Function at 0x1000f610
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003c474
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x740
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ebx, edx
push 1
mov edi, ecx
call fcn.10024f4d
add esp, 4
lea eax, [ebp - 0x14]
push eax
call fcn.1000cf80
push eax
call fcn.10024f4d
add esp, 4
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.1000cf80
mov esi, dword [ebp - 0x14]
lea ecx, [ebp - 0xc0]
push eax
push esi
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.10001d00
push esi
mov dword [ebp - 4], 0
call fcn.10024f30
add esp, 4
mov ecx, 0x100529ac
call fcn.1000cda0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
push 0
push 0x1004cc18
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.10001d00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
push 0
push 0x1004cc18
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
call fcn.10001d00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x108]
push 0
push 0x1004cc18
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.10001d00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf0]
push 0
push 0x1004cc18
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
call fcn.10001d00
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xd8]
push 0x6f
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_114.0.0.0_Safari_537.36
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call fcn.10001d00
mov byte [ebp - 4], 6
mov eax, edi
cmp dword [edi + 0x14], 0x10
jb 0x1000f79c
mov eax, dword [edi]
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x120]
push ecx
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0xd8]
push ecx
push eax
lea ecx, [ebp - 0x1dc]
call fcn.10008940
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0xc4]
cmp edx, 0x10
jb 0x1000f806
mov ecx, dword [ebp - 0xd8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000f7fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x1000f844
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000f83a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x1000f882
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000f878
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x10c]
cmp edx, 0x10
jb 0x1000f8c0
mov ecx, dword [ebp - 0x120]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000f8b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x20]
cmp edx, 0x10
jb 0x1000f8f8
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000f8ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
lea ecx, [ebp - 0x24c]
call fcn.1000df60
mov byte [ebp - 4], 0xd
xor ecx, ecx
movaps xmm0, xmmword [0x1004d9f0]
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x28], 0x716e2843
movaps xmm0, xmmword [0x1004da50]
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x24], 0x69766d74
movaps xmm0, xmmword [0x1004db50]
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x20], 0x2a456d75
movaps xmm0, xmmword [0x1004da60]
movups xmmword [ebp - 0x48], xmm0
mov byte [ebp - 0x1c], 0
movaps xmm0, xmmword [0x1004d900]
movups xmmword [ebp - 0x38], xmm0
nop dword [eax]
movsx eax, byte [ebp - 0x78]
and eax, 0x8000000f
jns 0x1000f970
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x5b
jb 0x1000f960
lea ecx, [ebp - 0x77]
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x80], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000f9a0
sub ecx, edx
lea eax, [ebp - 0x77]
push ecx
push eax
lea ecx, [ebp - 0x90]
call fcn.10001d00
mov ah, 0x22
mov byte [ebp - 4], 0xe
mov cl, 0x2f
mov byte [ebp - 0x15], ah
xor al, al
mov byte [ebp - 0x11], 0
xor cl, ah
mov dl, 0x28
xor al, ah
mov byte [ebp - 0x13], cl
xor dl, ah
mov byte [ebp - 0x14], al
lea ecx, [ebp - 0x14]
mov byte [ebp - 0x12], dl
mov edx, dword [ebx + 0x10]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000f9e4
mov eax, 0x7fffffff
sub ecx, esi
sub eax, edx
cmp eax, ecx
jb 0x100101be
cmp dword [ebx + 0x14], 0x10
jb 0x1000fa04
mov ebx, dword [ebx]
push ecx
lea eax, [ebp - 0x14]
push eax
push edx
push ebx
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34]
call fcn.1000d040
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x90]
call fcn.10003400
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x20]
cmp edx, 0x10
jb 0x1000fa62
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000fa58
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
movaps xmm0, xmmword [0x1004d8c0]
xor ecx, ecx
movups xmmword [ebp - 0x47], xmm0
mov dword [ebp - 0x27], 0x1a1c1b45
movaps xmm0, xmmword [0x1004d8d0]
movups xmmword [ebp - 0x37], xmm0
mov dword [ebp - 0x23], 0x6505090d
mov dword [ebp - 0x1f], 0x626562
nop
mov al, byte [ebp - 0x47]
xor byte [ebp + ecx - 0x46], al
inc ecx
cmp ecx, 0x2a
jb 0x1000fa90
lea eax, [ebp - 0x46]
mov byte [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.10014cc0
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x90]
call fcn.10003400
movaps xmm0, xmmword [0x1004dae0]
xor ecx, ecx
movups xmmword [ebp - 0x43], xmm0
mov dword [ebp - 0x23], 0x577f667f
movaps xmm0, xmmword [0x1004dac0]
movups xmmword [ebp - 0x33], xmm0
mov dword [ebp - 0x1f], 0xf1256
nop dword [eax + eax]
movsx eax, byte [ebp - 0x43]
and eax, 0x8000000f
jns 0x1000fb00
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x42], al
inc ecx
cmp ecx, 0x26
jb 0x1000faf0
lea eax, [ebp - 0x42]
mov byte [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.10014cc0
movaps xmm0, xmmword [0x1004dab0]
xor ecx, ecx
movups xmmword [ebp - 0x54], xmm0
mov dword [ebp - 0x24], 0x297a6b68
movaps xmm0, xmmword [0x1004d960]
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x20], 0x11141114
movaps xmm0, xmmword [0x1004db10]
movups xmmword [ebp - 0x34], xmm0
mov byte [ebp - 0x1c], 0
movsx eax, byte [ebp - 0x54]
and eax, 0x8000000f
jns 0x1000fb62
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x53], al
inc ecx
cmp ecx, 0x37
jb 0x1000fb52
lea eax, [ebp - 0x53]
mov byte [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.10014cc0
mov bl, 0x7a
mov byte [ebp - 0x11], 0
mov al, 0x4b
mov byte [ebp - 0x15], bl
xor al, bl
mov byte [ebp - 0x11], 0
mov cl, 0x77
mov byte [ebp - 0x14], al
xor cl, bl
lea eax, [ebp - 0x14]
mov dl, 0x70
mov byte [ebp - 0x13], cl
xor dl, bl
lea ecx, [ebp - 0x90]
push eax
mov byte [ebp - 0x12], dl
call fcn.10014cc0
movaps xmm0, xmmword [0x1004d9b0]
xor ecx, ecx
movups xmmword [ebp - 0x41], xmm0
mov dword [ebp - 0x21], 0xf53547c
movaps xmm0, xmmword [0x1004da30]
movups xmmword [ebp - 0x31], xmm0
mov word [ebp - 0x1d], 0xc
movsx eax, byte [ebp - 0x41]
and eax, 0x8000000f
jns 0x1000fbe5
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x40], al
inc ecx
cmp ecx, 0x24
jb 0x1000fbd5
lea eax, [ebp - 0x40]
mov byte [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.10014cc0
movaps xmm0, xmmword [0x1004da80]
xor ecx, ecx
movups xmmword [ebp - 0x52], xmm0
mov dword [ebp - 0x22], 0xd102568
movaps xmm0, xmmword [0x1004d940]
movups xmmword [ebp - 0x42], xmm0
mov word [ebp - 0x1e], 0xd10
movaps xmm0, xmmword [0x1004db20]
movups xmmword [ebp - 0x32], xmm0
mov byte [ebp - 0x1c], 0
nop word [eax + eax]
movsx eax, byte [ebp - 0x52]
and eax, 0x8000000f
jns 0x1000fc50
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x51], al
inc ecx
cmp ecx, 0x35
jb 0x1000fc40
lea eax, [ebp - 0x51]
mov byte [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.10014cc0
mov dh, 0x43
mov byte [ebp - 0x11], 0
mov al, 0x37
mov byte [ebp - 0x18], dh
mov ah, 0x4e
mov byte [ebp - 0x11], 0
xor al, dh
xor ah, dh
mov cl, 0x31
mov byte [ebp - 0x17], al
mov ch, 0x49
mov byte [ebp - 0x13], ah
xor cl, dh
lea eax, [ebp - 0x17]
xor ch, dh
mov byte [ebp - 0x16], cl
mov dl, 0x36
mov byte [ebp - 0x12], ch
mov bl, 0x26
lea ecx, [ebp - 0x90]
xor dl, dh
xor bl, dh
push eax
mov byte [ebp - 0x15], dl
mov byte [ebp - 0x14], bl
call fcn.10014cc0
movaps xmm0, xmmword [0x1004d9d0]
xor ecx, ecx
movups xmmword [ebp - 0x43], xmm0
mov dword [ebp - 0x23], 0x3054557d
movaps xmm0, xmmword [0x1004da40]
movups xmmword [ebp - 0x33], xmm0
mov dword [ebp - 0x1f], 0xd1030
nop dword [eax]
movsx eax, byte [ebp - 0x43]
and eax, 0x8000000f
jns 0x1000fcf0
dec eax
or eax, 0xfffffff0
inc eax
sub byte [ebp + ecx - 0x42], al
inc ecx
cmp ecx, 0x26
jb 0x1000fce0
lea eax, [ebp - 0x42]
mov byte [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.10014cc0
push 0
push 0x1004cc18
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
call fcn.10001d00
mov byte [ebp - 4], 0x10
xor ecx, ecx
movaps xmm0, xmmword [0x1004da20]
movups xmmword [ebp - 0x6b], xmm0
movaps xmm0, xmmword [0x1004da70]
movups xmmword [ebp - 0x5b], xmm0
movaps xmm0, xmmword [0x1004d990]
movups xmmword [ebp - 0x4b], xmm0
movaps xmm0, xmmword [0x1004d950]
movups xmmword [ebp - 0x3b], xmm0
movaps xmm0, xmmword [str.doYeLlLawlw__]
movups xmmword [ebp - 0x2b], xmm0
mov al, byte [ebp - 0x6b]
xor byte [ebp + ecx - 0x6a], al
inc ecx
cmp ecx, 0x4e
jb 0x1000fd77
lea eax, [ebp - 0x6a]
mov byte [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0xa8]
call fcn.10014cc0
movaps xmm0, xmmword [0x1004d920]
xor ecx, ecx
movups xmmword [ebp - 0x5a], xmm0
mov dword [ebp - 0x2a], 0x5d475622
movaps xmm0, xmmword [str.Urvere7_PAT_C9iiC_viumEnqtm]
movups xmmword [ebp - 0x4a], xmm0
mov dword [ebp - 0x26], 0x4f3a2251
movaps xmm0, xmmword [0x1004d980]
movups xmmword [ebp - 0x3a], xmm0
mov dword [ebp - 0x22], 0x21465251
mov word [ebp - 0x1e], 0x235d
mov byte [ebp - 0x1c], 0
nop dword [eax]
mov al, byte [ebp - 0x5a]
xor byte [ebp + ecx - 0x59], al
inc ecx
cmp ecx, 0x3d
jb 0x1000fde0
lea eax, [ebp - 0x59]
mov byte [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0xa8]
call fcn.10014cc0
cmp dword [edi + 0x14], 0x10
jb 0x1000fe08
mov edi, dword [edi]
lea eax, [ebp - 0x74c]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x14]
push eax
push edi
call fcn.100087e0
lea ecx, [ebp - 0x34c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000fe30
sub ecx, edx
lea eax, [ebp - 0x34c]
push ecx
push eax
lea ecx, [ebp - 0x1dc]
call fcn.10001d00
lea eax, [ebp - 0x12c]
push eax
call fcn.10028974
add esp, 4
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x14], 1
lea ecx, [ebp - 0x74c]
lea edx, [ecx + 1]
sete byte [ebp - 0x1a8]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000fe75
sub ecx, edx
lea eax, [ebp - 0x74c]
push ecx
push eax
lea ecx, [ebp - 0x1c4]
call fcn.10001d00
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1005311c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x100543b8]
cmp eax, dword [ecx + 4]
jle 0x1000ff0e
push 0x100543b8
call fcn.1001a35a
add esp, 4
cmp dword [0x100543b8], 0xffffffff
jne 0x1000ff0e
mov byte [ebp - 4], 0x11
mov ecx, 0x100543f0
push 4
push str.POST
mov dword [0x10054400], 0
mov dword [0x10054404], 0xf
mov byte [0x100543f0], 0
call fcn.10001d00
push 0x1003cf20
call fcn.1001a735
push 0x100543b8
mov byte [ebp - 4], 0x10
call fcn.1001a310
add esp, 8
lea eax, [ebp - 0x144]
mov ecx, 0x100543f0
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa8]
push eax
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x1c4]
push dword [ebp - 0x1ac]
lea edx, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.10007e90
mov edx, dword [ebp - 0x94]
add esp, 0x3c
cmp dword [ebp - 0x21c], 0xc8
je 0x100100a0
cmp edx, 0x10
jb 0x1000ffd2
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ffc8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10010024
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1001001a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
call fcn.100103e0
lea ecx, [ebp - 0x1dc]
call fcn.100101d0
mov edx, dword [ebp - 0xac]
cmp edx, 0x10
jb 0x100101ab
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10010083
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x10
jb 0x100100d4
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100100ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10010126
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1001011c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
call fcn.100103e0
lea ecx, [ebp - 0x1dc]
call fcn.100101d0
mov edx, dword [ebp - 0xac]
cmp edx, 0x10
jb 0x10010187
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1001017d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100101c3
push edx
push ecx
call fcn.1001a1f6
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
xor al, al
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.100018d0
call fcn.10020517
int3