Function at 0x1000a35c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
pop ebx
push ebx
push ebx
add esp, 4
call 0x1000a2d6
add byte [esi + 0x4f], al
dec edi
inc ebp
dec ebx
inc esp
add esp, 4
pop ebx
cmp dword [ebp - 0x378], 0
je 0x1000a2ec
cmp dword [ebp - 0xa50], 0
jne 0x1000a332
push esi
and esi, 0x162e2
or esi, 0x12cbd
pop esi
push edi
push eax
add esp, 4
and edi, 0xacef
and edi, 0x11c7b
and edi, 0x1939
pop edi
push edi
push edi
add esp, 4
xor edi, 0xdf86
pop edi
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1be0], ecx
push 0
call dword [ebp - 0x1be0]
mov dword [ebp - 0x1cfc], 0xa
push ecx
push edx
add esp, 4
sub ecx, 0x8949
sub ecx, 0x8e4b
call 0x1000a35c
add byte [eax], bh
cmp dword [ebx], edi
inc edi
xor al, 0x4f
xor al, 0x36
push eax
add esp, 4
pop ecx
push esi
and esi, 0x8b98
add esi, 0x15fe1
pop esi
mov edx, dword [ebp - 0x378]
mov al, byte [edx + 0xa]
mov byte [ebp - 0x3b9], al
mov ecx, dword [ebp - 0xa50]
sub ecx, dword [ebp - 0x378]
mov dword [ebp - 0x1580], ecx
mov dword [ebp - 0xc6c], 0
push eax
push ecx
add esp, 4
and eax, 0x2f0a
add eax, 0x53b5
add eax, 0xeaac
pop eax
push edx
push ecx
add esp, 4
jmp 0x1000a3be
pop edx
push edx
push ecx
add esp, 4
sub edx, 0xf2b0
pop edx
mov byte [ebp - 0x974], 0x56
mov byte [ebp - 0x973], 0x69
mov byte [ebp - 0x972], 0x72
mov byte [ebp - 0x971], 0x74
mov byte [ebp - 0x970], 0x75
mov byte [ebp - 0x96f], 0x61
mov byte [ebp - 0x96e], 0x6c
mov byte [ebp - 0x96d], 0x50
mov byte [ebp - 0x96c], 0x72
mov byte [ebp - 0x96b], 0x6f
mov byte [ebp - 0x96a], 0x74
mov byte [ebp - 0x969], 0x65
mov byte [ebp - 0x968], 0x63
mov byte [ebp - 0x967], 0x74
mov byte [ebp - 0x966], 0
push edx
push edi
add esp, 4
xor edx, 0x8ee7
sub edx, 0x15f0
add edx, 0x69e3
pop edx
push eax
xor eax, 0x1390a
add eax, 0x997
jmp 0x1000a45f
jmp 0x1000a465
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1be4], edx
mov eax, dword [ebp - 0x1be4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1be8], ecx
mov edx, dword [ebp - 0x1be8]
mov dword [ebp - 0x1544], edx
push esi
or esi, 0x16f3d
sub esi, 0x102be
call 0x1000a4aa
add byte [edx], bh
dec eax
cmp byte ss:[edi + 0x4c], al
dec esi
dec eax
add esp, 4
add esi, 0x103e
pop esi
push esi
push eax
add esp, 4
and esi, 0xdfb0
pop esi
cmp dword [ebp - 0x1544], 0
jne 0x1000a4d8
mov dword [ebp - 0x2a0], 0
jmp 0x1000a77f
mov eax, dword [ebp - 0x1544]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc48], edx
push eax
add eax, 0x9140
call 0x1000a500
add byte [edi + 0x4c], cl
inc edx
inc ebx
aaa
push eax
inc ebp
xor al, 0x35
add esp, 4
and eax, 0x2aac
or eax, 0x166bf
pop eax
push edx
push eax
add esp, 4
and edx, 0x151f7
pop edx
cmp dword [ebp - 0xc48], 0
jne 0x1000a534
mov dword [ebp - 0x2a0], 0
jmp 0x1000a77f
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x4cc], eax
push esi
and esi, 0x961f
pop esi
push edx
add edx, 0x9e4e
sub edx, 0xa21
xor edx, 0x15b08
pop edx
push eax
add eax, 0xb867
and eax, 0xbb68
jmp 0x1000a571
pop eax
lea ecx, [ebp - 0x15d0]
mov dword [ebp - 0xc44], ecx
mov edx, dword [ebp - 0x4cc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc40], eax
xor ecx, ecx
mov word [ebp - 0x1b8], cx
xor edx, edx
mov word [ebp - 0x2c], dx
push ebx
push edx
add esp, 4
or ebx, 0x13b6d
pop ebx
push ebx
add ebx, 0x23fd
call 0x1000a5be
add byte [ebx + 0x4b], cl
xor al, 0x3d
dec eax
aaa
dec ebx
dec esi
cmp dword [ebx + 0x565b04c4], eax
push edx
add esp, 4
add esi, 0xa657
pop esi
mov eax, dword [ebp - 0xc40]
mov cx, word [eax]
mov word [ebp - 0xfc2], cx
mov edx, dword [ebp - 0xc40]
add edx, 2
mov dword [ebp - 0xc40], edx
mov ax, word [ebp - 0xfc2]
mov word [ebp - 0x1b8], ax
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xfc4], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xfc4]
mov word [ebp - 0x2c], cx
push ebx
push edi
add esp, 4
sub ebx, 0x14d80
sub ebx, 0x17fb8
pop ebx
push edx
push ecx
add esp, 4
and edx, 0x161d
pop edx
push ebx
or ebx, 0x36ba
xor ebx, 0xebbe
jmp 0x1000a656
pop ebx
movzx edx, word [ebp - 0x2c]
test edx, edx
jne 0x1000a674
movzx eax, word [ebp - 0x1b8]
movzx ecx, word [ebp - 0x2c]
sub eax, ecx
mov dword [ebp - 0x154c], eax
jmp 0x1000a6ce
movzx edx, word [ebp - 0x1b8]
movzx eax, word [ebp - 0x2c]
cmp edx, eax
je 0x1000a59c
movzx ecx, word [ebp - 0x1b8]
xor ecx, 0x20
movzx edx, word [ebp - 0x2c]
cmp ecx, edx
je 0x1000a59c
movzx eax, word [ebp - 0x1b8]
movzx ecx, word [ebp - 0x2c]
cmp eax, ecx
jge 0x1000a6b8
mov dword [ebp - 0x1548], 0xffffffff
jmp 0x1000a6c2
mov dword [ebp - 0x1548], 1
mov edx, dword [ebp - 0x1548]
mov dword [ebp - 0x154c], edx
cmp dword [ebp - 0x154c], 0
jne 0x1000a717
push eax
push esi
add esp, 4
and eax, 0xc297
pop eax
push ebx
push esi
add esp, 4
xor ebx, 0x126e1
sub ebx, 0xfd8b
xor ebx, 0x11b2e
or ebx, 0x36cf
pop ebx
push eax
add eax, 0x7bf
pop eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x2a0], eax
jmp 0x1000a77f
push esi
or esi, 0xcf38
sub esi, 0x43ee
xor esi, 0xb11
pop esi
push eax
push esi
add esp, 4
or eax, 0x161d9
and eax, 0x16a2d
xor eax, 0x55e4
add eax, 0x143e3
pop eax
mov ecx, dword [ebp - 0x4cc]
mov edx, dword [ecx]
mov dword [ebp - 0x4cc], edx
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0xc48]
je 0x1000a775
mov ecx, dword [ebp - 0x4cc]
cmp dword [ecx + 0x30], 0
jne 0x1000a540
mov dword [ebp - 0x2a0], 0
push ecx
call 0x1000a790
add byte [edx + 0x33], al
cmp esi, dword ds:[0x4e364c4b]
inc esp
add esp, 4
or ecx, 0x16195
call 0x1000a7a7
add byte [edi + esi], dh
cmp byte [eax + 0x36], dl
dec esi
aaa
inc ebx
add esp, 4
add ecx, 0x515e
pop ecx
cmp dword [ebp - 0x2a0], 0
jne 0x1000b0b5
mov edx, 0x6b
mov word [ebp - 0x1630], dx
mov eax, 0x65
mov word [ebp - 0x162e], ax
mov ecx, 0x72
mov word [ebp - 0x162c], cx
mov edx, 0x6e
mov word [ebp - 0x162a], dx
mov eax, 0x65
mov word [ebp - 0x1628], ax
mov ecx, 0x6c
mov word [ebp - 0x1626], cx
mov edx, 0x33
mov word [ebp - 0x1624], dx
mov eax, 0x32
mov word [ebp - 0x1622], ax
mov ecx, 0x2e
mov word [ebp - 0x1620], cx
mov edx, 0x64
mov word [ebp - 0x161e], dx
mov eax, 0x6c
mov word [ebp - 0x161c], ax
mov ecx, 0x6c
mov word [ebp - 0x161a], cx
xor edx, edx
mov word [ebp - 0x1618], dx
push eax
and eax, 0x27e
call 0x1000a86d
add byte [eax + 0x3b], cl
cmp eax, 0x4d46453a
cmp cl, byte [ecx - 0x7d]
les eax, [eax + ebx*2]
push ebx
push edi
add esp, 4
sub ebx, 0xb468
and ebx, 0x12f93
xor ebx, 0xe383
pop ebx
mov byte [ebp - 0x85c], 0x4c
mov byte [ebp - 0x85b], 0x6f
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1bec], eax
mov ecx, dword [ebp - 0x1bec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1bf0], edx
mov eax, dword [ebp - 0x1bf0]
mov dword [ebp - 0x1550], eax
push edx
push edx
add esp, 4
and edx, 0xc23c
jmp 0x1000a91b
add edx, 0x1727f
pop edx
push edi
push ebx
add esp, 4
call 0x1000a933
add byte [eax], bh
xor ecx, dword [eax + 0x37]
dec esi
add esp, 4
or edi, 0x121d6
pop edi
cmp dword [ebp - 0x1550], 0
jne 0x1000a955
mov dword [ebp - 0x74c], 0
jmp 0x1000abfc
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push edx
sub edx, 0xea9c
pop edx
push ebx
push edx
add esp, 4
add ebx, 0xd34a
sub ebx, 0x6d14
pop ebx
push ebx
push ebx
add esp, 4
and ebx, 0x1713e
and ebx, 0x104bc
xor ebx, 0x11814
pop ebx
cmp dword [ebp - 0xc54], 0
jne 0x1000a9b1
mov dword [ebp - 0x74c], 0
jmp 0x1000abfc
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx