Function at 0x10021850
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061728
mov eax, dword fs:[0]
push eax
sub esp, 0x58
push ebx
push esi
push edi
mov eax, dword [0x10075604]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov cl, 0x33
mov dword [ebp - 0x1c], 0x5d477133
mov dword [ebp - 0x18], 0x435a656c
xor eax, eax
mov dword [ebp - 0x14], 0x5f465265
mov word [ebp - 0x10], 0x47
nop dword [eax]
xor byte [ebp + eax - 0x1b], cl
inc eax
cmp eax, 0xc
jae 0x100218af
mov cl, byte [ebp - 0x1c]
jmp 0x100218a0
cmp byte [ebp - 0x1b], 0
mov byte [ebp - 0xf], 0
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x64], 0
jne 0x100218cf
xor ecx, ecx
jmp 0x100218de
lea ecx, [ebp - 0x1b]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100218d5
sub ecx, edx
push ecx
lea eax, [ebp - 0x1b]
push eax
lea ecx, [ebp - 0x64]
call fcn.10002800
lea eax, [ebp - 0x64]
mov dword [ebp - 4], 0
push eax
push dword [esi]
call fcn.10012430
mov dword [esi + 4], eax
add esp, 8
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0x10
jb 0x10021921
inc eax
push 1
push eax
push dword [ebp - 0x64]
call fcn.10002610
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push dword [esi + 4]
call edi
test eax, eax
je 0x10021939
mov dword [esi + 4], 0
mov byte [ebp - 0x18], 0x4b
mov al, 0x2a
xor al, byte [ebp - 0x18]
mov cl, 0x38
mov bh, 0x29
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x18]
mov dh, cl
xor bh, byte [ebp - 0x18]
mov dl, 0x2e
mov bl, 0x14
mov byte [ebp - 0xf], 0
mov ah, 0x28
mov byte [ebp - 0x17], bh
mov ch, 0x24
mov byte [ebp - 0xf], 0
xor cl, al
mov dword [ebp - 0x50], 0xf
xor dl, al
mov byte [ebp - 0x15], cl
xor bl, al
mov byte [ebp - 0x14], dl
xor ah, al
mov byte [ebp - 0x13], bl
xor ch, al
mov byte [ebp - 0x12], ah
xor dh, al
mov byte [ebp - 0x11], ch
mov byte [ebp - 0x10], dh
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x64], 0
test bh, bh
jne 0x1002199c
xor ecx, ecx
jmp 0x100219ab
lea ecx, [ebp - 0x17]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100219a2
sub ecx, edx
push ecx
lea eax, [ebp - 0x17]
push eax
lea ecx, [ebp - 0x64]
call fcn.10002800
lea eax, [ebp - 0x64]
mov dword [ebp - 4], 1
push eax
push dword [esi]
call fcn.10012430
mov dword [esi + 8], eax
add esp, 8
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0x10
jb 0x100219ee
inc eax
push 1
push eax
push dword [ebp - 0x64]
call fcn.10002610
add esp, 0xc
movaps xmm0, xmmword [0x10068970]
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
mov byte [ebp - 0x10], 0
nop
mov al, byte [ebp - 0x20]
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0xf
jb 0x10021a00
cmp byte [ebp - 0x1f], 0
mov byte [ebp - 0x10], 0
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x64], 0
jne 0x10021a2d
xor ecx, ecx
jmp 0x10021a3c
lea ecx, [ebp - 0x1f]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10021a33
sub ecx, edx
push ecx
lea eax, [ebp - 0x1f]
push eax
lea ecx, [ebp - 0x64]
call fcn.10002800
lea eax, [ebp - 0x64]
mov dword [ebp - 4], 2
push eax
push dword [esi]
call fcn.10012430
mov dword [esi + 0xc], eax
add esp, 8
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0x10
jb 0x10021a7f
inc eax
push 1
push eax
push dword [ebp - 0x64]
call fcn.10002610
add esp, 0xc
movaps xmm0, xmmword [0x10068960]
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
mov word [ebp - 0x10], 0x2436
mov byte [ebp - 0xe], 0
mov al, byte [ebp - 0x20]
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0x11
jb 0x10021a96
cmp byte [ebp - 0x1f], 0
mov byte [ebp - 0xe], 0
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x64], 0
jne 0x10021ac3
xor ecx, ecx
jmp 0x10021ad9
lea ecx, [ebp - 0x1f]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10021ad0
sub ecx, edx
push ecx
lea eax, [ebp - 0x1f]
push eax
lea ecx, [ebp - 0x64]
call fcn.10002800
lea eax, [ebp - 0x64]
mov dword [ebp - 4], 3
push eax
push dword [esi]
call fcn.10012430
mov dword [esi + 0x10], eax
add esp, 8
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0x10
jb 0x10021b1c
inc eax
push 1
push eax
push dword [ebp - 0x64]
call fcn.10002610
add esp, 0xc
movaps xmm0, xmmword [str.H_]
xor ecx, ecx
movups xmmword [ebp - 0x34], xmm0
mov word [ebp - 0x24], 0x3f2d
mov byte [ebp - 0x22], 0
mov al, byte [ebp - 0x34]
xor byte [ebp + ecx - 0x33], al
inc ecx
cmp ecx, 0x11
jb 0x10021b33
cmp byte [ebp - 0x33], 0
mov byte [ebp - 0x22], 0
mov dword [ebp - 0x38], 0xf
mov dword [ebp - 0x3c], 0
mov byte [ebp - 0x4c], 0
jne 0x10021b60
xor ecx, ecx
jmp 0x10021b6f
lea ecx, [ebp - 0x33]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10021b66
sub ecx, edx
push ecx
lea eax, [ebp - 0x33]
push eax
lea ecx, [ebp - 0x4c]
call fcn.10002800
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 4
push eax
push dword [esi]
call fcn.10012430
mov dword [esi + 0x14], eax
add esp, 8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0x10
jb 0x10021bb2
push 1
inc eax
push eax
push dword [ebp - 0x4c]
call fcn.10002610
add esp, 0xc
push 4
push dword [esi + 8]
mov dword [ebp - 0x38], 0xf
mov dword [ebp - 0x3c], 0
mov byte [ebp - 0x4c], 0
call edi
test eax, eax
je 0x10021bd6
mov dword [esi + 8], 0
push 4
push dword [esi + 0xc]
call edi
test eax, eax
je 0x10021be8
mov dword [esi + 0xc], 0
push 4
push dword [esi + 0x10]
call edi
test eax, eax
je 0x10021bfa
mov dword [esi + 0x10], 0
push 4
push dword [esi + 0x14]
call edi
test eax, eax
je 0x10021c0c
mov dword [esi + 0x14], 0
mov eax, dword [esi + 0xc]
test eax, eax
je 0x10021c2b
cmp dword [0x1007614c], 0
je 0x10021c20
push 3
jmp 0x10021c22
push 2
push eax
call fcn.10012a70
add esp, 8
mov eax, dword [esi + 0x10]
test eax, eax
je 0x10021c4a
cmp dword [0x10076150], 0
je 0x10021c3f
push 3
jmp 0x10021c41
push 2
push eax
call fcn.10012a70
add esp, 8
cmp dword [esi + 0x14], 0
je 0x10021c83
cmp dword [0x10076154], 0
mov eax, 0xeb
mov ecx, 0x74
cmovne eax, ecx
mov byte [0x427dcd], al
cmp dword [0x10076154], 0
je 0x10021c76
push 3
jmp 0x10021c78
push 2
push dword [esi + 0x14]
call fcn.10012a70
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret