Function at 0x101ab536
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc0
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x101ab8c6
push ebx
push edi
xor ebx, ebx
push ebx
push esi
call fcn.101b5558
pop ecx
mov byte [ebp - 0x64], bl
mov byte [ebp - 4], bl
mov byte [ebp - 0x24], bl
mov byte [ebp - 0xc], bl
mov byte [ebp - 0x74], bl
mov byte [ebp - 0x34], bl
mov byte [ebp - 0xb4], bl
mov byte [ebp - 0x44], bl
mov byte [ebp - 0x2c], bl
mov byte [ebp - 0x8c], bl
mov byte [ebp - 0x84], bl
mov byte [ebp - 0x54], bl
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x94], bl
mov byte [ebp - 0xa4], bl
mov byte [ebp - 0x3c], bl
mov byte [ebp - 0x1c], bl
mov byte [ebp - 0x4c], bl
mov byte [ebp - 0x5c], bl
mov byte [ebp - 0x6c], bl
mov byte [ebp - 0x7c], bl
mov byte [ebp - 0x9c], bl
mov byte [ebp - 0xac], bl
mov byte [ebp - 0xbc], bl
mov ebx, dword [ebp + 0xc]
pop ecx
mov dword [ebp - 0x68], 0x52444849
mov dword [ebp - 8], 0x54414449
mov dword [ebp - 0x28], 0x444e4549
mov dword [ebp - 0x10], 0x45544c50
mov dword [ebp - 0x78], 0x44474b62
mov dword [ebp - 0x38], 0x4d524863
mov dword [ebp - 0xb8], 0x414d4167
mov dword [ebp - 0x48], 0x54534968
mov dword [ebp - 0x30], 0x50434369
mov dword [ebp - 0x90], 0x74585469
mov dword [ebp - 0x88], 0x7346466f
mov dword [ebp - 0x58], 0x4c414370
mov dword [ebp - 0x18], 0x73594870
mov dword [ebp - 0x98], 0x54494273
mov dword [ebp - 0xa8], 0x4c414373
mov dword [ebp - 0x40], 0x544c5073
mov dword [ebp - 0x20], 0x42475273
mov dword [ebp - 0x50], 0x74584574
mov dword [ebp - 0x60], 0x454d4974
mov dword [ebp - 0x70], 0x534e5274
mov dword [ebp - 0x80], 0x7458547a
mov dword [ebp - 0xa0], 0x4c546361
mov dword [ebp - 0xb0], 0x4c546366
mov dword [ebp - 0xc0], 0x54416466
push esi
call fcn.101b8283
pop ecx
mov edi, eax
lea edx, [esi + 0x120]
mov ecx, dword [edx]
lea eax, [ebp - 0x68]
cmp ecx, dword [eax]
jne 0x101ab6a0
push edi
push ebx
push esi
call fcn.101b5c61
jmp 0x101ab8b7
mov eax, dword [edx]
lea ecx, [ebp - 0x28]
cmp eax, dword [ecx]
jne 0x101ab6b6
push edi
push ebx
push esi
call fcn.101b5c1c
jmp 0x101ab8b7
push edx
push esi
call fcn.101b3685
pop ecx
test eax, eax
mov eax, dword [esi + 0x120]
pop ecx
je 0x101ab70f
lea ecx, [ebp - 8]
cmp eax, dword [ecx]
jne 0x101ab6ea
test edi, edi
jne 0x101ab6dd
test dword [esi + 0x6c], 0x2000
je 0x101ab6ea
push str.Too_many_IDATs_found
push esi
call fcn.101b3a00
pop ecx
pop ecx
push edi
push ebx
push esi
call fcn.101b7d02
mov eax, dword [esi + 0x120]
lea ecx, [ebp - 0x10]
add esp, 0xc
cmp eax, dword [ecx]
