Function at 0x101da710
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xc68
push ebx
push ebp
mov cl, 0x6c
mov al, 0x71
push esi
mov esi, dword [esp + 0xc78]
push edi
mov byte [esp + 0x11], cl
mov byte [esp + 0x12], al
mov byte [esp + 0x2c], al
mov byte [esp + 0x38], cl
mov byte [esp + 0x3d], cl
mov byte [esp + 0x3e], al
mov byte [esp + 0x44], al
mov byte [esp + 0x46], cl
mov byte [esp + 0x48], al
mov ecx, 0xa
xor eax, eax
lea edi, [esp + 0x50]
mov dl, 0x4e
rep stosd dword es:[edi], eax
lea eax, [esp + 0x50]
mov byte [esp + 0x1a], dl
mov byte [esp + 0x2a], dl
mov bl, 0x72
mov dl, 0x7b
push eax
push 3
mov ecx, esi
mov byte [esp + 0x18], 0x5a
mov byte [esp + 0x1b], 0x36
mov byte [esp + 0x1c], 0x35
mov byte [esp + 0x1d], 0x31
mov byte [esp + 0x1e], 0x4f
mov byte [esp + 0x1f], 0x59
mov byte [esp + 0x20], 0x5b
mov byte [esp + 0x21], 3
mov byte [esp + 0x23], 0x6b
mov byte [esp + 0x24], 0x64
mov byte [esp + 0x25], 0x65
mov byte [esp + 0x26], 0x76
mov byte [esp + 0x27], 0x23
mov byte [esp + 0x28], 0x64
mov byte [esp + 0x29], 0x70
mov byte [esp + 0x2a], 0x23
mov byte [esp + 0x2b], 0x53
mov byte [esp + 0x2c], 0x68
mov byte [esp + 0x2d], 0x6e
mov byte [esp + 0x2e], 0x6b
mov byte [esp + 0x2f], 0x77
mov byte [esp + 0x30], 0x31
mov byte [esp + 0x31], 0x23
mov byte [esp + 0x33], bl
mov byte [esp + 0x35], dl
mov byte [esp + 0x36], 0x23
mov byte [esp + 0x37], bl
mov byte [esp + 0x38], 0x70
mov byte [esp + 0x39], 0x23
mov byte [esp + 0x3a], 0x53
mov byte [esp + 0x3b], 0x64
mov byte [esp + 0x3c], dl
mov byte [esp + 0x3d], 0x31
mov byte [esp + 0x3e], 0x23
mov byte [esp + 0x3f], 0x4f
mov byte [esp + 0x41], 0x6a
mov byte [esp + 0x42], 0x6b
mov byte [esp + 0x43], 0x77
mov byte [esp + 0x44], 0x23
mov byte [esp + 0x47], 0x23
mov byte [esp + 0x48], 0x48
mov byte [esp + 0x49], dl
mov byte [esp + 0x4a], 0x77
mov byte [esp + 0x4b], 0x68
mov byte [esp + 0x4d], 0x76
mov byte [esp + 0x4f], bl
call fcn.10003900
test eax, eax
je 0x101dabc1
mov ecx, esi
call fcn.10002630
mov edi, dword [esp + 0xc80]
mov ecx, dword [0x107ab964]
push eax
push edi
push ecx
call fcn.1000fe50
mov esi, eax
mov eax, dword [esp + 0x70]
add esp, 0xc
cmp esi, eax
jb 0x101dabc1
mov edx, dword [esp + 0x60]
add edx, eax
cmp esi, edx
jae 0x101dabc1
mov edx, dword [esp + 0xc84]
lea eax, [esp + 0x4c]
push 1
lea ecx, [esp + 0x7c]
push eax
mov eax, dword [0x107ab964]
push ecx
push 0xc00
push 0xc00
push esi
push edx
push edi
push eax
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x101dabc1
cmp dword [esp + 0x4c], 0xc00
jb 0x101dabc1
cmp dword [esp + 0x78], 0xe89c60
jne 0x101dabc1
cmp dword [esp + 0x7c], 0x5d000000
jne 0x101dabc1
cmp word [esp + 0x80], 0xed81
jne 0x101dabc1
cmp byte [esp + 0x86], 0xb8
jne 0x101dabc1
cmp word [esp + 0x8b], 0xb58d
jne 0x101dabc1
cmp byte [esp + 0x91], 0xb9
jne 0x101dabc1
cmp dword [esp + 0x96], 0xc6830631
jne 0x101dabc1
cmp word [esp + 0x9a], 0xe204
jne 0x101dabc1
cmp byte [esp + 0x9c], 0xf9
jne 0x101dabc1
mov ecx, dword [esp + 0x8d]
mov ebp, dword [esp + 0x82]
mov edx, dword [esp + 0x64]
sub ecx, ebp
lea eax, [ecx + esi + 7]
mov ecx, dword [esp + 0x87]
cmp eax, edx
mov edi, ecx
jb 0x101dabc1
mov ebx, dword [esp + 0x60]
add ebx, edx
cmp eax, ebx
ja 0x101dabc1
sub eax, esi
test ecx, ecx
mov ebp, eax
jbe 0x101dabc1
mov edx, dword [esp + 0x92]
lea esi, [edx*4]
cmp esi, 0xc00
ja 0x101dabc1
test ebp, ebp
jle 0x101dabc1
mov eax, 0xbfc
sub eax, esi
cmp ebp, eax
jae 0x101dabc1
xor eax, eax
test esi, esi
jbe 0x101da9ee
lea ecx, [esp + ebp + 0x78]
mov edx, dword [ecx + eax]
add eax, 4
xor edx, edi
cmp eax, esi
mov dword [ecx + eax - 4], edx
jb 0x101da9de
mov edi, 0xbdd
xor edx, edx
sub edi, ebp
mov eax, ebp
cmp ebp, edi
jae 0x101dab57
mov bl, 0x85
cmp edx, 3
je 0x101dab57
mov ecx, edx
sub ecx, 0
je 0x101dab0f
dec ecx
je 0x101daab0
dec ecx
jne 0x101dab4e
cmp dword [esp + eax + 0x78], 0x30c478b
jne 0x101dab4e
cmp dword [esp + eax + 0x7c], 0x46890847
jne 0x101dab4e
cmp dword [esp + eax + 0x80], 0x8478128
jne 0x101dab4e
cmp word [esp + eax + 0x88], 0x4781
jne 0x101dab4e
cmp byte [esp + eax + 0x8a], 0x10
jne 0x101dab4e
cmp dword [esp + eax + 0x8f], 0x40244f81
jne 0x101dab4e
cmp dword [esp + eax + 0x93], 0x8bc00000
jne 0x101dab4e
cmp dword [esp + eax + 0x97], 0x8d8b1047
jne 0x101dab4e
add eax, 0x23
mov edx, 3
jmp 0x101dab4e
cmp byte [esp + eax + 0x78], 0xb9
jne 0x101dab4e
cmp dword [esp + eax + 0x7d], 0x3145f8b
jne 0x101dab4e
cmp dword [esp + eax + 0x81], 0x9d03085f
jne 0x101dab4e
cmp word [esp + eax + 0x89], 0xc381
jne 0x101dab4e
cmp dword [esp + eax + 0x8f], 0xc3830331
jne 0x101dab4e
cmp word [esp + eax + 0x93], 0xe204
jne 0x101dab4e
cmp byte [esp + eax + 0x95], 0xf9
jne 0x101dab4e
add eax, 0x1d
mov edx, 2
jmp 0x101dab4e
cmp dword [esp + eax + 0x78], 0x8910478b
jne 0x101dab4e
cmp dword [esp + eax + 0x7c], 0x858b0847
jne 0x101dab4e
cmp dword [esp + eax + 0x84], 0xc733c503
jne 0x101dab4e
cmp dword [esp + eax + 0x88], 0x8904c8c1
jne 0x101dab4e
cmp byte [esp + eax + 0x8c], bl
jne 0x101dab4e
add eax, 0x14
mov edx, 1
inc eax
cmp eax, edi
jb 0x101daa03
cmp eax, edi
jae 0x101dabc1
cmp edx, 3
jne 0x101dabc1
lea ecx, [esp + 0x10]
push 0x39
push ecx
call fcn.101a1090
add esp, 8
test eax, eax
je 0x101dabc1
lea edx, [esp + 0x10]
push 0x39
push edx
lea eax, [esp + ebp + 0x80]
push esi
push eax
call fcn.100241a0
add esp, 0x10
cmp eax, 0xffffffff
je 0x101dabc1
add eax, ebp
lea ecx, [eax + 0x54]
cmp ecx, 0xc00
jae 0x101dabc1
mov eax, dword [esp + eax + 0xc8]
mov edx, dword [esp + 0xc88]
xor ecx, ecx
pop edi
test eax, eax
setg cl
pop esi
mov dword [edx], eax
pop ebp
mov eax, ecx
pop ebx
add esp, 0xc68
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xc68
ret