Function at 0x10074e60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101bcff4
mov eax, dword fs:[0]
push eax
sub esp, 0x1f8
mov eax, dword [0x102258ec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0xc5], 0
call fcn.100370b0
test al, al
jne 0x10074fb5
call fcn.100bfc20
mov ecx, eax
push 1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10074f93
push 0x57
push str.d:jenkins.jenkinsworkspacemgamezipperzipper_tpi_3producttpimarkmarkmainwnd.cpp
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], al
call fcn.1001a260
push 3
push 0x101d0d58
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
call fcn.1001a260
push 0xc2
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x16c]
call fcn.100174f0
mov esi, eax
push str.Mark:
push esi
mov byte [ebp - 4], 2
call fcn.10016760
add esp, 8
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xc6]
push eax
call fcn.10049000
mov ecx, eax
cmp dword [ecx + 0x14], 8
mov byte [ebp - 4], 3
jb 0x10074f4f
mov ecx, dword [ecx]
test ecx, ecx
mov eax, 0x101d0c4c
cmovne eax, ecx
push eax
push esi
call fcn.10016760
add esp, 8
call fcn.100bfc20
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x2c]
call fcn.10017de0
lea ecx, [ebp - 0x16c]
call fcn.10018510
lea ecx, [ebp - 0x64]
call fcn.10017d90
lea ecx, [ebp - 0x7c]
call fcn.10017d90
mov al, byte [ebp - 0xc5]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101454ca
mov esp, ebp
pop ebp
ret
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0xd0], esp
push 0x13
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.SuperBookmark64.dll
mov word [ecx], ax
call fcn.1001e830
sub esp, 0x18
mov dword [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0xd4], esp
mov dword [ebp - 0xcc], ecx
xor eax, eax
mov dword [ebp - 0x38], 0x750053
push 0x11
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x34], 0x650070
mov dword [ebp - 0x30], 0x420072
mov dword [ebp - 0x2c], 0x6f006f
mov dword [ebp - 0x28], 0x6d006b
mov dword [ebp - 0x24], 0x720061
mov dword [ebp - 0x20], 0x2e006b
mov dword [ebp - 0x1c], 0x6c0064
mov dword [ebp - 0x18], 0x6c
call fcn.1001e830
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
xor eax, eax
mov dword [ebp - 0xcc], ecx
mov word [ebp - 0x14], ax
push 0x16
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 7
mov word [ecx], ax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x40], 0x4f0053
mov dword [ebp - 0x3c], 0x540046
mov dword [ebp - 0x38], 0x410057
mov dword [ebp - 0x34], 0x450052
mov dword [ebp - 0x30], 0x53005c
mov dword [ebp - 0x2c], 0x700075
mov dword [ebp - 0x28], 0x720065
mov dword [ebp - 0x24], 0x6f0042
mov dword [ebp - 0x20], 0x6b006f
mov dword [ebp - 0x1c], 0x61006d
mov dword [ebp - 0x18], 0x6b0072
call fcn.1001e830
mov dword [ebp - 4], 0xffffffff
call fcn.1003eee0
add esp, 0x48
test al, al
je 0x100751d6
call fcn.100bfc20
mov ecx, eax
push 1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10074f93
push 0x57
push str.d:jenkins.jenkinsworkspacemgamezipperzipper_tpi_3producttpimarkmarkmainwnd.cpp
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], al
call fcn.1001a260
push 3
push 0x101d0d58
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 6
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
call fcn.1001a260
push 0xc8
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x16c]
call fcn.100174f0
mov esi, eax
push str.Mark:
push esi
mov byte [ebp - 4], 8
call fcn.10016760
add esp, 8
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xc6]
push eax
call fcn.10072a80
mov ecx, eax
mov byte [ebp - 4], 9
cmp dword [ecx + 0x14], 8
jb 0x10075192
mov ecx, dword [ecx]
test ecx, ecx
mov eax, 0x101d0c4c
cmovne eax, ecx
push eax
push esi
call fcn.10016760
add esp, 8
call fcn.100bfc20
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x2c]
call fcn.10017de0
lea ecx, [ebp - 0x16c]
call fcn.10018510
lea ecx, [ebp - 0x7c]
call fcn.10017d90
lea ecx, [ebp - 0x64]
jmp 0x10074f8e
mov ecx, dword [0x1022f338]
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ecx, ecx
jne 0x100752dc
push 0x10225384
call edi
cmp dword [0x1022f338], 0
jne 0x100752cf
push 0x38
call fcn.1014548c
mov esi, eax
add esp, 4
mov dword [ebp - 0xcc], esi
mov dword [ebp - 4], 0xa
test esi, esi
je 0x100752b5
mov ecx, esi
call fcn.1001d030
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x44], ax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x54], eax
mov word [ebp - 0x64], ax
lea eax, [ebp - 0x4c]
push 4
push eax
mov dword [esi], vtable.CMarkConfigMgr.0
mov dword [ebp - 0x4c], 0x61006d
mov dword [ebp - 0x48], 0x6b0072
mov dword [ebp - 0x50], 7
call fcn.1001e830
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xc
push eax
mov ecx, esi
call fcn.1001d540
mov edx, dword [ebp - 0x50]
mov byte [ebp - 4], 0xb
cmp edx, 8
jb 0x100752b7
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100752a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100756ad
push edx
push ecx
call fcn.101454bc
add esp, 8
jmp 0x100752b7
xor esi, esi
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xcc]
xor ecx, ecx
lock or dword [eax], ecx
mov dword [0x1022f338], esi
push 0x10225384
call ebx
mov ecx, dword [0x1022f338]
push 7
call fcn.1001d900
test al, al
je 0x10075395
call fcn.100bfc20
mov ecx, eax
push 1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10074f93
push 0x57
push str.d:jenkins.jenkinsworkspacemgamezipperzipper_tpi_3producttpimarkmarkmainwnd.cpp
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], al
call fcn.1001a260
push 3
push 0x101d0d58
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
call fcn.1001a260
push 0xce
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x16c]
call fcn.100174f0
mov esi, eax
push str.Mark:
push esi
mov byte [ebp - 4], 0xf
call fcn.10016760
add esp, 8
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xc6]
push eax
call fcn.10049380
mov ecx, eax
mov byte [ebp - 4], 0x10
jmp 0x1007518a
mov esi, dword [0x1022eb30]
test esi, esi
jne 0x100754a4
push 0x1022502c
call edi
cmp dword [0x1022eb30], esi
jne 0x10075497
push 0x70
call fcn.1014548c
mov esi, eax
add esp, 4
mov dword [ebp - 0xcc], esi
mov dword [ebp - 4], 0x11
test esi, esi
je 0x1007547d
mov ecx, esi
call fcn.1001d030
mov dword [esi], vtable.CCommonConfigMgr.0
xor eax, eax
mov byte [esi + 0x38], 0
mov dword [esi + 0x4c], 0
mov dword [esi + 0x50], 7
mov word [esi + 0x3c], ax
mov dword [esi + 0x64], eax
mov dword [esi + 0x68], 7
mov word [esi + 0x54], ax
push 6
push str.common
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x14
mov dword [esi + 0x6c], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
call fcn.1001e830
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x15
push eax
mov ecx, esi
call fcn.1001d540
mov edx, dword [ebp - 0x50]
mov byte [ebp - 4], 0x14
cmp edx, 8
jb 0x1007547f
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10075471
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100756b2
push edx
push ecx
call fcn.101454bc
add esp, 8
jmp 0x1007547f
xor esi, esi
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xcc]
xor ecx, ecx
lock or dword [eax], ecx
mov dword [0x1022eb30], esi
push 0x1022502c
call ebx
mov esi, dword [0x1022eb30]
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101d3244
mov word [ecx], ax
call fcn.1001e830
mov ecx, esi
call fcn.10024820
test al, al
jne 0x10075581
call fcn.100bfc20
mov ecx, eax
push 1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10074f93
push 0x57
push str.d:jenkins.jenkinsworkspacemgamezipperzipper_tpi_3producttpimarkmarkmainwnd.cpp
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], al
call fcn.1001a260
push 3
push 0x101d0d58
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
call fcn.1001a260
push 0xd4
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x16c]
call fcn.100174f0
mov esi, eax
push str.Mark:
push esi
mov byte [ebp - 4], 0x18
call fcn.10016760
add esp, 8
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xc6]
push eax
call fcn.10048910
mov ecx, eax
mov byte [ebp - 4], 0x19
jmp 0x1007518a
call fcn.1003c7f0
test al, al
je 0x100756a6
call fcn.100bfc20
mov ecx, eax
push 1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10074f93
push 0x57
push str.d:jenkins.jenkinsworkspacemgamezipperzipper_tpi_3producttpimarkmarkmainwnd.cpp
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], al
call fcn.1001a260
push 3
push 0x101d0d58
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
call fcn.1001a260
push 0xda
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x204]
call fcn.100174f0
mov esi, eax
push str.Mark:
push esi
mov byte [ebp - 4], 0x1c
call fcn.10016760
add esp, 8
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0xc6]
push eax
call fcn.100489c0
mov ecx, eax
cmp dword [ecx + 0x14], 8
mov byte [ebp - 4], 0x1d
jb 0x10075659
mov ecx, dword [ecx]
test ecx, ecx
mov eax, 0x101d0c4c
cmovne eax, ecx
push eax
push esi
call fcn.10016760
add esp, 8
call fcn.100bfc20
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0xc4]
call fcn.10017de0
lea ecx, [ebp - 0x204]
call fcn.10018510
lea ecx, [ebp - 0x94]
call fcn.10017d90
lea ecx, [ebp - 0xac]
jmp 0x10074f8e
mov al, 1
jmp 0x10074f99
call fcn.1018b109
call fcn.1018b109
int3