Function at 0x100042e0
Capabilities:
Access peb ldr_data
Authenticate hmac
Check for peb ntglobalflag flag
Get number of processors
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1002a48b
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x1003a018]
xor eax, esp
mov dword [esp + 0xb0], eax
push ebx
push esi
push edi
mov eax, dword [0x1003a018]
xor eax, esp
push eax
lea eax, [esp + 0xc8]
mov dword fs:[0], eax
mov esi, dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
push 0x14
call esi
xor ebx, ebx
add esp, 4
cmp eax, ebx
je 0x10004344
mov dword [eax], vtable.cAddyEngine.0
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
jmp 0x10004346
xor eax, eax
push 0x14
mov dword [0x10040d0c], eax
call esi
add esp, 4
cmp eax, ebx
je 0x10004367
mov dword [eax], vtable.ClassAddy.0
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
jmp 0x10004369
xor eax, eax
push 4
mov dword [0x1003d998], eax
call esi
add esp, 4
cmp eax, ebx
je 0x10004386
mov dword [eax], vtable.ClassMemoryXor.0
mov dword [0x10040754], eax
jmp 0x1000438c
mov dword [0x10040754], ebx
push 4
call esi
add esp, 4
cmp eax, ebx
je 0x100043a4
mov dword [eax], vtable.ClassVerifyString.0
mov dword [0x1004075c], eax
jmp 0x100043aa
mov dword [0x1004075c], ebx
push 0x2f4
call esi
push 4
mov dword [0x10040c88], eax
call esi
add esp, 8
cmp eax, ebx
je 0x100043ce
mov dword [eax], vtable.EncryptMemory.0
mov dword [0x1003d99c], eax
jmp 0x100043d4
mov dword [0x1003d99c], ebx
mov eax, dword [0x10040c88]
push 0x2f4
push ebx
push eax
call sub.MSVCR100.dll_memset
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add esp, 0xc
mov edi, edi
push ebx
call esi
mov edi, eax
mov dword [esp + 0x18], edi
cmp edi, ebx
je 0x100043f0
mov eax, dword [edi + 0x3c]
add eax, edi
mov dword [0x1003e624], edi
je 0x10004418
add eax, 0x18
cmp eax, ebx
jne 0x10004415
xor eax, eax
jmp 0x10004418
mov eax, dword [eax + 0x38]
mov dword [esp + 0x14], eax
mov dword [0x1003bf04], eax
mov edx, 0xa
xor esi, esi
jmp 0x10004430
mov cl, byte [esi + str.K:_21__.2_5__8____]
xor cl, dl
inc edx
and edx, 0x800000ff
mov byte [esp + esi + 0x24], cl
jns 0x1000444d
dec edx
or edx, 0xffffff00
inc edx
inc esi
cmp esi, 0x20
jl 0x10004430
lea edx, [esp + 0x24]
push edx
mov ecx, edi
mov byte [esp + 0x48], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x1000446f
mov eax, dword [eax + 1]
jmp 0x10004471
xor eax, eax
mov esi, dword [0x10040c88]
mov dword [esi], eax
mov eax, 0x32
xor edi, edi
mov cl, byte [edi + 0x100336b4]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x1000449b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x1a
jl 0x10004480
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x42], bl
call fcn.10003600
add esp, 4
mov dword [esp + 0x20], eax
mov eax, 0x34
xor edi, edi
mov cl, byte [edi + 0x100336d0]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x100044e0
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x41
jl 0x100044c5
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0xa1], bl
call fcn.10003600
add esp, 4
mov dword [esi + 0x84], ebx
cmp eax, ebx
je 0x10004511
mov ecx, dword [eax + 0xd]
jmp 0x10004513
xor ecx, ecx
mov dword [esi + 0x88], ecx
cmp eax, ebx
je 0x10004522
mov ecx, dword [eax + 2]
jmp 0x10004524
xor ecx, ecx
mov dword [esi + 0x8c], ecx
cmp eax, ebx
je 0x10004533
mov eax, dword [eax + 8]
jmp 0x10004535
xor eax, eax
mov dword [esi + 0x90], eax
mov eax, 0x83
xor edi, edi
mov cl, byte [edi + 0x10033718]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x1000455d
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x4a
jl 0x10004542
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0xaa], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10004588
mov eax, dword [eax + 2]
jmp 0x1000458a
xor eax, eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x34], ebx
mov eax, 0xb
xor edi, edi
mov cl, byte [edi + str.3N__K0._36_9______]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x100045b2
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x3b
jl 0x10004597
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x9b], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x100045dd
mov ecx, dword [eax + 2]
jmp 0x100045df
xor ecx, ecx
mov dword [esi + 0x38], ecx
cmp eax, ebx
je 0x100045eb
mov eax, dword [eax + 8]
jmp 0x100045ed
xor eax, eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x20], ebx
mov eax, 0xc8
xor edi, edi
mov cl, byte [edi + 0x100337a0]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x1000461e
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x3e
jl 0x10004603
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x9e], bl
call fcn.10003600
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
je 0x1000464d
mov ecx, dword [eax + 8]
jmp 0x1000464f
xor ecx, ecx
mov dword [esi + 0x24], ecx
cmp eax, ebx
je 0x1000465b
mov eax, dword [eax + 2]
jmp 0x1000465d
xor eax, eax
mov dword [esi + 0x28], eax
mov dword [esi + 8], ebx
mov eax, 0xe7
xor edi, edi
lea ebx, [ebx]
mov cl, byte [edi + 0x100337e0]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x1000468b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x5c
jl 0x10004670
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0xbc], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x100046b6
mov ecx, dword [eax + 0x1a]
jmp 0x100046b8
xor ecx, ecx
mov dword [esi + 0xc], ecx
cmp eax, ebx
je 0x100046c4
mov ecx, dword [eax + 0xb]
jmp 0x100046c6
xor ecx, ecx
mov dword [esi + 0x10], ecx
cmp eax, ebx
je 0x100046d2
mov eax, dword [eax + 0x11]
jmp 0x100046d4
xor eax, eax
mov dword [esi + 0x14], eax
mov eax, 0x75
xor edi, edi
mov edi, edi
mov cl, byte [edi + str.M4WHZDC_A_]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x100046fb
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x2f
jl 0x100046e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x8f], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10004726
mov eax, dword [eax + 2]
jmp 0x10004728
xor eax, eax
mov dword [esi + 0x58], eax
mov eax, 0x7c
xor edi, edi
mov cl, byte [edi + str.D_G]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x1000474d
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x32
jl 0x10004732
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x92], bl
call fcn.10003600
add esp, 4
add eax, 6
je 0x10004779
mov eax, dword [eax + 1]
jmp 0x1000477b
xor eax, eax
mov dword [esi + 4], eax
mov eax, 1
xor edi, edi
mov cl, byte [edi + str.664CF9_54_21__.2_5._8._____]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x100047a0
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x20
jl 0x10004785
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x48], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x100047c8
mov eax, dword [eax + 3]
jmp 0x100047ca
xor eax, eax
mov dword [esi + 0x80], eax
mov dword [esi + 0x5c], ebx
mov eax, 0xe5
xor edi, edi
lea ebx, [ebx]
mov cl, byte [edi + 0x100338c8]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x100047fb
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x3e
jl 0x100047e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x9e], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10004826
mov ecx, dword [eax + 0xe]
jmp 0x10004828
xor ecx, ecx
mov dword [esi + 0x60], ecx
cmp eax, ebx
je 0x10004834
mov ecx, dword [eax + 2]
jmp 0x10004836
xor ecx, ecx
mov dword [esi + 0x64], ecx
cmp eax, ebx
je 0x10004842
mov eax, dword [eax + 8]
jmp 0x10004844
xor eax, eax
mov dword [esi + 0x68], eax
mov eax, 0x48
xor edi, edi
mov edi, edi
mov cl, byte [edi + str.p_vj_bmqppnmskjvhgyh]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x1000486b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x4d
jl 0x10004850
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0xad], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10004896
mov ecx, dword [eax + 2]
jmp 0x10004898
xor ecx, ecx
mov dword [esi + 0x70], ecx
cmp eax, ebx
je 0x100048a4
mov ecx, dword [eax + 0xe]
jmp 0x100048a6
xor ecx, ecx
mov dword [esi + 0x74], ecx
cmp eax, ebx
je 0x100048b2
mov eax, dword [eax + 8]
jmp 0x100048b4
xor eax, eax
mov dword [esi + 0x78], eax
mov eax, 0x8e
xor edi, edi
mov edi, edi
mov cl, byte [edi + 0x10033958]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x100048db
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x1d
jl 0x100048c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x45], bl
call fcn.10003600
sub eax, 0x106
add esp, 4
mov dword [0x1003d78c], eax
mov eax, 0x5f
xor edi, edi
jmp 0x10004910
mov cl, byte [edi + str.g_A_DPGJ__MWPIKSG1VHGYEDBA_]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x1000492b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x35
jl 0x10004910
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x95], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10004956
mov eax, dword [eax + 8]
jmp 0x10004958
xor eax, eax
mov dword [esi + 0x9c], eax
mov eax, 0xf9
xor edi, edi
mov cl, byte [edi + 0x100339b0]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x10004980
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x26
jl 0x10004965
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x4e], bl
call fcn.10003600
add esp, 4
mov dword [esp + 0x4c], eax
cmp eax, ebx
je 0x100049b0
mov ecx, dword [eax + 1]
lea eax, [ecx + eax + 5]
jmp 0x100049b2
xor eax, eax
mov dword [esi + 0x16c], eax
mov eax, 0xe0
xor edi, edi
nop
mov cl, byte [edi + 0x100339d8]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x100049db
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x35
jl 0x100049c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x95], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10004a0a
mov ecx, dword [eax + 0x12]
lea eax, [ecx + eax + 0x16]
jmp 0x10004a0c
xor eax, eax
mov dword [esi + 0x19c], eax
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x10004a23
mov ecx, dword [eax + 0xe]
lea ecx, [ecx + eax + 0x12]
jmp 0x10004a25
xor ecx, ecx
add eax, 0xfffffffb
mov dword [esi + 0x194], ecx
cmp eax, ebx
je 0x10004a3b
mov ecx, dword [eax + 1]
lea eax, [ecx + eax + 5]
jmp 0x10004a3d
xor eax, eax
mov dword [esi + 0x198], eax
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x10004a7d
mov ecx, 0xfffffffa
sub ecx, eax
inc eax
cmp byte [eax], 0x8b
jne 0x10004a74
cmp byte [eax + 1], 0xd
jne 0x10004a74
cmp byte [eax + 6], 3
jne 0x10004a74
cmp byte [eax + 7], 0xd
jne 0x10004a74
cmp byte [eax + 0xc], 0xe8
je 0x10004afb
lea edx, [eax + ecx + 6]
cmp edx, 0x3b
jne 0x10004a52
xor eax, eax
mov ecx, dword [esp + 0x18]
push str.x____x____x____xxxxxx____xxxx____xx
mov dword [esi + 0x1a4], eax
mov eax, dword [esp + 0x18]
push 0x10033a34
push eax
push ecx
call fcn.100034b0
add esp, 0x10
mov dword [esi + 0x15c], eax
mov eax, 0x13
xor edi, edi
mov edi, edi
mov dl, byte [edi + str.zGsyhXssjzXU]
xor dl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], dl
jns 0x10004acb
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x20
jl 0x10004ab0
mov eax, str.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
lea ecx, [esp + 0x24]
mov byte [esp + 0x44], bl
call fcn.10003760
cmp eax, ebx
je 0x10004b07
cmp byte [eax], 0x55
jne 0x10004af8
cmp byte [eax + 1], 0x8b
jne 0x10004af8
cmp byte [eax + 2], 0xec
je 0x10004b09
dec eax
jmp 0x10004ae7
mov ecx, dword [eax + 0xd]
lea eax, [ecx + eax + 0x11]
jmp 0x10004a7f
xor eax, eax
mov edi, dword [esp + 0x14]
push str.x____x____x____xxxxxx____xxxx____xx
push 0x10033aa0
mov dword [esi + 0x140], eax
mov eax, dword [esp + 0x20]
push edi
push eax
call fcn.100034b0
mov ecx, dword [esp + 0x28]
push str.x____x____x____xxxxxx____xxxx____xx
push 0x10033ac4
push edi
push ecx
mov dword [esi + 0x154], eax
call fcn.100034b0
add esp, 0x20
mov dword [esi + 0x130], eax
mov eax, 0x78
xor edi, edi
mov dl, byte [edi + 0x10033b18]
xor dl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], dl
jns 0x10004b6e
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x2f
jl 0x10004b53
mov eax, str.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x8b], bl
call fcn.10003760
cmp eax, ebx
je 0x10004b9e
lea ecx, [ecx]
cmp byte [eax], 0x68
jne 0x10004b9b
cmp byte [eax + 5], 0xb8
je 0x10004ba0
dec eax
jmp 0x10004b90
xor eax, eax
mov dword [esi + 0x13c], eax
mov eax, 0x10
xor edi, edi
lea ecx, [ecx]
mov cl, byte [edi + str.GtscTvk___xjROWGpT_CC]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x10004bcb
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x18
jl 0x10004bb0
mov eax, str.xxxxxxxxxxxxxxxxxxxxxxxx
lea ecx, [esp + 0x24]
mov byte [esp + 0x3c], bl
call fcn.10003760
cmp eax, ebx
je 0x10004bf5
cmp byte [eax], 0x68
jne 0x10004bf2
cmp byte [eax + 5], 0xb8
je 0x10004bf7
dec eax
jmp 0x10004be7
xor eax, eax
mov dword [esi + 0x134], eax
mov eax, 0x28
xor edi, edi
mov dl, byte [edi + 0x10033b80]
xor dl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], dl
jns 0x10004c1f
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x26
jl 0x10004c04
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push eax
mov eax, dword [esp + 0x18]
mov byte [esp + 0x4e], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10004c50
cmp byte [eax], 0x68
jne 0x10004c4d
cmp byte [eax + 5], 0xb8
je 0x10004c52
dec eax
jmp 0x10004c42
xor eax, eax
mov dword [esi + 0x138], eax
mov eax, 9
xor edi, edi
nop
mov cl, byte [edi + str.JMjahMgqcscsTwwndi__uQFBP_lREYCEK]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x10004c7b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x24
jl 0x10004c60
mov eax, str.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
lea ecx, [esp + 0x24]
mov byte [esp + 0x48], bl
call fcn.10003760
mov ecx, eax
cmp eax, ebx
je 0x10004cb3
mov dl, 0x44
jmp 0x10004ca0
cmp byte [ecx], 0xf6
jne 0x10004cb0
cmp byte [ecx + 1], 0xc4
jne 0x10004cb0
cmp byte [ecx + 2], dl
je 0x10004cb5
inc ecx
jmp 0x10004ca0
xor ecx, ecx
mov dword [esi + 0x144], ecx
cmp eax, ebx
je 0x10004ce1
mov dl, 0x11
mov cl, 0x40
cmp byte [eax], 0xf3
jne 0x10004cde
cmp byte [eax + 1], 0xf
jne 0x10004cde
cmp byte [eax + 2], dl
jne 0x10004cde
cmp byte [eax + 3], cl
jne 0x10004cde
cmp byte [eax + 4], 4
je 0x10004ce3
inc eax
jmp 0x10004cc3
xor eax, eax
mov dword [esi + 0x148], eax
mov dword [0x1003d564], ebx
mov dword [0x1003c0f8], ebx
mov dword [esi + 0xe8], ebx
mov dword [0x1003f3d8], ebx
mov dword [0x1003dbb8], ebx
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], ebx
mov eax, 0x36
xor edi, edi
lea ebx, [ebx]
mov dl, byte [edi + 0x10033bf8]
xor dl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], dl
jns 0x10004d3b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x3e
jl 0x10004d20
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x18]
mov byte [esp + 0x9e], bl
call fcn.10003600
add esp, 4
mov dword [esi + 0xf4], eax
mov eax, 4
xor edi, edi
lea ebx, [ebx]
mov cl, byte [edi + str.S_gwggHj]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x10004d8b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x14
jl 0x10004d70
mov eax, str.xxxxxxxxxxxxxxxxxxxx
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], bl
call fcn.10003760
cmp eax, ebx
je 0x10004dbb
dec eax
cmp byte [eax], 0x55
jne 0x10004da7
cmp byte [eax + 1], 0x8b
jne 0x10004da7
cmp byte [eax + 2], 0xec
jne 0x10004da7
jmp 0x10004dbd
xor eax, eax
mov dword [0x10040744], eax
mov eax, 0xf3
xor edi, edi
lea esp, [esp]
mov dl, byte [edi + 0x10033c68]
xor dl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], dl
jns 0x10004deb
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x23
jl 0x10004dd0
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push eax
mov eax, edi
mov byte [esp + 0x4b], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10004e1e
dec eax
cmp byte [eax], 0x68
jne 0x10004e10
cmp byte [eax + 5], 0xb8
jne 0x10004e10
jmp 0x10004e20
xor eax, eax
mov ecx, dword [esp + 0x18]
push str.x_____x________xx____x
push 0x10033ca4
push edi
push ecx
mov dword [0x1003e750], eax
call fcn.100034b0
add esp, 0x10
cmp eax, ebx
je 0x10004e4a
mov ecx, dword [eax + 7]
lea eax, [ecx + eax + 0xb]
jmp 0x10004e4c
xor eax, eax
mov dword [0x1003f6a4], eax
mov eax, 0x39
xor edi, edi
jmp 0x10004e60
mov dl, byte [edi + str.zZQXW_3]
xor dl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], dl
jns 0x10004e7b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x23
jl 0x10004e60
mov eax, str.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
lea ecx, [esp + 0x24]
mov byte [esp + 0x47], bl
call fcn.10003760
call fcn.10003840
mov ecx, dword [esp + 0x18]
push str.x_x_____xx____x____xxx____x____
mov dword [0x1003eaac], eax
mov eax, dword [esp + 0x18]
push 0x10033d24
push eax
push ecx
call fcn.100034b0
add esp, 0x10
cmp eax, ebx
je 0x10004ec6
mov ecx, dword [eax + 0xf]
lea eax, [ecx + eax + 0x13]
jmp 0x10004ec8
xor eax, eax
mov dword [esi + 0xa4], eax
mov eax, 0x20
xor edi, edi
mov dl, byte [edi + 0x10033d48]
xor dl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], dl
jns 0x10004ef0
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x5c
jl 0x10004ed5
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x18]
mov byte [esp + 0xbc], bl
call fcn.10003600
add esp, 4
add eax, 0xc
je 0x10004f20
mov ecx, dword [eax + 1]
lea eax, [ecx + eax + 5]
jmp 0x10004f22
xor eax, eax
mov dword [esi + 0xa8], eax
mov eax, 0x9d
xor edi, edi
nop
mov cl, byte [edi + 0x10033da8]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x10004f4b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x29
jl 0x10004f30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x89], bl
call fcn.10003600
add esp, 4
add eax, 9
je 0x10004f7b
mov ecx, dword [eax + 1]
lea eax, [ecx + eax + 5]
jmp 0x10004f7d
xor eax, eax
mov dword [esi + 0xa0], eax
mov eax, 0x50
xor edi, edi
lea ebx, [ebx]
mov cl, byte [edi + str.edrk]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x10004fab
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x26
jl 0x10004f90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x4e], bl
call fcn.10003600
mov dword [esi + 0xbc], eax
mov dword [esi + 0x12c], ebx
mov eax, 0xc
mov dword [0x1003cccc], eax
mov dword [esi + 0x100], ebx
mov dword [0x1003fab4], eax
mov dword [esi + 0x108], ebx
mov dword [0x1003d994], 9
mov dword [esi + 0x104], ebx
mov dword [esi + 0x114], ebx
mov dword [0x1003c0d0], eax
mov dword [esi + 0x118], ebx
add esp, 4
mov dword [0x1003e61c], 0xd
mov dword [esi + 0x1a8], ebx
mov eax, 0x4b
xor edi, edi
lea esp, [esp]
mov cl, byte [edi + str._rm]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x1000504b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x35
jl 0x10005030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x95], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x1000507a
mov ecx, dword [eax + 0xd]
lea eax, [ecx + eax + 0x11]
jmp 0x1000507c
xor eax, eax
mov dword [esi + 0x1ac], eax
mov eax, 0x50
xor edi, edi
lea esp, [esp]
mov cl, byte [edi + 0x10033e34]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x100050ab
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x26
jl 0x10005090
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x4e], bl
call fcn.10003600
add eax, 2
add esp, 4
mov dword [esi + 0x1c4], eax
cmp eax, ebx
je 0x100050e0
mov ecx, dword [eax + 1]
lea eax, [ecx + eax + 5]
jmp 0x100050e2
xor eax, eax
mov dword [esi + 0x1c8], eax
mov eax, 6
xor edi, edi
nop
mov cl, byte [edi + str._E_65:L.0_1_R4_7_:__.]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x1000510b
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x23
jl 0x100050f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x4b], bl
call fcn.10003600
add eax, 0xa
add esp, 4
mov dword [esi + 0x1cc], eax
mov dword [esi + 0x1b0], ebx
mov dword [esi + 0x124], ebx
mov dword [esi + 0x128], ebx
mov dword [esi + 0x1b4], ebx
mov dword [esi + 0x1b8], ebx
mov dword [esi + 0x1bc], ebx
mov dword [esi + 0x1c0], ebx
mov dword [esi + 0x120], ebx
mov dword [esi + 0x150], ebx
mov dword [esi + 0x158], ebx
mov eax, 0x2f
xor edi, edi
mov cl, byte [edi + 0x10033e80]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x10005191
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x20
jl 0x10005176
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x48], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x100051bd
mov ecx, dword [eax + 5]
lea eax, [ecx + eax + 9]
jmp 0x100051bf
xor eax, eax
mov dword [esi + 0xf8], eax
mov eax, 0x72
xor edi, edi
lea esp, [esp]
mov cl, byte [edi + str.45TBCWHAZC__:]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x100051eb
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x23
jl 0x100051d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x4b], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10005217
mov ecx, dword [eax + 6]
lea eax, [ecx + eax + 0xa]
jmp 0x10005219
xor eax, eax
mov dword [esi + 0xfc], eax
mov dword [0x1003eaa8], ebx
mov dword [0x10040d30], ebx
mov eax, 0xb7
xor edi, edi
mov cl, byte [edi + 0x10033ec8]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], cl
jns 0x1000524d
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x2c
jl 0x10005232
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x8c], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x10005278
mov eax, dword [eax + 2]
jmp 0x1000527a
xor eax, eax
mov dword [0x1003ea84], eax
mov eax, dword [esp + 0x20]
call fcn.10003ea0
mov dword [esi + 0x280], eax
mov eax, 0x49
xor edi, edi
mov cl, byte [edi + str._v_8_]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x24], cl
jns 0x100052b0
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x21
jl 0x10005295
mov eax, str.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
lea ecx, [esp + 0x24]
mov byte [esp + 0x45], bl
call fcn.10003760
call fcn.10003ef0
mov dword [esi + 0x284], eax
mov eax, 0xc4
xor edi, edi
lea ebx, [ebx]
mov dl, byte [edi + 0x10033f68]
xor dl, al
inc eax
and eax, 0x800000ff
mov byte [esp + edi + 0x5c], dl
jns 0x100052fb
dec eax
or eax, 0xffffff00
inc eax
inc edi
cmp edi, 0x26
jl 0x100052e0
mov eax, str.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x82], bl
call fcn.10003760
mov edi, eax
call fcn.10003f40
mov dword [esi + 0x288], eax
mov eax, edi
call fcn.100040d0
mov ecx, dword [0x1003d99c]
mov dword [esi + 0x28c], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x18]
push 0x37b4cb1
push 0x7948b6
call edx
mov dword [0x1003d9a8], eax
mov eax, 0x2a
xor esi, esi
mov cl, byte [esi + 0x10033f90]
xor cl, al
inc eax
and eax, 0x800000ff
mov byte [esp + esi + 0x5c], cl
jns 0x1000536e
dec eax
or eax, 0xffffff00
inc eax
inc esi
cmp esi, 0x32
jl 0x10005353
mov eax, dword [0x1003bf04]
mov ecx, dword [0x1003e624]
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x92], bl
call fcn.10003600
add esp, 4
cmp eax, ebx
je 0x1000539d