Function at 0x1000c960
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10086786
mov eax, dword fs:[0]
push eax
sub esp, 0x9c
push ebx
push esi
push edi
mov eax, dword [0x100a7078]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0x14]
sub edx, dword [esi + 0x10]
lea eax, [ecx + 1]
cmp eax, edx
jbe 0x1000c9a1
xor bl, bl
jmp 0x1000c9a7
mov eax, dword [esi + 0x10]
mov bl, byte [ecx + eax]
lea edx, [ecx + 1]
mov dword [esi + 8], edx
lea eax, [edx + 4]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
cmp eax, ecx
jbe 0x1000c9c3
mov dword [ebp - 0x10], 0
jmp 0x1000c9cc
mov eax, dword [esi + 0x10]
mov eax, dword [edx + eax]
mov dword [ebp - 0x10], eax
add edx, 4
mov dword [esi + 8], edx
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 4]
cmp eax, ecx
jbe 0x1000c9e3
xor edi, edi
jmp 0x1000c9e9
mov eax, dword [esi + 0x10]
mov edi, dword [edx + eax]
lea eax, [edx + 4]
mov dword [esi + 8], eax
mov eax, dword [0x100aa814]
test eax, eax
je 0x1000ca70
cmp bl, 1
je 0x1000ca02
cmp bl, 2
jne 0x1000ca3e
mov ecx, dword [eax + 0x94]
test ecx, ecx
je 0x1000ca17
push edi
call fcn.1005c7a0
mov eax, dword [0x100aa814]
mov ecx, dword [eax + 0x58]
test ecx, ecx
je 0x1000ca29
push edi
call fcn.10034580
mov eax, dword [0x100aa814]
mov ecx, dword [0x100aa818]
test ecx, ecx
je 0x1000ca44
push edi
call fcn.100200e0
mov eax, dword [0x100aa814]
mov ecx, dword [0x100aa818]
cmp bl, 3
je 0x1000ca4e
cmp bl, 4
jne 0x1000ca70
mov eax, dword [eax + 0x94]
test eax, eax
je 0x1000ca66
push edi
mov ecx, eax
call fcn.1005c890
mov ecx, dword [0x100aa818]
test ecx, ecx
je 0x1000ca70
push edi
call fcn.10020160
movzx eax, bl
dec eax
cmp eax, 3
ja case.default.0x1000ca7d
jmp dword [eax*4 + 0x1000cca8]
movaps xmm0, xmmword [0x1009eb80]
xor ecx, ecx
push dword [ebp - 0x10]
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x34607c73
mov dword [ebp - 0x34], 0x7c677557
mov word [ebp - 0x30], 0x3a
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x18
jb 0x1000caa8
sub esp, 0x18
mov byte [ebp - 0x2f], 0
lea eax, [ebp - 0x47]
mov ecx, esp
push eax
call fcn.10002870
lea eax, [ebp - 0x78]
push eax
call fcn.1000d830
add esp, 0x20
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 0x10
jb 0x1000cae2
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10002870
mov edx, 0xff6565ff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.1000cdd0
lea ecx, [ebp - 0x2c]
call fcn.10002220
lea ecx, [ebp - 0x78]
jmp 0x1000cc90
movaps xmm0, xmmword [0x1009e330]
xor ecx, ecx
push dword [ebp - 0x10]
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0x756e7c5e
mov word [ebp - 0x18], 0x33
nop dword [eax]
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0x14
jb 0x1000cb30
sub esp, 0x18
mov byte [ebp - 0x17], 0
lea eax, [ebp - 0x2b]
mov ecx, esp
push eax
call fcn.10002870
lea eax, [ebp - 0x48]
push eax
call fcn.1000d830
add esp, 0x20
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
jb 0x1000cb6a
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x78]
call fcn.10002870
mov byte [ebp - 4], 3
mov edx, 0xffff3b3b
lea ecx, [ebp - 0x78]
call fcn.1000cdd0
lea ecx, [ebp - 0x78]
call fcn.10002220
lea ecx, [ebp - 0x48]
jmp 0x1000cc90
movaps xmm0, xmmword [0x1009e0f0]
xor ecx, ecx
push dword [ebp - 0x10]
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0x6f626f4c
mov dword [ebp - 0x18], 0x206b6d60
mov byte [ebp - 0x14], 0
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0x17
jb 0x1000cbb6
sub esp, 0x18
mov byte [ebp - 0x14], 0
lea eax, [ebp - 0x2b]
mov ecx, esp
push eax
call fcn.10002870
lea eax, [ebp - 0x48]
push eax
call fcn.1000d830
add esp, 0x20
mov dword [ebp - 4], 4
cmp dword [eax + 0x14], 0x10
jb 0x1000cbf0
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x78]
call fcn.10002870
mov byte [ebp - 4], 5
mov edx, 0xff6565ff
jmp 0x1000cb7c
movaps xmm0, xmmword [0x1009e920]
xor ecx, ecx
push dword [ebp - 0x10]
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0x3f74727f
mov byte [ebp - 0x4c], 0
mov al, byte [ebp - 0x60]
xor byte [ebp + ecx - 0x5f], al
inc ecx
cmp ecx, 0x13
jb 0x1000cc22
sub esp, 0x18
mov byte [ebp - 0x4c], 0
lea eax, [ebp - 0x5f]
mov ecx, esp
push eax
call fcn.10002870
lea eax, [ebp - 0xa8]
push eax
call fcn.1000d830
add esp, 0x20
mov dword [ebp - 4], 6
cmp dword [eax + 0x14], 0x10
jb 0x1000cc5f
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x90]
call fcn.10002870
mov edx, 0xffff3b3b
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
call fcn.1000cdd0
lea ecx, [ebp - 0x90]
call fcn.10002220
lea ecx, [ebp - 0xa8]
call fcn.10002220
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret