Function at 0x100348b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ce8e5
mov eax, dword fs:[0]
push eax
sub esp, 0x3ec
mov eax, dword [0x100f7040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x3c], esi
call fcn.10038730
mov dl, 0x24
mov dword [ebp - 0xa0], 0x4b564324
mov dword [ebp - 0x9c], 0x4b7b5451
xor ecx, ecx
mov dword [ebp - 0x98], 0x4b4d5054
mov word [ebp - 0x94], 0x4a
xor byte [ebp + ecx - 0x9f], dl
inc ecx
cmp ecx, 0xc
jae 0x10034927
mov dl, byte [ebp - 0xa0]
jmp 0x10034912
xorps xmm0, xmm0
mov byte [ebp - 0x93], 0
lea ecx, [ebp - 0x9f]
mov dword [ebp - 0x2a8], 0
movups xmmword [ebp - 0x2a4], xmm0
mov dword [ebp - 0x294], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x290], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034960
sub ecx, edx
lea eax, [ebp - 0x9f]
push ecx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.10003370
cmp dword [ebp - 0x294], 0
mov edi, dword [esi + 0x30]
je 0x10034a02
test edi, edi
je 0x10034a02
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034a02
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x40], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10034a02
cmp esi, dword [edi + 0xc4]
jne 0x100349b5
call fcn.1008fe40
mov eax, dword [esi + 8]
mov dword [ebp - 0x48], eax
test eax, eax
je 0x100349ee
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100349ca
mov ecx, dword [ecx]
cmp dword [ebp - 0x290], 0xf
lea eax, [ebp - 0x2a4]
cmova eax, dword [ebp - 0x2a4]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100350ea
cmp esi, dword [edi + 0xc4]
jne 0x100349fb
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x40]
jne 0x100349a8
xor esi, esi
mov dword [ebp - 0x48], esi
lea ecx, [ebp - 0x2a8]
call fcn.10002f50
mov eax, dword [ebp - 0x2a8]
push 8
push eax
mov dword [ebp - 0x2a8], 0
call fcn.10089370
movaps xmm0, xmmword [0x100eecb0]
add esp, 8
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xf4], 0x4b5f4d44
xor ecx, ecx
mov word [ebp - 0xf0], 0x4f4d
mov byte [ebp - 0xee], 0
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x103]
xor al, byte [ebp - 0x104]
mov byte [ebp + ecx - 0x103], al
inc ecx
cmp ecx, 0x15
jb 0x10034a60
xorps xmm0, xmm0
mov byte [ebp - 0xee], 0
lea ecx, [ebp - 0x103]
mov dword [ebp - 0x1c8], 0
movups xmmword [ebp - 0x1c4], xmm0
mov dword [ebp - 0x1b4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1b0], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034ab2
sub ecx, edx
lea eax, [ebp - 0x103]
push ecx
push eax
lea ecx, [ebp - 0x1c8]
call fcn.10003370
cmp dword [ebp - 0x1b4], 0
je 0x10034b4d
test esi, esi
je 0x10034b4d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034b4d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x40], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10034b4d
cmp edi, dword [esi + 0xc4]
jne 0x10034b04
call fcn.1008fe40
mov esi, dword [edi + 8]
test esi, esi
je 0x10034b36
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x10034b16
mov ecx, dword [ecx]
cmp dword [ebp - 0x1b0], 0xf
lea eax, [ebp - 0x1c4]
cmova eax, dword [ebp - 0x1c4]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10034b4f
mov esi, dword [ebp - 0x48]
cmp edi, dword [esi + 0xc4]
jne 0x10034b46
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x40]
jne 0x10034af7
xor esi, esi
lea ecx, [ebp - 0x1c8]
call fcn.10002f50
mov eax, dword [ebp - 0x1c8]
push 8
push eax
mov dword [ebp - 0x1c8], 0
call fcn.10089370
movaps xmm0, xmmword [str.4V_ZkG__XXkUFQU]
add esp, 8
movups xmmword [ebp - 0x1ac], xmm0
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1ab]
xor al, byte [ebp - 0x1ac]
mov byte [ebp + ecx - 0x1ab], al
inc ecx
cmp ecx, 0xe
jb 0x10034b90
xorps xmm0, xmm0
mov byte [ebp - 0x19d], 0
lea ecx, [ebp - 0x1ab]
mov dword [ebp - 0x1e4], 0
movups xmmword [ebp - 0x1e0], xmm0
mov dword [ebp - 0x1d0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1cc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034be2
sub ecx, edx
lea eax, [ebp - 0x1ab]
push ecx
push eax
lea ecx, [ebp - 0x1e4]
call fcn.10003370
cmp dword [ebp - 0x1d0], 0
je 0x10034c81
test esi, esi
je 0x10034c81
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034c81
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x40], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10034c81
cmp edi, dword [esi + 0xc4]
jne 0x10034c34
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x38], eax
test eax, eax
je 0x10034c6d
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10034c49
mov ecx, dword [ecx]
cmp dword [ebp - 0x1cc], 0xf
lea eax, [ebp - 0x1e0]
cmova eax, dword [ebp - 0x1e0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100350f2
cmp edi, dword [esi + 0xc4]
jne 0x10034c7a
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x40]
jne 0x10034c27
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
lea ecx, [ebp - 0x1e4]
call fcn.10002f50
mov eax, dword [ebp - 0x1e4]
push 8
push eax
mov dword [ebp - 0x1e4], 0
call fcn.10089370
mov eax, dword [ebp - 0x3c]
add esp, 8
cmp dword [eax], 0
je 0x10034cc4
cmp dword [0x100fb494], 1
sete byte [0x100fb032]
movaps xmm0, xmmword [0x100ee3b0]
xor ecx, ecx
movups xmmword [ebp - 0x160], xmm0
mov dword [ebp - 0x150], 0x130402
nop
mov al, byte [ebp + ecx - 0x15f]
xor al, byte [ebp - 0x160]
mov byte [ebp + ecx - 0x15f], al
inc ecx
cmp ecx, 0x12
jb 0x10034ce0
xorps xmm0, xmm0
mov byte [ebp - 0x14d], 0
lea ecx, [ebp - 0x15f]
mov dword [ebp - 0x200], 0
movups xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x1ec], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1e8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034d32
sub ecx, edx
lea eax, [ebp - 0x15f]
push ecx
push eax
lea ecx, [ebp - 0x200]
call fcn.10003370
cmp dword [ebp - 0x1ec], 0
je 0x10034dd1
test esi, esi
je 0x10034dd1
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034dd1
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10034dd1
cmp edi, dword [esi + 0xc4]
jne 0x10034d84
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x10034dbd
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10034d99
mov ecx, dword [ecx]
cmp dword [ebp - 0x1e8], 0xf
lea eax, [ebp - 0x1fc]
cmova eax, dword [ebp - 0x1fc]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100350fa
cmp edi, dword [esi + 0xc4]
jne 0x10034dca
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x38]
jne 0x10034d77
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x200]
call fcn.10002f50
mov eax, dword [ebp - 0x200]
push 8
push eax
mov dword [ebp - 0x200], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ef390]
add esp, 8
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x13c], 0x6b716a70
xor ecx, ecx
mov byte [ebp - 0x138], 0
mov al, byte [ebp + ecx - 0x14b]
xor al, byte [ebp - 0x14c]
mov byte [ebp + ecx - 0x14b], al
inc ecx
cmp ecx, 0x13
jb 0x10034e20
xorps xmm0, xmm0
mov byte [ebp - 0x138], 0
lea ecx, [ebp - 0x14b]
mov dword [ebp - 0x21c], 0
movups xmmword [ebp - 0x218], xmm0
mov dword [ebp - 0x208], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x204], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034e72
sub ecx, edx
lea eax, [ebp - 0x14b]
push ecx
push eax
lea ecx, [ebp - 0x21c]
call fcn.10003370
cmp dword [ebp - 0x208], 0
je 0x10034f11
test esi, esi
je 0x10034f11
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034f11
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10034f11
cmp edi, dword [esi + 0xc4]
jne 0x10034ec4
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x10034efd
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10034ed9
mov ecx, dword [ecx]
cmp dword [ebp - 0x204], 0xf
lea eax, [ebp - 0x218]
cmova eax, dword [ebp - 0x218]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035102
cmp edi, dword [esi + 0xc4]
jne 0x10034f0a
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x38]
jne 0x10034eb7
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x34], eax
lea ecx, [ebp - 0x21c]
call fcn.10002f50
mov eax, dword [ebp - 0x21c]
push 8
push eax
mov dword [ebp - 0x21c], 0
call fcn.10089370
mov eax, dword [ebp - 0x3c]
add esp, 8
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x10034f56
push 0x1388
call fcn.1001e230
add esp, 4
movaps xmm0, xmmword [0x100ef330]
xor ecx, ecx
movups xmmword [ebp - 0x19c], xmm0
mov word [ebp - 0x18c], 0x72
nop
mov al, byte [ebp + ecx - 0x19b]
xor al, byte [ebp - 0x19c]
mov byte [ebp + ecx - 0x19b], al
inc ecx
cmp ecx, 0x10
jb 0x10034f70
xorps xmm0, xmm0
mov byte [ebp - 0x18b], 0
lea ecx, [ebp - 0x19b]
mov dword [ebp - 0x238], 0
movups xmmword [ebp - 0x234], xmm0
mov dword [ebp - 0x224], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x220], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034fc2
sub ecx, edx
lea eax, [ebp - 0x19b]
push ecx
push eax
lea ecx, [ebp - 0x238]
call fcn.10003370
cmp dword [ebp - 0x224], 0
je 0x10035061
test esi, esi
je 0x10035061
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10035061
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10035061
cmp edi, dword [esi + 0xc4]
jne 0x10035014
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x1003504d
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035029
mov ecx, dword [ecx]
cmp dword [ebp - 0x220], 0xf
lea eax, [ebp - 0x234]
cmova eax, dword [ebp - 0x234]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003510a
cmp edi, dword [esi + 0xc4]
jne 0x1003505a
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x38]
jne 0x10035007
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x38], eax
lea ecx, [ebp - 0x238]
call fcn.10002f50
mov eax, dword [ebp - 0x238]
push 8
push eax
mov dword [ebp - 0x238], 0
call fcn.10089370
mov eax, dword [ebp - 0x3c]
add esp, 8
mov ecx, dword [eax + 0x38]
test ecx, ecx
je 0x100350a3
push 0x17
call fcn.1001e230
add esp, 4
mov dl, 0x52
mov dword [ebp - 0xcc], 0x262a2652
mov dword [ebp - 0xc8], 0x3f33350d
xor ecx, ecx
mov dword [ebp - 0xc4], 0x3b260d37
mov word [ebp - 0xc0], 0x373f
mov byte [ebp - 0xbe], 0
xor byte [ebp + ecx - 0xcb], dl
inc ecx
cmp ecx, 0xd
jae 0x10035112
mov dl, byte [ebp - 0xcc]
jmp 0x100350d5
mov esi, dword [ebp - 0x48]
jmp 0x10034a07
mov eax, dword [ebp - 0x38]
jmp 0x10034c83
mov eax, dword [ebp - 0x40]
jmp 0x10034dd3
mov eax, dword [ebp - 0x40]
jmp 0x10034f13
mov eax, dword [ebp - 0x40]
jmp 0x10035063
xorps xmm0, xmm0
mov byte [ebp - 0xbe], 0
lea ecx, [ebp - 0xcb]
mov dword [ebp - 0x254], 0
movups xmmword [ebp - 0x250], xmm0
mov dword [ebp - 0x240], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x23c], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035150
sub ecx, edx
lea eax, [ebp - 0xcb]
push ecx
push eax
lea ecx, [ebp - 0x254]
call fcn.10003370
cmp dword [ebp - 0x240], 0
je 0x100351ef
test esi, esi
je 0x100351ef
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100351ef
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100351ef
cmp edi, dword [esi + 0xc4]
jne 0x100351a2
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x100351db
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100351b7
mov ecx, dword [ecx]
cmp dword [ebp - 0x23c], 0xf
lea eax, [ebp - 0x250]
cmova eax, dword [ebp - 0x250]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035645
cmp edi, dword [esi + 0xc4]
jne 0x100351e8
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x38]
jne 0x10035195
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x3c], eax
lea ecx, [ebp - 0x254]
call fcn.10002f50
mov eax, dword [ebp - 0x254]
push 8
push eax
mov dword [ebp - 0x254], 0
call fcn.10089370
movaps xmm0, xmmword [0x100eea60]
add esp, 8
movups xmmword [ebp - 0x134], xmm0
mov dword [ebp - 0x124], 0x52454340
xor ecx, ecx
mov byte [ebp - 0x120], 0
nop
mov al, byte [ebp + ecx - 0x133]
xor al, byte [ebp - 0x134]
mov byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0x13
jb 0x10035240
xorps xmm0, xmm0
mov byte [ebp - 0x120], 0
lea ecx, [ebp - 0x133]
mov dword [ebp - 0x270], 0
movups xmmword [ebp - 0x26c], xmm0
mov dword [ebp - 0x25c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x258], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035292
sub ecx, edx
lea eax, [ebp - 0x133]
push ecx
push eax
lea ecx, [ebp - 0x270]
call fcn.10003370
cmp dword [ebp - 0x25c], 0
je 0x10035336
mov esi, dword [ebp - 0x48]
test esi, esi
je 0x10035336
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10035336
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10035336
nop
cmp edi, dword [esi + 0xc4]
jne 0x100352ed
call fcn.1008fe40
mov esi, dword [edi + 8]
test esi, esi
je 0x1003531f
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x100352ff
mov ecx, dword [ecx]
cmp dword [ebp - 0x258], 0xf
lea eax, [ebp - 0x26c]
cmova eax, dword [ebp - 0x26c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035338
mov esi, dword [ebp - 0x48]
cmp edi, dword [esi + 0xc4]
jne 0x1003532f
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x38]
jne 0x100352e0
xor esi, esi
lea ecx, [ebp - 0x270]
call fcn.10002f50
mov eax, dword [ebp - 0x270]
push 8
push eax
mov dword [ebp - 0x270], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ee550]
add esp, 8
movups xmmword [ebp - 0x174], xmm0
mov dword [ebp - 0x164], 0x1b1919
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x173]
xor al, byte [ebp - 0x174]
mov byte [ebp + ecx - 0x173], al
inc ecx
cmp ecx, 0x12
jb 0x10035380
xorps xmm0, xmm0
mov byte [ebp - 0x161], 0
lea ecx, [ebp - 0x173]
mov dword [ebp - 0x28c], 0
movups xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0x278], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x274], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100353d2
sub ecx, edx
lea eax, [ebp - 0x173]
push ecx
push eax
lea ecx, [ebp - 0x28c]
call fcn.10003370
cmp dword [ebp - 0x278], 0
je 0x1003547a
test esi, esi
je 0x1003547a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003547a
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003547a
nop dword [eax + eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003542d
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x10035466
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035442
mov ecx, dword [ecx]
cmp dword [ebp - 0x274], 0xf
lea eax, [ebp - 0x288]
cmova eax, dword [ebp - 0x288]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003564d
cmp edi, dword [esi + 0xc4]
jne 0x10035473
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x38]
jne 0x10035420
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x40], eax
lea ecx, [ebp - 0x28c]
call fcn.10002f50
mov eax, dword [ebp - 0x28c]
push 8
push eax
mov dword [ebp - 0x28c], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ee430]
add esp, 8
movups xmmword [ebp - 0x188], xmm0
mov word [ebp - 0x178], 0x80a
xor ecx, ecx
mov byte [ebp - 0x176], 0
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x187]
xor al, byte [ebp - 0x188]
mov byte [ebp + ecx - 0x187], al
inc ecx
cmp ecx, 0x11
jb 0x100354d0
xorps xmm0, xmm0
mov byte [ebp - 0x176], 0
lea ecx, [ebp - 0x187]
mov dword [ebp - 0x350], 0
movups xmmword [ebp - 0x34c], xmm0
mov dword [ebp - 0x33c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x338], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035522
sub ecx, edx
lea eax, [ebp - 0x187]
push ecx
push eax
lea ecx, [ebp - 0x350]
call fcn.10003370
cmp dword [ebp - 0x33c], 0
je 0x100355c1
test esi, esi
je 0x100355c1
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100355c1
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100355c1
cmp edi, dword [esi + 0xc4]
jne 0x10035574
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x100355ad
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035589
mov ecx, dword [ecx]
cmp dword [ebp - 0x338], 0xf
lea eax, [ebp - 0x34c]
cmova eax, dword [ebp - 0x34c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035655
cmp edi, dword [esi + 0xc4]
jne 0x100355ba
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x38]
jne 0x10035567
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x44], eax
lea ecx, [ebp - 0x350]
call fcn.10002f50
mov eax, dword [ebp - 0x350]
push 8
push eax
mov dword [ebp - 0x350], 0
call fcn.10089370
mov eax, dword [ebp - 0x3c]
add esp, 8
mov ecx, dword [eax + 0x40]
test ecx, ecx
je 0x10035603
push 0xa
call fcn.1001e230
add esp, 4
mov dl, 0x16
mov dword [ebp - 0xb0], 0x78627416
mov dword [ebp - 0xac], 0x77626549
xor ecx, ecx
mov dword [ebp - 0xa8], 0x62497362
mov word [ebp - 0xa4], 0x66
nop
xor byte [ebp + ecx - 0xaf], dl
inc ecx
cmp ecx, 0xc
jae 0x1003565d
mov dl, byte [ebp - 0xb0]
jmp 0x10035630
mov eax, dword [ebp - 0x40]
jmp 0x100351f1
mov eax, dword [ebp - 0x40]
jmp 0x1003547c
mov eax, dword [ebp - 0x40]
jmp 0x100355c3
xorps xmm0, xmm0
mov byte [ebp - 0xa3], 0
lea ecx, [ebp - 0xaf]
mov dword [ebp - 0x2c4], 0
movups xmmword [ebp - 0x2c0], xmm0
mov dword [ebp - 0x2b0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2ac], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035695
sub ecx, edx
lea eax, [ebp - 0xaf]
push ecx
push eax
lea ecx, [ebp - 0x2c4]
call fcn.10003370
cmp dword [ebp - 0x2b0], 0
je 0x1003573a
test esi, esi
je 0x1003573a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003573a
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x38], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003573a
nop
cmp edi, dword [esi + 0xc4]
jne 0x100356ed
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x10035726
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035702
mov ecx, dword [ecx]
cmp dword [ebp - 0x2ac], 0xf
lea eax, [ebp - 0x2c0]
cmova eax, dword [ebp - 0x2c0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035995
cmp edi, dword [esi + 0xc4]
jne 0x10035733
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x38]
jne 0x100356e0
xor eax, eax
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c4]
mov dword [esi + 8], eax
call fcn.10002f50
mov eax, dword [ebp - 0x2c4]
push 8
push eax
mov dword [ebp - 0x2c4], 0
call fcn.10089370
add esp, 8
cmp dword [esi + 8], 0
je 0x1003581a
xorps xmm0, xmm0
mov byte [ebp - 0x14], 0xa1
push 0x1000
lea ecx, [ebp - 0x34]
movups xmmword [ebp - 0x34], xmm0
movups xmmword [ebp - 0x24], xmm0
call fcn.1000f180
push 1
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], vtable.Packet.0
call fcn.1000f340
push 0xab
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 1
call fcn.100269d0
movzx ecx, byte [0x100fb490]
push ecx
mov ecx, eax
call fcn.100269d0
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x34]
sub esi, dword [ebp - 0x20]
mov dword [ebp - 0x38], esi
call fcn.10026a10
mov dword [ebp - 0x40], eax
cmp esi, 0x4000
ja 0x10035804
mov eax, dword [0x100faff4]
mov dword [ebp - 0x44], eax
mov ecx, dword ds:[0x100e7140]
mov ecx, dword ds:[ecx]
push dword [ebp - 0x38]
push dword [ebp - 0x40]
call dword [ebp - 0x44]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x34], vtable.ByteBuffer.0
call fcn.1000f6d0
movaps xmm0, xmmword [0x100ef360]
xor ecx, ecx
movups xmmword [ebp - 0x11c], xmm0
mov dword [ebp - 0x10c], 0x7a7d607b
mov word [ebp - 0x108], 0x73
nop dword [eax]
mov al, byte [ebp + ecx - 0x11b]
xor al, byte [ebp - 0x11c]
mov byte [ebp + ecx - 0x11b], al
inc ecx
cmp ecx, 0x14
jb 0x10035840
xorps xmm0, xmm0
mov byte [ebp - 0x107], 0
lea ecx, [ebp - 0x11b]
mov dword [ebp - 0x2e0], 0
movups xmmword [ebp - 0x2dc], xmm0
mov dword [ebp - 0x2cc], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035892
sub ecx, edx
lea eax, [ebp - 0x11b]
push ecx
push eax
lea ecx, [ebp - 0x2e0]
call fcn.10003370
cmp dword [ebp - 0x2cc], 0
je 0x10035938
mov esi, dword [ebp - 0x48]
test esi, esi
je 0x10035938
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10035938
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x44], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10035938
cmp edi, dword [esi + 0xc4]
jne 0x100358ef
call fcn.1008fe40
mov esi, dword [edi + 8]
test esi, esi
je 0x10035921
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x10035901
mov ecx, dword [ecx]
cmp dword [ebp - 0x2c8], 0xf
lea eax, [ebp - 0x2dc]
cmova eax, dword [ebp - 0x2dc]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003593a
mov esi, dword [ebp - 0x48]
cmp edi, dword [esi + 0xc4]
jne 0x10035931
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x44]
jne 0x100358e2
xor esi, esi
lea ecx, [ebp - 0x2e0]
call fcn.10002f50
mov eax, dword [ebp - 0x2e0]
push 8
push eax
