Function at 0x100166de
Capabilities:
Create pipe

Disassembly:
mov eax, 0x10060b1d
call fcn.1005fe44
sub esp, 0x60
push ebx
push esi
mov dword [ebp - 0x18], 0x2712
xor esi, esi
cmp dword [ebp - 0x18], 0x286e
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], ecx
jle 0x1001674c
mov edi, esi
mov ebx, esi
mov ecx, ebx
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x50]
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10016728
mov eax, dword [eax]
push eax
call fcn.10047a23
pop ecx
push esi
push 1
lea ecx, [ebp - 0x50]
call fcn.1000e875
inc ebx
cmp ebx, 0x7ff9
jl 0x1001670d
inc edi
cmp edi, 0x2216
jl 0x1001670b
cmp dword [ebp - 0x18], 0x247b
jge 0x10016760
push str.syeci_vbkx_fkjbqyh
call fcn.10047a23
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x20], 0
je 0x100168d5
mov dword [ebp - 0x24], 0x1459
cmp dword [ebp - 0x24], 0x147c
jle 0x100167f8
push esi
push 0x763
push 0x26d0
push 0x14db
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], 0x22ef
mov ebx, esi
mov edi, esi
mov esi, dword [ebp - 0x18]
mov eax, ebx
mov ecx, 0x1007bfb8
cdq
idiv edi
mov eax, esi
sub eax, edx
cdq
push edx
push eax
call fcn.1000dd80
inc edi
cmp edi, 0x7a48
jl 0x100167a8
inc ebx
push 0
pop esi
cmp ebx, 0x38d7
jl 0x100167a3
mov edi, dword [ebp - 0x20]
add dword [ebp - 0x18], edi
dec dword [ebp - 0x1c]
jne 0x100167a1
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x4591
jl 0x10016797
push 0x158e
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [edx]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + edx*4]
cmp eax, dword [ecx + edx*4]
jle 0x10016818
mov eax, dword [ebp + 8]
mov dword [eax], 1
mov dword [ebp - 0x20], 0x5db2
cmp dword [ebp - 0x20], 0x5ec4
jle 0x10016852
mov edi, esi
mov ebx, esi
mov eax, edi
mov ecx, 0x1007bfb8
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
call fcn.1000dd80
inc ebx
cmp ebx, 0x576d
jl 0x1001682c
inc edi
cmp edi, 0xa4b
jl 0x1001682a
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x11c4
jge 0x10016871
mov edx, str.zcliguwr_blsizjks_arycm_bzp_oqccnulma_cyyeny_uxiavtti
mov ecx, 0x1007bfb8
call fcn.10010bec
mov dword [ebp - 4], 4
cmp dword [ebp - 0x20], 0x59f9
jge 0x10016890
mov edx, str.mgaiclych_bywfat_faex_utwm_psfio_qspqso_wmjqkvjh_qdor_kyqjstsow_jbjocxjv_dgwzzsbq_unsrwmw_imntqcgqr_goxubh
mov ecx, 0x1007bfb8
call fcn.10010bec
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + 0x28]
mov dword [ebp - 0x1c], 0x34a
cmp dword [ebp - 0x1c], 0x4a3
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], eax
jle 0x10016957
mov edi, esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x24], 0x6b5e
mov ebx, esi
lea eax, [edi + ebx]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], eax
mov edi, eax
mov eax, edi
mov ecx, 0x1007bfb8
or eax, esi
cdq
push edx
push eax
call fcn.1000dd80
inc esi
cmp esi, 0x11d9
jl 0x10016913
mov edi, dword [ebp - 0x18]
inc ebx
push 0
pop esi
cmp ebx, 0x411b
jl 0x10016908
dec edi
dec dword [ebp - 0x24]
mov dword [ebp - 0x18], edi
jne 0x10016906
mov edi, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0xed6
jl 0x100168fc
mov edi, dword [ebp + 0x28]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1c], 1
mov dword [ebp - 0x30], ecx
jge 0x1001697c
mov edx, str.xuahoq_vhesbkva_vub_bvnrmjhp_fclafdt_yrtmyuwwy_eimf_lomnv
mov ecx, 0x1007bfb8
call fcn.10010bec
mov ecx, dword [ebp + 0x10]
or dword [ebp - 4], 0xffffffff
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x18]
mov ebx, eax
mov dword [eax], 1
cmp dword [ebx], esi
jl 0x10016890
push esi
push ecx
push 0x2582
push ecx
push edx
mov edx, ecx
mov ecx, edi
call fcn.10018362
mov dword [ebp - 0x20], 0x41a2
add esp, 0x14
cmp dword [ebp - 0x20], 0x4336
jle 0x10016a58
push esi
push 0x12b9
push 0x1e5
push 0x18df
push 0x1044
push 0x5a6
push 0x2097
push 0x955
push 0x6f2
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov ebx, esi
mov edi, esi
mov ecx, esi
mov dword [ebp - 0x24], esi
lea eax, [edi + ebx]
and eax, ecx
lea ecx, [ebp - 0x68]
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10016a13
mov eax, dword [eax]
push eax
call fcn.10047a23
pop ecx
push esi
push 1
lea ecx, [ebp - 0x68]
call fcn.1000e875
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x4979
jl 0x100169f9
inc edi
cmp edi, 0x63d2
jl 0x100169f4
inc ebx
cmp ebx, 0x3014
jl 0x100169f2
push esi
push 0x152e
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
mov ebx, dword [ebp - 0x28]
mov edi, dword [ebp + 0x28]
cmp dword [ebp - 0x20], 0x4049
jge 0x10016a6c
push str.ayckrrgn_fdnv_goyjmtd
call fcn.10047a23
pop ecx
or dword [ebp - 4], 0xffffffff
dec dword [ebx]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x24]
jmp 0x1001698e