Function at 0x10017340
Capabilities:
Contain obfuscated stackstrings
Create pipe
Create process on windows
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10192bab
mov eax, dword fs:[0]
push eax
mov eax, 0x11d4
call fcn.10166140
mov eax, dword [0x101fd000]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x11a0], edi
mov dword [ebp - 0x11e0], edi
xorps xmm0, xmm0
mov dword [ebp - 0x11d4], 0
movups xmmword [ebp - 0x1040], xmm0
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x102c], 0xf
mov byte [ebp - 0x1040], 0
push 0
mov dword [ebp - 4], 0
call dword [sym.imp.ole32.dll_CoInitialize]
xorps xmm0, xmm0
test eax, eax
jns 0x1001743a
push 1
movups xmmword [edi], xmm0
push str.N__n:
mov ecx, edi
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.1000dcd0
mov ecx, dword [ebp - 0x102c]
cmp ecx, 0xf
jbe 0x1001741d
mov edx, dword [ebp - 0x1040]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10017413
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push edx
call fcn.10165540
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1016550f
mov esp, ebp
pop ebp
ret
xor esi, esi
movq qword [ebp - 0x104c], xmm0
xor eax, eax
mov dword [ebp - 0x1044], 0
lea edx, [ebp - 0x119c]
mov dword [ebp - 0x119c], 0x2d746547
lea ecx, [ebp - 0x1129]
mov dword [ebp - 0x1198], 0x4f696d57
sub ecx, edx
mov dword [ebp - 0x1194], 0x63656a62
mov dword [ebp - 0x1190], 0x4e2d2074
mov dword [ebp - 0x118c], 0x73656d61
mov dword [ebp - 0x1188], 0x65636170
mov dword [ebp - 0x1184], 0x6f722720
mov dword [ebp - 0x1180], 0x535c746f
mov dword [ebp - 0x117c], 0x72756365
mov dword [ebp - 0x1178], 0x43797469
mov dword [ebp - 0x1174], 0x65746e65
mov dword [ebp - 0x1170], 0x20273272
mov dword [ebp - 0x116c], 0x616c432d
mov dword [ebp - 0x1168], 0x41207373
mov dword [ebp - 0x1164], 0x5669746e
mov dword [ebp - 0x1160], 0x73757269
mov dword [ebp - 0x115c], 0x646f7250
mov dword [ebp - 0x1158], 0x20746375
mov dword [ebp - 0x1154], 0x6553207c
mov dword [ebp - 0x1150], 0x7463656c
mov dword [ebp - 0x114c], 0x6a624f2d
mov dword [ebp - 0x1148], 0x20746365
mov dword [ebp - 0x1144], 0x7078452d
mov dword [ebp - 0x1140], 0x50646e61
mov dword [ebp - 0x113c], 0x65706f72
mov dword [ebp - 0x1138], 0x20797472
mov dword [ebp - 0x1134], 0x70736964
mov dword [ebp - 0x1130], 0x4e79616c
mov word [ebp - 0x112c], 0x6d61
mov byte [ebp - 0x112a], 0x65
mov dword [ebp - 0x1104], esi
mov dword [ebp - 0x104c], esi
mov dword [ebp - 0x1048], esi
mov dword [ebp - 0x1108], eax
mov dword [ebp - 0x1044], eax
mov dword [ebp - 0x10f8], ecx
je 0x10017600
cmp ecx, 0x7fffffff
ja 0x100182f9
push ecx
lea ecx, [ebp - 0x104c]
call fcn.100029a0
push dword [ebp - 0x10f8]
mov esi, dword [ebp - 0x104c]
lea eax, [ebp - 0x119c]
push eax
push esi
mov dword [ebp - 0x1104], esi
call fcn.10169070
mov eax, dword [ebp - 0x10f8]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x1048], eax
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x1108], eax
mov byte [ebp - 4], 1
lea edx, [ebp - 0x1128]
xor eax, eax
mov dword [ebp - 0x1050], 0
lea ecx, [ebp - 0x110f]
mov dword [ebp - 0x1128], 0x65776f70
xorps xmm0, xmm0
mov dword [ebp - 0x1124], 0x65687372
movq qword [ebp - 0x1058], xmm0
sub ecx, edx
mov dword [ebp - 0x1120], 0x652e6c6c
mov dword [ebp - 0x111c], 0x2d206578
mov dword [ebp - 0x1118], 0x6d6d6f43
mov dword [ebp - 0x1114], 0x20646e61
mov byte [ebp - 0x1110], 0x22
mov dword [ebp - 0x10fc], eax
mov dword [ebp - 0x1058], eax
mov dword [ebp - 0x1054], eax
mov dword [ebp - 0x10f8], eax
mov dword [ebp - 0x1050], eax
mov dword [ebp - 0x1100], ecx
je 0x100176ec
cmp ecx, 0x7fffffff
ja 0x100182fe
push ecx
lea ecx, [ebp - 0x1058]
call fcn.100029a0
push dword [ebp - 0x1100]
lea eax, [ebp - 0x1128]
push eax
mov eax, dword [ebp - 0x1058]
push eax
mov dword [ebp - 0x10fc], eax
call fcn.10169070
mov eax, dword [ebp - 0x10fc]
add esp, 0xc
mov ecx, dword [ebp - 0x1100]
add eax, ecx
mov dword [ebp - 0x1054], eax
mov eax, dword [ebp - 0x1050]
mov dword [ebp - 0x10f8], eax
push ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1088]
push dword [ebp - 0x1048]
push esi
call fcn.1001a3f0
push ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x11d0]
