Function at 0x1000fa19
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x158
mov eax, 0x100354c6
call fcn.10034356
mov esi, ecx
mov ebx, dword [ebp + 8]
mov eax, dword [esi + 0x10]
mov dword [0x100461a0], eax
test ebx, ebx
je 0x10010117
cmp dword [ebp + 0xc], 1
je 0x1000fa56
cmp dword [ebp + 0xc], 4
je 0x1000fa56
cmp dword [ebp + 0xc], 0x100
jne 0x10010117
push 0x103
lea eax, [ebp - 0x113]
mov byte [ebp - 0x114], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
lea edi, [ebp - 0x12c]
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
push 0xf
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x118], ecx
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [0x1004547c], ecx
mov dword [ebp - 0x11c], eax
mov byte [ebp - 0x12c], al
mov eax, 0x10045468
cmova eax, dword [0x10045468]
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov cl, 0xb
mov dword [ebp - 0x144], 0x7f7b440b
mov dword [ebp - 0x140], 0x25656462
xor eax, eax
mov dword [ebp - 0x13c], 0x626542
xor byte [ebp + eax - 0x143], cl
inc eax
cmp eax, 0xa
jae 0x1000faf0
mov cl, byte [ebp - 0x144]
jmp 0x1000fadb
lea eax, [ebp - 0x143]
mov byte [ebp - 0x139], 0
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [esi], 0
je 0x1000fbc7
cmp ebx, dword [esi]
jne 0x1000fbc7
xor edx, edx
lea ecx, [ebp - 0x164]
cmp dword [0x10046380], 1
setne dl
mov dword [0x10046380], edx
mov byte [0x100460fe], dl
call fcn.10007e44
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x1000fb49
mov ecx, dword [ecx]
push 0x25
pop ebx
mov byte [ebp - 0x144], bl
xor eax, eax
mov dword [ebp - 0x143], 0x494c4e76
mov dword [ebp - 0x13f], 0x40576449
mov word [ebp - 0x13b], 0x44
xor byte [ebp + eax - 0x143], bl
inc eax
cmp eax, 9
jae 0x1000fb86
mov bl, byte [ebp - 0x144]
jmp 0x1000fb71
xor ebx, ebx
mov dword [ebp - 0x134], 0x3b210548
mov byte [ebp - 0x13a], bl
mov dl, 0x48
mov word [ebp - 0x130], 0x2b
mov eax, ebx
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 4
jae 0x1000fbba
mov dl, byte [ebp - 0x134]
jmp 0x1000fba5
lea eax, [ebp - 0x114]
push eax
push ecx
jmp 0x100100d7
cmp dword [esi + 4], 0
je 0x1000fcbc
cmp ebx, dword [esi + 4]
jne 0x1000fcbc
mov esi, dword [0x1007cfb8]
xor eax, eax
cmp dword [0x10046384], 1
setne al
mov dword [0x10046384], eax
test esi, esi
je 0x1000fc29
mov esi, dword [esi + 0xc]
test esi, esi
je 0x1000fc29
test eax, eax
je 0x1000fc1f
cmp dword [esi], 0
je 0x1000fc29
push 4
push dword [esi]
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000fc29
mov ecx, dword [esi]
push 1
call dword [0x1003cc20]
jmp 0x1000fc29
sub esp, 0xc
mov ecx, esi
call fcn.1000ce83
mov edx, dword [0x10046384]
lea ecx, [ebp - 0x164]
call fcn.10007e44
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x1000fc44
mov ecx, dword [ecx]
xor ebx, ebx
mov dword [ebp - 0x144], 0x72795b1c
mov dl, 0x1c
mov dword [ebp - 0x140], 0x754a7975
mov dword [ebp - 0x13c], 0x707e756f
mov eax, ebx
mov word [ebp - 0x138], 0x79
xor byte [ebp + eax - 0x143], dl
inc eax
cmp eax, 0xc
jae 0x1000fc86
mov dl, byte [ebp - 0x144]
jmp 0x1000fc71
mov byte [ebp - 0x137], bl
mov dl, 0x58
mov dword [ebp - 0x134], 0x2b311558
mov eax, ebx
mov word [ebp - 0x130], 0x3b
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 4
jae 0x1000fbba
mov dl, byte [ebp - 0x134]
jmp 0x1000fca3
cmp dword [esi + 8], 0
je 0x1000fd65
cmp ebx, dword [esi + 8]
jne 0x1000fd65
xor edx, edx
lea ecx, [ebp - 0x164]
cmp dword [0x1004638c], 1
setne dl
mov dword [0x1004638c], edx
call fcn.10007e44
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x1000fcf6
mov ecx, dword [ecx]
xor ebx, ebx
mov dword [ebp - 0x144], 0x343f085a
mov dl, 0x5a
mov dword [ebp - 0x140], 0x19283f3e
mov dword [ebp - 0x13c], 0x3f2a3b
mov eax, ebx
xor byte [ebp + eax - 0x143], dl
inc eax
cmp eax, 0xa
jae 0x1000fd2f
mov dl, byte [ebp - 0x144]
jmp 0x1000fd1a
mov byte [ebp - 0x139], bl
mov dl, 0x61
mov dword [ebp - 0x134], 0x12082c61
mov eax, ebx
mov word [ebp - 0x130], 2
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 4
jae 0x1000fbba
mov dl, byte [ebp - 0x134]
jmp 0x1000fd4c
cmp dword [esi + 0xc], 0
je 0x1000fe2c
cmp ebx, dword [esi + 0xc]
jne 0x1000fe2c
xor edx, edx
lea ecx, [ebp - 0x164]
cmp dword [0x10046390], 1
setne dl
mov dword [0x10046390], edx
call fcn.10007e44
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x1000fd9f
mov ecx, dword [ecx]
xor ebx, ebx
mov dword [ebp - 0x148], 0x333c0f5d
mov dl, 0x5d
mov dword [ebp - 0x144], 0x3a333436
mov dword [ebp - 0x140], 0x383b3b18
mov eax, ebx
mov word [ebp - 0x13c], 0x293e
mov byte [ebp - 0x13a], bl
xor byte [ebp + eax - 0x147], dl
inc eax
cmp eax, 0xd
jae 0x1000fde7
mov dl, byte [ebp - 0x148]
jmp 0x1000fdd2
mov byte [ebp - 0x13a], bl
mov dl, 0x32
mov dword [ebp - 0x134], 0x415b7f32
mov eax, ebx
mov word [ebp - 0x130], 0x51
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 4
jae 0x1000fe19
mov dl, byte [ebp - 0x134]
jmp 0x1000fe04
lea eax, [ebp - 0x114]
push eax
push ecx
lea eax, [ebp - 0x147]
jmp 0x100100dd
mov ecx, dword [esi + 0x14]
test ecx, ecx
je 0x1000ffca
cmp ebx, ecx
jne 0x1000ffca
call fcn.10009b1f
mov edi, eax
cmp edi, 0x17
ja 0x100100fc
cmp edi, dword [0x10046388]
je 0x100100fc
mov dword [0x10046388], edi
mov edx, edi
mov ecx, dword [esi + 0x14]
call fcn.10009afc
xor ebx, ebx
mov ecx, ebx
push edi
cmp edi, 0xa
jge 0x1000feb1
movaps xmm0, xmmword [0x1003e550]
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x13c], 0x5c560800
mov word [ebp - 0x138], 0x5c
mov al, byte [ebp - 0x14c]
xor byte [ebp + ecx - 0x14b], al
inc ecx
cmp ecx, 0x14
jb 0x1000fe96
mov byte [ebp - 0x137], bl
jmp 0x1000fee8
movaps xmm0, xmmword [0x1003e0b0]
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x13c], 0x45454f11
mov byte [ebp - 0x138], bl
mov al, byte [ebp - 0x14c]
xor byte [ebp + ecx - 0x14b], al
inc ecx
cmp ecx, 0x13
jb 0x1000fecf
mov byte [ebp - 0x138], bl
sub esp, 0x18
lea eax, [ebp - 0x14b]
mov ecx, esp
push eax
call fcn.10002607
lea eax, [ebp - 0x164]
push eax
call fcn.1000485f
add esp, 0x20
lea ecx, [ebp - 0x12c]
push eax
call fcn.10005394
lea ecx, [ebp - 0x164]
call fcn.10002413
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x12c]
call fcn.10009be1
push ecx
push edi
call fcn.1001040d
mov edx, dword [0x10046388]
lea ecx, [ebp - 0x164]
call fcn.10007e44
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x1000ff4f
mov ecx, dword [ecx]
mov dl, 0x78
mov dword [ebp - 0x140], 0x15193f78
mov dword [ebp - 0x13c], 0x15112c1d
mov eax, ebx
mov word [ebp - 0x138], 0x1d
xor byte [ebp + eax - 0x13f], dl
inc eax
cmp eax, 8
jae 0x1000ff85
mov dl, byte [ebp - 0x140]
jmp 0x1000ff70
mov byte [ebp - 0x137], bl
mov dl, 0x47
mov dword [ebp - 0x134], 0x342e0a47
mov eax, ebx
mov word [ebp - 0x130], 0x24
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 4
jae 0x1000ffb7
mov dl, byte [ebp - 0x134]
jmp 0x1000ffa2
lea eax, [ebp - 0x114]
push eax
push ecx
lea eax, [ebp - 0x13f]
jmp 0x100100dd
mov ecx, dword [esi + 0x18]
test ecx, ecx
je 0x100100fc
cmp ebx, ecx
jne 0x100100fc
call fcn.10009b1f
mov edi, eax
cmp edi, 0x14
ja 0x100100fc
cmp edi, dword [0x10046394]
je 0x100100fc
mov dword [0x10046394], edi
mov edx, edi
mov ecx, dword [esi + 0x18]
call fcn.10009afc
mov ecx, dword [esi + 0x20]
mov edx, edi
call fcn.10009c04
movd xmm0, dword [0x10046394]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x1003dc08]
movss dword [0x100440a4], xmm0
call fcn.1000f61f
mov edx, dword [0x10046394]
lea ecx, [ebp - 0x164]
call fcn.10007e44
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x1001004e
mov edx, dword [edx]
push 0x42
pop ecx
push 0x25
pop ebx
mov byte [ebp - 0x13a], bl
xor ebx, ebx
mov byte [ebp - 0x144], cl
mov eax, ebx
mov dword [ebp - 0x143], 0x272f2301
mov dword [ebp - 0x13f], 0x23102330
mov byte [ebp - 0x13b], 0x2c
mov word [ebp - 0x139], 0x27
xor byte [ebp + eax - 0x143], cl
inc eax
cmp eax, 0xb
jae 0x1001009d
mov cl, byte [ebp - 0x144]
jmp 0x10010088
mov byte [ebp - 0x138], bl
mov cl, 0x1d
mov dword [ebp - 0x134], 0x6e74501d
mov eax, ebx
mov word [ebp - 0x130], 0x7e
xor byte [ebp + eax - 0x133], cl
inc eax
cmp eax, 4
jae 0x100100cf
mov cl, byte [ebp - 0x134]
jmp 0x100100ba
lea eax, [ebp - 0x114]
push eax
push edx
lea eax, [ebp - 0x143]
push eax
lea eax, [ebp - 0x133]
mov byte [ebp - 0x12f], bl
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x164]
call fcn.10002413
mov edx, dword [ebp - 0x118]
cmp edx, 0xf
jbe 0x10010113
mov ecx, dword [ebp - 0x12c]
inc edx
call fcn.100023e6
mov al, 1
jmp 0x10010119
xor al, al
call fcn.10034314
ret 8