Function at 0xd0ee59
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x44
mov eax, 0xd1627a
call fcn.00cc31ea
mov ebx, dword [ebp + 8]
and dword [ebp - 4], 0
xor ecx, ecx
inc ecx
mov dword [ebx], 0xe9a110
mov eax, 0xe9a144
mov edx, ecx
lock xadd dword [eax], edx
mov eax, 0xe9a074
mov dword [ebx + 8], eax
mov edx, eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0xc], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x10], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x14], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x18], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x1c], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x20], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x24], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x28], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x30], eax
mov esi, ecx
lock xadd dword [edx], esi
mov dword [ebx + 0x34], eax
lock xadd dword [eax], ecx
mov byte [ebp - 4], 0xc
call fcn.00d0ec28
lea eax, [ebp + 0xc]
push eax
mov ecx, ebx
call 0x9c26b8
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fa60
mov byte [ebp - 4], 0xd
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x10]
push eax
lea edi, [ebp - 0x40]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0xe
call 0x9c2700
push 0
mov ecx, eax
mov byte [ebp - 4], 0xf
call 0x9f2db7
mov ecx, edi
mov dword [ebx + 4], eax
mov byte [ebp - 4], 0xe
call fcn.009f1234
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x10]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0ef69
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fb8c
mov byte [ebp - 4], 0x10
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x10]
push eax
lea edi, [ebp - 0x40]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x11
call 0x9c2700
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.009f22ab
push eax
lea ecx, [ebx + 8]
mov byte [ebp - 4], 0x13
call fcn.009d0faf
or edi, 0xffffffff
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x14]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0xd0efe5
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x11
call fcn.009f1234
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x10]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0xd0f009
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push edi
push 0xe7fb94
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x14
call 0x9c2734
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.009f22ab
push eax
mov esi, ebx
mov byte [ebp - 4], 0x16
call fcn.00d0edea
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x14]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0xd0f06c
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x14
call fcn.009f1234
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x10]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0xd0f090
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push edi
push 0xe7fb9c
mov byte [ebp - 4], 0x17
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x10]
push eax
lea edi, [ebp - 0x40]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x18
call 0x9c2700
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.009f22ab
push eax
lea ecx, [ebx + 0x14]
mov byte [ebp - 4], 0x1a
call fcn.009d0faf
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f0fd
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x18
call fcn.009f1234
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x10]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f122
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fba8
mov byte [ebp - 4], 0x1b
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x10]
push eax
lea edi, [ebp - 0x40]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x1c
call 0x9c2700
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.009f22ab
push eax
lea ecx, [ebx + 0x18]
mov byte [ebp - 4], 0x1e
call fcn.009d0faf
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f19c
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
call fcn.009f1234
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x10]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f1c1
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fbb8
mov byte [ebp - 4], 0x1f
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x10]
push eax
lea edi, [ebp - 0x40]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x20
call 0x9c2700
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.009f22ab
push eax
lea ecx, [ebx + 0x1c]
mov byte [ebp - 4], 0x22
call fcn.009d0faf
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f23b
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x20
call fcn.009f1234
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x10]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f260
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fbc4
mov byte [ebp - 4], 0x23
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x10]
push eax
lea edi, [ebp - 0x40]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x24
call 0x9c2700
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.009f22ab
push eax
lea ecx, [ebx + 0x20]
mov byte [ebp - 4], 0x26
call fcn.009d0faf
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f2da
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x24
call fcn.009f1234
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x10]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f2ff
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fbd0
mov byte [ebp - 4], 0x27
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x10]
push eax
lea edi, [ebp - 0x40]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x28
call 0x9c2700
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.009f22ab
push eax
lea ecx, [ebx + 0x24]
mov byte [ebp - 4], 0x2a
call fcn.009d0faf
or edi, 0xffffffff
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x14]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0xd0f37b
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x28
call fcn.009f1234
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x10]
mov ecx, edi
lock xadd dword [eax], ecx
jne 0xd0f39f
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push edi
mov esi, 0xe7fbdc
push esi
mov byte [ebp - 4], 0x2b
call fcn.009d3fd4
mov dword [ebp - 0x14], eax
push edi
push esi
mov byte [ebp - 4], 0x2c
call fcn.009d3fd4
add esp, 0x10
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x2d
call 0x9c2734
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.009f48e2
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x14]
push ecx
lea edi, [ebp - 0x40]
mov esi, eax
mov byte [ebp - 4], 0x2f
call 0x9c2700
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.009f22ab
push eax
lea ecx, [ebx + 0x28]
mov byte [ebp - 4], 0x31
call fcn.009d0faf
or esi, 0xffffffff
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x18]
mov ecx, esi
lock xadd dword [eax], ecx
jne 0xd0f44c
push dword [ebp - 0x18]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2f
call fcn.009f1234
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x2e
call fcn.009c1b2e
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x2d
call fcn.009f1234
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x10]
mov ecx, esi
lock xadd dword [eax], ecx
jne 0xd0f488
push dword [ebp - 0x10]
call fcn.009d0faa
pop ecx
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x14]
mov ecx, esi
lock xadd dword [eax], ecx
jne 0xd0f4a0
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push esi
push 0xe7fbe4
mov byte [ebp - 4], 0x32
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
lea edi, [ebp - 0x50]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x33
call 0x9c2700
push 0
mov ecx, eax
mov byte [ebp - 4], 0x34
call 0x9f2db7
mov ecx, edi
mov dword [ebx + 0x2c], eax
mov byte [ebp - 4], 0x33
call fcn.009f1234
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f518
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fbec
mov byte [ebp - 4], 0x35
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
lea edi, [ebp - 0x50]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x36
call 0x9c2700
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.009f22ab
push eax
lea ecx, [ebx + 0x30]
mov byte [ebp - 4], 0x38
call fcn.009d0faf
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x18]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f592
push dword [ebp - 0x18]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x36
call fcn.009f1234
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f5b7
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fa58
mov byte [ebp - 4], 0x39
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
lea edi, [ebp - 0x50]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x3a
call 0x9c2700
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.009f22ab
push eax
lea ecx, [ebx + 0x34]
mov byte [ebp - 4], 0x3c
call fcn.009d0faf
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x18]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f631
push dword [ebp - 0x18]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x3a
call fcn.009f1234
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f656
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fbfc
mov byte [ebp - 4], 0x3d
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
lea edi, [ebp - 0x50]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x3e
call 0x9c2700
push 0
mov ecx, eax
mov byte [ebp - 4], 0x3f
call 0x9f2db7
mov ecx, edi
mov dword [ebx + 0x38], eax
mov byte [ebp - 4], 0x3e
call fcn.009f1234
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f6cf
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
push 0xe5bc45
lea ecx, [ebp - 0x30]
call 0x9f1dd6
push 0xffffffffffffffff
push 0xe7fc04
mov byte [ebp - 4], 0x40
call fcn.009d3fd4
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
lea edi, [ebp - 0x50]
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x41
call 0x9c2700
push 0
mov ecx, eax
mov byte [ebp - 4], 0x42
call 0x9f2db7
mov ecx, edi
mov dword [ebx + 0x3c], eax
mov byte [ebp - 4], 0x41
call fcn.009f1234
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0xd0f748
push dword [ebp - 0x14]
call fcn.009d0faa
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.009f1234
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.009c1b2e
mov eax, ebx
call fcn.00cc3289
ret 8