Function at 0x10026720
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x10064ed3
call fcn.10063a38
sub esp, 0xdc
push ebx
push esi
mov byte [ebp - 0x20], dl
xor ebx, ebx
mov dword [ebp - 0x3c], 0xda1
cmp dword [ebp - 0x3c], 0x1104
push edi
mov dword [ebp - 0x10], esp
jle 0x10026793
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov ecx, edi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], ebx
shl esi, cl
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10081ef8
cdq
push edx
push eax
call fcn.10003ea0
inc ebx
cmp ebx, 0x7a85
jl 0x1002675c
mov esi, dword [ebp - 0x14]
inc edi
push 0
pop ebx
cmp edi, 0x2429
jl 0x10026752
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x69ac
jl 0x10026750
cmp byte [ebp - 0x20], 0
je 0x100268bf
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1002685e
mov dword [ebp - 0x14], 0x1ce2
cmp dword [ebp - 0x14], 0x205a
jle 0x100267e7
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10081ef8
cdq
push edx
push eax
call fcn.10003ea0
inc edi
cmp edi, 0x4c64
jl 0x100267c5
inc esi
cmp esi, 0x3e25
jl 0x100267c3
push ebx
push 0x7479
push 0xc99
push 1
push 0x33d4
push 0x537b
push 0x671b
push 0x4387
push 0x3108
push 0x2265
push 0x3b4b
push 1
push 0x168b
push 0x26f2
push 0x7f34
push 0x21d5
mov edx, 0x5a58
mov ecx, 0x527e
call fcn.100250cc
add esp, 0x40
mov dword [ebp - 4], 4
cmp dword [ebp - 0x14], 0x1bfa
jge 0x1002685e
mov edx, str.qnbbcwqro_ncern_drpruyqvk_nvgm_hvmpvhztf_kdpjdnw_cneoo_oaijyx_fnzs_flwxfhj
mov ecx, 0x10081ef8
call fcn.10005908
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x3c], 0xd83
jge 0x10026e51
mov edx, str.olvofz_xdlow_ayz_odw
mov ecx, 0x10081ef8
call fcn.10005908
jmp 0x10026e51
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0xa4]
push 3
pop esi
mov dword [ebp - 4], 6
mov eax, dword [edi + 0x10]
push esi
mov dword [ebp - 0x3c], eax
call fcn.10002861
push 7
pop eax
mov byte [ebp - 4], al
xor edx, edx
mov dword [ebp - 0x28], 0xfffffff8
inc edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0xddd9cd44
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0x80eec299
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0xd6273d59
mov dword [ebp - 0x18], 0xc629c4dd
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x18], 0x28217c71
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x6c], 2
mov dword [ebp - 0x14], ebx
jmp 0x10026955
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa4]
mov dword [eax + ecx*4], 0x256915a1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10026942
mov dword [ebp - 0x14], ebx
jmp 0x1002696c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe0], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1002695f
push edx
push 0x74de
push 0xd60
push ebx
lea eax, [ebp - 0x28]
mov ecx, 0x11e9
push eax
push 0x4e6b
push 0x32ef
push 0x5a89
push 0x2cd3
push 0x7a41
push 0x7be6
push edx
lea eax, [ebp - 0xa4]
mov edx, 0x2115
push eax
push 0x5bf0
push 0x3307
push 0x52f0
call fcn.100250cc
add esp, 0x40
mov dword [ebp - 0x28], ebx
jmp 0x10026a56
mov dword [ebp - 0x18], 6
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x18], 0xd72276b
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x18], 0xc9a57b5b
mov dword [ebp - 0x18], 1
push esi
call fcn.10002861
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0xcc]
mov edx, 0x226d
push ebx
push eax
mov ecx, 0x1569
call fcn.100263d0
add esp, 0xc
lea eax, [ebp - 0x6c]
xor dl, dl
push 0x2fac
push eax
push ecx
mov ecx, 0x4e4b
call fcn.10024f0c
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xbc]
call fcn.100028c3
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff5
jle 0x100269d0
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 6
call fcn.100028c3
mov esi, dword [ebp + 0x10]
lea ecx, [ebp - 0xc8]
push 2
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x14], 0xf5540d7f
mov dword [ebp - 0x18], eax
call fcn.10002861
push ecx
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0xe4]
call fcn.1002557d
pop ecx
pop ecx
mov dword [ebp - 0x14], 0xfffffffc
jmp 0x10026ac9
push ecx
push ecx
push 0x7a8d
push ecx
push ecx
mov dl, 1
mov ecx, 0x576e
call fcn.100248a1
add esp, 0x14
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1b
je 0x10026aae
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 6
call fcn.100028c3
cmp dword [edi + 0x14], 8
jb 0x10026ae8
mov eax, dword [edi]
jmp 0x10026aea
mov eax, edi
push dword [edi + 0x10]
mov ecx, esi
push ebx
push eax
call fcn.10023434
mov esi, ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], esi
cmp esi, dword [ebp - 0x18]
jae 0x10026e3d
push 3
lea ecx, [ebp - 0xb0]
call fcn.10002861
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x30], 0xfffffff8
mov edx, 0x377e
push 7
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xddd9cd44
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], eax
xor eax, eax
push 0x4058
push ecx
mov dword [ebp - 0x1c], 0x80eec299
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x1c], ebx
inc eax
push ecx
mov dword [ebp - 0x1c], 0xffffffff
mov ecx, 0x3ab3
mov dword [ebp - 0x1c], 0xd6273d59
push eax
mov dword [ebp - 0x1c], 0xc629c4dd
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], eax
push 0x7366
push eax
mov dword [ebp - 0x1c], 0x28217c71
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x68], 2
push eax
call fcn.1002447d
xor ecx, ecx
mov dword [ebp - 0x2c], ebx
add esp, 0x1c
inc ecx
jmp 0x10026baa
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xe8], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10026b9d
mov dword [ebp - 0x1c], 0x1d9c
cmp dword [ebp - 0x1c], 0x735
jge 0x10026c7f
movdqa xmm0, xmmword [0x100737f0]
movdqu xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x78], 0x787a273b
movdqa xmm0, xmmword [0x100737d0]
movdqu xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0x6e627663
mov dword [ebp - 0x70], 0x2f2e2c6d
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], ebx
mov byte [ebp - 0x58], bl
mov byte [ebp - 4], 0xb
mov esi, 0x10082018
mov eax, dword [0x10082018]
push 0xa
mov ecx, dword [eax + 4]
add ecx, esi
call fcn.1001f326
movzx eax, al
lea edx, [ebp - 0x58]
push eax
mov ecx, esi
call fcn.10028e6c
cmp dword [ebp - 0x48], 0
mov edi, ebx
pop ecx
jbe 0x10026c62
mov ecx, dword [ebp - 0x44]
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x58]
cmp ecx, 0x10
cmovae eax, edx
cmp byte [eax + edi], 0x20
jne 0x10026c9d
cmp ecx, 0x10
lea eax, [ebp - 0x58]
cmovae eax, edx
mov dl, byte [eax + edi]
call fcn.10028ca3
inc edi
cmp edi, dword [ebp - 0x48]
jb 0x10026c36
push 0x10081ef8
call fcn.100208f9
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xa
call fcn.10003049
mov edi, dword [ebp + 0x14]
push ecx
push ecx
lea eax, [ebp - 0xb0]
push eax
push ecx
push ebx
lea ecx, [ebp - 0x30]
call fcn.10025f34
add esp, 0x14
mov dword [ebp - 0x30], ebx
jmp 0x10026d62
xor esi, esi
inc esi
cmp ecx, 0x10
lea eax, [ebp - 0x58]
cmovae eax, edx
movsx eax, byte [eax + edi]
push eax
call fcn.1004c66a
pop ecx
movsx ecx, byte [ebp + esi - 0x98]
cmp eax, ecx
jne 0x10026ccc
mov dl, byte [ebp + esi - 0x9a]
call fcn.10028ca3
inc esi
cmp esi, 0x2c
jae 0x10026c5c
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x58]
jmp 0x10026ca0
mov dword [ebp - 0x1c], 6
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x1c], 0xd72276b
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x1c], 0xc9a57b5b
mov dword [ebp - 0x1c], 1
push 3
call fcn.10002861
push 1
push ecx
push ecx
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0xc
push eax
push 0x33e6
mov edx, 0x43c
lea ecx, [ebp - 0xdc]
call fcn.10024526
add esp, 0x10
push 1
push 0x1f03
push ecx
push 0xc22
lea ecx, [ebp - 0x68]
call fcn.10027089
add esp, 0x14
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd8]
call fcn.100028c3
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff5
jle 0x10026cda
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 6
call fcn.100028c3
mov eax, dword [ebp - 0x38]
cmp eax, 0xffffffff
je 0x10026e22
cmp eax, dword [ebp - 0x40]
je 0x10026df3
mov dword [ebp - 0x14], ebx
jmp 0x10026d9f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x34], 0x9fdf99ff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10026d91
mov dword [ebp - 0x34], ebx
jmp 0x10026dc3
push ecx
push 0x4fa8
push ecx
mov dl, 1
mov ecx, 0x58f7
call fcn.10024cae
add esp, 0xc
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffe3
jne 0x10026daa
push 0x4e7e
lea eax, [ebp - 0x38]
xor dl, dl
push eax
push 0x35a1
push 0x1a1a
push dword [ebp + 0x10]
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x40]
call fcn.10025f69
mov eax, dword [ebp - 0x38]
add esp, 0x18
mov esi, dword [ebp - 0x3c]
add esi, eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x40], esi
jb 0x10026e05
mov eax, dword [edi]
jmp 0x10026e07
mov eax, edi
push dword [edi + 0x10]
mov ecx, dword [ebp + 0x10]
push esi
push eax
call fcn.10023434
mov dword [ebp - 0x38], eax
cmp esi, 0xffffffff
jne 0x10026afe
jmp 0x10026e3d
mov edx, dword [ebp + 0x10]
lea eax, [ebp - 0x64]
push eax
push 0x1031
lea eax, [ebp - 0x40]
push eax
push 1
push ecx
call fcn.10026581
add esp, 0x14
mov ecx, dword [ebp + 0x18]
lea eax, [ebp - 0x64]
push eax
call fcn.10028414
lea ecx, [ebp - 0x64]
call fcn.10028919
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret