Function at 0x10069b40
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d8376
mov eax, dword fs:[0]
push eax
mov eax, 0x2b48
call fcn.1008c5b0
mov eax, dword [0x101120a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
mov dword [ebp - 0x28f4], 0
xor edi, edi
movq qword [ebp - 0x28fc], xmm0
mov dword [ebp - 0x28fc], 0
mov dword [ebp - 0x28f8], edi
mov dword [ebp - 0x28f4], edi
mov dword [ebp - 4], edi
mov eax, 0x29
xor esi, esi
mov word [ebp - 0xe7c], ax
push 0x6a
lea eax, [ebp - 0xe7a]
mov dword [ebp - 0x2b34], esi
push esi
push eax
mov dword [ebp - 0xe90], 0x40005b
mov dword [ebp - 0xe8c], 0x40005a
mov dword [ebp - 0xe88], 0x4e0047
mov dword [ebp - 0xe84], 0x4c0007
mov dword [ebp - 0xe80], 0x4c0051
call fcn.1008da10
push 0x68
lea eax, [ebp - 0xdf8]
mov dword [ebp - 0xe10], 0x68007b
push esi
push eax
mov dword [ebp - 0xe0c], 0x44007f
mov dword [ebp - 0xe08], 0x470046
mov dword [ebp - 0xe04], 0x7006d
mov dword [ebp - 0xe00], 0x51004c
mov dword [ebp - 0xdfc], 0x29004c
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0xd90], 0x68007b
push 0x6a
mov word [ebp - 0xd7c], ax
lea eax, [ebp - 0xd7a]
push esi
push eax
mov dword [ebp - 0xd8c], 0x44007f
mov dword [ebp - 0xd88], 0x470046
mov dword [ebp - 0xd84], 0x4c0007
mov dword [ebp - 0xd80], 0x4c0051
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0xd10], 0x68007b
push 0x66
mov word [ebp - 0xcf8], ax
lea eax, [ebp - 0xcf6]
push esi
push eax
mov dword [ebp - 0xd0c], 0x5d007f
mov dword [ebp - 0xd08], 0x440040
mov dword [ebp - 0xd04], 0x5b004c
mov dword [ebp - 0xd00], 0x4c0007
mov dword [ebp - 0xcfc], 0x4c0051
call fcn.1008da10
push 0x70
lea eax, [ebp - 0xc80]
mov dword [ebp - 0xc90], 0x48005b
push esi
push eax
mov dword [ebp - 0xc8c], 0x7005f
mov dword [ebp - 0xc88], 0x51004c
mov dword [ebp - 0xc84], 0x29004c
call fcn.1008da10
push 0x68
lea eax, [ebp - 0x678]
mov dword [ebp - 0x690], 0x1f001a
push esi
push eax
mov dword [ebp - 0x68c], 0x7d0019
mov dword [ebp - 0x688], 0x48005b
mov dword [ebp - 0x684], 0x70050
mov dword [ebp - 0x680], 0x51004c
mov dword [ebp - 0x67c], 0x29004c
call fcn.1008da10
add esp, 0x48
mov dword [ebp - 0x610], 0x1f001a
push 0x68
lea eax, [ebp - 0x5f8]
mov dword [ebp - 0x60c], 0x7a0019
push esi
push eax
mov dword [ebp - 0x608], 0x4f0048
mov dword [ebp - 0x604], 0x7004c
mov dword [ebp - 0x600], 0x51004c
mov dword [ebp - 0x5fc], 0x29004c
call fcn.1008da10
push 0x5c
lea eax, [ebp - 0x56c]
mov dword [ebp - 0x590], 0x410073
push esi
push eax
mov dword [ebp - 0x58c], 0x6d005c
mov dword [ebp - 0x588], 0x470046
mov dword [ebp - 0x584], 0x6f004e
mov dword [ebp - 0x580], 0x470048
mov dword [ebp - 0x57c], 0x70004e
mov dword [ebp - 0x578], 0x7005c
mov dword [ebp - 0x574], 0x51004c
mov dword [ebp - 0x570], 0x29004c
call fcn.1008da10
push 0x6c
lea eax, [ebp - 0xefc]
mov dword [ebp - 0xf10], 0x1f001a
push esi
push eax
mov dword [ebp - 0xf0c], 0x5a0019
mov dword [ebp - 0xf08], 0x7004d
mov dword [ebp - 0xf04], 0x51004c
mov dword [ebp - 0xf00], 0x29004c
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0x790], 0x7a0062
push 0x66
mov word [ebp - 0x778], ax
lea eax, [ebp - 0x776]
push esi
push eax
mov dword [ebp - 0x78c], 0x4f0048
mov dword [ebp - 0x788], 0x7a004c
mov dword [ebp - 0x784], 0x4a005f
mov dword [ebp - 0x780], 0x4c0007
mov dword [ebp - 0x77c], 0x4c0051
call fcn.1008da10
push 0x64
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x710], 0x7a0062
