Function at 0x100a2b60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push edi
lea edi, [ebp - 0x6c]
mov ecx, 0x1b
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x101f3540]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x2e
mov eax, dword [ebp + 8]
push eax
call fcn.100a3710
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x100a2ba4
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp + 8]
sar ecx, 1
mov dword [ebp - 0x4c], ecx
jmp 0x100a2bb3
mov edx, dword [ebp + 8]
push edx
call fcn.100a3860
add esp, 4
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xc], eax
push 0x101ad588
call fcn.100a3860
add esp, 4
mov ecx, dword [ebp - 0xc]
lea eax, [ecx + eax + 1]
mov edx, 2
mul edx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.100f0340
add esp, 4
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call fcn.100a37d0
add esp, 0xc
mov dword [ebp - 0x1c], eax
xor eax, eax
mov ecx, dword [ebp - 0x1c]
mov word [ecx], ax
push str..bin
mov edx, dword [ebp - 0x1c]
push edx
call fcn.1009e440
add esp, 8
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x101f8d9c
call fcn.100a8300
nop
mov ecx, 0x101f8d9c
call fcn.100a8380
sub eax, 1
push eax
call fcn.100a2dd0
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x100a2ce8
mov byte [ebp - 0x30], 0x5b
mov byte [ebp - 0x2f], 0x63
mov byte [ebp - 0x2e], 0x6f
mov byte [ebp - 0x2d], 0x6e
mov byte [ebp - 0x2c], 0x66
mov byte [ebp - 0x2b], 0x69
mov byte [ebp - 0x2a], 0x67
mov byte [ebp - 0x29], 0x2e
mov byte [ebp - 0x28], 0x63
mov byte [ebp - 0x27], 0x70
mov byte [ebp - 0x26], 0x70
mov byte [ebp - 0x25], 0x3a
mov byte [ebp - 0x24], 0x32
mov byte [ebp - 0x23], 0x35
mov byte [ebp - 0x22], 0x33
mov byte [ebp - 0x21], 0x5d
mov byte [ebp - 0x20], 0x20
mov byte [ebp - 0x1f], 0
lea ecx, [ebp - 0x30]
call fcn.100a5890
push eax
push 1
mov ecx, 0x101f3514
call fcn.100efb60
mov dword [ebp - 0x50], eax
push str.created_configuration_file:__
mov ecx, dword [ebp - 0x50]
call fcn.100effb0
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x54]
call fcn.100efff0
mov dword [ebp - 0x5c], eax
push 0x101ad5c0
mov ecx, dword [ebp - 0x5c]
call fcn.100effb0
nop
mov al, 1
jmp 0x100a2d7d
mov byte [ebp - 0x44], 0x5b
mov byte [ebp - 0x43], 0x63
mov byte [ebp - 0x42], 0x6f
mov byte [ebp - 0x41], 0x6e
mov byte [ebp - 0x40], 0x66
mov byte [ebp - 0x3f], 0x69
mov byte [ebp - 0x3e], 0x67
mov byte [ebp - 0x3d], 0x2e
mov byte [ebp - 0x3c], 0x63
mov byte [ebp - 0x3b], 0x70
mov byte [ebp - 0x3a], 0x70
mov byte [ebp - 0x39], 0x3a
mov byte [ebp - 0x38], 0x32
mov byte [ebp - 0x37], 0x35
mov byte [ebp - 0x36], 0x37
mov byte [ebp - 0x35], 0x5d
mov byte [ebp - 0x34], 0x20
mov byte [ebp - 0x33], 0
lea ecx, [ebp - 0x44]
call fcn.100a5890
push eax
push 2
mov ecx, 0x101f3514
call fcn.100efb60
mov dword [ebp - 0x60], eax
push str.failed_to_create_configuration_file:__
mov ecx, dword [ebp - 0x60]
call fcn.100effb0
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x64]
call fcn.100efff0
mov dword [ebp - 0x6c], eax
push 0x101ad5ec
mov ecx, dword [ebp - 0x6c]
call fcn.100effb0
nop
xor al, al
push edx
mov ecx, ebp
push eax
lea edx, [0x100a2da8]
call fcn.100f31b0
pop eax
pop edx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100f3240
add esp, 0x6c
cmp ebp, esp
call fcn.100f3210
mov esp, ebp
pop ebp
ret