Function at 0x1000c980
Capabilities:
Encrypt data using speck
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xd8
mov edi, esp
mov word [esp], 0x101
mov byte [esp + 2], 1
mov dword [esp + 3], 0x2020202
mov word [esp + 7], 0x202
mov dword [esp + 9], 0x1010101
lea esi, [esp + 0x48]
push edi
push esi
call sym.sysinfo::common::system::System::new_with_specifics::h3676198e8ed760dd
add esp, 8
push 1
push 1
push esi
call sym.sysinfo::common::system::System::refresh_memory_specifics::h819056c519723975
add esp, 0xc
mov ecx, esi
mov edx, 1
mov dword [esp + 0x20], 1
call sym.__ZN7sysinfo7windows6system11SystemInner21refresh_cpu_specifics17hd323725b8e3d177cE.llvm.14058084406345062012
mov byte [esp], 1
mov dword [esp + 5], 0x2020202
mov dword [esp + 1], 0x2020101
sub esp, 0x14
mov dword [esp + 0x10], edi
mov dword [esp], esi
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0
call sym.sysinfo::common::system::System::refresh_processes_specifics::h8ec17f0f37c9f82f
add esp, 0x14
mov ebx, esp
mov ecx, ebx
call sym.__ZN3std3sys3pal7windows2os11current_exe17ha4f316e9c806e5b5E.llvm.10150728606014878797
mov esi, dword [esp]
mov eax, esi
mov dword [esp + 0x3c], esi
neg eax
jno 0x1000ca92
cmp byte [esp + 4], 3
jne 0x1000ca79
mov esi, dword [esp + 8]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x1000ca4a
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x1000ca68
cmp dword [ebx + 8], 9
jb 0x1000ca59
mov edi, dword [edi - 4]
mov eax, dword [0x100f2e2c]
push edi
push 0
push dword [eax]
call sub.kernel32.dll_HeapFree
mov eax, dword [0x100f2e2c]
push esi
push 0
push dword [eax]
call sub.kernel32.dll_HeapFree
mov ebx, esp
mov al, 1
xor ecx, ecx
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x74]
test edx, edx
jne 0x1000cd06
jmp 0x1000df70
mov eax, dword [esp + 4]
push dword [esp + 8]
mov dword [esp + 0x38], eax
push eax
call sym.std::path::Path::file_name::h056b0b4cd934bc5c
add esp, 8
mov cl, 1
test eax, eax
mov dword [esp + 0x28], ecx
je 0x1000cb0b
push edx
push eax
push ebx
call sym.std::sys::os_str::wtf8::Slice::to_string_lossy::h2b3242b8b5c1fd09
add esp, 0xc
mov edi, dword [esp + 8]
test edi, edi
mov dword [esp + 0x1c], edi
js 0x1000e047
mov ebx, dword [esp]
mov esi, dword [esp + 4]
je 0x1000cb1e
mov eax, dword [0x100f2e44]
movzx eax, byte [eax]
sub esp, 0xc
mov dword [esp + 8], edi
mov dword [esp + 4], 0
call sym.std::sys::alloc::windows::process_heap_alloc::hc2bfe060f1f208f4
mov edi, dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x1000cb23
mov eax, 1
push dword [esp + 0x1c]
push eax
call sym.alloc::raw_vec::handle_error::he63c9115d026ec98
xor ecx, ecx
mov edx, dword [esp + 0x74]
test edx, edx
jne 0x1000cd06
jmp 0x1000df70
mov eax, 1
push edi
push esi
mov dword [esp + 0x1c], eax
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
test ebx, 0x7fffffff
jne 0x1000cc84
test edi, edi
je 0x1000cc9b
mov eax, dword [0x100f2e44]
movzx eax, byte [eax]
sub esp, 0xc
mov dword [esp + 8], edi
mov dword [esp + 4], 0
call sym.std::sys::alloc::windows::process_heap_alloc::hc2bfe060f1f208f4
add esp, 0xc
test eax, eax
je 0x1000e053
mov ebx, eax
push edi
push dword [esp + 0x18]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
cmp edi, 8
mov ecx, ebx
mov dword [esp + 0x20], ebx
jb 0x1000ccb8
mov edx, dword [esp + 0x1c]
xor eax, eax
cmp edx, 0x20
jb 0x1000cc29
movdqa xmm0, xmmword [0x10073870]
movdqa xmm1, xmmword [0x10073880]
movdqa xmm2, xmmword [0x10073890]
mov eax, edx
lea ecx, [ebx + 0x10]
and eax, 0x7fffffe0
mov edx, eax
nop
movdqu xmm4, xmmword [ecx - 0x10]
movdqu xmm3, xmmword [ecx]
movdqa xmm5, xmm4
movdqa xmm6, xmm3
paddb xmm5, xmm0
paddb xmm6, xmm0
movdqa xmm7, xmm5
pminub xmm7, xmm1
pcmpeqb xmm7, xmm5
movdqa xmm5, xmm6
pminub xmm5, xmm1
pand xmm7, xmm2
pcmpeqb xmm5, xmm6
por xmm7, xmm4
pand xmm5, xmm2
movdqu xmmword [ecx - 0x10], xmm7
por xmm5, xmm3
movdqu xmmword [ecx], xmm5
add ecx, 0x20
add edx, 0xffffffe0
jne 0x1000cbc0
cmp dword [esp + 0x1c], eax
je 0x1000ccda
mov edx, dword [esp + 0x1c]
test dl, 0x18
je 0x1000ccb4
movdqa xmm0, xmmword [0x100738a0]
movdqa xmm1, xmmword [0x100738b0]
movdqa xmm2, xmmword [0x100738c0]
and edx, 0x7ffffff8
lea esi, [ebx + eax]
lea ecx, [ebx + edx]
sub eax, edx
nop
movq xmm3, qword [esi]
movdqa xmm4, xmm3
paddb xmm4, xmm0
movdqa xmm5, xmm4
pmaxub xmm5, xmm1
pcmpeqb xmm5, xmm4
pandn xmm5, xmm2
por xmm5, xmm3
movq qword [esi], xmm5
add esi, 8
add eax, 8
jne 0x1000cc50
cmp dword [esp + 0x1c], edx
jne 0x1000ccb8
jmp 0x1000ccda
mov eax, dword [0x100f2e2c]
push esi
push 0
push dword [eax]
call sub.kernel32.dll_HeapFree
test edi, edi
jne 0x1000cb46
xor ecx, ecx
mov dword [esp + 0x20], 1
mov ebx, esp
mov edx, dword [esp + 0x74]
test edx, edx
jne 0x1000cd06
jmp 0x1000df70
add eax, ebx
mov ecx, eax
add ebx, dword [esp + 0x1c]
nop dword [eax]
movzx eax, byte [ecx]
mov edx, eax
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, al
mov byte [ecx], dl
inc ecx
cmp ecx, ebx
jne 0x1000ccc0
mov eax, dword [0x100f2e2c]
push dword [esp + 0x14]
push 0
push dword [eax]
call sub.kernel32.dll_HeapFree
mov ecx, dword [esp + 0x1c]
mov ebx, esp
mov dword [esp + 0x28], 0
mov edx, dword [esp + 0x74]
test edx, edx
je 0x1000df70
mov edi, dword [esp + 0x68]
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], ecx
movdqa xmm0, xmmword [edi]
lea esi, [edi + 0x10]
pmovmskb eax, xmm0
not eax
test ax, ax
je 0x1000cd40
lea ecx, [eax - 1]
and ecx, eax
mov dword [esp + 0x38], ecx
jmp 0x1000cd6b
movdqa xmm0, xmmword [esi]
add edi, 0xfffff100
add esi, 0x10
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1000cd40
mov ecx, 0xfffffffe
sub ecx, eax
not eax
mov ebx, eax
and ebx, ecx
mov dword [esp + 0x38], ebx
mov ebx, esp
tzcnt eax, eax
dec edx
neg eax
mov dword [esp + 0x44], edx
imul eax, eax, 0xf0
push dword [edi + eax - 0xd0]
push dword [edi + eax - 0xd4]
push ebx
call sym.std::sys::os_str::wtf8::Slice::to_string_lossy::h2b3242b8b5c1fd09
add esp, 0xc
mov edx, dword [esp + 8]
test edx, edx
js 0x1000e030
mov ecx, dword [esp]
mov eax, dword [esp + 4]
mov dword [esp + 0x14], edx
mov dword [esp + 0x40], edi
mov dword [esp + 0x24], eax
je 0x1000cf30
mov eax, dword [0x100f2e44]
mov dword [esp + 0x2c], ecx
movzx eax, byte [eax]
sub esp, 0xc
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov ebx, edx
call sym.std::sys::alloc::windows::process_heap_alloc::hc2bfe060f1f208f4
add esp, 0xc
test eax, eax
je 0x1000e03b
mov edi, eax
mov dword [esp + 0x18], edi
push ebx
push dword [esp + 0x28]
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x18]
movdqa xmm5, xmmword [0x100738a0]
movdqa xmm6, xmmword [0x100738b0]
movdqa xmm7, xmmword [0x100738c0]
cmp ebx, 8
mov edx, ebx
jb 0x1000cf70
xor eax, eax
cmp edx, 0x20
jb 0x1000ced4
mov eax, edx
movdqa xmm5, xmmword [0x10073870]
movdqa xmm6, xmmword [0x10073880]
movdqa xmm7, xmmword [0x10073890]
mov edx, dword [esp + 0x18]
xor ecx, ecx
and eax, 0x7fffffe0
movdqu xmm1, xmmword [edx + ecx]
movdqu xmm0, xmmword [edx + ecx + 0x10]
movdqa xmm2, xmm1
movdqa xmm3, xmm0
paddb xmm2, xmm5
paddb xmm3, xmm5
movdqa xmm4, xmm2
pminub xmm4, xmm6
pcmpeqb xmm4, xmm2
movdqa xmm2, xmm3
pminub xmm2, xmm6
pand xmm4, xmm7
pcmpeqb xmm2, xmm3
por xmm4, xmm1
pand xmm2, xmm7
movdqu xmmword [edx + ecx], xmm4
por xmm2, xmm0
movdqu xmmword [edx + ecx + 0x10], xmm2
add ecx, 0x20
cmp eax, ecx
jne 0x1000ce50
mov edx, dword [esp + 0x14]
mov ebx, esp
cmp edx, eax
je 0x1000cfa0
test dl, 0x18
je 0x1000cf60
movdqa xmm5, xmmword [0x100738a0]
movdqa xmm6, xmmword [0x100738b0]
movdqa xmm7, xmmword [0x100738c0]
mov ebx, dword [esp + 0x18]
and edx, 0x7ffffff8
lea ecx, [edi + edx]
nop word cs:[eax + eax]
nop dword [eax + eax]
movq xmm0, qword [ebx + eax]
movdqa xmm1, xmm0
paddb xmm1, xmm5
movdqa xmm2, xmm1
pmaxub xmm2, xmm6
pcmpeqb xmm2, xmm1
pandn xmm2, xmm7
por xmm2, xmm0
movq qword [ebx + eax], xmm2
add eax, 8
cmp edx, eax
jne 0x1000cef0
mov eax, dword [esp + 0x14]
cmp eax, edx
mov edx, eax
jne 0x1000cf70
jmp 0x1000cf9e
mov dword [esp + 0x18], 1
mov eax, dword [esp + 0x1c]
test ecx, 0x7fffffff
je 0x1000cfb0
push dword [esp + 0x24]
push 0
mov eax, dword [0x100f2e2c]
push dword [eax]
call sub.kernel32.dll_HeapFree
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
jmp 0x1000cfb0
add eax, edi
mov ecx, eax
nop word cs:[eax + eax]
nop
add edi, edx
nop word cs:[eax + eax]
nop dword [eax]
movzx eax, byte [ecx]
mov edx, eax
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, al
mov byte [ecx], dl
inc ecx
cmp ecx, edi
jne 0x1000cf80
mov edx, dword [esp + 0x14]
mov ebx, esp
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x1c]
test ecx, 0x7fffffff
jne 0x1000cf44
cmp edx, eax
jne 0x1000cfe0
push eax
push dword [esp + 0x24]
push dword [esp + 0x20]
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x1000cfe0
cmp dword [esp + 0x30], 0
mov dword [esp + 0x30], 1
jg 0x1000e01b
nop dword [eax]
lea eax, [0x100e492e]
mov dword [esp + 0x24], esi
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x8316d45e
mov edx, dword [esp]
call sym.obfstr::xref::inner::hf7c6f7bdb1d5d054
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
mov esi, 0x176995ab
mov ebx, dword [eax + 0xc]
movzx eax, byte [eax + 0x10]
xor ecx, esi
xor al, 0x6f
mov dword [esp], ecx
mov ecx, 0x9e400fe5
xor edx, ecx
mov ecx, 0x6820e75b
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, 0xedbc1afe
mov edx, 0x11
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
xor ebx, ecx
mov dword [esp + 0xc], ebx
mov ebx, esp
mov byte [esp + 0x10], al
mov ecx, ebx
push edi
push dword [esp + 0x1c]
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e6ff9]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xda05c2d1
mov edx, dword [esp]
call sym.obfstr::xref::inner::h6e5f0d88f417de96
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
mov esi, 0xdeae1efb
movzx eax, byte [eax + 0xc]
xor ecx, esi
mov esi, dword [esp + 0x18]
xor al, 0xac
mov dword [esp], ecx
mov ecx, 0xb35f7823
xor edx, ecx
mov ecx, 0xd73df7ce
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xd
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
mov byte [esp + 0xc], al
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e9cdb]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xb30522dc
mov edx, dword [esp]
call sym.obfstr::xref::inner::ha253cdd3a32a985f
mov ecx, dword [eax]
mov edx, 0xea20c2af
xor ecx, edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp], ecx
mov ecx, 0xbcde2935
xor edx, ecx
mov ecx, 0x46ee0ce9
xor eax, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xc
mov dword [esp + 8], eax
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e6d65]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x92410020
mov edx, dword [esp]
call sym.obfstr::xref::inner::h421c5f7075568653
mov ecx, dword [eax]
mov edx, 0x8eabcf55
xor ecx, edx
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
mov ebx, dword [eax + 0xc]
movzx eax, word [eax + 0x10]
mov dword [esp], ecx
mov ecx, 0x1f638a55
xor edx, ecx
mov ecx, 0xab0ab561
xor al, 0x90
xor ah, 0xd2
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, 0x497b9df2
mov edx, 0x12
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
xor ebx, ecx
mov dword [esp + 0xc], ebx
mov ebx, esp
mov byte [esp + 0x10], al
mov byte [esp + 0x11], ah
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e1a7f]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x411fadb4
mov edx, dword [esp]
call sym.obfstr::xref::inner::h69ab7fe39f4c6efd
mov ecx, dword [eax]
mov edx, 0x10e36c62
xor ecx, edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp], ecx
mov ecx, 0xd08d4875
xor edx, ecx
mov ecx, 0x49f94234
xor eax, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xc
mov dword [esp + 8], eax
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100dfe07]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x7c523096
mov edx, dword [esp]
call sym.obfstr::xref::inner::hc003375d87d1b99b
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0x92eb2fda
xor edx, ecx
movzx ecx, byte [eax + 0xa]
movzx eax, word [eax + 8]
mov dword [esp], edx
mov edx, 0x15129e12
xor edi, edx
mov edx, 0xb
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ah, 0x52
xor al, 0x3a
xor cl, 0xcf
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov byte [esp + 0xa], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100debf1]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xdb79ed86
mov edx, dword [esp]
call sym.obfstr::xref::inner::h2906a70233487b9f
mov ecx, dword [eax]
mov edx, 0xd863e965
mov esi, 0xcac6382
xor ecx, edx
mov edx, dword [eax + 4]
xor edx, esi
mov esi, dword [esp + 0x18]
movzx eax, byte [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
mov dword [esp + 4], edx
mov edx, 9
xor al, 0x6c
mov byte [esp + 8], al
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e8f58]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x8af0e0d6
mov edx, dword [esp]
call sym.obfstr::xref::inner::h35f911e9ba8be078
mov ecx, dword [eax]
mov edx, 0xddcc1c32
xor ecx, edx
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
movzx eax, word [eax + 0xc]
mov dword [esp], ecx
mov ecx, 0x970411f7
xor edx, ecx
mov ecx, 0xb265962a
xor al, 0x3a
xor ah, 0x19
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xe
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
mov byte [esp + 0xc], al
mov byte [esp + 0xd], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e640e]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xcde714ea
mov edx, dword [esp]
call sym.obfstr::xref::inner::h9871721b32af2747
mov ecx, dword [eax]
mov edx, 0x68d0cead
mov esi, 0x51af93cf
xor ecx, edx
mov edx, dword [eax + 4]
xor edx, esi
mov esi, dword [esp + 0x18]
movzx eax, byte [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
mov dword [esp + 4], edx
mov edx, 9
xor al, 0xa4
mov byte [esp + 8], al
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e171c]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x78f54dc7
mov edx, dword [esp]
call sym.obfstr::xref::inner::h1d27e74902bd09d6
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0xcbf7d07c
xor edx, ecx
movzx ecx, byte [eax + 0xa]
movzx eax, word [eax + 8]
mov dword [esp], edx
mov edx, 0xef15880
xor edi, edx
mov edx, 0xb
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ah, 4
xor al, 0x70
xor cl, 0xc8
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov byte [esp + 0xa], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e7b98]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xfa8ebaee
mov edx, dword [esp]
call sym.obfstr::xref::inner::h2885240af1342734
mov ecx, dword [eax]
mov edx, 0xe1909dd3
mov esi, 0xb77a1c06
xor ecx, edx
mov edx, dword [eax + 4]
movzx eax, word [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
xor al, 0x1b
xor edx, esi
xor ah, 0x69
mov dword [esp + 4], edx
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov edx, 0xa
push edi
push dword [esp + 0x1c]
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100ec503]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xc8b3e613
mov edx, dword [esp]
call sym.obfstr::xref::inner::he96500a9656a2722
mov ecx, dword [eax]
mov edx, 0x6cab8cac
mov esi, 0xbafe4453
xor ecx, edx
mov edx, dword [eax + 4]
xor edx, esi
mov esi, dword [esp + 0x18]
movzx eax, word [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
mov dword [esp + 4], edx
mov edx, 0xa
xor al, 0x49
xor ah, 0xb0
mov byte [esp + 8], al
mov byte [esp + 9], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e370d]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x5ffc6ff8
mov edx, dword [esp]
call sym.obfstr::xref::inner::hb782984537c41db2
mov ecx, dword [eax]
mov edx, 0x32cb9f89
xor ecx, edx
movzx edx, byte [eax + 6]
movzx eax, word [eax + 4]
mov dword [esp], ecx
mov ecx, ebx
xor al, 0x94
xor ah, 0x7d
xor dl, 0x69
mov byte [esp + 4], al
mov byte [esp + 5], ah
mov byte [esp + 6], dl
mov edx, 7
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e532d]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x1dd51ac
mov edx, dword [esp]
call sym.obfstr::xref::inner::h87030fba38a040c0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, 0x36258bf0
xor ecx, edx
mov edx, 0x6c22c3fd
xor eax, edx
mov dword [esp], ecx
mov ecx, ebx
mov edx, 8
mov dword [esp + 4], eax
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e4969]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x5c7a5032
mov edx, dword [esp]
call sym.obfstr::xref::inner::h2675213f53b0ed6c
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, 0xaf8fd52e
xor ecx, edx
mov edx, 0xf06dc8db
xor eax, edx
mov dword [esp], ecx
mov ecx, ebx
mov edx, 8
mov dword [esp + 4], eax
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e20b6]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x6375f779
mov edx, dword [esp]
call sym.obfstr::xref::inner::hc04d56a4891823a3
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, 0xb04be106
xor ecx, edx
mov edx, 0x4103a153
xor eax, edx
mov dword [esp], ecx
mov ecx, ebx
mov edx, 8
mov dword [esp + 4], eax
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100ddae8]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x5de8201f
mov edx, dword [esp]
call sym.obfstr::xref::inner::hcd7bf361cca29faf
mov ecx, dword [eax]
mov edx, 0x32350674
mov esi, 0xcd822e29
xor ecx, edx
mov edx, dword [eax + 4]
movzx eax, byte [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
xor edx, esi
xor al, 0x4a
mov dword [esp + 4], edx
mov byte [esp + 8], al
mov edx, 9
push edi
push dword [esp + 0x1c]
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e08a0]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x199f21dd
mov edx, dword [esp]
call sym.obfstr::xref::inner::h87ab0f34b322a6f7
mov ecx, dword [eax]
mov edx, 0x389c5104
mov esi, 0xe52d831a
xor ecx, edx
mov edx, dword [eax + 4]
movzx eax, word [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
xor al, 0x1d
xor edx, esi
xor ah, 0xde
mov dword [esp + 4], edx
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov edx, 0xa
push edi
push dword [esp + 0x1c]
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e0554]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x2d81ecbb
mov edx, dword [esp]
call sym.obfstr::xref::inner::hf382917fabe5a3a9
mov ecx, dword [eax]
mov edx, 0xd182b7ad
mov esi, 0x699dd6d6
xor ecx, edx
mov edx, dword [eax + 4]
movzx eax, word [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
xor al, 0xd5
xor edx, esi
xor ah, 0x91
mov dword [esp + 4], edx
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov edx, 0xa
push edi
push dword [esp + 0x1c]
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e35bd]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xde0488a7
mov edx, dword [esp]
call sym.obfstr::xref::inner::h7342b71cd846f063
mov ecx, dword [eax]
mov edx, 0x4b06430c
mov esi, 0xef97d55f
xor ecx, edx
mov edx, dword [eax + 4]
movzx eax, word [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
xor al, 0xe1
xor edx, esi
xor ah, 0xc7
mov dword [esp + 4], edx
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov edx, 0xa
push edi
push dword [esp + 0x1c]
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e8548]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xc62bb4ad
mov edx, dword [esp]
call sym.obfstr::xref::inner::h69e490a3b9fcd280
mov ecx, dword [eax]
mov edx, 0x2ec58e74
mov esi, 0x7e637fd1
xor ecx, edx
mov edx, dword [eax + 4]
xor edx, esi
mov esi, dword [esp + 0x18]
movzx eax, word [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
mov dword [esp + 4], edx
mov edx, 0xa
xor al, 0xbd
xor ah, 0xb4
mov byte [esp + 8], al
mov byte [esp + 9], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e1fe4]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x191f252
mov edx, dword [esp]
call sym.obfstr::xref::inner::h415b788f99ddeb81
mov ecx, dword [eax]
mov edx, 0x59af8dd9
xor ecx, edx
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov ecx, 0xaa8bc3b3
xor edx, ecx
mov ecx, 0x8d44936d
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, 0xfa0ea3d9
mov edx, 0x14
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
xor ebx, ecx
mov ecx, 0xe0c70883
mov dword [esp + 0xc], ebx
mov ebx, esp
xor eax, ecx
mov dword [esp + 0x10], eax
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e6be0]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xc3aee360
mov edx, dword [esp]
call sym.obfstr::xref::inner::h6f2096328a3edf57
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0x3c081ea8
xor edx, ecx
movzx ecx, byte [eax + 0xa]
movzx eax, word [eax + 8]
mov dword [esp], edx
mov edx, 0xc47d2986
xor edi, edx
mov edx, 0xb
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ah, 0xfd
xor al, 0x20
xor cl, 0xf6
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov byte [esp + 0xa], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100ecd8c]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xd6702a6d
mov edx, dword [esp]
call sym.obfstr::xref::inner::he53a3da4ac5cfb13
mov ecx, dword [eax]
mov edx, 0x9f2dc61e
mov esi, 0xda2ca8c9
xor ecx, edx
mov edx, dword [eax + 4]
xor edx, esi
mov esi, dword [esp + 0x18]
movzx eax, word [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
mov dword [esp + 4], edx
mov edx, 0xa
xor al, 0x33
xor ah, 0x45
mov byte [esp + 8], al
mov byte [esp + 9], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e0c17]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x98347307
mov edx, dword [esp]
call sym.obfstr::xref::inner::h43fb70e37072d3d9
mov ecx, dword [eax]
mov edx, 0x21db48bf
xor ecx, edx
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
movzx eax, word [eax + 0xc]
mov dword [esp], ecx
mov ecx, 0x515d17f9
xor edx, ecx
mov ecx, 0x87eb8b28
xor al, 0x8f
xor ah, 0xfd
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xe
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
mov byte [esp + 0xc], al
mov byte [esp + 0xd], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100de946]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xd05aa40a
mov edx, dword [esp]
call sym.obfstr::xref::inner::h55f9ecd2908d1c22
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0xd674d9f1
mov ebx, dword [eax + 8]
xor edx, ecx
movzx ecx, byte [eax + 0xe]
movzx eax, word [eax + 0xc]
mov dword [esp], edx
mov edx, 0xe41135d4
xor edi, edx
mov edx, 0x97d144a1
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ebx, edx
mov edx, 0xf
xor ah, 0x5b
mov dword [esp + 8], ebx
mov ebx, esp
xor al, 0x63
xor cl, 0xe2
mov byte [esp + 0xc], al
mov byte [esp + 0xd], ah
mov byte [esp + 0xe], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e4e38]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x3a2fd4d7
mov edx, dword [esp]
call sym.obfstr::xref::inner::h7d50754f2c9ad435
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0x6bb9cd0e
xor edx, ecx
movzx ecx, byte [eax + 0xa]
movzx eax, word [eax + 8]
mov dword [esp], edx
mov edx, 0x111ca442
xor edi, edx
mov edx, 0xb
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ah, 0x77
xor al, 0x88
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov byte [esp + 0xa], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e778d]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xce2f4e4
mov edx, dword [esp]
call sym.obfstr::xref::inner::h6a677a47c4d49f57
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0xba944dae
xor edx, ecx
movzx ecx, byte [eax + 0xa]
movzx eax, word [eax + 8]
mov dword [esp], edx
mov edx, 0x571313fe
xor edi, edx
mov edx, 0xb
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ah, 0xe0
xor al, 0x48
xor cl, 0xf5
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov byte [esp + 0xa], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e8d04]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x238b25e6
mov edx, dword [esp]
call sym.obfstr::xref::inner::hcc7e44f6757ddc31
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0x617f4bfd
xor edx, ecx
movzx ecx, byte [eax + 0xa]
movzx eax, word [eax + 8]
mov dword [esp], edx
mov edx, 0x8815505d
xor edi, edx
mov edx, 0xb
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ah, 0xcb
xor al, 0x12
xor cl, 0xc2
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov byte [esp + 0xa], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e85b1]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xa179a414
mov edx, dword [esp]
call sym.obfstr::xref::inner::h93a56be168a6a7ac
mov ecx, dword [eax]
mov edx, 0x9db341c7
mov esi, 0x44f0bb42
xor ecx, edx
mov edx, dword [eax + 4]
xor edx, esi
mov esi, dword [esp + 0x18]
movzx eax, word [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
mov dword [esp + 4], edx
mov edx, 0xa
xor al, 0x4e
xor ah, 0x83
mov byte [esp + 8], al
mov byte [esp + 9], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e9717]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x5c90a39
mov edx, dword [esp]
call sym.obfstr::xref::inner::h6a9a80ea06905779
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0x50a9304
mov ebx, dword [eax + 8]
xor edx, ecx
movzx ecx, byte [eax + 0xe]
movzx eax, word [eax + 0xc]
mov dword [esp], edx
mov edx, 0xba2d2e91
xor edi, edx
mov edx, 0xe01f2cae
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ebx, edx
mov edx, 0xf
xor ah, 0x23
mov dword [esp + 8], ebx
mov ebx, esp
xor al, 0xb
xor cl, 0xd7
mov byte [esp + 0xc], al
mov byte [esp + 0xd], ah
mov byte [esp + 0xe], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100ecada]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xe0dc1109
mov edx, dword [esp]
call sym.obfstr::xref::inner::h3a647409baf830a6
mov ecx, dword [eax]
mov edx, 0x71930fe
mov esi, 0x1daefdd
xor ecx, edx
mov edx, dword [eax + 4]
xor edx, esi
mov esi, dword [esp + 0x18]
movzx eax, byte [eax + 8]
mov dword [esp], ecx
mov ecx, ebx
mov dword [esp + 4], edx
mov edx, 9
xor al, 0x6d
mov byte [esp + 8], al
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e4d43]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x3857bbd2
mov edx, dword [esp]
call sym.obfstr::xref::inner::h61254c16888b5916
mov ecx, dword [eax]
mov edx, 0x9768e531
xor ecx, edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp], ecx
mov ecx, 0xf21e9a16
xor edx, ecx
mov ecx, 0xad51db8
xor eax, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xc
mov dword [esp + 8], eax
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100dff4e]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x83bbe013
mov edx, dword [esp]
call sym.obfstr::xref::inner::h5cd47d7e8e1cb8c8
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, 0xb0d54f20
xor edx, ecx
movzx ecx, byte [eax + 0xa]
movzx eax, word [eax + 8]
mov dword [esp], edx
mov edx, 0x3f1934b8
xor edi, edx
mov edx, 0xb
mov dword [esp + 4], edi
mov edi, dword [esp + 0x14]
xor ah, 0x37
xor al, 0x9f
xor cl, 0x49
mov byte [esp + 8], al
mov byte [esp + 9], ah
mov byte [esp + 0xa], cl
mov ecx, ebx
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e9161]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xc9ec8a4e
mov edx, dword [esp]
call sym.obfstr::xref::inner::h2dbbe7220e5f9bd5
mov ecx, dword [eax]
mov edx, 0xabfe89b3
xor ecx, edx
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
movzx eax, word [eax + 0xc]
mov dword [esp], ecx
mov ecx, 0x23d24e37
xor edx, ecx
mov ecx, 0x2887fc9d
xor al, 0xf7
xor ah, 0xd5
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xe
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
mov byte [esp + 0xc], al
mov byte [esp + 0xd], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e2d23]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0xf74aa3b4
mov edx, dword [esp]
call sym.obfstr::xref::inner::he3c56872eb64a430
mov ecx, dword [eax]
mov edx, 0x5f889bf2
xor ecx, edx
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
movzx eax, word [eax + 0xc]
mov dword [esp], ecx
mov ecx, 0xd2294ca9
xor edx, ecx
mov ecx, 0x8c3e3f97
xor al, 0x51
xor ah, 0xb4
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xe
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
mov byte [esp + 0xc], al
mov byte [esp + 0xd], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100e1d6d]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x5dbbefb
mov edx, dword [esp]
call sym.obfstr::xref::inner::h6d1328079cb58ee4
mov ecx, dword [eax]
mov edx, 0x6faa07e6
xor ecx, edx
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
movzx eax, word [eax + 0xc]
mov dword [esp], ecx
mov ecx, 0xc58cd9ed
xor edx, ecx
mov ecx, 0x889b8015
xor al, 0x79
xor ah, 0xd7
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xe
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
mov byte [esp + 0xc], al
mov byte [esp + 0xd], ah
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
lea eax, [0x100ea697]
mov dword [esp], eax
mov ecx, dword [esp]
mov dword [esp], 0x114c1e78
mov edx, dword [esp]
call sym.obfstr::xref::inner::h284015ca1531a22b
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
mov esi, 0x5f003b57
movzx eax, byte [eax + 0xc]
xor ecx, esi
mov esi, dword [esp + 0x18]
xor al, 0xd5
mov dword [esp], ecx
mov ecx, 0x55341b22
xor edx, ecx
mov ecx, 0x1c56314a
xor edi, ecx
mov dword [esp + 4], edx
mov ecx, ebx
mov edx, 0xd
mov dword [esp + 8], edi
mov edi, dword [esp + 0x14]
mov byte [esp + 0xc], al
push edi
push esi
call fcn.10009290
add esp, 8
test al, al
jne 0x1000dfa1
test edi, edi
je 0x1000df58
push esi
push 0
mov eax, dword [0x100f2e2c]
push dword [eax]
call sub.kernel32.dll_HeapFree
mov edx, dword [esp + 0x44]
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
test edx, edx
jne 0x1000cd23
cmp byte [esp + 0x28], 0
jne 0x1000df89
mov eax, dword [0x100f2e2c]
push dword [esp + 0x20]
push 0
push dword [eax]
call sub.kernel32.dll_HeapFree
test dword [esp + 0x3c], 0x7fffffff
mov ecx, dword [esp + 0x34]
je 0x1000e00a
mov eax, dword [0x100f2e2c]
push ecx
push 0
jmp 0x1000e003
call sub.kernel32.dll_GetCurrentProcessId
push eax
call sub.kernel32.dll_DebugActiveProcess
test eax, eax
je 0x1000dfbd
call sub.kernel32.dll_GetCurrentProcess
push 1
push eax
call sub.kernel32.dll_TerminateProcess
mov esi, dword [esp + 0x3c]
test edi, edi
je 0x1000dfd7
push dword [esp + 0x18]
push 0
mov eax, dword [0x100f2e2c]
push dword [eax]
call sub.kernel32.dll_HeapFree
cmp byte [esp + 0x28], 0
jne 0x1000dff0
push dword [esp + 0x20]
push 0
mov eax, dword [0x100f2e2c]
push dword [eax]
call sub.kernel32.dll_HeapFree
test esi, 0x7fffffff
je 0x1000e00a
push dword [esp + 0x34]
push 0
mov eax, dword [0x100f2e2c]
push dword [eax]
call sub.kernel32.dll_HeapFree
lea ecx, [esp + 0x48]
call sym.core::ptr::drop_in_place_LT_sysinfo..common..system..System_GT_::h036c6a6cf8d70a9d
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call sub.kernel32.dll_GetCurrentProcessId
push eax
call sub.kernel32.dll_DebugActiveProcess
mov edi, dword [esp + 0x14]
test eax, eax
jne 0x1000dfb0
jmp 0x1000dfbd
mov ebx, edx
xor eax, eax
push ebx
push eax
call sym.alloc::raw_vec::handle_error::he63c9115d026ec98
mov eax, 1
push ebx
push eax
call sym.alloc::raw_vec::handle_error::he63c9115d026ec98
xor eax, eax
push dword [esp + 0x1c]
push eax
call sym.alloc::raw_vec::handle_error::he63c9115d026ec98
push edi
push 1
call sym.alloc::raw_vec::handle_error::he63c9115d026ec98
nop dword [eax + eax]