Function at 0x10016a77
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0xa0
mov eax, 0x10078cae
call fcn.10040a5d
mov ebx, ecx
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x70], eax
and dword [ebp - 4], 0
xor eax, eax
inc eax
cmp dword [0x100a6048], 0
je 0x10016f17
lea eax, [ebx + 0x10]
push 0xa
mov dword [ebp - 0x50], eax
mov esi, eax
pop eax
mov dword [ebp - 0x34], eax
mov ecx, dword [esi]
test ecx, ecx
je 0x10016ac9
xor dl, dl
call fcn.1000f6a4
mov eax, dword [ebp - 0x34]
add esi, 4
sub eax, 1
mov dword [ebp - 0x34], eax
jne 0x10016ab9
mov ecx, dword [ebx]
call dword [0x10093d24]
mov esi, dword [ebp - 0x70]
mov ax, word [edi]
cmp ax, word [esi]
jb 0x10016c39
mov ax, word [edi + 2]
cmp ax, word [esi + 2]
jb 0x10016c39
mov ax, word [edi + 4]
cmp ax, word [esi + 4]
jb 0x10016c39
mov ax, word [edi + 6]
cmp ax, word [esi + 6]
jb 0x10016c39
mov ecx, dword [ebx + 0x10]
call fcn.1000f5c0
mov ecx, dword [ebx + 8]
mov edi, edx
call fcn.1000f5c0
mov ecx, dword [ebx + 0x10]
mov esi, eax
call fcn.1000f635
mov ecx, dword [ebx + 8]
add eax, edi
push eax
mov edx, esi
call fcn.1000f65b
cmp dword [ebp + 0x28], 0x10
lea eax, [ebp + 0x14]
pop ecx
cmovae eax, dword [ebp + 0x14]
mov cl, 0x35
push eax
mov dword [ebp - 0x30], 0x461035
xor eax, eax
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 2
jae 0x10016b65
mov cl, byte [ebp - 0x30]
jmp 0x10016b56
sub esp, 0x18
mov byte [ebp - 0x2d], 0
lea eax, [ebp - 0x2f]
mov ecx, esp
push eax
call fcn.10004181
lea eax, [ebp - 0x94]
push eax
call fcn.10003c4b
add esp, 0x20
xor ecx, ecx
mov edx, eax
inc ecx
mov byte [ebp - 4], cl
mov ecx, dword [ebx + 4]
call fcn.1000ff04
xor eax, eax
mov byte [ebp - 4], 0
push 0
inc eax
lea ecx, [ebp - 0x94]
push eax
call fcn.10004036
movaps xmm0, xmmword [0x10095ba0]
xor edx, edx
movups xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x84], 0x444d514c
mov ecx, edx
mov dword [ebp - 0x80], 0x4455
mov al, byte [ebp - 0x94]
xor byte [ebp + ecx - 0x93], al
inc ecx
cmp ecx, 0x16
jb 0x10016bce
sub esp, 0x18
mov byte [ebp - 0x7d], dl
lea eax, [ebp - 0x93]
mov ecx, esp
push eax
call fcn.10004181
lea eax, [ebp - 0xac]
push eax
call fcn.10003c4b
add esp, 0x1c
mov byte [ebp - 4], 2
mov edx, eax
mov ecx, dword [ebx + 0x38]
call fcn.1000ff04
xor eax, eax
mov byte [ebp - 4], 0
push 0
inc eax
lea ecx, [ebp - 0xac]
push eax
call fcn.10004036
mov ecx, dword [ebx + 0x10]
xor eax, eax
lea edx, [eax + 1]
call fcn.1000f6a4
jmp 0x10016f08
cmp dword [ebp + 0x28], 0x10
lea eax, [ebp + 0x14]
mov cl, 0x70
mov dword [ebp - 0x30], 0x35570
cmovae eax, dword [ebp + 0x14]
push eax
xor eax, eax
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 2
jae 0x10016c5f
mov cl, byte [ebp - 0x30]
jmp 0x10016c50
sub esp, 0x18
mov byte [ebp - 0x2d], 0
lea eax, [ebp - 0x2f]
mov ecx, esp
push eax
call fcn.10004181
lea eax, [ebp - 0xac]
push eax
call fcn.10003c4b
add esp, 0x20
mov byte [ebp - 4], 3
mov edx, eax
mov ecx, dword [ebx + 4]
call fcn.1000ff04
xor eax, eax
mov byte [ebp - 4], 0
push 0
inc eax
lea ecx, [ebp - 0xac]
push eax
call fcn.10004036
mov eax, dword [ebp - 0x38]
lea ecx, [ebx + 0x10]
sub esi, eax
mov dword [ebp - 0x7c], 4
sub edi, eax
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
movzx edx, word [eax]
test dx, dx
je 0x10016ef2
mov ecx, edx
call fcn.1000ad9d
mov dword [ebp - 0x34], eax
mov cl, 3
mov dword [ebp - 0x4c], 0x686d5603
xor eax, eax
mov dword [ebp - 0x48], 0x6d746c6d
mov byte [ebp - 0x44], 0
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 7
jae 0x10016cf5
mov cl, byte [ebp - 0x4c]
jmp 0x10016ce6
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x44], 0
push eax
lea ecx, [ebp - 0x2c]
call fcn.10004181
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 4
test eax, eax
je 0x10016d2d
add eax, 4
lea ecx, [ebp - 0x2c]
cmp ecx, eax
je 0x10016e0d
push 0xffffffffffffffff
push 0
push eax
call fcn.10003e07
jmp 0x10016e0d
mov eax, dword [ebp - 0x38]
xor ecx, ecx
inc ecx
cmp word [eax], cx
jne 0x10016e10
cmp byte [0x100a610a], 0
mov eax, dword [0x100a6048]
mov dword [ebp - 0x34], eax
je 0x10016d95
mov ecx, 0x10b8134
call fcn.10010043
mov dword [ebp - 0x74], eax
test eax, eax
je 0x10016d92
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10016d92
mov eax, dword [ebp - 0x74]
add eax, 0x6dc
push 4
push eax
mov dword [ebp - 0x74], eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10016d92
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x34]
mov al, byte [eax]
mov byte [ecx + 0x38], al
mov eax, ecx
jmp 0x10016d95
mov eax, dword [ebp - 0x34]
mov al, byte [eax + 0x38]
cmp al, 1
jne 0x10016dcc
mov cl, 0x5b
mov dword [ebp - 0x5c], 0x7b371e5b
mov dword [ebp - 0x58], 0x3a293416
xor eax, eax
mov word [ebp - 0x54], 0x3f
xor byte [ebp + eax - 0x5b], cl
inc eax
cmp eax, 8
jae 0x10016dc3
mov cl, byte [ebp - 0x5c]
jmp 0x10016db4
mov byte [ebp - 0x53], 0
lea eax, [ebp - 0x5b]
jmp 0x10016df7
mov cl, 0x33
mov dword [ebp - 0x40], 0x41527833
mov word [ebp - 0x3c], 0x4046
xor eax, eax
mov byte [ebp - 0x3a], 0
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 5
jae 0x10016df0
mov cl, byte [ebp - 0x40]
jmp 0x10016de1
mov byte [ebp - 0x3a], 0
lea eax, [ebp - 0x3f]
push eax
mov dword [ebp - 0x34], eax
call fcn.10004164
pop ecx
push eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2c]
call fcn.100040eb
mov eax, dword [ebp - 0x38]
movzx eax, word [esi + eax]
mov cl, 0x49
cmp dword [ebp - 0x18], 0x10
push eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x68], 0x693a6c49
mov dword [ebp - 0x64], 0x6c662d6c
mov word [ebp - 0x60], 0x2d
movzx eax, word [edi + eax]
push eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
push eax
xor eax, eax
xor byte [ebp + eax - 0x67], cl
inc eax
cmp eax, 8
jae 0x10016e50
mov cl, byte [ebp - 0x68]
jmp 0x10016e41
sub esp, 0x18
mov byte [ebp - 0x5f], 0
lea eax, [ebp - 0x67]
mov ecx, esp
push eax
call fcn.10004181
lea eax, [ebp - 0x94]
push eax
call fcn.10003c4b
add esp, 0x28
mov esi, dword [ebp - 0x50]
mov edx, eax
mov byte [ebp - 4], 5
mov ecx, dword [esi + 0x28]
call fcn.1000ff04
xor eax, eax
mov byte [ebp - 4], 4
push 0
inc eax
lea ecx, [ebp - 0x94]
push eax
call fcn.10004036
mov ecx, dword [esi]
call fcn.1000f5c0
mov ecx, dword [ebx + 8]
mov edi, edx
call fcn.1000f5c0
mov esi, eax
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax]
call fcn.1000f635
mov ecx, dword [ebx + 8]
add eax, edi
push eax
mov edx, esi
call fcn.1000f65b
xor eax, eax
pop ecx
lea edx, [eax + 1]
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax]
call fcn.1000f6a4
xor eax, eax
mov byte [ebp - 4], 0
push 0
inc eax
lea ecx, [ebp - 0x2c]
push eax
call fcn.10004036
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x50]
add ecx, 4
add eax, 2
sub dword [ebp - 0x7c], 1
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x38], eax
jne 0x10016cba
mov ecx, dword [ebx]
xor eax, eax
inc eax
push eax
call dword [0x10093d28]
xor eax, eax
inc eax
push 0
push eax
lea ecx, [ebp + 0x14]
call fcn.10004036
call fcn.10040a07
ret 0x24