push esi
push eax
mov dword [ebp - 0x70c], 0x4f0048
mov dword [ebp - 0x708], 0x7d004c
mov dword [ebp - 0x704], 0x48005b
mov dword [ebp - 0x700], 0x70050
mov dword [ebp - 0x6fc], 0x51004c
mov dword [ebp - 0x6f8], 0x29004c
call fcn.1008da10
push 0x68
lea eax, [ebp - 0x9f8]
mov dword [ebp - 0xa10], 0x510042
push esi
push eax
mov dword [ebp - 0xa0c], 0x5d004c
mov dword [ebp - 0xa08], 0x48005b
mov dword [ebp - 0xa04], 0x70050
mov dword [ebp - 0xa00], 0x51004c
mov dword [ebp - 0x9fc], 0x29004c
call fcn.1008da10
add esp, 0x48
mov dword [ebp - 0x990], 0x510042
mov eax, 0x29
mov dword [ebp - 0x98c], 0x5a004c
mov dword [ebp - 0x988], 0x46004a
mov dword [ebp - 0x984], 0x4c005b
push 0x66
mov dword [ebp - 0x980], 0x4c0007
mov dword [ebp - 0x97c], 0x4c0051
mov word [ebp - 0x978], ax
push esi
lea eax, [ebp - 0x976]
push eax
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0xb10], 0x780078
push 0x66
mov word [ebp - 0xaf8], ax
lea eax, [ebp - 0xaf6]
push esi
push eax
mov dword [ebp - 0xb0c], 0x6a0079
mov dword [ebp - 0xb08], 0x5b007d
mov dword [ebp - 0xb04], 0x500048
mov dword [ebp - 0xb00], 0x4c0007
mov dword [ebp - 0xafc], 0x4c0051
call fcn.1008da10
push 0x68
lea eax, [ebp - 0xa78]
mov dword [ebp - 0xa90], 0x780078
push esi
push eax
mov dword [ebp - 0xa8c], 0x6a0079
mov dword [ebp - 0xa88], 0x7d007b
mov dword [ebp - 0xa84], 0x70079
mov dword [ebp - 0xa80], 0x51004c
mov dword [ebp - 0xa7c], 0x29004c
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0x410], 0x48006b
push 0x62
mov word [ebp - 0x3f4], ax
lea eax, [ebp - 0x3f2]
push esi
push eax
mov dword [ebp - 0x40c], 0x4d0040
mov dword [ebp - 0x408], 0x7a005c
mov dword [ebp - 0x404], 0x7a004d
mov dword [ebp - 0x400], 0x4a005f
mov dword [ebp - 0x3fc], 0x4c0007
mov dword [ebp - 0x3f8], 0x4c0051
call fcn.1008da10
push 0x60
lea eax, [ebp - 0x370]
mov dword [ebp - 0x390], 0x48006b
push esi
push eax
mov dword [ebp - 0x38c], 0x4d0040
mov dword [ebp - 0x388], 0x7a005c
mov dword [ebp - 0x384], 0x7d004d
mov dword [ebp - 0x380], 0x48005b
mov dword [ebp - 0x37c], 0x70050
mov dword [ebp - 0x378], 0x51004c
mov dword [ebp - 0x374], 0x29004c
call fcn.1008da10
push 0x60
lea eax, [ebp - 0x4f0]
mov dword [ebp - 0x510], 0x48006b
push esi
push eax
mov dword [ebp - 0x50c], 0x4d0040
mov dword [ebp - 0x508], 0x68005c
mov dword [ebp - 0x504], 0x7d0047
mov dword [ebp - 0x500], 0x48005b
mov dword [ebp - 0x4fc], 0x70050
mov dword [ebp - 0x4f8], 0x51004c
mov dword [ebp - 0x4f4], 0x29004c
call fcn.1008da10
add esp, 0x48
mov dword [ebp - 0x490], 0x48006b
mov eax, 0x29
mov dword [ebp - 0x48c], 0x4d0040
mov word [ebp - 0x474], ax
lea eax, [ebp - 0x472]
mov dword [ebp - 0x488], 0x68005c
push 0x62
push esi
mov dword [ebp - 0x484], 0x7a0047
mov dword [ebp - 0x480], 0x4a005f
mov dword [ebp - 0x47c], 0x4c0007
mov dword [ebp - 0x478], 0x4c0051
push eax
call fcn.1008da10
push 0x70
lea eax, [ebp - 0x1080]
mov dword [ebp - 0x1090], 0x5f0048
push esi
push eax
mov dword [ebp - 0x108c], 0x70059
mov dword [ebp - 0x1088], 0x51004c
mov dword [ebp - 0x1084], 0x29004c
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0x1010], 0x4e004c
push 0x6e
mov word [ebp - 0x1000], ax
lea eax, [ebp - 0xffe]
push esi
push eax
mov dword [ebp - 0x100c], 0x40005c
mov dword [ebp - 0x1008], 0x4c0007
mov dword [ebp - 0x1004], 0x4c0051
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0xf90], 0x42004c
push 0x6e
mov word [ebp - 0xf80], ax
lea eax, [ebp - 0xf7e]
push esi
push eax
mov dword [ebp - 0xf8c], 0x47005b
mov dword [ebp - 0xf88], 0x4c0007
mov dword [ebp - 0xf84], 0x4c0051
call fcn.1008da10
push 0x68
lea eax, [ebp - 0xbf8]
mov dword [ebp - 0xc10], 0x5a0064
push esi
push eax
mov dword [ebp - 0xc0c], 0x590064
mov dword [ebp - 0xc08], 0x47006c
mov dword [ebp - 0xc04], 0x7004e
mov dword [ebp - 0xc00], 0x51004c
mov dword [ebp - 0xbfc], 0x29004c
call fcn.1008da10
push 0x68
lea eax, [ebp - 0xb78]
mov dword [ebp - 0xb90], 0x5a0044
push esi
push eax
mov dword [ebp - 0xb8c], 0x4c005a
mov dword [ebp - 0xb88], 0x4c004a
mov dword [ebp - 0xb84], 0x7005a
mov dword [ebp - 0xb80], 0x51004c
mov dword [ebp - 0xb7c], 0x29004c
call fcn.1008da10
add esp, 0x48
mov dword [ebp - 0x910], 0x5a005c
mov eax, 0x29
mov dword [ebp - 0x90c], 0x5a0050
mov word [ebp - 0x8f8], ax
lea eax, [ebp - 0x8f6]
mov dword [ebp - 0x908], 0x40004d
push 0x66
push esi
push eax
mov dword [ebp - 0x904], 0x4e0048
mov dword [ebp - 0x900], 0x4c0007
mov dword [ebp - 0x8fc], 0x4c0051
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0x890], 0x400061
push 0x62
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push esi
mov dword [ebp - 0x88c], 0x5a0059
mov dword [ebp - 0x888], 0x48006d
mov dword [ebp - 0x884], 0x44004c
mov dword [ebp - 0x880], 0x470046
mov dword [ebp - 0x87c], 0x4c0007
mov dword [ebp - 0x878], 0x4c0051
push eax
call fcn.1008da10
mov eax, 0x29
mov dword [ebp - 0x810], 0x400061
push 0x66
mov word [ebp - 0x7f8], ax
lea eax, [ebp - 0x7f6]
push esi
push eax
mov dword [ebp - 0x80c], 0x5a0059
mov dword [ebp - 0x808], 0x5b007d
mov dword [ebp - 0x804], 0x500048
mov dword [ebp - 0x800], 0x4c0007
mov dword [ebp - 0x7fc], 0x4c0051
call fcn.1008da10
push 0x5c
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x310], 0x1a001b
push esi
push eax
mov dword [ebp - 0x30c], 0x1c001d
mov dword [ebp - 0x308], 0x7d007b
mov dword [ebp - 0x304], 0x5b0079
mov dword [ebp - 0x300], 0x5d0046
mov dword [ebp - 0x2fc], 0x4a004c
mov dword [ebp - 0x2f8], 0x7005d
mov dword [ebp - 0x2f4], 0x51004c
mov dword [ebp - 0x2f0], 0x29004c
call fcn.1008da10
push 0x54
lea eax, [ebp - 0x264]
mov dword [ebp - 0x290], 0x1a001b
push esi
push eax
mov dword [ebp - 0x28c], 0x1c001d
mov dword [ebp - 0x288], 0x48007a
mov dword [ebp - 0x284], 0x4c004f
mov dword [ebp - 0x280], 0x4c006a
mov dword [ebp - 0x27c], 0x5d0047
mov dword [ebp - 0x278], 0x5b004c
mov dword [ebp - 0x274], 0x5f007a
mov dword [ebp - 0x270], 0x7004a
mov dword [ebp - 0x26c], 0x51004c
mov dword [ebp - 0x268], 0x29004c
call fcn.1008da10
push 0x60
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x210], 0x1a001b
push esi
push eax
mov dword [ebp - 0x20c], 0x1c001d
mov dword [ebp - 0x208], 0x48007a
mov dword [ebp - 0x204], 0x4c004f
mov dword [ebp - 0x200], 0x5f007a
mov dword [ebp - 0x1fc], 0x7004a
mov dword [ebp - 0x1f8], 0x51004c
mov dword [ebp - 0x1f4], 0x29004c
call fcn.1008da10
add esp, 0x48
mov dword [ebp - 0x190], 0x1a001b
mov eax, 0x29
mov dword [ebp - 0x18c], 0x1c001d
mov word [ebp - 0x170], ax
lea eax, [ebp - 0x16e]
mov dword [ebp - 0x188], 0x48007a
push 0x5e
push esi
push eax
mov dword [ebp - 0x184], 0x4c004f
mov dword [ebp - 0x180], 0x5b007d
mov dword [ebp - 0x17c], 0x500048
mov dword [ebp - 0x178], 0x4c0007
mov dword [ebp - 0x174], 0x4c0051
call fcn.1008da10
mov dword [ebp - 0x110], 0x1a001b
mov dword [ebp - 0x10c], 0x1c001d
mov dword [ebp - 0x108], 0x46007a
mov dword [ebp - 0x104], 0x5d004f
mov dword [ebp - 0x100], 0x4e0064
mov dword [ebp - 0xfc], 0x7005b
mov dword [ebp - 0xf8], 0x51004c
mov dword [ebp - 0xf4], 0x29004c
push 0x60
lea eax, [ebp - 0xf0]
push esi
push eax
call fcn.1008da10
push 0x60
lea eax, [ebp - 0x70]
mov dword [ebp - 0x90], 0x1a001b
push esi
push eax
mov dword [ebp - 0x8c], 0x1c001d
mov dword [ebp - 0x88], 0x59007a
mov dword [ebp - 0x84], 0x4c004c
mov dword [ebp - 0x80], 0x5c004d
mov dword [ebp - 0x7c], 0x70059
mov dword [ebp - 0x78], 0x51004c
mov dword [ebp - 0x74], 0x29004c
call fcn.1008da10
add esp, 0x24
mov dword [ebp - 0x2b28], 0x22c
push esi
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [ebp - 0x2b2c], eax
cmp eax, 0xffffffff
je 0x1006b002
lea ecx, [ebp - 0x2b28]
push ecx
push eax
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x1006a7e9
nop word [eax + eax]
xor eax, eax
mov dword [ebp - 0x2b44], 0
lea ecx, [ebp - 0x2b04]
mov dword [ebp - 0x2b40], 7
mov word [ebp - 0x2b54], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1006a706
sub ecx, edx
lea eax, [ebp - 0x2b04]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2b54]
call fcn.10002b70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x28f4], edi
je 0x1006a772
movups xmm0, xmmword [ebp - 0x2b54]
mov dword [edi + 0x10], 0
xor eax, eax
mov dword [edi + 0x14], 0
mov edx, 7
movups xmmword [edi], xmm0
mov word [ebp - 0x2b54], ax
movq xmm0, qword [ebp - 0x2b44]
movq qword [edi + 0x10], xmm0
add edi, 0x18
mov dword [ebp - 0x28f8], edi
jmp 0x1006a791
lea eax, [ebp - 0x2b54]
push eax
push edi
lea ecx, [ebp - 0x28fc]
call fcn.10002d20
mov edx, dword [ebp - 0x2b40]
mov edi, dword [ebp - 0x28f8]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x1006a7cf
mov ecx, dword [ebp - 0x2b54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a7c5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b01f
push edx
push ecx
call fcn.1008bfe4
add esp, 8
lea eax, [ebp - 0x2b28]
push eax
push dword [ebp - 0x2b2c]
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x1006a6e0
push dword [ebp - 0x2b2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
mov dword [ebp - 0x2b38], 0
sub ecx, dword [ebp - 0x28fc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x2b3c], eax
je 0x1006afa8
xor eax, eax
nop word [eax + eax]
mov ecx, dword [ebp - 0x28fc]
lea eax, [eax + eax*2]
cmp dword [ecx + eax*8 + 0x14], 8
lea edi, [ecx + eax*8]
mov dword [ebp - 0x2b2c], edi
jb 0x1006a851
mov eax, dword [edi]
mov dword [ebp - 0x2b2c], eax
push 0x208
lea eax, [ebp - 0x1298]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b30], 0
lea esi, [ebp - 0xe90]
xor ecx, ecx
nop dword [eax]
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1298], ax
inc ecx
cmp ecx, 0x40
jb 0x1006a880
push dword [ebp - 0x2b2c]
lea eax, [ebp - 0x1298]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006a8c7
mov eax, dword [ebp - 0x2b30]
inc eax
mov dword [ebp - 0x2b30], eax
cmp eax, 5
jb 0x1006a877
xor eax, eax
jmp 0x1006a8cc
mov eax, 1
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006a8e6
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x14a0]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0x690]
nop dword [eax]
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x14a0], ax
inc ecx
cmp ecx, 0x40
jb 0x1006a912
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x14a0]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006a959
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 3
jb 0x1006a910
xor eax, eax
jmp 0x1006a95e
mov eax, 2
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006a978
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x16a8]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0xf10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x16a8], ax
inc ecx
cmp ecx, 0x40
jb 0x1006a9a2
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x16a8]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006a9e9
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 1
jb 0x1006a9a0
xor eax, eax
jmp 0x1006a9ee
mov eax, 4
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006aa08
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x18b0]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0x790]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x18b0], ax
inc ecx
cmp ecx, 0x40
jb 0x1006aa32
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x18b0]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006aa79
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 2
jb 0x1006aa30
xor eax, eax
jmp 0x1006aa7e
mov eax, 8
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006aa98
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x1ab8]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0xa10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1ab8], ax
inc ecx
cmp ecx, 0x40
jb 0x1006aac2
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x1ab8]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006ab09
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 2
jb 0x1006aac0
xor eax, eax
jmp 0x1006ab0e
mov eax, 0x10
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006ab28
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x1cc0]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0xb10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1cc0], ax
inc ecx
cmp ecx, 0x40
jb 0x1006ab52
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x1cc0]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006ab99
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 2
jb 0x1006ab50
xor eax, eax
jmp 0x1006ab9e
mov eax, 0x20
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006abb8
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x1ec8]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0x410]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1ec8], ax
inc ecx
cmp ecx, 0x40
jb 0x1006abe2
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x1ec8]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006ac29
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 2
jb 0x1006abe0
xor eax, eax
jmp 0x1006ac2e
mov eax, 0x40
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006ac48
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x20d0]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0x510]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x20d0], ax
inc ecx
cmp ecx, 0x40
jb 0x1006ac72
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x20d0]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006acb9
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 2
jb 0x1006ac70
xor eax, eax
jmp 0x1006acbe
mov eax, 0x80
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006acd8
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x22d8]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0x1090]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x22d8], ax
inc ecx
cmp ecx, 0x40
jb 0x1006ad02
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x22d8]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006ad49
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 1
jb 0x1006ad00
xor eax, eax
jmp 0x1006ad4e
mov eax, 0x100
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006ad68
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x24e0]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0x1010]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x24e0], ax
inc ecx
cmp ecx, 0x40
jb 0x1006ad92
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x24e0]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006add9
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 2
jb 0x1006ad90
xor eax, eax
jmp 0x1006adde
mov eax, 0x200
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006adf8
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x26e8]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0xc10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x26e8], ax
inc ecx
cmp ecx, 0x40
jb 0x1006ae22
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x26e8]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006ae69
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 2
jb 0x1006ae20
xor eax, eax
jmp 0x1006ae6e
mov eax, 0x400
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b30], edi
jb 0x1006ae88
mov eax, dword [edi]
mov dword [ebp - 0x2b30], eax
push 0x208
lea eax, [ebp - 0x28f0]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b2c], 0
lea esi, [ebp - 0x910]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x28f0], ax
inc ecx
cmp ecx, 0x40
jb 0x1006aeb2
push dword [ebp - 0x2b30]
lea eax, [ebp - 0x28f0]
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006aef9
mov eax, dword [ebp - 0x2b2c]
inc eax
mov dword [ebp - 0x2b2c], eax
cmp eax, 3
jb 0x1006aeb0
xor eax, eax
jmp 0x1006aefe
mov eax, 0x800
or dword [ebp - 0x2b34], eax
cmp dword [edi + 0x14], 8
jb 0x1006af0c
mov edi, dword [edi]
push 0x208
lea eax, [ebp - 0x2b04]
push 0
push eax
call fcn.1008da10
add esp, 0xc
mov dword [ebp - 0x2b30], 0
lea esi, [ebp - 0x310]
xor eax, eax
mov cx, word [esi]
add esi, 2
xor cx, 0x29
mov word [ebp + eax*2 - 0x2b04], cx
inc eax
cmp eax, 0x40
jb 0x1006af34
lea eax, [ebp - 0x2b04]
push edi
push eax
call fcn.10092559
add esp, 8
test eax, eax
je 0x1006af76
mov ecx, dword [ebp - 0x2b30]
inc ecx
mov dword [ebp - 0x2b30], ecx
cmp ecx, 6
jb 0x1006af32
xor eax, eax
jmp 0x1006af7b
mov eax, 0x1000
mov esi, dword [ebp - 0x2b34]
or esi, eax
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b34], esi
mov dword [ebp - 0x2b38], eax
cmp eax, dword [ebp - 0x2b3c]
jb 0x1006a830
mov edi, dword [ebp - 0x28f8]
mov eax, dword [ebp - 0x28fc]
test eax, eax
je 0x1006b002
push edi
push eax
call fcn.10002cb0
mov ecx, dword [ebp - 0x28f4]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x28fc]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, edi
shl ecx, 3
cmp ecx, 0x1000
jb 0x1006aff8
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b01f
push ecx
push edi
call fcn.1008bfe4
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008bffe
mov esp, ebp
pop ebp
ret
call fcn.10092486
int3