Function at 0x1007df20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x48
push esi
push edi
mov esi, ecx
mov dword [esp + 0x24], esi
mov dl, 0x6c
mov byte [esp + 0x10], 0xd
mov byte [esp + 0xd], dl
mov al, 0x6f
xor al, byte [esp + 0x10]
mov dh, 0x6e
xor dl, byte [esp + 0x10]
mov ah, 0x7e
mov byte [esp + 0x11], al
xorps xmm0, xmm0
mov byte [esp + 0x12], dl
mov dl, byte [esp + 0x10]
mov byte [esp + 0xf], 0x61
xor ah, dl
mov al, byte [esp + 0xf]
xor dh, dl
xor al, dl
mov byte [esp + 0xe], 0x63
mov byte [esp + 0x17], al
mov al, byte [esp + 0xd]
mov byte [esp + 0x1a], 0
xor al, dl
mov byte [esp + 0x16], dh
mov cl, 0x68
mov byte [esp + 0x18], al
mov al, byte [esp + 0xe]
mov ch, 0x52
xor cl, dl
xor ch, dl
mov byte [esp + 0x14], cl
mov byte [esp + 0x15], ch
xor al, dl
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], ah
mov byte [esp + 0x19], al
lea edx, [ecx + 1]
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007dfc3
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi]
mov dword [esp + 0x28], edi
je 0x1007e066
test edi, edi
je 0x1007e066
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007e066
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x2c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007e062
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x1007e01d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007e049
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007e02f
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007e099
mov edi, dword [esp + 0x28]
cmp esi, dword [edi + 0xc4]
jne 0x1007e05a
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x2c]
jne 0x1007e010
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 4], edi
cmp ecx, 0xf
jbe 0x1007e0a9
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007e09f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee6c
jmp 0x1007e09f
mov esi, dword [esp + 0x24]
jmp 0x1007e068
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bffc0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x1007e0c0
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e0f2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x2c], edi
je 0x1007e196
test edi, edi
je 0x1007e196
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007e196
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007e192
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x1007e14d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007e179
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007e15f
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007e1c9
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007e18a
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007e140
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 8], edi
cmp ecx, 0xf
jbe 0x1007e1d9
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007e1cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee71
jmp 0x1007e1cf
mov esi, dword [esp + 0x24]
jmp 0x1007e198
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bff00]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x1007e1f0
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e222
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x2c], edi
je 0x1007e2c7
test edi, edi
je 0x1007e2c7
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007e2c7
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007e2c3
cmp esi, dword [edi + 0xc4]
jne 0x1007e27e
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007e2aa
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007e290
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007e2fa
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007e2bb
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007e271
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 0xc], edi
cmp ecx, 0xf
jbe 0x1007e30a
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007e300
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee76
jmp 0x1007e300
mov esi, dword [esp + 0x24]
jmp 0x1007e2c9
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [str.H__:]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x79
nop
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x1007e320
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e352
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x2c], edi
je 0x1007e3fb
test edi, edi
je 0x1007e3fb
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007e3fb
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007e3f7
cmp esi, dword [edi + 0xc4]
jne 0x1007e3b2
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007e3de
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007e3c4
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007e42e
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007e3ef
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007e3a5
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x10], edi
cmp ecx, 0xf
jbe 0x1007e43e
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007e434
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee7b
jmp 0x1007e434
mov esi, dword [esp + 0x24]
jmp 0x1007e3fd
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bfc90]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x34
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x1007e453
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e485
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x2c], edi
je 0x1007e52e
test edi, edi
je 0x1007e52e
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007e52e
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007e52a
cmp esi, dword [edi + 0xc4]
jne 0x1007e4e5
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007e511
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007e4f7
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007e561
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007e522
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007e4d8
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x14], edi
cmp ecx, 0xf
jbe 0x1007e571
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007e567
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee80
jmp 0x1007e567
mov esi, dword [esp + 0x24]
jmp 0x1007e530
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [str.1XVnR_P_nPCZn]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x1007e584
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e5b6
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x2c], edi
je 0x1007e66a
test edi, edi
je 0x1007e66a
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007e66a
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007e666
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x1007e61d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007e64d
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007e62f
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007e69d
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007e65e
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007e610
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x18], edi
cmp ecx, 0xf
jbe 0x1007e6ad
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007e6a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee85
jmp 0x1007e6a3
mov esi, dword [esp + 0x24]
jmp 0x1007e66c
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100c0160]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x1007e6c0
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e6f2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x2c], edi
je 0x1007e7aa
test edi, edi
je 0x1007e7aa
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007e7aa
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007e7a6
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x1007e75d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007e78d
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007e76f
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007e7dd
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007e79e
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007e750
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x1c], edi
cmp ecx, 0xf
jbe 0x1007e7ed
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007e7e3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee8a
jmp 0x1007e7e3
mov esi, dword [esp + 0x24]
jmp 0x1007e7ac
push ecx
push edx
call fcn.100859f6
add esp, 8
mov byte [esp + 0x10], 0x77
mov cl, 0x1a
xor cl, byte [esp + 0x10]
mov al, 0x1e
xor al, byte [esp + 0x10]
mov ah, 0x28
mov byte [esp + 0x11], al
mov ch, 0x16
mov byte [esp + 0x12], cl
mov dl, 0x10
mov cl, byte [esp + 0x10]
mov dh, 0x13
mov byte [esp + 0xe], 1
xor dl, cl
mov al, byte [esp + 0xe]
xor ch, cl
xor al, cl
mov byte [esp + 0xd], ah
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0xd]
xor ah, cl
xor al, cl
mov byte [esp + 0xf], 0x46
mov byte [esp + 0x18], al
xorps xmm0, xmm0
mov al, byte [esp + 0xf]
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x1a], 0
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e880
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x2c], edi
je 0x1007e931
test edi, edi
je 0x1007e931
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007e931
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007e92d
cmp esi, dword [edi + 0xc4]
jne 0x1007e8e4
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007e914
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007e8f6
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007e964
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007e925
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007e8d7
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x20], edi
cmp ecx, 0xf
jbe 0x1007e974
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007e96a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee8f
jmp 0x1007e96a
mov esi, dword [esp + 0x24]
jmp 0x1007e933
push ecx
push edx
call fcn.100859f6
add esp, 8
mov byte [esp + 0x10], 0x7c
mov cl, 0x11
xor cl, byte [esp + 0x10]
mov al, 0x15
xor al, byte [esp + 0x10]
mov ah, 0x23
mov byte [esp + 0x11], al
mov ch, 0x1d
mov byte [esp + 0x12], cl
mov dl, 0x1b
mov cl, byte [esp + 0x10]
mov dh, 0x18
mov byte [esp + 0xe], 0xa
xor dl, cl
mov al, byte [esp + 0xe]
xor ch, cl
xor al, cl
mov byte [esp + 0xd], ah
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0xd]
xor ah, cl
xor al, cl
mov byte [esp + 0xf], 0x4e
mov byte [esp + 0x18], al
xorps xmm0, xmm0
mov al, byte [esp + 0xf]
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x1a], 0
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007ea06
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x2c], edi
je 0x1007eaba
test edi, edi
je 0x1007eaba
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007eaba
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007eab6
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x1007ea6d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007ea9d
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007ea7f
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007eaed
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007eaae
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007ea60
mov esi, dword [esp + 0x24]
xor edi, edi
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x24], edi
cmp ecx, 0xf
jbe 0x1007eafd
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007eaf3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee94
jmp 0x1007eaf3
mov esi, dword [esp + 0x24]
jmp 0x1007eabc
push ecx
push edx
call fcn.100859f6
add esp, 8
mov esi, dword [esi + 0x20]
test esi, esi
je 0x1007eb1a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007eb1a
push eax
mov ecx, esi
call dword [0x100bd600]
mov edi, dword [esp + 0x24]
mov esi, dword [edi + 0x24]
test esi, esi
je 0x1007eb3b
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007eb3b
push eax
mov ecx, esi
call dword [0x100bd600]
mov byte [esp + 0x10], 0xa
mov cl, 0x6b
xor cl, byte [esp + 0x10]
mov al, 0x68
xor al, byte [esp + 0x10]
mov ah, 0x6f
mov byte [esp + 0x11], al
mov ch, 0x55
mov byte [esp + 0x12], cl
mov dl, 0x79
mov cl, byte [esp + 0x10]
mov dh, 0x7e
mov byte [esp + 0xe], 0x63
xor dl, cl
mov al, byte [esp + 0xe]
xor ch, cl
xor al, cl
mov byte [esp + 0xd], 0x67
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0xd]
xorps xmm0, xmm0
xor al, cl
mov byte [esp + 0xf], ah
mov byte [esp + 0x18], al
xor ah, cl
mov al, byte [esp + 0xf]
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x1a], 0
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007ebd0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [edi + 4]
mov dword [esp + 0x2c], edi
je 0x1007ec79
test edi, edi
je 0x1007ec79
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007ec79
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007ec79
cmp esi, dword [edi + 0xc4]
jne 0x1007ec34
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007ec60
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007ec46
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007ec7b
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007ec71
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007ec27
xor edi, edi
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x28], edi
cmp ecx, 0xf
jbe 0x1007ecb8
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007ecae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee99
push ecx
push edx
call fcn.100859f6
add esp, 8
mov cl, 0x6e
mov byte [esp + 0x10], 0x1a
mov ch, cl
mov byte [esp + 0xe], 0x77
xor cl, byte [esp + 0x10]
mov al, 0x69
xor al, byte [esp + 0x10]
mov dl, 0x68
mov byte [esp + 0x11], al
mov dh, 0x73
mov al, byte [esp + 0xe]
mov ah, 0x45
mov byte [esp + 0x12], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x10]
xor al, cl
mov byte [esp + 0xd], 0x7f
xor dl, cl
mov byte [esp + 0x17], al
mov al, byte [esp + 0xd]
xor ch, cl
xor dh, cl
mov byte [esp + 0x15], ch
xor ah, cl
mov byte [esp + 0x19], 0
xor al, cl
mov byte [esp + 0x13], dl
lea ecx, [esp + 0x11]
mov byte [esp + 0x16], dh
mov byte [esp + 0x14], ah
lea edx, [ecx + 1]
mov byte [esp + 0x18], al
mov byte [esp + 0x19], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007ed40
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002620
cmp dword [esp + 0x40], 0
mov edi, dword [esi + 0x28]
mov dword [esp + 0x2c], edi
je 0x1007ede9
test edi, edi
je 0x1007ede9
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007ede9
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x28], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1007ede9
cmp esi, dword [edi + 0xc4]
jne 0x1007eda4
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1007edd0
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1007edb6
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1007edeb
mov edi, dword [esp + 0x2c]
cmp esi, dword [edi + 0xc4]
jne 0x1007ede1
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x28]
jne 0x1007ed97
xor edi, edi
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x44]
mov dword [eax + 0x2c], edi
cmp ecx, 0xf
jbe 0x1007ee28
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007ee1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007ee9e
push ecx
push edx
call fcn.100859f6
add esp, 8
mov edi, dword [esp + 0x24]
mov esi, dword [edi + 0x28]
test esi, esi
je 0x1007ee49
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007ee49
push eax
mov ecx, esi
call dword [0x100bd600]
mov esi, dword [edi]
test esi, esi
je 0x1007ee66
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1007ee66
push 0x14
mov ecx, esi
call dword [0x100bd610]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
int3