Function at 0x10023240
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x78
mov eax, dword [0x10091040]
xor eax, esp
mov dword [esp + 0x74], eax
push esi
push edi
mov edi, ecx
mov dword [esp + 0x30], edi
mov byte [esp + 0x10], 0x18
mov dl, 0x79
xor dl, byte [esp + 0x10]
mov al, 0x4c
xor al, byte [esp + 0x10]
mov dh, 0x6c
mov byte [esp + 0x11], al
mov ah, 0x6a
mov byte [esp + 0x12], dl
xorps xmm0, xmm0
mov dl, byte [esp + 0x10]
mov byte [esp + 0x3d], 0x57
xor ah, dl
mov al, byte [esp + 0x3d]
xor dh, dl
xor al, dl
mov byte [esp + 0x3e], 0x76
mov byte [esp + 0x17], al
mov al, byte [esp + 0x3e]
mov byte [esp + 0x1a], 0
mov ch, 0x7d
mov byte [esp + 0x16], dh
xor al, dl
mov byte [esp + 0x3f], ch
mov cl, 0x7f
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3f]
xor cl, dl
xor ch, dl
mov byte [esp + 0x14], cl
mov byte [esp + 0x15], ch
xor al, dl
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], ah
lea edx, [ecx + 1]
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100232f0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi]
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov dword [esp + 0xc], eax
je 0x10023398
test eax, eax
je 0x10023398
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10023398
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x34], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10023394
cmp edi, dword [eax + 0xc4]
jne 0x1002334a
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x38], eax
test eax, eax
je 0x1002337a
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10023360
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100233cb
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1002338c
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x34]
jne 0x10023340
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 4], eax
cmp ecx, 0xf
jbe 0x100233df
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100233d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100233d5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x30]
jmp 0x1002339a
push ecx
push edx
call fcn.1007d105
add esp, 8
mov dl, 0x75
mov dword [esp + 0x10], 0x7010675
mov dword [esp + 0x14], 0x18143b2a
xor ecx, ecx
mov dword [esp + 0x18], 0x101b3a10
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10023413
mov dl, byte [esp + 0x10]
jmp 0x10023400
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023437
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x100234da
test eax, eax
je 0x100234da
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100234da
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x100234d6
cmp edi, dword [eax + 0xc4]
jne 0x1002348c
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x100234bc
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100234a2
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002350d
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x100234ce
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10023482
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 8], eax
cmp ecx, 0xf
jbe 0x10023521
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10023517
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10023517
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x100234dc
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x10089a80]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10023534
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023566
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x10023609
test eax, eax
je 0x10023609
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10023609
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10023605
cmp edi, dword [eax + 0xc4]
jne 0x100235bb
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x100235eb
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100235d1
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002363c
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x100235fd
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x100235b1
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0xc], eax
cmp ecx, 0xf
jbe 0x10023650
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10023646
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10023646
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x1002360b
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x10089ed0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x68
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x10023665
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023697
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x1002373a
test eax, eax
je 0x1002373a
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002373a
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10023736
cmp edi, dword [eax + 0xc4]
jne 0x100236ec
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x1002371c
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10023702
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002376d
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1002372e
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x100236e2
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x10], eax
cmp ecx, 0xf
jbe 0x10023781
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10023777
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10023777
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x1002373c
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [str.E1]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x2b373031
mov byte [esp + 0x24], 0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x13
jb 0x100237a0
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100237d2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x10023879
test eax, eax
je 0x10023879
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10023879
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10023875
cmp edi, dword [eax + 0xc4]
jne 0x1002382b
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x1002385b
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10023841
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100238ac
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1002386d
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10023821
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x14], eax
cmp ecx, 0xf
jbe 0x100238c0
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100238b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100238b6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x1002387b
push ecx
push edx
call fcn.1007d105
add esp, 8
mov al, 0x76
mov byte [esp + 0x10], 0x22
mov byte [esp + 0x3f], al
mov cl, 0x43
xor al, byte [esp + 0x10]
mov ch, 0x47
xor cl, byte [esp + 0x10]
mov dl, 0x50
mov byte [esp + 0x11], al
mov dh, 0x56
mov al, byte [esp + 0x3f]
mov ah, 0x45
mov byte [esp + 0x12], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x10]
xor al, cl
mov byte [esp + 0x3e], 0x55
mov byte [esp + 0x17], al
xor dl, cl
mov al, byte [esp + 0x3e]
xor ch, cl
xor al, cl
mov byte [esp + 0x3d], 0x4d
xor dh, cl
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3d]
xor ah, cl
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x1a], 0
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023952
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi]
mov dword [esp + 0xc], eax
je 0x100239fc
test eax, eax
je 0x100239fc
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100239fc
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x100239f8
cmp edi, dword [eax + 0xc4]
jne 0x100239ae
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x100239de
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100239c4
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10023a2f
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x100239f0
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x100239a4
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x18], eax
cmp ecx, 0xf
jbe 0x10023a43
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10023a39
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10023a39
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x100239fe
push ecx
push edx
call fcn.1007d105
add esp, 8
mov dl, 0x53
mov dword [esp + 0x10], 0x21272053
mov dword [esp + 0x14], 0x3e321d0c
xor ecx, ecx
mov dword [esp + 0x18], 0x3c240736
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10023a77
mov dl, byte [esp + 0x10]
jmp 0x10023a64
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023aa0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 0x18]
mov dword [esp + 0xc], eax
je 0x10023b48
test eax, eax
je 0x10023b48
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10023b48
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10023b44
nop
cmp edi, dword [eax + 0xc4]
jne 0x10023afa
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x10023b2a
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10023b10
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10023b7b
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x10023b3c
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10023af0
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x1c], eax
cmp ecx, 0xf
jbe 0x10023b8f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10023b85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10023b85
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x10023b4a
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x100894a0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10023ba2
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023bd4
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 0x18]
mov dword [esp + 0xc], eax
je 0x10023c78
test eax, eax
je 0x10023c78
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10023c78
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10023c74
nop
cmp edi, dword [eax + 0xc4]
jne 0x10023c2a
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x10023c5a
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10023c40
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10023cab
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x10023c6c
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10023c20
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x20], eax
cmp ecx, 0xf
jbe 0x10023cbf
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10023cb5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10023cb5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x10023c7a
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x1008a250]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x7e
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x10023cd4
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023d06
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 0x18]
mov dword [esp + 0xc], eax
je 0x10023da9
test eax, eax
je 0x10023da9
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10023da9
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10023da5
cmp edi, dword [eax + 0xc4]
jne 0x10023d5b
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x10023d8b
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10023d71
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10023ddc
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x10023d9d
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10023d51
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x24], eax
cmp ecx, 0xf
jbe 0x10023df0
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10023de6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10023de6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x10023dab
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x1008a230]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x75696e6f
mov byte [esp + 0x24], 0
nop dword [eax + eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x13
jb 0x10023e10
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023e42
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 0x18]
mov dword [esp + 0xc], eax
je 0x10023ee9
test eax, eax
je 0x10023ee9
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10023ee9
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10023ee5
cmp edi, dword [eax + 0xc4]
jne 0x10023e9b
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x10023ecb
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10023eb1
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10023f1c
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x10023edd
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10023e91
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x28], eax
cmp ecx, 0xf
jbe 0x10023f30
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10023f26
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10023f26
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x10023eeb
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 5
mov byte [esp + 0x10], 0x64
mov byte [esp + 0x3e], cl
mov al, 0x30
xor al, byte [esp + 0x10]
mov ch, 1
xor cl, byte [esp + 0x10]
mov dl, 0x16
mov byte [esp + 0x11], al
mov dh, 0x10
mov byte [esp + 0x12], cl
mov ah, 3
mov cl, byte [esp + 0x10]
xorps xmm0, xmm0
mov byte [esp + 0x3f], 0x37
xor dl, cl
mov al, byte [esp + 0x3f]
xor ch, cl
xor al, cl
mov byte [esp + 0x3d], 9
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x3e]
xor ah, cl
xor al, cl
mov byte [esp + 0x15], ch
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3d]
xor al, cl
mov byte [esp + 0x1a], 0
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023fc2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi]
mov dword [esp + 0xc], eax
je 0x1002406c
test eax, eax
je 0x1002406c
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002406c
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x10024068
cmp edi, dword [eax + 0xc4]
jne 0x1002401e
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x1002404e
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10024034
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002409f
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x10024060
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10024014
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x2c], eax
cmp ecx, 0xf
jbe 0x100240b3
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100240a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100240a9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x1002406e
push ecx
push edx
call fcn.1007d105
add esp, 8
mov dl, 0x38
mov dword [esp + 0x10], 0x4a4c4b38
mov dword [esp + 0x14], 0x55597667
xor ecx, ecx
mov dword [esp + 0x18], 0x55596b5d
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x100240e7
mov dl, byte [esp + 0x10]
jmp 0x100240d4
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10024110
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 0x2c]
mov dword [esp + 0xc], eax
je 0x100241b8
test eax, eax
je 0x100241b8
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100241b8
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x100241b4
nop
cmp edi, dword [eax + 0xc4]
jne 0x1002416a
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x1002419a
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10024180
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100241eb
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x100241ac
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10024160
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x30], eax
cmp ecx, 0xf
jbe 0x100241ff
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100241f5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100241f5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x100241ba
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x10089460]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10024212
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10024244
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.100024a0
cmp dword [esp + 0x50], 0
mov eax, dword [edi + 0x2c]
mov dword [esp + 0xc], eax
je 0x100242e8
test eax, eax
je 0x100242e8
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100242e8
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x38], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x100242e4
nop
cmp edi, dword [eax + 0xc4]
jne 0x1002429a
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x34], eax
test eax, eax
je 0x100242ca
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100242b0
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002431b
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x100242dc
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x38]
jne 0x10024290
mov edi, dword [esp + 0x30]
xor eax, eax
mov ecx, dword [esp + 0x54]
mov dword [edi + 0x34], eax
cmp ecx, 0xf
jbe 0x1002432f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10024325
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10024325
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
jmp 0x100242ea
push ecx
push edx
call fcn.1007d105
add esp, 8
mov esi, dword [edi + 0x18]
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0xf
mov byte [esp + 0x40], 0
test esi, esi
je 0x10024361
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10024361
push eax
mov ecx, esi
call dword [0x10088b1c]
mov esi, dword [edi + 0x2c]
test esi, esi
je 0x1002437e
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002437e
push eax
mov ecx, esi
call dword [0x10088b1c]
mov esi, dword [edi]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
test esi, esi
je 0x100243d9
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100243d9
mov eax, dword [esi + 0xdc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0x1c], eax
mov esi, dword [edi + 4]
xor edi, edi
movaps xmm0, xmmword [esp + 0x10]
movaps xmmword [esp + 0x60], xmm0
test esi, esi
je 0x100243ff
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100243ff
mov edi, dword [esi + 0xe8]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x6c], edi
mov esi, dword [esi]
test esi, esi
je 0x10024427
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10024427
lea eax, [esp + 0x60]
mov ecx, esi
push eax
call dword [0x10088b04]
mov esi, dword [0x10088bd4]
mov ecx, 0xd78d54
call fcn.10014f70
mov ecx, dword [eax + 0x350]
call esi
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
xor ecx, esp
call fcn.1007d0a4
mov esp, ebp
pop ebp
ret