Function at 0x1000d9b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003073d
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x1003b008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x10229388], 0
jne 0x1000dc25
mov ecx, dword [0x1003bb2c]
mov byte [0x10229388], 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov ecx, dword [0x1003bb2c]
mov dword [0x1003bb34], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov ecx, dword [0x1003bb2c]
mov dword [0x1003bb38], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov ecx, dword [0x1003bb2c]
mov dword [0x1003bb30], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov ecx, dword [0x1003bb2c]
mov dword [0x1003bb3c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov dword [0x1003bb40], eax
mov ecx, 0xf2
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10035d50]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x28], al
and ecx, 0x800000ff
jns 0x1000da7d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x1000da60
mov byte [ebp - 0x1c], 0
push 0
push 0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x28]
mov ecx, dword [0x1003bb2c]
push 0
push 0x190
push 0xc
mov eax, dword [ecx]
push edx
push dword [0x1003bb34]
mov eax, dword [eax + 0x104]
call eax
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
movq qword [ebp - 0x28], xmm0
mov edx, 0xb
mov byte [ebp - 0x1c], 0
xor eax, eax
nop
mov cl, byte [eax + 0x10035d60]
xor cl, dl
inc edx
mov byte [ebp + eax - 0x38], cl
and edx, 0x800000ff
jns 0x1000daed
dec edx
or edx, 0xffffff00
inc edx
inc eax
cmp eax, 0xc
jl 0x1000dad0
mov byte [ebp - 0x2c], 0
push 0x10
push 0
mov dword [ebp - 4], 1
lea edx, [ebp - 0x38]
mov ecx, dword [0x1003bb2c]
push 0
push 0x190
push 0xc
mov eax, dword [ecx]
push edx
push dword [0x1003bb38]
mov eax, dword [eax + 0x104]
call eax
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
movq qword [ebp - 0x38], xmm0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x24], 0x696c6143
mov dword [ebp - 0x20], 0x697262
push 0x10
push 0
mov dword [ebp - 4], 2
lea edx, [ebp - 0x24]
mov ecx, dword [0x1003bb2c]
push 0
push 0x384
push 0xe
mov eax, dword [ecx]
push edx
push dword [0x1003bb30]
mov eax, dword [eax + 0x104]
call eax
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x61697241
movq qword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0x6c
push 0x200
push 0
mov dword [ebp - 4], 3
lea edx, [ebp - 0x18]
mov ecx, dword [0x1003bb2c]
push 0
push 0x190
push 0xc
mov eax, dword [ecx]
push edx
push dword [0x1003bb3c]
mov eax, dword [eax + 0x104]
call eax
xor eax, eax
mov ecx, 0x62
mov dword [ebp - 0x18], eax
xor edx, edx
mov word [ebp - 0x14], ax
nop word [eax + eax]
mov al, byte [edx + 0x10035d80]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000dbed
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x1000dbd0
mov byte [ebp - 0x2a], 0
push 0x10
push 0
mov dword [ebp - 4], 4
lea edx, [ebp - 0x38]
mov ecx, dword [0x1003bb2c]
push 0
push 0x190
push 0x5c
mov eax, dword [ecx]
push edx
push dword [0x1003bb40]
mov eax, dword [eax + 0x104]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002dd4e
mov esp, ebp
pop ebp
ret