Function at 0x10034470
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x48
movaps xmm0, xmmword [0x10088f80]
xor edx, edx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x28], edi
movups xmmword [esp + 0x10], xmm0
nop
mov al, byte [esp + 0x10]
xor byte [esp + edx + 0x11], al
inc edx
cmp edx, 0xe
jb 0x10034490
xorps xmm0, xmm0
mov byte [esp + 0x1f], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100344c2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.100024a0
cmp dword [esp + 0x40], 0
mov eax, dword [edi + 0xc]
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov dword [esp + 0xc], eax
je 0x10034567
test eax, eax
je 0x10034567
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034567
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x2c], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x10034567
cmp esi, dword [eax + 0xc4]
jne 0x1003451d
call edi
mov eax, dword [esi + 8]
mov dword [esp + 0x24], eax
test eax, eax
je 0x1003454d
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10034533
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003459d
mov eax, dword [esp + 0xc]
cmp esi, dword [eax + 0xc4]
jne 0x1003455f
call edi
mov eax, dword [esp + 0xc]
mov esi, dword [esi]
cmp esi, dword [esp + 0x2c]
jne 0x10034513
xor eax, eax
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x44]
mov dword [esi], eax
cmp ecx, 0xf
jbe 0x100345ad
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100345a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100345a3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x24]
jmp 0x10034569
push ecx
push edx
call fcn.1007d105
add esp, 8
mov dl, 0x2d
mov dword [esp + 0x10], 0x5548792d
mov dword [esp + 0x14], 0x4c6f7259
xor ecx, ecx
mov dword [esp + 0x18], 0x4e434c41
mov word [esp + 0x1c], 0x48
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x100345e3
mov dl, byte [esp + 0x10]
jmp 0x100345d0
xorps xmm0, xmm0
mov byte [esp + 0x1d], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034607
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.100024a0
cmp dword [esp + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esp + 0xc], eax
je 0x100346aa
test eax, eax
je 0x100346aa
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100346aa
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x24], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x100346a6
cmp esi, dword [eax + 0xc4]
jne 0x1003465c
call edi
mov eax, dword [esi + 8]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x1003468c
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10034672
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100346dd
mov eax, dword [esp + 0xc]
cmp esi, dword [eax + 0xc4]
jne 0x1003469e
call edi
mov eax, dword [esp + 0xc]
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x10034652
mov esi, dword [esp + 0x28]
xor eax, eax
mov ecx, dword [esp + 0x44]
mov dword [esi + 4], eax
cmp ecx, 0xf
jbe 0x100346f1
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100346e7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100346e7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
jmp 0x100346ac
push ecx
push edx
call fcn.1007d105
add esp, 8
mov dl, 0xc
mov dword [esp + 0x10], 0x62784e0c
mov dword [esp + 0x14], 0x7e785f53
xor ecx, ecx
mov dword [esp + 0x18], 0x786b6269
mov word [esp + 0x1c], 0x64
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x10034727
mov dl, byte [esp + 0x10]
jmp 0x10034714
xorps xmm0, xmm0
mov byte [esp + 0x1d], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034750
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.100024a0
cmp dword [esp + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esp + 0xc], eax
je 0x100347f8
test eax, eax
je 0x100347f8
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100347f8
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x24], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x100347f4
nop
cmp esi, dword [eax + 0xc4]
jne 0x100347aa
call edi
mov eax, dword [esi + 8]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x100347da
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100347c0
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003482b
mov eax, dword [esp + 0xc]
cmp esi, dword [eax + 0xc4]
jne 0x100347ec
call edi
mov eax, dword [esp + 0xc]
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x100347a0
mov esi, dword [esp + 0x28]
xor eax, eax
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x10], eax
cmp ecx, 0xf
jbe 0x1003483f
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10034835
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034835
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
jmp 0x100347fa
push ecx
push edx
call fcn.1007d105
add esp, 8
mov dl, 0x45
mov dword [esp + 0x10], 0x2b310745
mov dword [esp + 0x14], 0x2431161a
xor ecx, ecx
mov dword [esp + 0x18], 0x242b2c28
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10034873
mov dl, byte [esp + 0x10]
jmp 0x10034860
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034897
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.100024a0
cmp dword [esp + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esp + 0xc], eax
je 0x1003493e
test eax, eax
je 0x1003493e
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003493e
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x24], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x1003493a
cmp esi, dword [eax + 0xc4]
jne 0x100348f0
call edi
mov eax, dword [esi + 8]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x10034920
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10034906
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10034971
mov eax, dword [esp + 0xc]
cmp esi, dword [eax + 0xc4]
jne 0x10034932
call edi
mov eax, dword [esp + 0xc]
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x100348e6
mov esi, dword [esp + 0x28]
xor eax, eax
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x14], eax
cmp ecx, 0xf
jbe 0x10034985
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003497b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003497b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
jmp 0x10034940
push ecx
push edx
call fcn.1007d105
add esp, 8
mov dl, 0x22
mov dword [esp + 0x10], 0x4c566022
mov dword [esp + 0x14], 0x5a47667d
xor ecx, ecx
mov dword [esp + 0x18], 0x4b504756
mov word [esp + 0x1c], 0x5b56
mov byte [esp + 0x1e], 0
nop dword [eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xd
jae 0x100349c3
mov dl, byte [esp + 0x10]
jmp 0x100349b0
xorps xmm0, xmm0
mov byte [esp + 0x1e], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100349e7
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.100024a0
cmp dword [esp + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esp + 0xc], eax
je 0x10034a98
test eax, eax
je 0x10034a98
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034a98
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x24], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x10034a94
nop word [eax + eax]
cmp esi, dword [eax + 0xc4]
jne 0x10034a4a
call edi
mov eax, dword [esi + 8]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x10034a7a
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10034a60
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10034acb
mov eax, dword [esp + 0xc]
cmp esi, dword [eax + 0xc4]
jne 0x10034a8c
call edi
mov eax, dword [esp + 0xc]
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x10034a40
mov esi, dword [esp + 0x28]
xor eax, eax
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x18], eax
cmp ecx, 0xf
jbe 0x10034adf
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10034ad5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034ad5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
jmp 0x10034a9a
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x10089950]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10034af2
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034b24
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.100024a0
cmp dword [esp + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esp + 0xc], eax
je 0x10034bc8
test eax, eax
je 0x10034bc8
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034bc8
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x24], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x10034bc4
nop
cmp esi, dword [eax + 0xc4]
jne 0x10034b7a
call edi
mov eax, dword [esi + 8]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x10034baa
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10034b90
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10034bfb
mov eax, dword [esp + 0xc]
cmp esi, dword [eax + 0xc4]
jne 0x10034bbc
call edi
mov eax, dword [esp + 0xc]
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x10034b70
mov esi, dword [esp + 0x28]
xor eax, eax
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x1c], eax
cmp ecx, 0xf
jbe 0x10034c0f
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10034c05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034c05
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
jmp 0x10034bca
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x10089520]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x1e
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x10034c24
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034c56
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.100024a0
cmp dword [esp + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esp + 0xc], eax
je 0x10034cff
test eax, eax
je 0x10034cff
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10034cff
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x24], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x10034cff
cmp esi, dword [eax + 0xc4]
jne 0x10034cb3
call edi
mov eax, dword [esp + 0xc]
mov edi, dword [esi + 8]
test edi, edi
je 0x10034ce3
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10034cc5
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10034d01
mov eax, dword [esp + 0xc]
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
cmp esi, dword [eax + 0xc4]
jne 0x10034cf7
call edi
mov eax, dword [esp + 0xc]
mov esi, dword [esi]
cmp esi, dword [esp + 0x24]
jne 0x10034ca5
xor edi, edi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x44]
mov dword [eax + 0x20], edi
cmp ecx, 0xf
jbe 0x10034d40
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10034d36
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034d36
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1007d105
add esp, 8
pop edi
pop esi
mov esp, ebp
pop ebp
ret