Function at 0x1003fe60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
mov ebx, ecx
mov dword [ebp - 0x10], 0x4f524720
push esi
push edi
mov dword [ebp - 0x50], ebx
mov dl, 0x20
mov dword [ebp - 0xc], 0x547f5055
xor ecx, ecx
mov dword [ebp - 8], 0x15455059
mov byte [ebp - 4], 0
nop dword [eax + eax]
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 0xb
jae 0x1003fe9f
mov dl, byte [ebp - 0x10]
jmp 0x1003fe90
xorps xmm0, xmm0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fec5
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.10003370
cmp dword [ebp - 0x1c], 0
mov ebx, dword [ebx]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
je 0x1003ff55
test ebx, ebx
je 0x1003ff55
push 4
push ebx
call esi
test eax, eax
jne 0x1003ff55
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x14], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1003ff4f
cmp esi, dword [ebx + 0xc4]
jne 0x1003ff12
call fcn.1008fc90
mov edi, dword [esi + 8]
test edi, edi
je 0x1003ff3b
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1003ff24
mov ecx, dword [ecx]
cmp dword [ebp - 0x18], 0xf
lea eax, [ebp - 0x2c]
cmova eax, dword [ebp - 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1003ff9f
cmp esi, dword [ebx + 0xc4]
jne 0x1003ff48
call fcn.1008fc90
mov esi, dword [esi]
cmp esi, dword [ebp - 0x14]
jne 0x1003ff05
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
xor edi, edi
lea ecx, [ebp - 0x30]
call fcn.10002f50
mov eax, dword [ebp - 0x30]
push 8
push eax
mov dword [ebp - 0x30], 0
call fcn.100891b0
add esp, 8
mov dword [ebp - 0x10], 0x372d3b59
mov dl, 0x59
mov dword [ebp - 0xc], 0x3c302f06
mov word [ebp - 8], 0x2e
xor ecx, ecx
nop dword [eax]
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 8
jae 0x1003ffa7
mov dl, byte [ebp - 0x10]
jmp 0x1003ff90
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
jmp 0x1003ff57
xorps xmm0, xmm0
mov byte [ebp - 7], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ffd0
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.10003370
cmp dword [ebp - 0x38], 0
je 0x10040052
test edi, edi
je 0x10040052
push 4
push edi
call esi
test eax, eax
jne 0x10040052
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x14], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10040052
cmp esi, dword [edi + 0xc4]
jne 0x10040015
call fcn.1008fc90
mov ebx, dword [esi + 8]
test ebx, ebx
je 0x1004003e
cmp dword [ebx + 0x78], 0x10
lea ecx, [ebx + 0x64]
jb 0x10040027
mov ecx, dword [ecx]
cmp dword [ebp - 0x34], 0xf
lea eax, [ebp - 0x48]
cmova eax, dword [ebp - 0x48]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10040054
cmp esi, dword [edi + 0xc4]
jne 0x1004004b
call fcn.1008fc90
mov esi, dword [esi]
cmp esi, dword [ebp - 0x14]
jne 0x10040008
xor ebx, ebx
mov esi, dword [ebp - 0x50]
lea ecx, [ebp - 0x4c]
mov dword [esi + 0xc], ebx
call fcn.10002f50
mov eax, dword [ebp - 0x4c]
push 8
push eax
mov dword [ebp - 0x4c], 0
call fcn.100891b0
add esp, 8
mov dword [ebp - 0x10], 0x7b667314
mov dl, 0x14
mov dword [ebp - 0xc], 0x604b6461
mov dword [ebp - 8], 0x2071646d
xor ecx, ecx
mov byte [ebp - 4], 0
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 0xb
jae 0x100400a3
mov dl, byte [ebp - 0x10]
jmp 0x10040094
xorps xmm0, xmm0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100400d0
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.10003370
cmp dword [ebp - 0x38], 0
mov ebx, dword [esi]
je 0x1004015a
test ebx, ebx
je 0x1004015a
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004015a
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x14], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004015a
nop
cmp esi, dword [ebx + 0xc4]
jne 0x1004011d
call fcn.1008fc90
mov edi, dword [esi + 8]
test edi, edi
je 0x10040146
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004012f
mov ecx, dword [ecx]
cmp dword [ebp - 0x34], 0xf
lea eax, [ebp - 0x48]
cmova eax, dword [ebp - 0x48]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004015c
cmp esi, dword [ebx + 0xc4]
jne 0x10040153
call fcn.1008fc90
mov esi, dword [esi]
cmp esi, dword [ebp - 0x14]
jne 0x10040110
xor edi, edi
lea ecx, [ebp - 0x4c]
call fcn.10002f50
mov eax, dword [ebp - 0x4c]
push 8
push eax
mov dword [ebp - 0x4c], 0
call fcn.100891b0
add esp, 8
mov dword [ebp - 0x10], 0x554f593b
mov dl, 0x3b
mov dword [ebp - 0xc], 0x5e524d64
mov word [ebp - 8], 0x4c
xor ecx, ecx
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 8
jae 0x100401a0
mov dl, byte [ebp - 0x10]
jmp 0x10040191
xorps xmm0, xmm0
mov byte [ebp - 7], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100401c6
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.10003370
cmp dword [ebp - 0x1c], 0
je 0x1004024c
test edi, edi
je 0x1004024c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004024c
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x14], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1004024c
cmp esi, dword [edi + 0xc4]
jne 0x1004020f
call fcn.1008fc90
mov ebx, dword [esi + 8]
test ebx, ebx
je 0x10040238
cmp dword [ebx + 0x78], 0x10
lea ecx, [ebx + 0x64]
jb 0x10040221
mov ecx, dword [ecx]
cmp dword [ebp - 0x18], 0xf
lea eax, [ebp - 0x2c]
cmova eax, dword [ebp - 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004024e
cmp esi, dword [edi + 0xc4]
jne 0x10040245
call fcn.1008fc90
mov esi, dword [esi]
cmp esi, dword [ebp - 0x14]
jne 0x10040202
xor ebx, ebx
mov esi, dword [ebp - 0x50]
lea ecx, [ebp - 0x30]
mov dword [esi + 0x10], ebx
call fcn.10002f50
mov eax, dword [ebp - 0x30]
push 8
push eax
mov dword [ebp - 0x30], 0
call fcn.100891b0
add esp, 8
mov dword [ebp - 0x10], 0x69746106
mov dl, 6
mov dword [ebp - 0xc], 0x72597673
mov dword [ebp - 8], 0x3663767f
xor ecx, ecx
mov byte [ebp - 4], 0
nop
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 0xb
jae 0x1004029f
mov dl, byte [ebp - 0x10]
jmp 0x10040290
xorps xmm0, xmm0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100402c5
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.10003370
cmp dword [ebp - 0x38], 0
mov ebx, dword [esi]
je 0x1004034d
test ebx, ebx
je 0x1004034d
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004034d
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x14], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1004034d
cmp edi, dword [ebx + 0xc4]
jne 0x10040310
call fcn.1008fc90
mov esi, dword [edi + 8]
test esi, esi
je 0x10040339
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x10040322
mov ecx, dword [ecx]
cmp dword [ebp - 0x34], 0xf
lea eax, [ebp - 0x48]
cmova eax, dword [ebp - 0x48]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004034f
cmp edi, dword [ebx + 0xc4]
jne 0x10040346
call fcn.1008fc90
mov edi, dword [edi]
cmp edi, dword [ebp - 0x14]
jne 0x10040303
xor esi, esi
lea ecx, [ebp - 0x4c]
call fcn.10002f50
mov eax, dword [ebp - 0x4c]
push 8
push eax
mov dword [ebp - 0x4c], 0
call fcn.100891b0
add esp, 8
mov dword [ebp - 0x10], 0x4c564022
mov dl, 0x22
mov dword [ebp - 0xc], 0x4d50467d
mov word [ebp - 8], 0x52
xor ecx, ecx
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 8
jae 0x10040393
mov dl, byte [ebp - 0x10]
jmp 0x10040384
xorps xmm0, xmm0
mov byte [ebp - 7], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100403c0
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.10003370
cmp dword [ebp - 0x1c], 0
je 0x1004044a
test esi, esi
je 0x1004044a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004044a
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x14], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1004044a
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1004040d
call fcn.1008fc90
mov ebx, dword [edi + 8]
test ebx, ebx
je 0x10040436
cmp dword [ebx + 0x78], 0x10
lea ecx, [ebx + 0x64]
jb 0x1004041f
mov ecx, dword [ecx]
cmp dword [ebp - 0x18], 0xf
lea eax, [ebp - 0x2c]
cmova eax, dword [ebp - 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004044c
cmp edi, dword [esi + 0xc4]
jne 0x10040443
call fcn.1008fc90
mov edi, dword [edi]
cmp edi, dword [ebp - 0x14]
jne 0x10040400
xor ebx, ebx
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x30]
mov dword [eax + 4], ebx
call fcn.10002f50
mov eax, dword [ebp - 0x30]
push 8
push eax
mov dword [ebp - 0x30], 0
call fcn.100891b0
add esp, 8
mov dword [ebp - 0x10], 0x7b71751c
mov dl, 0x1c
mov dword [ebp - 0xc], 0x736e7843
mov word [ebp - 8], 0x6c
xor ecx, ecx
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 8
jae 0x10040496
mov dl, byte [ebp - 0x10]
jmp 0x10040487
xorps xmm0, xmm0
mov byte [ebp - 7], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100404c0
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.10003370
cmp dword [ebp - 0x1c], 0
je 0x1004054a
test esi, esi
je 0x1004054a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1004054a
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x14], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1004054a
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1004050d
call fcn.1008fc90
mov ebx, dword [edi + 8]
test ebx, ebx
je 0x10040536
cmp dword [ebx + 0x78], 0x10
lea ecx, [ebx + 0x64]
jb 0x1004051f
mov ecx, dword [ecx]
cmp dword [ebp - 0x18], 0xf
lea eax, [ebp - 0x2c]
cmova eax, dword [ebp - 0x2c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004054c
cmp edi, dword [esi + 0xc4]
jne 0x10040543
call fcn.1008fc90
mov edi, dword [edi]
cmp edi, dword [ebp - 0x14]
jne 0x10040500
xor ebx, ebx
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x30]
mov dword [eax + 8], ebx
call fcn.10002f50
mov eax, dword [ebp - 0x30]
push 8
push eax
mov dword [ebp - 0x30], 0
call fcn.100891b0
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret