Function at 0x100b8400
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push esi
push edi
lea edi, [ebp - 0x68]
mov ecx, 0x1a
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x101f3540]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 8], eax
jmp 0x100b8432
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x100b8597
mov eax, dword [ebp + 0xc]
push eax
call fcn.100a3830
add esp, 4
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.100bb710
add esp, 0xc
test eax, eax
jne 0x100b8592
mov edx, dword [ebp - 8]
mov eax, dword [edx + 4]
push eax
call fcn.100a3830
add esp, 4
cmp eax, dword [ebp - 0xc]
je 0x100b849c
push 0xa
push 0
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 4]
add edx, dword [ebp - 0xc]
push edx
call fcn.100ab0e0
add esp, 0xc
test eax, eax
jle 0x100b8592
mov eax, dword [ebp - 8]
mov esi, esp
mov ecx, dword [eax]
call ecx
cmp esi, esp
call fcn.100f3210
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x28], 0x5b
mov byte [ebp - 0x27], 0x69
mov byte [ebp - 0x26], 0x6e
mov byte [ebp - 0x25], 0x74
mov byte [ebp - 0x24], 0x65
mov byte [ebp - 0x23], 0x72
mov byte [ebp - 0x22], 0x66
mov byte [ebp - 0x21], 0x61
mov byte [ebp - 0x20], 0x63
mov byte [ebp - 0x1f], 0x65
mov byte [ebp - 0x1e], 0x73
mov byte [ebp - 0x1d], 0x2e
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x70
mov byte [ebp - 0x1a], 0x70
mov byte [ebp - 0x19], 0x3a
mov byte [ebp - 0x18], 0x31
mov byte [ebp - 0x17], 0x39
mov byte [ebp - 0x16], 0x35
mov byte [ebp - 0x15], 0x5d
mov byte [ebp - 0x14], 0x20
mov byte [ebp - 0x13], 0
lea ecx, [ebp - 0x28]
call fcn.100bb7a0
push eax
push 0
mov ecx, 0x101f3514
call fcn.100efb60
mov dword [ebp - 0x48], eax
push 0x101af5e0
mov ecx, dword [ebp - 0x48]
call fcn.100effb0
mov dword [ebp - 0x4c], eax
mov edx, dword [ebp - 8]
mov eax, dword [edx + 4]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
push ecx
mov ecx, dword [ebp - 0x4c]
call fcn.100effb0
mov dword [ebp - 0x54], eax
push 0x101af5ec
mov ecx, dword [ebp - 0x54]
call fcn.100effb0
mov dword [ebp - 0x58], eax
push 6
call fcn.100f01d0
add esp, 4
mov word [ebp - 0x42], ax
mov dx, word [ebp - 0x42]
mov word [ebp - 0x44], dx
movzx eax, word [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x58]
call fcn.100eff30
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0x5c]
call fcn.1009dc30
nop
mov eax, dword [ebp - 0x10]
jmp 0x100b8636
jmp 0x100b8429
mov byte [ebp - 0x40], 0x5b
mov byte [ebp - 0x3f], 0x69
mov byte [ebp - 0x3e], 0x6e
mov byte [ebp - 0x3d], 0x74
mov byte [ebp - 0x3c], 0x65
mov byte [ebp - 0x3b], 0x72
mov byte [ebp - 0x3a], 0x66
mov byte [ebp - 0x39], 0x61
mov byte [ebp - 0x38], 0x63
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x36], 0x73
mov byte [ebp - 0x35], 0x2e
mov byte [ebp - 0x34], 0x63
mov byte [ebp - 0x33], 0x70
mov byte [ebp - 0x32], 0x70
mov byte [ebp - 0x31], 0x3a
mov byte [ebp - 0x30], 0x32
mov byte [ebp - 0x2f], 0x30
mov byte [ebp - 0x2e], 0x34
mov byte [ebp - 0x2d], 0x5d
mov byte [ebp - 0x2c], 0x20
mov byte [ebp - 0x2b], 0
lea ecx, [ebp - 0x40]
call fcn.100bb7a0
push eax
push 3
mov ecx, 0x101f3514
call fcn.100efb60
mov dword [ebp - 0x60], eax
push 0x101af608
mov ecx, dword [ebp - 0x60]
call fcn.100effb0
mov dword [ebp - 0x64], eax
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp - 0x64]
call fcn.100effb0
mov dword [ebp - 0x68], eax
push 0x101af624
mov ecx, dword [ebp - 0x68]
call fcn.100effb0
nop
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100f3240
add esp, 0x68
cmp ebp, esp
call fcn.100f3210
mov esp, ebp
pop ebp
ret