Function at 0x1001b920
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x1020ad00
push 0x10041500
mov eax, dword fs:[0]
push eax
sub esp, 0x80
push ebx
push esi
push edi
mov eax, dword [0x1020e080]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 4], 0
jmp 0x1001b96f
jmp 0x1001b981
jmp 0x1001b993
jmp 0x1001b9a5
mov dl, 6
mov dword [ebp - 0x84], 0x3f7e3606
mov dword [ebp - 0x80], 0x3f363f36
mov dword [ebp - 0x7c], 0x363f36
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0xa
jae 0x1001b9e2
mov al, byte [ebp + ecx - 0x83]
xor al, dl
mov byte [ebp + ecx - 0x83], al
inc ecx
mov dl, byte [ebp - 0x84]
jmp 0x1001b9c1
mov byte [ebp - 0x79], 0
mov dl, 0x52
mov dword [ebp - 0x54], 0x602a6252
mov dword [ebp - 0x50], 0x66676265
mov word [ebp - 0x4c], 0x6a
xor ecx, ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 8
jae 0x1001ba16
mov al, byte [ebp + ecx - 0x53]
xor al, dl
mov byte [ebp + ecx - 0x53], al
inc ecx
mov dl, byte [ebp - 0x54]
jmp 0x1001b9fe
mov byte [ebp - 0x4b], 0
lea ecx, [ebp - 0x83]
call fcn.10013450
mov esi, eax
lea ecx, [ebp - 0x53]
call fcn.10013450
add eax, dword [0x10215f20]
push 0
push eax
mov ecx, esi
call fcn.1003aba0
add esp, 8
jmp 0x1001ba54
jmp 0x1001ba66
jmp 0x1001ba78
jmp 0x1001ba8a
jmp 0x1001ba9c
mov dl, 0x69
mov dword [ebp - 0x40], 0x50115969
mov word [ebp - 0x3c], 0x59
xor ecx, ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 4
jae 0x1001bac5
mov al, byte [ebp + ecx - 0x3f]
xor al, dl
mov byte [ebp + ecx - 0x3f], al
inc ecx
mov dl, byte [ebp - 0x40]
jmp 0x1001baad
mov byte [ebp - 0x3b], 0
mov dl, 0x3c
mov dword [ebp - 0x60], 0xe440c3c
mov dword [ebp - 0x5c], 0x8090c0b
mov word [ebp - 0x58], 4
xor ecx, ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 8
jae 0x1001baf9
mov al, byte [ebp + ecx - 0x5f]
xor al, dl
mov byte [ebp + ecx - 0x5f], al
inc ecx
mov dl, byte [ebp - 0x60]
jmp 0x1001bae1
mov byte [ebp - 0x57], 0
lea ecx, [ebp - 0x3f]
call fcn.10013450
mov ebx, eax
lea ecx, [ebp - 0x5f]
call fcn.10013450
mov ecx, dword [0x10215f20]
add ecx, 4
add ecx, eax
push 0
push ecx
mov cl, bl
call fcn.1003ac80
add esp, 8
jmp 0x1001bb39
jmp 0x1001bb4b
jmp 0x1001bb5d
jmp 0x1001bb6f
jmp 0x1001bb81
mov dl, 0x6c
mov dword [ebp - 0x90], 0x55145c6c
mov dword [ebp - 0x8c], 0x555c555c
mov dword [ebp - 0x88], 0x5c555c
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0xa
jae 0x1001bbc4
mov al, byte [ebp + ecx - 0x8f]
xor al, dl
mov byte [ebp + ecx - 0x8f], al
inc ecx
mov dl, byte [ebp - 0x90]
jmp 0x1001bba3
mov byte [ebp - 0x85], 0
mov dl, 0x6c
mov dword [ebp - 0x6c], 0x5f145c6c
mov dword [ebp - 0x68], 0x5b5d5c2e
mov word [ebp - 0x64], 0x5e
xor ecx, ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 8
jae 0x1001bbfb
mov al, byte [ebp + ecx - 0x6b]
xor al, dl
mov byte [ebp + ecx - 0x6b], al
inc ecx
mov dl, byte [ebp - 0x6c]
jmp 0x1001bbe3
mov byte [ebp - 0x63], 0
lea ecx, [ebp - 0x8f]
call fcn.10013450
mov esi, eax
lea ecx, [ebp - 0x6b]
call fcn.10013450
add eax, dword [0x10217290]
push 0
push eax
mov ecx, esi
call fcn.1003aba0
add esp, 8
jmp 0x1001bc39
jmp 0x1001bc4b
jmp 0x1001bc5d
jmp 0x1001bc6f
jmp 0x1001bc81
mov dl, 2
mov dword [ebp - 0x48], 0x3b7a3202
mov word [ebp - 0x44], 0x32
xor ecx, ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 4
jae 0x1001bcaa
mov al, byte [ebp + ecx - 0x47]
xor al, dl
mov byte [ebp + ecx - 0x47], al
inc ecx
mov dl, byte [ebp - 0x48]
jmp 0x1001bc92
mov byte [ebp - 0x43], 0
mov dl, 0x2e
mov dword [ebp - 0x78], 0x1d561e2e
mov dword [ebp - 0x74], 0x191f1e6c
mov word [ebp - 0x70], 0x1c
xor ecx, ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 8
jae 0x1001bcde
mov al, byte [ebp + ecx - 0x77]
xor al, dl
mov byte [ebp + ecx - 0x77], al
inc ecx
mov dl, byte [ebp - 0x78]
jmp 0x1001bcc6
mov byte [ebp - 0x6f], 0
lea ecx, [ebp - 0x47]
call fcn.10013450
mov ebx, eax
lea ecx, [ebp - 0x77]
call fcn.10013450
mov ecx, dword [0x10217290]
add ecx, 4
add ecx, eax
push 0
push ecx
mov cl, bl
call fcn.1003ac80
add esp, 8
jmp 0x1001bd1e
jmp 0x1001bd29
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret