Function at 0x10007fb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100cb5dc
mov eax, dword fs:[0]
push eax
sub esp, 0x928
mov eax, dword [0x100e7260]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x437]
push 0x3ff
push 0
push eax
mov byte [ebp - 0x8f9], 0
mov dword [ebp - 0x2b], 0x62667676
mov word [ebp - 0x27], 0x68
mov byte [ebp - 0x2c], 0x73
mov dword [ebp - 0x1b], 0x6e686266
mov word [ebp - 0x16], 0x6d6a
mov byte [ebp - 0x1c], 0x76
mov byte [ebp - 0x17], 0x6a
mov byte [ebp - 0x14], 0
mov byte [ebp - 0x438], 0
call fcn.1003e130
add esp, 0xc
lea ecx, [ebp - 0x898]
call fcn.10018af0
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x1c]
push eax
call edi
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x898]
call fcn.10018b80
lea eax, [ebp - 0x934]
mov dword [ebp - 0x900], 0
push eax
lea ecx, [ebp - 0x898]
call fcn.10018c80
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 4], 0
jb 0x10008081
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x900]
call fcn.10001fd6
cmp dword [ebp - 0x920], 0x10
mov byte [ebp - 4], 2
jb 0x100080a8
push dword [ebp - 0x934]
call fcn.1003a126
add esp, 4
mov esi, dword [ebp - 0x900]
lea eax, [ebp - 0x2c]
push ebx
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x920], 0xf
push eax
lea eax, [ebp - 0x438]
mov dword [ebp - 0x924], 0
push 0x400
push eax
mov byte [ebp - 0x934], 0
mov dword [ebp - 0x23], 0x732573
mov byte [ebp - 0x24], 0x25
call fcn.1003c36b
add esp, 0x14
lea ecx, [ebp - 0x8f8]
call fcn.10018af0
lea eax, [ebp - 0x438]
push eax
call edi
push eax
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x8f8]
call fcn.10018b80
lea eax, [ebp - 0x91c]
mov dword [ebp - 0x904], 0
push eax
lea ecx, [ebp - 0x8f8]
call fcn.10018c80
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 3
jb 0x10008140
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x904]
call fcn.10001fd6
cmp dword [ebp - 0x908], 0x10
mov byte [ebp - 4], 5
jb 0x10008167
push dword [ebp - 0x91c]
call fcn.1003a126
add esp, 4
push dword [ebp - 0x904]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x908], 0xf
push eax
lea eax, [ebp - 0x438]
mov dword [ebp - 0x90c], 0
push 0x400
push eax
mov byte [ebp - 0x91c], 0
mov dword [ebp - 0x33], 0x73255c6c
mov dword [ebp - 0x37], 0x61626f6c
mov byte [ebp - 0x2f], 0
mov byte [ebp - 0x38], 0x47
call fcn.1003c36b
add esp, 0x10
lea eax, [ebp - 0x438]
push eax
push 0
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov edi, eax
test edi, edi
je 0x100081f0
push 0x400
push 0
push 0
push 4
push edi
call fcn.10017b50
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x1000820a
push edi
call fcn.100174b0
add esp, 4
lea ecx, [ebp - 0x904]
call fcn.10002cf1
lea ecx, [ebp - 0x900]
call fcn.10002cf1
xor al, al
jmp 0x10008273
push 0x400
lea eax, [ebp - 0x838]
push ebx
push eax
call fcn.1003dae0
add esp, 0xc
lea ecx, [ebp - 0x838]
mov edx, 0x1c
lea ebx, [ebx]
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x10008248
add ecx, 4
add esi, 4
sub edx, 4
jae 0x10008230
mov byte [ebp - 0x8f9], 1
push ebx
call fcn.10018960
push edi
call fcn.100174b0
add esp, 8
lea ecx, [ebp - 0x904]
call fcn.10002cf1
lea ecx, [ebp - 0x900]
call fcn.10002cf1
mov al, byte [ebp - 0x8f9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003d588
mov esp, ebp
pop ebp
ret