Function at 0x10043190
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, dword [0x100b1010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100b7f00]
push ebx
push esi
mov esi, dword [0x100b10dc]
mov eax, dword [ecx]
push edi
mov edi, dword [0x100b10d8]
push ecx
mov edx, dword [eax + 0x28]
mov eax, esp
mov dword [eax], 0xff0f0f0f
call edx
mov ecx, dword [0x100b7f00]
mov eax, dword [ecx]
mov edx, dword [eax + 0x30]
lea eax, [esi + 0x17]
push eax
lea eax, [edi + 0xaf]
push eax
push esi
push edi
call edx
mov byte [ebp - 0x30], 6
mov al, 0x4d
xor al, byte [ebp - 0x30]
mov cl, 0x63
mov byte [ebp - 0x2f], al
mov ah, 0x6f
mov al, byte [ebp - 0x30]
mov ch, 0x68
xor cl, al
mov byte [ebp - 0x27], 0
xor ch, al
mov byte [ebp - 0x2e], cl
xor ah, al
mov byte [ebp - 0x2a], ch
mov ecx, dword [0x100b10d8]
mov dl, 0x7f
xor dl, al
mov byte [ebp - 0x2b], ah
mov dh, 0x62
mov byte [ebp - 0x2d], dl
xor dh, al
mov byte [ebp - 0x27], 0
mov bl, 0x64
mov byte [ebp - 0x29], dh
mov edx, dword [0x100b10dc]
xor bl, al
mov bh, 0x75
mov byte [ebp - 0x2c], bl
xor bh, al
add ecx, 0x57
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x28], bh
push eax
push ecx
mov eax, esp
add edx, 0xb
push edx
push ecx
push 0
push 1
push 3
push dword [0x100b7f0c]
mov dword [eax], 0xc7e3f5db
call fcn.1003eae0
mov eax, dword [0x100b7748]
add esp, 0x20
xor esi, esi
mov ecx, dword [eax]
cmp byte [ecx + 8], 0
je 0x10043305
cmp byte [ecx + 5], 0
je 0x10043305
cmp byte [ecx + 9], 0
je 0x10043305
cmp byte [0x100b7ed4], 0
je 0x10043305
mov esi, dword [ecx + 0x10]
xor eax, eax
mov cl, 0xa
mov dword [ebp - 0x14], 0x2a632f0a
mov dword [ebp - 0x10], 0x2a646347
mov dword [ebp - 0xc], 0x6b676b4e
mov word [ebp - 8], 0x6f6d
mov byte [ebp - 6], 0
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 0xd
jae 0x100432c1
mov cl, byte [ebp - 0x14]
jmp 0x100432b2
mov ecx, dword [0x100b10d8]
lea eax, [ebp - 0x13]
mov edx, dword [0x100b10dc]
add ecx, 5
push esi
push eax
push ecx
mov eax, esp
mov byte [ebp - 6], 0
add edx, 0x21
push edx
push ecx
push 0
push 1
push 0
push dword [0x100b7f10]
mov dword [eax], 0xc7e3f5db
call fcn.1003eae0
mov eax, dword [0x100b7748]
add esp, 0x24
mov esi, 0x14
mov ecx, dword [eax]
cmp byte [ecx + 8], 0
je 0x100433af
cmp byte [ecx + 0xa], 0
je 0x100433af
cmp byte [0x100b7ed5], 0
je 0x100433af
mov byte [ebp - 0x3c], 0x17
mov al, 0x55
xor al, byte [ebp - 0x3c]
mov cl, 0x78
mov byte [ebp - 0x3b], al
mov ah, 0x37
mov al, byte [ebp - 0x3c]
mov ch, 0x56
xor cl, al
mov byte [ebp - 0x33], 0
xor ch, al
mov byte [ebp - 0x3a], cl
xor ah, al
mov byte [ebp - 0x36], ch
mov ecx, dword [0x100b10d8]
mov dl, 0x73
xor dl, al
mov byte [ebp - 0x37], ah
mov dh, 0x7e
mov byte [ebp - 0x39], dl
xor dh, al
mov byte [ebp - 0x33], 0
mov byte [ebp - 0x35], dh
mov bl, 0x6e
mov edx, dword [0x100b10dc]
xor bl, al
mov bh, 0x7a
mov byte [ebp - 0x38], bl
xor bh, al
add ecx, 5
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x34], bh
push eax
push ecx
mov eax, esp
add edx, 0x21
add edx, esi
push edx
push ecx
push 0
push 1
push 0
push dword [0x100b7f10]
mov dword [eax], 0xc7e3f5db
call fcn.1003eae0
mov eax, dword [0x100b7748]
add esp, 0x20
add esi, 0x14
mov eax, dword [eax + 4]
cmp byte [eax], 0
je 0x10043422
cmp byte [0x100b7ed6], 0
je 0x10043422
movaps xmm0, xmmword [0x100a6ff0]
xor ecx, ecx
movups xmmword [ebp - 0x50], xmm0
mov word [ebp - 0x40], 0x797d
mov byte [ebp - 0x3e], 0
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x11
jb 0x100433d7
mov ecx, dword [0x100b10d8]
lea eax, [ebp - 0x4f]
mov edx, dword [0x100b10dc]
add ecx, 5
push eax
push ecx
mov eax, esp
mov byte [ebp - 0x3e], 0
add edx, 0x21
add edx, esi
push edx
push ecx
push 0
push 1
push 0
push dword [0x100b7f10]
mov dword [eax], 0xc7e3f5db
call fcn.1003eae0
add esp, 0x20
add esi, 0x14
mov eax, dword [0x100b7740]
cmp byte [eax], 0
je 0x100434c4
cmp byte [0x100b7ed7], 0
je 0x100434c4
mov byte [ebp - 0x24], 0x44
mov al, 2
xor al, byte [ebp - 0x24]
mov dl, 0x2f
mov byte [ebp - 0x23], al
mov bh, dl
mov al, byte [ebp - 0x24]
mov cl, 0x25
xor cl, al
mov byte [ebp - 0x1b], 0
xor dl, al
mov byte [ebp - 0x22], cl
mov ah, 0x20
mov byte [ebp - 0x21], dl
mov ch, 0x31
mov byte [ebp - 0x1b], 0
xor ch, al
xor ah, al
mov dh, 0x27
mov byte [ebp - 0x1f], ah
xor dh, al
mov byte [ebp - 0x1e], ch
mov ecx, dword [0x100b10d8]
xor bh, al
mov byte [ebp - 0x1d], dh
mov bl, 0x21
mov edx, dword [0x100b10dc]
xor bl, al
lea eax, [ebp - 0x23]
mov byte [ebp - 0x20], bl
push eax
add ecx, 5
mov byte [ebp - 0x1c], bh
push ecx
mov eax, esp
add edx, 0x21
add edx, esi
push edx
push ecx
push 0
push 1
push 0
push dword [0x100b7f10]
mov dword [eax], 0xc7e3f5db
call fcn.1003eae0
mov eax, dword [0x100b7740]
add esp, 0x20
add esi, 0x14
cmp byte [eax + 4], 0
je 0x1004354e
cmp byte [0x100b7efe], 0
je 0x1004354e
mov edi, dword [eax + 0x14]
mov cl, 0x7b
mov dword [ebp - 0x14], 0x5b125e7b
xor eax, eax
mov dword [ebp - 0x10], 0x1c15122b
mov dword [ebp - 0xc], 0x120b285b
mov word [ebp - 8], 0x1e10
mov byte [ebp - 6], 0
nop dword [eax]
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 0xd
jae 0x1004350f
mov cl, byte [ebp - 0x14]
jmp 0x10043500
mov ecx, dword [0x100b10d8]
lea eax, [ebp - 0x13]
mov edx, dword [0x100b10dc]
add ecx, 5
push edi
push eax
push ecx
mov eax, esp
mov byte [ebp - 6], 0
add edx, 0x21
add edx, esi
push edx
push ecx
push 0
push 1
push 0
push dword [0x100b7f10]
mov dword [eax], 0xc7e3f5db
call fcn.1003eae0
add esp, 0x24
add esi, 0x14
cmp byte [0x100b7efd], 0
je 0x100435be
mov cl, 0x2f
mov dword [ebp - 0x24], 0x46477b2f
mov dword [ebp - 0x20], 0x4a5f4b5d
xor eax, eax
mov dword [ebp - 0x1c], 0x41405c5d
mov byte [ebp - 0x18], 0
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xb
jae 0x10043583
mov cl, byte [ebp - 0x24]
jmp 0x10043574
mov ecx, dword [0x100b10d8]
lea eax, [ebp - 0x23]
mov edx, dword [0x100b10dc]
add ecx, 5
push eax
push ecx
mov eax, esp
mov byte [ebp - 0x18], 0
add edx, 0x21
add edx, esi
push edx
push ecx
push 0
push 1
push 0
push dword [0x100b7f10]
mov dword [eax], 0xa9e3f5db
call fcn.1003eae0
add esp, 0x20
cmp byte [0x10186e7c], 0
mov edi, dword [0x100b10dc]
mov esi, dword [0x100b10d8]
je 0x10043649
mov edx, dword [0x100bfc74]
cmp edx, esi
jle 0x10043649
lea eax, [esi + 0xaf]
cmp eax, edx
jle 0x10043649
mov ecx, dword [0x100bfc70]
cmp ecx, edi
jle 0x10043649
lea eax, [edi + 0x17]
cmp eax, ecx
jle 0x10043649
cmp byte [0x100bd912], 0
jne 0x1004361d
mov eax, edx
mov byte [0x100bd912], 1
sub eax, esi
mov esi, ecx
sub esi, edi
mov dword [0x10186e80], eax
mov dword [0x10186e84], esi
jmp 0x10043628
mov eax, dword [0x10186e80]
mov esi, dword [0x10186e84]
sub edx, eax
sub ecx, esi
mov dword [0x100b10d8], edx
mov dword [0x100b10dc], ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1009823a
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov byte [0x100bd912], 0
pop ebx
call fcn.1009823a
mov esp, ebp
pop ebp
ret