Function at 0x10113150
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101e634d
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x102924c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], 0
mov eax, dword fs:[0x30]
mov byte [0x103bc6a0], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x74], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x34], ecx
cmp ecx, esi
je 0x101131f9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x101131f9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop word [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x101131f2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x101131d5
cmp esi, 0x4a8ebb15
je 0x101131fd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x101131c0
mov eax, dword [eax]
jmp 0x10113195
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x74]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x68], eax
add esp, 4
mov eax, dword fs:[0x30]
mov dword [ebp - 0x64], edx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x74], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x34], ecx
cmp ecx, esi
je 0x10113294
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x10113294
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x1011328d
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x10113270
cmp esi, 0x7bf71256
je 0x10113298
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x10113255
mov eax, dword [eax]
jmp 0x10113230
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x74]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x68]
add eax, edx
push ecx
call eax
mov ebx, dword [ebp - 0x14]
add esp, 4
mov edi, dword [0x103bc704]
test edi, edi
je 0x101132cf
mov eax, dword [edi + 0x18]
or ebx, 1
jmp 0x101132d4
or ebx, 2
xor eax, eax
mov ecx, ebx
or ecx, 4
mov edx, ecx
and edx, 0xfffffffd
test bl, 2
cmove edx, ecx
lea ecx, [ebp - 0x20]
mov esi, edx
and esi, 0xfffffffe
test dl, 1
cmove esi, edx
test eax, eax
jne 0x10113368
mov edx, 0x515dc51c
call fcn.10110f00
movq xmm0, qword [eax]
movq qword [0x103bc704], xmm0
mov edi, dword [0x103bc704]
mov eax, dword [eax + 8]
mov dword [0x103bc70c], eax
test edi, edi
je 0x10113328
mov eax, dword [edi + 0x18]
mov ecx, 0x28
jmp 0x1011332f
xor eax, eax
mov ecx, 0x30
or esi, ecx
mov edx, esi
mov ecx, esi
and edx, 0xffffffef
test cl, 0x10
cmove edx, esi
mov ebx, edx
and ebx, 0xfffffff7
test dl, 8
cmove ebx, edx
test eax, eax
jne 0x101132c3
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0xa
mov dword [ebp - 0x6c], eax
call fcn.10115970
jmp 0x101132bd
mov edx, 0xa3e6f6c3
call fcn.10110f00
mov edx, 0xc0323159
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc6a4], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc6ac], eax
call fcn.10110f00
mov edx, 0x4f644736
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc6b0], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc6b8], eax
call fcn.10110f00
mov edx, 0x8ec4c73b
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc6bc], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc6c4], eax
call fcn.10110f00
mov edx, 0x6c5a4374
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc6c8], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc6d0], eax
call fcn.10110f00
mov edx, 0x38450191
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc6d4], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc6dc], eax
call fcn.10110f00
mov edx, 0x990704d7
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc6e0], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc6e8], eax
call fcn.10110f00
mov edx, 0x2935fa11
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc6ec], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc6f4], eax
call fcn.10110f00
mov edx, 0x293f84bd
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc6f8], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc700], eax
call fcn.10110f00
mov edx, 0xd0849acf
lea ecx, [ebp - 0x20]
movq xmm0, qword [eax]
movq qword [0x103bc710], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc718], eax
call fcn.10110f00
push 0xe682dd7e
mov edx, 0x103bc6a4
lea ecx, [ebp - 0x14]
movq xmm0, qword [eax]
movq qword [0x103bc71c], xmm0
mov eax, dword [eax + 8]
mov dword [0x103bc724], eax
call fcn.100745a0
push 0x9053f9c2
mov edx, 0x103bc6a4
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
mov dword [0x103babf8], eax
call fcn.100745a0
mov eax, dword [eax]
mov dword [0x103babf4], eax
push 0xf4d8b55
mov edx, 0x103bc6a4
lea ecx, [ebp - 0x14]
call fcn.100745a0
push 0x820621f3
mov edx, 0x103bc6a4
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
mov dword [0x103babec], eax
call fcn.100745a0
push 0xbe4d5ef8
mov edx, 0x103bc6a4
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
mov dword [0x103babfc], eax
call fcn.100745a0
push 0xb0c98c53
mov edx, 0x103bc6a4
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
mov dword [0x103babe4], eax
call fcn.100745a0
push 0x76991bcc
mov edx, 0x103bc6b0
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
mov dword [0x103bac04], eax
call fcn.100745a0
push 0x656108c4
mov edx, 0x103bc6b0
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
mov dword [0x103babe8], eax
call fcn.100745a0
push 0xe8692330
mov edx, 0x103bc6bc
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
mov dword [0x103babf0], eax
call fcn.100745a0
push 0x307abd39
mov edx, 0x103bc6c8
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
mov dword [0x103bac00], eax
call fcn.100745a0
add esp, 0x28
lea ecx, [ebp - 0x44]
xorps xmm0, xmm0
mov eax, dword [eax]
mov dword [0x103bac08], eax
movq qword [ebp - 0x44], xmm0
mov dword [ebp - 0x3c], 0
call fcn.1007c580
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x20]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movq qword [ebp - 0x20], xmm0
call fcn.1007c580
mov dword [ebp - 0x34], 0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.10073b60
test al, al
je 0x101137c9
mov edi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x74], edi
cmp ebx, edi
je 0x101137c9
nop dword [eax]
push 0xbd1dd4d8
mov edx, ebx
lea ecx, [ebp - 0x14]
call fcn.100745a0
add esp, 4
mov esi, dword [eax]
mov dword [ebp - 0x34], esi
test esi, esi
je 0x101137be
mov eax, dword [0x103babe4]
lea ecx, [ebp - 0x60]
push 0x1c
push ecx
push esi
call eax
test eax, eax
je 0x101137be
mov eax, dword [ebp - 0x4c]
test al, 1
jne 0x101137be
test eax, 0x100
jne 0x101137be
cmp byte [esi + 4], 0xe9
jne 0x10113724
mov eax, dword [esi + 5]
test eax, eax
jne 0x10113674
mov dword [ebp - 0x34], eax
jmp 0x101137be
add esi, 9
add esi, eax
mov dword [ebp - 0x34], esi
je 0x101137be
cmp byte [esi + 5], 0x35
jne 0x101137be
add esi, 6
mov dword [ebp - 0x6c], esi
mov byte [ebp - 4], 3
je 0x101136d3
mov edi, 2
nop dword [eax]
test esi, esi
je 0x101136d0
mov eax, dword [0x103babe4]
lea ecx, [ebp - 0x60]
push 0x1c
push ecx
push esi
call eax
test eax, eax
je 0x101136d0
mov eax, dword [ebp - 0x4c]
test al, 1
jne 0x101136d0
test eax, 0x100
jne 0x101136d0
mov esi, dword [esi]
sub edi, 1
jne 0x101136a0
mov edi, dword [ebp - 0x74]
jmp 0x101136d5
mov edi, dword [ebp - 0x74]
xor esi, esi
mov byte [ebp - 4], 2
test esi, esi
je 0x101137be
mov eax, dword [esi + 4]
test eax, eax
je 0x10113718
push eax
lea ecx, [ebp - 0x60]
call fcn.10016900
mov byte [ebp - 4], 4
mov eax, dword [esi]
call eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x44]
call fcn.10115d70
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 2
call fcn.10016860
mov esi, dword [esi + 8]
test esi, esi
jne 0x101136e1
jmp 0x101137be
cmp byte [esi + 2], 0x35
jne 0x101137be
add esi, 3
mov dword [ebp - 0x6c], esi
mov byte [ebp - 4], 6
je 0x10113773
mov edi, 2
nop
test esi, esi
je 0x10113770
mov eax, dword [0x103babe4]
lea ecx, [ebp - 0x60]
push 0x1c
push ecx
push esi
call eax
test eax, eax
je 0x10113770
mov eax, dword [ebp - 0x4c]
test al, 1
jne 0x10113770
test eax, 0x100
jne 0x10113770
mov esi, dword [esi]
sub edi, 1
jne 0x10113740
mov edi, dword [ebp - 0x74]
jmp 0x10113775
mov edi, dword [ebp - 0x74]
xor esi, esi
mov byte [ebp - 4], 2
test esi, esi
je 0x101137be
nop dword [eax]
mov eax, dword [esi + 4]
test eax, eax
je 0x101137b7
push eax
lea ecx, [ebp - 0x60]
call fcn.10016900
mov byte [ebp - 4], 7
mov eax, dword [esi]
call eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x44]
call fcn.10115d70
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 2
call fcn.10016860
mov esi, dword [esi + 8]
test esi, esi
jne 0x10113780
add ebx, 0xc
cmp ebx, edi
jne 0x10113610
lea ecx, [ebp - 0x20]
call fcn.10015940
push 1
push 0
push 0x73e5f5e2
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 9
call fcn.10115a90
push 1
push 0
push 0x5705c68d
lea ecx, [ebp - 0x44]
mov dword [0x103bc728], eax
call fcn.10115a90
push 1
push 0
push 0xcde34b18
lea ecx, [ebp - 0x44]
mov dword [0x103bc72c], eax
call fcn.10115a90
push 1
push 0
push 0x317b804d
lea ecx, [ebp - 0x44]
mov dword [0x103bc730], eax
call fcn.10115a90
push 1
push 0
push 0xc753f6ce
lea ecx, [ebp - 0x44]
mov dword [0x103bc734], eax
call fcn.10115a90
push 1
push 0
push 0x8a6910d0
lea ecx, [ebp - 0x44]
mov dword [0x103bc738], eax
call fcn.10115a90
push 1
push 0
push 0x187428c9
lea ecx, [ebp - 0x44]
mov dword [0x103bc73c], eax
call fcn.10115a90
push 1
push 0
push 0xe0111286
lea ecx, [ebp - 0x44]
mov dword [0x103bc740], eax
call fcn.10115a90
push 1
push 0
push 0xfe7ea68f
lea ecx, [ebp - 0x44]
mov dword [0x103bc744], eax
call fcn.10115a90
push 1
push 0
push 0x85100fff
lea ecx, [ebp - 0x44]
mov dword [0x103bc748], eax
call fcn.10115a90
push 1
push 0
push 0x9809589e
lea ecx, [ebp - 0x44]
mov dword [0x103bc74c], eax
call fcn.10115a90
push 1
push 0
push 0xa685e44e
lea ecx, [ebp - 0x44]
mov dword [0x103bc750], eax
call fcn.10115a90
push 1
push 0
push 0xfacb77d4
lea ecx, [ebp - 0x44]
mov dword [0x103bc754], eax
call fcn.10115a90
push 1
push 0
push 0x4a1925fd
lea ecx, [ebp - 0x44]
mov dword [0x103bc75c], eax
call fcn.10115a90
push 1
push 0
push 0x56b733bb
lea ecx, [ebp - 0x44]
mov dword [0x103bc760], eax
call fcn.10115a90
push 1
push 0
push 0x2f3a40fd
lea ecx, [ebp - 0x44]
mov dword [0x103bc764], eax
call fcn.10115a90
push 1
push 0
push 0x53323cc
lea ecx, [ebp - 0x44]
mov dword [0x103bc768], eax
call fcn.10115a90
push 1
push 0
push 0x9910a549
lea ecx, [ebp - 0x44]
mov dword [0x103bc76c], eax
call fcn.10115a90
push 1
push 1
push 0x1224e219
lea ecx, [ebp - 0x44]
mov dword [0x103bc770], eax
call fcn.10115c00
push 1
push 0
push 0x41ece977
lea ecx, [ebp - 0x44]
mov dword [0x103bc774], eax
call fcn.10115a90
push 1
push 0
push 0xabe9412f
lea ecx, [ebp - 0x44]
mov dword [0x103bc778], eax
call fcn.10115a90
push 1
push 0
push 0xc7fe8bbb
lea ecx, [ebp - 0x44]
mov dword [0x103bc77c], eax
call fcn.10115a90
push 1
push 0
push 0xcb63bd96
lea ecx, [ebp - 0x44]
mov dword [0x103bc780], eax
call fcn.10115a90
mov ebx, dword [0x103bc72c]
mov dword [0x103bc784], eax
mov ebx, dword [ebx + 0x30]
jmp 0x10113a1c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x101139f0
xor edx, edx
test ecx, ecx
je 0x10113a19
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113a00
cmp esi, 0x5c6e1222
je 0x10113a20
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x101139e0
mov dword [0x103bc7c8], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113a6c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113a40
xor edx, edx
test ecx, ecx
je 0x10113a69
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113a50
cmp esi, 0x6586ec6a
je 0x10113a70
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113a31
mov dword [0x103bc7cc], ebx
mov ebx, dword [0x103bc72c]
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x74], eax
test eax, eax
je 0x10113ac6
mov edi, dword [eax + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113a90
xor edx, edx
test ecx, ecx
je 0x10113abc
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113aa0
mov eax, dword [ebp - 0x74]
cmp esi, 0x8d39bde6
je 0x10113acb
mov eax, dword [eax + 4]
mov dword [ebp - 0x74], eax
test eax, eax
jne 0x10113a86
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [0x103bc7d0], eax
mov ebx, dword [ebx + 0x30]
jmp 0x10113b0c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113ae0
xor edx, edx
test ecx, ecx
je 0x10113b09
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113af0
cmp esi, 0x8c8dc452
je 0x10113b10
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113ad5
mov eax, dword [0x103bc72c]
mov dword [0x103bc7d4], ebx
mov ebx, dword [eax + 0x30]
jmp 0x10113b5c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113b30
xor edx, edx
test ecx, ecx
je 0x10113b59
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113b40
cmp esi, 0x58e37709
je 0x10113b60
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113b20
mov dword [0x103bc7d8], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113bac
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113b80
xor edx, edx
test ecx, ecx
je 0x10113ba9
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113b90
cmp esi, 0x7a7ef71d
je 0x10113bb0
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113b71
mov dword [0x103bc7dc], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113bfc
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113bd0
xor edx, edx
test ecx, ecx
je 0x10113bf9
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113be0
cmp esi, 0x3e2a4345
je 0x10113c00
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113bc1
mov dword [0x103bc7e0], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113c4c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113c20
xor edx, edx
test ecx, ecx
je 0x10113c49
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113c30
cmp esi, 0x2f5504fa
je 0x10113c50
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113c11
mov dword [0x103bc7e4], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113c9c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113c70
xor edx, edx
test ecx, ecx
je 0x10113c99
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113c80
cmp esi, 0xad8af3df
je 0x10113ca0
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113c61
mov dword [0x103bc7e8], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113cec
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [ecx + edi], 0
jne 0x10113cc0
xor edx, edx
test ecx, ecx
je 0x10113ce9
nop dword [eax]
movsx eax, byte [edx + edi]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113cd0
cmp esi, 0xac0e930c
je 0x10113cf0
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113cb1
mov dword [0x103bc7ec], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113d3c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113d10
xor edx, edx
test ecx, ecx
je 0x10113d39
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113d20
cmp esi, 0x82104778
je 0x10113d40
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113d01
mov dword [0x103bc7f0], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113d8c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113d60
xor edx, edx
test ecx, ecx
je 0x10113d89
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113d70
cmp esi, 0xa84213b4
je 0x10113d90
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113d51
mov dword [0x103bc7f4], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113ddc
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113db0
xor edx, edx
test ecx, ecx
je 0x10113dd9
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113dc0
cmp esi, 0x16cc57ac
je 0x10113de0
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113da1
mov dword [0x103bc7f8], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113e2c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113e00
xor edx, edx
test ecx, ecx
je 0x10113e29
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113e10
cmp esi, 0xa9bf35
je 0x10113e30
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113df1
mov dword [0x103bc7fc], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113e7c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113e50
xor edx, edx
test ecx, ecx
je 0x10113e79
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113e60
cmp esi, 0xadc3dc05
je 0x10113e80
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113e41
mov dword [0x103bc800], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113ecc
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113ea0
xor edx, edx
test ecx, ecx
je 0x10113ec9
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113eb0
cmp esi, 0xe5abc68c
je 0x10113ed0
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113e91
mov dword [0x103bc804], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113f1c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113ef0
xor edx, edx
test ecx, ecx
je 0x10113f19
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113f00
cmp esi, 0x95e5daaf
je 0x10113f20
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113ee1
mov dword [0x103bc808], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113f6c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113f40
xor edx, edx
test ecx, ecx
je 0x10113f69
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113f50
cmp esi, 0x658280e7
je 0x10113f70
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113f31
mov dword [0x103bc80c], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x10113fbc
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113f90
xor edx, edx
test ecx, ecx
je 0x10113fb9
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113fa0
cmp esi, 0xcf4e1864
je 0x10113fc0
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113f81
mov dword [0x103bc810], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x1011400c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10113fe0
xor edx, edx
test ecx, ecx
je 0x10114009
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10113ff0
cmp esi, 0x90f473ab
je 0x10114010
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10113fd1
mov dword [0x103bc814], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x1011405c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10114030
xor edx, edx
test ecx, ecx
je 0x10114059
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10114040
cmp esi, 0x731ec79a
je 0x10114060
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10114021
mov dword [0x103bc830], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x101140ac
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10114080
xor edx, edx
test ecx, ecx
je 0x101140a9
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10114090
cmp esi, 0xc12e8fe5
je 0x101140b0
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10114071
mov dword [0x103bc818], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x101140fc
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x101140d0
xor edx, edx
test ecx, ecx
je 0x101140f9
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x101140e0
cmp esi, 0x1aef2a38
je 0x10114100
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x101140c1
mov dword [0x103bc81c], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x1011414c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10114120
xor edx, edx
test ecx, ecx
je 0x10114149
nop dword [eax]
movsx eax, byte [edi + edx]
inc edx
xor eax, esi
imul esi, eax, 0x1000193
cmp edx, ecx
jb 0x10114130
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x10114111
mov dword [0x103bc820], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x1011419c
mov edi, dword [ebx + 0xc]
mov esi, 0x811c9dc5
xor ecx, ecx
nop dword [eax + eax]
inc ecx
cmp byte [edi + ecx], 0
jne 0x10114170
test ebx, ebx
jne 0x10114161
mov dword [0x103bc824], ebx
mov ebx, dword [0x103bc72c]
mov ebx, dword [ebx + 0x30]
jmp 0x101141ec