Function at 0x1005df10
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008154d
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x10091040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x30], 0x18
mov dl, 0x6c
xor dl, byte [ebp - 0x30]
mov al, 0x7a
xor al, byte [ebp - 0x30]
mov cl, 0x47
mov byte [ebp - 0x2f], al
mov ch, 0x7b
mov byte [ebp - 0x2e], dl
mov dh, 0x74
mov dl, byte [ebp - 0x30]
mov ah, 0x76
mov byte [ebp - 0x21], 0x77
xor cl, dl
mov al, byte [ebp - 0x21]
xor ch, dl
xor al, dl
mov byte [ebp - 0x23], 0x6b
mov byte [ebp - 0x29], al
xor ah, dl
mov al, byte [ebp - 0x23]
xor dh, dl
xor al, dl
mov byte [ebp - 0x22], 0x7d
mov byte [ebp - 0x28], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x22]
mov byte [ebp - 0x2c], cl
xor al, dl
mov byte [ebp - 0x2b], ch
lea ecx, [ebp - 0x2f]
mov byte [ebp - 0x26], 0
mov byte [ebp - 0x2a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x2d], ah
mov byte [ebp - 0x27], al
mov byte [ebp - 0x26], 0
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005dfc0
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.100024a0
cmp dword [ebp - 0x64], 0
mov eax, dword [esi]
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov dword [ebp - 0x34], eax
je 0x1005e060
test eax, eax
je 0x1005e060
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e060
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0xc4]
mov dword [ebp - 0x44], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x1005e05d
nop word [eax + eax]
cmp esi, dword [eax + 0xc4]
jne 0x1005e01a
call edi
mov eax, dword [esi + 8]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x1005e046
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1005e02f
mov ecx, dword [ecx]
cmp dword [ebp - 0x60], 0xf
lea eax, [ebp - 0x74]
cmova eax, dword [ebp - 0x74]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005e091
mov eax, dword [ebp - 0x34]
cmp esi, dword [eax + 0xc4]
jne 0x1005e056
call edi
mov eax, dword [ebp - 0x34]
mov esi, dword [esi]
cmp esi, dword [ebp - 0x44]
jne 0x1005e010
mov esi, dword [ebp - 0x38]
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [esi + 4], eax
cmp ecx, 0xf
jbe 0x1005e0a3
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e099
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1005e099
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
jmp 0x1005e062
push ecx
push edx
call fcn.1007d105
add esp, 8
mov byte [ebp - 0x30], 0x75
mov cl, 0x14
xor cl, byte [ebp - 0x30]
mov al, 0x17
xor al, byte [ebp - 0x30]
mov ch, 0x2a
mov byte [ebp - 0x2f], al
mov dl, 6
mov byte [ebp - 0x2e], cl
mov dh, 0x11
mov cl, byte [ebp - 0x30]
mov ah, 0x10
mov byte [ebp - 0x22], 7
xor dl, cl
mov al, byte [ebp - 0x22]
xor ch, cl
xor al, cl
mov byte [ebp - 0x23], 0x1a
mov byte [ebp - 0x29], al
xor dh, cl
mov al, byte [ebp - 0x23]
xor ah, cl
xor al, cl
mov byte [ebp - 0x21], 5
mov byte [ebp - 0x28], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x21]
xor al, cl
mov byte [ebp - 0x2b], ch
lea ecx, [ebp - 0x2f]
mov byte [ebp - 0x26], 0
mov byte [ebp - 0x2d], dl
mov byte [ebp - 0x2a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x2c], ah
mov byte [ebp - 0x27], al
mov byte [ebp - 0x26], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e120
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.100024a0
mov ecx, dword [esi]
lea edx, [ebp - 0x5c]
call fcn.100147f0
mov ecx, dword [ebp - 0x48]
mov dword [esi + 8], eax
cmp ecx, 0xf
jbe 0x1005e179
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e16f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1005e16f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1007d105
add esp, 8
mov al, 0x59
mov byte [ebp - 0x30], 0x2d
mov dl, al
mov byte [ebp - 0x22], 0x4f
xor al, byte [ebp - 0x30]
mov cl, 0x55
mov byte [ebp - 0x2f], al
mov ch, 0x40
mov al, byte [ebp - 0x30]
mov dh, 0x42
xor cl, al
mov byte [ebp - 0x28], 0
xor dl, al
mov byte [ebp - 0x2e], cl
xor ch, al
mov byte [ebp - 0x2d], dl
xor dh, al
mov byte [ebp - 0x2b], ch
mov ah, 0x72
