Function at 0x1001ca39
Capabilities:
Create pipe

Disassembly:
mov eax, 0x100576cd
call fcn.10056a88
sub esp, 0x108
mov byte [ebp - 0x54], dl
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test dl, dl
je 0x1001d424
mov eax, dword [ebp + 0xc]
lea esi, [ebp + 0x10]
xor ecx, ecx
mov dword [ebp - 0x1c], 0xe07df7dc
inc ecx
mov dword [ebp - 0x38], esi
xor ebx, ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x14], ebx
jmp 0x1001ca88
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x34], 0xd5e48d32
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001ca7a
mov dword [ebp - 0x14], ebx
jmp 0x1001ca9c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x24], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001ca92
mov dword [ebp - 0x14], ebx
jmp 0x1001cab0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001caa6
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jg 0x1001cc51
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x18], 0x80ee91b7
mov dword [ebp - 0x20], 0xb0420410
mov dword [ebp - 0x20], 0x64c7
cmp dword [ebp - 0x20], 0x672c
jle 0x1001cb0c
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x100711f8
cdq
push edx
push eax
call fcn.10003fa2
inc edi
cmp edi, 0x108f
jl 0x1001caea
inc esi
cmp esi, 0x6b07
jl 0x1001cae8
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x20], 0x6416
jge 0x1001cb27
mov edx, str.naaambtlu_alo_iwvoqhai_vklel_dmj_muf_mitjbklt_sjxtgeo_kyqjzwcqa_zrf_tdzj_aozgko
mov ecx, 0x100711f8
call fcn.1000634f
or dword [ebp - 4], 0xffffffff
xor esi, esi
inc esi
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x34], ebx
jne 0x1001cba8
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x34], ebx
je 0x1001cb68
mov eax, dword [ebp - 0x24]
mov ecx, 0xfff6
cmp ecx, eax
mov edx, esi
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x34]
cmp dword [ebp - 0x24], ebx
jne 0x1001cb6a
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x34]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
setne dl
imul ecx, edx
cmp ecx, dword [ebp + eax*4 - 0x34]
jle 0x1001cb98
mov eax, ebx
cmp dword [ebp - 0x24], ebx
je 0x1001cb9a
mov eax, esi
mov dword [ebp - 0x18], eax
mov ecx, ebx
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x34], ebx
je 0x1001cbaa
mov ecx, esi
mov eax, dword [ebp - 0x24]
imul eax, ecx
xor ecx, ecx
cmp eax, 0xfffffff7
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x34]
cmp eax, edx
setle cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp eax, esi
setl cl
cmp ecx, dword [ebp - 0x34]
jle 0x1001cc36
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp eax, esi
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jne 0x1001cc36
cmp dword [ebp - 0x18], ebx
jne 0x1001cc36
xor ecx, ecx
mov edx, ebx
inc ecx
jmp 0x1001cc3b
xor ecx, ecx
inc ecx
mov edx, ecx
xor eax, eax
cmp edx, 0x6659
setg al
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x24]
jmp 0x1001cab8
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x1001ccc8
cmp dword [ebp - 0x24], ebx
je 0x1001cc66
cmp dword [ebp - 0x1c], ebx
jne 0x1001cc68
mov ecx, ebx
mov eax, 0xffff
cmp eax, ecx
mov eax, dword [ebp - 0x4c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
sub edx, 0xad706983
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
inc ecx
mov edx, ecx
cmp dword [ebp - 0x1c], ebx
jge 0x1001ccca
mov edx, ebx
mov eax, dword [ebp - 0x4c]
add eax, edx
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x88], ebx
mov word [ebp - 0x98], ax
push 2
pop edi
push dword [ebp - 0x38]
lea eax, [ebp - 0x98]
mov dword [ebp - 4], edi
push eax
push 0x7fc0
push ecx
push 0x4882
push ebx
push 0x3608
mov dl, cl
mov ecx, 0x6298
push 0x6dc9
call fcn.1001c7b2
mov dword [ebp - 0x14], 0x7392
add esp, 0x20
cmp dword [ebp - 0x14], 0x745f
jle 0x1001cdb6
mov ecx, ebx
xor esi, esi
mov dword [ebp - 0x1c], ecx
inc esi
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], ecx
mov edx, ebx
mov ecx, eax
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
shl eax, cl
mov dword [ebp - 0x28], eax
and eax, edx
lea ecx, [ebp - 0xf0]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001cd6d
mov eax, dword [eax]
push eax
call fcn.1003e75c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0xf0]
call fcn.1000460a
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x78fe
jl 0x1001cd53
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x4702
jl 0x1001cd41
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x6d67
jl 0x1001cd3c
call dword [sym.imp.USER32.dll_CreateMenu]
mov dword [ebp - 0x6c], 0x432a2768
cmp dword [ebp - 0x14], 0x7038
jge 0x1001cdd1
push str.ctlgo_jrz_brjzeyy_plvockfqv_hxwhjcl_orj_lwgonqacr_yytvulml_sapzaj_qhosomks_hrwrkluc_hub_ddbv
call fcn.1003e75c
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x1c], ebx
jmp 0x1001cdea
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xfc], 0xbb2c2135
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001cdd9
push 0x240d
lea eax, [ebp - 0x6c]
mov dl, 1
push eax
push 1
mov cl, dl
call fcn.1001c899
mov eax, dword [0x104462a4]
xor esi, esi
add esp, 0xc
inc esi
test al, 1
jne 0x1001ce38
or eax, esi
mov dword [0x104462a4], eax
push 0x727b
mov byte [ebp - 4], 5
call fcn.1001aea8
mov word [0x104462ac], ax
mov byte [ebp - 4], 2
mov eax, dword [0x104462a4]
pop ecx
test al, 2
jne 0x1001ce5d
or eax, 2
mov dword [0x104462a4], eax
push 0x87ac
mov byte [ebp - 4], 6
call fcn.1001aea8
pop ecx
mov word [0x104462a0], ax
mov byte [ebp - 4], 2
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x28], 0xb09f
mov dword [ebp - 0x1c], 0xa10dd664
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x20], 0x89c089ce
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x1c], ebx
jmp 0x1001ce96
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x80], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001ce88
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
push 2
setne dl
xor ecx, ecx
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x18]
sub eax, 9
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
test eax, eax
mov eax, ebx
sets cl
mov dword [ebp - 0x2c], ecx
pop edi
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
cmp eax, dword [ecx]
jae 0x1001d21e
call fcn.1001c626
push 0x24
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x18], 0xa80e3580
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x1c], 0x29cbc21b
mov dword [ebp - 0x14], ebx
jmp 0x1001cf2a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68], 0x3b372ba2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001cf1c
mov dword [ebp - 0x14], ebx
jmp 0x1001cf46
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd0], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001cf35
lea eax, [ebp - 0x42]
mov byte [ebp - 0x42], bl
push eax
push ecx
call fcn.1001d504
pop ecx
pop ecx
cmp dword [ebp - 0x18], ebx
je 0x1001cf84
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], eax
test eax, eax
je 0x1001cf84
cmp dword [ebp - 0x68], ebx
je 0x1001cf76
mov dword [ebp - 0x5c], esi
mov ecx, esi
jmp 0x1001cf7b
mov dword [ebp - 0x5c], ebx
mov ecx, ebx
mov eax, dword [ebp - 0x18]
sub ecx, eax
mov eax, esi
jne 0x1001cf86
mov eax, ebx
cmp eax, dword [ebp - 0x18]
jg 0x1001cf8e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], 0x7153
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
xor edx, edx
inc eax
imul eax, dword [ebp - 0x1c]
imul ecx, eax, 0xc0e0
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setl dl
imul edx, dword [ebp - 0x18]
test edx, edx
je 0x1001cfbf
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub eax, 0x7a35da77
je 0x1001cfeb
lea eax, [ebp - 0x41]
mov dword [ebp - 0x78], esi
push eax
push esi
mov byte [ebp - 0x41], bl
call fcn.1001c967
lea ecx, [ebp - 0x78]
call fcn.1001d641
pop ecx
pop ecx
jmp 0x1001d1f1
mov dword [ebp - 0x28], 0xf12afbca
mov dword [ebp - 0x30], 0xbd0c7f12
mov dword [ebp - 0x30], 0xf7cfeb45
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x30], 0x6d60
cmp dword [ebp - 0x30], 0x7142
jle 0x1001d06d
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov edx, ebx
mov ebx, eax
mov dword [ebp - 0x20], edx
xor ebx, ecx
mov eax, ebx
mov ecx, 0x100711f8
or eax, edx
cdq
push edx
push eax
call fcn.10003fa2
mov edx, dword [ebp - 0x20]
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x31a2
jl 0x1001d026
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x14], eax
push 0
pop ebx
cmp eax, 0x4874
jl 0x1001d01d
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0xefe
jl 0x1001d018
push ebx
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov dword [ebp - 0x18], ebx
jmp 0x1001d083
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc0], 0x559c29c8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001d072
mov byte [ebp - 4], 7
cmp dword [ebp - 0x30], 0x6b05
jge 0x1001d0c8
mov edx, str.qdbopv_hgxy_dbut
mov ecx, 0x100711f8
call fcn.1000634f
jmp 0x1001d0c8
sub esp, 0xc
mov dword [ebp - 4], edi
call fcn.1001e0fc
mov dword [ebp - 0x18], 0xffffffe2
add esp, 0xc
cmp dword [ebp - 0x18], 0xfffffff8
jne 0x1001d1f1
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], 0xa1fb9d33
mov dword [ebp - 0x14], ebx
jmp 0x1001d104
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], 0xddd8d7cd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1001d0f6
mov dword [ebp - 0x14], ebx
jmp 0x1001d120
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 0xc011945b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001d10f
mov dword [ebp - 0x14], ebx
jmp 0x1001d139
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x70], 0xf7bd129a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1001d12b
cmp dword [ebp - 0x28], ebx
je 0x1001d1b7
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setg dl
imul ecx, edx, 0xfffffffd
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
sub edx, eax
mov dword [ebp - 0x40], edx
cmp edx, dword [ebp - 0x20]
jne 0x1001d171
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xd0]
xor esi, esi
mov eax, dword [ebp - 0x40]
inc esi
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xc0], esi
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0xa0]
cmp eax, 0x13d06461
setg cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x70]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x1c]
jl 0x1001d1dc
cmp dword [ebp - 0xd0], ebx
je 0x1001d1dc
xor eax, eax
inc eax
jmp 0x1001d1de
mov eax, ebx
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff8
je 0x1001d0e7
xor esi, esi
inc esi
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x98]
push eax
push 0x104462a0
push 0x5f6d
push ebx
push 0x104462ac
push ecx
call fcn.1001e068
mov eax, dword [ebp - 0x2c]
add esp, 0x1c
inc eax
jmp 0x1001cee5
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x3c], 0x44ad
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x50], 0xb6f9b691
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x3c], 0xbfe6b87c
mov dword [ebp - 0x30], 0x99b
cmp dword [ebp - 0x30], 0xbe1
jle 0x1001d2b9
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x28]
lea eax, [esi + edi]
mov edi, 0x77a
add eax, ebx
mov dword [ebp - 0x3c], eax
mov ebx, eax
mov eax, ebx
mov ecx, 0x100711f8
cdq
push edx
push eax
call fcn.10003fa2
dec ebx
dec edi
jne 0x1001d26c
mov edi, dword [ebp - 0x2c]
inc esi
mov ebx, dword [ebp - 0x28]
cmp esi, 0x69fb
jl 0x1001d25d
inc edi
mov dword [ebp - 0x2c], edi
push 0
pop ebx
cmp edi, 0x4d7e
jl 0x1001d258
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x40a8
jl 0x1001d253
push 0xda2
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x2c], 0x6eb3e198
mov byte [ebp - 4], 9
cmp dword [ebp - 0x30], 0x98a
jge 0x1001d2fa
mov edx, str.rxbgkrje_mgbfm_mbwn_mdir_ktxoadne_malzhupya_eoih_ycvtz_ntkcdxzu_scjlyvx
mov ecx, 0x100711f8
call fcn.1000634f
jmp 0x1001d2fa
push 2
pop ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x2c], 3
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1001d324
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb0], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1001d313
mov dword [ebp - 0x14], ebx
jmp 0x1001d33d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x48], 0xa53aa9ac
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1001d32f
mov dword [ebp - 0x14], ebx
jmp 0x1001d359
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd8], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001d348
mov dword [ebp - 0x14], ebx
jmp 0x1001d374
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 0x2b293353
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001d363
mov dword [ebp - 0x14], ebx
jmp 0x1001d38f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb8], 0xe4bcb816
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001d37e
push 0x59ed
push 0x6397
push 0x26f
lea eax, [ebp - 0x50]
push eax
push 1
push 0x528e
push ecx
call fcn.1001e068
mov eax, dword [ebp - 0x48]
add esp, 0x1c
mov dword [ebp - 0x2c], 0x5412
cmp dword [ebp - 0x2c], ebx
je 0x1001d3c9
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x48]
xor esi, esi
mov eax, dword [ebp - 0x50]
inc esi
mov dword [ebp - 0xa8], esi
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x98]
cmp ecx, eax
je 0x1001d412
push 0xffffffffffffffff
push ebx
push eax
call fcn.100052f7
push ebx
push esi
lea ecx, [ebp - 0x98]
call fcn.100046d6
jmp 0x1001d4f3
mov dword [ebp - 0x38], 0x7716
xor ebx, ebx
cmp dword [ebp - 0x38], 0x7753
jle 0x1001d4d0
mov edi, ebx
xor esi, esi
mov dword [ebp - 0x30], edi
inc esi
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, eax
mov dword [ebp - 0x40], edi
mov eax, edi
mov edx, ebx
shl eax, cl
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x40], eax
mov ecx, edx
mov edi, ebx
sar eax, cl
mov dword [ebp - 0x58], eax
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x114]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d47d
mov eax, dword [eax]
push eax
call fcn.1003e75c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x114]
call fcn.1000460a
mov eax, dword [ebp - 0x58]
inc edi
cmp edi, 0x3ecc
jl 0x1001d461
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
inc edx
mov dword [ebp - 0x50], edx
cmp edx, 0xd8e
jl 0x1001d458
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x4d2
jl 0x1001d447
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x3dca
jl 0x1001d442
mov eax, dword [ebp + 8]
cmp byte [eax], 0
je 0x1001d4df
push ebx
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
cmp dword [ebp - 0x38], 0x73fe
jge 0x1001d4f3
push str.iewwysg_rxczteevv_hjnlgzd_qvrhff_ngotagefg_wmvpc_cdfdtbt_xnhtctoyp_yzqr_yss_aubwulpf_xibnrergu
call fcn.1003e75c
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret