Function at 0x1001cb20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10092840
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
mov eax, dword [0x100b5350]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0x88], 0
call fcn.10008c10
lea eax, [ebp - 0x88]
push eax
push ecx
mov dword [ebp - 4], 0
lea eax, [esi + 0x50]
mov ecx, esp
mov dword [ebp - 0x90], esp
push eax
call fcn.10008c30
push ecx
lea edi, [esi + 0x4c]
mov ecx, esp
push edi
mov byte [ebp - 4], 1
call fcn.10008c30
mov ecx, esi
mov byte [ebp - 4], 0
call fcn.1001a630
test eax, eax
je 0x1001cbc7
push str.0633EE93_D776_472f_A0FF_E1416B8B2E3A
lea ecx, [esi + 0x78]
call fcn.1000a7a0
push ebx
mov ecx, esi
call fcn.1001b1c0
jmp 0x1001d454
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], 0
call fcn.10008c30
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xac], 0
call fcn.10008c30
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 3
call fcn.10009110
add esp, 4
lea ecx, [ebp - 0xac]
push ecx
mov edx, eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 4
call fcn.10017d60
add esp, 4
push eax
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 5
call fcn.10008cd0
lea ecx, [ebp - 0xa4]
call fcn.10008cc0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 3
call fcn.10008cc0
push 3
lea ecx, [ebp - 0x88]
call fcn.100092f0
lea ecx, [ebp - 0x88]
cmp al, 0x43
jne 0x1001cc9f
call fcn.10009360
mov ebx, eax
cmp ebx, 3
jg 0x1001cc8e
push 0x80070057
call fcn.10002260
lea ecx, [ebp - 0x88]
call fcn.10009320
mov byte [eax + 3], 0x44
jmp 0x1001ccc4
call fcn.10009360
mov ebx, eax
cmp ebx, 3
jg 0x1001ccb5
push 0x80070057
call fcn.10002260
lea ecx, [ebp - 0x88]
call fcn.10009320
mov byte [eax + 3], 0x43
push ebx
lea ecx, [ebp - 0x88]
call fcn.1000abd0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xb4], 0
call fcn.10008c30
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 6
call fcn.10009110
add esp, 4
lea ecx, [ebp - 0xb4]
push ecx
mov edx, eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 7
call fcn.10017d60
add esp, 4
push eax
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 8
call fcn.10008cd0
lea ecx, [ebp - 0xa4]
call fcn.10008cc0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 6
call fcn.10008cc0
mov ebx, dword [ebp - 0xbc]
push ebx
push ecx
lea eax, [ebp - 0xb4]
mov ecx, esp
mov dword [ebp - 0x90], esp
push eax
call fcn.10008c30
push ecx
lea eax, [ebp - 0xac]
mov ecx, esp
push eax
mov byte [ebp - 4], 9
call fcn.10008c30
mov ecx, esi
mov byte [ebp - 4], 6
call fcn.1001c700
cmp byte [esi + 0xdc], 0
push ecx
lea eax, [ebp - 0xac]
mov ecx, esp
push eax
jne 0x1001cda5
call fcn.10008c30
mov ecx, esi
call fcn.1001a830
jmp 0x1001cdb1
call fcn.10008c30
mov ecx, esi
call fcn.1001bea0
push 0
mov ecx, esi
call fcn.1001bf80
lea eax, [esi + 0x54]
push eax
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x79], 0x2e656761
mov dword [ebp - 0x70], 0x746e6973
mov word [ebp - 0x7e], 0x732f
mov dword [ebp - 0x66], 0x6567616d
mov dword [ebp - 0x82], 0x2f3a7074
mov dword [ebp - 0x49], 0x67706a2e
mov dword [ebp - 0x4d], 0x67616d2f
mov word [ebp - 0x7b], 0x726f
mov word [ebp - 0x5b], 0x2f68
mov dword [ebp - 0x56], 0x49686372
mov dword [ebp - 0x52], 0x6567616d
mov word [ebp - 0x61], 0x532f
mov byte [ebp - 0x62], 0x73
mov dword [ebp - 0x6c], 0x6d6f632e
mov word [ebp - 0x5e], 0x7261
mov byte [ebp - 0x7c], 0x74
mov word [ebp - 0x84], 0x7468
mov byte [ebp - 0x45], 0
mov dword [ebp - 0x74], 0x73626774
mov word [ebp - 0x58], 0x6165
mov byte [ebp - 0x5f], 0x65
mov word [ebp - 0x68], 0x492f
mov byte [ebp - 0x4e], 0x73
mov byte [ebp - 0x59], 0x73
mov byte [ebp - 0x5c], 0x63
mov byte [ebp - 0x75], 0x73
mov dword [ebp - 0xa4], 0
call fcn.10008c30
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0
call fcn.10008c30
lea eax, [esi + 0x6c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0
call fcn.10008c30
mov byte [ebp - 4], 0xc
cmp byte [esi + 0xdc], 0
mov dword [ebp - 0x8c], 0x4c5255
mov dword [ebp - 0x28], 0x4e79616c
mov dword [ebp - 0x24], 0x656d61
mov dword [ebp - 0x2c], 0x70736944
mov dword [ebp - 0x40], 0x67677553
mov word [ebp - 0x35], 0x5255
mov word [ebp - 0x3c], 0x7365
mov dword [ebp - 0x39], 0x736e6f69
mov dword [ebp - 0x30], 0x4e4f53
mov byte [ebp - 0x3a], 0x74
mov word [ebp - 0x32], 0x4a5f
mov byte [ebp - 0x33], 0x4c
mov dword [ebp - 0x20], 0x69766146
mov dword [ebp - 0x1a], 0x4c52556e
mov word [ebp - 0x1c], 0x6f63
mov byte [ebp - 0x16], 0
jne 0x1001cfa0
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0xb8], esp
push str.1201
call fcn.10008c50
push ecx
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0x98], esp
push eax
call fcn.10008c30
push ecx
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x8c]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c50
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xf
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x10
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x11
call fcn.1001a250
jmp 0x1001d006
push ecx
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0x9c], esp
push eax
call fcn.10008c30
push ecx
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x8c]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c50
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x13
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x14
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x15
call fcn.1001bcc0
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
call fcn.10008cc0
cmp byte [esi + 0xdc], 0
jne 0x1001d0a2
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.1202
call fcn.10008c50
push ecx
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c30
push ecx
mov byte [ebp - 4], 0x17
lea eax, [esi + 0x88]
mov ecx, esp
mov dword [ebp - 0x98], esp
push eax
call fcn.10008c30
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x18
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x19
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x1a
call fcn.1001a250
jmp 0x1001d108
push ecx
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0x9c], esp
push eax
call fcn.10008c30
push ecx
mov byte [ebp - 4], 0x1b
lea eax, [esi + 0x88]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c30
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x1c
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x1d
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x1e
call fcn.1001bcc0
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
call fcn.10008cc0
cmp byte [esi + 0xdc], 0
jne 0x1001d19d
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.1203
call fcn.10008c50
push ecx
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0xa8]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c30
push ecx
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x98], esp
push eax
call fcn.10008c50
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x21
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x22
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x23
call fcn.1001a250
jmp 0x1001d200
push ecx
lea eax, [ebp - 0xa8]
mov ecx, esp
mov dword [ebp - 0x9c], esp
push eax
call fcn.10008c30
push ecx
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c50
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x25
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x26
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x27
call fcn.1001bcc0
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
call fcn.10008cc0
lea ebx, [esi + 0x94]
mov ecx, ebx
call fcn.10009360
test eax, eax
jle 0x1001d412
cmp byte [esi + 0xdc], 0
jne 0x1001d2a9
push dword [ebp - 0xbc]
push ecx
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.1204
call fcn.10008c50
push ecx
mov byte [ebp - 4], 0x28
mov ecx, esp
mov dword [ebp - 0xa0], esp
push ebx
call fcn.10008c30
push ecx
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x98], esp
push eax
call fcn.10008c50
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2a
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x2b
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x2c
call fcn.1001a250
jmp 0x1001d306
push ecx
mov ecx, esp
mov dword [ebp - 0x9c], esp
push ebx
call fcn.10008c30
push ecx
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c50
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2e
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x2f
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x30
call fcn.1001bcc0
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
call fcn.10008cc0
cmp byte [esi + 0xdc], 0
jne 0x1001d3a4
push dword [ebp - 0xbc]
push ecx
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str.1205
call fcn.10008c50
push ecx
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x84]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c50
push ecx
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x98], esp
push eax
call fcn.10008c50
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x33
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x34
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x35
call fcn.1001a250
jmp 0x1001d407
push ecx
lea eax, [ebp - 0x84]
mov ecx, esp
mov dword [ebp - 0x9c], esp
push eax
call fcn.10008c50
push ecx
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.10008c50
push 0x100a764c
mov edx, edi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x37
call fcn.10009110
lea edx, [ebp - 0x94]
mov ecx, esp
push edx
mov edx, eax
mov byte [ebp - 4], 0x38
call fcn.10017d60
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x39
call fcn.1001bcc0
lea ecx, [ebp - 0x90]
call fcn.10008cc0
lea ecx, [ebp - 0xb0]
call fcn.10008cc0
lea ecx, [ebp - 0xa8]
call fcn.10008cc0
lea ecx, [ebp - 0xa4]
call fcn.10008cc0
lea ecx, [ebp - 0xb4]
call fcn.10008cc0
lea ecx, [ebp - 0xac]
call fcn.10008cc0
lea ecx, [ebp - 0x94]
call fcn.10008cc0
lea ecx, [ebp - 0x88]
call fcn.10008cc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100704e7
mov esp, ebp
pop ebp
ret 4