Function at 0x10001b20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001d15e
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x10029094]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea edi, [ebp - 0xb0]
mov dword [ebp - 0xd8], eax
xor ecx, ecx
mov dword [ebp - 0xd0], eax
xor eax, eax
push ebx
mov dword [ebp - 0xd4], 0
movaps xmm0, xmmword [0x100204b0]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
cpuid
mov esi, ebx
mov dword [ebp - 4], 0
movups xmmword [ebp - 0xb0], xmm0
pop ebx
mov dword [edi], eax
xorps xmm0, xmm0
mov dword [edi + 4], esi
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
xor edi, edi
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xa8]
movlpd qword [ebp - 0x4c], xmm0
movlpd qword [ebp - 0x44], xmm0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x50], eax
nop
mov eax, edi
xor ecx, ecx
push ebx
cpuid
mov dword [ebp - 0xa0], ebx
pop ebx
lea esi, [ebp - 0xb0]
mov dword [esi], eax
lea eax, [ebp - 0xb0]
mov esi, dword [ebp - 0xa0]
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
cmp edi, 1
jne 0x10001c98
mov eax, dword [ebp - 0xb0]
mov ecx, eax
sar ecx, 4
and ecx, 0xf
mov dword [ebp - 0xcc], ecx
mov ecx, eax
sar ecx, 8
and ecx, 0xf
mov dword [ebp - 0xc8], ecx
mov ecx, eax
sar ecx, 0xc
and ecx, 3
mov dword [ebp - 0xc4], ecx
mov ecx, eax
sar eax, 0x14
movzx eax, al
sar ecx, 0x10
and ecx, 0xf
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xc0], ecx
movzx ecx, al
sar eax, 8
movzx eax, al
shl eax, 3
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xb4], eax
inc edi
cmp edi, dword [ebp - 0x9c]
jbe 0x10001c00
mov eax, OleUICanConvertOrActivateAs
lea edi, [ebp - 0xb0]
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
mov dword [edi], eax
lea eax, [ebp - 0x98]
mov dword [edi + 4], esi
push 0x40
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
mov edi, dword [ebp - 0xb0]
push 0
push eax
mov dword [ebp - 0x9c], edi
call fcn.1000bcf0
mov esi, OleUICanConvertOrActivateAs
add esp, 0xc
cmp edi, esi
jb 0x10001d67
nop dword [eax + eax]
mov eax, esi
xor ecx, ecx
push ebx
cpuid
mov dword [ebp - 0xa0], ebx
pop ebx
lea edi, [ebp - 0xb0]
mov dword [edi], eax
lea eax, [ebp - 0xb0]
mov edi, dword [ebp - 0xa0]
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
cmp esi, reloc.oledlg.dll_OleUICanConvertOrActivateAs
jne 0x10001d33
movups xmm0, xmmword [ebp - 0xb0]
movups xmmword [ebp - 0x98], xmm0
jmp 0x10001d5e
cmp esi, 0x80000003
jne 0x10001d4b
movups xmm0, xmmword [ebp - 0xb0]
movups xmmword [ebp - 0x88], xmm0
jmp 0x10001d5e
cmp esi, 0x80000004
jne 0x10001d5e
movups xmm0, xmmword [ebp - 0xb0]
movups xmmword [ebp - 0x78], xmm0
inc esi
cmp esi, dword [ebp - 0x9c]
jbe 0x10001cf0
mov edi, dword [ebp - 0xd0]
mov dword [edi], 0
call fcn.10005060
mov ecx, eax
test ecx, ecx
je 0x10001ed2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0xa0], 0
call fcn.100042b0
lea eax, [ebp - 0x98]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0
call fcn.100042b0
mov eax, dword [ebp - 0xb4]
mov ecx, 0x25
push eax
mov eax, dword [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0xc4]
push eax
mov eax, dword [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0xcc]
push eax
push dword [ebp - 0x9c]
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push dword [ebp - 0xa0]
mov dword [ebp - 0x22], 0x250064
push eax
push edi
mov dword [ebp - 0x1a], 0x250064
mov dword [ebp - 0x38], 0x730025
mov dword [ebp - 0x2a], 0x250064
mov dword [ebp - 0x16], 0x64
mov dword [ebp - 0x26], 0x250064
mov dword [ebp - 0x34], 0x730025
mov dword [ebp - 0x1e], 0x250064
mov dword [ebp - 0x30], 0x640025
mov word [ebp - 0x2c], cx
call fcn.10004d50
mov edx, dword [ebp - 0x9c]
or esi, 0xffffffff
add esp, 0x2c
mov byte [ebp - 4], 1
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10001e95
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0xa0]
mov byte [ebp - 4], 0
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], esi
dec esi
test esi, esi
jg 0x10001eb4
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000a678
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10004980
int3