Function at 0x1000edf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x44
push ebx
mov bl, 0x45
mov byte [esp + 0x25], bl
mov byte [esp + 0x2c], bl
mov byte [esp + 0x31], bl
mov dl, 0xec
mov cl, 8
mov bl, 0xe4
push ebp
mov byte [esp + 9], dl
mov byte [esp + 0xc], cl
mov byte [esp + 0x19], dl
mov byte [esp + 0x1d], cl
mov byte [esp + 0x36], bl
mov byte [esp + 0x39], bl
mov al, 0x8b
mov cl, 0x8d
mov dl, 0x4d
mov bl, 0xe8
push 0xa00000
push 0
mov byte [esp + 0x18], 0x64
mov byte [esp + 0x19], 0xa1
mov byte [esp + 0x1a], 0x18
mov byte [esp + 0x1b], 0
mov byte [esp + 0x1c], 0
mov byte [esp + 0x1d], 0
mov byte [esp + 0x10], al
mov byte [esp + 0x12], al
mov byte [esp + 0x13], 0x55
mov byte [esp + 0x20], al
mov byte [esp + 0x22], 0x57
mov byte [esp + 0x23], al
mov byte [esp + 0x24], 0x7d
mov byte [esp + 0x30], cl
mov byte [esp + 0x32], 0x44
mov byte [esp + 0x33], 0x50
mov byte [esp + 0x34], cl
mov byte [esp + 0x35], dl
mov byte [esp + 0x36], 0x2c
mov byte [esp + 0x37], 0xc6
mov byte [esp + 0x39], 0xfc
mov byte [esp + 0x3a], 0x20
mov byte [esp + 0x3c], 0x89
mov byte [esp + 0x3f], 0x83
mov byte [esp + 0x40], 0x7d
mov byte [esp + 0x42], 0
mov byte [esp + 0x43], 0x75
mov byte [esp + 0x44], 0xb
mov byte [esp + 0x45], 0xff
mov byte [esp + 0x46], 0x15
mov byte [esp + 0x48], 0x81
mov byte [esp + 0x49], 0xc6
mov byte [esp + 0x4a], 0x70
mov byte [esp + 0x4b], 1
mov byte [esp + 0x4c], 0
mov byte [esp + 0x4d], 0
mov byte [esp + 0x4e], 0x56
mov byte [esp + 0x4f], cl
mov byte [esp + 0x50], dl
mov byte [esp + 0x51], bl
mov byte [esp + 0x52], bl
mov byte [esp + 0x28], al
mov byte [esp + 0x29], 0xf8
mov byte [esp + 0x2a], 0x6a
mov byte [esp + 0x2b], 0x2a
mov byte [esp + 0x2c], cl
mov byte [esp + 0x2d], dl
mov byte [esp + 0x2e], 0xf0
call dword [fcn.10001104]
mov ebp, eax
test ebp, ebp
je 0x1000f12b
push esi
push edi
push ebp
call dword [fcn.10001108]
push 0
call dword [fcn.1000110c]
mov ebx, eax
test ebx, ebx
je 0x1000f014
mov eax, dword [ebx + 0x3c]
mov esi, dword [eax + ebx + 0x50]
cmp esi, 0xa00000
jbe 0x1000ef51
mov esi, 0xa00000
mov edx, dword [0x1002db2c]
push esi
lea ecx, [ebx + 0x300000]
push ebp
push ecx
push edx
call fcn.1001b190
add esp, 0x10
test eax, eax
je 0x1000f014
lea eax, [esp + 0x28]
push 7
push eax
push esi
push ebp
call fcn.1001b0f0
mov edi, eax
add esp, 0x10
test edi, edi
je 0x1000efaf
lea ecx, [esp + 0x28]
push 7
push ecx
lea edx, [edi + ebp + 7]
push esi
push edx
call fcn.1001b0f0
add esp, 0x10
test eax, eax
je 0x1000efaf
add eax, edi
lea eax, [eax + ebx + 0x300002]
mov dword [0x1002db4c], eax
lea ecx, [esp + 0x30]
push 0xb
push ecx
push esi
push ebp
call fcn.1001b0f0
add esp, 0x10
test eax, eax
je 0x1000efd1
lea edx, [eax + ebx + 0x300010]
mov dword [0x1002db48], edx
lea eax, [esp + 0x3c]
push 0xb
push eax
push esi
push ebp
call fcn.1001b0f0
add esp, 0x10
test eax, eax
je 0x1000eff3
lea ecx, [eax + ebx + 0x300000]
mov dword [0x1002db30], ecx
lea edx, [esp + 0x48]
push 0xb
push edx
push esi
push ebp
call fcn.1001b0f0
add esp, 0x10
test eax, eax
je 0x1000f014
lea eax, [eax + ebx + 0x300000]
mov dword [0x1002db34], eax
mov edi, dword [fcn.1000110c]
push 0x10001d3c
call edi
mov ebx, dword [fcn.1000119c]
push 0x10001d30
push eax
call ebx
mov ecx, dword [0x1002db2c]
mov esi, eax
push 0x100
push ebp
push esi
push ecx
call fcn.1001b190
add esp, 0x10
test eax, eax
je 0x1000f075
lea edx, [esp + 0x10]
push 5
push edx
push 0x100
push ebp
call fcn.1001b0f0
add esp, 0x10
test eax, eax
je 0x1000f075
add esi, eax
mov dword [0x1002db40], esi
add esi, 5
mov dword [0x1002db44], esi
push 0x10001694
call edi
mov esi, eax
push 0x10001d1c
push esi
call ebx
mov edi, eax
mov eax, dword [0x1002db2c]
push 0x100
push ebp
push edi
push eax
call fcn.1001b190
add esp, 0x10
test eax, eax
je 0x1000f0c9
lea ecx, [esp + 0x20]
push 6
push ecx
push 0x100
push ebp
call fcn.1001b0f0
add esp, 0x10
test eax, eax
je 0x1000f0c9
add eax, edi
mov dword [0x1002db38], eax
add eax, 6
mov dword [0x1002db3c], eax
push 0x10001d10
push esi
call ebx
mov edx, dword [0x1002db2c]
mov ebx, eax
push 0x100
push ebp
push ebx
push edx
call fcn.1001b190
add esp, 0x10
test eax, eax
je 0x1000f122
lea eax, [esp + 0x18]
push 6
push eax
push 0x100
push ebp
call fcn.1001b0f0
add esp, 0x10
test eax, eax
je 0x1000f10a
add ebx, eax
jmp 0x1000f11c
mov ecx, 3
lea edi, [esp + 0x18]
mov esi, ebp
xor edx, edx
repe cmpsw word [esi], word es:[edi]
jne 0x1000f122
mov dword [0x1002db54], ebx
push ebp
call dword [fcn.100011a0]
pop edi
pop esi
mov eax, dword [0x1002db38]
pop ebp
test eax, eax
pop ebx
je 0x1000f175
mov eax, dword [0x1002db40]
test eax, eax
je 0x1000f175
mov eax, dword [0x1002db48]
test eax, eax
je 0x1000f175
mov eax, dword [0x1002db4c]
test eax, eax
je 0x1000f175
mov eax, dword [0x1002db30]
test eax, eax
je 0x1000f175
mov eax, dword [0x1002db34]
test eax, eax
je 0x1000f175
mov eax, dword [0x1002db54]
test eax, eax
je 0x1000f175
mov eax, 1
add esp, 0x44
ret
xor eax, eax
add esp, 0x44
ret