Function at 0x10001287
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x10012004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, edx
mov ebx, ecx
push edi
mov edi, dword [ebp + 0xc]
test esi, esi
jne 0x100012ac
xor eax, eax
jmp 0x10001484
test ebx, ebx
je 0x100012c2
push edi
push 0
call fcn.10001493
pop ecx
pop ecx
test eax, eax
jne 0x100013b1
push 0x33
pop eax
push 0x4b
mov word [ebp - 0x14], ax
pop eax
push 0x6c
pop ecx
push 0x64
mov word [ebp - 0x20], ax
pop eax
push 0x52
mov word [ebp - 0xe], ax
pop eax
push 0x4c
mov word [ebp - 0x1c], ax
pop eax
push 0x4e
mov word [ebp - 0x16], ax
pop eax
push 0x45
mov word [ebp - 0x1a], ax
pop eax
push 0x2e
mov word [ebp - 0xa], cx
mov word [ebp - 0xc], cx
pop ecx
mov word [ebp - 0x1e], ax
mov word [ebp - 0x18], ax
xor eax, eax
mov word [ebp - 8], ax
push 0x32
mov word [ebp - 0x10], cx
lea ecx, [ebp - 0x20]
pop eax
mov word [ebp - 0x12], ax
call fcn.10001186
cmp eax, ebx
je 0x10001334
push edi
push 0
mov edx, esi
mov ecx, eax
call fcn.10001493
pop ecx
pop ecx
test eax, eax
jne 0x100013b1
push 0x45
pop ecx
push 0x52
pop eax
push 0x4b
mov word [ebp - 0x20], ax
pop eax
push 0x42
mov word [ebp - 0x24], ax
pop eax
push 0x6c
mov word [ebp - 0x18], ax
mov word [ebp - 0x22], cx
mov word [ebp - 0x12], cx
mov word [ebp - 0x1c], cx
pop ecx
push 0x41
pop eax
push 0x4c
mov word [ebp - 0x16], ax
pop eax
push 0x64
mov word [ebp - 0x1a], ax
pop eax
push 0x53
mov word [ebp - 0xe], ax
pop eax
mov word [ebp - 0x14], ax
push 0x4e
pop eax
mov word [ebp - 0x1e], ax
push 0x2e
pop eax
mov word [ebp - 0x10], ax
xor eax, eax
mov word [ebp - 0xa], cx
mov word [ebp - 0xc], cx
lea ecx, [ebp - 0x24]
mov word [ebp - 8], ax
call fcn.10001186
cmp eax, ebx
je 0x100013b9
push edi
push 0
mov edx, esi
mov ecx, eax
call fcn.10001493
pop ecx
pop ecx
test eax, eax
je 0x100013b9
xor eax, eax
inc eax
jmp 0x10001484
push 0x4c
pop eax
push 0x64
mov byte [ebp - 0x3c], al
xor edx, edx
pop eax
push 0x74
pop ecx
xorps xmm0, xmm0
mov byte [ebp - 0x3b], al
mov byte [ebp - 0x2b], al
mov byte [ebp - 0x2c], al
mov byte [ebp - 0x31], al
lea eax, [ebp - 0x3c]
mov dword [edi], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x35], 0x65636f72
mov word [ebp - 0x3a], 0x4772
mov dword [ebp - 0x2a], 0x73736572
mov byte [ebp - 0x38], 0x65
mov byte [ebp - 0x37], cl
mov byte [ebp - 0x36], 0x50
mov dword [ebp - 0x30], 0x41657275
mov byte [ebp - 0x26], dl
movlpd qword [ebp - 0x48], xmm0
inc eax
cmp byte [eax], dl
jne 0x1000140c
push 0x6e
lea ecx, [ebp - 0x3c]
sub eax, ecx
mov word [ebp - 0x48], ax
mov word [ebp - 0x46], ax
mov eax, ecx
mov dword [ebp - 0x44], eax
pop eax
push 0x6c
pop ecx
push 0x74
mov word [ebp - 0x1c], ax
pop eax
push 0x2e
mov word [ebp - 0x1a], ax
pop eax
mov word [ebp - 0x12], ax
push 0x64
pop eax
mov word [ebp - 0x18], ax
mov word [ebp - 0x10], ax
xor eax, eax
mov word [ebp - 0xa], ax
lea eax, [ebp - 0x40]
push eax
mov word [ebp - 0xc], cx
mov word [ebp - 0xe], cx
mov word [ebp - 0x16], cx
mov word [ebp - 0x14], cx
lea ecx, [ebp - 0x1c]
push edx
call fcn.10001186
lea edx, [ebp - 0x48]
mov ecx, eax
call fcn.10001493
pop ecx
pop ecx
push edi
push 0
push esi
push ebx
call dword [ebp - 0x40]
xor eax, eax
cmp dword [edi], eax
setne al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10001cb5
leave
ret