Function at 0x1000b180
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100cba03
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x100e7260]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov byte [ebp - 0x85], 0
call fcn.1000a7f0
mov edi, dword [0x100f50b0]
xor ecx, ecx
mov esi, dword [0x100f50ac]
mov eax, 0x2aaaaaab
mov dword [ebp - 0x8c], ecx
add esp, 4
mov ecx, edi
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1000b322
xor ebx, ebx
mov dword [ebp - 0x90], ebx
jmp 0x1000b200
push 0xffffffffffffffff
lea eax, [ebx + esi]
mov dword [ebp - 0x70], 0xf
push 0
push eax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x74], 0
mov byte [ebp - 0x84], 0
call fcn.1000295d
mov esi, dword [ebp - 0x70]
lea eax, [ebp - 0x84]
mov edx, dword [ebp - 0x84]
lea ecx, [ebp - 0x84]
cmp esi, 0x10
mov dword [ebp - 4], 0
lea ebx, [ebp - 0x84]
cmovae eax, edx
cmovae ecx, edx
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x74]
add eax, ecx
cmp esi, 0x10
cmovae ebx, edx
cmp ebx, eax
je 0x1000b2a1
mov edi, eax
xor ecx, ecx
sub edi, ebx
xor esi, esi
cmp ebx, eax
cmova edi, ecx
test edi, edi
je 0x1000b2a1
lea esp, [esp]
movsx eax, byte [ebx + esi]
push eax
call fcn.1003aba7
mov ecx, dword [ebp - 0x94]
add esp, 4
mov byte [ecx + esi], al
inc esi
cmp esi, edi
jne 0x1000b280
mov edx, dword [ebp - 0x84]
mov esi, dword [0x100f50ac]
lea eax, [ebp - 0x84]
mov ebx, dword [ebp - 0x90]
lea ecx, [ebx + esi]
cmp ecx, eax
je 0x1000b2d0
push 0xffffffffffffffff
push 0
push eax
call fcn.1000295d
mov edx, dword [ebp - 0x84]
mov esi, dword [0x100f50ac]
cmp dword [ebp - 0x70], 0x10
mov dword [ebp - 4], 0xffffffff
jb 0x1000b2ec
push edx
call fcn.1003a126
mov esi, dword [0x100f50ac]
add esp, 4
mov edi, dword [0x100f50b0]
mov eax, 0x2aaaaaab
inc dword [ebp - 0x8c]
mov ecx, edi
sub ecx, esi
add ebx, 0x18
imul ecx
mov dword [ebp - 0x90], ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x8c], eax
jb 0x1000b200
sub edi, esi
mov eax, 0x2aaaaaab
imul edi
xor ecx, ecx
sar edx, 2
mov eax, edx
mov dword [ebp - 0x8c], ecx
shr eax, 0x1f
add eax, edx
je 0x1000b611
lea ebx, [ebp - 0x20]
mov dword [ebp - 0x17], 0x657865
mov dword [ebp - 0x1b], 0x2e746e67
lea ecx, [ebx + 1]
mov dword [ebp - 0x20], 0x65736975
mov byte [ebp - 0x1c], 0x61
mov al, byte [ebx]
inc ebx
test al, al
jne 0x1000b362
sub ebx, ecx
xor edi, edi
mov dword [ebp - 0x90], edi
push 0xffffffffffffffff
lea eax, [edi + esi]
mov dword [ebp - 0x58], 0xf
push 0
push eax
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x5c], 0
mov byte [ebp - 0x6c], 0
call fcn.1000295d
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
mov edi, dword [ebp - 0x5c]
mov edx, ebx
cmovae ecx, dword [ebp - 0x6c]
cmp edi, ebx
mov dword [ebp - 4], 1
cmovb edx, edi
test edx, edx
je 0x1000b410
lea esi, [ebp - 0x20]
sub edx, 4
jb 0x1000b3d1
lea ecx, [ecx]
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x1000b3d6
add ecx, 4
add esi, 4
sub edx, 4
jae 0x1000b3c0
cmp edx, 0xfffffffc
je 0x1000b40a
mov al, byte [ecx]
cmp al, byte [esi]
jne 0x1000b403
cmp edx, 0xfffffffd
je 0x1000b40a
mov al, byte [ecx + 1]
cmp al, byte [esi + 1]
jne 0x1000b403
cmp edx, 0xfffffffe
je 0x1000b40a
mov al, byte [ecx + 2]
cmp al, byte [esi + 2]
jne 0x1000b403
cmp edx, 0xffffffff
je 0x1000b40a
mov al, byte [ecx + 3]
cmp al, byte [esi + 3]
je 0x1000b40a
sbb eax, eax
or eax, 1
jmp 0x1000b40c
xor eax, eax
test eax, eax
jne 0x1000b422
cmp edi, ebx
jae 0x1000b419
or eax, 0xffffffff
jmp 0x1000b420
xor eax, eax
cmp edi, ebx
setne al
test eax, eax
sete al
test al, al
jne 0x1000b5fc
lea esi, [ebp - 0x30]
mov dword [ebp - 0x2d], 0x68637461
mov dword [ebp - 0x25], 0x657865
lea ecx, [esi + 1]
mov dword [ebp - 0x29], 0x2e676f64
mov word [ebp - 0x2f], 0x7769
mov byte [ebp - 0x30], 0x75
mov al, byte [esi]
inc esi
test al, al
jne 0x1000b452
sub esi, ecx
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
mov eax, esi
cmovae ecx, dword [ebp - 0x6c]
cmp edi, esi
cmovb eax, edi
push eax
lea eax, [ebp - 0x30]
push eax
push ecx
call fcn.100039df
add esp, 0xc
test eax, eax
jne 0x1000b491
cmp edi, esi
jae 0x1000b488
or eax, 0xffffffff
jmp 0x1000b48f
xor eax, eax
cmp edi, esi
setne al
test eax, eax
sete al
test al, al
jne 0x1000b5fc
lea esi, [ebp - 0x54]
mov word [ebp - 0x46], 0x652e
mov word [ebp - 0x4e], 0x6f69
lea ecx, [esi + 1]
mov dword [ebp - 0x54], 0x65737470
mov word [ebp - 0x4b], 0x6761
mov word [ebp - 0x43], 0x65
mov byte [ebp - 0x44], 0x78
mov word [ebp - 0x50], 0x7373
mov word [ebp - 0x48], 0x746e
mov byte [ebp - 0x4c], 0x6e
mov byte [ebp - 0x49], 0x65
lea esp, [esp]
mov al, byte [esi]
inc esi
test al, al
jne 0x1000b4e0
sub esi, ecx
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
mov eax, esi
cmovae ecx, dword [ebp - 0x6c]
cmp edi, esi
cmovb eax, edi
push eax
lea eax, [ebp - 0x54]
push eax
push ecx
call fcn.100039df
add esp, 0xc
test eax, eax
jne 0x1000b51f
cmp edi, esi
jae 0x1000b516
or eax, 0xffffffff
jmp 0x1000b51d
xor eax, eax
cmp edi, esi
setne al
test eax, eax
sete al
test al, al
jne 0x1000b5fc
lea esi, [ebp - 0x40]
mov word [ebp - 0x3a], 0x6468
mov dword [ebp - 0x3f], 0x74617774
lea ecx, [esi + 1]
mov dword [ebp - 0x35], 0x657865
mov word [ebp - 0x37], 0x2e67
mov byte [ebp - 0x40], 0x70
mov byte [ebp - 0x3b], 0x63
mov byte [ebp - 0x38], 0x6f
mov al, byte [esi]
inc esi
test al, al
jne 0x1000b556
sub esi, ecx
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
mov eax, esi
cmovae ecx, dword [ebp - 0x6c]
cmp edi, esi
cmovb eax, edi
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
call fcn.100039df
add esp, 0xc
test eax, eax
jne 0x1000b595
cmp edi, esi
jae 0x1000b58c
or eax, 0xffffffff
jmp 0x1000b593
xor eax, eax
cmp edi, esi
setne al
test eax, eax
sete al
test al, al
jne 0x1000b5fc
cmp dword [ebp - 0x58], 0x10
mov dword [ebp - 4], 0xffffffff
jb 0x1000b5b4
push dword [ebp - 0x6c]
call fcn.1003a126
add esp, 4
mov ecx, dword [0x100f50b0]
mov eax, 0x2aaaaaab
mov esi, dword [0x100f50ac]
sub ecx, esi
mov edi, dword [ebp - 0x90]
inc dword [ebp - 0x8c]
add edi, 0x18
imul ecx
mov dword [ebp - 0x90], edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x8c], eax
jb 0x1000b373
mov bl, byte [ebp - 0x85]
jmp 0x1000b613
cmp dword [ebp - 0x58], 0x10
mov bl, 1
jb 0x1000b613
push dword [ebp - 0x6c]
call fcn.1003a126
add esp, 4
jmp 0x1000b613
mov bl, cl
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003d588
mov esp, ebp
pop ebp
ret