Function at 0x10086490
Capabilities:
Contain obfuscated stackstrings
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf8
push edi
lea edi, [ebp - 0xf8]
mov ecx, 0x3e
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x10144930]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0xf4], 0xb
mov byte [ebp - 0xf3], 0xdd
mov byte [ebp - 0xf2], 0x23
mov byte [ebp - 0xf1], 0x31
mov byte [ebp - 0xf0], 0x98
mov byte [ebp - 0xef], 0x44
mov byte [ebp - 0xee], 0xb1
mov byte [ebp - 0xed], 0x53
mov byte [ebp - 0xec], 0x62
mov byte [ebp - 0xeb], 0x67
mov byte [ebp - 0xea], 0x70
mov byte [ebp - 0xe9], 0x7d
mov byte [ebp - 0xe8], 0x86
mov byte [ebp - 0xe7], 0x72
mov byte [ebp - 0xe6], 0xb9
mov byte [ebp - 0xe5], 0xd8
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
cmp dword [ebp + 0xc], 0
je 0x10086538
cmp dword [ebp + 0x10], 0
jne 0x10086542
mov eax, 3
jmp 0x10086720
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0xc], 0
jne 0x10086555
mov eax, 1
jmp 0x10086720
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
call fcn.100c752e
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x1008657a
mov eax, 2
jmp 0x10086720
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
add eax, 8
push eax
call fcn.1009f190
add esp, 0xc
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x28], eax
mov dword [ebp - 8], 0
jmp 0x100865c1
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x1c]
jae 0x10086712
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0xdc]
push ecx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + edx*4]
push ecx
call fcn.1009a720
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1008660d
cmp dword [ebp - 0x10], 0
je 0x10086605
mov edx, dword [ebp - 0x10]
push edx
call fcn.100c68ea
add esp, 4
mov eax, dword [ebp - 0xc]
jmp 0x10086720
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0xd8]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.10085e90
add esp, 0x14
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10086655
cmp dword [ebp - 0x10], 0
je 0x1008664d
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.100c68ea
add esp, 4
mov eax, dword [ebp - 0xc]
jmp 0x10086720
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x30]
push eax
push 0x80
lea ecx, [ebp - 0xf4]
push ecx
call fcn.1009d1c0
add esp, 0xc
mov edx, dword [ebp - 0x28]
push edx
push 4
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0xd8]
and ecx, 0xffffff80
push ecx
mov edx, dword [ebp - 0x14]
push edx
call fcn.1009c480
add esp, 0x14
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x10]
push eax
push 1
push 4
lea ecx, [ebp - 0x30]
push ecx
call fcn.100c9424
add esp, 0x10
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + edx*4]
not ecx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov dword [eax + edx*4], ecx
mov ecx, dword [ebp + 0x10]
push ecx
push 1
push 4
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx*4]
push ecx
call fcn.100c9424
add esp, 0x10
mov edx, dword [ebp - 0xd8]
not edx
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp + 0x10]
push eax
push 1
push 4
lea ecx, [ebp - 0x3c]
push ecx
call fcn.100c9424
add esp, 0x10
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 1
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.100c9424
add esp, 0x10
mov dword [ebp - 0xc], eax
jmp 0x100865b8
mov edx, dword [ebp - 0x10]
push edx
call fcn.100c68ea
add esp, 4
xor eax, eax
push edx
mov ecx, ebp
push eax
lea edx, [0x10086750]
call fcn.100c8efc
pop eax
pop edx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c59be
add esp, 0xf8
cmp ebp, esp
call fcn.100c8ed9
mov esp, ebp
pop ebp
ret