Function at 0x1001e1a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
fld dword [0x10001918]
fadd st(0), st(0)
push ebx
push ebp
push esi
push edi
fsub dword [0x100085a0]
call fcn.1004ffa0
mov ebp, eax
mov eax, dword [0x100dff14]
test eax, eax
je 0x1001e2ef
mov edi, dword [0x100dee70]
mov ebx, dword [0x100dee74]
test edi, edi
je 0x1001e1ff
mov ecx, ebx
mov eax, 0x2aaaaaab
sub ecx, edi
lea esi, [edi + 0x930]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 0x31
ja 0x1001e201
mov esi, edi
fld qword [0x100ec888]
fcomp qword [0x100dc140]
fnstsw ax
test ah, 0x41
je 0x1001e23e
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov eax, dword [esi]
push 0x100de894
push ecx
push edx
push eax
push ebp
push 0x14
call fcn.10019400
mov ebx, dword [0x100dee74]
mov edi, dword [0x100dee70]
add esp, 0x18
sub ebp, 0x10
fld qword [0x100ec888]
fcomp qword [0x100dd828]
fnstsw ax
test ah, 0x41
je 0x1001e27b
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov eax, dword [esi]
push 0x100de994
push ecx
push edx
push eax
push ebp
push 0x14
call fcn.10019400
mov ebx, dword [0x100dee74]
mov edi, dword [0x100dee70]
add esp, 0x18
sub ebp, 0x10
mov eax, dword [0x100dfe98]
test eax, eax
je 0x1001e2ef
mov eax, dword [0x10107078]
test eax, eax
je 0x1001e2ef
fld dword [0x10001918]
fadd st(0), st(0)
fsub dword [0x100085a0]
fsub dword [0x10008768]
call fcn.1004ffa0
test edi, edi
mov ecx, eax
je 0x1001e2ca
sub ebx, edi
mov eax, 0x2aaaaaab
imul ebx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 0xd
jbe 0x1001e2ca
add edi, 0x270
mov eax, dword [0x10107074]
test eax, eax
jne 0x1001e2d8
mov eax, 0x100085f0
mov edx, dword [edi + 8]
push eax
mov eax, dword [edi + 4]
push edx
mov edx, dword [edi]
push eax
push edx
push ecx
push 0x1e
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100dfedc]
mov edi, dword [sym.imp.KERNEL32.dll_GetLocalTime]
test eax, eax
je 0x1001e756
mov eax, dword [0x100dffb0]
test eax, eax
jne 0x1001e756
mov eax, dword [0x100dd51c]
mov eax, dword [eax]
cmp eax, 0x24
jb 0x1001e323
mov esi, dword [0x100dc0fc]
jmp 0x1001e337
lea ecx, [eax*8]
sub ecx, eax
lea edx, [eax + ecx*4]
mov eax, dword [0x100dc0fc]
lea esi, [eax + edx*8]
mov ecx, dword [0x10001ae0]
mov edx, dword [0x10001adc]
push 0xff
push 0
push 0
push 0xff
push 0x10
push 0xa0
push ecx
push edx
mov byte [esp + 0x38], 0x44
mov byte [esp + 0x39], 0x61
mov byte [esp + 0x3a], 0x6e
mov byte [esp + 0x3b], 0x6b
mov byte [esp + 0x3c], 0x66
mov byte [esp + 0x3d], 0x69
mov byte [esp + 0x3e], 0x65
mov byte [esp + 0x3f], 0x6c
mov byte [esp + 0x40], 0x64
mov byte [esp + 0x41], 0
call dword [fcn.100dd864]
mov eax, dword [0x10001ae0]
mov ecx, dword [0x10001adc]
push 0xff
push 0xff
push 0
push 0
push 0x30
add eax, 0x10
push 0xa0
push eax
push ecx
call dword [fcn.100dd864]
mov edx, dword [0x10001ae0]
add esp, 0x40
mov eax, dword [0x10001adc]
add edx, 0x40
push 0xff
push 0xff
push 0
push 0
push 0x74
push 0xf0
push edx
push eax
call dword [fcn.100dd864]
mov edx, dword [0x10001ae0]
mov eax, dword [0x10001adc]
lea ecx, [esp + 0x38]
push ecx
push 0x1000217c
push 0x32
push 0x14
push 0x14
push edx
push eax
call fcn.10019650
add esp, 0x3c
lea ecx, [esp + 0x28]
push ecx
call edi
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x32]
mov ecx, dword [esp + 0x30]
and edx, 0xffff
and eax, 0xffff
push edx
mov edx, dword [0x10001ae0]
and ecx, 0xffff
push eax
mov eax, dword [0x10001adc]
push ecx
push 0x10002170
push 0xff
push 0xff
add edx, 0x14
push 0xff
push edx
push eax
call fcn.10019400
mov ecx, dword [esi + 0x34]
mov edx, dword [0x10001ae0]
mov eax, dword [0x10001adc]
push ecx
push 0x10002164
push 0xff
push 0xff
add edx, 0x24
push 0xff
push edx
push eax
call fcn.10019400
mov ecx, dword [esi + 0x30]
mov edx, dword [0x10001ae0]
mov eax, dword [0x10001adc]
add esp, 0x40
add edx, 0x34
push ecx
push 0x10002158
push 0xff
push 0xff
push 0xff
push edx
push eax
call fcn.10019400
mov ecx, dword [0x100dd528]
mov edx, dword [0x10001ae0]
mov eax, dword [0x10001adc]
push ecx
push 0x10002148
push 0xff
push 0xff
add edx, 0x44
push 0xff
push edx
push eax
call fcn.10019400
fld dword [0x100dd52c]
mov ecx, dword [0x10001ae0]
mov edx, dword [0x10001adc]
fstp qword [esp + 0x30]
add esp, 0x30
add ecx, 0x54
push 0x10002134
push 0xff
push 0xff
push 0xff
push ecx
push edx
call fcn.10019400
mov eax, dword [0x100dd51c]
mov ecx, dword [eax + 0x364]
push ecx
call fcn.1001cde0
mov edx, dword [0x10001ae0]
push eax
mov eax, dword [0x10001adc]
push 0x10001d3c
push 0xff
push 0xff
add edx, 0x64
push 0xff
push edx
push eax
call fcn.10019400
mov esi, dword [0x10064d98]
mov eax, dword [0x10064d9c]
add esp, 0x40
cmp esi, eax
je 0x1001e5be
fld dword [esi + 8]
sub esp, 8
mov ecx, dword [0x10001ae0]
mov edx, dword [0x10001adc]
add ecx, 0x74
fstp qword [esp]
fld dword [esi + 4]
sub esp, 8
fstp qword [esp]
fld dword [esi]
sub esp, 8
fstp qword [esp]
push 0x1000211c
push 0
push 0
push 0xff
push ecx
push edx
call fcn.10019400
mov eax, dword [0x10064d9c]
add esi, 0xc
add esp, 0x30
cmp esi, eax
jne 0x1001e571
mov esi, dword [0x10064da8]
mov eax, dword [0x10064dac]
cmp esi, eax
je 0x1001e61b
fld dword [esi + 8]
sub esp, 8
mov eax, dword [0x10001ae0]
mov ecx, dword [0x10001adc]
add eax, 0x84
fstp qword [esp]
fld dword [esi + 4]
sub esp, 8
fstp qword [esp]
fld dword [esi]
sub esp, 8
fstp qword [esp]
push 0x1000211c
push 0
push 0xff
push 0
push eax
push ecx
call fcn.10019400
mov eax, dword [0x10064dac]
add esi, 0xc
add esp, 0x30
cmp esi, eax
jne 0x1001e5cd
mov esi, dword [0x10064db8]
mov eax, dword [0x10064dbc]
cmp esi, eax
je 0x1001e67c
fld dword [esi + 8]
sub esp, 8
mov edx, dword [0x10001ae0]
mov eax, dword [0x10001adc]
add edx, 0x94
fstp qword [esp]
fld dword [esi + 4]
sub esp, 8
fstp qword [esp]
fld dword [esi]
sub esp, 8
fstp qword [esp]
push 0x1000211c
push 0
push 0xff
push 0xff
push edx
push eax
call fcn.10019400
mov eax, dword [0x10064dbc]
add esi, 0xc
add esp, 0x30
cmp esi, eax
jne 0x1001e62a
fld dword [0x100dd588]
mov ecx, dword [0x10001ae0]
mov edx, dword [0x10001adc]
sub esp, 8
add ecx, 0xa4
fstp qword [esp]
push 0x10002118
push 0xff
push 0xff
push 0
push ecx
push edx
call fcn.10019400
mov eax, dword [0x100dffb4]
add esp, 0x20
test eax, eax
je 0x1001e6e6
mov eax, dword [0x10001ae0]
mov ecx, dword [0x10001adc]
push 0x10002104
push 0xff
push 0xff
add eax, 0xb4
push 0xff
push eax
push ecx
jmp 0x1001e716
mov eax, dword [0x100e0028]
test eax, eax
je 0x1001e71e
mov edx, dword [0x10001ae0]
mov eax, dword [0x10001adc]
push 0x100020f0
push 0xff
push 0xff
add edx, 0xb4
push 0xff
push edx
push eax
call fcn.10019400
add esp, 0x18
mov edx, dword [0x10001ae0]
xor ecx, ecx
mov cl, byte [0x100dd531]
mov eax, dword [0x10001adc]
push ecx
push 0x100020e4
push 0xff
push 0xff
add edx, 0xc4
push 0xff
push edx
push eax
call fcn.10019400
add esp, 0x1c
mov eax, dword [0x100e00e8]
test eax, eax
je 0x1001ec80
mov eax, dword [0x100dffb0]
test eax, eax
jne 0x1001ec80
mov bl, byte [0x100dc108]
test bl, 1
jne 0x1001e79c
fld dword [0x10001914]
fadd st(0), st(0)
or bl, 1
mov byte [0x100dc108], bl
fsub dword [0x10008764]
call fcn.1004ffa0
mov dword [0x100dbe20], eax
mov eax, dword [0x100dd5d8]
test bl, 2
jne 0x1001e7bb
or bl, 2
lea ecx, [eax - 0x9b]
mov byte [0x100dc108], bl
mov dword [0x100dbff0], ecx
test bl, 4
jne 0x1001e7d8
mov edx, dword [0x100dbe20]
or bl, 4
add edx, 0xffffffcf
mov byte [0x100dc108], bl
mov dword [0x100dd5a8], edx
test bl, 8
jne 0x1001e7f5
mov ecx, dword [0x100dbff0]
or bl, 8
add ecx, 9
mov byte [0x100dc108], bl
mov dword [0x100dbe1c], ecx
test bl, 0x10
jne 0x1001e812
mov edx, dword [0x10001ae8]
or bl, 0x10
add edx, 6
mov byte [0x100dc108], bl
mov dword [0x100dc130], edx
fld dword [0x10001914]
fadd st(0), st(0)
push 0xff
push 0
push 0
push 0xff
fsub dword [0x10008760]
push 0x10
add eax, 0xffffff73
push 0x73
push eax
call fcn.1004ffa0
push eax
call dword [fcn.100dd864]
fld dword [0x10001914]
mov eax, dword [0x100dd5d8]
push 0xff
fadd st(0), st(0)
push 0xff
push 0
push 0
push 0x7c
fsub dword [0x10008760]
add eax, 0xffffff83
push 0x73
push eax
call fcn.1004ffa0
push eax
call dword [fcn.100dd864]
fld dword [0x10001914]
mov ecx, dword [0x100dd5d8]
add esp, 0x40
fadd st(0), st(0)
push 0x100020d4
push 0
push 1
add ecx, 0xffffff73
fsub dword [0x10008760]
push 0
push ecx
call fcn.1004ffa0
push eax
call fcn.10019650
mov eax, dword [0x100dfed0]
add esp, 0x18
sub eax, 0
je 0x1001e8dd
dec eax
jne 0x1001e916
mov edx, dword [0x100dd5d8]
push 0x100020c8
push 0xff
push 0xff
add edx, 0xffffff8c
push 0xff
push edx
jmp 0x1001e8fa
mov eax, dword [0x100dd5d8]
push 0x100020bc
push 0xff
push 0xff
add eax, 0xffffff8c
push 0xff
push eax
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000875c]
call fcn.1004ffa0
push eax
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100e002c]
sub eax, 0
je 0x1001e966
dec eax
je 0x1001e946
dec eax
jne 0x1001e99f
mov ecx, dword [0x100dd5d8]
push 0x100020b0
push 0xff
push 0xff
add ecx, 0xffffff9c
push 0xff
push ecx
jmp 0x1001e983
mov edx, dword [0x100dd5d8]
push 0x100020a4
push 0xff
push 0xff
add edx, 0xffffff9c
push 0xff
push edx
jmp 0x1001e983
mov eax, dword [0x100dd5d8]
push 0x10002098
push 0xff
push 0xff
add eax, 0xffffff9c
push 0xff
push eax
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000875c]
call fcn.1004ffa0
push eax
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100e003c]
sub eax, 0
je 0x1001e9cc
dec eax
jne 0x1001ea06
mov ecx, dword [0x100dd5d8]
push 0x10002088
push 0xff
push 0xff
add ecx, 0xffffffac
push 0xff
push ecx
jmp 0x1001e9ea
mov edx, dword [0x100dd5d8]
push 0x10002078
push 0xff
push 0xff
add edx, 0xffffffac
push 0xff
push edx
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000875c]
call fcn.1004ffa0
push eax
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100e0064]
sub eax, 0
je 0x1001ea32
dec eax
jne 0x1001ea6c
mov eax, dword [0x100dd5d8]
push 0x10002068
push 0xff
push 0xff
add eax, 0xffffffbc
push 0xff
push eax
jmp 0x1001ea50
mov ecx, dword [0x100dd5d8]
push 0x10002058
push 0xff
push 0xff
add ecx, 0xffffffbc
push 0xff
push ecx
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000875c]
call fcn.1004ffa0
push eax
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100e005c]
sub eax, 0
je 0x1001ea99
dec eax
jne 0x1001ead2
mov edx, dword [0x100dd5d8]
push 0x10002048
push 0xff
push 0xff
add edx, 0xffffffcc
push 0xff
push edx
jmp 0x1001eab6
mov eax, dword [0x100dd5d8]
push 0x10002038
push 0xff
push 0xff
add eax, 0xffffffcc
push 0xff
push eax
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000875c]
call fcn.1004ffa0
push eax
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100e0030]
sub eax, 0
je 0x1001eb22
dec eax
je 0x1001eb02
dec eax
jne 0x1001eb5b
mov ecx, dword [0x100dd5d8]
push 0x10002028
push 0xff
push 0xff
add ecx, 0xffffffdc
push 0xff
push ecx
jmp 0x1001eb3f
mov edx, dword [0x100dd5d8]
push 0x10002018
push 0xff
push 0xff
add edx, 0xffffffdc
push 0xff
push edx
jmp 0x1001eb3f
mov eax, dword [0x100dd5d8]
push 0x10002008
push 0xff
push 0xff
add eax, 0xffffffdc
push 0xff
push eax
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000875c]
call fcn.1004ffa0
push eax
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100e0004]
sub eax, 0
je 0x1001eb91
dec eax
jne 0x1001ebd4
mov eax, dword [0x100dffb4]
test eax, eax
je 0x1001ebd4
mov ecx, dword [0x100dd5d8]
push 0x10001ffc
push 0xff
push 0xff
add ecx, 0xffffffec
push 0xff
push ecx
jmp 0x1001ebb8
mov eax, dword [0x100dffb4]
test eax, eax
je 0x1001ebd4
mov edx, dword [0x100dd5d8]
push 0x10001ff0
push 0xff
push 0xff
add edx, 0xffffffec
push 0xff
push edx
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000875c]
call fcn.1004ffa0
push eax
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100e0018]
sub eax, 0
je 0x1001ec3d
dec eax
je 0x1001ec14
dec eax
jne 0x1001ec80
mov eax, dword [0x100e0028]
test eax, eax
je 0x1001ec80
mov eax, dword [0x100dd5d8]
push 0x10001fe0
push 0xff
push 0xff
add eax, 0xffffffec
push 0xff
push eax
jmp 0x1001ec64
mov eax, dword [0x100e0028]
test eax, eax
je 0x1001ec80
mov ecx, dword [0x100dd5d8]
push 0x10001fd0
push 0xff
push 0xff
add ecx, 0xffffffec
push 0xff
push ecx
jmp 0x1001ec64
mov eax, dword [0x100e0028]
test eax, eax
je 0x1001ec80
mov edx, dword [0x100dd5d8]
push 0x10001fc0
push 0xff
push 0xff
add edx, 0xffffffec
push 0xff
push edx
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000875c]
call fcn.1004ffa0
push eax
call fcn.10019400
add esp, 0x18
mov al, byte [0x100de882]
test al, al
je 0x1001ed5f
mov eax, dword [0x100dff9c]
test eax, eax
je 0x1001ed5f
mov al, byte [0x100de890]
test al, al
je 0x1001ed5f
mov eax, dword [0x100de888]
test eax, eax
jne 0x1001ecbe
fld dword [0x100de884]
fsubr qword [0x100ec888]
jmp 0x1001ecde
fild dword [0x100de888]
fstp qword [esp + 0x18]
fld dword [0x100de884]
fsubr qword [0x100ec888]
fsubr qword [esp + 0x18]
fadd qword [0x10008588]
call fcn.1004ffa0
mov ecx, eax
mov esi, 0x3c
cdq
idiv esi
mov eax, 0x88888889
push edx
imul ecx
add edx, ecx
lea ecx, [esp + 0x1a]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
push edx
push 0x10001fa4
push ecx
call fcn.1004f029
mov esi, dword [0x100dee70]
add esp, 0x10
test esi, esi
je 0x1001ed42
mov ecx, dword [0x100dee74]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [esi + 0x150]
cmp edx, 7
ja 0x1001ed44
mov eax, esi
mov edx, dword [eax + 8]
lea ecx, [esp + 0x16]
push ecx
mov ecx, dword [eax + 4]
push edx
mov edx, dword [eax]
push ecx
push edx
push ebp
push 0x14
call fcn.10019400
add esp, 0x18
mov eax, dword [0x100dfe84]
test eax, eax
je 0x1001ee16
lea eax, [esp + 0x18]
push eax
call edi
cmp word [esp + 0x20], 0xc
jbe 0x1001ed82
add word [esp + 0x20], 0xfff4
mov esi, dword [0x100dee70]
test esi, esi
je 0x1001edb0
mov ecx, dword [0x100dee74]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 8
jbe 0x1001edb0
add esi, 0x180
fld dword [0x10001914]
fadd st(0), st(0)
fsub dword [0x1000863c]
call fcn.1004ffa0
fld dword [0x10001918]
fadd st(0), st(0)
mov edi, eax
fsub dword [0x10008758]
call fcn.1004ffa0
cmp word [esp + 0x22], 0xa
mov ecx, 0x10001f9c
jb 0x1001edea
mov ecx, 0x10001f94
mov edx, dword [esp + 0x22]
and edx, 0xffff
push edx
mov edx, dword [esp + 0x24]
and edx, 0xffff
push edx
mov edx, dword [esi + 4]
push ecx
mov ecx, dword [esi + 8]
push ecx
mov ecx, dword [esi]
push edx
push ecx
push eax
push edi
call fcn.10019400
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret