Function at 0x100495a0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xd8
mov eax, dword [0x100b7040]
xor eax, esp
mov dword [esp + 0xd4], eax
push esi
push edi
mov edi, ecx
mov dword [esp + 0x18], edi
mov byte [esp + 0x24], 0x71
mov dl, 5
xor dl, byte [esp + 0x24]
mov al, 0x13
xor al, byte [esp + 0x24]
mov dh, 0x1d
mov byte [esp + 0x25], al
mov ah, 0x1f
mov byte [esp + 0x26], dl
xorps xmm0, xmm0
mov dl, byte [esp + 0x24]
mov byte [esp + 0x13], 0x1e
xor ah, dl
mov al, byte [esp + 0x13]
xor dh, dl
xor al, dl
mov byte [esp + 0x17], 2
mov byte [esp + 0x2b], al
mov al, byte [esp + 0x17]
xor al, dl
mov byte [esp + 0x15], 0x14
mov byte [esp + 0x2c], al
mov al, byte [esp + 0x15]
mov cl, 0x2e
mov ch, 0x12
mov byte [esp + 0x2e], 0
xor cl, dl
mov byte [esp + 0x2a], dh
xor ch, dl
mov byte [esp + 0x28], cl
mov byte [esp + 0x29], ch
xor al, dl
lea ecx, [esp + 0x25]
mov byte [esp + 0x27], ah
lea edx, [ecx + 1]
mov byte [esp + 0x2d], al
mov byte [esp + 0x2e], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049655
sub ecx, edx
lea eax, [esp + 0x25]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
mov edi, dword [edi]
mov dword [esp + 0x1c], edi
je 0x100496f2
test edi, edi
je 0x100496f2
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100496f2
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x20], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100496f2
nop dword [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x100496ad
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x100496d9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100496bf
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100496f4
mov edi, dword [esp + 0x1c]
cmp esi, dword [edi + 0xc4]
jne 0x100496ea
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x20]
jne 0x100496a0
xor edi, edi
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
mov dword [esi + 4], edi
cmp ecx, 0xf
jbe 0x10049731
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049727
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100af660]
xor ecx, ecx
movups xmmword [esp + 0x5c], xmm0
mov word [esp + 0x6c], 0x5b5c
mov byte [esp + 0x6e], 0
nop dword [eax + eax]
mov al, byte [esp + 0x5c]
xor byte [esp + ecx + 0x5d], al
inc ecx
cmp ecx, 0x11
jb 0x10049750
xorps xmm0, xmm0
mov byte [esp + 0x6e], 0
lea ecx, [esp + 0x5d]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049782
sub ecx, edx
lea eax, [esp + 0x5d]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
mov edi, dword [esi]
mov dword [esp + 0x20], edi
je 0x1004981a
test edi, edi
je 0x1004981a
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004981a
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004981a
cmp esi, dword [edi + 0xc4]
jne 0x100497d5
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10049801
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100497e7
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004981c
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x10049812
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x100497c8
xor edi, edi
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], edi
cmp ecx, 0xf
jbe 0x10049859
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004984f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7da
push ecx
push edx
call fcn.1007fa46
add esp, 8
xor al, al
mov byte [esp + 0x13], al
movaps xmm1, xmmword [str._GROUP]
xor ecx, ecx
movzx eax, al
push eax
movups xmmword [esp + 0xa4], xmm1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [esp + 0xa4]
xor byte [esp + ecx + 0xa5], al
inc ecx
cmp ecx, 0xe
jb 0x10049880
sub esp, 0x18
mov byte [esp + 0xcb], 0
mov edx, esp
lea ecx, [esp + 0xbd]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100498c0
sub ecx, esi
lea eax, [esp + 0xbd]
push ecx
push eax
mov ecx, edx
call fcn.10002540
lea eax, [esp + 0x9c]
push eax
call fcn.1000ae50
mov esi, dword [esp + 0x38]
add esp, 0x20
movzx edi, byte [esp + 0x13]
mov edx, eax
mov ecx, dword [esi + 8]
call fcn.10017d20
mov ecx, dword [esp + 0x94]
mov dword [esi + edi*4 + 0xc], eax
cmp ecx, 0xf
jbe 0x1004993c
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049932
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x5e
mov byte [esp + 0x24], 0x2a
mov dl, al
mov byte [esp + 0x15], 0x5c
xor al, byte [esp + 0x24]
mov cl, 0x52
xor cl, byte [esp + 0x24]
mov dh, 0x4f
mov byte [esp + 0x25], al
mov ch, 0x46
mov al, byte [esp + 0x15]
mov ah, 0x75
mov byte [esp + 0x26], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x24]
xor al, cl
mov byte [esp + 0x17], dh
mov byte [esp + 0x2b], al
xor dl, cl
mov al, byte [esp + 0x17]
xor dh, cl
xor al, cl
mov byte [esp + 0x14], ch
xor ch, cl
mov byte [esp + 0x2c], al
mov al, byte [esp + 0x14]
xor ah, cl
xor al, cl
mov byte [esp + 0x29], ch
lea ecx, [esp + 0x25]
mov byte [esp + 0x2e], 0
mov byte [esp + 0x27], dl
mov byte [esp + 0x2a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x28], ah
mov byte [esp + 0x2d], al
mov byte [esp + 0x2e], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100499d0
sub ecx, edx
lea eax, [esp + 0x25]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
mov edi, dword [esi + edi*4 + 0xc]
mov dword [esp + 0x20], edi
je 0x10049a72
test edi, edi
je 0x10049a72
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10049a72
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10049a6e
cmp esi, dword [edi + 0xc4]
jne 0x10049a25
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10049a55
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10049a37
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10049f16
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x10049a66
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x10049a18
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x44]
lea eax, [eax + eax*2]
mov dword [esi + eax*8 + 0x20], edi
cmp ecx, 0xf
jbe 0x10049ab6
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049aac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100af400]
xor ecx, ecx
movups xmmword [esp + 0xa0], xmm0
mov byte [esp + 0xb0], 0
nop
mov al, byte [esp + 0xa0]
xor byte [esp + ecx + 0xa1], al
inc ecx
cmp ecx, 0xf
jb 0x10049ad0
xorps xmm0, xmm0
mov byte [esp + 0xb0], 0
lea ecx, [esp + 0xa1]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049b10
sub ecx, edx
lea eax, [esp + 0xa1]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
movzx eax, byte [esp + 0x13]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [esp + 0x20], edi
je 0x10049bba
test edi, edi
je 0x10049bba
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10049bba
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10049bb6
cmp esi, dword [edi + 0xc4]
jne 0x10049b6d
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10049b9d
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10049b7f
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10049f1f
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x10049bae
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x10049b60
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x44]
lea eax, [eax + eax*2]
mov dword [esi + eax*8 + 0x24], edi
cmp ecx, 0xf
jbe 0x10049bfe
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049bf4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100ae9a0]
xor ecx, ecx
movups xmmword [esp + 0xa0], xmm0
nop
mov al, byte [esp + 0xa0]
xor byte [esp + ecx + 0xa1], al
inc ecx
cmp ecx, 0xe
jb 0x10049c10
xorps xmm0, xmm0
mov byte [esp + 0xaf], 0
lea ecx, [esp + 0xa1]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049c50
sub ecx, edx
lea eax, [esp + 0xa1]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
movzx eax, byte [esp + 0x13]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [esp + 0x20], edi
je 0x10049cfe
test edi, edi
je 0x10049cfe
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10049cfe
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10049cfa
cmp esi, dword [edi + 0xc4]
jne 0x10049cb1
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10049ce1
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10049cc3
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10049f28
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x10049cf2
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x10049ca4
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x44]
lea eax, [eax + eax*2]
mov dword [esi + eax*8 + 0x28], edi
cmp ecx, 0xf
jbe 0x10049d42
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049d38
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x3a
mov byte [esp + 0xc0], 0x4e
mov dl, al
mov byte [esp + 0x14], 0x20
xor al, byte [esp + 0xc0]
mov cl, 0x36
xor cl, byte [esp + 0xc0]
mov ch, 0x34
mov byte [esp + 0xc1], al
mov dh, 0x21
mov al, byte [esp + 0x14]
mov ah, 0x11
mov byte [esp + 0xc2], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0xc0]
xor al, cl
mov byte [esp + 0x15], 0x2b
xor dl, cl
mov byte [esp + 0xc7], al
mov al, byte [esp + 0x15]
xor ch, cl
xor dh, cl
mov byte [esp + 0xc5], ch
xor ah, cl
mov byte [esp + 0xc9], 0
xor al, cl
mov byte [esp + 0xc3], dl
lea ecx, [esp + 0xc1]
mov byte [esp + 0xc6], dh
mov byte [esp + 0xc4], ah
lea edx, [ecx + 1]
mov byte [esp + 0xc8], al
mov byte [esp + 0xc9], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049df3
sub ecx, edx
lea eax, [esp + 0xc1]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
movzx eax, byte [esp + 0x13]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [esp + 0x20], edi
je 0x10049ea1
test edi, edi
je 0x10049ea1
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10049ea1
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10049e9d
cmp esi, dword [edi + 0xc4]
jne 0x10049e54
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10049e84
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10049e66
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10049f31
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x10049e95
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x10049e47
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x44]
lea eax, [eax + eax*2]
mov dword [esi + eax*8 + 0x2c], edi
cmp ecx, 0xf
jbe 0x10049ee5
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049edb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov cl, 0x5d
mov dword [esp + 0x5c], 0x33293f5d
mov dword [esp + 0x60], 0x29383902
xor eax, eax
mov dword [esp + 0x64], 0x2e31343c
mov byte [esp + 0x68], 0
xor byte [esp + eax + 0x5d], cl
inc eax
cmp eax, 0xb
jae 0x10049f3a
mov cl, byte [esp + 0x5c]
jmp 0x10049f06
mov esi, dword [esp + 0x18]
jmp 0x10049a74
mov esi, dword [esp + 0x18]
jmp 0x10049bbc
mov esi, dword [esp + 0x18]
jmp 0x10049d00
mov esi, dword [esp + 0x18]
jmp 0x10049ea3
xorps xmm0, xmm0
mov byte [esp + 0x68], 0
lea ecx, [esp + 0x5d]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049f60
sub ecx, edx
lea eax, [esp + 0x5d]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
movzx eax, byte [esp + 0x13]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [esp + 0x20], edi
je 0x1004a00f
test edi, edi
je 0x1004a00f
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004a00f
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004a00b
cmp esi, dword [edi + 0xc4]
jne 0x10049fc2
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x10049ff2
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10049fd4
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004a1bc
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004a003
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x10049fb5
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x44]
add eax, 2
lea eax, [eax + eax*2]
mov dword [esi + eax*8], edi
cmp ecx, 0xf
jbe 0x1004a055
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a04b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
movzx eax, byte [esp + 0x13]
mov esi, dword [esi + eax*4 + 0xc]
test esi, esi
je 0x1004a078
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004a078
push eax
mov ecx, esi
call dword [0x100ae54c]
mov al, byte [esp + 0x13]
inc al
mov byte [esp + 0x13], al
cmp al, 4
jb 0x1004985f
movaps xmm0, xmmword [0x100aefc0]
xor ecx, ecx
movups xmmword [esp + 0x5c], xmm0
mov dword [esp + 0x6c], 0x1d02070f
mov byte [esp + 0x70], 0
mov al, byte [esp + 0x5c]
xor byte [esp + ecx + 0x5d], al
inc ecx
cmp ecx, 0x13
jb 0x1004a0a5
xorps xmm0, xmm0
mov byte [esp + 0x70], 0
lea ecx, [esp + 0x5d]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
lea edx, [ecx + 1]
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004a0d7
sub ecx, edx
lea eax, [esp + 0x5d]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
mov eax, dword [esp + 0x18]
mov edi, dword [eax + 8]
mov dword [esp + 0x20], edi
je 0x1004a182
test edi, edi
je 0x1004a182
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004a182
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004a182
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1004a13d
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004a169
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004a14f
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004a184
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004a17a
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004a130
xor edi, edi
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
mov dword [eax + 0x80], edi
cmp ecx, 0xf
jbe 0x1004a1cf
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a1c5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7df
jmp 0x1004a1c5
mov esi, dword [esp + 0x18]
jmp 0x1004a011
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x2e
mov byte [esp + 0x74], 0x5a
mov dl, al
mov byte [esp + 0x14], 0x3b
xor al, byte [esp + 0x74]
mov cl, 0x22
xor cl, byte [esp + 0x74]
mov dh, dl
mov byte [esp + 0x75], al
mov ch, 0x29
mov al, byte [esp + 0x14]
mov ah, 5
mov byte [esp + 0x76], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x74]
xor al, cl
mov byte [esp + 0x15], dh
mov byte [esp + 0x7b], al
xor dl, cl
mov al, byte [esp + 0x15]
xor dh, cl
xor al, cl
mov byte [esp + 0x17], 0x2f
mov byte [esp + 0x7c], al
xor ah, cl
mov al, byte [esp + 0x17]
xor al, cl
mov byte [esp + 0x13], ch
xor ch, cl
mov byte [esp + 0x7d], al
mov al, byte [esp + 0x13]
xor al, cl
mov byte [esp + 0x79], ch
lea ecx, [esp + 0x75]
mov byte [esp + 0x7f], 0
mov byte [esp + 0x77], dl
mov byte [esp + 0x7a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x78], ah
mov byte [esp + 0x7e], al
mov byte [esp + 0x7f], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004a270
sub ecx, edx
lea eax, [esp + 0x75]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
mov eax, dword [esp + 0x18]
mov edi, dword [eax + 0x80]
mov dword [esp + 0x20], edi
je 0x1004a318
test edi, edi
je 0x1004a318
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004a318
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004a318
cmp esi, dword [edi + 0xc4]
jne 0x1004a2d3
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004a2ff
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004a2e5
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004a31a
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004a310
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004a2c6
xor edi, edi
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
mov dword [eax + 0x7c], edi
cmp ecx, 0xf
jbe 0x1004a357
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a34d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7e4
push ecx
push edx
call fcn.1007fa46
add esp, 8
xor al, al
mov byte [esp + 0x13], al
nop dword [eax]
movzx edi, al
mov cl, 2
mov byte [esp + 0xa0], 0x6d
mov al, 0x2e
xor al, byte [esp + 0xa0]
mov ah, 0x19
xor cl, byte [esp + 0xa0]
mov dl, 3
mov byte [esp + 0xa1], al
mov dh, dl
mov byte [esp + 0x14], ah
mov ch, 8
mov al, byte [esp + 0x14]
xorps xmm0, xmm0
mov byte [esp + 0xa2], cl
mov cl, byte [esp + 0xa0]
xor al, cl
mov byte [esp + 0x15], 0x32
mov byte [esp + 0xa7], al
xor dl, cl
mov al, byte [esp + 0x15]
xor dh, cl
xor al, cl
mov byte [esp + 0x17], 0x48
mov byte [esp + 0xa8], al
xor ah, cl
mov al, byte [esp + 0x17]
xor ch, cl
xor al, cl
mov byte [esp + 0x16], 9
mov byte [esp + 0xa9], al
mov al, byte [esp + 0x16]
xor al, cl
mov byte [esp + 0xa3], dl
push edi
sub esp, 0x18
mov byte [esp + 0xc2], dh
mov edx, esp
mov byte [esp + 0xc1], ch
lea ecx, [esp + 0xbd]
mov byte [esp + 0xc7], 0
mov byte [esp + 0xc0], ah
lea esi, [ecx + 1]
mov byte [esp + 0xc6], al
movups xmmword [edx], xmm0
mov byte [esp + 0xc7], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004a440
sub ecx, esi
lea eax, [esp + 0xbd]
push ecx
push eax
mov ecx, edx
call fcn.10002540
lea eax, [esp + 0x9c]
push eax
call fcn.1000ae50
mov esi, dword [esp + 0x38]
add esp, 0x20
mov edx, eax
mov ecx, dword [esi + 0x80]
call fcn.10017d20
mov ecx, dword [esp + 0x94]
mov dword [esi + edi*4 + 0x84], eax
cmp ecx, 0xf
jbe 0x1004a4bd
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a4b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov byte [esp + 0xc0], 4
mov al, 0x6d
xor al, byte [esp + 0xc0]
mov cl, 0x69
mov byte [esp + 0xc1], al
mov ch, cl
mov al, byte [esp + 0xc0]
mov dl, 0x63
mov dh, 0x6b
mov byte [esp + 0x16], 0x66
xor cl, al
mov byte [esp + 0xc8], 0
xor dl, al
mov byte [esp + 0xc2], cl
xor ch, al
mov byte [esp + 0xc3], dl
xor dh, al
mov byte [esp + 0xc5], ch
mov ah, 0x5b
mov byte [esp + 0xc6], dh
xor ah, al
mov byte [esp + 0xc8], 0
mov al, byte [esp + 0x16]
lea ecx, [esp + 0xc1]
xor al, byte [esp + 0xc0]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [esp + 0xc4], ah
mov byte [esp + 0xc7], al
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004a560
sub ecx, edx
lea eax, [esp + 0xc1]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
mov edi, dword [esi + edi*4 + 0x84]
mov dword [esp + 0x20], edi
je 0x1004a60c
test edi, edi
je 0x1004a60c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004a60c
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004a608
cmp esi, dword [edi + 0xc4]
jne 0x1004a5bf
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004a5ef
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004a5d1
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004af31
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004a600
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004a5b2
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x44]
lea eax, [eax + eax*4]
mov dword [esi + eax*4 + 0xa8], edi
cmp ecx, 0xf
jbe 0x1004a653
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a649
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x5a
mov byte [esp + 0x5c], 0x33
mov byte [esp + 0x14], al
mov cl, 0x5e
xor al, byte [esp + 0x5c]
mov ch, 0x5d
xor cl, byte [esp + 0x5c]
mov dl, 0x54
mov byte [esp + 0x5d], al
mov dh, 0x52
mov byte [esp + 0x5e], cl
mov ah, 0x6c
mov cl, byte [esp + 0x5c]
xorps xmm0, xmm0
mov byte [esp + 0x16], 0x47
xor dl, cl
mov al, byte [esp + 0x16]
xor dh, cl
xor al, cl
mov byte [esp + 0x15], 0x5c
mov byte [esp + 0x63], al
xor ah, cl
mov al, byte [esp + 0x14]
xor al, cl
mov byte [esp + 0x17], ch
mov byte [esp + 0x64], al
xor ch, cl
mov al, byte [esp + 0x15]
xor al, cl
mov byte [esp + 0x61], ch
mov byte [esp + 0x65], al
mov al, byte [esp + 0x17]
xor al, cl
mov byte [esp + 0x67], 0
lea ecx, [esp + 0x5d]
mov byte [esp + 0x5f], dl
mov byte [esp + 0x62], dh
lea edx, [ecx + 1]
mov byte [esp + 0x60], ah
mov byte [esp + 0x66], al
mov byte [esp + 0x67], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004a6f3
sub ecx, edx
lea eax, [esp + 0x5d]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
movzx eax, byte [esp + 0x13]
mov edi, dword [esi + eax*4 + 0x84]
mov dword [esp + 0x20], edi
je 0x1004a7a1
test edi, edi
je 0x1004a7a1
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004a7a1
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004a79d
cmp esi, dword [edi + 0xc4]
jne 0x1004a754
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004a784
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004a766
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004af3a
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004a795
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004a747
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x44]
lea eax, [eax + eax*4]
mov dword [esi + eax*4 + 0xac], edi
cmp ecx, 0xf
jbe 0x1004a7e8
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a7de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x39
mov byte [esp + 0x24], 0x4d
mov dl, al
mov byte [esp + 0x16], 0x20
xor al, byte [esp + 0x24]
mov cl, 0x35
xor cl, byte [esp + 0x24]
mov ch, 0x23
mov byte [esp + 0x25], al
mov dh, 0x2c
mov al, byte [esp + 0x16]
mov ah, 0x12
mov byte [esp + 0x26], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x24]
xor al, cl
mov byte [esp + 0x14], 0x28
xor dl, cl
mov byte [esp + 0x2b], al
mov al, byte [esp + 0x14]
xor ch, cl
xor dh, cl
mov byte [esp + 0x29], ch
xor ah, cl
mov byte [esp + 0x2d], 0
xor al, cl
mov byte [esp + 0x27], dl
lea ecx, [esp + 0x25]
mov byte [esp + 0x2a], dh
mov byte [esp + 0x28], ah
lea edx, [ecx + 1]
mov byte [esp + 0x2c], al
mov byte [esp + 0x2d], 0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004a870
sub ecx, edx
lea eax, [esp + 0x25]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.10002540
cmp dword [esp + 0x40], 0
movzx eax, byte [esp + 0x13]
mov edi, dword [esi + eax*4 + 0x84]
mov dword [esp + 0x20], edi
je 0x1004a91e
test edi, edi
je 0x1004a91e
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004a91e
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004a91a
cmp esi, dword [edi + 0xc4]
jne 0x1004a8d1
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004a901
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004a8e3
mov ecx, dword [ecx]
cmp dword [esp + 0x44], 0xf
lea eax, [esp + 0x30]
cmova eax, dword [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004af43
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004a912
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004a8c4
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x44]
lea eax, [eax + eax*4]
mov dword [esi + eax*4 + 0xb0], edi
cmp ecx, 0xf
jbe 0x1004a965
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a95b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x7a
mov byte [esp + 0x74], 0xe
mov dl, al
mov byte [esp + 0x15], al
xor al, byte [esp + 0x74]
mov cl, 0x76
xor cl, byte [esp + 0x74]
mov ch, 0x6d
mov byte [esp + 0x75], al
mov dh, 0x61
mov byte [esp + 0x76], cl
mov ah, 0x51
mov cl, byte [esp + 0x74]
xorps xmm0, xmm0
mov byte [esp + 0x16], 0x7b
xor dl, cl
mov al, byte [esp + 0x16]
xor ch, cl
xor al, cl
mov byte [esp + 0x14], 0x60
mov byte [esp + 0x7b], al
xor dh, cl
mov al, byte [esp + 0x14]
xor ah, cl
xor al, cl
mov byte [esp + 0x79], ch
mov byte [esp + 0x7c], al
mov al, byte [esp + 0x15]
xor al, cl
mov byte [esp + 0x7e], 0
lea ecx, [esp + 0x75]
mov byte [esp + 0x77], dl
mov byte [esp + 0x7a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x78], ah
mov byte [esp + 0x7d], al
mov byte [esp + 0x7e], 0
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004aa00
sub ecx, edx
lea eax, [esp + 0x75]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.10002540
movzx ecx, byte [esp + 0x13]
lea edx, [esp + 0x80]
mov ecx, dword [esi + ecx*4 + 0x84]
call fcn.10017d20
movzx ecx, byte [esp + 0x13]
add ecx, 9
lea ecx, [ecx + ecx*4]
mov dword [esi + ecx*4], eax
mov ecx, dword [esp + 0x94]
cmp ecx, 0xf
jbe 0x1004aa7d
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004aa73
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100aee50]
xor ecx, ecx
movups xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0x273d263c
mov byte [esp + 0x44], 0
nop dword [eax + eax]
mov al, byte [esp + 0x30]
xor byte [esp + ecx + 0x31], al
inc ecx
cmp ecx, 0x13
jb 0x1004aaa0
xorps xmm0, xmm0
mov byte [esp + 0x44], 0
lea ecx, [esp + 0x31]
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
lea edx, [ecx + 1]
mov dword [esp + 0x94], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004aae0
sub ecx, edx
lea eax, [esp + 0x31]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.10002540
cmp dword [esp + 0x90], 0
movzx eax, byte [esp + 0x13]
mov edi, dword [esi + eax*4 + 0x84]
mov dword [esp + 0x20], edi
je 0x1004aba3
test edi, edi
je 0x1004aba3
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004aba3
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004ab9f
nop
cmp esi, dword [edi + 0xc4]
jne 0x1004ab4d
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004ab86
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004ab5f
mov ecx, dword [ecx]
cmp dword [esp + 0x94], 0xf
lea eax, [esp + 0x80]
cmova eax, dword [esp + 0x80]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004af4c
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004ab97
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004ab40
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x94]
lea eax, [eax + eax*4]
mov dword [esi + eax*4 + 0xb8], edi
cmp ecx, 0xf
jbe 0x1004abf0
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004abe6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
movzx eax, byte [esp + 0x13]
mov esi, dword [esi + eax*4 + 0x84]
test esi, esi
je 0x1004ac16
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004ac16
push eax
mov ecx, esi
call dword [0x100ae54c]
mov al, byte [esp + 0x13]
inc al
mov byte [esp + 0x13], al
cmp al, 4
jb 0x1004a360
xor al, al
mov byte [esp + 0x13], al
nop
movzx edi, al
mov cl, 0x49
mov byte [esp + 0x74], 0x2c
mov al, 0x7e
xor al, byte [esp + 0x74]
mov dh, 0x48
xor cl, byte [esp + 0x74]
mov dl, 0x5b
mov byte [esp + 0x75], al
mov ch, 0x5e
mov byte [esp + 0x76], cl
mov ah, 0x4d
mov cl, byte [esp + 0x74]
xorps xmm0, xmm0
mov byte [esp + 0x16], 0x73
xor dl, cl
mov al, byte [esp + 0x16]
xor ah, cl
xor al, cl
mov byte [esp + 0x14], 9
mov byte [esp + 0x7b], al
xor ch, cl
mov al, byte [esp + 0x14]
xor al, cl
mov byte [esp + 0x15], dh
mov byte [esp + 0x7c], al
xor dh, cl
mov al, byte [esp + 0x15]
xor al, cl
mov byte [esp + 0x77], dl
push edi
sub esp, 0x18
mov byte [esp + 0x96], dh
mov edx, esp
mov byte [esp + 0x95], ch
lea ecx, [esp + 0x91]
mov byte [esp + 0x9a], 0
mov byte [esp + 0x94], ah
lea esi, [ecx + 1]
mov byte [esp + 0x99], al
movups xmmword [edx], xmm0
mov byte [esp + 0x9a], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004ace0
sub ecx, esi
lea eax, [esp + 0x91]
push ecx
push eax
mov ecx, edx
call fcn.10002540
lea eax, [esp + 0x9c]
push eax
call fcn.1000ae50
mov esi, dword [esp + 0x38]
add esp, 0x20
mov edx, eax
mov ecx, dword [esi + 0x80]
call fcn.10017d20
mov ecx, dword [esp + 0x94]
mov dword [esi + edi*4 + 0x94], eax
cmp ecx, 0xf
jbe 0x1004ad5d
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004ad53
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x44
mov byte [esp + 0x24], 0x30
mov dl, al
mov byte [esp + 0x15], al
xor al, byte [esp + 0x24]
mov cl, 0x48
xor cl, byte [esp + 0x24]
mov ch, 0x53
mov byte [esp + 0x25], al
mov dh, 0x5f
mov byte [esp + 0x26], cl
mov ah, 0x6f
mov cl, byte [esp + 0x24]
xorps xmm0, xmm0
mov byte [esp + 0x16], 0x45
xor dl, cl
mov al, byte [esp + 0x16]
xor ch, cl
xor al, cl
mov byte [esp + 0x14], 0x5e
mov byte [esp + 0x2b], al
xor dh, cl
mov al, byte [esp + 0x14]
xor ah, cl
xor al, cl
mov byte [esp + 0x29], ch
mov byte [esp + 0x2c], al
mov al, byte [esp + 0x15]
xor al, cl
mov byte [esp + 0x2e], 0
lea ecx, [esp + 0x25]
mov byte [esp + 0x27], dl
mov byte [esp + 0x2a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x28], ah
mov byte [esp + 0x2d], al
mov byte [esp + 0x2e], 0
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004adf8
sub ecx, edx
lea eax, [esp + 0x25]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.10002540
cmp dword [esp + 0x90], 0
mov edi, dword [esi + edi*4 + 0x94]
mov dword [esp + 0x20], edi
je 0x1004aeb4
test edi, edi
je 0x1004aeb4
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004aeb4
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004aeb0
cmp esi, dword [edi + 0xc4]
jne 0x1004ae5e
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004ae97
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004ae70
mov ecx, dword [ecx]
cmp dword [esp + 0x94], 0xf
lea eax, [esp + 0x80]
cmova eax, dword [esp + 0x80]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004af55
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004aea8
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004ae51
mov esi, dword [esp + 0x18]
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x94]
add eax, 0x15
lea eax, [eax + eax*2]
mov dword [esi + eax*4], edi
cmp ecx, 0xf
jbe 0x1004af00
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004aef6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov cl, 0x7b
mov dword [esp + 0x5c], 0x1e091a7b
mov dword [esp + 0x60], 0x1e09241a
xor eax, eax
mov dword [esp + 0x64], 0x1f091a0c
mov byte [esp + 0x68], 0
xor byte [esp + eax + 0x5d], cl
inc eax
cmp eax, 0xb
jae 0x1004af5e
mov cl, byte [esp + 0x5c]
jmp 0x1004af21
mov esi, dword [esp + 0x18]
jmp 0x1004a60e
mov esi, dword [esp + 0x18]
jmp 0x1004a7a3
mov esi, dword [esp + 0x18]
jmp 0x1004a920
mov esi, dword [esp + 0x18]
jmp 0x1004aba5
mov esi, dword [esp + 0x18]
jmp 0x1004aeb6
xorps xmm0, xmm0
mov byte [esp + 0x68], 0
lea ecx, [esp + 0x5d]
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
lea edx, [ecx + 1]
mov dword [esp + 0x94], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004af90
sub ecx, edx
lea eax, [esp + 0x5d]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.10002540
cmp dword [esp + 0x90], 0
movzx eax, byte [esp + 0x13]
mov edi, dword [esi + eax*4 + 0x94]
mov dword [esp + 0x20], edi
je 0x1004b04b
test edi, edi
je 0x1004b04b
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b04b
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004b04b
nop
cmp esi, dword [edi + 0xc4]
jne 0x1004affd
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004b032
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004b00f
mov ecx, dword [ecx]
cmp dword [esp + 0x94], 0xf
lea eax, [esp + 0x80]
cmova eax, dword [esp + 0x80]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004b04d
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004b043
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004aff0
xor edi, edi
movzx eax, byte [esp + 0x13]
mov ecx, dword [esp + 0x94]
lea esi, [eax + eax*2]
mov eax, dword [esp + 0x18]
mov dword [eax + esi*4 + 0x100], edi
cmp ecx, 0xf
jbe 0x1004b09c
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b092
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7d5
push ecx
push edx
call fcn.1007fa46
add esp, 8
call fcn.10012db0
mov edi, dword [esp + 0x18]
test eax, eax
je 0x1004b2f0
mov dword [edi + esi*4 + 0xf8], eax
call fcn.10018040
mov edx, dword [0x100ae57c]
mov ecx, eax
call edx
test eax, eax
je 0x1004b2f0
mov ecx, dword [edi + esi*4 + 0xf8]
mov dword [ecx], eax
mov eax, dword [edi + esi*4 + 0xf8]
mov ecx, dword [edi]
mov dword [esp + 0x1c], ecx
mov edi, dword [eax]
test edi, edi
je 0x1004b117
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b117
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x1004b117
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b117
mov eax, dword [edi]
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, edi
mov eax, dword [eax + 0x74]
call eax
mov edi, dword [esp + 0x18]
mov eax, dword [edi + esi*4 + 0xf8]
mov esi, dword [eax]
test esi, esi
je 0x1004b167
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b167
sub esp, 0x20
mov ecx, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [0x100ae58c]
movzx eax, byte [esp + 0x13]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*4 + 0xf8]
mov esi, dword [eax]
test esi, esi
je 0x1004b1a2
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b1a2
push 4
add esi, 0xcc
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b1a2
mov dword [esi], 0xb
movzx eax, byte [esp + 0x13]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*4 + 0xf8]
mov esi, dword [eax]
test esi, esi
je 0x1004b1d1
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b1d1
push 0x110
mov ecx, esi
call dword [0x100ae558]
movzx eax, byte [esp + 0x13]
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
lea eax, [eax + eax*2]
mov dword [esp + 0xa0], 0
mov esi, dword [edi + eax*4 + 0x100]
test esi, esi
je 0x1004b251
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b251
mov eax, dword [esi + 0xdc]
mov dword [esp + 0xa0], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0xa4], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0xa8], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0xac], eax
movzx eax, byte [esp + 0x13]
movaps xmm0, xmmword [esp + 0xa0]
movaps xmmword [esp + 0xc0], xmm0
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*4 + 0xf8]
mov esi, dword [eax]
test esi, esi
je 0x1004b293
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b293
lea eax, [esp + 0xc0]
mov ecx, esi
push eax
call dword [0x100ae588]
movzx eax, byte [esp + 0x13]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*4 + 0xf8]
mov esi, dword [eax]
test esi, esi
je 0x1004b2c5
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b2c5
lea eax, [esp + 0xc0]
mov ecx, esi
push eax
call dword [0x100ae538]
movzx eax, byte [esp + 0x13]
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*4 + 0xf8]
mov esi, dword [eax]
test esi, esi
je 0x1004b2f0
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b2f0
push eax
mov ecx, esi
call dword [0x100ae54c]
movzx eax, byte [esp + 0x13]
mov esi, dword [edi + eax*4 + 0x94]
test esi, esi
je 0x1004b316
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b316
push eax
mov ecx, esi
call dword [0x100ae54c]
mov al, byte [esp + 0x13]
inc al
mov byte [esp + 0x13], al
cmp al, 5
jb 0x1004ac30
movaps xmm0, xmmword [0x100af6f0]
xor ecx, ecx
movups xmmword [esp + 0x5c], xmm0
mov word [esp + 0x6c], 0x4f
nop dword [eax]
mov al, byte [esp + 0x5c]
xor byte [esp + ecx + 0x5d], al
inc ecx
cmp ecx, 0x10
jb 0x1004b340
xorps xmm0, xmm0
mov byte [esp + 0x6d], 0
lea ecx, [esp + 0x5d]
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
lea edx, [ecx + 1]
mov dword [esp + 0x94], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b380
sub ecx, edx
lea eax, [esp + 0x5d]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.10002540
cmp dword [esp + 0x90], 0
mov edi, dword [edi + 8]
mov dword [esp + 0x20], edi
je 0x1004b430
test edi, edi
je 0x1004b430
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b430
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004b430
cmp esi, dword [edi + 0xc4]
jne 0x1004b3e2
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004b417
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004b3f4
mov ecx, dword [ecx]
cmp dword [esp + 0x94], 0xf
lea eax, [esp + 0x80]
cmova eax, dword [esp + 0x80]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004b432
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004b428
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004b3d5
xor edi, edi
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x94]
mov dword [esi + 0x138], edi
cmp ecx, 0xf
jbe 0x1004b478
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b46e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7e9
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov al, 0x59
mov byte [esp + 0x24], 0x2d
mov dl, al
mov byte [esp + 0x16], 0x4a
xor al, byte [esp + 0x24]
mov cl, 0x55
xor cl, byte [esp + 0x24]
mov ch, 0x5d
mov byte [esp + 0x25], al
mov dh, 0x4c
mov al, byte [esp + 0x16]
mov ah, 0x72
mov byte [esp + 0x26], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x24]
xor al, cl
mov byte [esp + 0x14], 0x48
xor dl, cl
mov byte [esp + 0x2b], al
mov al, byte [esp + 0x14]
xor ch, cl
xor dh, cl
mov byte [esp + 0x29], ch
xor ah, cl
mov byte [esp + 0x2d], 0
xor al, cl
mov byte [esp + 0x27], dl
lea ecx, [esp + 0x25]
mov byte [esp + 0x2a], dh
mov byte [esp + 0x28], ah
lea edx, [ecx + 1]
mov byte [esp + 0x2c], al
mov byte [esp + 0x2d], 0
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b505
sub ecx, edx
lea eax, [esp + 0x25]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.10002540
cmp dword [esp + 0x90], 0
mov edi, dword [esi + 8]
mov dword [esp + 0x20], edi
je 0x1004b5bf
test edi, edi
je 0x1004b5bf
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b5bf
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004b5bb
nop
cmp esi, dword [edi + 0xc4]
jne 0x1004b56d
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004b5a2
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004b57f
mov ecx, dword [ecx]
cmp dword [esp + 0x94], 0xf
lea eax, [esp + 0x80]
cmova eax, dword [esp + 0x80]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004b5fb
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004b5b3
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004b560
mov esi, dword [esp + 0x18]
xor edi, edi
mov ecx, dword [esp + 0x94]
mov dword [esi + 0x134], edi
cmp ecx, 0xf
jbe 0x1004b60b
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b601
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7ee
jmp 0x1004b601
mov esi, dword [esp + 0x18]
jmp 0x1004b5c1
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov cl, 0x16
mov dword [esp + 0x5c], 0x78627416
mov dword [esp + 0x60], 0x6e737849
xor eax, eax
mov dword [esp + 0x64], 0x71776662
mov word [esp + 0x68], 0x73
nop
xor byte [esp + eax + 0x5d], cl
inc eax
cmp eax, 0xc
jae 0x1004b640
mov cl, byte [esp + 0x5c]
jmp 0x1004b630
xorps xmm0, xmm0
mov byte [esp + 0x69], 0
lea ecx, [esp + 0x5d]
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
lea edx, [ecx + 1]
mov dword [esp + 0x94], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b670
sub ecx, edx
lea eax, [esp + 0x5d]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.10002540
cmp dword [esp + 0x90], 0
mov edi, dword [esi + 8]
mov dword [esp + 0x20], edi
je 0x1004b72f
test edi, edi
je 0x1004b72f
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b72f
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x1c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004b72b
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x1004b6dd
call fcn.10084bcf
mov edi, dword [esi + 8]
test edi, edi
je 0x1004b712
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004b6ef
mov ecx, dword [ecx]
cmp dword [esp + 0x94], 0xf
lea eax, [esp + 0x80]
cmova eax, dword [esp + 0x80]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004b76b
mov edi, dword [esp + 0x20]
cmp esi, dword [edi + 0xc4]
jne 0x1004b723
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [esp + 0x1c]
jne 0x1004b6d0
mov esi, dword [esp + 0x18]
xor edi, edi
mov ecx, dword [esp + 0x94]
mov dword [esi + 0x13c], edi
cmp ecx, 0xf
jbe 0x1004b77b
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004b771
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004b7f3
jmp 0x1004b771
mov esi, dword [esp + 0x18]
jmp 0x1004b731
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov edi, dword [esi + 0x148]
mov esi, dword [esi + 0x134]
test esi, esi
je 0x1004b7a1
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b7a1
push edi
mov ecx, esi
call dword [0x100ae5ac]
mov eax, dword [esp + 0x18]
mov esi, dword [eax]
test esi, esi
je 0x1004b7c1
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004b7c1
push eax
mov ecx, esi
call dword [0x100ae558]
mov ecx, dword [esp + 0xdc]
pop edi
pop esi
xor ecx, esp
call fcn.1007f9e5
mov esp, ebp
pop ebp
ret
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
int3