Function at 0xc73126
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x10103300]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov eax, edx
mov ebx, ecx
xor ecx, ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], ebx
push esi
mov dword [eax], ecx
push edi
test ebx, ebx
jne 0xc73154
xor eax, eax
jmp 0xc733b7
sub esp, 0xc
mov byte [ebp - 6], cl
lea eax, [ebp - 0x10]
mov dword [ebp - 0x18], ecx
xor edx, edx
mov dword [ebp - 0x10], 0x74737953
lea ecx, [ebp - 0x18]
mov dword [ebp - 0xc], 0x6f526d65
push eax
mov word [ebp - 8], 0x746f
call fcn.00bdeaf3
mov edi, dword [ebp - 0x18]
add esp, 0x10
test eax, eax
je 0xc7319e
cmp eax, 0x16
je 0xc7336c
call fcn.00bb9e30
mov esi, dword [eax]
jmp 0xc7339b
test edi, edi
je 0xc731b8
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc731a7
sub ecx, edx
lea eax, [ecx + 0xc]
mov dword [ebp - 0x1c], eax
jmp 0xc731bf
mov dword [ebp - 0x1c], 0xb
cmp dword [ebx], 0
mov edx, ebx
mov dword [ebp - 0x28], 2
je 0xc731ef
push 2
pop edi
mov ecx, dword [edx]
add edx, 4
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc731d8
sub ecx, esi
inc edi
add edi, ecx
cmp dword [edx], 0
jne 0xc731d0
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x18]
call fcn.00bd8bde
mov esi, eax
test esi, esi
je 0xc733a6
cmp byte [esi], 0x3d
mov ebx, esi
je 0xc7321b
mov ecx, ebx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc7320a
sub ecx, edx
inc ebx
add ebx, ecx
cmp byte [ebx], 0x3d
jne 0xc73205
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], eax
call fcn.00c73799
sub eax, ebx
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
cmp dword [ebx], 0
je 0xc73264
lea ecx, [ebp - 0x10]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc7323f
sub ecx, edx
lea eax, [ebp - 0x10]
push ecx
push eax
push dword [ebx]
call fcn.00bdd710
add esp, 0xc
test eax, eax
je 0xc73260
add ebx, 4
jmp 0xc73234
mov dl, 1
jmp 0xc73266
xor dl, dl
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
add eax, ecx
mov byte [ebp - 0x11], dl
test dl, dl
push 1
cmove ecx, eax
push ecx
mov dword [ebp - 0x18], ecx
call fcn.00bcc410
mov dword [ebp - 0x28], eax
pop ecx
pop ecx
test eax, eax
je 0xc73378
mov ecx, dword [ebp - 0x24]
mov ebx, eax
test ecx, ecx
je 0xc732b5
push ecx
push dword [ebp - 0x2c]
push eax
call fcn.00c2a590
mov edx, dword [ebp - 0x18]
add esp, 0xc
add ebx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x18], edx
jmp 0xc732b8
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
jmp 0xc732f5
push eax
mov ecx, ebx
call fcn.00bd0160
pop ecx
test eax, eax
jne 0xc7336c
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc732d6
sub ecx, edx
mov edx, dword [ebp - 0x18]
lea eax, [ecx + 1]
sub edx, eax
add ebx, eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x20], eax
mov eax, dword [eax]
test eax, eax
jne 0xc732bd
cmp byte [ebp - 0x11], al
jne 0xc7333e
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x10]
push eax
mov ecx, ebx
call fcn.00bd0160
pop ecx
test eax, eax
jne 0xc7336c
mov edx, dword [ebp - 0x1c]
mov ecx, ebx
push 0x1000fe08
call fcn.00c03f0e
pop ecx
test eax, eax
jne 0xc7336c
test edi, edi
je 0xc7333b
mov edx, dword [ebp - 0x1c]
mov ecx, ebx
push edi
call fcn.00c03f0e
pop ecx
test eax, eax
jne 0xc7336c
add ebx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
cmp ebx, eax
jne 0xc73349
mov byte [ebx], 0
inc ebx
mov ecx, dword [ebp - 0x30]
mov byte [ebx], 0
push 0
mov dword [ecx], eax
call fcn.00bbb6a0
pop ecx
push esi
call fcn.00bbb6a0
pop ecx
push edi
call fcn.00bbb6a0
pop ecx
jmp 0xc7314d
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call fcn.00c1df40
push 0xe
pop ecx
call fcn.00bd0226
call fcn.00bb9e30
push 0xc
pop ebx
push 0
mov dword [eax], ebx
call fcn.00bbb6a0
pop ecx
push esi
call fcn.00bbb6a0
pop ecx
mov esi, ebx
push edi
call fcn.00bbb6a0
pop ecx
mov eax, esi
jmp 0xc733b7
push esi
call fcn.00bbb6a0
pop ecx
push edi
call fcn.00bbb6a0
pop ecx
push 0x16
pop eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00c2c440
leave
ret