Function at 0x1011ff10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x184
mov eax, dword [0x1025e344]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x180], 0x7050000
mov dword [ebp - 0x17c], 0x7430738
mov dword [ebp - 0x178], 0x7880763
mov dword [ebp - 0x174], 0x7cb0794
mov dword [ebp - 0x170], 0x7f807e8
mov dword [ebp - 0x16c], 0x83e080c
mov dword [ebp - 0x168], 0x89e0878
mov dword [ebp - 0x164], 0x8ee08d8
mov dword [ebp - 0x160], 0x94f0928
mov dword [ebp - 0x15c], 0x9b809a8
mov dword [ebp - 0x158], 0xa2409d4
mov dword [ebp - 0x154], 0xaac0a6c
mov dword [ebp - 0x150], 0xb1a0ade
mov dword [ebp - 0x14c], 0xb8a0b4e
mov dword [ebp - 0x148], 0xbb80ba8
mov dword [ebp - 0x144], 0xd080bd4
mov dword [ebp - 0x140], 0xe700d80
mov dword [ebp - 0x13c], 0xe900e80
mov dword [ebp - 0x138], 0xeb60ea0
mov dword [ebp - 0x134], 0xf380ef8
mov dword [ebp - 0x130], 0xf580f48
mov dword [ebp - 0x12c], 0xf800f68
mov dword [ebp - 0x128], 0xfc80fa8
mov dword [ebp - 0x124], 0x100a0fd8
mov dword [ebp - 0x120], 0x104a102a
mov dword [ebp - 0x11c], 0x108a106a
mov dword [ebp - 0x118], 0x10c810aa
mov dword [ebp - 0x114], 0x10f810d8
mov dword [ebp - 0x110], 0x11481138
mov dword [ebp - 0x10c], 0x1178115a
mov dword [ebp - 0x108], 0x11981188
mov dword [ebp - 0x104], 0x18361804
mov dword [ebp - 0x100], 0x18881878
mov dword [ebp - 0xfc], 0x191d18d8
mov dword [ebp - 0xf8], 0x19811969
mov dword [ebp - 0xf4], 0xf01cf008
mov dword [ebp - 0xf0], 0xf05ef048
mov dword [ebp - 0xec], 0xf0aaf098
mov dword [ebp - 0xe8], 0xf0e8f0ca
mov dword [ebp - 0xe4], 0xf108f0f8
mov dword [ebp - 0xe0], 0xf158f11e
mov dword [ebp - 0xdc], 0xf178f168
mov dword [ebp - 0xd8], 0xf1b8f18c
mov dword [ebp - 0xd4], 0xf1daf1c8
mov dword [ebp - 0xd0], 0xf22ef1fc
mov dword [ebp - 0xcc], 0xf2aaf26e
mov dword [ebp - 0xc8], 0xf2e8f2ca
mov dword [ebp - 0xc4], 0xf30af2f8
mov dword [ebp - 0xc0], 0xf35ef32c
mov dword [ebp - 0xbc], 0xf3caf39c
mov dword [ebp - 0xb8], 0xf40ef3ea
mov dword [ebp - 0xb4], 0xf45af448
mov dword [ebp - 0xb0], 0xf48cf478
mov dword [ebp - 0xac], 0xf4b8f4b0
mov dword [ebp - 0xa8], 0xf4c8f4c0
mov dword [ebp - 0xa4], 0xf52ef50a
mov dword [ebp - 0xa0], 0xf5aaf56e
mov dword [ebp - 0x9c], 0xf5fef5cc
mov dword [ebp - 0x98], 0xf64af638
mov dword [ebp - 0x94], 0xf68ef66a
mov dword [ebp - 0x90], 0xf70af6ce
mov dword [ebp - 0x8c], 0xf74ef72a
mov dword [ebp - 0x88], 0xf79ef788
mov dword [ebp - 0x84], 0x65636100
mov dword [ebp - 0x80], 0x756f6e69
mov dword [ebp - 0x7c], 0x63617979
mov dword [ebp - 0x78], 0x67656564
mov dword [ebp - 0x74], 0x6b6a6968
mov dword [ebp - 0x70], 0x726f6e6c
mov dword [ebp - 0x6c], 0x75757473
mov dword [ebp - 0x68], 0x6f7a7977
mov dword [ebp - 0x64], 0x6f696175
mov dword [ebp - 0x60], 0x67e1f575
mov dword [ebp - 0x5c], 0x6aef6f6b
mov dword [ebp - 0x58], 0x61e16e67
mov dword [ebp - 0x54], 0x726f6965
mov dword [ebp - 0x50], 0x68747375
mov dword [ebp - 0x4c], 0x6fef6561
mov eax, dword [ebp + 8]
mov ecx, 0x7d
mov dword [ebp - 0x48], 0x79ef
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0x62610000
lea ebx, [eax*8]
mov dword [ebp - 0x3c], 0xe56464e3
or ebx, 7
mov dword [ebp - 0x38], 0x6766e565
mov dword [ebp - 0x34], 0xe9696868
xor edi, edi
mov dword [ebp - 0x30], 0x6cec6c6b
mov dword [ebp - 0x2c], 0x70ef6e6d
mov dword [ebp - 0x28], 0x7372f272
mov dword [ebp - 0x24], 0xf57574f3
mov dword [ebp - 0x20], 0x78777776
mov dword [ebp - 0x1c], 0x74687a79
mov dword [ebp - 0x18], 0xe1617977
mov dword [ebp - 0x14], 0xe565e1e1
mov dword [ebp - 0x10], 0xef6f69e5
mov dword [ebp - 0xc], 0xf575efef
mov word [ebp - 8], 0x79f5
mov dword [ebp - 0x184], 0
nop dword [eax]
lea eax, [edi + ecx]
cdq
sub eax, edx
sar eax, 1
movzx esi, word [ebp + eax*2 - 0x180]
lea edx, [eax + 1]
cmp ebx, esi
cmovb edx, edi
mov edi, edx
lea edx, [eax - 1]
cmovb eax, dword [ebp - 0x184]
cmovb ecx, edx
mov edx, eax
mov dword [ebp - 0x184], edx
cmp ecx, edi
jge 0x101202a0
cmp dword [ebp + 0xc], 0
pop edi
pop esi
pop ebx
jne 0x101202f7
cmp byte [ebp + edx - 0x84], 0
jge 0x101202f7
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d02f2
mov esp, ebp
pop ebp
ret
movzx ecx, word [ebp + edx*2 - 0x180]
mov eax, ecx
and ecx, 7
shr eax, 3
add eax, ecx
cmp dword [ebp + 8], eax
jg 0x101202e6
mov ecx, dword [ebp - 4]
movzx eax, byte [ebp + edx - 0x84]
xor ecx, ebp
and eax, 0x7f
call fcn.100d02f2
mov esp, ebp
pop ebp
ret