Function at 0x100301c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x78
mov eax, dword [0x100c90c0]
xor eax, esp
mov dword [esp + 0x74], eax
push esi
push edi
mov edi, ecx
mov dword [esp + 0x30], edi
mov byte [esp + 0x10], 0xd
mov dl, 0x6c
xor dl, byte [esp + 0x10]
mov al, 0x59
xor al, byte [esp + 0x10]
mov dh, 0x79
mov byte [esp + 0x11], al
mov ah, 0x7f
mov byte [esp + 0x12], dl
xorps xmm0, xmm0
mov dl, byte [esp + 0x10]
mov byte [esp + 0x3d], 0x42
xor ah, dl
mov al, byte [esp + 0x3d]
xor dh, dl
xor al, dl
mov byte [esp + 0x3e], 0x63
mov byte [esp + 0x17], al
mov al, byte [esp + 0x3e]
mov byte [esp + 0x1a], 0
mov ch, 0x68
mov byte [esp + 0x16], dh
xor al, dl
mov byte [esp + 0x3f], ch
mov cl, 0x6a
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3f]
xor cl, dl
xor ch, dl
mov byte [esp + 0x14], cl
mov byte [esp + 0x15], ch
xor al, dl
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], ah
lea edx, [ecx + 1]
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030270
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [edi]
mov dword [esp + 0x34], edi
je 0x10030308
test edi, edi
je 0x10030308
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030308
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x38], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030308
cmp esi, dword [edi + 0xc4]
jne 0x100302c3
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x100302ef
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100302d5
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003030a
mov edi, dword [esp + 0x34]
cmp esi, dword [edi + 0xc4]
jne 0x10030300
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x38]
jne 0x100302b6
xor edi, edi
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x54]
mov dword [esi + 4], edi
cmp ecx, 0xf
jbe 0x10030347
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003033d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003139b
push ecx
push edx
call fcn.100859f6
add esp, 8
mov dl, 0x5c
mov dword [esp + 0x10], 0x2e282f5c
mov dword [esp + 0x14], 0x313d1203
xor ecx, ecx
mov dword [esp + 0x18], 0x39321339
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x1003037b
mov dl, byte [esp + 0x10]
jmp 0x10030368
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100303a0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x1003043d
test edi, edi
je 0x1003043d
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003043d
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030439
cmp esi, dword [edi + 0xc4]
jne 0x100303f4
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10030420
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10030406
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030470
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10030431
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x100303e7
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 8], edi
cmp ecx, 0xf
jbe 0x10030480
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030476
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313a0
jmp 0x10030476
mov esi, dword [esp + 0x30]
jmp 0x1003043f
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bf7d0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10030493
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100304c5
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x10030566
test edi, edi
je 0x10030566
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030566
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030562
cmp esi, dword [edi + 0xc4]
jne 0x1003051d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10030549
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003052f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030599
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1003055a
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030510
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0xc], edi
cmp ecx, 0xf
jbe 0x100305a9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003059f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313a5
jmp 0x1003059f
mov esi, dword [esp + 0x30]
jmp 0x10030568
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bf620]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x2c
nop
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x100305c0
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100305f2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x10030697
test edi, edi
je 0x10030697
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030697
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030693
cmp esi, dword [edi + 0xc4]
jne 0x1003064e
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1003067a
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10030660
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100306ca
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1003068b
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030641
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x10], edi
cmp ecx, 0xf
jbe 0x100306da
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100306d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313aa
jmp 0x100306d0
mov esi, dword [esp + 0x30]
jmp 0x10030699
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bfd50]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x68747372
mov byte [esp + 0x24], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x13
jb 0x100306f5
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030727
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x38], edi
je 0x100307d6
test edi, edi
je 0x100307d6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100307d6
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100307d2
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1003078d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x100307b9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003079f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030809
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100307ca
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030780
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x14], edi
cmp ecx, 0xf
jbe 0x10030819
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003080f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313af
jmp 0x1003080f
mov esi, dword [esp + 0x30]
jmp 0x100307d8
push ecx
push edx
call fcn.100859f6
add esp, 8
mov al, 0x65
mov byte [esp + 0x10], 0x31
mov byte [esp + 0x3f], al
mov cl, 0x50
xor al, byte [esp + 0x10]
mov ch, 0x54
xor cl, byte [esp + 0x10]
mov dl, 0x43
mov byte [esp + 0x11], al
mov dh, 0x45
mov al, byte [esp + 0x3f]
mov ah, 0x56
mov byte [esp + 0x12], cl
xorps xmm0, xmm0
mov cl, byte [esp + 0x10]
xor al, cl
mov byte [esp + 0x3e], 0x46
mov byte [esp + 0x17], al
xor dl, cl
mov al, byte [esp + 0x3e]
xor ch, cl
xor al, cl
mov byte [esp + 0x3d], 0x5e
xor dh, cl
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3d]
xor ah, cl
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x1a], 0
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100308b0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x38], edi
je 0x10030956
test edi, edi
je 0x10030956
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030956
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030952
nop
cmp esi, dword [edi + 0xc4]
jne 0x1003090d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10030939
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003091f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030989
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1003094a
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030900
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x18], edi
cmp ecx, 0xf
jbe 0x10030999
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003098f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313b4
jmp 0x1003098f
mov esi, dword [esp + 0x30]
jmp 0x10030958
push ecx
push edx
call fcn.100859f6
add esp, 8
mov dl, 0x4a
mov dword [esp + 0x10], 0x383e394a
mov dword [esp + 0x14], 0x272b0415
xor ecx, ecx
mov dword [esp + 0x18], 0x253d1e2f
mov byte [esp + 0x1c], 0
nop word [eax + eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x100309d3
mov dl, byte [esp + 0x10]
jmp 0x100309c0
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100309f7
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x10030a9c
test edi, edi
je 0x10030a9c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030a9c
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030a98
cmp esi, dword [edi + 0xc4]
jne 0x10030a53
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10030a7f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10030a65
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030acf
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10030a90
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030a46
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x1c], edi
cmp ecx, 0xf
jbe 0x10030adf
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030ad5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313b9
jmp 0x10030ad5
mov esi, dword [esp + 0x30]
jmp 0x10030a9e
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bf2c0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10030af2
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030b24
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x10030bc9
test edi, edi
je 0x10030bc9
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030bc9
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030bc5
cmp esi, dword [edi + 0xc4]
jne 0x10030b80
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10030bac
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10030b92
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030bfc
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10030bbd
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030b73
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x20], edi
cmp ecx, 0xf
jbe 0x10030c0c
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030c02
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313be
jmp 0x10030c02
mov esi, dword [esp + 0x30]
jmp 0x10030bcb
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bf2a0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x18
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x10
jb 0x10030c21
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030c53
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x10030cfc
test edi, edi
je 0x10030cfc
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030cfc
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030cf8
cmp esi, dword [edi + 0xc4]
jne 0x10030cb3
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10030cdf
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10030cc5
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030d2f
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10030cf0
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030ca6
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x24], edi
cmp ecx, 0xf
jbe 0x10030d3f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030d35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313c3
jmp 0x10030d35
mov esi, dword [esp + 0x30]
jmp 0x10030cfe
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100c0030]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0x64787f7e
mov byte [esp + 0x24], 0
nop word [eax + eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0x13
jb 0x10030d60
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030d92
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x18]
mov dword [esp + 0x38], edi
je 0x10030e3b
test edi, edi
je 0x10030e3b
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030e3b
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030e37
cmp esi, dword [edi + 0xc4]
jne 0x10030df2
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10030e1e
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10030e04
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030e6e
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10030e2f
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030de5
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x28], edi
cmp ecx, 0xf
jbe 0x10030e7e
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030e74
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313c8
jmp 0x10030e74
mov esi, dword [esp + 0x30]
jmp 0x10030e3d
push ecx
push edx
call fcn.100859f6
add esp, 8
mov cl, 0x7b
mov byte [esp + 0x10], 0x1a
mov byte [esp + 0x3e], cl
mov al, 0x4e
xor al, byte [esp + 0x10]
mov ch, 0x7f
xor cl, byte [esp + 0x10]
mov dl, 0x68
mov byte [esp + 0x11], al
mov dh, 0x6e
mov byte [esp + 0x12], cl
mov ah, 0x7d
mov cl, byte [esp + 0x10]
xorps xmm0, xmm0
mov byte [esp + 0x3f], 0x49
xor dl, cl
mov al, byte [esp + 0x3f]
xor ch, cl
xor al, cl
mov byte [esp + 0x3d], 0x77
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x3e]
xor ah, cl
xor al, cl
mov byte [esp + 0x15], ch
mov byte [esp + 0x18], al
mov al, byte [esp + 0x3d]
xor al, cl
mov byte [esp + 0x1a], 0
lea ecx, [esp + 0x11]
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030f10
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x38], edi
je 0x10030fb8
test edi, edi
je 0x10030fb8
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030fb8
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10030fb4
cmp esi, dword [edi + 0xc4]
jne 0x10030f6f
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10030f9b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10030f81
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030feb
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x10030fac
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x10030f62
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x2c], edi
cmp ecx, 0xf
jbe 0x10030ffb
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030ff1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313cd
jmp 0x10030ff1
mov esi, dword [esp + 0x30]
jmp 0x10030fba
push ecx
push edx
call fcn.100859f6
add esp, 8
mov dl, 0x17
mov dword [esp + 0x10], 0x65636417
mov dword [esp + 0x14], 0x7a765948
xor ecx, ecx
mov dword [esp + 0x18], 0x7a764472
mov byte [esp + 0x1c], 0
nop dword [eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10031033
mov dl, byte [esp + 0x10]
jmp 0x10031020
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10031057
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x2c]
mov dword [esp + 0x38], edi
je 0x10031106
test edi, edi
je 0x10031106
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10031106
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10031102
nop word [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x100310bd
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x100310e9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100310cf
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10031139
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x100310fa
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x100310b0
mov esi, dword [esp + 0x30]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x30], edi
cmp ecx, 0xf
jbe 0x10031149
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003113f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313d2
jmp 0x1003113f
mov esi, dword [esp + 0x30]
jmp 0x10031108
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bfb30]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10031160
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10031192
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x2c]
mov dword [esp + 0x38], edi
je 0x10031237
test edi, edi
je 0x10031237
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10031237
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x34], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10031237
cmp esi, dword [edi + 0xc4]
jne 0x100311f2
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x1003121e
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10031204
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10031239
mov edi, dword [esp + 0x38]
cmp esi, dword [edi + 0xc4]
jne 0x1003122f
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x34]
jne 0x100311e5
xor edi, edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x34], edi
cmp ecx, 0xf
jbe 0x10031276
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003126c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100313d7
push ecx
push edx
call fcn.100859f6
add esp, 8
mov edi, dword [esp + 0x30]
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0xf
mov byte [esp + 0x40], 0
mov esi, dword [edi + 0x18]
test esi, esi
je 0x100312ac
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100312ac
push eax
mov ecx, esi
call dword [0x100bd600]
mov esi, dword [edi + 0x2c]
test esi, esi
je 0x100312c9
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100312c9
push eax
mov ecx, esi
call dword [0x100bd600]
mov esi, dword [edi]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
test esi, esi
je 0x10031324
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10031324
mov eax, dword [esi + 0xdc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0x1c], eax
mov esi, dword [edi + 4]
xor edi, edi
movaps xmm0, xmmword [esp + 0x10]
movaps xmmword [esp + 0x60], xmm0
test esi, esi
je 0x1003134a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003134a
mov edi, dword [esi + 0xe8]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x6c], edi
mov esi, dword [eax]
test esi, esi
je 0x10031372
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10031372
lea eax, [esp + 0x60]
mov ecx, esi
push eax
call dword [0x100bd5e8]
mov esi, dword [0x100bd6ac]
mov ecx, 0xd78d54
call fcn.1001cb40
mov ecx, dword [eax + 0x350]
call esi
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
xor ecx, esp
call fcn.10085995
mov esp, ebp
pop ebp
ret
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
int3