Function at 0x10101390
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10161385
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x101e6b6c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x102b8317
call fcn.10124b2c
cmp dword [0x10263b90], 0
mov dword [ebp - 0x38], 0x42aa0000
sete al
mov dword [ebp - 0x34], 0x42480000
mov dword [ebp - 0x1c], 0x65676152
mov dword [ebp - 0x18], 0x746f62
mov dword [ebp - 4], 0
mov word [ebp - 0x2c], 0x61
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10108ae0
mov ecx, dword [0x10263b90]
xor edx, edx
test al, al
mov dword [esp + 0xc], 0xbf800000
mov dword [ebp - 4], 0xffffffff
cmovne ecx, edx
mov dword [esp + 8], edx
add esp, 8
mov dword [0x10263b90], ecx
call fcn.1001fc30
cmp dword [0x10263b90], 1
mov dword [ebp - 0x38], 0x42aa0000
sete al
mov dword [ebp - 0x34], 0x42480000
mov dword [ebp - 0x1c], 0x6967654c
mov dword [ebp - 0x18], 0x746f6274
mov byte [ebp - 0x14], 0
mov dword [ebp - 4], 2
mov word [ebp - 0x2c], 0x62
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10108ae0
mov ecx, dword [0x10263b90]
test al, al
mov edx, 1
mov dword [esp + 0x14], 0xbf800000
cmovne ecx, edx
mov dword [ebp - 4], 0xffffffff
add esp, 0x10
mov dword [0x10263b90], ecx
mov dword [esp], 0
call fcn.1001fc30
cmp dword [0x10263b90], 2
mov dword [ebp - 0x38], 0x42a00000
sete al
mov dword [ebp - 0x34], 0x42480000
mov dword [ebp - 0x1c], 0x75736956
mov dword [ebp - 0x18], 0x736c61
mov dword [ebp - 4], 4
mov word [ebp - 0x2c], 0x63
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10108ae0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x10263b90]
test al, al
mov edx, 2
mov dword [esp + 0x14], 0xbf800000
cmovne ecx, edx
mov dword [esp + 0x10], 0
add esp, 0x10
mov dword [0x10263b90], ecx
call fcn.1001fc30
add esp, 8
mov dword [ebp - 0x38], 0x42e60000
cmp dword [0x10263b90], 3
mov ecx, 0xb1
mov dword [ebp - 0x34], 0x42480000
sete bl
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + 0x101988c4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1010157d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x10101560
mov byte [ebp - 0x13], 0
mov dword [ebp - 4], 6
mov word [ebp - 0x2c], 0x64
push ebx
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10108ae0
mov ecx, dword [0x10263b90]
test al, al
mov edx, 3
mov dword [esp + 0xc], 0xbf800000
cmovne ecx, edx
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov dword [0x10263b90], ecx
mov dword [esp], 0
call fcn.1001fc30
cmp dword [0x10263b90], 4
mov dword [ebp - 0x40], 0x42960000
sete al
mov dword [ebp - 0x3c], 0x42480000
mov dword [ebp - 0x28], 0x6f6c6f43
mov word [ebp - 0x24], 0x7372
mov byte [ebp - 0x22], 0
mov dword [ebp - 4], 8
mov word [ebp - 0x30], 0x66
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10108ae0
mov ecx, dword [0x10263b90]
add esp, 0x18
test al, al
mov edx, 4
cmovne ecx, edx
mov dword [0x10263b90], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10124b5e
mov esp, ebp
pop ebp
ret