Function at 0x10048891
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006a000
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x110
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10048eaa
mov dword [ebp - 0x48], 0x37c6
mov dword [ebp - 0x74], 0x10008ae8
cmp dword [ebp - 0x48], 0x3983
jle 0x10048978
and dword [ebp - 0x38], 0
jmp 0x100488ea
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x109b
jge 0x10048978
and dword [ebp - 0x28], 0
jmp 0x10048904
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x7ca0
jge 0x10048973
and dword [ebp - 0x3c], 0
jmp 0x1004891a
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x7ca2
jge 0x10048971
and dword [ebp - 0x30], 0
jmp 0x10048930
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x7858
jge 0x1004896f
mov eax, dword [ebp - 0x3c]
cdq
idiv dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov ecx, edx
sar eax, cl
or eax, dword [ebp - 0x38]
cdq
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], edx
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
mov ecx, 0x106107f8
call fcn.1001f6de
jmp 0x10048929
jmp 0x10048913
jmp 0x100488fd
jmp 0x100488e3
lea eax, [ebp + 0x10]
mov dword [ebp - 0xc4], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x48], 0x3633
jge 0x1004899b
mov edx, dword [ebp - 0x74]
mov ecx, 0x106107f8
call fcn.10023d4b
jmp 0x100489b7
or dword [ebp - 4], 0xffffffff
jmp 0x100489c1
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xbc], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xc4]
movzx eax, byte [eax]
test eax, eax
je 0x10048d7f
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x5c], 0x6be8
mov dword [ebp - 0xc8], 0x10008b68
cmp dword [ebp - 0x5c], 0x6fc2
jle 0x10048ab3
push 0x1875
push 0x1b55
push 0
push 0x1848
call dword [sym.imp.USER32.dll_DrawEdge]
and dword [ebp - 0x20], 0
jmp 0x10048a47
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x44aa
jge 0x10048ab3
and dword [ebp - 0x24], 0
jmp 0x10048a5d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x48c1
jge 0x10048ab1
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
cdq
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], edx
push dword [ebp - 0x94]
push dword [ebp - 0x98]
lea ecx, [ebp - 0x120]
call fcn.1000a2b4
pop ecx
pop ecx
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x7c]
call fcn.1001f29f
push eax
call fcn.100504bf
pop ecx
lea ecx, [ebp - 0x120]
call fcn.1001f281
jmp 0x10048a56
jmp 0x10048a40
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax]
call fcn.1003f9dc
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x2c], 0
jmp 0x10048ad0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10048ae3
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x14], 7
jmp 0x10048ac9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14], 0xffffffec
jmp 0x10048b08
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0xfffffffd
jne 0x10048c6c
push 4
lea ecx, [ebp - 0xe4]
call fcn.1001f933
mov dword [ebp - 4], 2
push 1
lea ecx, [ebp - 0xb4]
call fcn.1001f933
mov byte [ebp - 4], 3
mov dword [ebp - 0x84], 0xffffffff
push 1
push 1
lea eax, [ebp - 0xe4]
push eax
push 0x230
lea eax, [ebp - 0xcc]
push eax
push 1
call fcn.100486a2
add esp, 0x18
push 0x21ad
push 1
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0xd28
push 1
push 0x6319
call fcn.10047e9b
add esp, 0x1c
push 1
lea ecx, [ebp - 0xe4]
call fcn.1001f9f7
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov ecx, dword [ebp - 0x40]
cmp eax, dword [ecx]
je 0x10048bc7
mov dword [ebp - 0x58], 1
jmp 0x10048bcb
and dword [ebp - 0x58], 0
cmp dword [ebp - 0x58], 0x42374b1b
jge 0x10048bdd
mov dword [ebp - 0x44], 1
jmp 0x10048be1
and dword [ebp - 0x44], 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.1001f9f7
cmp dword [ebp - 0x84], 0
jne 0x10048c0a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x10048c0a
and dword [ebp - 0x50], 0
jmp 0x10048c11
mov dword [ebp - 0x50], 1
push 0
lea ecx, [ebp - 0xb4]
call fcn.1001f9f7
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
jg 0x10048c2e
mov dword [ebp - 0x60], 1
jmp 0x10048c32
and dword [ebp - 0x60], 0
mov esi, dword [ebp - 0x60]
neg esi
add esi, dword [ebp - 0x44]
push 0
lea ecx, [ebp - 0xb4]
call fcn.1001f9f7
mov dword [eax], esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb4]
call fcn.1001f9b5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4]
call fcn.1001f9b5
jmp 0x10048af3
lea ecx, [ebp - 0xd8]
call fcn.1001f926
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x54]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x10048d03
lea eax, [ebp - 0x108]
push eax
call fcn.1003e547
pop ecx
mov esi, eax
lea edi, [ebp - 0xfc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0xfc]
lea edi, [ebp - 0xf0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax]
call fcn.1003fa00
mov dword [ebp - 0xc0], eax
push 0x798d
push 1
lea eax, [ebp - 0xc0]
push eax
push 1
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x3b4d
push 0x4025
push 1
push 0x5f5c
push 0x72f1
call fcn.10048409
add esp, 0x30
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0x90]
call fcn.1004974b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.10049746
jmp 0x10048ec2
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x64], 0x7c3
mov dword [ebp - 0x70], 0x10008bac
cmp dword [ebp - 0x64], 0xb87
jle 0x10048e2c
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
and dword [ebp - 0x34], 0
jmp 0x10048dcf
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x1a37
jge 0x10048e1c
and dword [ebp - 0x1c], 0
jmp 0x10048de5
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x4605
jge 0x10048e1a
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x1c]
cdq
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], edx
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
mov ecx, 0x106107f8
call fcn.1001f6de
jmp 0x10048dde
jmp 0x10048dc8
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x64], 0x6bc
jge 0x10048e4f
mov edx, dword [ebp - 0x70]
mov ecx, 0x106107f8
call fcn.10023d4b
jmp 0x10048e6b
or dword [ebp - 4], 0xffffffff
jmp 0x10048e75
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
jmp 0x10048e8b
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax], 3
jge 0x10048ea8
mov eax, dword [ebp - 0x18]
push dword [eax]
mov ecx, dword [ebp - 0x78]
call fcn.1001f9f7
mov dword [eax], 0xbfb3a4d
jmp 0x10048e80
jmp 0x10048ec2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x80], eax
push dword [ebp - 0x80]
push 0
push 0x5060
call fcn.1003ff10
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret