Function at 0x1000fe90
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100aa966
mov eax, dword fs:[0]
push eax
sub esp, 0x9c
push ebx
push esi
push edi
mov eax, dword [0x100d6084]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0x14]
sub edx, dword [esi + 0x10]
lea eax, [ecx + 1]
cmp eax, edx
jbe 0x1000fed1
xor bl, bl
jmp 0x1000fed7
mov eax, dword [esi + 0x10]
mov bl, byte [ecx + eax]
lea edx, [ecx + 1]
mov dword [esi + 8], edx
lea eax, [edx + 4]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
cmp eax, ecx
jbe 0x1000feee
xor edi, edi
jmp 0x1000fef4
mov eax, dword [esi + 0x10]
mov edi, dword [edx + eax]
add edx, 4
mov dword [esi + 8], edx
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 4]
cmp eax, ecx
jbe 0x1000ff0b
xor ecx, ecx
jmp 0x1000ff11
mov eax, dword [esi + 0x10]
mov ecx, dword [edx + eax]
lea eax, [edx + 4]
mov dword [ebp - 0x10], ecx
mov dword [esi + 8], eax
mov eax, dword [0x100db3b8]
test eax, eax
je 0x1000ff5f
cmp bl, 1
je 0x1000ff73
cmp bl, 2
je 0x1000ff73
mov ecx, dword [0x100db3c0]
mov esi, dword [ebp - 0x10]
cmp bl, 3
je 0x1000ff40
cmp bl, 4
jne 0x1000ff5f
mov eax, dword [eax + 0x7c]
test eax, eax
je 0x1000ff55
push esi
mov ecx, eax
call fcn.10062220
mov ecx, dword [0x100db3c0]
test ecx, ecx
je 0x1000ff5f
push esi
call fcn.10023390
movzx eax, bl
dec eax
cmp eax, 3
ja case.default.0x1000ff6c
jmp dword [eax*4 + 0x100101c8]
mov edx, dword [eax + 0x7c]
test edx, edx
je 0x1000ff87
push ecx
mov ecx, edx
call fcn.10062130
mov eax, dword [0x100db3b8]
mov ecx, dword [0x100db3c0]
test ecx, ecx
je 0x1000ff33
mov esi, dword [ebp - 0x10]
push esi
call fcn.10023310
mov eax, dword [0x100db3b8]
mov ecx, dword [0x100db3c0]
jmp 0x1000ff36
movaps xmm0, xmmword [0x100c9170]
xor ecx, ecx
push edi
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x2e7a6669
mov dword [ebp - 0x34], 0x667d6f4d
mov word [ebp - 0x30], 0x20
nop dword [eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x18
jb 0x1000ffd0
sub esp, 0x18
mov byte [ebp - 0x2f], 0
lea eax, [ebp - 0x47]
mov ecx, esp
push eax
call fcn.10002940
lea eax, [ebp - 0x78]
push eax
call fcn.1000f610
add esp, 0x20
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 0x10
jb 0x1001000a
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10002940
mov edx, 0xff6565ff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.100102f0
lea ecx, [ebp - 0x2c]
call fcn.100022f0
lea ecx, [ebp - 0x78]
jmp 0x100101ae
movaps xmm0, xmmword [str._wTHOe]
xor ecx, ecx
push edi
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0x53485a78
mov word [ebp - 0x18], 0x15
nop
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0x14
jb 0x10010050
sub esp, 0x18
mov byte [ebp - 0x17], 0
lea eax, [ebp - 0x2b]
mov ecx, esp
push eax
call fcn.10002940
lea eax, [ebp - 0x48]
push eax
call fcn.1000f610
add esp, 0x20
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
jb 0x1001008a
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x78]
call fcn.10002940
mov byte [ebp - 4], 3
mov edx, 0xffff3b3b
lea ecx, [ebp - 0x78]
call fcn.100102f0
lea ecx, [ebp - 0x78]
call fcn.100022f0
lea ecx, [ebp - 0x48]
jmp 0x100101ae
movaps xmm0, xmmword [0x100c8d70]
xor ecx, ecx
push edi
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0xf020f2c
mov dword [ebp - 0x18], 0x400b0d00
mov byte [ebp - 0x14], 0
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0x17
jb 0x100100d4
sub esp, 0x18
mov byte [ebp - 0x14], 0
lea eax, [ebp - 0x2b]
mov ecx, esp
push eax
call fcn.10002940
lea eax, [ebp - 0x48]
push eax
call fcn.1000f610
add esp, 0x20
mov dword [ebp - 4], 4
cmp dword [eax + 0x14], 0x10
jb 0x1001010e
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x78]
call fcn.10002940
mov byte [ebp - 4], 5
mov edx, 0xff6565ff
jmp 0x1001009c
movaps xmm0, xmmword [0x100c92a0]
xor ecx, ecx
push edi
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0x3f74727f
mov byte [ebp - 0x4c], 0
nop
mov al, byte [ebp - 0x60]
xor byte [ebp + ecx - 0x5f], al
inc ecx
cmp ecx, 0x13
jb 0x10010140
sub esp, 0x18
mov byte [ebp - 0x4c], 0
lea eax, [ebp - 0x5f]
mov ecx, esp
push eax
call fcn.10002940
lea eax, [ebp - 0xa8]
push eax
call fcn.1000f610
add esp, 0x20
mov dword [ebp - 4], 6
cmp dword [eax + 0x14], 0x10
jb 0x1001017d
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x90]
call fcn.10002940
mov edx, 0xffff3b3b
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
call fcn.100102f0
lea ecx, [ebp - 0x90]
call fcn.100022f0
lea ecx, [ebp - 0xa8]
call fcn.100022f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret