Function at 0x1001d71f
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0xa0
mov eax, 0x10047766
call fcn.10044ac9
mov esi, ecx
mov edi, dword [ebp + 8]
mov eax, dword [esi + 0x30]
mov dword [0x1005b408], eax
test edi, edi
je 0x1001e3ce
cmp dword [ebp + 0xc], 1
je 0x1001d75c
cmp dword [ebp + 0xc], 4
je 0x1001d75c
cmp dword [ebp + 0xc], 0x100
jne 0x1001e3ce
mov dword [ebp - 0x4c], 0xf
xor edx, edx
mov word [ebp - 0x94], 0x115e
push 0x2e
pop ebx
mov dword [ebp - 4], edx
mov cl, 0x5e
mov dword [ebp - 0x50], edx
mov eax, edx
mov byte [ebp - 0x60], dl
mov byte [ebp - 0x92], bl
mov dword [ebp - 0x91], 0x3031372a
mov dword [ebp - 0x8d], 0x37301770
mov byte [ebp - 0x89], dl
xor byte [ebp + eax - 0x93], cl
inc eax
cmp eax, 0xa
jae 0x1001d7b3
mov cl, byte [ebp - 0x94]
jmp 0x1001d79e
lea eax, [ebp - 0x93]
mov byte [ebp - 0x89], dl
push eax
lea eax, [ebp - 0x2c]
push 0x1005a3f0
push eax
call fcn.100058b7
add esp, 0xc
xor ecx, ecx
inc ecx
cmp dword [esi], 0
mov byte [ebp - 4], cl
je 0x1001d87b
cmp edi, dword [esi]
jne 0x1001d87b
xor eax, eax
cmp dword [0x1005b1b4], ecx
setne al
cmp eax, ecx
mov dword [0x1005b1b4], eax
push eax
lea eax, [ebp - 0xac]
sete byte [0x1005b410]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
pop ecx
cmovae esi, dword [ebp - 0x2c]
pop ecx
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x1001d825
mov ecx, dword [ecx]
xor ebx, ebx
mov dword [ebp - 0x80], 0x6a685003
mov dl, 3
mov dword [ebp - 0x7c], 0x71426f6f
mov word [ebp - 0x78], 0x6266
mov eax, ebx
mov byte [ebp - 0x76], bl
xor byte [ebp + eax - 0x7f], dl
inc eax
cmp eax, 9
jae 0x1001d851
mov dl, byte [ebp - 0x80]
jmp 0x1001d842
mov byte [ebp - 0x76], bl
mov dl, 0xb
mov dword [ebp - 0x68], 0x7862460b
mov eax, ebx
mov word [ebp - 0x64], 0x68
xor byte [ebp + eax - 0x67], dl
inc eax
cmp eax, 4
jae 0x1001d874
mov dl, byte [ebp - 0x68]
jmp 0x1001d865
push esi
push ecx
jmp 0x1001dd8b
cmp dword [esi + 4], 0
je 0x1001d92e
cmp edi, dword [esi + 4]
jne 0x1001d92e
xor eax, eax
cmp dword [0x1005b1b8], ecx
setne al
push eax
mov dword [0x1005b1b8], eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
pop ecx
cmovae esi, dword [ebp - 0x2c]
pop ecx
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x1001d8c2
mov ecx, dword [ecx]
xor ebx, ebx
mov dword [ebp - 0x84], 0x606f5c0e
mov dl, 0xe
mov dword [ebp - 0x80], 0x69606765
mov dword [ebp - 0x7c], 0x6b68684b
mov eax, ebx
mov word [ebp - 0x78], 0x7a6d
mov byte [ebp - 0x76], bl
xor byte [ebp + eax - 0x83], dl
inc eax
cmp eax, 0xd
jae 0x1001d8fe
mov dl, byte [ebp - 0x84]
jmp 0x1001d8e9
mov byte [ebp - 0x76], bl
mov dl, 0xc
mov dword [ebp - 0x68], 0x7f65410c
mov eax, ebx
mov word [ebp - 0x64], 0x6f
xor byte [ebp + eax - 0x67], dl
inc eax
cmp eax, 4
jae 0x1001d921
mov dl, byte [ebp - 0x68]
jmp 0x1001d912
push esi
push ecx
lea eax, [ebp - 0x83]
jmp 0x1001dd8e
cmp dword [esi + 8], 0
je 0x1001da63
cmp edi, dword [esi + 8]
jne 0x1001da63
xor eax, eax
cmp dword [0x1005b1b0], ecx
setne al
push eax
mov dword [0x1005b1b0], eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001d975
mov edx, dword [edx]
xor ebx, ebx
mov dword [ebp - 0x7c], 0x1e1d3371
mov cl, 0x71
mov dword [ebp - 0x78], 0x21251a12
mov byte [ebp - 0x74], bl
mov eax, ebx
xor byte [ebp + eax - 0x7b], cl
inc eax
cmp eax, 7
jae 0x1001d99b
mov cl, byte [ebp - 0x7c]
jmp 0x1001d98c
mov byte [ebp - 0x74], bl
mov cl, 0xc
mov dword [ebp - 0x68], 0x7f65410c
mov eax, ebx
mov word [ebp - 0x64], 0x6f
xor byte [ebp + eax - 0x67], cl
inc eax
cmp eax, 4
jae 0x1001d9be
mov cl, byte [ebp - 0x68]
jmp 0x1001d9af
push esi
push edx
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x63], bl
push eax
lea eax, [ebp - 0x67]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
xor esi, esi
lea ecx, [ebp - 0xac]
push ebx
inc esi
push esi
call fcn.10001cd4
push 7
pop ecx
xor eax, eax
mov byte [ebp - 0x14], 0xa1
lea edi, [ebp - 0x48]
rep stosd dword es:[edi], eax
push 0x1000
lea ecx, [ebp - 0x48]
call fcn.100047ff
push esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], vtable.Packet.0
call fcn.1000540b
push esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x14], 0xab
call fcn.1000540b
mov al, byte [0x1005b1b0]
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x14], al
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.1000540b
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x38]
push eax
push dword [ebp - 0x38]
call fcn.1000f4f9
pop ecx
pop ecx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x48], vtable.ByteBuffer.0
call fcn.100053e5
jmp 0x1001e3b4
mov eax, dword [esi + 0x40]
test eax, eax
je 0x1001db52
cmp edi, eax
jne 0x1001db52
push eax
call fcn.1000ef48
mov edi, eax
pop ecx
cmp edi, 0xa
ja 0x1001e3b2
cmp edi, dword [0x1005b1c0]
je 0x1001e3b2
mov dword [0x1005b1c0], edi
push edi
push dword [esi + 0x40]
call fcn.1000efbc
push edi
push dword [esi + 0x44]
call fcn.1000f23a
movd xmm0, dword [0x1005b1c0]
add esp, 0xc
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x1004a5e0]
movss dword [0x1005a61c], xmm0
movss dword [esp], xmm0
call fcn.1001e4c4
push dword [0x1005b1c0]
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
add esp, 0xc
lea esi, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
cmp dword [edx + 0x14], 0x10
jb 0x1001dafe
mov edx, dword [edx]
xor ebx, ebx
mov dword [ebp - 0x80], 0x727e5c1f
mov cl, 0x1f
mov dword [ebp - 0x7c], 0x4d7e6d7a
mov dword [ebp - 0x78], 0x7a78717e
mov eax, ebx
mov byte [ebp - 0x74], bl
xor byte [ebp + eax - 0x7f], cl
inc eax
cmp eax, 0xb
jae 0x1001db2b
mov cl, byte [ebp - 0x80]
jmp 0x1001db1c
mov byte [ebp - 0x74], bl
mov cl, 0x3c
mov dword [ebp - 0x68], 0x4f55713c
mov eax, ebx
mov word [ebp - 0x64], 0x5f
xor byte [ebp + eax - 0x67], cl
inc eax
cmp eax, 4
jae 0x1001dd89
mov cl, byte [ebp - 0x68]
jmp 0x1001db3f
mov eax, dword [esi + 0x34]
test eax, eax
je 0x1001dc21
cmp edi, eax
jne 0x1001dc21
push eax
call fcn.1000ef48
pop ecx
cmp eax, 0x1388
ja 0x1001e3b2
cmp eax, dword [0x1005b1a0]
je 0x1001e3b2
push eax
mov dword [0x1005b1a0], eax
push dword [esi + 0x34]
call fcn.1000efbc
pop ecx
pop ecx
push dword [0x1005b1a0]
call fcn.1001c869
push dword [0x1005b1a0]
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001dbc7
mov edx, dword [edx]
xor ebx, ebx
mov dword [ebp - 0x68], 0x302a0645
mov cl, 0x45
mov word [ebp - 0x64], 0x312b
mov byte [ebp - 0x62], bl
mov eax, ebx
xor byte [ebp + eax - 0x67], cl
inc eax
cmp eax, 5
jae 0x1001dbec
mov cl, byte [ebp - 0x68]
jmp 0x1001dbdd
mov byte [ebp - 0x62], bl
mov cl, 0x32
mov dword [ebp - 0x7c], 0x54547732
mov eax, ebx
mov dword [ebp - 0x78], 0x465157
xor byte [ebp + eax - 0x7b], cl
inc eax
cmp eax, 6
jae 0x1001dc10
mov cl, byte [ebp - 0x7c]
jmp 0x1001dc01
push esi
lea eax, [ebp - 0x67]
mov byte [ebp - 0x75], bl
push edx
push eax
lea eax, [ebp - 0x7b]
jmp 0x1001e2f0
mov eax, dword [esi + 0x38]
test eax, eax
je 0x1001dd9a
cmp edi, eax
jne 0x1001dd9a
push eax
call fcn.1000ef48
mov edi, eax
pop ecx
cmp edi, 0x17
ja 0x1001e3b2
cmp edi, dword [0x1005b1bc]
je 0x1001e3b2
mov dword [0x1005b1bc], edi
push edi
push dword [esi + 0x38]
call fcn.1000efbc
pop ecx
pop ecx
xor ebx, ebx
mov ecx, ebx
push edi
cmp edi, 0xa
jge 0x1001dc9d
movaps xmm0, xmmword [0x1004da60]
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], 0x42424816
mov byte [ebp - 0x74], bl
mov al, byte [ebp - 0x88]
xor byte [ebp + ecx - 0x87], al
inc ecx
cmp ecx, 0x13
jb 0x1001dc85
mov byte [ebp - 0x74], bl
jmp 0x1001dcc8
movaps xmm0, xmmword [0x1004dab0]
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], 0x25252f
mov al, byte [ebp - 0x88]
xor byte [ebp + ecx - 0x87], al
inc ecx
cmp ecx, 0x12
jb 0x1001dcb2
mov byte [ebp - 0x75], bl
sub esp, 0x18
lea eax, [ebp - 0x87]
mov ecx, esp
push eax
call fcn.100012e0
lea eax, [ebp - 0xac]
push eax
call fcn.1001b71b
add esp, 0x20
lea ecx, [ebp - 0x60]
push eax
call fcn.10006163
push ebx
push 1
lea ecx, [ebp - 0xac]
call fcn.10001cd4
lea eax, [ebp - 0x60]
push eax
push dword [esi + 0x3c]
call fcn.1000f1a6
pop ecx
pop ecx
push ebx
push edi
mov ecx, esi
call fcn.1001e4f6
push dword [0x1005b1bc]
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001dd3f
mov edx, dword [edx]
mov cl, 0x6f
mov dword [ebp - 0x80], 0x20e286f
mov dword [ebp - 0x7c], 0x2063b0a
mov eax, ebx
mov word [ebp - 0x78], 0xa
xor byte [ebp + eax - 0x7f], cl
inc eax
cmp eax, 8
jae 0x1001dd66
mov cl, byte [ebp - 0x80]
jmp 0x1001dd57
mov byte [ebp - 0x77], bl
mov cl, 0x46
mov dword [ebp - 0x68], 0x352f0b46
mov eax, ebx
mov word [ebp - 0x64], 0x25
xor byte [ebp + eax - 0x67], cl
inc eax
cmp eax, 4
jae 0x1001dd89
mov cl, byte [ebp - 0x68]
jmp 0x1001dd7a
push esi
push edx
lea eax, [ebp - 0x7f]
push eax
mov byte [ebp - 0x63], bl
lea eax, [ebp - 0x67]
jmp 0x1001e2f0
cmp dword [esi + 0xc], 0
je 0x1001de50
cmp edi, dword [esi + 0xc]
jne 0x1001de50
cmp byte [0x1005b1c8], cl
setne al
mov byte [0x1005b1c8], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001dde2
mov edx, dword [edx]
push 0x1f
pop eax
mov bl, 0x7a
mov dword [ebp - 0x80], 0x1515367a
mov word [ebp - 0x7c], 0x2d0e
xor ecx, ecx
mov byte [ebp - 0x7a], al
mov dword [ebp - 0x79], 0x14150a1b
mov byte [ebp - 0x75], 0
xor byte [ebp + ecx - 0x7f], bl
inc ecx
cmp ecx, 0xa
jae 0x1001de13
mov bl, byte [ebp - 0x80]
jmp 0x1001de04
push 0x6b
pop ecx
xor ebx, ebx
mov byte [ebp - 0x6d], cl
mov byte [ebp - 0x69], cl
mov ecx, ebx
mov byte [ebp - 0x75], bl
mov byte [ebp - 0x70], al
mov word [ebp - 0x6f], 0x7a4f
mov word [ebp - 0x6c], 0x7053
mov byte [ebp - 0x6a], 0x70
mov dword [ebp - 0x68], 0x787176
xor byte [ebp + ecx - 0x6f], al
inc ecx
cmp ecx, 0xa
jae 0x1001e2e4
mov al, byte [ebp - 0x70]
jmp 0x1001de3d
cmp dword [esi + 0x10], 0
je 0x1001def3
cmp edi, dword [esi + 0x10]
jne 0x1001def3
cmp byte [0x1005b1c9], cl
setne al
mov byte [0x1005b1c9], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001de98
mov edx, dword [edx]
xor ebx, ebx
mov dword [ebp - 0x80], 0x2121024e
mov cl, 0x4e
mov dword [ebp - 0x7c], 0x233c0f3a
mov word [ebp - 0x78], 0x3c21
mov eax, ebx
mov byte [ebp - 0x76], bl
xor byte [ebp + eax - 0x7f], cl
inc eax
cmp eax, 9
jae 0x1001dec4
mov cl, byte [ebp - 0x80]
jmp 0x1001deb5
mov byte [ebp - 0x76], bl
mov cl, 0x74
mov dword [ebp - 0x70], 0x112474
mov eax, ebx
mov dword [ebp - 0x6c], 0x1b1b38
mov dword [ebp - 0x68], 0x131a1d
xor byte [ebp + eax - 0x6f], cl
inc eax
cmp eax, 0xa
jae 0x1001e2e4
mov cl, byte [ebp - 0x70]
jmp 0x1001dee0
cmp dword [esi + 0x14], 0
je 0x1001dfa0
cmp edi, dword [esi + 0x14]
jne 0x1001dfa0
cmp byte [0x1005b1ca], cl
setne al
mov byte [0x1005b1ca], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
pop ecx
cmovae esi, dword [ebp - 0x2c]
pop ecx
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x1001df3b
mov ecx, dword [ecx]
xor ebx, ebx
mov dword [ebp - 0x70], 0x29290a46
mov dl, 0x46
mov dword [ebp - 0x6c], 0x25250732
mov dword [ebp - 0x68], 0x29353523
mov eax, ebx
mov word [ebp - 0x64], 0x3f34
mov byte [ebp - 0x62], bl
xor byte [ebp + eax - 0x6f], dl
inc eax
cmp eax, 0xd
jae 0x1001df6e
mov dl, byte [ebp - 0x70]
jmp 0x1001df5f
mov byte [ebp - 0x62], bl
mov dl, 0x3a
mov dword [ebp - 0x80], 0x4e5f6a3a
mov eax, ebx
mov dword [ebp - 0x7c], 0x4e555576
mov dword [ebp - 0x78], 0x5d5453
xor byte [ebp + eax - 0x7f], dl
inc eax
cmp eax, 0xa
jae 0x1001df99
mov dl, byte [ebp - 0x80]
jmp 0x1001df8a
push esi
push ecx
jmp 0x1001e238
cmp dword [esi + 0x18], 0
je 0x1001e041
cmp edi, dword [esi + 0x18]
jne 0x1001e041
cmp byte [0x1005b1cb], cl
setne al
mov byte [0x1005b1cb], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001dfe8
mov edx, dword [edx]
xor ebx, ebx
mov dword [ebp - 0x80], 0x48486b27
mov cl, 0x27
mov dword [ebp - 0x7c], 0x55486953
mov dword [ebp - 0x78], 0x4b464a
mov eax, ebx
xor byte [ebp + eax - 0x7f], cl
inc eax
cmp eax, 0xa
jae 0x1001e012
mov cl, byte [ebp - 0x80]
jmp 0x1001e003
mov byte [ebp - 0x75], bl
mov cl, 0x58
mov dword [ebp - 0x70], 0x2c3d0858
mov eax, ebx
mov dword [ebp - 0x6c], 0x2c373714
mov dword [ebp - 0x68], 0x3f3631
xor byte [ebp + eax - 0x6f], cl
inc eax
cmp eax, 0xa
jae 0x1001e2e4
mov cl, byte [ebp - 0x70]
jmp 0x1001e02e
cmp dword [esi + 0x1c], 0
je 0x1001e0f3
cmp edi, dword [esi + 0x1c]
jne 0x1001e0f3
cmp byte [0x1005b1cc], cl
setne al
mov byte [0x1005b1cc], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001e089
mov edx, dword [edx]
push 0x6b
pop ecx
mov bl, 0xa
mov dword [ebp - 0x80], 0x6565460a
mov word [ebp - 0x7c], 0x477e
xor eax, eax
mov byte [ebp - 0x7a], cl
mov dword [ebp - 0x79], 0x69636d
xor byte [ebp + eax - 0x7f], bl
inc eax
cmp eax, 9
jae 0x1001e0b6
mov bl, byte [ebp - 0x80]
jmp 0x1001e0a7
push 0x1f
pop eax
xor ebx, ebx
mov byte [ebp - 0x6d], al
mov byte [ebp - 0x69], al
mov eax, ebx
mov byte [ebp - 0x76], bl
mov byte [ebp - 0x70], cl
mov word [ebp - 0x6f], 0xe3b
mov word [ebp - 0x6c], 0x427
mov byte [ebp - 0x6a], 4
mov dword [ebp - 0x68], 0xc0502
xor byte [ebp + eax - 0x6f], cl
inc eax
cmp eax, 0xa
jae 0x1001e2e4
mov cl, byte [ebp - 0x70]
jmp 0x1001e0e0
cmp dword [esi + 0x20], 0
je 0x1001e196
cmp edi, dword [esi + 0x20]
jne 0x1001e196
cmp byte [0x1005b1cd], cl
setne al
mov byte [0x1005b1cd], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
pop ecx
cmovae esi, dword [ebp - 0x2c]
pop ecx
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x1001e13b
mov ecx, dword [ecx]
xor ebx, ebx
mov dword [ebp - 0x80], 0x36361559
mov dl, 0x59
mov dword [ebp - 0x7c], 0x2b380b2d
mov word [ebp - 0x78], 0x3c
mov eax, ebx
xor byte [ebp + eax - 0x7f], dl
inc eax
cmp eax, 8
jae 0x1001e164
mov dl, byte [ebp - 0x80]
jmp 0x1001e155
mov byte [ebp - 0x77], bl
mov dl, 0x4a
mov dword [ebp - 0x70], 0x3e2f1a4a
mov eax, ebx
mov dword [ebp - 0x6c], 0x3e252506
mov dword [ebp - 0x68], 0x2d2423
xor byte [ebp + eax - 0x6f], dl
inc eax
cmp eax, 0xa
jae 0x1001e18f
mov dl, byte [ebp - 0x70]
jmp 0x1001e180
push esi
push ecx
jmp 0x1001e2e6
cmp dword [esi + 0x24], 0
je 0x1001e247
cmp edi, dword [esi + 0x24]
jne 0x1001e247
cmp byte [0x1005b1ce], cl
setne al
mov byte [0x1005b1ce], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001e1de
mov edx, dword [edx]
xor ebx, ebx
mov dword [ebp - 0x70], 0x2a2a0945
mov cl, 0x45
mov dword [ebp - 0x6c], 0x22351031
mov dword [ebp - 0x68], 0x20212437
mov eax, ebx
mov byte [ebp - 0x64], bl
xor byte [ebp + eax - 0x6f], cl
inc eax
cmp eax, 0xb
jae 0x1001e20b
mov cl, byte [ebp - 0x70]
jmp 0x1001e1fc
mov byte [ebp - 0x64], bl
mov cl, 0x15
mov dword [ebp - 0x80], 0x61704515
mov eax, ebx
mov dword [ebp - 0x7c], 0x617a7a59
mov dword [ebp - 0x78], 0x727b7c
xor byte [ebp + eax - 0x7f], cl
inc eax
cmp eax, 0xa
jae 0x1001e236
mov cl, byte [ebp - 0x80]
jmp 0x1001e227
push esi
push edx
lea eax, [ebp - 0x6f]
mov byte [ebp - 0x75], bl
push eax
lea eax, [ebp - 0x7f]
jmp 0x1001e2f0
cmp dword [esi + 0x28], 0
je 0x1001e30a
cmp edi, dword [esi + 0x28]
jne 0x1001e30a
cmp byte [0x1005b1cf], cl
setne al
mov byte [0x1005b1cf], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001e28f
mov edx, dword [edx]
xor ebx, ebx
mov dword [ebp - 0x80], 0x2a2a0945
mov cl, 0x45
mov dword [ebp - 0x7c], 0x2c2b1031
mov dword [ebp - 0x78], 0x203034
mov eax, ebx
xor byte [ebp + eax - 0x7f], cl
inc eax
cmp eax, 0xa
jae 0x1001e2b9
mov cl, byte [ebp - 0x80]
jmp 0x1001e2aa
mov byte [ebp - 0x75], bl
mov cl, 0x74
mov dword [ebp - 0x70], 0x112474
mov eax, ebx
mov dword [ebp - 0x6c], 0x1b1b38
mov dword [ebp - 0x68], 0x131a1d
xor byte [ebp + eax - 0x6f], cl
inc eax
cmp eax, 0xa
jae 0x1001e2e4
mov cl, byte [ebp - 0x70]
jmp 0x1001e2d5
push esi
push edx
lea eax, [ebp - 0x7f]
mov byte [ebp - 0x65], bl
push eax
lea eax, [ebp - 0x6f]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push ebx
push 1
lea ecx, [ebp - 0xac]
call fcn.10001cd4
jmp 0x1001e3b4
cmp dword [esi + 0x2c], 0
je 0x1001e3b2
cmp edi, dword [esi + 0x2c]
jne 0x1001e3b2
cmp byte [0x1005b1d0], cl
setne al
mov byte [0x1005b1d0], al
movzx eax, al
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1000b429
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov edx, eax
cmovae esi, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [edx + 0x14], 0x10
jb 0x1001e352
mov edx, dword [edx]
push 0x6d
pop ecx
mov byte [ebp - 0x80], bl
xor eax, eax
mov dword [ebp - 0x7f], 0x5a414162
mov byte [ebp - 0x7b], cl
mov dword [ebp - 0x7a], 0x5a484f5c
mov byte [ebp - 0x76], 0
xor byte [ebp + eax - 0x7f], bl
inc eax
cmp eax, 9
jae 0x1001e37e
mov bl, byte [ebp - 0x80]
jmp 0x1001e36f
xor ebx, ebx
mov byte [ebp - 0x70], cl
mov byte [ebp - 0x76], bl
mov eax, ebx
mov dword [ebp - 0x6f], 0x2119083d
mov dword [ebp - 0x6b], 0x4190202
mov word [ebp - 0x67], 0xa03
mov byte [ebp - 0x65], bl
xor byte [ebp + eax - 0x6f], cl
inc eax
cmp eax, 0xa
jae 0x1001e2e4
mov cl, byte [ebp - 0x70]
jmp 0x1001e39f
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.10001cd4
push ebx
push 1
lea ecx, [ebp - 0x60]
call fcn.10001cd4
mov al, 1
jmp 0x1001e3d0
xor al, al
call fcn.10044a84
ret 8