Function at 0x10004d20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
lea ebp, [esp - 0x178]
sub esp, 0x178
push 0xffffffffffffffff
push 0x10077440
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0x100900d4]
xor eax, ebp
mov dword [ebp + 0x174], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
xorps xmm0, xmm0
movq qword [ebp + 0x18], xmm0
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x1c], edi
mov dword [ebp + 0x20], edi
lea eax, [ebp + 0x18]
mov dword [ebp - 4], edi
push eax
call fcn.10007d50
mov esi, dword [ebp + 0x1c]
mov eax, 0x2aaaaaab
mov ecx, esi
mov dword [ebp - 0x14], edi
sub ecx, dword [ebp + 0x18]
add esp, 4
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x10], eax
je 0x10005301
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x18], ecx
nop word [eax + eax]
xor eax, eax
mov dword [ebp + 0x14], 7
push 0xffffffffffffffff
push eax
push ecx
lea ecx, [ebp]
mov dword [ebp + 0x10], 0
mov word [ebp], ax
call fcn.1000cab0
mov edx, dword [ebp + 0x14]
lea eax, [ebp]
mov edi, dword [ebp]
lea ebx, [ebp]
mov ecx, dword [ebp + 0x10]
lea esi, [ebp]
cmp edx, 8
mov byte [ebp - 4], 1
cmovae eax, edi
cmovae ebx, edi
cmovae esi, edi
xor edi, edi
xor edx, edx
lea eax, [eax + ecx*2]
mov ecx, eax
sub ecx, ebx
inc ecx
shr ecx, 1
cmp ebx, eax
cmova ecx, edx
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x10004e29
sub ebx, esi
nop
movzx eax, word [ebx + esi]
push eax
call fcn.10041402
inc edi
mov word [esi], ax
add esp, 4
lea esi, [esi + 2]
cmp edi, dword [ebp - 0x1c]
jne 0x10004e10
mov eax, 0x61
mov dword [ebp + 0x16a], 0x780065
lea ecx, [ebp + 0x158]
mov dword [ebp + 0x166], 0x2e0063
mov dword [ebp + 0x15e], 0x640077
lea edx, [ecx + 2]
mov dword [ebp + 0x15a], 0x670076
mov word [ebp + 0x158], ax
mov dword [ebp + 0x16e], 0x65
mov dword [ebp + 0x162], 0x760073
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10004e80
mov esi, dword [ebp + 0x14]
sub ecx, edx
mov ebx, dword [ebp + 0x10]
lea edx, [ebp]
sar ecx, 1
cmp esi, 8
mov edi, ecx
cmovae edx, dword [ebp]
cmp ebx, ecx
cmovb edi, ebx
test edi, edi
je 0x10004eca
lea esi, [ebp + 0x158]
mov ax, word [edx]
cmp ax, word [esi]
jne 0x1000533f
add edx, 2
add esi, 2
sub edi, 1
jne 0x10004eb0
mov esi, dword [ebp + 0x14]
xor eax, eax
test eax, eax
jne 0x10004eda
cmp ebx, ecx
jb 0x10004eda
jbe 0x10005353
mov eax, 0x61
mov dword [ebp + 0x13c], 0x730064
mov word [ebp + 0x134], ax
lea ecx, [ebp + 0x134]
xor eax, eax
mov dword [ebp + 0x140], 0x670061
mov word [ebp + 0x152], ax
lea edx, [ecx + 2]
mov eax, 0x69
mov dword [ebp + 0x136], 0x670076
mov word [ebp + 0x13a], ax
mov eax, 0x74
mov dword [ebp + 0x14e], 0x650078
mov dword [ebp + 0x144], 0x6e0065
mov dword [ebp + 0x14a], 0x65002e
mov word [ebp + 0x148], ax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10004f50
mov edi, dword [ebp]
lea eax, [ebp]
sub ecx, edx
sar ecx, 1
cmp esi, 8
push ecx
lea ecx, [ebp + 0x134]
cmovae eax, edi
push ecx
push ebx
push eax
call fcn.1000c1a0
add esp, 0x10
test eax, eax
je 0x1000538c
xor eax, eax
mov dword [ebp + 0x11c], 0x760061
mov word [ebp + 0x12e], ax
mov ebx, 0x65
lea eax, [ebp + 0x11c]
mov dword [ebp + 0x124], 0x2e0069
push eax
lea eax, [ebp]
mov dword [ebp + 0x120], 0x750067
push eax
mov esi, 0x61
mov dword [ebp + 0x12a], 0x650078
mov word [ebp + 0x128], bx
call fcn.100017e0
add esp, 8
test al, al
jne 0x1000537a
mov eax, 0x73
mov dword [ebp + 0xc6], ebx
mov word [ebp + 0xb8], ax
lea eax, [ebp + 0xb0]
push eax
lea eax, [ebp]
mov dword [ebp + 0xb0], 0x760061
push eax
mov dword [ebp + 0xb4], 0x630067
mov dword [ebp + 0xbe], 0x2e0061
mov dword [ebp + 0xba], 0x760072
mov dword [ebp + 0xc2], 0x780065
call fcn.100017e0
add esp, 8
test al, al
jne 0x1000537a
mov eax, 0x67
mov dword [ebp + 0x110], 0x65002e
mov word [ebp + 0x108], ax
xor eax, eax
mov word [ebp + 0x118], ax
lea eax, [ebp + 0x104]
push eax
lea eax, [ebp]
mov dword [ebp + 0x114], 0x650078
push eax
mov dword [ebp + 0x10a], 0x73006e
mov dword [ebp + 0x104], 0x760061
mov word [ebp + 0x10e], si
call fcn.100017e0
add esp, 8
test al, al
jne 0x1000537a
xor eax, eax
mov dword [ebp + 0xf6], 0x65002e
mov word [ebp + 0xfe], ax
lea eax, [ebp + 0xe8]
push eax
lea eax, [ebp]
mov dword [ebp + 0xea], 0x670076
push eax
mov dword [ebp + 0xf2], 0x610063
mov dword [ebp + 0xfa], 0x650078
mov word [ebp + 0xe8], si
mov dword [ebp + 0xee], 0x6d0065
call fcn.100017e0
add esp, 8
test al, al
jne 0x1000537a
mov eax, 0x2e
mov dword [ebp + 0xa0], 0x780076
mov word [ebp + 0xa4], ax
lea eax, [ebp + 0x94]
push eax
lea eax, [ebp]
mov dword [ebp + 0x94], 0x760061
push eax
mov dword [ebp + 0xa6], 0x780065
mov dword [ebp + 0xaa], ebx
mov dword [ebp + 0x9c], 0x720073
mov dword [ebp + 0x98], 0x630067
call fcn.100017e0
add esp, 8
test al, al
jne 0x1000537a
xor eax, eax
mov dword [ebp + 0x88], 0x65002e
mov word [ebp + 0x90], ax
mov eax, 0x63
mov word [ebp + 0x86], ax
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp]
mov dword [ebp + 0x7e], 0x740073
push eax
mov dword [ebp + 0x82], 0x760073
mov dword [ebp + 0x78], 0x760061
mov dword [ebp + 0x8c], 0x650078
mov word [ebp + 0x7c], si
call fcn.100017e0
add esp, 8
test al, al
jne 0x1000537a
mov eax, 0x2e
mov dword [ebp + 0xd6], 0x690075
mov word [ebp + 0xda], ax
lea eax, [ebp + 0xcc]
push eax
lea eax, [ebp]
mov dword [ebp + 0xce], 0x610076
push eax
mov dword [ebp + 0xdc], 0x780065
mov dword [ebp + 0xe0], ebx
mov dword [ebp + 0xd2], 0x740073
mov word [ebp + 0xcc], si
call fcn.100017e0
add esp, 8
test al, al
jne 0x1000537a
mov eax, 0x6e
mov dword [ebp + 0x28], 0x650066
mov word [ebp + 0x30], ax
mov eax, 0x72
mov word [ebp + 0x36], ax
lea eax, [ebp + 0x24]
push eax
lea eax, [ebp]
mov dword [ebp + 0x44], 0x780065
push eax
mov dword [ebp + 0x32], 0x620065
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x2c], 0x6f007a
mov dword [ebp + 0x3c], 0x650073
mov dword [ebp + 0x38], 0x77006f
mov dword [ebp + 0x40], 0x2e0072
mov dword [ebp + 0x24], 0x610073
call fcn.100017e0
add esp, 8
test al, al
jne 0x1000537a
mov eax, 0x6d
mov dword [ebp + 0x70], ebx
mov word [ebp + 0x5c], ax
mov eax, 0x64
mov word [ebp + 0x62], ax
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp]
mov dword [ebp + 0x50], 0x760061
push eax
mov dword [ebp + 0x54], 0x730061
mov dword [ebp + 0x58], 0x650074
mov dword [ebp + 0x64], 0x740061
mov dword [ebp + 0x5e], 0x700075
mov dword [ebp + 0x68], 0x2e0065
mov dword [ebp + 0x6c], 0x780065
call fcn.100017e0
add esp, 8
lea ecx, [ebp]
test al, al
jne 0x1000536e
mov byte [ebp - 4], al
call fcn.10003f50
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
inc eax
add ecx, 0x18
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ecx
cmp eax, dword [ebp - 0x10]
jb 0x10004db0
xor edi, edi
mov esi, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x18]
test ebx, ebx
je 0x100053ff
push dword [ebp - 0x10]
lea eax, [ebp + 0x18]
push eax
push esi
push ebx
call fcn.10001d40
mov ecx, dword [ebp + 0x20]
mov eax, 0x2aaaaaab
sub ecx, ebx
add esp, 0x10
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0xaaaaaaa
jbe 0x100053b7
call fcn.10040ef1
movzx eax, word [edx]
cmp ax, word [esi]
mov esi, dword [ebp + 0x14]
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x10004ecc
mov edi, 3
cmp esi, 8
jb 0x100052fe
lea eax, [esi + 1]
push eax
push dword [ebp]
lea ecx, [ebp]
call fcn.1000d4a0
jmp 0x100052fe
mov edi, 3
call fcn.10003f50
jmp 0x100052fe
lea ecx, [ebp]
mov edi, 3
call fcn.10003f50
jmp 0x100052fe
mov dword [ebp - 0x10], 3
cmp esi, 8
jb 0x100053ad
lea eax, [esi + 1]
push eax
push edi
lea ecx, [ebp]
call fcn.1000d4a0
mov edi, dword [ebp - 0x10]
jmp 0x100052fe
mov edi, 3
jmp 0x100052fe
lea eax, [eax + eax*2]
shl eax, 3
cmp eax, 0x1000
jb 0x100053f6
test byte [ebp + 0x18], 0x1f
je 0x100053cf
call fcn.10040ef1
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x100053de
call fcn.10040ef1
sub ecx, eax
cmp ecx, 4
jae 0x100053ea
call fcn.10040ef1
cmp ecx, 0x23
jbe 0x100053f4
call fcn.10040ef1
mov ebx, eax
push ebx
call fcn.10014d16
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x174]
xor ecx, ebp
call fcn.100153dc
lea esp, [ebp + 0x178]
pop ebp
ret