Function at 0x1001ea30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x10218be0
push 0x10040d80
mov eax, dword fs:[0]
push eax
sub esp, 0x80
push ebx
push esi
push edi
mov eax, dword [0x1021b040]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 4], 0
jmp 0x1001ea7f
jmp 0x1001ea91
jmp 0x1001eaa3
jmp 0x1001eab5
mov dl, 0x29
mov dword [ebp - 0x84], 0x10511929
mov dword [ebp - 0x80], 0x10191019
mov dword [ebp - 0x7c], 0x191019
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0xa
jae 0x1001eaf2
mov al, byte [ebp + ecx - 0x83]
xor al, dl
mov byte [ebp + ecx - 0x83], al
inc ecx
mov dl, byte [ebp - 0x84]
jmp 0x1001ead1
mov byte [ebp - 0x79], 0
mov dl, 0x40
mov dword [ebp - 0x54], 0x72387040
mov dword [ebp - 0x50], 0x74757077
mov word [ebp - 0x4c], 0x78
xor ecx, ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 8
jae 0x1001eb26
mov al, byte [ebp + ecx - 0x53]
xor al, dl
mov byte [ebp + ecx - 0x53], al
inc ecx
mov dl, byte [ebp - 0x54]
jmp 0x1001eb0e
mov byte [ebp - 0x4b], 0
lea ecx, [ebp - 0x83]
call fcn.100143f0
mov esi, eax
lea ecx, [ebp - 0x53]
call fcn.100143f0
add eax, dword [0x1021cd40]
push 0
push eax
mov ecx, esi
call fcn.1003b440
add esp, 8
jmp 0x1001eb64
jmp 0x1001eb76
jmp 0x1001eb88
jmp 0x1001eb9a
jmp 0x1001ebac
mov dl, 0x70
mov dword [ebp - 0x40], 0x49084070
mov word [ebp - 0x3c], 0x40
xor ecx, ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 4
jae 0x1001ebd5
mov al, byte [ebp + ecx - 0x3f]
xor al, dl
mov byte [ebp + ecx - 0x3f], al
inc ecx
mov dl, byte [ebp - 0x40]
jmp 0x1001ebbd
mov byte [ebp - 0x3b], 0
mov dl, 0x59
mov dword [ebp - 0x60], 0x6b216959
mov dword [ebp - 0x5c], 0x6d6c696e
mov word [ebp - 0x58], 0x61
xor ecx, ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 8
jae 0x1001ec09
mov al, byte [ebp + ecx - 0x5f]
xor al, dl
mov byte [ebp + ecx - 0x5f], al
inc ecx
mov dl, byte [ebp - 0x60]
jmp 0x1001ebf1
mov byte [ebp - 0x57], 0
lea ecx, [ebp - 0x3f]
call fcn.100143f0
mov ebx, eax
lea ecx, [ebp - 0x5f]
call fcn.100143f0
mov ecx, dword [0x1021cd40]
add ecx, 4
add ecx, eax
push 0
push ecx
mov cl, bl
call fcn.1003b520
add esp, 8
jmp 0x1001ec49
jmp 0x1001ec5b
jmp 0x1001ec6d
jmp 0x1001ec7f
jmp 0x1001ec91
mov dl, 0x1a
mov dword [ebp - 0x90], 0x23622a1a
mov dword [ebp - 0x8c], 0x232a232a
mov dword [ebp - 0x88], 0x2a232a
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0xa
jae 0x1001ecd4
mov al, byte [ebp + ecx - 0x8f]
xor al, dl
mov byte [ebp + ecx - 0x8f], al
inc ecx
mov dl, byte [ebp - 0x90]
jmp 0x1001ecb3
mov byte [ebp - 0x85], 0
mov dl, 0x30
mov dword [ebp - 0x6c], 0x3480030
mov dword [ebp - 0x68], 0x7010072
mov word [ebp - 0x64], 2
xor ecx, ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 8
jae 0x1001ed0b
mov al, byte [ebp + ecx - 0x6b]
xor al, dl
mov byte [ebp + ecx - 0x6b], al
inc ecx
mov dl, byte [ebp - 0x6c]
jmp 0x1001ecf3
mov byte [ebp - 0x63], 0
lea ecx, [ebp - 0x8f]
call fcn.100143f0
mov esi, eax
lea ecx, [ebp - 0x6b]
call fcn.100143f0
add eax, dword [0x1021e088]
push 0
push eax
mov ecx, esi
call fcn.1003b440
add esp, 8
jmp 0x1001ed49
jmp 0x1001ed5b
jmp 0x1001ed6d
jmp 0x1001ed7f
jmp 0x1001ed91
mov dl, 0x14
mov dword [ebp - 0x48], 0x2d6c2414
mov word [ebp - 0x44], 0x24
xor ecx, ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 4
jae 0x1001edba
mov al, byte [ebp + ecx - 0x47]
xor al, dl
mov byte [ebp + ecx - 0x47], al
inc ecx
mov dl, byte [ebp - 0x48]
jmp 0x1001eda2
mov byte [ebp - 0x43], 0
mov dl, 4
mov dword [ebp - 0x78], 0x377c3404
mov dword [ebp - 0x74], 0x33353446
mov word [ebp - 0x70], 0x36
xor ecx, ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 8
jae 0x1001edee
mov al, byte [ebp + ecx - 0x77]
xor al, dl
mov byte [ebp + ecx - 0x77], al
inc ecx
mov dl, byte [ebp - 0x78]
jmp 0x1001edd6
mov byte [ebp - 0x6f], 0
lea ecx, [ebp - 0x47]
call fcn.100143f0
mov ebx, eax
lea ecx, [ebp - 0x77]
call fcn.100143f0
mov ecx, dword [0x1021e088]
add ecx, 4
add ecx, eax
push 0
push ecx
mov cl, bl
call fcn.1003b520
add esp, 8
jmp 0x1001ee2e
jmp 0x1001ee39
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret