Function at 0x10061140
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009ee9d
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x100b7080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x30], 0x18
mov dl, 0x6c
xor dl, byte [ebp - 0x30]
mov al, 0x7a
xor al, byte [ebp - 0x30]
mov cl, 0x47
mov byte [ebp - 0x2f], al
mov ch, 0x7b
mov byte [ebp - 0x2e], dl
mov dh, 0x74
mov dl, byte [ebp - 0x30]
mov ah, 0x76
mov byte [ebp - 0x21], 0x77
xor cl, dl
mov al, byte [ebp - 0x21]
xor ch, dl
xor al, dl
mov byte [ebp - 0x23], 0x6b
mov byte [ebp - 0x29], al
xor ah, dl
mov al, byte [ebp - 0x23]
xor dh, dl
xor al, dl
mov byte [ebp - 0x22], 0x7d
mov byte [ebp - 0x28], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x22]
mov byte [ebp - 0x2c], cl
xor al, dl
mov byte [ebp - 0x2b], ch
lea ecx, [ebp - 0x2f]
mov byte [ebp - 0x26], 0
mov byte [ebp - 0x2a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x2d], ah
mov byte [ebp - 0x27], al
mov byte [ebp - 0x26], 0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100611f0
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.10002570
cmp dword [ebp - 0x60], 0
mov edi, dword [esi]
mov dword [ebp - 0x34], edi
je 0x10061281
test edi, edi
je 0x10061281
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061281
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1006127e
cmp esi, dword [edi + 0xc4]
jne 0x1006123e
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10061267
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10061250
mov ecx, dword [ecx]
cmp dword [ebp - 0x5c], 0xf
lea eax, [ebp - 0x70]
cmova eax, dword [ebp - 0x70]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100612b2
mov edi, dword [ebp - 0x34]
cmp esi, dword [edi + 0xc4]
jne 0x10061277
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [ebp - 0x3c]
jne 0x10061231
mov esi, dword [ebp - 0x38]
xor edi, edi
mov ecx, dword [ebp - 0x5c]
mov dword [esi + 4], edi
cmp ecx, 0xf
jbe 0x100612c1
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100612b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061ed8
jmp 0x100612b7
mov esi, dword [ebp - 0x38]
jmp 0x10061283
push ecx
push edx
call fcn.100812a6
add esp, 8
mov byte [ebp - 0x30], 0x37
mov cl, 0x56
xor cl, byte [ebp - 0x30]
mov al, 0x55
xor al, byte [ebp - 0x30]
mov ch, 0x68
mov byte [ebp - 0x2f], al
mov dl, 0x44
mov byte [ebp - 0x2e], cl
mov dh, 0x53
mov cl, byte [ebp - 0x30]
mov ah, 0x52
mov byte [ebp - 0x22], 0x45
xor dl, cl
mov al, byte [ebp - 0x22]
xor ch, cl
xor al, cl
mov byte [ebp - 0x23], 0x58
mov byte [ebp - 0x29], al
xor dh, cl
mov al, byte [ebp - 0x23]
xor ah, cl
xor al, cl
mov byte [ebp - 0x21], 0x47
mov byte [ebp - 0x28], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x21]
xor al, cl
mov byte [ebp - 0x2b], ch
lea ecx, [ebp - 0x2f]
mov byte [ebp - 0x26], 0
mov byte [ebp - 0x2d], dl
mov byte [ebp - 0x2a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x2c], ah
mov byte [ebp - 0x27], al
mov byte [ebp - 0x26], 0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10061340
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.10002570
mov ecx, dword [esi]
lea edx, [ebp - 0x58]
call fcn.10017d80
mov ecx, dword [ebp - 0x44]
mov dword [esi + 8], eax
cmp ecx, 0xf
jbe 0x10061397
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006138d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061edd
push ecx
push edx
call fcn.100812a6
add esp, 8
mov al, 0x7f
mov byte [ebp - 0x30], 0xb
mov dl, al
mov byte [ebp - 0x22], 0x69
xor al, byte [ebp - 0x30]
mov cl, 0x73
mov byte [ebp - 0x2f], al
mov ch, 0x66
mov al, byte [ebp - 0x30]
mov dh, 0x64
xor cl, al
mov byte [ebp - 0x28], 0
xor dl, al
mov byte [ebp - 0x2e], cl
xor ch, al
mov byte [ebp - 0x2d], dl
xor dh, al
mov byte [ebp - 0x2b], ch
mov ah, 0x54
mov byte [ebp - 0x2a], dh
xor ah, al
mov byte [ebp - 0x28], 0
mov al, byte [ebp - 0x22]
lea ecx, [ebp - 0x2f]
xor al, byte [ebp - 0x30]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [ebp - 0x2c], ah
mov byte [ebp - 0x29], al
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10061400
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.10002570
cmp dword [ebp - 0x60], 0
mov edi, dword [esi + 8]
mov dword [ebp - 0x3c], edi
je 0x10061492
test edi, edi
je 0x10061492
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061492
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1006148f
cmp esi, dword [edi + 0xc4]
jne 0x1006144f
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10061478
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10061461
mov ecx, dword [ecx]
cmp dword [ebp - 0x5c], 0xf
lea eax, [ebp - 0x70]
cmova eax, dword [ebp - 0x70]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100614c3
mov edi, dword [ebp - 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x10061488
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [ebp - 0x34]
jne 0x10061442
mov esi, dword [ebp - 0x38]
xor edi, edi
mov ecx, dword [ebp - 0x5c]
mov dword [esi + 0x24], edi
cmp ecx, 0xf
jbe 0x100614d2
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100614c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061ee2
jmp 0x100614c8
mov esi, dword [ebp - 0x38]
jmp 0x10061494
push ecx
push edx
call fcn.100812a6
add esp, 8
xorps xmm0, xmm0
mov word [ebp - 0x34], 0x19
lea ecx, [ebp - 0x33]
mov byte [ebp - 0x33], 0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x5c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100614f7
sub ecx, edx
lea eax, [ebp - 0x33]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.10002570
mov dword [ebp - 4], 0
mov eax, dword [esi + 0x24]
mov esi, dword [ebp - 0x70]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x100615a1
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100615a1
cmp dword [ebp - 0x5c], 0xf
lea ecx, [ebp - 0x70]
cmova ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10061540
sub ecx, edx
mov dword [ebp - 0x34], ecx
lea esi, [ecx + 0x21]
push esi
call fcn.100812b9
push esi
mov edi, eax
push 0
push edi
call fcn.100833b0
cmp dword [ebp - 0x5c], 0xf
lea edx, [ebp - 0x70]
push dword [ebp - 0x34]
cmova edx, dword [ebp - 0x70]
lea esi, [edi + 0x20]
push edx
push esi
call fcn.10082e30
mov eax, dword [ebp - 0x34]
add esp, 0x1c
mov ecx, dword [ebp - 0x3c]
mov dword [edi + 4], esi
mov dword [edi + 0x14], eax
push edi
mov dword [edi + 0x18], 0x1f
call dword [0x100ae5c0]
push edi
call fcn.100812b4
mov esi, dword [ebp - 0x70]
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x5c]
cmp eax, 0xf
jbe 0x100615db
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x100615d1
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061ee7
push ecx
push esi
call fcn.100812a6
add esp, 8
xor al, al
mov byte [ebp - 0x21], al
movzx eax, al
mov cl, 0x40
push eax
mov dword [ebp - 0x8c], 0x30322740
xor eax, eax
mov dword [ebp - 0x88], 0x2f32241f
mov dword [ebp - 0x84], 0x24651f30
mov byte [ebp - 0x80], 0
nop word [eax + eax]
xor byte [ebp + eax - 0x8b], cl
inc eax
cmp eax, 0xb
jae 0x10061625
mov cl, byte [ebp - 0x8c]
jmp 0x10061610
sub esp, 0x18
mov byte [ebp - 0x80], 0
mov edx, esp
lea ecx, [ebp - 0x8b]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10061650
sub ecx, esi
lea eax, [ebp - 0x8b]
push ecx
push eax
mov ecx, edx
call fcn.10002570
lea eax, [ebp - 0x58]
push eax
call fcn.1000a3e0
mov esi, dword [ebp - 0x38]
add esp, 0x20
movzx edi, byte [ebp - 0x21]
mov edx, eax
mov ecx, dword [esi + 8]
call fcn.10017d80
mov ecx, dword [ebp - 0x44]
mov dword [esi + edi*4 + 0xc], eax
cmp ecx, 0xf
jbe 0x100616bd
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100616b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061ed8
push ecx
push edx
call fcn.100812a6
add esp, 8
mov al, 0x72
mov byte [ebp - 0x30], 0x13
mov ah, al
mov byte [ebp - 0x22], 0x70
xor al, byte [ebp - 0x30]
mov cl, 0x61
xor cl, byte [ebp - 0x30]
mov ch, 0x4c
mov byte [ebp - 0x2f], al
mov dl, 0x76
mov al, byte [ebp - 0x22]
mov dh, 0x7a
mov byte [ebp - 0x2e], cl
xorps xmm0, xmm0
mov cl, byte [ebp - 0x30]
xor al, cl
mov byte [ebp - 0x23], 0x7c
mov byte [ebp - 0x29], al
xor dl, cl
mov al, byte [ebp - 0x23]
xor ch, cl
xor al, cl
mov byte [ebp - 0x3d], 0x7d
xor dh, cl
mov byte [ebp - 0x28], al
mov al, byte [ebp - 0x3d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x2b], ch
lea ecx, [ebp - 0x2f]
mov byte [ebp - 0x26], 0
mov byte [ebp - 0x2d], dl
mov byte [ebp - 0x2a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x2c], ah
mov byte [ebp - 0x27], al
mov byte [ebp - 0x26], 0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10061737
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.10002570
cmp dword [ebp - 0x48], 0
mov edi, dword [esi + edi*4 + 0xc]
mov dword [ebp - 0x3c], edi
je 0x100617d4
test edi, edi
je 0x100617d4
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100617d4
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100617d1
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1006178d
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x100617ba
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1006179f
mov ecx, dword [ecx]
cmp dword [ebp - 0x44], 0xf
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10061855
mov edi, dword [ebp - 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x100617ca
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [ebp - 0x34]
jne 0x10061780
mov esi, dword [ebp - 0x38]
xor edi, edi
movzx eax, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x44]
lea eax, [eax + eax*2]
mov dword [esi + eax*8 + 0x2c], edi
cmp ecx, 0xf
jbe 0x10061815
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006180b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061ed8
push ecx
push edx
call fcn.100812a6
add esp, 8
mov cl, 0x20
mov dword [ebp - 0x9c], 0x54585420
mov dword [ebp - 0x98], 0x5245507f
xor eax, eax
mov dword [ebp - 0x94], 0x544e4543
mov byte [ebp - 0x90], 0
nop
xor byte [ebp + eax - 0x9b], cl
inc eax
cmp eax, 0xb
jae 0x1006185d
mov cl, byte [ebp - 0x9c]
jmp 0x10061840
mov esi, dword [ebp - 0x38]
jmp 0x100617d6
xorps xmm0, xmm0
mov byte [ebp - 0x90], 0
lea ecx, [ebp - 0x9b]
mov dword [ebp - 0x48], 0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10061882
sub ecx, edx
lea eax, [ebp - 0x9b]
push ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.10002570
cmp dword [ebp - 0x48], 0
movzx eax, byte [ebp - 0x21]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [ebp - 0x3c], edi
je 0x10061924
test edi, edi
je 0x10061924
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061924
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10061921
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x100618dd
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x1006190a
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100618ef
mov ecx, dword [ecx]
cmp dword [ebp - 0x44], 0xf
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100619a5
mov edi, dword [ebp - 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x1006191a
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [ebp - 0x34]
jne 0x100618d0
mov esi, dword [ebp - 0x38]
xor edi, edi
movzx eax, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x44]
add eax, 2
lea eax, [eax + eax*2]
mov dword [esi + eax*8], edi
cmp ecx, 0xf
jbe 0x10061967
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006195d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061ed8
push ecx
push edx
call fcn.100812a6
add esp, 8
mov cl, 0x6f
mov dword [ebp - 0xac], 0x81d1f6f
mov dword [ebp - 0xa8], 0x1d0a1f30
xor eax, eax
mov dword [ebp - 0xa4], 0x1b010a0c
mov byte [ebp - 0xa0], 0
xor byte [ebp + eax - 0xab], cl
inc eax
cmp eax, 0xb
jae 0x100619ad
mov cl, byte [ebp - 0xac]
jmp 0x10061990
mov esi, dword [ebp - 0x38]
jmp 0x10061926
xorps xmm0, xmm0
mov byte [ebp - 0xa0], 0
lea ecx, [ebp - 0xab]
mov dword [ebp - 0x48], 0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100619d2
sub ecx, edx
lea eax, [ebp - 0xab]
push ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.10002570
cmp dword [ebp - 0x48], 0
movzx eax, byte [ebp - 0x21]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [ebp - 0x3c], edi
je 0x10061a6d
test edi, edi
je 0x10061a6d
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061a6d
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10061a6d
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x10061a2d
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10061a56
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10061a3f
mov ecx, dword [ecx]
cmp dword [ebp - 0x44], 0xf
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10061a6f
mov edi, dword [ebp - 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x10061a66
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [ebp - 0x34]
jne 0x10061a20
xor edi, edi
movzx eax, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x38]
lea esi, [eax + eax*2]
mov dword [ecx + esi*8 + 0x34], edi
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x10061ab1
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10061aa7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061ed8
push ecx
push edx
call fcn.100812a6
add esp, 8
mov edi, dword [ebp - 0x38]
mov esi, dword [edi + esi*8 + 0x34]
test esi, esi
je 0x10061b06
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061b06
push 4
lea edi, [esi + 0x140]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061b03
lea eax, [esi + 0x13c]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061b03
mov ecx, esi
mov dword [edi], eax
mov dword [esi + 0x13c], 0x64
call dword [0x100ae5a8]
mov edi, dword [ebp - 0x38]
mov cl, 0x3c
mov byte [ebp - 0x7c], 0x48
mov byte [ebp - 0x3d], cl
mov al, 0x2a
xor al, byte [ebp - 0x7c]
mov ch, 0x2c
xor cl, byte [ebp - 0x7c]
mov dl, 0x26
mov byte [ebp - 0x7b], al
mov dh, 0x2d
mov al, byte [ebp - 0x3d]
mov ah, 0x17
mov byte [ebp - 0x7a], cl
xorps xmm0, xmm0
mov cl, byte [ebp - 0x7c]
xor al, cl
mov byte [ebp - 0x22], 0x29
mov byte [ebp - 0x75], al
xor dl, cl
mov al, byte [ebp - 0x22]
xor ch, cl
xor al, cl
mov byte [ebp - 0x23], 0x21
mov byte [ebp - 0x74], al
xor dh, cl
mov al, byte [ebp - 0x23]
xor ah, cl
xor al, cl
mov byte [ebp - 0x31], 0x24
mov byte [ebp - 0x73], al
mov al, byte [ebp - 0x31]
xor al, cl
mov byte [ebp - 0x77], ch
lea ecx, [ebp - 0x7b]
mov byte [ebp - 0x71], 0
mov byte [ebp - 0x79], dl
mov byte [ebp - 0x76], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x78], ah
mov byte [ebp - 0x72], al
mov byte [ebp - 0x71], 0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10061b90
sub ecx, edx
lea eax, [ebp - 0x7b]
push ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.10002570
cmp dword [ebp - 0x48], 0
movzx eax, byte [ebp - 0x21]
mov edi, dword [edi + eax*4 + 0xc]
mov dword [ebp - 0x3c], edi
je 0x10061c24
test edi, edi
je 0x10061c24
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061c24
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10061c24
cmp esi, dword [edi + 0xc4]
jne 0x10061be4
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10061c0d
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10061bf6
mov ecx, dword [ecx]
cmp dword [ebp - 0x44], 0xf
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10061c26
mov edi, dword [ebp - 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x10061c1d
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [ebp - 0x34]
jne 0x10061bd7
xor edi, edi
movzx eax, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x38]
lea eax, [eax + eax*2]
mov dword [ecx + eax*8 + 0x38], edi
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x10061c68
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10061c5e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10061ed8
push ecx
push edx
call fcn.100812a6
add esp, 8
call fcn.10012840
mov edi, dword [ebp - 0x38]
test eax, eax
je 0x10061e6a
movzx ecx, byte [ebp - 0x21]
lea esi, [ecx + ecx*2]
mov dword [ebp - 0x3c], esi
mov dword [edi + esi*8 + 0x3c], eax
call fcn.100180a0
mov edx, dword [0x100ae594]
mov ecx, eax
call edx
test eax, eax
je 0x10061e6a
mov ecx, dword [edi + esi*8 + 0x3c]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x38]
mov edi, dword [edi]
mov eax, dword [ecx + esi*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x10061cda
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061cda
test edi, edi
je 0x10061cda
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061cda
mov eax, dword [esi]
mov ecx, esi
push edi
mov eax, dword [eax + 0x74]
call eax
mov eax, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x38]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x10061d29
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061d29
sub esp, 0x20
mov ecx, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [0x100ae5a4]
movzx eax, byte [ebp - 0x21]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x10061d60
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061d60
push 4
add esi, 0xcc
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061d60
mov dword [esi], 0xb
movzx eax, byte [ebp - 0x21]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x10061d8b
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061d8b
push pe_nt_image_headers32
mov ecx, esi
call dword [0x100ae570]
movzx eax, byte [ebp - 0x21]
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
lea eax, [eax + eax*2]
mov dword [ebp - 0x68], 0
mov esi, dword [edi + eax*8 + 0x2c]
test esi, esi
je 0x10061de7
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061de7
mov eax, dword [esi + 0xdc]
mov dword [ebp - 0x68], eax
mov eax, dword [esi + 0xe0]
mov dword [ebp - 0x64], eax
mov eax, dword [esi + 0xe4]
mov dword [ebp - 0x60], eax
mov eax, dword [esi + 0xe8]
mov dword [ebp - 0x5c], eax
movzx eax, byte [ebp - 0x21]
movups xmm0, xmmword [ebp - 0x68]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
movups xmmword [ebp - 0x20], xmm0
mov esi, dword [eax]
test esi, esi
je 0x10061e19
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061e19
lea eax, [ebp - 0x20]
mov ecx, esi
push eax
call dword [0x100ae5a0]
movzx eax, byte [ebp - 0x21]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x10061e43
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061e43
lea eax, [ebp - 0x20]
mov ecx, esi
push eax
call dword [0x100ae550]
movzx eax, byte [ebp - 0x21]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x10061e6a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061e6a
push eax
mov ecx, esi
call dword [0x100ae564]
mov al, byte [ebp - 0x21]
inc al
mov byte [ebp - 0x21], al
cmp al, 6
jb 0x100615e0
mov esi, dword [edi]
test esi, esi
je 0x10061e9c
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061e9c
lea ecx, [esi + 0xd4]
call fcn.10018500
mov esi, eax
jmp 0x10061e9e
xor esi, esi
mov edi, dword [edi]
test edi, edi
je 0x10061ebd
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10061ebd
or esi, 0x30
mov ecx, edi
push esi
call dword [0x100ae570]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10081245
mov esp, ebp
pop ebp
ret
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
int3