Function at 0x10026410
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x78
mov eax, dword [0x100b7080]
xor eax, esp
mov dword [esp + 0x74], eax
push esi
push edi
mov edi, ecx
mov dword [esp + 0x30], edi
mov byte [esp + 0x10], 0x18
mov dl, 0x79
xor dl, byte [esp + 0x10]
mov al, 0x4c
xor al, byte [esp + 0x10]
mov dh, 0x6c
mov byte [esp + 0x11], al
mov ah, 0x6a
mov byte [esp + 0x12], dl
xorps xmm0, xmm0
mov dl, byte [esp + 0x10]
mov byte [esp + 0x3d], 0x57
xor ah, dl
mov al, byte [esp + 0x3d]
xor dh, dl
xor al, dl
mov byte [esp + 0x3e], 0x76
mov byte [esp + 0x17], al
mov al, byte [esp + 0x3e]
mov byte [esp + 0x1a], 0
mov ch, 0x7d
mov byte [esp + 0x16], dh
xor al, dl
mov byte [esp + 0x3f], ch
mov cl, 0x7f
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3f]
xor cl, dl
xor ch, dl
mov byte [esp + 0x14], cl
mov byte [esp + 0x15], ch
xor al, dl
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], ah
lea edx, [ecx + 1]
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100264c0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [edi]
mov dword [esp + 0x34], edi
je 0x10026558
test edi, edi
je 0x10026558
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026558
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x38], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026558
cmp esi, dword [edi + 0xc4]
jne 0x10026513
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x1002653f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026525
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002655a
mov edi, dword [esp + 0x34]
cmp esi, dword [edi + 0xc4]
jne 0x10026550
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x38]
jne 0x10026506
xor edi, edi
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x54]
mov dword [esi + 4], edi
cmp ecx, 0xf
jbe 0x10026597
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002658d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100275eb
push ecx
push edx
call fcn.100812a6
add esp, 8
mov dl, 0x37
mov dword [esp + 0x10], 0x45434437
mov dword [esp + 0x14], 0x5a567968
xor ecx, ecx
mov dword [esp + 0x18], 0x52597852
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x100265cb
mov dl, byte [esp + 0x10]
jmp 0x100265b8
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100265f0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x1002668d
test edi, edi
je 0x1002668d
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002668d
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026689
cmp esi, dword [edi + 0xc4]
jne 0x10026644
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10026670
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026656
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100266c0
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026681
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026637
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 8], edi
cmp ecx, 0xf
jbe 0x100266d0
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100266c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100275f0
jmp 0x100266c6
mov esi, dword [esp + 0x30]
jmp 0x1002668f
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100af930]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x100266e3
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026715
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x100267b6
test edi, edi
je 0x100267b6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100267b6
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100267b2
cmp esi, dword [edi + 0xc4]
jne 0x1002676d
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10026799
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1002677f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100267e9
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100267aa
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026760
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0xc], edi
cmp ecx, 0xf
jbe 0x100267f9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100267ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100275f5
jmp 0x100267ef
mov esi, dword [esp + 0x30]
jmp 0x100267b8
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100afc30]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x7d
nop
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x10026810
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026842
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x100268e7
test edi, edi
je 0x100268e7
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100268e7
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100268e3
cmp esi, dword [edi + 0xc4]
jne 0x1002689e
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x100268ca
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100268b0
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002691a
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100268db
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026891
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x10], edi
cmp ecx, 0xf
jbe 0x1002692a
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026920
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100275fa
jmp 0x10026920
mov esi, dword [esp + 0x30]
jmp 0x100268e9
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100af030]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x2e323534
mov byte [esp + 0x24], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x13
jb 0x10026945
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026977
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x10026a26
test edi, edi
je 0x10026a26
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026a26
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026a22
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x100269dd
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10026a09
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100269ef
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026a59
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026a1a
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x100269d0
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x14], edi
cmp ecx, 0xf
jbe 0x10026a69
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026a5f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100275ff
jmp 0x10026a5f
mov esi, dword [esp + 0x30]
jmp 0x10026a28
push ecx
push edx
call fcn.100812a6
add esp, 8
mov al, 0x47
mov byte [esp + 0x10], 0x13
mov byte [esp + 0x3f], al
mov cl, 0x72
xor al, byte [esp + 0x10]
mov ch, 0x76
xor cl, byte [esp + 0x10]
mov dl, 0x61
mov byte [esp + 0x11], al
mov dh, 0x67
mov al, byte [esp + 0x3f]
mov ah, 0x74
mov byte [esp + 0x12], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x10]
xor al, cl
mov byte [esp + 0x3e], 0x64
mov byte [esp + 0x17], al
xor dl, cl
mov al, byte [esp + 0x3e]
xor ch, cl
xor al, cl
mov byte [esp + 0x3d], 0x7c
xor dh, cl
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3d]
xor ah, cl
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x1a], 0
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026b00
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x38], edi
je 0x10026ba6
test edi, edi
je 0x10026ba6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026ba6
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026ba2
nop
cmp esi, dword [edi + 0xc4]
jne 0x10026b5d
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10026b89
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026b6f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026bd9
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026b9a
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026b50
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x18], edi
cmp ecx, 0xf
jbe 0x10026be9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026bdf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027604
jmp 0x10026bdf
mov esi, dword [esp + 0x30]
jmp 0x10026ba8
push ecx
push edx
call fcn.100812a6
add esp, 8
mov dl, 0x20
mov dword [esp + 0x10], 0x52545320
mov dword [esp + 0x14], 0x4d416e7f
xor ecx, ecx
mov dword [esp + 0x18], 0x4f577445
mov byte [esp + 0x1c], 0
nop word [eax + eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10026c23
mov dl, byte [esp + 0x10]
jmp 0x10026c10
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026c47
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x10026cec
test edi, edi
je 0x10026cec
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026cec
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026ce8
cmp esi, dword [edi + 0xc4]
jne 0x10026ca3
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10026ccf
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026cb5
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026d1f
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026ce0
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026c96
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x1c], edi
cmp ecx, 0xf
jbe 0x10026d2f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026d25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027609
jmp 0x10026d25
mov esi, dword [esp + 0x30]
jmp 0x10026cee
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100aecb0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10026d42
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026d74
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x10026e19
test edi, edi
je 0x10026e19
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026e19
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026e15
cmp esi, dword [edi + 0xc4]
jne 0x10026dd0
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10026dfc
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026de2
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026e4c
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026e0d
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026dc3
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x20], edi
cmp ecx, 0xf
jbe 0x10026e5c
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026e52
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002760e
jmp 0x10026e52
mov esi, dword [esp + 0x30]
jmp 0x10026e1b
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100af1b0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x2c
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x10026e71
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026ea3
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x10026f4c
test edi, edi
je 0x10026f4c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10026f4c
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10026f48
cmp esi, dword [edi + 0xc4]
jne 0x10026f03
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10026f2f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10026f15
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10026f7f
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10026f40
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10026ef6
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x24], edi
cmp ecx, 0xf
jbe 0x10026f8f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10026f85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027613
jmp 0x10026f85
mov esi, dword [esp + 0x30]
jmp 0x10026f4e
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100aeff0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x2a363130
mov byte [esp + 0x24], 0
nop word [eax + eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x13
jb 0x10026fb0
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10026fe2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x1002708b
test edi, edi
je 0x1002708b
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002708b
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10027087
cmp esi, dword [edi + 0xc4]
jne 0x10027042
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x1002706e
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10027054
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100270be
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1002707f
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027035
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x28], edi
cmp ecx, 0xf
jbe 0x100270ce
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100270c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027618
jmp 0x100270c4
mov esi, dword [esp + 0x30]
jmp 0x1002708d
push ecx
push edx
call fcn.100812a6
add esp, 8
mov cl, 3
mov byte [esp + 0x10], 0x62
mov byte [esp + 0x3e], cl
mov al, 0x36
xor al, byte [esp + 0x10]
mov ch, 7
xor cl, byte [esp + 0x10]
mov dl, 0x10
mov byte [esp + 0x11], al
mov dh, 0x16
mov byte [esp + 0x12], cl
mov ah, 5
mov cl, byte [esp + 0x10]
xorps xmm0, xmm0
mov byte [esp + 0x3f], 0x31
xor dl, cl
mov al, byte [esp + 0x3f]
xor ch, cl
xor al, cl
mov byte [esp + 0x3d], 0xf
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x3e]
xor ah, cl
xor al, cl
mov byte [esp + 0x15], ch
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3d]
xor al, cl
mov byte [esp + 0x1a], 0
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027160
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x38], edi
je 0x10027208
test edi, edi
je 0x10027208
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027208
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10027204
cmp esi, dword [edi + 0xc4]
jne 0x100271bf
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x100271eb
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100271d1
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002723b
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100271fc
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x100271b2
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x2c], edi
cmp ecx, 0xf
jbe 0x1002724b
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10027241
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002761d
jmp 0x10027241
mov esi, dword [esp + 0x30]
jmp 0x1002720a
push ecx
push edx
call fcn.100812a6
add esp, 8
mov dl, 0x2b
mov dword [esp + 0x10], 0x595f582b
mov dword [esp + 0x14], 0x464a6574
xor ecx, ecx
mov dword [esp + 0x18], 0x464a784e
mov byte [esp + 0x1c], 0
nop dword [eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10027283
mov dl, byte [esp + 0x10]
jmp 0x10027270
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100272a7
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x2c]
mov dword [esp + 0x38], edi
je 0x10027356
test edi, edi
je 0x10027356
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027356
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10027352
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1002730d
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x10027339
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1002731f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10027389
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1002734a
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027300
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x30], edi
cmp ecx, 0xf
jbe 0x10027399
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002738f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027622
jmp 0x1002738f
mov esi, dword [esp + 0x30]
jmp 0x10027358
push ecx
push edx
call fcn.100812a6
add esp, 8
movaps xmm0, xmmword [0x100af830]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x100273b0
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100273e2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002570
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x2c]
mov dword [esp + 0x38], edi
je 0x10027487
test edi, edi
je 0x10027487
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027487
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10027487
cmp esi, dword [edi + 0xc4]
jne 0x10027442
call fcn.1008642f
mov edi, dword [esi + 8]
test edi, edi
je 0x1002746e
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10027454
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10027489
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1002747f
call fcn.1008642f
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10027435
xor edi, edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x34], edi
cmp ecx, 0xf
jbe 0x100274c6
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100274bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027627
push ecx
push edx
call fcn.100812a6
add esp, 8
mov edi, dword [esp + 0x30]
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0xf
mov byte [esp + 0x40], 0
mov esi, dword [edi + 0x18]
test esi, esi
je 0x100274fc
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100274fc
push eax
mov ecx, esi
call dword [0x100ae564]
mov esi, dword [edi + 0x2c]
test esi, esi
je 0x10027519
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027519
push eax
mov ecx, esi
call dword [0x100ae564]
mov esi, dword [edi]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
test esi, esi
je 0x10027574
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10027574
mov eax, dword [esi + 0xdc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0x1c], eax
mov esi, dword [edi + 4]
xor edi, edi
movaps xmm0, xmmword [esp + 0x10]
movaps xmmword [esp + 0x60], xmm0
test esi, esi
je 0x1002759a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002759a
mov edi, dword [esi + 0xe8]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x6c], edi
mov esi, dword [eax]
test esi, esi
je 0x100275c2
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100275c2
lea eax, [esp + 0x60]
mov ecx, esi
push eax
call dword [0x100ae54c]
mov esi, dword [0x100ae61c]
mov ecx, 0xd78d54
call fcn.10018500
mov ecx, dword [eax + 0x350]
call esi
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
xor ecx, esp
call fcn.10081245
mov esp, ebp
pop ebp
ret
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
call fcn.1008643f
int3