Function at 0x1002f4f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009d9d5
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x100b7080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x60], esi
call fcn.10033450
mov dl, 0x18
mov dword [ebp - 0x40], 0x776a7f18
mov dword [ebp - 0x3c], 0x7747686d
xor ecx, ecx
mov dword [ebp - 0x38], 0x77716c68
mov word [ebp - 0x34], 0x76
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x1002f557
mov dl, byte [ebp - 0x40]
jmp 0x1002f546
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x84], 0
movups xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x80], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f580
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x94]
call fcn.10002570
cmp dword [ebp - 0x84], 0
mov edi, dword [esi + 0x30]
je 0x1002f618
test edi, edi
je 0x1002f618
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f618
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x58], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1002f618
cmp esi, dword [edi + 0xc4]
jne 0x1002f5d2
call fcn.1008642f
mov eax, dword [esi + 8]
mov dword [ebp - 0x64], eax
test eax, eax
je 0x1002f604
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f5e7
mov ecx, dword [ecx]
cmp dword [ebp - 0x80], 0xf
lea eax, [ebp - 0x94]
cmova eax, dword [ebp - 0x94]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f64c
cmp esi, dword [edi + 0xc4]
jne 0x1002f611
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [ebp - 0x58]
jne 0x1002f5c5
xor esi, esi
mov dword [ebp - 0x64], esi
mov ecx, dword [ebp - 0x80]
cmp ecx, 0xf
jbe 0x1002f65b
mov edx, dword [ebp - 0x94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f651
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003104f
jmp 0x1002f651
mov esi, dword [ebp - 0x64]
jmp 0x1002f61d
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100af730]
xor ecx, ecx
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x56425059
mov word [ebp - 0x34], 0x5250
mov byte [ebp - 0x32], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x15
jb 0x1002f691
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f6c0
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002570
cmp dword [ebp - 0x6c], 0
je 0x1002f74d
test esi, esi
je 0x1002f74d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f74d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x58], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f74d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f70d
call fcn.1008642f
mov esi, dword [edi + 8]
test esi, esi
je 0x1002f736
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x1002f71f
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f74f
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x1002f746
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x58]
jne 0x1002f700
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x1002f783
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f779
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031054
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100aebd0]
xor ecx, ecx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
movups xmmword [ebp - 0x44], xmm0
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0xe
jb 0x1002f7a2
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f7d0
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1002f85d
test esi, esi
je 0x1002f85d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f85d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x58], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f85d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f81d
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x1002f849
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f832
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f890
cmp edi, dword [esi + 0xc4]
jne 0x1002f856
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x58]
jne 0x1002f810
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002f89f
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f895
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031059
jmp 0x1002f895
mov eax, dword [ebp - 0x50]
jmp 0x1002f85f
push ecx
push edx
call fcn.100812a6
add esp, 8
mov eax, dword [ebp - 0x60]
cmp dword [eax], 0
je 0x1002f8b5
cmp dword [0x100b8fec], 1
sete byte [0x100bac62]
movaps xmm0, xmmword [0x100afcc0]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x6d7a7c
nop dword [eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x12
jb 0x1002f8d0
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f900
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1002f98d
test esi, esi
je 0x1002f98d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f98d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f98d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f94d
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002f979
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f962
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f9c1
cmp edi, dword [esi + 0xc4]
jne 0x1002f986
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002f940
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002f9d0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f9c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003105e
jmp 0x1002f9c6
mov eax, dword [ebp - 0x58]
jmp 0x1002f98f
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100af010]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x342e352f
mov byte [ebp - 0x34], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x13
jb 0x1002f9e8
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fa14
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1002fa9d
test esi, esi
je 0x1002fa9d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fa9d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fa9d
cmp edi, dword [esi + 0xc4]
jne 0x1002fa5d
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002fa89
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002fa72
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fad1
cmp edi, dword [esi + 0xc4]
jne 0x1002fa96
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002fa50
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x34], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002fae0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fad6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031063
jmp 0x1002fad6
mov eax, dword [ebp - 0x58]
jmp 0x1002fa9f
push ecx
push edx
call fcn.100812a6
add esp, 8
mov eax, dword [ebp - 0x60]
mov edi, dword [eax + 0x34]
test edi, edi
je 0x1002fb1c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fb1c
mov edi, dword [edi + 0x124]
test edi, edi
je 0x1002fb1c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fb1c
push 0x1388
push eax
mov ecx, edi
call dword [0x100ae5b0]
movaps xmm0, xmmword [0x100afc90]
xor ecx, ecx
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x76
nop
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0x10
jb 0x1002fb30
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fb60
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1002fbed
test esi, esi
je 0x1002fbed
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fbed
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fbed
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002fbad
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002fbd9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002fbc2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fc21
cmp edi, dword [esi + 0xc4]
jne 0x1002fbe6
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002fba0
xor eax, eax
mov edi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0x38], eax
cmp ecx, 0xf
jbe 0x1002fc30
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fc26
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031068
jmp 0x1002fc26
mov eax, dword [ebp - 0x58]
jmp 0x1002fbef
push ecx
push edx
call fcn.100812a6
add esp, 8
mov edi, dword [edi + 0x38]
test edi, edi
je 0x1002fc66
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fc66
mov edi, dword [edi + 0x124]
test edi, edi
je 0x1002fc66
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fc66
push 0x17
push eax
mov ecx, edi
call dword [0x100ae5b0]
mov dl, 0x20
mov dword [ebp - 0x40], 0x54585420
mov dword [ebp - 0x3c], 0x4d41477f
xor ecx, ecx
mov dword [ebp - 0x38], 0x49547f45
mov word [ebp - 0x34], 0x454d
mov byte [ebp - 0x32], 0
nop dword [eax]
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xd
jae 0x1002fca1
mov dl, byte [ebp - 0x40]
jmp 0x1002fc90
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fcc0
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1002fd4d
test esi, esi
je 0x1002fd4d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fd4d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fd4d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002fd0d
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002fd39
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002fd22
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fd81
cmp edi, dword [esi + 0xc4]
jne 0x1002fd46
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002fd00
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x3c], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002fd90
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fd86
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003106d
jmp 0x1002fd86
mov eax, dword [ebp - 0x58]
jmp 0x1002fd4f
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100aed60]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x1b0c0a09
mov byte [ebp - 0x34], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x13
jb 0x1002fda8
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fdd4
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002570
cmp dword [ebp - 0x6c], 0
je 0x1002fe60
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x1002fe60
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fe60
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fe60
cmp edi, dword [esi + 0xc4]
jne 0x1002fe20
call fcn.1008642f
mov esi, dword [edi + 8]
test esi, esi
je 0x1002fe49
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x1002fe32
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fe62
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x1002fe59
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002fe13
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x1002fe96
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fe8c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031072
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100af290]
xor ecx, ecx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x252727
nop dword [eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x12
jb 0x1002fec0
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fef0
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1002ff7d
test esi, esi
je 0x1002ff7d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002ff7d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002ff7d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002ff3d
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002ff69
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002ff52
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002ffb1
cmp edi, dword [esi + 0xc4]
jne 0x1002ff76
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002ff30
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x40], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002ffc0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002ffb6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031077
jmp 0x1002ffb6
mov eax, dword [ebp - 0x58]
jmp 0x1002ff7f
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100af130]
xor ecx, ecx
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x2123
mov byte [ebp - 0x32], 0
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0x11
jb 0x1002ffd7
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030003
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003008d
test esi, esi
je 0x1003008d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003008d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003008d
nop
cmp edi, dword [esi + 0xc4]
jne 0x1003004d
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x10030079
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030062
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100300c1
cmp edi, dword [esi + 0xc4]
jne 0x10030086
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x10030040
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x44], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100300d0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100300c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003107c
jmp 0x100300c6
mov eax, dword [ebp - 0x58]
jmp 0x1003008f
push ecx
push edx
call fcn.100812a6
add esp, 8
mov eax, dword [ebp - 0x60]
mov edi, dword [eax + 0x40]
test edi, edi
je 0x10030109
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030109
mov edi, dword [edi + 0x124]
test edi, edi
je 0x10030109
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030109
push 0xa
push eax
mov ecx, edi
call dword [0x100ae5b0]
mov dl, 0x62
mov dword [ebp - 0x40], 0xc160062
mov dword [ebp - 0x3c], 0x316113d
xor ecx, ecx
mov dword [ebp - 0x38], 0x163d0716
mov word [ebp - 0x34], 0x12
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x10030139
mov dl, byte [ebp - 0x40]
jmp 0x10030128
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030158
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x100301e1
test esi, esi
je 0x100301e1
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100301e1
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100301e1
cmp edi, dword [esi + 0xc4]
jne 0x100301a1
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x100301cd
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100301b6
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030215
cmp edi, dword [esi + 0xc4]
jne 0x100301da
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x10030194
xor eax, eax
mov esi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
mov dword [esi + 8], eax
cmp ecx, 0xf
jbe 0x10030224
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003021a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031081
jmp 0x1003021a
mov eax, dword [ebp - 0x58]
jmp 0x100301e3
push ecx
push edx
call fcn.100812a6
add esp, 8
cmp dword [esi + 8], 0
je 0x1003039d
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push 0x1000
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x1c], xmm0
movups xmmword [ebp - 0x2c], xmm0
call fcn.1000b640
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x18]
mov esi, edx
mov ecx, dword [ebp - 0x1c]
sub esi, ecx
mov dword [ebp - 0x2c], vtable.Packet.0
cmp esi, 0x989680
ja 0x100302b2
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x100302a2
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x1003028b
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000b6f0
jmp 0x1003029f
sub edi, esi
push edi
push 0
push edx
lea esi, [edx + edi]
call fcn.100833b0
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov byte [ecx + eax], 0xa1
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov esi, edx
mov dword [ebp - 4], 1
sub esi, ecx
cmp esi, 0x989680
ja 0x10030309
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x100302f9
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x100302e2
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000b6f0
jmp 0x100302f6
sub edi, esi
push edi
push 0
push edx
lea esi, [edi + edx]
call fcn.100833b0
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov byte [ecx + eax], 0xab
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov al, byte [0x100b8fe8]
mov esi, edx
sub esi, ecx
mov byte [ebp - 0x51], al
cmp esi, 0x989680
ja 0x10030363
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x10030351
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x1003033a
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000b6f0
jmp 0x1003034e
sub edi, esi
push edi
push 0
push edx
lea esi, [edi + edx]
call fcn.100833b0
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dl, byte [ebp - 0x51]
mov byte [ecx + eax], dl
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
sub edx, ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x50], edx
cmp edx, 0x4000
ja 0x1003038e
mov eax, dword [0x100bac24]
mov dword [ebp - 0x5c], eax
mov ecx, dword ds:[0x100a90a0]
mov ecx, dword ds:[ecx]
push dword [ebp - 0x50]
push dword [ebp - 0x58]
call dword [ebp - 0x5c]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
call fcn.1000b890
movaps xmm0, xmmword [0x100af470]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x45425f44
mov word [ebp - 0x34], 0x4c
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x14
jb 0x100303b7
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100303e3
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002570
cmp dword [ebp - 0x6c], 0
je 0x1003046f
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x1003046f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003046f
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003046f
cmp edi, dword [esi + 0xc4]
jne 0x1003042f
call fcn.1008642f
mov esi, dword [edi + 8]
test esi, esi
je 0x10030458
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x10030441
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030471
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x10030468
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030422
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x100304a5
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003049b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031086
push ecx
push edx
call fcn.100812a6
add esp, 8
mov byte [ebp - 0x40], 0x30
mov cl, 0x44
xor cl, byte [ebp - 0x40]
mov al, 0x52
xor al, byte [ebp - 0x40]
mov dl, 0x5e
mov byte [ebp - 0x3f], al
mov ch, 0x47
mov byte [ebp - 0x3e], cl
mov dh, 0x55
mov cl, byte [ebp - 0x40]
mov ah, 0x6f
mov byte [ebp - 0x51], 0x51
xor ch, cl
mov al, byte [ebp - 0x51]
xor dh, cl
xor al, cl
mov byte [ebp - 0x49], 0x40
mov byte [ebp - 0x39], al
xor ah, cl
mov al, byte [ebp - 0x49]
xorps xmm0, xmm0
xor al, cl
mov byte [ebp - 0x2d], 0x5f
mov byte [ebp - 0x38], al
mov al, byte [ebp - 0x2d]
xor al, cl
mov byte [ebp - 0x2e], dl
xor dl, cl
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x2e]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030540
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x100305cd
test esi, esi
je 0x100305cd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100305cd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100305cd
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003058d
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x100305b9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100305a2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030601
cmp edi, dword [esi + 0xc4]
jne 0x100305c6
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030580
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030610
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030606
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003108b
jmp 0x10030606
mov eax, dword [ebp - 0x50]
jmp 0x100305cf
push ecx
push edx
call fcn.100812a6
add esp, 8
mov byte [ebp - 0x3c], 0x4f
mov cl, 0x3b
xor cl, byte [ebp - 0x3c]
mov al, 0x2d
xor al, byte [ebp - 0x3c]
mov dh, 0x3d
mov byte [ebp - 0x3b], al
mov ch, 0x2e
mov byte [ebp - 0x3a], cl
mov dl, 0x21
mov cl, byte [ebp - 0x3c]
mov ah, 0x10
mov byte [ebp - 0x2e], 0x22
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x20
mov byte [ebp - 0x35], al
xor ah, cl
mov al, byte [ebp - 0x2d]
xorps xmm0, xmm0
xor al, cl
mov byte [ebp - 0x49], dh
xor dh, cl
mov byte [ebp - 0x34], al
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x37], ch
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030690
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003071d
test esi, esi
je 0x1003071d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003071d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003071d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x100306dd
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030709
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100306f2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030751
cmp edi, dword [esi + 0xc4]
jne 0x10030716
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x100306d0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030760
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030756
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031090
jmp 0x10030756
mov eax, dword [ebp - 0x50]
jmp 0x1003071f
push ecx
push edx
call fcn.100812a6
add esp, 8
mov dl, 0x3e
mov dword [ebp - 0x40], 0x504a5c3e
mov dword [ebp - 0x3c], 0x5d5d5f61
xor ecx, ecx
mov dword [ebp - 0x38], 0x514d4d5b
mov word [ebp - 0x34], 0x474c
mov byte [ebp - 0x32], 0
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xd
jae 0x10030794
mov dl, byte [ebp - 0x40]
jmp 0x10030783
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100307b3
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003083d
test esi, esi
je 0x1003083d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003083d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003083d
nop
cmp edi, dword [esi + 0xc4]
jne 0x100307fd
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030829
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030812
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030871
cmp edi, dword [esi + 0xc4]
jne 0x10030836
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x100307f0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030880
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030876
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031095
jmp 0x10030876
mov eax, dword [ebp - 0x50]
jmp 0x1003083f
push ecx
push edx
call fcn.100812a6
add esp, 8
mov byte [ebp - 0x40], 0x71
mov cl, 5
xor cl, byte [ebp - 0x40]
mov al, 0x13
xor al, byte [ebp - 0x40]
mov dl, 0x1f
mov byte [ebp - 0x3f], al
mov ch, dl
mov byte [ebp - 0x3e], cl
mov dh, 0x1e
mov cl, byte [ebp - 0x40]
mov ah, 0x2e
mov byte [ebp - 0x2e], 3
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x1c
mov byte [ebp - 0x39], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x49], 0x10
mov byte [ebp - 0x38], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x51], 0x1d
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x51]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030906
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003098f
test esi, esi
je 0x1003098f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003098f
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003098f
cmp edi, dword [esi + 0xc4]
jne 0x1003094f
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x1003097b
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030964
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100309c3
cmp edi, dword [esi + 0xc4]
jne 0x10030988
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030942
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x18], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100309d2
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100309c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003109a
jmp 0x100309c8
mov eax, dword [ebp - 0x50]
jmp 0x10030991
push ecx
push edx
call fcn.100812a6
add esp, 8
mov byte [ebp - 0x3c], 0x24
mov cl, 0x50
xor cl, byte [ebp - 0x3c]
mov al, 0x46
xor al, byte [ebp - 0x3c]
mov ch, 0x49
mov byte [ebp - 0x3b], al
mov dl, 0x4a
mov byte [ebp - 0x3a], cl
mov dh, 0x45
mov cl, byte [ebp - 0x3c]
mov ah, 0x7b
mov byte [ebp - 0x2e], 0x43
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x4d
mov byte [ebp - 0x35], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x49], 0x47
mov byte [ebp - 0x34], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x37], ch
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030a50
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030add
test esi, esi
je 0x10030add
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030add
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030add
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x10030a9d
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030ac9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030ab2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030b11
cmp edi, dword [esi + 0xc4]
jne 0x10030ad6
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030a90
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x1c], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030b20
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030b16
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003109f
jmp 0x10030b16
mov eax, dword [ebp - 0x50]
jmp 0x10030adf
push ecx
push edx
call fcn.100812a6
add esp, 8
mov byte [ebp - 0x3c], 0xd
mov cl, 0x79
xor cl, byte [ebp - 0x3c]
mov al, 0x6f
xor al, byte [ebp - 0x3c]
mov ch, 0x7f
mov byte [ebp - 0x3b], al
mov dl, 0x63
mov byte [ebp - 0x2e], ch
mov dh, 0x6c
mov al, byte [ebp - 0x2e]
mov ah, 0x52
mov byte [ebp - 0x3a], cl
xorps xmm0, xmm0
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x2d], 0x68
xor dl, cl
mov byte [ebp - 0x35], al
mov al, byte [ebp - 0x2d]
xor ch, cl
xor dh, cl
mov byte [ebp - 0x37], ch
xor ah, cl
mov byte [ebp - 0x33], 0
xor al, cl
mov byte [ebp - 0x39], dl
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x36], dh
mov byte [ebp - 0x38], ah
lea edx, [ecx + 1]
mov byte [ebp - 0x34], al
mov byte [ebp - 0x33], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030b90
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030c1d
test esi, esi
je 0x10030c1d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030c1d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030c1d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x10030bdd
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030c09
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030bf2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030c51
cmp edi, dword [esi + 0xc4]
jne 0x10030c16
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030bd0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x20], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030c60
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030c56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100310a4
jmp 0x10030c56
mov eax, dword [ebp - 0x50]
jmp 0x10030c1f
push ecx
push edx
call fcn.100812a6
add esp, 8
mov dl, 0x2d
mov dword [ebp - 0x40], 0x43594f2d
mov dword [ebp - 0x3c], 0x4a5d5872
xor ecx, ecx
mov dword [ebp - 0x38], 0x48494c5f
mov byte [ebp - 0x34], 0
nop dword [eax]
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10030c91
mov dl, byte [ebp - 0x40]
jmp 0x10030c80
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030cb0
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030d3d
test esi, esi
je 0x10030d3d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030d3d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030d3d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x10030cfd
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030d29
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030d12
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030d71
cmp edi, dword [esi + 0xc4]
jne 0x10030d36
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030cf0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x24], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030d80
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030d76
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100310a9
jmp 0x10030d76
mov eax, dword [ebp - 0x50]
jmp 0x10030d3f
push ecx
push edx
call fcn.100812a6
add esp, 8
mov byte [ebp - 0x40], 0x54
mov cl, 0x20
xor cl, byte [ebp - 0x40]
mov al, 0x36
xor al, byte [ebp - 0x40]
mov ch, 0x21
mov byte [ebp - 0x3f], al
mov dl, 0x3a
mov byte [ebp - 0x3e], cl
mov dh, dl
mov cl, byte [ebp - 0x40]
mov ah, 0xb
mov byte [ebp - 0x2e], 0x3d
xor dl, cl
mov al, byte [ebp - 0x2e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x2d], 0x25
mov byte [ebp - 0x39], al
xor ah, cl
mov al, byte [ebp - 0x2d]
xorps xmm0, xmm0
xor al, cl
mov byte [ebp - 0x49], ch
mov byte [ebp - 0x38], al
xor ch, cl
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x51], 0x31
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x51]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030e05
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030e8e
test esi, esi
je 0x10030e8e
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030e8e
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030e8e
cmp edi, dword [esi + 0xc4]
jne 0x10030e4e
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030e7a
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030e63
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030ec2
cmp edi, dword [esi + 0xc4]
jne 0x10030e87
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030e41
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030ed1
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030ec7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100310ae
jmp 0x10030ec7
mov eax, dword [ebp - 0x50]
jmp 0x10030e90
push ecx
push edx
call fcn.100812a6
add esp, 8
mov cl, 0x3f
mov byte [ebp - 0x3c], 0x4b
mov byte [ebp - 0x49], cl
mov al, 0x29
xor al, byte [ebp - 0x3c]
mov ch, 0x28
xor cl, byte [ebp - 0x3c]
mov dl, 0x25
mov byte [ebp - 0x3b], al
mov dh, 0x39
mov byte [ebp - 0x3a], cl
mov ah, 0x14
mov cl, byte [ebp - 0x3c]
xorps xmm0, xmm0
mov byte [ebp - 0x2e], 0x2a
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x2d
mov byte [ebp - 0x35], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x37], ch
mov byte [ebp - 0x34], al
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030f53
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0xac]
call fcn.10002570
cmp dword [ebp - 0x9c], 0
je 0x10030feb
test esi, esi
je 0x10030feb
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030feb
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030feb
cmp edi, dword [esi + 0xc4]
jne 0x10030fa2
call fcn.1008642f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030fd7
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030fb7
mov ecx, dword [ecx]
cmp dword [ebp - 0x98], 0xf
lea eax, [ebp - 0xac]
cmova eax, dword [ebp - 0xac]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10031025
cmp edi, dword [esi + 0xc4]
jne 0x10030fe4
call fcn.1008642f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030f95
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x2c], eax
mov ecx, dword [ebp - 0x98]
cmp ecx, 0xf
jbe 0x10031034
mov edx, dword [ebp - 0xac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003102a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100310b3
jmp 0x1003102a
mov eax, dword [ebp - 0x50]
jmp 0x10030fed
push ecx
push edx
call fcn.100812a6
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10081245
mov esp, ebp
pop ebp
ret
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
int3