Function at 0x100055ca
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
push edi
mov dword [ebp - 8], 0x2b92
cmp dword [ebp - 8], 0x2c18
push 0
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], ecx
pop ebx
jle 0x10005619
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007bbb8
and eax, esi
cdq
push edx
push eax
call fcn.1000cbc0
inc edi
cmp edi, 0x6773
jl 0x100055f6
inc esi
cmp esi, 0x2ed2
jl 0x100055f4
cmp dword [ebp - 8], 0x28f9
jge 0x10005631
mov edx, str.tpodkkln_jbyr_bvi_ilabk_tifo_gatigo_cae_ejytr_vdht_ovpqdxj_uls_cilw_kijjmh_wxfuvbf
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dword [ebp - 0x10], 0x2b05
cmp dword [ebp - 0x10], 0x2ded
jle 0x100056d7
push ebx
call dword [sym.imp.USER32.dll_IsIconic]
mov esi, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
xor edi, edi
mov eax, ebx
and dword [ebp - 0x14], 0
cdq
mov ebx, esi
idiv edi
mov esi, dword [ebp - 0x14]
mov ecx, edx
sar ebx, cl
mov eax, ebx
lea ecx, [ebp - 0x34]
or eax, esi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10005681
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push 0
push 1
lea ecx, [ebp - 0x34]
call fcn.1000d197
inc esi
cmp esi, 0x3319
jl 0x10005668
mov esi, dword [ebp - 0xc]
inc edi
mov ebx, dword [ebp - 8]
cmp edi, 0x35a6
jl 0x10005656
inc ebx
mov dword [ebp - 8], ebx
cmp ebx, 0x1773
jl 0x10005654
inc esi
mov dword [ebp - 0xc], esi
push 0
pop ebx
cmp esi, 0x687
jl 0x10005651
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp dword [ebp - 0x10], 0x2794
jge 0x100056eb
push str.srdvklqf_axd_ffsoyw_keqosb_dhp_kqoarron_lfsdf_hbw_mkxfy_wquljsf_pmxuon_eslnji_vcatvjo_wmxxy
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x10], 0x20bf
cmp dword [ebp - 0x10], 0x242b
jle 0x1000573c
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x4c]
or eax, esi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10005718
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.1000d197
inc edi
cmp edi, 0x285d
jl 0x100056ff
inc esi
cmp esi, 0x424f
jl 0x100056fd
cmp dword [ebp - 0x10], 0x1e22
jge 0x10005750
push str.ispcfqf_shsniufb_xvfi_tbqmkejv_usejtu_nfbfyf_qfqgdj_mcqi_pifuo
call fcn.1004d87c
pop ecx
cmp byte [ebp + 0x14], 0
je 0x1000585f
mov dword [ebp - 0x10], 0x1103
cmp dword [ebp - 0x10], 0x13b7
jle 0x100057aa
mov esi, ebx
mov edi, esi
mov ebx, 0x7935
mov eax, edi
lea ecx, [ebp - 0x64]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000578a
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.1000d197
dec edi
dec ebx
jne 0x10005773
inc esi
cmp esi, 0x4106
jl 0x1000576c
cmp dword [ebp - 0x10], 0xe07
jge 0x100057be
push str.oxuwu_aldy_pox_xkitoi_ixhsswv_jqhnirgk_noeuvbpk_wxft_fnlkte_ysafme
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x10], 0x6b01
cmp dword [ebp - 0x10], 0x6d71
jle 0x100057fb
call dword [sym.imp.USER32.dll_GetCapture]
xor esi, esi
xor edi, edi
mov eax, edi
mov ecx, 0x1007bbb8
or eax, esi
cdq
push edx
push eax
call fcn.1000cbc0
inc edi
cmp edi, 0x110e
jl 0x100057d8
inc esi
cmp esi, 0x4851
jl 0x100057d6
cmp dword [ebp - 0x10], 0x6778
jge 0x10005813
mov edx, str.aakyklsmd_vwmsrogd_mrkcdscr
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov eax, dword [ebp + 0x10]
xor edx, edx
mov edi, dword [ebp + 0x1c]
mov esi, dword [ebp + 0x18]
mov ecx, dword [eax]
mov eax, dword [edi]
cmp eax, dword [ecx]
setl dl
xor ecx, ecx
mov dword [esi], edx
mov eax, dword [esi]
test eax, eax
mov eax, dword [ebp - 0x18]
setne cl
mov dword [eax], ecx
test ecx, ecx
je 0x10005840
cmp dword [esi], 0
jge 0x10005842
mov eax, dword [edi]
mov eax, dword [ebp + 0x24]
mov ecx, dword [ebp + 8]
mov eax, dword [eax]
mov eax, dword [ecx]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ecx], eax
jmp 0x100058f1
mov byte [ebp - 1], bl
cmp byte [ebp - 1], 0
je 0x100058f1
mov dword [ebp - 8], 0x19c1
cmp dword [ebp - 8], 0x1cc1
jle 0x100058d0
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x10], 0x1c4a
xor edi, edi
xor esi, esi
lea ecx, [esi + edi]
mov eax, ebx
shl eax, cl
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
inc esi
cmp esi, 0x2470
jl 0x1000588a
inc edi
cmp edi, 0x29e3
jl 0x10005888
mov esi, dword [ebp - 0xc]
add ebx, esi
dec dword [ebp - 0x10]
jne 0x10005886
inc esi
mov dword [ebp - 0xc], esi
push 0
pop ebx
cmp esi, 0x3cac
jl 0x1000587f
push ebx
call dword [sym.imp.GDI32.dll_UpdateColors]
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
cmp dword [ebp - 8], 0x181a
jge 0x100058f1
mov edx, str.yrrik_rwio_cyacsueiy_bqkcxrbf_pauwcafi_gmxbyfs_ruvkguxam_cljogpyvy_ccvq_ybhpcr_hglyaeul_bdvcfsr_buaejb
mov ecx, 0x1007bbb8
call fcn.1000ee07
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret