Function at 0x1001681a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x220
mov eax, 0x10046e28
call fcn.1002e5e6
mov dword [ebp - 0x28], edx
mov esi, ecx
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov edi, dword [ebp + 8]
mov ecx, ebx
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x208], edi
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x18], ebx
call fcn.1000ff4f
push eax
lea ecx, [ebp - 0x18]
call fcn.10019d83
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
call fcn.1000ff4f
push eax
lea ecx, [ebp - 0x1c]
call fcn.10019d83
push ecx
mov byte [ebp - 4], 1
mov ecx, edi
push dword [edi + 0x5c]
push 4
push dword [ebp - 0x28]
push esi
call fcn.10014909
test al, al
je 0x100168de
push dword [ebp - 0x28]
call fcn.1001df68
mov esi, eax
mov dword [ebp - 0x200], esi
pop ecx
test esi, esi
je 0x100168b8
push dword [ebp - 0x28]
push ebx
push esi
call fcn.100267e0
add esp, 0xc
jmp 0x100168c0
mov esi, ebx
mov dword [ebp - 0x200], ebx
push esi
push ecx
push dword [ebp - 0x28]
mov ecx, edi
call fcn.10014abc
mov ecx, edi
test al, al
jne 0x10016900
call fcn.100149a3
push esi
call fcn.1001eb5b
pop ecx
mov al, bl
mov bl, al
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.1000ff12
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.1000ff12
mov al, bl
call fcn.1002e595
ret
call fcn.100149a3
push dword [ebp - 0x28]
push esi
mov esi, dword [ebp - 0x98]
mov ecx, esi
call fcn.10019237
push dword [ebp - 0x28]
lea ecx, [ebp - 0x18]
push dword [esi]
call fcn.10019237
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
mov esi, dword [eax - 0xc]
push esi
call fcn.100191b4
mov ecx, eax
lea eax, [esi + 1]
push eax
push ecx
call fcn.1001dd98
push eax
call fcn.1000fce9
add esp, 0xc
lea ecx, [ebp - 0x18]
push esi
call fcn.10019e16
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x18]
call fcn.10019237
lea ecx, [ebp - 0x1c]
call fcn.10019064
cmp byte [edi + 0x1e], 0
jne 0x10016ea7
cmp byte [edi + 0x1d], 0
je 0x10016ea2
push ebx
push ebx
sub esp, 0xc
mov dword [ebp - 0x144], 0x306b6e64
mov ecx, esp
mov dword [ebp - 0x140], 0x3451444f
lea eax, [ebp - 0x9e]
mov dword [ebp - 0x13c], 0x3959694c
lea edx, [ebp - 0x144]
mov dword [ebp - 0x138], 0x3751584c
push ecx
push eax
push edx
mov dword [ebp - 0x134], 0x2b555142
mov dword [ebp - 0x130], 0x43386a65
mov dword [ebp - 0x12c], 0x6e6c434d
mov dword [ebp - 0x128], 0x6a387a66
mov dword [ebp - 0x124], 0x6663484f
mov dword [ebp - 0x120], 0x62455250
mov dword [ebp - 0x11c], 0x68315443
mov dword [ebp - 0x118], 0x48455245
mov dword [ebp - 0x114], 0x5563514a
mov dword [ebp - 0x110], 0x7770695a
mov dword [ebp - 0x10c], 0x62596744
mov dword [ebp - 0x108], 0x61674444
mov dword [ebp - 0x104], 0x7963524f
mov dword [ebp - 0x100], 0x4838794d
mov dword [ebp - 0xfc], 0x494d6e42
mov dword [ebp - 0xf8], 0x6b4a5146
mov dword [ebp - 0xf4], 0x3634775a
mov dword [ebp - 0xf0], 0x3159534f
mov dword [ebp - 0xec], 0x74467a59
mov dword [ebp - 0xe8], 0x4c553341
mov dword [ebp - 0xe4], 0x72514449
mov dword [ebp - 0xe0], 0x4e45524d
mov dword [ebp - 0xdc], 0x4e55684e
mov dword [ebp - 0xd8], 0x42497a47
mov dword [ebp - 0xd4], 0x5377774c
mov dword [ebp - 0xd0], 0x43776a4a
mov dword [ebp - 0xcc], 0x41775446
mov dword [ebp - 0xc8], 0x6f416759
mov dword [ebp - 0xc4], 0x574d544a
mov dword [ebp - 0xc0], 0x3751784a
mov dword [ebp - 0xbc], 0x6e6b6749
mov dword [ebp - 0xb8], 0x2b595143
mov dword [ebp - 0xb4], 0x3259544d
mov dword [ebp - 0xb0], 0x75454443
mov dword [ebp - 0xac], 0x6f734143
mov dword [ebp - 0xa8], 0x6e427a4d
mov dword [ebp - 0xa4], 0x41414141
mov word [ebp - 0xa0], 0x7762
call fcn.1001986e
lea ecx, [ebp - 0x214]
call fcn.10010fb3
add esp, 0xc
xor ecx, ecx
mov byte [ebp - 4], 2
inc ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x204], ecx
mov ecx, eax
call fcn.10019968
push eax
lea ecx, [ebp - 0x1c]
call fcn.1001902d
test eax, eax
je 0x10016ea2
push ebx
push ebx
sub esp, 0xc
mov dword [ebp - 0x94], 0x6b416a64
mov ecx, esp
mov dword [ebp - 0x90], 0x39746a4f
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x8c], 0x75567945
lea edx, [ebp - 0x94]
mov dword [ebp - 0x88], 0x7241684d
push ecx
push eax
push edx
mov dword [ebp - 0x84], 0x3763514a
mov dword [ebp - 0x80], 0x52346845
mov dword [ebp - 0x7c], 0x6b675265
mov dword [ebp - 0x78], 0x43387863
mov dword [ebp - 0x74], 0x4e675147
mov dword [ebp - 0x70], 0x33457743
mov dword [ebp - 0x6c], 0x41497a4b
mov dword [ebp - 0x68], 0x68556746
mov dword [ebp - 0x64], 0x5051524a
mov dword [ebp - 0x60], 0x32637847
mov dword [ebp - 0x5c], 0x2b4e6741
mov dword [ebp - 0x58], 0x5a736d66
mov dword [ebp - 0x54], 0x69307a41
mov dword [ebp - 0x50], 0x42594242
mov dword [ebp - 0x4c], 0x76647765
mov dword [ebp - 0x48], 0x42775241
mov dword [ebp - 0x44], 0x5049674c
mov dword [ebp - 0x40], 0x64385759
mov dword [ebp - 0x3c], 0x53734847
mov dword [ebp - 0x38], 0x51455142
mov dword [ebp - 0x34], 0x4155784b
mov dword [ebp - 0x30], 0x46424141
call fcn.1001986e
lea ecx, [ebp - 0x220]
call fcn.10010fb3
add esp, 0xc
push 3
pop ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x204], ecx
mov ecx, eax
call fcn.10019968
push eax
lea ecx, [ebp - 0x1c]
call fcn.1001902d
test eax, eax
je 0x10016ea2
push ebx
push ebx
sub esp, 0xc
mov dword [ebp - 0x1fc], 0x31416a64
mov ecx, esp
mov dword [ebp - 0x1f8], 0x6d4d6a4e
lea eax, [ebp - 0x145]
mov dword [ebp - 0x1f4], 0x58384150
lea edx, [ebp - 0x1fc]
mov dword [ebp - 0x1f0], 0x4b305247
push ecx
push eax
push edx
mov dword [ebp - 0x1ec], 0x31704866
mov dword [ebp - 0x1e8], 0x4651524d
mov dword [ebp - 0x1e4], 0x36306741
mov dword [ebp - 0x1e0], 0x754d6750
mov dword [ebp - 0x1dc], 0x74557a66
mov dword [ebp - 0x1d8], 0x4477775a
mov dword [ebp - 0x1d4], 0x49774744
mov dword [ebp - 0x1d0], 0x70595148
mov dword [ebp - 0x1cc], 0x7749544c
mov dword [ebp - 0x1c8], 0x77417945
mov dword [ebp - 0x1c4], 0x5955434f
mov dword [ebp - 0x1c0], 0x2b6b684b
mov dword [ebp - 0x1bc], 0x6d304449
mov dword [ebp - 0x1b8], 0x5851785a
mov dword [ebp - 0x1b4], 0x63514366
mov dword [ebp - 0x1b0], 0x70596745
mov dword [ebp - 0x1ac], 0x36497963
mov dword [ebp - 0x1a8], 0x3967415a
mov dword [ebp - 0x1a4], 0x61347748
mov dword [ebp - 0x1a0], 0x704d4848
mov dword [ebp - 0x19c], 0x2b35424b
mov dword [ebp - 0x198], 0x5a555166
mov dword [ebp - 0x194], 0x61777763
mov dword [ebp - 0x190], 0x66774141
mov dword [ebp - 0x18c], 0x70775348
mov dword [ebp - 0x188], 0x5a6f6945
mov dword [ebp - 0x184], 0x6e4d7a41
mov dword [ebp - 0x180], 0x47674446
mov dword [ebp - 0x17c], 0x324d6847
mov dword [ebp - 0x178], 0x56556943
mov dword [ebp - 0x174], 0x30415165
mov dword [ebp - 0x170], 0x68306a41
mov dword [ebp - 0x16c], 0x37636e42
mov dword [ebp - 0x168], 0x3741514c
mov dword [ebp - 0x164], 0x37457a41
mov dword [ebp - 0x160], 0x38343345
mov dword [ebp - 0x15c], 0x6a38774b
mov dword [ebp - 0x158], 0x39566859
mov dword [ebp - 0x154], 0x43415749
mov dword [ebp - 0x150], 0x6f414842
mov dword [ebp - 0x14c], 0x41417748
mov word [ebp - 0x148], 0x4941
mov byte [ebp - 0x146], 0x41
call fcn.1001986e
lea ecx, [ebp - 0x22c]
call fcn.10010fb3
add esp, 0xc
push 7
pop ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x204], ecx
mov ecx, eax
call fcn.10019968
push eax
lea ecx, [ebp - 0x1c]
call fcn.1001902d
test eax, eax
jne 0x10016ea7
mov byte [ebp - 0x1d], bl
jmp 0x10016eab
mov byte [ebp - 0x1d], 1
mov eax, dword [ebp - 0x24]
test al, 4
je 0x10016ec6
and eax, 0xfffffffb
lea ecx, [ebp - 0x22c]
mov dword [ebp - 0x24], eax
call fcn.1001994c
mov eax, dword [ebp - 0x24]
test al, 2
je 0x10016ede
and eax, 0xfffffffd
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x24], eax
call fcn.1001994c
mov eax, dword [ebp - 0x24]
xor ecx, ecx
inc ecx
mov dword [ebp - 4], ecx
test cl, al
je 0x10016ef6
lea ecx, [ebp - 0x214]
call fcn.1001994c
xor ecx, ecx
inc ecx
cmp byte [ebp - 0x1d], 0
je 0x10016f19
push dword [ebp - 0x200]
mov byte [edi + 0x1e], cl
call fcn.1001eb5b
mov eax, dword [ebp - 0x9c]
pop ecx
or dword [eax], 0xffffffff
jmp 0x100168de
mov esi, dword [0x10083220]
jmp 0x10016f3c
push ebx
push dword [esi]
lea ecx, [ebp - 0x18]
call fcn.1001902d
mov ecx, dword [ebp - 0x9c]
mov dword [ecx], eax
cmp eax, 0xffffffff
jne 0x10016f49
add esi, 4
cmp esi, dword [0x10083224]
jne 0x10016f21
jmp 0x1001703c
push ebx
push ebx
sub esp, 0xc
mov dword [ebp - 0x84], 0x66636e64
mov ecx, esp
mov dword [ebp - 0x80], 0x71384441
lea eax, [ebp - 0x30]
mov dword [ebp - 0x7c], 0x534d5250
lea edx, [ebp - 0x84]
mov dword [ebp - 0x78], 0x6755674d
push ecx
push eax
push edx
mov dword [ebp - 0x74], 0x76774444
mov dword [ebp - 0x70], 0x6834685a
mov dword [ebp - 0x6c], 0x61517746
mov dword [ebp - 0x68], 0x6c396948
mov dword [ebp - 0x64], 0x51635249
mov dword [ebp - 0x60], 0x71673341
mov dword [ebp - 0x5c], 0x33775441
mov dword [ebp - 0x58], 0x3063574e
mov dword [ebp - 0x54], 0x664d4250
mov dword [ebp - 0x50], 0x6e637949
mov dword [ebp - 0x4c], 0x756f524f
mov dword [ebp - 0x48], 0x7463424b
mov dword [ebp - 0x44], 0x6a673344
mov dword [ebp - 0x40], 0x4f455146
mov dword [ebp - 0x3c], 0x34414849
mov dword [ebp - 0x38], 0x41677850
mov dword [ebp - 0x34], 0x35414141
call fcn.1001986e
lea ecx, [ebp - 0x214]
call fcn.10010fb3
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.10019968
push eax
mov ecx, esi
call fcn.1001902d
lea ecx, [ebp - 0x214]
mov edi, eax
call fcn.1001994c
test edi, edi
mov edi, dword [ebp - 0x208]
je 0x1001703c
mov eax, dword [esi]
mov ecx, dword [ebp - 0x9c]
mov eax, dword [eax - 0xc]
add dword [ecx], eax
push dword [ebp - 0x200]
mov byte [edi + 0x1d], bl
call fcn.1001eb5b
mov eax, dword [ebp - 0x9c]
pop ecx
cmp dword [eax], 0xffffffff
je 0x100168e2
xor eax, eax
inc eax
jmp 0x100168e0