Function at 0x100125fb
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x158
mov eax, 0x1006a922
call fcn.10035d00
mov esi, ecx
mov edi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
mov dword [0x1008ec34], eax
test edi, edi
je 0x10012cd1
cmp dword [ebp + 0xc], 1
je 0x10012638
cmp dword [ebp + 0xc], 4
je 0x10012638
cmp dword [ebp + 0xc], 0x100
jne 0x10012cd1
push 0x104
xor ebx, ebx
lea eax, [ebp - 0x114]
push ebx
push eax
call fcn.1004d6e0
add esp, 0xc
mov dword [ebp - 0x118], 0xf
mov dword [ebp - 4], ebx
mov eax, 0x1008be30
cmp dword [0x1008be44], 0x10
mov dword [ebp - 0x11c], ebx
cmovae eax, dword [0x1008be30]
push eax
lea eax, [ebp - 0x114]
mov byte [ebp - 0x12c], bl
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov cl, 0x4f
mov dword [ebp - 0x144], 0x3b3f004f
mov dword [ebp - 0x140], 0x61212026
mov edx, ebx
mov dword [ebp - 0x13c], 0x262106
xor cl, byte [ebp + edx - 0x143]
mov byte [ebp + edx - 0x143], cl
inc edx
cmp edx, 0xa
jae 0x100126c7
mov cl, byte [ebp - 0x144]
jmp 0x100126ab
lea eax, [ebp - 0x143]
mov byte [ebp - 0x139], bl
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [esi], 0
je 0x10012795
cmp edi, dword [esi]
jne 0x10012795
xor edx, edx
lea ecx, [ebp - 0x164]
cmp dword [0x10092e8c], 1
setne dl
cmp edx, 1
mov dword [0x10092e8c], edx
sete byte [0x1008eb73]
call fcn.1000a676
mov edx, eax
cmp dword [edx + 0x14], 0x10
jb 0x10012723
mov edx, dword [edx]
mov cl, 0x53
mov dword [ebp - 0x144], 0x3a380053
mov dword [ebp - 0x140], 0x21123f3f
mov eax, ebx
mov word [ebp - 0x13c], 0x3236
mov byte [ebp - 0x13a], bl
xor byte [ebp + eax - 0x143], cl
inc eax
cmp eax, 9
jae 0x1001275f
mov cl, byte [ebp - 0x144]
jmp 0x1001274a
mov byte [ebp - 0x13a], bl
mov cl, 0x2a
mov dword [ebp - 0x134], 0x5943672a
mov eax, ebx
mov word [ebp - 0x130], 0x49
xor byte [ebp + eax - 0x133], cl
inc eax
cmp eax, 4
jae 0x10012c8f
mov cl, byte [ebp - 0x134]
jmp 0x1001277c
cmp dword [esi + 4], 0
je 0x10012891
cmp edi, dword [esi + 4]
jne 0x10012891
mov esi, dword [0x1008eaf0]
xor eax, eax
cmp dword [0x10092e90], 1
setne al
mov dword [0x10092e90], eax
test esi, esi
je 0x100127f7
mov esi, dword [esi + 0xc]
test esi, esi
je 0x100127f7
test eax, eax
je 0x100127ed
cmp dword [esi], 0
je 0x100127f7
push 4
push dword [esi]
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100127f7
mov ecx, dword [esi]
push 1
call dword [0x1007febc]
jmp 0x100127f7
sub esp, 0xc
mov ecx, esi
call fcn.1000f925
mov edx, dword [0x10092e90]
lea ecx, [ebp - 0x164]
call fcn.1000a676
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x10012812
mov ecx, dword [ecx]
mov dl, 0xb
mov dword [ebp - 0x144], 0x656e4c0b
mov dword [ebp - 0x140], 0x625d6e62
mov eax, ebx
mov dword [ebp - 0x13c], 0x67696278
mov word [ebp - 0x138], 0x6e
xor byte [ebp + eax - 0x143], dl
inc eax
cmp eax, 0xc
jae 0x10012852
mov dl, byte [ebp - 0x144]
jmp 0x1001283d
mov byte [ebp - 0x137], bl
mov dl, 0x74
mov dword [ebp - 0x134], 0x71d3974
mov eax, ebx
mov word [ebp - 0x130], 0x17
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 4
jae 0x10012884
mov dl, byte [ebp - 0x134]
jmp 0x1001286f
lea eax, [ebp - 0x114]
push eax
push ecx
jmp 0x10012c97
cmp dword [esi + 8], 0
je 0x10012938
cmp edi, dword [esi + 8]
jne 0x10012938
xor edx, edx
lea ecx, [ebp - 0x164]
cmp dword [0x10092e98], 1
setne dl
mov dword [0x10092e98], edx
call fcn.1000a676
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x100128cb
mov ecx, dword [ecx]
mov dl, 0x19
mov dword [ebp - 0x144], 0x777c4b19
mov dword [ebp - 0x140], 0x5a6b7c7d
mov eax, ebx
mov dword [ebp - 0x13c], 0x7c6978
xor byte [ebp + eax - 0x143], dl
inc eax
cmp eax, 0xa
jae 0x10012902
mov dl, byte [ebp - 0x144]
jmp 0x100128ed
mov byte [ebp - 0x139], bl
mov dl, 0x60
mov dword [ebp - 0x134], 0x13092d60
mov eax, ebx
mov word [ebp - 0x130], 3
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 4
jae 0x10012884
mov dl, byte [ebp - 0x134]
jmp 0x1001291f
cmp dword [esi + 0xc], 0
je 0x100129fd
cmp edi, dword [esi + 0xc]
jne 0x100129fd
xor edx, edx
lea ecx, [ebp - 0x164]
cmp dword [0x10092e9c], 1
setne dl
mov dword [0x10092e9c], edx
call fcn.1000a676
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x10012972
mov ecx, dword [ecx]
mov dl, 0x1c
mov dword [ebp - 0x148], 0x727d4e1c
mov dword [ebp - 0x144], 0x7b727577
mov eax, ebx
mov dword [ebp - 0x140], 0x797a7a59
mov word [ebp - 0x13c], 0x687f
mov byte [ebp - 0x13a], bl
xor byte [ebp + eax - 0x147], dl
inc eax
cmp eax, 0xd
jae 0x100129b8
mov dl, byte [ebp - 0x148]
jmp 0x100129a3
mov byte [ebp - 0x13a], bl
mov dl, 0x60
mov dword [ebp - 0x134], 0x13092d60
mov eax, ebx
mov word [ebp - 0x130], 3
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 4
jae 0x100129ea
mov dl, byte [ebp - 0x134]
jmp 0x100129d5
lea eax, [ebp - 0x114]
push eax
push ecx
lea eax, [ebp - 0x147]
jmp 0x10012c9d
mov ecx, dword [esi + 0x14]
test ecx, ecx
je 0x10012b9c
cmp edi, ecx
jne 0x10012b9c
call fcn.1000c300
mov edi, eax
cmp edi, 0x17
ja 0x10012cbf
cmp edi, dword [0x10092e94]
je 0x10012cbf
mov dword [0x10092e94], edi
mov edx, edi
mov ecx, dword [esi + 0x14]
call fcn.1000c2dd
mov ecx, ebx
push edi
cmp edi, 0xa
jge 0x10012a80
movaps xmm0, xmmword [0x100803b0]
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x13c], 0x1b114f47
mov word [ebp - 0x138], 0x1b
mov al, byte [ebp - 0x14c]
xor byte [ebp + ecx - 0x14b], al
inc ecx
cmp ecx, 0x14
jb 0x10012a65
mov byte [ebp - 0x137], bl
jmp 0x10012ab7
movaps xmm0, xmmword [str.z:e]
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x13c], 0x4a4a401e
mov byte [ebp - 0x138], bl
mov al, byte [ebp - 0x14c]
xor byte [ebp + ecx - 0x14b], al
inc ecx
cmp ecx, 0x13
jb 0x10012a9e
mov byte [ebp - 0x138], bl
sub esp, 0x18
lea eax, [ebp - 0x14b]
mov ecx, esp
push eax
call fcn.1000289a
lea eax, [ebp - 0x164]
push eax
call fcn.10007288
add esp, 0x20
lea ecx, [ebp - 0x12c]
push eax
call fcn.100046b8
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.1000274f
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x12c]
call fcn.1000c3bb
push ecx
push edi
call fcn.10012fb1
mov edx, dword [0x10092e94]
lea ecx, [ebp - 0x164]
call fcn.1000a676
mov edx, eax
cmp dword [edx + 0x14], 0x10
jb 0x10012b21
mov edx, dword [edx]
mov cl, 0x2e
mov dword [ebp - 0x140], 0x434f692e
mov dword [ebp - 0x13c], 0x43477a4b
mov eax, ebx
mov word [ebp - 0x138], 0x4b
xor byte [ebp + eax - 0x13f], cl
inc eax
cmp eax, 8
jae 0x10012b57
mov cl, byte [ebp - 0x140]
jmp 0x10012b42
mov byte [ebp - 0x137], bl
mov cl, 0x33
mov dword [ebp - 0x134], 0x405a7e33
mov eax, ebx
mov word [ebp - 0x130], 0x50
xor byte [ebp + eax - 0x133], cl
inc eax
cmp eax, 4
jae 0x10012b89
mov cl, byte [ebp - 0x134]
jmp 0x10012b74
lea eax, [ebp - 0x114]
push eax
push edx
lea eax, [ebp - 0x13f]
jmp 0x10012c9d
mov ecx, dword [esi + 0x18]
test ecx, ecx
je 0x10012cbf
cmp edi, ecx
jne 0x10012cbf
call fcn.1000c300
mov edi, eax
cmp edi, 0x14
ja 0x10012cbf
cmp edi, dword [0x10092ea0]
je 0x10012cbf
mov dword [0x10092ea0], edi
mov edx, edi
mov ecx, dword [esi + 0x18]
call fcn.1000c2dd
mov ecx, dword [esi + 0x20]
mov edx, edi
call fcn.1000c3de
movd xmm0, dword [0x10092ea0]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x1007ffb0]
movss dword [0x1008aa9c], xmm0
call fcn.100121e9
mov edx, dword [0x10092ea0]
lea ecx, [ebp - 0x164]
call fcn.1000a676
mov edx, eax
cmp dword [edx + 0x14], 0x10
jb 0x10012c20
mov edx, dword [edx]
mov cl, 0x72
mov dword [ebp - 0x144], 0x1f133172
mov dword [ebp - 0x140], 0x20130017
mov eax, ebx
mov dword [ebp - 0x13c], 0x17151c13
mov byte [ebp - 0x138], bl
xor byte [ebp + eax - 0x143], cl
inc eax
cmp eax, 0xb
jae 0x10012c5d
mov cl, byte [ebp - 0x144]
jmp 0x10012c48
mov byte [ebp - 0x138], bl
mov cl, 0x5b
mov dword [ebp - 0x134], 0x2832165b
mov eax, ebx
mov word [ebp - 0x130], 0x38
xor byte [ebp + eax - 0x133], cl
inc eax
cmp eax, 4
jae 0x10012c8f
mov cl, byte [ebp - 0x134]
jmp 0x10012c7a
lea eax, [ebp - 0x114]
push eax
push edx
lea eax, [ebp - 0x143]
push eax
lea eax, [ebp - 0x133]
mov byte [ebp - 0x12f], bl
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.1000274f
push ebx
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000274f
mov al, 1
jmp 0x10012cd3
xor al, al
call fcn.10035caa
ret 8