Function at 0x10028e00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x160
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, edx
mov dword [ebp - 0x24], 0x155000c
mov edx, dword [ecx]
mov dword [ebp - 0x158], edx
mov dword [ebp - 0x20], 0x3ec028b
mov dword [ebp - 0x1c], 0x51404e8
mov dword [ebp - 0x18], 0x7000600
mov dword [ebp - 0x14], 0x95d0800
mov dword [ebp - 0x10], 0xb900ac3
mov byte [ebp - 0xc], 0x90
mov dword [ebp - 0x40], 0x155000c
mov dword [ebp - 0x3c], 0x3ec028b
mov dword [ebp - 0x38], 0x57804e8
mov dword [ebp - 0x34], 0x7ff06a0
mov dword [ebp - 0x30], 0x95d08ff
mov dword [ebp - 0x2c], 0xb900ac3
mov byte [ebp - 0x28], 0x90
mov dword [ebp - 0x14c], 0x1e90080
mov dword [ebp - 0x148], 0x300028e
mov dword [ebp - 0x144], 0x5000400
mov dword [ebp - 0x140], 0x74d068b
mov dword [ebp - 0x13c], 0x98d08e0
mov dword [ebp - 0x138], 0xb890a0c
mov dword [ebp - 0x134], 0xd450c8b
mov dword [ebp - 0x130], 0xf8b0ee4
mov dword [ebp - 0x12c], 0x11c81054
mov dword [ebp - 0x128], 0x133b1214
mov dword [ebp - 0x124], 0x15d81455
mov dword [ebp - 0x120], 0x17161676
mov dword [ebp - 0x11c], 0x194d188b
mov dword [ebp - 0x118], 0x1b891ae0
mov dword [ebp - 0x114], 0x1dd41c4d
mov dword [ebp - 0x110], 0x1f451e8b
mov dword [ebp - 0x10c], 0x218d20e0
mov dword [ebp - 0x108], 0x23802204
mov dword [ebp - 0x104], 0x2555248b
mov dword [ebp - 0x100], 0x278b26e4
mov dword [ebp - 0xfc], 0x29c2284c
mov dword [ebp - 0xf8], 0x2b892a14
mov dword [ebp - 0xf4], 0x2dd82c4d
mov dword [ebp - 0xf0], 0x2f452e8b
mov dword [ebp - 0xec], 0x318d30e0
mov dword [ebp - 0xe8], 0x33803204
mov dword [ebp - 0xe4], 0x3555348b
mov dword [ebp - 0xe0], 0x378b36e4
mov dword [ebp - 0xdc], 0x39c2384c
mov dword [ebp - 0xd8], 0x3b8b3a0c
mov dword [ebp - 0xd4], 0x3df43c45
mov dword [ebp - 0xd0], 0x3f483e3b
mov dword [ebp - 0xcc], 0x41774040
mov dword [ebp - 0xc8], 0x438b424e
mov dword [ebp - 0xc4], 0x45e04455
mov dword [ebp - 0xc0], 0x4714468d
mov dword [ebp - 0xbc], 0x498b4892
mov dword [ebp - 0xb8], 0x4be44a4d
mov dword [ebp - 0xb4], 0x4d444c8b
mov dword [ebp - 0xb0], 0x4f0c4ed1
mov dword [ebp - 0xac], 0x5155508b
mov dword [ebp - 0xa8], 0x538d52e0
mov dword [ebp - 0xa4], 0x55925414
mov dword [ebp - 0xa0], 0x574d568b
mov dword [ebp - 0x9c], 0x590358e4
mov dword [ebp - 0x98], 0x5bd15a44
mov dword [ebp - 0x94], 0x5d8b5c08
mov dword [ebp - 0x90], 0x5ff45e55
mov dword [ebp - 0x8c], 0x6142603b
mov dword [ebp - 0x88], 0x63766240
mov dword [ebp - 0x84], 0x658b642c
mov dword [ebp - 0x80], 0x67f46645
mov dword [ebp - 0x7c], 0x6948688b
mov dword [ebp - 0x78], 0x6b8b6a40
mov dword [ebp - 0x74], 0x6de06c45
mov dword [ebp - 0x70], 0x6f046e8d
mov dword [ebp - 0x6c], 0x718b7080
mov dword [ebp - 0x68], 0x73e47255
mov dword [ebp - 0x64], 0x754c742b
mov dword [ebp - 0x60], 0x770c76c2
mov ebx, dword [ecx + 4]
lea eax, [esi + 0x11b]
mov dword [ebp - 0x5c], 0x7945788b
mov dword [ebp - 0x58], 0x7b037af4
mov dword [ebp - 0x54], 0x7d447c48
mov dword [ebp - 0x50], 0x7f557e8b
mov byte [ebp - 0x4c], 0xe0
cmp eax, ebx
jae 0x10029168
lea eax, [ebp - 0x24]
mov dword [ebp - 0x160], eax
lea ecx, [esi + edx]
mov eax, ebx
mov dword [ebp - 0x150], ecx
sub eax, esi
push eax
push ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x15c], eax
call fcn.1001cbe0
test al, al
je 0x10029162
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x160], eax
lea ecx, [ebp - 0x160]
mov eax, dword [ebp - 0x15c]
add eax, 0xfffffee5
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x11b
push eax
call fcn.1001cbe0
test al, al
je 0x10029162
mov dword [edi], 2
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.100b37df
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x158]
cmp esi, ebx
jae 0x100291e1
lea eax, [ebp - 0x40]
mov dword [ebp - 0x150], eax
lea ecx, [esi + edx]
mov eax, ebx
sub eax, esi
push eax
push ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x15c], eax
call fcn.1001cbe0
test al, al
je 0x100291e1
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x150], eax
lea ecx, [ebp - 0x150]
mov eax, dword [ebp - 0x15c]
add eax, 0x5e81
push eax
mov eax, dword [ebp - 0x158]
add eax, 0xffffa17f
add eax, esi
push eax
call fcn.1001cbe0
test al, al
je 0x100291e1
mov dword [edi], 1
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.100b37df
mov esp, ebp
pop ebp
ret
lea eax, [esi + 0x320]
cmp eax, ebx
ja 0x100293b0
mov ebx, dword [ebp - 0x158]
mov eax, 0x100
add ebx, esi
movzx ecx, byte [ebx + 0xd]
lea edx, [ebx + 0xc]
imul cx, ax
movzx eax, byte [edx]
add cx, ax
movzx eax, cx
mov ecx, 0x8b55
cmp ax, cx
jne 0x100292f2
lea eax, [edx + 0x14]
mov dword [ebp - 0x154], 0
push eax
push edx
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x150], 0
call fcn.1009e430
cmp dword [ebp - 0x154], 0x8d414ff5
jne 0x100292f2
movzx ecx, byte [ebx + 0x141]
lea edx, [ebx + 0x140]
movzx eax, byte [edx]
mov esi, 0x100
imul cx, si
add cx, ax
movzx eax, cx
mov ecx, 0x33ad
cmp ax, cx
jne 0x100293b0
push 0xa0
push edx
call fcn.1001cbb0
add esp, 8
cmp eax, 0x78415341
jne 0x100293b0
movzx ecx, byte [ebx + 0x281]
lea edx, [ebx + 0x280]
movzx eax, byte [edx]
imul cx, si
add cx, ax
movzx eax, cx
mov ecx, 0xf845
cmp ax, cx
jne 0x100293b0
push 0xa0
push edx
call fcn.1001cbb0
add esp, 8
cmp eax, 0x8a84e802
jne 0x100293b0
mov dword [edi], 3
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.100b37df
mov esp, ebp
pop ebp
ret
cmp esi, 0x50ae
jb 0x100293b0
movzx ecx, byte [ebx - 0x50ad]
lea edx, [ebx - 0x50ae]
movzx eax, byte [edx]
mov esi, 0x100
imul cx, si
add cx, ax
movzx eax, cx
mov ecx, 0xefce
cmp ax, cx
jne 0x100293b0
lea eax, [edx + 0xa0]
mov dword [ebp - 0x154], 0
push eax
push edx
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x150], 0
call fcn.1009e430
cmp dword [ebp - 0x154], 0xcc6794b0
jne 0x100293b0
movzx ecx, byte [ebx - 0x4f0d]
lea edx, [ebx - 0x4f0e]
movzx eax, byte [edx]
imul cx, si
add cx, ax
movzx eax, cx
mov ecx, 0xf055
cmp ax, cx
jne 0x100293b0
push 0xa0
push edx
call fcn.1001cbb0
add esp, 8
cmp eax, 0x3ed55af5
jne 0x100293b0
mov dword [edi], 4
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.100b37df
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 8]
xor al, al
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100b37df
mov esp, ebp
pop ebp
ret