Function at 0x10018e10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x2828
call fcn.10026f30
mov eax, dword [0x100695e8]
xor eax, esp
mov dword [esp + 0x2824], eax
mov eax, dword [esp + 0x2834]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x2844]
push edi
mov dword [0x1006af90], eax
mov eax, dword [esp + 0x2840]
push 0x3ff
mov dword [0x1006af94], eax
lea eax, [esp + 0x1839]
push 0
push eax
mov dword [0x1006af8c], esi
mov byte [esp + 0x1840], 0
call fcn.100275b0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalFree]
add esp, 0xc
test esi, esi
je 0x10018ea7
mov ebp, dword [esi]
test ebp, ebp
je 0x10018ea7
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0x1838]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0x839]
push 0
push eax
mov byte [esp + 0x840], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x10018ef1
mov ebp, dword [esi]
test ebp, ebp
je 0x10018ef1
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0x838]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0x2439]
push 0
push eax
mov byte [esp + 0x2440], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x10018f3b
mov ebp, dword [esi]
test ebp, ebp
je 0x10018f3b
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0x2438]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0x1c39]
push 0
push eax
mov byte [esp + 0x1c40], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x10018f85
mov ebp, dword [esi]
test ebp, ebp
je 0x10018f85
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0x1c38]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0x1439]
push 0
push eax
mov byte [esp + 0x1440], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x10018fcf
mov ebp, dword [esi]
test ebp, ebp
je 0x10018fcf
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0x1438]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0xc39]
push 0
push eax
mov byte [esp + 0xc40], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x10019019
mov ebp, dword [esi]
test ebp, ebp
je 0x10019019
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0xc38]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0x439]
push 0
push eax
mov byte [esp + 0x440], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x10019063
mov ebp, dword [esi]
test ebp, ebp
je 0x10019063
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0x438]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0x2039]
push 0
push eax
mov byte [esp + 0x2040], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x100190ad
mov ebp, dword [esi]
test ebp, ebp
je 0x100190ad
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0x2038]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0x1039]
push 0
push eax
mov byte [esp + 0x1040], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x100190f7
mov ebp, dword [esi]
test ebp, ebp
je 0x100190f7
lea eax, [ebp + 4]
push eax
lea eax, [esp + 0x1038]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [ebp]
push ebp
mov dword [eax], ecx
call ebx
mov esi, dword [0x1006af8c]
push 0x3ff
lea eax, [esp + 0x39]
push 0
push eax
mov byte [esp + 0x40], 0
call fcn.100275b0
add esp, 0xc
test esi, esi
je 0x10019131
mov esi, dword [esi]
test esi, esi
je 0x10019131
lea eax, [esi + 4]
push eax
lea eax, [esp + 0x38]
push eax
call edi
mov eax, dword [0x1006af8c]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call ebx
mov dword [esp + 0x24], 0x70757472
mov dword [esp + 0x1c], 0x656d6f68
mov dword [esp + 0x20], 0x6174732b
mov byte [esp + 0x28], 0
lea ecx, [esp + 0x1c]
lea eax, [esp + 0x1834]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10019180
test dl, dl
je 0x1001917c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10019180
add eax, 2
add ecx, 2
test dl, dl
jne 0x10019160
xor eax, eax
jmp 0x10019185
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov byte [esp + 0x14], bl
mov word [esp + 0x20], 0x6c75
mov word [esp + 0x25], 0x6165
mov word [esp + 0x1d], 0x6665
mov word [esp + 0x22], 0x5f74
mov word [esp + 0x28], 0x6863
mov byte [esp + 0x2a], 0
mov byte [esp + 0x27], 0x72
mov byte [esp + 0x24], 0x73
mov byte [esp + 0x1c], 0x64
mov byte [esp + 0x1f], 0x61
lea ecx, [esp + 0x1c]
lea eax, [esp + 0x834]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100191f5
test dl, dl
je 0x100191f1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100191f5
add eax, 2
add ecx, 2
test dl, dl
jne 0x100191d5
xor eax, eax
jmp 0x100191fa
sbb eax, eax
or eax, 1
test eax, eax
sete al
mov byte [esp + 0x18], al
test bl, bl
jne 0x1001920f
test al, al
je 0x10019310
call fcn.10008750
lea eax, [esp + 0x1c]
push eax
sub esp, 0x18
lea eax, [esp + 0x50]
mov ecx, esp
push eax
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], 0
mov byte [esp + 0x3c], 0
call fcn.1000e840
sub esp, 0x18
lea eax, [esp + 0x1068]
mov ecx, esp
push eax
call fcn.1000e840
sub esp, 0x18
lea eax, [esp + 0x2080]
mov ecx, esp
push eax
call fcn.1000e840
sub esp, 0x18
lea eax, [esp + 0x498]
mov ecx, esp
push eax
call fcn.1000e840
sub esp, 0x18
lea eax, [esp + 0xcb0]
mov ecx, esp
push eax
call fcn.1000e840
sub esp, 0x18
lea eax, [esp + 0x14c8]
mov ecx, esp
push eax
call fcn.1000e840
sub esp, 0x18
lea eax, [esp + 0x1ce0]
mov ecx, esp
push eax
call fcn.1000e840
sub esp, 0x18
lea eax, [esp + 0x24f8]
mov ecx, esp
push eax
call fcn.1000e840
push dword [esp + 0xdc]
push dword [esp + 0xdc]
call fcn.10008a50
add esp, 0xb4
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x3c]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.1000e3d0
call fcn.10016030
add esp, 0x18
cmp dword [esp + 0x30], 0x10
jb 0x10019310
push dword [esp + 0x1c]
call fcn.1002501c
add esp, 4
mov ecx, dword [esp + 0x2834]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10026aaf
add esp, 0x2828
ret