Function at 0x100bb4e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c8
push ebx
push ebp
push esi
mov esi, dword [esp + 0x2d8]
mov dl, 0x72
mov cl, 0x74
mov al, 0x6c
mov bl, 0x63
test esi, esi
push edi
mov byte [esp + 0x20], 0x69
mov byte [esp + 0x21], dl
mov byte [esp + 0x22], cl
mov byte [esp + 0x23], 0x75
mov byte [esp + 0x24], 0x61
mov byte [esp + 0x25], al
mov byte [esp + 0x26], 0x50
mov byte [esp + 0x27], dl
mov byte [esp + 0x28], 0x6f
mov byte [esp + 0x29], cl
mov byte [esp + 0x2a], 0x65
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], cl
mov byte [esp + 0x2d], 0
mov byte [esp + 0x14], 0x69
mov byte [esp + 0x15], dl
mov byte [esp + 0x16], cl
mov byte [esp + 0x17], 0x75
mov byte [esp + 0x18], 0x61
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0x41
mov byte [esp + 0x1b], al
mov byte [esp + 0x1c], al
mov byte [esp + 0x1d], 0x6f
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], 0
je 0x100bb91b
mov ebp, dword [esp + 0x2e8]
test ebp, ebp
je 0x100bb91b
mov eax, dword [esp + 0x2ec]
test eax, eax
je 0x100bb91b
lea eax, [esp + 0x278]
mov ecx, esi
push eax
call fcn.10002060
test eax, eax
je 0x100bb91b
mov ecx, 0xa
xor eax, eax
lea edi, [esp + 0x50]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x50]
push ecx
push 6
mov ecx, esi
call fcn.10003900
test eax, eax
je 0x100bb91b
push 0x800
call dword [sym.imp.MSVCRT.dll_malloc]
mov esi, eax
add esp, 4
test esi, esi
je 0x100bb91b
mov ebx, dword [esp + 0x2e4]
xor eax, eax
lea edx, [esp + 0x10]
mov ecx, 0x200
mov edi, esi
push eax
push edx
push esi
rep stosd dword es:[edi], eax
mov eax, dword [ebp]
mov ecx, dword [esp + 0x2ec]
mov edx, dword [0x107ab964]
push 0x800
push 0x800
push eax
push ebx
push ecx
push edx
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x100bb911
cmp dword [esp + 0x10], 0x800
jne 0x100bb911
mov edx, dword [ebp + 0xc]
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x30]
rep stosd dword es:[edi], eax
push eax
lea eax, [esp + 0x14]
lea ecx, [esp + 0x34]
push eax
mov eax, dword [ebp + 8]
push ecx
mov ecx, dword [esp + 0x2ec]
push 0x20
push edx
mov edx, dword [0x107ab964]
push eax
push ebx
push ecx
push edx
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x100bb911
mov eax, dword [esp + 0x10]
mov ecx, dword [ebp + 0xc]
cmp eax, ecx
jne 0x100bb911
xor ecx, ecx
xor eax, eax
mov dl, byte [esp + eax + 0x30]
xor byte [ecx + esi], dl
mov edx, dword [ebp + 0xc]
inc eax
cmp eax, edx
jne 0x100bb6a1
xor eax, eax
inc ecx
cmp ecx, 0x800
jl 0x100bb690
lea eax, [esp + 0x14]
push 0xc
push eax
push 0x800
push esi
call fcn.100241a0
add esp, 0x10
cmp eax, 0xffffffff
je 0x100bb911
lea ecx, [esp + 0x20]
push 0xe
push ecx
push 0x800
push esi
call fcn.100241a0
add esp, 0x10
cmp eax, 0xffffffff
push esi
je 0x100bb912
call dword [sym.imp.MSVCRT.dll_free]
mov esi, dword [esp + 0x2f0]
mov ebp, dword [esp + 0x2e4]
lea edx, [esp + 0x14]
push 0
mov ecx, dword [esi + 4]
lea eax, [esp + 0x80]
push edx
mov edx, dword [esi]
push eax
mov eax, dword [0x107ab964]
push 0x200
push ecx
push edx
push ebx
push ebp
push eax
call fcn.100253e0
add esp, 0x28
test eax, eax
je 0x100bb91b
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
cmp ecx, eax
jne 0x100bb91b
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x30]
push eax
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0xc]
lea edx, [esp + 0x14]
lea eax, [esp + 0x34]
push edx
mov edx, dword [esi + 8]
push eax
mov eax, dword [0x107ab964]
push 0x20
push ecx
push edx
push ebx
push ebp
push eax
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x100bb91b
mov esi, dword [esi + 0xc]
mov eax, dword [esp + 0x10]
cmp eax, esi
jne 0x100bb91b
xor ecx, ecx
xor eax, eax
mov dl, byte [esp + eax + 0x30]
mov bl, byte [esp + ecx + 0x78]
xor bl, dl
inc eax
cmp eax, esi
mov byte [esp + ecx + 0x78], bl
jne 0x100bb79f
xor eax, eax
inc ecx
cmp ecx, 0x200
jb 0x100bb78a
xor edx, edx
xor eax, eax
mov ebx, 0x68406a
mov ebp, 0x10
mov edi, 0x458b
mov esi, 0xd0ff
cmp edx, 3
jge 0x100bb8fe
mov ecx, edx
sub ecx, 0
je 0x100bb8a6
dec ecx
je 0x100bb7f6
dec ecx
jne 0x100bb8f2
cmp dword [esp + eax + 0x78], 0xc35de58b
jne 0x100bb8f2
mov edx, 3
jmp 0x100bb8f2
cmp byte [esp + eax + 0x78], 0x8b
jne 0x100bb8f2
cmp word [esp + eax + 0x7a], 0xb70f
jne 0x100bb8f2
cmp dword [esp + eax + 0x7d], 0x7400f983
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x82]
and cl, 0xf8
cmp cl, 0x40
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x83]
and cl, 0xf8
cmp cl, 0x40
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x84]
and cl, 0xf8
cmp cl, 0x40
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x85]
and cl, 0xf8
cmp cl, 0x40
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x86]
and cl, 0xf8
cmp cl, 0x40
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x87]
and cl, 0xf8
cmp cl, 0x40
jne 0x100bb8f2
cmp word [esp + eax + 0x88], 0xa4f3
jne 0x100bb8f2
cmp byte [esp + eax + 0x8a], 0xeb
jne 0x100bb8f2
add eax, 0x11
mov edx, 2
jmp 0x100bb8f2
cmp dword [esp + eax + 0x78], ebx
jne 0x100bb8f2
cmp word [esp + eax + 0x7c], bp
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x7e]
test cl, cl
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x7f]
and cl, 0xf8
cmp cl, 0x50
jne 0x100bb8f2
mov cl, byte [esp + eax + 0x80]
and cl, 0xf8
cmp cl, 0x50
jne 0x100bb8f2
cmp word [esp + eax + 0x81], di
jne 0x100bb8f2
cmp word [esp + eax + 0x84], si
jne 0x100bb8f2
add eax, 0xb
mov edx, 1
inc eax
cmp eax, 0x1ee
jb 0x100bb7c0
xor eax, eax
pop edi
cmp edx, 3
pop esi
pop ebp
pop ebx
sete al
add esp, 0x2c8
ret
push esi
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x2c8
ret