Function at 0x100257bf
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0xa0
mov eax, 0x10047fdd
call fcn.10044ac9
mov ebx, ecx
mov cl, 0xc
mov dword [ebp - 0x40], 0x637e6b0c
mov dword [ebp - 0x3c], 0x78537c79
xor eax, eax
mov word [ebp - 0x38], 0x7c63
mov byte [ebp - 0x36], 0
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 9
jae 0x100257fb
mov cl, byte [ebp - 0x40]
jmp 0x100257ec
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x36], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
and dword [ebp - 4], 0
lea eax, [ebp - 0x70]
push eax
push dword [ebx]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
or esi, 0xffffffff
mov dword [ebx + 4], eax
push 1
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], esi
call fcn.10001cd4
mov cl, 0x6d
mov dword [ebp - 0x4c], 0x1508196d
mov dword [ebp - 0x48], 0x4193219
xor eax, eax
mov dword [ebp - 0x44], 0x80119
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xa
jae 0x10025859
mov cl, byte [ebp - 0x4c]
jmp 0x1002584a
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x41], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 1
push eax
push dword [ebx + 4]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [ebx + 8], eax
mov dword [ebp - 4], esi
call fcn.10001cd4
mov cl, 0x5c
mov dword [ebp - 0x30], 0x2439285c
mov dword [ebp - 0x2c], 0x352b0328
xor eax, eax
mov dword [ebp - 0x28], 0x2e393232
mov word [ebp - 0x24], 0x2f
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 0xc
jae 0x100258be
mov cl, byte [ebp - 0x30]
jmp 0x100258af
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x23], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 2
push eax
push dword [ebx + 4]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [ebx + 0xc], eax
mov dword [ebp - 4], esi
call fcn.10001cd4
mov cl, 0x4d
mov dword [ebp - 0x40], 0x3528394d
mov dword [ebp - 0x3c], 0x24391239
xor eax, eax
mov word [ebp - 0x38], 0x2820
mov byte [ebp - 0x36], 0
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 9
jae 0x10025920
mov cl, byte [ebp - 0x40]
jmp 0x10025911
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x36], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 3
push eax
push dword [ebx + 4]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [ebx + 0x10], eax
mov dword [ebp - 4], esi
call fcn.10001cd4
mov cl, 0x3b
mov dword [ebp - 0x40], 0x554f793b
mov dword [ebp - 0x3c], 0x54577864
xor eax, eax
mov word [ebp - 0x38], 0x5e48
mov byte [ebp - 0x36], 0
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 9
jae 0x10025982
mov cl, byte [ebp - 0x40]
jmp 0x10025973
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x36], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 4
push eax
push dword [ebx + 4]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [ebx + 0x14], eax
mov dword [ebp - 4], esi
call fcn.10001cd4
mov cl, 0x2c
mov dword [ebp - 0x58], 0x42586e2c
mov dword [ebp - 0x54], 0x495c6373
xor eax, eax
mov word [ebp - 0x50], 0x42
xor byte [ebp + eax - 0x57], cl
inc eax
cmp eax, 8
jae 0x100259e0
mov cl, byte [ebp - 0x58]
jmp 0x100259d1
lea eax, [ebp - 0x57]
mov byte [ebp - 0x4f], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 5
push eax
push dword [ebx + 4]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [ebx + 0x18], eax
mov dword [ebp - 4], esi
call fcn.10001cd4
mov cl, 0x40
mov dword [ebp - 0x58], 0x2e340240
mov dword [ebp - 0x54], 0x2429081f
xor eax, eax
mov word [ebp - 0x50], 0x25
xor byte [ebp + eax - 0x57], cl
inc eax
cmp eax, 8
jae 0x10025a3e
mov cl, byte [ebp - 0x58]
jmp 0x10025a2f
lea eax, [ebp - 0x57]
mov byte [ebp - 0x4f], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 6
push eax
push dword [ebx + 4]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [ebx + 0x1c], eax
mov dword [ebp - 4], esi
call fcn.10001cd4
mov cl, 0x71
mov dword [ebp - 0x30], 0x1e031671
mov dword [ebp - 0x2c], 0x122e0104
xor eax, eax
mov dword [ebp - 0x28], 0x14051f1e
mov word [ebp - 0x24], 0x51f
mov byte [ebp - 0x22], 0
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 0xd
jae 0x10025aa7
mov cl, byte [ebp - 0x30]
jmp 0x10025a98
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x22], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 7
push eax
push dword [ebx]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [ebx + 0x20], eax
mov dword [ebp - 4], esi
call fcn.10001cd4
xor eax, eax
mov dword [ebp - 0x78], 3
mov dword [ebp - 0x74], eax
lea esi, [ebx + 0x24]
lea edi, [ebx + 0x50]
push eax
mov cl, 0x7e
mov dword [ebp - 0x58], 0x110c197e
mov dword [ebp - 0x54], 0x5b210e0b
xor eax, eax
mov word [ebp - 0x50], 0x1a
xor byte [ebp + eax - 0x57], cl
inc eax
cmp eax, 8
jae 0x10025b17
mov cl, byte [ebp - 0x58]
jmp 0x10025b08
sub esp, 0x18
mov byte [ebp - 0x4f], 0
lea eax, [ebp - 0x57]
mov ecx, esp
push eax
call fcn.100012e0
lea eax, [ebp - 0x90]
push eax
call fcn.1001b71b
push eax
push dword [ebx + 0x20]
mov dword [ebp - 4], 8
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
add esp, 0x28
mov dword [esi], eax
push 0
push 1
call fcn.10001cd4
mov cl, 0x70
mov dword [ebp - 0x4c], 0x171d1970
mov dword [ebp - 0x48], 0x15151e2f
xor eax, eax
mov word [ebp - 0x44], 0x314
mov byte [ebp - 0x42], 0
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 9
jae 0x10025b88
mov cl, byte [ebp - 0x4c]
jmp 0x10025b79
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x42], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 9
push eax
push dword [esi]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [edi - 4], eax
call fcn.10001cd4
mov cl, 0x2c
mov dword [ebp - 0x30], 0x4949422c
mov dword [ebp - 0x2c], 0x4f735f48
xor eax, eax
mov dword [ebp - 0x28], 0x58425943
mov byte [ebp - 0x24], 0
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 0xb
jae 0x10025beb
mov cl, byte [ebp - 0x30]
jmp 0x10025bdc
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x24], 0
push eax
lea ecx, [ebp - 0x70]
call fcn.100012e0
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0xa
push eax
push dword [esi]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
mov dword [edi], eax
call fcn.10001cd4
movaps xmm0, xmmword [str.SXXYNbMORZOXNN]
xor ecx, ecx
movups xmmword [ebp - 0x68], xmm0
mov al, byte [ebp - 0x68]
xor byte [ebp + ecx - 0x67], al
inc ecx
cmp ecx, 0xe
jb 0x10025c2e
lea eax, [ebp - 0x67]
mov byte [ebp - 0x59], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100012e0
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0xb
push eax
push dword [esi]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
mov dword [edi + 4], eax
call fcn.10001cd4
mov cl, 0x1b
mov dword [ebp - 0x40], 0x6f636f1b
mov dword [ebp - 0x3c], 0x767a7544
xor eax, eax
mov word [ebp - 0x38], 0x7e
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 8
jae 0x10025ca2
mov cl, byte [ebp - 0x40]
jmp 0x10025c93
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x37], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100012e0
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0xc
push eax
push dword [esi]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
mov dword [edi + 8], eax
call fcn.10001cd4
mov eax, dword [ebp - 0x74]
add esi, 4
inc eax
add edi, 0x18
sub dword [ebp - 0x78], 1
mov dword [ebp - 0x74], eax
jne 0x10025aef
push 0x58
pop ecx
mov byte [ebp - 0x30], cl
xor eax, eax
mov dword [ebp - 0x2f], 0x2d372a3f
mov dword [ebp - 0x2b], 0x3d2a0728
mov dword [ebp - 0x27], 0x3c2a392f
mov byte [ebp - 0x23], 0
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 0xc
jae 0x10025d29
mov cl, byte [ebp - 0x30]
jmp 0x10025d1a
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x23], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100012e0
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0xd
push eax
push dword [ebx]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
mov dword [ebx + 0x30], eax
call fcn.10001cd4
mov cl, 0x6c
mov dword [ebp - 0x4c], 0x2182e6c
mov dword [ebp - 0x48], 0x1b093e33
xor eax, eax
mov dword [ebp - 0x44], 0x81e0d
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xa
jae 0x10025d91
mov cl, byte [ebp - 0x4c]
jmp 0x10025d82
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x41], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100012e0
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0xe
push eax
push dword [ebx + 0x30]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
mov dword [ebx + 0x40], eax
call fcn.10001cd4
xor eax, eax
mov dword [ebp - 0x94], 3
lea esi, [ebx + 0x8c]
mov dword [ebp - 0x78], eax
lea edi, [ebx + 0x34]
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x74], edi
push eax
mov cl, 0x4f
mov dword [ebp - 0x30], 0x3e2a3d4f
mov dword [ebp - 0x2c], 0x2e3b263a
xor eax, eax
mov dword [ebp - 0x28], 0x2b6a1023
mov byte [ebp - 0x24], 0
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 0xb
jae 0x10025e20
mov cl, byte [ebp - 0x30]
jmp 0x10025e11
sub esp, 0x18
mov byte [ebp - 0x24], 0
lea eax, [ebp - 0x2f]
mov ecx, esp
push eax
call fcn.100012e0
lea eax, [ebp - 0x90]
push eax
call fcn.1001b71b
push eax
push dword [ebx + 0x30]
mov dword [ebp - 4], 0xf
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
add esp, 0x28
mov dword [edi], eax
push 0
push 1
call fcn.10001cd4
mov cl, 0x28
mov dword [ebp - 0x40], 0x4d5a4928
mov dword [ebp - 0x3c], 0x4d5a7749
xor eax, eax
mov dword [ebp - 0x38], 0x4c5a495f
mov byte [ebp - 0x34], 0
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 0xb
jae 0x10025e92
mov cl, byte [ebp - 0x40]
jmp 0x10025e83
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x34], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100012e0
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x10
push eax
push dword [edi]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
mov dword [esi + 8], eax
call fcn.10001cd4
mov cl, 0x49
mov dword [ebp - 0x4c], 0x3d313d49
mov dword [ebp - 0x48], 0x3e2c3b16
xor eax, eax
mov dword [ebp - 0x44], 0x2d3b28
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xa
jae 0x10025efa
mov cl, byte [ebp - 0x4c]
jmp 0x10025eeb
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x41], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100012e0
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x11
push eax
push dword [edi]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
mov dword [esi + 0xc], eax
call fcn.10001cd4
movaps xmm0, xmmword [0x1004dca0]
xor ecx, ecx
movups xmmword [ebp - 0x6c], xmm0
mov word [ebp - 0x5c], 3
mov al, byte [ebp - 0x6c]
xor byte [ebp + ecx - 0x6b], al
inc ecx
cmp ecx, 0x10
jb 0x10025f4d
lea eax, [ebp - 0x6b]
mov byte [ebp - 0x5b], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100012e0
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x12
push eax
push dword [edi]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
mov dword [esi + 0x10], eax
call fcn.10001cd4
movaps xmm0, xmmword [str.L848]
xor ecx, ecx
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x5c], 0
mov al, byte [ebp - 0x6c]
xor byte [ebp + ecx - 0x6b], al
inc ecx
cmp ecx, 0xf
jb 0x10025fab
lea eax, [ebp - 0x6b]
mov byte [ebp - 0x5c], 0
push eax
lea ecx, [ebp - 0x90]
call fcn.100012e0
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x13
push eax
push dword [edi]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
mov dword [esi + 0x14], eax
call fcn.10001cd4
call fcn.100097bd
test eax, eax
je 0x100260c0
mov dword [esi], eax
call fcn.1000eccc
test eax, eax
je 0x100260c0
mov ecx, dword [esi]
mov dword [ecx], eax
mov eax, dword [esi]
push dword [ebx]
push dword [eax]
call fcn.1000e785
and dword [esp + 4], 0
and dword [esp], 0
sub esp, 0x18
mov eax, dword [esi]
and dword [esp + 0x14], 0
and dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
and dword [esp + 4], 0
and dword [esp], 0
push dword [eax]
call fcn.1000ee2c
mov eax, dword [esi]
push 0xb
push dword [eax]
call fcn.1000e883
mov eax, dword [esi]
push pe_nt_image_headers32
push dword [eax]
call fcn.1000e85d
push dword [esi + 8]
lea eax, [ebp - 0xac]
push eax
call fcn.1000e403
mov esi, eax
lea edi, [ebp - 0x20]
lea eax, [ebp - 0x20]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x98]
mov eax, dword [esi]
push dword [eax]
call fcn.1000ecde
add esp, 0x44
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esi]
push dword [eax]
call fcn.1000e75f
mov eax, dword [esi]
push 0
push dword [eax]
call fcn.1000e8b6
mov edi, dword [ebp - 0x74]
add esp, 0x10
call fcn.100097bd
test eax, eax
je 0x100260cc
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x78]
add edi, 4
inc eax
mov dword [ebp - 0x74], edi
add esi, 0x18
mov dword [ebp - 0x78], eax
sub dword [ebp - 0x94], 1
mov dword [ebp - 0x98], esi
jne 0x10025df3
push 0x14
push dword [ebx]
call fcn.1000e85d
pop ecx
pop ecx
call fcn.10044a84
ret