Function at 0x7df10b70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x828
push ebx
push esi
mov esi, dword [ebp + 8]
xor eax, eax
xor ebx, ebx
push edi
mov dword [ebp - 0x23], eax
mov word [ebp - 0x1f], ax
mov byte [ebp - 0x1d], al
movzx eax, word [esi + 0x1c]
push 0x7ff
lea ecx, [ebp - 0x827]
push ebx
push ecx
mov byte [ebp - 0x24], bl
mov dword [ebp - 0x28], eax
mov word [ebp + 8], 0xa0d
mov byte [ebp + 0xa], bl
mov dword [ebp - 0x10], 0x74726f50
mov word [ebp - 0xc], 0x93a
mov byte [ebp - 0xa], bl
mov dword [ebp - 8], 0x72657355
mov dword [ebp - 4], 0x93a20
mov dword [ebp - 0x1c], 0x76726553
mov dword [ebp - 0x18], 0x93a7265
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x828], bl
call fcn.7df14470
mov edi, dword [esi + 0x18]
add esp, 0xc
cmp edi, ebx
je 0x7df10e2a
cmp dword [esi + 0x20], ebx
je 0x7df10e2a
lea edx, [ebp - 0x1c]
push edx
call fcn.7df146c0
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x828]
push ecx
call fcn.7df143f0
movzx eax, word [ebp - 0x28]
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x24]
push edx
push 8
push ebx
push eax
add ecx, 0x1c
push ecx
call fcn.7df14620
add esp, 0x24
cmp byte [edi + 1], bl
jne 0x7df10d38
mov edx, dword [esi + 0x18]
push edx
lea eax, [ebp - 0x828]
push eax
call fcn.7df146c0
lea ecx, [ebp + eax - 0x828]
add esp, 4
push ecx
call fcn.7df14a90
push ebx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x828]
push eax
call fcn.7df147f0
push ebx
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x828]
push edx
call fcn.7df147f0
push ebx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x828]
push ecx
call fcn.7df147f0
push ebx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x828]
push eax
call fcn.7df147f0
push ebx
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x828]
push edx
call fcn.7df147f0
mov eax, dword [esi + 0x20]
add esp, 0x44
cmp eax, ebx
je 0x7df10cdb
push eax
lea eax, [ebp - 0x828]
push eax
call fcn.7df146c0
lea ecx, [ebp + eax - 0x828]
add esp, 4
push ecx
call fcn.7df14a90
add esp, 8
push ebx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x828]
push eax
call fcn.7df147f0
push ebx
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x828]
push edx
call fcn.7df147f0
mov eax, dword [esi + 0x24]
add esp, 0x18
cmp eax, ebx
je 0x7df10d27
push eax
lea eax, [ebp - 0x828]
push eax
call fcn.7df146c0
lea ecx, [ebp + eax - 0x828]
add esp, 4
push ecx
call fcn.7df14a90
add esp, 8
push ebx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x828]
push eax
jmp 0x7df10e02
mov ecx, dword [esi + 0x18]
push ebx
push ecx
lea edx, [ebp - 0x828]
push edx
call fcn.7df147f0
push ebx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x828]
push ecx
call fcn.7df147f0
push ebx
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x828]
push eax
call fcn.7df147f0
push ebx
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x828]
push edx
call fcn.7df147f0
push ebx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x828]
push ecx
call fcn.7df147f0
push ebx
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x828]
push eax
call fcn.7df147f0
mov eax, dword [esi + 0x20]
add esp, 0x48
cmp eax, ebx
je 0x7df10db9
push ebx
push eax
lea ecx, [ebp - 0x828]
push ecx
call fcn.7df147f0
add esp, 0xc
push ebx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x828]
push eax
call fcn.7df147f0
push ebx
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x828]
push edx
call fcn.7df147f0
mov eax, dword [esi + 0x24]
add esp, 0x18
cmp eax, ebx
je 0x7df10df6
push ebx
push eax
lea eax, [ebp - 0x828]
push eax
call fcn.7df147f0
add esp, 0xc
push ebx
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x828]
push edx
call fcn.7df147f0
lea eax, [ebp - 0x828]
add esp, 0xc
push eax
call fcn.7df146c0
mov edx, dword [esi + 4]
push eax
lea ecx, [ebp - 0x828]
push ecx
push edx
call fcn.7df10a50
add esp, 0x10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret