Function at 0x10074cd0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101236b8
mov eax, dword fs:[0]
push eax
sub esp, 0x158
mov eax, dword [0x1015fc40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x1015f668]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x164], esi
cmp eax, 1
je 0x10075557
cmp eax, 3
ja 0x10075557
mov ecx, esi
mov dword [ebp - 0x20], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10074d37
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x30]
call fcn.10044fd0
cmp dword [ebp - 0x20], 0
mov dword [ebp - 4], 0
je 0x10075527
cmp dword [ebp - 0x1c], 0xf
lea eax, [ebp - 0x30]
cmova eax, dword [ebp - 0x30]
push eax
call fcn.1007b5d0
add esp, 4
test al, al
je 0x10075527
xorps xmm0, xmm0
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xdc], xmm0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
mov eax, dword [0x1015f668]
mov byte [ebp - 4], 1
cmp eax, 2
jne 0x10074dcf
movaps xmm0, xmmword [0x10131f10]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x195343
nop
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x12
jb 0x10074dc0
jmp 0x10074dfd
cmp eax, 3
jne 0x100754c8
movaps xmm0, xmmword [str.M____8_.__b8_b_I__:___:f:__f_____f_]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x622623
nop dword [eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x12
jb 0x10074df0
lea eax, [ebp - 0x47]
mov byte [ebp - 0x35], 0
push eax
lea ecx, [ebp - 0xdc]
call fcn.10074ca0
cmp dword [ebp - 0xcc], 0
je 0x100754c8
movaps xmm0, xmmword [0x10131f90]
xor ecx, ecx
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x118], 0x22204f7d
movaps xmm0, xmmword [0x10131fa0]
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0x77777f3e
mov byte [ebp - 0x110], 0
nop word [eax + eax]
mov al, byte [ebp - 0x138]
xor byte [ebp + ecx - 0x137], al
inc ecx
cmp ecx, 0x27
jb 0x10074e60
mov edi, dword [ebp - 0x1c]
lea eax, [ebp - 0x30]
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x137]
cmp edi, 0xf
mov byte [ebp - 0x110], 0
lea edx, [ebp - 0x30]
cmova eax, esi
add eax, dword [ebp - 0x20]
cmp edi, 0xf
mov dword [ebp - 0x14], eax
lea eax, [ecx + 1]
cmova edx, esi
mov dword [ebp - 0x160], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10074ea7
sub ecx, dword [ebp - 0x160]
lea eax, [ebp - 0x137]
add eax, ecx
lea ecx, [ebp - 0x137]
cmp ecx, eax
je 0x10074ee7
push dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
push edx
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x40]
push eax
call fcn.100485f0
mov ecx, dword [eax]
cmp ecx, dword [eax + 4]
je 0x10074fec
movaps xmm0, xmmword [0x10131e80]
xor ecx, ecx
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x70], 0x755e5f5e
mov dword [ebp - 0x6c], 0x75474d48
mov dword [ebp - 0x68], 0x4504181a
mov word [ebp - 0x64], 0x4d4d
mov byte [ebp - 0x62], 0
mov al, byte [ebp - 0x80]
xor byte [ebp + ecx - 0x7f], al
inc ecx
cmp ecx, 0x1d
jb 0x10074f13
lea eax, [ebp - 0x7f]
mov byte [ebp - 0x62], 0
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10074b80
add esp, 0xc
mov edx, eax
movaps xmm0, xmmword [0x10131ef0]
xor ecx, ecx
movups xmmword [ebp - 0xac], xmm0
mov byte [ebp - 4], 2
movaps xmm0, xmmword [0x10131f00]
movups xmmword [ebp - 0x9c], xmm0
mov dword [ebp - 0x8c], 0x7b791624
mov dword [ebp - 0x88], 0x2e2e2667
mov byte [ebp - 0x84], 0
nop word [eax + eax]
mov al, byte [ebp - 0xac]
xor byte [ebp + ecx - 0xab], al
inc ecx
cmp ecx, 0x27
jb 0x10074f80
lea eax, [ebp - 0xab]
mov byte [ebp - 0x84], 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push edx
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10074be0
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.10022b40
mov edi, dword [ebp - 0x20]
lea esi, [ebp - 0x30]
inc edi
cmp dword [ebp - 0x1c], 0xf
cmova esi, dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
push edi
push esi
push dword [ebp - 0x164]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
movaps xmm0, xmmword [0x10131f50]
xor ecx, ecx
movups xmmword [ebp - 0x15c], xmm0
mov word [ebp - 0x13c], 0x76
movaps xmm0, xmmword [0x10131f30]
movups xmmword [ebp - 0x14c], xmm0
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp - 0x15c]
xor byte [ebp + ecx - 0x15b], al
inc ecx
cmp ecx, 0x20
jb 0x10075020
cmp edi, 0xf
mov byte [ebp - 0x13b], 0
lea eax, [ebp - 0x30]
cmova eax, esi
lea ecx, [ebp - 0x15b]
add eax, dword [ebp - 0x20]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x160], eax
cmp edi, 0xf
lea eax, [ecx + 1]
cmova edx, esi
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10075061
sub ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x15b]
add eax, ecx
lea ecx, [ebp - 0x15b]
cmp ecx, eax
je 0x100750a1
push dword [ebp - 0x160]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
push edx
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x40]
push eax
call fcn.100485f0
mov ecx, dword [eax]
cmp ecx, dword [eax + 4]
je 0x1007518c
movaps xmm0, xmmword [0x10131e90]
xor ecx, ecx
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0x48120e01
mov dword [ebp - 0x38], 0x150202
nop dword [eax]
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x16
jb 0x100750c0
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x35], 0
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.10074b80
add esp, 0xc
mov edx, eax
movaps xmm0, xmmword [str._fe_r]
xor ecx, ecx
movups xmmword [ebp - 0xa8], xmm0
mov byte [ebp - 4], 3
movaps xmm0, xmmword [0x10131ec0]
movups xmmword [ebp - 0x98], xmm0
mov word [ebp - 0x88], 0xd
nop word [eax + eax]
mov al, byte [ebp - 0xa8]
xor byte [ebp + ecx - 0xa7], al
inc ecx
cmp ecx, 0x20
jb 0x10075120
lea eax, [ebp - 0xa7]
mov byte [ebp - 0x87], 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push edx
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10074be0
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7c]
call fcn.10022b40
mov edi, dword [ebp - 0x20]
lea esi, [ebp - 0x30]
inc edi
cmp dword [ebp - 0x1c], 0xf
cmova esi, dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
push edi
push esi
push dword [ebp - 0x164]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
movaps xmm0, xmmword [0x10131ed0]
xor ecx, ecx
movups xmmword [ebp - 0x10c], xmm0
mov dword [ebp - 0xec], 0x1f1c261c
movaps xmm0, xmmword [0x10131eb0]
movups xmmword [ebp - 0xfc], xmm0
mov dword [ebp - 0xe8], 0xd1a1c1f
mov dword [ebp - 0xe4], 0xa1d1d57
mov byte [ebp - 0xe0], 0
nop
mov al, byte [ebp - 0x10c]
xor byte [ebp + ecx - 0x10b], al
inc ecx
cmp ecx, 0x2b
jb 0x100751d0
cmp edi, 0xf
mov byte [ebp - 0xe0], 0
lea eax, [ebp - 0x30]
cmova eax, esi
lea ecx, [ebp - 0x10b]
add eax, dword [ebp - 0x20]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x160], eax
cmp edi, 0xf
lea eax, [ecx + 1]
cmova edx, esi
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10075211
sub ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x10b]
add eax, ecx
lea ecx, [ebp - 0x10b]
cmp ecx, eax
je 0x10075251
push dword [ebp - 0x160]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
push edx
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x40]
push eax
call fcn.100485f0
mov ecx, dword [eax]
cmp ecx, dword [eax + 4]
je 0x10075350
movaps xmm0, xmmword [0x10131fb0]
xor ecx, ecx
movups xmmword [ebp - 0xa8], xmm0
mov word [ebp - 0x88], 0x6770
movaps xmm0, xmmword [0x10131f80]
movups xmmword [ebp - 0x98], xmm0
mov byte [ebp - 0x86], 0
nop
mov al, byte [ebp - 0xa8]
xor byte [ebp + ecx - 0xa7], al
inc ecx
cmp ecx, 0x21
jb 0x10075280
lea eax, [ebp - 0xa7]
mov byte [ebp - 0x86], 0
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.10074b80
add esp, 0xc
mov edx, eax
movaps xmm0, xmmword [0x10131f70]
xor ecx, ecx
movups xmmword [ebp - 0x60], xmm0
mov byte [ebp - 4], 4
movaps xmm0, xmmword [0x10131f40]
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x67645e64
mov dword [ebp - 0x3c], 0x75626467
mov dword [ebp - 0x38], 0x7265652f
mov byte [ebp - 0x34], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x60]
xor byte [ebp + ecx - 0x5f], al
inc ecx
cmp ecx, 0x2b
jb 0x100752f0
lea eax, [ebp - 0x5f]
mov byte [ebp - 0x34], 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push edx
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10074be0
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7c]
call fcn.10022b40
mov edi, dword [ebp - 0x20]
lea esi, [ebp - 0x30]
inc edi
cmp dword [ebp - 0x1c], 0xf
cmova esi, dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
push edi
push esi
push dword [ebp - 0x164]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
movaps xmm0, xmmword [0x10131f20]
xor ecx, ecx
movups xmmword [ebp - 0xc4], xmm0
mov dword [ebp - 0xb4], 0x5755535f
mov word [ebp - 0xb0], 0x1d
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp - 0xc4]
xor byte [ebp + ecx - 0xc3], al
inc ecx
cmp ecx, 0x14
jb 0x10075380
cmp edi, 0xf
mov byte [ebp - 0xaf], 0
lea eax, [ebp - 0x30]
cmova eax, esi
lea ecx, [ebp - 0xc3]
add eax, dword [ebp - 0x20]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x160], eax
cmp edi, 0xf
lea eax, [ecx + 1]
cmova edx, esi
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100753c1
sub ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xc3]
add eax, ecx
lea ecx, [ebp - 0xc3]
cmp ecx, eax
je 0x10075401
push dword [ebp - 0x160]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
push edx
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x40]
push eax
call fcn.100485f0
mov ecx, dword [eax]
cmp ecx, dword [eax + 4]
je 0x100754ce
mov byte [ebp - 0x18], 0x43
mov al, 0x2a
xor al, byte [ebp - 0x18]
mov ah, 0x24
mov byte [ebp - 0x17], al
mov cl, 0x2e
mov al, byte [ebp - 0x18]
mov dl, 0x22
xor ah, al
mov byte [ebp - 0x11], 0
xor cl, al
mov byte [ebp - 0x14], ah
xor dl, al
mov byte [ebp - 0x16], cl
mov ch, 0x26
mov byte [ebp - 0x15], dl
xor ch, al
mov byte [ebp - 0x11], 0
mov dh, 0x6c
mov byte [ebp - 0x13], ch
xor dh, al
lea eax, [ebp - 0x17]
push eax
lea eax, [ebp - 0xdc]
mov byte [ebp - 0x12], dh
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.10074b80
add esp, 0xc
mov edx, eax
movaps xmm0, xmmword [0x10131f60]
xor ecx, ecx
mov byte [ebp - 4], 5
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0x6b696f63
mov word [ebp - 0x38], 0x21
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x14
jb 0x10075472
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x37], 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push edx
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10074be0
add esp, 0xc
lea ecx, [ebp - 0x7c]
call fcn.10022b40
mov edi, dword [ebp - 0x20]
lea esi, [ebp - 0x30]
inc edi
cmp dword [ebp - 0x1c], 0xf
cmova esi, dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
push edi
push esi
push dword [ebp - 0x164]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0xf
jbe 0x1007550a
mov edx, dword [ebp - 0xdc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100754fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10075572
push ecx
push edx
call fcn.100d4f2c
mov edi, dword [ebp - 0x1c]
add esp, 8
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
jmp 0x1007552d
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
cmp edi, 0xf
jbe 0x10075557
inc edi
mov eax, esi
cmp edi, 0x1000
jb 0x1007554d
mov esi, dword [eax - 4]
add edi, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10075572
push edi
push esi
call fcn.100d4f2c
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100d4eee
mov esp, ebp
pop ebp
ret
call fcn.10100cd5
int3