
mov edi, 0x100734b0
mov esi, ebx
test edx, edx
jle 0x1002e982
cmp dword [edi + 0x14], 0x10
jb 0x1002e96b
mov eax, dword [edi]
jmp 0x1002e96d
mov eax, edi
movsx eax, byte [eax + esi]
push 0x30
pop ecx
sub ecx, eax
add dword [esi*4 + 0x10073360], ecx
inc esi
cmp esi, edx
jl 0x1002e961
mov eax, ebx
test edx, edx
jle 0x1002e996
cmp dword [eax*4 + 0x10073360], ebx
je 0x1002e9a7
inc eax
cmp eax, edx
jl 0x1002e988
push 0x10063f58
call fcn.100401a1
mov edx, dword [0x10073350]
pop ecx
mov ecx, ebx
test edx, edx
jle 0x1002e9cc
cmp dword [edi + 0x14], 0x10
jb 0x1002e9b7
mov eax, dword [edi]
jmp 0x1002e9b9
mov eax, edi
movsx eax, byte [eax + ecx]
sub eax, 0x30
add dword [ecx*4 + 0x10073360], eax
inc ecx
cmp ecx, edx
jl 0x1002e9ad
mov ecx, dword [ebp - 0x24]
add edi, 0x18
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, dword [0x1007335c]
jl 0x1002e95b
xor esi, esi
inc esi
push 0x10063f5c
call fcn.100401a1
pop ecx
mov eax, dword [ebp - 0x1c]
add eax, 0xa4d2c64
jne 0x1002ea53
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x3c]
mov edx, dword [ebp - 0x30]
sub edx, eax
add edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
mov eax, dword [ebp + eax*4 - 0x3c]
cmp edx, eax
mov eax, dword [ebp - 0x58]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setg dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x20]
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xfffffffb
setg al
add eax, dword [ebp - 0x58]
neg eax
cmp eax, 0x68be3e2
jl 0x1002ea53
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x58], ebx
jg 0x1002ea68
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3c], 0xb53abf6a
jmp 0x1002ea7e
mov dword [ebp - 0x1c], ebx
jmp 0x1002ea79
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x1002ea7e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x1002ea6d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x1002e887
dec dword [ebp - 0x14]
jns 0x1002e866
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jle 0x1002e853
jmp 0x1002eab1
push ecx
push ecx
mov edx, 0xdaa
xor cl, cl
call fcn.1002e497
pop ecx
pop ecx
mov eax, dword [ebp + 0x2c]
movzx eax, word [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1002ead0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5c], 0xdd33
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002eac2
mov dword [ebp - 0x20], 0x1bb2
cmp dword [ebp - 0x20], 0x1f46
jle 0x1002eb43
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
xor eax, edi
lea ecx, [ebp - 0xbc]
cdq
push edx
push eax
call fcn.10001a51
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002eb06
mov eax, dword [eax]
push eax
call fcn.1003fd76
pop ecx
push ebx
push esi
lea ecx, [ebp - 0xbc]
call fcn.10002015
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x46ac
jl 0x1002eaec
inc edi
cmp edi, 0x61fa
jl 0x1002eae7
push ebx
push 0xef4
push 0x2519
push ebx
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 0x1c], ebx
jmp 0x1002eb6a
mov dword [ebp - 0x18], 0x888adae8
mov dword [ebp - 0x18], ebx
jmp 0x1002eb62
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5c], 0xf369
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002eb54
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1002eb48
cmp dword [ebp - 0x20], 0x1b9e
jge 0x1002eb83
push str.mvpcucl_kxfjmneb_ojtbnui_ihoue
call fcn.1003fd76
pop ecx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x40]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x28], 0x878ed7c3
mov dword [ebp - 0x20], 0x996f
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], ebx
jmp 0x1002ebb5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x48], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002eba7
mov dword [ebp - 0x14], ebx
jmp 0x1002ebce
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7c], 0xa3191b49
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002ebc0
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp - 0x48]
sub edx, eax
mov eax, dword [ebp - 0x44]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
setge cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne bl
xor ecx, ecx
imul edx, ebx
cmp edx, eax
sete cl
xor ebx, ebx
imul ecx, dword [ebp - 0x18]
test ecx, ecx
jne 0x1002ec1a
mov ecx, ebx
cmp dword [ebp - 0x44], ebx
je 0x1002ec1c
mov ecx, esi
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp eax, ecx
mov edi, ebx
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, esi
setg dl
sub edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor eax, eax
inc edx
imul edx, dword [ebp - 0x18]
cmp edx, 0xca4d
setge al
xor edx, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov dword [ebp - 0x20], ebx
setg dl
xor eax, eax
cmp edx, 0xe6b786ae
setne al
xor ecx, ecx
cmp eax, 0x21dd8e18
setg cl
mov dword [ebp - 0x28], ecx
cmp edi, 2
jae 0x1002edf3
mov dword [ebp - 0x30], 0x32e7
cmp dword [ebp - 0x30], 0x36ad
jle 0x1002ece9
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov ecx, eax
mov ebx, edi
sar ebx, cl
mov eax, esi
mov ecx, 0x100720b8
and eax, ebx
cdq
push edx
push eax
call fcn.10001c38
inc esi
cmp esi, 0x2526
jl 0x1002ecaf
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
push 0
pop ebx
cmp eax, 0x5c76
jl 0x1002eca7
inc edi
cmp edi, 0x5d15
jl 0x1002eca2
mov edi, dword [ebp - 0x20]
xor esi, esi
inc esi
mov dword [ebp - 0x28], 0x8ade
mov dword [ebp - 4], 4
cmp dword [ebp - 0x30], 0x3189
jge 0x1002ed0f
mov edx, str.ghsmxkie_atwn_noos_gyxgt_wcqtgryw_dcg_mkmwdm_xfko_qjksjzz_xkavjgrrg_qdtlanf
mov ecx, 0x100720b8
call fcn.100035ef
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0xe1d925b0
mov dword [ebp - 0x28], 0xdb34
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x14], ebx
jmp 0x1002ed6f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 0xc9ed9ba0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002ed5e
mov dword [ebp - 0x14], ebx
jmp 0x1002ed87
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1002ed7a
mov dword [ebp - 0x14], ebx
jmp 0x1002ed9f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x98], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002ed92
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1002edba
mov edx, 0x7f22
xor cl, cl
call fcn.100300f4
push esi
push 0x6ef2
lea eax, [ebp - 0x68]
mov edx, 0x204e
push eax
push 0x4b2b
push ebx
xor cl, cl
call fcn.1002f602
mov cl, byte [ebp + edi - 0x40]
add esp, 0x14
mov dl, 0x86
call fcn.10036755
mov ecx, dword [ebp - 0x24]
mov byte [edi + ecx], al
inc edi
mov dword [ebp - 0x20], edi
jmp 0x1002ec87
mov dword [ebp - 0x64], 0xb02
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x6c], esi
push 2
call fcn.10004d70
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 6
push eax
push 0xfe3
mov dword [ebp - 0x70], 0x38591b6
lea edx, [ebp - 0x8c]
push 0x4500
xor cl, cl
mov dword [ebp - 0x4c], esi
call fcn.1002fb56
pop ecx
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x4c]
push eax
push ecx
lea eax, [ebp - 0x70]
push eax
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x6c]
call fcn.1002f371
push 0x3fa
push 0x57cd
push 0x663a
push 0x1cef
push 0x75d4
push 0x78ea
push 0x1a1b
push 0x5f17
push ebx
push 0x73fe
push 0x4d94
mov edx, 0x17e3
mov ecx, 0x714c
call fcn.1002e5b1
add esp, 0x44
lea ecx, [ebp - 0x88]
call fcn.10004df3
mov ecx, dword [ebp + 0x18]
mov ax, word [ebp - 0x40]
mov word [ecx], ax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret