Function at 0x1009e0a6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xcf0
mov eax, 0x100cdc6c
call fcn.1009f4a5
mov edi, dword [ebp + 0x10]
lea eax, [ebp - 0xc7c]
push 0xc2a
xor ebx, ebx
push ebx
push eax
call fcn.100a1d20
add esp, 0xc
mov dword [ebp - 0xc80], ebx
call fcn.10093984
push eax
lea ecx, [ebp - 0xc80]
call fcn.100904f9
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
test edi, edi
je 0x1009e37f
cmp dword [edi + 8], 0x4a
jne 0x1009e37f
mov esi, dword [edi]
test esi, esi
je 0x1009e37f
mov eax, dword [esi]
cmp eax, 0x4cc7c
jne 0x1009e371
mov esi, dword [esi + 8]
lea edi, [ebp - 0xc7c]
push 0x64
pop eax
mov byte [ebp - 0xcb2], al
mov ecx, 0x30a
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xca5], al
mov byte [ebp - 0xc8c], al
lea eax, [ebp - 0xb53]
push eax
lea eax, [ebp - 0xc7c]
mov byte [ebp - 0xc84], bl
push eax
lea eax, [ebp - 0xc57]
movsw word es:[edi], word [esi]
push eax
push ebx
sub esp, 0xc
mov dword [ebp - 0xcec], 0x3759444e
mov ecx, esp
mov dword [ebp - 0xce8], 0x38594848
lea eax, [ebp - 0xc84]
mov dword [ebp - 0xce4], 0x30633342
mov dword [ebp - 0xce0], 0x31304746
push dword [ebp - 0xc84]
mov dword [ebp - 0xcdc], 0x63676a4b
push eax
mov dword [ebp - 0xcd8], 0x6d636941
lea eax, [ebp - 0xcec]
mov dword [ebp - 0xcd4], 0x72737946
mov dword [ebp - 0xcd0], 0x4e637a44
mov dword [ebp - 0xccc], 0x506f524e
mov dword [ebp - 0xcc8], 0x2b455444
mov dword [ebp - 0xcc4], 0x4f6f7748
mov dword [ebp - 0xcc0], 0x62386a4c
mov dword [ebp - 0xcbc], 0x32744450
mov dword [ebp - 0xcb8], 0x45387965
mov word [ebp - 0xcb4], 0x444e
mov dword [ebp - 0xcb1], 0x38435a37
mov dword [ebp - 0xcad], 0x51484a32
mov dword [ebp - 0xca9], 0x4d544133
mov dword [ebp - 0xca4], 0x45555844
mov dword [ebp - 0xca0], 0x5a417849
mov dword [ebp - 0xc9c], 0x4d4d6a42
mov dword [ebp - 0xc98], 0x47634744
mov dword [ebp - 0xc94], 0x59345249
mov dword [ebp - 0xc90], 0x76556d43
mov dword [ebp - 0xc8b], 0x41417768
mov word [ebp - 0xc87], 0x4141
mov byte [ebp - 0xc85], 0x2b
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1008fc93
lea eax, [ebp - 0xcfc]
push eax
call fcn.10092e16
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1009ccfb
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.10093473
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xcfc]
call fcn.1009cb41
push 0x3c
lea eax, [ebp - 0x50]
push ebx
push eax
call fcn.100a1d20
pop ecx
pop ecx
mov ecx, esp
lea eax, [ebp - 0xc7c]
push eax
call fcn.10090672
lea ecx, [ebp - 0x50]
call fcn.10090741
lea eax, [ebp - 0xb53]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20]
call fcn.1009160f
lea eax, [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x1c]
call fcn.1009160f
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x18]
call fcn.1009160f
mov esi, dword [ebp - 0xc80]
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xc84], esp
push esi
call fcn.10090672
push ecx
lea eax, [ebp - 0x94b]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call fcn.100905e4
mov byte [ebp - 4], 3
call fcn.10098b2d
add esp, 0xc
call fcn.100a9aba
push 0x64
pop ecx
cdq
idiv ecx
cmp edx, ecx
jg 0x1009e364
lea eax, [ebp - 0x50]
push eax
call fcn.10097632
pop ecx
lea ecx, [ebp - 0x50]
call fcn.10091299
lea ecx, [esi - 0x10]
jmp 0x1009e396
cmp eax, 0x4d835
jne 0x1009e37f
push ebx
call fcn.1009b6af
pop ecx
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_CallNextHookEx]
mov ecx, dword [ebp - 0xc80]
lea ecx, [ecx - 0x10]
call fcn.10097310
call fcn.1009f3f2
ret 0xc