Function at 0x10004440
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ce034
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x1011b07c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x2c]
push 0x1010150f
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], 0
call fcn.10007870
mov dword [ebp - 4], 0
mov esi, dword [0x10120610]
test esi, esi
jne 0x100044d6
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
call fcn.10006a40
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x100044b8
inc eax
push 1
push eax
push dword [ebp - 0x28]
call fcn.10007470
add esp, 0xc
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 1
jmp 0x100048d4
cmp byte [0x101206d6], 0
je 0x10004517
mov ecx, 0x10b8134
call fcn.100178a0
mov edi, eax
test edi, edi
je 0x10004514
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x10004514
push 4
add edi, 0x6e4
push edi
call ebx
test eax, eax
jne 0x10004514
mov ax, word [edi]
mov word [esi + 0x46], ax
mov edi, dword [ebp - 0x40]
movzx eax, word [esi + 0x46]
add eax, 0xffffff9b
cmp eax, 0x6f
ja case.0x1000452e.113
movzx eax, byte [eax + 0x10004928]
jmp dword [eax*4 + 0x10004904]
mov dword [ebp - 0x3c], 0x48494879
xor esi, esi
mov dword [ebp - 0x38], 0xb180e54
mov dword [ebp - 0x34], 0xb16100b
mov byte [ebp - 0x30], 0
cmp esi, 0xc
jb 0x1000456c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xc
jb 0x1000458f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 0xb
jb 0x10004550
mov byte [ebp - 0x30], 0
jmp 0x1000488d
mov dword [ebp - 0x3c], 0x60626352
xor esi, esi
mov dword [ebp - 0x38], 0x353d207f
mov word [ebp - 0x34], 0x3727
mov byte [ebp - 0x32], 0
nop dword [eax]
cmp esi, 0xa
jb 0x100045dc
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xa
jb 0x100045ff
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 9
jb 0x100045c0
mov byte [ebp - 0x32], 0
jmp 0x1000488d
mov dword [ebp - 0x3c], 0x2b282918
xor esi, esi
mov dword [ebp - 0x38], 0x7f797535
mov word [ebp - 0x34], 0x7d
cmp esi, 9
jb 0x10004644
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 9
jb 0x10004667
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 8
jb 0x10004628
mov byte [ebp - 0x33], 0
jmp 0x1000488d
mov dword [ebp - 0x3c], 0xa0e0f3e
xor esi, esi
mov dword [ebp - 0x38], 0x574c4e13
mov dword [ebp - 0x34], 0x4a4d5b
cmp esi, 0xb
jb 0x100046ad
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xb
jb 0x100046d0
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 0xa
jb 0x10004691
jmp 0x10004889
mov dword [ebp - 0x3c], 0x53525062
xor esi, esi
mov dword [ebp - 0x38], 0x1003154f
mov dword [ebp - 0x34], 0x100d0b10
mov byte [ebp - 0x30], 0
nop word [eax + eax]
cmp esi, 0xc
jb 0x1000471c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xc
jb 0x1000473f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 0xb
jb 0x10004700
mov byte [ebp - 0x30], 0
jmp 0x1000488d
mov dword [ebp - 0x3c], 0x73717341
xor esi, esi
mov dword [ebp - 0x38], 0x262e336c
mov word [ebp - 0x34], 0x2434
mov byte [ebp - 0x32], 0
nop dword [eax]
cmp esi, 0xa
jb 0x1000478c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xa
jb 0x100047af
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 9
jb 0x10004770
mov byte [ebp - 0x32], 0
jmp 0x1000488d
mov dword [ebp - 0x3c], 0x1020032
xor esi, esi
mov dword [ebp - 0x38], 0x55535f1f
mov word [ebp - 0x34], 0x57
cmp esi, 9
jb 0x100047f4
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 9
jb 0x10004817
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 8
jb 0x100047d8
mov byte [ebp - 0x33], 0
jmp 0x1000488d
mov dword [ebp - 0x3c], 0x7c787a48
xor esi, esi
mov dword [ebp - 0x38], 0x213a3865
mov dword [ebp - 0x34], 0x3c3b2d
nop
cmp esi, 0xb
jb 0x1000485c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xb
jb 0x1000487f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 0xa
jb 0x10004840
mov byte [ebp - 0x31], 0
lea eax, [ebp - 0x3b]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10006bb0
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
call fcn.10006a40
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x100048bb
inc eax
push 1
push eax
push dword [ebp - 0x28]
call fcn.10007470
add esp, 0xc
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.10006f50
lea ecx, [ebp - 0x2c]
call fcn.10006df0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004d370
mov esp, ebp
pop ebp
ret 4