Function at 0x1002ee70
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009e2d5
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x100b7040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x60], esi
call fcn.10033300
mov dl, 0x6b
mov dword [ebp - 0x40], 0x4190c6b
mov dword [ebp - 0x3c], 0x4341b1e
xor ecx, ecx
mov dword [ebp - 0x38], 0x4021f1b
mov word [ebp - 0x34], 5
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x1002eed7
mov dl, byte [ebp - 0x40]
jmp 0x1002eec6
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x84], 0
movups xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x80], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ef00
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x94]
call fcn.10002540
cmp dword [ebp - 0x84], 0
mov edi, dword [esi + 0x30]
je 0x1002ef98
test edi, edi
je 0x1002ef98
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002ef98
mov eax, dword [edi + 0xc4]
mov dword [ebp - 0x58], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1002ef98
cmp esi, dword [edi + 0xc4]
jne 0x1002ef52
call fcn.10084bcf
mov eax, dword [esi + 8]
mov dword [ebp - 0x64], eax
test eax, eax
je 0x1002ef84
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002ef67
mov ecx, dword [ecx]
cmp dword [ebp - 0x80], 0xf
lea eax, [ebp - 0x94]
cmova eax, dword [ebp - 0x94]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002efcc
cmp esi, dword [edi + 0xc4]
jne 0x1002ef91
call fcn.10084bcf
mov esi, dword [esi]
cmp esi, dword [ebp - 0x58]
jne 0x1002ef45
xor esi, esi
mov dword [ebp - 0x64], esi
mov ecx, dword [ebp - 0x80]
cmp ecx, 0xf
jbe 0x1002efdb
mov edx, dword [ebp - 0x94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002efd1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309cf
jmp 0x1002efd1
mov esi, dword [ebp - 0x64]
jmp 0x1002ef9d
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100aedf0]
xor ecx, ecx
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0xd190b02
mov word [ebp - 0x34], 0x90b
mov byte [ebp - 0x32], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x15
jb 0x1002f011
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f040
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002540
cmp dword [ebp - 0x6c], 0
je 0x1002f0cd
test esi, esi
je 0x1002f0cd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f0cd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x58], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f0cd
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f08d
call fcn.10084bcf
mov esi, dword [edi + 8]
test esi, esi
je 0x1002f0b6
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x1002f09f
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f0cf
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x1002f0c6
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x58]
jne 0x1002f080
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x1002f103
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f0f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309d4
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [str.6TBXiE__ZZiWDSW]
xor ecx, ecx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
movups xmmword [ebp - 0x44], xmm0
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0xe
jb 0x1002f122
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f150
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002f1dd
test esi, esi
je 0x1002f1dd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f1dd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x58], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f1dd
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f19d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x1002f1c9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f1b2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f210
cmp edi, dword [esi + 0xc4]
jne 0x1002f1d6
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x58]
jne 0x1002f190
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002f21f
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f215
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309d9
jmp 0x1002f215
mov eax, dword [ebp - 0x50]
jmp 0x1002f1df
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov eax, dword [ebp - 0x60]
cmp dword [eax], 0
je 0x1002f235
cmp dword [0x100b8fd4], 1
sete byte [0x100baa87]
movaps xmm0, xmmword [0x100afb80]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x7b6c6a
nop dword [eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x12
jb 0x1002f250
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f280
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002f30d
test esi, esi
je 0x1002f30d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f30d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f30d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f2cd
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002f2f9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f2e2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f341
cmp edi, dword [esi + 0xc4]
jne 0x1002f306
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002f2c0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002f350
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f346
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309de
jmp 0x1002f346
mov eax, dword [ebp - 0x58]
jmp 0x1002f30f
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100af7b0]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x475d465c
mov byte [ebp - 0x34], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x13
jb 0x1002f368
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f394
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002f41d
test esi, esi
je 0x1002f41d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f41d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f41d
cmp edi, dword [esi + 0xc4]
jne 0x1002f3dd
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002f409
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f3f2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f451
cmp edi, dword [esi + 0xc4]
jne 0x1002f416
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002f3d0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x34], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002f460
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f456
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309e3
jmp 0x1002f456
mov eax, dword [ebp - 0x58]
jmp 0x1002f41f
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov eax, dword [ebp - 0x60]
mov edi, dword [eax + 0x34]
test edi, edi
je 0x1002f49c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f49c
mov edi, dword [edi + 0x124]
test edi, edi
je 0x1002f49c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f49c
push 0x1388
push eax
mov ecx, edi
call dword [0x100ae598]
movaps xmm0, xmmword [0x100afd50]
xor ecx, ecx
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x70
nop
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0x10
jb 0x1002f4b0
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f4e0
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002f56d
test esi, esi
je 0x1002f56d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f56d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f56d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f52d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002f559
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f542
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f5a1
cmp edi, dword [esi + 0xc4]
jne 0x1002f566
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002f520
xor eax, eax
mov edi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0x38], eax
cmp ecx, 0xf
jbe 0x1002f5b0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f5a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309e8
jmp 0x1002f5a6
mov eax, dword [ebp - 0x58]
jmp 0x1002f56f
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov edi, dword [edi + 0x38]
test edi, edi
je 0x1002f5e6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f5e6
mov edi, dword [edi + 0x124]
test edi, edi
je 0x1002f5e6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f5e6
push 0x17
push eax
mov ecx, edi
call dword [0x100ae598]
mov dl, 0x2a
mov dword [ebp - 0x40], 0x5e525e2a
mov dword [ebp - 0x3c], 0x474b4d75
xor ecx, ecx
mov dword [ebp - 0x38], 0x435e754f
mov word [ebp - 0x34], 0x4f47
mov byte [ebp - 0x32], 0
nop dword [eax]
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xd
jae 0x1002f621
mov dl, byte [ebp - 0x40]
jmp 0x1002f610
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f640
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002f6cd
test esi, esi
je 0x1002f6cd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f6cd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f6cd
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f68d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002f6b9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f6a2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f701
cmp edi, dword [esi + 0xc4]
jne 0x1002f6c6
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002f680
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x3c], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002f710
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f706
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309ed
jmp 0x1002f706
mov eax, dword [ebp - 0x58]
jmp 0x1002f6cf
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100af0a0]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x33242221
mov byte [ebp - 0x34], 0
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x13
jb 0x1002f728
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f754
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002540
cmp dword [ebp - 0x6c], 0
je 0x1002f7e0
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x1002f7e0
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f7e0
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f7e0
cmp edi, dword [esi + 0xc4]
jne 0x1002f7a0
call fcn.10084bcf
mov esi, dword [edi + 8]
test esi, esi
je 0x1002f7c9
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x1002f7b2
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f7e2
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x1002f7d9
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002f793
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x1002f816
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f80c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309f2
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100afc20]
xor ecx, ecx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x797b7b
nop dword [eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x12
jb 0x1002f840
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f870
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002f8fd
test esi, esi
je 0x1002f8fd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002f8fd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002f8fd
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002f8bd
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002f8e9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f8d2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002f931
cmp edi, dword [esi + 0xc4]
jne 0x1002f8f6
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002f8b0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x40], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002f940
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002f936
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309f7
jmp 0x1002f936
mov eax, dword [ebp - 0x58]
jmp 0x1002f8ff
push ecx
push edx
call fcn.1007fa46
add esp, 8
movaps xmm0, xmmword [0x100af270]
xor ecx, ecx
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x2022
mov byte [ebp - 0x32], 0
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0x11
jb 0x1002f957
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002f983
sub ecx, edx
lea eax, [ebp - 0x43]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002fa0d
test esi, esi
je 0x1002fa0d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fa0d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fa0d
nop
cmp edi, dword [esi + 0xc4]
jne 0x1002f9cd
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002f9f9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002f9e2
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fa41
cmp edi, dword [esi + 0xc4]
jne 0x1002fa06
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002f9c0
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x44], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002fa50
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fa46
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309fc
jmp 0x1002fa46
mov eax, dword [ebp - 0x58]
jmp 0x1002fa0f
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov eax, dword [ebp - 0x60]
mov edi, dword [eax + 0x40]
test edi, edi
je 0x1002fa89
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fa89
mov edi, dword [edi + 0x124]
test edi, edi
je 0x1002fa89
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fa89
push 0xa
push eax
mov ecx, edi
call dword [0x100ae598]
mov dl, 0x23
mov dword [ebp - 0x40], 0x4d574123
mov dword [ebp - 0x3c], 0x4257507c
xor ecx, ecx
mov dword [ebp - 0x38], 0x577c4657
mov word [ebp - 0x34], 0x53
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x1002fab9
mov dl, byte [ebp - 0x40]
jmp 0x1002faa8
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fad8
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002fb61
test esi, esi
je 0x1002fb61
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fb61
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x50], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fb61
cmp edi, dword [esi + 0xc4]
jne 0x1002fb21
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x58], eax
test eax, eax
je 0x1002fb4d
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002fb36
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fb95
cmp edi, dword [esi + 0xc4]
jne 0x1002fb5a
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x50]
jne 0x1002fb14
xor eax, eax
mov esi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
mov dword [esi + 8], eax
cmp ecx, 0xf
jbe 0x1002fba4
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fb9a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a01
jmp 0x1002fb9a
mov eax, dword [ebp - 0x58]
jmp 0x1002fb63
push ecx
push edx
call fcn.1007fa46
add esp, 8
cmp dword [esi + 8], 0
je 0x1002fd1d
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push 0x1000
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x1c], xmm0
movups xmmword [ebp - 0x2c], xmm0
call fcn.1000c0b0
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x18]
mov esi, edx
mov ecx, dword [ebp - 0x1c]
sub esi, ecx
mov dword [ebp - 0x2c], vtable.Packet.0
cmp esi, 0x989680
ja 0x1002fc32
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x1002fc22
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x1002fc0b
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000c160
jmp 0x1002fc1f
sub edi, esi
push edi
push 0
push edx
lea esi, [edx + edi]
call fcn.10081b50
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov byte [ecx + eax], 0xa1
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov esi, edx
mov dword [ebp - 4], 1
sub esi, ecx
cmp esi, 0x989680
ja 0x1002fc89
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x1002fc79
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x1002fc62
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000c160
jmp 0x1002fc76
sub edi, esi
push edi
push 0
push edx
lea esi, [edi + edx]
call fcn.10081b50
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov byte [ecx + eax], 0xab
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov al, byte [0x100b8fd0]
mov esi, edx
sub esi, ecx
mov byte [ebp - 0x51], al
cmp esi, 0x989680
ja 0x1002fce3
mov edi, dword [ebp - 0x20]
inc edi
cmp esi, edi
jae 0x1002fcd1
mov eax, dword [ebp - 0x14]
sub eax, ecx
cmp edi, eax
jbe 0x1002fcba
push ecx
push edi
lea ecx, [ebp - 0x1c]
call fcn.1000c160
jmp 0x1002fcce
sub edi, esi
push edi
push 0
push edx
lea esi, [edi + edx]
call fcn.10081b50
add esp, 0xc
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dl, byte [ebp - 0x51]
mov byte [ecx + eax], dl
inc dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
sub edx, ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x50], edx
cmp edx, 0x4000
ja 0x1002fd0e
mov eax, dword [0x100baa4c]
mov dword [ebp - 0x5c], eax
mov ecx, dword ds:[0x100a9094]
mov ecx, dword ds:[ecx]
push dword [ebp - 0x50]
push dword [ebp - 0x58]
call dword [ebp - 0x5c]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
call fcn.1000c300
movaps xmm0, xmmword [0x100afb10]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x696e7368
mov word [ebp - 0x34], 0x60
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x14
jb 0x1002fd37
xorps xmm0, xmm0
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fd63
sub ecx, edx
lea eax, [ebp - 0x47]
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10002540
cmp dword [ebp - 0x6c], 0
je 0x1002fdef
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x1002fdef
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002fdef
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002fdef
cmp edi, dword [esi + 0xc4]
jne 0x1002fdaf
call fcn.10084bcf
mov esi, dword [edi + 8]
test esi, esi
je 0x1002fdd8
cmp dword [esi + 0x78], 0x10
lea ecx, [esi + 0x64]
jb 0x1002fdc1
mov ecx, dword [ecx]
cmp dword [ebp - 0x68], 0xf
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002fdf1
mov esi, dword [ebp - 0x64]
cmp edi, dword [esi + 0xc4]
jne 0x1002fde8
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x1002fda2
xor esi, esi
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x1002fe25
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002fe1b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a06
push ecx
push edx
call fcn.1007fa46
add esp, 8
xor cl, cl
mov byte [ebp - 0x40], 0x74
mov byte [ebp - 0x35], cl
mov al, 0x16
xor al, byte [ebp - 0x40]
mov dl, 0x1a
xor cl, byte [ebp - 0x40]
mov ch, 3
mov byte [ebp - 0x3f], al
mov dh, 0x11
mov byte [ebp - 0x3e], cl
mov ah, 0x2b
mov cl, byte [ebp - 0x40]
xorps xmm0, xmm0
mov byte [ebp - 0x51], 0x15
xor ch, cl
mov al, byte [ebp - 0x51]
xor dh, cl
xor al, cl
mov byte [ebp - 0x49], 4
mov byte [ebp - 0x39], al
xor ah, cl
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x2d], 0x1b
mov byte [ebp - 0x38], al
mov al, byte [ebp - 0x2d]
xor al, cl
mov byte [ebp - 0x2e], dl
xor dl, cl
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x2e]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002fec0
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1002ff4d
test esi, esi
je 0x1002ff4d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002ff4d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1002ff4d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1002ff0d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x1002ff39
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x1002ff22
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1002ff81
cmp edi, dword [esi + 0xc4]
jne 0x1002ff46
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x1002ff00
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002ff90
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002ff86
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a0b
jmp 0x1002ff86
mov eax, dword [ebp - 0x50]
jmp 0x1002ff4f
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov byte [ebp - 0x3c], 0xf
mov cl, 0x7b
xor cl, byte [ebp - 0x3c]
mov al, 0x6d
xor al, byte [ebp - 0x3c]
mov dh, 0x7d
mov byte [ebp - 0x3b], al
mov ch, 0x6e
mov byte [ebp - 0x3a], cl
mov dl, 0x61
mov cl, byte [ebp - 0x3c]
mov ah, 0x50
mov byte [ebp - 0x2e], 0x62
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x60
mov byte [ebp - 0x35], al
xor ah, cl
mov al, byte [ebp - 0x2d]
xorps xmm0, xmm0
xor al, cl
mov byte [ebp - 0x49], dh
xor dh, cl
mov byte [ebp - 0x34], al
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x37], ch
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030010
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1003009d
test esi, esi
je 0x1003009d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003009d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003009d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003005d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030089
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030072
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100300d1
cmp edi, dword [esi + 0xc4]
jne 0x10030096
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030050
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100300e0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100300d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a10
jmp 0x100300d6
mov eax, dword [ebp - 0x50]
jmp 0x1003009f
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov dl, 0x3e
mov dword [ebp - 0x40], 0x504a5c3e
mov dword [ebp - 0x3c], 0x5d5d5f61
xor ecx, ecx
mov dword [ebp - 0x38], 0x514d4d5b
mov word [ebp - 0x34], 0x474c
mov byte [ebp - 0x32], 0
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xd
jae 0x10030114
mov dl, byte [ebp - 0x40]
jmp 0x10030103
xorps xmm0, xmm0
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030133
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x100301bd
test esi, esi
je 0x100301bd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100301bd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100301bd
nop
cmp edi, dword [esi + 0xc4]
jne 0x1003017d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x100301a9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030192
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100301f1
cmp edi, dword [esi + 0xc4]
jne 0x100301b6
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030170
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030200
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100301f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a15
jmp 0x100301f6
mov eax, dword [ebp - 0x50]
jmp 0x100301bf
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov byte [ebp - 0x40], 0x45
mov cl, 0x31
xor cl, byte [ebp - 0x40]
mov al, 0x27
xor al, byte [ebp - 0x40]
mov dl, 0x2b
mov byte [ebp - 0x3f], al
mov ch, dl
mov byte [ebp - 0x3e], cl
mov dh, 0x2a
mov cl, byte [ebp - 0x40]
mov ah, 0x1a
mov byte [ebp - 0x2e], 0x37
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x28
mov byte [ebp - 0x39], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x49], 0x24
mov byte [ebp - 0x38], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x51], 0x29
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x51]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030286
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1003030f
test esi, esi
je 0x1003030f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003030f
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003030f
cmp edi, dword [esi + 0xc4]
jne 0x100302cf
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x100302fb
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100302e4
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030343
cmp edi, dword [esi + 0xc4]
jne 0x10030308
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x100302c2
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x18], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030352
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030348
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a1a
jmp 0x10030348
mov eax, dword [ebp - 0x50]
jmp 0x10030311
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov byte [ebp - 0x3c], 0x3e
mov cl, 0x4a
xor cl, byte [ebp - 0x3c]
mov al, 0x5c
xor al, byte [ebp - 0x3c]
mov ch, 0x53
mov byte [ebp - 0x3b], al
mov dl, 0x50
mov byte [ebp - 0x3a], cl
mov dh, 0x5f
mov cl, byte [ebp - 0x3c]
mov ah, 0x61
mov byte [ebp - 0x2e], 0x59
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x57
mov byte [ebp - 0x35], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x49], 0x5d
mov byte [ebp - 0x34], al
xorps xmm0, xmm0
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x37], ch
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100303d0
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1003045d
test esi, esi
je 0x1003045d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003045d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003045d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003041d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030449
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030432
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030491
cmp edi, dword [esi + 0xc4]
jne 0x10030456
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030410
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x1c], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100304a0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030496
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a1f
jmp 0x10030496
mov eax, dword [ebp - 0x50]
jmp 0x1003045f
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov byte [ebp - 0x3c], 0x1b
mov cl, 0x6f
xor cl, byte [ebp - 0x3c]
mov al, 0x79
xor al, byte [ebp - 0x3c]
mov ch, 0x69
mov byte [ebp - 0x3b], al
mov dl, 0x75
mov byte [ebp - 0x2e], ch
mov dh, 0x7a
mov al, byte [ebp - 0x2e]
mov ah, 0x44
mov byte [ebp - 0x3a], cl
xorps xmm0, xmm0
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x2d], 0x7e
xor dl, cl
mov byte [ebp - 0x35], al
mov al, byte [ebp - 0x2d]
xor ch, cl
xor dh, cl
mov byte [ebp - 0x37], ch
xor ah, cl
mov byte [ebp - 0x33], 0
xor al, cl
mov byte [ebp - 0x39], dl
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x36], dh
mov byte [ebp - 0x38], ah
lea edx, [ecx + 1]
mov byte [ebp - 0x34], al
mov byte [ebp - 0x33], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030510
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1003059d
test esi, esi
je 0x1003059d
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003059d
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003059d
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003055d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030589
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030572
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100305d1
cmp edi, dword [esi + 0xc4]
jne 0x10030596
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030550
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x20], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100305e0
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100305d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a24
jmp 0x100305d6
mov eax, dword [ebp - 0x50]
jmp 0x1003059f
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov dl, 0x74
mov dword [ebp - 0x40], 0x1a001674
mov dword [ebp - 0x3c], 0x1304012b
xor ecx, ecx
mov dword [ebp - 0x38], 0x11101506
mov byte [ebp - 0x34], 0
nop dword [eax]
lea eax, [ebp - 0x3f]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10030611
mov dl, byte [ebp - 0x40]
jmp 0x10030600
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
lea ecx, [ebp - 0x3f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030630
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x100306bd
test esi, esi
je 0x100306bd
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100306bd
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x100306bd
nop dword [eax]
cmp edi, dword [esi + 0xc4]
jne 0x1003067d
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x100306a9
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030692
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100306f1
cmp edi, dword [esi + 0xc4]
jne 0x100306b6
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030670
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x24], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030700
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100306f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a29
jmp 0x100306f6
mov eax, dword [ebp - 0x50]
jmp 0x100306bf
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov byte [ebp - 0x40], 0xa
mov cl, 0x7e
xor cl, byte [ebp - 0x40]
mov al, 0x68
xor al, byte [ebp - 0x40]
mov ch, 0x7f
mov byte [ebp - 0x3f], al
mov dl, 0x64
mov byte [ebp - 0x3e], cl
mov dh, dl
mov cl, byte [ebp - 0x40]
mov ah, 0x55
mov byte [ebp - 0x2e], 0x63
xor dl, cl
mov al, byte [ebp - 0x2e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x2d], 0x7b
mov byte [ebp - 0x39], al
xor ah, cl
mov al, byte [ebp - 0x2d]
xorps xmm0, xmm0
xor al, cl
mov byte [ebp - 0x49], ch
mov byte [ebp - 0x38], al
xor ch, cl
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x51], 0x6f
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x51]
xor al, cl
mov byte [ebp - 0x3b], ch
lea ecx, [ebp - 0x3f]
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x3d], dl
mov byte [ebp - 0x3a], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x3c], ah
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10030785
sub ecx, edx
lea eax, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10002540
cmp dword [ebp - 0x18], 0
je 0x1003080e
test esi, esi
je 0x1003080e
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003080e
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003080e
cmp edi, dword [esi + 0xc4]
jne 0x100307ce
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x100307fa
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x100307e3
mov ecx, dword [ecx]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10030842
cmp edi, dword [esi + 0xc4]
jne 0x10030807
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x100307c1
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10030851
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030847
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a2e
jmp 0x10030847
mov eax, dword [ebp - 0x50]
jmp 0x10030810
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov cl, 0x2d
mov byte [ebp - 0x3c], 0x59
mov byte [ebp - 0x49], cl
mov al, 0x3b
xor al, byte [ebp - 0x3c]
mov ch, 0x3a
xor cl, byte [ebp - 0x3c]
mov dl, 0x37
mov byte [ebp - 0x3b], al
mov dh, 0x2b
mov byte [ebp - 0x3a], cl
mov ah, 6
mov cl, byte [ebp - 0x3c]
xorps xmm0, xmm0
mov byte [ebp - 0x2e], 0x38
xor dl, cl
mov al, byte [ebp - 0x2e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x2d], 0x3f
mov byte [ebp - 0x35], al
xor dh, cl
mov al, byte [ebp - 0x2d]
xor ah, cl
xor al, cl
mov byte [ebp - 0x37], ch
mov byte [ebp - 0x34], al
mov al, byte [ebp - 0x49]
xor al, cl
mov byte [ebp - 0x32], 0
lea ecx, [ebp - 0x3b]
mov byte [ebp - 0x39], dl
mov byte [ebp - 0x36], dh
lea edx, [ecx + 1]
mov byte [ebp - 0x38], ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100308d3
sub ecx, edx
lea eax, [ebp - 0x3b]
push ecx
push eax
lea ecx, [ebp - 0xac]
call fcn.10002540
cmp dword [ebp - 0x9c], 0
je 0x1003096b
test esi, esi
je 0x1003096b
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003096b
mov eax, dword [esi + 0xc4]
mov dword [ebp - 0x5c], eax
mov edi, dword [eax]
cmp edi, eax
je 0x1003096b
cmp edi, dword [esi + 0xc4]
jne 0x10030922
call fcn.10084bcf
mov eax, dword [edi + 8]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x10030957
cmp dword [eax + 0x78], 0x10
lea ecx, [eax + 0x64]
jb 0x10030937
mov ecx, dword [ecx]
cmp dword [ebp - 0x98], 0xf
lea eax, [ebp - 0xac]
cmova eax, dword [ebp - 0xac]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100309a5
cmp edi, dword [esi + 0xc4]
jne 0x10030964
call fcn.10084bcf
mov edi, dword [edi]
cmp edi, dword [ebp - 0x5c]
jne 0x10030915
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov dword [ecx + 0x2c], eax
mov ecx, dword [ebp - 0x98]
cmp ecx, 0xf
jbe 0x100309b4
mov edx, dword [ebp - 0xac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100309aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030a33
jmp 0x100309aa
mov eax, dword [ebp - 0x50]
jmp 0x1003096d
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007f9e5
mov esp, ebp
pop ebp
ret
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
call fcn.10084bdf
int3