Function at 0x1001f7f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov eax, dword [0x1007e274]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x70], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x14], 0x55
mov byte [ebp - 0x13], 0x8b
mov byte [ebp - 0x12], 0xec
mov byte [ebp - 0x11], 0x8d
mov byte [ebp - 0x10], 5
mov byte [ebp - 0x1c], 0x55
mov byte [ebp - 0x1b], 0x8b
mov byte [ebp - 0x1a], 0xec
mov byte [ebp - 0x19], 0x8d
mov byte [ebp - 0x18], 5
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x8b
mov byte [ebp - 0xa], 0xec
mov byte [ebp - 9], 0x51
mov byte [ebp - 8], 0x53
mov byte [ebp - 7], 0x8b
mov byte [ebp - 0x24], 0x55
mov byte [ebp - 0x23], 0x89
mov byte [ebp - 0x22], 0xe5
mov byte [ebp - 0x21], 0x53
mov byte [ebp - 0x20], 0x83
mov byte [ebp - 0x1f], 0xec
mov byte [ebp - 0x1e], 0x54
mov byte [ebp - 0x1d], 0x8b
mov byte [ebp - 0x6c], 0x55
mov byte [ebp - 0x6b], 0x8b
mov byte [ebp - 0x6a], 0xec
mov byte [ebp - 0x69], 0x83
mov byte [ebp - 0x68], 0xec
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x53
mov byte [ebp - 0x65], 0x56
mov byte [ebp - 0x40], 0x68
mov byte [ebp - 0x3f], 0xcc
mov byte [ebp - 0x3e], 0xcc
mov byte [ebp - 0x3d], 0xcc
mov byte [ebp - 0x3c], 0xcc
mov byte [ebp - 0x3b], 0x60
mov byte [ebp - 0x3a], 0x9c
mov byte [ebp - 0x39], 0xbb
mov byte [ebp - 0x38], 0xcc
mov byte [ebp - 0x37], 0xcc
mov byte [ebp - 0x4c], 0x60
mov byte [ebp - 0x4b], 0xe8
mov byte [ebp - 0x4a], 0
mov byte [ebp - 0x49], 0
mov byte [ebp - 0x48], 0
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 0x5b
mov byte [ebp - 0x45], 0x81
mov byte [ebp - 0x44], 0xeb
mov byte [ebp - 0x43], 6
mov byte [ebp - 0x58], 0x56
mov byte [ebp - 0x57], 0x8b
mov byte [ebp - 0x56], 0x35
mov byte [ebp - 0x55], 0
mov byte [ebp - 0x54], 0xc0
mov byte [ebp - 0x53], 0x27
mov byte [ebp - 0x52], 0x6a
mov byte [ebp - 0x51], 0x57
mov byte [ebp - 0x50], 0x8b
mov byte [ebp - 0x4f], 0x3d
mov byte [ebp - 0x64], 0xe8
mov byte [ebp - 0x63], 0x1d
mov byte [ebp - 0x62], 0
mov byte [ebp - 0x61], 0
mov byte [ebp - 0x60], 0
mov byte [ebp - 0x5f], 0x50
mov byte [ebp - 0x5e], 0x68
mov byte [ebp - 0x5d], 0x58
mov byte [ebp - 0x5c], 0x58
mov byte [ebp - 0x5b], 0xc3
mov byte [ebp - 0x2c], 0x68
mov byte [ebp - 0x2b], 0xac
mov byte [ebp - 0x2a], 0xce
mov byte [ebp - 0x29], 0xea
mov byte [ebp - 0x28], 0xac
mov byte [ebp - 0x27], 0x9c
mov byte [ebp - 0x26], 0x60
mov byte [ebp - 0x25], 0x68
mov byte [ebp - 0x34], 0x8b
mov byte [ebp - 0x33], 0xff
mov byte [ebp - 0x32], 0x55
mov byte [ebp - 0x31], 0x8b
mov byte [ebp - 0x30], 0xec
mov byte [ebp - 0x2f], 0x5d
mov byte [ebp - 0x2e], 0xff
mov byte [ebp - 0x2d], 0x25
mov dword [ebp - 0x70], 0
jmp 0x1001f982
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 5
jge 0x1001f9a9
push 1
mov edx, dword [ebp - 0x70]
lea eax, [ebp + edx - 0x14]
push eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001f9a7
jmp 0x1001f9a9
jmp 0x1001f979
cmp dword [ebp - 0x70], 5
jne 0x1001f9b9
mov eax, 1
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001f9cb
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 5
jge 0x1001f9f2
push 1
mov eax, dword [ebp - 0x70]
lea ecx, [ebp + eax - 0x1c]
push ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x70]
push edx
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001f9f0
jmp 0x1001f9f2
jmp 0x1001f9c2
cmp dword [ebp - 0x70], 5
jne 0x1001fa02
mov eax, 1
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fa14
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 6
jge 0x1001fa3b
push 1
mov ecx, dword [ebp - 0x70]
lea edx, [ebp + ecx - 0xc]
push edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x70]
push eax
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fa39
jmp 0x1001fa3b
jmp 0x1001fa0b
cmp dword [ebp - 0x70], 6
jne 0x1001fa4b
mov eax, 2
jmp 0x1001fe62
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx]
cmp edx, 0x68
jne 0x1001fa7a
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + 5]
cmp ecx, 0x68
jne 0x1001fa7a
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + 0xa]
cmp eax, 0xb8
jne 0x1001fa7a
mov eax, 3
jmp 0x1001fe62
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx]
cmp edx, 0x68
jne 0x1001faa7
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + 5]
cmp ecx, 0x68
jne 0x1001faa7
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + 0xa]
cmp eax, 0x68
jne 0x1001faa7
mov eax, 4
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fab9
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 8
jge 0x1001fae0
push 1
mov edx, dword [ebp - 0x70]
lea eax, [ebp + edx - 0x24]
push eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fade
jmp 0x1001fae0
jmp 0x1001fab0
cmp dword [ebp - 0x70], 8
jne 0x1001faf0
mov eax, 5
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fb02
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 8
jge 0x1001fb29
push 1
mov eax, dword [ebp - 0x70]
lea ecx, [ebp + eax - 0xc]
push ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x70]
push edx
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fb27
jmp 0x1001fb29
jmp 0x1001faf9
cmp dword [ebp - 0x70], 8
jne 0x1001fb39
mov eax, 6
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fb4b
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xa
jge 0x1001fb72
push 1
mov ecx, dword [ebp - 0x70]
lea edx, [ebp + ecx - 0x40]
push edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x70]
push eax
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fb70
jmp 0x1001fb72
jmp 0x1001fb42
cmp dword [ebp - 0x70], 0xa
jne 0x1001fb82
mov eax, 7
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fb94
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 0xa
jge 0x1001fbbb
push 1
mov edx, dword [ebp - 0x70]
lea eax, [ebp + edx - 0x4c]
push eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fbb9
jmp 0x1001fbbb
jmp 0x1001fb8b
cmp dword [ebp - 0x70], 0xa
jne 0x1001fbcb
mov eax, 8
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fbdd
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0xa
jge 0x1001fc04
push 1
mov eax, dword [ebp - 0x70]
lea ecx, [ebp + eax - 0x58]
push ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x70]
push edx
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fc02
jmp 0x1001fc04
jmp 0x1001fbd4
cmp dword [ebp - 0x70], 0xa
jne 0x1001fc14
mov eax, 9
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fc26
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xa
jge 0x1001fc4d
push 1
mov ecx, dword [ebp - 0x70]
lea edx, [ebp + ecx - 0x64]
push edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x70]
push eax
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fc4b
jmp 0x1001fc4d
jmp 0x1001fc1d
cmp dword [ebp - 0x70], 0xa
jne 0x1001fc5d
mov eax, 0xa
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fc6f
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 8
jge 0x1001fc96
push 1
mov edx, dword [ebp - 0x70]
lea eax, [ebp + edx - 0x2c]
push eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fc94
jmp 0x1001fc96
jmp 0x1001fc66
cmp dword [ebp - 0x70], 8
jne 0x1001fca6
mov eax, 0xb
jmp 0x1001fe62
mov dword [ebp - 0x70], 0
jmp 0x1001fcb8
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 8
jge 0x1001fcdf
push 1
mov eax, dword [ebp - 0x70]
lea ecx, [ebp + eax - 0x34]
push ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x70]
push edx
call fcn.100410dd
add esp, 0xc
test eax, eax
je 0x1001fcdd
jmp 0x1001fcdf
jmp 0x1001fcaf
cmp dword [ebp - 0x70], 8
jne 0x1001fcef
mov eax, 0xc
jmp 0x1001fe62
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
cmp eax, 0x68
jne 0x1001fd49
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
test eax, eax
jne 0x1001fd49
mov ecx, 1
shl ecx, 1
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
test eax, eax
jne 0x1001fd49
mov ecx, 1
imul edx, ecx, 5
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + edx]
cmp ecx, 0xe8
jne 0x1001fd49
mov eax, 0xe
jmp 0x1001fe62
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + eax]
cmp edx, 0x55
jne 0x1001fdef
mov eax, 1
shl eax, 0
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + eax]
cmp edx, 0x8b
jne 0x1001fdef
mov eax, 1
shl eax, 1
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + eax]
cmp edx, 0xec
jne 0x1001fdef
mov eax, 1
imul ecx, eax, 3
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
cmp eax, 0x83
jne 0x1001fdef
mov ecx, 1
shl ecx, 2
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
cmp eax, 0xc4
jne 0x1001fdef
mov ecx, 1
imul edx, ecx, 5
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + edx]
cmp ecx, 0xd8
jne 0x1001fdef
mov edx, 1
imul eax, edx, 6
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + eax]
cmp edx, 0xb8
jne 0x1001fdef
mov eax, 0xf
jmp 0x1001fe62
clc
jae 0x1001fdf4
dec ebp
or esp, dword [esi - 0x64]
pushf
push 0xa
jae 0x1001fe01
jmp 0x1001fdfc
call 0x1001fe03
jae 0x1001fdfc
add esp, 4
jmp 0x1001fe08
dec dword [esp]
jno 0x1001fe0d
jns 0x1001fdf8
jp 0x1001fe11
add esp, 4
popf
jmp 0x1001fe18
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001fe31
jne 0x1001fe31
or edi, dword [ebx + eax - 0x15]
add ecx, dword [ebx]
jl 0x1001fe36
jmp 0x1001fe38
je 0x1001fe33
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001fe52
jne 0x1001fe51
call 0x9305eed9
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001fe60
jne 0x1001fe60
call 0x6e61be97
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1003eb1d
mov esp, ebp
pop ebp
ret