Function at 0x10041d7a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006047f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x218
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x100], 0
mov dword [ebp - 0x14], 0x42c70bb7
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x150], 3
push 2
lea ecx, [ebp - 0x1a4]
call fcn.1002c4d4
and dword [ebp - 4], 0
mov dword [ebp - 0x1c], 0
jmp 0x10041ddf
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10041df5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc8], 0xffffffff
jmp 0x10041dd8
mov dword [ebp - 0x1c], 0
jmp 0x10041e05
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10041e21
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1a4]
call fcn.1002c572
mov dword [eax], 0x5eeffbb8
jmp 0x10041dfe
mov dword [ebp - 0x14], 0
jmp 0x10041e31
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x10041e72
mov eax, 0xa2961c0f
test eax, eax
je 0x10041e59
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xc8], 0
je 0x10041e59
mov dword [ebp - 0xd8], 1
jmp 0x10041e60
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0xc8], ecx
jmp 0x10041e2a
mov dword [ebp - 0x14], 0
jmp 0x10041e82
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe2
jne 0x1004227e
mov dword [ebp - 0x24], 0
push 1
lea ecx, [ebp - 0x120]
call fcn.1002c4d4
mov byte [ebp - 4], 1
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe0], 0x3e235bd6
mov dword [ebp - 0x58], 0
jmp 0x10041ec8
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10041ee4
push dword [ebp - 0x58]
lea ecx, [ebp - 0x120]
call fcn.1002c572
mov dword [eax], 0x1de6fc60
jmp 0x10041ec1
cmp dword [ebp - 0x24], 0
je 0x10041f20
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x110], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x110]
mov dword [ebp + eax - 0xc8], ecx
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x110]
test eax, eax
je 0x10041f20
mov dword [ebp - 0xd4], 1
jmp 0x10041f27
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x14], eax
jl 0x10041f3b
mov dword [ebp - 0x108], 1
jmp 0x10041f42
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x20]
sub esi, dword [ebp - 0x108]
add esi, dword [ebp - 0x24]
push 0
lea ecx, [ebp - 0x120]
call fcn.1002c572
imul esi, dword [eax]
test esi, esi
je 0x100421e5
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x198], 0xffffffff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0
je 0x10041fa2
cmp dword [ebp - 0x2c], 0
je 0x10041fa2
mov dword [ebp - 0x13c], 1
jmp 0x10041fa9
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x14], 0
jne 0x10041fbb
mov dword [ebp - 0x114], 1
jmp 0x10041fc2
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2c]
jge 0x10041fe1
xor eax, eax
inc eax
je 0x10041fe1
mov dword [ebp - 0xdc], 1
jmp 0x10041fe8
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0
jbe 0x10041ffd
mov dword [ebp - 0x148], 1
jmp 0x10042004
and dword [ebp - 0x148], 0
push 0
lea ecx, [ebp - 0x120]
call fcn.1002c572
mov eax, dword [eax]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x20]
je 0x10042039
push 0
lea ecx, [ebp - 0x120]
call fcn.1002c572
cmp dword [eax], 0
je 0x10042039
mov dword [ebp - 0xfc], 1
jmp 0x10042040
and dword [ebp - 0xfc], 0
push 0
lea ecx, [ebp - 0x120]
call fcn.1002c572
mov ecx, dword [ebp - 0xfc]
imul ecx, dword [eax]
test ecx, ecx
je 0x10042142
xor eax, eax
inc eax
je 0x10042098
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1b4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc8]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c]
test eax, eax
je 0x10042098
mov dword [ebp - 0xe4], 1
jmp 0x1004209f
and dword [ebp - 0xe4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0xe4], eax
jg 0x100420c0
mov dword [ebp - 0x10c], 1
jmp 0x100420c7
and dword [ebp - 0x10c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x10c]
mov dword [ebp + eax - 0xc8], ecx
push 3
pop eax
sub eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x20]
jne 0x100420f3
mov dword [ebp - 0x104], 1
jmp 0x100420fa
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x104], eax
jl 0x10042111
mov dword [ebp - 0xf4], 1
jmp 0x10042118
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x2c]
push 0
lea ecx, [ebp - 0x120]
call fcn.1002c572
imul esi, dword [eax]
mov eax, dword [ebp - 0x20]
imul eax, esi
mov dword [ebp - 0x20], eax
jmp 0x100421e0
mov dword [ebp - 0x154], 1
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
neg eax
cmp eax, dword [ebp - 0x14]
jle 0x10042169
mov dword [ebp - 0xd0], 1
jmp 0x10042170
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xd0], eax
jne 0x10042199
mov eax, 0xaf4a9b83
test eax, eax
je 0x10042199
cmp dword [ebp - 0x14], 0
je 0x10042199
mov dword [ebp - 0xbc], 1
jmp 0x100421a0
and dword [ebp - 0xbc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + eax - 0xc8], ecx
cmp dword [ebp - 0xbc], 0
jne 0x100421cd
cmp dword [ebp - 0x154], 0
jne 0x100421cd
and dword [ebp - 0xcc], 0
jmp 0x100421d7
mov dword [ebp - 0xcc], 1
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x24], eax
jmp 0x1004226a
push 3
lea ecx, [ebp - 0x178]
call fcn.1002c4d4
mov byte [ebp - 4], 2
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x1ac]
push eax
call fcn.10015d3e
pop ecx
pop ecx
cmp dword [ebp - 0x150], 0
je 0x10042237
mov esi, dword [ebp - 0xe0]
push 1
lea ecx, [ebp - 0x178]
call fcn.1002c572
cmp esi, dword [eax]
jg 0x10042237
mov dword [ebp - 0xe8], 1
jmp 0x1004223e
and dword [ebp - 0xe8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe8]
mov dword [ebp + eax - 0xc8], ecx
lea eax, [ebp - 0x24]
push eax
call fcn.10041d46
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x178]
call fcn.1002c556
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.1002c556
jmp 0x10041e7b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.1002c556
mov byte [ebp - 0xb4], 1
mov byte [ebp - 0xb3], 0x77
mov byte [ebp - 0xb2], 0xe
mov byte [ebp - 0xb1], 0xd
mov byte [ebp - 0xb0], 0x27
mov byte [ebp - 0xaf], 0x9a
mov byte [ebp - 0xae], 0x1f
mov byte [ebp - 0xad], 0x6a
mov byte [ebp - 0xac], 0x79
mov byte [ebp - 0xab], 0xd6
mov byte [ebp - 0xaa], 0xbd
mov byte [ebp - 0xa9], 0xe9
mov byte [ebp - 0xa8], 0x51
mov byte [ebp - 0xa7], 0xda
mov byte [ebp - 0xa6], 0xb7
mov byte [ebp - 0xa5], 0xd8
mov byte [ebp - 0xa4], 0x31
mov byte [ebp - 0xa3], 0xa
mov byte [ebp - 0xa2], 0x54
mov byte [ebp - 0xa1], 0x42
mov byte [ebp - 0xa0], 0x78
mov byte [ebp - 0x9f], 0x6c
mov byte [ebp - 0x9e], 0x3e
mov byte [ebp - 0x9d], 0xa6
mov byte [ebp - 0x9c], 0xe1
mov byte [ebp - 0x9b], 0x60
mov byte [ebp - 0x9a], 0xf3
mov byte [ebp - 0x99], 0xf7
mov byte [ebp - 0x98], 0x9c
mov byte [ebp - 0x97], 0x10
mov byte [ebp - 0x96], 0x81
mov byte [ebp - 0x95], 0xb5
mov byte [ebp - 0x94], 0xfb
mov byte [ebp - 0x93], 0x43
mov byte [ebp - 0x92], 0x95
mov byte [ebp - 0x91], 0x80
mov byte [ebp - 0x90], 0xda
mov byte [ebp - 0x8f], 0x79
mov byte [ebp - 0x8e], 0xc6
mov byte [ebp - 0x8d], 0x15
mov byte [ebp - 0x8c], 0x37
mov byte [ebp - 0x8b], 0xe7
mov byte [ebp - 0x8a], 0x24
mov byte [ebp - 0x89], 0x77
mov byte [ebp - 0x88], 0x16
mov byte [ebp - 0x87], 0x18
mov byte [ebp - 0x86], 6
mov byte [ebp - 0x85], 0x10
mov byte [ebp - 0x84], 0xf
mov byte [ebp - 0x83], 0x17
mov byte [ebp - 0x82], 0x10
mov byte [ebp - 0x81], 1
mov byte [ebp - 0x80], 2
mov byte [ebp - 0x7f], 0x12
mov byte [ebp - 0x7e], 0xd
mov byte [ebp - 0x7d], 0xd
mov byte [ebp - 0x7c], 0xc
mov byte [ebp - 0x7b], 3
mov byte [ebp - 0x7a], 0x11
mov byte [ebp - 0x79], 0x1f
mov byte [ebp - 0x78], 0x17
mov byte [ebp - 0x77], 0xa
mov byte [ebp - 0x76], 0xa
mov byte [ebp - 0x75], 0x13
mov byte [ebp - 0x74], 0x15
mov byte [ebp - 0x73], 0x1d
mov byte [ebp - 0x72], 4
mov byte [ebp - 0x71], 0x13
mov byte [ebp - 0x70], 8
mov byte [ebp - 0x6f], 0xc
mov byte [ebp - 0x6e], 0x18
mov byte [ebp - 0x6d], 0x10
mov byte [ebp - 0x6c], 9
mov byte [ebp - 0x6b], 0x13
mov byte [ebp - 0x6a], 0
mov byte [ebp - 0x69], 0xb
mov byte [ebp - 0x68], 7
mov byte [ebp - 0x67], 9
mov byte [ebp - 0x66], 0x13
mov byte [ebp - 0x65], 0x1c
mov byte [ebp - 0x64], 3
mov byte [ebp - 0x63], 0x10
mov byte [ebp - 0x62], 5
mov byte [ebp - 0x61], 2
mov byte [ebp - 0x60], 0x14
mov byte [ebp - 0x5f], 0x13
mov byte [ebp - 0x5e], 0x12
mov byte [ebp - 0x5d], 6
mov byte [ebp - 0x5c], 0xb
mov byte [ebp - 0x5b], 0x1f
mov byte [ebp - 0x5a], 0x19
mov byte [ebp - 0x59], 0x16
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xb4]
or eax, 0x15
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xb4]
and ecx, 0x15
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xb4]
mov byte [ebp + ecx - 0x194], al
mov dword [ebp - 0x18], 2
and dword [ebp - 0x3c], 0
jmp 0x100424e7
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x5c
jae 0x100425b4
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xb4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1004252e
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xb4]
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xb4]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x100424df
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xb3]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0xb6]
movsx ecx, byte [ebp + ecx - 0x194]
or eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0xb3]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x3c]
movzx edx, byte [ebp + edx - 0xb6]
movsx edx, byte [ebp + edx - 0x194]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0xb4]
mov byte [ebp + ecx - 0x194], al
push 0x1cc0
push 0x1045
push 0x55fd
push 0
push 0x2b0b
lea eax, [ebp - 0x3c]
push eax
push 0xc30
call fcn.10042a56
add esp, 0x1c
jmp 0x100424df
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x194], 0
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.1003aadd
mov dword [ebp - 4], 3
and dword [ebp - 0x30], 0
jmp 0x100425e8
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1b
jae 0x100425fb
mov eax, dword [ebp - 0x30]
mov byte [ebp + eax - 0x194], 0
jmp 0x100425e1
mov dword [ebp - 0xf8], 0x716
mov dword [ebp - 0x144], 0x1000b540
cmp dword [ebp - 0xf8], 0xaae
jle 0x100426e0
push 0
push 0x255f
push 0
push 0x1a12
push 0x2fb
push 0
push 0xed7
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
and dword [ebp - 0x44], 0
jmp 0x1004264c
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x3382
jge 0x100426e0
and dword [ebp - 0x54], 0
jmp 0x10042666
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x8f0
jge 0x100426db
and dword [ebp - 0x4c], 0
jmp 0x1004267c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x2582
jge 0x100426d9
mov eax, dword [ebp - 0x44]
or eax, dword [ebp - 0x54]
or eax, dword [ebp - 0x4c]
cdq
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], edx
push dword [ebp - 0x130]
push dword [ebp - 0x134]
lea ecx, [ebp - 0x210]
call fcn.1000d0f0
pop ecx
pop ecx
mov dword [ebp - 0x138], eax
mov ecx, dword [ebp - 0x138]
call fcn.1002c39f
push eax
call fcn.10049f86
pop ecx
lea ecx, [ebp - 0x210]
call fcn.1002c395
jmp 0x10042675
jmp 0x1004265f
jmp 0x10042645
mov dword [ebp - 0x1b0], 0xb457
mov dword [ebp - 0x34], 0
jmp 0x100426fa
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10042710
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x140], 9
jmp 0x100426f3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x140], 0
je 0x1004272a
call fcn.10041d5e
jmp 0x10042848
mov byte [ebp - 0x25], 0
mov dword [ebp - 0xf0], 0x5fc4
mov dword [ebp - 0x158], 0x1000b59c
cmp dword [ebp - 0xf0], 0x628c
jle 0x100427f3
and dword [ebp - 0x48], 0
jmp 0x1004275f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x125
jge 0x100427f3
and dword [ebp - 0x38], 0
jmp 0x10042779
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x9d7
jge 0x100427ee
and dword [ebp - 0x40], 0
jmp 0x1004278f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x4201
jge 0x100427ec
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x40]
and eax, dword [ebp - 0x48]
cdq
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], edx
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x228]
call fcn.1000d0f0
pop ecx
pop ecx
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
call fcn.1002c39f
push eax
call fcn.10049f86
pop ecx
lea ecx, [ebp - 0x228]
call fcn.1002c395
jmp 0x10042788
jmp 0x10042772
jmp 0x10042758
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10042800
call fcn.1003795b
mov byte [ebp - 4], 4
cmp dword [ebp - 0xf0], 0x5e83
jge 0x1004281c
push dword [ebp - 0x158]
call fcn.10049f86
pop ecx
jmp 0x10042838
mov dword [ebp - 4], 3
jmp 0x10042848
mov byte [ebp - 4], 6
cmp dword [ebp - 0xf8], 0x360
jge 0x10042864
push dword [ebp - 0x144]
call fcn.10049f86
pop ecx
jmp 0x10042880
mov dword [ebp - 4], 3
jmp 0x10042890
push 0x100075d9
lea ecx, [ebp - 0x1cc]
call fcn.1003aadd
mov byte [ebp - 4], 8
mov dword [ebp - 0x16c], 0xffff
mov dword [ebp - 0x168], 0xffff
mov dword [ebp - 0x164], 0xffff
mov dword [ebp - 0x160], 0xffff
lea ecx, [ebp - 0xb5]
call fcn.1002c581
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x1f8]
call fcn.1002c584
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1d8]
call fcn.1002c530
mov byte [ebp - 4], 9
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x50], 0
jmp 0x1004291c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jg 0x10042932
mov byte [ebp - 0x26], 0
lea eax, [ebp - 0x26]
push eax
call fcn.10037968
pop ecx
jmp 0x10042915
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d8]
call fcn.1002c556
lea ecx, [ebp - 0x1cc]
call fcn.10033418
cmp eax, dword [ebp + 0xc]
je 0x1004299e
lea eax, [ebp - 0x1f0]
push eax
push 0x3f11
push 0
lea eax, [ebp - 0x14c]
push eax
push 0x63ed
call fcn.10042ec9
add esp, 0x14
lea eax, [ebp - 0x1f0]
push eax
push 0
lea eax, [ebp - 0x1cc]
push eax
push 0xbf6
push 0x344b
lea eax, [ebp - 0x14c]
push eax
call fcn.10042a2b
add esp, 0x18
jmp 0x10042941
lea eax, [ebp - 0x1cc]
push eax
mov ecx, dword [ebp + 8]
call fcn.1003274a
mov eax, dword [ebp - 0x100]
or eax, 1
mov dword [ebp - 0x100], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1cc]
call fcn.100327a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f0]
call fcn.100327a3
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret