Function at 0x1013cf80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101a1042
mov eax, dword fs:[0]
push eax
sub esp, 0x720
mov eax, dword [0x10211a50]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x684], ecx
lea ecx, [ebp - 0x220]
call fcn.100e9360
mov dword [ebp - 4], 0
lea eax, [ebp - 0x67c]
push eax
call fcn.10106cf0
mov ecx, eax
call fcn.1010b810
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x524]
push ecx
call fcn.10106cf0
mov ecx, eax
call fcn.1010b810
mov byte [ebp - 4], 2
push 0x101f36d8
lea ecx, [ebp - 0x28]
call fcn.100e9380
mov byte [ebp - 4], 3
mov dword [ebp - 0x68c], 0
lea ecx, [ebp - 0x5a8]
call fcn.10122330
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x474]
call fcn.100e9680
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.100e1e20
add esp, 8
mov byte [ebp - 4], 5
mov dword [ebp - 0x688], 0
jmp 0x1013d055
mov eax, dword [ebp - 0x688]
add eax, 1
mov dword [ebp - 0x688], eax
lea ecx, [ebp - 0x45c]
call fcn.100fd750
cmp dword [ebp - 0x688], eax
jae 0x1013d4f3
lea ecx, [ebp - 0x450]
call fcn.10121d80
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x40]
call fcn.100e9b70
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x450]
push eax
mov ecx, dword [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x45c]
call fcn.10124880
push eax
mov ecx, dword [ebp - 0x684]
call fcn.10131fc0
movzx edx, al
test edx, edx
jne 0x1013d0de
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x40]
call fcn.100e9ca0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x450]
call fcn.10123c80
jmp 0x1013d046
mov eax, dword [ebp - 0x688]
push eax
lea ecx, [ebp - 0x45c]
call fcn.10124880
add eax, 0x60
mov ecx, eax
call fcn.100ea070
push eax
lea ecx, [ebp - 0x1d8]
push ecx
call fcn.100e1d90
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x688]
push edx
lea ecx, [ebp - 0x45c]
call fcn.10124880
mov ecx, eax
call fcn.100ea070
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.100e1d90
add esp, 8
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x58]
call fcn.100e9680
push eax
lea ecx, [ebp - 0x3c0]
push ecx
call fcn.100e21e0
add esp, 8
mov dword [ebp - 0x6cc], eax
mov edx, dword [ebp - 0x6cc]
push edx
lea ecx, [ebp - 0x58]
call fcn.100e9450
lea ecx, [ebp - 0x3c0]
call fcn.100e9490
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x160]
call fcn.100e9330
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x408]
push ecx
lea ecx, [ebp - 0x178]
call fcn.100e9330
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40]
call fcn.100ea070
push eax
lea edx, [ebp - 0x70]
push edx
call fcn.100e1d90
add esp, 8
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0xa0]
call fcn.100e9330
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0xd0]
call fcn.100e9b40
mov byte [ebp - 4], 0xe
mov edx, dword [0x101f4524]
push edx
push 0x5c
lea ecx, [ebp - 0xd0]
call fcn.100ea080
mov dword [ebp - 0x708], eax
mov eax, dword [0x101f4524]
cmp eax, dword [ebp - 0x708]
jne 0x1013d28c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xd0]
call fcn.100e9ca0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa0]
call fcn.100e9490
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x70]
call fcn.100e9490
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x178]
call fcn.100e9490
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x160]
call fcn.100e9490
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.100e9490
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1d8]
call fcn.100e9490
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x40]
call fcn.100e9ca0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x450]
call fcn.10123c80
jmp 0x1013d046
mov ecx, dword [ebp - 0x68c]
add ecx, 1
mov dword [ebp - 0x68c], ecx
push 0x101f435c
lea edx, [ebp - 0xa0]
push edx
push 0x101a923c
lea ecx, [ebp - 0x390]
call fcn.100e9380
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x718], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x718]
push ecx
lea edx, [ebp - 0x70]
push edx
push str._embedupdate_
lea ecx, [ebp - 0x300]
call fcn.100e9380
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x6a4], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x6a4]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x378]
push eax
call fcn.10119c80
add esp, 0xc
mov dword [ebp - 0x6fc], eax
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x6ac], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x6ac]
push edx
lea eax, [ebp - 0x2d0]
push eax
call fcn.100f12f0
add esp, 0xc
mov dword [ebp - 0x6e4], eax
mov ecx, dword [ebp - 0x6e4]
mov dword [ebp - 0x6b4], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x6b4]
push edx
lea eax, [ebp - 0x258]
push eax
call fcn.10119b90
add esp, 0xc
mov dword [ebp - 0x70c], eax
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x6bc], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x6bc]
push edx
lea eax, [ebp - 0x2a0]
push eax
call fcn.100f12f0
add esp, 0xc
mov dword [ebp - 0x6ec], eax
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6c4], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x6c4]
push edx
lea eax, [ebp - 0x360]
push eax
call fcn.10119c40
add esp, 0xc
mov dword [ebp - 0x704], eax
mov ecx, dword [ebp - 0x704]
mov dword [ebp - 0x698], ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x698]
push edx
lea ecx, [ebp - 0x28]
call fcn.100e9520
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x360]
call fcn.100e9490
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2a0]
call fcn.100e9490
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x258]
call fcn.100e9490
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2d0]
call fcn.100e9490
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x378]
call fcn.100e9490
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x300]
call fcn.100e9490
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x390]
call fcn.100e9490
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x58]
push edx
lea ecx, [ebp - 0x530]
call fcn.1011d660
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xd0]
call fcn.100e9ca0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa0]
call fcn.100e9490
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x70]
call fcn.100e9490
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x178]
call fcn.100e9490
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x160]
call fcn.100e9490
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.100e9490
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1d8]
call fcn.100e9490
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x40]
call fcn.100e9ca0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x450]
call fcn.10123c80
jmp 0x1013d046
cmp dword [ebp - 0x68c], 0
jne 0x1013d582
mov eax, dword [ebp - 0x684]
cmp dword [eax + 4], 0
je 0x1013d523
push 0
push 0x3e8
push 1
mov ecx, dword [ebp - 0x684]
add ecx, 4
call fcn.101453d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x100]
call fcn.100e9ca0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5a8]
call fcn.10123e10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.100e9490
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x524]
call fcn.10115100
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x67c]
call fcn.10115100
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.100e9490
jmp 0x1013db56
cmp dword [ebp - 0x68c], 1
jl 0x1013d5c8
lea ecx, [ebp - 0x28]
call fcn.100e9690
sub eax, 1
push eax
push 0
lea ecx, [ebp - 0x330]
push ecx
lea ecx, [ebp - 0x28]
call fcn.100e96d0
mov dword [ebp - 0x6f4], eax
mov edx, dword [ebp - 0x6f4]
push edx
lea ecx, [ebp - 0x28]
call fcn.100e9450
lea ecx, [ebp - 0x330]
call fcn.100e9490
push 0x101f377c
lea ecx, [ebp - 0x88]
call fcn.100e9b90
mov byte [ebp - 4], 0x16
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1013d6df
push str.SOFTWAREMacromediaCDM
lea ecx, [ebp - 0x1a8]
call fcn.100e9b90
mov byte [ebp - 4], 0x17
push 0xf003f
lea ecx, [ebp - 0x1a8]
push ecx
push reloc.WS2_32.dll_bind
lea ecx, [ebp - 0x240]
call fcn.100f1da0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1a8]
call fcn.100e9ca0
push 0x101f4ef0
lea ecx, [ebp - 0xe8]
call fcn.100e9b90
mov byte [ebp - 4], 0x1a
push str.embed_ueip_seen
lea ecx, [ebp - 0x208]
call fcn.100e9b90
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0x208]
push eax
lea ecx, [ebp - 0x240]
call fcn.100f1e30
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x208]
call fcn.100e9ca0
push 0x101a8d78
lea ecx, [ebp - 0xe8]
call fcn.100ea110
test eax, eax
jne 0x1013d68f
mov byte [ebp + 8], 0
movzx ecx, byte [ebp + 8]
test ecx, ecx
je 0x1013d6a3
mov dword [ebp - 0x694], 0x101a8d94
jmp 0x1013d6ad
mov dword [ebp - 0x694], 0x101f47ec
mov edx, dword [ebp - 0x694]
push edx
lea ecx, [ebp - 0x88]
call fcn.100e9cf0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xe8]
call fcn.100e9ca0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x240]
call fcn.100f1de0
jmp 0x1013d6ef
push 0x101f47ec
lea ecx, [ebp - 0x88]
call fcn.100e9cf0
lea ecx, [ebp - 0x28]
call fcn.100e9680
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.100e1e20
add esp, 8
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x130]
call fcn.100ea070
push eax
mov ecx, dword [ebp - 0x68c]
push ecx
lea edx, [ebp - 0x270]
push edx
call fcn.100e12f0
add esp, 8
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x714], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x714]
call fcn.100ea070
push eax
lea ecx, [ebp - 0x88]
call fcn.100ea070
push eax
push str.__typeembedupdate___s_s___c_s___p__s_
lea ecx, [ebp - 0x118]
push ecx
call fcn.100e24e0
add esp, 0x14
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x270]
call fcn.100e9ca0
lea ecx, [ebp - 0x724]
call fcn.100f0cc0
mov byte [ebp - 4], 0x20
push 0x101a92f4
lea ecx, [ebp - 0x1f0]
call fcn.100e9380
mov byte [ebp - 4], 0x21
push str..exe
lea ecx, [ebp - 0x3a8]
call fcn.100e9b90
mov dword [ebp - 0x69c], eax
mov edx, dword [ebp - 0x69c]
mov dword [ebp - 0x6a0], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x6a0]
push eax
lea ecx, [ebp - 0x348]
push ecx
call fcn.100e4b20
add esp, 4
mov dword [ebp - 0x6a8], eax
mov edx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6b0], edx
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x6b0]
call fcn.100ea070
push eax
push str.flash_cdm_
lea ecx, [ebp - 0x318]
call fcn.100e9b90
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x6c0], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x6c0]
push ecx
lea edx, [ebp - 0x2e8]
push edx
call fcn.100ee840
add esp, 0xc
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x6d0], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x6d0]
push ecx
lea edx, [ebp - 0x2b8]
push edx
call fcn.100ee8e0
add esp, 0xc
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x6e0], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x6e0]
call fcn.100ea070
push eax
lea ecx, [ebp - 0x288]
push ecx
call fcn.100e3200
add esp, 4
mov dword [ebp - 0x6e8], eax
mov edx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6f0], edx
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x6f0]
call fcn.100ea070
push eax
push 0x101f397c
lea eax, [ebp - 0xb8]
push eax
call fcn.100e24e0
add esp, 0x10
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x288]
call fcn.100e9ca0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x2b8]
call fcn.100e9ca0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x2e8]
call fcn.100e9ca0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x318]
call fcn.100e9ca0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x348]
call fcn.100e9ca0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x3a8]
call fcn.100e9ca0
lea ecx, [ebp - 0xb8]
call fcn.100ea070
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x728], esp
push eax
push ecx
call fcn.100e1d90
add esp, 8
mov dword [ebp - 0x72c], eax
lea edx, [ebp - 0x1f0]
push edx
lea ecx, [ebp - 0x724]
call fcn.100f0f20
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 0
jne 0x1013da7f
lea ecx, [ebp - 0x5a8]
push ecx
mov ecx, dword [ebp - 0x684]
call fcn.10143f50
lea edx, [ebp - 0x1c0]
push edx
call fcn.100e6340
add esp, 4
mov byte [ebp - 4], 0x2f
push str.Microsoft_Windows_XP
lea ecx, [ebp - 0x1c0]
call fcn.100ea110
test eax, eax
jne 0x1013da48
lea ecx, [ebp - 0x118]
call fcn.100ea070
push eax
lea ecx, [ebp - 0x190]
call fcn.100e9b90
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xb8]
call fcn.100ea070
push eax
lea ecx, [ebp - 0x148]
call fcn.100e9b90
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x148]
push ecx
call fcn.100e5c60
add esp, 8
test eax, eax
je 0x1013da15
mov byte [ebp - 0x67d], 1
jmp 0x1013da1c
mov byte [ebp - 0x67d], 0
mov dl, byte [ebp - 0x67d]
mov byte [ebp - 0x68d], dl
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x148]
call fcn.100e9ca0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x190]
call fcn.100e9ca0
jmp 0x1013da70
push 0
lea ecx, [ebp - 0x118]
call fcn.100ea070
push eax
lea ecx, [ebp - 0xb8]
call fcn.100ea070
push eax
call fcn.100e5be0
add esp, 0xc
mov byte [ebp - 0x68e], al
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1c0]
call fcn.100e9ca0
mov eax, dword [ebp - 0x684]
cmp dword [eax + 4], 0
je 0x1013daa2
push 0
push 0x3e8
push 1
mov ecx, dword [ebp - 0x684]
add ecx, 4
call fcn.101453d0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xb8]
call fcn.100e9ca0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1f0]
call fcn.100e9490
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x724]
call fcn.100f0ce0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x118]
call fcn.100e9ca0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x130]
call fcn.100e9ca0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x88]
call fcn.100e9ca0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x100]
call fcn.100e9ca0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5a8]
call fcn.10123e10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.100e9490
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x524]
call fcn.10115100
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x67c]
call fcn.10115100
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.100e9490
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1016177d
mov esp, ebp
pop ebp
ret 4