Function at 0x1006e8f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d0520
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x100f7040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x110], edi
mov dword [ebp - 0xe0], 0x4a504624
xor esi, esi
mov dword [ebp - 0xdc], 0x4b48477b
mov word [ebp - 0xd8], 0x4157
mov byte [ebp - 0xd6], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0xdf]
call fcn.10002dd0
push esi
lea ecx, [ebp - 0xdf]
mov al, byte [eax]
xor al, byte [ebp - 0xe0]
mov byte [ebp - 0x7d], al
call fcn.10002dd0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x1006e950
push 9
lea ecx, [ebp - 0xdf]
call fcn.10002dd0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0xdf]
push eax
call fcn.10003470
mov dword [ebp - 4], 0
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x445e482a
xor esi, esi
mov dword [ebp - 0x8c], 0x494f5875
mov dword [ebp - 0x88], 0x4d584b42
mov word [ebp - 0x84], 0x4f
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002ef0
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.10002ef0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x1006e9f2
push 0xc
lea ecx, [ebp - 0x8f]
call fcn.10002ef0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 1
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xa0], 0x404c4034
xor esi, esi
mov dword [ebp - 0x9c], 0x4755576b
mov word [ebp - 0x98], 0x5c
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x9f]
call fcn.10002d70
mov cl, byte [ebp - 0xa0]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x9f]
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x1006ea90
push 8
lea ecx, [ebp - 0x9f]
call fcn.10002d70
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10003470
mov dword [ebp - 4], 2
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0xc], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x131f1367
xor esi, esi
mov dword [ebp - 0x8c], 0xb060538
mov dword [ebp - 0x88], 0x2040906
mov byte [ebp - 0x84], 0
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006eb30
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 3
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x10], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100ee380]
xor esi, esi
movups xmmword [ebp - 0x20], xmm0
push esi
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
mov cl, byte [ebp - 0x20]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1006ebb6
push 0xe
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov dword [ebp - 4], 4
lea edx, [ebp - 0xd4]
mov ecx, dword [edi]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x14], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xa0], 0x54724517
xor esi, esi
mov dword [ebp - 0x9c], 0x7065767f
mov word [ebp - 0x98], 0x72
nop
push esi
lea ecx, [ebp - 0x9f]
call fcn.10002d70
push esi
lea ecx, [ebp - 0x9f]
mov al, byte [eax]
xor al, byte [ebp - 0xa0]
mov byte [ebp - 0x7d], al
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x1006ec40
push 8
lea ecx, [ebp - 0x9f]
call fcn.10002d70
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10003470
mov dword [ebp - 4], 5
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x18], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
cmp dword [edi + 0x18], 0
je 0x1006ef37
xor eax, eax
mov dword [ebp - 0xa4], 5
lea ecx, [edi + 0x24]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xb8], ecx
nop
push eax
mov dword [ebp - 0xb4], 0x3b363752
xor esi, esi
mov dword [ebp - 0xb0], 0x3c3b0d26
mov dword [ebp - 0xac], 0xd262722
mov word [ebp - 0xa8], 0x3677
mov byte [ebp - 0xa6], 0
push esi
lea ecx, [ebp - 0xb3]
call fcn.10015b70
push esi
lea ecx, [ebp - 0xb3]
mov al, byte [eax]
xor al, byte [ebp - 0xb4]
mov byte [ebp - 0x7d], al
call fcn.10015b70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1006ed11
push 0xd
lea ecx, [ebp - 0xb3]
call fcn.10015b70
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0xb3]
push eax
call fcn.10003470
lea eax, [ebp - 0x10c]
push eax
call fcn.1000d7c0
add esp, 0x24
mov dword [ebp - 4], 6
mov edx, eax
mov ecx, dword [edi + 0x18]
call fcn.1001dba0
mov esi, dword [ebp - 0xb8]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], 0xffffffff
mov dword [esi], eax
call fcn.10003020
mov esi, dword [esi]
test esi, esi
je 0x1006edb7
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1006edb7
push 4
mov ecx, esi
call dword [0x100ec61c]
mov eax, dword [ebp - 0xe4]
