Function at 0x10001400
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002b96f
mov eax, dword fs:[0]
push eax
sub esp, 0x1a0
mov eax, dword [0x1003c0c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
mov dword [ebp - 0x1c], 0x42636f44
xor ecx, ecx
mov dword [ebp - 0x18], 0x74736f6f
lea edx, [ebp - 0x1c]
mov word [ebp - 0x14], 0x7265
lea eax, [ebp - 0x12]
mov dword [ebp - 0x194], edi
xor esi, esi
mov dword [ebp - 0x1a0], edi
sub eax, edx
mov dword [ebp - 0x19c], esi
mov dword [ebp - 0x190], ecx
mov dword [ebp - 0x198], ecx
mov dword [ebp - 0x18c], eax
je 0x100014b5
push eax
lea ecx, [ebp - 0x1a0]
call fcn.100045b0
mov esi, dword [ebp - 0x18c]
lea eax, [ebp - 0x1c]
mov edi, dword [ebp - 0x1a0]
push esi
push eax
push edi
mov dword [ebp - 0x194], edi
call fcn.100100d0
mov ecx, dword [ebp - 0x198]
add esp, 0xc
add esi, edi
mov dword [ebp - 0x190], ecx
mov dword [ebp - 0x19c], esi
lea eax, [ebp - 0x1ac]
mov dword [ebp - 4], 0
push eax
call fcn.100010b0
add esp, 4
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 1
call fcn.10004890
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0xf8]
call fcn.10004950
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 3
call fcn.10004ba0
mov dword [ebp - 0x24], 0
xorps xmm0, xmm0
mov dword [ebp - 0x20], 7
movups xmmword [ebp - 0x34], xmm0
cmp edi, esi
jne 0x10001529
xor eax, eax
mov word [ebp - 0x34], ax
jmp 0x100015c8
sub esi, edi
cmp esi, 0x7ffffffe
ja 0x10001cf1
mov ecx, 7
cmp esi, ecx
jbe 0x10001585
mov eax, esi
or eax, ecx
cmp eax, 0x7ffffffe
jbe 0x10001552
mov eax, SysReAllocString
jmp 0x1000155c
mov ecx, 0xa
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.100037e0
mov ecx, dword [ebp - 0x18c]
mov edx, eax
add esp, 8
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x20], ecx
jmp 0x10001588
mov edx, dword [ebp - 0x34]
cmp ecx, 7
lea eax, [ebp - 0x34]
cmova eax, edx
mov edx, edi
mov dword [ebp - 0x18c], eax
mov ecx, eax
test esi, esi
je 0x100015b9
mov edi, esi
movzx eax, byte [edx]
lea ecx, [ecx + 2]
mov word [ecx - 2], ax
lea edx, [edx + 1]
sub edi, 1
jne 0x100015a1
mov edi, dword [ebp - 0x194]
mov eax, dword [ebp - 0x18c]
xor ecx, ecx
mov dword [ebp - 0x24], esi
mov word [eax + esi*2], cx
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 4
push eax
call fcn.1000aad0
push 0x1002d1e4
push eax
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 5
push eax
call fcn.10003680
add esp, 0x10
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 6
push ecx
push eax
push dword [ebp - 0x190]
lea ecx, [ebp - 0x64]
call fcn.10003c20
push 0x1002d1e0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.10003680
add esp, 0xc
mov ecx, dword [ebp - 0x50]
mov byte [ebp - 4], 9
cmp ecx, 7
jbe 0x10001662
mov edx, dword [ebp - 0x64]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001658
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001cf6
push ecx
push edx
call fcn.1000e9ca
add esp, 8
xor eax, eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
mov ecx, dword [ebp - 0xfc]
mov byte [ebp - 4], 0xa
cmp ecx, 7
jbe 0x100016ba
mov edx, dword [ebp - 0x110]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100016b0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001cf6
push ecx
push edx
call fcn.1000e9ca
add esp, 8
xor eax, eax
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
mov ecx, dword [ebp - 0x114]
mov byte [ebp - 4], 0xb
cmp ecx, 7
jbe 0x1000171b
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001711
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001cf6
push ecx
push edx
call fcn.1000e9ca
add esp, 8
xor eax, eax
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
mov ecx, dword [ebp - 0x20]
mov byte [ebp - 4], 0xc
cmp ecx, 7
jbe 0x10001776
mov edx, dword [ebp - 0x34]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000176c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001cf6
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov eax, dword [ebp - 0x1ac]
add eax, 0x30
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.100036f0
mov esi, eax
mov ecx, dword [ebp - 0x1ac]
lea eax, [ebp - 0x140]
add ecx, 0x18
mov byte [ebp - 4], 0xd
push ecx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.100036f0
add esp, 0x18
push esi
push eax
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0xe
call fcn.10003f40
mov ecx, dword [ebp - 0x20]
mov byte [ebp - 4], 0x10
cmp ecx, 7
jbe 0x10001802
mov edx, dword [ebp - 0x34]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100017f8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001cfb
push ecx
push edx
call fcn.1000e9ca
add esp, 8
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 4], 0x11
cmp ecx, 7
jbe 0x10001854
mov edx, dword [ebp - 0x4c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000184a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001cfb
push ecx
push edx
call fcn.1000e9ca
add esp, 8
xor eax, eax
mov dword [ebp - 0x3c], 0
mov word [ebp - 0x4c], ax
lea ecx, [ebp - 0x188]
lea eax, [ebp - 0xac]
mov dword [ebp - 0x38], 7
push eax
call fcn.1000d560
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x188]
call fcn.1000d6a0
mov eax, dword [ebp - 0x1ac]
add eax, 0x18
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.100036f0
add esp, 0xc
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x13
call fcn.10003b70
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 4], 0x15
cmp ecx, 7
jbe 0x10001906
mov edx, dword [ebp - 0x4c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100018fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d00
push ecx
push edx
call fcn.1000e9ca
add esp, 8
xor eax, eax
mov dword [ebp - 0x3c], 0
mov word [ebp - 0x4c], ax
lea ecx, [ebp - 0x7c]
lea eax, [ebp - 0x94]
mov dword [ebp - 0x38], 7
push eax
call fcn.10009ab0
mov ecx, dword [ebp - 0x68]
cmp ecx, 7
jbe 0x10001963
mov edx, dword [ebp - 0x7c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001959
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0x80]
xor eax, eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
cmp ecx, 7
jbe 0x100019b4
mov edx, dword [ebp - 0x94]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100019aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0x144]
xor eax, eax
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 7
mov word [ebp - 0x94], ax
cmp ecx, 7
jbe 0x10001a0e
mov edx, dword [ebp - 0x158]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001a04
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0x15c]
xor eax, eax
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 7
mov word [ebp - 0x158], ax
cmp ecx, 7
jbe 0x10001a6b
mov edx, dword [ebp - 0x170]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001a61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0x174]
xor eax, eax
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 7
mov word [ebp - 0x170], ax
cmp ecx, 7
jbe 0x10001ac8
mov edx, dword [ebp - 0x188]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001abe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0x12c]
xor eax, eax
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 7
mov word [ebp - 0x188], ax
cmp ecx, 7
jbe 0x10001b25
mov edx, dword [ebp - 0x140]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001b1b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0x98]
cmp ecx, 7
jbe 0x10001b65
mov edx, dword [ebp - 0xac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001b5b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 7
mov word [ebp - 0xac], ax
cmp ecx, 7
jbe 0x10001bc2
mov edx, dword [ebp - 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001bb8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0xcc]
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
cmp ecx, 7
jbe 0x10001c1f
mov edx, dword [ebp - 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001c15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
mov ecx, dword [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
cmp ecx, 7
jbe 0x10001c7c
mov edx, dword [ebp - 0xf8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10001c72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edx
call fcn.1000e9ca
add esp, 8
xor eax, eax
mov dword [ebp - 0xe8], 0
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
call fcn.100043e0
test edi, edi
je 0x10001cd4
mov ecx, dword [ebp - 0x190]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x10001cca
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10001d05
push ecx
push edi
call fcn.1000e9ca
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000e9d8
mov esp, ebp
pop ebp
ret
call fcn.100046e0
call fcn.1001394f
call fcn.1001394f
call fcn.1001394f
call fcn.1001394f
int3