Function at 0x100470eb
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
jmp 0x1005a420
sub esp, 0x248
mov al, 0xad
mov cl, 0xf1
mov byte ss:[esp + 0x2b], al
mov byte ss:[esp + 0x38], al
mov al, 0x70
push ebx
mov byte ss:[esp + 0x38], cl
mov byte ss:[esp + 0x4b], cl
mov ecx, dword ss:[esp + 0x250]
mov bl, 0xab
mov byte ss:[esp + 0x43], al
mov byte ss:[esp + 0x4e], al
push ebp
mov dl, 0x31
lea eax, ss:[esp + 0x90]
push esi
mov byte ss:[esp + 0x27], bl
mov byte ss:[esp + 0x51], bl
push edi
mov byte ss:[esp + 0x20], 0x55
mov byte ss:[esp + 0x21], 0xd3
mov byte ss:[esp + 0x22], 0xe
mov byte ss:[esp + 0x23], 0x2a
mov byte ss:[esp + 0x24], 0x11
mov byte ss:[esp + 0x25], 0x1f
mov byte ss:[esp + 0x26], 0xa8
mov byte ss:[esp + 0x27], 0xea
mov byte ss:[esp + 0x28], 0xcd
mov byte ss:[esp + 0x29], 0x6a
mov byte ss:[esp + 0x2a], 0x41
mov byte ss:[esp + 0x2c], 0x89
mov byte ss:[esp + 0x2d], 0xb6
mov byte ss:[esp + 0x2e], 0xda
mov byte ss:[esp + 0x2f], 0x6b
mov byte ss:[esp + 0x30], 0x45
mov byte ss:[esp + 0x31], 2
mov byte ss:[esp + 0x32], 0x74
mov byte ss:[esp + 0x33], 0x2c
mov byte ss:[esp + 0x34], 1
mov byte ss:[esp + 0x35], 0x4e
mov byte ss:[esp + 0x36], 0xd
mov byte ss:[esp + 0x37], 0xed
mov byte ss:[esp + 0x38], 0xbd
mov byte ss:[esp + 0x39], 0x99
mov byte ss:[esp + 0x3a], 0xa6
mov byte ss:[esp + 0x3c], 0x79
mov byte ss:[esp + 0x3d], 0xe5
mov byte ss:[esp + 0x3e], 0x3f
mov byte ss:[esp + 0x3f], 0x6e
mov byte ss:[esp + 0x40], 0x35
mov byte ss:[esp + 0x41], dl
mov byte ss:[esp + 0x42], 0xd9
mov byte ss:[esp + 0x43], 0x2e
mov byte ss:[esp + 0x45], 0x7c
mov byte ss:[esp + 0x46], 0x72
mov byte ss:[esp + 0x47], 0xef
mov byte ss:[esp + 0x49], 0xc8
mov byte ss:[esp + 0x4a], 0xb
mov byte ss:[esp + 0x4b], 0xb0
mov byte ss:[esp + 0x4c], 0x69
mov byte ss:[esp + 0x4d], 0x14
mov byte ss:[esp + 0x4e], 0xa5
mov byte ss:[esp + 0x50], 0x25
mov byte ss:[esp + 0x51], 0x60
mov byte ss:[esp + 0x52], 0x3e
mov byte ss:[esp + 0x53], dl
mov byte ss:[esp + 0x54], 0xe1
mov byte ss:[esp + 0x56], 0xd7
mov byte ss:[esp + 0x58], 0x9d
mov byte ss:[esp + 0x59], 0xf7
mov byte ss:[esp + 0x5b], 0xb2
mov byte ss:[esp + 0x5c], 0x59
mov byte ss:[esp + 0x5d], 0x43
mov byte ss:[esp + 0x5e], 0xa
mov byte ss:[esp + 0x5f], 0x73
mov dword ss:[esp + 0x10], eax
lea ebx, ds:[ecx + 0x16]
mov dword ss:[esp + 0x14], 6
xor eax, eax
xor ecx, ecx
mov al, byte ds:[ebx - 2]
mov cl, byte ds:[ebx]
xor edx, edx
mov esi, ecx
mov dl, byte ds:[ebx - 1]
lea ecx, ds:[eax + eax*2]
mov ebp, edx
xor edx, edx
mov dl, byte ds:[ebx + 1]
shl ecx, 6
sub ecx, eax
add eax, 0xffafc231
mov edi, edx
lea edx, ds:[eax + eax*2]
shl edx, 6
sub edx, eax
mov eax, ebp
neg eax
shl ecx, 1
shl eax, 6
and ecx, 0x8843c51e
sub eax, ebp
sub edx, ecx
mov ecx, eax
and ecx, 0xda
and eax, 0xff
shl ecx, 1
sub ecx, eax
mov eax, 0xe8d1b601
imul ecx, ecx, 0xd7c73d3
add ecx, 0x35bb697f
mov ebp, ecx
imul ecx, ecx, 0x59715c5b
imul ebp, ebp, 0xd1d474a
sub eax, ebp
mov ebp, 0x3a1fe584
and eax, 0x21e82dce
sub eax, ecx
sub eax, 0x543bfb52
lea ecx, ds:[eax + eax + 0x1dbe12d4]
and ecx, 0x21e82dce
sub eax, ecx
mov ecx, edx
xor ecx, 0x11
imul eax, eax, 0x7b6cb500
and ecx, 0xb3
sub eax, 0x3fa3eb93
sub ebp, ecx
mov ecx, edx
and ecx, 0x55
and edx, 0xff
sub ebp, ecx
mov dword ss:[esp + 0x18], eax
imul eax, eax, 0x7aff219d
lea edx, ds:[edx + ebp*2]
xor edx, 0x9bee0bbb
imul edx, edx, 0xe0af2513
mov ecx, edx
mov ebp, edx
imul ecx, ecx, 0x3014da36
imul ebp, ebp, 0x67f592e5
and ecx, 0xdfa38210
sub eax, ebp
sub eax, ecx
imul edx, edx, 0x509927d1
sub eax, 0x5ebb81d1
and eax, 0x8be8043a
lea ecx, ds:[ecx + eax*2]
mov eax, dword ss:[esp + 0x18]
imul ecx, ecx, 0x35fe2983
imul eax, eax, 0x5849a7a9
add ecx, eax
sub ecx, edx
lea edx, ds:[esi + esi*2]
shl edx, 6
sub edx, esi
sub ecx, 0x5fd78cbb
shl edx, 1
and edx, 0x2a50dfca
lea eax, ds:[esi + esi*2]
add ebx, 4
shl eax, 6
sub eax, esi
mov esi, 0x9cb7a63
sub eax, edx
sub eax, 0x6ad7901b
mov edx, eax
xor edx, 7
and edx, 0x87
sub esi, edx
mov edx, eax
and edx, 0x3f
and eax, 0xff
sub esi, edx
lea eax, ds:[eax + esi*2]
lea esi, ds:[edi + edi*2]
xor eax, 0xec690b78
inc eax
shl eax, 0x10
shl esi, 6
lea edx, ds:[eax + eax - 1]
sub esi, edi
and edx, 0xd622126e
sub eax, edx
lea edx, ds:[edi + edi*2]
shl edx, 6
imul eax, eax, 0x1a0d9e7d
sub edx, edi
add eax, 0x58cc71db
shl edx, 1
or edx, 0x8822cd8
sub edx, esi
sub edx, 0x441166c
mov esi, edx
and edx, 0xff
and esi, 0xb6
shl esi, 1
mov edi, esi
sub edi, edx
lea edi, ds:[edi + edi - 0x16d]
and edi, 0x275cf832
sub edi, esi
mov esi, ecx
imul esi, esi, 0x1afda5aa
imul ecx, ecx, 0x2d3a83d3
lea edx, ds:[edi + edx - 0x13ae7b63]
mov edi, eax
imul edi, edi, 0xe3916a56
imul eax, eax, 0x5445cbd3
xor edx, 0x9f2635a8
or esi, 0x17d00874
sub edx, 0x6b767bba
and edi, 0xd622126e
sub edi, esi
lea esi, ds:[edx + edx - 0x913088c]
imul edi, edi, 0x197c007
and esi, 0x19109362
sub esi, edx
lea edx, ds:[esi*8]
sub edx, esi
shl edx, 0x18
add edi, edx
mov edx, 0x8c13ae7d
add edi, ecx
lea eax, ds:[edi + eax - 0x39f505a4]
mov ecx, eax
imul eax, eax, 0x6ff7adb7
imul ecx, ecx, 0x2010a492
sub edx, ecx
and edx, 0xa50ff288
sub edx, eax
mov eax, dword ss:[esp + 0x10]
add edx, 0x7e786bf6
mov dword ds:[eax], edx
add eax, 4
mov dword ss:[esp + 0x10], eax
mov eax, dword ss:[esp + 0x14]
dec eax
mov dword ss:[esp + 0x14], eax
jne 0x1005a5cc
mov eax, dword ss:[esp + 0x25c]
lea ecx, ss:[esp + 0xae]
sub ecx, eax
mov dword ss:[esp + 0x10], 5
lea edi, ds:[eax + 2]
mov dword ss:[esp + 0x18], ecx
xor eax, eax
xor edx, edx
mov al, byte ds:[edi - 2]
mov dl, byte ds:[edi]
mov esi, eax
xor eax, eax
mov al, byte ds:[edi - 1]
xor ebx, ebx
mov ecx, eax
mov bl, byte ds:[edi + 1]
neg ecx
shl ecx, 6
sub ecx, eax
mov eax, ecx
and ecx, 0xff
and eax, 0xda
shl eax, 1
sub eax, ecx
mov ecx, 0x5ed2fc85
imul eax, eax, 0xa8da141
sub eax, 0x7b3835d
mov ebp, eax
imul eax, eax, 0x4c8feec1
imul ebp, ebp, 0x66e0227e
sub ecx, ebp
and ecx, 0xbaee8d72
sub ecx, eax
mov eax, esi
neg eax
add ecx, 0x25b8af0b
shl eax, 6
sub eax, esi
lea esi, ds:[ecx + ecx - 0x6532e80e]
and esi, 0xbaee8d72
sub esi, ecx
mov ecx, eax
shl esi, 7
and ecx, 0xda
and eax, 0xff
add esi, ecx
shl esi, 1
mov ecx, esi
sub ecx, eax
lea eax, ds:[edx + edx*2]
add ecx, 0x222d4d25
mov esi, ecx
and ecx, 0xdb7827d0
or esi, 0xdb7827d0
shl eax, 6
sub esi, ecx
sub eax, edx
lea ecx, ds:[edx + edx*2]
sub esi, 0x5abdfd8e
shl eax, 1
shl ecx, 6
or eax, 0x770b4670
sub ecx, edx
sub eax, ecx
sub eax, 0x3b85a338
mov ecx, eax
and eax, 0xff
and ecx, 0xe2
shl ecx, 1
mov edx, ecx
sub edx, eax
lea edx, ds:[edx + edx - 0x1c5]
and edx, 0x1fe9dd6e
sub edx, ecx
lea ecx, ds:[edx + eax + 0x700b122b]
mov edx, 0x3612ac10
xor ecx, 0x3d6e8a2b
add ecx, 0x7f9db52c
lea eax, ds:[ecx + ecx + 0xc495a8]
and eax, 0x6534c938
sub eax, ecx
mov ecx, 0xffff0000
sub eax, 0x32fcaf71
shl eax, 0x10
sub ecx, eax
or ecx, 0xa80498d
sub edx, ecx
shl edx, 1
mov ecx, edx
add edi, 4
sub ecx, eax
mov eax, ebx
neg eax
shl eax, 6
sub eax, ebx
mov edx, eax
and eax, 0xda
and edx, 0xff
imul eax, eax, 0xd443b2b2
imul edx, edx, 0x6a21d959
sub eax, edx
add eax, 0x7a32543b
mov edx, eax
imul eax, eax, 0x65a6dee9
imul edx, edx, 0x34dbdd2
add edx, 0x3c856e5
and edx, 0x74a30ec
sub edx, eax
lea eax, ds:[esi + esi - 0x4a8404e4]
add edx, 0x3e76bc17
or eax, 0x490fb05e
xor edx, 0x7c5ae789
shl edx, 0x18
sub edx, eax
lea eax, ds:[ecx + ecx + 0x3cb3e2d8]
and eax, 0xeaff6ce4
add edx, eax
mov eax, dword ss:[esp + 0x10]
sub edx, ecx
lea esi, ds:[edx + esi - 0x1393d222]
mov edx, dword ss:[esp + 0x18]
mov ecx, esi
and esi, 0xac150ed
or ecx, 0xac150ed
sub ecx, esi
xor ecx, 0xa7b95656
sub ecx, 0x68f5c387
dec eax
mov dword ds:[edx + edi - 4], ecx
mov dword ss:[esp + 0x10], eax
jne 0x1005a871
mov eax, 0xe99235bd
mov dword ss:[esp + 0xc8], 0xe99235c1
mov dword ss:[esp + 0xcc], eax
mov dword ss:[esp + 0xd0], eax
mov dword ss:[esp + 0xd4], eax
xor eax, eax
mov dword ss:[esp + 0x10], eax
lea ecx, ds:[eax - 0x166dca43]
cmp eax, 4
mov dword ss:[esp + 0xc4], ecx
jne 0x1005aaad
mov dword ss:[esp + 0xc4], 0xe99235b9
lea eax, ss:[esp + 0x98]
mov dword ss:[esp + 0x18], 0x10
mov dword ss:[esp + 0x14], eax
mov ecx, dword ds:[eax]
mov edi, 0xa079
mov eax, ecx
lea edx, ds:[ecx + 0x68f5c387]
mov esi, edx
and esi, 0xffffff00
sub eax, esi
lea esi, ds:[eax + 0x68f5c387]
or esi, 0x7c31c87b
shl esi, 1
sub eax, esi
sub eax, 0x1ad873ff
mov esi, eax
xor eax, 0x1ce3080
and esi, 0xe230cf5c
or eax, 0xe230cf5c
xor esi, 0x6030c81c
sub eax, esi
push ebx
xor ebx, ebx
mov ebx, dword [0x10154178]
mov al, byte ds:[eax + ebx]
pop ebx
mov byte ss:[esp + 0x68], al
mov eax, dword ss:[esp + 0x68]
and eax, 0xff
mov esi, eax
imul eax, eax, 0x7b
imul esi, esi, 0xf6
sub edi, esi
and edi, 0xd2d6fbe
lea esi, ds:[edi + eax - 0x697081c]
lea eax, ds:[edx + edx]
and eax, 0xa50ff288
mov edx, 0x22c12199
sub eax, ecx
mov ecx, 0xffffff
add eax, 0x44824334
and esi, 0xff
shr eax, 8
sub ecx, eax
or ecx, 0xad7806bb
sub edx, ecx
shl edx, 1
mov ecx, edx
sub ecx, eax
lea edi, ds:[ecx + 0x68f5c387]
lea edx, ds:[ecx + 7]
mov eax, edi
mov ebx, edi
and eax, 0x8515b802
and ebx, 0x8515b8fd
xor edx, eax
xor ebx, eax
or edx, 0xffffffbb
shl edx, 1
sub ebx, edx
push ecx
xor ecx, ecx
mov ecx, dword [0x10154174]
mov al, byte ds:[ebx + ecx]
pop ecx
mov byte ss:[esp + 0x74], al
mov edx, dword ss:[esp + 0x74]
and edx, 0xff
lea eax, ds:[edx + edx*4]
lea edx, ds:[edx + edx*4 + 0x45581958]
shl eax, 1
mov ebx, eax
mov eax, 0x6b7
sub eax, ebx
or ebx, 0xffffffff
and eax, 0x754fc698
add eax, edx
lea edx, ds:[eax + eax]
and eax, 0xff
sub ebx, edx
and ebx, 0x98
lea eax, ds:[ebx + eax - 0x4c]
mov edx, eax
imul eax, eax, 0x9177218b
and edx, 0xf052be1c
imul edx, edx, 0x22ee4316
sub eax, edx
add eax, 0x6272d534
mov edx, eax
lea eax, ds:[esi + esi]
mov ebx, eax
or eax, 0xffffffff
sub eax, ebx
mov ebx, 0xad7bcefb
and eax, 0x1be
add eax, esi
lea esi, ds:[eax + eax*8]
shl esi, 8
sub esi, eax
lea esi, ds:[eax + esi*8]
lea esi, ds:[esi + esi*8]
lea eax, ds:[eax + esi*8]
mov esi, edx
imul esi, esi, 0x9a38fc46
imul edx, edx, 0x6648e93b
and esi, 0xe0a57c38
imul esi, esi, 0x3aebc1f7
shl eax, 8
add eax, esi
mov esi, 0x86a5b100
lea edx, ds:[eax + edx - 0x1135aecb]
mov eax, edx
imul eax, eax, 0x18b03900
sub esi, eax
lea eax, ds:[esi + esi - 1]
and eax, 0xdbdcc260
sub eax, esi
imul eax, eax, 0x2c1f5dc1
add eax, 0x12a4ad0
mov esi, eax
imul eax, eax, 0x1519b241
imul esi, esi, 0x2a336482
and esi, 0xdbdcc260
sub eax, esi
sub eax, 0x12119ed0
mov esi, eax
imul eax, eax, 0x436c3937
and esi, 0x418c243d
imul esi, esi, 0x79278d92
lea esi, ds:[esi + eax - 0x7616a1e5]
lea eax, ds:[edi + edi]
and eax, 0xa50ff288
mov edi, 0x22c12199
sub eax, ecx
mov ecx, 0xffffff
add eax, 0x44824334
shr eax, 8
sub ecx, eax
or ecx, 0xad7806bb
sub edi, ecx
shl edi, 1
sub edi, eax
lea ebp, ds:[edi + 0x68f5c387]
mov eax, ebp
mov ecx, ebp
and eax, 0x52843104
and ecx, 0xfe94338f
shl eax, 1
sub ecx, eax
mov eax, ebp
and eax, 0xfe943370
sub ebx, ecx
xor eax, 0x52843140
or ebx, eax
lea ebx, ds:[ebx + ebx + 0x52842ec6]
sub eax, ebx
sub eax, ecx
push ebx
xor ebx, ebx
mov ebx, dword [0x1015415c]
mov cl, byte ds:[eax + ebx]
pop ebx
mov byte ss:[esp + 0x70], cl
mov eax, dword ss:[esp + 0x70]
and eax, 0xff
mov ebx, eax
lea ecx, ds:[eax + eax - 3]
shl ebx, 5
and ecx, 4
sub ebx, eax
lea eax, ds:[ecx + ebx - 0x11]
and eax, 0xff
xor eax, 0x84dad334
lea ecx, ds:[eax + eax]
and ecx, 0x90981254
sub eax, ecx
add eax, 0x3ee9621
mov ebx, esi
lea ecx, ds:[eax + eax - 0x774519ee]
imul ebx, ebx, 0x42b5990e
imul esi, esi, 0x745e2bf
and ecx, 0x992db538
and ebx, 0x8318487a
add ecx, ebx
sub ecx, eax
mov eax, 0xffffff
imul ecx, ecx, 0x3aebc1f7
add edx, ecx
lea ecx, ss:[ebp + ebp]
and ecx, 0xa50ff288
sub ecx, edi
lea edx, ds:[esi + edx - 0x2e3f430e]
add ecx, 0x44824334
shr ecx, 8
sub eax, ecx
or eax, 0xad7806bb
shl eax, 1
mov esi, eax
mov eax, 0xae7806b9
sub eax, esi
mov esi, 0x6f
sub eax, ecx
and eax, 0xff
xor eax, 0x953c058e
sub eax, 0x6c9987b4
lea ecx, ds:[eax + eax + 0x19330f68]
and ecx, 0x2a780b94
sub eax, ecx
add eax, 0x11e120f6
add eax, dword [0x1016b000]
mov al, byte ds:[eax]
mov byte ss:[esp + 0x6c], al
mov ecx, dword ss:[esp + 0x6c]
and ecx, 0xff
lea eax, ds:[ecx - 0x25]
mov ecx, eax
and eax, 0xff
and ecx, 0xde
sub esi, ecx
lea eax, ds:[eax + esi*2]
lea ecx, ds:[eax + eax]
and ecx, 0x9a8a50b8
sub eax, ecx
add eax, 0x42fe06d2
lea ecx, ds:[eax + eax + 0x148e4314]
and ecx, 0x9a8a50b8
sub ecx, eax
mov eax, edx
imul ecx, ecx, 0x3aebc1f7
shl eax, 8
add eax, edx
lea ecx, ds:[ecx + eax + 0x211b1416]
mov eax, ecx
imul eax, eax, 0x18b03900
add eax, 0x795a4f00
mov edx, eax
imul eax, eax, 0xa5baa0d5
and edx, 0x1e69d9ac
imul edx, edx, 0x4b7541aa
sub eax, edx
add eax, 0x79159c1c
mov edx, eax
imul eax, eax, 0x64035d9b
imul edx, edx, 0xf6bb30fa
and edx, 0x3cd3b358
imul edx, edx, 0x3aebc1f7
sub edx, eax
lea eax, ds:[edx + ecx + 0x11e04f0c]
mov edx, 0x6d0d4b61
mov ecx, eax
imul eax, eax, 0xb18b039
imul ecx, ecx, 0x16316072
sub edx, ecx
and edx, 0xa50ff288
lea ecx, ds:[edx + eax + 0xdfb9d84]
mov eax, dword ss:[esp + 0x14]
mov dword ds:[eax], ecx
mov ecx, dword ss:[esp + 0x18]
add eax, 4
mov dword ss:[esp + 0x14], eax
dec ecx
mov dword ss:[esp + 0x18], ecx
jne 0x1005aac3
mov ecx, 0x10
lea esi, ss:[esp + 0x20]
lea edi, ss:[esp + 0xf8]
rep movsd dword es:[edi], dword [esi]
mov edi, 3
lea edx, ss:[esp + 0xf8]
lea eax, ss:[esp + 0x98]
push edx
push eax
call fcn.10048211
add esp, 8
xor esi, esi
mov ecx, dword ss:[esp + esi + 0xf8]
mov eax, 0x4b484c1
imul ecx, ecx, 0x5398da79
sub eax, ecx
mov ecx, 0xffffffb0
mov edx, eax
mov ebx, 0xa079
imul edx, edx, 0x39
imul eax, eax, 0xf4e74fc7
sub ecx, edx
mov edx, dword [0x10154160]
or ecx, 0xffffff00
sub edx, ecx
mov cl, byte ds:[edx]
mov byte ss:[esp + 0x64], cl
mov ecx, dword ss:[esp + 0x64]
and ecx, 0xff
mov edx, ecx
imul ecx, ecx, 0x7b
imul edx, edx, 0xf6
sub ebx, edx
and ebx, 0x568fbf96
lea ecx, ds:[ebx + ecx + 0x54b7cff8]
or ebx, 0xffffffff
and ecx, 0xff
lea edx, ds:[ecx + ecx]
sub ebx, edx
and ebx, 0x196
sub eax, ebx
sub eax, ecx
add eax, 0x3686a67b
mov ecx, eax
shr eax, 0x15
imul ecx, ecx, 0x2c3a4800
imul eax, eax, 0x682bffbf
add ecx, 0x255e817d
sub eax, 0x68dc1e44
mov edx, ecx
mov ebx, eax
imul edx, edx, 0x4a435f2
imul ebx, ebx, 0x59afe07e
add edx, 0x33c6c6d5
sub ebx, 0x74b1aa87
or edx, ebx
imul eax, eax, 0x604d4bc9
imul edx, edx, 0x3aebc1f7
imul ecx, ecx, 0x2fdf40c1
sub eax, edx
mov ebx, 0xffffffb7
sub eax, ecx
sub eax, 0x5aa7c026
mov edx, eax
mov eax, 0xffffffb0
mov ecx, edx
imul ecx, ecx, 0x39
sub eax, ecx
or eax, 0xffffff00
xor eax, 0x57d0703d
sub eax, 0x3632a3ba
lea ecx, ds:[eax + eax - 0x139ab88c]
and ecx, 0x505f1f84
sub eax, ecx
xor ecx, ecx
sub eax, 0x11923b0c
add eax, dword [0x1016b000]
mov cl, byte ds:[eax]
mov eax, ecx
lea ecx, ds:[eax + eax*4]
lea eax, ds:[eax + eax*4]
shl ecx, 1
sub ebx, ecx
and ebx, 0xffffff88
lea ecx, ds:[ebx + eax + 0x60]
and ecx, 0xff
add ecx, 0x1f47ce2c
lea eax, ds:[ecx + 0xb831d4]
imul ecx, ecx, 0x3e562efd
and eax, 0x1f47ce2c
imul eax, eax, 0x7cac5dfa
sub eax, ecx
mov ecx, eax
imul ecx, ecx, 0xffc04356
and ecx, 0x3e8f9cd0
imul eax, eax, 0x9fe021ab
sub eax, ecx
mov ebp, edx
add eax, 0x1f47ce68
imul ebp, ebp, 0x16316072
lea ecx, ds:[eax + eax]
sub ebp, 0x6d0d4b62
and ecx, 0x88caac28
sub eax, ecx
add eax, 0x3f308200
mov ecx, eax
mov ebx, ecx
neg ebx
lea eax, ds:[ecx + ecx + 0xa69a828]
shl ebx, 0x1f
and eax, 0x88caac28
sub ebx, ecx
add ebx, eax
imul eax, eax, 0x3aebc1f7
lea ebx, ds:[ebx + ebx + 0x6ccbabaf]
and ebx, ebp
mov ebp, 0x1f14cd3b
add ebx, ecx
imul ebx, ebx, 0x3aebc1f7
sub eax, ebx
mov ebx, 0xaafdb385
sub eax, edx
add eax, 0x5b228dda
mov edx, eax
mov eax, 0x3686a5b0
mov ecx, edx
imul edx, edx, 0xb18b039
imul ecx, ecx, 0x4ba3a400
sub eax, edx
add ecx, 0x232c8453
shr eax, 0x16
mov edx, ecx
imul eax, eax, 0x3571a725
imul edx, edx, 0x42dbf5a2
imul ecx, ecx, 0x3cf06f59
add eax, 0x65252c4f
sub ebx, edx
mov edx, eax
imul eax, eax, 0x85717eb
imul edx, edx, 0x25bbc6a6
sub ebp, edx
or ebx, ebp
imul ebx, ebx, 0x3aebc1f7
sub eax, ebx
lea ecx, ds:[eax + ecx + 0x7b462dd9]
mov eax, 0x3686a5b0
mov edx, ecx
imul edx, edx, 0xb18b039
sub eax, edx
mov edx, eax
mov ebx, eax
and edx, 0xc38be700
and ebx, 0xc38be746
shl edx, 1
sub edx, ebx
and eax, 0xc38be7b9
sub edx, eax
xor eax, eax
mov ebx, 0x231d
push ebx
xor ebx, ebx
mov ebx, dword [0x10154170]
mov al, byte ds:[edx + ebx]
pop ebx
mov edx, eax
shl edx, 5
sub edx, eax
shl edx, 1
sub ebx, edx
mov edx, eax
shl edx, 5
and ebx, 0x3a7309b2
sub edx, eax
lea eax, ds:[ebx + edx + 0x62c66998]
or ebx, 0xffffffff
and eax, 0xff
lea edx, ds:[eax + eax]
sub ebx, edx
and ebx, 0x1b2
add ebx, eax
imul ebx, ebx, 0x3aebc1f7
add esi, 4
lea edx, ds:[ebx + ecx + 0xe2895a1]
mov ecx, 0x6a9c9e74
mov eax, edx
imul edx, edx, 0xb18b039
imul eax, eax, 0x2ad29180
sub ecx, eax
mov eax, 0x3686a5b0
sub eax, edx
mov edx, ecx
shr eax, 0x19
imul edx, edx, 0x6db35e1a
imul eax, eax, 0x7ba5d30f
imul ecx, ecx, 0xd4104d75
mov ebx, 0xbd860c7
add eax, 0x44cb1331
sub ebx, edx
mov edx, eax
imul edx, edx, 0x217977de
imul eax, eax, 0x65d27d67
sub edx, 0x712f6c7d
or ebx, edx
mov edx, 0x6d0d4b61
imul ebx, ebx, 0x3aebc1f7
sub ecx, ebx
sub ecx, eax
add ecx, 0x7c3f6fec
mov eax, ecx
imul ecx, ecx, 0xb18b039
imul eax, eax, 0x16316072
sub edx, eax
and edx, 0xa50ff288
cmp esi, 0x40
lea eax, ds:[edx + ecx + 0xdfb9d84]
mov dword ss:[esp + esi + 0x94], eax
jl 0x1005af26
dec edi
jne 0x1005af0a
lea ecx, ss:[esp + 0xf8]
lea edx, ss:[esp + 0x98]
push ecx
push edx
call fcn.10048211
mov ecx, 8
add esp, 8
mov dword ss:[esp + 0x78], ecx
mov dword ss:[esp + 0x7c], 9
mov dword ss:[esp + 0x80], 0xa
mov dword ss:[esp + 0x84], 0xb
mov dword ss:[esp + 0x88], 0xc
mov dword ss:[esp + 0x8c], 0xd
mov dword ss:[esp + 0x90], 0xe
mov dword ss:[esp + 0x94], 0xf
xor eax, eax
mov edx, dword ss:[esp + eax + 0x78]
mov esi, 0x1a313b21
add eax, 4
mov edx, dword ss:[esp + edx*4 + 0xf8]
imul edx, edx, 0x7095510b
sub esi, edx
cmp eax, 0x20
mov dword ss:[esp + eax + 0xd4], esi
jl 0x1005b2f8
mov eax, dword ss:[esp + 0x10]
lea edx, ss:[esp + 0xd8]
shl eax, 5
mov dword ss:[esp + 0x14], edx
mov dword ss:[esp + 0x18], ecx
lea edi, ss:[esp + eax + 0x198]
add edi, 2
mov eax, dword ss:[esp + 0x14]
mov ecx, dword ds:[eax]
mov eax, 0x4d8f3d8a
imul ecx, ecx, 0x79cf6773
sub eax, ecx
mov ecx, 0xb03b421c
mov edx, eax
mov esi, eax
and edx, 0xe3295ba3
and esi, 0xe3295b5c
sub ecx, edx
mov edx, 0xe3295b5c
sub edx, esi
or edx, 0x8c6c4a67
shl edx, 1
mov ebx, edx
mov edx, 0x6f95a5c2
sub edx, ebx
mov ebx, eax
sub edx, esi
lea esi, ds:[ecx - 0xd11e679]
or esi, 0xc18e0d74
shl esi, 1
sub ecx, esi
mov esi, eax
shr esi, 0x10
sub esi, 0x10000
sub ecx, 0xb83d906
mov ebp, esi
xor edx, ecx
and ebp, 0xe3288a0f
mov ecx, 0xcb7b9cb5
sub ecx, ebp
and esi, 0xe3288af0
mov dword ss:[esp + 0x1c], esi
xor edx, 0xb462c07d
lea ebp, ds:[ecx + 0x17aced5a]
add edx, 0x30e2e188
or ebp, 0x7233d802
shl ebp, 1
sub ecx, ebp
mov ebp, 0xe3288af0
sub ebp, esi
mov esi, 0x52dc9641
or ebp, 0x6fb40b52
sub ecx, 0x761f3aa5
shl ebp, 1
shr eax, 0x18
sub esi, ebp
mov ebp, dword ss:[esp + 0x1c]
or eax, 0xffffff00
sub esi, ebp
xor eax, 0xf3b78eab
xor ecx, esi
add eax, 0x478f1f07
xor ecx, 0xf1e16122
mov dword ss:[esp + 0x60], eax
mov al, dl
sub ecx, 0x798dc1ff
add al, 0x78
mov dword ss:[esp + 0x1c], ecx
and al, 0xb4
mov cl, 0x7e
imul cl
mov cl, al
mov al, dl
mov dl, 0x3f
imul dl
shr ebx, 8
or ebx, 0xffffff00
sub al, cl
xor ebx, 0x75cc7d4a
sub al, 0x2c
sub ebx, 0x2846fe16
mov byte ds:[edi - 2], al
mov al, bl
mov cl, 0x7e
add al, 0x16
and al, 0x6f
imul cl
mov dl, al
mov al, bl
mov cl, 0x3f
imul cl
mov cl, byte ss:[esp + 0x1c]
sub al, dl
sub al, 0x45
mov dl, 0x7e
mov byte ds:[edi - 1], al
mov al, cl
dec al
add edi, 4
and al, 0xa8
imul dl
mov dl, al
mov al, cl
mov cl, 0x3f
imul cl
mov cl, byte ss:[esp + 0x60]
sub al, dl
add al, 0x19
mov dl, 0x7e
mov byte ds:[edi - 4], al
mov al, cl
sub al, 7
and al, 0x8e
imul dl
mov dl, al
mov al, cl
mov cl, 0x3f
imul cl
sub al, dl
mov edx, dword ss:[esp + 0x14]
add al, 0x39
add edx, 4
mov byte ds:[edi - 3], al
mov eax, dword ss:[esp + 0x18]
dec eax
mov dword ss:[esp + 0x14], edx
mov dword ss:[esp + 0x18], eax
jne 0x1005b347
mov eax, dword ss:[esp + 0x10]
inc eax
cmp eax, 5
mov dword ss:[esp + 0x10], eax
jl 0x1005aa8d
lea edx, ss:[esp + 0x98]
lea eax, ss:[esp + 0x178]
push edx
push eax
call fcn.100470c8
add esp, 8
xor eax, eax
mov ecx, dword ss:[esp + eax + 0x178]
mov edx, 0x1a313b21
imul ecx, ecx, 0x7095510b
sub edx, ecx
mov dword ss:[esp + eax + 0xd8], edx
add eax, 4
cmp eax, 0x20
jl 0x1005b50f
xor esi, esi
mov eax, dword ss:[esp + esi + 0xd8]
mov ecx, 0x4d8f3d8a
imul eax, eax, 0x79cf6773
sub ecx, eax
mov edx, ecx
mov eax, ecx
shr edx, 8
or edx, 0xffffff00
or eax, 0xffffff00
xor edx, 0x2cd5deaa
imul eax, eax, 0x68fcab2d
imul edx, edx, 0x8f81726b
mov edi, edx
imul edx, edx, 0x226caa43
imul edi, edi, 0xc4d95486
or edi, 0x9c1a138a
add eax, 0x404c3eef
sub edi, edx
mov edx, ecx
shr edx, 0x10
or edx, 0xffffff00
sub edi, 0x4e0d09c5
imul edx, edx, 0x70e67acd
add edx, 0x22d3382b
mov dword ss:[esp + 0x60], edi
mov ebx, edx
imul edx, edx, 0xcb20205
shr ecx, 0x18
imul ebx, ebx, 0x1964040a
or ecx, 0xffffff00
add ebx, 0x33132253
imul ecx, ecx, 0x232636f5
and ebx, 0xf1638d26
sub ecx, 0x2aec5ff9
sub ebx, edx
mov edx, ecx
imul edx, edx, 0x30ac8aba
imul ecx, ecx, 0x67a9baa3
sub edx, 0x393a0b15
add ebx, 0x6dc4a843
and edx, 0xaf452008
lea ecx, ds:[edx + ecx + 0x44fa7586]
mov dl, 0x2d
imul dl
mov dword ss:[esp + 0x1c], ecx
mov cl, pe_nt_image_headers32
sub cl, al
mov dl, 0x17
mov byte ss:[esp + esi + 0xf8], cl
mov cl, byte ss:[esp + 0x60]
mov al, cl
shl al, 1
and al, 0xdf
imul dl
mov dl, al
mov al, cl
mov cl, 0x17
imul cl
sub al, dl
mov dl, bl
sub al, 0x2a
mov byte ss:[esp + esi + 0xf9], al
or al, 0xff
shl dl, 1
sub al, dl
mov dl, 0xfb
and al, 0x26
add al, bl
imul cl
mov cl, byte ss:[esp + 0x1c]
sub dl, al
mov byte ss:[esp + esi + 0xfa], dl
mov dl, cl
shl dl, 1
or al, 0xff
sub al, dl
mov dl, 0x22
and al, 8
add al, cl
mov cl, 0x17
imul cl
sub dl, al
mov byte ss:[esp + esi + 0xfb], dl
add esi, 4
cmp esi, 0x80
jl 0x1005b536
xor esi, esi
mov cl, byte ss:[esp + esi + 0xf8]
mov dl, 0x4e
mov al, cl
imul dl
sub al, 0x55
mov dl, 0x3f
and al, 0xb4
imul dl
mov dl, al
mov al, cl
mov cl, 0x19
imul cl
sub dl, al
sub dl, 0x50
mov byte ss:[esp + esi + 0x238], dl
inc esi
cmp esi, 0x1e
jl 0x1005b689
mov edi, dword ss:[esp + 0x260]
mov ecx, 0x2f
lea esi, ss:[esp + 0x198]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x248
ret