Function at 0x10073ba0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100b7a27
mov eax, dword fs:[0]
push eax
sub esp, 0x1e8
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x1e0], eax
push ebx
push esi
push edi
mov eax, dword [section..data]
xor eax, esp
push eax
lea eax, [esp + 0x1f8]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
mov dword [esp + 0x14], edi
mov edx, dword [esi + 0x14]
test edx, edx
je 0x10073bf7
mov ecx, dword [edx + 0x84]
jmp 0x10073bf9
xor ecx, ecx
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 8]
sar eax, 2
test ax, ax
jne 0x10073c0e
xor eax, eax
jmp 0x10074853
test edx, edx
je 0x10073c1a
mov ecx, dword [edx + 0x84]
jmp 0x10073c1c
xor ecx, ecx
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 8]
mov edi, dword [edi]
sar eax, 2
movzx ebx, ax
test edx, edx
je 0x10073c3d
mov al, byte [edx + 0x88]
test al, al
je 0x10073c3d
mov eax, dword [edx + 0xc]
jmp 0x10073c3f
xor eax, eax
cmp dword [eax + 0x24], 0
je 0x10073c07
test edx, edx
je 0x10073c58
mov al, byte [edx + 0x88]
test al, al
je 0x10073c58
mov eax, dword [edx + 0xc]
jmp 0x10073c5a
xor eax, eax
mov eax, dword [eax + 0x24]
mov dword [esp + 0x28], eax
test edx, edx
je 0x10073c74
mov al, byte [edx + 0x88]
test al, al
je 0x10073c74
mov eax, dword [edx + 0xc]
jmp 0x10073c76
xor eax, eax
cmp dword [eax + 0x20], 0
je 0x10073c07
test edx, edx
je 0x10073c8f
mov al, byte [edx + 0x88]
test al, al
je 0x10073c8f
mov eax, dword [edx + 0xc]
jmp 0x10073c91
xor eax, eax
mov eax, dword [eax + 0x20]
mov dword [esp + 0x24], eax
mov dword [esp + 0xa4], 0x1ba00a0
mov dword [esp + 0xa8], 0x38b0233
mov dword [esp + 0xac], 0x5ee04ca
mov dword [esp + 0xb0], 0x73206e9
mov dword [esp + 0xb4], 0x97008c9
mov dword [esp + 0xb8], 0xb360a03
mov dword [esp + 0xbc], 0xdcd0c45
mov dword [esp + 0xc0], 0xf6b0e33
mov dword [esp + 0xc4], 0x11f310d0
mov dword [esp + 0xc8], 0x139312c2
mov dword [esp + 0xcc], 0x15d51462
mov dword [esp + 0xd0], 0x171b166e
mov dword [esp + 0xd4], 0x199418cf
mov dword [esp + 0xd8], 0x1b921a8a
mov dword [esp + 0xdc], 0x1d091c9c
mov dword [esp + 0xe0], 0x1f8a1e7d
mov dword [esp + 0xe4], 0x217420fc
mov dword [esp + 0xe8], 0x236f22d2
mov dword [esp + 0xec], 0x25b9244d
mov dword [esp + 0xf0], 0x27aa2696
mov dword [esp + 0xf4], 0x290f28ec
mov dword [esp + 0xf8], 0x2b552ac2
mov dword [esp + 0xfc], 0x2d0c2c77
mov dword [esp + 0x100], 0x2f832e90
mov dword [esp + 0x104], 0x31c7307d
mov dword [esp + 0x108], 0x3387324a
mov dword [esp + 0x10c], 0x35be340b
mov dword [esp + 0x110], 0x37e23680
mov dword [esp + 0x114], 0x396538e1
mov dword [esp + 0x118], 0x3b9a3a7c
mov dword [esp + 0x11c], 0x3dc03c42
mov dword [esp + 0x120], 0x3f403eae
mov dword [esp + 0x124], 0x419740a2
mov dword [esp + 0x128], 0x43934236
mov dword [esp + 0x12c], 0x45b14417
mov dword [esp + 0x130], 0x473c46fa
mov dword [esp + 0x134], 0x4901483f
mov dword [esp + 0x138], 0x4bd84a19
mov dword [esp + 0x13c], 0x4d8c4c1a
mov dword [esp + 0x140], 0x4f354eb5
mov dword [esp + 0x144], 0x510f508a
mov dword [esp + 0x148], 0x53f452e1
mov dword [esp + 0x14c], 0x558c545d
mov dword [esp + 0x150], 0x57cb560e
mov dword [esp + 0x154], 0x59435849
mov dword [esp + 0x158], 0x5b0a5a61
mov dword [esp + 0x15c], 0x5d255cf9
mov dword [esp + 0x160], 0x5fc35ee1
mov dword [esp + 0x164], 0x61ce6066
mov dword [esp + 0x168], 0x63ee62c8
mov dword [esp + 0x16c], 0x6566644c
mov dword [esp + 0x170], 0x6716667d
mov dword [esp + 0x174], 0x69476848
mov dword [esp + 0x178], 0x6be16a75
mov dword [esp + 0x17c], 0x6d7e6cbc
mov dword [esp + 0x180], 0x6f0b6ef1
mov dword [esp + 0x184], 0x711c7011
mov dword [esp + 0x188], 0x733b720b
mov dword [esp + 0x18c], 0x75527451
mov dword [esp + 0x190], 0x770c7675
mov dword [esp + 0x194], 0x79757853
mov dword [esp + 0x198], 0x7ba87a09
mov dword [esp + 0x19c], 0x7dd97ca0
mov dword [esp + 0x1a0], 0x7f8b7e5e
mov dword [esp + 0x1a4], 0x81868011
mov dword [esp + 0x1a8], 0x83b782a7
mov dword [esp + 0x1ac], 0x85b78439
mov dword [esp + 0x1b0], 0x87bb86e0
mov dword [esp + 0x1b4], 0x89c18841
mov dword [esp + 0x1b8], 0x8b558ae1
mov dword [esp + 0x1bc], 0x8dcb8c95
mov dword [esp + 0x1c0], 0x8f918e48
mov dword [esp + 0x1c4], 0x91409093
mov dword [esp + 0x1c8], 0x931892f4
mov dword [esp + 0x1cc], 0x956c94f3
mov dword [esp + 0x1d0], 0x972f96e4
mov dword [esp + 0x1d4], 0x991f9885
mov dword [esp + 0x1d8], 0x9b3f9ad3
mov dword [esp + 0x1dc], 0x9d1c9cdc
mov dword [esp + 0x1e0], 0x9f059ec4
mov byte [esp + 0x1e4], 0x7a
movzx ecx, byte [edi + 0x13b]
movzx eax, byte [edi + 0x13a]
shl ecx, 8
add ecx, eax
movzx eax, byte [edi + 0x139]
shl ecx, 8
add ecx, eax
movzx eax, byte [edi + 0x138]
shl ecx, 8
add ecx, eax
cmp ecx, 0x1e720
jne 0x10073c07
cmp ebx, 5
jne 0x10073c07
mov ebx, dword [esp + 0x14]
mov edi, dword [ebp + 8]
mov eax, dword [ebx + 4]
cmp edi, eax
jae 0x10073c07
cmp eax, 0x16000
jb 0x10073c07
lea eax, [esp + 0x18]
mov ecx, esi
push eax
lea eax, [esp + 0x24]
push eax
push 0
call fcn.10095250
test al, al
je 0x10073c07
lea eax, [esp + 0x18]
mov ecx, esi
push eax
lea eax, [esp + 0x20]
push eax
push 1
call fcn.10095250
test al, al
je 0x10073c07
lea eax, [esp + 0x1c]
mov ecx, esi
push eax
lea eax, [esp + 0x1c]
push eax
push 2
call fcn.10095250
test al, al
je 0x10073c07
lea eax, [esp + 0x1c]
mov ecx, esi
push eax
lea eax, [esp + 0x1c]
push eax
push 3
call fcn.10095250
test al, al
je 0x10073c07
lea eax, [esp + 0x1c]
mov ecx, esi
push eax
lea eax, [esp + 0x1c]
push eax
push 4
call fcn.10095250
test al, al
je 0x10073c07
mov ecx, dword [ebx + 4]
lea edx, [esp + 0xa4]
mov eax, dword [ebx]
mov ebx, dword [esp + 0x20]
sub ecx, ebx
push ecx
add eax, ebx
mov dword [esp + 0x24], edx
push eax
lea ecx, [esp + 0x28]
call fcn.1001cbe0
test al, al
je 0x10073c07
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x24], eax
je 0x10073c07
cmp edi, ebx
je 0x10073c07
mov edi, dword [esi + 0x14]
test edi, edi
je 0x10074144
mov ecx, dword [edi + 0x84]
jmp 0x10074146
xor ecx, ecx
push 0
call fcn.100955a0
cmp dword [eax], 0
je 0x10073c07
test edi, edi
je 0x10074162
mov ecx, dword [edi + 0x84]
jmp 0x10074164
xor ecx, ecx
push 0
call fcn.100955a0
lea ecx, [esp + 0x5c]
push dword [eax]
call fcn.10093bd0
mov dword [esp + 0x200], 0
mov edi, dword [esi + 0x14]
test edi, edi
je 0x10074190
mov ecx, dword [edi + 0x84]
jmp 0x10074192
xor ecx, ecx
push 1
call fcn.100955a0
cmp dword [eax], 0
jne 0x100741a5
xor esi, esi
jmp 0x1007483d
test edi, edi
je 0x100741b1
mov ecx, dword [edi + 0x84]
jmp 0x100741b3
xor ecx, ecx
push 1
call fcn.100955a0
lea ecx, [esp + 0x2c]
push dword [eax]
call fcn.10093bd0
mov byte [esp + 0x200], 1
mov edi, dword [esi + 0x14]
test edi, edi
je 0x100741dc
mov ecx, dword [edi + 0x84]
jmp 0x100741de
xor ecx, ecx
push 2
call fcn.100955a0
cmp dword [eax], 0
jne 0x100741f1
xor esi, esi
jmp 0x1007482c
test edi, edi
je 0x100741fd
mov ecx, dword [edi + 0x84]
jmp 0x100741ff
xor ecx, ecx
push 2
call fcn.100955a0
lea ecx, [esp + 0x44]
push dword [eax]
call fcn.10093bd0
mov byte [esp + 0x200], 2
mov edi, dword [esi + 0x14]
test edi, edi
je 0x10074228
mov ecx, dword [edi + 0x84]
jmp 0x1007422a
xor ecx, ecx
push 3
call fcn.100955a0
cmp dword [eax], 0
jne 0x1007423d
xor esi, esi
jmp 0x1007481b
test edi, edi
je 0x10074249
mov ecx, dword [edi + 0x84]
jmp 0x1007424b
xor ecx, ecx
push 3
call fcn.100955a0
lea ecx, [esp + 0x8c]
push dword [eax]
call fcn.10093bd0
mov byte [esp + 0x200], 3
mov edi, dword [esi + 0x14]
test edi, edi
je 0x10074277
mov ecx, dword [edi + 0x84]
jmp 0x10074279
xor ecx, ecx
push 4
call fcn.100955a0
cmp dword [eax], 0
jne 0x1007428c
xor esi, esi
jmp 0x10074807
test edi, edi
je 0x10074298
mov ecx, dword [edi + 0x84]
jmp 0x1007429a
xor ecx, ecx
push 4
call fcn.100955a0
lea ecx, [esp + 0x74]
push dword [eax]
call fcn.10093bd0
mov byte [esp + 0x200], 4
mov edx, str..petite
lea ecx, [esp + 0x5c]
call fcn.1009c680
test al, al
je 0x100747f4
lea edx, [esp + 0x5c]
lea ecx, [esp + 0x2c]
call fcn.1009c5f0
test al, al
je 0x100747f4
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x44]
call fcn.1009c5f0
test al, al
je 0x100747f4
mov edx, str..rsrc
lea ecx, [esp + 0x8c]
call fcn.1009c680
test al, al
je 0x100747f4
lea edx, [esp + 0x44]
lea ecx, [esp + 0x74]
call fcn.1009c5f0
test al, al
je 0x100747f4
mov ecx, esi
call fcn.100952e0
cmp dword [eax + 0x38], 0
je 0x100747f4
mov ecx, esi
call fcn.100952e0
cmp dword [eax + 0x38], 0x35000
jne 0x100747f4
mov ecx, esi
call fcn.100952c0
test byte [eax + 0x12], 1
je 0x100747f4
mov ecx, esi
call fcn.100952c0
test byte [eax + 0x12], 2
je 0x100747f4
mov ecx, esi
call fcn.100952c0
test byte [eax + 0x12], 4
je 0x100747f4
mov ecx, esi
call fcn.100952c0
test byte [eax + 0x12], 8
je 0x100747f4
mov ecx, esi
call fcn.100952c0
mov ecx, 0x100
test word [eax + 0x12], cx
je 0x100747f4
mov ecx, esi
call fcn.100952e0
cmp dword [eax + 8], 0
je 0x100747f4
mov ecx, esi
call fcn.100952e0
cmp dword [eax + 8], 0xf000
jne 0x100747f4
mov ecx, esi
call fcn.100952e0
cmp dword [eax + 0x1c], 0
je 0x100747f4
mov ecx, esi
call fcn.100952e0
cmp dword [eax + 0x1c], 0x400000
jne 0x100747f4
mov edi, dword [esi + 0xc]
cmp dword [edi + 0x3c], 0
je 0x100747f4
mov eax, dword [esp + 0x14]
mov edi, dword [edi + 0x3c]
mov esi, dword [esi + 0x14]
add edi, dword [eax]
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x68]
call fcn.10094430
test al, al
je 0x100747f4
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x68]
call fcn.10094430
mov edx, dword [esp + 0x14]
xor ecx, ecx
test edx, edx
je 0x100747f4
lea eax, [edi + 0x7c]
add ecx, dword [eax]
lea eax, [eax + 8]
dec edx
jne 0x10074437
cmp ecx, 0x205e8a
jne 0x100747f4
cmp dword [edi + 0x84], 0x9c
jne 0x100747f4
cmp dword [edi + 0x8c], 0x5de6
jne 0x100747f4
cmp dword [edi + 0xf4], 0x200000
jne 0x100747f4
cmp dword [edi + 0xa4], 8
jne 0x100747f4
test esi, esi
je 0x10074494
mov ecx, dword [esi + 0x84]
jmp 0x10074496
xor ecx, ecx
push 0
call fcn.100955a0
mov eax, dword [eax]
test byte [eax + 0x24], 0x40
je 0x100747f4
test esi, esi
je 0x100744b5
mov ecx, dword [esi + 0x84]
jmp 0x100744b7
xor ecx, ecx
push 0
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x40000000
je 0x100747f4
test esi, esi
je 0x100744d9
mov ecx, dword [esi + 0x84]
jmp 0x100744db
xor ecx, ecx
push 0
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x80000000
je 0x100747f4
test esi, esi
je 0x100744fd
mov ecx, dword [esi + 0x84]
jmp 0x100744ff
xor ecx, ecx
push 1
call fcn.100955a0
mov eax, dword [eax]
test byte [eax + 0x24], 0x40
je 0x100747f4
test esi, esi
je 0x1007451e
mov ecx, dword [esi + 0x84]
jmp 0x10074520
xor ecx, ecx
push 1
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x40000000
je 0x100747f4
test esi, esi
je 0x10074542
mov ecx, dword [esi + 0x84]
jmp 0x10074544
xor ecx, ecx
push 1
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x80000000
je 0x100747f4
test esi, esi
je 0x10074566
mov ecx, dword [esi + 0x84]
jmp 0x10074568
xor ecx, ecx
push 2
call fcn.100955a0
mov eax, dword [eax]
test byte [eax + 0x24], 0x40
je 0x100747f4
test esi, esi
je 0x10074587
mov ecx, dword [esi + 0x84]
jmp 0x10074589
xor ecx, ecx
push 2
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x40000000
je 0x100747f4
test esi, esi
je 0x100745ab
mov ecx, dword [esi + 0x84]
jmp 0x100745ad
xor ecx, ecx
push 2
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x80000000
je 0x100747f4
test esi, esi
je 0x100745cf
mov ecx, dword [esi + 0x84]
jmp 0x100745d1
xor ecx, ecx
push 3
call fcn.100955a0
mov eax, dword [eax]
test byte [eax + 0x24], 0x40
je 0x100747f4
test esi, esi
je 0x100745f0
mov ecx, dword [esi + 0x84]
jmp 0x100745f2
xor ecx, ecx
push 3
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x40000000
je 0x100747f4
test esi, esi
je 0x10074614
mov ecx, dword [esi + 0x84]
jmp 0x10074616
xor ecx, ecx
push 3
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x80000000
je 0x100747f4
test esi, esi
je 0x10074638
mov ecx, dword [esi + 0x84]
jmp 0x1007463a
xor ecx, ecx
push 4
call fcn.100955a0
mov eax, dword [eax]
test byte [eax + 0x24], 0x40
je 0x100747f4
test esi, esi
je 0x10074659
mov ecx, dword [esi + 0x84]
jmp 0x1007465b
xor ecx, ecx
push 4
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x40000000
je 0x100747f4
test esi, esi
je 0x1007467d
mov ecx, dword [esi + 0x84]
jmp 0x1007467f
xor ecx, ecx
push 4
call fcn.100955a0
mov eax, dword [eax]
test dword [eax + 0x24], 0x80000000
je 0x100747f4
test esi, esi
je 0x100746a1
mov ecx, dword [esi + 0x84]
jmp 0x100746a3
xor ecx, ecx
push 0
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 0x10], 0xb200
jne 0x100747f4
test esi, esi
je 0x100746c5
mov ecx, dword [esi + 0x84]
jmp 0x100746c7
xor ecx, ecx
push 1
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 0x10], 0xa00
jne 0x100747f4
test esi, esi
je 0x100746e9
mov ecx, dword [esi + 0x84]
jmp 0x100746eb
xor ecx, ecx
push 2
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 0x10], 0x1c00
jne 0x100747f4
test esi, esi
je 0x1007470d
mov ecx, dword [esi + 0x84]
jmp 0x1007470f
xor ecx, ecx
push 3
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 0x10], 0x400
jne 0x100747f4
test esi, esi
je 0x10074731
mov ecx, dword [esi + 0x84]
jmp 0x10074733
xor ecx, ecx
push 4
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 0x10], 0x7e00
jne 0x100747f4
test esi, esi
je 0x10074755
mov ecx, dword [esi + 0x84]
jmp 0x10074757
xor ecx, ecx
push 0
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 8], 0x1d000
jne 0x100747f4
test esi, esi
je 0x10074779
mov ecx, dword [esi + 0x84]
jmp 0x1007477b
xor ecx, ecx
push 1
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 8], 0x2000
jne 0x100747f4
test esi, esi
je 0x10074799
mov ecx, dword [esi + 0x84]
jmp 0x1007479b
xor ecx, ecx
push 2
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 8], 0x7000
jne 0x100747f4
test esi, esi
je 0x100747b9
mov ecx, dword [esi + 0x84]
jmp 0x100747bb
xor ecx, ecx
push 3
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 8], 0x6000
jne 0x100747f4
test esi, esi
je 0x100747d9
mov ecx, dword [esi + 0x84]
jmp 0x100747db
xor ecx, ecx
push 4
call fcn.100955a0
mov eax, dword [eax]
cmp dword [eax + 8], 0x8000
jne 0x100747f4
mov esi, 1
jmp 0x100747f6
xor esi, esi
mov byte [esp + 0x200], 3
lea ecx, [esp + 0x74]
call fcn.10093c30
mov byte [esp + 0x200], 2
lea ecx, [esp + 0x8c]
call fcn.10093c30
mov byte [esp + 0x200], 1
lea ecx, [esp + 0x44]
call fcn.10093c30
mov byte [esp + 0x200], 0
lea ecx, [esp + 0x2c]
call fcn.10093c30
mov dword [esp + 0x200], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.10093c30
mov eax, esi
mov ecx, dword [esp + 0x1f8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1e0]
xor ecx, esp
call fcn.100b37df
mov esp, ebp
pop ebp
ret