Function at 0x1001f7b0
Capabilities:
Access peb ldr_data
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Get ntdll base address
Get process heap force flags
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100421cd
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x150
mov eax, dword [0x1004e008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x84], edi
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x79616c70
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x30], 0x737265
call fcn.100068b0
lea eax, [ebp - 0x64]
mov dword [ebp - 4], 0
push eax
mov ecx, edi
call fcn.1000ff10
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 1
call fcn.10006860
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x1c], 0x786f62
call fcn.100068b0
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x30], 0x65786f62
mov word [ebp - 0x2c], 0x73
call fcn.100068b0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 3
push eax
lea ecx, [edi + 0x68]
call fcn.1000ff10
lea eax, [ebp - 0x64]
mov byte [edi + 0x99], 1
push eax
lea ecx, [edi + 0xa0]
call fcn.1000ff10
mov byte [edi + 0x9c], 0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 4
call fcn.10006860
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 5
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x30]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x6d726f64
push eax
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x30], 0x746e61
call fcn.100068b0
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x20], 0x6d726f64
mov dword [ebp - 0x1c], 0x746e61
call fcn.100068b0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 7
push eax
lea ecx, [edi + 0x180]
call fcn.1000ff10
lea eax, [ebp - 0x64]
mov byte [edi + 0x1b1], 1
push eax
lea ecx, [edi + 0x1b8]
call fcn.1000ff10
mov byte [edi + 0x1b4], 0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 8
call fcn.10006860
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 9
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x148]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x7366666f
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x30], 0x65657263
mov word [ebp - 0x2c], 0x6e
call fcn.100068b0
mov dword [ebp - 4], 0xa
mov ecx, 0x10
movaps xmm0, xmmword [0x100469c0]
pxor xmm0, xmmword [str._K_H_]
mov dword [ebp - 0x50], 0x25555640
movups xmmword [ebp - 0x60], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x60], 0x25
inc ecx
cmp ecx, 0x14
jb 0x1001fa10
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x4c]
call fcn.100068b0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [edi + 0x208]
call fcn.1000ff10
lea eax, [ebp - 0x4c]
mov byte [edi + 0x239], 1
push eax
lea ecx, [edi + 0x240]
call fcn.1000ff10
mov byte [edi + 0x23c], 0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xc
call fcn.10006860
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0xd
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x1d0]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x656d616e
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x18], 0
call fcn.100068b0
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x30], 0x656d616e
mov byte [ebp - 0x2c], 0
call fcn.100068b0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [edi + 0x320]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
mov byte [edi + 0x351], 1
push eax
lea ecx, [edi + 0x358]
call fcn.1000ff10
mov byte [edi + 0x354], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x10
call fcn.10006860
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x11
call fcn.10006860
lea eax, [edi + 0x2e8]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x6c616568
push eax
lea ecx, [ebp - 0x64]
mov word [ebp - 0x2c], 0x6874
mov byte [ebp - 0x2a], 0
call fcn.100068b0
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x20], 0x6c616568
mov word [ebp - 0x1c], 0x6874
mov byte [ebp - 0x1a], 0
call fcn.100068b0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [edi + 0x438]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
mov byte [edi + 0x469], 1
push eax
lea ecx, [edi + 0x470]
call fcn.1000ff10
mov byte [edi + 0x46c], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x14
call fcn.10006860
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x15
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x400]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
push str.dfs_mfdsfpsom
lea ecx, [ebp - 0x64]
call fcn.100068b0
push str.override_healthbar_color
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x16
call fcn.100068b0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [edi + 0x4c0]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
mov byte [edi + 0x4f1], 1
push eax
lea ecx, [edi + 0x4f8]
call fcn.1000ff10
mov byte [edi + 0x4f4], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x18
call fcn.10006860
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x19
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x488]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
mov esi, dword [0x10045864]
lea ecx, [ebp - 0x64]
push str.dhg_lfdng_dlgnd
call fcn.100068b0
push str.color
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x1a
call fcn.100068b0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [edi + 0x580]
call fcn.1000ff10
lea eax, [ebp - 0x64]
push eax
lea ecx, [edi + 0x548]
call fcn.1000ff10
mov dword [edi + 0x598], esi
mov dword [edi + 0x59c], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x1c
call fcn.10006860
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x1d
call fcn.10006860
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
lea esi, [edi + 0x510]
mov dword [ebp - 0x1c], 0x10007730
lea ecx, [esi + 0x58]
push eax
call fcn.1000f500
mov dword [ebp - 0x1c], esi
mov dword [esi + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
mov dword [ebp - 0x40], 0x42444943
mov dword [ebp - 0x3c], 0x4b407a56
mov dword [ebp - 0x38], 0x255c4840
xor ecx, ecx
xor byte [ebp + ecx - 0x40], 0x25
inc ecx
cmp ecx, 0xc
jb 0x1001fde6
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x64]
call fcn.100068b0
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x30], 0x67616c66
mov word [ebp - 0x2c], 0x73
call fcn.100068b0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [edi + 0x5d8]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
mov byte [edi + 0x609], 1
push eax
lea ecx, [edi + 0x610]
call fcn.1000ff10
mov byte [edi + 0x60c], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x20
call fcn.10006860
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x21
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x5a0]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x70616577
push eax
lea ecx, [ebp - 0x64]
mov word [ebp - 0x2c], 0x6e6f
mov byte [ebp - 0x2a], 0
call fcn.100068b0
mov dword [ebp - 4], 0x22
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x20], 0x70616577
mov word [ebp - 0x1c], 0x6e6f
mov byte [ebp - 0x1a], 0
call fcn.100068b0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [edi + 0x6e8]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
mov byte [edi + 0x719], 1
push eax
lea ecx, [edi + 0x720]
call fcn.1000ff10
mov byte [edi + 0x71c], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x24
call fcn.10006860
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x25
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x6b0]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x74786574
push eax
lea ecx, [ebp - 0xb4]
mov byte [ebp - 0x2c], 0
call fcn.100068b0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x28], 0x6e6f6369
mov byte [ebp - 0x24], 0
call fcn.100068b0
lea eax, [ebp - 0x7d]
mov dword [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0xb4]
push edx
lea ecx, [ebp - 0x58]
call fcn.100233b0
mov byte [ebp - 4], 0x28
xor ecx, ecx
mov dword [ebp - 0x40], 0x55444052
mov dword [ebp - 0x3c], 0x487a4b4a
mov dword [ebp - 0x38], 0x2540414a
xor byte [ebp + ecx - 0x40], 0x25
inc ecx
cmp ecx, 0xc
jb 0x1001fff7
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x7c]
call fcn.100068b0
push 0x100454d0
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x29
call fcn.100068b0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [edi + 0x770]
call fcn.1000ff10
mov eax, dword [ebp - 0x54]
lea ecx, [edi + 0x7c0]
mov esi, dword [ebp - 0x58]
mov byte [edi + 0x7a1], 0
mov dword [edi + 0x7d4], 0
mov dword [edi + 0x748], 0x14
mov dword [edi + 0x74c], 0x14
mov dword [ebp - 0x1c], eax
cmp esi, eax
je 0x1002008c
mov edi, ecx
nop
push esi
mov ecx, edi
call fcn.10023360
add esi, 0x18
cmp esi, dword [ebp - 0x1c]
jne 0x10020070
mov edi, dword [ebp - 0x84]
lea ecx, [edi + 0x7c0]
call fcn.10007ca0
test eax, eax
je 0x1002009f
mov dword [edi + 0x7d0], 0
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x2b
call fcn.10006860
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x2c
call fcn.10006860
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x2d
call fcn.10023470
push fcn.10006860
push 2
push 0x18
lea eax, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1003dd12
lea eax, [edi + 0x738]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x6f6d6d61
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x2c], 0
call fcn.100068b0
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x1c], 0x6f6d6d61
mov byte [ebp - 0x18], 0
call fcn.100068b0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [edi + 0x810]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
mov byte [edi + 0x841], 1
push eax
lea ecx, [edi + 0x848]
call fcn.1000ff10
mov byte [edi + 0x844], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x30
call fcn.10006860
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x31
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x7d8]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x6c656b73
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x30], 0x6e6f7465
mov byte [ebp - 0x2c], 0
call fcn.100068b0
mov dword [ebp - 4], 0x32
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x20], 0x6c656b73
mov dword [ebp - 0x1c], 0x6e6f7465
mov byte [ebp - 0x18], 0
call fcn.100068b0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [edi + 0xa40]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
mov byte [edi + 0xa71], 1
push eax
lea ecx, [edi + 0xa78]
call fcn.1000ff10
mov byte [edi + 0xa74], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x34
call fcn.10006860
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x35
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0xa08]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
mov dword [ebp - 0x5c], 0x49404e56
xor ecx, ecx
mov dword [ebp - 0x58], 0x4b4a5140
mov dword [ebp - 0x54], 0x404b407a
mov word [ebp - 0x50], 0x5c48
mov byte [ebp - 0x4e], 0x25
nop dword [eax]
xor byte [ebp + ecx - 0x5c], 0x25
inc ecx
cmp ecx, 0xf
jb 0x100202e0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100068b0
mov dword [ebp - 4], 0x36
xor ecx, ecx
mov dword [ebp - 0x44], 0x49404e56
mov dword [ebp - 0x40], 0x4b4a5140
mov dword [ebp - 0x3c], 0x494a4605
mov word [ebp - 0x38], 0x574a
mov byte [ebp - 0x36], 0x25
xor byte [ebp + ecx - 0x44], 0x25
inc ecx
cmp ecx, 0xf
jb 0x10020322
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x7c]
call fcn.100068b0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [edi + 0xb00]
mov dword [ebp - 0x1c], 0xffffffff
call fcn.1000ff10
lea eax, [ebp - 0x9c]
push eax
lea ecx, [edi + 0xac8]
call fcn.1000ff10
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0xb18], eax
mov dword [edi + 0xb1c], 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x38
call fcn.10006860
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0x39
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0xa90]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x5f786f62
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x30], 0x6d656e65
mov word [ebp - 0x2c], 0x79
call fcn.100068b0
mov dword [ebp - 4], 0x3a
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x40], 0x20786f62
mov dword [ebp - 0x3c], 0x6f6c6f63
mov word [ebp - 0x38], 0x72
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [edi + 0x128]
mov dword [ebp - 0x1c], 0xff3cc896
call fcn.1000ff10
lea eax, [ebp - 0x7c]
push eax
lea ecx, [edi + 0xf0]
call fcn.1000ff10
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0x140], eax
mov dword [edi + 0x144], 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3c
call fcn.10006860
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x3d
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0xb8]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
movaps xmm0, xmmword [0x100469c0]
lea eax, [ebp - 0x5c]
pxor xmm0, xmmword [0x10046a00]
lea ecx, [ebp - 0x7c]
mov esi, dword [0x10045860]
push eax
movups xmmword [ebp - 0x5c], xmm0
call fcn.100068b0
mov dword [ebp - 4], 0x3e
mov ecx, 0x10
movaps xmm0, xmmword [0x100469c0]
pxor xmm0, xmmword [0x10046b00]
mov dword [ebp - 0x38], 0x25574a49
movups xmmword [ebp - 0x48], xmm0
xor byte [ebp + ecx - 0x48], 0x25
inc ecx
cmp ecx, 0x14
jb 0x10020514
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [edi + 0x2c8]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
push eax
lea ecx, [edi + 0x290]
call fcn.1000ff10
mov dword [edi + 0x2e0], esi
mov dword [edi + 0x2e4], 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x40
call fcn.10006860
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x41
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x258]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
mov esi, dword [0x10045860]
xor ecx, ecx
mov dword [ebp - 0x40], 0x4048444b
mov dword [ebp - 0x3c], 0x494a467a
mov word [ebp - 0x38], 0x574a
mov byte [ebp - 0x36], 0x25
xor byte [ebp + ecx - 0x40], 0x25
inc ecx
cmp ecx, 0xb
jb 0x100205e7
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x7c]
call fcn.100068b0
mov dword [ebp - 4], 0x42
xor ecx, ecx
mov dword [ebp - 0x34], 0x4048444b
mov dword [ebp - 0x30], 0x494a4605
mov word [ebp - 0x2c], 0x574a
mov byte [ebp - 0x2a], 0x25
nop
xor byte [ebp + ecx - 0x34], 0x25
inc ecx
cmp ecx, 0xb
jb 0x10020620
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x43
push eax
lea ecx, [edi + 0x3e0]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
push eax
lea ecx, [edi + 0x3a8]
call fcn.1000ff10
mov dword [edi + 0x3f8], esi
mov dword [edi + 0x3fc], 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x44
call fcn.10006860
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x45
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x370]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
mov esi, dword [0x10045884]
xor ecx, ecx
mov dword [ebp - 0x40], 0x4a484844
mov dword [ebp - 0x3c], 0x494a467a
mov word [ebp - 0x38], 0x574a
mov byte [ebp - 0x36], 0x25
xor byte [ebp + ecx - 0x40], 0x25
inc ecx
cmp ecx, 0xb
jb 0x100206f3
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x7c]
call fcn.100068b0
mov dword [ebp - 4], 0x46
xor ecx, ecx
mov dword [ebp - 0x34], 0x4a484844
mov dword [ebp - 0x30], 0x494a4605
mov word [ebp - 0x2c], 0x574a
mov byte [ebp - 0x2a], 0x25
nop dword [eax + eax]
xor byte [ebp + ecx - 0x34], 0x25
inc ecx
cmp ecx, 0xb
jb 0x10020730
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [edi + 0x8d0]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
push eax
lea ecx, [edi + 0x898]
call fcn.1000ff10
mov dword [edi + 0x8e8], esi
mov dword [edi + 0x8ec], 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x48
call fcn.10006860
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x49
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x860]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
movaps xmm0, xmmword [0x100469c0]
lea eax, [ebp - 0x48]
pxor xmm0, xmmword [0x10046b90]
lea ecx, [ebp - 0x7c]
mov esi, dword [0x1004587c]
push eax
movups xmmword [ebp - 0x48], xmm0
mov byte [ebp - 0x38], 0
call fcn.100068b0
mov dword [ebp - 4], 0x4a
xor ecx, ecx
mov dword [ebp - 0x5c], 0x55444052
mov dword [ebp - 0x58], 0x46054b4a
mov dword [ebp - 0x54], 0x574a494a
mov byte [ebp - 0x50], 0x25
nop
xor byte [ebp + ecx - 0x5c], 0x25
inc ecx
cmp ecx, 0xd
jb 0x10020830
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x4b
push eax
lea ecx, [edi + 0x9e8]
call fcn.1000ff10
lea eax, [ebp - 0x7c]
push eax
lea ecx, [edi + 0x9b0]
call fcn.1000ff10
mov dword [edi + 0xa00], esi
mov dword [edi + 0xa04], 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x4c
call fcn.10006860
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x4d
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x978]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
push str.123456
lea ecx, [ebp - 0x160]
call fcn.100068b0
push 0x100454f0
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], 0x4e
call fcn.100068b0
push 0x100454f4
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x4f
call fcn.100068b0
push 0x100454f8
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x50
call fcn.100068b0
push 0x100454fc
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x51
call fcn.100068b0
push 0x10045500
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x52
call fcn.100068b0
lea eax, [ebp - 0x7d]
mov dword [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0x160]
push edx
lea ecx, [ebp - 0x58]
call fcn.100233b0
mov byte [ebp - 4], 0x54
push 0x100463b0
lea ecx, [ebp - 0x7c]
call fcn.100068b0
push str.configuration
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x55
call fcn.100068b0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [edi + 0xbe8]
call fcn.1000ff10
lea eax, [ebp - 0x9c]
mov byte [edi + 0xc19], 1
push eax
lea ecx, [edi + 0xc20]
call fcn.1000ff10
mov esi, dword [ebp - 0x58]
xor ecx, ecx
cmp byte [edi + 0xc19], cl
mov edx, 0xf
cmovne ecx, edx
mov dword [edi + 0xc4c], ecx
lea eax, [ecx + 0x14]
mov dword [edi + 0xbc0], eax
mov dword [edi + 0xbc4], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], eax
cmp esi, eax
je 0x10020a28
lea eax, [edi + 0xc38]
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
nop word [eax + eax]
push esi
mov ecx, eax
call fcn.10023360
mov eax, dword [ebp - 0x1c]
add esi, 0x18
cmp esi, edi
jne 0x10020a10
mov edi, dword [ebp - 0x84]
mov ecx, dword [edi + 0xc3c]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0xc38]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10020a51
mov dword [edi + 0xc48], 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x57
call fcn.10006860
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x58
call fcn.10006860
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x59
call fcn.10023470
push fcn.10006860
push 6
push 0x18
lea eax, [ebp - 0x160]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1003dd12
and dword [edi + 0xc00], 0xfffffff7
lea eax, [edi + 0xbb0]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 1
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x65766173
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x2c], 0
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 0x5a
push eax
lea ecx, [edi + 0x101c]
call fcn.1000ff10
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0x5b
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0xfb0]
mov dword [eax + 0x64], 0x100079f0
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 1
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x64616f6c
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x2c], 0
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 0x5c
push eax
lea ecx, [edi + 0x10a0]
call fcn.1000ff10
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0x5d
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x1034]
mov dword [eax + 0x64], 0x10007740
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 1
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
push str.fullstop
lea ecx, [ebp - 0x4c]
call fcn.100068b0
push str.full_stop_inair
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0x5e
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x5f
push eax
lea ecx, [edi + 0x1128]
call fcn.1000ff10
lea eax, [ebp - 0x4c]
push eax
lea ecx, [edi + 0x10f0]
call fcn.1000ff10
mov dword [edi + 0x1124], 0xffffffff
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x60
call fcn.10006860
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0x61
call fcn.10006860
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x10b8]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x18], 1
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x18]
call fcn.1000f500
push str.name
lea ecx, [ebp - 0xcc]
call fcn.100068b0
push str.name
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0x62
call fcn.100068b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x63
push eax
lea ecx, [edi + 0x1168]
call fcn.1000ff10
lea eax, [ebp - 0xcc]
push eax
lea ecx, [edi + 0x1180]
call fcn.1000ff10
lea ecx, [ebp - 0x9c]
mov dword [edi + 0x11cc], 0xc
mov dword [edi + 0x1158], 0x23
mov dword [edi + 0x115c], 0x23
call fcn.10006860
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
call fcn.10006860
lea eax, [edi + 0x1148]
mov dword [ebp - 0x28], eax
lea ecx, [edi + 0x18]
mov dword [eax + 0x18], 1
mov edx, dword [ebp - 0x28]
imul eax, dword [edx + 0x18], 0xeb
add eax, 0x14
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x28]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x28]
mov edx, dword [edi + 0x2c]
mov dword [eax + 0x1c], edx
lea eax, [ebp - 0x28]
push eax
call fcn.10023330
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1003dcc3
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret