Function at 0x100aeac0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011cbda
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa8
push esi
push edi
mov eax, dword [0x101453b8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x18], 0x746e6f66
lea edx, [ecx + 1]
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0xf
mov byte [ebp - 0x6c], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aeb30
sub ecx, edx
lea eax, [ebp - 0x18]
push ecx
push eax
lea ecx, [ebp - 0x6c]
call fcn.100250c0
lea eax, [ebp - 0x6c]
mov dword [ebp - 4], 0
cmp esi, eax
je 0x100aeb67
cmp dword [ebp - 0x58], 0x10
mov ecx, esi
push dword [ebp - 0x5c]
cmovae eax, dword [ebp - 0x6c]
push eax
call fcn.100250c0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x58]
cmp edx, 0x10
jb 0x100aeba2
mov ecx, dword [ebp - 0x6c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100aeb98
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b00ed
push edx
push ecx
call fcn.100eba52
add esp, 8
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x1c], 0x6f686154
lea edx, [ecx + 1]
mov word [ebp - 0x18], 0x616d
mov byte [ebp - 0x16], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aebe0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.100250c0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x64726556
mov dword [ebp - 0x18], 0x616e61
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aec40
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.100250c0
mov byte [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x20], 0xafa2ae90
mov dword [ebp - 0x1c], 0xac85e3af
mov dword [ebp - 0x18], 0xc3b0b7ad
xor byte [ebp + eax - 0x20], 0xc3
inc eax
cmp eax, 0xc
jb 0x100aec74
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x78], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aeca4
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.100250c0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 3
push ecx
lea eax, [ebp - 0x70]
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.100b88f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x66707365
mov dword [ebp - 0x18], 0x746e6f
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aed10
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.100250c0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x656d616e
mov dword [ebp - 0x18], 0x6e6f6620
mov word [ebp - 0x14], 0x74
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aed60
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.100250c0
lea ecx, [esi + 0x68]
mov byte [ebp - 4], 6
lea eax, [ebp - 0x54]
cmp ecx, eax
je 0x100aed95
cmp dword [ebp - 0x40], 0x10
push dword [ebp - 0x44]
cmovae eax, dword [ebp - 0x54]
push eax
call fcn.100250c0
lea ecx, [esi + 0xa0]
mov byte [esi + 0x99], 1
lea eax, [ebp - 0x3c]
mov dl, 1
cmp ecx, eax
je 0x100aedc2
cmp dword [ebp - 0x28], 0x10
push dword [ebp - 0x2c]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.100250c0
mov dl, byte [esi + 0x99]
mov edi, dword [ebp - 0x60]
xor eax, eax
test dl, dl
mov ecx, 0xf
cmovne eax, ecx
mov dword [esi + 0xcc], eax
add eax, 0x14
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
cmp edi, eax
je 0x100aee29
lea ecx, [esi + 0xb8]
mov eax, dword [esi + 0xbc]
push edi
cmp eax, dword [esi + 0xc0]
je 0x100aee15
mov ecx, eax
call fcn.100249f0
add dword [esi + 0xbc], 0x18
lea ecx, [esi + 0xb8]
jmp 0x100aee21
push eax
call fcn.1004ef40
lea ecx, [esi + 0xb8]
add edi, 0x18
cmp edi, dword [ebp - 0x18]
jne 0x100aedf0
mov ecx, dword [esi + 0xbc]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0xb8]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100aee52
mov dword [esi + 0xc8], 0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x28]
cmp edx, 0x10
jb 0x100aee8a
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100aee80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b00f2
push edx
push ecx
call fcn.100eba52
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x100aeec2
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100aeeb8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b00f2
push edx
push ecx
call fcn.100eba52
add esp, 8
lea ecx, [ebp - 0x60]
call fcn.1004ea00
push fcn.10024870
push 3
push 0x18
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100eb61e
lea ecx, [esi + 0x30]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x100aef17
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x100aef24
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.100257c0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x1c], 0x6f686154
lea edx, [ecx + 1]
mov word [ebp - 0x18], 0x616d
mov byte [ebp - 0x16], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aef60
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.100250c0
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x64726556
mov dword [ebp - 0x18], 0x616e61
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aefc0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.100250c0
mov byte [ebp - 4], 8
xor eax, eax
mov dword [ebp - 0x20], 0xafa2ae90
mov dword [ebp - 0x1c], 0xac85e3af
mov dword [ebp - 0x18], 0xc3b0b7ad
xor byte [ebp + eax - 0x20], 0xc3
inc eax
cmp eax, 0xc
jb 0x100aeff4
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x78], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af024
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.100250c0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 9
push ecx
lea eax, [ebp - 0x70]
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.100b88f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x66707365
mov dword [ebp - 0x18], 0x31746e6f
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af090
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.100250c0
mov byte [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x20], 0xa4a2afa5
mov dword [ebp - 0x1c], 0xaca5e3b0
mov word [ebp - 0x18], 0xb7ad
mov byte [ebp - 0x16], 0xc3
xor byte [ebp + eax - 0x20], 0xc3
inc eax
cmp eax, 0xb
jb 0x100af0c4
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x44], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af0f0
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.100250c0
lea ecx, [esi + 0x108]
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x3c]
cmp ecx, eax
je 0x100af128
cmp dword [ebp - 0x28], 0x10
push dword [ebp - 0x2c]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.100250c0
lea ecx, [esi + 0x140]
mov byte [esi + 0x139], 1
lea eax, [ebp - 0x54]
mov dl, 1
cmp ecx, eax
je 0x100af155
cmp dword [ebp - 0x40], 0x10
push dword [ebp - 0x44]
cmovae eax, dword [ebp - 0x54]
push eax
call fcn.100250c0
mov dl, byte [esi + 0x139]
mov edi, dword [ebp - 0x60]
xor eax, eax
test dl, dl
mov ecx, 0xf
cmovne eax, ecx
mov dword [esi + 0x16c], eax
add eax, 0x14
mov dword [esi + 0xe0], eax
mov dword [esi + 0xe4], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
cmp edi, eax
je 0x100af1c9
lea ecx, [esi + 0x158]
nop dword [eax]
mov eax, dword [esi + 0x15c]
push edi
cmp eax, dword [esi + 0x160]
je 0x100af1b5
mov ecx, eax
call fcn.100249f0
add dword [esi + 0x15c], 0x18
lea ecx, [esi + 0x158]
jmp 0x100af1c1
push eax
call fcn.1004ef40
lea ecx, [esi + 0x158]
add edi, 0x18
cmp edi, dword [ebp - 0x18]
jne 0x100af190
mov ecx, dword [esi + 0x15c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x158]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100af1f2
mov dword [esi + 0x168], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x100af22a
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100af220
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b00f7
push edx
push ecx
call fcn.100eba52
add esp, 8
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x28]
cmp edx, 0x10
jb 0x100af262
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100af258
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b00f7
push edx
push ecx
call fcn.100eba52
add esp, 8
lea ecx, [ebp - 0x60]
call fcn.1004ea00
push fcn.10024870
push 3
push 0x18
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100eb61e
lea ecx, [esi + 0xd0]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x100af2ba
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x100af2c7
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.100257c0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x1c], 0x6f686154
lea edx, [ecx + 1]
mov word [ebp - 0x18], 0x616d
mov byte [ebp - 0x16], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af303
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.100250c0
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x64726556
mov dword [ebp - 0x18], 0x616e61
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af360
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.100250c0
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x20], 0xafa2ae90
mov dword [ebp - 0x1c], 0xac85e3af
mov dword [ebp - 0x18], 0xc3b0b7ad
xor byte [ebp + eax - 0x20], 0xc3
inc eax
cmp eax, 0xc
jb 0x100af394
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x78], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af3c4
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.100250c0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xf
push ecx
lea eax, [ebp - 0x70]
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.100b88f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x66707365
mov dword [ebp - 0x18], 0x32746e6f
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af430
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.100250c0
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x20], 0xb3a2a6b4
mov dword [ebp - 0x1c], 0xa5e3adac
mov dword [ebp - 0x18], 0xc3b7adac
xor byte [ebp + eax - 0x20], 0xc3
inc eax
cmp eax, 0xc
jb 0x100af461
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x44], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af490
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.100250c0
lea ecx, [esi + 0x1a8]
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x3c]
cmp ecx, eax
je 0x100af4c8
cmp dword [ebp - 0x28], 0x10
push dword [ebp - 0x2c]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.100250c0
lea ecx, [esi + 0x1e0]
mov byte [esi + 0x1d9], 1
lea eax, [ebp - 0x54]
mov dl, 1
cmp ecx, eax
je 0x100af4f5
cmp dword [ebp - 0x40], 0x10
push dword [ebp - 0x44]
cmovae eax, dword [ebp - 0x54]
push eax
call fcn.100250c0
mov dl, byte [esi + 0x1d9]
mov edi, dword [ebp - 0x60]
xor eax, eax
test dl, dl
mov ecx, 0xf
cmovne eax, ecx
mov dword [esi + 0x20c], eax
add eax, 0x14
mov dword [esi + 0x180], eax
mov dword [esi + 0x184], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
cmp edi, eax
je 0x100af569
lea ecx, [esi + 0x1f8]
nop dword [eax]
mov eax, dword [esi + 0x1fc]
push edi
cmp eax, dword [esi + 0x200]
je 0x100af555
mov ecx, eax
call fcn.100249f0
add dword [esi + 0x1fc], 0x18
lea ecx, [esi + 0x1f8]
jmp 0x100af561
push eax
call fcn.1004ef40
lea ecx, [esi + 0x1f8]
add edi, 0x18
cmp edi, dword [ebp - 0x18]
jne 0x100af530
mov ecx, dword [esi + 0x1fc]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x1f8]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100af592
mov dword [esi + 0x208], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x100af5ca
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100af5c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b00fc
push edx
push ecx
call fcn.100eba52
add esp, 8
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x28]
cmp edx, 0x10
jb 0x100af602
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100af5f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b00fc
push edx
push ecx
call fcn.100eba52
add esp, 8
lea ecx, [ebp - 0x60]
call fcn.1004ea00
push fcn.10024870
push 3
push 0x18
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100eb61e
lea ecx, [esi + 0x170]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x100af65a
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x100af667
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.100257c0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x1c], 0x6f686154
lea edx, [ecx + 1]
mov word [ebp - 0x18], 0x616d
mov byte [ebp - 0x16], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af6a3
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.100250c0
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x64726556
mov dword [ebp - 0x18], 0x616e61
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af700
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.100250c0
mov byte [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x20], 0xafa2ae90
mov dword [ebp - 0x1c], 0xac85e3af
mov dword [ebp - 0x18], 0xc3b0b7ad
xor byte [ebp + eax - 0x20], 0xc3
inc eax
cmp eax, 0xc
jb 0x100af734
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x78], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af764
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.100250c0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0x15
push ecx
lea eax, [ebp - 0x70]
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.100b88f0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x66707365
mov dword [ebp - 0x18], 0x34746e6f
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af7d0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.100250c0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x6564616e
mov dword [ebp - 0x18], 0x6e6f6620
mov word [ebp - 0x14], 0x74
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af820
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.100250c0
lea ecx, [esi + 0x2e8]
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x3c]
cmp ecx, eax
je 0x100af858
cmp dword [ebp - 0x28], 0x10
push dword [ebp - 0x2c]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.100250c0
lea ecx, [esi + 0x320]
mov byte [esi + 0x319], 1
lea eax, [ebp - 0x54]
mov dl, 1
cmp ecx, eax
je 0x100af885
cmp dword [ebp - 0x40], 0x10
push dword [ebp - 0x44]
cmovae eax, dword [ebp - 0x54]
push eax
call fcn.100250c0
mov dl, byte [esi + 0x319]
mov edi, dword [ebp - 0x60]
xor eax, eax
test dl, dl
mov ecx, 0xf
cmovne eax, ecx
mov dword [esi + 0x34c], eax
add eax, 0x14
mov dword [esi + 0x2c0], eax
mov dword [esi + 0x2c4], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
cmp edi, eax
je 0x100af8f9
lea ecx, [esi + 0x338]
nop dword [eax]
mov eax, dword [esi + 0x33c]
push edi
cmp eax, dword [esi + 0x340]
je 0x100af8e5
mov ecx, eax
call fcn.100249f0
add dword [esi + 0x33c], 0x18
lea ecx, [esi + 0x338]
jmp 0x100af8f1
push eax
call fcn.1004ef40
lea ecx, [esi + 0x338]
add edi, 0x18
cmp edi, dword [ebp - 0x18]
jne 0x100af8c0
mov ecx, dword [esi + 0x33c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x338]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100af922
mov dword [esi + 0x348], 0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x100af95a
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100af950
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b0101
push edx
push ecx
call fcn.100eba52
add esp, 8
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x28]
cmp edx, 0x10
jb 0x100af992
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100af988
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b0101
push edx
push ecx
call fcn.100eba52
add esp, 8
lea ecx, [ebp - 0x60]
call fcn.1004ea00
push fcn.10024870
push 3
push 0x18
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100eb61e
lea ecx, [esi + 0x2b0]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x100af9ea
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x100af9f7
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.100257c0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x1c], 0x6f686154
lea edx, [ecx + 1]
mov word [ebp - 0x18], 0x616d
mov byte [ebp - 0x16], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afa33
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.100250c0
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x64726556
mov dword [ebp - 0x18], 0x616e61
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afa90
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.100250c0
mov byte [ebp - 4], 0x1a
xor eax, eax
mov dword [ebp - 0x20], 0xafa2ae90
mov dword [ebp - 0x1c], 0xac85e3af
mov dword [ebp - 0x18], 0xc3b0b7ad
xor byte [ebp + eax - 0x20], 0xc3
inc eax
cmp eax, 0xc
jb 0x100afac4
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x78], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afaf4
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.100250c0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0x1b
push ecx
lea eax, [ebp - 0x70]
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.100b88f0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x66707365
mov dword [ebp - 0x18], 0x33746e6f
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afb60
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.100250c0
mov byte [ebp - 4], 0x1d
mov eax, 0x10
movaps xmm0, xmmword [0x101361f0]
pxor xmm0, xmmword [0x10136570]
mov word [ebp - 0x14], 0xc3b7
movups xmmword [ebp - 0x24], xmm0
nop dword [eax + eax]
xor byte [ebp + eax - 0x24], 0xc3
inc eax
cmp eax, 0x12
jb 0x100afba0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x44], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afbd0
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.100250c0
lea ecx, [esi + 0x248]
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x3c]
cmp ecx, eax
je 0x100afc08
cmp dword [ebp - 0x28], 0x10
push dword [ebp - 0x2c]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.100250c0
lea ecx, [esi + 0x280]
mov byte [esi + 0x279], 1
lea eax, [ebp - 0x54]
mov dl, 1
cmp ecx, eax
je 0x100afc35
cmp dword [ebp - 0x40], 0x10
push dword [ebp - 0x44]
cmovae eax, dword [ebp - 0x54]
push eax
call fcn.100250c0
mov dl, byte [esi + 0x279]
mov edi, dword [ebp - 0x60]
xor eax, eax
test dl, dl
mov ecx, 0xf
cmovne eax, ecx
mov dword [esi + 0x2ac], eax
add eax, 0x14
mov dword [esi + 0x220], eax
mov dword [esi + 0x224], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
cmp edi, eax
je 0x100afca9
lea ecx, [esi + 0x298]
nop dword [eax]
mov eax, dword [esi + 0x29c]
push edi
cmp eax, dword [esi + 0x2a0]
je 0x100afc95
mov ecx, eax
call fcn.100249f0
add dword [esi + 0x29c], 0x18
lea ecx, [esi + 0x298]
jmp 0x100afca1
push eax
call fcn.1004ef40
lea ecx, [esi + 0x298]
add edi, 0x18
cmp edi, dword [ebp - 0x18]
jne 0x100afc70
mov ecx, dword [esi + 0x29c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x298]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100afcd2
mov dword [esi + 0x2a8], 0
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x100afd0a
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100afd00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b0106
push edx
push ecx
call fcn.100eba52
add esp, 8
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x28]
cmp edx, 0x10
jb 0x100afd42
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100afd38
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b0106
push edx
push ecx
call fcn.100eba52
add esp, 8
lea ecx, [ebp - 0x60]
call fcn.1004ea00
push fcn.10024870
push 3
push 0x18
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100eb61e
lea ecx, [esi + 0x210]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x100afd9a
mov dword [eax], ecx
add dword [esi + 0x1c], 4
jmp 0x100afda7
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.100257c0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x1c], 0x6f686154
lea edx, [ecx + 1]
mov word [ebp - 0x18], 0x616d
mov byte [ebp - 0x16], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afde3
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.100250c0
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x88], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x64726556
mov dword [ebp - 0x18], 0x616e61
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afe36
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.100250c0
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0x20
push ecx
lea eax, [ebp - 0x70]
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.100b88f0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0x66707365
mov dword [ebp - 0x18], 0x35746e6f
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afea0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.100250c0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x24]
movaps xmm0, xmmword [0x10136550]
lea edx, [ecx + 1]
pxor xmm0, xmmword [0x10136570]
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100afef0
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.100250c0
lea ecx, [esi + 0x388]
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x3c]
cmp ecx, eax
je 0x100aff28
cmp dword [ebp - 0x28], 0x10
push dword [ebp - 0x2c]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.100250c0
lea ecx, [esi + 0x3c0]
mov byte [esi + 0x3b9], 1
lea eax, [ebp - 0x54]
mov dl, 1
cmp ecx, eax
je 0x100aff55
cmp dword [ebp - 0x40], 0x10
push dword [ebp - 0x44]
cmovae eax, dword [ebp - 0x54]
push eax
call fcn.100250c0
mov dl, byte [esi + 0x3b9]
mov edi, dword [ebp - 0x60]
xor eax, eax
test dl, dl
mov ecx, 0xf
cmovne eax, ecx
mov dword [esi + 0x3ec], eax
add eax, 0x14
mov dword [esi + 0x360], eax
mov dword [esi + 0x364], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
cmp edi, eax
je 0x100affc9
lea ecx, [esi + 0x3d8]
nop dword [eax]
mov eax, dword [esi + 0x3dc]
push edi
cmp eax, dword [esi + 0x3e0]
je 0x100affb5
mov ecx, eax
call fcn.100249f0
add dword [esi + 0x3dc], 0x18
lea ecx, [esi + 0x3d8]
jmp 0x100affc1
push eax
call fcn.1004ef40
lea ecx, [esi + 0x3d8]
add edi, 0x18
cmp edi, dword [ebp - 0x18]
jne 0x100aff90
mov ecx, dword [esi + 0x3dc]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x3d8]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100afff2
mov dword [esi + 0x3e8], 0
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x100b002a
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b0020
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b010b
push edx
push ecx
call fcn.100eba52
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x28]
cmp edx, 0x10
jb 0x100b0062
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100b0058
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b010b
push edx
push ecx
call fcn.100eba52
add esp, 8
lea ecx, [ebp - 0x60]
call fcn.1004ea00
push fcn.10024870
push 2
push 0x18
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100eb61e
lea ecx, [esi + 0x350]
mov dword [ecx + 0x18], 0
mov dword [ecx + 4], 0x14
mov dword [ecx + 0xc], 0xaf
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 0x20]
je 0x100b00cc
mov dword [eax], ecx
add dword [esi + 0x1c], 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea ecx, [ebp - 0x18]
push ecx
push eax
lea ecx, [esi + 0x18]
call fcn.100257c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100f1a4e
call fcn.100f1a4e
call fcn.100f1a4e
call fcn.100f1a4e
call fcn.100f1a4e
call fcn.100f1a4e
call fcn.100f1a4e
int3