Function at 0x1003e260
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xc8
mov eax, dword [0x10091040]
xor eax, esp
mov dword [esp + 0xc4], eax
push esi
push edi
mov esi, ecx
mov dword [esp + 0x14], esi
mov byte [esp + 0x44], 0x18
mov dl, 0x6a
xor dl, byte [esp + 0x44]
mov al, 0x7f
xor al, byte [esp + 0x44]
mov ah, 0x77
mov byte [esp + 0x45], al
mov dh, 0x47
mov byte [esp + 0x46], dl
xorps xmm0, xmm0
mov dl, byte [esp + 0x44]
mov byte [esp + 9], 0x6c
xor dh, dl
mov al, byte [esp + 9]
xor al, dl
mov byte [esp + 0x13], ah
mov byte [esp + 0x4b], al
xor ah, dl
mov al, byte [esp + 0x13]
mov byte [esp + 0x4e], 0
mov ch, 0x68
mov byte [esp + 0x4a], dh
xor al, dl
mov byte [esp + 0xa], ch
mov cl, 0x6d
mov byte [esp + 0x4c], al
mov al, byte [esp + 0xa]
xor cl, dl
xor ch, dl
mov byte [esp + 0x48], cl
mov byte [esp + 0x49], ch
xor al, dl
lea ecx, [esp + 0x45]
mov byte [esp + 0x47], ah
lea edx, [ecx + 1]
mov byte [esp + 0x4d], al
mov byte [esp + 0x4e], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e313
sub ecx, edx
lea eax, [esp + 0x45]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [esi]
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
mov dword [esp + 0xc], eax
je 0x1003e3b7
test eax, eax
je 0x1003e3b7
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003e3b7
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x1c], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003e3b7
cmp edi, dword [eax + 0xc4]
jne 0x1003e36d
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x18], eax
test eax, eax
je 0x1003e39d
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003e383
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003e3ee
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003e3af
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x1c]
jne 0x1003e363
xor eax, eax
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
mov dword [edi + 4], eax
cmp ecx, 0xf
jbe 0x1003e3fe
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003e3f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003e3f4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x18]
jmp 0x1003e3b9
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 0x10
mov byte [esp + 0x64], 0x75
mov al, 1
mov byte [esp + 0xb], cl
xor cl, byte [esp + 0x64]
mov ah, al
xor al, byte [esp + 0x64]
mov ch, 0x2a
mov byte [esp + 0x65], al
mov dh, ah
mov byte [esp + 0x66], cl
mov dl, 0xd
mov cl, byte [esp + 0x64]
xorps xmm0, xmm0
mov byte [esp + 0xa], 0x1c
xor dl, cl
mov al, byte [esp + 0xa]
xor ch, cl
xor al, cl
mov byte [esp + 0x13], ah
mov byte [esp + 0x6b], al
xor dh, cl
mov al, byte [esp + 0x13]
xor ah, cl
xor al, cl
mov byte [esp + 9], 0x19
mov byte [esp + 0x6c], al
mov al, byte [esp + 9]
xor al, cl
mov byte [esp + 0x69], ch
mov byte [esp + 0x6d], al
mov al, byte [esp + 0xb]
xor al, cl
mov byte [esp + 0x6f], 0
lea ecx, [esp + 0x65]
mov byte [esp + 0x67], dl
mov byte [esp + 0x6a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x68], ah
mov byte [esp + 0x6e], al
mov byte [esp + 0x6f], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e4a0
sub ecx, edx
lea eax, [esp + 0x65]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x1003e548
test eax, eax
je 0x1003e548
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003e548
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003e544
nop
cmp edi, dword [eax + 0xc4]
jne 0x1003e4fa
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003e52a
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003e510
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003e57b
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003e53c
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003e4f0
mov edi, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x34]
mov dword [edi + 8], eax
cmp ecx, 0xf
jbe 0x1003e58f
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003e585
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003e585
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003e54a
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 0x2d
mov dword [esp + 0x54], 0x5548592d
mov dword [esp + 0x58], 0x445a7259
xor eax, eax
mov dword [esp + 0x5c], 0x5f484343
mov word [esp + 0x60], 0x5e
xor byte [esp + eax + 0x55], cl
inc eax
cmp eax, 0xc
jae 0x1003e5c2
mov cl, byte [esp + 0x54]
jmp 0x1003e5b2
xorps xmm0, xmm0
mov byte [esp + 0x61], 0
lea ecx, [esp + 0x55]
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
lea edx, [ecx + 1]
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e5e6
sub ecx, edx
lea eax, [esp + 0x55]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x1003e68d
test eax, eax
je 0x1003e68d
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003e68d
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003e689
cmp edi, dword [eax + 0xc4]
jne 0x1003e63f
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003e66f
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003e655
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003e6c0
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003e681
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003e635
mov edi, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x34]
mov dword [edi + 0xc], eax
cmp ecx, 0xf
jbe 0x1003e6d4
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003e6ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003e6ca
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003e68f
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 0x69
mov byte [esp + 0x44], 0xc
mov al, 0x78
mov byte [esp + 0x13], cl
xor cl, byte [esp + 0x44]
mov ah, al
xor al, byte [esp + 0x44]
mov ch, 0x53
mov byte [esp + 0x45], al
mov dh, ah
mov byte [esp + 0x46], cl
mov dl, 0x74
mov cl, byte [esp + 0x44]
xorps xmm0, xmm0
mov byte [esp + 0xb], 0x65
xor dl, cl
mov al, byte [esp + 0xb]
xor ch, cl
xor al, cl
mov byte [esp + 0xa], 0x61
mov byte [esp + 0x4b], al
xor dh, cl
mov al, byte [esp + 0xa]
xor ah, cl
xor al, cl
mov byte [esp + 0x49], ch
mov byte [esp + 0x4c], al
mov al, byte [esp + 0x13]
xor al, cl
mov byte [esp + 0x4e], 0
lea ecx, [esp + 0x45]
mov byte [esp + 0x47], dl
mov byte [esp + 0x4a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x48], ah
mov byte [esp + 0x4d], al
mov byte [esp + 0x4e], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e766
sub ecx, edx
lea eax, [esp + 0x45]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x1003e818
test eax, eax
je 0x1003e818
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003e818
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003e814
nop dword [eax]
cmp edi, dword [eax + 0xc4]
jne 0x1003e7ca
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003e7fa
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003e7e0
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003e84b
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003e80c
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003e7c0
mov edi, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x34]
mov dword [edi + 0x10], eax
cmp ecx, 0xf
jbe 0x1003e85f
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003e855
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003e855
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003e81a
push ecx
push edx
call fcn.1007d105
add esp, 8
mov byte [esp + 0x44], 0x45
mov cl, 0x31
xor cl, byte [esp + 0x44]
mov al, 7
xor al, byte [esp + 0x44]
mov ch, 6
mov byte [esp + 0x45], al
mov dl, 0x2b
mov byte [esp + 0x46], cl
mov dh, 0x29
mov cl, byte [esp + 0x44]
mov ah, 0x1a
mov byte [esp + 0xb], 0x2a
xor dl, cl
mov al, byte [esp + 0xb]
xor ch, cl
xor al, cl
mov byte [esp + 0xa], 0x36
mov byte [esp + 0x4b], al
xor dh, cl
mov al, byte [esp + 0xa]
xor ah, cl
xor al, cl
mov byte [esp + 0x13], 0x20
mov byte [esp + 0x4c], al
xorps xmm0, xmm0
mov al, byte [esp + 0x13]
xor al, cl
mov byte [esp + 0x49], ch
lea ecx, [esp + 0x45]
mov byte [esp + 0x4e], 0
mov byte [esp + 0x47], dl
mov byte [esp + 0x4a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x48], ah
mov byte [esp + 0x4d], al
mov byte [esp + 0x4e], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e8f2
sub ecx, edx
lea eax, [esp + 0x45]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x1003e999
test eax, eax
je 0x1003e999
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003e999
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003e995
cmp edi, dword [eax + 0xc4]
jne 0x1003e94b
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003e97b
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003e961
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003e9cc
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003e98d
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003e941
mov edi, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x34]
mov dword [edi + 0x14], eax
cmp ecx, 0xf
jbe 0x1003e9e0
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003e9d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003e9d6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003e99b
push ecx
push edx
call fcn.1007d105
add esp, 8
mov byte [esp + 0x70], 0x22
mov cl, 0x56
xor cl, byte [esp + 0x70]
mov al, 0x60
xor al, byte [esp + 0x70]
mov dl, 0x4c
mov byte [esp + 0x71], al
mov ch, 0x6d
mov byte [esp + 0x72], cl
mov dh, 0x52
mov cl, byte [esp + 0x70]
mov ah, 0x7d
mov byte [esp + 0xb], 0x47
xor ch, cl
mov al, byte [esp + 0xb]
xor dh, cl
xor al, cl
mov byte [esp + 0xa], dl
xor dl, cl
mov byte [esp + 0x77], al
mov al, byte [esp + 0xa]
xor ah, cl
xor al, cl
mov byte [esp + 0x75], ch
xorps xmm0, xmm0
mov byte [esp + 0x79], 0
lea ecx, [esp + 0x71]
mov byte [esp + 0x73], dl
mov byte [esp + 0x76], dh
lea edx, [ecx + 1]
mov byte [esp + 0x74], ah
mov byte [esp + 0x78], al
mov byte [esp + 0x79], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ea63
sub ecx, edx
lea eax, [esp + 0x71]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x1003eb0a
test eax, eax
je 0x1003eb0a
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003eb0a
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003eb06
cmp edi, dword [eax + 0xc4]
jne 0x1003eabc
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003eaec
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003ead2
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003eb3d
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003eafe
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003eab2
mov edi, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x34]
mov dword [edi + 0x18], eax
cmp ecx, 0xf
jbe 0x1003eb51
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003eb47
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003eb47
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003eb0c
push ecx
push edx
call fcn.1007d105
add esp, 8
mov byte [esp + 0x70], 0x53
mov cl, 0x27
xor cl, byte [esp + 0x70]
mov al, 0x11
xor al, byte [esp + 0x70]
mov ch, 0x1b
mov byte [esp + 0x71], al
mov dl, 0x3d
mov byte [esp + 0x72], cl
mov dh, 0x3a
mov cl, byte [esp + 0x70]
mov ah, 0xc
mov byte [esp + 0xb], 0x37
xor dl, cl
mov al, byte [esp + 0xb]
xor ch, cl
xor al, cl
mov byte [esp + 0xa], 0x36
xor dh, cl
mov byte [esp + 0x77], al
mov al, byte [esp + 0xa]
xor ah, cl
xor al, cl
mov byte [esp + 0x75], ch
xorps xmm0, xmm0
mov byte [esp + 0x79], 0
lea ecx, [esp + 0x71]
mov byte [esp + 0x73], dl
mov byte [esp + 0x76], dh
lea edx, [ecx + 1]
mov byte [esp + 0x74], ah
mov byte [esp + 0x78], al
mov byte [esp + 0x79], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ebd5
sub ecx, edx
lea eax, [esp + 0x71]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi + 4]
mov dword [esp + 0xc], eax
je 0x1003ec80
test eax, eax
je 0x1003ec80
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003ec80
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003ec7c
cmp edi, dword [eax + 0xc4]
jne 0x1003ec32
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003ec62
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003ec48
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003ecb3
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003ec74
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003ec28
mov edi, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x34]
mov dword [edi + 0x1c], eax
cmp ecx, 0xf
jbe 0x1003ecc7
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003ecbd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ecbd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003ec82
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 0x7b
mov dword [esp + 0x54], 0x14091c7b
mov dword [esp + 0x58], 0x18240b0e
xor eax, eax
mov dword [esp + 0x5c], 0x1e0f1514
mov word [esp + 0x60], 0xf15
mov byte [esp + 0x62], 0
nop
xor byte [esp + eax + 0x55], cl
inc eax
cmp eax, 0xd
jae 0x1003ed00
mov cl, byte [esp + 0x54]
jmp 0x1003ecf0
xorps xmm0, xmm0
mov byte [esp + 0x62], 0
lea ecx, [esp + 0x55]
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
lea edx, [ecx + 1]
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ed24
sub ecx, edx
lea eax, [esp + 0x55]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi]
mov dword [esp + 0xc], eax
je 0x1003edca
test eax, eax
je 0x1003edca
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003edca
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003edca
cmp edi, dword [eax + 0xc4]
jne 0x1003ed80
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003edb0
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003ed96
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003ee01
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003edc2
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003ed76
xor eax, eax
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x20], eax
mov ecx, dword [esp + 0x34]
cmp ecx, 0xf
jbe 0x1003ee11
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003ee07
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ee07
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
jmp 0x1003edcc
push ecx
push edx
call fcn.1007d105
add esp, 8
xor al, al
mov byte [esp + 9], al
nop word [eax + eax]
movzx edi, al
mov cl, 0x68
mov byte [esp + 0x70], 0x1a
mov al, 0x7d
xor al, byte [esp + 0x70]
mov dl, 0x75
xor cl, byte [esp + 0x70]
mov ah, 0x6f
mov byte [esp + 0x71], al
mov ch, 0x6a
mov byte [esp + 0x72], cl
mov dh, 0x45
mov cl, byte [esp + 0x70]
xorps xmm0, xmm0
mov byte [esp + 0xb], 0x3f
xor dl, cl
mov al, byte [esp + 0xb]
xor ah, cl
xor al, cl
mov byte [esp + 0xa], 0x7e
mov byte [esp + 0x77], al
xor dh, cl
mov al, byte [esp + 0xa]
xor ch, cl
xor al, cl
mov byte [esp + 0x73], dl
push edi
sub esp, 0x18
mov byte [esp + 0x92], dh
mov edx, esp
mov byte [esp + 0x91], ch
lea ecx, [esp + 0x8d]
mov byte [esp + 0x90], ah
mov byte [esp + 0x94], al
lea eax, [ecx + 1]
mov byte [esp + 0x95], 0
movups xmmword [edx], xmm0
mov byte [esp + 0x95], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [esp + 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003eec2
sub ecx, dword [esp + 0x34]
lea eax, [esp + 0x8d]
push ecx
push eax
mov ecx, edx
call fcn.100024a0
lea eax, [esp + 0xac]
push eax
call fcn.10006910
mov edx, eax
add esp, 0x20
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x20]
call fcn.100147f0
mov ecx, dword [esp + 0x14]
mov dword [ecx + edi*4 + 0x24], eax
mov ecx, dword [esp + 0xa4]
cmp ecx, 0xf
jbe 0x1003ef3f
mov edx, dword [esp + 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003ef35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
mov byte [esp + 0x64], 0x1b
mov cl, 0x76
xor cl, byte [esp + 0x64]
mov al, 0x72
xor al, byte [esp + 0x64]
mov dh, 0x7e
mov byte [esp + 0x65], al
mov ch, 0x75
mov byte [esp + 0xb], dh
mov dl, 0x7c
mov al, byte [esp + 0xb]
mov ah, 0x44
mov byte [esp + 0x66], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x64]
xor al, cl
mov byte [esp + 0xa], 0x7f
mov byte [esp + 0x6b], al
xor dl, cl
mov al, byte [esp + 0xa]
xor ch, cl
xor al, cl
mov byte [esp + 0x13], 0x68
xor dh, cl
mov byte [esp + 0x6c], al
mov al, byte [esp + 0x13]
xor ah, cl
xor al, cl
mov byte [esp + 0x69], ch
lea ecx, [esp + 0x65]
mov byte [esp + 0x6e], 0
mov byte [esp + 0x67], dl
mov byte [esp + 0x6a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x68], ah
mov byte [esp + 0x6d], al
mov byte [esp + 0x6e], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003efd1
sub ecx, edx
lea eax, [esp + 0x65]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + edi*4 + 0x24]
mov dword [esp + 0xc], eax
je 0x1003f088
test eax, eax
je 0x1003f088
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003f088
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003f088
nop dword [eax]
cmp edi, dword [eax + 0xc4]
jne 0x1003f03a
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003f06e
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003f050
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003f101
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003f080
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003f030
xor ecx, ecx
movzx eax, byte [esp + 9]
mov edi, dword [esp + 0x14]
lea eax, [eax + eax*2]
mov dword [edi + eax*8 + 0x4c], ecx
mov ecx, dword [esp + 0x34]
cmp ecx, 0xf
jbe 0x1003f0d0
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003f0c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 0x64
mov dword [esp + 0x54], 0x1010a64
mov dword [esp + 0x58], 0x73b1700
xor eax, eax
mov dword [esp + 0x5c], 0x100a110b
mov byte [esp + 0x60], 0
xor byte [esp + eax + 0x55], cl
inc eax
cmp eax, 0xb
jae 0x1003f107
mov cl, byte [esp + 0x54]
jmp 0x1003f0f1
mov ecx, dword [esp + 0x1c]
jmp 0x1003f08a
xorps xmm0, xmm0
mov byte [esp + 0x60], 0
lea ecx, [esp + 0x55]
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
lea edx, [ecx + 1]
mov dword [esp + 0x34], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f130
sub ecx, edx
lea eax, [esp + 0x55]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
movzx eax, byte [esp + 9]
mov eax, dword [edi + eax*4 + 0x24]
mov dword [esp + 0xc], eax
je 0x1003f1ec
test eax, eax
je 0x1003f1ec
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003f1ec
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003f1e8
nop dword [eax]
cmp edi, dword [eax + 0xc4]
jne 0x1003f19a
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003f1ce
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003f1b0
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003f545
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003f1e0
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003f190
mov edi, dword [esp + 0x14]
xor ecx, ecx
movzx eax, byte [esp + 9]
lea eax, [eax + eax*2]
mov dword [edi + eax*8 + 0x50], ecx
mov ecx, dword [esp + 0x34]
cmp ecx, 0xf
jbe 0x1003f230
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003f226
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [str.8V__KgHJW_J_KK]
xor ecx, ecx
movups xmmword [esp + 0xb0], xmm0
mov al, byte [esp + 0xb0]
xor byte [esp + ecx + 0xb1], al
inc ecx
cmp ecx, 0xe
jb 0x1003f241
xorps xmm0, xmm0
mov byte [esp + 0xbf], 0
lea ecx, [esp + 0xb1]
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
lea edx, [ecx + 1]
mov dword [esp + 0x34], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f280
sub ecx, edx
lea eax, [esp + 0xb1]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
movzx eax, byte [esp + 9]
mov eax, dword [edi + eax*4 + 0x24]
mov dword [esp + 0xc], eax
je 0x1003f33c
test eax, eax
je 0x1003f33c
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003f33c
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003f338
nop dword [eax]
cmp edi, dword [eax + 0xc4]
jne 0x1003f2ea
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003f31e
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003f300
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003f552
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003f330
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003f2e0
mov edi, dword [esp + 0x14]
xor ecx, ecx
movzx eax, byte [esp + 9]
lea eax, [eax + eax*2]
mov dword [edi + eax*8 + 0x54], ecx
mov ecx, dword [esp + 0x34]
cmp ecx, 0xf
jbe 0x1003f380
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003f376
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
mov al, 0xa
mov byte [esp + 0x44], 0x7e
mov dl, al
mov byte [esp + 0xb], 0x13
xor al, byte [esp + 0x44]
mov cl, 6
xor cl, byte [esp + 0x44]
mov ch, 0x10
mov byte [esp + 0x45], al
mov dh, 0x1f
mov al, byte [esp + 0xb]
mov ah, 0x21
mov byte [esp + 0x46], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x44]
xor al, cl
mov byte [esp + 0xa], 0x1b
xor dl, cl
mov byte [esp + 0x4b], al
mov al, byte [esp + 0xa]
xor ch, cl
xor dh, cl
mov byte [esp + 0x49], ch
xor ah, cl
mov byte [esp + 0x4d], 0
xor al, cl
mov byte [esp + 0x47], dl
lea ecx, [esp + 0x45]
mov byte [esp + 0x4a], dh
mov byte [esp + 0x48], ah
lea edx, [ecx + 1]
mov byte [esp + 0x4c], al
mov byte [esp + 0x4d], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f404
sub ecx, edx
lea eax, [esp + 0x45]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
movzx eax, byte [esp + 9]
mov eax, dword [edi + eax*4 + 0x24]
mov dword [esp + 0xc], eax
je 0x1003f4bc
test eax, eax
je 0x1003f4bc
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003f4bc
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003f4b8
nop dword [eax]
cmp edi, dword [eax + 0xc4]
jne 0x1003f46a
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003f49e
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003f480
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003f55f
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003f4b0
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003f460
mov edi, dword [esp + 0x14]
xor ecx, ecx
movzx eax, byte [esp + 9]
lea eax, [eax + eax*2]
mov dword [edi + eax*8 + 0x58], ecx
mov ecx, dword [esp + 0x34]
cmp ecx, 0xf
jbe 0x1003f500
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003f4f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
mov al, byte [esp + 9]
inc al
mov byte [esp + 9], al
cmp al, 3
jb 0x1003ee20
mov cl, 0x58
mov dword [esp + 0x54], 0x372a3f58
mov dword [esp + 0x58], 0x2a07282d
xor eax, eax
mov dword [esp + 0x5c], 0x2a392f3d
mov word [esp + 0x60], 0x3c
xor byte [esp + eax + 0x55], cl
inc eax
cmp eax, 0xc
jae 0x1003f56c
mov cl, byte [esp + 0x54]
jmp 0x1003f535
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003f1ee
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003f33e
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003f4be
xorps xmm0, xmm0
mov byte [esp + 0x61], 0
lea ecx, [esp + 0x55]
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
lea edx, [ecx + 1]
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f590
sub ecx, edx
lea eax, [esp + 0x55]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi]
mov dword [esp + 0xc], eax
je 0x1003f63a
test eax, eax
je 0x1003f63a
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003f63a
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003f636
cmp edi, dword [eax + 0xc4]
jne 0x1003f5ec
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003f61c
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003f602
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003f66d
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003f62e
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003f5e2
mov edi, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x34]
mov dword [edi + 0x30], eax
cmp ecx, 0xf
jbe 0x1003f681
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003f677
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f677
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003f63c
push ecx
push edx
call fcn.1007d105
add esp, 8
mov byte [esp + 0x64], 0x3c
mov cl, 0x48
xor cl, byte [esp + 0x64]
mov al, 0x7e
xor al, byte [esp + 0x64]
mov ch, 0x6e
mov byte [esp + 0x65], al
mov dl, 0x52
mov byte [esp + 0x66], cl
mov dh, 0x59
mov cl, byte [esp + 0x64]
mov ah, 0x63
mov byte [esp + 0xb], 0x4b
xor dl, cl
mov al, byte [esp + 0xb]
xor ch, cl
xor al, cl
mov byte [esp + 0xa], 0x5d
mov byte [esp + 0x6b], al
xor dh, cl
mov al, byte [esp + 0xa]
xor ah, cl
xor al, cl
mov byte [esp + 0x13], 0x4e
mov byte [esp + 0x6c], al
xorps xmm0, xmm0
mov al, byte [esp + 0x13]
xor al, cl
mov byte [esp + 9], 0x58
mov byte [esp + 0x6d], al
mov al, byte [esp + 9]
xor al, cl
mov byte [esp + 0x69], ch
lea ecx, [esp + 0x65]
mov byte [esp + 0x6f], 0
mov byte [esp + 0x67], dl
mov byte [esp + 0x6a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x68], ah
mov byte [esp + 0x6e], al
mov byte [esp + 0x6f], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f723
sub ecx, edx
lea eax, [esp + 0x65]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
mov eax, dword [edi + 0x30]
mov dword [esp + 0xc], eax
je 0x1003f7ce
test eax, eax
je 0x1003f7ce
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003f7ce
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003f7ca
cmp edi, dword [eax + 0xc4]
jne 0x1003f780
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003f7b0
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003f796
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003f801
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003f7c2
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003f776
mov edi, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x34]
mov dword [edi + 0x40], eax
cmp ecx, 0xf
jbe 0x1003f815
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003f80b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f80b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003f7d0
push ecx
push edx
call fcn.1007d105
add esp, 8
xor al, al
mov byte [esp + 9], al
nop dword [eax + eax]
movzx eax, al
mov cl, 0x4b
push eax
mov dword [esp + 0x58], 0x3a2e394b
xor eax, eax
mov dword [esp + 0x5c], 0x2a3f223e
mov dword [esp + 0x60], 0x2f6e1427
mov byte [esp + 0x64], 0
xor byte [esp + eax + 0x59], cl
inc eax
cmp eax, 0xb
jae 0x1003f855
mov cl, byte [esp + 0x58]
jmp 0x1003f845
sub esp, 0x18
mov byte [esp + 0x7c], 0
mov edx, esp
lea ecx, [esp + 0x71]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f880
sub ecx, edi
lea eax, [esp + 0x71]
push ecx
push eax
mov ecx, edx
call fcn.100024a0
lea eax, [esp + 0xac]
push eax
call fcn.10006910
mov edi, dword [esp + 0x34]
add esp, 0x20
mov edx, eax
mov ecx, dword [edi + 0x30]
call fcn.100147f0
movzx ecx, byte [esp + 9]
mov dword [edi + ecx*4 + 0x34], eax
mov ecx, dword [esp + 0xa4]
cmp ecx, 0xf
jbe 0x1003f8f9
mov edx, dword [esp + 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003f8ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
mov cl, 0x3b
mov dword [esp + 0x44], 0x5e495a3b
mov dword [esp + 0x48], 0x5e49645a
xor eax, eax
mov dword [esp + 0x4c], 0x5f495a4c
mov byte [esp + 0x50], 0
nop word [eax + eax]
xor byte [esp + eax + 0x45], cl
inc eax
cmp eax, 0xb
jae 0x1003f930
mov cl, byte [esp + 0x44]
jmp 0x1003f920
xorps xmm0, xmm0
mov byte [esp + 0x50], 0
lea ecx, [esp + 0x45]
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
lea edx, [ecx + 1]
mov dword [esp + 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f954
sub ecx, edx
lea eax, [esp + 0x45]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
movzx eax, byte [esp + 9]
mov eax, dword [edi + eax*4 + 0x34]
mov dword [esp + 0xc], eax
je 0x1003fa0c
test eax, eax
je 0x1003fa0c
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003fa0c
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003fa08
nop dword [eax]
cmp edi, dword [eax + 0xc4]
jne 0x1003f9ba
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003f9ee
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003f9d0
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10040189
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003fa00
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003f9b0
mov edi, dword [esp + 0x14]
xor ecx, ecx
movzx eax, byte [esp + 9]
lea eax, [eax + eax*2]
mov dword [edi + eax*8 + 0x94], ecx
mov ecx, dword [esp + 0x34]
cmp ecx, 0xf
jbe 0x1003fa53
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003fa49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
mov al, 0x72
mov byte [esp + 0x64], 6
mov dl, al
mov byte [esp + 0xb], 0x71
xor al, byte [esp + 0x64]
mov cl, 0x7e
xor cl, byte [esp + 0x64]
mov ch, 0x74
mov byte [esp + 0x65], al
mov dh, 0x63
mov al, byte [esp + 0xb]
mov ah, 0x59
mov byte [esp + 0x66], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x64]
xor al, cl
mov byte [esp + 0xa], 0x67
mov byte [esp + 0x6b], al
xor dl, cl
mov al, byte [esp + 0xa]
xor dh, cl
xor al, cl
mov byte [esp + 0x13], ch
mov byte [esp + 0x6c], al
xor ch, cl
mov al, byte [esp + 0x13]
xor ah, cl
xor al, cl
mov byte [esp + 0x8f], 0x62
mov byte [esp + 0x6d], al
mov al, byte [esp + 0x8f]
xor al, cl
mov byte [esp + 0x69], ch
lea ecx, [esp + 0x65]
mov byte [esp + 0x6f], 0
mov byte [esp + 0x67], dl
mov byte [esp + 0x6a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x68], ah
mov byte [esp + 0x6e], al
mov byte [esp + 0x6f], 0
movaps xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fb00
sub ecx, edx
lea eax, [esp + 0x65]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.100024a0
cmp dword [esp + 0x30], 0
movzx eax, byte [esp + 9]
mov eax, dword [edi + eax*4 + 0x34]
mov dword [esp + 0xc], eax
je 0x1003fbb1
test eax, eax
je 0x1003fbb1
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003fbb1
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003fbad
cmp edi, dword [eax + 0xc4]
jne 0x1003fb5f
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003fb93
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003fb75
mov ecx, dword [ecx]
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10040196
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003fba5
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003fb55
mov edi, dword [esp + 0x14]
xor ecx, ecx
movzx eax, byte [esp + 9]
lea eax, [eax + eax*2]
mov dword [edi + eax*8 + 0x98], ecx
mov ecx, dword [esp + 0x34]
cmp ecx, 0xf
jbe 0x1003fbf8
mov edx, dword [esp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003fbee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x100899e0]
xor ecx, ecx
movups xmmword [esp + 0x20], xmm0
mov word [esp + 0x30], 0x25
nop dword [eax]
mov al, byte [esp + 0x20]
xor byte [esp + ecx + 0x21], al
inc ecx
cmp ecx, 0x10
jb 0x1003fc10
xorps xmm0, xmm0
mov byte [esp + 0x31], 0
lea ecx, [esp + 0x21]
movaps xmmword [esp + 0x90], xmm0
mov dword [esp + 0xa0], 0
lea edx, [ecx + 1]
mov dword [esp + 0xa4], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fc50
sub ecx, edx
lea eax, [esp + 0x21]
push ecx
push eax
lea ecx, [esp + 0x98]
call fcn.100024a0
cmp dword [esp + 0xa0], 0
movzx eax, byte [esp + 9]
mov eax, dword [edi + eax*4 + 0x34]
mov dword [esp + 0xc], eax
je 0x1003fd15
test eax, eax
je 0x1003fd15
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003fd15
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003fd11
nop
cmp edi, dword [eax + 0xc4]
jne 0x1003fcba
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003fcf7
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003fcd0
mov ecx, dword [ecx]
cmp dword [esp + 0xa4], 0xf
lea eax, [esp + 0x90]
cmova eax, dword [esp + 0x90]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100401a3
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003fd09
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003fcb0
mov edi, dword [esp + 0x14]
xor ecx, ecx
movzx eax, byte [esp + 9]
lea eax, [eax + eax*2]
mov dword [edi + eax*8 + 0x9c], ecx
mov ecx, dword [esp + 0xa4]
cmp ecx, 0xf
jbe 0x1003fd62
mov edx, dword [esp + 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003fd58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
movaps xmm0, xmmword [0x10089fc0]
xor ecx, ecx
movups xmmword [esp + 0x20], xmm0
mov byte [esp + 0x30], 0
mov al, byte [esp + 0x20]
xor byte [esp + ecx + 0x21], al
inc ecx
cmp ecx, 0xf
jb 0x1003fd75
xorps xmm0, xmm0
mov byte [esp + 0x30], 0
lea ecx, [esp + 0x21]
movaps xmmword [esp + 0x90], xmm0
mov dword [esp + 0xa0], 0
lea edx, [ecx + 1]
mov dword [esp + 0xa4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fdb0
sub ecx, edx
lea eax, [esp + 0x21]
push ecx
push eax
lea ecx, [esp + 0x98]
call fcn.100024a0
cmp dword [esp + 0xa0], 0
movzx eax, byte [esp + 9]
mov eax, dword [edi + eax*4 + 0x34]
mov dword [esp + 0xc], eax
je 0x1003fe75
test eax, eax
je 0x1003fe75
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003fe75
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc4]
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, ecx
je 0x1003fe71
nop
cmp edi, dword [eax + 0xc4]
jne 0x1003fe1a
call esi
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1003fe57
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1003fe30
mov ecx, dword [ecx]
cmp dword [esp + 0xa4], 0xf
lea eax, [esp + 0x90]
cmova eax, dword [esp + 0x90]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100401b0
mov eax, dword [esp + 0xc]
cmp edi, dword [eax + 0xc4]
jne 0x1003fe69
call esi
mov eax, dword [esp + 0xc]
mov edi, dword [edi]
cmp edi, dword [esp + 0x18]
jne 0x1003fe10
mov edi, dword [esp + 0x14]
xor ecx, ecx
movzx eax, byte [esp + 9]
lea eax, [eax + eax*2]
mov dword [edi + eax*8 + 0xa0], ecx
mov ecx, dword [esp + 0xa4]
cmp ecx, 0xf
jbe 0x1003fec2
mov edx, dword [esp + 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003feb8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e3e8
push ecx
push edx
call fcn.1007d105
add esp, 8
call fcn.1000eea0
test eax, eax
je 0x1004012f
movzx ecx, byte [esp + 9]
lea edi, [ecx + ecx*2]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18], edi
mov dword [ecx + edi*8 + 0x8c], eax
call fcn.10014b10
mov edx, dword [0x10088b4c]
mov ecx, eax
call edx
test eax, eax
je 0x1004012b
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + edi*8 + 0x8c]
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, dword [eax + edi*8 + 0x8c]
mov dword [esp + 0xc], ecx
mov edi, dword [eax]
test edi, edi
je 0x1003ff51
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003ff51
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1003ff51
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003ff51
mov eax, dword [edi]
mov ecx, dword [esp + 0xc]
push ecx
mov ecx, edi
mov eax, dword [eax + 0x74]
call eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + eax*8 + 0x8c]
mov edi, dword [eax]
test edi, edi
je 0x1003ffa5
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003ffa5
sub esp, 0x20
mov ecx, edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [0x10088b5c]
movzx eax, byte [esp + 9]
mov edi, dword [esp + 0x14]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x8c]
mov edi, dword [eax]
test edi, edi
je 0x1003ffe4
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003ffe4
push 4
add edi, 0xcc
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003ffe4
mov dword [edi], 0xb
movzx eax, byte [esp + 9]
mov edi, dword [esp + 0x14]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x8c]
mov edi, dword [eax]
test edi, edi
je 0x10040017
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10040017
push pe_nt_image_headers32
mov ecx, edi
call dword [0x10088b28]
movzx eax, byte [esp + 9]
mov edi, dword [esp + 0x14]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
lea eax, [eax + eax*2]
mov dword [esp + 0x74], 0
mov edi, dword [edi + eax*8 + 0x94]
mov dword [esp + 0x70], 0
test edi, edi
je 0x10040083
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10040083
mov eax, dword [edi + 0xdc]
mov dword [esp + 0x70], eax
mov eax, dword [edi + 0xe0]
mov dword [esp + 0x74], eax
mov eax, dword [edi + 0xe4]
mov dword [esp + 0x78], eax
mov eax, dword [edi + 0xe8]
mov dword [esp + 0x7c], eax
movzx eax, byte [esp + 9]
mov edi, dword [esp + 0x14]
movaps xmm0, xmmword [esp + 0x70]
movaps xmmword [esp + 0xb0], xmm0
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x8c]
mov edi, dword [eax]
test edi, edi
je 0x100400c6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100400c6
lea eax, [esp + 0xb0]
mov ecx, edi
push eax
call dword [0x10088b58]
movzx eax, byte [esp + 9]
mov edi, dword [esp + 0x14]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x8c]
mov edi, dword [eax]
test edi, edi
je 0x100400fc
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100400fc
lea eax, [esp + 0xb0]
mov ecx, edi
push eax
call dword [0x10088b08]
movzx eax, byte [esp + 9]
mov edi, dword [esp + 0x14]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*8 + 0x8c]
mov edi, dword [eax]
test edi, edi
je 0x1004012b
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004012b
push eax
mov ecx, edi
call dword [0x10088b1c]
mov edi, dword [esp + 0x14]
call fcn.1000eea0
test eax, eax
je 0x10040146
movzx ecx, byte [esp + 9]
add ecx, 6
lea ecx, [ecx + ecx*2]
mov dword [edi + ecx*8], eax
mov al, byte [esp + 9]
inc al
mov byte [esp + 9], al
cmp al, 3
jb 0x1003f820
mov esi, dword [edi]
test esi, esi
je 0x10040175
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10040175
push 0x14
mov ecx, esi
call dword [0x10088b28]
mov ecx, dword [esp + 0xcc]
pop edi
pop esi
xor ecx, esp
call fcn.1007d0a4
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003fa0e
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003fbb3
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003fd17
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
jmp 0x1003fe77