Function at 0x100441eb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x34
mov eax, 0x100aaafb
call fcn.100a4ea8
mov edi, ecx
mov dword [ebp - 0x28], edi
xor eax, eax
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp + 0xc]
push ebx
push ecx
mov dword [ebp - 4], eax
mov ecx, esp
lea eax, [ebp + 8]
push eax
call fcn.1006e371
push 4
mov ecx, edi
call fcn.100416e1
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 1
mov ecx, esp
push eax
call fcn.1006e371
lea ecx, [edi + 0x18]
call fcn.100423e4
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 2
mov ecx, esp
push eax
call fcn.1006e371
lea ecx, [edi + 0x40]
call fcn.10041e84
push 0x1000b840
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.1006f372
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 4
mov ecx, esp
lea esi, [ebp - 0x14]
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x20]
call fcn.100339bf
lea ecx, [edi + 0x68]
mov byte [ebp - 4], 5
push eax
call fcn.1003d3f8
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x100442a7
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000b8dc
lea ecx, [ebp - 0x18]
call fcn.1006f372
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 9
mov ecx, esp
lea esi, [ebp - 0x18]
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x24]
call fcn.100339bf
lea ecx, [edi + 0x78]
mov byte [ebp - 4], 0xa
push eax
call fcn.1003d4d6
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x1004430a
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000d3d0
lea ecx, [ebp - 0x14]
call fcn.1006f372
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xe
mov ecx, esp
lea esi, [ebp - 0x14]
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x20]
call fcn.100339bf
lea ecx, [edi + 0x88]
mov byte [ebp - 4], 0xf
push eax
call fcn.100430ae
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x10044370
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000c13c
lea ecx, [ebp - 0x18]
call fcn.1006f372
push ebx
push ecx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x13
mov ecx, esp
lea esi, [ebp - 0x18]
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x24]
call fcn.100340f7
lea ecx, [edi + 0xbc]
mov byte [ebp - 4], 0x14
push eax
call fcn.1003f1f8
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x100443d6
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.1008e3f5
push ebx
push ecx
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.1006e371
lea ecx, [edi + 0xd0]
call fcn.10042742
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x18
mov ecx, esp
push eax
call fcn.1006e371
lea ecx, [edi + 0xd8]
call fcn.1004285e
push ecx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x19
mov ecx, esp
push eax
call fcn.1006e371
lea ecx, [edi + 0xe0]
call fcn.10042a53
push 0x1000cb00
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1a
call fcn.1006f372
push ebx
push ecx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x1b
mov ecx, esp
lea esi, [ebp - 0x18]
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x24]
call fcn.100340f7
push eax
lea ecx, [edi + 0xe8]
mov byte [ebp - 4], 0x1c
call fcn.10041b2d
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x10044490
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000dc00
lea ecx, [ebp - 0x14]
mov dword [edi], 0x100207f4
mov dword [edi + 0x18], 0x100207e0
mov dword [edi + 0x40], 0x100207d8
mov dword [edi + 0x68], 0x100207cc
mov dword [edi + 0x78], 0x100207c0
mov dword [edi + 0x88], 0x100207b4
mov dword [edi + 0xbc], 0x100207ac
mov dword [edi + 0xd0], 0x100207a4
mov dword [edi + 0xd8], 0x1002079c
mov dword [edi + 0xe0], 0x10020794
call fcn.1006f372
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x20
mov ecx, esp
lea esi, [ebp - 0x14]
push eax
call fcn.1006e371
lea ecx, [edi + 0x128]
mov edx, esi
call fcn.100342dc
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000dc28
lea ecx, [ebp - 0x18]
call fcn.1006f372
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x23
mov ecx, esp
lea esi, [ebp - 0x18]
push eax
call fcn.1006e371
lea ecx, [edi + 0x12c]
mov edx, esi
call fcn.100342dc
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000dc54
lea ecx, [ebp - 0x14]
call fcn.1006f372
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x26
mov ecx, esp
lea esi, [ebp - 0x14]
push eax
call fcn.1006e371
lea ecx, [edi + 0x130]
mov edx, esi
call fcn.100342dc
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.1008e3f5
push ecx
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.1006e371
call fcn.10043650
push 0x1000dc78
lea ecx, [ebp - 0x18]
mov eax, dword [eax]
mov dword [edi + 0x134], eax
call fcn.1006f372
push ecx
push ecx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x29
mov ecx, esp
lea esi, [ebp - 0x18]
push eax
call fcn.1006e371
lea ecx, [edi + 0x138]
mov edx, esi
call fcn.10034437
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000dc90
lea ecx, [ebp - 0x14]
mov dword [edi + 0x13c], ebx
call fcn.1006f372
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x2c
mov ecx, esp
lea esi, [ebp - 0x14]
push eax
call fcn.1006e371
mov edx, ebx
mov ecx, esi
call fcn.100335cd
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.1008e3f5
push ecx
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.1006e371
call fcn.10033ecd
lea ecx, [ebp - 0x14]
cmp eax, 3
jae 0x100446f4
push 0x1000dc98
call fcn.1006f372
push 0x100093a4
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x2d
call fcn.1006f372
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x34]
call fcn.10032eb6
lea ecx, [ebp - 0x24]
call fcn.1002dff0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x31
call fcn.1002dff0
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x34]
call fcn.10032f40
mov byte [ebp - 4], 0x32
mov ecx, eax
mov edx, dword [ebx]
call fcn.1006e348
mov esi, dword [edx + 4]
mov ecx, esi
push eax
xor eax, eax
push eax
call dword [0x100cf608]
mov ecx, ebx
call esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x31
call fcn.1002dff0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x40]
call fcn.10035100
push 0x100c4d74
lea eax, [ebp - 0x40]
push eax
call fcn.1009378c
push 0x1000dd14
call fcn.1006f372
sub esp, 0xc
mov byte [ebp - 4], 0x33
lea eax, [ebp + 8]
lea esi, [ebp - 0x14]
push ecx
mov ecx, esp
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x24]
call fcn.10034437
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x34
push 0x1000dd14
call fcn.1006f372
xor eax, eax
mov edx, esi
mov cl, al
call fcn.10035035
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
mov byte [ebp - 0xd], al
call fcn.1008e3f5
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.1008e3f5
mov al, byte [ebp - 0xd]
test al, al
je 0x100447cd
mov byte [edi + 0x39], al
lea ecx, [edi + 0x40]
lea eax, [ebp - 0x24]
push eax
call fcn.1003ea12
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x10044783
xor eax, eax
cmp dword [edi + 0x60], eax
jne 0x10044787
cmp dword [edi + 0x64], eax
jne 0x10044787
mov byte [ebp - 0x1c], 1
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.1008e3f5
mov eax, dword [ebp - 0x1c]
test al, al
je 0x100447cd
push 0x1000dd30
lea ecx, [ebp - 0x24]
call fcn.1006f372
push 0x100093a4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x35
call fcn.1006f372
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x40]
call fcn.10032eb6
jmp 0x100446e6
push ebx
push ecx
mov ecx, edi
call fcn.100438f4
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
test eax, eax
je 0x100447f1
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov eax, edi
call fcn.100a4e71
ret 8