Function at 0x1005c3c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
push ebx
mov ebx, ecx
mov dword [esp + 4], 0x4a504624
push esi
push edi
mov dword [esp + 0x44], ebx
mov dl, 0x24
mov dword [esp + 0x10], 0x4b48477b
xor ecx, ecx
mov word [esp + 0x14], 0x4157
mov byte [esp + 0x16], 0
xor byte [esp + ecx + 0xd], dl
inc ecx
cmp ecx, 9
jae 0x1005c402
mov dl, byte [esp + 0xc]
jmp 0x1005c3f2
xorps xmm0, xmm0
mov byte [esp + 0x16], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005c430
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
je 0x1005c4c8
test ebx, ebx
je 0x1005c4c8
push 4
push ebx
call esi
test eax, eax
jne 0x1005c4c8
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005c4c2
cmp esi, dword [ebx + 0xc4]
jne 0x1005c481
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005c4ad
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005c493
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005c522
cmp esi, dword [ebx + 0xc4]
jne 0x1005c4ba
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005c474
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 4], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
add esp, 8
mov dword [esp + 0xc], 0x445e482a
mov dl, 0x2a
mov dword [esp + 0x10], 0x584b5d75
mov dword [esp + 0x14], 0x58454358
xor ecx, ecx
mov byte [esp + 0x18], 0
xor byte [esp + ecx + 0xd], dl
inc ecx
cmp ecx, 0xb
jae 0x1005c52a
mov dl, byte [esp + 0xc]
jmp 0x1005c512
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
jmp 0x1005c4ca
xorps xmm0, xmm0
mov byte [esp + 0x18], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005c556
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005c5e2
test ebx, ebx
je 0x1005c5e2
push 4
push ebx
call esi
test eax, eax
jne 0x1005c5e2
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005c5e2
cmp esi, dword [ebx + 0xc4]
jne 0x1005c5a1
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005c5cd
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005c5b3
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005c5e4
cmp esi, dword [ebx + 0xc4]
jne 0x1005c5da
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005c594
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 8], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
add esp, 8
mov dword [esp + 0xc], 0x5a405634
mov dl, 0x34
mov dword [esp + 0x10], 0x535b466b
mov word [esp + 0x14], 0x5141
xor ecx, ecx
mov byte [esp + 0x16], 0
nop dword [eax + eax]
xor byte [esp + ecx + 0xd], dl
inc ecx
cmp ecx, 9
jae 0x1005c640
mov dl, byte [esp + 0xc]
jmp 0x1005c630
xorps xmm0, xmm0
mov byte [esp + 0x16], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005c670
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005c700
test ebx, ebx
je 0x1005c700
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005c700
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005c700
cmp esi, dword [ebx + 0xc4]
jne 0x1005c6bf
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005c6eb
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005c6d1
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005c702
cmp esi, dword [ebx + 0xc4]
jne 0x1005c6f8
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005c6b2
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 0xc], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
add esp, 8
mov dword [esp + 0xc], 0x9130567
mov dl, 0x67
mov dword [esp + 0x10], 0x60a38
mov word [esp + 0x14], 2
xor ecx, ecx
xor byte [esp + ecx + 0xd], dl
inc ecx
cmp ecx, 8
jae 0x1005c754
mov dl, byte [esp + 0xc]
jmp 0x1005c744
xorps xmm0, xmm0
mov byte [esp + 0x15], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005c780
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005c810
test ebx, ebx
je 0x1005c810
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005c810
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005c810
cmp esi, dword [ebx + 0xc4]
jne 0x1005c7cf
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005c7fb
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005c7e1
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005c812
cmp esi, dword [ebx + 0xc4]
jne 0x1005c808
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005c7c2
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 0x10], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
add esp, 8
mov dword [esp + 0xc], 0x716b7d1f
mov dl, 0x1f
mov dword [esp + 0x10], 0x766d6f40
mov dword [esp + 0x14], 0x6b6c7a
xor ecx, ecx
xor byte [esp + ecx + 0xd], dl
inc ecx
cmp ecx, 0xa
jae 0x1005c865
mov dl, byte [esp + 0xc]
jmp 0x1005c855
xorps xmm0, xmm0
mov byte [esp + 0x17], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005c891
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005c921
test ebx, ebx
je 0x1005c921
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005c921
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005c921
cmp esi, dword [ebx + 0xc4]
jne 0x1005c8e0
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005c90c
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005c8f2
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005c923
cmp esi, dword [ebx + 0xc4]
jne 0x1005c919
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005c8d3
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 0x14], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ef070]
add esp, 8
movups xmmword [esp + 0xc], xmm0
mov dword [esp + 0x1c], 0x727a7e
xor ecx, ecx
mov al, byte [esp + ecx + 0xd]
xor al, byte [esp + 0xc]
mov byte [esp + ecx + 0xd], al
inc ecx
cmp ecx, 0x12
jb 0x1005c960
xorps xmm0, xmm0
mov byte [esp + 0x1f], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005c9a0
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005ca30
test ebx, ebx
je 0x1005ca30
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005ca30
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005ca30
cmp esi, dword [ebx + 0xc4]
jne 0x1005c9ef
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005ca1b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005ca01
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005ca32
cmp esi, dword [ebx + 0xc4]
jne 0x1005ca28
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005c9e2
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 0x18], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
movaps xmm0, xmmword [str.R_r9____r1_]
add esp, 8
movups xmmword [esp + 0xc], xmm0
xor ecx, ecx
nop word [eax + eax]
mov al, byte [esp + ecx + 0xd]
xor al, byte [esp + 0xc]
mov byte [esp + ecx + 0xd], al
inc ecx
cmp ecx, 0xe
jb 0x1005ca70
xorps xmm0, xmm0
mov byte [esp + 0x1b], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005cab0
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005cb40
test ebx, ebx
je 0x1005cb40
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005cb40
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005cb40
cmp esi, dword [ebx + 0xc4]
jne 0x1005caff
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005cb2b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005cb11
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005cb42
cmp esi, dword [ebx + 0xc4]
jne 0x1005cb38
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005caf2
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 0x1c], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
movaps xmm0, xmmword [0x100eedc0]
add esp, 8
movups xmmword [esp + 0xc], xmm0
mov byte [esp + 0x1c], 0
xor ecx, ecx
nop dword [eax]
mov al, byte [esp + ecx + 0xd]
xor al, byte [esp + 0xc]
mov byte [esp + ecx + 0xd], al
inc ecx
cmp ecx, 0xf
jb 0x1005cb80
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005cbc0
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005cc50
test ebx, ebx
je 0x1005cc50
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005cc50
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005cc50
cmp esi, dword [ebx + 0xc4]
jne 0x1005cc0f
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005cc3b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005cc21
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005cc52
cmp esi, dword [ebx + 0xc4]
jne 0x1005cc48
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005cc02
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 0x20], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ee7f0]
add esp, 8
movups xmmword [esp + 0xc], xmm0
mov dword [esp + 0x1c], 0x18031915
xor ecx, ecx
mov word [esp + 0x20], 2
nop word [eax + eax]
mov al, byte [esp + ecx + 0xd]
xor al, byte [esp + 0xc]
mov byte [esp + ecx + 0xd], al
inc ecx
cmp ecx, 0x14
jb 0x1005cca0
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005cce0
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005cd70
test ebx, ebx
je 0x1005cd70
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005cd70
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005cd70
cmp esi, dword [ebx + 0xc4]
jne 0x1005cd2f
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005cd5b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005cd41
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005cd72
cmp esi, dword [ebx + 0xc4]
jne 0x1005cd68
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005cd22
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 0x24], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ee3c0]
add esp, 8
movups xmmword [esp + 0xc], xmm0
mov dword [esp + 0x1c], 0x20e3201
xor ecx, ecx
mov dword [esp + 0x20], 0x190318
nop word [eax + eax]
mov al, byte [esp + ecx + 0xd]
xor al, byte [esp + 0xc]
mov byte [esp + ecx + 0xd], al
inc ecx
cmp ecx, 0x16
jb 0x1005cdc0
xorps xmm0, xmm0
mov byte [esp + 0x23], 0
lea ecx, [esp + 0xd]
mov dword [esp + 0x28], 0
movups xmmword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], 0
lea edx, [ecx + 1]
mov dword [esp + 0x40], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005ce00
sub ecx, edx
lea eax, [esp + 0xd]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.10003370
cmp dword [esp + 0x3c], 0
mov ebx, dword [ebx]
je 0x1005ce90
test ebx, ebx
je 0x1005ce90
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005ce90
mov eax, dword [ebx + 0xc4]
mov dword [esp + 0x24], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005ce90
cmp esi, dword [ebx + 0xc4]
jne 0x1005ce4f
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1005ce7b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005ce61
mov ecx, dword [ecx]
cmp dword [esp + 0x40], 0xf
lea eax, [esp + 0x2c]
cmova eax, dword [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005ce92
cmp esi, dword [ebx + 0xc4]
jne 0x1005ce88
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x1005ce42
xor edi, edi
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
mov dword [ebx + 0x28], edi
call fcn.10002f50
mov eax, dword [esp + 0x28]
push 8
push eax
mov dword [esp + 0x30], 0
call fcn.10089370
add esp, 8
mov ecx, ebx
call fcn.1005cf10
mov esi, dword [ebx]
test esi, esi
je 0x1005cee2
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005cee2
lea ecx, [esi + 0xd4]
call fcn.1001e520
mov esi, eax
jmp 0x1005cee4
xor esi, esi
mov edi, dword [ebx]
test edi, edi
je 0x1005cf03
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005cf03
or esi, 0x38
mov ecx, edi
push esi
call dword [0x100ec610]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret