Function at 0x10012241
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x108
mov eax, 0x100464f9
call fcn.1002e5e6
mov dword [ebp - 0x100], edx
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 0x18]
mov dword [ebp - 0xfc], eax
xor esi, esi
mov dword [ebp - 4], esi
push 8
pop ecx
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
call fcn.1001132f
mov dword [ebp - 0x18], esi
call fcn.1000ff4f
push eax
lea ecx, [ebp - 0x18]
call fcn.10019d83
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 4
push eax
push ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], esi
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.1001aad4
add eax, 0x10
lea ecx, [ebp - 0x38]
mov dword [esi], eax
call fcn.10011597
mov edi, eax
test edi, edi
jne 0x10012695
lea eax, [ebp - 0x18]
mov dword [ebp - 0xa4], 0x7474794f
push eax
push edi
sub esp, 0xc
mov dword [ebp - 0xa0], 0x57636946
mov ecx, esp
mov dword [ebp - 0x9c], 0x72677a5a
lea eax, [ebp - 0x4e]
mov dword [ebp - 0x98], 0x5749794a
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x94], 0x45457950
push ecx
push eax
push edx
mov dword [ebp - 0x90], 0x52637745
mov dword [ebp - 0x8c], 0x5930534c
mov dword [ebp - 0x88], 0x4459674d
mov dword [ebp - 0x84], 0x73774759
mov dword [ebp - 0x80], 0x316f5846
mov dword [ebp - 0x7c], 0x3935324b
mov dword [ebp - 0x78], 0x47776a4c
mov dword [ebp - 0x74], 0x6851415a
mov dword [ebp - 0x70], 0x5255544c
mov dword [ebp - 0x6c], 0x2b306a4c
mov dword [ebp - 0x68], 0x2b63685a
mov dword [ebp - 0x64], 0x7a777764
mov dword [ebp - 0x60], 0x58593345
mov dword [ebp - 0x5c], 0x4d413365
mov dword [ebp - 0x58], 0x59416750
mov dword [ebp - 0x54], 0x41414141
mov word [ebp - 0x50], 0x514f
call fcn.1001986e
lea ecx, [ebp - 0x114]
call fcn.10010fb3
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.10019968
mov edx, eax
lea ecx, [ebp - 0xf8]
call fcn.100190cb
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call fcn.10018e18
mov ecx, dword [ebp - 0xf8]
lea ecx, [ecx - 0x10]
call fcn.1000ff12
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 4
call fcn.1001994c
mov esi, dword [ebp - 0x18]
cmp dword [esi - 4], 1
jle 0x10012416
push dword [esi - 0xc]
lea ecx, [ebp - 0x18]
call fcn.10019dac
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x40]
mov dword [ebp - 0xf4], 0x44636847
push eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0xf0], 0x39747a41
push eax
mov dword [ebp - 0xec], 0x2f6b4459
lea eax, [ebp - 0x49]
mov dword [ebp - 0xe8], 0x7a63444f
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe4], 0x4c636748
mov dword [ebp - 0xe0], 0x59674449
mov dword [ebp - 0xdc], 0x37675345
mov dword [ebp - 0xd8], 0x3745484c
mov dword [ebp - 0xd4], 0x6a596744
mov dword [ebp - 0xd0], 0x61496849
mov dword [ebp - 0xcc], 0x6e747a4b
mov dword [ebp - 0xc8], 0x49554146
mov dword [ebp - 0xc4], 0x4145524e
mov dword [ebp - 0xc0], 0x53346865
mov dword [ebp - 0xbc], 0x43515465
mov dword [ebp - 0xb8], 0x735a5147
mov dword [ebp - 0xb4], 0x6963534a
mov dword [ebp - 0xb0], 0x6b594841
mov dword [ebp - 0xac], 0x37344250
mov dword [ebp - 0xa8], 0x6f46414e
mov dword [ebp - 0xa4], 0x3134514c
mov dword [ebp - 0xa0], 0x396f6e4d
mov dword [ebp - 0x9c], 0x7741444a
mov dword [ebp - 0x98], 0x30354343
mov dword [ebp - 0x94], 0x364e7741
mov dword [ebp - 0x90], 0x675a6745
mov dword [ebp - 0x8c], 0x4445794f
mov dword [ebp - 0x88], 0x61495466
mov dword [ebp - 0x84], 0x52454243
mov dword [ebp - 0x80], 0x49776948
mov dword [ebp - 0x7c], 0x3434784f
mov dword [ebp - 0x78], 0x4167774f
mov dword [ebp - 0x74], 0x3138444d
mov dword [ebp - 0x70], 0x70415349
mov dword [ebp - 0x6c], 0x6839544c
mov dword [ebp - 0x68], 0x7a637a4f
mov dword [ebp - 0x64], 0x69384449
mov dword [ebp - 0x60], 0x39597950
mov dword [ebp - 0x5c], 0x76427849
mov dword [ebp - 0x58], 0x6c454242
mov dword [ebp - 0x54], 0x2f414143
mov dword [ebp - 0x50], 0x4141774d
mov word [ebp - 0x4c], 0x4841
mov byte [ebp - 0x4a], 0x67
push dword [esi - 0xc]
push esi
push dword [ebp - 0xfc]
push 0
sub esp, 0xc
mov ecx, esp
push ecx
push eax
push edx
call fcn.1001986e
lea ecx, [ebp - 0x114]
call fcn.10010fb3
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.10019968
push ecx
mov ecx, esp
mov dword [ebp - 0xfc], esp
push eax
call fcn.100192f2
push ecx
mov byte [ebp - 4], 8
mov edi, esp
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov dword [ebp - 0xf8], esp
call fcn.1001aad4
add eax, 0x10
mov dword [edi], eax
push ecx
mov byte [ebp - 4], 9
mov edi, esp
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.1001aad4
mov edx, dword [ebp - 0x100]
add eax, 0x10
mov ecx, dword [ebp - 0x104]
mov dword [edi], eax
mov byte [ebp - 4], 7
call fcn.10012068
add esp, 0x20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x114]
mov edi, eax
call fcn.1001994c
push dword [esi - 8]
push esi
call fcn.1001e3f5
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.10019e16
test edi, edi
jne 0x1001268d
cmp dword [ebp - 0x40], edi
jbe 0x1001268d
push ebx
push ecx
mov ecx, esp
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
call fcn.10018db3
lea ecx, [ebp - 0x38]
call fcn.10011700
mov edi, eax
push dword [ebp - 0x3c]
call fcn.1001eb5b
pop ecx
jmp 0x10012698
cmp dword [ebp - 0x3c], 0
je 0x10012698
jmp 0x10012682
mov esi, dword [ebp - 0x18]
lea ecx, [esi - 0x10]
call fcn.1000ff12
cmp dword [ebp - 0x28], 0
je 0x100126b3
push dword [ebp - 0x28]
call fcn.1001eb5b
and dword [ebp - 0x28], 0
pop ecx
and dword [ebp - 0x20], 0
cmp dword [ebp - 0x24], 0
je 0x100126ca
push dword [ebp - 0x24]
call fcn.1001eb5b
and dword [ebp - 0x24], 0
pop ecx
cmp dword [ebp - 0x30], 0
mov esi, dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
je 0x100126db
push dword [ebp - 0x30]
call esi
cmp dword [ebp - 0x2c], 0
je 0x100126e6
push dword [ebp - 0x2c]
call esi
cmp dword [ebp - 0x34], 0
je 0x100126f1
push dword [ebp - 0x34]
call esi
cmp dword [ebp - 0x38], 0
je 0x10012702
push 0
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.1000ff12
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.1000ff12
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.1000ff12
mov eax, edi
call fcn.1002e595
ret