Function at 0x1001e957
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
cmp dword [ebp + 8], 0
jne 0x1001e96b
jmp 0x1001eb1e
lea esp, [esp]
jae 0x1001e970
rol edx, 0
jae 0x1001e98d
pushf
jp 0x1001e979
stc
jmp 0x1001e97c
test ecx, 0x2c50
popf
lea ecx, [ecx]
mov esp, esp
mov edx, edx
jb 0x1001e98d
mov ebx, 0x8908458b
inc ebp
in al, dx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov dword [0x1001487c], edx
jno 0x1001e9a0
xchg ecx, ecx
jo 0x1001e9a4
jp 0x1001e9a6
jb 0x1001e9b9
pushf
xor edx, 0
jl 0x1001e9af
ror esi, 0
popf
jne 0x1001e9b6
jae 0x1001e9b9
mov edi, 0x8bec458b
dec eax
add al, 0x89
or eax, 0x1001486c
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 4]
mov dword [0x1001486c], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
mov dword [0x10014868], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
mov dword [0x100144b0], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
mov dword [0x100144b4], ecx
lea edi, [edi + 0x691c]
lea edi, [edi - 0x691c]
je 0x1001ea02
pushf
shl esp, 0
popf
jl 0x1001e9ff
jne 0x1001ea02
xor eax, 0x4df045c6
mov byte [ebp - 0x10], 0x4d
mov byte [ebp - 0xf], 0x70
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0xc], 0x4d
mov byte [ebp - 0xb], 0x6a
mov byte [ebp - 0xa], 0x63
mov byte [ebp - 9], 0x73
mov byte [ebp - 8], 0x62
mov byte [ebp - 7], 0x73
mov byte [ebp - 6], 0x7a
mov byte [ebp - 5], 0x42
mov byte [ebp - 4], 0
cmc
ror eax, 0
ror edx, 0
xchg ebx, ebx
jge 0x1001ea57
xchg esp, esp
lea edi, [edi + 0x4280]
lea edi, [edi - 0x4280]
jno 0x1001ea51
lea ebx, [ebx]
jl 0x1001ea57
xor eax, 0xf0558a9e
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 5]
sub cl, 1
mov byte [ebp - 5], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 9]
sub al, 1
mov byte [ebp - 9], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 7]
sub cl, 1
mov byte [ebp - 7], cl
xor edi, dword [esp]
xor edi, dword [esp]
jne 0x1001eac7
jne 0x1001eac9
rol ebx, 0x10
ror ebx, 0x10
jne 0x1001eadd
pushf
mov eax, eax
popf
lea esp, [esp]
je 0x1001eadd
mov ebx, 0x48683d83
add dword [eax], edx
add byte [esp + edx - 0x73], dh
push ebp
invalid
cmp dword [0x10014868], 0
je 0x1001eafa
lea edx, [ebp - 0x10]
push edx
mov eax, dword [0x10014868]
push eax
call fcn.10043d83
mov dword [0x10014878], eax
xchg edx, eax
xchg edx, eax
xchg ecx, ecx
inc edx
dec edx
je 0x1001eb0e
nop
jg 0x1001eb05
js 0x1001eb07
lea esp, [esp]
jne 0x1001eb0e
mov edi, 0x6a0d6af7
add byte [ebp - 0x17ae0fb3], cl
xchg edi, eax
xor eax, 0xc4830000
or al, 0x5f
push 0xd
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.100220b2
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4