Function at 0x10026870
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x78
mov eax, dword [0x100b7040]
xor eax, esp
mov dword [esp + 0x74], eax
push esi
push edi
mov edi, ecx
mov dword [esp + 0x30], edi
mov byte [esp + 0x10], 0x6b
mov dl, 0xa
xor dl, byte [esp + 0x10]
mov al, 0x3f
xor al, byte [esp + 0x10]
mov dh, 0x1f
mov byte [esp + 0x11], al
mov ah, 0x19
mov byte [esp + 0x12], dl
xorps xmm0, xmm0
mov dl, byte [esp + 0x10]
mov byte [esp + 0x3d], 0x24
xor ah, dl
mov al, byte [esp + 0x3d]
xor dh, dl
xor al, dl
mov byte [esp + 0x3e], 5
mov byte [esp + 0x17], al
mov al, byte [esp + 0x3e]
mov byte [esp + 0x1a], 0
mov ch, 0xe
mov byte [esp + 0x16], dh
xor al, dl
mov byte [esp + 0x3f], ch
mov cl, 0xc
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3f]
xor cl, dl
xor ch, dl
mov byte [esp + 0x14], cl
mov byte [esp + 0x15], ch
xor al, dl
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], ah
lea edx, [ecx + 1]
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026920
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [edi]
mov dword [esp + 0x34], edi
je 0x100269b8
test edi, edi
je 0x100269b8
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100269b8
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x38], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100269b8
cmp esi, dword [edi + 0xc4]
jne 0x10026973
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1002699f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026985
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100269ba
mov edi, dword [esp + 0x34]
cmp esi, dword [edi + 0xc4]
jne 0x100269b0
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x38]
jne 0x10026966
xor edi, edi
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x54]
mov dword [esi + 4], edi
cmp ecx, 0xf
jbe 0x100269f7
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100269ed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a4b
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov dl, 0x6c
mov dword [esp + 0x10], 0x1e181f6c
mov dword [esp + 0x14], 0x10d2233
xor ecx, ecx
mov dword [esp + 0x18], 0x9022309
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10026a2b
mov dl, byte [esp + 0x10]
jmp 0x10026a18
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026a50
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x10026aed
test edi, edi
je 0x10026aed
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026aed
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026ae9
cmp esi, dword [edi + 0xc4]
jne 0x10026aa4
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10026ad0
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026ab6
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026b20
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026ae1
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026a97
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 8], edi
cmp ecx, 0xf
jbe 0x10026b30
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026b26
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a50
jmp 0x10026b26
mov esi, dword [esp + 0x30]
jmp 0x10026aef
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100af8c0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10026b43
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026b75
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x10026c16
test edi, edi
je 0x10026c16
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026c16
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026c12
cmp esi, dword [edi + 0xc4]
jne 0x10026bcd
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10026bf9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026bdf
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026c49
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026c0a
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026bc0
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0xc], edi
cmp ecx, 0xf
jbe 0x10026c59
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026c4f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a55
jmp 0x10026c4f
mov esi, dword [esp + 0x30]
jmp 0x10026c18
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100afbe0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x6b
nop
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x10026c70
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026ca2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x10026d47
test edi, edi
je 0x10026d47
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026d47
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026d43
cmp esi, dword [edi + 0xc4]
jne 0x10026cfe
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10026d2a
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026d10
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026d7a
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026d3b
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026cf1
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x10], edi
cmp ecx, 0xf
jbe 0x10026d8a
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026d80
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a5a
jmp 0x10026d80
mov esi, dword [esp + 0x30]
jmp 0x10026d49
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100af860]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x5d414647
mov byte [esp + 0x24], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x13
jb 0x10026da5
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026dd7
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x10026e86
test edi, edi
je 0x10026e86
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026e86
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026e82
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x10026e3d
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10026e69
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026e4f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026eb9
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026e7a
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026e30
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x14], edi
cmp ecx, 0xf
jbe 0x10026ec9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026ebf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a5f
jmp 0x10026ebf
mov esi, dword [esp + 0x30]
jmp 0x10026e88
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x41
mov byte [esp + 0x10], 0x15
mov byte [esp + 0x3f], al
mov cl, 0x74
xor al, byte [esp + 0x10]
mov ch, 0x70
xor cl, byte [esp + 0x10]
mov dl, 0x67
mov byte [esp + 0x11], al
mov dh, 0x61
mov al, byte [esp + 0x3f]
mov ah, 0x72
mov byte [esp + 0x12], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x10]
xor al, cl
mov byte [esp + 0x3e], 0x62
mov byte [esp + 0x17], al
xor dl, cl
mov al, byte [esp + 0x3e]
xor ch, cl
xor al, cl
mov byte [esp + 0x3d], 0x7a
xor dh, cl
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3d]
xor ah, cl
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x1a], 0
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026f60
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x38], edi
je 0x10027006
test edi, edi
je 0x10027006
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027006
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10027002
nop
cmp esi, dword [edi + 0xc4]
jne 0x10026fbd
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10026fe9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026fcf
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10027039
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026ffa
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026fb0
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x18], edi
cmp ecx, 0xf
jbe 0x10027049
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002703f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a64
jmp 0x1002703f
mov esi, dword [esp + 0x30]
jmp 0x10027008
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov dl, 0x2a
mov dword [esp + 0x10], 0x585e592a
mov dword [esp + 0x14], 0x474b6475
xor ecx, ecx
mov dword [esp + 0x18], 0x455d7e4f
mov byte [esp + 0x1c], 0
nop word [eax + eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10027083
mov dl, byte [esp + 0x10]
jmp 0x10027070
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100270a7
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x1002714c
test edi, edi
je 0x1002714c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002714c
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10027148
cmp esi, dword [edi + 0xc4]
jne 0x10027103
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1002712f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10027115
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002717f
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10027140
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x100270f6
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x1c], edi
cmp ecx, 0xf
jbe 0x1002718f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10027185
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a69
jmp 0x10027185
mov esi, dword [esp + 0x30]
jmp 0x1002714e
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100af1d0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x100271a2
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100271d4
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x10027279
test edi, edi
je 0x10027279
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027279
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10027275
cmp esi, dword [edi + 0xc4]
jne 0x10027230
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1002725c
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10027242
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100272ac
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1002726d
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027223
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x20], edi
cmp ecx, 0xf
jbe 0x100272bc
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100272b2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a6e
jmp 0x100272b2
mov esi, dword [esp + 0x30]
jmp 0x1002727b
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100afc60]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x70
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x100272d1
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027303
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x100273ac
test edi, edi
je 0x100273ac
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100273ac
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100273a8
cmp esi, dword [edi + 0xc4]
jne 0x10027363
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1002738f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10027375
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100273df
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100273a0
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027356
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x24], edi
cmp ecx, 0xf
jbe 0x100273ef
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100273e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a73
jmp 0x100273e5
mov esi, dword [esp + 0x30]
jmp 0x100273ae
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [str.E1]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x2b373031
mov byte [esp + 0x24], 0
nop word [eax + eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x13
jb 0x10027410
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027442
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x100274eb
test edi, edi
je 0x100274eb
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100274eb
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100274e7
cmp esi, dword [edi + 0xc4]
jne 0x100274a2
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x100274ce
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100274b4
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002751e
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100274df
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027495
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x28], edi
cmp ecx, 0xf
jbe 0x1002752e
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10027524
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a78
jmp 0x10027524
mov esi, dword [esp + 0x30]
jmp 0x100274ed
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov cl, 0x42
mov byte [esp + 0x10], 0x23
mov byte [esp + 0x3e], cl
mov al, 0x77
xor al, byte [esp + 0x10]
mov ch, 0x46
xor cl, byte [esp + 0x10]
mov dl, 0x51
mov byte [esp + 0x11], al
mov dh, 0x57
mov byte [esp + 0x12], cl
mov ah, 0x44
mov cl, byte [esp + 0x10]
xorps xmm0, xmm0
mov byte [esp + 0x3f], 0x70
xor dl, cl
mov al, byte [esp + 0x3f]
xor ch, cl
xor al, cl
mov byte [esp + 0x3d], 0x4e
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x3e]
xor ah, cl
xor al, cl
mov byte [esp + 0x15], ch
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3d]
xor al, cl
mov byte [esp + 0x1a], 0
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100275c0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x38], edi
je 0x10027668
test edi, edi
je 0x10027668
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027668
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10027664
cmp esi, dword [edi + 0xc4]
jne 0x1002761f
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1002764b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10027631
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002769b
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1002765c
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027612
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x2c], edi
cmp ecx, 0xf
jbe 0x100276ab
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100276a1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a7d
jmp 0x100276a1
mov esi, dword [esp + 0x30]
jmp 0x1002766a
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov dl, 7
mov dword [esp + 0x10], 0x75737407
mov dword [esp + 0x14], 0x6a664958
xor ecx, ecx
mov dword [esp + 0x18], 0x6a665462
mov byte [esp + 0x1c], 0
nop dword [eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x100276e3
mov dl, byte [esp + 0x10]
jmp 0x100276d0
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027707
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x2c]
mov dword [esp + 0x38], edi
je 0x100277b6
test edi, edi
je 0x100277b6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100277b6
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100277b2
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1002776d
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10027799
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1002777f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100277e9
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100277aa
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027760
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x30], edi
cmp ecx, 0xf
jbe 0x100277f9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100277ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a82
jmp 0x100277ef
mov esi, dword [esp + 0x30]
jmp 0x100277b8
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100aefd0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10027810
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027842
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002540
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x2c]
mov dword [esp + 0x38], edi
je 0x100278e7
test edi, edi
je 0x100278e7
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100278e7
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100278e7
cmp esi, dword [edi + 0xc4]
jne 0x100278a2
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x100278ce
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100278b4
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100278e9
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100278df
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027895
xor edi, edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x34], edi
cmp ecx, 0xf
jbe 0x10027926
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002791c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027a87
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov edi, dword [esp + 0x30]
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0xf
mov byte [esp + 0x40], 0
mov esi, dword [edi + 0x18]
test esi, esi
je 0x1002795c
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002795c
push eax
mov ecx, esi
call dword [0x100ae54c]
mov esi, dword [edi + 0x2c]
test esi, esi
je 0x10027979
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027979
push eax
mov ecx, esi
call dword [0x100ae54c]
mov esi, dword [edi]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
test esi, esi
je 0x100279d4
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100279d4
mov eax, dword [esi + 0xdc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0x1c], eax
mov esi, dword [edi + 4]
xor edi, edi
movaps xmm0, xmmword [esp + 0x10]
movaps xmmword [esp + 0x60], xmm0
test esi, esi
je 0x100279fa
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100279fa
mov edi, dword [esi + 0xe8]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x6c], edi
mov esi, dword [eax]
test esi, esi
je 0x10027a22
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027a22
lea eax, [esp + 0x60]
mov ecx, esi
push eax
call dword [0x100ae534]
mov esi, dword [0x100ae604]
mov ecx, 0xd78d54
call fcn.100184a0
mov ecx, dword [eax + 0x350]
call esi
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
xor ecx, esp
call fcn.1007f9e5
mov esp, ebp
pop ebp
ret
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
int3