Function at 0x10080ea0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
mov ebx, ecx
mov dword [ebp - 0x10], 0x57454624
push esi
push edi
mov dword [ebp - 0x38], ebx
mov dl, 0x24
mov dword [ebp - 0xc], 0x48477b41
xor ecx, ecx
mov word [ebp - 8], 0x4a45
mov byte [ebp - 6], 0
nop word [eax + eax]
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 9
jae 0x10080edf
mov dl, byte [ebp - 0x10]
jmp 0x10080ed0
xorps xmm0, xmm0
mov byte [ebp - 6], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10080f05
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
je 0x10080f99
test ebx, ebx
je 0x10080f99
push 4
push ebx
call esi
test eax, eax
jne 0x10080f99
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10080f93
cmp esi, dword [ebx + 0xc4]
jne 0x10080f52
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x10080f7f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10080f64
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100815d0
cmp esi, dword [ebx + 0xc4]
jne 0x10080f8c
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10080f45
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 4], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ee6f0]
add esp, 8
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 0
xor ecx, ecx
nop
mov al, byte [ebp + ecx - 0x13]
xor al, byte [ebp - 0x14]
mov byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 0xf
jb 0x10080fd0
xorps xmm0, xmm0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10081007
sub ecx, edx
lea eax, [ebp - 0x13]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x1008108c
test ebx, ebx
je 0x1008108c
push 4
push ebx
call esi
test eax, eax
jne 0x1008108c
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1008108c
cmp esi, dword [ebx + 0xc4]
jne 0x1008104f
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x10081078
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10081061
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1008108e
cmp esi, dword [ebx + 0xc4]
jne 0x10081085
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081042
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 8], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
movaps xmm0, xmmword [str.4G_FkWXUZkZUYQk]
add esp, 8
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 0
xor ecx, ecx
mov al, byte [ebp + ecx - 0x13]
xor al, byte [ebp - 0x14]
mov byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 0xf
jb 0x100810c2
xorps xmm0, xmm0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10081100
sub ecx, edx
lea eax, [ebp - 0x13]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x1008118a
test ebx, ebx
je 0x1008118a
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1008118a
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1008118a
nop
cmp esi, dword [ebx + 0xc4]
jne 0x1008114d
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x10081176
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1008115f
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1008118c
cmp esi, dword [ebx + 0xc4]
jne 0x10081183
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081140
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0xc], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ee970]
add esp, 8
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], 0x56
xor ecx, ecx
mov al, byte [ebp + ecx - 0x13]
xor al, byte [ebp - 0x14]
mov byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 0x10
jb 0x100811c2
xorps xmm0, xmm0
mov byte [ebp - 3], 0
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10081200
sub ecx, edx
lea eax, [ebp - 0x13]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x1008128a
test ebx, ebx
je 0x1008128a
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1008128a
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1008128a
nop
cmp esi, dword [ebx + 0xc4]
jne 0x1008124d
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x10081276
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1008125f
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1008128c
cmp esi, dword [ebx + 0xc4]
jne 0x10081283
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081240
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0x10], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
movaps xmm0, xmmword [0x100eeaa0]
add esp, 8
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], 0x2d
xor ecx, ecx
mov al, byte [ebp + ecx - 0x13]
xor al, byte [ebp - 0x14]
mov byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 0x10
jb 0x100812c2
xorps xmm0, xmm0
mov byte [ebp - 3], 0
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10081300
sub ecx, edx
lea eax, [ebp - 0x13]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x1008138a
test ebx, ebx
je 0x1008138a
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1008138a
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1008138a
nop
cmp esi, dword [ebx + 0xc4]
jne 0x1008134d
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x10081376
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1008135f
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1008138c
cmp esi, dword [ebx + 0xc4]
jne 0x10081383
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081340
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0x14], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ee7d0]
add esp, 8
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 0
xor ecx, ecx
mov al, byte [ebp + ecx - 0x13]
xor al, byte [ebp - 0x14]
mov byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 0xf
jb 0x100813c0
xorps xmm0, xmm0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100813f7
sub ecx, edx
lea eax, [ebp - 0x13]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x10081480
test ebx, ebx
je 0x10081480
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10081480
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10081480
cmp esi, dword [ebx + 0xc4]
jne 0x10081443
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1008146c
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10081455
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10081482
cmp esi, dword [ebx + 0xc4]
jne 0x10081479
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081436
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0x18], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
movaps xmm0, xmmword [0x100ef020]
add esp, 8
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 0
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x13]
xor al, byte [ebp - 0x14]
mov byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 0xf
jb 0x100814c0
xorps xmm0, xmm0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100814f7
sub ecx, edx
lea eax, [ebp - 0x13]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x10081580
test ebx, ebx
je 0x10081580
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10081580
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10081580
cmp esi, dword [ebx + 0xc4]
jne 0x10081543
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1008156c
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10081555
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10081582
cmp esi, dword [ebx + 0xc4]
jne 0x10081579
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081536
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0x1c], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0x10], 0x414b4f26
mov dl, 0x26
mov dword [ebp - 0xc], 0x50424779
mov word [ebp - 8], 0x1779
xor ecx, ecx
mov byte [ebp - 6], 0
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 9
jae 0x100815db
mov dl, byte [ebp - 0x10]
jmp 0x100815c1
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
jmp 0x10080f9b
xorps xmm0, xmm0
mov byte [ebp - 6], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10081601
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x1008168a
test ebx, ebx
je 0x1008168a
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1008168a
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1008168a
cmp esi, dword [ebx + 0xc4]
jne 0x1008164d
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x10081676
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1008165f
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1008168c
cmp esi, dword [ebx + 0xc4]
jne 0x10081683
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081640
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0x20], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0x10], 0x111b1f76
mov dl, 0x76
mov dword [ebp - 0xc], 0x121729
mov word [ebp - 8], 0x4429
xor ecx, ecx
mov byte [ebp - 6], 0
nop dword [eax + eax]
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 9
jae 0x100816df
mov dl, byte [ebp - 0x10]
jmp 0x100816d0
xorps xmm0, xmm0
mov byte [ebp - 6], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10081705
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x1008178e
test ebx, ebx
je 0x1008178e
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1008178e
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1008178e
cmp esi, dword [ebx + 0xc4]
jne 0x10081751
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x1008177a
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10081763
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10081790
cmp esi, dword [ebx + 0xc4]
jne 0x10081787
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081744
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0x24], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
mov esi, dword [ebx + 0x20]
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test esi, esi
je 0x100817d2
push 4
push esi
call edi
test eax, eax
jne 0x100817d2
push eax
mov ecx, esi
call dword [0x100ec604]
mov esi, dword [ebx + 0x24]
test esi, esi
je 0x100817eb
push 4
push esi
call edi
test eax, eax
jne 0x100817eb
push eax
mov ecx, esi
call dword [0x100ec604]
mov dl, 0x6d
mov dword [ebp - 0x10], 0x1e0c0f6d
mov dword [ebp - 0xc], 0x4193208
xor ecx, ecx
mov word [ebp - 8], 0x800
mov byte [ebp - 6], 0
xor byte [ebp + ecx - 0xf], dl
inc ecx
cmp ecx, 9
jae 0x10081816
mov dl, byte [ebp - 0x10]
jmp 0x10081807
xorps xmm0, xmm0
mov byte [ebp - 6], 0
lea ecx, [ebp - 0xf]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10081840
sub ecx, edx
lea eax, [ebp - 0xf]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 4]
je 0x100818ca
test ebx, ebx
je 0x100818ca
push 4
push ebx
call edi
test eax, eax
jne 0x100818ca
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100818ca
nop dword [eax + eax]
cmp esi, dword [ebx + 0xc4]
jne 0x1008188d
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x100818b6
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1008189f
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100818cc
cmp esi, dword [ebx + 0xc4]
jne 0x100818c3
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081880
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0x28], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
add esp, 8
mov dword [ebp - 0xc], 0x64626516
mov dl, 0x16
mov dword [ebp - 8], 0x7b7f6249
mov word [ebp - 4], 0x73
xor ecx, ecx
xor byte [ebp + ecx - 0xb], dl
inc ecx
cmp ecx, 8
jae 0x10081916
mov dl, byte [ebp - 0xc]
jmp 0x10081907
xorps xmm0, xmm0
mov byte [ebp - 3], 0
lea ecx, [ebp - 0xb]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10081940
sub ecx, edx
lea eax, [ebp - 0xb]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.10003370
cmp dword [ebp - 0x20], 0
mov ebx, dword [ebx + 0x28]
je 0x100819ca
test ebx, ebx
je 0x100819ca
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100819ca
mov eax, dword [ebx + 0xc4]
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100819ca
nop
cmp esi, dword [ebx + 0xc4]
jne 0x1008198d
call fcn.1008fe40
mov edi, dword [esi + 8]
test edi, edi
je 0x100819b6
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1008199f
mov ecx, dword [ecx]
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100819cc
cmp esi, dword [ebx + 0xc4]
jne 0x100819c3
call fcn.1008fe40
mov esi, dword [esi]
cmp esi, dword [ebp - 0x18]
jne 0x10081980
xor edi, edi
mov ebx, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov dword [ebx + 0x2c], edi
call fcn.10002f50
mov eax, dword [ebp - 0x34]
push 8
push eax
mov dword [ebp - 0x34], 0
call fcn.10089370
mov esi, dword [ebx + 0x28]
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test esi, esi
je 0x10081a0e
push 4
push esi
call edi
test eax, eax
jne 0x10081a0e
push eax
mov ecx, esi
call dword [0x100ec604]
mov esi, dword [ebx]
test esi, esi
je 0x10081a27
push 4
push esi
call edi
test eax, eax
jne 0x10081a27
push 0x14
mov ecx, esi
call dword [0x100ec610]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret