Function at 0x1001ac27
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
mov eax, dword [0x100963a4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x6b
pop eax
push 0x65
pop ebx
push 0x72
pop edx
push 0x6e
movaps xmm0, xmmword [0x100802c0]
mov word [ebp - 0x30], ax
pop eax
push 0x6c
pop ecx
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x33
mov word [ebp - 0x2a], ax
pop eax
push 0x32
mov word [ebp - 0x24], ax
pop eax
push 0x2e
mov word [ebp - 0x22], ax
pop eax
mov word [ebp - 0x20], ax
push 0x64
pop eax
mov word [ebp - 0x1e], ax
xor eax, eax
mov word [ebp - 0x18], ax
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x4d], al
mov byte [ebp - 6], al
lea eax, [ebp - 0x30]
movups xmmword [ebp - 0x4c], xmm0
push eax
movaps xmm0, xmmword [0x100802c0]
mov word [ebp - 0x2e], bx
mov word [ebp - 0x2c], dx
mov word [ebp - 0x28], bx
mov word [ebp - 0x26], cx
mov word [ebp - 0x1c], cx
mov word [ebp - 0x1a], cx
mov byte [ebp - 0x3c], 0x46
mov byte [ebp - 0x3b], dl
mov byte [ebp - 0x3a], bl
mov word [ebp - 0x39], 0x7571
mov byte [ebp - 0x37], bl
mov dword [ebp - 0x36], 0x79636e
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0x6e756f43
mov byte [ebp - 0x50], 0x74
mov byte [ebp - 0x4f], bl
mov byte [ebp - 0x4e], dl
mov byte [ebp - 0x14], 0x47
mov byte [ebp - 0x13], bl
mov dword [ebp - 0x12], 0x63695474
mov dword [ebp - 0xe], 0x756f436b
mov dword [ebp - 0xa], 0x3436746e
call esi
mov edi, eax
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x80], edi
call esi
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebx, eax
test edi, edi
je 0x1001ae5b
test ebx, ebx
je 0x1001ae58
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea eax, [ebp - 0x4c]
push eax
push ebx
call esi
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x64]
push eax
push ebx
call esi
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x14]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x1001ae4d
mov esi, dword [ebp - 0x68]
test esi, esi
je 0x1001ae4d
test eax, eax
je 0x1001ae4d
lea eax, [ebp - 0x98]
push eax
call ecx
lea eax, [ebp - 0x90]
push eax
call esi
and dword [ebp - 0x68], 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x6c], 3
call fcn.1001aade
pop ecx
lea eax, [ebp - 0x88]
push eax
call esi
mov ecx, dword [ebp - 0x88]
sub ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x84]
sbb edx, dword [ebp - 0x8c]
call fcn.1001de70
mov edx, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x98]
movsd qword [ebp - 0x6c], xmm0
call fcn.1001de70
movsd xmm2, qword [ebp - 0x6c]
divsd xmm2, xmm0
movsd qword [ebp - 0x6c], xmm2
call dword [ebp - 0x70]
and dword [ebp - 0x78], 0
mov esi, eax
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x7c], 3
push eax
mov edi, edx
call fcn.1001aade
pop ecx
call dword [ebp - 0x70]
movsd xmm0, qword [ebp - 0x6c]
sub eax, esi
mulsd xmm0, qword [0x10080290]
mov ecx, eax
sbb edx, edi
movsd qword [ebp - 0x6c], xmm0
call fcn.1001de30
movsd xmm2, qword [ebp - 0x6c]
movaps xmm1, xmm0
mulsd xmm1, qword [0x10080280]
comisd xmm1, xmm2
ja 0x1001ae36
mulsd xmm0, qword [0x10080288]
comisd xmm2, xmm0
jbe 0x1001ae3a
mov byte [ebp - 0x74], 1
push dword [ebp - 0x80]
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
push ebx
call esi
mov al, byte [ebp - 0x74]
jmp 0x1001ae64
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push edi
call esi
jmp 0x1001ae5f
push edi
call esi
test ebx, ebx
je 0x1001ae62
push ebx
call esi
xor al, al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001da1e
mov esp, ebp
pop ebp
ret