Function at 0x1001fe34
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x85c
mov eax, 0x10065ce6
call fcn.1004adf3
mov byte [ebp - 0x839], dl
mov dword [ebp - 0x844], ecx
xor ebx, ebx
mov dword [ebp - 0x834], ebx
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jne 0x1001fe65
mov al, 1
jmp 0x10020a20
mov edi, str.BQ87_X_rT2PHcY2_b_X_Kc__rb_V0L22P_iP2bc_Kc__rbd
mov dword [ebp - 0x840], 0x20019
push edi
lea ecx, [ebp - 0x63c]
mov byte [ebp - 0x82d], bl
call fcn.10002e3f
mov dword [ebp - 4], ebx
lea edx, [ebp - 0x63c]
mov esi, reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x6e4]
mov dword [ebp - 0x838], esi
call fcn.1000c43d
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 1
push ecx
lea ecx, [ebp - 0x82d]
push ecx
push eax
lea eax, [ebp - 0x838]
push eax
lea ecx, [ebp - 0x754]
call fcn.1002b11c
push ebx
push 1
lea ecx, [ebp - 0x6e4]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x63c]
mov byte [ebp - 4], 4
call fcn.10003109
push edi
lea ecx, [ebp - 0x66c]
mov dword [ebp - 0x838], 0x20119
mov byte [ebp - 0x82d], bl
call fcn.10002e3f
mov byte [ebp - 4], 5
lea edx, [ebp - 0x66c]
lea ecx, [ebp - 0x6b4]
mov dword [ebp - 0x840], esi
call fcn.1000c43d
lea ecx, [ebp - 0x838]
mov byte [ebp - 4], 6
push ecx
lea ecx, [ebp - 0x82d]
push ecx
push eax
lea eax, [ebp - 0x840]
push eax
lea ecx, [ebp - 0x728]
call fcn.1002b11c
push ebx
push 1
lea ecx, [ebp - 0x6b4]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x66c]
call fcn.10003109
push 7
pop esi
mov dword [ebp - 4], esi
lea eax, [ebp - 0x6fc]
push dword [ebp - 0x844]
lea ecx, [ebp - 0x85c]
mov dword [ebp - 0x85c], ebx
push eax
lea eax, [ebp - 0x754]
mov dword [ebp - 0x858], ebx
push eax
push ebx
mov dword [ebp - 0x854], ebx
call fcn.10021410
push fcn.1002b1d6
push 2
push 0x2c
lea eax, [ebp - 0x754]
mov byte [ebp - 4], 9
push eax
call fcn.1004745f
mov edi, dword [ebp - 0x85c]
jmp 0x100209ff
cmp dword [edi + 8], ebx
je 0x100209fc
push str.8M3..8c_S_ppbc
lea ecx, [ebp - 0x4b4]
call fcn.10002e3f
lea edx, [ebp - 0x4b4]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x46c]
call fcn.1000c43d
push eax
lea eax, [ebp - 0x54c]
mov byte [ebp - 4], 0xb
push eax
mov ecx, edi
call fcn.1002b25f
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xc
push ecx
mov ecx, eax
call fcn.10021e8e
xor eax, eax
mov dword [ebp - 0x4d0], esi
mov word [ebp - 0x4e4], ax
lea ecx, [ebp - 0x4e4]
lea eax, [ebp - 0x43c]
mov dword [ebp - 0x4d4], ebx
push eax
call fcn.10003028
push ebx
push 1
lea ecx, [ebp - 0x43c]
call fcn.10003109
lea ecx, [ebp - 0x54c]
call fcn.1002b748
push ebx
push 1
lea ecx, [ebp - 0x46c]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x4b4]
call fcn.10003109
cmp dword [ebp - 0x4d4], 0
jne 0x1002008d
push ebx
push 1
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 9
call fcn.10003109
jmp 0x100209fc
mov dword [ebp - 0x850], ebx
mov dword [ebp - 0x84c], ebx
mov dword [ebp - 0x848], ebx
push 0x10077af4
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x11
call fcn.10002e3f
lea eax, [ebp - 0x43c]
mov byte [ebp - 4], 0x12
push eax
lea edx, [ebp - 0x4e4]
lea ecx, [ebp - 0x850]
call fcn.100126c4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x43c]
call fcn.10003109
xor eax, eax
mov dword [ebp - 0x470], esi
mov dword [ebp - 0x474], ebx
mov word [ebp - 0x484], ax
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x850]
jmp 0x1002018a
push 0x208
lea eax, [ebp - 0x21c]
push ebx
push eax
call fcn.1004ac10
add esp, 0xc
cmp dword [esi + 0x14], 8
jb 0x10020121
mov eax, dword [esi]
jmp 0x10020123
mov eax, esi
push 0x104
lea ecx, [ebp - 0x21c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
test eax, eax
jne 0x1002014b
push 0xffffffffffffffff
push ebx
push esi
lea ecx, [ebp - 0x484]
call fcn.1000412b
jmp 0x1002016b
lea eax, [ebp - 0x21c]
push eax
call fcn.1000213a
pop ecx
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x484]
call fcn.1000d767
push 0x10076e58
call fcn.1000213a
pop ecx
push eax
push 0x10076e58
lea ecx, [ebp - 0x484]
call fcn.1000d767
add esi, 0x18
cmp esi, dword [ebp - 0x84c]
jne 0x10020102
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x46c]
call fcn.10002e17
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x4fc]
call fcn.10011dea
push ebx
push 1
lea ecx, [ebp - 0x46c]
call fcn.10003109
xor eax, eax
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
mov word [ebp - 0x4cc], ax
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x844]
mov esi, dword [eax]
mov eax, dword [eax + 4]
cmp esi, eax
je 0x1002039d
mov edi, eax
push 0x208
lea eax, [ebp - 0x424]
push ebx
push eax
call fcn.1004ac10
add esp, 0xc
cmp dword [esi + 0x14], 8
jb 0x10020218
mov eax, dword [esi]
jmp 0x1002021a
mov eax, esi
push 0x104
lea ecx, [ebp - 0x424]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
test eax, eax
je 0x1002038c
lea eax, [ebp - 0x424]
push eax
call fcn.1000213a
pop ecx
push eax
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.10003401
cmp byte [ebp - 0x839], 0
jne 0x100202fa
lea eax, [ebp - 0x4cc]
mov edx, 0x10077bdc
push eax
lea ecx, [ebp - 0x52c]
call fcn.1000d599
pop ecx
mov dword [ebp - 0x838], eax
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x49c]
call fcn.10002e17
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x454]
call fcn.10011dea
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x4fc]
push dword [ebp - 0x838]
lea ecx, [ebp - 0x46c]
push eax
call fcn.10011c0f
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x46c]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x454]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x49c]
call fcn.10003109
lea ecx, [ebp - 0x52c]
jmp 0x10020380
push 0x10076ce0
lea ecx, [ebp - 0x43c]
call fcn.10002e3f
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x49c]
call fcn.10002e17
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x454]
call fcn.10011dea
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x1d
push ecx
push eax
lea edx, [ebp - 0x4fc]
lea ecx, [ebp - 0x46c]
call fcn.10011c0f
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x46c]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x454]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x49c]
call fcn.10003109
lea ecx, [ebp - 0x43c]
push ebx
push 1
mov byte [ebp - 4], 0x17
call fcn.10003109
add esi, 0x18
cmp esi, edi
jne 0x100201f9
mov edi, dword [ebp - 0x840]
lea edx, [ebp - 0x484]
lea ecx, [ebp - 0x4fc]
call fcn.10003e1a
test al, al
jne 0x100209b2
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
test eax, eax
je 0x100203fa
mov ecx, 0x1e6
call fcn.1000c238
mov ecx, 0x1a8
mov esi, eax
call fcn.1000c2c8
cmp eax, esi
jl 0x100203fa
mov ecx, 0x27e
call fcn.1000c28f
mov ecx, 0x144
mov esi, eax
call fcn.1000c304
cmp esi, eax
jg 0x100203fa
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str._tZ_SpD3pSH3_8VZa
lea ecx, [ebp - 0x654]
call fcn.10002e3f
push 0x10077be0
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 4], 0x1e
call fcn.100080a6
mov dword [ebp - 0x838], eax
lea eax, [ebp - 0x5f4]
mov byte [ebp - 4], 0x1f
push eax
mov ecx, edi
call fcn.10021e71
push eax
lea ecx, [ebp - 0x6fc]
mov byte [ebp - 4], 0x20
call fcn.10008070
mov esi, eax
lea edx, [ebp - 0x654]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x684]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x69c]
mov byte [ebp - 4], 0x22
call fcn.10008070
push esi
mov edx, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x6cc]
call fcn.10008bd2
pop ecx
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x4b4]
push dword [ebp - 0x838]
mov edx, eax
call fcn.10008bd2
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x6cc]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x69c]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x684]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x6fc]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x5f4]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x5ac]
call fcn.10003109
push ebx
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x654]
push 1
call fcn.10003109
lea eax, [ebp - 0x454]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.10002ef7
push eax
lea ecx, [ebp - 0x4b4]
call fcn.10002e95
push ebx
push 1
lea ecx, [ebp - 0x454]
call fcn.10003109
push str.T__a
lea ecx, [ebp - 0x5dc]
call fcn.10002e3f
lea edx, [ebp - 0x5dc]
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x82c]
call fcn.1000c43d
push ebx
push 1
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 4], 0x2f
call fcn.10003109
lea eax, [ebp - 0x594]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.1000314f
mov edx, eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x814]
call fcn.10011f2c
push ebx
push 1
lea ecx, [ebp - 0x594]
mov byte [ebp - 4], 0x32
call fcn.10003109
push str._X__9a
lea ecx, [ebp - 0x5c4]
call fcn.10002e3f
lea edx, [ebp - 0x5c4]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x7fc]
call fcn.1000c43d
push ebx
push 1
lea ecx, [ebp - 0x5c4]
mov byte [ebp - 4], 0x35
call fcn.10003109
push str.8M3..8c_S_ppbc
lea ecx, [ebp - 0x624]
call fcn.10002e3f
lea edx, [ebp - 0x624]
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x57c]
call fcn.1000c43d
mov edx, eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x7e4]
call fcn.10011f2c
push ebx
push 1
lea ecx, [ebp - 0x57c]
call fcn.10003109
push ebx
mov byte [ebp - 4], 0x3a
push 1
lea ecx, [ebp - 0x624]
call fcn.10003109
push 0x10077bcc
lea ecx, [ebp - 0x52c]
call fcn.10002e3f
lea edx, [ebp - 0x52c]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x7cc]
call fcn.1000c43d
push ebx
push 1
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 0x3d
call fcn.10003109
xor edx, edx
lea ecx, [ebp - 0x7b4]
inc edx
call fcn.1002b798
push 0x10077bd4
lea ecx, [ebp - 0x49c]
mov byte [ebp - 4], 0x3e
call fcn.10002e3f
lea edx, [ebp - 0x49c]
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x79c]
call fcn.1000c43d
push ebx
push 1
lea ecx, [ebp - 0x49c]
mov byte [ebp - 4], 0x41
call fcn.10003109
lea edx, [ebp - 0x4fc]
lea ecx, [ebp - 0x784]
call fcn.10011f2c
mov byte [ebp - 4], 0x42
mov eax, dword [edi + 0xc]
shr eax, 8
test al, 1
je 0x10020701
push 0x10077be4
lea ecx, [ebp - 0x454]
call fcn.10002e3f
mov byte [ebp - 4], 0x43
lea edx, [ebp - 0x454]
mov esi, dword [ebp - 0x834]
lea ecx, [ebp - 0x544]
or esi, 1
mov dword [ebp - 0x834], esi
call fcn.1000c43d
or esi, 2
mov dword [ebp - 0x834], esi
jmp 0x10020718
push 0x10076ce0
lea ecx, [ebp - 0x564]
call fcn.10002e3f
or dword [ebp - 0x834], 4
push eax
lea ecx, [ebp - 0x76c]
call fcn.10002e70
mov eax, dword [ebp - 0x834]
test al, 4
je 0x1002074b
push ebx
and eax, 0xfffffffb
lea ecx, [ebp - 0x564]
push 1
mov dword [ebp - 0x834], eax
call fcn.10003109
mov eax, dword [ebp - 0x834]
test al, 2
je 0x1002076c
push ebx
and eax, 0xfffffffd
lea ecx, [ebp - 0x544]
push 1
mov dword [ebp - 0x834], eax
call fcn.10003109
mov eax, dword [ebp - 0x834]
mov dword [ebp - 4], 0x42
test al, 1
je 0x1002078e
push ebx
and eax, 0xfffffffe
lea ecx, [ebp - 0x454]
push 1
mov dword [ebp - 0x834], eax
call fcn.10003109
lea eax, [ebp - 0x754]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x82c]
push eax
push ecx
lea ecx, [ebp - 0x43c]
call fcn.10002f45
push 0x10002eba
push 9
push 0x18
lea eax, [ebp - 0x82c]
mov byte [ebp - 4], 0x47
push eax
call fcn.1004745f
xor eax, eax
mov dword [ebp - 0x500], 7
mov dword [ebp - 0x504], ebx
mov word [ebp - 0x514], ax
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x48
call fcn.1001e045
test al, al
je 0x10020a26
push str.2P:sPgPa
lea ecx, [ebp - 0x454]
call fcn.10002e3f
lea edx, [ebp - 0x454]
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x57c]
call fcn.1000c43d
push eax
lea ecx, [ebp - 0x564]
mov byte [ebp - 4], 0x4a
call fcn.10008070
mov esi, eax
lea eax, [ebp - 0x514]
mov byte [ebp - 4], 0x4b
push eax
lea ecx, [ebp - 0x544]
call fcn.10008070
push esi
mov edx, eax
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x46c]
call fcn.10008bd2
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x544]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x564]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x57c]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x51
call fcn.10003109
push 0x10076e58
lea ecx, [ebp - 0x49c]
call fcn.10002e3f
lea eax, [ebp - 0x49c]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x5ac]
push eax
lea ecx, [ebp - 0x43c]
call fcn.10008ae6
mov esi, eax
lea eax, [ebp - 0x594]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0x46c]
call fcn.1000314f
push esi
mov edx, eax
lea ecx, [ebp - 0x60c]
call fcn.10008c19
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x594]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x5ac]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x49c]
call fcn.10003109
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0x5dc]
push dword [ebp - 0x844]
lea ecx, [ebp - 0x868]
mov dword [ebp - 0x868], ebx
push eax
lea eax, [ebp - 0x60c]
mov dword [ebp - 0x864], ebx
push eax
push ebx
mov dword [ebp - 0x860], ebx
call fcn.100093e5
push 0x2710
lea ecx, [ebp - 0x868]
mov byte [ebp - 4], 0x55
call fcn.1002fd08
pop ecx
lea ecx, [ebp - 0x868]
call fcn.100082ec
push fcn.10005961
push 1
push 0x30
lea eax, [ebp - 0x60c]
mov byte [ebp - 4], 0x51
push eax
call fcn.1004745f
push ebx
push 1
lea ecx, [ebp - 0x46c]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x514]
call fcn.10003109
lea ecx, [ebp - 0x43c]
call fcn.10003dd2
push ebx
push 1
lea ecx, [ebp - 0x4b4]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x4cc]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x4fc]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x484]
call fcn.10003109
lea ecx, [ebp - 0x850]
call fcn.10008416
push ebx
push 1
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 9
call fcn.10003109
push 7
pop esi
add edi, 0x2c
mov dword [ebp - 0x840], edi
cmp edi, dword [ebp - 0x858]
jne 0x1001ffbe
mov bl, 1
lea ecx, [ebp - 0x85c]
call fcn.10021005
mov al, bl
call fcn.1004ada2
ret
push ebx
push 1
lea ecx, [ebp - 0x514]
call fcn.10003109
lea ecx, [ebp - 0x43c]
call fcn.10003dd2
push ebx
push 1
lea ecx, [ebp - 0x4b4]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x4cc]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x4fc]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x484]
call fcn.10003109
lea ecx, [ebp - 0x850]
call fcn.10008416
push ebx
push 1
lea ecx, [ebp - 0x4e4]
call fcn.10003109
jmp 0x10020a13