Function at 0x100f21e2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x9c
mov eax, 0x101186c5
call fcn.10062882
mov edi, ecx
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0xa8], ebx
cmp dword [esi + 4], ebx
jne 0x100f2ce5
xor eax, eax
mov dword [ebp - 0x18], ebx
push 0x1002e2b0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.1004a302
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x28]
mov dword [ebp - 0xa8], 1
call fcn.1007eeee
test al, al
je 0x100f225d
push 0x1003cc64
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
test eax, eax
jne 0x100f225b
push 0x1002d8b0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
test eax, eax
je 0x100f225d
mov bl, 1
lea ecx, [ebp - 0x28]
call fcn.1006ab66
xor eax, eax
mov byte [edi + 0x30], bl
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
push 0x10031ec0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 1
call fcn.1004a302
mov ebx, 0x10030f70
mov byte [ebp - 4], 2
push ebx
lea ecx, [ebp - 0x28]
call fcn.1004a302
or edi, 0xffffffff
mov byte [ebp - 4], 3
push edi
push 0x1013ce58
push 0x100f3050
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 4
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x28]
call fcn.1006b464
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x10031ecc
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
call fcn.1004a302
push edi
push 0x1013ce50
push 0x100f3090
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 7
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x10031f30
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 8
call fcn.1004a302
push edi
push 0x1013ce40
push 0x100f30e0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xa
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x10031f44
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
call fcn.1004a302
push edi
push 0x1013ce48
push 0x100f3130
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xd
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd0c
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe
call fcn.1004a302
push edi
push 0x1013ce30
push 0x100f2de0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x10
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd00
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x11
call fcn.1004a302
push edi
push 0x1013ce54
push 0x100f2f50
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x13
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x10031f0c
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x14
call fcn.1004a302
push edi
push 0x1013ce44
push 0x100f2d40
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x16
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x10031f18
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x17
call fcn.1004a302
push edi
push 0x1013ce1c
push 0x100f2d90
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x19
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cc30
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1a
call fcn.1004a302
push edi
push 0x1013ce0c
push 0x100f2eb0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x1c
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x10031f5c
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1d
call fcn.1004a302
push edi
push 0x1013ce14
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
push 0x100f3180
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x1f
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cc20
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x20
call fcn.1004a302
push edi
push 0x1013ce04
push 0x100f3210
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x22
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cc50
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.1004a302
push edi
push 0x1013ce28
push 0x100f3340
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x25
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.1006b464
push 0x1003cc40
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x26
call fcn.1004a302
push edi
push 0x1013ce24
push 0x100f32b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x28
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd88
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x29
call fcn.1004a302
push edi
push 0x1013ce4c
push 0x100f2f00
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x2b
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd78
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2c
call fcn.1004a302
push edi
push 0x1013cdfc
mov byte [ebp - 4], 0x2d
push 0x100f33d0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x2e
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cda8
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2f
call fcn.1004a302
push edi
push 0x1013ce08
push 0x100f2e20
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x31
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd9c
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x32
call fcn.1004a302
push edi
push 0x1013ce34
push 0x100f3300
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x34
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd2c
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x35
call fcn.1004a302
push edi
push 0x1013ce18
push 0x100f31c0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x37
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd18
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x38
call fcn.1004a302
push edi
push 0x1013ce20
push 0x100f2f90
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x3a
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd5c
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3b
call fcn.1004a302
mov byte [ebp - 4], 0x3c
push edi
push 0x1013ce2c
push 0x100f2ff0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x3d
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003cd44
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3e
call fcn.1004a302
push edi
push 0x1013ce3c
push 0x100f3260
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x40
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003ce7c
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x41
call fcn.1004a302
push edi
push 0x1013ce10
push 0x100f3390
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x43
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x1003ce68
lea ecx, [ebp - 0x28]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x44
call fcn.1004a302
push edi
push 0x1013ce00
push 0x100f2e60
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x46
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.1006b464
push 0x10036f60
lea ecx, [ebp - 0x98]
call fcn.1004a302
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x47
call fcn.1004a302
push edi
push 0x1013ce38
push 0x100f2d00
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x80]
call fcn.1008c81f
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x49
call fcn.1004a302
lea ecx, [ebp - 0x68]
call fcn.1006b464
lea ecx, [ebp - 0x80]
call fcn.1006b464
lea ecx, [ebp - 0x40]
call fcn.1006b464
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.1006b464
lea eax, [ebp - 0xa4]
mov ecx, esi
push eax
call fcn.100a699d
lea ecx, [ebp - 0xa4]
call fcn.1006d289
call fcn.1006281a
ret 4