Function at 0x1010b0f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x200
mov eax, dword [ebp + 8]
xor ecx, ecx
mov edx, dword [0x1027ee24]
add edx, 0x314d
mov dword [0x1027ee24], edx
mov edx, ecx
mov esi, ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x19c], ecx
jmp 0x1010b32e
lea eax, [0x1026e912]
mov ecx, 0x20
lea edx, [ebp - 0x10c]
mov esi, dword [ebp - 0x1a0]
add esi, 0xc15dc
mov edi, dword [ebp - 0x1a0]
add edi, 0xadc56
mov dword [0x1027ee24], 0x1503
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
mov dword [ebp - 0x1a4], edi
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x1ac], edx
mov dword [ebp - 0x1b0], esi
call fcn.1010af60
mov eax, dword [ebp - 0x1ac]
mov dword [esp], eax
mov ecx, dword [ebp - 0x1a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [ebp - 0x1b4]
mov dword [esp + 0xc], edx
call fcn.1010c650
xor eax, eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x1b0]
mov dword [ecx], edx
mov dword [ecx + 4], 0x147600
mov edx, dword [ebp - 0x1a4]
mov dword [ecx + 8], edx
mov edx, dword [0x1027ee24]
add edx, 0xffffddba
mov dword [0x1027ee24], edx
mov dword [ecx + 0xc], 0x20a0
add esp, 0x200
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1bc]
xor edx, edx
mov bl, 0x6b
lea esi, [ebp - 0x18c]
lea edi, [ebp - 0x16c]
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c0]
add ecx, eax
mov byte [ebp - 0x18c], 0x56
mov byte [ebp - 0x18b], 0x69
mov byte [ebp - 0x18a], 0x72
mov byte [ebp - 0x189], 0x74
mov byte [ebp - 0x188], 0x75
mov byte [ebp - 0x187], 0x61
mov byte [ebp - 0x186], 0x6c
mov byte [ebp - 0x185], 0x41
mov byte [ebp - 0x184], 0x6c
mov byte [ebp - 0x183], 0x6c
mov byte [ebp - 0x182], 0x6f
mov byte [ebp - 0x181], 0x63
mov byte [ebp - 0x180], 0
mov byte [ebp - 0x17f], 0xb7
mov dword [0x1027ee24], 0x1938
mov byte [ebp - 0x16c], 0x6b
mov byte [ebp - 0x16b], 0x65
mov byte [ebp - 0x16a], 0x72
mov byte [ebp - 0x169], 0x6e
mov byte [ebp - 0x168], 0x65
mov byte [ebp - 0x167], 0x6c
mov byte [ebp - 0x166], 0x33
mov byte [ebp - 0x165], 0x32
mov byte [ebp - 0x164], 0x2e
mov byte [ebp - 0x163], 0x64
mov byte [ebp - 0x162], 0x6c
mov byte [ebp - 0x161], 0x6c
mov byte [ebp - 0x160], 0
mov byte [ebp - 0x15f], 0xb7
mov dword [0x1027ee28], 0x14f9
mov dword [ebp - 0x1c8], edi
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1cc], esi
mov dword [ebp - 0x1d0], edx
mov byte [ebp - 0x1d1], bl
jmp 0x1010b3fe
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x194]
mov edx, dword [ebp - 0x198]
lea esi, section..data
mov edi, edx
add edi, 2
imul ebx, edx, 0x44
mov dword [ebp - 0x1d8], eax
mov eax, esi
add eax, ebx
add eax, 0x40
imul ebx, edx, 0x44
mov dword [ebp - 0x1dc], eax
mov eax, esi
add eax, ebx
add eax, 0x10
or edx, 1
imul ebx, edx, 0x44
mov dword [ebp - 0x1e0], eax
mov eax, esi
add eax, ebx
add eax, 0x40
mov ebx, dword [ebp - 0x1dc]
mov ebx, dword [ebx]
mov eax, dword [eax]
imul edx, edx, 0x44
add esi, edx
add esi, 0x10
mov edx, dword [ebp - 0x1e0]
mov dx, word [edx]
mov si, word [esi]
movzx edx, dx
movzx esi, si
xor edx, ebx
xor esi, eax
mov eax, dword [ebp - 0x1d8]
add edx, eax
add esi, ecx
cmp edi, 0x344
mov eax, esi
mov ecx, edx
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x19c], edx
je 0x1010b1fd
jmp 0x1010b32e
mov al, byte [ebp - 0x1d1]
mov ecx, dword [ebp - 0x1d0]
mov edx, ecx
inc edx
movsx esi, al
mov di, si
mov word [ebp + ecx*2 - 0x14c], di
mov al, byte [ebp + ecx - 0x16b]
cmp al, 0
mov dword [ebp - 0x1d0], edx
mov byte [ebp - 0x1d1], al
jne 0x1010b3fe
xor eax, eax
lea ecx, [ebp - 0x14c]
mov dword [0x1027ee24], 0x90
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x1e4], eax
call fcn.1010be90
mov dword [esp], eax
mov eax, dword [ebp - 0x1cc]
mov dword [esp + 4], eax
call fcn.1010acc0
mov ecx, eax
mov dword [0x1027ee40], eax
mov eax, esp
mov edx, dword [ebp - 0x1b4]
mov dword [eax + 4], edx
mov dword [eax + 0xc], 4
mov dword [eax + 8], 0x1000
mov dword [eax], 0
call ecx
sub esp, 0x10
xor ecx, ecx
mov dword [0x1027ee24], 0xf9
mov edx, ecx
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1e8], edx
mov dword [ebp - 0x1ec], ecx
mov eax, dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x1e8]
lea edx, section..data
imul esi, eax, 0x44
mov edi, edx
add edi, esi
add edi, 0x40
imul esi, eax, 0x44
mov ebx, edx
add ebx, esi
add ebx, 0x10
mov esi, dword [ebp - 0x1a0]
add esi, ecx
mov dword [ebp - 0x1f0], eax
imul eax, eax, 0x44
add edx, eax
add edx, 0xc
mov eax, dword [ebp - 0x1f0]
add eax, 1
mov edi, dword [edi]
mov edx, dword [edx]
movzx ebx, word [ebx]
xor ebx, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0x1fc], ebx
call fcn.1010c410
mov eax, dword [ebp - 0x1fc]
mov ecx, dword [ebp - 0x1f8]
add eax, ecx
mov edx, dword [ebp - 0x1f4]
cmp edx, 0x344
mov dword [ebp - 0x1ec], edx
mov dword [ebp - 0x1e8], eax
je 0x1010b134
jmp 0x1010b4b7