Function at 0x1002d820
Capabilities:
Accept command line arguments

Disassembly:
mov eax, 0x1005da9a
call fcn.1005c588
sub esp, 0x208
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x64], ecx
lea ecx, [ebp - 0xdc]
push 2
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x150], ebx
call fcn.1000ddb2
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x20], ebx
jmp 0x1002d876
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xdc]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1002d863
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x20], eax
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x1002d930
mov byte [ebp - 0x19], bl
mov dword [ebp - 0x24], 0x4366
cmp dword [ebp - 0x24], 0x4653
jle 0x1002d8d3
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10079cf8
cdq
push edx
push eax
call fcn.1000dad0
inc edi
cmp edi, 0x1b3f
jl 0x1002d8ae
inc esi
cmp esi, 0x3357
jl 0x1002d8ac
xor eax, eax
inc eax
cmp byte [ebp - 0x19], 0
je 0x1002d8e9
push eax
push 0x1fe5
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor eax, eax
inc eax
mov byte [ebp - 4], al
cmp dword [ebp - 0x24], 0x3fb4
jge 0x1002d925
mov edx, str.qxqqdhd_dapzjs_opv_kzrt_eyja_kaxaycr_ncua_jwtklst_cncod_oivschmkq
mov ecx, 0x10079cf8
call fcn.1001081c
jmp 0x1002d922
xor eax, eax
inc eax
mov dword [ebp - 4], ebx
dec dword [ebp - 0x20]
jmp 0x1002d88e
or esi, 0xffffffff
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], esi
call fcn.1000de35
push 3
lea ecx, [ebp - 0x180]
call fcn.1000ddb2
push 3
pop edi
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffff8
push 2
call fcn.1000ddb2
mov dword [ebp - 0x24], 0x9d73df2e
mov dword [ebp - 0x18], ebx
jmp 0x1002d991
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x180]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002d97e
push 2
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1002d9ab
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b0], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002d99e
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x1002d9c6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x80], 0xecc2443a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002d9b8
mov dword [ebp - 0x18], ebx
jmp 0x1002d9e3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0xa0bdbdf7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002d9d0
inc dword [ebp - 0x24]
lea ecx, [ebp - 0x134]
call fcn.1000de35
lea ecx, [ebp - 0x180]
mov dword [ebp - 4], esi
call fcn.1000de35
push 3
pop eax
mov byte [ebp - 0x58], al
lea ecx, [ebp - 0xf4]
mov byte [ebp - 0x52], al
mov dword [ebp - 0x60], 0x30054a06
mov dword [ebp - 0x5c], 0xe020d04
mov dword [ebp - 0x57], 0x125000d
mov byte [ebp - 0x53], 0x2b
mov word [ebp - 0x51], 0x29a
mov byte [ebp - 0x4f], 0x8f
mov dword [ebp - 0x28], esi
push 4
call fcn.1000ddb2
mov dword [ebp - 0x20], ebx
jmp 0x1002da54
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1002da45
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xf4]
mov dword [eax + 0xc], ecx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002da84
push ebx
push ebx
push 0x1921
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea ecx, [ebp - 0xf4]
call fcn.1000de35
push 0x5c
pop eax
mov word [ebp - 0xc4], ax
mov dword [ebp - 0x24], 0xa53d06ce
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x24], 0x2830
mov dword [ebp - 0x24], 0xfffffff7
push 3
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x1002dad8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d4], 0x7b1891f7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002dac7
mov dword [ebp - 0x18], ebx
jmp 0x1002daf3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x214], 0x89328a06
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002dae2
inc dword [ebp - 0x24]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002db10
push 0x2024
call dword [sym.imp.KERNEL32.dll_TlsFree]
push 2
pop esi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x85c6
lea ecx, [ebp - 0x118]
push 2
call fcn.1000ddb2
mov dword [ebp - 0x28], 0xc99220c4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0x5e1bfeda
mov dword [ebp - 0x18], ebx
jmp 0x1002db5a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002db47
xor eax, eax
inc eax
cmp dword [ebp - 0x20], eax
jg 0x1002dba6
cmp dword [ebp - 0x20], ebx
jne 0x1002db74
mov eax, dword [ebp - 0x20]
mov ecx, ebx
jmp 0x1002db76
mov ecx, eax
mov eax, dword [ebp - 0x118]
mov dword [eax], ecx
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
inc ecx
cmp ecx, edi
setge al
add eax, 0x41a80d1c
jne 0x1002dbaf
inc eax
cmp dword [ebp - 0x28], ebx
jne 0x1002dbb2
mov ecx, ebx
jmp 0x1002dbb4
xor eax, eax
inc eax
mov ecx, eax
cmp ecx, dword [ebp - 0x20]
jne 0x1002dbc0
mov ecx, eax
cmp dword [ebp - 0x2c], ebx
jne 0x1002dbc2
mov ecx, ebx
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xbdbaf9eb
sbb eax, eax
inc eax
cmp dword [ebp - 0x20], eax
jne 0x1002dbf7
cmp dword [ebp - 0x20], ebx
je 0x1002dbf7
xor eax, eax
inc eax
jmp 0x1002dbf9
mov eax, ebx
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x18], eax
call fcn.1000de35
cmp esi, 0xe
jne 0x1002dc18
push 0x10
mov dword [ebp - 0x24], 4
pop esi
jmp 0x1002dc47
movzx edx, byte [ebp + esi - 0x5f]
mov eax, esi
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], ebx
movzx eax, byte [ebp + eax - 0x62]
movzx eax, word [ebp + eax*2 - 0xd0]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x60]
mov word [ebp + eax*2 - 0xd0], cx
add esi, 2
cmp esi, 0x12
jb 0x1002db16
xor eax, eax
lea ecx, [ebp - 0x10c]
push 2
mov word [ebp - 0xc2], ax
call fcn.1000ddb2
mov dword [ebp - 4], 4
mov dword [ebp - 0x24], 0x45f4
cmp dword [ebp - 0x24], 0x4815
jle 0x1002dcc6
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x1c8]
push edx
push eax
call fcn.10001abf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002dc9f
mov eax, dword [eax]
push eax
call fcn.10044453
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1c8]
call fcn.1000e569
inc edi
cmp edi, 0x1805
jl 0x1002dc84
inc esi
cmp esi, 0x6c9a
jl 0x1002dc82
mov dword [ebp - 0x18], 0xbb743d83
cmp dword [ebp - 0x24], 0x43ee
jge 0x1002dce1
push str.luhq_cpcjr_jseagt_vevpxsa_mdzsx_bbdptdfw_etzqk_fldayewx_vthcmmw_djv
call fcn.10044453
pop ecx
mov dword [ebp - 0x24], 0x69ec4279
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x20], ebx
jmp 0x1002dd07
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 0xfff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1002dcf4
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1002dd42
mov dword [ebp - 0x24], 0xe96673e7
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x24]
inc eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x18]
jns 0x1002dd18
mov dword [ebp - 0x20], ebx
jmp 0x1002dd64
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002dd61
push 0x14fc
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
xor edx, edx
inc edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jle 0x1002dd47
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10c]
call fcn.1000de35
xor eax, eax
mov dword [ebp - 0x138], 7
mov word [ebp - 0x14c], ax
lea ecx, [ebp - 0x14c]
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x13c], ebx
push eax
call fcn.10024398
mov dword [ebp - 4], 7
mov dword [ebp - 0x20], 0x70d6
cmp dword [ebp - 0x20], 0x747c
jle 0x1002de4d
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov dword [ebp - 0x18], ebx
shl eax, cl
mov esi, ebx
mov dword [ebp - 0x28], eax
mov edi, ebx
lea ecx, [edi + esi]
sar eax, cl
lea ecx, [ebp - 0x204]
cdq
push edx
push eax
call fcn.10001abf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002ddf3
mov eax, dword [eax]
push eax
call fcn.10044453
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x204]
call fcn.1000e569
mov eax, dword [ebp - 0x28]
inc edi
cmp edi, 0x21be
jl 0x1002ddd6
inc esi
cmp esi, 0x404d
jl 0x1002ddd4
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x5af5
jl 0x1002ddc8
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x6f85
jl 0x1002ddc3
push ebx
push ebx
push 0x1e6
push 0x1630
push ebx
call dword [sym.imp.USER32.dll_ModifyMenuW]
cmp dword [ebp - 0x20], 0x70b2
jge 0x1002de61
push str.okp_xgkeblxgn_kxqbmmji_hflejlns_wtdeocuoq_tdanedtb_getiy_wbqzsbpr_qag_zvmr_xxi_fdmmsk_yaduk
call fcn.10044453
pop ecx
push 1
lea ecx, [ebp - 0xe8]
mov dword [ebp - 4], 7
call fcn.1000ddb2
xor edx, edx
mov dword [ebp - 0x24], 0xba2d3c5e
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x1002de97
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1002de84
mov eax, dword [ebp - 0xe8]
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 7
mov dword [eax], 0xfffffff2
call fcn.1000de35
xor eax, eax
lea edi, [ebp - 0xd0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x24], 0x3f23e93d
mov dword [ebp - 0x24], 0xfffd
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002dee8
push ebx
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002def7
call dword [sym.imp.USER32.dll_EndMenu]
mov dword [ebp - 0x28], 0x60cf
cmp dword [ebp - 0x28], 0x63d2
jle 0x1002df51
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ebx, esi
mov esi, 0x2586
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x10079cf8
cdq
push edx
push eax
call fcn.1000dad0
dec ebx
dec esi
jne 0x1002df15
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x3803
jl 0x1002df0e
inc edi
push 0
pop ebx
cmp edi, 0x42f5
jl 0x1002df09
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push dword [ebp - 0x84]
lea ecx, [ebp - 0x198]
call fcn.1000dbe5
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x28], 0x5d6b
jge 0x1002df9c
mov edx, str.ledz_pgxzdwoh_jecp_eookgo_fwnu_zznndq_zlwfqwlce_wstpctn_smglopsl_bpexsn
mov ecx, 0x10079cf8
call fcn.1001081c
jmp 0x1002df9c
push 3
xor eax, eax
mov dword [ebp - 4], 0xc
pop esi
inc eax
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x20], eax
push esi
call fcn.1000ddb2
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x18], ebx
jmp 0x1002dfd7
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002dfc4
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0xa8]
mov dword [esi + 4], eax
test eax, eax
je 0x1002dff2
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [esi + 4], ebx
je 0x1002e020
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002e0db
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
jmp 0x1002e0db
mov dword [ebp - 0x18], 0xe0c0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0x826a
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
je 0x1002e03c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x18]
jne 0x1002e073
cmp dword [esi + 4], ebx
jne 0x1002e073
xor edx, edx
mov eax, ebx
inc edx
jmp 0x1002e078
xor edx, edx
inc edx
mov eax, edx
add eax, 0x83eb999c
je 0x1002e086
mov eax, ebx
cmp dword [ebp - 0x18], ebx
je 0x1002e088
mov eax, edx
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 0xffffffff
setle cl
sub ecx, 0xc1c50d5d
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp - 0x28]
jg 0x1002e0ab
cmp dword [ebp - 0x18], ebx
jne 0x1002e0ad
mov edx, ebx
mov eax, dword [ebp - 0x18]
lea ecx, [edx - 1]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setg cl
mov dword [ebp - 0x24], ecx
xor ecx, ecx
cmp dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xa8]
setle cl
mov dword [eax + 8], ecx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002e0eb
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea ecx, [ebp - 0xa8]
call fcn.1000de35
mov dword [ebp - 0x18], 0x256915a
push 3
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1002e11a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x70], 0xfffffffa
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1002e10c
push 2
pop ecx
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x1002e139
mov dword [ebp - 0x24], 0xffff
inc dword [ebp - 0x24]
dec dword [ebp - 0x18]
jns 0x1002e12a
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ecx
jg 0x1002e15c
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x70], ebx
jne 0x1002e15c
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x70], ebx
je 0x1002e18b
cmp dword [ebp - 0x28], ebx
je 0x1002e295
push 0x5c
pop eax
push 3
mov byte [ebp - 0x34], bl
mov esi, ecx
mov byte [ebp - 0x33], 0x3e
mov edi, ebx
mov byte [ebp - 0x32], cl
mov word [ebp - 0x31], 0x812b
mov word [ebp - 0x40], ax
pop edx
cmp esi, ecx
jne 0x1002e29d
mov edi, edx
mov esi, edx
jmp 0x1002e2ca
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x24], 0x17d6
cmp dword [ebp - 0x24], 0x1a2e
jle 0x1002e1e4
push 0xc05
push 0x1052
push 0x967
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10079cf8
cdq
push edx
push eax
call fcn.1000dad0
inc edi
cmp edi, 0x4b87
jl 0x1002e1bf
inc esi
cmp esi, 0x3d9b
jl 0x1002e1bd
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x24], 0x1625
jge 0x1002e21e
mov edx, str.owjurfibz_ncv_pxrccj_cquqjtv_gtambhqg_swqrt_guvzopmtd_xrnil_krx
mov ecx, 0x10079cf8
call fcn.1001081c
jmp 0x1002e21e
mov dword [ebp - 4], 0xc
xor edx, edx
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x68]
cmp eax, ecx
setl dl
cmp edx, dword [ebp - 0x20]
je 0x1002e269
mov dword [ebp - 0x20], 0x1fad
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x20]
cmp eax, 0x93e7
setg cl
imul edx, ecx
cmp edx, dword [ebp - 0x18]
jge 0x1002e269
xor eax, eax
inc eax
jmp 0x1002e26b
mov eax, ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
je 0x1002e292
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002e28d
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
inc dword [ebp - 0x20]
jne 0x1002e276
push 2
pop ecx
inc dword [ebp - 0x18]
jmp 0x1002e13c
movzx edx, byte [ebp + esi - 0x33]
mov eax, esi
sub eax, edi
mov edi, ebx
push 2
movzx eax, byte [ebp + eax - 0x36]
movzx eax, word [ebp + eax*2 - 0x40]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x34]
mov word [ebp + eax*2 - 0x40], cx
pop ecx
push 3
pop edx
add esi, ecx
cmp esi, 5
jb 0x1002e17a
xor eax, eax
mov word [ebp - 0x3e], ax
mov dword [ebp - 0x28], 0x30f94f37
mov dword [ebp - 0x20], ebx
jmp 0x1002e2f8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x100], 0xec2e0cf5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1002e2e7
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x1002e34a
mov dword [ebp - 0x18], 0xccbad86e
mov dword [ebp - 0x18], ebx
jmp 0x1002e320
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x100], ebx
jne 0x1002e325
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x1002e311
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x1002e345
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002e33d
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
dec dword [ebp - 0x18]
jns 0x1002e32d
push 2
pop ecx
dec dword [ebp - 0x28]
jns 0x1002e305
mov eax, dword [ebp - 0x100]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xfc], eax
xor eax, eax
mov word [ebp - 0xc0], ax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0xac], 7
mov dword [ebp - 0xb0], ebx
call fcn.10024398
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x24], 0xc8b1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002e3aa
push ebx
push 0x1826
push 0x22e1
push 0x1a1c
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002e3bc
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1002e3d9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002e3cb
push 3
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x1002e3f8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x15c], 0x7d37
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002e3e7
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x48]
setle cl
imul eax, ecx
test eax, eax
je 0x1002e421
cmp dword [ebp - 0x48], ebx
je 0x1002e421
cmp dword [ebp - 0x4c], ebx
je 0x1002e421
xor edx, edx
inc edx
jmp 0x1002e423
mov edx, ebx
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setge cl
add eax, ecx
cmp edi, eax
mov eax, dword [ebp - 0x158]
sbb ecx, ecx
xor edx, edx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x158]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setl dl
xor ecx, ecx
cmp eax, 0x72d4
setge cl
imul ecx, edx
test ecx, ecx
je 0x1002e46a
cmp dword [ebp - 0x48], ebx
je 0x1002e46a
xor eax, eax
inc eax
jmp 0x1002e46c
mov eax, ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], ebx
jmp 0x1002e482
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x4c], 0x38367457
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1002e474
push 0x5f
pop eax
push 2
mov byte [ebp - 0x3c], bl
mov ecx, ebx
mov dword [ebp - 0x3b], 0xbe080260
mov word [ebp - 0x44], ax
pop esi
cmp esi, 2
jne 0x1002e4ac
push 3
pop eax
mov ecx, eax
mov esi, eax
jmp 0x1002e4d5
movzx edx, byte [ebp + esi - 0x3b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x3e]
movzx ecx, word [ebp + eax*2 - 0x44]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x3c]
add ecx, edx
mov word [ebp + eax*2 - 0x44], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x1002e49e
xor eax, eax
mov word [ebp - 0x42], ax
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x24], 0xe60f951f
mov dword [ebp - 0x20], ebx
jmp 0x1002e51a
cmp byte [ebp - 0x19], 0
je 0x1002e517
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push ebx
push 0xcee
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffc
mov byte [ebp - 0x19], bl
jl 0x1002e4f6
cmp byte [ebp - 0x19], 0
je 0x1002e533
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
xor eax, eax
mov dword [ebp - 0x160], 7
mov word [ebp - 0x174], ax
lea ecx, [ebp - 0x174]
lea eax, [ebp - 0x44]
mov dword [ebp - 0x164], ebx
push eax
call fcn.10024398
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x198]
push dword [ebp - 0x80]
movdqa xmm0, xmmword [0x1006bec0]
lea ecx, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x7c], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x1a8], xmm0
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
call fcn.100111f2
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x7c]
push 3
mov dword [ebp - 0x24], ebx
pop edi
mov dword [eax], 0xffffffea
push 2
lea ecx, [ebp - 0x90]
call fcn.1000ddb2
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x18], ebx
jmp 0x1002e5ce
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002e5bb
mov dword [ebp - 0x18], ebx
jmp 0x1002e5ea
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x128], 0xd86e52d8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002e5d9
xor eax, eax
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], ebx
jl 0x1002e6ed
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jl 0x1002e6e1
mov dword [ebp - 0x18], 0xaf8b5131
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jl 0x1002e6c8
mov dword [ebp - 0x20], 0xa92bd42c
mov dword [ebp - 0x20], ebx
jmp 0x1002e6b6
push edi
lea ecx, [ebp - 0x9c]
call fcn.1000ddb2
mov dword [ebp - 0x2c], ebx
jmp 0x1002e65a
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0xb1647c2c
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jl 0x1002e647
mov eax, dword [ebp - 0x9c]
mov dword [eax], ebx
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x90]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002e689
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x9c]
inc dword [eax]
cmp dword [eax], 1
jle 0x1002e667
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], ebx
call fcn.1000de35
inc dword [ebp - 0x20]
xor eax, eax
inc eax
cmp dword [ebp - 0x20], eax
jle 0x1002e636
dec dword [ebp - 0x18]
jns 0x1002e627
mov eax, dword [ebp - 0x90]
cmp dword [eax], ebx
jne 0x1002e6de
dec dword [ebp - 0x28]
push 1
pop eax
jns 0x1002e614
xor eax, eax
inc eax
dec dword [ebp - 0x120]
jns 0x1002e605
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x13
call fcn.1000de35
mov eax, dword [ebp - 0x7c]
inc dword [eax]
cmp dword [eax], 9
jle 0x1002e5a5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002e71c
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x12
call fcn.1000de35
mov dword [ebp - 0x44], ebx
push dword [ebp - 0xb0]
cmp dword [ebp - 0xac], 8
lea eax, [ebp - 0xc0]
push ebx
cmovae eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0x198]
push eax
call fcn.1002a37b
cmp eax, 0xffffffff
je 0x1002e771
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x174]
push ecx
push 1
push eax
lea ecx, [ebp - 0x198]
call fcn.10010e2a
jmp 0x1002e72b
mov dword [ebp - 0x24], 0x6b02
cmp dword [ebp - 0x24], 0x6dcc
jle 0x1002e7e4
mov esi, ebx
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
lea ecx, [eax + edi]
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x1ec]
cdq
push edx
push eax
call fcn.10001abf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e7a9
mov eax, dword [eax]
push eax
call fcn.10044453
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1ec]
call fcn.1000e569
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x8039
jl 0x1002e78a
inc edi
cmp edi, 0x3d65
jl 0x1002e785
inc esi
cmp esi, 0x6d55
jl 0x1002e783
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov ecx, dword [ebp - 0x64]
lea eax, [ebp - 0x198]
push eax
lea edx, [ebp - 0x14c]
call fcn.1002ea47
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x174]
call fcn.1000e73d
push ebx
push 1
lea ecx, [ebp - 0xc0]
call fcn.1000e73d
push ebx
push 1
lea ecx, [ebp - 0x198]
call fcn.1000e73d
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.1000e73d
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x64]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret