Function at 0x10004b95
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d6024
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x1012507c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x30]
push 0x1010a11f
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x4c], 0
call fcn.10007970
mov dword [ebp - 4], 0
mov esi, dword [0x1012a6f8]
test esi, esi
jne 0x10004b36
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.10006b40
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x10004b18
inc eax
push 1
push eax
push dword [ebp - 0x2c]
call fcn.10007570
add esp, 0xc
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 4], 1
jmp 0x10004f37
cmp byte [0x1012a7be], 0
je 0x10004b77
mov ecx, 0x10b8134
call fcn.10017a30
mov edi, eax
test edi, edi
je 0x10004b74
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x10004b74
push 4
add edi, 0x6e4
push edi
call ebx
test eax, eax
jne 0x10004b74
mov ax, word [edi]
mov word [esi + 0x46], ax
mov edi, dword [ebp - 0x48]
movzx eax, word [esi + 0x46]
add eax, 0xffffff9b
cmp eax, 0x6f
ja case.0x10004b8e.113
movzx eax, byte [eax + 0x10004f8c]
jmp dword [eax*4 + 0x10004f68]
mov dword [ebp - 0x44], 0x76654f04
xor esi, esi
mov dword [ebp - 0x40], 0x53247771
mov dword [ebp - 0x3c], 0x6d767665
mov word [ebp - 0x38], 0x766b
mov byte [ebp - 0x36], 0
cmp esi, 0xe
jb 0x10004bd2
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xe
jb 0x10004bf5
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xd
jb 0x10004bb6
mov byte [ebp - 0x36], 0
jmp 0x10004ef0
mov dword [ebp - 0x40], 0x7d6e440f
xor esi, esi
mov dword [ebp - 0x3c], 0x5d2f7c7a
mov dword [ebp - 0x38], 0x6a7a6860
mov byte [ebp - 0x34], 0
cmp esi, 0xc
jb 0x10004c3f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xc
jb 0x10004c62
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xb
jb 0x10004c23
mov byte [ebp - 0x34], 0
lea eax, [ebp - 0x3f]
jmp 0x10004ef3
mov dword [ebp - 0x40], 0x6d7e541f
xor esi, esi
mov dword [ebp - 0x3c], 0x523f6c6a
mov dword [ebp - 0x38], 0x7a787e
nop
cmp esi, 0xb
jb 0x10004cac
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xb
jb 0x10004ccf
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xa
jb 0x10004c90
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x3f]
jmp 0x10004ef3
mov dword [ebp - 0x40], 0x485b713a
xor esi, esi
mov dword [ebp - 0x3c], 0x6a1a494f
mov dword [ebp - 0x38], 0x495f5348
mov word [ebp - 0x34], 0x4e
cmp esi, 0xd
jb 0x10004d1e
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov bl, byte [ebp + esi - 0x3f]
xor bl, byte [ebp - 0x40]
cmp esi, 0xd
jb 0x10004d41
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov byte [ebp + esi - 0x3f], bl
inc esi
cmp esi, 0xc
jb 0x10004d02
mov byte [ebp - 0x33], 0
lea eax, [ebp - 0x3f]
jmp 0x10004ef3
movaps xmm0, xmmword [0x101172b0]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x3b
nop word [eax + eax]
cmp esi, 0x11
jb 0x10004d8c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0x11
jb 0x10004daf
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0x10
jb 0x10004d70
mov byte [ebp - 0x33], 0
jmp 0x10004ef0
movaps xmm0, xmmword [0x10116f60]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
nop
cmp esi, 0xf
jb 0x10004dec
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xf
jb 0x10004e0f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xe
jb 0x10004dd0
mov byte [ebp - 0x35], 0
jmp 0x10004ef0
mov dword [ebp - 0x44], 0x430f2663
xor esi, esi
mov dword [ebp - 0x40], 0x2110c2e
mov dword [ebp - 0x3c], 0x22e4307
mov word [ebp - 0x38], 0x604
mov byte [ebp - 0x36], 0
cmp esi, 0xe
jb 0x10004e5f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0xe
jb 0x10004e82
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xd
jb 0x10004e43
mov byte [ebp - 0x36], 0
jmp 0x10004ef0
movaps xmm0, xmmword [0x101173a0]
xor esi, esi
movups xmmword [ebp - 0x44], xmm0
mov byte [ebp - 0x34], 0
cmp esi, 0x10
jb 0x10004ebf
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov bl, byte [ebp + esi - 0x43]
xor bl, byte [ebp - 0x44]
cmp esi, 0x10
jb 0x10004ee2
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10043280
add esp, 0xc
mov byte [ebp + esi - 0x43], bl
inc esi
cmp esi, 0xf
jb 0x10004ea3
mov byte [ebp - 0x34], 0
lea eax, [ebp - 0x43]
push eax
lea ecx, [ebp - 0x30]
call fcn.10006cb0
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.10006b40
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x10004f1e
inc eax
push 1
push eax
push dword [ebp - 0x2c]
call fcn.10007570
add esp, 0xc
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.10007050
lea ecx, [ebp - 0x30]
call fcn.10006ef0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10052b20
mov esp, ebp
pop ebp
ret 4