jne 0x101ab8ba
or dword [esi + 0x6c], 2
jmp 0x101ab8ba
lea edx, [ebp - 8]
cmp eax, dword [edx]
jne 0x101ab73e
test edi, edi
jne 0x101ab723
test dword [esi + 0x6c], 0x2000
je 0x101ab730
push str.Too_many_IDATs_found
push esi
call fcn.101b3a00
pop ecx
pop ecx
push edi
push esi
call fcn.101b5558
pop ecx
pop ecx
jmp 0x101ab8ba
lea edx, [ebp - 0x10]
cmp eax, dword [edx]
jne 0x101ab752
push edi
push ebx
push esi
call fcn.101b5da2
jmp 0x101ab8b7
lea edx, [ebp - 0x78]
cmp eax, dword [edx]
jne 0x101ab766
push edi
push ebx
push esi
call fcn.101b5f93
jmp 0x101ab8b7
lea edx, [ebp - 0x38]
cmp eax, dword [edx]
jne 0x101ab77a
push edi
push ebx
push esi
call fcn.101b6138
jmp 0x101ab8b7
lea edx, [ebp - 0xb8]
cmp eax, dword [edx]
jne 0x101ab791
push edi
push ebx
push esi
call fcn.101b66d5
jmp 0x101ab8b7
push edi
lea edx, [ebp - 0x48]
push ebx
push esi
cmp eax, dword [edx]
jne 0x101ab7a5
call fcn.101b6830
jmp 0x101ab8b7
lea edx, [ebp - 0x88]
cmp eax, dword [edx]
jne 0x101ab7b9
call fcn.101b6d84
jmp 0x101ab8b7
lea edx, [ebp - 0x58]
cmp eax, dword [edx]
jne 0x101ab7ca
call fcn.101b6e55
jmp 0x101ab8b7
lea edx, [ebp - 0xa8]
cmp eax, dword [edx]
jne 0x101ab7de
call fcn.101b72c9
jmp 0x101ab8b7
lea edx, [ebp - 0x18]
cmp eax, dword [edx]
jne 0x101ab7ef
call fcn.101b70e3
jmp 0x101ab8b7
lea edx, [ebp - 0x98]
cmp eax, dword [edx]
jne 0x101ab803
call fcn.101b71b1
jmp 0x101ab8b7
lea edx, [ebp - 0x20]
cmp eax, dword [edx]
jne 0x101ab814
call fcn.101b76f1
jmp 0x101ab8b7
lea edx, [ebp - 0x30]
cmp eax, dword [edx]
jne 0x101ab825
call fcn.101b693e
jmp 0x101ab8b7
lea edx, [ebp - 0x40]
cmp eax, dword [edx]
jne 0x101ab836
call fcn.101b747b
jmp 0x101ab8b7
lea edx, [ebp - 0x50]
cmp eax, dword [edx]
jne 0x101ab844
call fcn.101b78cf
jmp 0x101ab8b7
lea edx, [ebp - 0x60]
cmp eax, dword [edx]
jne 0x101ab852
call fcn.101b7a5d
jmp 0x101ab8b7
lea edx, [ebp - 0x70]
cmp eax, dword [edx]
jne 0x101ab860
call fcn.101b7b23
jmp 0x101ab8b7
lea edx, [ebp - 0x80]
cmp eax, dword [edx]
jne 0x101ab86e
call fcn.101b7e96
jmp 0x101ab8b7
lea edx, [ebp - 0x90]
cmp eax, dword [edx]
jne 0x101ab87f
call fcn.101b6b4a
jmp 0x101ab8b7
lea edx, [ebp - 0xa0]
cmp eax, dword [edx]
jne 0x101ab890
call fcn.101b5ef2
jmp 0x101ab8b7
lea edx, [ebp - 0xb0]
cmp eax, dword [edx]
jne 0x101ab8a1
call fcn.101b652d
jmp 0x101ab8b7
lea edx, [ebp - 0xc0]
cmp eax, dword [edx]
jne 0x101ab8b2
call fcn.101b66a6
jmp 0x101ab8b7
call fcn.101b7d02
add esp, 0xc
test byte [esi + 0x6c], 0x10
je 0x101ab67b
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret