Function at 0x1001b74e
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x2c8
mov eax, 0x1005211b
call fcn.1005068e
xor ebx, ebx
mov ecx, 0xfd
mov edx, ebx
mov al, byte [edx + 0x10054fc0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1001b783
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x1001b766
mov byte [ebp - 0x13], bl
lea eax, [ebp - 0x20]
mov dword [ebp - 4], ebx
push eax
call fcn.1002d558
movaps xmm0, xmmword [0x1005ab00]
movups xmmword [ebp - 0x2d4], xmm0
pop ecx
movaps xmm0, xmmword [0x1005a300]
movups xmmword [ebp - 0x2c4], xmm0
mov dword [ebp - 0xa4], 0x50535d4c
movaps xmm0, xmmword [0x1005a4c0]
movups xmmword [ebp - 0x2b4], xmm0
mov dword [ebp - 0xa0], 0x2b25605e
movaps xmm0, xmmword [0x10059f80]
movups xmmword [ebp - 0x2a4], xmm0
mov word [ebp - 0x9c], 0x26
movaps xmm0, xmmword [0x1005aab0]
movups xmmword [ebp - 0x294], xmm0
mov byte [ebp - 0x9a], 1
movaps xmm0, xmmword [0x10059ba0]
movups xmmword [ebp - 0x284], xmm0
movaps xmm0, xmmword [0x10059fd0]
movups xmmword [ebp - 0x274], xmm0
movaps xmm0, xmmword [0x1005af60]
movups xmmword [ebp - 0x264], xmm0
movaps xmm0, xmmword [0x1005aed0]
movups xmmword [ebp - 0x254], xmm0
movaps xmm0, xmmword [0x1005af90]
movups xmmword [ebp - 0x244], xmm0
movaps xmm0, xmmword [0x1005af50]
movups xmmword [ebp - 0x234], xmm0
movaps xmm0, xmmword [0x1005ad90]
movups xmmword [ebp - 0x224], xmm0
movaps xmm0, xmmword [0x1005ae70]
movups xmmword [ebp - 0x214], xmm0
movaps xmm0, xmmword [0x1005ac90]
movups xmmword [ebp - 0x204], xmm0
movaps xmm0, xmmword [0x1005acc0]
movups xmmword [ebp - 0x1f4], xmm0
movaps xmm0, xmmword [0x1005a650]
movups xmmword [ebp - 0x1e4], xmm0
movaps xmm0, xmmword [0x1005a8c0]
movups xmmword [ebp - 0x1d4], xmm0
movaps xmm0, xmmword [0x1005a4f0]
movups xmmword [ebp - 0x1c4], xmm0
movaps xmm0, xmmword [0x1005a670]
movups xmmword [ebp - 0x1b4], xmm0
movaps xmm0, xmmword [0x10059f30]
movups xmmword [ebp - 0x1a4], xmm0
movaps xmm0, xmmword [0x1005a160]
movups xmmword [ebp - 0x194], xmm0
movaps xmm0, xmmword [0x1005a360]
movups xmmword [ebp - 0x184], xmm0
movaps xmm0, xmmword [0x1005a560]
movups xmmword [ebp - 0x174], xmm0
movaps xmm0, xmmword [0x1005ad80]
movups xmmword [ebp - 0x164], xmm0
movaps xmm0, xmmword [0x1005aea0]
movups xmmword [ebp - 0x154], xmm0
movaps xmm0, xmmword [0x1005ae90]
movups xmmword [ebp - 0x144], xmm0
movaps xmm0, xmmword [0x1005aef0]
movups xmmword [ebp - 0x134], xmm0
movaps xmm0, xmmword [0x1005ad20]
movups xmmword [ebp - 0x124], xmm0
movaps xmm0, xmmword [0x1005ae60]
movups xmmword [ebp - 0x114], xmm0
movaps xmm0, xmmword [0x1005ad30]
movups xmmword [ebp - 0x104], xmm0
movaps xmm0, xmmword [0x1005ad10]
movups xmmword [ebp - 0xf4], xmm0
movaps xmm0, xmmword [0x1005a640]
movups xmmword [ebp - 0xe4], xmm0
movaps xmm0, xmmword [0x1005a8f0]
movups xmmword [ebp - 0xd4], xmm0
movaps xmm0, xmmword [0x1005aa40]
movups xmmword [ebp - 0xc4], xmm0
movaps xmm0, xmmword [str.DODOC]
movups xmmword [ebp - 0xb4], xmm0
mov ecx, ebx
lea eax, [ecx + 0xb]
xor byte [ebp + ecx - 0x2d4], al
inc ecx
cmp ecx, 0x239
jb 0x1001b9a9
push 0x5b
mov byte [ebp - 0x9a], bl
mov edx, ebx
pop ecx
mov al, byte [edx + 0x10054fd0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1001b9e4
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x1001b9c7
mov byte [ebp - 0x12], bl
push ecx
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 1
push eax
mov edx, 0x100d5980
lea ecx, [ebp - 0x20]
call fcn.100345e1
pop ecx
pop ecx
push 0x1b
pop ecx
mov edx, ebx
mov al, byte [edx + str.Xtj_sQCNI_T]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x34], al
and ecx, 0x800000ff
jns 0x1001ba2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x1001ba10
mov byte [ebp - 0x28], bl
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 2
push eax
call fcn.1002d558
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x30]
and dword [ebp - 0x30], 0
mov edx, 0x10060328
and dword [ebp - 0x2c], 0
mov ecx, 0x10053593
push ebx
push ebx
push ebx
push eax
push 0x100
call fcn.10031c65
movaps xmm0, xmmword [0x1005a680]
lea ecx, [ebp - 0x3c]
add esp, 0x18
mov dword [ebp - 0x2c], 0x79767778
movups xmmword [ebp - 0x3c], xmm0
mov word [ebp - 0x28], 0x6f
mov byte [ebp - 0x26], 1
call fcn.100022a8
mov edx, 0x100d597b
mov ecx, eax
call fcn.100300d7
mov ecx, 0xbc
mov edx, ebx
mov al, byte [edx + 0x10054ff0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x30], al
and ecx, 0x800000ff
jns 0x1001bac4
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 9
jl 0x1001baa7
mov byte [ebp - 0x27], bl
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 3
push eax
call fcn.1002d558
movaps xmm0, xmmword [0x1005a800]
movups xmmword [ebp - 0x98], xmm0
pop ecx
movaps xmm0, xmmword [0x1005a2a0]
mov ecx, ebx
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x48], 0x323c0f04
movaps xmm0, xmmword [0x1005a4a0]
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x44], 0x4142a
movaps xmm0, xmmword [0x10059e60]
movups xmmword [ebp - 0x68], xmm0
mov byte [ebp - 0x40], 1
movaps xmm0, xmmword [0x1005a010]
movups xmmword [ebp - 0x58], xmm0
lea eax, [ecx + 0xb]
xor byte [ebp + ecx - 0x98], al
inc ecx
cmp ecx, 0x57
jb 0x1001bb2f
mov byte [ebp - 0x40], bl
mov ecx, 0xa5
mov edx, ebx
mov al, byte [edx + 0x10054ffc]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1001bb66
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x12
jl 0x1001bb49
mov byte [ebp - 0x12], bl
push ecx
lea eax, [ebp - 0x98]
mov dword [ebp - 4], 4
push eax
mov edx, 0x100d597c
lea ecx, [ebp - 0x24]
call fcn.100345e1
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x666f6241
mov dword [ebp - 0x18], 0x7271472e
mov word [ebp - 0x14], 0x79
mov byte [ebp - 0x12], 1
call fcn.1000553e
mov edx, 0x10060314
mov ecx, eax
call fcn.100300d7
cmp byte [0x10060314], 0
je 0x1001bbeb
call fcn.1004f360
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.1004f840
push 0x10018c9e
push 0x100d5990
call fcn.1004ede0
call fcn.1004f3c0
call fcn.1005064c
ret