Function at 0x1001cfe2
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1005e377
push eax
mov dword fs:[0], esp
sub esp, 0x110
push ebx
push esi
push edi
xor edi, edi
inc edi
cmp byte [ebp + 0x10], 0
je 0x1001d035
mov edx, dword [ebp + 8]
mov dword [edx], 0
cmp dword [edx], edi
jge 0x1001d8ca
mov esi, dword [ebp + 0xc]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], edi
inc dword [edx]
cmp dword [edx], edi
jl 0x1001d023
jmp 0x1001d8ca
mov eax, dword [ebp + 0x14]
lea ecx, [esp + 0xa4]
mov dword [esp + 0x44], eax
mov eax, dword [ebp + 0x1c]
push edi
mov dword [esp + 0x4c], eax
call fcn.1000580e
xor ebx, ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x14], 0x228b
cmp dword [esp + 0x14], 0x2483
jle 0x1001d0df
mov esi, ebx
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, ebx
cdq
idiv ecx
mov eax, esi
mov ecx, edx
shl eax, cl
lea ecx, [esp + 0xe8]
cdq
push edx
push eax
call fcn.10001ace
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d097
mov eax, dword [eax]
push eax
call fcn.1004699c
pop ecx
push 0
push edi
lea ecx, [esp + 0xf0]
call fcn.10005d35
mov ecx, dword [esp + 0x10]
inc ecx
mov dword [esp + 0x10], ecx
cmp ecx, 0x6145
jl 0x1001d073
inc ebx
cmp ebx, 0x6091
jl 0x1001d06d
inc esi
push 0
pop ebx
cmp esi, 0x38c5
jl 0x1001d06d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x18], 0x453606de
cmp dword [esp + 0x14], 0x20b1
jge 0x1001d0fc
push str.krz_nkubrbpzy_doxra_qjlimnjj_fehuitu_alsp_zdxrzoffa_ctscbu_gdwkb_dzqm_fapu
call fcn.1004699c
pop ecx
push 0x5517
push ebx
lea eax, [esp + 0xd4]
mov dword [esp + 0x12c], ebx
push eax
push ebx
push 0x402e
lea eax, [esp + 0xb8]
mov dword [esp + 0x50], 3
push eax
push edi
mov edx, 0x797b
mov ecx, 0x6a7c
call fcn.1001ff5c
add esp, 0x1c
mov dword [esp + 0x18], ebx
push 9
pop esi
cmp dword [esp + 0x18], ebx
jl 0x1001d250
push 0x79fc
mov dword [esp + 0x18], 0x83111738
lea ecx, [esp + 0x33]
mov dword [esp + 0x50], 0x15e82aa9
xor dl, dl
push edi
mov dword [esp + 0x24], 0x2cfb6473
mov byte [esp + 0x37], bl
push edi
call fcn.100212ef
mov dword [esp + 0x20], ebx
add esp, 0xc
cmp dword [esp + 0x14], ebx
jl 0x1001d246
mov dword [esp + 0x6c], esi
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0xa4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x4c]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x18]
jge 0x1001d1f9
push ecx
lea eax, [esp + 0x40]
mov dword [esp + 0x6c], edi
push eax
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0xb0]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x7c]
push eax
push edi
lea edx, [esp + 0x34]
lea ecx, [esp + 0x50]
call fcn.1001ce72
add esp, 0x1c
jmp 0x1001d238
mov dword [esp + 0x34], 0x17
jmp 0x1001d231
mov dword [esp + 0x3c], ebx
cmp dword [esp + 0x3c], ebx
jl 0x1001d22d
push 0x260b
mov byte [esp + 0x2a], bl
lea edx, [esp + 0x2a]
push ebx
mov ecx, 0x4e8c
call fcn.1001e3d2
dec dword [esp + 0x44]
pop ecx
pop ecx
jns 0x1001d20d
dec dword [esp + 0x34]
cmp dword [esp + 0x34], 0xfffffffc
jl 0x1001d203
mov dword [esp + 0x1c], edi
dec dword [esp + 0x14]
jns 0x1001d18a
dec dword [esp + 0x18]
jns 0x1001d14b
push ebx
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.1001ced5
add esp, 0xc
lea ecx, [esp + 0xa4]
call fcn.1000586b
xor eax, eax
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], ebx
mov word [esp + 0x74], ax
push 4
lea ecx, [esp + 0xc0]
mov dword [esp + 0x128], 3
call fcn.1000580e
push ecx
lea edx, [esp + 0xc0]
mov byte [esp + 0x128], 4
lea ecx, [esp + 0x3c]
call fcn.1001dbcd
pop ecx
mov dword [esp + 0x38], ebx
jmp 0x1001d2cd
mov eax, dword [esp + 0x38]
mov dword [esp + eax*4 + 0x40], 0x6960f57a
inc dword [esp + 0x38]
cmp dword [esp + 0x38], edi
jl 0x1001d2bd
mov dword [esp + 0x40], 3
cmp dword [esp + 0x40], ebx
jl 0x1001d323
push ecx
push 0x4189
push 0x58b
lea eax, [esp + 0x31]
mov byte [esp + 0x31], bl
push eax
push 0x3814
push 0x601d
push 0x3579
push edi
push 0x289a
push ecx
mov edx, 0x3dd1
mov ecx, 0x4565
call fcn.1001ec2d
add esp, 0x28
dec dword [esp + 0x40]
jns 0x1001d2e1
lea ecx, [esp + 0xbc]
mov byte [esp + 0x124], 3
call fcn.1000586b
mov eax, dword [esp + 0x48]
cmp eax, dword [esp + 0x44]
ja 0x1001d506
push 3
lea ecx, [esp + 0x90]
call fcn.1000580e
mov byte [esp + 0x124], 5
mov dword [esp + 0x10], esi
mov dword [esp + 0x20], 4
mov dword [esp + 0xc], ebx
jmp 0x1001d383
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x8c]
mov dword [eax + ecx*4], 6
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x1001d36d
mov dword [esp + 0xc], ebx
jmp 0x1001d3a0
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x50], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x1001d390
push 2
pop ebx
mov dword [esp + 0x50], ebx
cmp dword [esp + 0x50], 0
jl 0x1001d4d6
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x1c], eax
push 3
lea ecx, [esp + 0x9c]
call fcn.1000580e
push 0x5d7
push edi
push 0x50b2
push 0
lea eax, [esp + 0xd8]
mov byte [esp + 0x134], 6
push eax
push 0x3faf
mov dword [esp + 0x28], 0xfffffffd
lea ecx, [esp + 0xb0]
push edi
mov edx, 0x5c89
call fcn.1001ff5c
mov dword [esp + 0x2c], ebx
xor edx, edx
mov ecx, dword [esp + 0x2c]
add esp, 0x1c
mov eax, dword [esp + 0x98]
sub ecx, dword [eax]
mov eax, dword [esp + 0x50]
cmp ecx, eax
mov ecx, dword [esp + 0x58]
mov esi, dword [esp + 0x98]
sete dl
imul ecx, edx
mov edx, dword [esp + 0x1c]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, dword [edx + 8]
setge al
imul eax, dword [esi + 8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
cmp dword [edx + 8], 0
je 0x1001d46c
cmp dword [esi + 8], 0
je 0x1001d46c
mov eax, edi
jmp 0x1001d46e
xor eax, eax
mov esi, dword [esp + 0x50]
dec eax
xor edx, edx
cmp eax, 0x5300
mov eax, dword [esp + 0x8c]
setne dl
sub edx, 0xfff9
neg edx
push 0x44d5
sbb edx, edx
xor ecx, ecx
inc edx
cmp dword [eax + esi*4], edx
lea edx, [esp + 0x2b]
sete cl
xor eax, eax
test ecx, ecx
setns al
xor cl, cl
mov dword [esp + 0x24], eax
mov byte [esp + 0x2b], 0
call fcn.1001d975
pop ecx
lea ecx, [esp + 0x98]
mov byte [esp + 0x124], 5
call fcn.1000586b
dec dword [esp + 0x50]
jns 0x1001d3c4
lea ecx, [esp + 0x8c]
mov byte [esp + 0x124], 3
call fcn.1000586b
mov ecx, dword [ebp + 0x18]
lea eax, [esp + 0x74]
cmp ecx, eax
je 0x1001d4ff
push 0xffffffffffffffff
push 0
push eax
call fcn.1000751f
push 0
jmp 0x1001d8c0
mov dword [esp + 0x14], 0xdb3ae355
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], 0xffffffe2
je 0x1001d5df
push 2
pop ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x1c], 0x73063d62
mov dword [esp + 0x10], 0
jmp 0x1001d551
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xdc], 0xfffffff8
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001d53e
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], 0
jl 0x1001d5ce
lea eax, [esp + 0x24]
mov byte [esp + 0x24], 0
push eax
push edi
push 0x1c41
push 0
mov edx, 0x14d9
xor cl, cl
call fcn.10020a8c
add esp, 0x10
call fcn.10020d62
dec dword [esp + 0xc]
jns 0x1001d5a2
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xffffffe2
jne 0x1001d528
xor ebx, ebx
lea eax, [esp + 0x48]
mov ecx, 0x642e
push eax
push ebx
lea eax, [esp + 0x4c]
push eax
push edi
lea edx, [esp + 0x84]
call fcn.10020621
mov dword [esp + 0x2c], 0x29f8
add esp, 0x10
cmp dword [esp + 0x1c], 0x2cec
jle 0x1001d6b7
mov dword [esp + 0x20], ebx
xor esi, esi
mov dword [esp + 0xc], esi
mov ecx, esi
mov dword [esp + 0x10], ebx
xor eax, eax
mov esi, ebx
shl esi, cl
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
xor ebx, ebx
mov dword [esp + 0x70], esi
xor esi, eax
mov eax, esi
lea ecx, [esp + 0x100]
or eax, ebx
cdq
push edx
push eax
call fcn.10001ace
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d658
mov eax, dword [eax]
push eax
call fcn.1004699c
pop ecx
push 0
push edi
lea ecx, [esp + 0x108]
call fcn.10005d35
inc ebx
cmp ebx, 0x7ff8
jl 0x1001d63b
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x64ac
jl 0x1001d633
mov esi, dword [esp + 0xc]
mov ebx, dword [esp + 0x20]
inc esi
mov dword [esp + 0xc], esi
cmp esi, 0x5414
jl 0x1001d61f
inc ebx
mov dword [esp + 0x20], ebx
cmp ebx, 0x6927
jl 0x1001d619
xor ebx, ebx
cmp dword [esp + 0x1c], 0x2651
jge 0x1001d6cc
push str.okspnj_xbww_eryfkyhov_iune
call fcn.1004699c
pop ecx
push edi
lea ecx, [esp + 0x60]
mov dword [esp + 0x128], 3
call fcn.1000580e
mov byte [esp + 0x124], 9
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc], 6
mov dword [esp + 0x14], ebx
mov dword [esp + 0x20], 0xd04549c4
mov dword [esp + 0x1c], 9
push 4
call fcn.1000580e
lea eax, [esp + 0x28]
mov byte [esp + 0x124], 0xa
push eax
lea eax, [esp + 0x60]
push eax
call fcn.1001d90a
pop ecx
pop ecx
mov dword [esp + 0x28], ebx
jmp 0x1001d745
mov eax, dword [esp + 0x28]
mov dword [esp + eax*4 + 0xd0], 0xc242ea6a
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 3
jl 0x1001d732
push 0x71c3
push 0x7044
push edi
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.1001ce1d
mov dword [esp + 0x20], ebx
add esp, 0x14
cmp dword [esp + 0xc], ebx
jl 0x1001d870
mov ebx, dword [esp + 0xb0]
mov dword [esp + 0x30], 0xe0b4074d
lea edx, [esp + 0x30]
mov dword [esp + 0x10], 0x84132d38
call fcn.1001e2a7
mov eax, dword [esp + 0xc]
xor edx, edx
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x5c]
cmp dword [eax], edx
je 0x1001d7cc
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x10], edx
jne 0x1001d7da
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x5c]
add ecx, dword [eax]
jne 0x1001d7fd
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x5c]
cmp dword [eax + ecx*4], edx
mov eax, edx
je 0x1001d7ff
mov eax, edi
imul eax, eax, 0xba79
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x1c]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
test ecx, ecx
setle al
xor edx, edx
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
sub ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x5c]
cmp ecx, dword [eax + esi*4]
mov ecx, edi
setl dl
mov dword [esp + 0x30], edx
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
sub ecx, eax
mov edx, dword [esp + 0x5c]
xor eax, eax
cmp ecx, dword [edx + esi*4]
setl al
mov dword [esp + 0xd8], eax
mov dword [ebx + 4], eax
dec dword [esp + 0xc]
jns 0x1001d781
xor ebx, ebx
push ecx
push edi
call fcn.1001cc24
pop ecx
pop ecx
lea ecx, [esp + 0xb0]
call fcn.1000586b
lea ecx, [esp + 0x5c]
mov byte [esp + 0x124], 3
call fcn.1000586b
push ecx
lea eax, [esp + 0x48]
push eax
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x50]
call fcn.1001d8df
pop ecx
pop ecx
mov ecx, dword [ebp + 0x18]
lea eax, [esp + 0x74]
cmp ecx, eax
je 0x1001d8bf
push 0xffffffffffffffff
push ebx
push eax
call fcn.1000751f
push ebx
push edi
lea ecx, [esp + 0x7c]
call fcn.10005f65
mov ecx, dword [esp + 0x11c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret