Function at 0x8dab00
Capabilities:
Encode data using xor
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x124
nop
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x8db6c0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
call fcn.008db6b0
movzx edx, byte [0xa8c5b8]
mov dword [ebp - 0x60], eax
add eax, 0xffff09a3
mov ecx, dword [0xa79b88]
mov dword [ebp - 0x64], eax
add ecx, eax
mov dword [ebp - 0x54], edx
add ecx, edx
add ecx, dword [0xa79b78]
call dword [0xa37360]
call ecx
pxor xmm0, xmm0
movq qword [ebp - 0xcb], xmm0
movq qword [ebp - 0xd0], xmm0
movzx ecx, byte [0xa79b0d]
mov dword [ebp - 0x38], eax
mov ebx, eax
mov byte [ebp - 0x25], al
xor bl, 0xb
cmp cl, bl
je 0x8dac7c
movzx edx, byte [ebp - 0x25]
mov ecx, edx
xor cl, 0x4e
xor dl, 0x8c
nop dword [eax]
mov eax, ecx
lock cmpxchg byte [0xa79b0d], dl
je 0x8dabb5
cmp al, bl
jne 0x8daba0
jmp 0x8dac7c
nop
mov eax, dword [ebp - 0x38]
mov ecx, eax
xor ecx, 0xc2faaa6d
mov dword [ebp - 0x30], ecx
mov ecx, eax
xor ecx, 0x88f162af
xor eax, 0x88f162a8
xor edi, edi
cmp eax, 2
mov edx, 1
cmovge edx, eax
mov dword [ebp - 0x20], edx
nop
mov bh, byte [ebp - 0x25]
jl 0x8dac46
mov eax, dword [ebp - 0x20]
and eax, 0x7ffffffe
mov dword [ebp - 0x24], eax
xor edi, edi
mov esi, dword [ebp - 0x30]
nop word [eax + eax]
mov eax, esi
xor edx, edx
div ecx
movzx eax, byte [edi + 0xa79b00]
xor al, byte [edx + 0x9ec550]
xor al, bh
xor al, 0x18
mov byte [edi + 0xa79b00], al
lea eax, [esi + 1]
xor edx, edx
div ecx
movzx eax, byte [edi + 0xa79b01]
xor al, byte [edx + 0x9ec550]
xor al, bh
xor al, 0x18
mov byte [edi + 0xa79b01], al
add edi, 2
add esi, 2
cmp dword [ebp - 0x24], edi
jne 0x8dac00
test byte [ebp - 0x20], 1
je 0x8dac6e
nop
mov eax, dword [ebp - 0x30]
add eax, edi
xor edx, edx
div ecx
movzx eax, byte [edi + 0xa79b00]
xor al, byte [edx + 0x9ec550]
xor al, byte [ebp - 0x25]
xor al, 0x18
mov byte [edi + 0xa79b00], al
nop
xchg byte [0xa79b0d], bl
mov dword [ebp - 0x10], 0xffffffff
nop
mov esi, dword [ebp + 8]
mov ebx, dword [ebp - 0x38]
mov eax, ebx
xor eax, 0x88f162a8
mov dword [ebp - 0x10], 0xffffffff
lea edi, [ebp - 0xd0]
push eax
push edi
push 0xa79b00
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov ecx, dword [0xa79b90]
add ecx, dword [ecx]
mov dword [ebp - 0xa8], ecx
mov ecx, dword [0x9ec53c]
mov dword [ebp - 0x70], ecx
mov ecx, dword [0xa79b94]
add ecx, dword [ecx]
mov dword [ebp - 0x68], ecx
mov ecx, ebx
xor ecx, 0x88f162a9
mov dword [ebp - 0x88], ecx
cmp eax, ecx
jne 0x8db53e
mov eax, ebx
xor eax, 0x88f162b5
mov ecx, ebx
xor ecx, 0x88f162b1
mov dword [ebp - 0x5c], eax
mov dword [ebp + eax - 0xc0], 0
mov eax, ebx
xor eax, 0x88f162aa
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp + ecx - 0xc0], eax
mov byte [ebp - 0xc0], 0
push edi
call fcn.00903f50
add esp, 4
mov dword [ebp - 0x80], eax
mov eax, dword [0xa79b98]
xor eax, ebx
cmp eax, 0xe745bf31
jne 0x8db08b
nop
mov dword [0xa79b9c], 0xbc67fd22
mov esi, dword [0xa79b8c]
mov ecx, ebx
xor ecx, 0xa57f5112
mov edx, esi
sub edx, ecx
mov edi, 1
sub edi, edx
mov eax, edx
sub eax, edi
imul eax, edi
sub eax, edx
inc eax
mov edx, eax
shl edx, cl
mov ecx, edx
shl eax, cl
add eax, edx
xor esi, eax
mov ecx, eax
shl esi, cl
mov edx, eax
sub edx, esi
mov esi, edx
shl esi, cl
test esi, edx
mov dword [0xa79b8c], eax
js 0x8db0b5
nop
mov ecx, dword [0xa79b9c]
xor ecx, ebx
mov eax, ebx
xor eax, 0x370e9d5b
xor edx, edx
cmp ecx, 0xcbf0b41c
cmove eax, edx
mov edx, dword [ebp - 0x68]
mov ecx, dword [edx + eax*4]
cmp dword [ebp - 0x70], 0
jle 0x8db0c4
lea eax, [edx + eax*4]
add eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [0xa79ba0]
xor eax, ebx
mov dword [ebp - 0xa4], eax
mov ecx, ebx
xor ecx, 0x88f162a1
mov edx, ebx
xor edx, 0x5d64165d
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x9c], edx
add eax, edx
sub ecx, eax
mov dword [ebp - 0xa0], ecx
mov eax, ebx
shr eax, 4
mov ecx, ebx
shl ecx, 0x1c
xor ecx, ebx
xor ecx, 0xd8f162b5
mov dword [ebp - 0x94], ecx
xor eax, 0x88f162a
mov dword [ebp - 0x98], eax
mov eax, ebx
shr eax, 3
mov ecx, ebx
shl ecx, 0x1d
xor ecx, ebx
xor ecx, 0x28f162b5
mov dword [ebp - 0x8c], ecx
xor eax, 0x111e2c54
mov dword [ebp - 0x90], eax
pcmpeqd xmm0, xmm0
xorps xmm1, xmm1
xor ecx, ecx
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x6c], 0
jmp 0x8daed1
not edx
mov edi, dword [ebp - 0x30]
and edi, edx
not ebx
mov esi, dword [ebp - 0x48]
and esi, ebx
mov eax, dword [ebp - 0x4c]
not eax
mov edx, dword [ebp - 0x2c]
and edx, eax
mov eax, dword [ebp - 0x20]
not eax
mov ebx, dword [ebp - 0x40]
and ebx, eax
mov ecx, dword [ebp - 0x6c]
inc ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x6c], ecx
lea eax, [eax + ecx*4]
add eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x4c], 0
xor dword [ebp - 0x3c], ebx
xor dword [ebp - 0x44], edx
xor dword [ebp - 0x34], esi
xor dword [ebp - 0x50], edi
nop
mov dword [0xa79ba8], 0x5f22aa9d
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0x70]
jge 0x8db0c0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x24], ecx
lea ebx, [eax + ecx]
cmp dword [ebp - 0xa4], 0x72f1d46a
jne 0x8daf80
nop
mov eax, dword [ebp - 0x4c]
mov ecx, ebx
mov edx, dword [ebp - 0x20]
shld eax, edx, cl
mov edi, dword [ebp - 0x20]
shl edi, cl
test bl, 0x20
cmovne eax, edi
mov ecx, 0
cmovne edi, ecx
mov edx, ebx
sub edx, edi
mov esi, 0
sbb esi, eax
mov ecx, edx
shld eax, edi, cl
shl edi, cl
test dl, 0x20
cmovne eax, edi
mov ecx, 0
cmovne edi, ecx
mov ecx, edx
not ecx
add ecx, edi
mov edi, esi
not edi
adc edi, eax
imul edi, edx
mov eax, ecx
mul edx
imul esi, ecx
add edx, esi
add edx, edi
cmp eax, dword [ebp - 0x8c]
sbb edx, dword [ebp - 0x90]
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebx + 8]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebx]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x48], ecx
jl 0x8dafb1
mov edi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x48]
jmp 0x8daeab
nop
mov eax, dword [ebp - 0x20]
sub eax, ebx
mov ecx, dword [ebp - 0x4c]
sbb ecx, 0
cmp eax, dword [ebp - 0x94]
sbb ecx, dword [ebp - 0x98]
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebx + 8]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebx]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x48], ecx
jge 0x8daf6b
lea ecx, [eax*8]
movdqu xmmword [ebp - 0x120], xmm0
movups xmmword [ebp - 0x130], xmm1
shr cl, 3
and cl, 0xf
neg cl
movsx edi, cl
mov ecx, dword [ebp + edi - 0x114]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp + edi - 0x118]
mov dword [ebp - 0x4c], ecx
add eax, dword [ebp - 0xa0]
mov ecx, eax
mov edx, dword [ebp - 0x9c]
xor ecx, edx
and eax, edx
lea ecx, [ecx + eax*2]
mov eax, dword [0xa79ba4]
xor eax, dword [ebp - 0x38]
cmp eax, 0x6804fda
mov edx, dword [ebp + edi - 0x120]
mov ebx, dword [ebp + edi - 0x11c]
jne 0x8db050
nop
mov eax, dword [ebp - 0x24]
mov edi, eax
shl edi, cl
xor edi, eax
and ecx, eax
mov eax, 4
sub eax, ecx
add ecx, 0xfffffffe
imul eax, ecx
sub ecx, eax
imul ecx, eax
mov eax, edi
shl eax, cl
mov ecx, eax
shl edi, cl
mov dword [0xa79ba4], 0xa8777df1
add edi, eax
nop
mov dword [ebp - 0x24], edi
jmp 0x8db067
mov eax, ecx
mov edi, dword [ebp - 0x24]
xor eax, edi
and ecx, edi
add ecx, ecx
mov edi, ecx
xor edi, eax
and ecx, eax
lea eax, [edi + ecx*2]
mov dword [ebp - 0x24], eax
nop
mov eax, dword [0xa79ba8]
xor eax, dword [ebp - 0x38]
cmp eax, 0xcfd31aca
jne 0x8dae70
nop
mov dword [0xa79b98], 0xd0f91180
jmp 0x8dae70
nop
mov eax, dword [0xa79b8c]
mov ecx, ebx
xor ecx, 0xa57f5112
mov edx, eax
sub edx, ecx
inc edx
mov esi, edx
xor esi, ecx
and edx, ecx
lea ecx, [esi + edx*2]
mov dword [0xa79b8c], ecx
test ecx, eax
je 0x8dad88
mov dword [ebp - 0x50], 0
mov bl, 1
jmp 0x8db0cd
xor ebx, ebx
jmp 0x8db0e2
mov dword [ebp - 0x50], 0
xor ebx, ebx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x3c], 0
nop
mov edi, dword [ebp - 0x80]
cmp edi, dword [ebp - 0x58]
mov dword [ebp - 0x10], 0xffffffff
jbe 0x8db12f
nop
mov esi, dword [ebp - 0x64]
add esi, dword [0xa79b84]
add esi, dword [ebp - 0x54]
add esi, dword [0xa79b70]
mov ecx, esi
call dword [0xa37360]
sub esp, 0xc
movzx eax, byte [ebp - 0x7c]
mov byte [esp + 4], al
lea eax, [ebp - 0xd0]
mov dword [esp + 8], eax
mov dword [esp], edi
lea ecx, [ebp - 0xc0]
call esi
jmp 0x8db16e
nop
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax - 0xc0], edi
mov ecx, dword [ebp - 0x64]
add ecx, dword [0xa79b80]
add ecx, dword [ebp - 0x54]
add ecx, dword [0xa79b74]
call dword [0xa37360]
lea eax, [ebp - 0xc0]
push edi
lea edx, [ebp - 0xd0]
push edx
push eax
call ecx
add esp, 0xc
mov byte [ebp + edi - 0xc0], 0
nop
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp + eax - 0xc0]
mov dword [ebp - 0x30], eax
mov edi, dword [0x9ec54c]
mov esi, dword [0x9ec548]
mov edx, dword [0x9ec544]
mov ecx, dword [0x9ec540]
mov eax, dword [0xa79b98]
xor eax, dword [ebp - 0x38]
cmp eax, 0x5ff9f39
nop
mov dword [ebp - 0x2c], edi
jne 0x8db383
nop
mov dword [ebp - 0x100], ecx
pxor xmm0, xmm0
movdqu xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0xfc], edx
mov dword [ebp - 0xf8], esi
mov dword [ebp - 0xf4], edi
mov al, 0xc5
sub al, cl
mov dword [ebp - 0x24], ecx
mov ch, al
and ch, 7
shr al, 3
and al, 0xf
neg al
mov dword [ebp - 0x40], ebx
movsx ebx, al
mov eax, dword [ebp + ebx - 0xf8]
mov dword [ebp - 0x20], esi
mov esi, dword [ebp + ebx - 0xf4]
mov cl, ch
shld esi, eax, cl
shl eax, cl
not cl
mov dword [ebp - 0x48], edx
mov edx, dword [ebp + ebx - 0xfc]
mov edi, edx
shr edi, 1
shr edi, cl
or edi, eax
mov eax, dword [ebp + ebx - 0x100]
mov cl, ch
shld edx, eax, cl
movzx ebx, byte [ebp - 0x40]
dec ebx
or ebx, 0xfffffffb
mov dword [ebp - 0x40], ebx
shl eax, cl
add eax, dword [ebp - 0x24]
adc edx, dword [ebp - 0x48]
adc edi, dword [ebp - 0x20]
adc esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x50]
mov ebx, ecx
sub ebx, eax
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x34]
sbb eax, edx
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x44]
sbb edx, edi
mov edi, edx
mov dword [ebp - 0x44], edx
mov edx, dword [ebp - 0x3c]
sbb edx, esi
mov dword [ebp - 0x3c], edx
movdqu xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xd4], edx
mov eax, ecx
and al, 7
shr cl, 3
and cl, 0xf
neg cl
movsx esi, cl
mov ebx, dword [ebp + esi - 0xd8]
mov edx, dword [ebp + esi - 0xd4]
mov ecx, eax
shld edx, ebx, cl
mov dword [ebp - 0x24], edx
shl ebx, cl
not cl
mov edx, dword [ebp + esi - 0xe0]
mov esi, dword [ebp + esi - 0xdc]
mov edi, esi
shr edi, 1
shr edi, cl
mov ecx, eax
shld esi, edx, cl
or edi, ebx
shl edx, cl
sub dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x34]
sbb ecx, esi
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x44]
sbb eax, edi
mov edx, dword [ebp - 0x24]
sbb dword [ebp - 0x3c], edx
mov esi, 0x634d02c5
mov ebx, eax
mul esi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x2c], eax
mov eax, ecx
mul esi
mov dword [ebp - 0x4c], eax
mov edi, edx
imul ebx, ebx, 0x42fe4724
add ebx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov eax, ecx
mul esi
mov esi, edx
imul edx, dword [ebp - 0x3c], 0x634d02c5
add edx, ebx
mov dword [ebp - 0x48], edx
add esi, dword [ebp - 0x4c]
adc edi, 0
mov edx, 0x42fe4724
mov dword [ebp - 0x24], eax
mov eax, ecx
mul edx
mov ebx, edx
mov ecx, eax
add ecx, esi
adc ebx, edi
setb byte [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov edx, 0x42fe4724
mul edx
add eax, ebx
movzx esi, byte [ebp - 0x20]
adc edx, esi
mov esi, edx
add eax, dword [ebp - 0x2c]
adc esi, dword [ebp - 0x48]
add dword [ebp - 0x24], 0x942951a2
adc ecx, 0xde5f0424
mov edi, ecx
adc eax, 0xfcd2097f
mov dword [ebp - 0x20], eax
adc esi, 0xee77e6bf
mov dword [0xa79ba4], 0x216cef6d
mov edx, 0xffffffff
mov ebx, 0xffffffff
mov ecx, 0xffffffff
jmp 0x8db3ba
mov edi, edx
movzx edx, bl
mov eax, ecx
xor ecx, ecx
add edx, 0xffffffff
mov dword [ebp - 0x40], edx
mov edx, 0
adc edx, 0xffffffff
mov ebx, 0
adc ebx, 0xffffffff
adc ecx, 0xffffffff
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x24], eax
sbb edi, dword [ebp - 0x34]
sbb esi, dword [ebp - 0x44]
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 0x2c]
sbb esi, dword [ebp - 0x3c]
nop
mov eax, dword [0xa79bac]
xor eax, dword [ebp - 0x38]
cmp eax, 0xeaef350f
jne 0x8db3de
nop
movzx eax, byte [0xa8c5b8]
mov dword [0xa79ba0], 0xe85b1ad2
jmp 0x8db3fa
and edx, edi
and ecx, esi
or ecx, edx
mov eax, dword [ebp - 0x40]
and eax, dword [ebp - 0x24]
and ebx, dword [ebp - 0x20]
or ebx, eax
or ebx, ecx
setne al
or al, byte [0xa8c5b8]
and al, 1
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xc0]
lea edi, [ebp - 0xc0]
mov dword [ebp - 0x2c], ecx
cmova edi, ecx
mov byte [0xa8c5b8], al
mov dword [0xa79ba0], 0x88f162a5
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax - 0xc0]
mov dword [ebp - 0x24], eax
test eax, eax
je 0x8db56a
mov dh, byte [ebp - 0x25]
mov al, dh
xor al, 0x95
mov byte [ebp - 0x20], al
mov cl, dh
xor cl, 0x63
mov dl, dh
xor dl, 0xa2
mov ah, dh
xor ah, 0x3a
mov ch, dh
xor ch, 0x43
xor dh, 0xc2
mov al, dh
mov esi, 1
nop
movzx ebx, byte [edi + esi - 1]
cmp bl, byte [ebp - 0x20]
jl 0x8db4e0
mov dh, bl
add dh, cl
cmp dh, dl
jb 0x8db4e0
mov dh, bl
add dh, ah
cmp dh, ch
setb bh
cmp bl, al
setb dh
and dh, bh
cmp dh, 1
jne 0x8db492
lea ebx, [esi + 1]
cmp dword [ebp - 0x24], esi
mov esi, ebx
jne 0x8db460
test dh, dh
je 0x8db4e0
pxor xmm0, xmm0
movq qword [ebp - 0x7c], xmm0
mov dword [ebp - 0x74], 0
mov eax, dword [0xa79b80]
mov ecx, dword [0xa79b74]
sub ecx, dword [ebp - 0x54]
add ecx, eax
mov eax, dword [ebp - 0x60]
add ecx, eax
add ecx, 0xffff09a3
mov dword [ebp - 0x10], 0xffffffff
call dword [0xa37360]
lea eax, [ebp - 0x7c]
push dword [ebp - 0x24]
push edi
push eax
call ecx
add esp, 0xc
jmp 0x8db57a
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x58]
jbe 0x8db537
inc eax
mov edx, dword [ebp - 0x38]
mov ecx, edx
xor ecx, 0x88f16d5a
cmp eax, ecx
jbe 0x8db52a
mov eax, edx
xor eax, 0x770e9d59
mov esi, dword [ebp - 0x2c]
lea ecx, [esi + eax]
mov esi, dword [esi + eax]
mov dword [ebp - 0x2c], esi
sub ecx, esi
mov eax, edx
xor eax, 0x88f16285
cmp ecx, eax
jae 0x8db66a
mov eax, edx
xor eax, 0x88f16281
mov ecx, dword [ebp - 0x30]
add ecx, eax
mov eax, ecx
nop
push eax
push dword [ebp - 0x2c]
call fcn.0091d82d
add esp, 8
nop
mov ebx, dword [ebp - 0x38]
mov esi, dword [ebp + 8]
nop
mov byte [esi], 0
mov eax, ebx
xor eax, 0x88f162a1
mov dword [esi + eax], 0
mov eax, ebx
xor eax, 0x88f162b9
mov byte [esi + eax], 0
xor ebx, 0x88f162b8
mov byte [esi + ebx], 0
jmp 0x8db646
pxor xmm0, xmm0
movq qword [ebp - 0x7c], xmm0
mov dword [ebp - 0x74], 0
nop
mov ecx, dword [ebp + 8]
mov byte [ecx], 0
mov ebx, dword [ebp - 0x38]
mov eax, ebx
xor eax, 0x88f162a1
mov dword [ecx + eax], 0
mov edx, ecx
mov esi, ebx
xor esi, 0x88f162b9
mov eax, dword [ebp - 0x60]
add eax, dword [0xa79b80]
mov ecx, dword [ebp - 0x54]
xor ecx, dword [0xa79b74]
add ecx, eax
add ecx, 0xffff09a3
mov edi, ebx
xor edi, 0x88f162b8
add edi, edx
call dword [0xa37360]
lea eax, [ebp - 0x7c]
push dword [ebp - 0x88]
push eax
push edi
call ecx
add esp, 0xc
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x58]
mov ecx, dword [ebp + 8]
mov byte [ecx + esi], 1
jbe 0x8db642
inc eax
mov ecx, ebx
xor ecx, 0x88f16d5a
cmp eax, ecx
mov dword [0xa79ba8], 0x63186dd6
ja 0x8db606
nop
test byte [0xa8c5b8], 1
je 0x8db635
nop
mov edx, dword [ebp - 0x38]
mov eax, edx
xor eax, 0x770e9d59
mov esi, dword [ebp - 0x2c]
lea ecx, [esi + eax]
mov esi, dword [esi + eax]
mov dword [ebp - 0x2c], esi
sub ecx, esi
mov eax, edx
xor eax, 0x88f16285
cmp ecx, eax
jae 0x8db65d
xor edx, 0x88f16281
mov eax, dword [ebp - 0x30]
add eax, edx
nop
push eax
push dword [ebp - 0x2c]
call fcn.0091d82d
add esp, 8
nop
mov esi, dword [ebp + 8]
nop
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, esi
add esp, 0x124
pop esi
pop edi
pop ebx
pop ebp
ret
nop
mov dword [ebp - 0x10], 0
call fcn.00900ce1
nop
mov dword [ebp - 0x10], 1
call fcn.00900ce1
nop word [eax + eax]
push ebp
sub esp, 0xc
add ebp, 0xc
call fcn.009350a0
nop dword [eax]
push ebp
sub esp, 0xc
add ebp, 0xc
call fcn.009350a0
int3