Function at 0x10007600
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10188269
mov eax, dword fs:[0]
push eax
sub esp, 0x10c
push ebx
push esi
push edi
mov eax, dword [0x101f7004]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, dword [ebp + 8]
lea eax, [ebx + 0x548]
xor edi, edi
mov dword [ebp - 0x10], edi
mov dword [ebx + 0x274], edi
cmp ecx, eax
jne 0x100076d9
mov dword [ebp - 4], edi
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebx + 0x3d8]
call fcn.10015830
mov dword [ebp - 0x10], 1
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x10007676
cmp dword [eax + 0x24], ecx
mov ecx, 0x101cd86c
je 0x10007676
mov ecx, dword [eax + 0x1c]
mov eax, str.vstclub
nop dword [eax + eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x100076a6
test dx, dx
je 0x100076a2
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x100076a6
add ecx, 4
add eax, 4
test dx, dx
jne 0x10007680
xor esi, esi
jmp 0x100076ab
sbb esi, esi
or esi, 1
mov edi, 1
mov dword [ebp - 0x10], edi
and edi, 0xfffffffe
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.100022c0
mov ecx, dword [ebp + 8]
test esi, esi
jne 0x100076d9
mov dword [ebx + 0x274], 1
lea eax, [ebx + 0x968]
cmp ecx, eax
jne 0x100078d9
mov dword [ebp - 4], 1
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebx + 0x3d8]
call fcn.10015830
or edi, 4
mov dword [ebp - 0x10], edi
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x10007717
cmp dword [eax + 0x24], ecx
mov ecx, 0x101cd86c
je 0x10007717
mov ecx, dword [eax + 0x1c]
mov eax, str.jy801.com
nop dword [eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x10007746
test dx, dx
je 0x10007742
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x10007746
add ecx, 4
add eax, 4
test dx, dx
jne 0x10007720
xor esi, esi
jmp 0x1000774b
sbb esi, esi
or esi, 1
and edi, 0xfffffffb
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.100022c0
test esi, esi
jne 0x1000786c
mov dword [ebx + 0x274], 1
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
or edi, 0x10
lea edx, [ebp - 0x3c]
xor ecx, ecx
mov dword [ebp - 0x10], edi
mov esi, eax
call fcn.1001b3f0
push str.lock.exe_passutsd_jcsd_user_pass_jzyp_pocklas
mov edx, esi
lea ecx, [ebp - 0x68]
call fcn.1001e030
add esp, 4
mov byte [ebp - 4], 3
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x100077bd
cmp dword [eax + 0x24], ecx
mov ecx, 0x101cd86c
je 0x100077bd
mov ecx, dword [eax + 0x1c]
push ecx
call fcn.1001b8b0
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x68]
call fcn.100022c0
and edi, 0xffffffef
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.100022c0
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
mov dword [ebp - 4], 4
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101cfe94
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x68]
call fcn.10002cf0
mov byte [ebp - 4], 6
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], 0x101cfe9c
mov byte [ebp - 4], 7
lea eax, [ebp - 0x3c]
push ecx
push eax
lea ecx, [ebp - 0x68]
call fcn.10016c30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x68]
call fcn.100022c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.100022c0
mov ecx, dword [ebx + 0xc]
test ecx, ecx
je 0x100078d6
mov ecx, dword [ecx + 0x44]
cmp dword [ecx + 0x20], 0
je 0x100078d6
test ecx, ecx
je 0x100078d6
mov eax, dword [ecx]
call dword [eax + 0x60]
jmp 0x100078d6
lea ecx, [ebp - 0x68]
call fcn.10002cf0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], 0x101cfea4
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101cfeac
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.10016c30
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3c]
call fcn.100022c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.100022c0
mov ecx, dword [ebp + 8]
lea eax, [ebx + 0x808]
cmp ecx, eax
jne 0x10007ecf
mov dword [ebp - 4], 0x10
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebx + 0x3d8]
call fcn.10015830
or edi, 0x20
mov dword [ebp - 0x10], edi
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x10007917
cmp dword [eax + 0x24], ecx
mov ecx, 0x101cd86c
je 0x10007917
mov ecx, dword [eax + 0x1c]
mov eax, str.jy801.com
nop dword [eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x10007946
test dx, dx
je 0x10007942
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x10007946
add ecx, 4
add eax, 4
test dx, dx
jne 0x10007920
xor esi, esi
jmp 0x1000794b
sbb esi, esi
or esi, 1
and edi, 0xffffffdf
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.100022c0
test esi, esi
jne 0x10007e65
push esi
push dword [0x10200788]
mov dword [ebx + 0x274], 1
call dword [sym.imp.USER32.dll_GetSubMenu]
push eax
push 0xa
push 0x126
push dword [0x1020078c]
call dword [sym.imp.USER32.dll_PostMessageA]
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.10002cf0
or edi, 0x80
lea edx, [ebp - 0x68]
xor ecx, ecx
mov dword [ebp - 0x10], edi
mov esi, eax
call fcn.1001b3f0
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101cff2c
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x3c]
push esi
lea ecx, [ebp - 0x118]
call fcn.1001deb0
mov byte [ebp - 4], 0x14
mov edx, eax
push 0x101cff30
lea ecx, [ebp - 0xec]
call fcn.1001e030
mov byte [ebp - 4], 0x15
mov edx, eax
push 0x101cff2c
lea ecx, [ebp - 0xc0]
call fcn.1001e030
mov byte [ebp - 4], 0x16
mov edx, eax
push str.passutsd_Setbackups_user_pass_jzyp_1111_yyyy_pocklas
lea ecx, [ebp - 0x94]
call fcn.1001e030
add esp, 0x10
mov byte [ebp - 4], 0x17
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x10007a41
cmp dword [eax + 0x24], ecx
mov ecx, 0x101cd86c
je 0x10007a41
mov ecx, dword [eax + 0x1c]
push ecx
call fcn.1001b8b0
add esp, 4
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x94]
call fcn.100022c0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xc0]
call fcn.100022c0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xec]
call fcn.100022c0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x118]
call fcn.100022c0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x3c]
call fcn.100022c0
and edi, 0xffffff7f
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.100022c0
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x68]
call fcn.10002cf0
or edi, 0x100
lea edx, [ebp - 0x68]
xor ecx, ecx
mov dword [ebp - 0x10], edi
mov esi, eax
call fcn.1001b3f0
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101cff2c
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x3c]
push esi
lea ecx, [ebp - 0x94]
call fcn.1001deb0
mov byte [ebp - 4], 0x1c
mov edx, eax
push 0x101cff30
lea ecx, [ebp - 0xc0]
call fcn.1001e030
mov byte [ebp - 4], 0x1d
mov edx, eax
push 0x101cff2c
lea ecx, [ebp - 0xec]
call fcn.1001e030
mov byte [ebp - 4], 0x1e
mov edx, eax
push str.passutsd_Setbackups_user_pass_jzyp_1111_yyyy_pocklas
lea ecx, [ebp - 0x118]
call fcn.1001e030
add esp, 0x10
mov byte [ebp - 4], 0x1f
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x10007b58
cmp dword [eax + 0x24], ecx
mov ecx, 0x101cd86c
je 0x10007b58
mov ecx, dword [eax + 0x1c]
push ecx
call fcn.1001b8b0
add esp, 4
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x118]
call fcn.100022c0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xec]
call fcn.100022c0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xc0]
call fcn.100022c0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x94]
call fcn.100022c0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x3c]
call fcn.100022c0
and edi, 0xfffffeff
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.100022c0
lea ecx, [ebp - 0x68]
call fcn.10002cf0
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], 0x101cfe94
mov dword [ebp - 4], 0x22
