Function at 0xe8090
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11c076
mov eax, dword fs:[0]
push eax
mov eax, 0x2b48
call fcn.000f2760
mov eax, dword [0x13206c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
mov dword [ebp - 0x2b4c], 0
mov dword [ebp - 0x2b48], edi
mov dword [ebp - 0x2b44], edi
mov dword [ebp - 4], edi
mov eax, 0x29
xor esi, esi
mov word [ebp - 0xe7c], ax
push 0x6a
lea eax, [ebp - 0xe7a]
mov dword [ebp - 0x2b40], esi
push esi
push eax
mov dword [ebp - 0xe90], 0x40005b
mov dword [ebp - 0xe8c], 0x40005a
mov dword [ebp - 0xe88], 0x4e0047
mov dword [ebp - 0xe84], 0x4c0007
mov dword [ebp - 0xe80], 0x4c0051
call fcn.000f3cb0
push 0x68
lea eax, [ebp - 0xdf8]
mov dword [ebp - 0xe10], 0x68007b
push esi
push eax
mov dword [ebp - 0xe0c], 0x44007f
mov dword [ebp - 0xe08], 0x470046
mov dword [ebp - 0xe04], 0x7006d
mov dword [ebp - 0xe00], 0x51004c
mov dword [ebp - 0xdfc], 0x29004c
call fcn.000f3cb0
mov eax, 0x29
mov dword [ebp - 0xd90], 0x68007b
push 0x6a
mov word [ebp - 0xd7c], ax
lea eax, [ebp - 0xd7a]
push esi
push eax
mov dword [ebp - 0xd8c], 0x44007f
mov dword [ebp - 0xd88], 0x470046
mov dword [ebp - 0xd84], 0x4c0007
mov dword [ebp - 0xd80], 0x4c0051
call fcn.000f3cb0
mov eax, 0x29
mov dword [ebp - 0xd10], 0x68007b
push 0x66
mov word [ebp - 0xcf8], ax
lea eax, [ebp - 0xcf6]
push esi
push eax
mov dword [ebp - 0xd0c], 0x5d007f
mov dword [ebp - 0xd08], 0x440040
mov dword [ebp - 0xd04], 0x5b004c
mov dword [ebp - 0xd00], 0x4c0007
mov dword [ebp - 0xcfc], 0x4c0051
call fcn.000f3cb0
push 0x70
lea eax, [ebp - 0xc80]
mov dword [ebp - 0xc90], 0x48005b
push esi
push eax
mov dword [ebp - 0xc8c], 0x7005f
mov dword [ebp - 0xc88], 0x51004c
mov dword [ebp - 0xc84], 0x29004c
call fcn.000f3cb0
push 0x68
lea eax, [ebp - 0x678]
mov dword [ebp - 0x690], 0x1f001a
push esi
push eax
mov dword [ebp - 0x68c], 0x7d0019
mov dword [ebp - 0x688], 0x48005b
mov dword [ebp - 0x684], 0x70050
mov dword [ebp - 0x680], 0x51004c
mov dword [ebp - 0x67c], 0x29004c
call fcn.000f3cb0
add esp, 0x48
mov dword [ebp - 0x610], 0x1f001a
mov dword [ebp - 0x60c], 0x7a0019
mov dword [ebp - 0x608], 0x4f0048
mov dword [ebp - 0x604], 0x7004c
push 0x68
lea eax, [ebp - 0x5f8]
mov dword [ebp - 0x600], 0x51004c
push esi
push eax
mov dword [ebp - 0x5fc], 0x29004c
call fcn.000f3cb0
push 0x5c
lea eax, [ebp - 0x56c]
mov dword [ebp - 0x590], 0x410073
push esi
push eax
mov dword [ebp - 0x58c], 0x6d005c
mov dword [ebp - 0x588], 0x470046
mov dword [ebp - 0x584], 0x6f004e
mov dword [ebp - 0x580], 0x470048
mov dword [ebp - 0x57c], 0x70004e
mov dword [ebp - 0x578], 0x7005c
mov dword [ebp - 0x574], 0x51004c
mov dword [ebp - 0x570], 0x29004c
call fcn.000f3cb0
push 0x6c
lea eax, [ebp - 0xefc]
mov dword [ebp - 0xf10], 0x1f001a
push esi
push eax
mov dword [ebp - 0xf0c], 0x5a0019
mov dword [ebp - 0xf08], 0x7004d
mov dword [ebp - 0xf04], 0x51004c
mov dword [ebp - 0xf00], 0x29004c
call fcn.000f3cb0
mov eax, 0x29
mov dword [ebp - 0x790], 0x7a0062
push 0x66
mov word [ebp - 0x778], ax
lea eax, [ebp - 0x776]
push esi
push eax
mov dword [ebp - 0x78c], 0x4f0048
mov dword [ebp - 0x788], 0x7a004c
mov dword [ebp - 0x784], 0x4a005f
mov dword [ebp - 0x780], 0x4c0007
mov dword [ebp - 0x77c], 0x4c0051
call fcn.000f3cb0
push 0x64
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x710], 0x7a0062
push esi
push eax
mov dword [ebp - 0x70c], 0x4f0048
mov dword [ebp - 0x708], 0x7d004c
mov dword [ebp - 0x704], 0x48005b
mov dword [ebp - 0x700], 0x70050
mov dword [ebp - 0x6fc], 0x51004c
mov dword [ebp - 0x6f8], 0x29004c
call fcn.000f3cb0
push 0x68
lea eax, [ebp - 0x9f8]
mov dword [ebp - 0xa10], 0x510042
push esi
push eax
mov dword [ebp - 0xa0c], 0x5d004c
mov dword [ebp - 0xa08], 0x48005b
mov dword [ebp - 0xa04], 0x70050
mov dword [ebp - 0xa00], 0x51004c
mov dword [ebp - 0x9fc], 0x29004c
call fcn.000f3cb0
add esp, 0x48
mov dword [ebp - 0x990], 0x510042
mov eax, 0x29
mov dword [ebp - 0x98c], 0x5a004c
mov word [ebp - 0x978], ax
lea eax, [ebp - 0x976]
mov dword [ebp - 0x988], 0x46004a
push 0x66
push esi
push eax
mov dword [ebp - 0x984], 0x4c005b
mov dword [ebp - 0x980], 0x4c0007
mov dword [ebp - 0x97c], 0x4c0051
call fcn.000f3cb0
mov eax, 0x29
mov dword [ebp - 0xb10], 0x780078
push 0x66
mov word [ebp - 0xaf8], ax
lea eax, [ebp - 0xaf6]
push esi
push eax
mov dword [ebp - 0xb0c], 0x6a0079
mov dword [ebp - 0xb08], 0x5b007d
mov dword [ebp - 0xb04], 0x500048
mov dword [ebp - 0xb00], 0x4c0007
mov dword [ebp - 0xafc], 0x4c0051
call fcn.000f3cb0
push 0x68
lea eax, [ebp - 0xa78]
mov dword [ebp - 0xa90], 0x780078
push esi
push eax
mov dword [ebp - 0xa8c], 0x6a0079
mov dword [ebp - 0xa88], 0x7d007b
mov dword [ebp - 0xa84], 0x70079
mov dword [ebp - 0xa80], 0x51004c
mov dword [ebp - 0xa7c], 0x29004c
call fcn.000f3cb0
mov eax, 0x29
mov dword [ebp - 0x410], 0x48006b
push 0x62
mov word [ebp - 0x3f4], ax
lea eax, [ebp - 0x3f2]
push esi
push eax
mov dword [ebp - 0x40c], 0x4d0040
mov dword [ebp - 0x408], 0x7a005c
mov dword [ebp - 0x404], 0x7a004d
mov dword [ebp - 0x400], 0x4a005f
mov dword [ebp - 0x3fc], 0x4c0007
mov dword [ebp - 0x3f8], 0x4c0051
call fcn.000f3cb0
push 0x60
lea eax, [ebp - 0x370]
mov dword [ebp - 0x390], 0x48006b
push esi
push eax
mov dword [ebp - 0x38c], 0x4d0040
mov dword [ebp - 0x388], 0x7a005c
mov dword [ebp - 0x384], 0x7d004d
mov dword [ebp - 0x380], 0x48005b
mov dword [ebp - 0x37c], 0x70050
mov dword [ebp - 0x378], 0x51004c
mov dword [ebp - 0x374], 0x29004c
call fcn.000f3cb0
push 0x60
lea eax, [ebp - 0x4f0]
mov dword [ebp - 0x510], 0x48006b
push esi
push eax
mov dword [ebp - 0x50c], 0x4d0040
mov dword [ebp - 0x508], 0x68005c
mov dword [ebp - 0x504], 0x7d0047
mov dword [ebp - 0x500], 0x48005b
mov dword [ebp - 0x4fc], 0x70050
mov dword [ebp - 0x4f8], 0x51004c
mov dword [ebp - 0x4f4], 0x29004c
call fcn.000f3cb0
add esp, 0x48
mov dword [ebp - 0x490], 0x48006b
mov eax, 0x29
mov dword [ebp - 0x48c], 0x4d0040
mov word [ebp - 0x474], ax
lea eax, [ebp - 0x472]
mov dword [ebp - 0x488], 0x68005c
push 0x62
push esi
push eax
mov dword [ebp - 0x484], 0x7a0047
mov dword [ebp - 0x480], 0x4a005f
mov dword [ebp - 0x47c], 0x4c0007
mov dword [ebp - 0x478], 0x4c0051
call fcn.000f3cb0
mov dword [ebp - 0x1090], 0x5f0048
mov dword [ebp - 0x108c], 0x70059
push 0x70
lea eax, [ebp - 0x1080]
mov dword [ebp - 0x1088], 0x51004c
push esi
push eax
mov dword [ebp - 0x1084], 0x29004c
call fcn.000f3cb0
mov eax, 0x29
mov dword [ebp - 0x1010], 0x4e004c
push 0x6e
mov word [ebp - 0x1000], ax
lea eax, [ebp - 0xffe]
push esi
push eax
mov dword [ebp - 0x100c], 0x40005c
mov dword [ebp - 0x1008], 0x4c0007
mov dword [ebp - 0x1004], 0x4c0051
call fcn.000f3cb0
mov eax, 0x29
mov dword [ebp - 0xf90], 0x42004c
push 0x6e
mov word [ebp - 0xf80], ax
lea eax, [ebp - 0xf7e]
push esi
push eax
mov dword [ebp - 0xf8c], 0x47005b
mov dword [ebp - 0xf88], 0x4c0007
mov dword [ebp - 0xf84], 0x4c0051
call fcn.000f3cb0
push 0x68
lea eax, [ebp - 0xbf8]
mov dword [ebp - 0xc10], 0x5a0064
push esi
push eax
mov dword [ebp - 0xc0c], 0x590064
mov dword [ebp - 0xc08], 0x47006c
mov dword [ebp - 0xc04], 0x7004e
mov dword [ebp - 0xc00], 0x51004c
mov dword [ebp - 0xbfc], 0x29004c
call fcn.000f3cb0
push 0x68
lea eax, [ebp - 0xb78]
mov dword [ebp - 0xb90], 0x5a0044
push esi
push eax
mov dword [ebp - 0xb8c], 0x4c005a
mov dword [ebp - 0xb88], 0x4c004a
mov dword [ebp - 0xb84], 0x7005a
mov dword [ebp - 0xb80], 0x51004c
mov dword [ebp - 0xb7c], 0x29004c
call fcn.000f3cb0
add esp, 0x48
mov dword [ebp - 0x910], 0x5a005c
mov eax, 0x29
mov dword [ebp - 0x90c], 0x5a0050
mov word [ebp - 0x8f8], ax
lea eax, [ebp - 0x8f6]
mov dword [ebp - 0x908], 0x40004d
push 0x66
push esi
push eax
mov dword [ebp - 0x904], 0x4e0048
mov dword [ebp - 0x900], 0x4c0007
mov dword [ebp - 0x8fc], 0x4c0051
call fcn.000f3cb0
mov eax, 0x29
mov dword [ebp - 0x890], 0x400061
push 0x62
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push esi
push eax
mov dword [ebp - 0x88c], 0x5a0059
mov dword [ebp - 0x888], 0x48006d
mov dword [ebp - 0x884], 0x44004c
mov dword [ebp - 0x880], 0x470046
mov dword [ebp - 0x87c], 0x4c0007
mov dword [ebp - 0x878], 0x4c0051
call fcn.000f3cb0
mov dword [ebp - 0x810], 0x400061
mov dword [ebp - 0x80c], 0x5a0059
mov eax, 0x29
mov dword [ebp - 0x808], 0x5b007d
push 0x66
mov word [ebp - 0x7f8], ax
lea eax, [ebp - 0x7f6]
push esi
push eax
mov dword [ebp - 0x804], 0x500048
mov dword [ebp - 0x800], 0x4c0007
mov dword [ebp - 0x7fc], 0x4c0051
call fcn.000f3cb0
push 0x5c
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x310], 0x1a001b
push esi
push eax
mov dword [ebp - 0x30c], 0x1c001d
mov dword [ebp - 0x308], 0x7d007b
mov dword [ebp - 0x304], 0x5b0079
mov dword [ebp - 0x300], 0x5d0046
mov dword [ebp - 0x2fc], 0x4a004c
mov dword [ebp - 0x2f8], 0x7005d
mov dword [ebp - 0x2f4], 0x51004c
mov dword [ebp - 0x2f0], 0x29004c
call fcn.000f3cb0
push 0x54
lea eax, [ebp - 0x264]
mov dword [ebp - 0x290], 0x1a001b
push esi
push eax
mov dword [ebp - 0x28c], 0x1c001d
mov dword [ebp - 0x288], 0x48007a
mov dword [ebp - 0x284], 0x4c004f
mov dword [ebp - 0x280], 0x4c006a
mov dword [ebp - 0x27c], 0x5d0047
mov dword [ebp - 0x278], 0x5b004c
mov dword [ebp - 0x274], 0x5f007a
mov dword [ebp - 0x270], 0x7004a
mov dword [ebp - 0x26c], 0x51004c
mov dword [ebp - 0x268], 0x29004c
call fcn.000f3cb0
push 0x60
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x210], 0x1a001b
push esi
push eax
mov dword [ebp - 0x20c], 0x1c001d
mov dword [ebp - 0x208], 0x48007a
mov dword [ebp - 0x204], 0x4c004f
mov dword [ebp - 0x200], 0x5f007a
mov dword [ebp - 0x1fc], 0x7004a
mov dword [ebp - 0x1f8], 0x51004c
mov dword [ebp - 0x1f4], 0x29004c
call fcn.000f3cb0
add esp, 0x48
mov dword [ebp - 0x190], 0x1a001b
mov eax, 0x29
mov dword [ebp - 0x18c], 0x1c001d
mov word [ebp - 0x170], ax
lea eax, [ebp - 0x16e]
mov dword [ebp - 0x188], 0x48007a
push 0x5e
push esi
push eax
mov dword [ebp - 0x184], 0x4c004f
mov dword [ebp - 0x180], 0x5b007d
mov dword [ebp - 0x17c], 0x500048
mov dword [ebp - 0x178], 0x4c0007
mov dword [ebp - 0x174], 0x4c0051
call fcn.000f3cb0
push 0x60
mov dword [ebp - 0x110], 0x1a001b
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x10c], 0x1c001d
mov dword [ebp - 0x108], 0x46007a
mov dword [ebp - 0x104], 0x5d004f
mov dword [ebp - 0x100], 0x4e0064
mov dword [ebp - 0xfc], 0x7005b
mov dword [ebp - 0xf8], 0x51004c
mov dword [ebp - 0xf4], 0x29004c
push esi
push eax
call fcn.000f3cb0
push 0x60
lea eax, [ebp - 0x70]
mov dword [ebp - 0x90], 0x1a001b
push esi
push eax
mov dword [ebp - 0x8c], 0x1c001d
mov dword [ebp - 0x88], 0x59007a
mov dword [ebp - 0x84], 0x4c004c
mov dword [ebp - 0x80], 0x5c004d
mov dword [ebp - 0x7c], 0x70059
mov dword [ebp - 0x78], 0x51004c
mov dword [ebp - 0x74], 0x29004c
call fcn.000f3cb0
add esp, 0x24
mov dword [ebp - 0x2b34], 0x22c
push esi
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0x2b38], eax
cmp eax, 0xffffffff
je 0xe9532
lea ecx, [ebp - 0x2b34]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0xe8d24
xor eax, eax
mov dword [ebp - 0x28f8], 0
lea ecx, [ebp - 0x2b10]
mov dword [ebp - 0x28f4], 7
mov word [ebp - 0x2908], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0xe8c40
sub ecx, edx
lea eax, [ebp - 0x2b10]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2908]
call fcn.000d1370
mov byte [ebp - 4], 1
cmp dword [ebp - 0x2b44], edi
je 0xe8cac
movups xmm0, xmmword [ebp - 0x2908]
mov dword [edi + 0x10], 0
xor eax, eax
mov dword [edi + 0x14], 0
mov edx, 7
movups xmmword [edi], xmm0
mov word [ebp - 0x2908], ax
movq xmm0, qword [ebp - 0x28f8]
movq qword [edi + 0x10], xmm0
add edi, 0x18
mov dword [ebp - 0x2b48], edi
jmp 0xe8ccb
lea eax, [ebp - 0x2908]
push eax
push edi
lea ecx, [ebp - 0x2b4c]
call fcn.000ea4e0
mov edx, dword [ebp - 0x28f4]
mov edi, dword [ebp - 0x2b48]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0xe8d09
mov ecx, dword [ebp - 0x2908]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0xe8cff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xe954f
push edx
push ecx
call fcn.000f17bc
add esp, 8
lea eax, [ebp - 0x2b34]
push eax
push dword [ebp - 0x2b38]
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0xe8c12
push dword [ebp - 0x2b38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
mov dword [ebp - 0x2b50], 0
sub ecx, dword [ebp - 0x2b4c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x2b54], eax
je 0xe94d8
xor eax, eax
mov ecx, dword [ebp - 0x2b4c]
lea eax, [eax + eax*2]
cmp dword [ecx + eax*8 + 0x14], 8
lea edi, [ecx + eax*8]
mov dword [ebp - 0x2b38], edi
jb 0xe8d82
mov eax, dword [edi]
mov dword [ebp - 0x2b38], eax
push 0x208
lea eax, [ebp - 0x1298]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b3c], 0
lea esi, [ebp - 0xe90]
xor ecx, ecx
nop word [eax + eax]
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1298], ax
inc ecx
cmp ecx, 0x40
jb 0xe8db0
push dword [ebp - 0x2b38]
lea eax, [ebp - 0x1298]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe8df7
mov eax, dword [ebp - 0x2b3c]
inc eax
mov dword [ebp - 0x2b3c], eax
cmp eax, 5
jb 0xe8da8
xor eax, eax
jmp 0xe8dfc
mov eax, 1
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe8e16
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x14a0]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x690]
nop dword [eax]
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x14a0], ax
inc ecx
cmp ecx, 0x40
jb 0xe8e42
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x14a0]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe8e89
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 3
jb 0xe8e40
xor eax, eax
jmp 0xe8e8e
mov eax, 2
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe8ea8
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x16a8]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0xf10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x16a8], ax
inc ecx
cmp ecx, 0x40
jb 0xe8ed2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x16a8]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe8f19
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 1
jb 0xe8ed0
xor eax, eax
jmp 0xe8f1e
mov eax, 4
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe8f38
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x18b0]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x790]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x18b0], ax
inc ecx
cmp ecx, 0x40
jb 0xe8f62
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x18b0]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe8fa9
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0xe8f60
xor eax, eax
jmp 0xe8fae
mov eax, 8
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe8fc8
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x1ab8]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0xa10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1ab8], ax
inc ecx
cmp ecx, 0x40
jb 0xe8ff2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x1ab8]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe9039
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0xe8ff0
xor eax, eax
jmp 0xe903e
mov eax, 0x10
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe9058
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x1cc0]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0xb10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1cc0], ax
inc ecx
cmp ecx, 0x40
jb 0xe9082
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x1cc0]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe90c9
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0xe9080
xor eax, eax
jmp 0xe90ce
mov eax, 0x20
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe90e8
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x1ec8]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x410]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1ec8], ax
inc ecx
cmp ecx, 0x40
jb 0xe9112
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x1ec8]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe9159
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0xe9110
xor eax, eax
jmp 0xe915e
mov eax, 0x40
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe9178
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x20d0]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x510]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x20d0], ax
inc ecx
cmp ecx, 0x40
jb 0xe91a2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x20d0]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe91e9
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0xe91a0
xor eax, eax
jmp 0xe91ee
mov eax, 0x80
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe9208
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x22d8]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x1090]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x22d8], ax
inc ecx
cmp ecx, 0x40
jb 0xe9232
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x22d8]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe9279
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 1
jb 0xe9230
xor eax, eax
jmp 0xe927e
mov eax, 0x100
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe9298
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x24e0]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x1010]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x24e0], ax
inc ecx
cmp ecx, 0x40
jb 0xe92c2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x24e0]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe9309
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0xe92c0
xor eax, eax
jmp 0xe930e
mov eax, 0x200
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe9328
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x26e8]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0xc10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x26e8], ax
inc ecx
cmp ecx, 0x40
jb 0xe9352
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x26e8]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe9399
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0xe9350
xor eax, eax
jmp 0xe939e
mov eax, 0x400
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0xe93b8
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x28f0]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x910]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x28f0], ax
inc ecx
cmp ecx, 0x40
jb 0xe93e2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x28f0]
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe9429
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 3
jb 0xe93e0
xor eax, eax
jmp 0xe942e
mov eax, 0x800
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
jb 0xe943c
mov edi, dword [edi]
push 0x208
lea eax, [ebp - 0x2b10]
push 0
push eax
call fcn.000f3cb0
add esp, 0xc
mov dword [ebp - 0x2b3c], 0
lea esi, [ebp - 0x310]
xor eax, eax
mov cx, word [esi]
add esi, 2
xor cx, 0x29
mov word [ebp + eax*2 - 0x2b10], cx
inc eax
cmp eax, 0x40
jb 0xe9464
lea eax, [ebp - 0x2b10]
push edi
push eax
call fcn.000fc93c
add esp, 8
test eax, eax
je 0xe94a6
mov ecx, dword [ebp - 0x2b3c]
inc ecx
mov dword [ebp - 0x2b3c], ecx
cmp ecx, 6
jb 0xe9462
xor eax, eax
jmp 0xe94ab
mov eax, 0x1000
mov esi, dword [ebp - 0x2b40]
or esi, eax
mov eax, dword [ebp - 0x2b50]
inc eax
mov dword [ebp - 0x2b40], esi
mov dword [ebp - 0x2b50], eax
cmp eax, dword [ebp - 0x2b54]
jb 0xe8d61
mov edi, dword [ebp - 0x2b48]
mov eax, dword [ebp - 0x2b4c]
test eax, eax
je 0xe9532
push edi
push eax
call fcn.000ea470
mov ecx, dword [ebp - 0x2b44]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x2b4c]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, edi
shl ecx, 3
cmp ecx, 0x1000
jb 0xe9528
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xe954f
push ecx
push edi
call fcn.000f17bc
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.000f1776
mov esp, ebp
pop ebp
ret
call fcn.000f75a6
int3