mov dword [ebp - 0x2e0], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0x84], 0x1c061072
mov dl, 0x72
mov dword [ebp - 0x80], 0x1317052d
mov dword [ebp - 0x7c], 0x1c1d02
xor ecx, ecx
nop dword [eax]
xor byte [ebp + ecx - 0x83], dl
inc ecx
cmp ecx, 0xa
jae 0x1003599d
mov dl, byte [ebp - 0x84]
jmp 0x10035980
mov eax, dword [ebp - 0x40]
jmp 0x1003573c
xorps xmm0, xmm0
mov byte [ebp - 0x79], 0
lea ecx, [ebp - 0x83]
mov dword [ebp - 0x2fc], 0
movups xmmword [ebp - 0x2f8], xmm0
mov dword [ebp - 0x2e8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2e4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100359d2
sub ecx, edx
lea eax, [ebp - 0x83]
push ecx
push eax
lea ecx, [ebp - 0x2fc]
call fcn.10003370
cmp dword [ebp - 0x2e8], 0
je 0x10035a7a
test esi, esi
je 0x10035a7a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10035a7a
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x44], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10035a7a
nop
cmp edi, dword [esi + 0xc4]
jne 0x10035a2d
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x38], eax
test eax, eax
je 0x10035a66
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035a42
mov ecx, dword [ecx]
cmp dword [ebp - 0x2e4], 0xf
lea eax, [ebp - 0x2f8]
cmova eax, dword [ebp - 0x2f8]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035ad3
cmp edi, dword [esi + 0xc4]
jne 0x10035a73
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x44]
jne 0x10035a20
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x2fc]
call fcn.10002f50
mov eax, dword [ebp - 0x2fc]
push 8
push eax
mov dword [ebp - 0x2fc], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0x60], 0x38223456
mov dl, 0x56
mov dword [ebp - 0x5c], 0x3b243709
mov word [ebp - 0x58], 0x2439
xor ecx, ecx
mov byte [ebp - 0x56], 0
xor byte [ebp + ecx - 0x5f], dl
inc ecx
cmp ecx, 9
jae 0x10035ad8
mov dl, byte [ebp - 0x60]
jmp 0x10035ac4
mov eax, dword [ebp - 0x38]
jmp 0x10035a7c
xorps xmm0, xmm0
mov byte [ebp - 0x56], 0
lea ecx, [ebp - 0x5f]
mov dword [ebp - 0x318], 0
movups xmmword [ebp - 0x314], xmm0
mov dword [ebp - 0x304], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x300], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035b10
sub ecx, edx
lea eax, [ebp - 0x5f]
push ecx
push eax
lea ecx, [ebp - 0x318]
call fcn.10003370
cmp dword [ebp - 0x304], 0
je 0x10035bba
test esi, esi
je 0x10035bba
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10035bba
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x44], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10035bba
nop word [eax + eax]
cmp edi, dword [esi + 0xc4]
jne 0x10035b6d
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x38], eax
test eax, eax
je 0x10035ba6
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035b82
mov ecx, dword [ecx]
cmp dword [ebp - 0x300], 0xf
lea eax, [ebp - 0x314]
cmova eax, dword [ebp - 0x314]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035c35
cmp edi, dword [esi + 0xc4]
jne 0x10035bb3
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x44]
jne 0x10035b60
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x10], eax
lea ecx, [ebp - 0x318]
call fcn.10002f50
mov eax, dword [ebp - 0x318]
push 8
push eax
mov dword [ebp - 0x318], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0xdc], 0x5e445230
mov dl, 0x30
mov dword [ebp - 0xd8], 0x5353516f
mov dword [ebp - 0xd4], 0x5f434355
xor ecx, ecx
mov word [ebp - 0xd0], 0x4942
mov byte [ebp - 0xce], 0
nop word [eax + eax]
xor byte [ebp + ecx - 0xdb], dl
inc ecx
cmp ecx, 0xd
jae 0x10035c3a
mov dl, byte [ebp - 0xdc]
jmp 0x10035c20
mov eax, dword [ebp - 0x38]
jmp 0x10035bbc
xorps xmm0, xmm0
mov byte [ebp - 0xce], 0
lea ecx, [ebp - 0xdb]
mov dword [ebp - 0x334], 0
movups xmmword [ebp - 0x330], xmm0
mov dword [ebp - 0x320], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x31c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035c72
sub ecx, edx
lea eax, [ebp - 0xdb]
push ecx
push eax
lea ecx, [ebp - 0x334]
call fcn.10003370
cmp dword [ebp - 0x320], 0
je 0x10035d1a
test esi, esi
je 0x10035d1a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10035d1a
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x44], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10035d1a
nop
cmp edi, dword [esi + 0xc4]
jne 0x10035ccd
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x38], eax
test eax, eax
je 0x10035d06
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035ce2
mov ecx, dword [ecx]
cmp dword [ebp - 0x31c], 0xf
lea eax, [ebp - 0x330]
cmova eax, dword [ebp - 0x330]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035d85
cmp edi, dword [esi + 0xc4]
jne 0x10035d13
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x44]
jne 0x10035cc0
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x14], eax
lea ecx, [ebp - 0x334]
call fcn.10002f50
mov eax, dword [ebp - 0x334]
push 8
push eax
mov dword [ebp - 0x334], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0x90], 0x7a607614
mov dl, 0x14
mov dword [ebp - 0x8c], 0x667b7a4b
mov dword [ebp - 0x88], 0x787579
xor ecx, ecx
nop word [eax + eax]
xor byte [ebp + ecx - 0x8f], dl
inc ecx
cmp ecx, 0xa
jae 0x10035d8a
mov dl, byte [ebp - 0x90]
jmp 0x10035d70
mov eax, dword [ebp - 0x38]
jmp 0x10035d1c
xorps xmm0, xmm0
mov byte [ebp - 0x85], 0
lea ecx, [ebp - 0x8f]
mov dword [ebp - 0x3a4], 0
movups xmmword [ebp - 0x3a0], xmm0
mov dword [ebp - 0x390], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035dc2
sub ecx, edx
lea eax, [ebp - 0x8f]
push ecx
push eax
lea ecx, [ebp - 0x3a4]
call fcn.10003370
cmp dword [ebp - 0x390], 0
je 0x10035e66
test esi, esi
je 0x10035e66
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10035e66
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x44], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10035e66
nop dword [eax + eax]
cmp edi, dword [esi + 0xc4]
jne 0x10035e1d
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x38], eax
test eax, eax
je 0x10035e52
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035e32
mov ecx, dword [ecx]
cmp dword [ebp - 0x38c], 0xf
lea eax, [ebp - 0x3a0]
cmova eax, dword [ebp - 0x3a0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035ebf
cmp edi, dword [esi + 0xc4]
jne 0x10035e5f
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x44]
jne 0x10035e10
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x18], eax
lea ecx, [ebp - 0x3a4]
call fcn.10002f50
mov eax, dword [ebp - 0x3a4]
push 8
push eax
mov dword [ebp - 0x3a4], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0x6c], 0x4a504624
mov dl, 0x24
mov dword [ebp - 0x68], 0x4345497b
mov word [ebp - 0x64], 0x474d
xor ecx, ecx
mov byte [ebp - 0x62], 0
xor byte [ebp + ecx - 0x6b], dl
inc ecx
cmp ecx, 9
jae 0x10035ec4
mov dl, byte [ebp - 0x6c]
jmp 0x10035eb0
mov eax, dword [ebp - 0x38]
jmp 0x10035e68
xorps xmm0, xmm0
mov byte [ebp - 0x62], 0
lea ecx, [ebp - 0x6b]
mov dword [ebp - 0x36c], 0
movups xmmword [ebp - 0x368], xmm0
mov dword [ebp - 0x358], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x354], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035ef6
sub ecx, edx
lea eax, [ebp - 0x6b]
push ecx
push eax
lea ecx, [ebp - 0x36c]
call fcn.10003370
cmp dword [ebp - 0x358], 0
je 0x10035f8e
test esi, esi
je 0x10035f8e
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10035f8e
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x44], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10035f8e
cmp edi, dword [esi + 0xc4]
jne 0x10035f45
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x38], eax
test eax, eax
je 0x10035f7a
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10035f5a
mov ecx, dword [ecx]
cmp dword [ebp - 0x354], 0xf
lea eax, [ebp - 0x368]
cmova eax, dword [ebp - 0x368]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10035fe3
cmp edi, dword [esi + 0xc4]
jne 0x10035f87
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x44]
jne 0x10035f38
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x1c], eax
lea ecx, [ebp - 0x36c]
call fcn.10002f50
mov eax, dword [ebp - 0x36c]
push 8
push eax
mov dword [ebp - 0x36c], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0x54], 0x140e187a
