Function at 0x1000f8a8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x38
mov ebp, dword [esp + 0x60]
mov ebx, dword [esp + 0x50]
mov edi, dword [esp + 0x64]
push 0x58
call fcn.1008fed9
add esp, 4
mov dword [eax], ebp
mov esi, eax
lea ebp, [esp + 0xb]
mov edx, 0xfcaac6fa
mov ecx, 0xece48a4b
movzx eax, word [edi + 2]
add edi, 4
mov dword [esp], ebp
mov dword [esi + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esi + 8], ebx
mov dword [esi + 0x50], eax
mov eax, dword [esp + 0x5c]
mov dword [esi + 0x54], eax
lea eax, [esp + 0xa]
mov dword [esi + 0xc], edi
mov dword [eax - 6], 0x606f646d
mov word [eax - 2], 0x7c74
cmp edx, 0xece48a4b
je 0x1000f92a
cmp edx, 0xfcaac6fa
jne 0x1000f909
mov byte [eax], 0
inc eax
mov edx, 0xfcaac6fa
cmp eax, dword [esp]
cmove edx, ecx
jmp 0x1000f909
xor ecx, ecx
mov eax, 0xac4cf4e0
mov edx, 0x52d4eb05
cmp edx, 0x84a55528
je 0x1000f981
cmp edx, 0xac4cf4e0
je 0x1000f961
cmp edx, 0x52d4eb05
jne 0x1000f936
mov dword [esp], ecx
mov edx, dword [esp]
cmp edx, 6
mov edx, 0x84a55528
cmovb edx, eax
jmp 0x1000f936
mov edx, dword [esp]
mov bl, byte [esp + edx + 4]
mov ecx, dword [esp]
mov bh, bl
not bh
and bh, cl
not cl
and cl, bl
or cl, bh
mov byte [esp + edx + 4], cl
mov ecx, dword [esp]
inc ecx
jmp 0x1000f931
lea edi, [esp + 4]
mov ecx, edi
mov byte [edi + 6], 0
call fcn.100068cd
lea ecx, [esi + 0x10]
push 0x20
push dword [esp + 0x58]
push ecx
call eax
add esp, 0xc
lea eax, [esp + 0xa]
mov edx, 0xfcaac6fa
mov ecx, 0xece48a4b
mov dword [edi], 0x606f646d
mov word [edi + 4], 0x7c74
mov dword [esp], ebp
cmp edx, 0xece48a4b
je 0x1000f9dd
cmp edx, 0xfcaac6fa
jne 0x1000f9bc
mov byte [eax], 0
inc eax
mov edx, 0xfcaac6fa
cmp eax, dword [esp]
cmove edx, ecx
jmp 0x1000f9bc
xor ecx, ecx
mov eax, 0xac4cf4e0
mov edx, 0x52d4eb05
cmp edx, 0x84a55528
je 0x1000fa34
cmp edx, 0xac4cf4e0
je 0x1000fa14
cmp edx, 0x52d4eb05
jne 0x1000f9e9
mov dword [esp], ecx
mov edx, dword [esp]
cmp edx, 6
mov edx, 0x84a55528
cmovb edx, eax
jmp 0x1000f9e9
mov edx, dword [esp]
mov bl, byte [esp + edx + 4]
mov ecx, dword [esp]
mov bh, bl
not bh
and bh, cl
not cl
and cl, bl
or cl, bh
mov byte [esp + edx + 4], cl
mov ecx, dword [esp]
inc ecx
jmp 0x1000f9e4
lea edi, [esp + 4]
mov ecx, edi
mov byte [edi + 6], 0
call fcn.100068cd
mov edx, dword [esp + 0x4c]
mov ecx, esi
add ecx, 0x30
add edx, 0x10
push 0x20
push edx
push ecx
call eax
add esp, 0xc
lea ebx, [esp + 0x34]
mov edx, 0x7371f918
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x18]
lea eax, [esp + 0x24]
mov dword [ebx], 0
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x1c]
lea ecx, [esp + 0x31]
mov dword [eax], 0x62677343
mov dword [eax + 4], 0x6f526070
mov dword [eax + 8], 0x6f6b6c7a
lea eax, [esp + 0x30]
mov dword [edi], ecx
mov ecx, 0x741a295e
cmp edx, 0x741a295e
je 0x1000fac0
cmp edx, 0x7371f918
jne 0x1000fa9e
mov byte [eax], 0
inc eax
mov edx, 0x7371f918
cmp eax, dword [esp + 4]
cmove edx, ecx
jmp 0x1000fa9e
xor ecx, ecx
mov edi, 0xade85fba
mov edx, 0x23aa364b
cmp edx, 0xade85fba
je 0x1000faf9
cmp edx, 0xfdcc9849
je 0x1000fb29
cmp edx, 0x23aa364b
jne 0x1000facc
mov dword [esp + 4], ecx
mov edx, dword [esp + 4]
cmp edx, 0xc
mov edx, 0xfdcc9849
cmovb edx, edi
jmp 0x1000facc
mov edx, dword [esp + 4]
mov al, byte [esp + edx + 0x24]
mov ecx, dword [esp + 4]
mov ah, al
and al, 0xac
not ah
and ah, 0x53
or al, ah
mov ah, cl
and cl, 0xac
not ah
and ah, 0x53
or cl, ah
xor cl, al
mov byte [esp + edx + 0x24], cl
mov ecx, dword [esp + 4]
inc ecx
jmp 0x1000fac7
lea ecx, [esp + 0x24]
mov byte [ecx + 0xc], 0
call fcn.100068cd
xor edi, edi
push ebx
push edi
push esi
push 0x10012400
push edi
push edi
call eax
mov dword [esp + 0x14], eax
mov esi, 0x9e6b1ec9
mov ebp, 0x86774c74
mov ebx, 0x95239b68
cmp dword [esp + 0x14], edi
sete byte [esp + 0x13]
cmp esi, 0xbdaf1267
jle 0x1000fb93
cmp esi, 0xbdaf1268
je 0x1000fbc1
cmp esi, 0x40b3e8ae
je 0x1000fbd0
cmp esi, 0x7b9966f9
jne 0x1000fb60
mov dword [esp + 0x20], edi
mov esi, 0x40b3e8ae
cmp dword [esp + 0x14], 0
cmove esi, ebx
jmp 0x1000fb60
cmp esi, 0x95239b68
je 0x1000fc9f
cmp esi, 0x9e6b1ec9
jne 0x1000fb60
mov eax, dword [esp + 0x1c]
cmp byte [esp + 0x13], 0
mov esi, 0x7b9966f9
mov eax, 0xbdaf1268
cmovne esi, eax
xor edi, edi
jmp 0x1000fb60
mov esi, 0x7b9966f9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x1000fb60
lea eax, [esp + 0x10]
mov ecx, 0x47c7a77e
mov dword [esp + 4], 0x706d6d43
mov dword [esp + 8], 0x69674d61
mov word [esp + 0xc], 0x656c
mov byte [esp + 0xe], 0x6f
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x86774c74
je 0x1000fc1d
cmp ecx, 0x47c7a77e
jne 0x1000fbfc
mov byte [eax], 0
inc eax
mov ecx, 0x47c7a77e
cmp eax, dword [esp]
cmove ecx, ebp
jmp 0x1000fbfc
xor eax, eax
mov ecx, 0x4365cb22
cmp ecx, 0x389d28ca
je 0x1000fc54
cmp ecx, 0x78c8d1d2
je 0x1000fc81
cmp ecx, 0x4365cb22
jne 0x1000fc24
mov dword [esp], eax
mov edx, 0x389d28ca
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x78c8d1d2
cmovb ecx, edx
jmp 0x1000fc24
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, dword [esp]
mov dh, dl
and dl, 0x11
not dh
and dh, 0xee
or dl, dh
mov dh, al
and al, 0x11
not dh
and dh, 0xee
or al, dh
xor al, dl
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x1000fc1f
lea ecx, [esp + 4]
mov byte [esp + 0xf], 0
call fcn.100068cd
push dword [esp + 0x14]
call eax
mov esi, 0x95239b68
jmp 0x1000fb60
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret 0x1c