Function at 0x10025e96
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x124
mov eax, 0x10066f99
call fcn.1004adf3
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x120]
mov esi, dword [ebp + 0xc]
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0xec], ebx
call fcn.10002f29
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 1
call fcn.10002f29
push ebx
mov byte [ebp - 4], 2
call fcn.10047a3e
pop ecx
add eax, 0xb6109100
push ebx
push 0xf4240
adc edx, 2
push edx
push eax
call fcn.1004ba10
mov ebx, eax
lea ecx, [ebp - 0x58]
mov edi, edx
mov dword [ebp - 0x128], ebx
push str.iY2PT_c_SL_Yb
mov dword [ebp - 0x124], edi
call fcn.10002e3f
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 4
call fcn.100040c2
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.10003109
push 0
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.10003109
push edi
push ebx
lea ecx, [ebp - 0x28]
call fcn.1002a9ee
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 5
call fcn.100040c2
xor ebx, ebx
mov byte [ebp - 4], 2
xor edi, edi
lea ecx, [ebp - 0x28]
push ebx
inc edi
push edi
call fcn.10003109
push str.h_b_SzPFa
lea ecx, [ebp - 0x58]
call fcn.10002e3f
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
call fcn.1000c43d
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x11c]
call fcn.100040c2
push ebx
push edi
lea ecx, [ebp - 0x28]
call fcn.10003109
push ebx
push edi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.10003109
lea edx, [esi + 0x30]
lea ecx, [ebp - 0x28]
call fcn.10011f87
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 8
call fcn.100040c2
push ebx
push edi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
push 0x1007820c
lea ecx, [ebp - 0x58]
call fcn.10002e3f
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xa
call fcn.100040c2
push ebx
push edi
lea ecx, [ebp - 0x28]
call fcn.10003109
push ebx
push edi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.10003109
mov edx, esi
lea ecx, [ebp - 0x28]
call fcn.10011f87
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xb
call fcn.100040c2
push ebx
push edi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
push str.9TlLPa
lea ecx, [ebp - 0x58]
call fcn.10002e3f
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xd
call fcn.100040c2
push ebx
push edi
lea ecx, [ebp - 0x28]
call fcn.10003109
push ebx
push edi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.10003109
lea edx, [esi + 0x18]
lea ecx, [ebp - 0x28]
call fcn.10011f87
push 0xe
pop ebx
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], bl
call fcn.100040c2
xor edi, edi
mov byte [ebp - 4], 2
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.10003109
push str..T_ha
lea ecx, [ebp - 0x58]
call fcn.10002e3f
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x10
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.10003109
cmp dword [esi + 0x58], edi
je 0x10026130
lea edx, [esi + 0x48]
lea ecx, [ebp - 0x40]
call fcn.10011f87
xor ebx, ebx
mov byte [ebp - 4], 0x11
inc ebx
jmp 0x1002617e
push 0x10078234
lea ecx, [ebp - 0x58]
call fcn.10002e3f
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xec], 2
call fcn.1000c43d
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
mov edx, eax
mov dword [ebp - 0xec], 6
call fcn.10011f87
mov dword [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xec], ebx
call fcn.100040c2
test bl, 8
je 0x100261a9
push edi
and ebx, 0xfffffff7
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
test bl, 4
je 0x100261c5
push edi
and ebx, 0xfffffffb
lea ecx, [ebp - 0x88]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
test bl, 2
je 0x100261de
push edi
and ebx, 0xfffffffd
lea ecx, [ebp - 0x58]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
mov dword [ebp - 4], 2
test bl, 1
je 0x100261fe
push edi
and ebx, 0xfffffffe
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
mov edi, dword [esi + 0x68]
mov eax, edi
mov ecx, dword [esi + 0x6c]
or eax, ecx
mov dword [ebp - 0xf0], ecx
jne 0x1002621f
mov edi, 0x92bab140
mov dword [ebp - 0xf0], 0x3018b4
push str.iPg.c2PbSL_Yb
lea ecx, [ebp - 0x58]
call fcn.10002e3f
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x16
call fcn.100040c2
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push 0
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.10003109
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x40]
push edi
call fcn.1002a9ee
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x17
call fcn.100040c2
xor edi, edi
mov byte [ebp - 4], 2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push str.bPYL2Pa
lea ecx, [ebp - 0x58]
call fcn.10002e3f
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x19
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.10003109
mov al, byte [esi + 0x60]
test al, al
je 0x1002631a
push 0x10078268
lea ecx, [ebp - 0x28]
call fcn.10002e3f
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x28]
or ebx, 0x10
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xec], ebx
call fcn.1000c43d
mov dword [ebp - 4], 0x1b
or ebx, 0x20
jmp 0x1002634f
push 0x10077134
lea ecx, [ebp - 0x58]
call fcn.10002e3f
mov dword [ebp - 4], 0x1c
lea edx, [ebp - 0x58]
or ebx, 0x40
lea ecx, [ebp - 0x40]
mov dword [ebp - 0xec], ebx
call fcn.1000c43d
mov dword [ebp - 4], 0x1d
or ebx, 0x80
push eax
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xec], ebx
call fcn.100040c2
test bl, bl
jns 0x1002637c
push edi
and ebx, 0xffffff7f
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
test bl, 0x40
je 0x10026395
push edi
and ebx, 0xffffffbf
lea ecx, [ebp - 0x58]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
test bl, 0x20
je 0x100263b1
push edi
and ebx, 0xffffffdf
lea ecx, [ebp - 0x88]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
mov dword [ebp - 4], 2
test bl, 0x10
je 0x100263d1
push edi
and ebx, 0xffffffef
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
push str.h__._lFa
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x1f
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
mov al, byte [esi + 0x61]
test al, al
je 0x10026458
push 0x10078268
lea ecx, [ebp - 0x58]
call fcn.10002e3f
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x58]
or ebx, 0x100
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xec], ebx
call fcn.1000c43d
mov dword [ebp - 4], 0x21
or ebx, 0x200
jmp 0x10026490
push 0x10077134
lea ecx, [ebp - 0x28]
call fcn.10002e3f
mov dword [ebp - 4], 0x22
lea edx, [ebp - 0x28]
or ebx, 0x400
lea ecx, [ebp - 0x40]
mov dword [ebp - 0xec], ebx
call fcn.1000c43d
mov dword [ebp - 4], 0x23
or ebx, 0x800
push eax
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xec], ebx
call fcn.100040c2
test ebx, 0x800
je 0x100264c1
push edi
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
test ebx, 0x400
je 0x100264e0
push edi
and ebx, 0xfffffbff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
test ebx, 0x200
je 0x10026502
push edi
and ebx, 0xfffffdff
lea ecx, [ebp - 0x88]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
mov dword [ebp - 4], 2
test ebx, 0x100
je 0x10026528
push edi
and ebx, 0xfffffeff
lea ecx, [ebp - 0x58]
push 1
mov dword [ebp - 0xec], ebx
call fcn.10003109
push str.ilTb_STYYPbbSL_Yb
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x25
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
push dword [ebp - 0x124]
lea ecx, [ebp - 0x40]
push dword [ebp - 0x128]
call fcn.1002a9ee
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x26
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10003109
push str.8MhTbSPg.c2Pbc
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x28
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
push 0x10078268
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x2a
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
push 1
call fcn.10003109
push str..P2bcb_P_a
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x2c
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
push 0x10078268
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x2e
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
push str..2c_2c_Fa
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x30
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
push 0x10078268
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x32
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10003109
push str.PY2F._P_S9TlLPa
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x40]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x34
call fcn.100040c2
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.10003109
and dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
lea ecx, [esi + 0x70]
mov byte [ebp - 4], 0x35
lea edx, [ebp - 0xb8]
call fcn.1000ed0b
push 0x10078318
lea ecx, [ebp - 0x28]
call fcn.100013a0
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x70]
call fcn.100321fa
mov edx, eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xe8]
call fcn.10012362
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x88]
call fcn.10011fde
mov esi, eax
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x40]
call fcn.1000c456
push esi
mov edx, eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xd0]
call fcn.10001ad6
pop ecx
xor edi, edi
lea ecx, [ebp - 0x40]
xor esi, esi
push edi
inc esi
push esi
call fcn.1000146d
push edi
push esi
lea ecx, [ebp - 0x88]
call fcn.1000146d
push edi
push esi
lea ecx, [ebp - 0xe8]
call fcn.1000146d
push edi
push esi
lea ecx, [ebp - 0x70]
call fcn.1000146d
push edi
push esi
lea ecx, [ebp - 0x28]
call fcn.1000146d
xor eax, eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], edi
mov word [ebp - 0xa0], ax
lea edx, [ebp - 0xa0]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xd0]
call fcn.1000ed9e
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x104]
call fcn.100040c2
push str.098V7Zk0_8V0D___zcPbOc
lea ecx, [ebp - 0x28]
call fcn.10002e3f
mov byte [ebp - 4], 0x42
lea edx, [ebp - 0x28]
mov esi, dword [ebp - 0x12c]
mov ecx, esi
call fcn.1000c43d
push edi
or ebx, 0x1000
mov byte [ebp - 4], 0x41
push 1
lea ecx, [ebp - 0x28]
mov dword [ebp - 0xec], ebx
call fcn.10003109
mov ebx, 0x100773ec
lea ecx, [ebp - 0x28]
push ebx
call fcn.10002e3f
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x43
push eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x120]
call fcn.10008ae6
push 0xffffffffffffffff
push edi
push eax
mov ecx, esi
mov byte [ebp - 4], 0x44
call fcn.1000412b
push edi
push 1
lea ecx, [ebp - 0x70]
call fcn.10003109
push edi
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.10003109
mov edi, 0x1007834c
push edi
call fcn.1000213a
pop ecx
push eax
push edi
mov ecx, esi
call fcn.1000d767
push str.i3pAZ7_Oa
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x70]
call fcn.1000c43d
push 0xffffffffffffffff
xor edi, edi
mov byte [ebp - 4], 0x46
push edi
push eax
mov ecx, esi
call fcn.1000412b
push edi
push 1
lea ecx, [ebp - 0x70]
call fcn.10003109
push edi
inc edi
mov byte [ebp - 4], 0x41
push edi
lea ecx, [ebp - 0x28]
call fcn.10003109
push ebx
lea ecx, [ebp - 0x28]
call fcn.10002e3f
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x108]
call fcn.10008ae6
push 0xffffffffffffffff
xor ebx, ebx
mov byte [ebp - 4], 0x48
push ebx
push eax
mov ecx, esi
call fcn.1000412b
push ebx
push edi
lea ecx, [ebp - 0x70]
call fcn.10003109
push ebx
push edi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.10003109
push 0x10078368
lea ecx, [ebp - 0x58]
call fcn.10002e3f
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x70]
call fcn.1000c43d
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x4a
call fcn.1000412b
push ebx
push edi
lea ecx, [ebp - 0x70]
call fcn.10003109
push ebx
push edi
lea ecx, [ebp - 0x58]
call fcn.10003109
push ebx
push edi
lea ecx, [ebp - 0xa0]
call fcn.10003109
push ebx
push edi
lea ecx, [ebp - 0xd0]
call fcn.1000146d
push ebx
push edi
lea ecx, [ebp - 0xb8]
call fcn.1000146d
lea ecx, [ebp - 0x108]
call fcn.10003dd2
lea ecx, [ebp - 0x120]
call fcn.10003dd2
mov eax, esi
call fcn.1004ada2
ret 8