push dword [ebp - 0x1054]
push dword [ebp - 0x10fc]
call fcn.1001a3f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1088]
cmp dword [ebp - 0x1074], 7
push dword [ebp - 0x1078]
cmova ecx, dword [ebp - 0x1088]
push ecx
mov ecx, eax
call fcn.100163d0
mov dword [ebp - 0x11a8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x11b8], xmm0
mov dword [ebp - 0x11a4], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x11b8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x11a8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 1
push 0x101daec0
lea ecx, [ebp - 0x11b8]
mov byte [ebp - 4], 5
call fcn.100163d0
mov dword [ebp - 0x1018], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1028], xmm0
mov dword [ebp - 0x1014], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1028], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1018], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x11a4]
cmp ecx, 7
jbe 0x1001782f
mov edx, dword [ebp - 0x11b8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10017825
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018303
push ecx
push edx
call fcn.10165540
add esp, 8
xor eax, eax
mov dword [ebp - 0x11a8], 0
mov dword [ebp - 0x11a4], 7
mov word [ebp - 0x11b8], ax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x11bc]
cmp ecx, 7
jbe 0x10017890
mov edx, dword [ebp - 0x11d0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10017886
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018303
push ecx
push edx
call fcn.10165540
add esp, 8
xor eax, eax
mov dword [ebp - 0x11c0], 0
push eax
mov word [ebp - 0x11d0], ax
mov dword [ebp - 0x109c], eax
lea eax, [ebp - 0x10a0]
push eax
lea eax, [ebp - 0x1090]
mov dword [ebp - 0x11bc], 7
push eax
lea eax, [ebp - 0x108c]
mov dword [ebp - 0x10a0], 0xc
push eax
mov dword [ebp - 0x1098], 1
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x10017a27
call dword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
mov ecx, edi
push 1
movups xmmword [edi], xmm0
push str.N__n:
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.1000dcd0
mov ecx, dword [ebp - 0x1014]
cmp ecx, 7
jbe 0x10017953
mov edx, dword [ebp - 0x1028]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10017949
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x1074]
xor eax, eax
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1014], 7
mov word [ebp - 0x1028], ax
cmp ecx, 7
jbe 0x100179b0
mov edx, dword [ebp - 0x1088]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100179a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x10fc]
test ecx, ecx
je 0x100179ea
mov edx, dword [ebp - 0x10f8]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x100179e0
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push edx
push ecx
call fcn.10165540
add esp, 8
test esi, esi
je 0x100173e3
mov ecx, dword [ebp - 0x1108]
mov eax, esi
sub ecx, esi
cmp ecx, 0x1000
jb 0x10017a18
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push esi
call fcn.10165540
add esp, 8
jmp 0x100173e3
push 0
push 1
push dword [ebp - 0x108c]
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea ecx, [ebp - 0x10f4]
mov dword [ebp - 0x10e4], 0x44
push ecx
xor eax, eax
mov dword [ebp - 0x10b8], 0x100
lea ecx, [ebp - 0x10e4]
mov word [ebp - 0x10aa], ax
mov eax, dword [ebp - 0x1090]
xorps xmm0, xmm0
push ecx
push 0
push 0
push 0x8000000
mov dword [ebp - 0x10a8], eax
mov dword [ebp - 0x10a4], eax
xor eax, eax
cmp dword [ebp - 0x1014], 7
push 1
mov word [ebp - 0x10b4], ax
lea eax, [ebp - 0x1028]
cmova eax, dword [ebp - 0x1028]
push 0
push 0
push eax
push 0
movlpd qword [ebp - 0x10e0], xmm0
movlpd qword [ebp - 0x10d8], xmm0
movlpd qword [ebp - 0x10d0], xmm0
movlpd qword [ebp - 0x10c8], xmm0
movlpd qword [ebp - 0x10c0], xmm0
movlpd qword [ebp - 0x10b2], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x10017c3c
push dword [ebp - 0x108c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x1090]
call esi
call dword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
mov ecx, edi
push 1
movups xmmword [edi], xmm0
push str.N__n:
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.1000dcd0
mov ecx, dword [ebp - 0x1014]
cmp ecx, 7
jbe 0x10017b62
mov edx, dword [ebp - 0x1028]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10017b58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x1074]
xor eax, eax
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1014], 7
mov word [ebp - 0x1028], ax
cmp ecx, 7
jbe 0x10017bbf
mov edx, dword [ebp - 0x1088]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10017bb5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x10fc]
test ecx, ecx
je 0x10017bf9
mov edx, dword [ebp - 0x10f8]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10017bef
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push edx
push ecx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x1104]
test ecx, ecx
je 0x100173e3
mov edx, dword [ebp - 0x1108]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10017c2d
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push edx
push ecx
call fcn.10165540
add esp, 8
jmp 0x100173e3
push dword [ebp - 0x1090]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
lea eax, [ebp - 0x1094]
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x108c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10017dac
mov eax, dword [ebp - 0x1094]
test eax, eax
je 0x10017da6
push eax
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1060], 0
xorps xmm0, xmm0
mov dword [ebp - 0x105c], 0
push eax
lea ecx, [ebp - 0x1070]
movups xmmword [ebp - 0x1070], xmm0
call fcn.1000dcd0
mov byte [ebp - 4], 9
lea edx, [ebp - 0x1070]
cmp dword [ebp - 0x105c], 0xf
mov eax, dword [ebp - 0x1070]
mov esi, dword [ebp - 0x1030]
cmova edx, eax
mov ecx, dword [ebp - 0x1060]
mov dword [ebp - 0x110c], eax
mov eax, dword [ebp - 0x102c]
sub eax, esi
push ecx
push edx
cmp ecx, eax
ja 0x10017d24
cmp dword [ebp - 0x102c], 0xf
lea eax, [ecx + esi]
mov dword [ebp - 0x1030], eax
lea eax, [ebp - 0x1040]
cmova eax, dword [ebp - 0x1040]
add esi, eax
push esi
call fcn.10169070
mov eax, dword [ebp - 0x1060]
add esp, 0xc
mov ecx, dword [ebp - 0x110c]
mov byte [esi + eax], 0
jmp 0x10017d43
mov byte [ebp - 0x1100], 0
push dword [ebp - 0x1100]
push ecx
lea ecx, [ebp - 0x1040]
call fcn.1000d3b0
mov ecx, dword [ebp - 0x1070]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x105c]
cmp eax, 0xf
jbe 0x10017d7d
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x10017d73
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push edx
push ecx
call fcn.10165540
add esp, 8
push 0
lea eax, [ebp - 0x1094]
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x108c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x10017c71
mov esi, dword [ebp - 0x1104]
push dword [ebp - 0x108c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x10f4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x10f0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x40
xorps xmm0, xmm0
mov dword [ebp - 0x1060], 0
push str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea ecx, [ebp - 0x1070]
mov dword [ebp - 0x105c], 0
movups xmmword [ebp - 0x1070], xmm0
call fcn.1000dcd0
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
cmp dword [ebp - 0x1030], 0
push 1
jne 0x10017fbb
movups xmmword [edi], xmm0
push str.N__n:
mov ecx, edi
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.1000dcd0
mov ecx, dword [ebp - 0x105c]
cmp ecx, 0xf
jbe 0x10017e73
mov edx, dword [ebp - 0x1070]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10017e69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x1014]
cmp ecx, 7
jbe 0x10017eb3
mov edx, dword [ebp - 0x1028]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10017ea9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x1074]
xor eax, eax
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1014], 7
mov word [ebp - 0x1028], ax
cmp ecx, 7
jbe 0x10017f10
mov edx, dword [ebp - 0x1088]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10017f06
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x10fc]
test ecx, ecx
je 0x10017f4a
mov edx, dword [ebp - 0x10f8]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x10017f40
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push edx
push ecx
call fcn.10165540
add esp, 8
test esi, esi
je 0x10017f7e
mov ecx, dword [ebp - 0x1108]
mov eax, esi
sub ecx, esi
cmp ecx, 0x1000
jb 0x10017f74
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
push ecx
push esi
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x102c]
cmp ecx, 0xf
jbe 0x1001741d
mov edx, dword [ebp - 0x1040]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10017413
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018308
jmp 0x10017413
push 0x101daec4
lea ecx, [ebp - 0x11d0]
mov dword [ebp - 0x11c0], 0
movups xmmword [ebp - 0x11d0], xmm0
mov dword [ebp - 0x11bc], 0
call fcn.1000dcd0
lea eax, [ebp - 0x11d0]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x1040]
push eax
lea eax, [ebp - 0x11ac]
push eax
call fcn.1002a470
mov byte [ebp - 4], 0xd
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x11d4], 0xe
mov dword [ebp - 0x110c], esi
mov dword [ebp - 0x11a0], eax
cmp esi, eax
je 0x10018134
push 0x101daee8
mov edx, esi
lea ecx, [ebp - 0x1128]
call fcn.1001a1b0
add esp, 4
mov dword [ebp - 4], 0xe
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10018076
mov edx, dword [eax]
mov ecx, dword [eax + 0x10]
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x1100], eax
mov eax, dword [edi + 0x14]
sub eax, dword [ebp - 0x1100]
mov dword [ebp - 0x11d8], ecx
cmp ecx, eax
ja 0x100180ca
cmp dword [edi + 0x14], 0xf
mov esi, dword [ebp - 0x1100]
lea eax, [esi + ecx]
mov dword [edi + 0x10], eax
mov eax, edi
jbe 0x100180ab
mov eax, dword [edi]
push ecx
add esi, eax
push edx
push esi
call fcn.10169070
mov eax, dword [ebp - 0x11d8]
add esp, 0xc
mov byte [eax + esi], 0
mov esi, dword [ebp - 0x110c]
jmp 0x100180e1
push ecx
push edx
mov byte [ebp - 0x11dc], 0
push dword [ebp - 0x11dc]
push ecx
mov ecx, edi
call fcn.1000d3b0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1114]
cmp ecx, 0xf
jbe 0x1001811f
mov edx, dword [ebp - 0x1128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10018115
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10018303
push ecx
push edx
call fcn.10165540
add esp, 8
add esi, 0x18
mov dword [ebp - 0x110c], esi
cmp esi, dword [ebp - 0x11a0]
jne 0x10018050
lea ecx, [ebp - 0x11ac]
call fcn.1000aa70
mov ecx, dword [ebp - 0x11bc]
cmp ecx, 0xf
jbe 0x10018179
mov edx, dword [ebp - 0x11d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001816f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100182f4
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x105c]
cmp ecx, 0xf
jbe 0x100181b3
mov edx, dword [ebp - 0x1070]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100181a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100182f4
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x1014]
cmp ecx, 7
jbe 0x100181f3
mov edx, dword [ebp - 0x1028]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100181e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100182f4
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x1074]
xor eax, eax
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1014], 7
mov word [ebp - 0x1028], ax
cmp ecx, 7
jbe 0x10018250
mov edx, dword [ebp - 0x1088]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10018246
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100182f4
push ecx
push edx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x10fc]
test ecx, ecx
je 0x10018286
mov edx, dword [ebp - 0x10f8]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1001827c
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100182f4
push edx
push ecx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x1104]
test ecx, ecx
je 0x100182bc
mov edx, dword [ebp - 0x1108]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x100182b2
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100182f4
push edx
push ecx
call fcn.10165540
add esp, 8
mov ecx, dword [ebp - 0x102c]
cmp ecx, 0xf
jbe 0x1001741d
mov edx, dword [ebp - 0x1040]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10017413
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10017413
call fcn.1016cb5f
call fcn.10002990
call fcn.10002990
call fcn.1016cb5f
call fcn.1016cb5f
int3