Function at 0x100b18e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0xffffffffffffffff
push 0x10161537
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x58
mov eax, 0x7c
mov edx, 0x18
mov word [esp + 0x22], ax
mov word [esp + 0x2a], ax
mov word [esp + 0x2e], ax
mov eax, 0x51
mov ecx, 0x6d
push ebx
mov word [esp + 0x40], ax
mov word [esp + 0x42], ax
mov al, byte [0x10196cec]
push esi
mov word [esp + 0x28], dx
mov word [esp + 0x2c], cx
mov word [esp + 0x2e], cx
mov word [esp + 0x38], dx
xor ebx, ebx
mov esi, 0x61
mov edx, 0x52
mov ecx, 0x54
test al, 1
push edi
mov dword [esp + 0x60], ebx
mov word [esp + 0x34], 0x79
mov word [esp + 0x38], 0x69
mov word [esp + 0x3e], si
mov word [esp + 0x40], 0x70
mov word [esp + 0x42], dx
mov word [esp + 0x44], 0x47
mov word [esp + 0x46], cx
mov word [esp + 0x4c], 0x5c
mov word [esp + 0x4e], si
mov word [esp + 0x50], 0x7b
mov word [esp + 0x52], cx
mov word [esp + 0x54], 0x4f
mov word [esp + 0x56], 0x58
mov word [esp + 0x58], 0x5b
mov word [esp + 0x5a], dx
mov word [esp + 0x5c], 0x45
jne 0x100b1a1d
or al, 1
push 0x34
mov byte [0x10196cec], al
call fcn.1013c2df
add esp, 4
mov dword [0x10196cf0], eax
xor esi, esi
mov di, word [esp + esi + 0x2c]
push 0x3d
mov eax, edi
mov ecx, 0x10196cf0
and eax, 0xffff
push eax
call fcn.100a8ee0
mov ecx, dword [0x10196cf0]
add eax, 0x3d
xor eax, edi
mov word [esi + ecx], ax
add esi, 2
cmp esi, 0x32
jb 0x100b19d6
mov edx, dword [0x10196cf0]
push 0x100b80f0
mov word [edx + 0x32], bx
call fcn.1013c36b
add esp, 4
mov al, byte [esp + 0x74]
mov edi, dword [0x10196cf0]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], al
call fcn.1000bc70
push edi
call fcn.1013c2c2
add esp, 4
mov esi, eax
lea ecx, [esp + 0x1c]
push 1
push esi
call fcn.1000c010
test al, al
je 0x100b1a6b
mov ecx, dword [esp + 0x20]
push esi
push edi
push ecx
call fcn.100017d0
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x30], esi
add esp, 0xc
mov word [edx + esi*2], bx
lea eax, [esp + 0x1c]
lea ecx, [esp + 0xc]
push eax
push ecx
mov dword [esp + 0x74], 1
call fcn.1002edc0
add esp, 8
push 1
lea ecx, [esp + 0x20]
mov byte [esp + 0x70], 3
call fcn.1000bc70
mov eax, 0x3b2
cdq
idiv dword [0x1018cae0]
mov eax, dword [0x1018cadc]
mov cl, byte [edx + eax]
mov eax, dword [esp + 0x10]
cmp eax, ebx
mov byte [0x1018caf0], cl
jne 0x100b1abc
mov eax, 0x1016a1d8
push eax
call fcn.100b8100
mov esi, dword [esp + 0x78]
add esp, 4
test eax, eax
jne 0x100b1b00
mov dl, byte [esp + 0x74]
push 0x101913e8
mov byte [esi], dl
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
call fcn.1013c2c2
add esp, 4
mov ecx, esi
push eax
push 0x101913e8
call fcn.1000bf40
mov dword [esp + 0x60], 1
jmp 0x100b1b2b
mov al, byte [esp + 0xc]
mov dword [esi + 4], ebx
mov byte [esi], al
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov ecx, dword [0x1016a210]
push ecx
lea edx, [esp + 0x10]
push ebx
push edx
mov ecx, esi
call fcn.1000ba60
mov dword [esp + 0x60], 1
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x6c], bl
cmp ecx, ebx
je 0x100b1b55
mov al, byte [ecx - 1]
cmp al, bl
je 0x100b1b49
cmp al, 0xff
je 0x100b1b49
dec al
mov byte [ecx - 1], al
jmp 0x100b1b55
add ecx, 0xfffffffe
push ecx
call fcn.101307a0
add esp, 4
mov ecx, dword [esp + 0x64]
mov eax, esi
pop edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret