Function at 0x1002fb20
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a1d75
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x100bd080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x60], esi
call fcn.10033f80
mov dl, 0x2e
mov dword [ebp - 0x40], 0x415c492e
mov dword [ebp - 0x3c], 0x41715e5b
xor ecx, ecx
mov dword [ebp - 0x38], 0x41475a5e
mov word [ebp - 0x34], 0x40
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x1002fb87
mov dl, byte [ebp - 0x40]
jmp 0x1002fb76
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x84], 0
movups xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x80], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fbb0
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x94]
call fcn.10002570
cmp dword [ebp - 0x84], 0
mov edi, dword [esi + 0x30]
je 0x1002fc48
test edi, edi
je 0x1002fc48
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fc48
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x58], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1002fc48
cmp esi, dword [edi + 0xc4]
jne 0x1002fc02
call fcn.10084b0f
mov eax, dword [esi + 8]
mov dword [ebp - 0x64], eax
test eax, eax
je 0x1002fc34
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002fc17
mov ecx, dword [ecx]
cmp dword [ebp - 0x80], 0xf
lea eax, [ebp - 0x94]
cmova eax, dword [ebp - 0x94]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fc7c
cmp esi, dword [edi + 0xc4]
jne 0x1002fc41
call fcn.10084b0f
mov esi, dword [esi]
cmp esi, dword [ebp - 0x58]
jne 0x1002fbf5
xor esi, esi
mov dword [ebp - 0x64], esi
mov ecx, dword [ebp - 0x80]
cmp ecx, 0xf
jbe 0x1002fc8b
mov edx, dword [ebp - 0x94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fc81
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003167f
jmp 0x1002fc81
mov esi, dword [ebp - 0x64]
jmp 0x1002fc4d
push ecx
push edx
call fcn.1007fa16
add esp, 8
movaps xmm0, xmmword [0x100b4440]
xor ecx, ecx
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x67736168
mov word [ebp - 0x34], 0x6361
mov byte [ebp - 0x32], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x15
jb 0x1002fcc1
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fcf0
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002570
cmp dword [ebp - 0x6c], 0
je 0x1002fd7d
test esi, esi
je 0x1002fd7d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fd7d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x58], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fd7d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002fd3d
call fcn.10084b0f
mov esi, dword [edi + 8]
test esi, esi
je 0x1002fd66
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x1002fd4f
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fd7f
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x1002fd76
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x58]
jne 0x1002fd30
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x1002fdb3
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fda9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031684
push ecx
push edx
call fcn.1007fa16
add esp, 8
movaps xmm0, xmmword [str._JFw_CADDwIZMI]
xor ecx, ecx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
movups xmmword [ebp - 0x44], xmm0
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0xe
jb 0x1002fdd2
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fe00
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1002fe8d
test esi, esi
je 0x1002fe8d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fe8d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x58], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fe8d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002fe4d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x1002fe79
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002fe62
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fec0
cmp edi, dword [esi + 0xc4]
jne 0x1002fe86
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x58]
jne 0x1002fe40
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002fecf
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fec5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031689
jmp 0x1002fec5
mov eax, dword [ebp - 0x50]
jmp 0x1002fe8f
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov eax, dword [ebp - 0x60]
cmp dword [eax], 0
je 0x1002fee5
cmp dword [0x100bf004], 1
sete byte [0x100c0b72]
movaps xmm0, xmmword [0x100b4280]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x495e58
nop dword [eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x12
jb 0x1002ff00
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ff30
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1002ffbd
test esi, esi
je 0x1002ffbd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002ffbd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002ffbd
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002ff7d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002ffa9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002ff92
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fff1
cmp edi, dword [esi + 0xc4]
jne 0x1002ffb6
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002ff70
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030000
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fff6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003168e
jmp 0x1002fff6
mov eax, dword [ebp - 0x58]
jmp 0x1002ffbf
push ecx
push edx
call fcn.1007fa16
add esp, 8
movaps xmm0, xmmword [0x100b39a0]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x19031802
mov byte [ebp - 0x34], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x13
jb 0x10030018
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030044
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x100300cd
test esi, esi
je 0x100300cd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100300cd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100300cd
cmp edi, dword [esi + 0xc4]
jne 0x1003008d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x100300b9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100300a2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030101
cmp edi, dword [esi + 0xc4]
jne 0x100300c6
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x10030080
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x34], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030110
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030106
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031693
jmp 0x10030106
mov eax, dword [ebp - 0x58]
jmp 0x100300cf
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov eax, dword [ebp - 0x60]
mov edi, dword [eax + 0x34]
test edi, edi
je 0x1003014c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003014c
mov edi, dword [edi + 0x124]
test edi, edi
je 0x1003014c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003014c
push 0x1388
push eax
mov ecx, edi
call dword [0x100b2f28]
movaps xmm0, xmmword [0x100b4470]
xor ecx, ecx
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x61
nop
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0x10
jb 0x10030160
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030190
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003021d
test esi, esi
je 0x1003021d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003021d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003021d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x100301dd
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x10030209
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100301f2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030251
cmp edi, dword [esi + 0xc4]
jne 0x10030216
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x100301d0
xor eax, eax
mov edi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0x38], eax
cmp ecx, 0xf
jbe 0x10030260
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030256
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031698
jmp 0x10030256
mov eax, dword [ebp - 0x58]
jmp 0x1003021f
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov edi, dword [edi + 0x38]
test edi, edi
je 0x10030296
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030296
mov edi, dword [edi + 0x124]
test edi, edi
je 0x10030296
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030296
push 0x17
push eax
mov ecx, edi
call dword [0x100b2f28]
mov dl, 0x20
mov dword [ebp - 0x40], 0x54585420
mov dword [ebp - 0x3c], 0x4d41477f
xor ecx, ecx
mov dword [ebp - 0x38], 0x49547f45
mov word [ebp - 0x34], 0x454d
mov byte [ebp - 0x32], 0
nop dword [eax]
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xd
jae 0x100302d1
mov dl, byte [ebp - 0x40]
jmp 0x100302c0
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100302f0
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003037d
test esi, esi
je 0x1003037d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003037d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003037d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003033d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x10030369
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030352
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100303b1
cmp edi, dword [esi + 0xc4]
jne 0x10030376
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x10030330
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x3c], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100303c0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100303b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003169d
jmp 0x100303b6
mov eax, dword [ebp - 0x58]
jmp 0x1003037f
push ecx
push edx
call fcn.1007fa16
add esp, 8
movaps xmm0, xmmword [0x100b3be0]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x36212724
mov byte [ebp - 0x34], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x13
jb 0x100303d8
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030404
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002570
cmp dword [ebp - 0x6c], 0
je 0x10030490
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x10030490
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030490
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030490
cmp edi, dword [esi + 0xc4]
jne 0x10030450
call fcn.10084b0f
mov esi, dword [edi + 8]
test esi, esi
je 0x10030479
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x10030462
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030492
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x10030489
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x10030443
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x100304c6
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100304bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316a2
push ecx
push edx
call fcn.1007fa16
add esp, 8
movaps xmm0, xmmword [0x100b3900]
xor ecx, ecx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x101212
nop dword [eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x12
jb 0x100304f0
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030520
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x100305ad
test esi, esi
je 0x100305ad
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100305ad
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100305ad
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003056d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x10030599
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030582
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100305e1
cmp edi, dword [esi + 0xc4]
jne 0x100305a6
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x10030560
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x40], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100305f0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100305e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316a7
jmp 0x100305e6
mov eax, dword [ebp - 0x58]
jmp 0x100305af
push ecx
push edx
call fcn.1007fa16
add esp, 8
movaps xmm0, xmmword [0x100b3b50]
xor ecx, ecx
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x2a28
mov byte [ebp - 0x32], 0
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0x11
jb 0x10030607
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030633
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x100306bd
test esi, esi
je 0x100306bd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100306bd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100306bd
nop
cmp edi, dword [esi + 0xc4]
jne 0x1003067d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x100306a9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030692
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100306f1
cmp edi, dword [esi + 0xc4]
jne 0x100306b6
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x10030670
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x44], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030700
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100306f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316ac
jmp 0x100306f6
mov eax, dword [ebp - 0x58]
jmp 0x100306bf
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov eax, dword [ebp - 0x60]
mov edi, dword [eax + 0x40]
test edi, edi
je 0x10030739
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030739
mov edi, dword [edi + 0x124]
test edi, edi
je 0x10030739
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030739
push 0xa
push eax
mov ecx, edi
call dword [0x100b2f28]
mov dl, 0x6a
mov dword [ebp - 0x40], 0x41e086a
mov dword [ebp - 0x3c], 0xb1e1935
xor ecx, ecx
mov dword [ebp - 0x38], 0x1e350f1e
mov word [ebp - 0x34], 0x1a
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x10030769
mov dl, byte [ebp - 0x40]
jmp 0x10030758
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030788
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030811
test esi, esi
je 0x10030811
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030811
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030811
cmp edi, dword [esi + 0xc4]
jne 0x100307d1
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x100307fd
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100307e6
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030845
cmp edi, dword [esi + 0xc4]
jne 0x1003080a
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x100307c4
xor eax, eax
mov esi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
mov dword [esi + 8], eax
cmp ecx, 0xf
jbe 0x10030854
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003084a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316b1
jmp 0x1003084a
mov eax, dword [ebp - 0x58]
jmp 0x10030813
push ecx
push edx
call fcn.1007fa16
add esp, 8
cmp dword [esi + 8], 0
je 0x100309cd
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push 0x1000
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x1c], xmm0
movups xmmword [ebp - 0x2c], xmm0
call fcn.1000ef00
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x18]
mov esi, edx
mov ecx, dword [ebp - 0x1c]
sub esi, ecx
mov dword [ebp - 0x2c], vtable.Packet.0
cmp esi, 0x989680
ja 0x100308e2
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x100308d2
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x100308bb
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000efb0
jmp 0x100308cf
sub edi, esi
push edi
push 0
push edx
lea esi, [edx + edi]
call fcn.10081a90
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov byte [ecx + eax], 0xa1
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov esi, edx
mov dword [ebp - 4], 1
sub esi, ecx
cmp esi, 0x989680
ja 0x10030939
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x10030929
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x10030912
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000efb0
jmp 0x10030926
sub edi, esi
push edi
push 0
push edx
lea esi, [edi + edx]
call fcn.10081a90
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov byte [ecx + eax], 0xab
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov al, byte [0x100bf000]
mov esi, edx
sub esi, ecx
mov byte [ebp - 0x51], al
cmp esi, 0x989680
ja 0x10030993
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x10030981
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x1003096a
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000efb0
jmp 0x1003097e
sub edi, esi
push edi
push 0
push edx
lea esi, [edi + edx]
call fcn.10081a90
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dl, byte [ebp - 0x51]
mov byte [ecx + eax], dl
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
sub edx, ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x50], edx
cmp edx, 0x4000
ja 0x100309be
mov eax, dword [0x100c0b34]
mov dword [ebp - 0x5c], eax
mov ecx, dword ds:[0x100ada24]
mov ecx, dword ds:[ecx]
push dword [ebp - 0x50]
push dword [ebp - 0x58]
call dword [ebp - 0x5c]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
call fcn.1000f170
movaps xmm0, xmmword [0x100b38c0]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x7001d06
mov word [ebp - 0x34], 0xe
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x14
jb 0x100309e7
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030a13
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002570
cmp dword [ebp - 0x6c], 0
je 0x10030a9f
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x10030a9f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030a9f
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030a9f
cmp edi, dword [esi + 0xc4]
jne 0x10030a5f
call fcn.10084b0f
mov esi, dword [edi + 8]
test esi, esi
je 0x10030a88
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x10030a71
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030aa1
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x10030a98
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030a52
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x10030ad5
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030acb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316b6
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov byte [ebp - 0x40], 0x6b
mov cl, 0x1f
xor cl, byte [ebp - 0x40]
mov al, 9
xor al, byte [ebp - 0x40]
mov dl, 5
mov byte [ebp - 0x3f], al
mov ch, 0x1c
mov byte [ebp - 0x3e], cl
mov dh, 0xe
mov cl, byte [ebp - 0x40]
mov ah, 0x34
mov byte [ebp - 0x51], 0xa
xor ch, cl
mov al, byte [ebp - 0x51]
xor dh, cl
xor al, cl
mov byte [ebp - 0x49], 0x1b
mov byte [ebp - 0x39], al
xor ah, cl
mov al, byte [ebp - 0x49]
xorps xmm0, xmm0
xor al, cl
mov byte [ebp - 0x2d], 4
mov byte [ebp - 0x38], al
mov al, byte [ebp - 0x2d]
xor al, cl
mov byte [ebp - 0x2e], dl
xor dl, cl
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x2e]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030b70
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030bfd
test esi, esi
je 0x10030bfd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030bfd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030bfd
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x10030bbd
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030be9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030bd2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030c31
cmp edi, dword [esi + 0xc4]
jne 0x10030bf6
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030bb0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030c40
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030c36
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316bb
jmp 0x10030c36
mov eax, dword [ebp - 0x50]
jmp 0x10030bff
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov byte [ebp - 0x3c], 0x3c
mov cl, 0x48
xor cl, byte [ebp - 0x3c]
mov al, 0x5e
xor al, byte [ebp - 0x3c]
mov dh, 0x4e
mov byte [ebp - 0x3b], al
mov ch, 0x5d
mov byte [ebp - 0x3a], cl
mov dl, 0x52
mov cl, byte [ebp - 0x3c]
mov ah, 0x63
mov byte [ebp - 0x2e], 0x51
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x53
mov byte [ebp - 0x35], al
xor ah, cl
mov al, byte [ebp - 0x2d]
xorps xmm0, xmm0
xor al, cl
mov byte [ebp - 0x49], dh
xor dh, cl
mov byte [ebp - 0x34], al
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x37], ch
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030cc0
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030d4d
test esi, esi
je 0x10030d4d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030d4d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030d4d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x10030d0d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030d39
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030d22
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030d81
cmp edi, dword [esi + 0xc4]
jne 0x10030d46
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030d00
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030d90
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030d86
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316c0
jmp 0x10030d86
mov eax, dword [ebp - 0x50]
jmp 0x10030d4f
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov dl, 0x4f
mov dword [ebp - 0x40], 0x213b2d4f
mov dword [ebp - 0x3c], 0x2c2c2e10
xor ecx, ecx
mov dword [ebp - 0x38], 0x203c3c2a
mov word [ebp - 0x34], 0x363d
mov byte [ebp - 0x32], 0
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xd
jae 0x10030dc4
mov dl, byte [ebp - 0x40]
jmp 0x10030db3
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030de3
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030e6d
test esi, esi
je 0x10030e6d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030e6d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030e6d
nop
cmp edi, dword [esi + 0xc4]
jne 0x10030e2d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030e59
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030e42
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030ea1
cmp edi, dword [esi + 0xc4]
jne 0x10030e66
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030e20
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030eb0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030ea6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316c5
jmp 0x10030ea6
mov eax, dword [ebp - 0x50]
jmp 0x10030e6f
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov byte [ebp - 0x40], 0x48
mov cl, 0x3c
xor cl, byte [ebp - 0x40]
mov al, 0x2a
xor al, byte [ebp - 0x40]
mov dl, 0x26
mov byte [ebp - 0x3f], al
mov ch, dl
mov byte [ebp - 0x3e], cl
mov dh, 0x27
mov cl, byte [ebp - 0x40]
mov ah, 0x17
mov byte [ebp - 0x2e], 0x3a
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x25
mov byte [ebp - 0x39], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x49], 0x29
mov byte [ebp - 0x38], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x51], 0x24
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x51]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030f36
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x10030fbf
test esi, esi
je 0x10030fbf
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10030fbf
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x10030fbf
cmp edi, dword [esi + 0xc4]
jne 0x10030f7f
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030fab
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030f94
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030ff3
cmp edi, dword [esi + 0xc4]
jne 0x10030fb8
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030f72
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x18], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10031002
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030ff8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316ca
jmp 0x10030ff8
mov eax, dword [ebp - 0x50]
jmp 0x10030fc1
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov byte [ebp - 0x3c], 0x16
mov cl, 0x62
xor cl, byte [ebp - 0x3c]
mov al, 0x74
xor al, byte [ebp - 0x3c]
mov ch, 0x7b
mov byte [ebp - 0x3b], al
mov dl, 0x78
mov byte [ebp - 0x3a], cl
mov dh, 0x77
mov cl, byte [ebp - 0x3c]
mov ah, 0x49
mov byte [ebp - 0x2e], 0x71
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x7f
mov byte [ebp - 0x35], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x49], 0x75
mov byte [ebp - 0x34], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x37], ch
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10031080
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003110d
test esi, esi
je 0x1003110d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003110d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003110d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x100310cd
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x100310f9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100310e2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10031141
cmp edi, dword [esi + 0xc4]
jne 0x10031106
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x100310c0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x1c], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10031150
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10031146
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316cf
jmp 0x10031146
mov eax, dword [ebp - 0x50]
jmp 0x1003110f
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov byte [ebp - 0x3c], 0x48
mov cl, 0x3c
xor cl, byte [ebp - 0x3c]
mov al, 0x2a
xor al, byte [ebp - 0x3c]
mov ch, 0x3a
mov byte [ebp - 0x3b], al
mov dl, 0x26
mov byte [ebp - 0x2e], ch
mov dh, 0x29
mov al, byte [ebp - 0x2e]
mov ah, 0x17
mov byte [ebp - 0x3a], cl
xorps xmm0, xmm0
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x2d], 0x2d
xor dl, cl
mov byte [ebp - 0x35], al
mov al, byte [ebp - 0x2d]
xor ch, cl
xor dh, cl
mov byte [ebp - 0x37], ch
xor ah, cl
mov byte [ebp - 0x33], 0
xor al, cl
mov byte [ebp - 0x39], dl
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x36], dh
mov byte [ebp - 0x38], ah
lea edx, [ecx + 1]
mov byte [ebp - 0x34], al
mov byte [ebp - 0x33], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100311c0
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003124d
test esi, esi
je 0x1003124d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003124d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003124d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003120d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10031239
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10031222
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10031281
cmp edi, dword [esi + 0xc4]
jne 0x10031246
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10031200
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x20], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10031290
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10031286
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316d4
jmp 0x10031286
mov eax, dword [ebp - 0x50]
jmp 0x1003124f
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov dl, 0xf
mov dword [ebp - 0x40], 0x617b6d0f
mov dword [ebp - 0x3c], 0x687f7a50
xor ecx, ecx
mov dword [ebp - 0x38], 0x6a6b6e7d
mov byte [ebp - 0x34], 0
nop dword [eax]
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x100312c1
mov dl, byte [ebp - 0x40]
jmp 0x100312b0
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100312e0
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x1003136d
test esi, esi
je 0x1003136d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003136d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003136d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003132d
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10031359
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10031342
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100313a1
cmp edi, dword [esi + 0xc4]
jne 0x10031366
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10031320
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x24], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100313b0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100313a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316d9
jmp 0x100313a6
mov eax, dword [ebp - 0x50]
jmp 0x1003136f
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov byte [ebp - 0x40], 0x22
mov cl, 0x56
xor cl, byte [ebp - 0x40]
mov al, 0x40
xor al, byte [ebp - 0x40]
mov ch, 0x57
mov byte [ebp - 0x3f], al
mov dl, 0x4c
mov byte [ebp - 0x3e], cl
mov dh, dl
mov cl, byte [ebp - 0x40]
mov ah, 0x7d
mov byte [ebp - 0x2e], 0x4b
xor dl, cl
mov al, byte [ebp - 0x2e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x2d], 0x53
mov byte [ebp - 0x39], al
xor ah, cl
mov al, byte [ebp - 0x2d]
xorps xmm0, xmm0
xor al, cl
mov byte [ebp - 0x49], ch
mov byte [ebp - 0x38], al
xor ch, cl
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x51], 0x47
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x51]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10031435
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002570
cmp dword [ebp - 0x18], 0
je 0x100314be
test esi, esi
je 0x100314be
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100314be
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100314be
cmp edi, dword [esi + 0xc4]
jne 0x1003147e
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x100314aa
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10031493
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100314f2
cmp edi, dword [esi + 0xc4]
jne 0x100314b7
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10031471
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10031501
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100314f7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316de
jmp 0x100314f7
mov eax, dword [ebp - 0x50]
jmp 0x100314c0
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov cl, 0x33
mov byte [ebp - 0x3c], 0x47
mov byte [ebp - 0x49], cl
mov al, 0x25
xor al, byte [ebp - 0x3c]
mov ch, 0x24
xor cl, byte [ebp - 0x3c]
mov dl, 0x29
mov byte [ebp - 0x3b], al
mov dh, 0x35
mov byte [ebp - 0x3a], cl
mov ah, 0x18
mov cl, byte [ebp - 0x3c]
xorps xmm0, xmm0
mov byte [ebp - 0x2e], 0x26
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x21
mov byte [ebp - 0x35], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x37], ch
mov byte [ebp - 0x34], al
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10031583
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0xac]
call fcn.10002570
cmp dword [ebp - 0x9c], 0
je 0x1003161b
test esi, esi
je 0x1003161b
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003161b
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003161b
cmp edi, dword [esi + 0xc4]
jne 0x100315d2
call fcn.10084b0f
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10031607
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100315e7
mov ecx, dword [ecx]
cmp dword [ebp - 0x98], 0xf
lea eax, [ebp - 0xac]
cmova eax, dword [ebp - 0xac]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10031655
cmp edi, dword [esi + 0xc4]
jne 0x10031614
call fcn.10084b0f
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x100315c5
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x2c], eax
mov ecx, dword [ebp - 0x98]
cmp ecx, 0xf
jbe 0x10031664
mov edx, dword [ebp - 0xac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003165a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100316e3
jmp 0x1003165a
mov eax, dword [ebp - 0x50]
jmp 0x1003161d
push ecx
push edx
call fcn.1007fa16
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007f9b5
mov esp, ebp
pop ebp
ret
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
call fcn.10084b1f
int3