Function at 0x100b2f40
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f6815
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push esi
push edi
mov eax, dword [0x10114080]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x6f686154
lea ecx, [ebp - 0x18]
mov word [ebp - 0x14], 0x616d
mov byte [ebp - 0x12], 0
lea edx, [ecx + 1]
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b2f93
sub ecx, edx
lea eax, [ebp - 0x18]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10028220
mov dword [ebp - 4], 0
mov ecx, dword [0x1013922c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x11c]
call eax
mov edx, dword [0x1013922c]
lea esi, [ebp - 0x44]
cmp dword [ebp - 0x30], 0xf
mov edi, eax
push 0
cmova esi, dword [ebp - 0x44]
mov ecx, dword [edx]
push 0
push 0
push 0
mov eax, dword [ecx + 0x120]
mov ecx, edx
push 0
push 0x190
push 0xc
push esi
push edi
mov dword [ebp - 0x2c], edi
call eax
xorps xmm0, xmm0
mov word [ebp - 0x10], 0x41
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b3016
sub ecx, edx
lea eax, [ebp - 0x10]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10028220
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.100b41f0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x48]
cmp ecx, 0xf
jbe 0x100b3080
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3076
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b3981
push ecx
push edx
call fcn.100c2c51
add esp, 8
movq xmm0, qword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x30]
movq qword [0x1013bca4], xmm0
mov dword [0x1013bcac], esi
cmp ecx, 0xf
jbe 0x100b30ce
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b30c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b3986
push ecx
push edx
call fcn.100c2c51
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x6f686154
lea ecx, [ebp - 0x18]
mov word [ebp - 0x14], 0x616d
mov byte [ebp - 0x12], 0
lea edx, [ecx + 1]
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b3100
sub ecx, edx
lea eax, [ebp - 0x18]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10028220
mov dword [ebp - 4], 2
mov ecx, dword [0x1013922c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x11c]
call eax
mov edx, dword [0x1013922c]
lea esi, [ebp - 0x44]
cmp dword [ebp - 0x30], 0xf
mov edi, eax
push 0
cmova esi, dword [ebp - 0x44]
mov ecx, dword [edx]
push 0
push 0x80
push 0
mov eax, dword [ecx + 0x120]
mov ecx, edx
push 0
push 0x190
push 0xc
push esi
push edi
mov dword [ebp - 0x2c], edi
call eax
xorps xmm0, xmm0
mov word [ebp - 0x10], 0x41
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b3186
sub ecx, edx
lea eax, [ebp - 0x10]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10028220
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.100b41f0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x48]
cmp ecx, 0xf
jbe 0x100b31f0
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b31e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b398b
push ecx
push edx
call fcn.100c2c51
add esp, 8
movq xmm0, qword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x30]
movq qword [0x1013bc80], xmm0
mov dword [0x1013bc88], esi
cmp ecx, 0xf
jbe 0x100b323e
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3234
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b3990
push ecx
push edx
call fcn.100c2c51
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0x64726556
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], 0x616e61
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x34], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x30], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b3267
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10028220
mov dword [ebp - 4], 4
mov ecx, dword [0x1013922c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x11c]
call eax
mov edx, dword [0x1013922c]
lea esi, [ebp - 0x44]
cmp dword [ebp - 0x30], 0xf
mov edi, eax
push 0
cmova esi, dword [ebp - 0x44]
mov ecx, dword [edx]
push 0
push 0x80
push 0
mov eax, dword [ecx + 0x120]
mov ecx, edx
push 0
push 0x2bc
push 0xc
push esi
push edi
mov dword [ebp - 0x2c], edi
call eax
xorps xmm0, xmm0
mov word [ebp - 0x10], 0x41
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b32f0
sub ecx, edx
lea eax, [ebp - 0x10]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10028220
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.100b41f0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x48]
cmp ecx, 0xf
jbe 0x100b335a
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3350
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b3995
push ecx
push edx
call fcn.100c2c51
add esp, 8
movq xmm0, qword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x30]
movq qword [0x1013bc98], xmm0
mov dword [0x1013bca0], esi
cmp ecx, 0xf
jbe 0x100b33a8
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b339e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b399a
push ecx
push edx
call fcn.100c2c51
add esp, 8
mov dword [ebp - 0x20], 0x4a474b75
xor eax, eax
mov dword [ebp - 0x1c], 0x4960064a
mov dword [ebp - 0x18], 0x26555248
nop
xor byte [ebp + eax - 0x20], 0x26
inc eax
cmp eax, 0xc
jb 0x100b33c0
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x44], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b33e6
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10028220
mov dword [ebp - 4], 6
mov ecx, dword [0x1013922c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x11c]
call eax
mov edx, dword [0x1013922c]
lea esi, [ebp - 0x44]
cmp dword [ebp - 0x30], 0xf
mov edi, eax
push 0
cmova esi, dword [ebp - 0x44]
mov ecx, dword [edx]
push 0
push 0x200
push 0
mov eax, dword [ecx + 0x120]
mov ecx, edx
push 0
push 0x190
push 8
push esi
push edi
mov dword [ebp - 0x2c], edi
call eax
xorps xmm0, xmm0
mov word [ebp - 0x10], 0x41
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b3470
sub ecx, edx
lea eax, [ebp - 0x10]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10028220
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.100b41f0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x48]
cmp ecx, 0xf
jbe 0x100b34da
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b34d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b399f
push ecx
push edx
call fcn.100c2c51
add esp, 8
movq xmm0, qword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x30]
movq qword [0x1013bc8c], xmm0
mov dword [0x1013bc94], esi
cmp ecx, 0xf
jbe 0x100b3528
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b351e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b39a4
push ecx
push edx
call fcn.100c2c51
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x6f686154
lea ecx, [ebp - 0x18]
mov word [ebp - 0x14], 0x616d
mov byte [ebp - 0x12], 0
lea edx, [ecx + 1]
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b3554
sub ecx, edx
lea eax, [ebp - 0x18]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10028220
mov dword [ebp - 4], 8
mov ecx, dword [0x1013922c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x11c]
call eax
mov edx, dword [0x1013922c]
lea esi, [ebp - 0x44]
cmp dword [ebp - 0x30], 0xf
mov edi, eax
push 0
cmova esi, dword [ebp - 0x44]
mov ecx, dword [edx]
push 0
push 0x10
push 0
mov eax, dword [ecx + 0x120]
mov ecx, edx
push 0
push 0x190
push 0x10
push esi
push edi
mov dword [ebp - 0x2c], edi
call eax
xorps xmm0, xmm0
mov word [ebp - 0x10], 0x41
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b35d7
sub ecx, edx
lea eax, [ebp - 0x10]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10028220
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.100b41f0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x48]
cmp ecx, 0xf
jbe 0x100b3641
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3637
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b39a9
push ecx
push edx
call fcn.100c2c51
add esp, 8
movq xmm0, qword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x30]
movq qword [0x1013bcb0], xmm0
mov dword [0x1013bcb8], esi
cmp ecx, 0xf
jbe 0x100b368f
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3685
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b39ae
push ecx
push edx
call fcn.100c2c51
add esp, 8
mov dword [ebp - 0x20], 0x48534965
xor eax, eax
mov dword [ebp - 0x1c], 0xb544352
mov dword [ebp - 0x18], 0x4f545275
mov word [ebp - 0x14], 0x434d
mov byte [ebp - 0x12], 0x26
xor byte [ebp + eax - 0x20], 0x26
inc eax
cmp eax, 0xf
jb 0x100b36b0
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x44], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b36d6
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.10028220
mov dword [ebp - 4], 0xa
mov ecx, dword [0x1013922c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x11c]
call eax
mov edx, dword [0x1013922c]
lea esi, [ebp - 0x44]
cmp dword [ebp - 0x30], 0xf
mov edi, eax
push 0
cmova esi, dword [ebp - 0x44]
mov ecx, dword [edx]
push 0
push 0x90
push 0
mov eax, dword [ecx + 0x120]
mov ecx, edx
push 0
push 0x1f4
push 0x1c
push esi
push edi
mov dword [ebp - 0x2c], edi
call eax
xorps xmm0, xmm0
mov word [ebp - 0x10], 0x41
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b3760
sub ecx, edx
lea eax, [ebp - 0x10]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10028220
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.100b41f0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x48]
cmp ecx, 0xf
jbe 0x100b37ca
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b37c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b39b3
push ecx
push edx
call fcn.100c2c51
add esp, 8
movq xmm0, qword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x30]
movq qword [0x1013bcc8], xmm0
mov dword [0x1013bcd0], esi
cmp ecx, 0xf
jbe 0x100b3818
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b380e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b39b8
push ecx
push edx
call fcn.100c2c51
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0x64726556
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], 0x616e61
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x4c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x48], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b3841
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10028220
mov dword [ebp - 4], 0xc
mov ecx, dword [0x1013922c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x11c]
call eax
mov edx, dword [0x1013922c]
lea esi, [ebp - 0x5c]
cmp dword [ebp - 0x48], 0xf
mov edi, eax
push 0
cmova esi, dword [ebp - 0x5c]
mov ecx, dword [edx]
push 0
push 0x90
push 0
mov eax, dword [ecx + 0x120]
mov ecx, edx
push 0
push 0x2bc
push 0x1a
push esi
push edi
mov dword [ebp - 0x20], edi
call eax
xorps xmm0, xmm0
mov word [ebp - 0x10], 0x41
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x60], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b38c7
sub ecx, edx
lea eax, [ebp - 0x10]
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.10028220
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x20]
call fcn.100b41f0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x60]
cmp ecx, 0xf
jbe 0x100b392d
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3923
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b39bd
push ecx
push edx
call fcn.100c2c51
add esp, 8
movq xmm0, qword [ebp - 0x20]
mov ecx, dword [ebp - 0x48]
movq qword [0x1013bcbc], xmm0
mov dword [0x1013bcc4], esi
cmp ecx, 0xf
jbe 0x100b3970
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3966
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b39c2
push ecx
push edx
call fcn.100c2c51
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
call fcn.100c8cda
int3