Function at 0x1003fd30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100dd5ad
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x100f300c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x24], 0x475c465b
xor eax, eax
mov dword [ebp - 0x20], 0x5d5a764d
mov dword [ebp - 0x1c], 0x295d5b48
xor byte [ebp + eax - 0x24], 0x29
inc eax
cmp eax, 0xc
jb 0x1003fd70
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fda0
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003af70
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x1003fde6
mov dword [ecx], 0x1003af70
add dword [eax + 4], 4
jmp 0x1003fdf2
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1003fe2f
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003fe25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003fe25
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x24], 0x6e756f72
lea edx, [ecx + 1]
mov dword [ebp - 0x20], 0x6e655f64
mov word [ebp - 0x1c], 0x64
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fe62
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 1
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003b390
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x1003fea8
mov dword [ecx], 0x1003b390
add dword [eax + 4], 4
jmp 0x1003feb4
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1003fef1
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003fee7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003fee7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
mov dword [ebp - 0x24], 0x50484559
xor eax, eax
mov dword [ebp - 0x20], 0x41765b4c
mov dword [ebp - 0x1c], 0x295d5b5c
nop dword [eax + eax]
xor byte [ebp + eax - 0x24], 0x29
inc eax
cmp eax, 0xc
jb 0x1003ff10
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ff40
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003b580
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x1003ff86
mov dword [ecx], 0x1003b580
add dword [eax + 4], 4
jmp 0x1003ff92
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1003ffcf
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003ffc5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ffc5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
mov dword [ebp - 0x28], 0x45455c4b
xor eax, eax
mov dword [ebp - 0x24], 0x40765d4c
mov dword [ebp - 0x20], 0x4a485944
mov word [ebp - 0x1c], 0x295d
nop dword [eax]
xor byte [ebp + eax - 0x28], 0x29
inc eax
cmp eax, 0xe
jb 0x1003fff0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040020
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 3
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003c2c0
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040066
mov dword [ecx], 0x1003c2c0
add dword [eax + 4], 4
jmp 0x10040072
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x100400af
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100400a5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100400a5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
mov dword [ebp - 0x28], 0x444c5d40
xor eax, eax
mov dword [ebp - 0x24], 0x5b5c5976
mov dword [ebp - 0x20], 0x5a48414a
mov word [ebp - 0x1c], 0x294c
nop dword [eax]
xor byte [ebp + eax - 0x28], 0x29
inc eax
cmp eax, 0xe
jb 0x100400d0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040100
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 4
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003c7e0
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040146
mov dword [ecx], 0x1003c7e0
add dword [eax + 4], 4
jmp 0x10040152
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1004018f
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040185
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040185
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
mov dword [ebp - 0x24], 0x50484559
xor eax, eax
mov dword [ebp - 0x20], 0x4d765b4c
mov dword [ebp - 0x1c], 0x415d484c
mov byte [ebp - 0x18], 0x29
nop word [eax + eax]
xor byte [ebp + eax - 0x24], 0x29
inc eax
cmp eax, 0xd
jb 0x100401b0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100401e0
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 5
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003d0c0
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040226
mov dword [ecx], 0x1003d0c0
add dword [eax + 4], 4
jmp 0x10040232
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1004026f
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040265
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040265
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
movaps xmm0, xmmword [0x100e8850]
lea ecx, [ebp - 0x28]
pxor xmm0, xmmword [0x100e8840]
lea edx, [ecx + 1]
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100402a1
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 6
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003d290
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x100402e7
mov dword [ecx], 0x1003d290
add dword [eax + 4], 4
jmp 0x100402f3
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x10040330
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040326
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040326
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
movaps xmm0, xmmword [0x100e8850]
lea ecx, [ebp - 0x28]
pxor xmm0, xmmword [0x100e8950]
lea edx, [ecx + 1]
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040362
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 7
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003d750
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x100403a8
mov dword [ecx], 0x1003d750
add dword [eax + 4], 4
jmp 0x100403b4
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x100403f1
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100403e7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100403e7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
movaps xmm0, xmmword [0x100e8850]
lea ecx, [ebp - 0x28]
pxor xmm0, xmmword [0x100e8960]
lea edx, [ecx + 1]
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040423
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 8
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003dc20
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040469
mov dword [ecx], 0x1003dc20
add dword [eax + 4], 4
jmp 0x10040475
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x100404b2
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100404a8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100404a8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
mov dword [ebp - 0x24], 0x4b44464b
xor eax, eax
mov dword [ebp - 0x20], 0x48455976
mov dword [ebp - 0x1c], 0x4d4c5d47
mov byte [ebp - 0x18], 0x29
nop dword [eax]
xor byte [ebp + eax - 0x24], 0x29
inc eax
cmp eax, 0xd
jb 0x100404d0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040500
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 9
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003e0f0
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040546
mov dword [ecx], 0x1003e0f0
add dword [eax + 4], 4
jmp 0x10040552
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1004058f
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040585
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040585
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x24], 0x626d6f62
lea edx, [ecx + 1]
mov dword [ebp - 0x20], 0x6565625f
mov word [ebp - 0x1c], 0x70
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100405c2
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0xa
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003eac0
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040608
mov dword [ecx], 0x1003eac0
add dword [eax + 4], 4
jmp 0x10040614
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x10040651
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040647
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040647
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
movaps xmm0, xmmword [0x100e8850]
lea ecx, [ebp - 0x28]
pxor xmm0, xmmword [0x100e8c60]
lea edx, [ecx + 1]
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 0x18], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040687
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0xb
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003ef20
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x100406cd
mov dword [ecx], 0x1003ef20
add dword [eax + 4], 4
jmp 0x100406d9
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x10040716
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004070c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004070c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
movaps xmm0, xmmword [0x100e8850]
lea ecx, [ebp - 0x28]
pxor xmm0, xmmword [0x100e8c70]
lea edx, [ecx + 1]
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 0x18], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040750
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0xc
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003f830
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040796
mov dword [ecx], 0x1003f830
add dword [eax + 4], 4
jmp 0x100407a2
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x100407df
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100407d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100407d5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
mov dword [ebp - 0x28], 0x4b44464b
xor eax, eax
mov dword [ebp - 0x24], 0x59514c76
mov dword [ebp - 0x20], 0x4c4d4645
mov word [ebp - 0x1c], 0x294d
nop dword [eax]
xor byte [ebp + eax - 0x28], 0x29
inc eax
cmp eax, 0xe
jb 0x10040800
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040830
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0xd
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003fcf0
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040876
mov dword [ecx], 0x1003fcf0
add dword [eax + 4], 4
jmp 0x10040882
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x100408bf
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100408b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100408b5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
mov dword [ebp - 0x24], 0x4b44464b
xor eax, eax
mov dword [ebp - 0x20], 0x4f4c4d76
mov dword [ebp - 0x1c], 0x4d4c5a5c
mov byte [ebp - 0x18], 0x29
nop word [eax + eax]
xor byte [ebp + eax - 0x24], 0x29
inc eax
cmp eax, 0xd
jb 0x100408e0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040910
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0xe
push eax
mov ecx, 0x102d353c
mov dword [ebp - 0x14], 0x1003fd10
call fcn.10040ac0
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x10040956
mov dword [ecx], 0x1003fd10
add dword [eax + 4], 4
jmp 0x10040962
lea edx, [ebp - 0x14]
push edx
push ecx
mov ecx, eax
call fcn.10022ca0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1004099f
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040995
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040995
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
cmp dword [0x102d3540], 0
je 0x10040a22
mov esi, dword [0x102d353c]
mov esi, dword [esi]
cmp byte [esi + 0xd], 0
jne 0x10040a22
nop word [eax + eax]
cmp dword [esi + 0x24], 0x10
mov ecx, dword [0x102e79ec]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
lea eax, [esi + 0x10]
jb 0x100409d6
mov eax, dword [eax]
push 0
push eax
push 0x102d3534
call edx
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x10040a06
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x10040a02
cmp esi, dword [eax + 8]
jne 0x10040a02
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x100409f2
mov esi, eax
jmp 0x10040a1c
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x10040a1c
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x10040a10
cmp byte [esi + 0xd], 0
je 0x100409c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100d9ffe
mov esp, ebp
pop ebp
ret