Function at 0x10043d80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x88
mov eax, dword [0x100c90c0]
xor eax, esp
mov dword [esp + 0x84], eax
push esi
mov esi, ecx
mov dword [esp + 0xc], 0x7e6c6f0d
push edi
mov dword [esp + 0x38], esi
mov dl, 0xd
mov dword [esp + 0x14], 0x6c795268
xor ecx, ecx
mov dword [esp + 0x18], 0x3c3d667e
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jae 0x10043dd6
mov dl, byte [esp + 0x10]
jmp 0x10043dc3
xorps xmm0, xmm0
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10043e00
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x3c], edi
je 0x10043e9c
test edi, edi
je 0x10043e9c
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10043e9c
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x64], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10043e98
cmp esi, dword [edi + 0xc4]
jne 0x10043e53
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10043e7f
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10043e65
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10043ecf
mov edi, dword [esp + 0x3c]
cmp esi, dword [edi + 0xc4]
jne 0x10043e90
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x64]
jne 0x10043e46
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 4], edi
cmp ecx, 0xf
jbe 0x10043edf
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10043ed5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c4d
jmp 0x10043ed5
mov esi, dword [esp + 0x38]
jmp 0x10043e9e
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [0x100bedb0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xe
jb 0x10043ef0
xorps xmm0, xmm0
mov byte [esp + 0x1f], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10043f22
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x64], edi
je 0x10043fc6
test edi, edi
je 0x10043fc6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10043fc6
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10043fc2
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x10043f7d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10043fa9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10043f8f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10043ff9
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x10043fba
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x10043f70
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 8], edi
cmp ecx, 0xf
jbe 0x10044009
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10043fff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c52
jmp 0x10043fff
mov esi, dword [esp + 0x38]
jmp 0x10043fc8
push ecx
push edx
call fcn.100859f6
add esp, 8
mov byte [esp + 0x64], 0x5b
mov al, 0x28
xor al, byte [esp + 0x64]
mov cl, 0x2f
mov byte [esp + 0x65], al
mov dl, 0x29
mov al, byte [esp + 0x64]
mov ch, 0x3e
mov dh, 0x23
mov byte [esp + 0xe], 0x2b
xor cl, al
mov byte [esp + 0x6c], 0
xor dl, al
mov byte [esp + 0x66], cl
xor ch, al
mov byte [esp + 0x67], dl
xor dh, al
mov byte [esp + 0x69], ch
mov ah, 4
mov byte [esp + 0x6a], dh
xor ah, al
mov byte [esp + 0x6c], 0
mov al, byte [esp + 0xe]
lea ecx, [esp + 0x65]
xor al, byte [esp + 0x64]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [esp + 0x68], ah
mov byte [esp + 0x6b], al
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10044080
sub ecx, edx
lea eax, [esp + 0x65]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x64], edi
je 0x10044126
test edi, edi
je 0x10044126
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044126
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10044122
nop dword [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x100440dd
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10044109
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100440ef
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10044159
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1004411a
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x100440d0
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0xc], edi
cmp ecx, 0xf
jbe 0x10044169
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004415f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c57
jmp 0x1004415f
mov esi, dword [esp + 0x38]
jmp 0x10044128
push ecx
push edx
call fcn.100859f6
add esp, 8
mov byte [esp + 0x10], 0x48
mov cl, 0x29
xor cl, byte [esp + 0x10]
mov al, 0x2a
xor al, byte [esp + 0x10]
mov ch, 0x17
mov byte [esp + 0x11], al
mov dl, 0x3b
mov byte [esp + 0x12], cl
mov dh, 0x3a
mov cl, byte [esp + 0x10]
mov ah, 0x2d
mov byte [esp + 0xe], 0x21
xor dl, cl
mov al, byte [esp + 0xe]
xor ch, cl
xor al, cl
mov byte [esp + 0x63], 0x2f
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x63]
xor ah, cl
xor al, cl
mov byte [esp + 0x37], 0x20
mov byte [esp + 0x18], al
xorps xmm0, xmm0
mov al, byte [esp + 0x37]
xor al, cl
mov byte [esp + 0xf], 0x3c
mov byte [esp + 0x19], al
mov al, byte [esp + 0xf]
xor al, cl
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x11]
mov byte [esp + 0x1b], 0
mov byte [esp + 0x13], dl
mov byte [esp + 0x16], dh
lea edx, [ecx + 1]
mov byte [esp + 0x14], ah
mov byte [esp + 0x1a], al
mov byte [esp + 0x1b], 0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10044210
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 4]
mov dword [esp + 0x64], edi
je 0x100442ad
test edi, edi
je 0x100442ad
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100442ad
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100442a9
cmp esi, dword [edi + 0xc4]
jne 0x10044264
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10044290
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x10044276
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100442e0
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x100442a1
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x10044257
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x10], edi
cmp ecx, 0xf
jbe 0x100442f0
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100442e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c5c
jmp 0x100442e6
mov esi, dword [esp + 0x38]
jmp 0x100442af
push ecx
push edx
call fcn.100859f6
add esp, 8
xor al, al
mov byte [esp + 0xe], al
movzx edi, al
mov cl, 0x72
mov byte [esp + 0x10], 6
mov al, 0x64
xor al, byte [esp + 0x10]
mov dl, 0x68
xor cl, byte [esp + 0x10]
mov ah, 0x59
mov byte [esp + 0x11], al
mov ch, 0x23
mov byte [esp + 0x12], cl
mov dh, 0x28
mov cl, byte [esp + 0x10]
xorps xmm0, xmm0
mov byte [esp + 0xf], 0x34
xor dl, cl
mov al, byte [esp + 0xf]
xor ah, cl
xor al, cl
mov byte [esp + 0x37], 0x62
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x37]
xor ch, cl
xor al, cl
mov byte [esp + 0x13], dl
push edi
sub esp, 0x18
mov byte [esp + 0x32], dh
mov edx, esp
mov byte [esp + 0x31], ch
lea ecx, [esp + 0x2d]
mov byte [esp + 0x30], ah
mov byte [esp + 0x34], al
lea eax, [ecx + 1]
mov byte [esp + 0x35], 0
movups xmmword [edx], xmm0
mov byte [esp + 0x35], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [esp + 0x80], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10044386
sub ecx, dword [esp + 0x80]
lea eax, [esp + 0x2d]
push ecx
push eax
mov ecx, edx
call fcn.10002620
lea eax, [esp + 0x5c]
push eax
call fcn.10005dd0
mov ecx, dword [esi + 0x10]
add esp, 0x20
mov edx, eax
call fcn.1001c410
mov ecx, dword [esp + 0x54]
mov dword [esi + edi*4 + 0x14], eax
cmp ecx, 0xf
jbe 0x100443f2
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100443e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c4d
push ecx
push edx
call fcn.100859f6
add esp, 8
mov al, byte [esp + 0xe]
inc al
mov byte [esp + 0xe], al
cmp al, 8
jb 0x100442f6
movaps xmm0, xmmword [0x100bf9f0]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xf
jb 0x10044417
xorps xmm0, xmm0
mov byte [esp + 0x20], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10044450
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi]
mov dword [esp + 0x64], edi
je 0x100444ec
test edi, edi
je 0x100444ec
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100444ec
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100444e8
cmp esi, dword [edi + 0xc4]
jne 0x100444a3
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x100444cf
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100444b5
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1004451f
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x100444e0
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x10044496
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x34], edi
cmp ecx, 0xf
jbe 0x1004452f
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10044525
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c61
jmp 0x10044525
mov esi, dword [esp + 0x38]
jmp 0x100444ee
push ecx
push edx
call fcn.100859f6
add esp, 8
movaps xmm0, xmmword [str.J9_8]
xor ecx, ecx
movups xmmword [esp + 0x10], xmm0
nop dword [eax]
mov al, byte [esp + 0x10]
xor byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xe
jb 0x10044540
xorps xmm0, xmm0
mov byte [esp + 0x1f], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10044572
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x34]
mov dword [esp + 0x64], edi
je 0x10044616
test edi, edi
je 0x10044616
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044616
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10044612
nop dword [eax]
cmp esi, dword [edi + 0xc4]
jne 0x100445cd
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x100445f9
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x100445df
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10044649
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1004460a
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x100445c0
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x38], edi
cmp ecx, 0xf
jbe 0x10044659
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004464f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c66
jmp 0x1004464f
mov esi, dword [esp + 0x38]
jmp 0x10044618
push ecx
push edx
call fcn.100859f6
add esp, 8
mov byte [esp + 0x64], 0x77
mov al, 4
xor al, byte [esp + 0x64]
mov cl, 3
mov byte [esp + 0x65], al
mov dl, 5
mov al, byte [esp + 0x64]
mov ch, 0x12
mov dh, 0xf
mov byte [esp + 0xf], 7
xor cl, al
mov byte [esp + 0x6c], 0
xor dl, al
mov byte [esp + 0x66], cl
xor ch, al
mov byte [esp + 0x67], dl
xor dh, al
mov byte [esp + 0x69], ch
mov ah, 0x28
mov byte [esp + 0x6a], dh
xor ah, al
mov byte [esp + 0x6c], 0
mov al, byte [esp + 0xf]
lea ecx, [esp + 0x65]
xor al, byte [esp + 0x64]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [esp + 0x68], ah
mov byte [esp + 0x6b], al
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100446d0
sub ecx, edx
lea eax, [esp + 0x65]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x34]
mov dword [esp + 0x64], edi
je 0x10044776
test edi, edi
je 0x10044776
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044776
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x10044772
nop dword [eax + eax]
cmp esi, dword [edi + 0xc4]
jne 0x1004472d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10044759
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004473f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100447a9
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x1004476a
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x10044720
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x3c], edi
cmp ecx, 0xf
jbe 0x100447b9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100447af
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c6b
jmp 0x100447af
mov esi, dword [esp + 0x38]
jmp 0x10044778
push ecx
push edx
call fcn.100859f6
add esp, 8
mov dl, 0x7c
mov dword [esp + 0x10], 0x130e0c7c
mov dword [esp + 0x14], 0xf190e1b
xor ecx, ecx
mov dword [esp + 0x18], 0x419230f
mov word [esp + 0x1c], 0xc
nop dword [eax]
lea eax, [esp + 0x11]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xc
jae 0x100447f3
mov dl, byte [esp + 0x10]
jmp 0x100447e0
xorps xmm0, xmm0
mov byte [esp + 0x1d], 0
lea ecx, [esp + 0x11]
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
lea edx, [ecx + 1]
mov dword [esp + 0x54], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10044817
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.10002620
cmp dword [esp + 0x50], 0
mov edi, dword [esi + 0x34]
mov dword [esp + 0x64], edi
je 0x100448b6
test edi, edi
je 0x100448b6
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100448b6
mov eax, dword [edi + 0xc4]
mov dword [esp + 0x3c], eax
mov esi, dword [eax]
cmp esi, eax
je 0x100448b2
nop
cmp esi, dword [edi + 0xc4]
jne 0x1004486d
call fcn.1008abff
mov edi, dword [esi + 8]
test edi, edi
je 0x10044899
cmp dword [edi + 0x78], 0x10
lea ecx, [edi + 0x64]
jb 0x1004487f
mov ecx, dword [ecx]
cmp dword [esp + 0x54], 0xf
lea eax, [esp + 0x40]
cmova eax, dword [esp + 0x40]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100448e9
mov edi, dword [esp + 0x64]
cmp esi, dword [edi + 0xc4]
jne 0x100448aa
call fcn.1008abff
mov esi, dword [esi]
cmp esi, dword [esp + 0x3c]
jne 0x10044860
mov esi, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x54]
mov dword [esi + 0x40], edi
cmp ecx, 0xf
jbe 0x100448f9
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100448ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c70
jmp 0x100448ef
mov esi, dword [esp + 0x38]
jmp 0x100448b8
push ecx
push edx
call fcn.100859f6
add esp, 8
xor al, al
mov byte [esp + 0xe], al
nop
movzx edi, al
mov cl, 0x7e
mov byte [esp + 0x10], 0xa
mov al, 0x68
xor al, byte [esp + 0x10]
mov dl, 0x64
xor cl, byte [esp + 0x10]
mov ah, 0x55
mov byte [esp + 0x11], al
mov ch, 0x2f
mov byte [esp + 0x12], cl
mov dh, 0x24
mov cl, byte [esp + 0x10]
xorps xmm0, xmm0
mov byte [esp + 0xf], 0x38
xor dl, cl
mov al, byte [esp + 0xf]
xor ah, cl
xor al, cl
mov byte [esp + 0x37], 0x6e
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0x37]
xor ch, cl
xor al, cl
mov byte [esp + 0x13], dl
push edi
sub esp, 0x18
mov byte [esp + 0x32], dh
mov edx, esp
mov byte [esp + 0x31], ch
lea ecx, [esp + 0x2d]
mov byte [esp + 0x30], ah
mov byte [esp + 0x34], al
lea eax, [ecx + 1]
mov byte [esp + 0x35], 0
movups xmmword [edx], xmm0
mov byte [esp + 0x35], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [esp + 0x80], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10044990
sub ecx, dword [esp + 0x80]
lea eax, [esp + 0x2d]
push ecx
push eax
mov ecx, edx
call fcn.10002620
lea eax, [esp + 0x5c]
push eax
call fcn.10005dd0
mov ecx, dword [esi + 0x34]
add esp, 0x20
mov edx, eax
call fcn.1001c410
mov ecx, dword [esp + 0x54]
mov dword [esi + edi*4 + 0x44], eax
cmp ecx, 0xf
jbe 0x100449fc
mov edx, dword [esp + 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100449f2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10044c4d
push ecx
push edx
call fcn.100859f6
add esp, 8
mov al, byte [esp + 0xe]
inc al
mov byte [esp + 0xe], al
cmp al, 8
jb 0x10044900
mov esi, dword [esi + 0x38]
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
test esi, esi
je 0x10044a3f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044a3f
lea eax, [esp + 0x64]
mov ecx, esi
push eax
call dword [0x100bd5f4]
mov edi, dword [esp + 0x38]
mov esi, dword [edi + 8]
test esi, esi
je 0x10044a67
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044a67
push dword [esp + 0x68]
mov ecx, esi
push dword [esp + 0x68]
call dword [0x100bd5f8]
mov esi, dword [edi + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
test esi, esi
je 0x10044ac3
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044ac3
mov eax, dword [esi + 0xdc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0x1c], eax
movaps xmm0, xmmword [esp + 0x10]
mov esi, dword [edi + 8]
movaps xmmword [esp + 0x70], xmm0
test esi, esi
je 0x10044aee
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044aee
lea eax, [esp + 0x70]
mov ecx, esi
push eax
call dword [0x100bd5e8]
mov esi, dword [edi + 0x3c]
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
test esi, esi
je 0x10044b1f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044b1f
lea eax, [esp + 0x64]
mov ecx, esi
push eax
call dword [0x100bd5f4]
mov esi, dword [edi + 0xc]
test esi, esi
je 0x10044b43
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044b43
push dword [esp + 0x68]
mov ecx, esi
push dword [esp + 0x68]
call dword [0x100bd5f8]
mov esi, dword [edi + 0x3c]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
test esi, esi
je 0x10044b9f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044b9f
mov eax, dword [esi + 0xdc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xe8]
mov dword [esp + 0x1c], eax
movaps xmm0, xmmword [esp + 0x10]
mov esi, dword [edi + 0xc]
movaps xmmword [esp + 0x70], xmm0
test esi, esi
je 0x10044bca
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044bca
lea eax, [esp + 0x70]
mov ecx, esi
push eax
call dword [0x100bd5e8]
mov esi, dword [edi + 0x40]
test esi, esi
je 0x10044c1c
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044c1c
push 4
lea edi, [esi + 0x140]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044c18
lea eax, [esi + 0x13c]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044c18
mov ecx, esi
mov dword [edi], eax
mov dword [esi + 0x13c], 0x64
call dword [0x100bd648]
mov edi, dword [esp + 0x38]
mov esi, dword [edi + 0x44]
test esi, esi
je 0x10044c39
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10044c39
push eax
mov ecx, esi
call dword [0x100bd600]
mov ecx, dword [esp + 0x8c]
pop edi
pop esi
xor ecx, esp
call fcn.10085995
mov esp, ebp
pop ebp
ret
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
int3