Function at 0x9f6fde
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0xaf4ef2
call fcn.00a6fc7c
sub esp, 0x114
push ebx
push esi
push edi
mov dword [ebp - 0x38], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
xor edi, edi
lea esi, [ecx + 0x580]
mov dword [ebp - 0x28], ebx
mov eax, dword [esi]
cmp eax, ebx
je 0x9f7020
cmp edi, dword [eax - 4]
jae 0x9f7020
mov ecx, dword [ebp - 0x28]
add ecx, eax
call fcn.009f7991
inc edi
add dword [ebp - 0x28], 0x44
jmp 0x9f7004
mov edi, dword [ebp - 0x38]
or dword [edi + 0x570], 0xffffffff
mov ecx, esi
call fcn.009f84b6
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x44], esp
push 0x812
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
and byte [ebp - 4], 0
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp + 8]
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x18], ebx
je 0x9f7097
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x18]
call fcn.004053ee
cmp eax, ebx
jge 0x9f7097
cmp eax, 0x80004002
je 0x9f7097
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x110]
push eax
mov byte [ebp - 4], 4
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9f70b2
push eax
call fcn.00a6ef01
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
je 0x9f7930
call fcn.00409ffd
test eax, eax
je 0x9f7930
push ecx
mov eax, esp
mov dword [ebp - 0x44], esp
push 0x31e
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x50]
push eax
lea ecx, [edi + 0x574]
mov byte [ebp - 4], 5
call fcn.00414a49
mov ecx, eax
call fcn.00404ba3
lea ecx, [ebp - 0xb0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 8
call fcn.0041511b
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.0041aecf
lea ecx, [ebp - 0x4c]
call fcn.004027b1
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0xc
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9f7155
push eax
call fcn.00a6ef01
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xb
call fcn.004027e9
cmp dword [ebp - 0x18], ebx
jne 0x9f7170
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp - 0x18]
call fcn.00409ffd
lea ecx, [ebp - 0x2d]
push ecx
push eax
mov ecx, esi
call fcn.009f84f2
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x18], ebx
jne 0x9f7199
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp - 0x18]
call fcn.00409ffd
cmp dword [ebp - 0x28], eax
jae 0x9f7959
push 0x20
pop eax
call fcn.00a70270
mov eax, esp
push ebx
push ebx
push eax
push dword [ebp - 0x28]
call fcn.004150a7
pop ecx
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0040339f
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x14], ebx
je 0x9f7217
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x14]
call fcn.004053ee
cmp eax, ebx
jge 0x9f7217
cmp eax, 0x80004002
je 0x9f7217
push eax
call fcn.00a6ef01
lea eax, [ebp - 0xf0]
push eax
mov byte [ebp - 4], 0x11
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9f7232
push eax
call fcn.00a6ef01
cmp dword [ebp - 0x14], ebx
je 0x9f7920
mov esi, dword [ebp - 0x40]
add esi, dword [edi + 0x580]
lea eax, [edi + 0x580]
mov ecx, esi
call fcn.009f7991
push ecx
mov eax, esp
mov dword [ebp - 0x10], esp
push 0xe25
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x13
call fcn.0041511b
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.0041aecf
lea ecx, [ebp - 0x74]
call fcn.004027b1
lea eax, [ebp - 0xd0]
push eax
mov byte [ebp - 4], 0x16
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9f72c3
push eax
call fcn.00a6ef01
cmp dword [ebp - 0x2c], ebx
jne 0x9f72d2
push 0x80004003
call fcn.00a6ef01
cmp dword [ebp - 0x20], ebx
jne 0x9f72e1
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x20]
call fcn.00404b07
mov edx, eax
mov ecx, edi
mov dword [ebp - 0x10], edx
call fcn.00404b07
mov ecx, dword [ebp - 0x10]
add ecx, eax
mov dword [esi], ecx
cmp dword [ebp - 0x2c], ebx
jne 0x9f730e
push 0x80004003
call fcn.00a6ef01
cmp dword [ebp - 0x20], ebx
jne 0x9f731d
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x20]
call fcn.00404b2e
mov edx, eax
mov ecx, edi
mov dword [ebp - 0x10], edx
call fcn.00404b2e
mov ecx, dword [ebp - 0x10]
add ecx, eax
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x10], esp
push 0x1581
push eax
mov dword [esi + 4], ecx
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x16
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x19
call fcn.00415344
mov dword [esi + 8], eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x16
call fcn.004029b7
add esp, 0xc
cmp eax, ebx
jge 0x9f7399
push eax
call fcn.00a6ef01
mov edi, 0xbdd488
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x10], esp
push 0x50d
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x16
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x1b
call fcn.00443ece
pop ecx
pop ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], ebx
call fcn.004674e6
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x1d
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9f7406
push eax
call fcn.00a6ef01
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x10], esp
push 0x50f
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1d
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x1f
call fcn.00443ece
pop ecx
pop ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
call fcn.004674e6
lea eax, [ebp - 0xc0]
push eax
mov byte [ebp - 4], 0x21
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9f746e
push eax
call fcn.00a6ef01
push ecx
mov eax, esp
mov dword [ebp - 0x10], esp
push 0x654
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0x23
call fcn.0041511b
pop ecx
pop ecx
lea ecx, [esi + 0x28]
push eax
mov byte [ebp - 4], 0x24
call fcn.0041ef46
cmp eax, ebx
jge 0x9f74ce
cmp eax, 0x80004002
je 0x9f74ce
push eax
call fcn.00a6ef01
lea ecx, [ebp - 0x48]
call fcn.004027b1
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 4], 0x21
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9f74f1
push eax
call fcn.00a6ef01
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x10], esp
push 0x813
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.00406368
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
mov ecx, eax
mov byte [ebp - 4], 0x26
call fcn.004032b2
cmp eax, ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x1c], ebx
je 0x9f7557
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004053ee
cmp eax, ebx
jge 0x9f7557
cmp eax, 0x80004002
je 0x9f7557
push eax
call fcn.00a6ef01
lea eax, [ebp - 0x100]
push eax
mov byte [ebp - 4], 0x28
call fcn.004029b7
cmp eax, ebx
pop ecx
jge 0x9f7572
push eax
call fcn.00a6ef01
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
je 0x9f78e6
call fcn.00409ffd
test eax, eax
je 0x9f78e6
cmp dword [ebp - 0x1c], ebx
jne 0x9f7599
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp - 0x1c]
call fcn.00409ffd
lea ecx, [ebp - 0x2d]
push ecx
lea edi, [esi + 0x2c]
push eax
mov ecx, edi
call fcn.004f78bd
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x1c], ebx
jne 0x9f75c2
push 0x80004003
call fcn.00a6ef01
mov ecx, dword [ebp - 0x1c]
call fcn.00409ffd
cmp dword [ebp - 0x24], eax
jae 0x9f7864
push 0x20
pop eax
call fcn.00a70270
mov eax, esp
push ebx
push eax
push dword [ebp - 0x24]
call fcn.004150a7
pop ecx
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0040339f
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x28
call fcn.0040263b
mov ecx, eax
call fcn.00403ac7
push eax
mov byte [ebp - 4], 0x2a
call fcn.00415344
pop ecx
pop ecx
push dword [ebp - 0x24]
mov ecx, edi
mov ebx, eax
call fcn.004d9da2
mov dword [eax], ebx
lea eax, [ebp - 0x120]
push eax
mov byte [ebp - 4], 0x28
call fcn.004029b7
xor ebx, ebx
cmp eax, ebx
pop ecx
jge 0x9f7644
push eax
call fcn.00a6ef01
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x588]
cmp eax, ebx
je 0x9f7687
cmp dword [esi + 0x20], ebx
jne 0x9f7687
push eax
call fcn.006ce0bd
cmp eax, ebx
pop ecx
je 0x9f7687
mov ecx, dword [edi]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0x64], ecx
push ebx
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [eax + 0xa0]
call fcn.004c2486
test eax, eax
je 0x9f7687
mov dword [esi + 0x20], 1
cmp dword [ebp - 0x24], ebx
jne 0x9f77e4
mov eax, dword [edi]
push dword [eax]
lea eax, [ebp - 0x80]
push eax
call fcn.005340ee
pop ecx
pop ecx
cmp dword [eax + 4], 0
lea ecx, [ebp - 0x7c]
sete bl
mov byte [ebp - 4], 0x28
call fcn.004027e9
lea ecx, [ebp - 0x80]
call fcn.004027e9
test bl, bl
jne 0x9f78be
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x9f76d1
cmp byte [eax], bl
jne 0x9f77cc
lea eax, [ebp - 0x58]
push 0x614
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push dword [eax]
mov eax, dword [edi]
push dword [eax]
mov ecx, dword [0xbd8fe8]
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x2c
call fcn.00603281
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0x2d
call fcn.00418f94
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x2c
call fcn.004063b5
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x28
call fcn.004063b5
lea eax, [ebp - 0x68]
push 0x615
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push dword [eax]
mov eax, dword [edi]
push dword [eax]
mov ecx, dword [0xbd8fe8]
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x2e
call fcn.00603281
push eax
lea ecx, [esi + 0x10]
mov byte [ebp - 4], 0x2f
call fcn.00418f94
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x2e
call fcn.004063b5
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x28
call fcn.004063b5
lea eax, [ebp - 0x44]
push 0x814
push eax
call fcn.007a48d0
mov ecx, eax
call fcn.0040652b
push dword [eax]
mov eax, dword [edi]
push dword [eax]
mov ecx, dword [0xbd8fe8]
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x30
call fcn.00603281
push eax
lea ecx, [esi + 0x14]
mov byte [ebp - 4], 0x31
call fcn.00418f94
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x30
call fcn.004063b5
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x28
call fcn.004063b5
jmp 0x9f77e4
lea eax, [ebp - 0x34]
push eax
lea ecx, [esi + 0xc]
call fcn.00418f94
lea eax, [ebp - 0x3c]
push eax
lea ecx, [esi + 0x14]
call fcn.00418f94
and dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x568]
test eax, eax
je 0x9f785a
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [eax - 4]
jae 0x9f785a
mov eax, dword [edi]
mov edx, dword [ebp - 0x24]
mov ebx, ecx
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx + 0x568]
lea ebx, [ebx + ebx*2]
shl ebx, 2
mov ecx, dword [ecx + ebx]
cmp ecx, dword [eax + edx*4]
jne 0x9f7855
cmp dword [ebp - 0x10], 0
je 0x9f782e
lea ecx, [esi + 0x30]
call fcn.004c2448
mov ecx, dword [ebp - 0x10]
mov dword [eax], ecx
push 1
pop eax
cmp dword [esi + 0x18], eax
je 0x9f7855
cmp dword [ebp - 0x10], 0
je 0x9f7852
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x568]
xor ecx, ecx
cmp dword [eax + ebx + 8], ecx
setne cl
inc ecx
inc ecx
mov eax, ecx
mov dword [esi + 0x18], eax
inc dword [ebp - 0x10]
jmp 0x9f77e8
inc dword [ebp - 0x24]
xor ebx, ebx
jmp 0x9f75b3
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
mov byte [ebp - 4], 0x21
je 0x9f7875
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1d
call fcn.004063b5
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x16
call fcn.004063b5
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov byte [ebp - 4], 0x11
je 0x9f789e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
mov byte [ebp - 4], 0xb
je 0x9f78af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0x28]
add dword [ebp - 0x40], 0x44
mov edi, dword [ebp - 0x38]
jmp 0x9f718a
lea ecx, [ebp - 0x1c]
call fcn.004027e9
mov eax, dword [ebp - 0x3c]
test eax, eax
mov byte [ebp - 4], 0x1d
je 0x9f78db
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 0x16
test eax, eax
jmp 0x9f790c
lea ecx, [ebp - 0x1c]
call fcn.004027e9
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
mov byte [ebp - 4], 0x1d
je 0x9f7903
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 0x16
cmp eax, ebx
je 0x9f7918
add eax, 0xfffffff4
push eax
call fcn.00429f5a
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.00415cc4
lea ecx, [ebp - 0x14]
call fcn.004027e9
lea ecx, [ebp - 0x20]
call fcn.00415cc4
lea ecx, [ebp - 0x18]
call fcn.004027e9
lea ecx, [ebp + 8]
call fcn.004027e9
xor eax, eax
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x12c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4
mov eax, dword [ebp - 0x20]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x9f796a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
and byte [ebp - 4], 0
cmp eax, ebx
je 0x9f797b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 8]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x9f798c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 1
pop eax
jmp 0x9f7942