Function at 0x100eed30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x10160004]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x54], 0x35
mov byte [ebp - 0x53], 0x6b
mov byte [ebp - 0x52], 0x43
mov byte [ebp - 0x51], 0x70
mov byte [ebp - 0x50], 0x76
mov byte [ebp - 0x4f], 0x35
mov byte [ebp - 0x4e], 0x35
mov byte [ebp - 0x4d], 0x56
mov byte [ebp - 0x4c], 0x61
mov byte [ebp - 0x4b], 0x66
mov byte [ebp - 0x4a], 0x55
mov byte [ebp - 0x49], 0x46
mov byte [ebp - 0x48], 0x65
mov byte [ebp - 0x47], 0x73
mov byte [ebp - 0x46], 0x64
mov byte [ebp - 0x45], 0x6b
mov byte [ebp - 0x44], 0x57
mov byte [ebp - 0x43], 0x58
mov byte [ebp - 0x42], 0x46
mov byte [ebp - 0x41], 0x36
mov byte [ebp - 0x40], 0x52
mov byte [ebp - 0x3f], 0x6f
mov byte [ebp - 0x3e], 0x51
mov byte [ebp - 0x3d], 0x58
mov byte [ebp - 0x3c], 0x34
mov byte [ebp - 0x3b], 0x55
mov byte [ebp - 0x3a], 0x34
mov byte [ebp - 0x39], 0x72
mov byte [ebp - 0x38], 0x48
mov byte [ebp - 0x37], 0x55
mov byte [ebp - 0x36], 0x6b
mov byte [ebp - 0x35], 0x62
mov byte [ebp - 0x34], 0x31
mov byte [ebp - 0x33], 0x31
mov byte [ebp - 0x32], 0x61
mov byte [ebp - 0x31], 0x54
mov byte [ebp - 0x30], 0x57
mov byte [ebp - 0x2f], 0x50
mov byte [ebp - 0x2e], 0x30
mov byte [ebp - 0x2d], 0x74
mov byte [ebp - 0x2c], 0x41
mov byte [ebp - 0x2b], 0x6e
mov byte [ebp - 0x2a], 0x74
mov byte [ebp - 0x29], 0x31
mov byte [ebp - 0x28], 0x31
mov byte [ebp - 0x27], 0x61
mov byte [ebp - 0x26], 0x78
mov byte [ebp - 0x25], 0x34
mov byte [ebp - 0x24], 0x4b
mov byte [ebp - 0x23], 0x36
mov byte [ebp - 0x22], 0x74
mov byte [ebp - 0x21], 0x4f
mov byte [ebp - 0x20], 0x77
mov byte [ebp - 0x1f], 0x56
mov byte [ebp - 0x1e], 0x61
mov byte [ebp - 0x1d], 0x35
mov byte [ebp - 0x1c], 0x33
mov byte [ebp - 0x1b], 0x30
mov byte [ebp - 0x1a], 0x43
mov byte [ebp - 0x19], 0x61
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x17], 0x37
mov byte [ebp - 0x16], 0x44
mov byte [ebp - 0x15], 0x41
mov byte [ebp - 0x14], 0x34
mov byte [ebp - 0x13], 0x69
mov byte [ebp - 0x12], 0x33
mov byte [ebp - 0x11], 0x64
mov byte [ebp - 0x10], 0x45
mov byte [ebp - 0xf], 0x6b
mov byte [ebp - 0xe], 0x47
mov byte [ebp - 0xd], 0x4d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x37
mov byte [ebp - 0xa], 0x33
mov byte [ebp - 9], 0x68
mov byte [ebp - 8], 0x57
mov byte [ebp - 7], 0x56
mov byte [ebp - 6], 0x67
mov byte [ebp - 5], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x90], str.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
mov dword [ebp - 0x88], 0x100eea90
push 0x29f
call fcn.10103514
add esp, 4
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x58], eax
imul ecx, dword [ebp - 0x60], 0x381
mov dword [ebp - 0x58], ecx
imul edx, dword [ebp - 0x5c], 0x1a7
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x8c]
push eax
mov ecx, dword [ebp - 0x90]
push ecx
push 0x24b
mov edx, dword [ebp - 0x84]
push edx
push 0x29f
mov eax, dword [ebp - 0x88]
push eax
call fcn.100073e0
add esp, 0x18
mov ecx, dword [ebp - 0x5c]
add ecx, 0x1f9
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x5c]
xor edx, dword [ebp - 0x60]
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x64], 0x72
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 1
mov eax, dword [ebp + 8]
add eax, dword [ebp + 0xc]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x78], ecx
mov edx, 1
test edx, edx
je 0x100eefe6
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x7c]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
mov eax, 0x29f
cdq
idiv dword [ebp - 0x5c]
test edx, edx
jne 0x100eefc0
mov dword [ebp - 0x68], 0xb5
mov eax, 0x29f
cdq
idiv dword [ebp - 0x5c]
mov dword [ebp - 0x60], eax
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.101016f0
add esp, 0xc
mov edx, dword [ebp - 0x64]
add edx, dword [ebp - 0x68]
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x68], 0x3e9
mov dword [ebp - 0x64], 0x19574
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x64]
imul ecx, dword [ebp - 0x68]
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp - 0x7c]
xor edx, 0x283
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x58]
cmp edx, dword [ebp - 0x60]
jl 0x100eeff2
mov eax, dword [ebp - 0x84]
push eax
call fcn.1010350f
add esp, 4
mov dword [ebp - 0x74], str.iW7Ir7Ab1w6TvQ2P47B32ew7E77K552pL46fUw25XI2x20sIANG0PDALQ7i5Oiq2wl27LvOkqAap36Jb7NfVLo126lvOcD2eHtp70qF4iJi3uf3QTJv3MQEv4iBbK35gdIE3xdM5arVQSLCwJErqf34o1st0ouMr4OeHE7kRgBNg350F5rJmdvW1eKX2UUfeIS1HXq1RQrrWV7Xiax55ul20t1qU3riHP3Ccl3Ua1PbNuv7xTk3hA7f2CRnuX07F6HXu24asxK0f16K71Qa3r0jsUN700Qxrvdb4StMj1Qx7Q4MPTs313TK4E2g7PQ35S4ShP556iMeRlPjiFfVNt7bx52XXLEHAfFj1j74IwKLCM46rvLq6Xo05bs4hwa7WIf4K7N1pGE1Iuqnjkl7qTqNB1hikowEkwAU4PovuIpaiAIXQNpd1wKwM1MHj5iLKT2OBcufqDhql6EwWb5UaKwH05Ajti62GUn7A412S5PKqKm75bGcMq6OtDpB3k0AOwp17HmjuDdoEds36w7J0567Dh01RP60004dA4HKh5lEB1Sjg324El3WN4KthJU56LjDFHhLr431NC7dUx4m1Lvrifm431UQ5iVDkVP3TV3oOWVCqC3I1grO527603mpdL23rJ67HEqfMD73lUajUC7x4VOubTq1uIcvXtJw40bo67N53Vh3sOiTtXD1DtL3ain116iP74t17sSJX63P52p5Gj34DU20UL0ewE043D7NALEG00jd27iM6gi4p023tu3W3sP0HOaUMu6NPQBAQ46RrCVHeoXa56vlBD3Hc0rg2aP7UebGrL0a4hPdpdPnBT6QM5DIk3Eu61MAnWc43OW56e00bf3IeFPW17jxK5shUV5GhXp65Se3Sg0l662hC6eX346IFrtrea01xaO2nwhGVu76100aKC27xsd3M6GwlaU0LwHfhg14HpFW6s3c54Q654xB1ghjWx5AN0A2XJj6GF5rduTFJLm442CL0v2HXi656O1QoAX34eCx0F2n004dnx43Pae2snpg145gfNbl2O5dBxDt6IMe1PSx4R564kQr2hn41Mq4s226KM6c77LmP0Ams4CC0nc515UQGtecX6KoLH3il3653fH00c0PPNH6cDTp6bx7vo430RB3RNKg2wJ5M1XOJ21iIX60oHkDkjq1D557efG1n4Sx6gwG05QDD515mj45W6w2PQogD307ax24e2oe1EEoR6DnVE417xx36q315uh7FUupjk1C30cU3OROd743nIuatIQ7fVCmH7df2mjmPvdHVMMhRLx200rLSRr4JtQoo676uUjB633sEeTI0wBil436Uu2iLTGkBAsa6N7gkc21Onv1GAl0OBdE6pK1OVDC75glJ7d2l2kHprBvFPgj34H7flmO4X5m4DXQef574r6u1j03K0D34IK30AuHel40mW5iwQ3JP5AGuSC4
mov dword [ebp - 0x78], str.KNO4c4sLAM52W44bF6BCd2jaj1HixDma1a6452I7Iga4nNXOMf6LLP0Qin21x5EnJ1coNF24iwmww17KG266sC41F5aHX363txxskeSrBJ6lFtrmcHg41jwIl52Oe6JqL4354vOg4rH3Cw5p5xrQG3vmKXCK56x454pxcQJoEu6BbXeKGHf4iS4Q14nukONu64BI5k7iRdVxo2moTp0kJ3ms0hxVNQL60LWi76h32Nq4vF4ukF7JLsheTb7Xb367a17vx0IGLkWsuD5B352VNWx5c7I63lCw5ML2i6ogTL531s06QuoKIj30d2G3RvTt6IOVNh72NDe31JlSC037
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.101032d0
add esp, 4
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 0x78]
push edx
call fcn.101032d0
add esp, 4
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x58], 0
jmp 0x100ef0cd
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.101032d0
add esp, 4
cmp dword [ebp - 0x58], eax
jae 0x100ef107
mov edx, dword [ebp - 0x58]
movsx eax, byte [ebp + edx - 0x54]
push eax
call fcn.10103107
add esp, 4
test eax, eax
je 0x100ef105
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ebp + ecx - 0x54]
add edx, 0x1d
mov eax, dword [ebp - 0x58]
mov byte [ebp + eax - 0x54], dl
jmp 0x100ef0c4
mov ecx, dword [ebp - 0x68]
cmp ecx, dword [ebp - 0x60]
jle 0x100ef38d
mov dword [ebp - 0x58], 0
jmp 0x100ef125
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
lea eax, [ebp - 0x54]
push eax
call fcn.101032d0
add esp, 4
cmp dword [ebp - 0x58], eax
jae 0x100ef167
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ebp + ecx - 0x54]
push edx
call fcn.101030da
add esp, 4
test eax, eax
je 0x100ef165
mov eax, dword [ebp - 0x58]
movsx ecx, byte [ebp + eax - 0x54]
mov edx, dword [ebp - 0x58]
movsx eax, byte [ebp + edx - 0x54]
lea ecx, [ecx + eax*2]
mov edx, dword [ebp - 0x58]
mov byte [ebp + edx - 0x54], cl
jmp 0x100ef11c
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x70], 0x159
mov dword [ebp - 0x6c], 5
mov dword [ebp - 0x58], 0
jmp 0x100ef18d
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x58]
cmp edx, dword [ebp - 0x70]
jge 0x100ef1cb
sub esp, 8
movsd xmm0, qword [0x101551a8]
movsd qword [esp], xmm0
cvtsi2sd xmm0, dword [ebp - 0x6c]
sub esp, 8
movsd qword [esp], xmm0
call fcn.10103950
add esp, 0x10
fstp qword [ebp - 0xa0]
mov edx, dword [ebp - 0x6c]
add edx, 2
mov dword [ebp - 0x6c], edx
jmp 0x100ef184
mov dword [ebp - 0x64], 0
jmp 0x100ef1e6
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 0x68]
sub edx, dword [ebp - 0x60]
cmp dword [ebp - 0x64], edx
jg 0x100ef335
mov dword [ebp - 0x6c], 0xe5
mov dword [ebp - 0x58], 0
jmp 0x100ef20e
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0x6c]
jge 0x100ef24d
cvtsi2sd xmm0, dword [ebp - 0x6c]
sub esp, 8
movsd qword [esp], xmm0
call fcn.10103800
add esp, 8
fstp qword [ebp - 0xa8]
movsd xmm0, qword [ebp - 0xa8]
cvttsd2si ecx, xmm0
mov eax, dword [ebp - 0x6c]
cdq
idiv ecx
mov eax, dword [ebp - 0x6c]
sub eax, edx
mov dword [ebp - 0x6c], eax
jmp 0x100ef205
mov dword [ebp - 0x5c], 0
jmp 0x100ef25f
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
mov edx, dword [ebp - 0x5c]
cmp edx, dword [ebp - 0x60]
jge 0x100ef281
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x5c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x78]
add edx, dword [ebp - 0x5c]
movsx eax, byte [edx]
cmp ecx, eax
je 0x100ef27f
jmp 0x100ef281
jmp 0x100ef256
mov dword [ebp - 0x70], 0
jmp 0x100ef293
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
lea edx, [ebp - 0x54]
push edx
call fcn.101032d0
add esp, 4
cmp dword [ebp - 0x70], eax
jae 0x100ef2cd
mov eax, dword [ebp - 0x70]
movsx ecx, byte [ebp + eax - 0x54]
push ecx
call fcn.10103107
add esp, 4
test eax, eax
je 0x100ef2cb
mov edx, dword [ebp - 0x70]
movsx eax, byte [ebp + edx - 0x54]
add eax, 0x14
mov ecx, dword [ebp - 0x70]
mov byte [ebp + ecx - 0x54], al
jmp 0x100ef28a
mov edx, dword [ebp - 0x5c]
cmp edx, dword [ebp - 0x60]
jne 0x100ef2dd
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], eax
jmp 0x100ef335
mov dword [ebp - 0x58], 0
jmp 0x100ef2ef
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
lea edx, [ebp - 0x54]
push edx
call fcn.101032d0
add esp, 4
cmp dword [ebp - 0x58], eax
jae 0x100ef330
mov eax, dword [ebp - 0x58]
movsx ecx, byte [ebp + eax - 0x54]
push ecx
call fcn.10103053
add esp, 4
test eax, eax
je 0x100ef32e
mov edx, dword [ebp - 0x58]
movsx eax, byte [ebp + edx - 0x54]
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ebp + ecx - 0x54]
add eax, edx
mov ecx, dword [ebp - 0x58]
mov byte [ebp + ecx - 0x54], al
jmp 0x100ef2e6
jmp 0x100ef1d4
mov dword [ebp - 0x58], 0
jmp 0x100ef347
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
lea eax, [ebp - 0x54]
push eax
call fcn.101032d0
add esp, 4
cmp dword [ebp - 0x58], eax
jae 0x100ef38d
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ebp + ecx - 0x54]
push edx
call fcn.10103024
add esp, 4
test eax, eax
je 0x100ef38b
mov eax, dword [ebp - 0x58]
movsx ecx, byte [ebp + eax - 0x54]
mov edx, dword [ebp - 0x58]
movsx eax, byte [ebp + edx - 0x54]
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x58]
mov byte [ebp + eax - 0x54], cl
jmp 0x100ef33e
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ff22d
mov esp, ebp
pop ebp
ret