Function at 0x1000b150
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004985d
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x1005f0f8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x6c
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10058f94]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b19d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x14
jl 0x1000b180
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0
call fcn.1000afe0
mov dword [ebp - 0x18], 0x656d6f53
mov dword [ebp - 0x14], 0x6e696874
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 1
call fcn.1000afe0
mov dword [ebp - 0x18], 0x434f5250
mov dword [ebp - 0x14], 0x4c505845
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 2
call fcn.1000afe0
mov ecx, 0xb4
xor edx, edx
nop
mov al, byte [edx + 0x10058fac]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b21d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x1000b200
mov byte [ebp - 0x13], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 3
call fcn.1000afe0
mov ecx, 0xc9
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10058fbc]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b25d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x1000b240
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 4
call fcn.1000afe0
mov ecx, 0x46
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10058fcc]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b29d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x1000b280
mov byte [ebp - 0x13], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 5
call fcn.1000afe0
mov ecx, 0x64
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10058fdc]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b2dd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x12
jl 0x1000b2c0
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 6
call fcn.1000afe0
mov ecx, 0xc
xor edx, edx
nop dword [eax]
mov al, byte [edx + str.XKa_szz_Cyqzu]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x28], al
and ecx, 0x800000ff
jns 0x1000b31d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x16
jl 0x1000b300
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 7
call fcn.1000afe0
mov ecx, 0x3d
xor edx, edx
nop dword [eax]
mov al, byte [edx + str.iiV__]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b35d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x1000b340
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 8
call fcn.1000afe0
mov ecx, 0x39
xor edx, edx
nop dword [eax]
mov al, byte [edx + str.moHYOZZ____5_]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b39d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x1000b380
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 9
call fcn.1000afe0
mov ecx, 0x74
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1005902c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1000b3dd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x12
jl 0x1000b3c0
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xa
call fcn.1000afe0
mov ecx, 0x41
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10059040]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b41d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x1000b400
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xb
call fcn.1000afe0
mov ecx, 0xbd
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10059050]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b45d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x1000b440
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xc
call fcn.1000afe0
mov ecx, 0x6b
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10059064]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000b49d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x28
jl 0x1000b480
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xd
call fcn.1000afe0
mov dword [ebp - 0x1c], 0x72546850
mov dword [ebp - 0x18], 0x654e6565
mov word [ebp - 0x14], 0x77
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xe
call fcn.1000afe0
mov ecx, 0x90
xor edx, edx
mov al, byte [edx + 0x10059090]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x1c], al
and ecx, 0x800000ff
jns 0x1000b4fd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x1000b4e0
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xf
call fcn.1000afe0
mov ecx, 0x34
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x100590a0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x1c], al
and ecx, 0x800000ff
jns 0x1000b53d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x1000b520
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0x10
call fcn.1000afe0
mov ecx, 0xa2
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x100590b0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b57d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x1000b560
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x11
call fcn.1000afe0
mov ecx, 0xb6
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x100590c4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000b5bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x1000b5a0
mov byte [ebp - 0x13], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x12
call fcn.1000afe0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret