Function at 0x1000b220
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10041870
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x40d8
call fcn.1003d5c0
mov dword [ebp - 4], 1
jmp 0x1000b25b
lea ecx, [ebp + 0x24]
call fcn.10002080
mov dword [ebp - 0x10], eax
mov eax, 0xd5703845
push eax
lea ecx, [ebp - 0x409e]
call fcn.1000bbd0
mov dword [ebp - 0x40d8], eax
mov ecx, dword [ebp - 0x40d8]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call sub.MSVCR90.dll_strstr
add esp, 8
mov dword [ebp - 0x4098], eax
lea ecx, [ebp - 0x409e]
call fcn.10031980
cmp dword [ebp - 0x4098], 0
je 0x1000b3cd
mov byte [ebp - 0x1034], 0x44
mov byte [ebp - 0x1033], 0x45
mov byte [ebp - 0x1032], 0x54
mov byte [ebp - 0x1031], 0x45
mov byte [ebp - 0x1030], 0x43
mov byte [ebp - 0x102f], 0x54
mov byte [ebp - 0x102e], 0x20
mov byte [ebp - 0x102d], 0x44
mov byte [ebp - 0x102c], 0x52
mov byte [ebp - 0x102b], 0x49
mov byte [ebp - 0x102a], 0x56
mov byte [ebp - 0x1029], 0x45
mov byte [ebp - 0x1028], 0x52
mov byte [ebp - 0x1027], 0x20
mov byte [ebp - 0x1026], 0x4e
mov byte [ebp - 0x1025], 0x4f
mov byte [ebp - 0x1024], 0x54
mov byte [ebp - 0x1023], 0x20
mov byte [ebp - 0x1022], 0x41
mov byte [ebp - 0x1021], 0x4c
mov byte [ebp - 0x1020], 0x4c
mov byte [ebp - 0x101f], 0x4f
mov byte [ebp - 0x101e], 0x57
mov byte [ebp - 0x101d], 0x20
mov byte [ebp - 0x101c], 0x30
mov byte [ebp - 0x101b], 0x78
mov byte [ebp - 0x101a], 0x30
mov byte [ebp - 0x1019], 0x30
mov byte [ebp - 0x1018], 0x31
mov byte [ebp - 0x1017], 0
lea ecx, [ebp + 0x24]
call fcn.10002080
push eax
lea eax, [ebp - 0x1034]
push eax
push 0x2000
lea ecx, [ebp - 0x1014]
push ecx
call fcn.1003d8b0
add esp, 0x10
mov ecx, dword [0x10067830]
call fcn.10001480
push eax
push 0
lea edx, [ebp - 0x1014]
push edx
push 0
lea eax, [ebp - 0x1014]
push eax
mov ecx, dword [0x10067834]
call fcn.10010200
push 0x68f6e58e
lea ecx, [ebp - 0x40ad]
call fcn.1000bc50
mov dword [ebp - 0x40dc], eax
mov ecx, dword [ebp - 0x40dc]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call sub.MSVCR90.dll_strstr
add esp, 8
mov dword [ebp - 0x40a4], eax
lea ecx, [ebp - 0x40ad]
call fcn.10031830
cmp dword [ebp - 0x40a4], 0
je 0x1000b533
mov byte [ebp - 0x1054], 0x44
mov byte [ebp - 0x1053], 0x45
mov byte [ebp - 0x1052], 0x54
mov byte [ebp - 0x1051], 0x45
mov byte [ebp - 0x1050], 0x43
mov byte [ebp - 0x104f], 0x54
mov byte [ebp - 0x104e], 0x20
mov byte [ebp - 0x104d], 0x44
mov byte [ebp - 0x104c], 0x52
mov byte [ebp - 0x104b], 0x49
mov byte [ebp - 0x104a], 0x56
mov byte [ebp - 0x1049], 0x45
mov byte [ebp - 0x1048], 0x52
mov byte [ebp - 0x1047], 0x20
mov byte [ebp - 0x1046], 0x4e
mov byte [ebp - 0x1045], 0x4f
mov byte [ebp - 0x1044], 0x54
mov byte [ebp - 0x1043], 0x20
mov byte [ebp - 0x1042], 0x41
mov byte [ebp - 0x1041], 0x4c
mov byte [ebp - 0x1040], 0x4c
mov byte [ebp - 0x103f], 0x4f
mov byte [ebp - 0x103e], 0x57
mov byte [ebp - 0x103d], 0x20
mov byte [ebp - 0x103c], 0x30
mov byte [ebp - 0x103b], 0x78
mov byte [ebp - 0x103a], 0x30
mov byte [ebp - 0x1039], 0x30
mov byte [ebp - 0x1038], 0x32
mov byte [ebp - 0x1037], 0
lea ecx, [ebp + 0x24]
call fcn.10002080
push eax
lea eax, [ebp - 0x1054]
push eax
push 0x2000
lea ecx, [ebp - 0x2054]
push ecx
call fcn.1003d8b0
add esp, 0x10
mov ecx, dword [0x10067830]
call fcn.10001480
push eax
push 0
lea edx, [ebp - 0x2054]
push edx
push 0
lea eax, [ebp - 0x2054]
push eax
mov ecx, dword [0x10067834]
call fcn.10010200
push 0x3e49d3da
lea ecx, [ebp - 0x40bd]
call fcn.1000bcd0
mov dword [ebp - 0x40e0], eax
mov ecx, dword [ebp - 0x40e0]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call sub.MSVCR90.dll_strstr
add esp, 8
mov dword [ebp - 0x40b4], eax
lea ecx, [ebp - 0x40bd]
call fcn.10031830
cmp dword [ebp - 0x40b4], 0
je 0x1000b699
mov byte [ebp - 0x3074], 0x44
mov byte [ebp - 0x3073], 0x45
mov byte [ebp - 0x3072], 0x54
mov byte [ebp - 0x3071], 0x45
mov byte [ebp - 0x3070], 0x43
mov byte [ebp - 0x306f], 0x54
mov byte [ebp - 0x306e], 0x20
mov byte [ebp - 0x306d], 0x44
mov byte [ebp - 0x306c], 0x52
mov byte [ebp - 0x306b], 0x49
mov byte [ebp - 0x306a], 0x56
mov byte [ebp - 0x3069], 0x45
mov byte [ebp - 0x3068], 0x52
mov byte [ebp - 0x3067], 0x20
mov byte [ebp - 0x3066], 0x4e
mov byte [ebp - 0x3065], 0x4f
mov byte [ebp - 0x3064], 0x54
mov byte [ebp - 0x3063], 0x20
mov byte [ebp - 0x3062], 0x41
mov byte [ebp - 0x3061], 0x4c
mov byte [ebp - 0x3060], 0x4c
mov byte [ebp - 0x305f], 0x4f
mov byte [ebp - 0x305e], 0x57
mov byte [ebp - 0x305d], 0x20
mov byte [ebp - 0x305c], 0x30
mov byte [ebp - 0x305b], 0x78
mov byte [ebp - 0x305a], 0x30
mov byte [ebp - 0x3059], 0x30
mov byte [ebp - 0x3058], 0x33
mov byte [ebp - 0x3057], 0
lea ecx, [ebp + 0x24]
call fcn.10002080
push eax
lea eax, [ebp - 0x3074]
push eax
push 0x2000
lea ecx, [ebp - 0x3054]
push ecx
call fcn.1003d8b0
add esp, 0x10
mov ecx, dword [0x10067830]
call fcn.10001480
push eax
push 0
lea edx, [ebp - 0x3054]
push edx
push 0
lea eax, [ebp - 0x3054]
push eax
mov ecx, dword [0x10067834]
call fcn.10010200
push 0x89bbf256
lea ecx, [ebp - 0x40d1]
call fcn.1000bd50
mov dword [ebp - 0x40e4], eax
mov ecx, dword [ebp - 0x40e4]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call sub.MSVCR90.dll_strstr
add esp, 8
mov dword [ebp - 0x40c4], eax
lea ecx, [ebp - 0x40d1]
call fcn.10017f10
cmp dword [ebp - 0x40c4], 0
je 0x1000b7ff
mov byte [ebp - 0x4094], 0x44
mov byte [ebp - 0x4093], 0x45
mov byte [ebp - 0x4092], 0x54
mov byte [ebp - 0x4091], 0x45
mov byte [ebp - 0x4090], 0x43
mov byte [ebp - 0x408f], 0x54
mov byte [ebp - 0x408e], 0x20
mov byte [ebp - 0x408d], 0x44
mov byte [ebp - 0x408c], 0x52
mov byte [ebp - 0x408b], 0x49
mov byte [ebp - 0x408a], 0x56
mov byte [ebp - 0x4089], 0x45
mov byte [ebp - 0x4088], 0x52
mov byte [ebp - 0x4087], 0x20
mov byte [ebp - 0x4086], 0x4e
mov byte [ebp - 0x4085], 0x4f
mov byte [ebp - 0x4084], 0x54
mov byte [ebp - 0x4083], 0x20
mov byte [ebp - 0x4082], 0x41
mov byte [ebp - 0x4081], 0x4c
mov byte [ebp - 0x4080], 0x4c
mov byte [ebp - 0x407f], 0x4f
mov byte [ebp - 0x407e], 0x57
mov byte [ebp - 0x407d], 0x20
mov byte [ebp - 0x407c], 0x30
mov byte [ebp - 0x407b], 0x78
mov byte [ebp - 0x407a], 0x30
mov byte [ebp - 0x4079], 0x30
mov byte [ebp - 0x4078], 0x34
mov byte [ebp - 0x4077], 0
lea ecx, [ebp + 0x24]
call fcn.10002080
push eax
lea eax, [ebp - 0x4094]
push eax
push 0x2000
lea ecx, [ebp - 0x4074]
push ecx
call fcn.1003d8b0
add esp, 0x10
mov ecx, dword [0x10067830]
call fcn.10001480
push eax
push 0
lea edx, [ebp - 0x4074]
push edx
push 0
lea eax, [ebp - 0x4074]
push eax
mov ecx, dword [0x10067834]
call fcn.10010200
jmp 0x1000b811
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.10002060
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x24]
call fcn.10002060
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret