Function at 0x1009eb30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d6cb1
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x1010e07c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov al, byte [ebp + 8]
mov byte [ebp - 0x98], al
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [esi + 0x68], ebx
jne 0x1009ec2b
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 1
push 0x100e5404
lea ecx, [ebp - 0x130]
push ecx
call fcn.10007530
add esp, 8
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 2
push str.FXBHO.cpp
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 3
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x171
lea ecx, [ebp - 0x30]
push ecx
push ebx
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x130]
call fcn.100029c0
or eax, 0xffffffff
jmp 0x1009f75c
mov dword [ebp - 0x88], ebx
mov byte [ebp - 4], 5
mov eax, dword [esi + 0x68]
mov edx, dword [eax]
lea ecx, [ebp - 0x88]
push ecx
push eax
mov edx, dword [edx + 0x78]
call edx
cmp eax, ebx
jl 0x1009f5b9
mov eax, dword [ebp - 0x88]
cmp eax, ebx
je 0x1009f5b9
push eax
lea ecx, [ebp - 0x84]
call fcn.1000b7d0
mov byte [ebp - 4], 0xa
push str.http:__
mov eax, dword [ebp - 0x88]
push eax
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
call edi
push eax
lea ecx, [ebp - 0x88]
call fcn.1008ea60
test al, al
je 0x1009edb4
push str.https:__
mov ecx, dword [ebp - 0x88]
push ecx
call edi
push eax
lea ecx, [ebp - 0x88]
call fcn.1008ea60
test al, al
je 0x1009edb4
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 0xb
mov edx, dword [esi + 0x70]
push edx
push str.._type:
lea eax, [ebp - 0x84]
push eax
push str.return_1._url:
lea ecx, [ebp - 0x130]
push ecx
call fcn.10007530
add esp, 8
push eax
call fcn.1000f0c0
add esp, 8
push eax
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10014310
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 0xc
push str.FXBHO.cpp
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x30]
push eax
push 0x183
lea ecx, [ebp - 0x4c]
push ecx
push 3
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.100029c0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
call fcn.100041b0
mov byte [ebp - 4], bl
mov edx, dword [ebp - 0x88]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, 1
jmp 0x1009f75c
lea eax, [ebp - 0x84]
push eax
mov ecx, esi
call fcn.1009d270
test al, al
jne 0x1009eec7
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 0xf
mov ecx, dword [esi + 0x70]
push ecx
push str.._type:
lea edx, [ebp - 0x84]
push edx
push str.return_2._bsCurUrl:
lea eax, [ebp - 0x130]
push eax
call fcn.10007530
add esp, 8
push eax
call fcn.1000f0c0
add esp, 8
push eax
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10014310
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 0x10
push str.FXBHO.cpp
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 0x12
push eax
lea edx, [ebp - 0x30]
push edx
push 0x18a
lea eax, [ebp - 0x4c]
push eax
push 3
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.100029c0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
call fcn.100041b0
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x88]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, 2
jmp 0x1009f75c
mov dword [ebp - 0x90], ebx
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
mov eax, dword [esi + 0x68]
mov edx, dword [eax]
lea ecx, [ebp - 0x90]
push ecx
push eax
mov edx, dword [edx + 0x48]
call edx
cmp eax, ebx
jl 0x1009f4ae
cmp dword [ebp - 0x90], ebx
je 0x1009f4ae
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
lea edx, [ebp - 0x8c]
push edx
push str._D_3
push eax
mov eax, dword [ecx]
call eax
cmp eax, ebx
jl 0x1009f394
cmp dword [ebp - 0x8c], ebx
je 0x1009f394
cmp byte [ebp - 0x98], bl
jne 0x1009f10d
mov dword [ebp - 0x94], ebx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
lea edx, [ebp - 0x94]
push edx
push eax
mov eax, dword [ecx + 0x58]
call eax
cmp eax, ebx
jl 0x1009f26b
mov eax, dword [ebp - 0x94]
cmp eax, ebx
je 0x1009f26b
mov ecx, str.complete
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1009efaa
cmp dx, bx
je 0x1009efa6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1009efaa
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x1009ef84
xor eax, eax
jmp 0x1009efaf
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1009f0fc
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 0x26
mov ecx, dword [esi + 0x70]
push ecx
push str.._type:
lea edx, [ebp - 0x84]
push edx
push str.._url:
mov eax, dword [ebp - 0x94]
push eax
push str.return__6._state:
lea ecx, [ebp - 0x130]
push ecx
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10066b80
push eax
call fcn.10007530
add esp, 8
push eax
call fcn.1000f0c0
add esp, 8
push eax
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10014310
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 0x27
push str.FXBHO.cpp
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 0x28
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x30]
push eax
push 0x1ae
lea ecx, [ebp - 0x4c]
push ecx
push ebx
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x130]
call fcn.100029c0
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x94]
push edx
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8c]
call fcn.1008f160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x90]
call fcn.1008f160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
call fcn.100041b0
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x88]
push eax
call esi
mov eax, 0xfffffffa
jmp 0x1009f75c
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x94]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [esi + 0x70]
push ecx
lea edx, [ebp - 0x8c]
push edx
mov ecx, esi
call fcn.10098a50
lea eax, [ebp - 0x8c]
push eax
mov ecx, esi
call fcn.10095eb0
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 0x2a
mov ecx, dword [esi + 0x70]
push ecx
push str.._type:
lea edx, [ebp - 0x84]
push edx
push str.._url:
mov eax, dword [ebp - 0x98]
push eax
push str.return_3._bDC:
lea ecx, [ebp - 0x130]
push ecx
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10063b30
push eax
call fcn.10007530
add esp, 8
push eax
call fcn.1000f0c0
add esp, 8
push eax
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10014310
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 0x2b
push str.FXBHO.cpp
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 0x2c
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x30]
push eax
push 0x1b6
lea ecx, [ebp - 0x4c]
push ecx
push 3
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x130]
call fcn.100029c0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8c]
call fcn.1008f160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x90]
call fcn.1008f160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
call fcn.100041b0
mov byte [ebp - 4], bl
mov edx, dword [ebp - 0x88]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 4], 0xffffffff
mov eax, 3
jmp 0x1009f75c
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 0x22
mov edx, dword [esi + 0x70]
push edx
push str.._type:
lea eax, [ebp - 0x84]
push eax
push str.return__5._url:
lea ecx, [ebp - 0x130]
push ecx
call fcn.10007530
add esp, 8
push eax
call fcn.1000f0c0
add esp, 8
push eax
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10014310
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 0x23
push str.FXBHO.cpp
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 0x24
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x30]
push eax
push 0x1a5
lea ecx, [ebp - 0x4c]
push ecx
push ebx
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x130]
call fcn.100029c0
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x94]
push edx
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8c]
call fcn.1008f160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x90]
call fcn.1008f160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
call fcn.100041b0
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x88]
push eax
call esi
mov eax, 0xfffffffb
jmp 0x1009f75c
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 0x1d
mov eax, dword [esi + 0x70]
push eax
push str.._type:
lea ecx, [ebp - 0x84]
push ecx
push str.return__4._url:
lea edx, [ebp - 0x130]
push edx
call fcn.10007530
add esp, 8
push eax
call fcn.1000f0c0
add esp, 8
push eax
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10014310
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 0x1e
push str.FXBHO.cpp
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x30]
push ecx
push 0x19a
lea edx, [ebp - 0x4c]
push edx
push ebx
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x130]
call fcn.100029c0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8c]
call fcn.1008f160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x90]
call fcn.1008f160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
call fcn.100041b0
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x88]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, 0xfffffffc
jmp 0x1009f75c
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 0x16
mov ecx, dword [esi + 0x70]
push ecx
push str.._type:
lea edx, [ebp - 0x84]
push edx
push str.return__3._url:
lea eax, [ebp - 0x130]
push eax
call fcn.10007530
add esp, 8
push eax
call fcn.1000f0c0
add esp, 8
push eax
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10014310
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 0x17
push str.FXBHO.cpp
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 0x19
push eax
lea edx, [ebp - 0x30]
push edx
push 0x192
lea eax, [ebp - 0x4c]
push eax
push ebx
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x130]
call fcn.100029c0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x90]
call fcn.1008f160
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
call fcn.100041b0
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x88]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, 0xfffffffd
jmp 0x1009f75c
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.100042d0
mov byte [ebp - 4], 6
mov edx, dword [esi + 0x70]
push edx
push str.return__2._type:
lea eax, [ebp - 0x130]
push eax
call fcn.10007530
add esp, 8
mov ecx, eax
call fcn.10014310
push str.CFXBHO::DoInject
lea ecx, [ebp - 0x30]
call fcn.100038c0
mov byte [ebp - 4], 7
push str.FXBHO.cpp
lea ecx, [ebp - 0x4c]
call fcn.100038c0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x130]
call fcn.100043f0
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0x30]
push edx
push 0x179
lea eax, [ebp - 0x4c]
push eax
push ebx
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x68]
call fcn.100041b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4c]
call fcn.10003930
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30]
call fcn.10003930
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x130]
call fcn.100029c0
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x88]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, 0xfffffffe
jmp 0x1009f75c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100b2b2c
mov esp, ebp
pop ebp
ret 4