Function at 0x10004be5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ce074
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x1011b07c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x30]
push 0x1010150f
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x4c], 0
call fcn.10007870
mov dword [ebp - 4], 0
mov esi, dword [0x10120610]
test esi, esi
jne 0x10004a36
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.10006a40
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x10004a18
inc eax
push 1
push eax
push dword [ebp - 0x2c]
call fcn.10007470
add esp, 0xc
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 4], 1
jmp 0x10004e37
cmp byte [0x101206d6], 0
je 0x10004a77
mov ecx, 0x10b8134
call fcn.100178a0
mov edi, eax
test edi, edi
je 0x10004a74
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x10004a74
push 4
add edi, 0x6e4
push edi
call ebx
test eax, eax
jne 0x10004a74
mov ax, word [edi]
mov word [esi + 0x46], ax
mov edi, dword [ebp - 0x48]
movzx eax, word [esi + 0x46]
add eax, 0xffffff9b
cmp eax, 0x6f
ja case.0x10004a8e.113
movzx eax, byte [eax + 0x10004e8c]
jmp dword [eax*4 + 0x10004e68]
mov dword [ebp - 0x44], 0x76654f04
xor esi, esi
mov dword [ebp - 0x40], 0x53247771
mov dword [ebp - 0x3c], 0x6d767665
mov word [ebp - 0x38], 0x766b
mov byte [ebp - 0x36], 0
cmp esi, 0xe
jb 0x10004ad2
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xe
jb 0x10004af5
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xd
jb 0x10004ab6
mov byte [ebp - 0x36], 0
jmp 0x10004df0
mov dword [ebp - 0x40], 0x7d6e440f
xor esi, esi
mov dword [ebp - 0x3c], 0x5d2f7c7a
mov dword [ebp - 0x38], 0x6a7a6860
mov byte [ebp - 0x34], 0
cmp esi, 0xc
jb 0x10004b3f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xc
jb 0x10004b62
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xb
jb 0x10004b23
mov byte [ebp - 0x34], 0
lea eax, [ebp - 0x3f]
jmp 0x10004df3
mov dword [ebp - 0x40], 0x6d7e541f
xor esi, esi
mov dword [ebp - 0x3c], 0x523f6c6a
mov dword [ebp - 0x38], 0x7a787e
nop
cmp esi, 0xb
jb 0x10004bac
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xb
jb 0x10004bcf
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xa
jb 0x10004b90
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x3f]
jmp 0x10004df3
mov dword [ebp - 0x40], 0x485b713a
xor esi, esi
mov dword [ebp - 0x3c], 0x6a1a494f
mov dword [ebp - 0x38], 0x495f5348
mov word [ebp - 0x34], 0x4e
cmp esi, 0xd
jb 0x10004c1e
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xd
jb 0x10004c41
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xc
jb 0x10004c02
mov byte [ebp - 0x33], 0
lea eax, [ebp - 0x3f]
jmp 0x10004df3
movaps xmm0, xmmword [0x1010d8a0]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x3b
nop word [eax + eax]
cmp esi, 0x11
jb 0x10004c8c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0x11
jb 0x10004caf
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0x10
jb 0x10004c70
mov byte [ebp - 0x33], 0
jmp 0x10004df0
movaps xmm0, xmmword [0x1010d560]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
nop
cmp esi, 0xf
jb 0x10004cec
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xf
jb 0x10004d0f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xe
jb 0x10004cd0
mov byte [ebp - 0x35], 0
jmp 0x10004df0
mov dword [ebp - 0x44], 0x430f2663
xor esi, esi
mov dword [ebp - 0x40], 0x2110c2e
mov dword [ebp - 0x3c], 0x22e4307
mov word [ebp - 0x38], 0x604
mov byte [ebp - 0x36], 0
cmp esi, 0xe
jb 0x10004d5f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xe
jb 0x10004d82
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xd
jb 0x10004d43
mov byte [ebp - 0x36], 0
jmp 0x10004df0
movaps xmm0, xmmword [0x1010d990]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
mov byte [ebp - 0x34], 0
cmp esi, 0x10
jb 0x10004dbf
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0x10
jb 0x10004de2
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.1003dac0
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xf
jb 0x10004da3
mov byte [ebp - 0x34], 0
lea eax, [ebp - 0x43]
push eax
lea ecx, [ebp - 0x30]
call fcn.10006bb0
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.10006a40
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x10004e1e
inc eax
push 1
push eax
push dword [ebp - 0x2c]
call fcn.10007470
add esp, 0xc
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.10006f50
lea ecx, [ebp - 0x30]
call fcn.10006df0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1004d370
mov esp, ebp
pop ebp
ret 4