Function at 0x1000239c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x174
mov eax, 0x10072036
call fcn.1003bfa0
mov ebx, ecx
mov dword [ebp - 0x138], ebx
call fcn.10036513
push 0
push 0x989680
push edx
push eax
call fcn.10071450
push 0x10
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], edx
pop edi
cmp byte [ebx], 0
je 0x10002aad
cmp dword [0x10099bc0], 0
je 0x10002ac4
mov cl, 0x18
mov dword [ebp - 0xd8], 0x74774b18
mov word [ebp - 0xd4], 0x77
xor edx, edx
xor cl, byte [ebp + edx - 0xd7]
mov byte [ebp + edx - 0xd7], cl
inc edx
cmp edx, 4
jae 0x10002418
mov cl, byte [ebp - 0xd8]
jmp 0x100023fc
lea eax, [ebp - 0xd7]
mov byte [ebp - 0xd3], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.10004179
and dword [ebp - 4], 0
mov al, byte [ebx + 1]
cmp al, 1
jne 0x100024ee
cmp byte [ebx + 3], 0
jne 0x100024a0
mov cl, 0x70
mov dword [ebp - 0xe4], 0x2153d70
mov dword [ebp - 0xe0], 0x1e111813
xor edx, edx
mov word [ebp - 0xdc], 4
xor cl, byte [ebp + edx - 0xe3]
mov byte [ebp + edx - 0xe3], cl
inc edx
cmp edx, 8
jae 0x10002480
mov cl, byte [ebp - 0xe4]
jmp 0x10002464
lea eax, [ebp - 0xe3]
mov byte [ebp - 0xdb], 0
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0xe3]
jmp 0x10002542
cmp al, 1
jne 0x100024ee
cmp byte [ebx + 3], 0
jle 0x1000254b
movaps xmm0, xmmword [0x1008a1a0]
xor edx, edx
movups xmmword [ebp - 0x12c], xmm0
mov cl, byte [ebp - 0x12c]
xor byte [ebp + edx - 0x12b], cl
inc edx
cmp edx, 0xe
jb 0x100024be
lea eax, [ebp - 0x12b]
mov byte [ebp - 0x11d], 0
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x12b]
jmp 0x10002542
cmp byte [ebx + 3], 0
jle 0x1000254b
mov dl, 0x51
mov dword [ebp - 0xd0], 0x23300151
mov word [ebp - 0xcc], 0x2825
xor ecx, ecx
mov byte [ebp - 0xca], 0
xor byte [ebp + ecx - 0xcf], dl
inc ecx
cmp ecx, 5
jae 0x10002527
mov dl, byte [ebp - 0xd0]
jmp 0x10002512
lea eax, [ebp - 0xcf]
mov byte [ebp - 0xca], 0
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0xcf]
push eax
lea ecx, [ebp - 0x28]
call fcn.100040e3
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.100033f0
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], edi
jb 0x1000256d
mov eax, dword [eax]
push eax
mov dl, 0x2f
mov dword [ebp - 0xf0], 0xf5c0a2f
mov dword [ebp - 0xec], 0x5c0a0f53
xor ecx, ecx
mov byte [ebp - 0xe8], 0
xor byte [ebp + ecx - 0xef], dl
inc ecx
cmp ecx, 7
jae 0x100025a2
mov dl, byte [ebp - 0xf0]
jmp 0x1000258d
sub esp, 0x18
mov byte [ebp - 0xe8], 0
lea eax, [ebp - 0xef]
mov ecx, esp
push eax
call fcn.10004179
lea eax, [ebp - 0xb8]
push eax
call fcn.10003c43
add esp, 0x24
push 0
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 3
call fcn.1000402e
cmp byte [0x10099bdb], 0
mov edi, dword [0x10099bc0]
je 0x1000261e
mov ecx, 0x10b8134
call fcn.1000dfae
mov esi, eax
test esi, esi
je 0x1000261e
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push esi
call ebx
test eax, eax
jne 0x1000261e
push 4
add esi, 0x6e8
push esi
call ebx
test eax, eax
jne 0x1000261e
mov al, byte [esi]
mov byte [edi + 0x3c], al
cmp byte [0x10099bdb], 0
movzx eax, byte [edi + 0x3c]
mov ebx, dword [0x10099bc0]
push eax
je 0x10002680
mov ecx, 0x10b8134
call fcn.1000dfae
mov esi, eax
test esi, esi
je 0x10002680
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002680
push 4
lea edi, [esi + 0x6bc]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002680
cmp dword [esi + 0x6d0], 0x10
jb 0x1000266d
mov edi, dword [edi]
lea eax, [ebx + 0x20]
cmp dword [eax + 0x14], 0x10
jb 0x10002678
mov eax, dword [eax]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10
lea eax, [ebx + 0x20]
pop edi
cmp dword [eax + 0x14], edi
jb 0x1000268d
mov eax, dword [eax]
movaps xmm0, xmmword [0x1008ae80]
xor ebx, ebx
push eax
movups xmmword [ebp - 0x134], xmm0
mov dword [ebp - 0x124], 0x1554514b
mov ecx, ebx
mov byte [ebp - 0x120], bl
mov al, byte [ebp + ecx - 0x133]
xor al, byte [ebp - 0x134]
mov byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0x13
jb 0x100026b0
sub esp, 0x18
mov byte [ebp - 0x120], bl
lea eax, [ebp - 0x133]
mov ecx, esp
push eax
call fcn.10004179
lea eax, [ebp - 0xa0]
push eax
call fcn.10003c43
add esp, 0x24
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 4
push eax
call fcn.10002aca
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], edi
jb 0x1000270b
mov eax, dword [eax]
push eax
mov dl, 0x4d
mov dword [ebp - 0xbc], 0x3e684d
mov ecx, ebx
xor byte [ebp + ecx - 0xbb], dl
inc ecx
cmp ecx, 2
jae 0x1000272f
mov dl, byte [ebp - 0xbc]
jmp 0x1000271a
sub esp, 0x18
mov byte [ebp - 0xb9], bl
lea eax, [ebp - 0xbb]
mov ecx, esp
push eax
call fcn.10004179
lea eax, [ebp - 0x88]
push eax
call fcn.10003c43
add esp, 0x20
push ebx
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 7
call fcn.1000402e
lea eax, [ebp - 0x134]
push eax
call fcn.10002da8
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], edi
jb 0x1000277e
mov eax, dword [eax]
push eax
mov dl, 0x28
mov dword [ebp - 0xc0], 0x5b0d28
mov ecx, ebx
xor byte [ebp + ecx - 0xbf], dl
inc ecx
cmp ecx, 2
jae 0x100027a2
mov dl, byte [ebp - 0xc0]
jmp 0x1000278d
sub esp, 0x18
mov byte [ebp - 0xbd], bl
lea eax, [ebp - 0xbf]
mov ecx, esp
push eax
call fcn.10004179
lea eax, [ebp - 0x70]
push eax
call fcn.10003c43
add esp, 0x20
push ebx
push 1
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0xa
call fcn.1000402e
mov ebx, dword [ebp - 0x138]
lea eax, [ebp - 0x110]
push eax
mov ecx, ebx
call fcn.1000308c
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], edi
jb 0x100027f6
mov eax, dword [eax]
push eax
mov dl, 0x6b
mov dword [ebp - 0xc4], 0x184e6b
xor ecx, ecx
xor byte [ebp + ecx - 0xc3], dl
inc ecx
cmp ecx, 2
jae 0x1000281a
mov dl, byte [ebp - 0xc4]
jmp 0x10002805
sub esp, 0x18
mov byte [ebp - 0xc1], 0
lea eax, [ebp - 0xc3]
mov ecx, esp
push eax
call fcn.10004179
lea eax, [ebp - 0x58]
push eax
call fcn.10003c43
add esp, 0x20
push 0
push 1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xd
call fcn.1000402e
lea eax, [ebp - 0x134]
mov ecx, ebx
push eax
call fcn.10003246
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], edi
jb 0x1000286a
mov eax, dword [eax]
push eax
mov dl, 0x5d
mov dword [ebp - 0xc8], 0x2e785d
xor ecx, ecx
xor byte [ebp + ecx - 0xc7], dl
inc ecx
cmp ecx, 2
jae 0x1000288e
mov dl, byte [ebp - 0xc8]
jmp 0x10002879
sub esp, 0x18
mov byte [ebp - 0xc5], 0
lea eax, [ebp - 0xc7]
mov ecx, esp
push eax
call fcn.10004179
lea eax, [ebp - 0x40]
push eax
call fcn.10003c43
add esp, 0x20
lea ecx, [ebp - 0x134]
push 0
push 1
call fcn.1000402e
push 0x48
lea eax, [ebp - 0x180]
push 0
push eax
call fcn.100539e0
add esp, 0xc
mov dword [ebp - 0xfc], 0x4b484f47
cmp dword [ebp - 0xa4], edi
lea eax, [ebp - 0xb8]
xorps xmm0, xmm0
mov word [ebp - 0xf8], 0x49
cmovae eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x8c], edi
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0xa0]
cmovae eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x74], edi
mov dword [ebp - 0x17c], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x178], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
cmp dword [ebp - 0x5c], edi
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x70]
cmovae eax, dword [ebp - 0x70]
cmp dword [ebp - 0x44], edi
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
cmp dword [ebp - 0x2c], edi
movlpd qword [ebp - 0x170], xmm0
movaps xmm0, xmmword [0x1008ade0]
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
xor edx, edx
movups xmmword [ebp - 0x11c], xmm0
mov ecx, edx
mov dword [ebp - 0x15c], eax
movaps xmm0, xmmword [0x1008a770]
movups xmmword [ebp - 0x10c], xmm0
mov al, byte [ebp + ecx - 0x11b]
xor al, byte [ebp - 0x11c]
mov byte [ebp + ecx - 0x11b], al
inc ecx
cmp ecx, 0x24
jb 0x1000299c
movaps xmm0, xmmword [0x1008afb0]
lea eax, [ebp - 0x11b]
mov dword [ebp - 0x158], eax
mov ecx, edx
movsx eax, byte [ebx + 3]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], 8
movups xmmword [ebp - 0x118], xmm0
mov dword [ebp - 0x108], 0x5a616f40
mov dword [ebp - 0x104], 0x785f784d
mov dword [ebp - 0x100], 0x785f784d
mov word [ebp - 0xfc], 0x1508
mov byte [ebp - 0xfa], dl
mov al, byte [ebp + ecx - 0x117]
xor al, byte [ebp - 0x118]
mov byte [ebp + ecx - 0x117], al
inc ecx
cmp ecx, 0x1d
jb 0x10002a13
lea eax, [ebp - 0x117]
mov byte [ebp - 0xfa], dl
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x148], eax
call fcn.10032a19
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.1000402e
push 0
push 1
lea ecx, [ebp - 0x58]
call fcn.1000402e
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.1000402e
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.1000402e
push 0
push 1
lea ecx, [ebp - 0xa0]
call fcn.1000402e
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.1000402e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push 0
push 1
call fcn.1000402e
jmp 0x10002ab4
xor ecx, ecx
call fcn.10032a19
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100023cf
call fcn.1003bf4a
ret