Function at 0x100139e8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov edi, dword [esp + 0x38]
lea ecx, [esp + 0x10]
lea eax, [esp + 0xf]
mov edx, 0x70451aa5
mov dword [esp], ecx
mov ecx, 0xb5a3fbf
mov dword [eax - 0xb], 0x62677343
mov dword [eax - 7], 0x66486878
mov word [eax - 3], 0x6c64
mov byte [eax - 1], 0x5d
cmp edx, 0xb5a3fbf
je 0x10013a41
cmp edx, 0x70451aa5
jne 0x10013a20
mov byte [eax], 0
inc eax
mov edx, 0x70451aa5
cmp eax, dword [esp]
cmove edx, ecx
jmp 0x10013a20
xor ecx, ecx
mov eax, 0x4bb65d4e
mov edx, 0x750cdcc6
cmp edx, 0x4bb65d4e
je 0x10013a78
cmp edx, 0x53129606
je 0x10013ab9
cmp edx, 0x750cdcc6
jne 0x10013a4d
mov dword [esp], ecx
mov edx, dword [esp]
cmp edx, 0xb
mov edx, 0x53129606
cmovb edx, eax
jmp 0x10013a4d
mov ecx, dword [esp]
mov bl, byte [esp + ecx + 4]
mov edx, ebx
and bl, 0x8f
not dl
and dl, 0x70
or bl, dl
mov edx, dword [esp]
mov bh, bl
xor bl, 3
xor bh, 0xb0
and bl, 0x47
and bh, 0xb8
add dl, 0x84
or bh, bl
mov bl, dl
and dl, 0xb8
not bl
and bl, 0x47
or dl, bl
xor dl, bh
mov byte [esp + ecx + 4], dl
mov ecx, dword [esp]
inc ecx
jmp 0x10013a48
lea esi, [esp + 4]
mov ecx, esi
mov byte [esi + 0xb], 0
call fcn.100140c8
xor ecx, ecx
mov edx, 3
push ecx
push ecx
push edx
push ecx
push edx
push 0x80000000
push edi
call eax
mov dword [esp + 0x14], eax
mov eax, 0xebb55af4
mov ebp, 0x5402a6a9
cmp eax, 0xebb55af3
jle 0x10013b5b
cmp eax, 0xeb1584e
jg 0x10013bde
cmp eax, 0xebb55af4
je 0x10013c59
cmp eax, 0xf93ce4f0
jne 0x10013aea
lea eax, [esp + 0x11]
mov ecx, 0x3c2abee
mov dword [esp + 4], 0x4f766447
mov dword [esp + 8], 0x4a7a7e6d
mov dword [esp + 0xc], 0x79657b7a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0x5402a6a9
je 0x10013c72
cmp ecx, 0x3c2abee
jne 0x10013b36
mov byte [eax], 0
inc eax
mov ecx, 0x3c2abee
cmp eax, dword [esp]
cmove ecx, ebp
jmp 0x10013b36
cmp eax, 0xc74894ac
jg 0x10013c3e
cmp eax, 0xad7d296a
je 0x10013cda
cmp eax, 0xaf7d5c82
jne 0x10013aea
lea eax, [esp + 0x20]
mov ecx, 0x70451aa5
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
lea eax, [esp + 0x10]
mov dword [esp + 4], 0x45766447
mov dword [esp + 8], 0x5c6b6165
mov word [esp + 0xc], 0x7361
mov byte [esp + 0xe], 0x6f
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0xb5a3fbf
je 0x10013d27
cmp ecx, 0x70451aa5
jne 0x10013bb4
mov byte [eax], 0
inc eax
mov ecx, 0x70451aa5
mov edx, 0xb5a3fbf
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10013bb4
cmp eax, 0xeb1584f
je 0x10013d9d
cmp eax, 0x7dac9bf4
jne 0x10013aea
lea eax, [esp + 0xd]
mov ecx, 0x7be00c1f
mov dword [esp + 4], 0x67636452
mov dword [esp + 8], 0x6a62644a
mov dword [esp], eax
lea eax, [esp + 0xc]
cmp ecx, 0xc2b17017
je 0x10013df3
cmp ecx, 0x7be00c1f
jne 0x10013c14
mov byte [eax], 0
inc eax
mov ecx, 0x7be00c1f
mov edx, 0xc2b17017
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10013c14
cmp eax, 0xc74894ad
je 0x10013e5b
cmp eax, 0xdda2d4a4
jne 0x10013aea
jmp 0x100140be
mov eax, dword [esp + 0x14]
mov ecx, 0xf93ce4f0
cmp eax, 0xffffffff
mov eax, 0xaf7d5c82
cmove eax, ecx
jmp 0x10013aea
xor eax, eax
mov ecx, 0xf2865056
cmp ecx, 0xd7d8c57f
je 0x10013ea8
cmp ecx, 0x1ca91783
je 0x10013cad
cmp ecx, 0xf2865056
jne 0x10013c79
mov dword [esp], eax
mov edx, 0x1ca91783
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0xd7d8c57f
cmovb ecx, edx
jmp 0x10013c79
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0x7b
not al
and al, 0x84
or dl, al
mov eax, dword [esp]
mov dh, dl
not dh
add al, 0x84
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10013c74
lea eax, [esp + 0x11]
mov ecx, 0x3c2abee
mov dword [esp + 4], 0x4f766447
mov dword [esp + 8], 0x4a7a7e6d
mov dword [esp + 0xc], 0x79657b7a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0x5402a6a9
je 0x10013ec2
cmp ecx, 0x3c2abee
jne 0x10013d02
mov byte [eax], 0
inc eax
mov ecx, 0x3c2abee
cmp eax, dword [esp]
cmove ecx, ebp
jmp 0x10013d02
xor eax, eax
mov ecx, 0x750cdcc6
cmp ecx, 0x4bb65d4e
je 0x10013d62
cmp ecx, 0x53129606
je 0x10013f3a
cmp ecx, 0x750cdcc6
jne 0x10013d2e
mov dword [esp], eax
mov edx, 0x4bb65d4e
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x53129606
cmovb ecx, edx
jmp 0x10013d2e
mov eax, dword [esp]
mov dl, byte [esp + eax + 4]
mov ecx, edx
mov dh, dl
and dl, 0x48
not cl
and dh, 0x94
and cl, 0x23
or dh, cl
mov ecx, dword [esp]
xor dh, 0x10
or dl, dh
mov dh, 0x7b
sub dh, cl
add cl, 0x84
and dh, 0xb7
and cl, 0x48
or cl, dh
xor cl, dl
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x10013d29
lea eax, [esp + 0x10]
mov ecx, 0x70451aa5
mov dword [esp + 4], 0x706d6d43
mov dword [esp + 8], 0x616f4569
mov word [esp + 0xc], 0x656c
mov byte [esp + 0xe], 0x6f
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0xb5a3fbf
je 0x10013f6b
cmp ecx, 0x70451aa5
jne 0x10013dc9
mov byte [eax], 0
inc eax
mov ecx, 0x70451aa5
mov edx, 0xb5a3fbf
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10013dc9
xor eax, eax
mov ecx, 0xc1053dcf
cmp ecx, 0x84b2e2ad
je 0x10013e2e
cmp ecx, 0x985b5df8
je 0x10013fe3
cmp ecx, 0xc1053dcf
jne 0x10013dfa
mov dword [esp], eax
mov edx, 0x84b2e2ad
mov ecx, dword [esp]
cmp ecx, 8
mov ecx, 0x985b5df8
cmovb ecx, edx
jmp 0x10013dfa
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0x7b
not al
and al, 0x84
or dl, al
mov eax, dword [esp]
mov dh, dl
not dh
add al, 0x84
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10013df5
lea eax, [esp + 0x11]
mov ecx, 0x3c2abee
mov dword [esp + 4], 0x4f766447
mov dword [esp + 8], 0x4a7a7e6d
mov dword [esp + 0xc], 0x79657b7a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0x5402a6a9
je 0x1001401a
cmp ecx, 0x3c2abee
jne 0x10013e83
mov byte [eax], 0
inc eax
mov ecx, 0x3c2abee
cmp eax, dword [esp]
cmove ecx, ebp
jmp 0x10013e83
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.100140c8
call eax
mov edi, eax
mov eax, 0xdda2d4a4
jmp 0x10013aea
xor eax, eax
mov ecx, 0xf2865056
cmp ecx, 0xd7d8c57f
je 0x10014082
cmp ecx, 0x1ca91783
je 0x10013efd
cmp ecx, 0xf2865056
jne 0x10013ec9
mov dword [esp], eax
mov edx, 0x1ca91783
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0xd7d8c57f
cmovb ecx, edx
jmp 0x10013ec9
mov eax, dword [esp]
mov dl, byte [esp + eax + 4]
mov ecx, edx
and dl, 0x7b
not cl
and cl, 0x84
or dl, cl
mov ecx, dword [esp]
mov dh, dl
and dl, 4
not dh
and dh, 0xfb
add cl, 0x84
or dl, dh
mov dh, cl
and cl, 4
not dh
and dh, 0xfb
or cl, dh
xor cl, dl
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x10013ec4
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.100140c8
push 0
push dword [esp + 0x18]
call eax
mov dword [esp + 0x1c], eax
mov ecx, 0xad7d296a
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
mov eax, 0x7dac9bf4
cmove eax, ecx
jmp 0x10013aea
xor eax, eax
mov ecx, 0x750cdcc6
cmp ecx, 0x4bb65d4e
je 0x10013fa6
cmp ecx, 0x53129606
je 0x1001409c
cmp ecx, 0x750cdcc6
jne 0x10013f72
mov dword [esp], eax
mov edx, 0x4bb65d4e
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x53129606
cmovb ecx, edx
jmp 0x10013f72
mov eax, dword [esp]
mov dl, byte [esp + eax + 4]
mov ecx, edx
and dl, 0x7b
not cl
and cl, 0x84
or dl, cl
mov ecx, dword [esp]
mov dh, dl
and dl, 0x7d
not dh
and dh, 0x82
add cl, 0x84
or dl, dh
mov dh, cl
and cl, 0x7d
not dh
and dh, 0x82
or cl, dh
xor cl, dl
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x10013f6d
mov ecx, esi
mov byte [esp + 0xc], 0
call fcn.100140c8
push 0
lea ecx, [esp + 0x24]
push ecx
push dword [esp + 0x24]
push dword [esp + 0x48]
push dword [esp + 0x24]
call eax
test eax, eax
mov eax, 0xeb1584f
mov ecx, 0xc74894ad
cmove eax, ecx
xor ebx, ebx
jmp 0x10013aea
xor eax, eax
mov ecx, 0xf2865056
cmp ecx, 0xd7d8c57f
je 0x10014082
cmp ecx, 0x1ca91783
je 0x10014051
cmp ecx, 0xf2865056
jne 0x10014021
mov dword [esp], eax
mov edx, 0x1ca91783
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0xd7d8c57f
cmovb ecx, edx
jmp 0x10014021
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0x93
not al
and al, 0x6c
or dl, al
mov eax, dword [esp]
mov dh, dl
xor dl, 0x17
xor dh, 0xe8
add al, 0x84
and dl, al
not al
and al, dh
or al, dl
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x1001401c
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.100140c8
call eax
mov ebx, eax
mov eax, 0xeb1584f
jmp 0x10013aea
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.100140c8
push dword [esp + 0x14]
call eax
mov eax, dword [esp + 0x18]
mov eax, 0xdda2d4a4
mov edi, ebx
jmp 0x10013aea
mov eax, edi
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret