Function at 0x1001fc4f
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0xc], 0x465c4a28
mov esi, ecx
mov dword [ebp - 8], 0x47444b77
push edi
mov cl, 0x28
mov word [ebp - 4], 0x4d5b
mov byte [ebp - 2], bl
mov eax, ebx
xor byte [ebp + eax - 0xb], cl
inc eax
cmp eax, 9
jae 0x1001fc86
mov cl, byte [ebp - 0xc]
jmp 0x1001fc77
sub esp, 0x18
mov byte [ebp - 2], bl
lea eax, [ebp - 0xb]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [esi]
call fcn.1000f474
movaps xmm0, xmmword [0x10095ae0]
add esp, 0x18
mov dword [esi + 4], eax
mov ecx, ebx
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x18], 0x5651
mov byte [ebp - 0x16], bl
mov al, byte [ebp - 0x28]
xor byte [ebp + ecx - 0x27], al
inc ecx
cmp ecx, 0x11
jb 0x1001fcba
sub esp, 0x18
mov byte [ebp - 0x16], bl
lea eax, [ebp - 0x27]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [esi]
call fcn.1000f474
mov dword [esi + 8], eax
lea edi, [esi + 0xc]
mov eax, ebx
mov dword [ebp - 0x48], 4
add esp, 0x18
mov dword [ebp - 0x38], eax
lea ebx, [esi + 0x24]
movaps xmm0, xmmword [str._OZG_XwY_M_w_rL]
sub esp, 0x18
mov dword [ebp - 0x60], esp
xor ecx, ecx
movups xmmword [ebp - 0x5c], xmm0
push eax
mov al, byte [ebp - 0x5c]
xor byte [ebp + ecx - 0x5b], al
inc ecx
cmp ecx, 0xe
jb 0x1001fd0b
sub esp, 0x18
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x5b]
mov ecx, esp
push eax
call fcn.10004181
push dword [ebp - 0x60]
call fcn.10003c4b
mov ecx, dword [esi + 8]
add esp, 0x20
call fcn.1000f474
add esp, 0x18
mov dword [edi], eax
mov cl, 0x20
mov dword [ebp - 0xc], 0x54585420
mov dword [ebp - 8], 0x56454c7f
xor eax, eax
mov word [ebp - 4], 0x4c45
mov byte [ebp - 2], 0
xor byte [ebp + eax - 0xb], cl
inc eax
cmp eax, 9
jae 0x1001fd6d
mov cl, byte [ebp - 0xc]
jmp 0x1001fd5e
sub esp, 0x18
mov byte [ebp - 2], 0
lea eax, [ebp - 0xb]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [edi]
call fcn.1000f474
movaps xmm0, xmmword [0x10095590]
add esp, 0x18
mov dword [ebx - 4], eax
xor ecx, ecx
movups xmmword [ebp - 0x5c], xmm0
mov byte [ebp - 0x4c], 0
mov al, byte [ebp - 0x5c]
xor byte [ebp + ecx - 0x5b], al
inc ecx
cmp ecx, 0xf
jb 0x1001fd9d
sub esp, 0x18
mov byte [ebp - 0x4c], 0
lea eax, [ebp - 0x5b]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [edi]
call fcn.1000f474
movaps xmm0, xmmword [str.H_0_]
add esp, 0x18
mov dword [ebx], eax
xor ecx, ecx
movups xmmword [ebp - 0x5c], xmm0
mov al, byte [ebp - 0x5c]
xor byte [ebp + ecx - 0x5b], al
inc ecx
cmp ecx, 0xe
jb 0x1001fdd5
sub esp, 0x18
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x5b]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [edi]
call fcn.1000f474
add esp, 0x18
mov dword [ebx + 4], eax
mov cl, 0x14
mov dword [ebp - 0x44], 0x606c6014
mov dword [ebp - 0x40], 0x7a7b6e4b
xor eax, eax
mov word [ebp - 0x3c], 0x71
xor byte [ebp + eax - 0x43], cl
inc eax
cmp eax, 8
jae 0x1001fe28
mov cl, byte [ebp - 0x44]
jmp 0x1001fe19
sub esp, 0x18
mov byte [ebp - 0x3b], 0
lea eax, [ebp - 0x43]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [edi]
call fcn.1000f474
add esp, 0x18
mov dword [ebx + 8], eax
mov cl, 0x66
mov dword [ebp - 0x20], 0x8120466
mov dword [ebp - 0x1c], 0x12030239
xor eax, eax
mov dword [ebp - 0x18], 0x150a0f07
mov byte [ebp - 0x14], 0
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x1001fe73
mov cl, byte [ebp - 0x20]
jmp 0x1001fe64
sub esp, 0x18
mov byte [ebp - 0x14], 0
lea eax, [ebp - 0x1f]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [edi]
call fcn.1000f474
add esp, 0x18
mov dword [ebx + 0xc], eax
mov ecx, dword [edi]
xor dl, dl
call fcn.1000f6a4
mov eax, dword [ebp - 0x38]
add edi, 4
inc eax
add ebx, 0x18
sub dword [ebp - 0x48], 1
mov dword [ebp - 0x38], eax
jne 0x1001fcf7
movaps xmm0, xmmword [0x100953e0]
xor ebx, ebx
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0xa151018
mov ecx, ebx
mov byte [ebp - 0x14], bl
mov al, byte [ebp - 0x28]
xor byte [ebp + ecx - 0x27], al
inc ecx
cmp ecx, 0x13
jb 0x1001fecb
sub esp, 0x18
mov byte [ebp - 0x14], bl
lea eax, [ebp - 0x27]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [esi + 8]
call fcn.1000f474
mov dword [esi + 0x80], eax
add esp, 0x18
mov cl, 0x7b
mov dword [ebp - 0x34], 0xf030f7b
mov dword [ebp - 0x30], 0x1a0f0824
mov eax, ebx
mov dword [ebp - 0x2c], 0x80e0f
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 0xa
jae 0x1001ff22
mov cl, byte [ebp - 0x34]
jmp 0x1001ff13
sub esp, 0x18
mov byte [ebp - 0x29], bl
lea eax, [ebp - 0x33]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [esi + 0x80]
call fcn.1000f474
mov dword [esi + 0x7c], eax
mov ecx, ebx
lea eax, [esi + 0xac]
mov dword [ebp - 0x48], ecx
add esp, 0x18
mov dword [ebp - 0x38], eax
lea ebx, [esi + 0x84]
mov dword [ebp - 0x60], 4
sub esp, 0x18
mov dword [ebp - 0x58], 0x49486427
mov edi, esp
mov dword [ebp - 0x54], 0x53494253
mov dword [ebp - 0x50], 0x430278
xor eax, eax
push ecx
mov cl, 0x27
xor byte [ebp + eax - 0x57], cl
inc eax
cmp eax, 0xa
jae 0x1001ff8d
mov cl, byte [ebp - 0x58]
jmp 0x1001ff7e
sub esp, 0x18
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x57]
mov ecx, esp
push eax
call fcn.10004181
push edi
call fcn.10003c4b
mov ecx, dword [esi + 0x80]
add esp, 0x20
call fcn.1000f474
add esp, 0x18
mov dword [ebx], eax
mov cl, 0x1c
mov dword [ebp - 0x44], 0x7b71751c
mov dword [ebp - 0x40], 0x7e737143
xor eax, eax
mov byte [ebp - 0x3c], 0
xor byte [ebp + eax - 0x43], cl
inc eax
cmp eax, 7
jae 0x1001ffdd
mov cl, byte [ebp - 0x44]
jmp 0x1001ffce
sub esp, 0x18
mov byte [ebp - 0x3c], 0
lea eax, [ebp - 0x43]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [ebx]
call fcn.1000f474
mov edi, dword [ebp - 0x38]
add esp, 0x18
mov cl, 0x22
mov dword [ebp - 0x20], 0x454f4b22
mov dword [ebp - 0x1c], 0x56434c7d
mov dword [ebp - 0x18], 0x4c4d4b
mov dword [edi - 4], eax
xor eax, eax
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xa
jae 0x10020027
mov cl, byte [ebp - 0x20]
jmp 0x10020018
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x1f]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [ebx]
call fcn.1000f474
add esp, 0x18
mov dword [edi], eax
mov cl, 0x63
mov dword [ebp - 0xc], 0x171b1763
mov dword [ebp - 8], 0xe020d3c
xor eax, eax
mov word [ebp - 4], 6
xor byte [ebp + eax - 0xb], cl
inc eax
cmp eax, 8
jae 0x1002006c
mov cl, byte [ebp - 0xc]
jmp 0x1002005d
sub esp, 0x18
mov byte [ebp - 3], 0
lea eax, [ebp - 0xb]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [ebx]
call fcn.1000f474
add esp, 0x18
mov dword [edi + 4], eax
mov cl, 0x6c
mov dword [ebp - 0x34], 0x1814186c
mov dword [ebp - 0x30], 0x19030f33
xor eax, eax
mov word [ebp - 0x2c], 0x1802
mov byte [ebp - 0x2a], 0
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x100200b6
mov cl, byte [ebp - 0x34]
jmp 0x100200a7
sub esp, 0x18
mov byte [ebp - 0x2a], 0
lea eax, [ebp - 0x33]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [ebx]
call fcn.1000f474
movaps xmm0, xmmword [0x10095b60]
add esp, 0x18
mov dword [edi + 8], eax
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x6c], 0x7c667d67
mov byte [ebp - 0x68], 0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x13
jb 0x100200ed
sub esp, 0x18
mov byte [ebp - 0x68], 0
lea eax, [ebp - 0x7b]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [ebx]
call fcn.1000f474
add esp, 0x18
mov dword [edi + 0xc], eax
mov ecx, dword [ebx]
xor dl, dl
call fcn.1000f6a4
mov ecx, dword [ebp - 0x48]
add edi, 0x14
inc ecx
mov dword [ebp - 0x38], edi
add ebx, 4
mov dword [ebp - 0x48], ecx
sub dword [ebp - 0x60], 1
jne 0x1001ff5f
xor ecx, ecx
mov dword [ebp - 0x48], 5
lea eax, [esi + 0x100]
mov dword [ebp - 0x60], ecx
push 0x74
lea edi, [esi + 0x94]
mov dword [ebp - 0x38], eax
pop ebx
sub esp, 0x18
mov dword [ebp - 0x34], 0x5e4c7b29
mov dword [ebp - 0x10], esp
xor eax, eax
mov dword [ebp - 0x30], 0x764d5b48
mov word [ebp - 0x2c], 0x4d0c
push ecx
mov cl, 0x29
mov byte [ebp - 0x2a], 0
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x1002018c
mov cl, byte [ebp - 0x34]
jmp 0x1002017d
sub esp, 0x18
mov byte [ebp - 0x2a], 0
lea eax, [ebp - 0x33]
mov ecx, esp
push eax
call fcn.10004181
push dword [ebp - 0x10]
call fcn.10003c4b
mov ecx, dword [esi + 0x80]
add esp, 0x20
call fcn.1000f474
add esp, 0x18
mov dword [edi], eax
mov cl, 0x47
mov dword [ebp - 0xc], 0x333f3347
mov dword [ebp - 8], 0x32282418
xor eax, eax
mov word [ebp - 4], 0x3329
mov byte [ebp - 2], 0
xor byte [ebp + eax - 0xb], cl
inc eax
cmp eax, 9
jae 0x100201e4
mov cl, byte [ebp - 0xc]
jmp 0x100201d5
sub esp, 0x18
mov byte [ebp - 2], 0
lea eax, [ebp - 0xb]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [edi]
call fcn.1000f474
mov ecx, dword [ebp - 0x38]
add esp, 0x18
mov dword [ebp - 0x1f], 0x2b13191d
mov dword [ebp - 0x1b], 0x15031106
mov word [ebp - 0x17], 0x1006
mov dword [ecx - 4], eax
mov cl, bl
mov byte [ebp - 0x20], cl
xor eax, eax
mov byte [ebp - 0x15], 0
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xa
jae 0x10020234
mov cl, byte [ebp - 0x20]
jmp 0x10020225
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x1f]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [edi]
call fcn.1000f474
mov ecx, dword [ebp - 0x38]
add esp, 0x18
mov dword [ecx], eax
call fcn.1000d2b4
mov ecx, eax
test ecx, ecx
je 0x10020266
mov eax, dword [ebp - 0x38]
mov dword [eax - 8], ecx
mov ecx, dword [edi]
xor dl, dl
call fcn.1000f6a4
mov ecx, dword [ebp - 0x60]
add edi, 4
add dword [ebp - 0x38], 0xc
inc ecx
sub dword [ebp - 0x48], 1
mov dword [ebp - 0x60], ecx
jne 0x1002015a
movaps xmm0, xmmword [0x10096090]
xor ecx, ecx
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x18], 0x78
mov al, byte [ebp - 0x28]
xor byte [ebp + ecx - 0x27], al
inc ecx
cmp ecx, 0x10
jb 0x1002029a
sub esp, 0x18
mov byte [ebp - 0x17], 0
lea eax, [ebp - 0x27]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [esi + 8]
call fcn.1000f474
add esp, 0x18
mov dword [esi + 0x138], eax
xor ecx, ecx
mov byte [ebp - 0xc], bl
mov dword [ebp - 0xb], 0x2b000c00
mov eax, ecx
mov dword [ebp - 7], 0x11131504
mov byte [ebp - 3], cl
xor byte [ebp + eax - 0xb], bl
inc eax
cmp eax, 8
jae 0x100202f1
mov bl, byte [ebp - 0xc]
jmp 0x100202e2
sub esp, 0x18
mov byte [ebp - 3], cl
lea eax, [ebp - 0xb]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [esi + 8]
call fcn.1000f474
add esp, 0x18
mov dword [esi + 0x134], eax
mov cl, 0x57
mov dword [ebp - 0x24], 0x39233557
mov dword [ebp - 0x20], 0x2f323908
xor eax, eax
mov dword [ebp - 0x1c], 0x30362723
mov word [ebp - 0x18], 0x32
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xc
jae 0x10020341
mov cl, byte [ebp - 0x24]
jmp 0x10020332
sub esp, 0x18
mov byte [ebp - 0x17], 0
lea eax, [ebp - 0x23]
mov ecx, esp
push eax
call fcn.10004181
mov ecx, dword [esi + 8]
call fcn.1000f474
mov edx, dword [esi + 0x144]
add esp, 0x18
mov ecx, dword [esi + 0x134]
mov dword [esi + 0x13c], eax
call fcn.1000ff27
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret