Function at 0x10008596
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x454
lea ebp, [esp + 0x20]
mov edi, dword [esp + 0x470]
mov esi, dword [esp + 0x46c]
mov edx, 0x5cc75879
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0x24]
lea eax, [esp + 0x44]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x28]
lea ecx, [esp + 0x54]
mov dword [eax], 0x40656452
mov dword [eax + 4], 0x73676076
mov dword [eax + 8], 0x726f426d
mov word [eax + 0xc], 0x7549
mov byte [eax + 0xe], 0x59
lea eax, [esp + 0x53]
mov dword [esp + 8], ecx
mov ecx, 0x26153203
cmp edx, 0x26153203
je 0x1000861c
cmp edx, 0x5cc75879
jne 0x100085fa
mov byte [eax], 0
inc eax
mov edx, 0x5cc75879
cmp eax, dword [esp + 8]
cmove edx, ecx
jmp 0x100085fa
xor ecx, ecx
mov eax, 0x1bb9eae6
mov edx, 0xb60a4c62
cmp edx, 0x1bb9eae6
je 0x10008655
cmp edx, 0x15e55782
je 0x10008678
cmp edx, 0xb60a4c62
jne 0x10008628
mov dword [esp + 8], ecx
mov edx, dword [esp + 8]
cmp edx, 0xf
mov edx, 0x15e55782
cmovb edx, eax
jmp 0x10008628
mov edx, dword [esp + 8]
mov bl, byte [esp + edx + 0x44]
mov ecx, dword [esp + 8]
mov bh, bl
not bh
and bh, cl
not cl
and cl, bl
or cl, bh
mov byte [esp + edx + 0x44], cl
mov ecx, dword [esp + 8]
inc ecx
jmp 0x10008623
lea ecx, [esp + 0x44]
mov byte [ecx + 0xf], 0
call fcn.100068cd
xor ecx, ecx
push ecx
push ebp
push ecx
push 0x20019
push ecx
push ecx
push ecx
push edi
push esi
call eax
test eax, eax
mov ebp, 0x39574299
setne byte [esp + 7]
cmp ebp, 0x39574298
jle 0x100086e1
cmp ebp, 0x53f65881
jle 0x1000870e
cmp ebp, 0x53f65882
je 0x10008773
cmp ebp, 0x5fa7ebc5
je 0x10008782
cmp ebp, 0x6aa22920
jne 0x100086a2
mov ebp, 0xec218e32
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x100086a2
cmp ebp, 0xec218e31
jle 0x1000874c
cmp ebp, 0x46eaee9
je 0x100087a9
cmp ebp, 0x15ac1291
je 0x100087c5
cmp ebp, 0xec218e32
jne 0x100086a2
jmp 0x100089f2
cmp ebp, 0x39574299
je 0x10008845
cmp ebp, 0x41a9edba
jne 0x100086a2
mov esi, dword [esp + 0x468]
mov ecx, esi
push 0x1009c732
call fcn.100057a0
mov ecx, esi
push dword [esp + 0x3c]
call fcn.100057a0
mov ebp, 0x46eaee9
xor esi, esi
jmp 0x100086a2
cmp ebp, 0x93b37490
je 0x10008860
cmp ebp, 0xc8d110e4
jne 0x100086a2
mov edi, dword [esp + 0x40]
mov ebp, 0x15ac1291
inc edi
jmp 0x100086a2
mov ebp, 0x46eaee9
mov esi, 2
jmp 0x100086a2
lea eax, [esp + 0x254]
mov ebp, 0x15ac1291
xor edi, edi
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
lea eax, [esp + 0x54]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
jmp 0x100086a2
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
test esi, esi
mov ebp, 0x93b37490
mov eax, 0xc8d110e4
cmove ebp, eax
jmp 0x100086a2
lea eax, [esp + 0x1c]
mov dword [esp + 0x40], edi
mov ecx, 0x200
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
lea eax, [esp + 0x16]
mov dword [esp + 0x18], ecx
mov ecx, 0x61767a54
mov dword [esp + 8], 0x46656452
mov dword [esp + 0xc], 0x516b706a
mov dword [esp + 0x10], 0x6e7f6569
mov byte [esp + 0x14], 0x5b
mov dword [esp], eax
lea eax, [esp + 0x15]
cmp ecx, 0x4b2c2125
je 0x100088b6
cmp ecx, 0x61767a54
jne 0x1000881b
mov byte [eax], 0
inc eax
mov ecx, 0x61767a54
mov edx, 0x4b2c2125
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x1000881b
mov eax, dword [esp + 0x28]
cmp byte [esp + 7], 0
mov ebp, 0x5fa7ebc5
mov eax, 0x6aa22920
cmovne ebp, eax
jmp 0x100086a2
lea eax, [esp + 0x14]
mov ecx, 0x47c7a77e
mov dword [esp + 8], 0x40656452
mov dword [esp + 0xc], 0x62756a68
mov word [esp + 0x10], 0x6c43
mov byte [esp + 0x12], 0x73
mov dword [esp], eax
lea eax, [esp + 0x13]
cmp ecx, 0x86774c74
je 0x1000891e
cmp ecx, 0x47c7a77e
jne 0x1000888c
mov byte [eax], 0
inc eax
mov ecx, 0x47c7a77e
mov edx, 0x86774c74
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x1000888c
xor eax, eax
mov ecx, 0xb331287
cmp ecx, 0x71f19e7
je 0x10008979
cmp ecx, 0x53b8cd13
je 0x100088f1
cmp ecx, 0xb331287
jne 0x100088bd
mov dword [esp], eax
mov edx, 0x53b8cd13
mov ecx, dword [esp]
cmp ecx, 0xd
mov ecx, 0x71f19e7
cmovb ecx, edx
jmp 0x100088bd
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 8]
mov eax, dword [esp]
mov dh, dl
and dl, 0xcc
not dh
and dh, 0x33
or dl, dh
mov dh, al
and al, 0xcc
not dh
and dh, 0x33
or al, dh
xor al, dl
mov byte [esp + ecx + 8], al
mov eax, dword [esp]
inc eax
jmp 0x100088b8
xor eax, eax
mov ecx, 0x4365cb22
cmp ecx, 0x389d28ca
je 0x10008959
cmp ecx, 0x78c8d1d2
je 0x100089ca
cmp ecx, 0x4365cb22
jne 0x10008925
mov dword [esp], eax
mov edx, 0x389d28ca
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x78c8d1d2
cmovb ecx, edx
jmp 0x10008925
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 8]
mov eax, dword [esp]
mov dh, dl
not dh
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 8], al
mov eax, dword [esp]
inc eax
jmp 0x10008920
lea ecx, [esp + 8]
mov byte [esp + 0x15], 0
call fcn.100068cd
lea ecx, [esp + 0x254]
mov dword [esp + 0x3c], ecx
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x58]
push ecx
mov ecx, 0
push ecx
push ecx
lea ecx, [esp + 0x2c]
push ecx
push dword [esp + 0x50]
push dword [esp + 0x58]
push dword [esp + 0x3c]
call eax
test eax, eax
mov ebp, 0x53f65882
mov ecx, 0x41a9edba
cmove ebp, ecx
jmp 0x100086a2
lea ecx, [esp + 8]
mov byte [esp + 0x13], 0
call fcn.100068cd
push dword [esp + 0x20]
call eax
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
mov ebp, 0xec218e32
xor ebx, ebx
jmp 0x100086a2
mov eax, dword [esp + 0x24]
mov eax, ebx
add esp, 0x454
pop esi
pop edi
pop ebx
pop ebp
ret