Function at 0x101dc190
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x11b8
call fcn.102244a0
mov al, 0x72
mov cl, 0x5f
mov byte [esp + 6], al
mov byte [esp + 0xb], al
mov byte [esp + 4], cl
mov byte [esp + 0xf], cl
mov al, 0x68
push ebx
mov cl, 0x6a
push esi
mov byte [esp + 0x19], al
mov byte [esp + 0x20], al
mov byte [esp + 0x22], al
push edi
mov byte [esp + 0x1c], cl
mov byte [esp + 0x1f], cl
lea eax, [esp + 0x10]
mov dl, 0x71
mov cl, 0x7b
push 0x17
push eax
mov byte [esp + 0x14], 0x50
mov byte [esp + 0x15], 0x3b
mov byte [esp + 0x16], 0x5d
mov byte [esp + 0x19], 0x7a
mov byte [esp + 0x1b], 0x75
mov byte [esp + 0x1c], 0x6e
mov byte [esp + 0x1d], 0x76
mov byte [esp + 0x1e], 0x6b
mov byte [esp + 0x20], 0x73
mov byte [esp + 0x21], 0x33
mov byte [esp + 0x22], 0x3c
mov byte [esp + 0x26], dl
mov byte [esp + 0x28], cl
mov byte [esp + 0x29], 0x6c
mov byte [esp + 0x2a], dl
mov byte [esp + 0x2b], 0x31
mov byte [esp + 0x2d], cl
call fcn.101a1090
add esp, 8
test eax, eax
je 0x101dc485
mov esi, dword [esp + 0x11cc]
mov ebx, dword [esp + 0x11c8]
lea ecx, [esp + 0x10]
push 0x17
push ecx
push esi
push ebx
call fcn.100241a0
add esp, 0x10
cmp eax, 0xffffffff
je 0x101dc485
lea edx, [esp + 0xc]
push 3
push edx
call fcn.101a1090
add esp, 8
test eax, eax
je 0x101dc485
lea eax, [esp + 0xc]
push 3
push eax
push esi
push ebx
call fcn.100241a0
mov edx, eax
add esp, 0x10
cmp edx, 0xffffffff
je 0x101dc485
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x1c4]
sub esi, edx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x28]
lea eax, [esp + 0x2c]
push ecx
push 7
lea ecx, [esp + 0x1cc]
push eax
push ecx
add edx, ebx
push esi
push edx
push 0x10227334
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0x1000
call fcn.10011a90
add esp, 0x1c
test eax, eax
jne 0x101dc2ed
mov eax, dword [esp + 0x28]
cmp eax, 2
je 0x101dc2ed
cmp eax, 3
jne 0x101dc485
mov edx, dword [esp + 0x2c]
cmp edx, 0x600
jb 0x101dc485
cmp word [esp + 0x1c4], 0x5a4d
jne 0x101dc485
mov ecx, 0x18
xor eax, eax
lea edi, [esp + 0x44]
push 4
rep stosd dword es:[edi], eax
mov ecx, 0x28
lea edi, [esp + 0xa8]
rep stosd dword es:[edi], eax
mov dword [esp + 0x34], eax
mov ecx, 0x20
mov dword [esp + 0x38], eax
lea edi, [esp + 0x148]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
rep stosd dword es:[edi], eax
mov dword [esp + 0x44], eax
lea ecx, [esp + 0xa8]
lea eax, [esp + 0x148]
push ecx
push eax
lea ecx, [esp + 0x50]
lea eax, [esp + 0x3c]
push ecx
push eax
lea ecx, [esp + 0x1d8]
push edx
push ecx
call fcn.100254a0
add esp, 0x1c
test eax, eax
je 0x101dc485
mov ax, word [esp + 0x32]
cmp ax, 5
jb 0x101dc485
cmp ax, 7
ja 0x101dc485
cmp word [esp + 0x42], 0xa18e
jne 0x101dc485
mov eax, dword [esp + 0x54]
cmp eax, 0x4000
jb 0x101dc485
cmp eax, 0x5000
ja 0x101dc485
mov eax, dword [esp + 0x48]
cmp eax, 0x2000
jb 0x101dc485
cmp eax, 0x5000
ja 0x101dc485
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x101dc485
cmp byte [esp + 0x46], 2
jne 0x101dc485
mov eax, dword [esp + 0x5c]
cmp eax, 0x1000
jb 0x101dc485
cmp eax, 0x6000
ja 0x101dc485
mov edi, 1
cmp word [esp + 0x8a], di
jne 0x101dc485
cmp word [esp + 0x6c], 4
jne 0x101dc485
cmp word [esp + 0x6e], 0
jne 0x101dc485
cmp word [esp + 0x88], di
je 0x101dc485
mov esi, 0x1026529c
lea ecx, [esp + 0xa4]
mov al, byte [ecx]
mov bl, byte [esi]
mov dl, al
cmp al, bl
jne 0x101dc463
test dl, dl
je 0x101dc45f
mov al, byte [ecx + 1]
mov bl, byte [esi + 1]
mov dl, al
cmp al, bl
jne 0x101dc463
add ecx, 2
add esi, 2
test dl, dl
jne 0x101dc43b
xor ecx, ecx
jmp 0x101dc468
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
jne 0x101dc485
cmp dword [esp + 0xc8], 0x60000020
jne 0x101dc485
mov eax, edi
pop edi
pop esi
pop ebx
add esp, 0x11b8
ret
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x11b8
ret