mov byte [ebp - 0x2a], dh
xor ah, al
mov byte [ebp - 0x28], 0
mov al, byte [ebp - 0x22]
lea ecx, [ebp - 0x2f]
xor al, byte [ebp - 0x30]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [ebp - 0x2c], ah
mov byte [ebp - 0x29], al
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e1e0
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.100024a0
cmp dword [ebp - 0x64], 0
mov eax, dword [esi + 8]
mov dword [ebp - 0x34], eax
je 0x1005e275
test eax, eax
je 0x1005e275
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e275
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0xc4]
mov dword [ebp - 0x3c], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x1005e272
cmp esi, dword [eax + 0xc4]
jne 0x1005e22f
call edi
mov eax, dword [esi + 8]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x1005e25b
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1005e244
mov ecx, dword [ecx]
cmp dword [ebp - 0x60], 0xf
lea eax, [ebp - 0x74]
cmova eax, dword [ebp - 0x74]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005e2a6
mov eax, dword [ebp - 0x34]
cmp esi, dword [eax + 0xc4]
jne 0x1005e26b
call edi
mov eax, dword [ebp - 0x34]
mov esi, dword [esi]
cmp esi, dword [ebp - 0x3c]
jne 0x1005e225
mov esi, dword [ebp - 0x38]
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [esi + 0x24], eax
cmp ecx, 0xf
jbe 0x1005e2b8
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e2ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1005e2ae
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x38]
jmp 0x1005e277
push ecx
push edx
call fcn.1007d105
add esp, 8
xorps xmm0, xmm0
mov word [ebp - 0x34], 0xc
lea ecx, [ebp - 0x33]
mov byte [ebp - 0x33], 0
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x64], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x60], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e2e0
sub ecx, edx
lea eax, [ebp - 0x33]
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.100024a0
mov dword [ebp - 4], 0
mov eax, dword [esi + 0x24]
mov esi, dword [ebp - 0x74]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x1005e38f
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e38f
cmp dword [ebp - 0x60], 0xf
lea ecx, [ebp - 0x74]
cmova ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e328
sub ecx, edx
mov dword [ebp - 0x34], ecx
lea esi, [ecx + 0x21]
push esi
call fcn.1007d113
push esi
mov edi, eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x60], 0xf
lea edx, [ebp - 0x74]
push dword [ebp - 0x34]
cmova edx, dword [ebp - 0x74]
lea esi, [edi + 0x20]
push edx
push esi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x34]
add esp, 0x1c
mov ecx, dword [ebp - 0x3c]
mov dword [edi + 4], esi
mov dword [edi + 0x14], eax
push edi
mov dword [edi + 0x18], 0x1f
call dword [0x10088b78]
push edi
call fcn.1007d11c
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
add esp, 4
mov esi, dword [ebp - 0x74]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x60]
cmp eax, 0xf
jbe 0x1005e3cb
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x1005e3c1
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1005e3c1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.1007d105
add esp, 8
xor al, al
mov byte [ebp - 0x21], al
movzx eax, al
mov cl, 0x45
push eax
mov dword [ebp - 0x90], 0x35372245
xor eax, eax
mov dword [ebp - 0x8c], 0x2a37211a
mov dword [ebp - 0x88], 0x21601a35
mov byte [ebp - 0x84], 0
nop dword [eax]
xor byte [ebp + eax - 0x8f], cl
inc eax
cmp eax, 0xb
jae 0x1005e415
mov cl, byte [ebp - 0x90]
jmp 0x1005e400
sub esp, 0x18
mov byte [ebp - 0x84], 0
mov edx, esp
lea ecx, [ebp - 0x8f]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e440
sub ecx, esi
lea eax, [ebp - 0x8f]
push ecx
push eax
mov ecx, edx
call fcn.100024a0
lea eax, [ebp - 0x5c]
push eax
call fcn.10006910
movzx esi, byte [ebp - 0x21]
mov edx, eax
mov eax, dword [ebp - 0x38]
add esp, 0x20
mov ecx, dword [eax + 8]
call fcn.100147f0
mov ecx, dword [ebp - 0x38]
mov dword [ecx + esi*4 + 0xc], eax
mov ecx, dword [ebp - 0x48]
cmp ecx, 0xf
jbe 0x1005e4b0
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e4a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005e08b
push ecx
push edx
call fcn.1007d105
add esp, 8
mov al, 0x43
mov byte [ebp - 0x30], 0x22
mov ah, al
mov byte [ebp - 0x22], 0x41
xor al, byte [ebp - 0x30]
mov cl, 0x50
xor cl, byte [ebp - 0x30]
mov ch, 0x7d
mov byte [ebp - 0x2f], al
mov dl, 0x47
mov al, byte [ebp - 0x22]
mov dh, 0x4b
mov byte [ebp - 0x2e], cl
xorps xmm0, xmm0
mov cl, byte [ebp - 0x30]
xor al, cl
mov byte [ebp - 0x23], 0x4d
mov byte [ebp - 0x29], al
xor dl, cl
mov al, byte [ebp - 0x23]
xor ch, cl
xor al, cl
mov byte [ebp - 0x3d], 0x4c
xor dh, cl
mov byte [ebp - 0x28], al
mov al, byte [ebp - 0x3d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x2b], ch
lea ecx, [ebp - 0x2f]
mov byte [ebp - 0x26], 0
mov byte [ebp - 0x2d], dl
mov byte [ebp - 0x2a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x2c], ah
mov byte [ebp - 0x27], al
mov byte [ebp - 0x26], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e530
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.100024a0
cmp dword [ebp - 0x4c], 0
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + esi*4 + 0xc]
mov dword [ebp - 0x34], eax
je 0x1005e5d3
test eax, eax
je 0x1005e5d3
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e5d3
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0xc4]
mov dword [ebp - 0x3c], ecx
mov esi, dword [ecx]
cmp esi, ecx
je 0x1005e5d3
nop dword [eax]
cmp esi, dword [eax + 0xc4]
jne 0x1005e58d
call edi
mov eax, dword [ebp - 0x34]
mov edi, dword [esi + 8]
test edi, edi
je 0x1005e5b9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005e59f
mov ecx, dword [ecx]
cmp dword [ebp - 0x48], 0xf
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005e5d5
mov eax, dword [ebp - 0x34]
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
cmp esi, dword [eax + 0xc4]
jne 0x1005e5cc
call edi
mov eax, dword [ebp - 0x34]
mov esi, dword [esi]
cmp esi, dword [ebp - 0x3c]
jne 0x1005e580
xor edi, edi
movzx eax, byte [ebp - 0x21]
mov esi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
lea eax, [eax + eax*2]
mov dword [esi + eax*8 + 0x2c], edi
cmp ecx, 0xf
jbe 0x1005e617
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e60d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005e08b
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 0x53
mov dword [ebp - 0xa0], 0x272b2753
mov dword [ebp - 0x9c], 0x2136230c
xor eax, eax
mov dword [ebp - 0x98], 0x273d3630
mov byte [ebp - 0x94], 0
xor byte [ebp + eax - 0x9f], cl
inc eax
cmp eax, 0xb
jae 0x1005e655
mov cl, byte [ebp - 0xa0]
jmp 0x1005e640
xorps xmm0, xmm0
mov byte [ebp - 0x94], 0
lea ecx, [ebp - 0x9f]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e680
sub ecx, edx
lea eax, [ebp - 0x9f]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.100024a0
cmp dword [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x21]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [ebp - 0x3c], edi
je 0x1005e726
test edi, edi
je 0x1005e726
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e726
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x44], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005e723
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1005e6de
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov edi, dword [esi + 8]
test edi, edi
je 0x1005e70b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005e6f0
mov ecx, dword [ecx]
cmp dword [ebp - 0x48], 0xf
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005e7a7
mov edi, dword [ebp - 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x1005e71c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov esi, dword [esi]
cmp esi, dword [ebp - 0x44]
jne 0x1005e6d0
mov esi, dword [ebp - 0x38]
xor edi, edi
movzx eax, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x48]
add eax, 2
lea eax, [eax + eax*2]
mov dword [esi + eax*8], edi
cmp ecx, 0xf
jbe 0x1005e769
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e75f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005e08b
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 0x7b
mov dword [ebp - 0xb0], 0x1c090b7b
mov dword [ebp - 0xac], 0x91e0b24
xor eax, eax
mov dword [ebp - 0xa8], 0xf151e18
mov byte [ebp - 0xa4], 0
xor byte [ebp + eax - 0xaf], cl
inc eax
cmp eax, 0xb
jae 0x1005e7af
mov cl, byte [ebp - 0xb0]
jmp 0x1005e792
mov esi, dword [ebp - 0x38]
jmp 0x1005e728
xorps xmm0, xmm0
mov byte [ebp - 0xa4], 0
lea ecx, [ebp - 0xaf]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e7d4
sub ecx, edx
lea eax, [ebp - 0xaf]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.100024a0
cmp dword [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x21]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [ebp - 0x3c], edi
je 0x1005e86f
test edi, edi
je 0x1005e86f
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e86f
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x44], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005e86f
nop
cmp esi, dword [edi + 0xc4]
jne 0x1005e82e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov edi, dword [esi + 8]
test edi, edi
je 0x1005e857
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005e840
mov ecx, dword [ecx]
cmp dword [ebp - 0x48], 0xf
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005e871
mov edi, dword [ebp - 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x1005e868
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov esi, dword [esi]
cmp esi, dword [ebp - 0x44]
jne 0x1005e820
xor edi, edi
movzx eax, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x48]
lea esi, [eax + eax*2]
mov eax, dword [ebp - 0x38]
mov dword [eax + esi*8 + 0x34], edi
cmp ecx, 0xf
jbe 0x1005e8b3
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e8a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005e08b
push ecx
push edx
call fcn.1007d105
add esp, 8
mov edi, dword [ebp - 0x38]
mov esi, dword [edi + esi*8 + 0x34]
test esi, esi
je 0x1005e908
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e908
push 4
lea edi, [esi + 0x140]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e905
lea eax, [esi + 0x13c]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005e905
mov ecx, esi
mov dword [edi], eax
mov dword [esi + 0x13c], 0x64
call dword [0x10088b60]
mov edi, dword [ebp - 0x38]
mov cl, 0x6e
mov byte [ebp - 0x80], 0x1a
mov byte [ebp - 0x3d], cl
mov al, 0x78
xor al, byte [ebp - 0x80]
mov ch, 0x7e
xor cl, byte [ebp - 0x80]
mov dl, 0x74
mov byte [ebp - 0x7f], al
mov dh, 0x7f
mov al, byte [ebp - 0x3d]
mov ah, 0x45
mov byte [ebp - 0x7e], cl
xorps xmm0, xmm0
mov cl, byte [ebp - 0x80]
xor al, cl
mov byte [ebp - 0x22], 0x7b
mov byte [ebp - 0x79], al
xor dl, cl
mov al, byte [ebp - 0x22]
xor ch, cl
xor al, cl
mov byte [ebp - 0x23], 0x73
mov byte [ebp - 0x78], al
xor dh, cl
mov al, byte [ebp - 0x23]
xor ah, cl
xor al, cl
mov byte [ebp - 0x31], 0x76
mov byte [ebp - 0x77], al
mov al, byte [ebp - 0x31]
xor al, cl
mov byte [ebp - 0x7b], ch
lea ecx, [ebp - 0x7f]
mov byte [ebp - 0x75], 0
mov byte [ebp - 0x7d], dl
mov byte [ebp - 0x7a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x7c], ah
mov byte [ebp - 0x76], al
mov byte [ebp - 0x75], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e990
sub ecx, edx
lea eax, [ebp - 0x7f]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.100024a0
cmp dword [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x21]
mov edi, dword [edi + eax*4 + 0xc]
mov dword [ebp - 0x3c], edi
je 0x1005ea26
test edi, edi
je 0x1005ea26
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005ea26
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x44], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1005ea26
cmp esi, dword [edi + 0xc4]
jne 0x1005e9e5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov edi, dword [esi + 8]
test edi, edi
je 0x1005ea0e
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1005e9f7
mov ecx, dword [ecx]
cmp dword [ebp - 0x48], 0xf
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005ea28
mov edi, dword [ebp - 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x1005ea1f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov esi, dword [esi]
cmp esi, dword [ebp - 0x44]
jne 0x1005e9d7
xor edi, edi
movzx eax, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x38]
lea eax, [eax + eax*2]
mov dword [ecx + eax*8 + 0x38], edi
mov ecx, dword [ebp - 0x48]
cmp ecx, 0xf
jbe 0x1005ea6a
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005ea60
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005e08b
push ecx
push edx
call fcn.1007d105
add esp, 8
call fcn.1000eea0
mov edi, dword [ebp - 0x38]
test eax, eax
je 0x1005ec6c
movzx ecx, byte [ebp - 0x21]
lea esi, [ecx + ecx*2]
mov dword [ebp - 0x3c], esi
mov dword [edi + esi*8 + 0x3c], eax
call fcn.10014b10
mov edx, dword [0x10088b4c]
mov ecx, eax
call edx
test eax, eax
je 0x1005ec6c
mov ecx, dword [edi + esi*8 + 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
mov edi, dword [edi]
mov eax, dword [eax + esi*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x1005eadc
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005eadc
test edi, edi
je 0x1005eadc
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005eadc
mov eax, dword [esi]
mov ecx, esi
push edi
mov eax, dword [eax + 0x74]
call eax
mov eax, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x38]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x1005eb2b
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005eb2b
sub esp, 0x20
mov ecx, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [0x10088b5c]
movzx eax, byte [ebp - 0x21]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x1005eb62
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005eb62
push 4
add esi, 0xcc
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005eb62
mov dword [esi], 0xb
movzx eax, byte [ebp - 0x21]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x1005eb8d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005eb8d
push pe_nt_image_headers32
mov ecx, esi
call dword [0x10088b28]
movzx eax, byte [ebp - 0x21]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
lea eax, [eax + eax*2]
mov dword [ebp - 0x6c], 0
mov esi, dword [edi + eax*8 + 0x2c]
test esi, esi
je 0x1005ebe9
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005ebe9
mov eax, dword [esi + 0xdc]
mov dword [ebp - 0x6c], eax
mov eax, dword [esi + 0xe0]
mov dword [ebp - 0x68], eax
mov eax, dword [esi + 0xe4]
mov dword [ebp - 0x64], eax
mov eax, dword [esi + 0xe8]
mov dword [ebp - 0x60], eax
movzx eax, byte [ebp - 0x21]
movups xmm0, xmmword [ebp - 0x6c]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
movups xmmword [ebp - 0x20], xmm0
mov esi, dword [eax]
test esi, esi
je 0x1005ec1b
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005ec1b
lea eax, [ebp - 0x20]
mov ecx, esi
push eax
call dword [0x10088b58]
movzx eax, byte [ebp - 0x21]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x1005ec45
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005ec45
lea eax, [ebp - 0x20]
mov ecx, esi
push eax
call dword [0x10088b08]
movzx eax, byte [ebp - 0x21]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x3c]
mov esi, dword [eax]
test esi, esi
je 0x1005ec6c
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005ec6c
push eax
mov ecx, esi
call dword [0x10088b1c]
mov al, byte [ebp - 0x21]
inc al
mov byte [ebp - 0x21], al
cmp al, 6
jae 0x1005ec83
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
jmp 0x1005e3d0
mov esi, dword [edi]
test esi, esi
je 0x1005eca5
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005eca5
lea ecx, [esi + 0xd4]
call fcn.10014f70
mov esi, eax
jmp 0x1005eca7
xor esi, esi
mov edi, dword [edi]
test edi, edi
je 0x1005ecc6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1005ecc6
or esi, 0x30
mov ecx, edi
push esi
call dword [0x10088b28]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007d0a4
mov esp, ebp
pop ebp
ret