mov dl, 0x7a
mov dword [ebp - 0x50], 0x81b0825
mov word [ebp - 0x4c], 0x1f
xor ecx, ecx
xor byte [ebp + ecx - 0x53], dl
inc ecx
cmp ecx, 8
jae 0x10035fe8
mov dl, byte [ebp - 0x54]
jmp 0x10035fd4
mov eax, dword [ebp - 0x38]
jmp 0x10035f90
xorps xmm0, xmm0
mov byte [ebp - 0x4b], 0
lea ecx, [ebp - 0x53]
mov dword [ebp - 0x3c0], 0
movups xmmword [ebp - 0x3bc], xmm0
mov dword [ebp - 0x3ac], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x3a8], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036020
sub ecx, edx
lea eax, [ebp - 0x53]
push ecx
push eax
lea ecx, [ebp - 0x3c0]
call fcn.10003370
lea edx, [ebp - 0x3c0]
mov ecx, esi
call fcn.1001dba0
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x20], eax
lea ecx, [ebp - 0x3c0]
call fcn.10003020
mov dword [ebp - 0xec], 0x5f455331
xor edi, edi
mov dword [ebp - 0xe8], 0x5641446e
mov dword [ebp - 0xe4], 0x54555043
mov byte [ebp - 0xe0], 0
nop
push edi
lea ecx, [ebp - 0xeb]
call fcn.10002e30
push edi
lea ecx, [ebp - 0xeb]
mov al, byte [eax]
xor al, byte [ebp - 0xec]
mov byte [ebp - 0x14], al
call fcn.10002e30
mov cl, byte [ebp - 0x14]
inc edi
mov byte [eax], cl
cmp edi, 0xb
jb 0x10036080
push 0xb
lea ecx, [ebp - 0xeb]
call fcn.10002e30
lea ecx, [ebp - 0x3dc]
mov byte [eax], 0
lea eax, [ebp - 0xeb]
push eax
call fcn.10003470
lea edx, [ebp - 0x3dc]
mov ecx, esi
call fcn.1001dba0
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x24], eax
lea ecx, [ebp - 0x3dc]
call fcn.10003020
mov dword [ebp - 0xbc], 0x647e680a
xor edi, edi
mov dword [ebp - 0xb8], 0x63647f55
mov dword [ebp - 0xb4], 0x6f7f7b
nop
push edi
lea ecx, [ebp - 0xbb]
call fcn.1001c7b0
push edi
lea ecx, [ebp - 0xbb]
mov al, byte [eax]
xor al, byte [ebp - 0xbc]
mov byte [ebp - 0x14], al
call fcn.1001c7b0
mov cl, byte [ebp - 0x14]
inc edi
mov byte [eax], cl
cmp edi, 0xa
jb 0x10036110
push 0xa
lea ecx, [ebp - 0xbb]
call fcn.1001c7b0
lea ecx, [ebp - 0x3f8]
mov byte [eax], 0
lea eax, [ebp - 0xbb]
push eax
call fcn.10003470
lea edx, [ebp - 0x3f8]
mov ecx, esi
call fcn.1001dba0
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x28], eax
lea ecx, [ebp - 0x3f8]
call fcn.10003020
mov dword [ebp - 0x78], 0x29332547
xor edi, edi
mov dword [ebp - 0x74], 0x26352418
mov word [ebp - 0x70], 0x3321
mov byte [ebp - 0x6e], 0
nop dword [eax + eax]
push edi
lea ecx, [ebp - 0x77]
call fcn.10002dd0
push edi
lea ecx, [ebp - 0x77]
mov al, byte [eax]
xor al, byte [ebp - 0x78]
mov byte [ebp - 0x14], al
call fcn.10002dd0
mov cl, byte [ebp - 0x14]
inc edi
mov byte [eax], cl
cmp edi, 9
jb 0x100361a0
push 9
lea ecx, [ebp - 0x77]
call fcn.10002dd0
xorps xmm0, xmm0
lea ecx, [ebp - 0x77]
lea edx, [ecx + 1]
mov byte [eax], 0
mov dword [ebp - 0x388], 0
movups xmmword [ebp - 0x384], xmm0
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x370], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036200
sub ecx, edx
lea eax, [ebp - 0x77]
push ecx
push eax
lea ecx, [ebp - 0x388]
call fcn.10003370
cmp dword [ebp - 0x374], 0
je 0x10036298
test esi, esi
je 0x10036298
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10036298
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x44], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10036298
cmp edi, dword [esi + 0xc4]
jne 0x1003624f
call fcn.1008fe40
mov eax, dword [edi + 8]
mov dword [ebp - 0x38], eax
test eax, eax
je 0x10036284
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10036264
mov ecx, dword [ecx]
cmp dword [ebp - 0x370], 0xf
lea eax, [ebp - 0x384]
cmova eax, dword [ebp - 0x384]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100362e1
cmp edi, dword [esi + 0xc4]
jne 0x10036291
call fcn.1008fe40
mov edi, dword [edi]
cmp edi, dword [ebp - 0x44]
jne 0x10036242
xor eax, eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x2c], eax
lea ecx, [ebp - 0x388]
call fcn.10002f50
mov eax, dword [ebp - 0x388]
push 8
push eax
mov dword [ebp - 0x388], 0
call fcn.10089370
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100892c0
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x38]
jmp 0x1003629a