Function at 0x1003bad0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x88
mov eax, dword [0x100b7040]
xor eax, esp
mov dword [esp + 0x84], eax
push esi
mov esi, ecx
mov dword [esp + 0xc], 0x6c7e7d1f
push edi
mov dword [esp + 0x38], esi
mov dl, 0x1f
mov dword [esp + 0x14], 0x7e6b407a
xor ecx, ecx
mov dword [esp + 0x18], 0x2e2f746c
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x1003bb26
mov dl, byte [esp + 0x10]
jmp 0x1003bb13
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bb50
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002580
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x3c], edi
je 0x1003bbec
test edi, edi
je 0x1003bbec
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003bbec
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x64], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003bbe8
cmp esi, dword [edi + 0xc4]
jne 0x1003bba3
call fcn.1008625f
mov edi, dword [esi + 8]
test edi, edi
je 0x1003bbcf
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003bbb5
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003bc1f
mov edi, dword [esp + 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x1003bbe0
call fcn.1008625f
mov esi, dword [esi]
cmp esi, dword [esp + 0x64]
jne 0x1003bb96
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 4], edi
cmp ecx, 0xf
jbe 0x1003bc2f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003bc25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c99d
jmp 0x1003bc25
mov esi, dword [esp + 0x38]
jmp 0x1003bbee
push ecx
push edx
call fcn.100810d6
add esp, 8
movaps xmm0, xmmword [0x100aec10]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xe
jb 0x1003bc40
xorps xmm0, xmm0
mov byte [esp + 0x1f], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bc72
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002580
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x64], edi
je 0x1003bd16
test edi, edi
je 0x1003bd16
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003bd16
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003bd12
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x1003bccd
call fcn.1008625f
mov edi, dword [esi + 8]
test edi, edi
je 0x1003bcf9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003bcdf
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003bd49
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1003bd0a
call fcn.1008625f
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x1003bcc0
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 8], edi
cmp ecx, 0xf
jbe 0x1003bd59
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003bd4f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9a2
jmp 0x1003bd4f
mov esi, dword [esp + 0x38]
jmp 0x1003bd18
push ecx
push edx
call fcn.100810d6
add esp, 8
mov byte [esp + 0x64], 0x3d
mov al, 0x4e
xor al, byte [esp + 0x64]
mov cl, 0x49
mov byte [esp + 0x65], al
mov dl, 0x4f
mov al, byte [esp + 0x64]
mov ch, 0x58
mov dh, 0x45
mov byte [esp + 0xe], 0x4d
xor cl, al
mov byte [esp + 0x6c], 0
xor dl, al
mov byte [esp + 0x66], cl
xor ch, al
mov byte [esp + 0x67], dl
xor dh, al
mov byte [esp + 0x69], ch
mov ah, 0x62
mov byte [esp + 0x6a], dh
xor ah, al
mov byte [esp + 0x6c], 0
mov al, byte [esp + 0xe]
lea ecx, [esp + 0x65]
xor al, byte [esp + 0x64]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [esp + 0x68], ah
mov byte [esp + 0x6b], al
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bdd0
sub ecx, edx
lea eax, [esp + 0x65]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002580
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x64], edi
je 0x1003be76
test edi, edi
je 0x1003be76
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003be76
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003be72
nop dword [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1003be2d
call fcn.1008625f
mov edi, dword [esi + 8]
test edi, edi
je 0x1003be59
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003be3f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003bea9
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1003be6a
call fcn.1008625f
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x1003be20
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0xc], edi
cmp ecx, 0xf
jbe 0x1003beb9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003beaf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9a7
jmp 0x1003beaf
mov esi, dword [esp + 0x38]
jmp 0x1003be78
push ecx
push edx
call fcn.100810d6
add esp, 8
mov byte [esp + 0x10], 0x73
mov cl, 0x12
xor cl, byte [esp + 0x10]
mov al, 0x11
xor al, byte [esp + 0x10]
xor dl, dl
mov byte [esp + 0x11], al
mov ch, 0x2c
mov byte [esp + 0x12], cl
mov dh, 1
mov cl, byte [esp + 0x10]
mov ah, 0x16
mov byte [esp + 0xe], 0x1a
xor ch, cl
mov al, byte [esp + 0xe]
xor dh, cl
xor al, cl
mov byte [esp + 0x63], 0x14
mov byte [esp + 0x17], al
xor ah, cl
mov al, byte [esp + 0x63]
xorps xmm0, xmm0
xor al, cl
mov byte [esp + 0x37], 0x1b
mov byte [esp + 0x18], al
mov al, byte [esp + 0x37]
xor al, cl
mov byte [esp + 0x1b], dl
xor dl, cl
mov byte [esp + 0x19], al
mov byte [esp + 0xf], 7
mov al, byte [esp + 0xf]
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x1a], al
mov byte [esp + 0x1b], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bf60
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002580
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x64], edi
je 0x1003bffd
test edi, edi
je 0x1003bffd
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003bffd
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003bff9
cmp esi, dword [edi + 0xc4]
jne 0x1003bfb4
call fcn.1008625f
mov edi, dword [esi + 8]
test edi, edi
je 0x1003bfe0
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003bfc6
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003c030
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1003bff1
call fcn.1008625f
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x1003bfa7
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x10], edi
cmp ecx, 0xf
jbe 0x1003c040
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003c036
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9ac
jmp 0x1003c036
mov esi, dword [esp + 0x38]
jmp 0x1003bfff
push ecx
push edx
call fcn.100810d6
add esp, 8
xor al, al
mov byte [esp + 0xe], al
movzx edi, al
mov cl, 0x65
mov byte [esp + 0x10], 0x11
mov al, 0x73
xor al, byte [esp + 0x10]
mov dl, 0x7f
xor cl, byte [esp + 0x10]
mov ah, 0x4e
mov byte [esp + 0x11], al
mov ch, 0x34
mov byte [esp + 0x12], cl
mov dh, 0x3f
mov cl, byte [esp + 0x10]
xorps xmm0, xmm0
mov byte [esp + 0xf], 0x23
xor dl, cl
mov al, byte [esp + 0xf]
xor ah, cl
xor al, cl
mov byte [esp + 0x37], 0x75
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x37]
xor ch, cl
xor al, cl
mov byte [esp + 0x13], dl
push edi
sub esp, 0x18
mov byte [esp + 0x32], dh
mov edx, esp
mov byte [esp + 0x31], ch
lea ecx, [esp + 0x2d]
mov byte [esp + 0x30], ah
mov byte [esp + 0x34], al
lea eax, [ecx + 1]
mov byte [esp + 0x35], 0
movups xmmword [edx], xmm0
mov byte [esp + 0x35], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [esp + 0x80], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c0d6
sub ecx, dword [esp + 0x80]
lea eax, [esp + 0x2d]
push ecx
push eax
mov ecx, edx
call fcn.10002580
lea eax, [esp + 0x5c]
push eax
call fcn.1000a310
mov ecx, dword [esi + 0x10]
add esp, 0x20
mov edx, eax
call fcn.10017ca0
mov ecx, dword [esp + 0x54]
mov dword [esi + edi*4 + 0x14], eax
cmp ecx, 0xf
jbe 0x1003c142
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003c138
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c99d
push ecx
push edx
call fcn.100810d6
add esp, 8
mov al, byte [esp + 0xe]
inc al
mov byte [esp + 0xe], al
cmp al, 8
jb 0x1003c046
movaps xmm0, xmmword [0x100af0c0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x1003c167
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c1a0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002580
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x64], edi
je 0x1003c23c
test edi, edi
je 0x1003c23c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c23c
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003c238
cmp esi, dword [edi + 0xc4]
jne 0x1003c1f3
call fcn.1008625f
mov edi, dword [esi + 8]
test edi, edi
je 0x1003c21f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003c205
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003c26f
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1003c230
call fcn.1008625f
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x1003c1e6
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x34], edi
cmp ecx, 0xf
jbe 0x1003c27f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003c275
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9b1
jmp 0x1003c275
mov esi, dword [esp + 0x38]
jmp 0x1003c23e
push ecx
push edx
call fcn.100810d6
add esp, 8
movaps xmm0, xmmword [0x100aea10]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xe
jb 0x1003c290
xorps xmm0, xmm0
mov byte [esp + 0x1f], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c2c2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002580
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x34]
mov dword [esp + 0x64], edi
je 0x1003c366
test edi, edi
je 0x1003c366
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c366
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003c362
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x1003c31d
call fcn.1008625f
mov edi, dword [esi + 8]
test edi, edi
je 0x1003c349
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003c32f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003c399
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1003c35a
call fcn.1008625f
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x1003c310
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x38], edi
cmp ecx, 0xf
jbe 0x1003c3a9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003c39f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9b6
jmp 0x1003c39f
mov esi, dword [esp + 0x38]
jmp 0x1003c368
push ecx
push edx
call fcn.100810d6
add esp, 8
mov byte [esp + 0x64], 0x2d
mov al, 0x5e
xor al, byte [esp + 0x64]
mov cl, 0x59
mov byte [esp + 0x65], al
mov dl, 0x5f
mov al, byte [esp + 0x64]
mov ch, 0x48
mov dh, 0x55
mov byte [esp + 0xf], 0x5d
xor cl, al
mov byte [esp + 0x6c], 0
xor dl, al
mov byte [esp + 0x66], cl
xor ch, al
mov byte [esp + 0x67], dl
xor dh, al
mov byte [esp + 0x69], ch
mov ah, 0x72
mov byte [esp + 0x6a], dh
xor ah, al
mov byte [esp + 0x6c], 0
mov al, byte [esp + 0xf]
lea ecx, [esp + 0x65]
xor al, byte [esp + 0x64]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [esp + 0x68], ah
mov byte [esp + 0x6b], al
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c420
sub ecx, edx
lea eax, [esp + 0x65]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002580
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x34]
mov dword [esp + 0x64], edi
je 0x1003c4c6
test edi, edi
je 0x1003c4c6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c4c6
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003c4c2
nop dword [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1003c47d
call fcn.1008625f
mov edi, dword [esi + 8]
test edi, edi
je 0x1003c4a9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003c48f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003c4f9
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1003c4ba
call fcn.1008625f
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x1003c470
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x3c], edi
cmp ecx, 0xf
jbe 0x1003c509
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003c4ff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9bb
jmp 0x1003c4ff
mov esi, dword [esp + 0x38]
jmp 0x1003c4c8
push ecx
push edx
call fcn.100810d6
add esp, 8
mov dl, 0xb
mov dword [esp + 0x10], 0x64797b0b
mov dword [esp + 0x14], 0x786e796c
xor ecx, ecx
mov dword [esp + 0x18], 0x736e5478
mov word [esp + 0x1c], 0x7b
nop dword [eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x1003c543
mov dl, byte [esp + 0x10]
jmp 0x1003c530
xorps xmm0, xmm0
mov byte [esp + 0x1d], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c567
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002580
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x34]
mov dword [esp + 0x64], edi
je 0x1003c606
test edi, edi
je 0x1003c606
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c606
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003c602
nop
cmp esi, dword [edi + 0xc4]
jne 0x1003c5bd
call fcn.1008625f
mov edi, dword [esi + 8]
test edi, edi
je 0x1003c5e9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003c5cf
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003c639
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1003c5fa
call fcn.1008625f
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x1003c5b0
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x40], edi
cmp ecx, 0xf
jbe 0x1003c649
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003c63f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9c0
jmp 0x1003c63f
mov esi, dword [esp + 0x38]
jmp 0x1003c608
push ecx
push edx
call fcn.100810d6
add esp, 8
xor al, al
mov byte [esp + 0xe], al
nop
movzx edi, al
mov cl, 0x1e
mov byte [esp + 0x10], 0x6a
mov al, 8
xor al, byte [esp + 0x10]
mov dl, 4
xor cl, byte [esp + 0x10]
mov ah, 0x35
mov byte [esp + 0x11], al
mov ch, 0x4f
mov byte [esp + 0x12], cl
mov dh, 0x44
mov cl, byte [esp + 0x10]
xorps xmm0, xmm0
mov byte [esp + 0xf], 0x58
xor dl, cl
mov al, byte [esp + 0xf]
xor ah, cl
xor al, cl
mov byte [esp + 0x37], 0xe
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x37]
xor ch, cl
xor al, cl
mov byte [esp + 0x13], dl
push edi
sub esp, 0x18
mov byte [esp + 0x32], dh
mov edx, esp
mov byte [esp + 0x31], ch
lea ecx, [esp + 0x2d]
mov byte [esp + 0x30], ah
mov byte [esp + 0x34], al
lea eax, [ecx + 1]
mov byte [esp + 0x35], 0
movups xmmword [edx], xmm0
mov byte [esp + 0x35], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [esp + 0x80], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c6e0
sub ecx, dword [esp + 0x80]
lea eax, [esp + 0x2d]
push ecx
push eax
mov ecx, edx
call fcn.10002580
lea eax, [esp + 0x5c]
push eax
call fcn.1000a310
mov ecx, dword [esi + 0x34]
add esp, 0x20
mov edx, eax
call fcn.10017ca0
mov ecx, dword [esp + 0x54]
mov dword [esi + edi*4 + 0x44], eax
cmp ecx, 0xf
jbe 0x1003c74c
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003c742
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c99d
push ecx
push edx
call fcn.100810d6
add esp, 8
mov al, byte [esp + 0xe]
inc al
mov byte [esp + 0xe], al
cmp al, 8
jb 0x1003c650
mov esi, dword [esi + 0x38]
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
test esi, esi
je 0x1003c78f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c78f
lea eax, [esp + 0x64]
mov ecx, esi
push eax
call dword [0x100ae508]
mov edi, dword [esp + 0x38]
mov esi, dword [edi + 8]
test esi, esi
je 0x1003c7b7
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c7b7
push dword [esp + 0x68]
mov ecx, esi
push dword [esp + 0x68]
call dword [0x100ae50c]
mov esi, dword [edi + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
test esi, esi
je 0x1003c813
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c813
mov eax, dword [esi + 0xdc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0x1c], eax
movaps xmm0, xmmword [esp + 0x10]
mov esi, dword [edi + 8]
movaps xmmword [esp + 0x70], xmm0
test esi, esi
je 0x1003c83e
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c83e
lea eax, [esp + 0x70]
mov ecx, esi
push eax
call dword [0x100ae4fc]
mov esi, dword [edi + 0x3c]
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
test esi, esi
je 0x1003c86f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c86f
lea eax, [esp + 0x64]
mov ecx, esi
push eax
call dword [0x100ae508]
mov esi, dword [edi + 0xc]
test esi, esi
je 0x1003c893
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c893
push dword [esp + 0x68]
mov ecx, esi
push dword [esp + 0x68]
call dword [0x100ae50c]
mov esi, dword [edi + 0x3c]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
test esi, esi
je 0x1003c8ef
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c8ef
mov eax, dword [esi + 0xdc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0x1c], eax
movaps xmm0, xmmword [esp + 0x10]
mov esi, dword [edi + 0xc]
movaps xmmword [esp + 0x70], xmm0
test esi, esi
je 0x1003c91a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c91a
lea eax, [esp + 0x70]
mov ecx, esi
push eax
call dword [0x100ae4fc]
mov esi, dword [edi + 0x40]
test esi, esi
je 0x1003c96c
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c96c
push 4
lea edi, [esi + 0x140]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c968
lea eax, [esi + 0x13c]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c968
mov ecx, esi
mov dword [edi], eax
mov dword [esi + 0x13c], 0x64
call dword [0x100ae558]
mov edi, dword [esp + 0x38]
mov esi, dword [edi + 0x44]
test esi, esi
je 0x1003c989
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003c989
push eax
mov ecx, esi
call dword [0x100ae514]
mov ecx, dword [esp + 0x8c]
pop edi
pop esi
xor ecx, esp
call fcn.10081075
mov esp, ebp
pop ebp
ret
call fcn.1008626f
call fcn.1008626f
call fcn.1008626f
call fcn.1008626f
call fcn.1008626f
call fcn.1008626f
call fcn.1008626f
call fcn.1008626f
int3