Function at 0x1001f800
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov eax, dword [0x1007e274]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x70], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x14], 0x55
mov byte [ebp - 0x13], 0x8b
mov byte [ebp - 0x12], 0xec
mov byte [ebp - 0x11], 0x8d
mov byte [ebp - 0x10], 5
mov byte [ebp - 0x1c], 0x55
mov byte [ebp - 0x1b], 0x8b
mov byte [ebp - 0x1a], 0xec
mov byte [ebp - 0x19], 0x8d
mov byte [ebp - 0x18], 5
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x8b
mov byte [ebp - 0xa], 0xec
mov byte [ebp - 9], 0x51
mov byte [ebp - 8], 0x53
mov byte [ebp - 7], 0x8b
mov byte [ebp - 0x24], 0x55
mov byte [ebp - 0x23], 0x89
mov byte [ebp - 0x22], 0xe5
mov byte [ebp - 0x21], 0x53
mov byte [ebp - 0x20], 0x83
mov byte [ebp - 0x1f], 0xec
mov byte [ebp - 0x1e], 0x54
mov byte [ebp - 0x1d], 0x8b
mov byte [ebp - 0x6c], 0x55
mov byte [ebp - 0x6b], 0x8b
mov byte [ebp - 0x6a], 0xec
mov byte [ebp - 0x69], 0x83
mov byte [ebp - 0x68], 0xec
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x53
mov byte [ebp - 0x65], 0x56
mov byte [ebp - 0x40], 0x68
mov byte [ebp - 0x3f], 0xcc
mov byte [ebp - 0x3e], 0xcc
mov byte [ebp - 0x3d], 0xcc
mov byte [ebp - 0x3c], 0xcc
mov byte [ebp - 0x3b], 0x60
mov byte [ebp - 0x3a], 0x9c
mov byte [ebp - 0x39], 0xbb
mov byte [ebp - 0x38], 0xcc
mov byte [ebp - 0x37], 0xcc
mov byte [ebp - 0x4c], 0x60
mov byte [ebp - 0x4b], 0xe8
mov byte [ebp - 0x4a], 0
mov byte [ebp - 0x49], 0
mov byte [ebp - 0x48], 0
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 0x5b
mov byte [ebp - 0x45], 0x81
mov byte [ebp - 0x44], 0xeb
mov byte [ebp - 0x43], 6
mov byte [ebp - 0x58], 0x56
mov byte [ebp - 0x57], 0x8b
mov byte [ebp - 0x56], 0x35
mov byte [ebp - 0x55], 0
mov byte [ebp - 0x54], 0xc0
mov byte [ebp - 0x53], 0x27
mov byte [ebp - 0x52], 0x6a
mov byte [ebp - 0x51], 0x57
mov byte [ebp - 0x50], 0x8b
mov byte [ebp - 0x4f], 0x3d
mov byte [ebp - 0x64], 0xe8
mov byte [ebp - 0x63], 0x1d
mov byte [ebp - 0x62], 0
mov byte [ebp - 0x61], 0
mov byte [ebp - 0x60], 0
mov byte [ebp - 0x5f], 0x50
mov byte [ebp - 0x5e], 0x68
mov byte [ebp - 0x5d], 0x58
mov byte [ebp - 0x5c], 0x58
mov byte [ebp - 0x5b], 0xc3
mov byte [ebp - 0x2c], 0x68
mov byte [ebp - 0x2b], 0xac
mov byte [ebp - 0x2a], 0xce
mov byte [ebp - 0x29], 0xea
mov byte [ebp - 0x28], 0xac
mov byte [ebp - 0x27], 0x9c
mov byte [ebp - 0x26], 0x60
mov byte [ebp - 0x25], 0x68
mov byte [ebp - 0x34], 0x8b
mov byte [ebp - 0x33], 0xff
mov byte [ebp - 0x32], 0x55
mov byte [ebp - 0x31], 0x8b
mov byte [ebp - 0x30], 0xec
mov byte [ebp - 0x2f], 0x5d
mov byte [ebp - 0x2e], 0xff
mov byte [ebp - 0x2d], 0x25
mov dword [ebp - 0x70], 0
jmp 0x1001f992
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 5
jge 0x1001f9b9
push 1
mov edx, dword [ebp - 0x70]
lea eax, [ebp + edx - 0x14]
push eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001f9b7
jmp 0x1001f9b9
jmp 0x1001f989
cmp dword [ebp - 0x70], 5
jne 0x1001f9c9
mov eax, 1
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001f9db
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 5
jge 0x1001fa02
push 1
mov eax, dword [ebp - 0x70]
lea ecx, [ebp + eax - 0x1c]
push ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x70]
push edx
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fa00
jmp 0x1001fa02
jmp 0x1001f9d2
cmp dword [ebp - 0x70], 5
jne 0x1001fa12
mov eax, 1
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fa24
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 6
jge 0x1001fa4b
push 1
mov ecx, dword [ebp - 0x70]
lea edx, [ebp + ecx - 0xc]
push edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x70]
push eax
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fa49
jmp 0x1001fa4b
jmp 0x1001fa1b
cmp dword [ebp - 0x70], 6
jne 0x1001fa5b
mov eax, 2
jmp 0x1001fe72
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx]
cmp edx, 0x68
jne 0x1001fa8a
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + 5]
cmp ecx, 0x68
jne 0x1001fa8a
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + 0xa]
cmp eax, 0xb8
jne 0x1001fa8a
mov eax, 3
jmp 0x1001fe72
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx]
cmp edx, 0x68
jne 0x1001fab7
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + 5]
cmp ecx, 0x68
jne 0x1001fab7
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + 0xa]
cmp eax, 0x68
jne 0x1001fab7
mov eax, 4
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fac9
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 8
jge 0x1001faf0
push 1
mov edx, dword [ebp - 0x70]
lea eax, [ebp + edx - 0x24]
push eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001faee
jmp 0x1001faf0
jmp 0x1001fac0
cmp dword [ebp - 0x70], 8
jne 0x1001fb00
mov eax, 5
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fb12
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 8
jge 0x1001fb39
push 1
mov eax, dword [ebp - 0x70]
lea ecx, [ebp + eax - 0xc]
push ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x70]
push edx
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fb37
jmp 0x1001fb39
jmp 0x1001fb09
cmp dword [ebp - 0x70], 8
jne 0x1001fb49
mov eax, 6
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fb5b
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xa
jge 0x1001fb82
push 1
mov ecx, dword [ebp - 0x70]
lea edx, [ebp + ecx - 0x40]
push edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x70]
push eax
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fb80
jmp 0x1001fb82
jmp 0x1001fb52
cmp dword [ebp - 0x70], 0xa
jne 0x1001fb92
mov eax, 7
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fba4
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 0xa
jge 0x1001fbcb
push 1
mov edx, dword [ebp - 0x70]
lea eax, [ebp + edx - 0x4c]
push eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fbc9
jmp 0x1001fbcb
jmp 0x1001fb9b
cmp dword [ebp - 0x70], 0xa
jne 0x1001fbdb
mov eax, 8
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fbed
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0xa
jge 0x1001fc14
push 1
mov eax, dword [ebp - 0x70]
lea ecx, [ebp + eax - 0x58]
push ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x70]
push edx
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fc12
jmp 0x1001fc14
jmp 0x1001fbe4
cmp dword [ebp - 0x70], 0xa
jne 0x1001fc24
mov eax, 9
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fc36
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xa
jge 0x1001fc5d
push 1
mov ecx, dword [ebp - 0x70]
lea edx, [ebp + ecx - 0x64]
push edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x70]
push eax
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fc5b
jmp 0x1001fc5d
jmp 0x1001fc2d
cmp dword [ebp - 0x70], 0xa
jne 0x1001fc6d
mov eax, 0xa
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fc7f
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 8
jge 0x1001fca6
push 1
mov edx, dword [ebp - 0x70]
lea eax, [ebp + edx - 0x2c]
push eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fca4
jmp 0x1001fca6
jmp 0x1001fc76
cmp dword [ebp - 0x70], 8
jne 0x1001fcb6
mov eax, 0xb
jmp 0x1001fe72
mov dword [ebp - 0x70], 0
jmp 0x1001fcc8
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 8
jge 0x1001fcef
push 1
mov eax, dword [ebp - 0x70]
lea ecx, [ebp + eax - 0x34]
push ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x70]
push edx
call fcn.100410fd
add esp, 0xc
test eax, eax
je 0x1001fced
jmp 0x1001fcef
jmp 0x1001fcbf
cmp dword [ebp - 0x70], 8
jne 0x1001fcff
mov eax, 0xc
jmp 0x1001fe72
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
cmp eax, 0x68
jne 0x1001fd59
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
test eax, eax
jne 0x1001fd59
mov ecx, 1
shl ecx, 1
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
test eax, eax
jne 0x1001fd59
mov ecx, 1
imul edx, ecx, 5
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + edx]
cmp ecx, 0xe8
jne 0x1001fd59
mov eax, 0xe
jmp 0x1001fe72
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + eax]
cmp edx, 0x55
jne 0x1001fdff
mov eax, 1
shl eax, 0
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + eax]
cmp edx, 0x8b
jne 0x1001fdff
mov eax, 1
shl eax, 1
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + eax]
cmp edx, 0xec
jne 0x1001fdff
mov eax, 1
imul ecx, eax, 3
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
cmp eax, 0x83
jne 0x1001fdff
mov ecx, 1
shl ecx, 2
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + ecx]
cmp eax, 0xc4
jne 0x1001fdff
mov ecx, 1
imul edx, ecx, 5
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax + edx]
cmp ecx, 0xd8
jne 0x1001fdff
mov edx, 1
imul eax, edx, 6
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + eax]
cmp edx, 0xb8
jne 0x1001fdff
mov eax, 0xf
jmp 0x1001fe72
clc
jae 0x1001fe04
dec ebp
or esp, dword [esi - 0x64]
pushf
push 0xa
jae 0x1001fe11
jmp 0x1001fe0c
call 0x1001fe13
jae 0x1001fe0c
add esp, 4
jmp 0x1001fe18
dec dword [esp]
jno 0x1001fe1d
jns 0x1001fe08
jp 0x1001fe21
add esp, 4
popf
jmp 0x1001fe28
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001fe41
jne 0x1001fe41
or edi, dword [ebx + eax - 0x15]
add ecx, dword [ebx]
jl 0x1001fe46
jmp 0x1001fe48
je 0x1001fe43
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001fe62
jne 0x1001fe61
call 0x9305eee9
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001fe70
jne 0x1001fe70
call 0x6e61bea7
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1003eb3c
mov esp, ebp
pop ebp
ret