Function at 0x100b2280
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0xffffffffffffffff
push 0x10161687
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x190
mov eax, 0x5d
push ebx
mov word [esp + 6], ax
mov word [esp + 0x1e], ax
mov al, byte [0x10196c74]
push ebp
xor ebp, ebp
push esi
test al, 1
push edi
mov dword [esp + 0x19c], ebp
mov word [esp + 0x10], 0x46
mov word [esp + 0x14], 0x4f
mov word [esp + 0x16], 0x4b
mov word [esp + 0x18], 0x5c
mov word [esp + 0x1a], 0x4d
mov word [esp + 0x1c], 0x52
mov word [esp + 0x1e], 0x5a
mov word [esp + 0x20], 0x56
mov word [esp + 0x22], 0x5f
mov word [esp + 0x24], 0x51
mov word [esp + 0x26], 0x53
mov word [esp + 0x28], 0x58
jne 0x100b233b
mov bl, al
lea eax, [esp + 0x10]
or bl, 1
push eax
mov ecx, 0x10196c78
mov byte [0x10196c74], bl
call fcn.100b61a0
push 0x100b93c0
call fcn.1013c36b
add esp, 4
mov ecx, dword [0x10196c78]
mov edi, dword [esp + 0x1b0]
push ecx
lea edx, [esp + 0x30]
push edi
push edx
call fcn.1000cf10
add esp, 0xc
mov eax, dword [eax + 4]
mov dword [esp + 0x1a8], ebp
cmp eax, ebp
jne 0x100b236a
mov eax, 0x1016a1d8
push ebp
push eax
call fcn.100b9100
add esp, 8
mov ebx, 1
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1a8], 0xffffffff
push ebx
call fcn.1000bc70
mov eax, 0x163
mov cl, byte [0x1018caf1]
cdq
idiv dword [0x1018cae0]
mov eax, dword [0x1018cadc]
mov byte [esp + 0xf0], cl
inc cl
mov byte [0x1018caf1], cl
mov dl, byte [edx + eax]
mov eax, dword [esp + 0xf0]
push edx
push ecx
push eax
call fcn.100b7770
mov al, byte [0x10196c7c]
add esp, 0xc
mov esi, 0xeb
mov word [esp + 0x2e], 0xbd
test bl, al
mov word [esp + 0x2c], si
mov word [esp + 0x30], 0xa8
mov word [esp + 0x32], 0xa9
jne 0x100b241c
mov cl, al
push 0xc5
or cl, bl
mov byte [0x10196c7c], cl
lea ecx, [esp + 0x30]
push ecx
mov ecx, 0x10196c80
call fcn.1002a5f0
push 0x100b93e0
call fcn.1013c36b
add esp, 4
mov eax, 0x2f
mov word [esp + 0xd0], 0x6c
mov word [esp + 0xd2], ax
mov word [esp + 0xec], ax
mov al, byte [0x10196c84]
mov word [esp + 0xd4], 0x16
test al, 1
mov word [esp + 0xd6], 4
mov word [esp + 0xd8], 0x13
mov word [esp + 0xda], 0x11
mov word [esp + 0xdc], 0xb
mov word [esp + 0xde], 0x18
mov word [esp + 0xe0], 0x1c
mov word [esp + 0xe2], 0x19
mov word [esp + 0xe4], 0x12
mov word [esp + 0xe6], 0xe
mov word [esp + 0xe8], 7
mov word [esp + 0xea], 0x1d
jne 0x100b24e6
mov cl, al
lea edx, [esp + 0xd0]
or cl, 1
push edx
mov byte [0x10196c84], cl
mov ecx, 0x10196c88
call fcn.10044190
push 0x100b93d0
call fcn.1013c36b
add esp, 4
mov eax, dword [0x10196c88]
lea ecx, [esp + 0x10]
push eax
push edi
push ecx
call fcn.1000cf10
mov edx, dword [esp + 0x1c4]
mov dword [esp + 0x1b4], ebx
push edx
push eax
lea eax, [esp + 0x104]
push eax
call fcn.1000d050
mov ecx, dword [0x10196c80]
lea edx, [esp + 0x1a4]
push ecx
push eax
push edx
mov byte [esp + 0x1cc], 2
call fcn.1000cf10
add esp, 0x24
push ebx
lea ecx, [esp + 0xf4]
mov byte [esp + 0x1ac], 5
call fcn.1000bc70
push ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0x1ac], 4
call fcn.1000bc70
mov eax, 0x271
cdq
idiv dword [0x1018cae0]
mov eax, dword [0x1018cadc]
mov cl, byte [edx + eax]
lea edx, [esp + 0x18c]
lea eax, [esp + 0x10]
push edx
push eax
mov byte [0x1018caf1], cl
call fcn.100213f0
add esp, 8
mov eax, dword [eax + 4]
mov byte [esp + 0x1a8], 6
cmp eax, ebp
mov edi, 0x1016a1dc
je 0x100b25a0
mov edi, eax
lea ecx, [esp + 0x158]
mov dword [esp + 0x100], 0x1016aa14
call fcn.100b7bb0
mov dword [esp + 0x19c], ebx
push ebp
push ebx
lea ecx, [esp + 0x10c]
push ebp
push ecx
lea ecx, [esp + 0x110]
mov byte [esp + 0x1b8], 7
call fcn.100b7ac0
push ebp
lea ecx, [esp + 0x108]
mov dword [esp + 0x1ac], 8
call fcn.100b98d0
mov edx, dword [esp + 0x100]
push 0x12
mov byte [esp + 0x1ac], 9
push edi
mov eax, dword [edx + 4]
lea ecx, [esp + 0x10c]
mov dword [esp + eax + 0x108], 0x1016aa10
call fcn.100b9af0
test eax, eax
jne 0x100b263e
mov ecx, dword [esp + 0x100]
push ebp
push 2
mov edx, dword [ecx + 4]
lea ecx, [esp + edx + 0x108]
call fcn.10030970
push ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0x1ac], 0xb
call fcn.1000ba10
mov al, byte [0x1018caf2]
mov cl, al
dec al
mov byte [0x1018caf2], al
mov al, byte [0x1018caf0]
push ecx
push eax
mov eax, 0x3bd
mov ecx, dword [0x1018cadc]
cdq
idiv dword [0x1018cae0]
mov dl, byte [edx + ecx]
push edx
call fcn.10063400
mov byte [0x1018caf0], al
mov eax, dword [esp + 0x10c]
add esp, 0xc
mov ecx, dword [eax + 4]
test byte [esp + ecx + 0x104], 6
je 0x100b26ff
lea ecx, [esp + 0x158]
mov byte [esp + 0x1a8], 4
call fcn.100b75f0
lea edx, [esp + 0x158]
mov dword [esp + method.std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__.virtual_0], vtable.std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__.0
mov dword [esp + 0xf0], edx
lea ecx, [esp + 0x158]
mov byte [esp + 0x1a8], 4
call fcn.10133022
push ebx
lea ecx, [esp + 0x190]
mov dword [esp + 0x1ac], 0xffffffff
call fcn.1000bc70
mov eax, 2
jmp 0x100b315f
mov eax, 0xf7
mov ecx, 0xf4
mov ebp, 0xee
mov word [esp + 0x60], ax
mov word [esp + 0x6a], ax
mov word [esp + 0x66], cx
mov eax, 0xed
mov word [esp + 0x80], bp
mov word [esp + 0x82], bp
mov word [esp + 0x84], bp
mov word [esp + 0x88], cx
mov edx, 0xf5
mov ebp, 0xb7
mov ecx, 0xf6
mov word [esp + 0x74], ax
mov word [esp + 0x76], ax
mov word [esp + 0x58], dx
mov word [esp + 0x68], dx
mov eax, 0xb6
mov word [esp + 0x86], bp
mov word [esp + 0x8a], cx
mov word [esp + 0x96], bp
mov word [esp + 0x98], cx
mov word [esp + 0xae], cx
mov edi, 0xf1
mov edx, 0xea
mov ebx, 0xbb
mov ebp, 0xa9
mov ecx, 0xfc
mov word [esp + 0x7c], ax
mov word [esp + 0x7e], ax
mov word [esp + 0x9e], ax
mov word [esp + 0xa8], ax
mov word [esp + 0xb8], ax
mov word [esp + 0xc6], ax
mov al, byte [0x10196c8c]
mov word [esp + 0x48], 0xa5
mov word [esp + 0x4a], 0xca
mov word [esp + 0x4c], 0xfc
mov word [esp + 0x4e], 0xf8
mov word [esp + 0x50], si
mov word [esp + 0x52], 0xfa
mov word [esp + 0x54], di
mov word [esp + 0x56], 0xc9
mov word [esp + 0x5a], 0xec
mov word [esp + 0x5c], 0xfe
mov word [esp + 0x5e], 0xf0
mov word [esp + 0x62], 0xb9
mov word [esp + 0x64], 0xe1
mov word [esp + 0x6c], dx
mov word [esp + 0x6e], 0xa4
mov word [esp + 0x70], bx
mov word [esp + 0x72], di
mov word [esp + 0x78], 0xe9
mov word [esp + 0x7a], 0xa3
mov word [esp + 0x8c], 0xe3
mov word [esp + 0x8e], 0xf0
mov word [esp + 0x90], 0xf5
mov word [esp + 0x92], 0xf5
mov word [esp + 0x94], 0xf8
mov word [esp + 0x9a], si
mov word [esp + 0x9c], 0xfe
mov word [esp + 0xa0], 0xab
mov word [esp + 0xa2], bp
mov word [esp + 0xa4], bp
mov word [esp + 0xa6], 0xaf
mov word [esp + 0xaa], 0xfb
mov word [esp + 0xac], si
mov word [esp + 0xb0], 0xee
mov word [esp + 0xb2], dx
mov word [esp + 0xb4], cx
mov word [esp + 0xb6], si
mov word [esp + 0xba], dx
mov word [esp + 0xbc], cx
mov word [esp + 0xbe], 0xf8
mov word [esp + 0xc0], si
mov word [esp + 0xc2], 0xfa
mov word [esp + 0xc4], di
mov word [esp + 0xc8], bx
mov word [esp + 0xca], 0xa7
mov word [esp + 0xcc], 0x93
test al, 1
jne 0x100b2971
mov bl, al
lea eax, [esp + 0x48]
or bl, 1
push 0x99
push eax
mov ecx, 0x10196c90
mov byte [0x10196c8c], bl
call fcn.100b6210
push 0x100b93f0
call fcn.1013c36b
add esp, 4
mov ecx, dword [0x10196c90]
lea edx, [esp + 0x100]
push ecx
push edx
call fcn.100bb780
mov al, byte [0x1018caf1]
add esp, 8
mov byte [esp + 0xf6], al
mov al, byte [0x10196c94]
mov ebx, 0xc
mov ebp, 0x3a
mov esi, 0x5b
mov word [esp + 0x2c], bx
test al, 1
mov word [esp + 0x2e], 0x13
mov word [esp + 0x30], 0x7c
mov word [esp + 0x32], 0x3b
mov word [esp + 0x34], 7
mov word [esp + 0x36], 0x1d
mov word [esp + 0x38], 6
mov word [esp + 0x3a], bp
mov word [esp + 0x3c], 0x2f
mov word [esp + 0x3e], bx
mov word [esp + 0x40], 8
mov word [esp + 0x42], si
mov word [esp + 0x44], 0x34
jne 0x100b2a22
lea ecx, [esp + 0x2c]
or al, 1
push ecx
mov ecx, 0x10196c98
mov byte [0x10196c94], al
call fcn.10043bf0
push 0x100b9410
call fcn.1013c36b
add esp, 4
mov al, byte [0x10196c9c]
mov edi, 0x10
test al, 1
mov word [esp + 0x10], di
mov word [esp + 0x12], 0x1c
mov word [esp + 0x14], 0x6f
mov word [esp + 0x16], 0x3b
mov word [esp + 0x18], 7
mov word [esp + 0x1a], 0x1d
mov word [esp + 0x1c], 6
mov word [esp + 0x1e], bp
mov word [esp + 0x20], 0x2f
mov word [esp + 0x22], bx
mov word [esp + 0x24], 8
mov word [esp + 0x26], si
jne 0x100b2a9f
lea edx, [esp + 0x10]
or al, 1
push edx
mov ecx, 0x10196ca0
mov byte [0x10196c9c], al
call fcn.10043dc0
push 0x100b9400
call fcn.1013c36b
add esp, 4
mov eax, dword [0x10196ca0]
lea ecx, [esp + 0x100]
push eax
push ecx
call fcn.100bb780
mov edx, dword [esp + 0x1c0]
mov esi, eax
add esp, 8
mov eax, dword [edx + 4]
test eax, eax
jne 0x100b2aca
mov eax, 0x1016a1d8
push eax
push esi
call fcn.100bb780
mov eax, dword [0x10196c98]
push eax
push esi
call fcn.100bb780
mov eax, 0xd
mov word [esp + 0x58], di
mov word [esp + 0x6a], ax
mov word [esp + 0x70], ax
mov eax, 0x6b
mov edi, 0x1e
mov esi, 0x31
mov word [esp + 0x78], ax
mov word [esp + 0x7e], ax
mov al, byte [0x10196ca4]
mov word [esp + 0x60], di
mov word [esp + 0x66], si
mov word [esp + 0x6c], bx
mov word [esp + 0x8a], di
mov word [esp + 0x90], si
add esp, 0x10
mov ebp, 0x27
mov edx, 0x2b
mov ebx, 9
mov ecx, 0x59
mov esi, 0xd
mov edi, 0x34
test al, 1
mov word [esp + 0x4a], 0x1c
mov word [esp + 0x4c], 0x75
mov word [esp + 0x4e], bp
mov word [esp + 0x52], 5
mov word [esp + 0x54], 1
mov word [esp + 0x58], dx
mov word [esp + 0x5e], 0xb
mov word [esp + 0x62], 7
mov word [esp + 0x64], bx
mov word [esp + 0x66], cx
mov word [esp + 0x6a], 1
mov word [esp + 0x6c], 0x12
mov word [esp + 0x70], 0x15
mov word [esp + 0x72], 4
mov word [esp + 0x74], 0x13
mov word [esp + 0x76], 0x66
mov word [esp + 0x78], bp
mov word [esp + 0x7c], 5
mov word [esp + 0x7e], 1
mov word [esp + 0x82], dx
mov word [esp + 0x84], si
mov word [esp + 0x86], 0xc
mov word [esp + 0x88], 0xb
mov word [esp + 0x8a], si
mov word [esp + 0x8c], 7
mov word [esp + 0x8e], bx
mov word [esp + 0x90], cx
mov word [esp + 0x92], di
jne 0x100b2c43
mov bl, al
lea ecx, [esp + 0x48]
or bl, 1
push ecx
mov ecx, 0x10196ca8
mov byte [0x10196ca4], bl
call fcn.100b6290
push 0x100b9420
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10196ca8]
lea eax, [esp + 0x100]
push edx
push eax
call fcn.100bb780
mov al, byte [0x10196cac]
add esp, 8
test al, 1
mov byte [0x1018caf2], 0x2d
mov word [esp + 0x2c], 0x12
mov word [esp + 0x2e], si
mov word [esp + 0x30], 0x11
mov word [esp + 0x32], di
jne 0x100b2ca9
mov bl, al
lea ecx, [esp + 0x2c]
or bl, 1
push ecx
mov ecx, 0x10196cb0
mov byte [0x10196cac], bl
call fcn.1002aa30
push 0x100b9440
call fcn.1013c36b
add esp, 4
mov eax, 0xef
mov ecx, 0xee
mov word [esp + 0x18], ax
mov word [esp + 0x22], ax
mov al, byte [0x10196d54]
mov edx, 0xf8
test al, 1
mov word [esp + 0x10], 0xe6
mov word [esp + 0x12], cx
mov word [esp + 0x14], dx
mov word [esp + 0x16], 0xfc
mov word [esp + 0x1a], 0xfe
mov word [esp + 0x1c], 0xf5
mov word [esp + 0x1e], 0xc9
mov word [esp + 0x20], dx
mov word [esp + 0x24], 0xf0
mov word [esp + 0x26], cx
mov word [esp + 0x28], 0xe0
jne 0x100b2d3c
mov bl, al
lea edx, [esp + 0x10]
or bl, 1
push 0x9d
push edx
mov ecx, 0x10196d58
mov byte [0x10196d54], bl
call fcn.10044220
push 0x100b7ab0
call fcn.1013c36b
add esp, 4
mov eax, 0xde
mov edi, 0x8a
mov word [esp + 0x54], ax
mov word [esp + 0x60], ax
mov word [esp + 0x66], ax
mov word [esp + 0x6c], ax
mov word [esp + 0x76], ax
mov word [esp + 0x82], ax
mov al, byte [0x10196cb4]
mov esi, 0xc6
mov ecx, 0xcf
mov ebp, 0x97
mov edx, 0x88
mov ebx, 0xc7
test al, 1
mov word [esp + 0x48], di
mov word [esp + 0x4a], 0x96
mov word [esp + 0x4c], 0xff
mov word [esp + 0x4e], 0xd8
mov word [esp + 0x50], si
mov word [esp + 0x52], di
mov word [esp + 0x56], 0xd3
mov word [esp + 0x58], 0xda
mov word [esp + 0x5a], cx
mov word [esp + 0x5c], bp
mov word [esp + 0x5e], dx
mov word [esp + 0x62], cx
mov word [esp + 0x64], 0xd2
mov word [esp + 0x68], 0x85
mov word [esp + 0x6a], 0xc2
mov word [esp + 0x6e], bx
mov word [esp + 0x70], si
mov word [esp + 0x72], dx
mov word [esp + 0x74], di
mov word [esp + 0x78], cx
mov word [esp + 0x7a], bx
mov word [esp + 0x7c], 0xda
mov word [esp + 0x7e], si
mov word [esp + 0x80], 0xcb
mov word [esp + 0x84], cx
mov word [esp + 0x86], bp
mov word [esp + 0x88], dx
jne 0x100b2e9a
mov bl, al
push 0x44
or bl, 1
mov byte [0x10196cb4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10196cb8], eax
xor esi, esi
mov di, word [esp + esi + 0x48]
push 0xaa
mov eax, edi
mov ecx, 0x10196cb8
and eax, 0xffff
push eax
call fcn.100a8ee0
mov ecx, dword [0x10196cb8]
add eax, 0xaa
xor eax, edi
mov word [esi + ecx], ax
add esi, 2
cmp esi, 0x42
jb 0x100b2e4c
mov edx, dword [0x10196cb8]
push 0x100b9430
mov word [edx + 0x42], 0
call fcn.1013c36b
add esp, 4
mov eax, dword [0x10196cb8]
lea ecx, [esp + 0x100]
push eax
push ecx
call fcn.100bb780
mov edx, dword [esp + 0x1bc]
mov esi, eax
add esp, 8
mov eax, dword [edx + 4]
test eax, eax
jne 0x100b2ec5
mov eax, 0x1016a1d8
push eax
push esi
call fcn.100bb780
mov eax, dword [0x10196cb0]
mov ecx, dword [0x10196d58]
add esp, 8
push eax
push ecx
push esi
call fcn.100bb780
add esp, 8
push eax
call fcn.100bb780
mov al, byte [0x1018caf1]
mov bl, byte [esp + 0xfe]
inc al
mov byte [0x1018caf1], al
sub al, bl
push eax
call fcn.100b7920
mov byte [0x1018caf2], al
mov eax, 0x13
mov word [esp + 0xde], ax
mov word [esp + 0xe6], ax
mov al, byte [0x10196cbc]
add esp, 0xc
test al, 1
mov word [esp + 0xd0], 0xc
mov word [esp + 0xd4], 0x7c
mov word [esp + 0xd6], 0x36
mov word [esp + 0xd8], 4
mov word [esp + 0xdc], 0x11
mov word [esp + 0xde], 0xb
mov word [esp + 0xe0], 0x38
mov word [esp + 0xe2], 0x3c
mov word [esp + 0xe4], 0x19
mov word [esp + 0xe6], 0x12
mov word [esp + 0xe8], 0xe
mov word [esp + 0xea], 7
mov word [esp + 0xec], 0x50
mov word [esp + 0xee], 0x34
jne 0x100b3029
mov bl, al
push 0x22
or bl, 1
mov byte [0x10196cbc], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10196cc0], eax
mov edi, 0x30
xor esi, esi
mov bp, word [esp + esi + 0xd0]
push edi
mov edx, ebp
mov ecx, 0x10196cc0
and edx, 0xffff
push edx
call fcn.1004a650
mov ecx, dword [0x10196cc0]
xor eax, ebp
xor eax, edi
xor edi, edi
mov word [esi + ecx], ax
mov eax, dword [0x10196cc0]
mov di, word [esi + eax]
add esi, 2
cmp esi, 0x20
jb 0x100b2fd9
push 0x100b9450
mov word [eax + 0x20], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10196cc0]
lea eax, [esp + 0x100]
push edx
push eax
call fcn.100bb780
mov edx, dword [esp + 0x108]
lea ecx, [esp + 0x160]
mov byte [esp + 0x1b0], 4
add esp, 8
mov eax, dword [edx + 4]
mov dword [esp + 0xf0], ecx
mov dword [esp + eax + 0x100], 0x1016aa10
lea ecx, [esp + 0x104]
mov byte [esp + 0x1a8], 0xd
mov dword [esp + 0x2c], ecx
mov dword [esp + method.std::basic_filebuf_unsigned_short_int__struct_std::char_traits_unsigned_short_int__.virtual_0], vtable.std::basic_filebuf_unsigned_short_int__struct_std::char_traits_unsigned_short_int__.0
mov al, byte [esp + 0x14c]
mov byte [esp + 0x1a8], 0x10
test al, al
je 0x100b30a8
lea ecx, [esp + 0x104]
call fcn.100b9bb0
mov ecx, dword [esp + 0x148]
test ecx, ecx
je 0x100b30ba
push 1
call fcn.100316c0
lea ecx, [esp + 0x150]
mov byte [esp + 0x1a8], 0xf
call fcn.100242f0
lea ecx, [esp + 0x104]
mov byte [esp + 0x1a8], 0xd
call fcn.100b5c20
mov edx, dword [esp + 0x100]
mov byte [esp + 0x1a8], 4
lea ecx, [esp + 0x158]
mov eax, dword [edx + 4]
mov dword [esp + 0x2c], ecx
mov dword [esp + eax + 0x100], vtable.std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int__.0
mov dword [esp + method.std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__.virtual_0], vtable.std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__.0
lea ecx, [esp + 0x158]
mov byte [esp + 0x1a8], 4
call fcn.10133022
mov ecx, dword [esp + 0x190]
mov dword [esp + 0x1a8], 0xffffffff
test ecx, ecx
je 0x100b315d
mov al, byte [ecx - 1]
test al, al
je 0x100b3151
cmp al, 0xff
je 0x100b3151
dec al
mov byte [ecx - 1], al
jmp 0x100b315d
add ecx, 0xfffffffe
push ecx
call fcn.101307a0
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x1a0]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x19c
ret