Function at 0x1000b030
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a3614
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x100d40f8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dl, 0x1b
mov dword [ebp - 0x30], 0x5754571b
mov dword [ebp - 0x2c], 0x727c7457
mov dword [ebp - 0x28], 0x2b294475
mov word [ebp - 0x24], 0x2f29
mov byte [ebp - 0x22], 0
mov dword [ebp - 4], 0
xor ecx, ecx
mov al, byte [ebp + ecx - 0x2f]
xor al, dl
mov byte [ebp + ecx - 0x21], al
inc ecx
cmp ecx, 0xd
jae 0x1000b09a
mov dl, byte [ebp - 0x30]
jmp 0x1000b085
cmp byte [ebp - 0x21], 0
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x64], 0xf
mov dword [ebp - 0x68], 0
mov byte [ebp - 0x78], 0
jne 0x1000b0ba
xor ecx, ecx
jmp 0x1000b0c9
lea ecx, [ebp - 0x21]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b0c0
sub ecx, edx
push ecx
lea eax, [ebp - 0x21]
push eax
lea ecx, [ebp - 0x78]
call fcn.10005c50
mov byte [ebp - 4], 2
lea eax, [ebp - 0x78]
push 0xffffffffffffffff
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x27], 0
push eax
lea ecx, [ebp - 0x48]
movq qword [ebp - 0x2f], xmm0
mov word [ebp - 0x23], 0
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
call fcn.100058d0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x48]
mov esi, dword [ebp - 0x34]
lea ecx, [ebp - 0x48]
mov edx, dword [ebp - 0x48]
lea ebx, [ebp - 0x48]
cmp esi, 0x10
cmovae eax, edx
cmovae ecx, edx
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x38]
add eax, ecx
cmp esi, 0x10
mov edi, eax
cmovae ebx, edx
xor ecx, ecx
sub edi, ebx
xor esi, esi
cmp ebx, eax
cmova edi, ecx
test edi, edi
je 0x1000b168
nop dword [eax]
movsx eax, byte [esi + ebx]
push eax
call fcn.10086e50
mov ecx, dword [ebp - 0x7c]
add esp, 4
mov byte [esi + ecx], al
inc esi
cmp esi, edi
jne 0x1000b150
lea ecx, [ebp - 0x48]
call fcn.1000fb20
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0x28]
call fcn.1000ef20
push 0x10
push 8
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 4
push ecx
mov ecx, eax
call fcn.1000bcd0
mov esi, eax
cmp esi, 0x100da6c0
je 0x1000b1da
mov eax, dword [0x100da6d4]
cmp eax, 0x10
jb 0x1000b1b4
inc eax
mov ecx, 0x100da6c0
push eax
push dword [0x100da6c0]
call fcn.10005e10
push esi
mov ecx, 0x100da6c0
mov dword [0x100da6d4], 0xf
mov dword [0x100da6d0], 0
mov byte [0x100da6c0], 0
call fcn.10004ea0
mov eax, dword [ebp - 0x4c]
cmp eax, 0x10
jb 0x1000b1ef
inc eax
lea ecx, [ebp - 0x60]
push eax
push dword [ebp - 0x60]
call fcn.10005e10
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4c], 0xf
mov dword [ebp - 0x50], 0
mov byte [ebp - 0x60], 0
cmp eax, 0x10
jb 0x1000b21a
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10005e10
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x28]
call fcn.1000ef20
push 0x10
push 8
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 6
push ecx
mov ecx, eax
call fcn.1000bcd0
mov esi, eax
cmp esi, 0x100da6d8
je 0x1000b284
mov eax, dword [0x100da6ec]
cmp eax, 0x10
jb 0x1000b25e
inc eax
mov ecx, 0x100da6d8
push eax
push dword [0x100da6d8]
call fcn.10005e10
push esi
mov ecx, 0x100da6d8
mov dword [0x100da6ec], 0xf
mov dword [0x100da6e8], 0
mov byte [0x100da6d8], 0
call fcn.10004ea0
mov eax, dword [ebp - 0x4c]
cmp eax, 0x10
jb 0x1000b299
inc eax
lea ecx, [ebp - 0x60]
push eax
push dword [ebp - 0x60]
call fcn.10005e10
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4c], 0xf
mov dword [ebp - 0x50], 0
mov byte [ebp - 0x60], 0
cmp eax, 0x10
jb 0x1000b2c0
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10005e10
mov eax, dword [ebp - 0x34]
cmp eax, 0x10
jb 0x1000b2d5
inc eax
lea ecx, [ebp - 0x48]
push eax
push dword [ebp - 0x48]
call fcn.10005e10
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
cmp eax, 0x10
jb 0x1000b2fc
inc eax
lea ecx, [ebp - 0x78]
push eax
push dword [ebp - 0x78]
call fcn.10005e10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005e9d4
mov esp, ebp
pop ebp
ret