Function at 0x100da5d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x120
sub esp, 0x104
cmp dword [ebp + 0x10], eax
jae 0x100da5e6
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
lea ecx, [ebp - 0x104]
push 0xe0
xor ebx, ebx
push ecx
mov dword [eax], ebx
call fcn.100d9650
mov esi, dword [ebp + 0xc]
push 0x54
lea edx, [ebp - 0x104]
push esi
push edx
call fcn.100d9670
mov edi, dword [esi + 0x50]
lea eax, [ebp + 0x10]
lea ecx, [ebp + 0x10]
xor edx, edx
sub eax, ecx
add esp, 0x14
test eax, eax
setg dl
cmp dword [esi], 0x54
mov dword [ebp - 4], edi
mov dword [ebp - 0x6c], edx
jb 0x100da94c
lea eax, [ebp - 0x104]
push eax
call fcn.100d9990
add esp, 4
test eax, eax
jne 0x100da654
pop edi
pop esi
lea eax, [ebx + 2]
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esi + 0xc]
cmp ecx, ebx
jne 0x100da66c
cmp dword [esi + 0x24], ebx
jne 0x100da66c
pop edi
pop esi
mov eax, 7
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x24]
cmp eax, ebx
jne 0x100da67b
mov edx, dword [esi + 0x10]
cmp edx, dword [ebp + 0x14]
jb 0x100da660
mov edx, dword [esi + 0x18]
cmp edx, dword [ebp + 0x18]
jae 0x100da68f
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
cmp eax, ebx
je 0x100da69c
cmp dword [esi + 0x28], ebx
je 0x100da94c
cmp dword [esi + 0x34], ebx
je 0x100da94c
cmp dword [esi + 0x38], ebx
je 0x100da94c
cmp dword [esi + 0x3c], ebx
je 0x100da94c
xor eax, eax
mov dword [ebp + 0xc], 0x3020100
cmp dword [ebp + 0xc], 0x3020100
mov edx, 0xc
setne al
dec eax
mov dword [ebp - 0x70], eax
cmp ecx, ebx
je 0x100da704
cmp dword [esi + 0x10], edx
jb 0x100da704
add ecx, 3
and ecx, 0xfffffffc
mov dword [ebp - 0x58], ecx
mov byte [ecx], bl
mov eax, dword [ebp - 0x58]
mov dword [eax + 8], ebx
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 0x10]
neg ecx
and ecx, 3
sub eax, ecx
mov ecx, dword [ebp - 0x58]
sub eax, edx
mov dword [ecx + 4], eax
jmp 0x100da707
mov dword [ebp - 0x58], ebx
cmp dword [ebp - 0xf0], ebx
je 0x100da73f
cmp dword [esi + 0x18], edx
jb 0x100da73f
mov eax, dword [esi + 0x14]
add eax, 3
and eax, 0xfffffffc
mov dword [ebp - 0x54], eax
mov byte [eax], bl
mov eax, dword [ebp - 0x54]
mov dword [eax + 8], ebx
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x18]
neg ecx
and ecx, 3
sub eax, ecx
mov ecx, dword [ebp - 0x54]
sub eax, edx
mov dword [ecx + 4], eax
jmp 0x100da742
mov dword [ebp - 0x54], ebx
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x104]
push eax
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
call fcn.100da130
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x100da660
push 0xe0
lea ecx, [ebp - 0x104]
push ecx
push esi
call fcn.100d9670
mov edx, dword [ebp + 0x10]
add edx, 0xffffff20
push edx
lea eax, [esi + 0xe0]
push eax
call fcn.100d9650
add esp, 0x14
cmp dword [esi + 0x40], ebx
jne 0x100da8e7
cmp dword [esi + 0x24], ebx
je 0x100da7a8
mov edi, 0x9600000
jmp 0x100da8a0
mov edx, dword [esi + 0x34]
push 1
push 1
lea ecx, [ebp - 0x24]
push ecx
xor eax, eax
push edi
mov dword [ebp - 0x24], 0x760069
mov dword [ebp - 0x20], 0x4d0043
mov dword [ebp - 0x1c], 0x50004e
mov dword [ebp - 0x18], 0x720061
mov dword [ebp - 0x14], 0x6d0061
mov dword [ebp - 0x10], 0x69002e
mov dword [ebp - 0xc], 0x660072
mov word [ebp - 8], ax
call edx
mov edi, eax
add esp, 0x10
cmp edi, ebx
jne 0x100da802
pop edi
pop esi
mov eax, 9
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp - 4]
mov ecx, dword [esi + 0x3c]
push 4
push 0x20
lea eax, [ebp + 0x10]
push eax
push edi
push ebx
call ecx
add esp, 0x14
test eax, eax
jne 0x100da831
mov edx, dword [esi + 0x38]
push edi
push ebx
call edx
add esp, 8
pop edi
pop esi
mov eax, 8
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
cmp eax, 1
jne 0x100da840
mov ebx, 0x2fa800
jmp 0x100da84f
cmp eax, 2
je 0x100da84a
cmp eax, 3
jne 0x100da81b
mov ebx, 0x1f4000
mov eax, dword [ebp - 4]
mov ecx, dword [esi + 0x38]
push edi
push eax
call ecx
mov edx, dword [esi + 0xac]
mov ecx, dword [edx + 4]
add esp, 8
cmp ecx, ebx
ja 0x100da86d
xor edi, edi
jmp 0x100da89e
cmp dword [esi + 0x1c], 0
je 0x100da890
mov edx, dword [esi + 0x20]
mov eax, edx
sub eax, ebx
add eax, ecx
lea edi, [eax*8]
sub edi, eax
shr edi, 3
cmp edi, edx
jbe 0x100da869
sub edi, edx
jmp 0x100da89e
sub ecx, ebx
lea edi, [ecx*8]
sub edi, ecx
shr edi, 3
xor ebx, ebx
mov eax, dword [esi + 0x1c]
cmp eax, ebx
je 0x100da8c1
mov ecx, dword [esi + 0x20]
push 0xffffffffffffffff
push ecx
push eax
mov dword [esi + 0xc0], eax
call fcn.100e6de0
add esp, 0xc
cmp dword [esi + 0x20], edi
jae 0x100da8ed
push edi
push ebx
push esi
call fcn.100d9f10
add esp, 0xc
mov dword [esi + 0xc4], eax
cmp eax, ebx
je 0x100da660
push ebx
push edi
push eax
call fcn.100e6de0
add esp, 0xc
jmp 0x100da8ed
mov dword [esi + 0xc4], ebx
xor eax, eax
nop
mov ecx, dword [esi + 4]
mov cl, byte [eax + ecx]
cmp cl, 0x23
jne 0x100da8fd
xor cl, cl
cmp eax, 0x3f
jge 0x100da90d
test cl, cl
je 0x100da90d
mov byte [eax + esi + 0x54], cl
inc eax
jmp 0x100da8f0
mov edx, dword [ebp + 8]
mov byte [eax + esi + 0x54], 0
xor eax, eax
cmp dword [esi + 0x48], ebx
mov dword [esi + 0xcc], ebx
setne al
mov dword [esi + 0xd0], ebx
pop edi
mov dword [esi + 0xa0], eax
mov dword [esi + 0xa4], eax
mov dword [esi + 0xa8], eax
mov dword [esi + 0x9c], eax
mov dword [edx], esi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 3
pop ebx
mov esp, ebp
pop ebp
ret