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101cff44
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.10016c30
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3c]
call fcn.100022c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.100022c0
mov ecx, dword [ebx + 0xc]
test ecx, ecx
je 0x10007c44
mov ecx, dword [ecx + 0x44]
cmp dword [ecx + 0x20], 0
je 0x10007c44
test ecx, ecx
je 0x10007c44
mov eax, dword [ecx]
call dword [eax + 0x60]
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x68]
call fcn.10002cf0
or edi, 0x200
lea edx, [ebp - 0x68]
xor ecx, ecx
mov dword [ebp - 0x10], edi
mov esi, eax
call fcn.1001b3f0
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101cff2c
mov byte [ebp - 4], 0x29
lea edx, [ebp - 0x3c]
push esi
lea ecx, [ebp - 0x94]
call fcn.1001deb0
mov byte [ebp - 4], 0x2a
mov edx, eax
push 0x101cff30
lea ecx, [ebp - 0xc0]
call fcn.1001e030
mov byte [ebp - 4], 0x2b
mov edx, eax
push 0x101cff2c
lea ecx, [ebp - 0xec]
call fcn.1001e030
mov byte [ebp - 4], 0x2c
mov edx, eax
push str.passutsd_Setbackups_user_pass_jzyp_1111_yyyy_pocklas
lea ecx, [ebp - 0x118]
call fcn.1001e030
add esp, 0x10
mov byte [ebp - 4], 0x2d
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x10007cf2
cmp dword [eax + 0x24], ecx
mov ecx, 0x101cd86c
je 0x10007cf2
mov ecx, dword [eax + 0x1c]
push ecx
call fcn.1001b8b0
add esp, 4
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x118]
call fcn.100022c0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xec]
call fcn.100022c0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xc0]
call fcn.100022c0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x94]
call fcn.100022c0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x3c]
call fcn.100022c0
and edi, 0xfffffdff
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.100022c0
mov dword [ebp - 4], 0x2f
lea ecx, [ebp - 0x68]
call fcn.10002cf0
or edi, 0x400
lea edx, [ebp - 0x68]
xor ecx, ecx
mov dword [ebp - 0x10], edi
mov esi, eax
call fcn.1001b3f0
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
mov byte [ebp - 4], 0x30
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101cff2c
mov byte [ebp - 4], 0x31
lea edx, [ebp - 0x3c]
push esi
lea ecx, [ebp - 0x94]
call fcn.1001deb0
mov byte [ebp - 4], 0x32
mov edx, eax
push 0x101cff30
lea ecx, [ebp - 0xc0]
call fcn.1001e030
mov byte [ebp - 4], 0x33
mov edx, eax
push 0x101cff2c
lea ecx, [ebp - 0xec]
call fcn.1001e030
mov byte [ebp - 4], 0x34
mov edx, eax
push str.passutsd_Setbackups_user_pass_jzyp_1111_yyyy_pocklas
lea ecx, [ebp - 0x118]
call fcn.1001e030
add esp, 0x10
mov byte [ebp - 4], 0x35
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x10007e09
cmp dword [eax + 0x24], ecx
mov ecx, 0x101cd86c
je 0x10007e09
mov ecx, dword [eax + 0x1c]
push ecx
call fcn.1001b8b0
add esp, 4
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x118]
call fcn.100022c0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xec]
call fcn.100022c0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xc0]
call fcn.100022c0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x94]
call fcn.100022c0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x3c]
call fcn.100022c0
and edi, 0xfffffbff
mov dword [ebp - 0x10], edi
jmp 0x10007ec0
lea ecx, [ebp - 0x68]
call fcn.10002cf0
mov dword [ebp - 4], 0x37
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], 0x101cfea4
mov dword [ebp - 4], 0x38
lea ecx, [ebp - 0x3c]
call fcn.10002cf0
mov byte [ebp - 4], 0x39
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101cfeac
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.10016c30
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x3c]
call fcn.100022c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.100022c0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8