Function at 0x1006e740
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100cbca0
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x100f2040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x110], edi
mov dword [ebp - 0xe0], 0x4e544220
xor esi, esi
mov dword [ebp - 0xdc], 0x4f4c437f
mov word [ebp - 0xd8], 0x4553
mov byte [ebp - 0xd6], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0xdf]
call fcn.10002dd0
push esi
lea ecx, [ebp - 0xdf]
mov al, byte [eax]
xor al, byte [ebp - 0xe0]
mov byte [ebp - 0x7d], al
call fcn.10002dd0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x1006e7a0
push 9
lea ecx, [ebp - 0xdf]
call fcn.10002dd0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0xdf]
push eax
call fcn.10003470
mov dword [ebp - 4], 0
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x372d3b59
xor esi, esi
mov dword [ebp - 0x8c], 0x3a3c2b06
mov dword [ebp - 0x88], 0x3e2b3831
mov word [ebp - 0x84], 0x3c
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002ef0
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.10002ef0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x1006e842
push 0xc
lea ecx, [ebp - 0x8f]
call fcn.10002ef0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 1
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xa0], 0x606c6014
xor esi, esi
mov dword [ebp - 0x9c], 0x6775774b
mov word [ebp - 0x98], 0x7c
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x9f]
call fcn.10002d70
mov cl, byte [ebp - 0xa0]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x9f]
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x1006e8e0
push 8
lea ecx, [ebp - 0x9f]
call fcn.10002d70
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10003470
mov dword [ebp - 4], 2
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0xc], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x4f434f3b
xor esi, esi
mov dword [ebp - 0x8c], 0x575a5964
mov dword [ebp - 0x88], 0x5e58555a
mov byte [ebp - 0x84], 0
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006e980
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 3
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x10], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100e8a70]
xor esi, esi
movups xmmword [ebp - 0x20], xmm0
push esi
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
mov cl, byte [ebp - 0x20]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1006ea06
push 0xe
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov dword [ebp - 4], 4
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x14], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xa0], 0x61477022
xor esi, esi
mov dword [ebp - 0x9c], 0x4550434a
mov word [ebp - 0x98], 0x47
nop
push esi
lea ecx, [ebp - 0x9f]
call fcn.10002d70
push esi
lea ecx, [ebp - 0x9f]
mov al, byte [eax]
xor al, byte [ebp - 0xa0]
mov byte [ebp - 0x7d], al
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x1006ea90
push 8
lea ecx, [ebp - 0x9f]
call fcn.10002d70
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10003470
mov dword [ebp - 4], 5
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x18], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
cmp dword [edi + 0x18], 0
je 0x1006ed87
xor eax, eax
mov dword [ebp - 0xa4], 5
lea ecx, [edi + 0x24]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xb8], ecx
nop
push eax
mov dword [ebp - 0xb4], 0x7578791c
xor esi, esi
mov dword [ebp - 0xb0], 0x72754368
mov dword [ebp - 0xac], 0x4368696c
mov word [ebp - 0xa8], 0x7839
mov byte [ebp - 0xa6], 0
push esi
lea ecx, [ebp - 0xb3]
call fcn.100159f0
push esi
lea ecx, [ebp - 0xb3]
mov al, byte [eax]
xor al, byte [ebp - 0xb4]
mov byte [ebp - 0x7d], al
call fcn.100159f0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1006eb61
push 0xd
lea ecx, [ebp - 0xb3]
call fcn.100159f0
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0xb3]
push eax
call fcn.10003470
lea eax, [ebp - 0x10c]
push eax
call fcn.1000d650
add esp, 0x24
mov dword [ebp - 4], 6
mov edx, eax
mov ecx, dword [edi + 0x18]
call fcn.1001d9e0
mov esi, dword [ebp - 0xb8]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], 0xffffffff
mov dword [esi], eax
call fcn.10003020
mov esi, dword [esi]
test esi, esi
je 0x1006ec07
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1006ec07
push 4
mov ecx, esi
call dword [0x100e6d6c]
mov eax, dword [ebp - 0xe4]
add dword [ebp - 0xb8], 4
inc eax
sub dword [ebp - 0xa4], 1
mov dword [ebp - 0xe4], eax
jne 0x1006eb30
mov dword [ebp - 0x90], 0x465c4a28
xor esi, esi
mov dword [ebp - 0x8c], 0x46474b77
mov dword [ebp - 0x88], 0x455a414e
mov byte [ebp - 0x84], 0
nop
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006ec50
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 7
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x18]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x38], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x273d2b49
xor esi, esi
mov dword [ebp - 0x8c], 0x27282a16
mov dword [ebp - 0x88], 0x252c2a
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.1001c630
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.1001c630
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1006ecf0
push 0xa
lea ecx, [ebp - 0x8f]
call fcn.1001c630
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 8
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x18]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x3c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov esi, dword [edi + 0x18]
test esi, esi
je 0x1006ed87
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1006ed87
push eax
mov ecx, esi
call dword [0x100e6d54]
movaps xmm0, xmmword [0x100e92f0]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov word [ebp - 0xbc], 0x57
push esi
lea ecx, [ebp - 0xcb]
call fcn.10002e90
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10002e90
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x1006eda0
push 0x10
lea ecx, [ebp - 0xcb]
call fcn.10002e90
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 9
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x1c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
cmp dword [edi + 0x1c], 0
je 0x1006f337
mov dword [ebp - 0xb4], 0x17102b78
xor esi, esi
mov dword [ebp - 0xb0], 0x16110808
mov dword [ebp - 0xac], 0x1936271f
mov word [ebp - 0xa8], 0x1d15
mov byte [ebp - 0xa6], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0xb3]
call fcn.100159f0
push esi
lea ecx, [ebp - 0xb3]
mov al, byte [eax]
xor al, byte [ebp - 0xb4]
mov byte [ebp - 0x7d], al
call fcn.100159f0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1006ee50
push 0xd
lea ecx, [ebp - 0xb3]
call fcn.100159f0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0xb3]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xa
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x1c]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x40], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100e8950]
xor esi, esi
movups xmmword [ebp - 0x20], xmm0
push esi
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
push esi
lea ecx, [ebp - 0x1f]
mov al, byte [eax]
xor al, byte [ebp - 0x20]
mov byte [ebp - 0x7d], al
call fcn.10002cb0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1006eed7
push 0xe
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xb
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x1c]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x44], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100e8ee0]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov word [ebp - 0xbc], 0x3934
mov byte [ebp - 0xba], 0
push esi
lea ecx, [ebp - 0xcb]
call fcn.10003ae0
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10003ae0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x11
jb 0x1006ef62
push 0x11
lea ecx, [ebp - 0xcb]
call fcn.10003ae0
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xc
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x1c]
call fcn.1001d9e0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x48], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100e9960]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov dword [ebp - 0xbc], 0x525641
nop dword [eax]
push esi
lea ecx, [ebp - 0xcb]
call fcn.10003b40
mov cl, byte [ebp - 0xcc]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0xcb]
call fcn.10003b40
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x12
jb 0x1006eff0
push 0x12
lea ecx, [ebp - 0xcb]
call fcn.10003b40
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xd
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x1c]
call fcn.1001d9e0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x4c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
call fcn.100182e0
test eax, eax
je 0x1006f1da
mov ecx, 0x238
mov dword [edi + 0x50], eax
call fcn.1001dd80
mov edx, dword [0x100e6d84]
mov ecx, eax
call edx
test eax, eax
je 0x1006f1da
mov ecx, dword [edi + 0x50]
mov dword [ecx], eax
mov ecx, dword [edi + 0x50]
mov edx, dword [edi + 0x1c]
mov ecx, dword [ecx]
call fcn.1001d9a0
mov ecx, dword [edi + 0x50]
sub esp, 0x14
movss xmm3, dword [0x100e87b0]
xorps xmm2, xmm2
xorps xmm1, xmm1
mov ecx, dword [ecx]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f340000
call fcn.1001df10
mov eax, dword [edi + 0x50]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f126
push 4
push eax
call esi
test eax, eax
jne 0x1006f126
mov eax, dword [ebp - 0xa4]
add eax, 0xcc
push 4
push eax
call esi
test eax, eax
jne 0x1006f126
mov eax, dword [ebp - 0xa4]
mov dword [eax + 0xcc], 0xb
mov eax, dword [edi + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f14f
push 4
push eax
call esi
test eax, eax
jne 0x1006f14f
mov ecx, dword [ebp - 0xa4]
push pe_nt_image_headers32
call dword [0x100e6d60]
mov ecx, dword [edi + 0x4c]
lea eax, [ebp - 0x30]
push eax
call fcn.1001da80
add esp, 4
movups xmm0, xmmword [eax]
mov eax, dword [edi + 0x50]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f18d
push 4
push eax
call esi
test eax, eax
jne 0x1006f18d
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x20]
push eax
call dword [0x100e6d90]
mov eax, dword [edi + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f1b5
push 4
push eax
call esi
test eax, eax
jne 0x1006f1b5
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x20]
push eax
call dword [0x100e6d40]
mov eax, dword [edi + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f1da
push 4
push eax
call esi
test eax, eax
jne 0x1006f1da
mov ecx, dword [ebp - 0xa4]
push eax
call dword [0x100e6d54]
mov dword [ebp - 0x90], 0x6d776103
xor esi, esi
mov dword [ebp - 0x8c], 0x6d6c605c
mov dword [ebp - 0x88], 0x6e716a65
mov byte [ebp - 0x84], 0
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006f201
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xe
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x1c]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x54], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x2180e6c
xor esi, esi
mov dword [ebp - 0x8c], 0x20d0f33
mov dword [ebp - 0x88], 0x90f
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.1001c630
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.1001c630
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1006f2a0
push 0xa
lea ecx, [ebp - 0x8f]
call fcn.1001c630
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x1c]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x58], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov esi, dword [edi + 0x1c]
test esi, esi
je 0x1006f337
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1006f337
push eax
mov ecx, esi
call dword [0x100e6d54]
movaps xmm0, xmmword [0x100e8b40]
xor esi, esi
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0x10322e1c
mov word [ebp - 0xbc], 0x503
mov byte [ebp - 0xba], 0
push esi
lea ecx, [ebp - 0xcf]
call fcn.10003ba0
push esi
lea ecx, [ebp - 0xcf]
mov al, byte [eax]
xor al, byte [ebp - 0xd0]
mov byte [ebp - 0x7d], al
call fcn.10003ba0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x15
jb 0x1006f361
push 0x15
lea ecx, [ebp - 0xcf]
call fcn.10003ba0
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcf]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x10
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x20], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
cmp dword [edi + 0x20], 0
je 0x1006f5a1
movaps xmm0, xmmword [0x100e88e0]
xor esi, esi
movups xmmword [ebp - 0x20], xmm0
nop dword [eax]
push esi
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
push esi
lea ecx, [ebp - 0x1f]
mov al, byte [eax]
xor al, byte [ebp - 0x20]
mov byte [ebp - 0x7d], al
call fcn.10002cb0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1006f3f0
push 0xe
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x11
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x20]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x80], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100e8f30]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov word [ebp - 0xbc], 0x2d
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xcb]
call fcn.10002e90
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10002e90
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x1006f480
push 0x10
lea ecx, [ebp - 0xcb]
call fcn.10002e90
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x20]
call fcn.1001d9e0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x84], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100e9320]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov byte [ebp - 0xbc], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0xcb]
call fcn.10003a80
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10003a80
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x1006f510
push 0xf
lea ecx, [ebp - 0xcb]
call fcn.10003a80
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x13
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x20]
call fcn.1001d9e0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x88], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov esi, dword [edi + 0x20]
test esi, esi
je 0x1006f5a1
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1006f5a1
push eax
mov ecx, esi
call dword [0x100e6d54]
mov dword [ebp - 0x90], 0x222f2e4b
xor esi, esi
mov dword [ebp - 0x8c], 0x2e38143f
mov dword [ebp - 0x88], 0x2328392a
mov byte [ebp - 0x84], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006f5d0
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x14
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x8c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x342e385a
xor esi, esi
mov dword [ebp - 0x8c], 0x3b3f2905
mov dword [ebp - 0x88], 0x323928
nop dword [eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.1001c630
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.1001c630
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1006f670
push 0xa
lea ecx, [ebp - 0x8f]
call fcn.1001c630
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x15
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x90], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100e8b50]
lea ecx, [edi + 0x94]
xor eax, eax
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xb8], 6
nop dword [eax]
nop word [eax + eax]
push eax
movups xmmword [ebp - 0xcc], xmm0
mov byte [ebp - 0xbc], 0
xor esi, esi
push esi
lea ecx, [ebp - 0xcb]
call fcn.10003a80
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10003a80
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x1006f731
push 0xf
lea ecx, [ebp - 0xcb]
call fcn.10003a80
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
lea eax, [ebp - 0x10c]
push eax
call fcn.1000d650
add esp, 0x24
mov dword [ebp - 4], 0x16
mov edx, eax
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
mov esi, dword [ebp - 0xe4]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], 0xffffffff
mov dword [esi], eax
call fcn.10003020
mov eax, dword [ebp - 0xa4]
add esi, 4
movaps xmm0, xmmword [0x100e8b50]
inc eax
sub dword [ebp - 0xb8], 1
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xe4], esi
jne 0x1006f720
mov dword [ebp - 0x90], 0x2b362344
xor esi, esi
mov dword [ebp - 0x8c], 0x2d1b3431
mov dword [ebp - 0x88], 0x37292130
mov byte [ebp - 0x84], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006f810
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x17
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0xac], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
xor ecx, ecx
mov dword [ebp - 0xe4], 0xc
lea eax, [edi + 0xb0]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xb8], eax
nop dword [eax + eax]
push ecx
mov dword [ebp - 0xa0], 0x11003d74
xor esi, esi
mov dword [ebp - 0x9c], 0x10512b19
mov byte [ebp - 0x98], 0
nop
push esi
lea ecx, [ebp - 0x9f]
call fcn.10002d10
push esi
lea ecx, [ebp - 0x9f]
mov al, byte [eax]
xor al, byte [ebp - 0xa0]
mov byte [ebp - 0x7d], al
call fcn.10002d10
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1006f8d0
push 7
lea ecx, [ebp - 0x9f]
call fcn.10002d10
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10003470
lea eax, [ebp - 0x10c]
push eax
call fcn.1000d650
add esp, 0x24
mov dword [ebp - 4], 0x18
mov edx, eax
mov ecx, dword [edi + 0xac]
call fcn.1001d9e0
mov ecx, dword [ebp - 0xb8]
mov dword [ecx], eax
lea ecx, [ebp - 0x10c]
call fcn.10003020
lea ecx, [ebp - 0x58]
call fcn.1000f2e0
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x19
call fcn.1007cbb0
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x1a
call fcn.1007cbb0
mov dword [ebp - 0x120], 0x20e0276
xor esi, esi
mov dword [ebp - 0x11c], 0x13021f29
mov dword [ebp - 0x118], 0x1718291b
mov word [ebp - 0x114], 0x131b
mov byte [ebp - 0x112], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x11f]
call fcn.100159f0
push esi
lea ecx, [ebp - 0x11f]
mov al, byte [eax]
xor al, byte [ebp - 0x120]
mov byte [ebp - 0x7d], al
call fcn.100159f0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1006f9b0
push 0xd
lea ecx, [ebp - 0x11f]
call fcn.100159f0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x11f]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1b
mov ecx, dword [eax]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0xf0], 0x70b0773
xor esi, esi
mov dword [ebp - 0xec], 0x1a01032c
mov word [ebp - 0xe8], 0x1610
mov byte [ebp - 0xe6], 0
nop
push esi
lea ecx, [ebp - 0xef]
call fcn.10002dd0
push esi
lea ecx, [ebp - 0xef]
mov al, byte [eax]
xor al, byte [ebp - 0xf0]
mov byte [ebp - 0x7d], al
call fcn.10002dd0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x1006fa50
push 9
lea ecx, [ebp - 0xef]
call fcn.10002dd0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xef]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1c
mov ecx, dword [eax]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0x20], 0x7975790d
xor esi, esi
mov dword [ebp - 0x1c], 0x6c787c52
mov dword [ebp - 0x18], 0x79647963
mov word [ebp - 0x14], 0x7464
mov byte [ebp - 0x12], 0
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x1f]
call fcn.100159f0
push esi
lea ecx, [ebp - 0x1f]
mov al, byte [eax]
xor al, byte [ebp - 0x20]
mov byte [ebp - 0x7d], al
call fcn.100159f0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1006faf0
push 0xd
lea ecx, [ebp - 0x1f]
call fcn.100159f0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1d
mov ecx, dword [eax]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0xb4], 0x2e342240
xor esi, esi
mov dword [ebp - 0xb0], 0x3235301f
mov dword [ebp - 0xac], 0x33212823
mov word [ebp - 0xa8], 0x25
push esi
lea ecx, [ebp - 0xb3]
call fcn.10002ef0
push esi
lea ecx, [ebp - 0xb3]
mov al, byte [eax]
xor al, byte [ebp - 0xb4]
mov byte [ebp - 0x7d], al
call fcn.10002ef0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x1006fb83
push 0xc
lea ecx, [ebp - 0xb3]
call fcn.10002ef0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xb3]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1e
mov ecx, dword [eax]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x70], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0xe0], 0x140e187a
xor esi, esi
mov dword [ebp - 0xdc], 0x81b1925
mov word [ebp - 0xd8], 0xe
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0xdf]
call fcn.10002d70
push esi
lea ecx, [ebp - 0xdf]
mov al, byte [eax]
xor al, byte [ebp - 0xe0]
mov byte [ebp - 0x7d], al
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x1006fc20
push 8
lea ecx, [ebp - 0xdf]
call fcn.10002d70
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xdf]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1f
mov ecx, dword [eax]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0x90], 0x1c0b1879
xor esi, esi
mov dword [ebp - 0x8c], 0x1a102618
mov word [ebp - 0x88], 0x1716
mov byte [ebp - 0x86], 0
nop
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.10002dd0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x1006fcc0
push 9
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov esi, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x20
mov ecx, dword [esi]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
call fcn.100182e0
test eax, eax
je 0x1006fed5
mov ecx, 0x238
mov dword [ebp - 0x64], eax
call fcn.1001dd80
mov edx, dword [0x100e6d84]
mov ecx, eax
call edx
test eax, eax
je 0x1006fec6
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov ecx, eax
mov edx, dword [edi + 0xac]
call fcn.1001d9a0
mov eax, dword [ebp - 0x64]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006fdcb
push 4
push eax
call esi
test eax, eax
jne 0x1006fdcb
mov ecx, dword [ebp - 0x94]
sub esp, 0x20
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [0x100e6d94]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006fe09
push 4
push eax
call esi
test eax, eax
jne 0x1006fe09
mov eax, dword [ebp - 0x94]
add eax, 0xcc
push 4
push eax
mov dword [ebp - 0x94], eax
call esi
test eax, eax
jne 0x1006fe09
mov eax, dword [ebp - 0x94]
mov dword [eax], 0xb
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006fe32
push 4
push eax
call esi
test eax, eax
jne 0x1006fe32
mov ecx, dword [ebp - 0x94]
push pe_nt_image_headers32
call dword [0x100e6d60]
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0xc8]
push eax
call fcn.1001da80
add esp, 4
movups xmm0, xmmword [eax]
mov eax, dword [ebp - 0x64]
movups xmmword [ebp - 0x30], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006fe73
push 4
push eax
call esi
test eax, eax
jne 0x1006fe73
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
push eax
call dword [0x100e6d90]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006fe9b
push 4
push eax
call esi
test eax, eax
jne 0x1006fe9b
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
push eax
call dword [0x100e6d40]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006fec0
push 4
push eax
call esi
test eax, eax
jne 0x1006fec0
mov ecx, dword [ebp - 0x94]
push eax
call dword [0x100e6d54]
mov esi, dword [ebp - 0xb8]
lea eax, [ebp - 0x7c]
lea ecx, [edi + 0xe0]
push eax
call fcn.1007b1b0
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.10014790
mov ecx, dword [ebp - 0xa4]
add esi, 4
inc ecx
mov dword [ebp - 0xb8], esi
sub dword [ebp - 0xe4], 1
mov dword [ebp - 0xa4], ecx
jne 0x1006f8b0
mov dword [ebp - 0x90], 0x31e0b6c
xor esi, esi
mov dword [ebp - 0x8c], 0xf331c19
mov dword [ebp - 0x88], 0x181e0d
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.1001c630
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.1001c630
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1006ff30
push 0xa
lea ecx, [ebp - 0x8f]
call fcn.1001c630
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x21
lea edx, [ebp - 0x10c]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x100], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
xor eax, eax
mov dword [ebp - 0xe4], 6
mov dword [ebp - 0xa4], eax
add edi, 0x108
nop word [eax + eax]
push eax
mov dword [ebp - 0xa0], 0x4c5f5d3e
xor esi, esi
mov dword [ebp - 0x9c], 0x5a1b614a
mov byte [ebp - 0x98], 0
nop
push esi
lea ecx, [ebp - 0x9f]
call fcn.10002d10
mov cl, byte [ebp - 0xa0]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x9f]
call fcn.10002d10
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1006fff0
push 7
lea ecx, [ebp - 0x9f]
call fcn.10002d10
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10003470
lea eax, [ebp - 0x10c]
push eax
call fcn.1000d650
add esp, 0x24
mov edx, eax
mov dword [ebp - 4], 0x22
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax + 0x100]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x94], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x91e0d6c
xor esi, esi
mov dword [ebp - 0x8c], 0xd0f330d
mov word [ebp - 0x88], 0x181e
mov byte [ebp - 0x86], 0
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x100700b0
push 9
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov ecx, dword [ebp - 0x94]
lea edx, [ebp - 0x10c]
mov dword [ebp - 4], 0x23
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [edi - 4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
call fcn.100182e0
test eax, eax
je 0x100702b4
mov ecx, 0x238
mov dword [edi], eax
call fcn.1001dd80
mov edx, dword [0x100e6d84]
mov ecx, eax
call edx
test eax, eax
je 0x100702b4
mov ecx, dword [edi]
mov dword [ecx], eax
mov ecx, dword [edi]
mov eax, dword [ebp - 0x110]
mov ecx, dword [ecx]
mov edx, dword [eax + 0x100]
call fcn.1001d9a0
mov eax, dword [edi]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x100701c4
push 4
push eax
call esi
test eax, eax
jne 0x100701c4
mov ecx, dword [ebp - 0x94]
sub esp, 0x20
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [0x100e6d94]
mov eax, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070201
push 4
push eax
call esi
test eax, eax
jne 0x10070201
mov eax, dword [ebp - 0x94]
add eax, 0xcc
push 4
push eax
mov dword [ebp - 0x94], eax
call esi
test eax, eax
jne 0x10070201
mov eax, dword [ebp - 0x94]
mov dword [eax], 0xb
mov eax, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070229
push 4
push eax
call esi
test eax, eax
jne 0x10070229
mov ecx, dword [ebp - 0x94]
push pe_nt_image_headers32
call dword [0x100e6d60]
mov ecx, dword [edi - 4]
lea eax, [ebp - 0xc8]
push eax
call fcn.1001da80
add esp, 4
movups xmm0, xmmword [eax]
mov eax, dword [edi]
movups xmmword [ebp - 0x30], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070269
push 4
push eax
call esi
test eax, eax
jne 0x10070269
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
push eax
call dword [0x100e6d90]
mov eax, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070290
push 4
push eax
call esi
test eax, eax
jne 0x10070290
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
push eax
call dword [0x100e6d40]
mov eax, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x100702b4
push 4
push eax
call esi
test eax, eax
jne 0x100702b4
mov ecx, dword [ebp - 0x94]
push eax
call dword [0x100e6d54]
mov eax, dword [ebp - 0xa4]
mov dword [edi + 0x10], 0
inc eax
mov dword [edi + 0xc], 0
mov dword [edi + 8], 0
mov dword [edi + 4], 0
add edi, 0x18
sub dword [ebp - 0xe4], 1
mov dword [ebp - 0xa4], eax
jne 0x1006ffd0
movaps xmm0, xmmword [0x100e8ec0]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov word [ebp - 0xbc], 0x28
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xcb]
call fcn.10002e90
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10002e90
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x10070310
push 0x10
lea ecx, [ebp - 0xcb]
call fcn.10002e90
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov edi, dword [ebp - 0x110]
lea edx, [ebp - 0x10c]
mov dword [ebp - 4], 0x24
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x194], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [str.N_:]
xor esi, esi
movups xmmword [ebp - 0x20], xmm0
push esi
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
push esi
lea ecx, [ebp - 0x1f]
mov al, byte [eax]
xor al, byte [ebp - 0x20]
mov byte [ebp - 0x7d], al
call fcn.10002cb0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x100703a0
push 0xe
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x25
lea edx, [ebp - 0x10c]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x198], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xb4], 0xb110765
xor esi, esi
mov dword [ebp - 0xb0], 0x17153a
mov dword [ebp - 0xac], 0x100a0c13
mov word [ebp - 0xa8], 0x16
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xb3]
call fcn.10002ef0
push esi
lea ecx, [ebp - 0xb3]
mov al, byte [eax]
xor al, byte [ebp - 0xb4]
mov byte [ebp - 0x7d], al
call fcn.10002ef0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x10070440
push 0xc
lea ecx, [ebp - 0xb3]
call fcn.10002ef0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xb3]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x26
lea edx, [ebp - 0x10c]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x19c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xe0], 0x6a666a1e
xor esi, esi
mov dword [ebp - 0xdc], 0x797f6e41
mov word [ebp - 0xd8], 0x7b
nop dword [eax]
push esi
lea ecx, [ebp - 0xdf]
call fcn.10002d70
push esi
lea ecx, [ebp - 0xdf]
mov al, byte [eax]
xor al, byte [ebp - 0xe0]
mov byte [ebp - 0x7d], al
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x100704e0
push 8
lea ecx, [ebp - 0xdf]
call fcn.10002d70
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xdf]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x27
lea edx, [ebp - 0x10c]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x1a0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xf0], 0x5c465032
xor esi, esi
mov dword [ebp - 0xec], 0x4a575c6d
mov word [ebp - 0xe8], 0x46
nop dword [eax]
push esi
lea ecx, [ebp - 0xef]
call fcn.10002d70
mov cl, byte [ebp - 0xf0]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0xef]
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x10070580
push 8
lea ecx, [ebp - 0xef]
call fcn.10002d70
lea ecx, [ebp - 0x12c]
mov byte [eax], 0
lea eax, [ebp - 0xef]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x28
lea edx, [ebp - 0x12c]
mov ecx, dword [edi + 0x14]
call fcn.1001d9e0
lea ecx, [ebp - 0x12c]
mov dword [edi + 0x1a4], eax
call fcn.10003020
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10089100
mov esp, ebp
pop ebp
ret