Function at 0x10039200
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x10159022
mov eax, dword fs:[0]
push eax
sub esp, 0x804
mov eax, dword [0x101ad3b4]
xor eax, esp
mov dword [esp + 0x800], eax
push ebp
push esi
push edi
mov eax, dword [0x101ad3b4]
xor eax, esp
push eax
lea eax, [esp + 0x814]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x824]
xor edi, edi
push 0x103
lea eax, [esp + 0x509]
push edi
mov dword [esp + 0x20], edi
push eax
mov dword [esp + 0x28], ebp
mov byte [esp + 0x510], 0
call fcn.100f6b80
add esp, 0xc
cmp dword [0x102b5d7c], edi
jne 0x10039406
mov cl, 0x64
mov al, 0x6c
mov byte [esp + 0x4d6], cl
mov byte [esp + 0x4da], cl
mov cl, 0x72
mov dl, 0x74
mov byte [esp + 0x4d7], al
mov byte [esp + 0x4d8], al
mov byte [esp + 0x4db], al
mov byte [esp + 0x4dc], al
mov al, 0x6f
mov byte [esp + 0x4ea], cl
mov byte [esp + 0x4f0], cl
mov byte [esp + 0x4f8], cl
lea ecx, [esp + 0x4e0]
mov byte [esp + 0x4d5], dl
mov byte [esp + 0x4e1], dl
mov byte [esp + 0x4f3], dl
mov byte [esp + 0x4e3], al
mov byte [esp + 0x4ef], al
mov byte [esp + 0x4f5], al
mov byte [esp + 0x4f9], al
mov al, 0x73
push ecx
lea edx, [esp + 0x4d8]
push edx
mov byte [esp + 0x4dc], 0x6e
mov byte [esp + 0x4e1], 0x2e
mov byte [esp + 0x4e5], 0
mov byte [esp + 0x4e8], 0x4e
mov byte [esp + 0x4ea], 0x57
mov byte [esp + 0x4ec], 0x77
mov byte [esp + 0x4ed], 0x36
mov byte [esp + 0x4ee], 0x34
mov byte [esp + 0x4ef], 0x51
mov byte [esp + 0x4f0], 0x75
mov byte [esp + 0x4f1], 0x65
mov byte [esp + 0x4f3], 0x79
mov byte [esp + 0x4f4], 0x49
mov byte [esp + 0x4f5], 0x6e
mov byte [esp + 0x4f6], 0x66
mov byte [esp + 0x4f9], 0x6d
mov byte [esp + 0x4fa], 0x61
mov byte [esp + 0x4fc], 0x69
mov byte [esp + 0x4fe], 0x6e
mov byte [esp + 0x4ff], 0x50
mov byte [esp + 0x502], 0x63
mov byte [esp + 0x503], 0x65
mov byte [esp + 0x504], al
mov byte [esp + 0x505], al
mov byte [esp + 0x506], 0x36
mov byte [esp + 0x507], 0x34
mov byte [esp + 0x508], 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
cmp eax, edi
mov dword [0x102b5d7c], eax
jne 0x10039406
lea eax, [esp + 0x13]
push eax
lea ecx, [esp + 0x508]
push ecx
mov ecx, ebp
call fcn.10009b00
jmp 0x10039553
mov esi, dword [esp + 0x828]
push esi
call fcn.10037a40
mov ecx, eax
add esp, 4
or ecx, edx
je 0x1003953f
lea ecx, [esp + 0x14]
push ecx
push 0x380
lea ecx, [esp + 0x15c]
push ecx
push edx
push eax
push esi
mov dword [esp + 0x2c], edi
call fcn.10051150
add esp, 0x18
test al, al
je 0x1003953f
mov ecx, dword [esp + 0x170]
lea edx, [esp + 0x14]
push edx
mov edx, dword [esp + 0x170]
push 0x54
lea eax, [esp + 0x28]
push eax
push ecx
push edx
push esi
call fcn.10051150
add esp, 0x18
test al, al
je 0x1003953f
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
push edi
push 0xe0
lea eax, [esp + 0x7c]
push eax
push ecx
push edx
push esi
call fcn.10051150
add esp, 0x18
test al, al
je 0x1003953f
push 0x206
lea eax, [esp + 0x60e]
push edi
push eax
mov word [esp + 0x614], di
call fcn.100f6b80
add esp, 0xc
cmp dword [esp + 0x82c], edi
je 0x100394eb
movzx edx, word [esp + 0xcc]
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [esp + 0xdc]
push edx
mov edx, dword [esp + 0xdc]
lea eax, [esp + 0x610]
push eax
push ecx
push edx
jmp 0x10039511
movzx ecx, word [esp + 0xbc]
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0xcc]
push ecx
mov ecx, dword [esp + 0xcc]
lea edx, [esp + 0x610]
push edx
push eax
push ecx
push esi
call fcn.10051150
add esp, 0x18
test al, al
je 0x1003953f
push edi
push edi
push 0x104
lea edx, [esp + 0x510]
push edx
push 0xffffffffffffffff
lea eax, [esp + 0x61c]
push eax
push edi
push edi
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea ecx, [esp + 0x13]
push ecx
lea edx, [esp + 0x508]
push edx
mov ecx, ebp
call fcn.10009b00
mov dword [esp + 0x81c], edi
mov dword [esp + 0x18], 1
mov eax, ebp
mov ecx, dword [esp + 0x814]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x800]
xor ecx, esp
call fcn.100f611a
add esp, 0x810
ret