Function at 0x1000191d
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c
mov eax, dword [0x10012004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
mov word [ebp - 0x30], 0x7243
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x30]
xor ebx, ebx
mov dword [ebp - 0x2d], 0x46657461
push edi
mov dword [ebp - 0x29], 0x57656c69
mov byte [ebp - 0x2e], 0x65
mov byte [ebp - 0x25], bl
call fcn.1000123b
push ebx
push ebx
push 3
push ebx
push 3
push 0x80000000
push esi
call eax
mov edi, eax
cmp edi, 0xffffffff
je 0x10001bf0
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x37], 0x6953656c
mov word [ebp - 0x3c], 0x6547
mov word [ebp - 0x39], 0x6946
mov word [ebp - 0x32], 0x65
mov byte [ebp - 0x3a], 0x74
mov byte [ebp - 0x33], 0x7a
call fcn.1000123b
push ebx
push edi
call eax
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x24]
mov ebx, eax
mov dword [ebp - 0x24], 0x61636f4c
mov word [ebp - 0x1c], 0x636f
mov word [ebp - 0x1f], 0x6c41
mov byte [ebp - 0x1d], 0x6c
mov byte [ebp - 0x20], 0x6c
mov byte [ebp - 0x1a], 0
call fcn.1000123b
lea ecx, [ebx + 1]
push ecx
push 0x40
call eax
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x18]
and dword [ebp - 0x98], 0
mov dword [ebp - 0x90], eax
mov word [ebp - 0x18], 0x6552
mov word [ebp - 0x12], 0x656c
mov word [ebp - 0x15], 0x4664
mov byte [ebp - 0x13], 0x69
mov byte [ebp - 0x16], 0x61
mov byte [ebp - 0x10], 0
call fcn.1000123b
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x48]
mov esi, eax
mov dword [ebp - 0x48], 0x736f6c43
mov word [ebp - 0x3f], 0x656c
mov dword [ebp - 0x44], 0x6e614865
mov byte [ebp - 0x3d], 0
mov byte [ebp - 0x40], 0x64
call fcn.1000123b
push 0
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x98]
push eax
push ebx
push dword [ebp - 0x90]
push edi
call esi
push edi
test eax, eax
jne 0x10001a72
call dword [ebp - 0x94]
jmp 0x10001bf0
call dword [ebp - 0x94]
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x58]
and dword [ebp - 0x9c], 0
mov word [ebp - 0x58], 0x6956
mov dword [ebp - 0x55], 0x6c617574
mov dword [ebp - 0x51], 0x6f6c6c41
mov byte [ebp - 0x56], 0x72
mov word [ebp - 0x4d], 0x63
call fcn.1000123b
push 4
push 0x3000
push ebx
push 0
call eax
mov esi, eax
mov dword [ebp - 0x94], esi
test ebx, ebx
je 0x10001aed
sub dword [ebp - 0x90], esi
mov ecx, esi
mov esi, dword [ebp - 0x90]
mov edi, ebx
mov edx, 0x18dd
mov al, byte [esi + ecx]
add edx, ebx
xor al, dl
mov byte [ecx], al
inc ecx
sub edi, 1
jne 0x10001ad8
mov esi, dword [ebp - 0x94]
mov ecx, dword [0x10013284]
lea edx, [ebp - 0xc]
mov dword [ebp - 0xc], 0x65656c53
mov word [ebp - 8], 0x70
call fcn.1000123b
push 0x64
call eax
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x78]
mov word [ebp - 0x78], 0x6956
mov dword [ebp - 0x75], 0x6c617574
mov dword [ebp - 0x70], 0x65746f72
mov byte [ebp - 0x76], 0x72
mov word [ebp - 0x6c], 0x7463
mov byte [ebp - 0x71], 0x50
mov byte [ebp - 0x6a], 0
call fcn.1000123b
lea ecx, [ebp - 0x9c]
push ecx
push 0x40
push ebx
push esi
call eax
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x68]
mov word [ebp - 0x60], 0x6572
xor ebx, ebx
mov word [ebp - 0x68], 0x7243
mov dword [ebp - 0x65], 0x54657461
mov word [ebp - 0x5d], 0x64
mov byte [ebp - 0x66], 0x65
mov byte [ebp - 0x5e], 0x61
mov byte [ebp - 0x61], 0x68
call fcn.1000123b
push ebx
push ebx
push ebx
push esi
push ebx
push ebx
call eax
mov esi, eax
test esi, esi
jne 0x10001b95
push 0xfffffffffffffffd
pop eax
jmp 0x10001bf2
mov ecx, dword [0x10013284]
lea edx, [ebp - 0x8c]
mov word [ebp - 0x8c], 0x6157
mov dword [ebp - 0x86], 0x6e695372
mov word [ebp - 0x89], 0x4674
mov dword [ebp - 0x81], 0x624f656c
mov byte [ebp - 0x8a], 0x69
mov byte [ebp - 0x82], 0x67
mov dword [ebp - 0x7d], 0x7463656a
mov byte [ebp - 0x87], 0x6f
mov byte [ebp - 0x79], bl
call fcn.1000123b
push 0xffffffffffffffff
push esi
call eax
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10001cb5
leave
ret