Function at 0x1006aa20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x470
mov eax, dword [0x10188068]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x18]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea ebx, [ebp - 0x40c]
mov dword [ebp - 0x43c], edi
mov dword [ebp - 0x450], eax
mov word [ebp - 0x40c], 0x201
mov dword [ebp - 0x458], ebx
mov dword [ebp - 0x45c], 2
nop word [eax + eax]
xor esi, esi
lea eax, [ebp - 0x404]
push 0x400
push esi
push eax
mov dword [ebp - 0x44c], esi
call fcn.1002ae80
movzx ebx, byte [ebx]
add esp, 0xc
mov eax, dword [ebp + 0x10]
sub eax, ebx
mov dword [ebp - 0x440], ebx
mov dword [ebp - 0x414], eax
cmp ebx, eax
jge 0x1006ad7f
mov edx, dword [ebp + 0x14]
mov eax, ebx
imul eax, edx
mov esi, ebx
imul esi, edx
mov ecx, edx
sub ecx, ebx
mov dword [ebp - 0x448], edi
mov dword [ebp - 0x470], ecx
mov dword [ebp - 0x410], esi
lea eax, [edi + eax*2]
mov dword [ebp - 0x444], eax
mov eax, edi
sub eax, ebx
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp + 0xc]
sub eax, edi
sub dword [ebp - 0x414], ebx
mov dword [ebp - 0x460], eax
mov eax, ebx
mov dword [ebp - 0x454], eax
cmp eax, ecx
jge 0x1006ac2b
mov ecx, dword [ebp - 0x460]
lea ebx, [esi + edi]
add ecx, ebx
cmp byte [ecx + eax], 0
je 0x1006ac0d
mov ecx, dword [ebp - 0x440]
mov bl, byte [ebx + eax]
mov byte [ebp - 0x405], bl
movzx edx, byte [ecx + 0x10188b00]
sub esi, edx
mov dword [ebp - 0x464], edx
mov edi, edx
mov dword [ebp - 0x468], esi
imul edi, dword [ebp + 0x14]
mov ecx, edx
mov edx, dword [ebp - 0x43c]
sub ecx, edi
add ecx, dword [ebp - 0x410]
add ecx, eax
cmp bl, byte [ecx + edx]
mov ecx, esi
mov dl, byte [ebp - 0x405]
sbb ebx, ebx
mov esi, dword [ebp - 0x43c]
sub ecx, edi
and ebx, 0x10
add ecx, eax
cmp dl, byte [ecx + esi]
sbb ecx, ecx
and ecx, 4
add ebx, ecx
mov ecx, dword [ebp - 0x410]
add ecx, dword [ebp - 0x464]
add ecx, edi
add ecx, eax
cmp dl, byte [ecx + esi]
sbb ecx, ecx
and ecx, 0x40
add ebx, ecx
mov ecx, dword [ebp - 0x468]
add ecx, edi
mov edi, esi
mov esi, dword [ebp - 0x410]
add ecx, eax
mov eax, dword [ebp - 0x454]
cmp dl, byte [ecx + edi]
sbb ecx, ecx
and ecx, 0x100
add ebx, ecx
lea ecx, [esi + edi]
add ecx, dword [ebp - 0x440]
cmp dl, byte [ecx + eax]
sbb ecx, ecx
and ecx, 0x20
add ebx, ecx
mov ecx, dword [ebp - 0x46c]
add ecx, esi
cmp dl, byte [ecx + eax]
sbb ecx, ecx
and ecx, 0x200
add ebx, ecx
mov ecx, dword [ebp - 0x444]
cmp dl, byte [ecx + eax]
sbb ecx, ecx
and ecx, 0x80
add ebx, ecx
mov ecx, dword [ebp - 0x448]
cmp dl, byte [ecx + eax]
sbb ecx, ecx
and ecx, 8
lea ecx, [ebp + ecx - 0x404]
inc dword [ecx + ebx]
inc dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x454], eax
cmp eax, ecx
jl 0x1006ab00
mov edx, dword [ebp + 0x14]
mov ebx, dword [ebp - 0x440]
add dword [ebp - 0x444], edx
add esi, edx
add dword [ebp - 0x448], edx
sub dword [ebp - 0x414], 1
mov dword [ebp - 0x410], esi
jne 0x1006aaf0
mov esi, dword [ebp - 0x44c]
test esi, esi
je 0x1006ad7f
lea eax, [ebp - 0x404]
push 1
push eax
call fcn.1006a3d0
mov eax, 0x7fffffff
mov dword [ebp - 0x438], 0x5030100
cdq
add esp, 8
xor ebx, ebx
mov dword [ebp - 0x434], 0xd0b0907
idiv esi
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x430], 0x1513110f
mov esi, eax
mov dword [ebp - 0x42c], 0x1d1b1917
mov dword [ebp - 0x428], 0x2b27251f
mov dword [ebp - 0x424], 0x35332f2d
mov dword [ebp - 0x420], 0x3f3d3b37
mov dword [ebp - 0x41c], 0x5f5b5755
mov dword [ebp - 0x418], 0xff7f776f
nop word [eax + eax]
movzx eax, byte [ebp + ebx - 0x437]
lea edx, [edx + 0x18]
movzx ecx, byte [ebp + ebx - 0x438]
mov eax, dword [ebp + eax*4 - 0x404]
imul eax, esi
mov ecx, dword [ebp + ecx*4 - 0x404]
imul ecx, esi
sar eax, 0xb
mov dword [edx - 0x14], eax
movzx eax, byte [ebp + ebx - 0x436]
sar ecx, 0xb
mov dword [edx - 0x18], ecx
mov eax, dword [ebp + eax*4 - 0x404]
imul eax, esi
sar eax, 0xb
mov dword [edx - 0x10], eax
movzx eax, byte [ebp + ebx - 0x435]
mov eax, dword [ebp + eax*4 - 0x404]
imul eax, esi
sar eax, 0xb
mov dword [edx - 0xc], eax
movzx eax, byte [ebp + ebx - 0x434]
mov eax, dword [ebp + eax*4 - 0x404]
imul eax, esi
sar eax, 0xb
mov dword [edx - 8], eax
movzx eax, byte [ebp + ebx - 0x433]
add ebx, 6
mov eax, dword [ebp + eax*4 - 0x404]
imul eax, esi
sar eax, 0xb
mov dword [edx - 4], eax
cmp ebx, 0x24
jl 0x1006ace0
mov ebx, dword [ebp - 0x458]
add dword [ebp - 0x450], 0x90
inc ebx
sub dword [ebp - 0x45c], 1
mov dword [ebp - 0x458], ebx
jne 0x1006aa70
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10029ae5
mov esp, ebp
pop ebp
ret