Function at 0x1009df80
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018c795
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x102a67c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x50], ebx
lea eax, [ebp - 0x28]
mov ecx, 0x10293ed0
push eax
call fcn.10029ff0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x168]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xbc], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e00a
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10293ee8
push eax
call fcn.1002f5a0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 1
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xc8], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e064
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10293f08
push eax
call fcn.1002a190
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 2
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x17c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xd0], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e0be
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10293f20
push eax
call fcn.1002f740
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 3
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x174]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xec], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e118
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
cmp byte [0x10293f40], 0
je 0x1009e197
cmp byte [0x10293f41], 0
jne 0x1009e1f8
xor esi, esi
mov byte [0x10293f41], 1
mov dword [ebp - 0x44], esi
nop word [eax + eax]
xor esi, dword [0x10293f58]
xor edi, edi
xor edi, dword [0x10293f5c]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor byte [esi + 0x10293f42], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x14
jb 0x1009e140
jmp 0x1009e1f5
xor esi, esi
mov dword [ebp - 0x44], esi
nop dword [eax]
xor esi, dword [0x10293f58]
xor edi, edi
xor edi, dword [0x10293f5c]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor byte [esi + 0x10293f42], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x14
jb 0x1009e1a0
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x49]
push eax
push 0x10293f55
push 0x10293f42
lea ecx, [ebp - 0x28]
call fcn.10027a10
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 4
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xf0], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e25a
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10293f60
push eax
call fcn.100305b0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 5
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x168]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xe4], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e2b4
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10293f80
push eax
call fcn.100305b0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 6
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x168]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xcc], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e30e
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10293fa0
push eax
call fcn.100305b0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 7
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x100], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e368
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10293fc0
push eax
call fcn.10036980
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 8
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xd4], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e3c2
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10293fe0
push eax
call fcn.1002f5a0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 9
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xd8], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e41c
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10294000
push eax
call fcn.10036980
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xa
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x168]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xe0], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e476
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
cmp byte [0x10294020], 0
je 0x1009e4f7
cmp byte [0x10294021], 0
jne 0x1009e558
xor esi, esi
mov byte [0x10294021], 1
mov dword [ebp - 0x44], esi
nop dword [eax + eax]
xor esi, dword [0x10294038]
xor edi, edi
xor edi, dword [0x1029403c]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor byte [esi + 0x10294022], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x13
jb 0x1009e4a0
jmp 0x1009e555
xor esi, esi
mov dword [ebp - 0x44], esi
nop dword [eax]
xor esi, dword [0x10294038]
xor edi, edi
xor edi, dword [0x1029403c]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor byte [esi + 0x10294022], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x13
jb 0x1009e500
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x49]
push eax
push 0x10294034
push 0x10294022
lea ecx, [ebp - 0x28]
call fcn.10027a10
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xb
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x170]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xdc], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e5ba
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10294040
push eax
call fcn.100305b0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xc
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xf8], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e614
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
cmp byte [0x10294060], 0
je 0x1009e69d
cmp byte [0x10294061], 0
jne 0x1009e700
xor esi, esi
mov byte [0x10294061], 1
mov dword [ebp - 0x44], esi
nop word [eax + eax]
xor esi, dword [0x10294080]
xor edi, edi
xor edi, dword [0x10294084]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + str.:Q_ap]
xor cl, bl
mov byte [esi + str.:Q_ap], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x18
jb 0x1009e640
jmp 0x1009e6fd
xor esi, esi
mov dword [ebp - 0x44], esi
xor esi, dword [0x10294080]
xor edi, edi
xor edi, dword [0x10294084]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + str.:Q_ap]
xor cl, bl
mov byte [esi + str.:Q_ap], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x18
jb 0x1009e6a2
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x49]
push eax
push 0x10294079
push str.:Q_ap
lea ecx, [ebp - 0x28]
call fcn.10027a10
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xd
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x178]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0xfc], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e762
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10294088
push eax
call fcn.100305b0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xe
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x114], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e7bc
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x102940a8
push eax
call fcn.1002f670
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xf
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x190]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x128], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e816
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x102940c0
push eax
call fcn.1002f740
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x10
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x194]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x134], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e870
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x102940e0
push eax
call fcn.10036980
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x11
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x198]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x138], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009e8ca
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
cmp byte [0x10294100], 0
je 0x1009e947
cmp byte [0x10294101], 0
jne 0x1009e9a8
xor esi, esi
mov byte [0x10294101], 1
mov dword [ebp - 0x44], esi
xor esi, dword [0x10294120]
xor edi, edi
xor edi, dword [0x10294124]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor byte [esi + 0x10294102], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x17
jb 0x1009e8f0
jmp 0x1009e9a5
xor esi, esi
mov dword [ebp - 0x44], esi
nop dword [eax]
xor esi, dword [0x10294120]
xor edi, edi
xor edi, dword [0x10294124]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor byte [esi + 0x10294102], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x17
jb 0x1009e950
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x49]
push eax
push 0x10294118
push 0x10294102
lea ecx, [ebp - 0x28]
call fcn.10027a10
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x12
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x13c], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009ea0a
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10294128
push eax
call fcn.1002f5a0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x13
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x19c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x140], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009ea64
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x10294148
push eax
call fcn.1002a0c0
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x14
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x164]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x148], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009eabe
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
cmp byte [0x10294160], 0
je 0x1009eb47
cmp byte [0x10294161], 0
jne 0x1009eba8
xor esi, esi
mov byte [0x10294161], 1
mov dword [ebp - 0x44], esi
nop dword [eax]
nop dword [eax + eax]
xor esi, dword [0x10294180]
xor edi, edi
xor edi, dword [0x10294184]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor byte [esi + str.uN_bG], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x1c
jb 0x1009eaf0
jmp 0x1009eba5
xor esi, esi
mov dword [ebp - 0x44], esi
nop dword [eax]
xor esi, dword [0x10294180]
xor edi, edi
xor edi, dword [0x10294184]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor byte [esi + str.uN_bG], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x1c
jb 0x1009eb50
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x49]
push eax
push 0x1029417d
push str.uN_bG
lea ecx, [ebp - 0x28]
call fcn.10027a10
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x15
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x120], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009ec0a
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
cmp byte [0x10294188], 0
je 0x1009ec8d
cmp byte [0x10294189], 0
jne 0x1009ecf0
xor esi, esi
mov byte [0x10294189], 1
mov dword [ebp - 0x44], esi
xor esi, dword [0x102941a0]
xor edi, edi
xor edi, dword [0x102941a4]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x1029418a]
xor cl, bl
mov byte [esi + 0x1029418a], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x16
jb 0x1009ec30
jmp 0x1009eced
xor esi, esi
mov dword [ebp - 0x44], esi
xor esi, dword [0x102941a0]
xor edi, edi
xor edi, dword [0x102941a4]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
xor edi, ecx
shl eax, 0xd
xor esi, eax
mov edx, edi
mov ebx, esi
shrd ebx, edx, 7
xor ebx, esi
shr edx, 7
mov esi, dword [ebp - 0x44]
xor edx, edi
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x1029418a]
xor cl, bl
mov byte [esi + 0x1029418a], cl
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x16
jb 0x1009ec92
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x49]
push eax
push 0x1029419f
push 0x1029418a
lea ecx, [ebp - 0x28]
call fcn.10027a10
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x16
cmova eax, dword [ebp - 0x28]
push eax
push dword [ebx + 0x16c]
lea eax, [ebp - 0x48]
push eax
call fcn.100edee0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax]
mov dword [ebx + 0x14c], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x1009ed52
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x28]
push eax
call fcn.100163b0
add esp, 0xc
mov ecx, dword [ebx + 0xbc]
lea eax, [ebp - 0x44]
push eax
push ecx
mov eax, esp
mov dword [ebp - 0x44], 0xa
mov dword [eax], ecx
lea eax, [ebp - 0x48]
push eax
call fcn.100ee230
add esp, 0xc
mov ecx, dword [eax]
lea eax, [ecx + 5]
neg ecx
sbb ecx, ecx
and ecx, eax
mov eax, dword [ecx]
mov eax, dword [eax]
mov dword [ebx + 0xc0], eax
mov eax, dword [0x102a7aac]
mov eax, dword [eax]
mov dword [ebx + 0xf4], eax
mov eax, dword [0x102a7ab0]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebx + 0xc4], eax
mov eax, dword [0x102a7ab4]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebx + 0xe8], eax
mov eax, dword [0x102a7ab8]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebx + 0x10c], eax
mov eax, dword [0x102a7b24]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebx + 0x104], eax
mov eax, dword [0x102a7b28]
mov eax, dword [eax]
mov dword [ebx + 0x108], eax
mov eax, dword [0x102a7970]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebx + 0x118], eax
mov eax, dword [0x102a7abc]
mov eax, dword [eax]
mov dword [ebx + 0x110], eax
mov eax, dword [0x102a7c1c]
mov eax, dword [eax]
mov dword [ebx + 0x130], eax
mov eax, dword [0x102a7a88]
call eax
add eax, 4
mov dword [ebx + 0x124], eax
mov edi, dword [0x10bfd880]
test edi, edi
jne 0x1009eed0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0x48], ebx
mov ecx, dword [ebx + 0x3c]
mov ecx, dword [ecx + ebx + 0x78]
add ecx, ebx
mov dword [ebp - 0x58], ecx
cmp ecx, ebx
je 0x1009eeaa
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x1009eeaa
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, ebx
mov edi, dword [ecx - 4]
sub ecx, 4
add edi, ebx
mov dword [ebp - 0x54], ecx
dec edx
mov ebx, 0xd6246fd2
mov dword [ebp - 0x44], edx
mov cl, byte [edi]
inc edi
test cl, cl
je 0x1009eea0
movsx esi, cl
lea edi, [edi + 1]
sub cl, 0x41
mov edx, esi
or edx, 0x20
cmp cl, 0x19
mov cl, byte [edi - 1]
cmova edx, esi
xor edx, ebx
imul ebx, edx, 0x1000193
test cl, cl
jne 0x1009ee72
mov edx, dword [ebp - 0x44]
cmp ebx, 0x1df9b1ba
je 0x1009eeae
mov ecx, dword [ebp - 0x54]
mov ebx, dword [eax + 0x18]
test edx, edx
jne 0x1009ee57
mov eax, dword [eax]
jmp 0x1009ee32
mov eax, dword [ebp - 0x58]
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x50]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edx*2]
mov edi, dword [ecx + eax*4]
add edi, esi
mov dword [0x10bfd880], edi
lea eax, [ebp - 0x40]
mov ecx, 0x102941a8
push eax
call fcn.10036980
cmp dword [ebp - 0x2c], 0xf
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x17
cmova eax, dword [ebp - 0x40]
push eax
push dword [ebx + 0x174]
call edi
call eax
mov dword [ebx + 0x11c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 0xf
jbe 0x1009ef19
push eax
push dword [ebp - 0x40]
lea eax, [ebp - 0x40]
push eax
call fcn.100163b0
add esp, 0xc
mov eax, dword [0x102a7bc4]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebx + 0x12c], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10184b39
mov esp, ebp
pop ebp
ret