Function at 0x10004882
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f90e4
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x1014d084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x2c]
push 0x1012f17f
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], 0
call fcn.10007920
mov dword [ebp - 4], 0
mov esi, dword [0x101526f0]
test esi, esi
jne 0x10004596
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
call fcn.10006b00
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x10004578
inc eax
push 1
push eax
push dword [ebp - 0x28]
call fcn.10007520
add esp, 0xc
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 1
jmp 0x10004994
cmp byte [0x101527be], 0
je 0x100045d7
mov ecx, 0x10b8134
call fcn.1001aba0
mov edi, eax
test edi, edi
je 0x100045d4
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x100045d4
push 4
add edi, 0x6e4
push edi
call ebx
test eax, eax
jne 0x100045d4
mov ax, word [edi]
mov word [esi + 0x46], ax
mov edi, dword [ebp - 0x40]
movzx eax, word [esi + 0x46]
add eax, 0xffffff9b
cmp eax, 0x6f
ja case.0x100045ee.113
movzx eax, byte [eax + 0x100049e8]
jmp dword [eax*4 + 0x100049c4]
mov dword [ebp - 0x3c], 0x2c2d2c1d
xor esi, esi
mov dword [ebp - 0x38], 0x6f7c6a30
mov dword [ebp - 0x34], 0x6f72746f
mov byte [ebp - 0x30], 0
cmp esi, 0xc
jb 0x1000462c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xc
jb 0x1000464f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 0xb
jb 0x10004610
mov byte [ebp - 0x30], 0
jmp 0x1000494d
mov dword [ebp - 0x3c], 0x6c6e6f5e
xor esi, esi
mov dword [ebp - 0x38], 0x39312c73
mov word [ebp - 0x34], 0x3b2b
mov byte [ebp - 0x32], 0
nop dword [eax]
cmp esi, 0xa
jb 0x1000469c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xa
jb 0x100046bf
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 9
jb 0x10004680
mov byte [ebp - 0x32], 0
jmp 0x1000494d
mov dword [ebp - 0x3c], 0x686b6a5b
xor esi, esi
mov dword [ebp - 0x38], 0x3c3a3676
mov word [ebp - 0x34], 0x3e
cmp esi, 9
jb 0x10004704
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 9
jb 0x10004727
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 8
jb 0x100046e8
mov byte [ebp - 0x33], 0
jmp 0x1000494d
mov dword [ebp - 0x3c], 0x2060736
xor esi, esi
mov dword [ebp - 0x38], 0x5f44461b
mov dword [ebp - 0x34], 0x424553
cmp esi, 0xb
jb 0x1000476d
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xb
jb 0x10004790
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 0xa
jb 0x10004751
jmp 0x10004949
mov dword [ebp - 0x3c], 0x4c4d4f7d
xor esi, esi
mov dword [ebp - 0x38], 0xf1c0a50
mov dword [ebp - 0x34], 0xf12140f
mov byte [ebp - 0x30], 0
nop word [eax + eax]
cmp esi, 0xc
jb 0x100047dc
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xc
jb 0x100047ff
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 0xb
jb 0x100047c0
mov byte [ebp - 0x30], 0
jmp 0x1000494d
mov dword [ebp - 0x3c], 0x4b494b79
xor esi, esi
mov dword [ebp - 0x38], 0x1e160b54
mov word [ebp - 0x34], 0x1c0c
mov byte [ebp - 0x32], 0
nop dword [eax]
cmp esi, 0xa
jb 0x1000484c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xa
jb 0x1000486f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 9
jb 0x10004830
mov byte [ebp - 0x32], 0
jmp 0x1000494d
mov dword [ebp - 0x3c], 0x70737143
xor esi, esi
mov dword [ebp - 0x38], 0x24222e6e
mov word [ebp - 0x34], 0x26
cmp esi, 9
jb 0x100048b4
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 9
jb 0x100048d7
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 8
jb 0x10004898
mov byte [ebp - 0x33], 0
jmp 0x1000494d
mov dword [ebp - 0x3c], 0x23272517
xor esi, esi
mov dword [ebp - 0x38], 0x7e65673a
mov dword [ebp - 0x34], 0x636472
nop
cmp esi, 0xb
jb 0x1000491c
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov bl, byte [ebp + esi - 0x3b]
xor bl, byte [ebp - 0x3c]
cmp esi, 0xb
jb 0x1000493f
push 0x90
push str.C:Program_Files__x86_Microsoft_Visual_Studio_14.0VCinclude_array
push str.array_subscript_out_of_range
call fcn.10066030
add esp, 0xc
mov byte [ebp + esi - 0x3b], bl
inc esi
cmp esi, 0xa
jb 0x10004900
mov byte [ebp - 0x31], 0
lea eax, [ebp - 0x3b]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10006c70
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
call fcn.10006b00
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1000497b
inc eax
push 1
push eax
push dword [ebp - 0x28]
call fcn.10007520
add esp, 0xc
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.10007000
lea ecx, [ebp - 0x2c]
call fcn.10006ea0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10075bf0
mov esp, ebp
pop ebp
ret 4