Function at 0x1029bd08
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x103beb39
mov eax, dword fs:[0]
push eax
sub esp, 0x1d8
mov eax, dword [0x104d9790]
xor eax, esp
mov dword [esp + 0x1d0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x104d9790]
xor eax, esp
push eax
lea eax, [esp + 0x1ec]
mov dword fs:[0], eax
mov ebp, ecx
mov edi, dword [esp + 0x238]
xor ebx, ebx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebx
and dword [esp + 0x1f4], ebx
lea eax, [esp + 0x1b4]
push eax
call fcn.1029caba
mov byte [esp + 0x1f4], 1
lea ecx, [esp + 0x88]
push eax
call fcn.1024088c
mov byte [esp + 0x1f4], 3
xor esi, esi
push esi
push 1
lea ecx, [esp + 0x1bc]
call fcn.10081569
mov dword [esp + 0x24], 0x10413614
mov dword [esp + 0x28], esi
mov byte [esp + 0x1f4], 4
mov dword [esp + 0x24], 0x10413808
mov byte [esp + 0x1f4], 5
lea ecx, [esp + 0x24]
call fcn.1023bc50
push eax
lea edx, [esp + 0x8c]
mov ecx, edi
call fcn.10240d4f
test eax, eax
js 0x1029bde2
cmp dword [esp + 0x28], esi
jne 0x1029be88
lea eax, [esp + 0x1b4]
push eax
call fcn.1029cbba
mov byte [esp + 0x1f4], 6
lea ecx, [esp + 0x34]
push eax
call fcn.1024088c
mov byte [esp + 0x1f4], 8
lea ecx, [esp + 0x1b4]
push esi
push 1
call fcn.10081569
lea ecx, [esp + 0x24]
call fcn.1023bc50
push eax
lea edx, [esp + 0x38]
mov ecx, edi
call fcn.10240d4f
test eax, eax
jns 0x1029be77
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x1041bfd4
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 9
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 8
lea eax, [esp + 0x190]
push 0x104d6228
push eax
call fcn.1033a16b
mov byte [esp + 0x1f4], 5
lea ecx, [esp + 0x34]
call fcn.10240a93
lea ecx, [esp + 0xa0]
call fcn.1024b00b
mov byte [esp + 0x1f4], 0xc
lea ecx, [esp + 0xa0]
call fcn.1024c766
push dword [esp + 0x28]
lea ecx, [esp + 0xa4]
call fcn.1023d61e
cmp dword [esp + 0xa4], 0
jne 0x1029bf07
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x1041bfc8
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0xd
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0xc
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
lea eax, [esp + 0x1b4]
push eax
call fcn.1029b098
mov byte [esp + 0x1f4], 0xe
lea ecx, [esp + 0x70]
push eax
call fcn.1024088c
mov byte [esp + 0x1f4], 0x10
lea ecx, [esp + 0x1b4]
push esi
push 1
call fcn.10081569
push ecx
push esi
push ecx
push dword [ebp + 0x74]
lea edx, [esp + 0x80]
lea ecx, [esp + 0xb0]
call fcn.1024102c
test eax, eax
jns 0x1029bf9f
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x1041bfbc
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0x11
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0x10
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
push 0x8c
call fcn.10336de6
mov esi, eax
pop ecx
mov dword [esp + 0x18], esi
mov byte [esp + 0x1f4], 0x12
test esi, esi
je 0x1029c027
push ecx
push ecx
lea edx, [ebp + 0x70]
mov dword [esp + 0x5c], esp
mov ecx, esp
push edx
call fcn.102a37c5
mov byte [esp + 0x1fc], 0x13
lea eax, [esp + 0x1bc]
push eax
call fcn.1029b098
mov byte [esp + 0x1fc], 0x14
xor ebx, ebx
push eax
sub esp, 0x3c
lea eax, [esp + 0xe8]
inc ebx
mov ecx, esp
mov dword [esp + 0x68], ebx
mov dword [esp + 0x98], esp
push eax
call fcn.1024ccf0
mov dword [esp + 0x23c], 0x15
mov byte [esp + 0x23c], 0x16
mov ecx, esi
call fcn.102994a5
jmp 0x1029c029
xor eax, eax
mov dword [esp + 0x1f4], 0x17
mov dword [esp + 0x18], eax
mov dword [esp + 0x1f4], 0x10
test bl, 1
je 0x1029c05f
push 0
and ebx, 0xfffffffe
lea ecx, [esp + 0x1b8]
push 1
mov dword [esp + 0x28], ebx
call fcn.10081569
lea ecx, [esp + 0x18]
push ecx
lea ecx, [ebp + 0x40]
call fcn.102a383b
lea eax, [esp + 0x1b4]
push eax
call fcn.1029b196
mov byte [esp + 0x1f4], 0x18
lea ecx, [esp + 0x7c]
push eax
call fcn.1024088c
mov byte [esp + 0x1f4], 0x1a
lea ecx, [esp + 0x1b4]
push 0
push 1
call fcn.10081569
push ecx
push 0
push ecx
push dword [ebp + 0x74]
lea edx, [esp + 0x8c]
lea ecx, [esp + 0xb0]
call fcn.1024102c
test eax, eax
jns 0x1029c106
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x1041bfb0
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0x1b
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0x1a
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
push 0x8c
call fcn.10336de6
mov esi, eax
pop ecx
mov dword [esp + 0x50], esi
mov byte [esp + 0x1f4], 0x1c
test esi, esi
je 0x1029c18b
push ecx
push ecx
lea edx, [ebp + 0x70]
mov dword [esp + 0x5c], esp
mov ecx, esp
push edx
call fcn.102a37c5
mov byte [esp + 0x1fc], 0x1d
lea eax, [esp + 0x1bc]
push eax
call fcn.1029b196
mov byte [esp + 0x1fc], 0x1e
or ebx, 2
push eax
sub esp, 0x3c
mov dword [esp + 0x68], ebx
lea eax, [esp + 0xe8]
mov dword [esp + 0x60], esp
mov ecx, esp
push eax
call fcn.1024ccf0
mov dword [esp + 0x23c], 0x1f
mov byte [esp + 0x23c], 0x20
mov ecx, esi
call fcn.102994a5
jmp 0x1029c18d
xor eax, eax
mov dword [esp + 0x1f4], 0x21
mov dword [esp + 0x18], eax
mov dword [esp + 0x1f4], 0x1a
test bl, 2
je 0x1029c1c3
push 0
and ebx, 0xfffffffd
lea ecx, [esp + 0x1b8]
push 1
mov dword [esp + 0x28], ebx
call fcn.10081569
lea eax, [esp + 0x18]
push eax
lea ecx, [ebp + 0x40]
call fcn.102a383b
lea eax, [esp + 0x1b4]
push eax
call fcn.1029aa5b
mov byte [esp + 0x1f4], 0x22
lea ecx, [esp + 0x58]
push eax
call fcn.1024088c
mov byte [esp + 0x1f4], 0x24
xor esi, esi
push esi
push 1
lea ecx, [esp + 0x1bc]
call fcn.10081569
mov dword [esp + 0x2c], 0x10413614
mov dword [esp + 0x30], esi
mov byte [esp + 0x1f4], 0x25
mov dword [esp + 0x2c], 0x10413808
mov byte [esp + 0x1f4], 0x26
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0xe0]
call fcn.10258341
mov byte [esp + 0x1f4], 0x27
lea eax, [esp + 0x1b4]
push eax
call fcn.1029ccb8
mov byte [esp + 0x1f4], 0x28
lea ecx, [esp + 0x64]
push eax
call fcn.1024088c
mov byte [esp + 0x1f4], 0x2a
lea ecx, [esp + 0x1b4]
push esi
push 1
call fcn.10081569
lea ecx, [esp + 0x2c]
call fcn.1023bc50
push eax
lea edx, [esp + 0x68]
mov ecx, edi
call fcn.10240d4f
test eax, eax
js 0x1029c2ac
cmp dword [esp + 0x30], esi
je 0x1029c2ac
lea ecx, [esp + 0xdc]
call fcn.1024c766
push dword [esp + 0x30]
jmp 0x1029c2bc
lea ecx, [esp + 0xdc]
call fcn.1024c766
push dword [esp + 0x28]
lea ecx, [esp + 0xe0]
call fcn.1023d61e
push ecx
push esi
push ecx
push dword [ebp + 0x7c]
lea edx, [esp + 0x68]
lea ecx, [esp + 0xec]
call fcn.1024102c
test eax, eax
jns 0x1029c327
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x1041c004
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0x2b
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0x2a
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
push 0x8c
call fcn.10336de6
mov esi, eax
pop ecx
mov dword [esp + 0x50], esi
mov byte [esp + 0x1f4], 0x2c
test esi, esi
je 0x1029c3ac
push ecx
push ecx
lea edx, [ebp + 0x78]
mov dword [esp + 0x5c], esp
mov ecx, esp
push edx
call fcn.102a37c5
mov byte [esp + 0x1fc], 0x2d
lea eax, [esp + 0x1bc]
push eax
call fcn.1029aa5b
mov byte [esp + 0x1fc], 0x2e
or ebx, 4
push eax
sub esp, 0x3c
mov dword [esp + 0x68], ebx
lea eax, [esp + 0x124]
mov dword [esp + 0x60], esp
mov ecx, esp
push eax
call fcn.1024ccf0
mov dword [esp + 0x23c], 0x2f
mov byte [esp + 0x23c], 0x30
mov ecx, esi
call fcn.102994a5
jmp 0x1029c3ae
xor eax, eax
mov dword [esp + 0x1f4], 0x31
mov dword [esp + 0x18], eax
mov dword [esp + 0x1f4], 0x2a
test bl, 4
je 0x1029c3e4
push 0
and ebx, 0xfffffffb
lea ecx, [esp + 0x1b8]
push 1
mov dword [esp + 0x28], ebx
call fcn.10081569
lea eax, [esp + 0x18]
push eax
lea ecx, [ebp + 0x40]
call fcn.102a383b
xor esi, esi
mov dword [esp + 0x34], 0x10413dc0
mov dword [esp + 0x38], esi
mov byte [esp + 0x1f4], 0x32
mov dword [esp + 0x34], 0x10413db8
mov byte [esp + 0x1f4], 0x33
lea ecx, [esp + 0x34]
push edi
call fcn.1024c4d1
mov edi, dword [esp + 0x38]
test edi, edi
jne 0x1029c46e
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x1041bff8
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0x34
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0x33
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
mov dword [esp + 0x48], 0x10413614
mov dword [esp + 0x4c], esi
mov byte [esp + 0x1f4], 0x35
mov dword [esp + 0x48], 0x10413808
mov byte [esp + 0x1f4], 0x36
lea ecx, [esp + 0x48]
call fcn.1023bc50
mov ecx, dword [esp + 0x1c]
mov edx, eax
call fcn.102993ba
lea ecx, [esp + 0x118]
call fcn.1024a3fb
mov byte [esp + 0x1f4], 0x39
lea ecx, [esp + 0x118]
call fcn.1024c766
push dword [esp + 0x4c]
lea ecx, [esp + 0x11c]
call fcn.1023d61e
cmp dword [esp + 0x11c], 0
jne 0x1029c525
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x1041bfec
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0x3a
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0x39
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
mov dword [esp + 0x40], 0x10413614
mov dword [esp + 0x44], esi
mov byte [esp + 0x1f4], 0x3b
mov dword [esp + 0x40], 0x10413808
mov byte [esp + 0x1f4], 0x3c
lea eax, [esp + 0x190]
push eax
call fcn.1029ceb2
mov byte [esp + 0x1f4], 0x3d
lea ecx, [esp + 0x1b4]
push eax
call fcn.1024088c
mov byte [esp + 0x1f4], 0x3e
lea eax, [esp + 0x1cc]
push eax
call fcn.1029cdb6
mov byte [esp + 0x1f4], 0x3f
lea ecx, [esp + 0x94]
push eax
call fcn.1024088c
mov byte [esp + 0x1f4], 0x40
lea ecx, [esp + 0x40]
mov esi, dword [esp + 0x11c]
mov edi, dword [edi]
call fcn.1023bc50
push eax
lea eax, [esp + 0x1b8]
push eax
lea eax, [esp + 0x9c]
push eax
push esi
push dword [esp + 0x48]
call dword [edi + 0x10]
mov esi, eax
mov edi, 0x80000000
mov byte [esp + 0x1f4], 0x3f
lea ecx, [esp + 0x94]
call fcn.10240a93
mov byte [esp + 0x1f4], 0x3e
lea ecx, [esp + 0x1cc]
push 0
push 1
call fcn.10081569
mov byte [esp + 0x1f4], 0x3d
lea ecx, [esp + 0x1b4]
call fcn.10240a93
mov byte [esp + 0x1f4], 0x3c
lea ecx, [esp + 0x190]
push 0
push 1
call fcn.10081569
and esi, edi
je 0x1029c670
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x1041bfe0
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0x41
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0x3c
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
cmp dword [esp + 0x44], 0
jne 0x1029c7ab
mov byte [esp + 0x1f4], 0x39
mov ebx, 0x10413614
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x40], ebx
test ecx, ecx
je 0x1029c69a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [esp + 0x1f4], 0x36
lea ecx, [esp + 0x118]
call fcn.1023a2c7
mov byte [esp + 0x1f4], 0x33
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x48], ebx
test ecx, ecx
je 0x1029c6c8
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [esp + 0x1f4], 0x2a
mov dword [esp + 0x34], 0x10413db8
mov byte [esp + 0x1f4], 0x2a
mov ecx, dword [esp + 0x38]
push ecx
mov dword [esp + 0x38], 0x10413dc0
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [esp + 0x1f4], 0x27
lea ecx, [esp + 0x64]
call fcn.10240a93
mov byte [esp + 0x1f4], 0x26
lea ecx, [esp + 0xdc]
call fcn.1023a2c7
mov byte [esp + 0x1f4], 0x24
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x2c], ebx
test ecx, ecx
je 0x1029c731
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [esp + 0x1f4], 0x1a
lea ecx, [esp + 0x58]
call fcn.10240a93
mov byte [esp + 0x1f4], 0x10
lea ecx, [esp + 0x7c]
call fcn.10240a93
mov byte [esp + 0x1f4], 0xc
lea ecx, [esp + 0x70]
call fcn.10240a93
mov byte [esp + 0x1f4], 5
lea ecx, [esp + 0xa0]
call fcn.1023a2c7
mov byte [esp + 0x1f4], 3
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], ebx
test ecx, ecx
je 0x1029c792
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [esp + 0x1f4], 0
lea ecx, [esp + 0x88]
call fcn.10240a93
jmp 0x1029ca7c
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x158]
call fcn.10258341
mov byte [esp + 0x1f4], 0x4f
cmp dword [esp + 0x158], 0
jne 0x1029c813
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x1041c050
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0x50
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0x4f
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
push ecx
push 0
push ecx
push dword [ebp + 0x74]
lea edx, [esp + 0x68]
lea ecx, [esp + 0x164]
call fcn.1024102c
test edi, eax
je 0x1029c873
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x1041c044
push eax
lea ecx, [esp + 0x194]
call fcn.1007f503
mov byte [esp + 0x1f4], 0x51
mov dword [esp + 0x190], 0x1041c7e8
mov byte [esp + 0x1f4], 0x4f
lea eax, [esp + 0x190]
push 0x104d6228
jmp 0x1029be71
push 0x8c
call fcn.10336de6
mov esi, eax
pop ecx
mov dword [esp + 0x50], esi
mov byte [esp + 0x1f4], 0x52
test esi, esi
je 0x1029c8f8
push ecx
push ecx
lea edx, [ebp + 0x70]
mov dword [esp + 0x5c], esp
mov ecx, esp
push edx
call fcn.102a37c5
mov byte [esp + 0x1fc], 0x53
lea eax, [esp + 0x198]
push eax
call fcn.1029aa5b
mov byte [esp + 0x1fc], 0x54
or ebx, 8
push eax
sub esp, 0x3c
mov dword [esp + 0x68], ebx
lea eax, [esp + 0x19c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.1024ccf0
mov dword [esp + 0x23c], 0x55
mov byte [esp + 0x23c], 0x56
mov ecx, esi
call fcn.102994a5
jmp 0x1029c8fa
xor eax, eax
mov dword [esp + 0x1f4], 0x57
mov dword [esp + 0x18], eax
mov dword [esp + 0x1f4], 0x4f
test bl, 8
je 0x1029c930
push 0
and ebx, 0xfffffff7
lea ecx, [esp + 0x194]
push 1
mov dword [esp + 0x28], ebx
call fcn.10081569
lea eax, [esp + 0x18]
push eax
lea ecx, [ebp + 0x40]
call fcn.102a383b
mov byte [esp + 0x1f4], 0x3c
lea ecx, [esp + 0x154]
call fcn.1023a2c7
mov byte [esp + 0x1f4], 0x39
mov ebx, 0x10413614
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x40], ebx
test ecx, ecx
je 0x1029c970
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [esp + 0x1f4], 0x36
lea ecx, [esp + 0x118]
call fcn.1023a2c7
mov byte [esp + 0x1f4], 0x33
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x48], ebx
test ecx, ecx
je 0x1029c99e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [esp + 0x1f4], 0x2a
mov dword [esp + 0x34], 0x10413db8
mov byte [esp + 0x1f4], 0x2a
mov ecx, dword [esp + 0x38]
push ecx
mov dword [esp + 0x38], 0x10413dc0
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [esp + 0x1f4], 0x27
lea ecx, [esp + 0x64]
call fcn.10240a93
mov byte [esp + 0x1f4], 0x26
lea ecx, [esp + 0xdc]
call fcn.1023a2c7
mov byte [esp + 0x1f4], 0x24
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x2c], ebx
test ecx, ecx
je 0x1029ca07
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [esp + 0x1f4], 0x1a
lea ecx, [esp + 0x58]
call fcn.10240a93
mov byte [esp + 0x1f4], 0x10
lea ecx, [esp + 0x7c]
call fcn.10240a93
mov byte [esp + 0x1f4], 0xc
lea ecx, [esp + 0x70]
call fcn.10240a93
mov byte [esp + 0x1f4], 5
lea ecx, [esp + 0xa0]
call fcn.1023a2c7
mov byte [esp + 0x1f4], 3
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], ebx
test ecx, ecx
je 0x1029ca68
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [esp + 0x1f4], 0
lea ecx, [esp + 0x88]
call fcn.10240a93
or dword [esp + 0x1f4], 0xffffffff
lea ecx, [esp + 0x1fc]
call fcn.1023a2c7
mov ecx, dword [esp + 0x1ec]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1d0]
xor ecx, esp
call fcn.103362c6
add esp, 0x1e4
ret 0x44