Function at 0x100130d0
Capabilities:
Contain obfuscated stackstrings
Create pipe
Create process on windows
Read file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10029bdb
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x11e8
call fcn.10028270
mov eax, dword [0x10037040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x11b4], edi
mov dword [ebp - 0x11f4], edi
xorps xmm0, xmm0
mov dword [ebp - 0x11e8], 0
movups xmmword [ebp - 0x1048], xmm0
mov dword [ebp - 0x1038], 0
mov dword [ebp - 0x1034], 0xf
mov byte [ebp - 0x1048], 0
push 0
mov dword [ebp - 4], 0
call dword [sym.imp.ole32.dll_CoInitialize]
xorps xmm0, xmm0
test eax, eax
jns 0x100131e1
push 1
movups xmmword [edi], xmm0
push str.N__n:
mov ecx, edi
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.10009bd0
mov ecx, dword [ebp - 0x1034]
cmp ecx, 0xf
jbe 0x100131c1
mov edx, dword [ebp - 0x1048]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100131b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10026c90
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
xor esi, esi
movq qword [ebp - 0x1054], xmm0
xor eax, eax
mov dword [ebp - 0x104c], 0
lea edx, [ebp - 0x11b0]
mov dword [ebp - 0x11b0], 0x2d746547
lea ecx, [ebp - 0x113d]
mov dword [ebp - 0x11ac], 0x4f696d57
sub ecx, edx
mov dword [ebp - 0x11a8], 0x63656a62
mov dword [ebp - 0x11a4], 0x4e2d2074
mov dword [ebp - 0x11a0], 0x73656d61
mov dword [ebp - 0x119c], 0x65636170
mov dword [ebp - 0x1198], 0x6f722720
mov dword [ebp - 0x1194], 0x535c746f
mov dword [ebp - 0x1190], 0x72756365
mov dword [ebp - 0x118c], 0x43797469
mov dword [ebp - 0x1188], 0x65746e65
mov dword [ebp - 0x1184], 0x20273272
mov dword [ebp - 0x1180], 0x616c432d
mov dword [ebp - 0x117c], 0x41207373
mov dword [ebp - 0x1178], 0x5669746e
mov dword [ebp - 0x1174], 0x73757269
mov dword [ebp - 0x1170], 0x646f7250
mov dword [ebp - 0x116c], 0x20746375
mov dword [ebp - 0x1168], 0x6553207c
mov dword [ebp - 0x1164], 0x7463656c
mov dword [ebp - 0x1160], 0x6a624f2d
mov dword [ebp - 0x115c], 0x20746365
mov dword [ebp - 0x1158], 0x7078452d
mov dword [ebp - 0x1154], 0x50646e61
mov dword [ebp - 0x1150], 0x65706f72
mov dword [ebp - 0x114c], 0x20797472
mov dword [ebp - 0x1148], 0x70736964
mov dword [ebp - 0x1144], 0x4e79616c
mov word [ebp - 0x1140], 0x6d61
mov byte [ebp - 0x113e], 0x65
mov dword [ebp - 0x1110], esi
mov dword [ebp - 0x1054], esi
mov dword [ebp - 0x1050], esi
mov dword [ebp - 0x1114], eax
mov dword [ebp - 0x104c], eax
mov dword [ebp - 0x1104], ecx
je 0x100133a7
cmp ecx, 0x7fffffff
ja 0x100140aa
push ecx
lea ecx, [ebp - 0x1054]
call fcn.10001e00
push dword [ebp - 0x1104]
mov esi, dword [ebp - 0x1054]
lea eax, [ebp - 0x11b0]
push eax
push esi
mov dword [ebp - 0x1110], esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x1104]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x1050], eax
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0x1114], eax
mov byte [ebp - 4], 1
lea edx, [ebp - 0x1134]
xor eax, eax
mov dword [ebp - 0x1058], 0
lea ecx, [ebp - 0x111b]
mov dword [ebp - 0x1134], 0x65776f70
xorps xmm0, xmm0
mov dword [ebp - 0x1130], 0x65687372
movq qword [ebp - 0x1060], xmm0
sub ecx, edx
mov dword [ebp - 0x112c], 0x652e6c6c
mov dword [ebp - 0x1128], 0x2d206578
mov dword [ebp - 0x1124], 0x6d6d6f43
mov dword [ebp - 0x1120], 0x20646e61
mov byte [ebp - 0x111c], 0x22
mov dword [ebp - 0x1108], eax
mov dword [ebp - 0x1060], eax
mov dword [ebp - 0x105c], eax
mov dword [ebp - 0x1104], eax
mov dword [ebp - 0x1058], eax
mov dword [ebp - 0x110c], ecx
je 0x10013493
cmp ecx, 0x7fffffff
ja 0x100140af
push ecx
lea ecx, [ebp - 0x1060]
call fcn.10001e00
push dword [ebp - 0x110c]
lea eax, [ebp - 0x1134]
push eax
mov eax, dword [ebp - 0x1060]
push eax
mov dword [ebp - 0x1108], eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x1108]
add esp, 0xc
mov ecx, dword [ebp - 0x110c]
add eax, ecx
mov dword [ebp - 0x105c], eax
mov eax, dword [ebp - 0x1058]
mov dword [ebp - 0x1104], eax
push ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1090]
push dword [ebp - 0x1050]
push esi
call fcn.10014e10
push ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x11e4]
push dword [ebp - 0x105c]
push dword [ebp - 0x1108]
call fcn.10014e10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1090]
cmp dword [ebp - 0x107c], 7
push dword [ebp - 0x1080]
cmova ecx, dword [ebp - 0x1090]
push ecx
mov ecx, eax
call fcn.10011d00
mov dword [ebp - 0x11bc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x11cc], xmm0
mov dword [ebp - 0x11b8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x11cc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x11bc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 1
push 0x1002e114
lea ecx, [ebp - 0x11cc]
mov byte [ebp - 4], 5
call fcn.10011d00
mov dword [ebp - 0x1020], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1030], xmm0
mov dword [ebp - 0x101c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1030], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1020], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x11b8]
cmp ecx, 7
jbe 0x100135d2
mov edx, dword [ebp - 0x11cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100135c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013625
push ecx
push edx
call fcn.10026cc1
add esp, 8
xor eax, eax
mov dword [ebp - 0x11bc], 0
mov dword [ebp - 0x11b8], 7
mov word [ebp - 0x11cc], ax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x11d0]
cmp ecx, 7
jbe 0x10013635
mov edx, dword [ebp - 0x11e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001362b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001362b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10026cc1
add esp, 8
xor eax, eax
mov dword [ebp - 0x11d4], 0
push eax
mov word [ebp - 0x11e4], ax
mov dword [ebp - 0x10a4], eax
lea eax, [ebp - 0x10a8]
push eax
lea eax, [ebp - 0x1098]
mov dword [ebp - 0x11d0], 7
push eax
lea eax, [ebp - 0x1094]
mov dword [ebp - 0x10a8], 0xc
push eax
mov dword [ebp - 0x10a0], 1
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x100137cc
call dword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
mov ecx, edi
push 1
movups xmmword [edi], xmm0
push str.N__n:
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.10009bd0
mov ecx, dword [ebp - 0x101c]
cmp ecx, 7
jbe 0x100136f8
mov edx, dword [ebp - 0x1030]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100136ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x107c]
xor eax, eax
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x101c], 7
mov word [ebp - 0x1030], ax
cmp ecx, 7
jbe 0x10013755
mov edx, dword [ebp - 0x1090]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001374b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1108]
test ecx, ecx
je 0x1001378f
mov edx, dword [ebp - 0x1104]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10013785
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push edx
push ecx
call fcn.10026cc1
add esp, 8
test esi, esi
je 0x10013187
mov ecx, dword [ebp - 0x1114]
mov eax, esi
sub ecx, esi
cmp ecx, 0x1000
jb 0x100137bd
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push esi
call fcn.10026cc1
add esp, 8
jmp 0x10013187
push 0
push 1
push dword [ebp - 0x1094]
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea ecx, [ebp - 0x1100]
mov dword [ebp - 0x10f0], 0x44
push ecx
xor eax, eax
mov dword [ebp - 0x10c4], 0x100
lea ecx, [ebp - 0x10f0]
mov word [ebp - 0x10b6], ax
mov eax, dword [ebp - 0x1098]
xorps xmm0, xmm0
push ecx
push 0
push 0
push 0x8000000
mov dword [ebp - 0x10b4], eax
mov dword [ebp - 0x10b0], eax
xor eax, eax
cmp dword [ebp - 0x101c], 7
push 1
mov word [ebp - 0x10c0], ax
lea eax, [ebp - 0x1030]
cmova eax, dword [ebp - 0x1030]
push 0
push 0
push eax
push 0
movlpd qword [ebp - 0x10ec], xmm0
movlpd qword [ebp - 0x10e4], xmm0
movlpd qword [ebp - 0x10dc], xmm0
movlpd qword [ebp - 0x10d4], xmm0
movlpd qword [ebp - 0x10cc], xmm0
movlpd qword [ebp - 0x10be], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x100139e1
push dword [ebp - 0x1094]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x1098]
call esi
call dword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
mov ecx, edi
push 1
movups xmmword [edi], xmm0
push str.N__n:
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.10009bd0
mov ecx, dword [ebp - 0x101c]
cmp ecx, 7
jbe 0x10013907
mov edx, dword [ebp - 0x1030]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100138fd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x107c]
xor eax, eax
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x101c], 7
mov word [ebp - 0x1030], ax
cmp ecx, 7
jbe 0x10013964
mov edx, dword [ebp - 0x1090]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001395a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1108]
test ecx, ecx
je 0x1001399e
mov edx, dword [ebp - 0x1104]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10013994
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push edx
push ecx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1110]
test ecx, ecx
je 0x10013187
mov edx, dword [ebp - 0x1114]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x100139d2
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push edx
push ecx
call fcn.10026cc1
add esp, 8
jmp 0x10013187
push dword [ebp - 0x1098]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
lea eax, [ebp - 0x109c]
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push dword [ebp - 0x1094]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10013b5b
nop word [eax + eax]
mov eax, dword [ebp - 0x109c]
test eax, eax
je 0x10013b55
push eax
lea eax, [ebp - 0x1018]
mov dword [ebp - 0x1068], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1064], 0
push eax
lea ecx, [ebp - 0x1078]
movups xmmword [ebp - 0x1078], xmm0
call fcn.10009bd0
mov byte [ebp - 4], 9
lea edx, [ebp - 0x1078]
cmp dword [ebp - 0x1064], 0xf
mov eax, dword [ebp - 0x1078]
mov esi, dword [ebp - 0x1038]
cmova edx, eax
mov ecx, dword [ebp - 0x1068]
mov dword [ebp - 0x1118], eax
mov eax, dword [ebp - 0x1034]
sub eax, esi
push ecx
push edx
cmp ecx, eax
ja 0x10013ad3
cmp dword [ebp - 0x1034], 0xf
lea eax, [ecx + esi]
mov dword [ebp - 0x1038], eax
lea eax, [ebp - 0x1048]
cmova eax, dword [ebp - 0x1048]
add esi, eax
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x1068]
add esp, 0xc
mov ecx, dword [ebp - 0x1118]
mov byte [esi + eax], 0
jmp 0x10013af2
mov byte [ebp - 0x110c], 0
push dword [ebp - 0x110c]
push ecx
lea ecx, [ebp - 0x1048]
call fcn.10009a40
mov ecx, dword [ebp - 0x1078]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x1064]
cmp eax, 0xf
jbe 0x10013b2c
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x10013b22
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push edx
push ecx
call fcn.10026cc1
add esp, 8
push 0
lea eax, [ebp - 0x109c]
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push dword [ebp - 0x1094]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x10013a20
mov esi, dword [ebp - 0x1110]
push dword [ebp - 0x1094]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x1100]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x10fc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x40
xorps xmm0, xmm0
mov dword [ebp - 0x1068], 0
push str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea ecx, [ebp - 0x1078]
mov dword [ebp - 0x1064], 0
movups xmmword [ebp - 0x1078], xmm0
call fcn.10009bd0
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
cmp dword [ebp - 0x1038], 0
push 1
jne 0x10013d63
movups xmmword [edi], xmm0
push str.N__n:
mov ecx, edi
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.10009bd0
mov ecx, dword [ebp - 0x1064]
cmp ecx, 0xf
jbe 0x10013c22
mov edx, dword [ebp - 0x1078]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10013c18
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x101c]
cmp ecx, 7
jbe 0x10013c62
mov edx, dword [ebp - 0x1030]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10013c58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x107c]
xor eax, eax
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x101c], 7
mov word [ebp - 0x1030], ax
cmp ecx, 7
jbe 0x10013cbf
mov edx, dword [ebp - 0x1090]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10013cb5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1108]
test ecx, ecx
je 0x10013cf5
mov edx, dword [ebp - 0x1104]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10013ceb
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push edx
push ecx
call fcn.10026cc1
add esp, 8
test esi, esi
je 0x10013d25
mov ecx, dword [ebp - 0x1114]
mov eax, esi
sub ecx, esi
cmp ecx, 0x1000
jb 0x10013d1b
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013d5d
push ecx
push esi
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1034]
cmp ecx, 0xf
jbe 0x100131c1
mov edx, dword [ebp - 0x1048]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100131b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100131b7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push 0x1002e118
lea ecx, [ebp - 0x11e4]
mov dword [ebp - 0x11d4], 0
movups xmmword [ebp - 0x11e4], xmm0
mov dword [ebp - 0x11d0], 0
call fcn.10009bd0
lea eax, [ebp - 0x11e4]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x1048]
push eax
lea eax, [ebp - 0x11c0]
push eax
call fcn.10025bc0
mov byte [ebp - 4], 0xd
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x11e8], 0xe
mov dword [ebp - 0x1118], esi
mov dword [ebp - 0x11b4], eax
cmp esi, eax
je 0x10013ee4
nop dword [eax + eax]
push 0x1002e13c
mov edx, esi
lea ecx, [ebp - 0x1134]
call fcn.10014bd0
add esp, 4
mov dword [ebp - 4], 0xe
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10013e26
mov edx, dword [eax]
mov ecx, dword [eax + 0x10]
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x110c], eax
mov eax, dword [edi + 0x14]
sub eax, dword [ebp - 0x110c]
mov dword [ebp - 0x11ec], ecx
cmp ecx, eax
ja 0x10013e7a
cmp dword [edi + 0x14], 0xf
mov esi, dword [ebp - 0x110c]
lea eax, [esi + ecx]
mov dword [edi + 0x10], eax
mov eax, edi
jbe 0x10013e5b
mov eax, dword [edi]
push ecx
add esi, eax
push edx
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x11ec]
add esp, 0xc
mov byte [eax + esi], 0
mov esi, dword [ebp - 0x1118]
jmp 0x10013e91
push ecx
push edx
mov byte [ebp - 0x11f0], 0
push dword [ebp - 0x11f0]
push ecx
mov ecx, edi
call fcn.10009a40
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1120]
cmp ecx, 0xf
jbe 0x10013ecf
mov edx, dword [ebp - 0x1134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10013ec5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10013625
push ecx
push edx
call fcn.10026cc1
add esp, 8
add esi, 0x18
mov dword [ebp - 0x1118], esi
cmp esi, dword [ebp - 0x11b4]
jne 0x10013e00
lea ecx, [ebp - 0x11c0]
call fcn.10007e00
mov ecx, dword [ebp - 0x11d0]
cmp ecx, 0xf
jbe 0x10013f29
mov edx, dword [ebp - 0x11e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10013f1f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100140a4
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1064]
cmp ecx, 0xf
jbe 0x10013f63
mov edx, dword [ebp - 0x1078]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10013f59
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100140a4
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x101c]
cmp ecx, 7
jbe 0x10013fa3
mov edx, dword [ebp - 0x1030]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10013f99
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100140a4
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x107c]
xor eax, eax
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x101c], 7
mov word [ebp - 0x1030], ax
cmp ecx, 7
jbe 0x10014000
mov edx, dword [ebp - 0x1090]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10013ff6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100140a4
push ecx
push edx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1108]
test ecx, ecx
je 0x10014036
mov edx, dword [ebp - 0x1104]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1001402c
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100140a4
push edx
push ecx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1110]
test ecx, ecx
je 0x1001406c
mov edx, dword [ebp - 0x1114]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10014062
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100140a4
push edx
push ecx
call fcn.10026cc1
add esp, 8
mov ecx, dword [ebp - 0x1034]
cmp ecx, 0xf
jbe 0x100131c1
mov edx, dword [ebp - 0x1048]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100131b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100131b7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.10001df0
call fcn.10001df0
int3