Function at 0x1001ba50
Capabilities:
Get domain information
Get hostname
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005b841
mov eax, dword fs:[0]
push eax
sub esp, 0x948
mov eax, dword [0x10070068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
mov dword [ebp - 0x824], edi
mov dword [ebp - 0x6cc], edi
mov dword [ebp - 4], 0
mov edx, str.DDd
mov dword [ebp - 0x828], edi
push 7
mov dword [ebp - 0x820], 0
call fcn.10002070
add esp, 4
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
mov edx, esi
mov dword [ebp - 0x820], 1
call fcn.1000d780
push eax
mov ecx, edi
mov dword [ebp - 4], 1
call fcn.1000c050
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001bb1b
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001bb11
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c82e
push ecx
push edx
call fcn.10035423
add esp, 8
push 0x1a
mov edx, 0x10070dcc
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov dword [ebp - 4], 2
call fcn.1000c050
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001bb7a
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001bb70
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c833
push ecx
push edx
call fcn.10035423
add esp, 8
cmp dword [ebp + 8], 0
je 0x1001c7b6
push 0xc
mov edx, str.DDv
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov dword [ebp - 4], 3
call fcn.1000c050
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001bbe3
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001bbd9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c838
push ecx
push edx
call fcn.10035423
add esp, 8
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x81c], 0
push 0x10069294
lea ecx, [ebp - 0x6c8]
mov dword [ebp - 0x6b8], 0
movups xmmword [ebp - 0x6c8], xmm0
mov dword [ebp - 0x6b4], 0
call fcn.10009320
lea eax, [ebp - 0x81c]
mov dword [ebp - 4], 4
push eax
push 1
push 0
mov dword [ebp - 0x820], 3
call dword [sym.imp.NETAPI32.dll_DsRoleGetPrimaryDomainInformation]
test eax, eax
jne 0x1001bd15
mov eax, dword [ebp - 0x81c]
mov edx, dword [eax + 0xc]
test edx, edx
jne 0x1001bcaa
mov eax, dword [ebp - 0x6b4]
cmp eax, 9
jb 0x1001bc94
cmp eax, 8
mov dword [ebp - 0x6b8], 9
push 0x12
lea esi, [ebp - 0x6c8]
cmovae esi, dword [ebp - 0x6c8]
push str.WORKGROUP
push esi
call fcn.10036be0
add esp, 0xc
xor eax, eax
mov word [esi + 0x12], ax
jmp 0x1001bd15
push str.WORKGROUP
mov byte [ebp - 0x818], 0
push dword [ebp - 0x818]
push 9
jmp 0x1001bd0a
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001bcb0
mov eax, dword [ebp - 0x6b4]
sub ecx, esi
sar ecx, 1
cmp ecx, eax
ja 0x1001bcfb
lea esi, [ecx + ecx]
mov dword [ebp - 0x6b8], ecx
cmp eax, 8
lea edi, [ebp - 0x6c8]
push esi
cmovae edi, dword [ebp - 0x6c8]
push edx
push edi
call fcn.10036be0
add esp, 0xc
xor eax, eax
mov word [esi + edi], ax
mov edi, dword [ebp - 0x824]
jmp 0x1001bd15
push edx
mov byte [ebp - 0x818], 0
push dword [ebp - 0x818]
push ecx
lea ecx, [ebp - 0x6c8]
call fcn.10009510
mov dword [ebp - 0x820], 0
mov dword [ebp - 4], 5
lea edx, [ebp - 0x6c8]
cmp dword [ebp - 0x6b4], 8
mov ecx, dword [edi + 0x10]
cmovae edx, dword [ebp - 0x6c8]
mov eax, dword [edi + 0x14]
mov esi, dword [ebp - 0x6b8]
sub eax, ecx
mov dword [ebp - 0x698], ecx
cmp esi, eax
ja 0x1001bd95
cmp dword [edi + 0x14], 8
lea eax, [ecx + esi]
mov dword [edi + 0x10], eax
mov eax, edi
mov dword [ebp - 0x818], edi
jb 0x1001bd6e
mov eax, dword [edi]
mov dword [ebp - 0x818], eax
lea ecx, [eax + ecx*2]
lea eax, [esi + esi]
push eax
push edx
push ecx
call fcn.10036be0
mov eax, dword [ebp - 0x698]
add esp, 0xc
mov ecx, dword [ebp - 0x818]
add eax, esi
xor edx, edx
mov word [ecx + eax*2], dx
jmp 0x1001bdac
push esi
push edx
mov byte [ebp - 0x698], 0
mov ecx, edi
push dword [ebp - 0x698]
push esi
call fcn.1000a150
push 0xf
mov edx, 0x10070e40
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov byte [ebp - 4], 6
call fcn.1000c050
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001be08
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001bdfe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c83d
push ecx
push edx
call fcn.10035423
add esp, 8
mov esi, dword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x494]
mov dword [ebp - 0x6d0], 0x100
push eax
call esi
test eax, eax
je 0x1001bf1a
xorps xmm0, xmm0
mov dword [ebp - 0x6a0], 0
lea ecx, [ebp - 0x494]
mov dword [ebp - 0x69c], 0
movups xmmword [ebp - 0x6b0], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001be57
sub ecx, edx
lea eax, [ebp - 0x494]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x6b0]
call fcn.10009320
lea eax, [ebp - 0x6b0]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x2c]
call fcn.10007810
push eax
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.1000c050
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001bed6
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001becc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c842
push ecx
push edx
call fcn.10035423
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x69c]
cmp ecx, 8
jb 0x1001bf1a
mov edx, dword [ebp - 0x6b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001bf10
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c86f
push ecx
push edx
call fcn.10035423
add esp, 8
push 0x13
mov edx, 0x10070db8
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov byte [ebp - 4], 9
call fcn.1000c050
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001bf76
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001bf6c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c847
push ecx
push edx
call fcn.10035423
add esp, 8
lea eax, [ebp - 0x6cc]
mov dword [ebp - 0x6cc], 0x100
push eax
lea eax, [ebp - 0x694]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x1001c086
xorps xmm0, xmm0
mov dword [ebp - 0x6a0], 0
lea ecx, [ebp - 0x694]
mov dword [ebp - 0x69c], 0
movups xmmword [ebp - 0x6b0], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001bfc3
sub ecx, edx
lea eax, [ebp - 0x694]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x6b0]
call fcn.10009320
lea eax, [ebp - 0x6b0]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x2c]
call fcn.10007810
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.1000c050
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001c042
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c038
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c84c
push ecx
push edx
call fcn.10035423
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x69c]
cmp ecx, 8
jb 0x1001c086
mov edx, dword [ebp - 0x6b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c07c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c86f
push ecx
push edx
call fcn.10035423
add esp, 8
push 0xf
mov edx, 0x10070e30
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.1000c050
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001c0e2
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c0d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c851
push ecx
push edx
call fcn.10035423
add esp, 8
lea eax, [ebp - 0x698]
mov dword [ebp - 0x698], 0x100
push eax
lea eax, [ebp - 0x294]
push eax
call esi
lea eax, [ebp - 0x818]
xor esi, esi
push eax
push 1
lea eax, [ebp - 0x294]
mov dword [ebp - 0x818], esi
push eax
push esi
call dword [sym.imp.NETAPI32.dll_NetUserGetInfo]
test eax, eax
mov eax, dword [ebp - 0x818]
jne 0x1001c128
mov esi, dword [eax + 0xc]
test eax, eax
je 0x1001c133
push eax
call dword [sym.imp.NETAPI32.dll_NetApiBufferFree]
lea ecx, [ebp - 0x12]
mov eax, 0xcccccccd
sub ecx, 2
mul esi
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub esi, eax
add esi, 0x30
mov word [ecx], si
mov esi, edx
test esi, esi
jne 0x1001c136
push ecx
lea eax, [ebp - 0x12]
push eax
push ecx
lea ecx, [ebp - 0x840]
call fcn.1000d340
mov dword [ebp - 0x820], 0x30
lea eax, [ebp - 0x840]
mov byte [ebp - 4], 0xd
push eax
mov ecx, edi
call fcn.1000c050
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x82c]
cmp ecx, 8
jb 0x1001c1c7
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c1bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c86f
push ecx
push edx
call fcn.10035423
add esp, 8
push 8
mov edx, 0x10070e14
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe
call fcn.1000c050
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001c223
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c219
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c856
push ecx
push edx
call fcn.10035423
add esp, 8
push 0x10069870
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x1001c279
push str.RtlGetVersion
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x1001c279
push 0x110
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.10037170
add esp, 0xc
mov dword [ebp - 0x814], 0x114
lea eax, [ebp - 0x814]
push eax
call esi
test eax, eax
jne 0x1001c279
lea esi, [ebp - 0x814]
jmp 0x1001c295
push 0x114
lea eax, [ebp - 0x1a8]
push 0
push eax
call fcn.10037170
add esp, 0xc
lea esi, [ebp - 0x1a8]
mov ecx, 0x45
lea edi, [ebp - 0x954]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x94c]
lea esi, [ebp - 0x6a]
nop dword [eax + eax]
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x1001c2b0
push ecx
lea eax, [ebp - 0x6a]
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.1000d340
mov dword [ebp - 0x820], 0x3c
mov byte [ebp - 4], 0xf
lea esi, [ebp - 0x3e]
mov ecx, dword [ebp - 0x950]
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x1001c2f5
push ecx
lea eax, [ebp - 0x3e]
push eax
push esi
lea ecx, [ebp - 0x6b0]
call fcn.1000d340
mov dword [ebp - 0x820], 0xfc
push 0x1006986c
lea edx, [ebp - 0x6b0]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x840]
call fcn.10009000
add esp, 4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
push ecx
push eax
push dword [ebp - 0x828]
lea ecx, [ebp - 0x700]
call fcn.10009b50
mov dword [ebp - 0x820], 0x1fc
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x82c]
cmp ecx, 8
jb 0x1001c3b5
mov edx, dword [ebp - 0x840]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c3ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c85b
push ecx
push edx
call fcn.10035423
add esp, 8
xor eax, eax
mov dword [ebp - 0x830], 0
mov dword [ebp - 0x82c], 7
mov word [ebp - 0x840], ax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x69c]
cmp ecx, 8
jb 0x1001c416
mov edx, dword [ebp - 0x6b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c40c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c85b
push ecx
push edx
call fcn.10035423
add esp, 8
xor eax, eax
mov dword [ebp - 0x6a0], 0
mov dword [ebp - 0x69c], 7
mov word [ebp - 0x6b0], ax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001c471
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c467
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c85b
push ecx
push edx
call fcn.10035423
add esp, 8
mov edi, dword [ebp - 0x824]
lea esi, [ebp - 0x700]
cmp dword [ebp - 0x6ec], 8
mov edx, dword [ebp - 0x6f0]
cmovae esi, dword [ebp - 0x700]
mov eax, dword [edi + 0x14]
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp edx, eax
ja 0x1001c4e4
cmp dword [edi + 0x14], 8
lea eax, [ecx + edx]
mov dword [ebp - 0x698], eax
mov dword [edi + 0x10], eax
mov eax, edi
mov dword [ebp - 0x824], edi
jb 0x1001c4bf
mov eax, dword [edi]
mov dword [ebp - 0x824], eax
lea ecx, [eax + ecx*2]
lea eax, [edx + edx]
push eax
push esi
push ecx
call fcn.10036be0
mov eax, dword [ebp - 0x824]
add esp, 0xc
mov ecx, dword [ebp - 0x698]
xor edx, edx
mov word [eax + ecx*2], dx
jmp 0x1001c4fb
push edx
push esi
mov byte [ebp - 0x698], 0
mov ecx, edi
push dword [ebp - 0x698]
push edx
call fcn.1000a150
push 0xe
mov edx, str.DD6
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov byte [ebp - 4], 0x16
call fcn.1000c050
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001c557
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c54d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c860
push ecx
push edx
call fcn.10035423
add esp, 8
mov ecx, dword [ebp - 0x948]
lea esi, [ebp - 0x3e]
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x1001c560
push ecx
lea eax, [ebp - 0x3e]
push eax
push esi
lea ecx, [ebp - 0x6e8]
call fcn.1000d340
mov dword [ebp - 0x820], 0x7fc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x6e8]
cmp dword [ebp - 0x6d4], 8
mov edx, dword [edi + 0x10]
mov esi, dword [ebp - 0x6e8]
cmovae ecx, esi
mov eax, dword [edi + 0x14]
sub eax, edx
mov dword [ebp - 0x698], edx
mov edx, dword [ebp - 0x6d8]
mov dword [ebp - 0x818], ecx
cmp edx, eax
ja 0x1001c625
cmp dword [edi + 0x14], 8
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x824], edi
lea eax, [ecx + edx]
mov dword [ebp - 0x698], eax
mov dword [edi + 0x10], eax
mov eax, edi
jb 0x1001c5fb
mov eax, dword [edi]
mov dword [ebp - 0x824], eax
lea ecx, [eax + ecx*2]
lea eax, [edx + edx]
push eax
push dword [ebp - 0x818]
push ecx
call fcn.10036be0
mov eax, dword [ebp - 0x824]
add esp, 0xc
mov ecx, dword [ebp - 0x698]
xor edx, edx
mov word [eax + ecx*2], dx
jmp 0x1001c642
push edx
push ecx
mov byte [ebp - 0x698], 0
mov ecx, edi
push dword [ebp - 0x698]
push edx
call fcn.1000a150
mov esi, dword [ebp - 0x6e8]
push 0xe
mov edx, 0x10070e04
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov byte [ebp - 4], 0x18
call fcn.1000c050
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001c69e
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c694
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c865
push ecx
push edx
call fcn.10035423
add esp, 8
lea ecx, [ebp - 0x2c]
call fcn.1000d470
push eax
mov ecx, edi
mov byte [ebp - 4], 0x19
call fcn.1000c050
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001c6f0
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c6e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c86a
push ecx
push edx
call fcn.10035423
add esp, 8
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x6d4]
cmp eax, 8
jb 0x1001c72e
lea ecx, [eax*2 + 2]
mov eax, esi
cmp ecx, 0x1000
jb 0x1001c724
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c86f
push ecx
push esi
call fcn.10035423
add esp, 8
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x6ec]
cmp eax, 8
jb 0x1001c772
mov edx, dword [ebp - 0x700]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c768
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c86f
push ecx
push edx
call fcn.10035423
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x6b4]
cmp ecx, 8
jb 0x1001c7b6
mov edx, dword [ebp - 0x6c8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c7ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c86f
push ecx
push edx
call fcn.10035423
add esp, 8
push 2
mov edx, 0x10070df8
lea ecx, [ebp - 0x2c]
call fcn.10002070
add esp, 4
push eax
mov ecx, edi
mov dword [ebp - 4], 0x1a
call fcn.1000c050
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x1001c811
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c807
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c874
push ecx
push edx
call fcn.10035423
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10035415
mov esp, ebp
pop ebp
ret
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
call fcn.1003a33a
int3