Function at 0x1008953b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x10144b1f
call fcn.1013e250
sub esp, 0x208
push ebx
xor eax, eax
mov ebx, ecx
push esi
push edi
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.1004683c
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x200
push eax
lea ecx, [ebp - 0x110]
call fcn.1004683c
call fcn.10076d1b
test al, al
je 0x100895ae
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x100
push eax
lea ecx, [ebp - 0x110]
call fcn.1004683c
xor ecx, ecx
mov byte [ebp - 0x31], 0
inc ecx
mov dword [ebp - 0x104], 0x682e5137
or eax, 0xffffffff
mov word [ebp - 0x100], 0x7130
cmp ebx, ecx
mov byte [ebp - 0xfe], cl
mov dword [ebp - 0xfd], 0x11600456
cmove eax, ecx
mov dword [ebp - 0xf9], 0x32722767
xor esi, esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xf5], 0x105e1283
xor edi, edi
mov dword [ebp - 0xf1], 0xb7e1d86
mov dword [ebp - 0xed], 0x1a7e2a83
mov dword [ebp - 0xe9], 0x2f8f158f
mov dword [ebp - 0xe5], 0x1e953d80
mov dword [ebp - 0xe1], 0x1f790391
mov dword [ebp - 0xdd], 0xc79098b
mov dword [ebp - 0xd9], 0xd892c94
mov dword [ebp - 0xd5], 0x36752492
mov dword [ebp - 0xd1], 0x1ba43953
mov dword [ebp - 0xcd], 0x387e0793
mov dword [ebp - 0xc9], 0x34a63ead
mov dword [ebp - 0xc5], 0x19af28ac
mov dword [ebp - 0xc1], 0x339706a9
mov dword [ebp - 0xbd], 0x31ae25b0
mov dword [ebp - 0xb9], 0xeb12978
mov dword [ebp - 0xb5], 0x18c020b8
mov dword [ebp - 0xb1], 0x3bc340c2
mov dword [ebp - 0xad], 0x3fcd3abc
mov dword [ebp - 0xa9], 0x26c235ca
mov dword [ebp - 0xa5], 0x2db81cc5
mov dword [ebp - 0xa1], 0xd822b5
mov dword [ebp - 0x9d], 0x13cc3cba
mov dword [ebp - 0x99], 0x5df2bd4
mov dword [ebp - 0x95], 0x908205b0
mov dword [ebp - 0x91], 0x9123aea1
mov dword [ebp - 0x8d], 0xbb02d80f
mov dword [ebp - 0x89], 0xdc14ea17
mov dword [ebp - 0x85], 0xf421ea16
mov dword [ebp - 0x81], 0xf00adb08
cmp esi, 0x70
jne 0x1008972a
push 5
pop edi
push 0x73
pop esi
jmp 0x10089760
movzx eax, byte [ebp + esi - 0x103]
lea edx, [ebp - 0x14]
sub eax, esi
xor cl, cl
dec eax
add eax, edi
push 0x15bd
mov dword [ebp - 0x14], eax
call fcn.10081851
movzx ecx, byte [ebp + esi - 0x104]
add esp, 4
mov ax, word [ebp - 0x14]
mov word [ebp + ecx*2 - 0x214], ax
add esi, 2
cmp esi, 0x87
jb 0x1008971d
xor eax, eax
lea ecx, [ebp - 0x158]
mov word [ebp - 0x192], ax
lea eax, [ebp - 0x214]
push eax
call fcn.10013e17
mov byte [ebp - 4], 1
lea edi, [ebp - 0x214]
push 0x21
xor eax, eax
mov dword [ebp - 0x78], 0x680e6d05
pop ecx
xor esi, esi
mov dword [ebp - 0x74], 0x540f7317
rep stosd dword es:[edi], eax
mov dword [ebp - 0x70], 0x70066a03
xor edi, edi
mov dword [ebp - 0x6c], 0x61fa480c
mov dword [ebp - 0x68], 0xa8ca84e9
mov dword [ebp - 0x64], 0xd1049932
mov dword [ebp - 0x60], 0x8313810b
mov dword [ebp - 0x5c], 0x81117209
mov dword [ebp - 0x58], 0x8915810a
mov dword [ebp - 0x54], 0x84018c02
mov dword [ebp - 0x50], 0x8e108208
mov dword [ebp - 0x4c], 0x8c168e0d
mov dword [ebp - 0x48], 0x900c9414
mov dword [ebp - 0x44], 0x7d079018
mov dword [ebp - 0x40], 0x73009612
mov word [ebp - 0x3c], 0x9304
mov dword [ebp - 0x14], esi
cmp esi, 0xc
jne 0x10089838
push esi
pop edi
lea eax, [ebp - 0x14]
mov dl, 1
push eax
push 0x1124
push 0x2f06
push 0x2752
mov ecx, 0x44a7
call fcn.10089278
mov esi, dword [ebp - 0x14]
jmp 0x10089875
movzx eax, byte [ebp + esi - 0x77]
xor dl, dl
sub eax, esi
mov ecx, 0x7acc
dec eax
add eax, edi
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0x1513
push eax
push 0x4656
push 0x44d8
call fcn.10089ed7
movzx ecx, byte [ebp + esi - 0x78]
mov ax, word [ebp - 0x14]
mov word [ebp + ecx*2 - 0x18c], ax
add esi, 2
add esp, 0x10
mov dword [ebp - 0x14], esi
cmp esi, 0x3e
jb 0x1008980d
xor eax, eax
lea ecx, [ebp - 0x140]
mov word [ebp - 0x15a], ax
lea eax, [ebp - 0x18c]
push eax
call fcn.10013e17
mov byte [ebp - 4], 2
lea edi, [ebp - 0x18c]
mov esi, dword [ebp - 0x110]
xor eax, eax
push 0xd
pop ecx
rep stosd dword es:[edi], eax
cmp esi, dword [ebp - 0x10c]
je 0x10089e27
mov edi, dword [ebp - 0x38]
push dword [esi]
lea eax, [ebp - 0x140]
push 0xffffffffffffffff
push eax
lea edx, [ebp - 0x158]
call fcn.1007641c
add esp, 0xc
cmp eax, edi
jne 0x100898f1
add esi, 4
cmp esi, dword [ebp - 0x10c]
jne 0x100898c4
jmp 0x10089e27
lea edx, [ebp - 0x31]
mov cl, 1
call fcn.10089330
cmp byte [ebp - 0x31], 0
je 0x10089e27
call fcn.10048db7
push 1
lea ecx, [ebp - 0x6c]
call fcn.1004c0ea
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 3
call fcn.1004c3ba
test al, al
je 0x10089e1f
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x6c]
call fcn.1004c5e9
test al, al
je 0x1008995b
lea eax, [ebp - 0x158]
push eax
push 1
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x6c]
call fcn.10089356
pop ecx
pop ecx
cmp ebx, 1
jne 0x100899fd
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x6c]
call fcn.1004c5e9
test al, al
jne 0x100899fd
and dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
push 0x47ad
mov dl, bl
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c]
call fcn.10089381
mov dword [esp], 0x7571
lea eax, [ebp - 0x2c]
push eax
push 0x1437
push 0x4cb9
push 0x5b11
push ebx
mov edx, 0x5d8c
mov ecx, 0x72f1
call fcn.10089399
lea eax, [ebp - 0x158]
push eax
push ebx
lea eax, [ebp - 0x140]
push eax
push 0x6e97
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x2c]
call fcn.10089401
add esp, 0x28
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
push 0
push ebx
call fcn.10014448
push 1
lea ecx, [ebp - 0x6c]
call fcn.1004cdfe
xor eax, eax
inc eax
cmp ebx, eax
jne 0x10089c0e
xor ebx, ebx
mov dword [ebp - 0x30], 0x26124900
mov esi, ebx
mov dword [ebp - 0x2c], 0x8f8f8e10
mov dword [ebp - 0x28], 0x79f31c3c
mov ecx, ebx
mov dword [ebp - 0x24], 0xb455bf76
mov dword [ebp - 0x20], 0xce1f59e4
mov dword [ebp - 0x1c], 0x51025003
mov word [ebp - 0x18], 0x6304
mov byte [ebp - 0x16], al
mov byte [ebp - 0x15], 0x54
mov dword [ebp - 0x14], esi
cmp ecx, 2
jne 0x10089a85
push 0x452b
push 0x6b81
push eax
lea eax, [ebp - 0x14]
mov edx, 0x69d1
push eax
push 0x3254
mov ecx, 0x2008
call fcn.10089453
mov esi, dword [ebp - 0x14]
add esp, 0x14
push 0x12
pop ecx
jmp 0x10089ab2
movzx eax, byte [ebp + ecx - 0x2f]
lea edx, [esi - 1]
sub eax, ecx
add edx, eax
jns 0x10089aa5
or eax, 0xffffffff
sub eax, edx
add edx, 0x100
and eax, 0xffffff00
add edx, eax
movzx eax, byte [ebp + ecx - 0x30]
mov word [ebp + eax*2 - 0x11c], dx
add ecx, 2
push 1
pop eax
cmp ecx, 0x1c
jb 0x10089a52
sub esp, 0x18
xor eax, eax
mov word [ebp - 0x112], ax
mov ecx, esp
lea eax, [ebp - 0x140]
mov dword [ebp - 0x38], esp
push eax
call fcn.10013ddc
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x2c]
call fcn.10013e17
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
lea esi, [ebp - 0x158]
mov edx, eax
push esi
call fcn.10029ffa
pop ecx
xor ecx, ecx
mov byte [ebp - 4], 7
mov edx, 0x200
inc ecx
call fcn.100855d6
add esp, 0x30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
push ebx
push 1
call fcn.10014448
xor eax, eax
lea edi, [ebp - 0x11c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10076d1b
test al, al
je 0x10089e1f
mov dword [ebp - 0x2c], 0x4e015d04
mov ecx, ebx
mov dword [ebp - 0x28], 0x54034d00
mov esi, ebx
mov dword [ebp - 0x24], 0x510e5502
mov dword [ebp - 0x20], 0x9012348
mov dword [ebp - 0x1c], 0xc855323c
mov dword [ebp - 0x18], 0xa0f7ee09
cmp ecx, 0xa
jne 0x10089b7b
push 0xe
pop esi
push 0x16
pop ecx
jmp 0x10089ba8
movzx eax, byte [ebp + ecx - 0x2b]
lea edx, [esi - 1]
sub eax, ecx
add edx, eax
jns 0x10089b9b
or eax, 0xffffffff
sub eax, edx
add edx, 0x100
and eax, 0xffffff00
add edx, eax
movzx eax, byte [ebp + ecx - 0x2c]
mov word [ebp + eax*2 - 0x128], dx
add ecx, 2
cmp ecx, 0x18
jb 0x10089b6e
sub esp, 0x18
xor eax, eax
mov word [ebp - 0x11e], ax
mov ecx, esp
lea eax, [ebp - 0x140]
mov dword [ebp - 0x38], esp
push eax
call fcn.10013ddc
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x2c]
call fcn.10013e17
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
lea esi, [ebp - 0x158]
mov edx, eax
push esi
call fcn.10029ffa
pop ecx
xor ecx, ecx
mov byte [ebp - 4], 0xa
mov edx, 0x100
inc ecx
call fcn.100855d6
jmp 0x10089e11
xor ebx, ebx
mov dword [ebp - 0x2c], 0x4b004d02
mov ecx, ebx
mov dword [ebp - 0x28], 0x280b6104
mov esi, ebx
mov dword [ebp - 0x24], 0x8447cd6e
mov dword [ebp - 0x20], 0x82f77c7c
mov byte [ebp - 0x1c], 0x9a
mov byte [ebp - 0x1b], al
mov word [ebp - 0x1a], 0x352
mov byte [ebp - 0x18], 0x56
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x38], esi
jmp 0x10089c4a
inc eax
cmp ecx, 6
jne 0x10089c7d
push eax
lea eax, [ebp - 0x38]
mov edx, 0x20e9
push 0x1a7f
push eax
mov ecx, 0x6fb1
call fcn.100894ab
add esp, 0xc
lea edx, [ebp - 0x14]
mov cl, 1
call fcn.10089507
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x38]
jmp 0x10089caa
movzx eax, byte [ebp + ecx - 0x2b]
lea edx, [esi - 1]
sub eax, ecx
add edx, eax
jns 0x10089c9d
or eax, 0xffffffff
sub eax, edx
add edx, 0x100
and eax, 0xffffff00
add edx, eax
movzx eax, byte [ebp + ecx - 0x2c]
mov word [ebp + eax*2 - 0x11c], dx
add ecx, 2
xor eax, eax
mov dword [ebp - 0x14], ecx
cmp ecx, 0x15
jb 0x10089c49
sub esp, 0x18
mov word [ebp - 0x112], ax
lea eax, [ebp - 0x140]
mov dword [ebp - 0x38], esp
mov ecx, esp
push eax
call fcn.10013ddc
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x2c]
call fcn.10013e17
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x158]
mov ecx, esp
push edx
mov edx, eax
call fcn.10029ffa
pop ecx
mov ecx, 0x200
mov byte [ebp - 4], 0xd
call fcn.10088d6e
add esp, 0x30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
push ebx
push 1
call fcn.10014448
xor eax, eax
lea edi, [ebp - 0x11c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10076d1b
test al, al
je 0x10089e1f
mov ecx, ebx
mov dword [ebp - 0x28], 0x5f044c01
mov dword [ebp - 0x24], 0xee4dd80a
mov esi, ebx
mov dword [ebp - 0x20], 0x403320fe
mov dword [ebp - 0x1c], 0x51021d39
mov dword [ebp - 0x18], 0x51005403
mov dword [ebp - 0x14], ecx
cmp ecx, 4
jne 0x10089d83
push 0xa
pop esi
lea eax, [ebp - 0x14]
mov edx, 0x24e9
push eax
push 0x3356
mov cl, 1
call fcn.1008951c
pop ecx
pop ecx
mov ecx, dword [ebp - 0x14]
jmp 0x10089db0
movzx eax, byte [ebp + ecx - 0x27]
lea edx, [esi - 1]
sub eax, ecx
add edx, eax
jns 0x10089da3
or eax, 0xffffffff
sub eax, edx
add edx, 0x100
and eax, 0xffffff00
add edx, eax
movzx eax, byte [ebp + ecx - 0x28]
mov word [ebp + eax*2 - 0x128], dx
add ecx, 2
mov dword [ebp - 0x14], ecx
cmp ecx, 0x14
jb 0x10089d5f
sub esp, 0x18
xor eax, eax
mov word [ebp - 0x11e], ax
mov ecx, esp
lea eax, [ebp - 0x140]
mov dword [ebp - 0x38], esp
push eax
call fcn.10013ddc
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x2c]
call fcn.10013e17
sub esp, 0x18
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x158]
mov ecx, esp
push edx
mov edx, eax
call fcn.10029ffa
pop ecx
mov ecx, 0x100
mov byte [ebp - 4], 0x10
call fcn.10088d6e
add esp, 0x30
lea ecx, [ebp - 0x2c]
push ebx
push 1
call fcn.10014448
lea ecx, [ebp - 0x6c]
call fcn.1004c136
push 0
push 1
lea ecx, [ebp - 0x140]
call fcn.10014448
push 0
push 1
lea ecx, [ebp - 0x158]
call fcn.10014448
lea ecx, [ebp - 0x110]
call fcn.100144eb
mov al, byte [ebp - 0x31]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret