Function at 0x10014376
Capabilities:
Connect pipe
Parse pe header
Read .ini file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005c2b2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x398
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x100145a7
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x100145a7
mov dword [ebp - 0x58], 0xb26bdde0
mov dword [ebp - 0x234], 0x2b8ea2c3
mov dword [ebp - 0xe4], 0
jmp 0x100143db
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x100143f7
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x12c], 0xfffffff8
jmp 0x100143ce
mov dword [ebp - 0x58], 0
jmp 0x10014407
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe6
jg 0x10014593
mov dword [ebp - 0x11c], 0xed15de05
mov dword [ebp - 0x150], 0x26c7f05f
mov dword [ebp - 0x110], 0
jmp 0x1001443e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1001445a
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x268], 5
jmp 0x10014431
cmp dword [ebp - 0x11c], 0xffffffff
jg 0x1001446f
mov dword [ebp - 0x1b0], 1
jmp 0x10014476
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x1b0]
jl 0x10014490
mov dword [ebp - 0x148], 1
jmp 0x10014497
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x28c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
mov dword [ebp - 0x290], eax
mov eax, 0x9e9d60a2
cmp eax, 0x56ee9734
ja 0x100144de
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12c], 0
je 0x100144de
mov dword [ebp - 0x198], 1
jmp 0x100144e5
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0
jg 0x10014504
cmp dword [ebp - 0x58], 0
jne 0x10014504
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12c], 0
je 0x1001450a
cmp dword [ebp - 0x58], 0
jne 0x10014523
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12c], 0
jne 0x10014523
and dword [ebp - 0x1b4], 0
jmp 0x1001452d
mov dword [ebp - 0x1b4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
cmp dword [ebp - 0x1b4], eax
je 0x1001454e
mov dword [ebp - 0x184], 1
jmp 0x10014555
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x184]
jle 0x1001456f
mov dword [ebp - 0x180], 1
jmp 0x10014576
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x234], eax
jmp 0x10014400
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.1000b17d
pop ecx
pop ecx
jmp 0x10015cda
mov dword [ebp - 0x250], 0xbe8e
mov dword [ebp - 0x2ac], 0x6318d581
mov dword [ebp - 0x258], 0x999fb023
mov dword [ebp - 0x1b8], 0x4fc5
mov dword [ebp - 0x248], str.ftrczoxzz_nooyz_psdhdyrw_lelmsdejz_affnkpl_tordzpy_fwnt_vfat_qcyqbgrpu
cmp dword [ebp - 0x1b8], 0x5179
jle 0x100146f7
and dword [ebp - 0xb0], 0
jmp 0x100145ff
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x7f9e
jge 0x100146f7
and dword [ebp - 0x118], 0
jmp 0x10014625
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xf93
jge 0x100146f2
and dword [ebp - 0x10c], 0
jmp 0x1001464b
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x2376
jge 0x100146ed
and dword [ebp - 0xf4], 0
jmp 0x10014671
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x65f2
jge 0x100146e8
mov eax, dword [ebp - 0x118]
cdq
idiv dword [ebp - 0x10c]
mov ecx, dword [ebp - 0xf4]
sar edx, cl
xor edx, dword [ebp - 0xb0]
mov eax, edx
cdq
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], edx
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x36c]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x1f0], eax
mov ecx, dword [ebp - 0x1f0]
call fcn.10001c36
push eax
call fcn.10043bf4
pop ecx
lea ecx, [ebp - 0x36c]
call fcn.10001c2c
jmp 0x10014664
jmp 0x1001463e
jmp 0x10014618
jmp 0x100145f2
mov dword [ebp - 0x298], 0
and dword [ebp - 4], 0
cmp dword [ebp - 0x1b8], 0x4cd7
jge 0x1001471d
push dword [ebp - 0x248]
call fcn.10043bf4
pop ecx
jmp 0x10014739
or dword [ebp - 4], 0xffffffff
jmp 0x10014743
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x114], 0
jmp 0x10014770
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 1
jge 0x1001478c
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x2bc], 1
jmp 0x10014763
mov eax, dword [ebp - 0x250]
sub eax, dword [ebp - 0x134]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp + 0x10], 0
jne 0x100152b7
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.10004b26
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x1e4], 0xfffffffb
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x128], 5
mov dword [ebp - 0xb8], 0
jmp 0x100147fd
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x10014819
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x190], 8
jmp 0x100147f0
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x1001490b
mov dword [ebp - 0x260], 0x142f
cmp dword [ebp - 0x260], 0x8dd
jge 0x100148fc
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x24c]
push eax
push str._ld__ld
call fcn.10043eb2
add esp, 0xc
mov eax, dword [ebp - 0x24c]
add eax, 8
cdq
push 9
pop ecx
idiv ecx
mov dword [ebp - 0x158], eax
push 0x100661a0
call fcn.10043bf4
pop ecx
mov dword [ebp - 0x13c], 1
jmp 0x10014897
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x158]
jge 0x100148b2
push 0x100661a4
call fcn.10043bf4
pop ecx
jmp 0x1001488a
push 0x10064991
call fcn.10043f6d
pop ecx
mov dword [ebp - 0x130], 1
jmp 0x100148d6
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x158]
jge 0x100148f1
push 0x100661a8
call fcn.10043bf4
pop ecx
jmp 0x100148c9
push 0x100661ac
call fcn.10043f6d
pop ecx
push 0
push 0x1585
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x190], 0xffffffed
jmp 0x10014939
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x190]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x190], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x190], 0xfffffff4
jl 0x10014c14
mov dword [ebp - 0x54], 0xfffffff9
mov dword [ebp - 0x178], 8
mov dword [ebp - 0x280], 0xfffffff9
mov dword [ebp - 0x27c], 0xfffffff9
mov dword [ebp - 0x278], 0xfffffff9
mov dword [ebp - 0x274], 0xfffffff9
mov dword [ebp - 0x1ec], 1
mov dword [ebp - 0xfc], 0
jmp 0x100149a9
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x100149c5
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x140], 0xfffffffa
jmp 0x1001499c
mov dword [ebp - 0x54], 0
jmp 0x100149d5
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10014c0f
mov dword [ebp - 0x1e8], 0xdd2e
mov dword [ebp - 0xc0], 0
jmp 0x10014a02
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x10014a1e
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x1a8], 0x34bf8f0a
jmp 0x100149f5
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1a8], 0
jmp 0x10014a49
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1a8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a8], 0
jg 0x10014be1
cmp dword [ebp - 0x1e4], 0xbd652568
jbe 0x10014a74
mov dword [ebp - 0x188], 1
jmp 0x10014a7b
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0
jge 0x10014a90
mov dword [ebp - 0x194], 1
jmp 0x10014a97
and dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x10014acd
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a8], 0
je 0x10014acd
mov dword [ebp - 0x160], 1
jmp 0x10014ad4
and dword [ebp - 0x160], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x160]
inc ecx
cmp ecx, dword [ebp + eax - 0x140]
jne 0x10014af6
mov dword [ebp - 0x1ac], 1
jmp 0x10014afd
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x54]
jne 0x10014b20
mov dword [ebp - 0x168], 1
jmp 0x10014b27
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x168]
sub ecx, dword [ebp + eax - 0x1a8]
inc ecx
sub ecx, dword [ebp - 0x54]
cmp ecx, dword [ebp - 0x1e8]
jge 0x10014b57
cmp dword [ebp - 0x128], 0
jne 0x10014b57
and dword [ebp - 0x170], 0
jmp 0x10014b61
mov dword [ebp - 0x170], 1
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
mov eax, dword [ebp + eax*4 - 0x140]
cmp eax, dword [ebp - 0x178]
jl 0x10014b9a
mov dword [ebp - 0x238], 1
jmp 0x10014ba1
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x190]
mov dword [ebp - 0x2a8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x1ec], 0x3747c914
jmp 0x10014a30
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x10014c0a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0
push 0x1db2
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
jmp 0x100149ce
jmp 0x1001491e
cmp dword [0x1027e97c], 0
jne 0x10015220
mov dword [ebp - 0x240], 0xda89
lea eax, [ebp - 0x240]
push eax
call fcn.1000b124
pop ecx
mov dword [ebp - 0x144], eax
mov byte [ebp - 0x84], 0xc
mov byte [ebp - 0x83], 0xc7
mov byte [ebp - 0x82], 0
mov byte [ebp - 0x81], 0x10
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x7f], 0x22
mov byte [ebp - 0x7e], 8
mov byte [ebp - 0x7d], 0xa
mov byte [ebp - 0x7c], 7
mov byte [ebp - 0x7b], 6
mov byte [ebp - 0x7a], 2
mov byte [ebp - 0x79], 0x1d
mov byte [ebp - 0x78], 5
mov byte [ebp - 0x77], 6
mov byte [ebp - 0x76], 9
mov byte [ebp - 0x75], 0x1c
mov byte [ebp - 0x74], 3
mov byte [ebp - 0x73], 0x38
mov byte [ebp - 0x72], 6
mov byte [ebp - 0x71], 0x25
mov byte [ebp - 0x70], 4
mov byte [ebp - 0x6f], 0x16
mov byte [ebp - 0x6e], 0xa
mov byte [ebp - 0x6d], 0x20
mov byte [ebp - 0x6c], 0xb
mov byte [ebp - 0x6b], 0x3d
mov byte [ebp - 0x6a], 4
mov byte [ebp - 0x69], 0xe7
mov byte [ebp - 0x68], 0x96
mov byte [ebp - 0x67], 0x86
mov byte [ebp - 0x66], 0x30
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x84]
and eax, 0x90
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x84]
or ecx, 0x90
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x84]
mov byte [ebp + eax - 0x1c8], cl
mov dword [ebp - 0x18], 2
and dword [ebp - 0x60], 0
jmp 0x10014d19
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1f
jae 0x10014de8
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x84]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x10014d60
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x84]
inc eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x84]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x10014d11
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x60]
movzx eax, byte [ebp + eax - 0x86]
movsx eax, byte [ebp + eax - 0x1c8]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x83]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x60]
movzx eax, byte [ebp + eax - 0x86]
movsx eax, byte [ebp + eax - 0x1c8]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x83]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x60]
movzx eax, byte [ebp + eax - 0x86]
movsx eax, byte [ebp + eax - 0x1c8]
mov esi, dword [ebp - 0x18]
movzx ebx, byte [ebp + esi - 0x83]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x84]
mov byte [ebp + eax - 0x1c8], bl
and dword [ebp - 0x60], 0
jmp 0x10014d11
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x1c8], 0
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.1001726f
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x23c]
call fcn.10004b26
mov dword [0x1027e97c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.1001729e
mov dword [ebp - 0x19c], 0x5de8
mov dword [ebp - 0x25c], str.ccqpdep_qzrmipdza_yemosbk
cmp dword [ebp - 0x19c], 0x6062
jle 0x10014f73
and dword [ebp - 0xe8], 0
jmp 0x10014e80
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xaca
jge 0x10014f73
and dword [ebp - 0xa4], 0
jmp 0x10014ea6
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x54c3
jge 0x10014f6e
and dword [ebp - 0xc8], 0
jmp 0x10014ecc
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x2419
jge 0x10014f69
and dword [ebp - 0xd0], 0
jmp 0x10014ef2
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x2687
jge 0x10014f64
mov eax, dword [ebp - 0xa4]
cdq
idiv dword [ebp - 0xc8]
add edx, dword [ebp - 0xe8]
add edx, dword [ebp - 0xd0]
mov eax, edx
cdq
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], edx
push dword [ebp - 0x204]
push dword [ebp - 0x208]
lea ecx, [ebp - 0x33c]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x200]
call fcn.10001c36
push eax
call fcn.10043bf4
pop ecx
lea ecx, [ebp - 0x33c]
call fcn.10001c2c
jmp 0x10014ee5
jmp 0x10014ebf
jmp 0x10014e99
jmp 0x10014e73
and dword [ebp - 0xf0], 0
jmp 0x10014f89
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xe
jae 0x10014fa2
mov eax, dword [ebp - 0xf0]
mov byte [ebp + eax - 0x1c8], 0
jmp 0x10014f7c
mov dword [ebp - 4], 3
cmp dword [ebp - 0x19c], 0x5c67
jge 0x10014fc1
push dword [ebp - 0x25c]
call fcn.10043bf4
pop ecx
jmp 0x10014fdd
or dword [ebp - 4], 0xffffffff
jmp 0x10014fe7
mov byte [ebp - 0xa0], 0xc
mov byte [ebp - 0x9f], 0x28
mov byte [ebp - 0x9e], 5
mov byte [ebp - 0x9d], 0x16
mov byte [ebp - 0x9c], 0
mov byte [ebp - 0x9b], 0x26
mov byte [ebp - 0x9a], 4
mov byte [ebp - 0x99], 0x37
mov byte [ebp - 0x98], 1
mov byte [ebp - 0x97], 6
mov byte [ebp - 0x96], 8
mov byte [ebp - 0x95], 0x1d
mov byte [ebp - 0x94], 0xd
mov byte [ebp - 0x93], 0x38
mov byte [ebp - 0x92], 6
mov byte [ebp - 0x91], 7
mov byte [ebp - 0x90], 2
mov byte [ebp - 0x8f], 0x35
mov byte [ebp - 0x8e], 3
mov byte [ebp - 0x8d], 4
mov byte [ebp - 0x8c], 0xa
mov byte [ebp - 0x8b], 4
mov byte [ebp - 0x8a], 0xb
mov byte [ebp - 0x89], 0x16
mov byte [ebp - 0x88], 9
mov byte [ebp - 0x87], 0x10
mov byte [ebp - 0x86], 7
mov byte [ebp - 0x85], 0x11
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xa0]
and eax, 0x5b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xa0]
or ecx, 0x5b
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xa0]
mov byte [ebp + eax - 0x1d8], cl
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x120], 0
jmp 0x100150fc
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1c
jae 0x10015193
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x120]
movzx eax, byte [ebp + eax - 0xa2]
movsx eax, byte [ebp + eax - 0x1d8]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x9f]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x120]
movzx eax, byte [ebp + eax - 0xa2]
movsx eax, byte [ebp + eax - 0x1d8]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x9f]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x120]
movzx eax, byte [ebp + eax - 0xa2]
movsx eax, byte [ebp + eax - 0x1d8]
mov esi, dword [ebp - 0x1c]
movzx ebx, byte [ebp + esi - 0x9f]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xa0]
mov byte [ebp + eax - 0x1d8], bl
jmp 0x100150f4
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x1d8], 0
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x390]
call fcn.1001726f
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x244], eax
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x244]
call fcn.10004b26
mov dword [0x1027ea80], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.1001729e
and dword [ebp - 0xd8], 0
jmp 0x10015207
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xf
jae 0x10015220
mov eax, dword [ebp - 0xd8]
mov byte [ebp + eax - 0x1d8], 0
jmp 0x100151fa
mov dword [ebp - 0xf8], 0x57fd5464
mov dword [ebp - 0xf8], 0
jmp 0x10015243
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffeb
jg 0x10015285
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10015262
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x10015283
push 0
push 0x1580
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x10015236
mov eax, dword [0x1027e97c]
cmp eax, dword [ebp - 0xbc]
je 0x1001529f
mov eax, dword [0x1027ea80]
cmp eax, dword [ebp - 0xbc]
jne 0x100152b7
mov ecx, dword [ebp + 0xc]
call fcn.10001c36
push eax
push dword [ebp + 8]
call fcn.1000b17d
pop ecx
pop ecx
jmp 0x10015cda
mov eax, dword [ebp + 8]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x14c], 0x7902
mov dword [ebp - 0x218], str.idoiqbpc_hlubuo_lklcwvpad
cmp dword [ebp - 0x14c], 0x7c70
jle 0x100153c8
and dword [ebp - 0xec], 0
jmp 0x10015304
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x3fa2
jge 0x100153c8
and dword [ebp - 0xe0], 0
jmp 0x1001532a
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x4abb
jge 0x100153c3
and dword [ebp - 0x100], 0
jmp 0x10015350
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x750f
jge 0x100153be
and dword [ebp - 0x108], 0
jmp 0x10015372
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x49e9
jge 0x100153bc
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x100]
xor eax, dword [ebp - 0x108]
or eax, dword [ebp - 0xec]
cdq
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], edx
push dword [ebp - 0x210]
push dword [ebp - 0x214]
mov ecx, 0x10076b78
call fcn.10001c56
jmp 0x10015365
jmp 0x10015343
jmp 0x1001531d
jmp 0x100152f7
mov dword [ebp - 0x288], 0xb13638ec
mov dword [ebp - 4], 6
cmp dword [ebp - 0x14c], 0x7737
jge 0x100153f5
mov edx, dword [ebp - 0x218]
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x10015411
or dword [ebp - 4], 0xffffffff
jmp 0x1001541b
mov dword [ebp - 0x284], 0x9aed23b6
mov dword [ebp - 0x294], 0xfffffffa
mov dword [ebp - 0x20], 0
jmp 0x1001543f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10015455
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x378], 0x126ff23b
jmp 0x10015438
mov dword [ebp - 0x20], 0
jmp 0x10015465
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1001547b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x270], 0x352f76ec
jmp 0x1001545e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x270]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x270], eax
cmp dword [ebp - 0x104], 0
je 0x10015cd8
mov eax, dword [ebp - 0x104]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x10015cd8
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x104]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x5c]
cmp dword [eax], 0x4550
jne 0x10015cd8
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x74], 0
jbe 0x10015cd8
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c]
cmp dword [ecx + eax + 0x78], 0
je 0x10015cd8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4c], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x34], edx
mov eax, 0xffff
mov word [ebp - 0x24], ax
or dword [ebp - 0x48], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x1001553d
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x10015538
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x24], ax
jmp 0x1001581f
mov eax, dword [0x1027ea18]
and eax, 1
jne 0x10015574
mov eax, dword [0x1027ea18]
or eax, 1
mov dword [0x1027ea18], eax
mov dword [ebp - 4], 8
mov ecx, 0x1027ea54
call fcn.1001730e
push 0x1005d048
call fcn.10043bca
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x1027e985]
test eax, eax
je 0x100155dd
mov ecx, 0x1027ea54
call fcn.100173d3
movzx eax, al
test eax, eax
jne 0x100155dd
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x1027ea54
call fcn.100173dc
lea eax, [ebp - 0x2c4]
push eax
mov ecx, 0x1027ea54
call fcn.100173c5
push eax
lea ecx, [ebp - 0x154]
call fcn.100172fb
movzx eax, al
test eax, eax
je 0x100155dd
lea ecx, [ebp - 0x154]
call fcn.100173f1
mov eax, dword [eax + 4]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffff
jne 0x1001581f
mov ecx, 0x1027ea54
call fcn.10017435
mov ecx, dword [ebp - 0x34]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x1027ea54
call fcn.10017439
and dword [ebp - 0x50], 0
jmp 0x1001560f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [eax + 0x18]
jae 0x1001581f
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x4c]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x50]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
je 0x1001581a
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x4c]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x324]
call fcn.1001726f
mov dword [ebp - 4], 9
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x324]
call fcn.10004b26
mov dword [ebp - 0x16c], eax
movzx eax, byte [0x1027e985]
test eax, eax
je 0x10015692
mov ecx, 0x1027ea54
call fcn.100173d3
movzx eax, al
test eax, eax
jne 0x100157f1
lea eax, [ebp - 0x16c]
push eax
mov ecx, 0x1027ea54
call fcn.100173f7
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov dword [ebp - 0x164], 0xbcb
mov dword [ebp - 0x224], str.egxlvc_und_xyqjubv_wkcgy_qdmba_yzou_vht_mmie
cmp dword [ebp - 0x164], 0xc6b
jle 0x100157a2
and dword [ebp - 0xa8], 0
jmp 0x100156e2
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x70e3
jge 0x100157a2
and dword [ebp - 0xac], 0
jmp 0x10015708
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x29bc
jge 0x1001579d
and dword [ebp - 0xb4], 0
jmp 0x1001572e
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x58e2
jge 0x10015798
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0xac]
or eax, dword [ebp - 0xb4]
cdq
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], edx
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
lea ecx, [ebp - 0x354]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x254]
call fcn.10001c36
push eax
call fcn.10043bf4
pop ecx
lea ecx, [ebp - 0x354]
call fcn.10001c2c
jmp 0x10015721
jmp 0x100156fb
jmp 0x100156d5
mov byte [0x1027e985], 1
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x164], 0x7ec
jge 0x100157c5
push dword [ebp - 0x224]
call fcn.10043bf4
pop ecx
jmp 0x100157e1
mov dword [ebp - 4], 9
jmp 0x100157f1
cmp dword [ebp - 0x48], 0xffffffff
jne 0x1001580b
mov eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0xbc]
jne 0x1001580b
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x48], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.1001729e
jmp 0x10015608
cmp dword [ebp + 0x10], 0
jne 0x1001583f
cmp dword [ebp - 0x48], 0xffffffff
je 0x1001583f
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x4c]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x48]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x24], ax
movzx eax, word [ebp - 0x24]
cmp eax, 0xffff
je 0x10015cd8
movzx eax, word [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x4c]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x4c]
add ecx, dword [eax]
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x34]
jbe 0x10015cd3
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x34]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x38], edx
jae 0x10015cd3
mov eax, dword [0x1027ea18]
and eax, 2
jne 0x100158c9
mov eax, dword [0x1027ea18]
or eax, 2
mov dword [0x1027ea18], eax
mov dword [ebp - 4], 0xc
push 0x7f85
call fcn.1002e05b
pop ecx
mov byte [0x1027ea84], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x30], 0
mov byte [ebp - 0x2f], 0x93
mov byte [ebp - 0x2e], 3
mov byte [ebp - 0x2d], 0x2c
mov byte [ebp - 0x2c], 0x14
mov byte [ebp - 0x2b], 0xc0
mov byte [ebp - 0x2a], 2
mov byte [ebp - 0x29], 8
mov byte [ebp - 0x28], 1
mov byte [ebp - 0x27], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x30]
and eax, 0xf7
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x30]
or ecx, 0xf7
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x30]
mov byte [ebp + eax - 0x3c], cl
mov dword [ebp - 0x14], 2
and dword [ebp - 0x64], 0
jmp 0x10015938
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xa
jae 0x10015afa
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x30]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10015a93
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x30]
inc eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x30]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x174], 0x4219
mov dword [ebp - 0x230], str.mndwlpec_uyyuqwkp_iqa_xvba_iqrotmuk_moqulvnfj
cmp dword [ebp - 0x174], 0x45b9
jle 0x10015a45
and dword [ebp - 0xc4], 0
jmp 0x100159b2
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x67
jge 0x10015a45
and dword [ebp - 0xcc], 0
jmp 0x100159d5
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x21f7
jge 0x10015a40
and dword [ebp - 0xd4], 0
jmp 0x100159f7
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x57bf
jge 0x10015a3e
mov eax, dword [ebp - 0xc4]
cdq
idiv dword [ebp - 0xcc]
imul edx, dword [ebp - 0xd4]
mov eax, edx
cdq
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], edx
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
mov ecx, 0x10076b78
call fcn.10001c56
jmp 0x100159ea
jmp 0x100159c8
jmp 0x100159a5
jmp 0x10015930
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x64]
movzx eax, byte [ebp + eax - 0x32]
movsx eax, byte [ebp + eax - 0x3c]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x2f]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x64]
movzx eax, byte [ebp + eax - 0x32]
movsx eax, byte [ebp + eax - 0x3c]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x2f]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x64]
movzx eax, byte [ebp + eax - 0x32]
movsx eax, byte [ebp + eax - 0x3c]
mov esi, dword [ebp - 0x14]
movzx ebx, byte [ebp + esi - 0x2f]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x30]
mov byte [ebp + eax - 0x3c], bl
and dword [ebp - 0x64], 0
jmp 0x10015930
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x3c], 0
mov eax, dword [0x1027ea18]
and eax, 4
jne 0x10015b40
mov eax, dword [0x1027ea18]
or eax, 4
mov dword [0x1027ea18], eax
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x1027ea3c
call fcn.1001726f
push 0x1005d039
call fcn.10043bca
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0xdc], 0
jmp 0x10015b56
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 4
jae 0x10015b6c
mov eax, dword [ebp - 0xdc]
mov byte [ebp + eax - 0x3c], 0
jmp 0x10015b49
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
movsx eax, byte [0x1027ea84]
mov ecx, dword [ebp - 0x40]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x10015b8c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
jmp 0x10015b72
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
push dword [ebp - 0x40]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2dc]
call fcn.10018014
mov dword [ebp - 4], 0x10
push 0x1027ea3c
lea ecx, [ebp - 0x2dc]
call fcn.100172a8
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.100172cd
push dword [eax]
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.100172b9
push dword [eax]
lea ecx, [ebp - 0x30c]
call fcn.1001803d
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x30c]
push eax
call fcn.10005d55
pop ecx
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x10015c82
push dword [ebp - 0x40]
lea ecx, [ebp - 0x2f4]
call fcn.1001726f
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x1e0]
lea ecx, [ebp - 0x2f4]
call fcn.10004c0b
movzx eax, al
test eax, eax
je 0x10015c55
push 0
push dword [ebp - 0x1e0]
push 0
push dword [ebp - 0x124]
call fcn.10014376
add esp, 0x10
mov dword [ebp - 0x38], eax
jmp 0x10015c71
push 1
push 0
lea eax, [ebp - 0x2f4]
push eax
push dword [ebp - 0x124]
call fcn.10014376
add esp, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2f4]
call fcn.1001729e
jmp 0x10015cb5
cmp dword [ebp + 0x10], 0
jne 0x10015c98
mov ecx, dword [ebp + 0xc]
call fcn.10001c36
mov dword [ebp - 0x17c], eax
jmp 0x10015ca2
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x17c], eax
push dword [ebp - 0x17c]
push dword [ebp + 8]
call fcn.1000b17d
pop ecx
pop ecx
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x30c]
call fcn.10001dcb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2dc]
call fcn.1001729e
mov eax, dword [ebp - 0x38]
jmp 0x10015cda
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret