Function at 0x1001dcd0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f3e71
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x1011f00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x1015820f], 0
je 0x1001df7d
mov ecx, dword [0x10122698]
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
call eax
test al, al
je 0x1001df7d
mov ecx, dword [0x10122698]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x1001df7d
mov edi, dword [0x101227d4]
test edi, edi
je 0x1001df7d
mov eax, dword [0x101226d4]
test eax, eax
jne 0x1001dd79
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x101100f5
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x1011000d
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov dword [0x101226d4], eax
cmp dword [eax + edi], 0
jle 0x1001df7d
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10122660]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10158460]
cmp eax, dword [ecx + 4]
jle 0x1001de2a
push 0x10158460
call fcn.100f18de
add esp, 4
cmp dword [0x10158460], 0xffffffff
jne 0x1001de2a
mov dword [ebp - 4], 0
xor edx, edx
mov ecx, dword [0x101226bc]
movaps xmm0, xmmword [0x101194b0]
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0x4b4e4a5d
mov eax, dword [ecx]
mov dword [ebp - 0x18], 0x40475c70
mov word [ebp - 0x14], 0x58
mov esi, dword [eax + 0x44]
nop dword [eax]
mov al, byte [ebp - 0x2c]
xor byte [ebp + edx - 0x2b], al
inc edx
cmp edx, 0x18
jb 0x1001ddf0
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x13], 0
push eax
call esi
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 0x30]
call eax
push 0x10158460
fstp dword [0x10158454]
mov dword [ebp - 4], 0xffffffff
call fcn.100f188d
add esp, 4
mov ecx, dword [0x101226bc]
xor edx, edx
movaps xmm0, xmmword [0x10118fa0]
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0x5d585c4b
mov eax, dword [ecx]
mov dword [ebp - 0x18], 0x56514a66
mov word [ebp - 0x14], 0x4e
mov esi, dword [eax + 0x44]
mov al, byte [ebp - 0x2c]
xor byte [ebp + edx - 0x2b], al
inc edx
cmp edx, 0x18
jb 0x1001de56
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x13], 0
push eax
call esi
mov dword [eax + 0x60], 0
cmp byte [0x1015820f], 0
je 0x1001df23
mov eax, dword [0x1015810c]
mov edi, dword [0x101227d4]
test eax, eax
jne 0x1001dec1
call fcn.10003520
mov edx, 0xe80c2f78
mov ecx, 0x101106d1
call fcn.10001980
mov edx, 0xc10bf213
mov ecx, 0x1011000d
mov esi, eax
call fcn.10001980
push esi
push eax
call fcn.1008c3b0
mov dword [0x1015810c], eax
cmp byte [eax + edi], 0
jne 0x1001df23
mov ecx, dword [0x101226bc]
xor edx, edx
movaps xmm0, xmmword [0x101186a0]
mov byte [0x1015821e], 0
movups xmmword [ebp - 0x48], xmm0
mov eax, dword [ecx]
mov dword [ebp - 0x38], 0xa0f0b1c
mov dword [ebp - 0x34], 0x1061d31
mov word [ebp - 0x30], 0x19
mov esi, dword [eax + 0x44]
nop word [eax + eax]
mov al, byte [ebp - 0x48]
xor byte [ebp + edx - 0x47], al
inc edx
cmp edx, 0x18
jb 0x1001df00
lea eax, [ebp - 0x47]
mov byte [ebp - 0x2f], 0
push eax
call esi
push 3
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x1001df7d
mov ecx, dword [0x101226bc]
xor edx, edx
movaps xmm0, xmmword [0x101194d0]
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0x74717562
mov eax, dword [ecx]
mov dword [ebp - 0x50], 0x7f78634f
mov word [ebp - 0x4c], 0x67
mov esi, dword [eax + 0x44]
nop
mov al, byte [ebp - 0x64]
xor byte [ebp + edx - 0x63], al
inc edx
cmp edx, 0x18
jb 0x1001df50
lea eax, [ebp - 0x63]
mov byte [ebp - 0x4b], 0
push eax
call esi
movss xmm0, dword [0x10158454]
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
push ecx
movss dword [esp], xmm0
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100f1854
mov esp, ebp
pop ebp
ret