Function at 0x101b9810
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x19c
push ebx
push ebp
push esi
push edi
xor edi, edi
xor edx, edx
mov dword [esp + 0xac], edi
mov dword [esp + 0x96], edx
mov dword [esp + 0xb0], edi
mov dword [esp + 0x9a], edx
mov dword [esp + 0xb4], edi
mov dword [esp + 0xc0], edi
mov dword [esp + 0x9e], edx
mov dword [esp + 0xc4], edi
xor ecx, ecx
mov word [esp + 0xa2], dx
mov dword [esp + 0xc8], edi
mov dword [esp + 0x82], ecx
mov dl, 0x47
mov dword [esp + 0xd4], edi
xor eax, eax
mov dword [esp + 0x86], ecx
mov byte [esp + 0xab], dl
mov byte [esp + 0xbf], dl
mov dword [esp + 0xd8], edi
mov byte [esp + 0xe7], dl
mov byte [esp + 0xf8], dl
xor edx, edx
mov dword [esp + 0x74], eax
mov dword [esp + 0x8a], ecx
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe8], edi
mov dword [esp + 0xfc], edx
mov dword [esp + 0x78], eax
mov word [esp + 0x8e], cx
mov esi, 2
mov cl, 0x4d
mov al, 0x50
mov ebx, 4
mov dword [esp + 0xec], edi
mov dword [esp + 0x100], edx
mov byte [esp + 0x6c], 0xd0
mov byte [esp + 0x6d], 0xcf
mov byte [esp + 0x6e], 0x11
mov byte [esp + 0x6f], 0xe0
mov byte [esp + 0x70], 0xa1
mov byte [esp + 0x71], 0xb1
mov byte [esp + 0x72], 0x1a
mov byte [esp + 0x73], 0xe1
mov dword [esp + 0x7c], 8
mov byte [esp + 0x80], 0xff
mov byte [esp + 0x81], 0xd8
mov dword [esp + 0x90], esi
mov byte [esp + 0x94], 0x42
mov byte [esp + 0x95], cl
mov dword [esp + 0xa4], esi
mov byte [esp + 0xa8], 0x89
mov byte [esp + 0xa9], al
mov byte [esp + 0xaa], 0x4e
mov dword [esp + 0xb8], ebx
mov byte [esp + 0xbc], 0x90
mov byte [esp + 0xbd], al
mov byte [esp + 0xbe], 0x4e
mov dword [esp + 0xcc], ebx
mov byte [esp + 0xd0], al
mov byte [esp + 0xd1], 0x4b
mov byte [esp + 0xd2], 3
mov byte [esp + 0xd3], bl
mov dword [esp + 0xe0], ebx
mov byte [esp + 0xe4], 0x89
mov byte [esp + 0xe5], 0x4a
mov byte [esp + 0xe6], al
mov dword [esp + 0xf0], edi
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xf9], 0x49
mov byte [esp + 0xfa], 0x46
mov byte [esp + 0xfb], 0x38
mov dword [esp + 0x104], edx
mov dword [esp + 0x108], ebx
mov byte [esp + 0x10c], 0xff
mov byte [esp + 0x10d], 0xd8
mov dword [esp + 0x10f], edx
mov dword [esp + 0x158], esi
mov dword [esp + 0x113], edx
xor esi, esi
mov dword [esp + 0x117], edx
mov dword [esp + 0x164], esi
mov byte [esp + 0x11b], dl
mov dword [esp + 0x124], edx
mov dword [esp + 0x128], edx
mov dword [esp + 0x14a], edi
mov dword [esp + 0x12c], edx
mov dword [esp + 0x138], edx
mov dword [esp + 0x13c], edx
mov dword [esp + 0x168], esi
mov dword [esp + 0x140], edx
mov dl, 1
mov byte [esp + 0x149], dl
mov byte [esp + 0x15d], dl
mov byte [esp + 0x186], dl
mov dl, 0x20
mov byte [esp + 0x18a], dl
mov byte [esp + 0x18b], dl
xor edx, edx
mov dword [esp + 0x14e], edi
mov dword [esp + 0x18d], edx
mov dword [esp + 0x176], esi
mov word [esp + 0x191], dx
mov dword [esp + 0x152], edi
mov byte [esp + 0x193], dl
mov dword [esp + 0x19c], edx
mov dword [esp + 0x17a], esi
mov dword [esp + 0x1a0], edx
mov byte [esp + 0x10e], 0xff
mov dword [esp + 0x11c], 3
mov byte [esp + 0x120], cl
mov byte [esp + 0x121], 0x44
mov byte [esp + 0x122], cl
mov byte [esp + 0x123], al
mov dword [esp + 0x130], ebx
mov byte [esp + 0x134], cl
mov byte [esp + 0x135], 0x52
mov byte [esp + 0x136], 0x56
mov byte [esp + 0x137], 0x4e
mov dword [esp + 0x144], ebx
mov byte [esp + 0x148], 0x4c
mov word [esp + 0x156], di
mov byte [esp + 0x15c], 0x4c
mov byte [esp + 0x15e], 0x25
mov byte [esp + 0x15f], 0
mov byte [esp + 0x160], 0xa4
mov byte [esp + 0x161], 0xf7
mov byte [esp + 0x162], 0x64
mov byte [esp + 0x163], 0x55
mov dword [esp + 0x16c], 8
mov byte [esp + 0x170], 0
mov byte [esp + 0x171], 0x44
mov byte [esp + 0x172], cl
mov byte [esp + 0x173], al
mov byte [esp + 0x174], 0x93
mov byte [esp + 0x175], 0xa7
mov word [esp + 0x17e], si
mov dword [esp + 0x180], 6
mov byte [esp + 0x184], 0
mov byte [esp + 0x185], 0
mov byte [esp + 0x187], 0
mov byte [esp + 0x188], 8
mov byte [esp + 0x189], 0
mov byte [esp + 0x18c], 8
mov dword [esp + 0x194], 9
mov byte [esp + 0x198], 0x90
mov byte [esp + 0x199], 0x4b
mov byte [esp + 0x19a], 3
mov byte [esp + 0x19b], bl
mov dword [esp + 0x1a4], edx
mov dword [esp + 0x1a8], ebx
mov byte [esp + 0x38], 0x14
mov byte [esp + 0x39], 0xd6
mov byte [esp + 0x3a], 0x1b
mov byte [esp + 0x3b], 0xce
mov byte [esp + 0x3c], 0x4a
mov byte [esp + 0x3d], 0x65
mov esi, dword [esp + 0x1b0]
mov dl, 0xa1
mov byte [esp + 0x4b], dl
mov byte [esp + 0x50], dl
mov byte [esp + 0x55], cl
mov byte [esp + 0x58], dl
mov dl, 0xa4
mov cl, 0xe1
test esi, esi
mov byte [esp + 0x3e], 0x22
mov byte [esp + 0x3f], 0xd5
mov byte [esp + 0x40], 0x34
mov byte [esp + 0x41], 0xe8
mov byte [esp + 0x42], 0x12
mov byte [esp + 0x43], 0xae
mov byte [esp + 0x44], 0x5e
mov byte [esp + 0x45], 0xf1
mov byte [esp + 0x46], 0xe3
mov byte [esp + 0x47], 0xad
mov byte [esp + 0x48], 0x71
mov byte [esp + 0x49], 0x51
mov byte [esp + 0x4a], 0x11
mov byte [esp + 0x4c], 0x7b
mov byte [esp + 0x4d], 0xa8
mov byte [esp + 0x4e], 0x52
mov byte [esp + 0x4f], 0x1e
mov byte [esp + 0x51], 0x5b
mov byte [esp + 0x52], 0xbd
mov byte [esp + 0x53], 0x81
mov byte [esp + 0x54], 0x31
mov byte [esp + 0x56], 0xb3
mov byte [esp + 0x57], 0xd1
mov byte [esp + 0x59], 0x5b
mov byte [esp + 0x5a], 0xbd
mov byte [esp + 0x5b], 0x81
mov byte [esp + 0x5c], 0x5d
mov byte [esp + 0x5d], dl
mov byte [esp + 0x5e], cl
mov byte [esp + 0x5f], 0xd4
mov byte [esp + 0x60], 0x35
mov byte [esp + 0x61], 0x59
mov byte [esp + 0x62], 0x34
mov byte [esp + 0x63], 0xa7
mov byte [esp + 0x14], 0x52
mov byte [esp + 0x15], 0x96
mov byte [esp + 0x16], 0x14
mov byte [esp + 0x17], 0x77
mov byte [esp + 0x18], 0xa2
mov byte [esp + 0x19], 0xd6
mov byte [esp + 0x1a], 0x14
mov byte [esp + 0x1b], 0x77
mov byte [esp + 0x1c], 0xb2
mov byte [esp + 0x1d], 0xe6
mov byte [esp + 0x1e], 0x24
mov byte [esp + 0x1f], 0x7a
mov byte [esp + 0x20], 0x42
mov byte [esp + 0x21], 0xe6
mov byte [esp + 0x22], 0x24
mov byte [esp + 0x23], 0x6a
mov byte [esp + 0x24], 0xd4
mov byte [esp + 0x25], cl
mov byte [esp + 0x26], dl
mov byte [esp + 0x27], 0x5d
mov byte [esp + 0x28], 0x1d
mov byte [esp + 0x29], al
mov byte [esp + 0x2a], 0x74
mov byte [esp + 0x2b], 0xc2
mov byte [esp + 0x2c], 0xdb
mov byte [esp + 0x2d], 0xed
mov byte [esp + 0x2e], 0x54
mov byte [esp + 0x2f], 0xaf
mov byte [esp + 0x30], 0x4b
mov byte [esp + 0x31], 0xa3
mov byte [esp + 0x32], 0x64
mov byte [esp + 0x33], 0x1f
mov byte [esp + 0x34], 6
mov byte [esp + 0x35], 0x55
mov byte [esp + 0x36], 5
mov byte [esp + 0x37], 0x7b
je 0x101ba019
mov ebp, dword [esp + 0x1b4]
cmp ebp, 0x500
jl 0x101ba019
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x10], 0xffffffff
cmp eax, 1
jne 0x101b9f2e
xor eax, eax
lea ecx, [esp + 0x38]
cmp ebp, 0x400
jle 0x101b9e19
mov edx, dword [ecx]
mov edi, dword [esi + 0x3fc]
cmp edx, edi
je 0x101b9ebc
inc eax
add ecx, ebx
cmp eax, 0xb
jb 0x101b9df9
xor edi, edi
lea eax, [esp + 0x15]
cmp ebp, 0x400
jle 0x101b9ee2
mov cl, byte [eax - 1]
mov dl, byte [esi + 0x3f6]
cmp cl, dl
jne 0x101b9e58
mov dl, byte [eax]
cmp dl, byte [esi + 0x3f8]
jne 0x101b9e58
mov dl, byte [eax + 1]
cmp dl, byte [esi + 0x3fa]
jne 0x101b9e58
mov dl, byte [eax + 2]
cmp dl, byte [esi + 0x3fc]
je 0x101b9ec6
cmp cl, byte [esi + 0x786]
jne 0x101b9e80
mov dl, byte [eax]
cmp dl, byte [esi + 0x788]
jne 0x101b9e80
mov dl, byte [eax + 1]
cmp dl, byte [esi + 0x78a]
jne 0x101b9e80
mov dl, byte [eax + 2]
cmp dl, byte [esi + 0x78c]
je 0x101b9ed0
cmp cl, byte [esi + 0x70e]
jne 0x101b9eae
mov cl, byte [eax]
mov dl, byte [esi + 0x710]
cmp cl, dl
jne 0x101b9eae
mov dl, byte [eax + 1]
mov cl, byte [esi + 0x712]
cmp dl, cl
jne 0x101b9eae
mov cl, byte [eax + 2]
mov dl, byte [esi + 0x714]
cmp cl, dl
je 0x101b9eda
inc edi
add eax, ebx
cmp edi, 9
jb 0x101b9e1f
jmp 0x101b9ee2
mov dword [esp + 0x10], 0x3fc
jmp 0x101b9f2e
mov dword [esp + 0x10], 0x3f6
jmp 0x101b9ee2
mov dword [esp + 0x10], 0x786
jmp 0x101b9ee2
mov dword [esp + 0x10], 0x70e
xor eax, eax
xor edx, edx
mov al, byte [esi + 0x3f6]
mov dl, byte [esi + 0x3f8]
lea ecx, [eax + 4]
cmp edx, ecx
jne 0x101b9f2e
xor edx, edx
lea ecx, [eax + 1]
mov dl, byte [esi + 0x3fa]
cmp edx, ecx
jne 0x101b9f2e
xor edx, edx
lea ecx, [eax - 2]
mov dl, byte [esi + 0x3fc]
cmp edx, ecx
jne 0x101b9f2e
xor edx, edx
add eax, 0xfffffffd
mov dl, byte [esi + 0x3fe]
cmp edx, eax
jne 0x101b9f2e
mov dword [esp + 0x10], 0x3f6
lea eax, [esp + 0x6c]
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], eax
jmp 0x101b9f44
mov eax, dword [esp + 0x64]
cmp dword [esp + 0x10], 0xffffffff
jne 0x101ba00a
mov ecx, dword [eax + 0x10]
push ecx
push eax
push ebp
push esi
call fcn.100241a0
mov edi, eax
add esp, 0x10
cmp edi, 0xffffffff
je 0x101b9fed
lea edx, [edi + 0x410]
cmp edx, ebp
jg 0x101b9fed
mov edx, dword [edi + esi + 0x3fc]
xor eax, eax
lea ecx, [esp + 0x38]
cmp dword [ecx], edx
je 0x101b9f8e
inc eax
add ecx, ebx
cmp eax, 0xb
jb 0x101b9f80
jmp 0x101b9f9d
lea eax, [edi + 0x3fc]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
jne 0x101b9fed
mov al, byte [edi + esi + 0x3f6]
xor ebp, ebp
lea ecx, [esp + 0x15]
cmp byte [ecx - 1], al
jne 0x101b9fd2
mov dl, byte [ecx]
cmp dl, byte [edi + esi + 0x3f8]
jne 0x101b9fd2
mov dl, byte [ecx + 1]
cmp dl, byte [edi + esi + 0x3fa]
jne 0x101b9fd2
mov dl, byte [ecx + 2]
cmp dl, byte [edi + esi + 0x3fc]
je 0x101b9fdc
inc ebp
add ecx, ebx
cmp ebp, 9
jb 0x101b9faa
jmp 0x101b9fe6
add edi, 0x3f6
mov dword [esp + 0x10], edi
mov ebp, dword [esp + 0x1b4]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x64]
inc eax
add edx, 0x14
cmp eax, 0x10
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], edx
jb 0x101b9f40
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x19c
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x19c
ret