Function at 0x1002b3b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Get graphical window text
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1ec
mov eax, dword [0x100ef0f8]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100f29c4]
xor edx, edx
mov eax, dword fs:[0x2c]
push ebx
push esi
push edi
mov dword [ebp - 0x1e4], edx
lea edi, [eax + ecx*4]
nop dword [eax]
lea ecx, [edx + edx*4]
xor ebx, ebx
shl ecx, 2
mov dword [ebp - 0x1e8], ecx
nop
lea eax, [ebx + ebx*4]
shl eax, 2
push ecx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x108]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x100f4174
call fcn.10083967
add esp, 4
test eax, eax
jne 0x1002c5b2
push 0x100f4174
mov dword [0x100f38fc], 1
call fcn.1008398c
mov esi, dword [edi]
add esp, 4
mov eax, dword [0x10101dd0]
mov dword [ebp - 0x128], 0x77626261
mov dword [ebp - 0x124], 0x2e696c6a
cmp eax, dword [esi + 4]
jle 0x1002b4a7
push 0x10101dd0
call fcn.10084984
add esp, 4
cmp dword [0x10101dd0], 0xffffffff
jne 0x1002b4a7
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x124]
push 0x100c4dc0
mov dword [0x10101e90], eax
mov dword [0x10101e94], ecx
call fcn.10084d5f
add esp, 4
push 0x10101dd0
call fcn.1008493a
add esp, 4
mov al, byte [0x10101e97]
test al, al
je 0x1002b4e8
xor byte [0x10101e90], 0x2e
xor byte [0x10101e91], 0x2e
xor byte [0x10101e92], 0x2e
xor byte [0x10101e93], 0x2e
xor byte [0x10101e94], 0x2e
xor byte [0x10101e95], 0x2e
xor byte [0x10101e96], 0x2e
xor al, 0x2e
mov byte [0x10101e97], al
lea eax, [ebp - 0x108]
push 0x10101e90
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e2c]
mov dword [ebp - 0x130], 0x57424261
mov dword [ebp - 0x12c], 0x2e494c6a
cmp eax, dword [esi + 4]
jle 0x1002b56c
push 0x10101e2c
call fcn.10084984
add esp, 4
cmp dword [0x10101e2c], 0xffffffff
jne 0x1002b56c
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
push 0x100c4db0
mov dword [0x10101e70], eax
mov dword [0x10101e74], ecx
call fcn.10084d5f
add esp, 4
push 0x10101e2c
call fcn.1008493a
add esp, 4
mov al, byte [0x10101e77]
test al, al
je 0x1002b5ad
xor byte [0x10101e70], 0x2e
xor byte [0x10101e71], 0x2e
xor byte [0x10101e72], 0x2e
xor byte [0x10101e73], 0x2e
xor byte [0x10101e74], 0x2e
xor byte [0x10101e75], 0x2e
xor byte [0x10101e76], 0x2e
xor al, 0x2e
mov byte [0x10101e77], al
lea eax, [ebp - 0x108]
push 0x10101e70
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e34]
mov dword [ebp - 0x138], 0x57424241
mov dword [ebp - 0x134], 0x2e494c4a
cmp eax, dword [esi + 4]
jle 0x1002b631
push 0x10101e34
call fcn.10084984
add esp, 4
cmp dword [0x10101e34], 0xffffffff
jne 0x1002b631
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
push 0x100c4da0
mov dword [0x10101e60], eax
mov dword [0x10101e64], ecx
call fcn.10084d5f
add esp, 4
push 0x10101e34
call fcn.1008493a
add esp, 4
mov al, byte [0x10101e67]
test al, al
je 0x1002b672
xor byte [0x10101e60], 0x2e
xor byte [0x10101e61], 0x2e
xor byte [0x10101e62], 0x2e
xor byte [0x10101e63], 0x2e
xor byte [0x10101e64], 0x2e
xor byte [0x10101e65], 0x2e
xor byte [0x10101e66], 0x2e
xor al, 0x2e
mov byte [0x10101e67], al
lea eax, [ebp - 0x108]
push 0x10101e60
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101d90]
mov dword [ebp - 0x140], 0xe6b7e79
mov dword [ebp - 0x13c], 0x2e617c7e
cmp eax, dword [esi + 4]
jle 0x1002b6f6
push 0x10101d90
call fcn.10084984
add esp, 4
cmp dword [0x10101d90], 0xffffffff
jne 0x1002b6f6
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x13c]
push 0x100c4d90
mov dword [0x10101e38], eax
mov dword [0x10101e3c], ecx
call fcn.10084d5f
add esp, 4
push 0x10101d90
call fcn.1008493a
add esp, 4
mov al, byte [0x10101e3f]
test al, al
je 0x1002b737
xor byte [0x10101e38], 0x2e
xor byte [0x10101e39], 0x2e
xor byte [0x10101e3a], 0x2e
xor byte [0x10101e3b], 0x2e
xor byte [0x10101e3c], 0x2e
xor byte [0x10101e3d], 0x2e
xor byte [0x10101e3e], 0x2e
xor al, 0x2e
mov byte [0x10101e3f], al
lea eax, [ebp - 0x108]
push 0x10101e38
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e6c]
mov dword [ebp - 0x148], 0xe4b5e79
mov dword [ebp - 0x144], 0x2e415c7e
cmp eax, dword [esi + 4]
jle 0x1002b7bb
push 0x10101e6c
call fcn.10084984
add esp, 4
cmp dword [0x10101e6c], 0xffffffff
jne 0x1002b7bb
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x144]
push 0x100c4d80
mov dword [0x10101dd4], eax
mov dword [0x10101dd8], ecx
call fcn.10084d5f
add esp, 4
push 0x10101e6c
call fcn.1008493a
add esp, 4
mov al, byte [0x10101ddb]
test al, al
je 0x1002b7fc
xor byte [0x10101dd4], 0x2e
xor byte [0x10101dd5], 0x2e
xor byte [0x10101dd6], 0x2e
xor byte [0x10101dd7], 0x2e
xor byte [0x10101dd8], 0x2e
xor byte [0x10101dd9], 0x2e
xor byte [0x10101dda], 0x2e
xor al, 0x2e
mov byte [0x10101ddb], al
lea eax, [ebp - 0x108]
push 0x10101dd4
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e68]
mov dword [ebp - 0x150], 0xe4b5e59
mov dword [ebp - 0x14c], 0x2e415c5e
cmp eax, dword [esi + 4]
jle 0x1002b880
push 0x10101e68
call fcn.10084984
add esp, 4
cmp dword [0x10101e68], 0xffffffff
jne 0x1002b880
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
push 0x100c4d70
mov dword [0x10101ddc], eax
mov dword [0x10101de0], ecx
call fcn.10084d5f
add esp, 4
push 0x10101e68
call fcn.1008493a
add esp, 4
mov al, byte [0x10101de3]
test al, al
je 0x1002b8c1
xor byte [0x10101ddc], 0x2e
xor byte [0x10101ddd], 0x2e
xor byte [0x10101dde], 0x2e
xor byte [0x10101ddf], 0x2e
xor byte [0x10101de0], 0x2e
xor byte [0x10101de1], 0x2e
xor byte [0x10101de2], 0x2e
xor al, 0x2e
mov byte [0x10101de3], al
lea eax, [ebp - 0x108]
push 0x10101ddc
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e1c]
mov dword [ebp - 0x110], 0x6f7c7a76
mov word [ebp - 0x10c], 0x2e7e
cmp eax, dword [esi + 4]
jle 0x1002b945
push 0x10101e1c
call fcn.10084984
add esp, 4
cmp dword [0x10101e1c], 0xffffffff
jne 0x1002b945
mov eax, dword [ebp - 0x110]
mov dword [0x10101d64], eax
mov ax, word [ebp - 0x10c]
push 0x100c4d60
mov word [0x10101d68], ax
call fcn.10084d5f
add esp, 4
push 0x10101e1c
call fcn.1008493a
add esp, 4
mov al, byte [0x10101d69]
test al, al
je 0x1002b978
xor byte [0x10101d64], 0x2e
xor byte [0x10101d65], 0x2e
xor byte [0x10101d66], 0x2e
xor byte [0x10101d67], 0x2e
xor byte [0x10101d68], 0x2e
xor al, 0x2e
mov byte [0x10101d69], al
lea eax, [ebp - 0x108]
push 0x10101d64
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101d88]
mov dword [ebp - 0x118], 0x4f5c7a76
mov word [ebp - 0x114], 0x2e5e
cmp eax, dword [esi + 4]
jle 0x1002b9fc
push 0x10101d88
call fcn.10084984
add esp, 4
cmp dword [0x10101d88], 0xffffffff
jne 0x1002b9fc
mov eax, dword [ebp - 0x118]
mov dword [0x10101d98], eax
mov ax, word [ebp - 0x114]
push 0x100c4d50
mov word [0x10101d9c], ax
call fcn.10084d5f
add esp, 4
push 0x10101d88
call fcn.1008493a
add esp, 4
mov al, byte [0x10101d9d]
test al, al
je 0x1002ba2f
xor byte [0x10101d98], 0x2e
xor byte [0x10101d99], 0x2e
xor byte [0x10101d9a], 0x2e
xor byte [0x10101d9b], 0x2e
xor byte [0x10101d9c], 0x2e
xor al, 0x2e
mov byte [0x10101d9d], al
lea eax, [ebp - 0x108]
push 0x10101d98
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101dc0]
mov dword [ebp - 0x120], 0x4f5c5a56
mov word [ebp - 0x11c], 0x2e5e
cmp eax, dword [esi + 4]
jle 0x1002bab3
push 0x10101dc0
call fcn.10084984
add esp, 4
cmp dword [0x10101dc0], 0xffffffff
jne 0x1002bab3
mov eax, dword [ebp - 0x120]
mov dword [0x10101e58], eax
mov ax, word [ebp - 0x11c]
push 0x100c4d40
mov word [0x10101e5c], ax
call fcn.10084d5f
add esp, 4
push 0x10101dc0
call fcn.1008493a
add esp, 4
mov al, byte [0x10101e5d]
test al, al
je 0x1002bae6
xor byte [0x10101e58], 0x2e
xor byte [0x10101e59], 0x2e
xor byte [0x10101e5a], 0x2e
xor byte [0x10101e5b], 0x2e
xor byte [0x10101e5c], 0x2e
xor al, 0x2e
mov byte [0x10101e5d], al
lea eax, [ebp - 0x108]
push 0x10101e58
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e84]
mov dword [ebp - 0x158], 0x6b7e7d76
mov word [ebp - 0x154], 0x6a6b
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002bb7c
push 0x10101e84
call fcn.10084984
add esp, 4
cmp dword [0x10101e84], 0xffffffff
jne 0x1002bb7c
mov eax, dword [ebp - 0x158]
mov dword [0x10101e24], eax
mov ax, word [ebp - 0x154]
mov word [0x10101e28], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4d20
mov byte [0x10101e2a], al
call fcn.10084d5f
add esp, 4
push 0x10101e84
call fcn.1008493a
add esp, 4
mov al, byte [0x10101e2a]
test al, al
je 0x1002bbb6
xor byte [0x10101e24], 0x2e
xor byte [0x10101e25], 0x2e
xor byte [0x10101e26], 0x2e
xor byte [0x10101e27], 0x2e
xor byte [0x10101e28], 0x2e
xor byte [0x10101e29], 0x2e
xor al, 0x2e
mov byte [0x10101e2a], al
lea eax, [ebp - 0x108]
push 0x10101e24
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101da4]
mov dword [ebp - 0x160], 0x4b5e7d76
mov word [ebp - 0x15c], 0x4a4b
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002bc4c
push 0x10101da4
call fcn.10084984
add esp, 4
cmp dword [0x10101da4], 0xffffffff
jne 0x1002bc4c
mov eax, dword [ebp - 0x160]
mov dword [0x10101dc8], eax
mov ax, word [ebp - 0x15c]
mov word [0x10101dcc], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4d00
mov byte [0x10101dce], al
call fcn.10084d5f
add esp, 4
push 0x10101da4
call fcn.1008493a
add esp, 4
mov al, byte [0x10101dce]
test al, al
je 0x1002bc86
xor byte [0x10101dc8], 0x2e
xor byte [0x10101dc9], 0x2e
xor byte [0x10101dca], 0x2e
xor byte [0x10101dcb], 0x2e
xor byte [0x10101dcc], 0x2e
xor byte [0x10101dcd], 0x2e
xor al, 0x2e
mov byte [0x10101dce], al
lea eax, [ebp - 0x108]
push 0x10101dc8
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e20]
mov dword [ebp - 0x168], 0x4b5e7d56
mov word [ebp - 0x164], 0x4a4b
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002bd1c
push 0x10101e20
call fcn.10084984
add esp, 4
cmp dword [0x10101e20], 0xffffffff
jne 0x1002bd1c
mov eax, dword [ebp - 0x168]
mov dword [0x10101d48], eax
mov ax, word [ebp - 0x164]
mov word [0x10101d4c], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4ce0
mov byte [0x10101d4e], al
call fcn.10084d5f
add esp, 4
push 0x10101e20
call fcn.1008493a
add esp, 4
mov al, byte [0x10101d4e]
test al, al
je 0x1002bd56
xor byte [0x10101d48], 0x2e
xor byte [0x10101d49], 0x2e
xor byte [0x10101d4a], 0x2e
xor byte [0x10101d4b], 0x2e
xor byte [0x10101d4c], 0x2e
xor byte [0x10101d4d], 0x2e
xor al, 0x2e
mov byte [0x10101d4e], al
lea eax, [ebp - 0x108]
push 0x10101d48
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101de8]
mov dword [ebp - 0x170], 0x4b5e5d56
mov word [ebp - 0x16c], 0x4a4b
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002bdec
push 0x10101de8
call fcn.10084984
add esp, 4
cmp dword [0x10101de8], 0xffffffff
jne 0x1002bdec
mov eax, dword [ebp - 0x170]
mov dword [0x10101da8], eax
mov ax, word [ebp - 0x16c]
mov word [0x10101dac], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4cc0
mov byte [0x10101dae], al
call fcn.10084d5f
add esp, 4
push 0x10101de8
call fcn.1008493a
add esp, 4
mov al, byte [0x10101dae]
test al, al
je 0x1002be26
xor byte [0x10101da8], 0x2e
xor byte [0x10101da9], 0x2e
xor byte [0x10101daa], 0x2e
xor byte [0x10101dab], 0x2e
xor byte [0x10101dac], 0x2e
xor byte [0x10101dad], 0x2e
xor al, 0x2e
mov byte [0x10101dae], al
lea eax, [ebp - 0x108]
push 0x10101da8
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101dc4]
mov dword [ebp - 0x178], 0x617a7b6f
mov word [ebp - 0x174], 0x7a67
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002bebc
push 0x10101dc4
call fcn.10084984
add esp, 4
cmp dword [0x10101dc4], 0xffffffff
jne 0x1002bebc
mov eax, dword [ebp - 0x178]
mov dword [0x10101db4], eax
mov ax, word [ebp - 0x174]
mov word [0x10101db8], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4ca0
mov byte [0x10101dba], al
call fcn.10084d5f
add esp, 4
push 0x10101dc4
call fcn.1008493a
add esp, 4
mov al, byte [0x10101dba]
test al, al
je 0x1002bef6
xor byte [0x10101db4], 0x2e
xor byte [0x10101db5], 0x2e
xor byte [0x10101db6], 0x2e
xor byte [0x10101db7], 0x2e
xor byte [0x10101db8], 0x2e
xor byte [0x10101db9], 0x2e
xor al, 0x2e
mov byte [0x10101dba], al
lea eax, [ebp - 0x108]
push 0x10101db4
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e30]
mov dword [ebp - 0x180], 0x415a5b6f
mov word [ebp - 0x17c], 0x5a67
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002bf8c
push 0x10101e30
call fcn.10084984
add esp, 4
cmp dword [0x10101e30], 0xffffffff
jne 0x1002bf8c
mov eax, dword [ebp - 0x180]
mov dword [0x10101d70], eax
mov ax, word [ebp - 0x17c]
mov word [0x10101d74], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4c80
mov byte [0x10101d76], al
call fcn.10084d5f
add esp, 4
push 0x10101e30
call fcn.1008493a
add esp, 4
mov al, byte [0x10101d76]
test al, al
je 0x1002bfc6
xor byte [0x10101d70], 0x2e
xor byte [0x10101d71], 0x2e
xor byte [0x10101d72], 0x2e
xor byte [0x10101d73], 0x2e
xor byte [0x10101d74], 0x2e
xor byte [0x10101d75], 0x2e
xor al, 0x2e
mov byte [0x10101d76], al
lea eax, [ebp - 0x108]
push 0x10101d70
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101db0]
mov dword [ebp - 0x188], 0x415a5b4f
mov word [ebp - 0x184], 0x5a47
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002c05c
push 0x10101db0
call fcn.10084984
add esp, 4
cmp dword [0x10101db0], 0xffffffff
jne 0x1002c05c
mov eax, dword [ebp - 0x188]
mov dword [0x10101e40], eax
mov ax, word [ebp - 0x184]
mov word [0x10101e44], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4c60
mov byte [0x10101e46], al
call fcn.10084d5f
add esp, 4
push 0x10101db0
call fcn.1008493a
add esp, 4
mov al, byte [0x10101e46]
test al, al
je 0x1002c096
xor byte [0x10101e40], 0x2e
xor byte [0x10101e41], 0x2e
xor byte [0x10101e42], 0x2e
xor byte [0x10101e43], 0x2e
xor byte [0x10101e44], 0x2e
xor byte [0x10101e45], 0x2e
xor al, 0x2e
mov byte [0x10101e46], al
lea eax, [ebp - 0x108]
push 0x10101e40
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101dbc]
mov dword [ebp - 0x1bc], 0x617a7b6f
mov dword [ebp - 0x1b8], 0x6c776b65
mov dword [ebp - 0x1b4], 0x6a7c6f61
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002c13a
push 0x10101dbc
call fcn.10084984
add esp, 4
cmp dword [0x10101dbc], 0xffffffff
jne 0x1002c13a
mov eax, dword [ebp - 0x1b4]
movq xmm0, qword [ebp - 0x1bc]
mov dword [0x10101e50], eax
mov al, byte [ebp - 0x1dd]
push 0x100c4c40
movq qword [0x10101e48], xmm0
mov byte [0x10101e54], al
call fcn.10084d5f
add esp, 4
push 0x10101dbc
call fcn.1008493a
add esp, 4
cmp byte [0x10101e54], 0
je 0x1002c152
xor eax, eax
xor byte [eax + 0x10101e48], 0x2e
inc eax
cmp eax, 0xd
jb 0x1002c145
lea eax, [ebp - 0x108]
push 0x10101e48
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101de4]
mov dword [ebp - 0x1cc], 0x415a5b6f
mov dword [ebp - 0x1c8], 0x4c574b65
mov dword [ebp - 0x1c4], 0x4a5c4f41
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002c1f6
push 0x10101de4
call fcn.10084984
add esp, 4
cmp dword [0x10101de4], 0xffffffff
jne 0x1002c1f6
mov eax, dword [ebp - 0x1c4]
movq xmm0, qword [ebp - 0x1cc]
mov dword [0x10101d80], eax
mov al, byte [ebp - 0x1dd]
push 0x100c4c20
movq qword [0x10101d78], xmm0
mov byte [0x10101d84], al
call fcn.10084d5f
add esp, 4
push 0x10101de4
call fcn.1008493a
add esp, 4
cmp byte [0x10101d84], 0
je 0x1002c20e
xor eax, eax
xor byte [eax + 0x10101d78], 0x2e
inc eax
cmp eax, 0xd
jb 0x1002c201
lea eax, [ebp - 0x108]
push 0x10101d78
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101da0]
mov dword [ebp - 0x1dc], 0x415a5b4f
mov dword [ebp - 0x1d8], 0x4c574b45
mov dword [ebp - 0x1d4], 0x4a5c4f41
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002c2b2
push 0x10101da0
call fcn.10084984
add esp, 4
cmp dword [0x10101da0], 0xffffffff
jne 0x1002c2b2
mov eax, dword [ebp - 0x1d4]
movq xmm0, qword [ebp - 0x1dc]
mov dword [0x10101e00], eax
mov al, byte [ebp - 0x1dd]
push 0x100c4c00
movq qword [0x10101df8], xmm0
mov byte [0x10101e04], al
call fcn.10084d5f
add esp, 4
push 0x10101da0
call fcn.1008493a
add esp, 4
cmp byte [0x10101e04], 0
je 0x1002c2cd
xor eax, eax
nop dword [eax]
xor byte [eax + 0x10101df8], 0x2e
inc eax
cmp eax, 0xd
jb 0x1002c2c0
lea eax, [ebp - 0x108]
push 0x10101df8
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e8c]
mov dword [ebp - 0x194], 0x4f0e1d4f
mov dword [ebp - 0x190], 0x4c415a5b
mov word [ebp - 0x18c], 0x5a41
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002c372
push 0x10101e8c
call fcn.10084984
add esp, 4
cmp dword [0x10101e8c], 0xffffffff
jne 0x1002c372
mov ax, word [ebp - 0x18c]
movq xmm0, qword [ebp - 0x194]
mov word [0x10101df4], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4be0
movq qword [0x10101dec], xmm0
mov byte [0x10101df6], al
call fcn.10084d5f
add esp, 4
push 0x10101e8c
call fcn.1008493a
add esp, 4
cmp byte [0x10101df6], 0
je 0x1002c38d
xor eax, eax
nop dword [eax]
xor byte [eax + 0x10101dec], 0x2e
inc eax
cmp eax, 0xb
jb 0x1002c380
lea eax, [ebp - 0x108]
push 0x10101dec
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e88]
mov dword [ebp - 0x1a0], 0x6f0e1d6f
mov dword [ebp - 0x19c], 0x4c415a5b
mov word [ebp - 0x198], 0x5a41
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [esi + 4]
jle 0x1002c432
push 0x10101e88
call fcn.10084984
add esp, 4
cmp dword [0x10101e88], 0xffffffff
jne 0x1002c432
mov ax, word [ebp - 0x198]
movq xmm0, qword [ebp - 0x1a0]
mov word [0x10101ea0], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4bc0
movq qword [0x10101e98], xmm0
mov byte [0x10101ea2], al
call fcn.10084d5f
add esp, 4
push 0x10101e88
call fcn.1008493a
add esp, 4
cmp byte [0x10101ea2], 0
je 0x1002c44d
xor eax, eax
nop dword [eax]
xor byte [eax + 0x10101e98], 0x2e
inc eax
cmp eax, 0xb
jb 0x1002c440
lea eax, [ebp - 0x108]
push 0x10101e98
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov eax, dword [0x10101e08]
mov ecx, esi
mov dword [ebp - 0x1ac], 0x6f0e1d6f
mov dword [ebp - 0x1a8], 0x6c415a5b
mov word [ebp - 0x1a4], 0x5a41
mov byte [ebp - 0x1dd], 0x2e
cmp eax, dword [ecx + 4]
jle 0x1002c4f4
push 0x10101e08
call fcn.10084984
add esp, 4
cmp dword [0x10101e08], 0xffffffff
jne 0x1002c4f4
mov ax, word [ebp - 0x1a4]
movq xmm0, qword [ebp - 0x1ac]
mov word [0x10101e80], ax
mov al, byte [ebp - 0x1dd]
push 0x100c4ba0
movq qword [0x10101e78], xmm0
mov byte [0x10101e82], al
call fcn.10084d5f
add esp, 4
push 0x10101e08
call fcn.1008493a
add esp, 4
cmp byte [0x10101e82], 0
je 0x1002c50d
xor eax, eax
nop
xor byte [eax + 0x10101e78], 0x2e
inc eax
cmp eax, 0xb
jb 0x1002c500
lea eax, [ebp - 0x108]
push 0x10101e78
push eax
call fcn.1009c6f0
add esp, 8
test eax, eax
jne 0x1002c55c
mov ecx, dword [ebp - 0x1e8]
inc ebx
cmp ebx, 0x64
jl 0x1002b3f0
mov edx, dword [ebp - 0x1e4]
inc edx
mov dword [ebp - 0x1e4], edx
cmp edx, 0x64
jl 0x1002b3e0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10084864
mov esp, ebp
pop ebp
ret
call fcn.1002c660
mov ecx, eax
call fcn.1001bf00
push eax
call fcn.1002c5c0
mov ecx, eax
call fcn.1001d4f0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax + 6], 0xea
jne 0x1002c591
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1002c700
mov ecx, eax
call fcn.1001ae00
mov edx, eax
lea ecx, [ebp - 0x108]
call fcn.1002d740
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push eax
call fcn.100834ee
int3