Function at 0x10004ca5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f9124
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x1014d084]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x30]
push 0x1012f17f
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x4c], 0
call fcn.10007920
mov dword [ebp - 4], 0
mov esi, dword [0x101526f0]
test esi, esi
jne 0x10004af6
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.10006b00
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x10004ad8
inc eax
push 1
push eax
push dword [ebp - 0x2c]
call fcn.10007520
add esp, 0xc
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 4], 1
jmp 0x10004ef7
cmp byte [0x101527be], 0
je 0x10004b37
mov ecx, 0x10b8134
call fcn.1001aba0
mov edi, eax
test edi, edi
je 0x10004b34
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x10004b34
push 4
add edi, 0x6e4
push edi
call ebx
test eax, eax
jne 0x10004b34
mov ax, word [edi]
mov word [esi + 0x46], ax
mov edi, dword [ebp - 0x48]
movzx eax, word [esi + 0x46]
add eax, 0xffffff9b
cmp eax, 0x6f
ja case.0x10004b4e.113
movzx eax, byte [eax + 0x10004f4c]
jmp dword [eax*4 + 0x10004f28]
mov dword [ebp - 0x44], 0x91a307b
xor esi, esi
mov dword [ebp - 0x40], 0x2c5b080e
mov dword [ebp - 0x3c], 0x1209091a
mov word [ebp - 0x38], 0x914
mov byte [ebp - 0x36], 0
cmp esi, 0xe
jb 0x10004b92
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xe
jb 0x10004bb5
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xd
jb 0x10004b76
mov byte [ebp - 0x36], 0
jmp 0x10004eb0
mov dword [ebp - 0x40], 0x4c5f753e
xor esi, esi
mov dword [ebp - 0x3c], 0x6c1e4d4b
mov dword [ebp - 0x38], 0x5b4b5951
mov byte [ebp - 0x34], 0
cmp esi, 0xc
jb 0x10004bff
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xc
jb 0x10004c22
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xb
jb 0x10004be3
mov byte [ebp - 0x34], 0
lea eax, [ebp - 0x3f]
jmp 0x10004eb3
mov dword [ebp - 0x40], 0x180b216a
xor esi, esi
mov dword [ebp - 0x3c], 0x274a191f
mov dword [ebp - 0x38], 0xf0d0b
nop
cmp esi, 0xb
jb 0x10004c6c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xb
jb 0x10004c8f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xa
jb 0x10004c50
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x3f]
jmp 0x10004eb3
mov dword [ebp - 0x40], 0x33200a41
xor esi, esi
mov dword [ebp - 0x3c], 0x11613234
mov dword [ebp - 0x38], 0x32242833
mov word [ebp - 0x34], 0x35
cmp esi, 0xd
jb 0x10004cde
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xd
jb 0x10004d01
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xc
jb 0x10004cc2
mov byte [ebp - 0x33], 0
lea eax, [ebp - 0x3f]
jmp 0x10004eb3
movaps xmm0, xmmword [0x1013d8e0]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x5b
nop word [eax + eax]
cmp esi, 0x11
jb 0x10004d4c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0x11
jb 0x10004d6f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0x10
jb 0x10004d30
mov byte [ebp - 0x33], 0
jmp 0x10004eb0
movaps xmm0, xmmword [str._hA_r_B_LI_r]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
nop
cmp esi, 0xf
jb 0x10004dac
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xf
jb 0x10004dcf
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xe
jb 0x10004d90
mov byte [ebp - 0x35], 0
jmp 0x10004eb0
mov dword [ebp - 0x44], 0xa466f2a
xor esi, esi
mov dword [ebp - 0x40], 0x4b584567
mov dword [ebp - 0x3c], 0x4b670a4e
mov word [ebp - 0x38], 0x4f4d
mov byte [ebp - 0x36], 0
cmp esi, 0xe
jb 0x10004e1f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xe
jb 0x10004e42
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xd
jb 0x10004e03
mov byte [ebp - 0x36], 0
jmp 0x10004eb0
movaps xmm0, xmmword [0x1013d7a0]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
mov byte [ebp - 0x34], 0
cmp esi, 0x10
jb 0x10004e7f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0x10
jb 0x10004ea2
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xf
jb 0x10004e63
mov byte [ebp - 0x34], 0
lea eax, [ebp - 0x43]
push eax
lea ecx, [ebp - 0x30]
call fcn.10006c70
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.10006b00
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x10004ede
inc eax
push 1
push eax
push dword [ebp - 0x2c]
call fcn.10007520
add esp, 0xc
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.10007000
lea ecx, [ebp - 0x30]
call fcn.10006ea0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10075bf0
mov esp, ebp
pop ebp
ret 4