Function at 0x1000d950
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002e45d
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x10039040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x102273f0], 0
jne 0x1000dbc5
mov ecx, dword [0x10039d08]
mov byte [0x102273f0], 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov ecx, dword [0x10039d08]
mov dword [0x10039d10], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov ecx, dword [0x10039d08]
mov dword [0x10039d14], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov ecx, dword [0x10039d08]
mov dword [0x10039d0c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov ecx, dword [0x10039d08]
mov dword [0x10039d18], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x100]
call eax
mov dword [0x10039d1c], eax
mov ecx, 0xf2
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10033ca8]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x28], al
and ecx, 0x800000ff
jns 0x1000da1d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x1000da00
mov byte [ebp - 0x1c], 0
push 0
push 0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x28]
mov ecx, dword [0x10039d08]
push 0
push 0x190
push 0xc
mov eax, dword [ecx]
push edx
push dword [0x10039d10]
mov eax, dword [eax + 0x104]
call eax
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
movq qword [ebp - 0x28], xmm0
mov edx, 0xb
mov byte [ebp - 0x1c], 0
xor eax, eax
nop
mov cl, byte [eax + 0x10033cb8]
xor cl, dl
inc edx
mov byte [ebp + eax - 0x38], cl
and edx, 0x800000ff
jns 0x1000da8d
dec edx
or edx, 0xffffff00
inc edx
inc eax
cmp eax, 0xc
jl 0x1000da70
mov byte [ebp - 0x2c], 0
push 0x10
push 0
mov dword [ebp - 4], 1
lea edx, [ebp - 0x38]
mov ecx, dword [0x10039d08]
push 0
push 0x190
push 0xc
mov eax, dword [ecx]
push edx
push dword [0x10039d14]
mov eax, dword [eax + 0x104]
call eax
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
movq qword [ebp - 0x38], xmm0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x24], 0x696c6143
mov dword [ebp - 0x20], 0x697262
push 0x10
push 0
mov dword [ebp - 4], 2
lea edx, [ebp - 0x24]
mov ecx, dword [0x10039d08]
push 0
push 0x384
push 0xe
mov eax, dword [ecx]
push edx
push dword [0x10039d0c]
mov eax, dword [eax + 0x104]
call eax
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x61697241
movq qword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0x6c
push 0x200
push 0
mov dword [ebp - 4], 3
lea edx, [ebp - 0x18]
mov ecx, dword [0x10039d08]
push 0
push 0x190
push 0xc
mov eax, dword [ecx]
push edx
push dword [0x10039d18]
mov eax, dword [eax + 0x104]
call eax
xor eax, eax
mov ecx, 0x62
mov dword [ebp - 0x18], eax
xor edx, edx
mov word [ebp - 0x14], ax
nop word [eax + eax]
mov al, byte [edx + 0x10033cd8]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000db8d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x1000db70
mov byte [ebp - 0x2a], 0
push 0x10
push 0
mov dword [ebp - 4], 4
lea edx, [ebp - 0x38]
mov ecx, dword [0x10039d08]
push 0
push 0x190
push 0x5c
mov eax, dword [ecx]
push edx
push dword [0x10039d1c]
mov eax, dword [eax + 0x104]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002ba3e
mov esp, ebp
pop ebp
ret