Function at 0x10101350
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x10165ebf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
mov al, byte [0x1018ccf5]
push ebx
push ebp
push esi
xor ebp, ebp
mov byte [0x1018ccf4], al
inc al
lea esi, [ecx + 4]
mov byte [0x1018ccf5], al
push edi
mov al, byte [esi]
push ebp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x7c], ebp
mov byte [esp + 0x2c], al
call fcn.1000bc70
mov ecx, dword [0x1016a210]
push ecx
push ebp
push esi
lea ecx, [esp + 0x34]
call fcn.1000ba60
mov edi, dword [esp + 0x94]
mov ebx, 1
mov dword [esp + 0x84], ebx
mov byte [0x1018ccf6], 0x82
mov eax, dword [edi + 0x30]
cmp eax, 2
je 0x1010169c
cmp eax, 3
je 0x1010169c
mov al, byte [0x10195338]
mov dl, byte [0x1018ccf4]
mov ebp, 0xe
mov byte [0x1018ccf6], dl
test bl, al
mov word [esp + 0x14], 0x4b
mov word [esp + 0x16], bp
mov word [esp + 0x18], 7
mov word [esp + 0x1a], 0x1e
mov word [esp + 0x1c], 0x11
jne 0x10101435
or al, bl
mov ecx, 0x1019533c
mov byte [0x10195338], al
lea eax, [esp + 0x14]
push eax
call fcn.10097970
push 0x10101a50
call fcn.1013c36b
add esp, 4
mov al, byte [0x10195340]
mov word [esp + 0x58], 0xff7f
test bl, al
mov word [esp + 0x5a], 0xff79
mov word [esp + 0x5c], 0xff76
mov word [esp + 0x5e], 0xff70
mov word [esp + 0x60], 0xff31
mov word [esp + 0x62], 0xff71
mov word [esp + 0x64], 0xff65
mov word [esp + 0x66], 0xff78
mov word [esp + 0x68], 0xff67
mov word [esp + 0x6a], 0xff6c
mov word [esp + 0x6c], 0xff81
jne 0x101014ae
lea ecx, [esp + 0x58]
or al, bl
push ecx
mov ecx, 0x10195344
mov byte [0x10195340], al
call fcn.101051e0
push 0x10101a40
call fcn.1013c36b
add esp, 4
mov dl, byte [esp + 0x94]
mov esi, dword [0x1019533c]
mov edi, dword [0x10195344]
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], dl
call fcn.1000bc70
push esi
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x38]
push eax
push esi
call fcn.1000bf40
lea eax, [esp + 0x13]
lea ecx, [esp + 0x48]
push eax
push edi
mov byte [esp + 0x8c], 6
call fcn.10015150
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
push 0
push ecx
lea edx, [esp + 0x34]
push eax
push edx
mov byte [esp + 0x98], 7
call fcn.10015c40
add esp, 0x14
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 6
push ebx
call fcn.1000bc70
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x88], bl
call fcn.1000bc70
call fcn.100ffc20
mov eax, 0x15
mov word [esp + 0x58], 0x4b
mov word [esp + 0x6e], ax
mov word [esp + 0x74], ax
mov al, byte [0x10195348]
mov word [esp + 0x5a], 0x10
test bl, al
mov word [esp + 0x5c], bp
mov word [esp + 0x5e], 0x1c
mov word [esp + 0x60], bp
mov word [esp + 0x62], 0x18
mov word [esp + 0x64], 0x1d
mov word [esp + 0x66], 0x16
mov word [esp + 0x68], 0x49
mov word [esp + 0x6a], 0x40
mov word [esp + 0x6c], 0xc
mov word [esp + 0x70], 0x17
mov word [esp + 0x72], 0xb
jne 0x101015d4
or al, bl
mov ecx, 0x1019534c
mov byte [0x10195348], al
lea eax, [esp + 0x58]
push eax
call fcn.10044190
push 0x10101a60
call fcn.1013c36b
add esp, 4
mov cl, byte [esp + 0x94]
mov esi, dword [0x1019534c]
mov byte [esp + 0x14], cl
push 0
lea ecx, [esp + 0x18]
call fcn.1000bc70
push 0x101913e8
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x14]
push eax
push 0x101913e8
call fcn.1000bf40
mov dl, byte [esp + 0x94]
mov byte [esp + 0x84], 8
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], dl
call fcn.1000bc70
push esi
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x38]
push eax
push esi
call fcn.1000bf40
push 0xffffffffffffffff
lea eax, [esp + 0x18]
push 0
lea ecx, [esp + 0x40]
push eax
lea edx, [esp + 0x34]
push ecx
push edx
mov byte [esp + 0x98], 9
call fcn.10015c40
add esp, 0x14
lea ecx, [esp + 0x38]
mov byte [esp + 0x84], 8
push ebx
call fcn.1000bc70
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], bl
call fcn.1000bc70
push 0x6b
call fcn.10100be0
mov edi, dword [esp + 0x98]
add esp, 4
xor ebp, ebp
jmp 0x10101956
push 0xffffffffffffffc1
call fcn.10100be0
mov al, byte [0x10195350]
add esp, 4
test bl, al
mov word [esp + 0x58], 9
mov word [esp + 0x5a], 7
mov word [esp + 0x5c], bp
mov word [esp + 0x5e], 0x1e
mov word [esp + 0x60], 0x5f
mov word [esp + 0x62], 0x1f
mov word [esp + 0x64], 0x13
mov word [esp + 0x66], 6
mov word [esp + 0x68], 0x11
mov word [esp + 0x6a], 0x1a
mov word [esp + 0x6c], 0xf
jne 0x1010171f
or al, bl
push 0x72
mov byte [0x10195350], al
lea eax, [esp + 0x5c]
push eax
mov ecx, 0x10195354
call fcn.1007a2f0
push 0x10101a10
call fcn.1013c36b
add esp, 4
mov cl, byte [esp + 0x94]
mov esi, dword [0x10195354]
mov byte [esp + 0x38], cl
push ebp
lea ecx, [esp + 0x3c]
call fcn.1000bc70
push 0x101913e8
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x38]
push eax
push 0x101913e8
call fcn.1000bf40
lea edx, [esp + 0x94]
lea ecx, [esp + 0x48]
push edx
push esi
mov byte [esp + 0x8c], 2
call fcn.10015150
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
push ebp
push ecx
lea edx, [esp + 0x34]
push eax
push edx
mov byte [esp + 0x98], 3
call fcn.10015c40
add esp, 0x14
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 2
push ebx
call fcn.1000bc70
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x88], bl
call fcn.1000bc70
mov al, byte [0x1018ccf5]
mov ebp, 0xe
mov byte [0x1018ccf4], al
mov al, byte [0x10195358]
test bl, al
mov word [esp + 0x14], 0x4b
mov word [esp + 0x16], 0x10
mov word [esp + 0x18], bp
mov word [esp + 0x1a], 0x1c
mov word [esp + 0x1c], bp
mov word [esp + 0x1e], 0x18
mov word [esp + 0x20], 0x1d
mov word [esp + 0x22], 0x16
mov word [esp + 0x24], 0x19
jne 0x10101827
lea ecx, [esp + 0x14]
or al, bl
push ecx
mov ecx, 0x1019535c
mov byte [0x10195358], al
call fcn.100440f0
push 0x10101a30
call fcn.1013c36b
add esp, 4
mov al, byte [0x10195360]
mov word [esp + 0x58], 0x63
test bl, al
mov word [esp + 0x5a], 0x73
mov word [esp + 0x5c], 0x7d
mov word [esp + 0x5e], 0x61
mov word [esp + 0x60], 0x6f
mov word [esp + 0x62], 0x77
mov word [esp + 0x64], 0x6a
mov word [esp + 0x66], 0x7c
mov word [esp + 0x68], 0x35
mov word [esp + 0x6a], 0x75
mov word [esp + 0x6c], 0x79
mov word [esp + 0x6e], 0x6c
mov word [esp + 0x70], 0x7b
mov word [esp + 0x72], 0x70
mov word [esp + 0x74], 0x65
jne 0x101018be
lea edx, [esp + 0x58]
or al, bl
push 0x18
push edx
mov ecx, 0x10195364
mov byte [0x10195360], al
call fcn.100448a0
push 0x10101a20
call fcn.1013c36b
add esp, 4
mov al, byte [esp + 0x94]
mov esi, dword [0x1019535c]
mov ebp, dword [0x10195364]
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], al
call fcn.1000bc70
push esi
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x38]
push eax
push esi
call fcn.1000bf40
lea ecx, [esp + 0x94]
mov byte [esp + 0x84], 4
push ecx
push ebp
lea ecx, [esp + 0x50]
call fcn.10015150
xor ebp, ebp
push 0xffffffffffffffff
lea edx, [esp + 0x3c]
push ebp
push edx
push eax
lea eax, [esp + 0x38]
mov byte [esp + 0x94], 5
push eax
call fcn.10015c40
add esp, 0x14
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 4
push ebx
call fcn.1000bc70
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x88], bl
call fcn.1000bc70
call fcn.10101a00
mov edx, dword [esp + 0x90]
lea ecx, [edi + 0x40]
add edi, 0x20
push ecx
push edi
lea eax, [esp + 0x30]
push edx
push eax
call fcn.100eaf50
mov esi, dword [esp + 0x9c]
mov cl, byte [esp + 0x38]
add esp, 0x10
mov byte [0x1018ccf4], 0xec
mov byte [esi], cl
mov ecx, esi
push ebp
call fcn.1000bc70
mov edx, dword [0x1016a210]
lea eax, [esp + 0x28]
push edx
push ebp
push eax
mov ecx, esi
call fcn.1000ba60
mov dword [esp + 0x78], ebx
mov ecx, dword [esp + 0x2c]
mov byte [esp + 0x84], 0
cmp ecx, ebp
je 0x101019d5
mov al, byte [ecx - 1]
test al, al
je 0x101019c9
cmp al, 0xff
je 0x101019c9
dec al
mov byte [ecx - 1], al
jmp 0x101019d5
add ecx, 0xfffffffe
push ecx
call fcn.101307a0
add esp, 4
mov ecx, dword [esp + 0x7c]
mov eax, esi
pop edi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x78
ret 0xc