add dword [ebp - 0xb8], 4
inc eax
sub dword [ebp - 0xa4], 1
mov dword [ebp - 0xe4], eax
jne 0x1006ece0
mov dword [ebp - 0x90], 0x48524426
xor esi, esi
mov dword [ebp - 0x8c], 0x48494579
mov dword [ebp - 0x88], 0x4b544f40
mov byte [ebp - 0x84], 0
nop
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006ee00
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 7
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x18]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x38], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x18021476
xor esi, esi
mov dword [ebp - 0x8c], 0x18171529
mov dword [ebp - 0x88], 0x1a1315
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.1001c7b0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1006eea0
push 0xa
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 8
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x18]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x3c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov esi, dword [edi + 0x18]
test esi, esi
je 0x1006ef37
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1006ef37
push eax
mov ecx, esi
call dword [0x100ec604]
movaps xmm0, xmmword [0x100ee750]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov word [ebp - 0xbc], 0
push esi
lea ecx, [ebp - 0xcb]
call fcn.10002e90
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10002e90
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x1006ef50
push 0x10
lea ecx, [ebp - 0xcb]
call fcn.10002e90
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 9
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x1c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
cmp dword [edi + 0x1c], 0
je 0x1006f4e7
mov dword [ebp - 0xb4], 0x797e4516
xor esi, esi
mov dword [ebp - 0xb0], 0x787f6666
mov dword [ebp - 0xac], 0x77584971
mov word [ebp - 0xa8], 0x737b
mov byte [ebp - 0xa6], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0xb3]
call fcn.10015b70
push esi
lea ecx, [ebp - 0xb3]
mov al, byte [eax]
xor al, byte [ebp - 0xb4]
mov byte [ebp - 0x7d], al
call fcn.10015b70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1006f000
push 0xd
lea ecx, [ebp - 0xb3]
call fcn.10015b70
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0xb3]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xa
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x1c]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x40], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100ee330]
xor esi, esi
movups xmmword [ebp - 0x20], xmm0
push esi
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
push esi
lea ecx, [ebp - 0x1f]
mov al, byte [eax]
xor al, byte [ebp - 0x20]
mov byte [ebp - 0x7d], al
call fcn.10002cb0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1006f087
push 0xe
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xb
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x1c]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x44], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100ee6e0]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov word [ebp - 0xbc], 0xb06
mov byte [ebp - 0xba], 0
push esi
lea ecx, [ebp - 0xcb]
call fcn.10003ae0
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10003ae0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x11
jb 0x1006f112
push 0x11
lea ecx, [ebp - 0xcb]
call fcn.10003ae0
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xc
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x1c]
call fcn.1001dba0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x48], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100ee670]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov dword [ebp - 0xbc], 0x373324
nop dword [eax]
push esi
lea ecx, [ebp - 0xcb]
call fcn.10003b40
mov cl, byte [ebp - 0xcc]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0xcb]
call fcn.10003b40
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x12
jb 0x1006f1a0
push 0x12
lea ecx, [ebp - 0xcb]
call fcn.10003b40
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xd
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x1c]
call fcn.1001dba0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x4c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
call fcn.10018460
test eax, eax
je 0x1006f38a
mov ecx, 0x238
mov dword [edi + 0x50], eax
call fcn.1001df40
mov edx, dword [0x100ec634]
mov ecx, eax
call edx
test eax, eax
je 0x1006f38a
mov ecx, dword [edi + 0x50]
mov dword [ecx], eax
mov ecx, dword [edi + 0x50]
mov edx, dword [edi + 0x1c]
mov ecx, dword [ecx]
call fcn.1001db60
mov ecx, dword [edi + 0x50]
sub esp, 0x14
movss xmm3, dword [0x100ee060]
xorps xmm2, xmm2
xorps xmm1, xmm1
mov ecx, dword [ecx]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x3f340000
call fcn.1001e0e0
mov eax, dword [edi + 0x50]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f2d6
push 4
push eax
call esi
test eax, eax
jne 0x1006f2d6
mov eax, dword [ebp - 0xa4]
add eax, 0xcc
push 4
push eax
call esi
test eax, eax
jne 0x1006f2d6
mov eax, dword [ebp - 0xa4]
mov dword [eax + 0xcc], 0xb
mov eax, dword [edi + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f2ff
push 4
push eax
call esi
test eax, eax
jne 0x1006f2ff
mov ecx, dword [ebp - 0xa4]
push 0x110
call dword [0x100ec610]
mov ecx, dword [edi + 0x4c]
lea eax, [ebp - 0x30]
push eax
call fcn.1001dc40
add esp, 4
movups xmm0, xmmword [eax]
mov eax, dword [edi + 0x50]
movups xmmword [ebp - 0x20], xmm0
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f33d
push 4
push eax
call esi
test eax, eax
jne 0x1006f33d
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x20]
push eax
call dword [0x100ec640]
mov eax, dword [edi + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f365
push 4
push eax
call esi
test eax, eax
jne 0x1006f365
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x20]
push eax
call dword [0x100ec5f0]
mov eax, dword [edi + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x1006f38a
push 4
push eax
call esi
test eax, eax
jne 0x1006f38a
mov ecx, dword [ebp - 0xa4]
push eax
call dword [0x100ec604]
mov dword [ebp - 0x90], 0x5e445230
xor esi, esi
mov dword [ebp - 0x8c], 0x5e5f536f
mov dword [ebp - 0x88], 0x5d425956
mov byte [ebp - 0x84], 0
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006f3b1
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xe
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x1c]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x54], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x7a607614
xor esi, esi
mov dword [ebp - 0x8c], 0x7a75774b
mov dword [ebp - 0x88], 0x787177
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1006f450
push 0xa
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x1c]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x58], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov esi, dword [edi + 0x1c]
test esi, esi
je 0x1006f4e7
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1006f4e7
push eax
mov ecx, esi
call dword [0x100ec604]
movaps xmm0, xmmword [0x100eee90]
xor esi, esi
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0x45677b49
mov word [ebp - 0xbc], 0x5056
mov byte [ebp - 0xba], 0
push esi
lea ecx, [ebp - 0xcf]
call fcn.10003ba0
push esi
lea ecx, [ebp - 0xcf]
mov al, byte [eax]
xor al, byte [ebp - 0xd0]
mov byte [ebp - 0x7d], al
call fcn.10003ba0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x15
jb 0x1006f511
push 0x15
lea ecx, [ebp - 0xcf]
call fcn.10003ba0
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcf]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x10
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x20], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
cmp dword [edi + 0x20], 0
je 0x1006f751
movaps xmm0, xmmword [0x100ee190]
xor esi, esi
movups xmmword [ebp - 0x20], xmm0
nop dword [eax]
push esi
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
push esi
lea ecx, [ebp - 0x1f]
mov al, byte [eax]
xor al, byte [ebp - 0x20]
mov byte [ebp - 0x7d], al
call fcn.10002cb0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x1006f5a0
push 0xe
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x11
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x20]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x80], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100eeb30]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov word [ebp - 0xbc], 0x45
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xcb]
call fcn.10002e90
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10002e90
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x1006f630
push 0x10
lea ecx, [ebp - 0xcb]
call fcn.10002e90
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x20]
call fcn.1001dba0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x84], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100ef3d0]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov byte [ebp - 0xbc], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0xcb]
call fcn.10003a80
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10003a80
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x1006f6c0
push 0xf
lea ecx, [ebp - 0xcb]
call fcn.10003a80
lea ecx, [ebp - 0x3c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x13
lea edx, [ebp - 0x3c]
mov ecx, dword [edi + 0x20]
call fcn.1001dba0
lea ecx, [ebp - 0x3c]
mov dword [edi + 0x88], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov esi, dword [edi + 0x20]
test esi, esi
je 0x1006f751
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1006f751
push eax
mov ecx, esi
call dword [0x100ec604]
mov dword [ebp - 0x90], 0x2e232247
xor esi, esi
mov dword [ebp - 0x8c], 0x22341833
mov dword [ebp - 0x88], 0x2f243526
mov byte [ebp - 0x84], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006f780
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x14
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x8c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x3e243250
xor esi, esi
mov dword [ebp - 0x8c], 0x3135230f
mov dword [ebp - 0x88], 0x383322
nop dword [eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.1001c7b0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x1006f820
push 0xa
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x15
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0x90], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [0x100eee30]
lea ecx, [edi + 0x94]
xor eax, eax
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xb8], 6
nop dword [eax]
nop word [eax + eax]
push eax
movups xmmword [ebp - 0xcc], xmm0
mov byte [ebp - 0xbc], 0
xor esi, esi
push esi
lea ecx, [ebp - 0xcb]
call fcn.10003a80
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10003a80
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xf
jb 0x1006f8e1
push 0xf
lea ecx, [ebp - 0xcb]
call fcn.10003a80
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
lea eax, [ebp - 0x10c]
push eax
call fcn.1000d7c0
add esp, 0x24
mov dword [ebp - 4], 0x16
mov edx, eax
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
mov esi, dword [ebp - 0xe4]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], 0xffffffff
mov dword [esi], eax
call fcn.10003020
mov eax, dword [ebp - 0xa4]
add esi, 4
movaps xmm0, xmmword [0x100eee30]
inc eax
sub dword [ebp - 0xb8], 1
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xe4], esi
jne 0x1006f8d0
mov dword [ebp - 0x90], 0x776a7f18
xor esi, esi
mov dword [ebp - 0x8c], 0x7147686d
mov dword [ebp - 0x88], 0x6b757d6c
mov byte [ebp - 0x84], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002e30
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.10002e30
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x1006f9c0
push 0xb
lea ecx, [ebp - 0x8f]
call fcn.10002e30
lea ecx, [ebp - 0xd4]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x17
lea edx, [ebp - 0xd4]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0xd4]
mov dword [edi + 0xac], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
xor ecx, ecx
mov dword [ebp - 0xe4], 0xc
lea eax, [edi + 0xb0]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xb8], eax
nop dword [eax + eax]
push ecx
mov dword [ebp - 0xa0], 0x5c4d7039
xor esi, esi
mov dword [ebp - 0x9c], 0x5d1c6654
mov byte [ebp - 0x98], 0
nop
push esi
lea ecx, [ebp - 0x9f]
call fcn.10002d10
push esi
lea ecx, [ebp - 0x9f]
mov al, byte [eax]
xor al, byte [ebp - 0xa0]
mov byte [ebp - 0x7d], al
call fcn.10002d10
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x1006fa80
push 7
lea ecx, [ebp - 0x9f]
call fcn.10002d10
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10003470
lea eax, [ebp - 0x10c]
push eax
call fcn.1000d7c0
add esp, 0x24
mov dword [ebp - 4], 0x18
mov edx, eax
mov ecx, dword [edi + 0xac]
call fcn.1001dba0
mov ecx, dword [ebp - 0xb8]
mov dword [ecx], eax
lea ecx, [ebp - 0x10c]
call fcn.10003020
lea ecx, [ebp - 0x58]
call fcn.1000f460
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x19
call fcn.1007cd70
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x1a
call fcn.1007cd70
mov dword [ebp - 0x120], 0x30f0377
xor esi, esi
mov dword [ebp - 0x11c], 0x12031e28
mov dword [ebp - 0x118], 0x1619281a
mov word [ebp - 0x114], 0x121a
mov byte [ebp - 0x112], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x11f]
call fcn.10015b70
push esi
lea ecx, [ebp - 0x11f]
mov al, byte [eax]
xor al, byte [ebp - 0x120]
mov byte [ebp - 0x7d], al
call fcn.10015b70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1006fb60
push 0xd
lea ecx, [ebp - 0x11f]
call fcn.10015b70
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x11f]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1b
mov ecx, dword [eax]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0xf0], 0x333f3347
xor esi, esi
mov dword [ebp - 0xec], 0x2e353718
mov word [ebp - 0xe8], 0x2224
mov byte [ebp - 0xe6], 0
nop
push esi
lea ecx, [ebp - 0xef]
call fcn.10002dd0
push esi
lea ecx, [ebp - 0xef]
mov al, byte [eax]
xor al, byte [ebp - 0xf0]
mov byte [ebp - 0x7d], al
call fcn.10002dd0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x1006fc00
push 9
lea ecx, [ebp - 0xef]
call fcn.10002dd0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xef]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1c
mov ecx, dword [eax]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0x20], 0x232f2357
xor esi, esi
mov dword [ebp - 0x1c], 0x36222608
mov dword [ebp - 0x18], 0x233e2339
mov word [ebp - 0x14], 0x2e3e
mov byte [ebp - 0x12], 0
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x1f]
call fcn.10015b70
push esi
lea ecx, [ebp - 0x1f]
mov al, byte [eax]
xor al, byte [ebp - 0x20]
mov byte [ebp - 0x7d], al
call fcn.10015b70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x1006fca0
push 0xd
lea ecx, [ebp - 0x1f]
call fcn.10015b70
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1d
mov ecx, dword [eax]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0xb4], 0x405a4c2e
xor esi, esi
mov dword [ebp - 0xb0], 0x5c5b5e71
mov dword [ebp - 0xac], 0x5d4f464d
mov word [ebp - 0xa8], 0x4b
push esi
lea ecx, [ebp - 0xb3]
call fcn.10002ef0
push esi
lea ecx, [ebp - 0xb3]
mov al, byte [eax]
xor al, byte [ebp - 0xb4]
mov byte [ebp - 0x7d], al
call fcn.10002ef0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x1006fd33
push 0xc
lea ecx, [ebp - 0xb3]
call fcn.10002ef0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xb3]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1e
mov ecx, dword [eax]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x70], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0xe0], 0x48524426
xor esi, esi
mov dword [ebp - 0xdc], 0x54474579
mov word [ebp - 0xd8], 0x52
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0xdf]
call fcn.10002d70
push esi
lea ecx, [ebp - 0xdf]
mov al, byte [eax]
xor al, byte [ebp - 0xe0]
mov byte [ebp - 0x7d], al
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x1006fdd0
push 8
lea ecx, [ebp - 0xdf]
call fcn.10002d70
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xdf]
push eax
call fcn.10003470
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x1f
mov ecx, dword [eax]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
mov dword [ebp - 0x90], 0x35223150
xor esi, esi
mov dword [ebp - 0x8c], 0x33390f31
mov word [ebp - 0x88], 0x3e3f
mov byte [ebp - 0x86], 0
nop
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.10002dd0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x1006fe70
push 9
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov esi, dword [ebp - 0xb8]
lea edx, [ebp - 0x10c]
mov byte [ebp - 4], 0x20
mov ecx, dword [esi]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x1a
call fcn.10003020
call fcn.10018460
test eax, eax
je 0x10070085
mov ecx, 0x238
mov dword [ebp - 0x64], eax
call fcn.1001df40
mov edx, dword [0x100ec634]
mov ecx, eax
call edx
test eax, eax
je 0x10070076
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov ecx, eax
mov edx, dword [edi + 0xac]
call fcn.1001db60
mov eax, dword [ebp - 0x64]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006ff7b
push 4
push eax
call esi
test eax, eax
jne 0x1006ff7b
mov ecx, dword [ebp - 0x94]
sub esp, 0x20
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [0x100ec644]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006ffb9
push 4
push eax
call esi
test eax, eax
jne 0x1006ffb9
mov eax, dword [ebp - 0x94]
add eax, 0xcc
push 4
push eax
mov dword [ebp - 0x94], eax
call esi
test eax, eax
jne 0x1006ffb9
mov eax, dword [ebp - 0x94]
mov dword [eax], 0xb
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1006ffe2
push 4
push eax
call esi
test eax, eax
jne 0x1006ffe2
mov ecx, dword [ebp - 0x94]
push 0x110
call dword [0x100ec610]
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0xc8]
push eax
call fcn.1001dc40
add esp, 4
movups xmm0, xmmword [eax]
mov eax, dword [ebp - 0x64]
movups xmmword [ebp - 0x30], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070023
push 4
push eax
call esi
test eax, eax
jne 0x10070023
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
push eax
call dword [0x100ec640]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x1007004b
push 4
push eax
call esi
test eax, eax
jne 0x1007004b
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
push eax
call dword [0x100ec5f0]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070070
push 4
push eax
call esi
test eax, eax
jne 0x10070070
mov ecx, dword [ebp - 0x94]
push eax
call dword [0x100ec604]
mov esi, dword [ebp - 0xb8]
lea eax, [ebp - 0x7c]
lea ecx, [edi + 0xe0]
push eax
call fcn.1007b370
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.10014910
mov ecx, dword [ebp - 0xa4]
add esi, 4
inc ecx
mov dword [ebp - 0xb8], esi
sub dword [ebp - 0xe4], 1
mov dword [ebp - 0xa4], ecx
jne 0x1006fa60
mov dword [ebp - 0x90], 0x28352047
xor esi, esi
mov dword [ebp - 0x8c], 0x24183732
mov dword [ebp - 0x88], 0x333526
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
push esi
lea ecx, [ebp - 0x8f]
mov al, byte [eax]
xor al, byte [ebp - 0x90]
mov byte [ebp - 0x7d], al
call fcn.1001c7b0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x100700e0
push 0xa
lea ecx, [ebp - 0x8f]
call fcn.1001c7b0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x21
lea edx, [ebp - 0x10c]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x100], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
xor eax, eax
mov dword [ebp - 0xe4], 6
mov dword [ebp - 0xa4], eax
add edi, 0x108
nop word [eax + eax]
push eax
mov dword [ebp - 0xa0], 0xc1f1d7e
xor esi, esi
mov dword [ebp - 0x9c], 0x1a5b210a
mov byte [ebp - 0x98], 0
nop
push esi
lea ecx, [ebp - 0x9f]
call fcn.10002d10
mov cl, byte [ebp - 0xa0]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x9f]
call fcn.10002d10
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 7
jb 0x100701a0
push 7
lea ecx, [ebp - 0x9f]
call fcn.10002d10
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10003470
lea eax, [ebp - 0x10c]
push eax
call fcn.1000d7c0
add esp, 0x24
mov edx, eax
mov dword [ebp - 4], 0x22
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax + 0x100]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x94], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0x90], 0x74637011
xor esi, esi
mov dword [ebp - 0x8c], 0x70724e70
mov word [ebp - 0x88], 0x6563
mov byte [ebp - 0x86], 0
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
mov cl, byte [ebp - 0x90]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 9
jb 0x10070260
push 9
lea ecx, [ebp - 0x8f]
call fcn.10002dd0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x8f]
push eax
call fcn.10003470
mov ecx, dword [ebp - 0x94]
lea edx, [ebp - 0x10c]
mov dword [ebp - 4], 0x23
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [edi - 4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
call fcn.10018460
test eax, eax
je 0x10070464
mov ecx, 0x238
mov dword [edi], eax
call fcn.1001df40
mov edx, dword [0x100ec634]
mov ecx, eax
call edx
test eax, eax
je 0x10070464
mov ecx, dword [edi]
mov dword [ecx], eax
mov ecx, dword [edi]
mov eax, dword [ebp - 0x110]
mov ecx, dword [ecx]
mov edx, dword [eax + 0x100]
call fcn.1001db60
mov eax, dword [edi]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070374
push 4
push eax
call esi
test eax, eax
jne 0x10070374
mov ecx, dword [ebp - 0x94]
sub esp, 0x20
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [0x100ec644]
mov eax, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x100703b1
push 4
push eax
call esi
test eax, eax
jne 0x100703b1
mov eax, dword [ebp - 0x94]
add eax, 0xcc
push 4
push eax
mov dword [ebp - 0x94], eax
call esi
test eax, eax
jne 0x100703b1
mov eax, dword [ebp - 0x94]
mov dword [eax], 0xb
mov eax, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x100703d9
push 4
push eax
call esi
test eax, eax
jne 0x100703d9
mov ecx, dword [ebp - 0x94]
push 0x110
call dword [0x100ec610]
mov ecx, dword [edi - 4]
lea eax, [ebp - 0xc8]
push eax
call fcn.1001dc40
add esp, 4
movups xmm0, xmmword [eax]
mov eax, dword [edi]
movups xmmword [ebp - 0x30], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070419
push 4
push eax
call esi
test eax, eax
jne 0x10070419
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
push eax
call dword [0x100ec640]
mov eax, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070440
push 4
push eax
call esi
test eax, eax
jne 0x10070440
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x30]
push eax
call dword [0x100ec5f0]
mov eax, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
test eax, eax
je 0x10070464
push 4
push eax
call esi
test eax, eax
jne 0x10070464
mov ecx, dword [ebp - 0x94]
push eax
call dword [0x100ec604]
mov eax, dword [ebp - 0xa4]
mov dword [edi + 0x10], 0
inc eax
mov dword [edi + 0xc], 0
mov dword [edi + 8], 0
mov dword [edi + 4], 0
add edi, 0x18
sub dword [ebp - 0xe4], 1
mov dword [ebp - 0xa4], eax
jne 0x10070180
movaps xmm0, xmmword [0x100eea30]
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
mov word [ebp - 0xbc], 0x3f
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xcb]
call fcn.10002e90
push esi
lea ecx, [ebp - 0xcb]
mov al, byte [eax]
xor al, byte [ebp - 0xcc]
mov byte [ebp - 0x7d], al
call fcn.10002e90
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x100704c0
push 0x10
lea ecx, [ebp - 0xcb]
call fcn.10002e90
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xcb]
push eax
call fcn.10003470
mov edi, dword [ebp - 0x110]
lea edx, [ebp - 0x10c]
mov dword [ebp - 4], 0x24
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x194], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
movaps xmm0, xmmword [str.9_MWfKJMfZXKM]
xor esi, esi
movups xmmword [ebp - 0x20], xmm0
push esi
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
push esi
lea ecx, [ebp - 0x1f]
mov al, byte [eax]
xor al, byte [ebp - 0x20]
mov byte [ebp - 0x7d], al
call fcn.10002cb0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x10070550
push 0xe
lea ecx, [ebp - 0x1f]
call fcn.10002cb0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0x1f]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x25
lea edx, [ebp - 0x10c]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x198], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xb4], 0x48524426
xor esi, esi
mov dword [ebp - 0xb0], 0x43545679
mov dword [ebp - 0xac], 0x53494f50
mov word [ebp - 0xa8], 0x55
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xb3]
call fcn.10002ef0
push esi
lea ecx, [ebp - 0xb3]
mov al, byte [eax]
xor al, byte [ebp - 0xb4]
mov byte [ebp - 0x7d], al
call fcn.10002ef0
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 0xc
jb 0x100705f0
push 0xc
lea ecx, [ebp - 0xb3]
call fcn.10002ef0
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xb3]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x26
lea edx, [ebp - 0x10c]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x19c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xe0], 0x1915196d
xor esi, esi
mov dword [ebp - 0xdc], 0xa0c1d32
mov word [ebp - 0xd8], 8
nop dword [eax]
push esi
lea ecx, [ebp - 0xdf]
call fcn.10002d70
push esi
lea ecx, [ebp - 0xdf]
mov al, byte [eax]
xor al, byte [ebp - 0xe0]
mov byte [ebp - 0x7d], al
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x10070690
push 8
lea ecx, [ebp - 0xdf]
call fcn.10002d70
lea ecx, [ebp - 0x10c]
mov byte [eax], 0
lea eax, [ebp - 0xdf]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x27
lea edx, [ebp - 0x10c]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0x10c]
mov dword [edi + 0x1a0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10003020
mov dword [ebp - 0xf0], 0x405a4c2e
xor esi, esi
mov dword [ebp - 0xec], 0x564b4071
mov word [ebp - 0xe8], 0x5a
nop dword [eax]
push esi
lea ecx, [ebp - 0xef]
call fcn.10002d70
mov cl, byte [ebp - 0xf0]
push esi
xor cl, byte [eax]
mov byte [ebp - 0x7d], cl
lea ecx, [ebp - 0xef]
call fcn.10002d70
mov cl, byte [ebp - 0x7d]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x10070730
push 8
lea ecx, [ebp - 0xef]
call fcn.10002d70
lea ecx, [ebp - 0x12c]
mov byte [eax], 0
lea eax, [ebp - 0xef]
push eax
call fcn.10003470
mov dword [ebp - 4], 0x28
lea edx, [ebp - 0x12c]
mov ecx, dword [edi + 0x14]
call fcn.1001dba0
lea ecx, [ebp - 0x12c]
mov dword [edi + 0x1a4], eax
call fcn.10003020
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100892c0
mov esp, ebp
pop ebp
ret