Function at 0x100ca850
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x101148ad
mov eax, dword fs:[0]
push eax
sub esp, 0x140
mov eax, dword [0x10159df0]
xor eax, esp
mov dword [esp + 0x13c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10159df0]
xor eax, esp
push eax
lea eax, [esp + 0x154]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x16c]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0x168]
xor ebx, ebx
mov ecx, ebp
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], ebx
call fcn.100c7b50
test al, al
je 0x100ca8b9
mov eax, ebp
jmp 0x100ca8f6
lea eax, [esp + 0x38]
push eax
call fcn.100a8a90
mov ecx, 1
push eax
mov dword [esp + 0x164], ecx
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x24]
push ebp
push ecx
call fcn.100ca850
add esp, 0x10
mov ebx, 3
mov dword [esp + 0x15c], 2
mov dword [esp + 0x14], ebx
push 0xffffffffffffffff
xor ebp, ebp
push ebp
xor edx, edx
push eax
lea ecx, [esp + 0xec]
mov dword [esp + 0x104], 7
mov dword [esp + 0x100], ebp
mov word [esp + 0xf0], dx
call fcn.1003d690
mov dword [esp + 0x15c], 3
test bl, 2
je 0x100ca962
and ebx, 0xfffffffd
cmp dword [esp + 0x34], 8
mov dword [esp + 0x14], ebx
jb 0x100ca94f
mov eax, dword [esp + 0x20]
push eax
call fcn.100d574a
add esp, 4
xor ecx, ecx
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebp
mov word [esp + 0x20], cx
mov byte [esp + 0x15c], 5
test bl, 1
je 0x100ca99d
and ebx, 0xfffffffe
cmp dword [esp + 0x50], 8
mov dword [esp + 0x14], ebx
jb 0x100ca98a
mov edx, dword [esp + 0x3c]
push edx
call fcn.100d574a
add esp, 4
xor eax, eax
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], ebp
mov word [esp + 0x3c], ax
lea ecx, [esp + 0xfc]
push ecx
mov ecx, edi
call fcn.100c4620
lea edx, [esp + 0x134]
push edx
lea ecx, [esp + 0xe4]
mov byte [esp + 0x160], 6
call fcn.100c4620
lea eax, [esp + 0x118]
push eax
mov ecx, edi
mov byte [esp + 0x160], 7
call fcn.100c47b0
mov byte [esp + 0x15c], 8
cmp dword [edi + 0x14], ebp
jne 0x100caacd
push 0xffffffffffffffff
xor ecx, ecx
mov edi, 7
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebp
push ebp
lea edx, [esp + 0xe8]
mov word [esi + 4], cx
push edx
mov ecx, esi
call fcn.1003d690
mov ebx, 8
cmp dword [esp + 0x130], ebx
jb 0x100caa31
mov eax, dword [esp + 0x11c]
push eax
call fcn.100d574a
add esp, 4
xor ecx, ecx
mov dword [esp + 0x130], edi
mov dword [esp + 0x12c], ebp
mov word [esp + 0x11c], cx
cmp dword [esp + 0x14c], ebx
jb 0x100caa62
mov edx, dword [esp + 0x138]
push edx
call fcn.100d574a
add esp, 4
xor eax, eax
mov dword [esp + 0x14c], edi
mov dword [esp + 0x148], ebp
mov word [esp + 0x138], ax
cmp dword [esp + 0x114], ebx
jb 0x100caa93
mov ecx, dword [esp + 0x100]
push ecx
call fcn.100d574a
add esp, 4
xor edx, edx
mov dword [esp + 0x114], edi
mov dword [esp + 0x110], ebp
mov word [esp + 0x100], dx
cmp dword [esp + 0xf8], ebx
jb 0x100cac61
mov eax, dword [esp + 0xe4]
push eax
call fcn.100d574a
add esp, 4
jmp 0x100cac61
cmp dword [esp + 0x110], ebp
je 0x100cabe5
cmp dword [esp + 0x12c], ebp
jne 0x100cabdb
lea ecx, [esp + 0x8c]
push ecx
mov ecx, edi
call fcn.100c4e50
mov edi, eax
lea edx, [esp + 0xc4]
push edx
lea ecx, [esp + 0xe4]
mov byte [esp + 0x160], 9
call fcn.100c4e50
mov ebp, eax
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0xe4]
mov byte [esp + 0x160], 0xa
call fcn.100c47b0
push eax
lea ecx, [esp + 0x100]
push ecx
lea edx, [esp + 0x78]
push edx
mov byte [esp + 0x168], 0xb
call fcn.1001a6e0
push ebp
push eax
lea eax, [esp + 0x68]
push eax
mov byte [esp + 0x174], 0xc
call fcn.1001a6e0
push edi
push eax
push esi
mov byte [esp + 0x180], 0xd
call fcn.1001a6e0
or ebx, 4
add esp, 0x24
lea ecx, [esp + 0x54]
mov dword [esp + 0x14], ebx
mov byte [esp + 0x15c], 0xc
call fcn.100031c0
lea ecx, [esp + 0x70]
mov byte [esp + 0x15c], 0xb
call fcn.100031c0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x15c], 0xa
call fcn.100031c0
lea ecx, [esp + 0xc4]
mov byte [esp + 0x15c], 9
call fcn.100031c0
lea ecx, [esp + 0x8c]
mov byte [esp + 0x15c], 8
call fcn.100031c0
jmp 0x100cac11
push edi
mov ecx, esi
call fcn.1001a6a0
jmp 0x100cac0a
push edi
cmp dword [esp + 0x130], ebp
je 0x100cabf9
lea ecx, [esp + 0x138]
push ecx
jmp 0x100cac01
lea edx, [esp + 0xe4]
push edx
push esi
call fcn.1001a6e0
add esp, 0xc
or ebx, 4
mov dword [esp + 0x14], ebx
lea ecx, [esp + 0x118]
mov byte [esp + 0x15c], 7
call fcn.100031c0
lea ecx, [esp + 0x134]
mov byte [esp + 0x15c], 6
call fcn.100031c0
lea ecx, [esp + 0xfc]
mov byte [esp + 0x15c], 5
call fcn.100031c0
lea ecx, [esp + 0xe0]
mov byte [esp + 0x15c], 0
call fcn.100031c0
mov eax, esi
mov ecx, dword [esp + 0x154]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x13c]
xor ecx, esp
call fcn.100d4871
add esp, 0x14c
ret