Function at 0x10022930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f9e63
mov eax, dword fs:[0]
push eax
sub esp, 0x1c4
mov eax, dword [0x1014b084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [ebp + 8], 0
mov eax, dword [edi + 0x20]
mov dword [0x1015085c], eax
je 0x1002325f
cmp dword [ebp + 0xc], 1
jne 0x1002325f
push 0x104
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.10079b70
add esp, 0xc
lea ecx, [ebp - 0x150]
call fcn.100066e0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x14c]
cmp dword [ebp - 0x138], 0x10
mov dword [ebp - 0x13c], 0
cmovae eax, dword [ebp - 0x14c]
mov byte [eax], 0
mov eax, 0x10154ac4
cmp dword [0x10154ad8], 0x10
cmovae eax, dword [0x10154ac4]
push eax
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x15c], 0x57536c23
xor esi, esi
mov dword [ebp - 0x158], 0xd4d4c4a
mov dword [ebp - 0x154], 0x4a4d6a
cmp esi, 0xb
jb 0x10022a22
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x15b]
xor bl, byte [ebp - 0x15c]
cmp esi, 0xb
jb 0x10022a4b
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x15b], bl
inc esi
cmp esi, 0xa
jb 0x10022a06
lea eax, [ebp - 0x15b]
mov byte [ebp - 0x151], 0
push eax
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [edi]
mov eax, dword [ebp + 8]
test ecx, ecx
je 0x10022a99
cmp eax, ecx
jne 0x10022a99
mov ecx, edi
call fcn.10023500
lea ecx, [ebp - 0x150]
call fcn.10006b40
mov al, 1
jmp 0x10023261
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x10022e47
cmp eax, ecx
jne 0x10022e47
cmp dword [0x10154b18], 1
jne 0x10023250
mov ecx, dword [edi + 0x18]
mov byte [0x101507bf], 1
call fcn.10019a60
push eax
lea ecx, [ebp - 0x134]
call fcn.10006800
xor esi, esi
mov byte [ebp - 4], 1
cmp dword [ebp - 0x120], esi
jbe 0x10022b07
push esi
lea ecx, [ebp - 0x134]
call fcn.1000a960
movsx eax, byte [eax]
push eax
call fcn.1008df30
add esp, 4
test eax, eax
je 0x10022b21
inc esi
cmp esi, dword [ebp - 0x120]
jb 0x10022ae2
mov ecx, dword [edi + 0x18]
call fcn.10019a60
cmp dword [eax + 0x18], 0x10
jb 0x10022cb0
mov eax, dword [eax + 4]
jmp 0x10022cb3
movaps xmm0, xmmword [0x1013bc90]
xor esi, esi
movups xmmword [ebp - 0x170], xmm0
mov word [ebp - 0x160], 0x5e43
mov byte [ebp - 0x15e], 0
cmp esi, 0x12
jb 0x10022b5d
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x16f]
xor bl, byte [ebp - 0x170]
cmp esi, 0x12
jb 0x10022b86
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x16f], bl
inc esi
cmp esi, 0x11
jb 0x10022b41
lea eax, [ebp - 0x16f]
mov byte [ebp - 0x15e], 0
push eax
lea ecx, [ebp - 0x1b4]
call fcn.10007690
mov byte [ebp - 4], 2
xor esi, esi
movaps xmm0, xmmword [str.5pMV_T_RP]
movups xmmword [ebp - 0x198], xmm0
mov dword [ebp - 0x178], 0x50575840
movaps xmm0, xmmword [0x1013bd10]
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x174], 0x141b47
cmp esi, 0x27
jb 0x10022bfe
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x197]
xor bl, byte [ebp - 0x198]
cmp esi, 0x27
jb 0x10022c27
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x197], bl
inc esi
cmp esi, 0x26
jb 0x10022be2
lea eax, [ebp - 0x197]
mov byte [ebp - 0x171], 0
push eax
lea ecx, [ebp - 0x1d0]
call fcn.10007690
push 0
push ecx
mov byte [ebp - 4], 3
lea eax, [ebp - 0x1b4]
mov dword [esp], 0
push 0
push 0
push 0
push eax
lea eax, [ebp - 0x1d0]
push eax
push eax
call dword [0x10136514]
lea ecx, [ebp - 0x1d0]
call fcn.10006b40
lea ecx, [ebp - 0x1b4]
call fcn.10006b40
lea ecx, [ebp - 0x134]
mov dword [edi + 0x1c], 0
call fcn.10006b40
lea ecx, [ebp - 0x150]
call fcn.10006b40
mov al, 1
jmp 0x10023261
add eax, 4
push eax
call fcn.1008efc0
add esp, 4
mov dword [edi + 0x1c], eax
cmp eax, 0x64
jle 0x10022e2a
movaps xmm0, xmmword [0x1013b1a0]
xor esi, esi
movups xmmword [ebp - 0x170], xmm0
mov word [ebp - 0x160], 0x518
mov byte [ebp - 0x15e], 0
cmp esi, 0x12
jb 0x10022d04
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x16f]
xor bl, byte [ebp - 0x170]
cmp esi, 0x12
jb 0x10022d2d
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x16f], bl
inc esi
cmp esi, 0x11
jb 0x10022ce8
lea eax, [ebp - 0x16f]
mov byte [ebp - 0x15e], 0
push eax
lea ecx, [ebp - 0x1b4]
call fcn.10007690
mov byte [ebp - 4], 4
xor esi, esi
movaps xmm0, xmmword [str.xEUSZX]
movups xmmword [ebp - 0x194], xmm0
mov dword [ebp - 0x174], 0x1c1358
movaps xmm0, xmmword [0x1013bd80]
movups xmmword [ebp - 0x184], xmm0
nop
cmp esi, 0x23
jb 0x10022d9c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x193]
xor bl, byte [ebp - 0x194]
cmp esi, 0x23
jb 0x10022dc5
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x193], bl
inc esi
cmp esi, 0x22
jb 0x10022d80
lea eax, [ebp - 0x193]
mov byte [ebp - 0x171], 0
push eax
lea ecx, [ebp - 0x1d0]
call fcn.10007690
push 0
push ecx
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1b4]
mov dword [esp], 0
push 0
push 0
push 0
push eax
lea eax, [ebp - 0x1d0]
push eax
push eax
call dword [0x10136514]
lea ecx, [ebp - 0x1d0]
call fcn.10006b40
lea ecx, [ebp - 0x1b4]
call fcn.10006b40
lea ecx, [ebp - 0x134]
call fcn.10006b40
lea ecx, [ebp - 0x150]
call fcn.10006b40
mov al, 1
jmp 0x10023261
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x10022e56
cmp eax, ecx
je 0x10023250
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x10022f97
cmp eax, ecx
jne 0x10022f97
xor edx, edx
lea ecx, [ebp - 0x1b4]
cmp dword [0x10154b18], 1
setne dl
mov dword [0x10154b18], edx
call fcn.10017bb0
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 0x10
jb 0x10022e95
mov edi, dword [eax + 4]
jmp 0x10022e98
lea edi, [eax + 4]
mov dword [ebp - 0x158], 0x36370342
xor esi, esi
mov word [ebp - 0x154], 0x2d
nop dword [eax]
cmp esi, 5
jb 0x10022ecc
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x157]
xor bl, byte [ebp - 0x158]
cmp esi, 5
jb 0x10022ef5
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x157], bl
inc esi
cmp esi, 4
jb 0x10022eb0
mov byte [ebp - 0x153], 0
xor esi, esi
mov dword [ebp - 0x16c], 0x303c0555
mov dword [ebp - 0x168], 0x2d103036
mov dword [ebp - 0x164], 0x3b343d36
mov word [ebp - 0x160], 0x3032
mov byte [ebp - 0x15e], 0
nop dword [eax]
cmp esi, 0xe
jb 0x10022f5c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x16b]
xor bl, byte [ebp - 0x16c]
cmp esi, 0xe
jb 0x10022f85
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x16b], bl
inc esi
cmp esi, 0xd
jb 0x10022f40
jmp 0x10023222
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x100230e5
cmp eax, ecx
jne 0x100230e5
xor edx, edx
lea ecx, [ebp - 0x1b4]
cmp dword [0x10154b1c], 1
setne dl
mov dword [0x10154b1c], edx
call fcn.10017bb0
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 0x10
jb 0x10022fd6
mov edi, dword [eax + 4]
jmp 0x10022fd9
lea edi, [eax + 4]
mov dword [ebp - 0x15c], 0x3183f6c
xor esi, esi
mov dword [ebp - 0x158], 0x225070f
mov word [ebp - 0x154], 2
cmp esi, 9
jb 0x10023014
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x15b]
xor bl, byte [ebp - 0x15c]
cmp esi, 9
jb 0x1002303d
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x15b], bl
inc esi
cmp esi, 8
jb 0x10022ff8
mov byte [ebp - 0x153], 0
xor esi, esi
mov dword [ebp - 0x16c], 0x29251c4c
mov dword [ebp - 0x168], 0x3409292f
mov dword [ebp - 0x164], 0x222d242f
mov word [ebp - 0x160], 0x292b
mov byte [ebp - 0x15e], 0
cmp esi, 0xe
jb 0x1002309d
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x16b]
xor bl, byte [ebp - 0x16c]
cmp esi, 0xe
jb 0x100230c6
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x16b], bl
inc esi
cmp esi, 0xd
jb 0x10023081
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x15b]
jmp 0x1002322f
mov ecx, dword [edi + 0x14]
test ecx, ecx
je 0x10023250
cmp eax, ecx
jne 0x10023250
xor edx, edx
lea ecx, [ebp - 0x1b4]
cmp dword [0x10154b20], 1
setne dl
mov dword [0x10154b20], edx
call fcn.10017bb0
mov byte [ebp - 4], 8
cmp dword [eax + 0x18], 0x10
jb 0x10023124
mov edi, dword [eax + 4]
jmp 0x10023127
lea edi, [eax + 4]
mov dword [ebp - 0x158], 0x242d1b48
xor esi, esi
mov word [ebp - 0x154], 0x24
nop dword [eax]
cmp esi, 5
jb 0x1002315c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x157]
xor bl, byte [ebp - 0x158]
cmp esi, 5
jb 0x10023185
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x157], bl
inc esi
cmp esi, 4
jb 0x10023140
mov byte [ebp - 0x153], 0
xor esi, esi
mov dword [ebp - 0x16c], 0x1b172e7e
mov dword [ebp - 0x168], 0x63b1b1d
mov dword [ebp - 0x164], 0x101f161d
mov word [ebp - 0x160], 0x1b19
mov byte [ebp - 0x15e], 0
nop dword [eax]
cmp esi, 0xe
jb 0x100231ec
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov bl, byte [ebp + esi - 0x16b]
xor bl, byte [ebp - 0x16c]
cmp esi, 0xe
jb 0x10023215
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10064930
add esp, 0xc
mov byte [ebp + esi - 0x16b], bl
inc esi
cmp esi, 0xd
jb 0x100231d0
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x157]
push edi
push eax
lea eax, [ebp - 0x16b]
mov byte [ebp - 0x15e], 0
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x1b4]
call fcn.10006b40
lea ecx, [ebp - 0x150]
call fcn.10006b40
mov al, 1
jmp 0x10023261
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10074510
mov esp, ebp
pop ebp
ret 8