Function at 0x101b80c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x200
mov eax, dword [ebp + 8]
xor ecx, ecx
mov edx, dword [0x1020a52c]
add edx, 0x314d
mov dword [0x1020a52c], edx
mov edx, ecx
mov esi, ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x19c], ecx
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x194]
mov edx, dword [ebp - 0x198]
lea esi, sym.UEM0__Ordinal_1048721
mov edi, edx
or edi, 1
mov ebx, edx
add ebx, 2
mov dword [ebp - 0x1a0], eax
imul eax, edx, 0xf4
mov dword [ebp - 0x1a4], eax
mov eax, esi
mov dword [ebp - 0x1a8], ecx
mov ecx, dword [ebp - 0x1a4]
add eax, ecx
add eax, 0xee
imul ecx, edx, 0xf4
mov edx, esi
add edx, ecx
add edx, 0xf0
imul ecx, edi, 0xf4
mov dword [ebp - 0x1ac], eax
mov eax, esi
add eax, ecx
add eax, 0xf0
mov ecx, dword [edx]
mov eax, dword [eax]
imul edx, edi, 0xf4
add esi, edx
add esi, 0xee
mov edx, dword [ebp - 0x1ac]
mov di, word [edx]
mov si, word [esi]
movzx edx, di
movzx esi, si
xor edx, ecx
xor esi, eax
mov eax, dword [ebp - 0x1a8]
add edx, eax
mov eax, dword [ebp - 0x1a0]
add esi, eax
cmp ebx, 0x4be
mov eax, edx
mov ecx, esi
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1b4], edx
jne 0x101b80ff
mov eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x1b0]
mov dl, 0x6b
xor esi, esi
lea edi, [ebp - 0x18c]
lea ebx, [ebp - 0x4c]
mov dword [ebp - 0x1b8], eax
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1b8]
add ecx, eax
mov byte [ebp - 0x18c], 0x56
mov byte [ebp - 0x18b], 0x69
mov byte [ebp - 0x18a], 0x72
mov byte [ebp - 0x189], 0x74
mov byte [ebp - 0x188], 0x75
mov byte [ebp - 0x187], 0x61
mov byte [ebp - 0x186], 0x6c
mov byte [ebp - 0x185], 0x41
mov byte [ebp - 0x184], 0x6c
mov byte [ebp - 0x183], 0x6c
mov byte [ebp - 0x182], 0x6f
mov byte [ebp - 0x181], 0x63
mov byte [ebp - 0x180], 0
mov byte [ebp - 0x17f], 0xc9
mov dword [0x1020a52c], 0x1938
mov byte [ebp - 0x16c], 0x6b
mov byte [ebp - 0x16b], 0x65
mov byte [ebp - 0x16a], 0x72
mov byte [ebp - 0x169], 0x6e
mov byte [ebp - 0x168], 0x65
mov byte [ebp - 0x167], 0x6c
mov byte [ebp - 0x166], 0x33
mov byte [ebp - 0x165], 0x32
mov byte [ebp - 0x164], 0x2e
mov byte [ebp - 0x163], 0x64
mov byte [ebp - 0x162], 0x6c
mov byte [ebp - 0x161], 0x6c
mov byte [ebp - 0x160], 0
mov byte [ebp - 0x15f], 0xc9
mov dword [0x1020a530], 0x14f9
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x1c4], edi
mov dword [ebp - 0x1c8], ebx
mov byte [ebp - 0x1c9], dl
mov dword [ebp - 0x1d0], esi
mov eax, dword [ebp - 0x1d0]
mov cl, byte [ebp - 0x1c9]
mov edx, eax
inc edx
movsx esi, cl
mov di, si
mov word [ebp + eax*2 - 0x4c], di
mov cl, byte [ebp + eax - 0x16b]
cmp cl, 0
mov byte [ebp - 0x1c9], cl
mov dword [ebp - 0x1d0], edx
jne 0x101b8302
xor eax, eax
lea ecx, [ebp - 0x4c]
mov dword [0x1020a52c], 0x90
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x1d4], eax
call fcn.101b9360
mov dword [esp], eax
mov eax, dword [ebp - 0x1c4]
mov dword [esp + 4], eax
call fcn.101b7e90
mov ecx, eax
mov dword [0x1020a548], eax
mov eax, esp
mov edx, dword [ebp - 0x1c0]
mov dword [eax + 4], edx
mov dword [eax + 0xc], 4
mov dword [eax + 8], 0x1000
mov dword [eax], 0
call ecx
sub esp, 0x10
xor ecx, ecx
mov dword [0x1020a52c], 0xf9
mov edx, ecx
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1e0], ecx
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x1dc]
lea edx, sym.UEM0__Ordinal_1048721
imul esi, ecx, 0xf4
mov edi, edx
add edi, esi
add edi, 0xee
imul esi, ecx, 0xf4
mov ebx, edx
add ebx, esi
add ebx, 0xf0
imul esi, ecx, 0xf4
add edx, esi
add edx, 0xdc
mov esi, dword [ebp - 0x1d8]
add esi, eax
add ecx, 1
mov ebx, dword [ebx]
mov edx, dword [edx]
movzx edi, word [edi]
xor edi, ebx
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e8], edi
mov dword [ebp - 0x1ec], ecx
call fcn.101b95f0
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e4]
add eax, ecx
mov edx, dword [ebp - 0x1ec]
cmp edx, 0x4be
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1e0], eax
jne 0x101b83b6
lea eax, [0x101bff5c]
mov ecx, 0x20
lea edx, [ebp - 0x14c]
mov esi, dword [ebp - 0x1d8]
add esi, 0xf359
mov dword [0x1020a52c], 0x1503
mov edi, dword [ebp - 0x1d8]
add edi, 0x1d9f1
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
mov dword [ebp - 0x1f0], edi
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x1f8], edx
mov dword [ebp - 0x1fc], esi
call fcn.101b9100
mov eax, dword [ebp - 0x1f8]
mov dword [esp], eax
mov ecx, dword [ebp - 0x1d8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [ebp - 0x1c0]
mov dword [esp + 0xc], edx
call fcn.101b9830
xor eax, eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x1f0]
mov dword [ecx], edx
mov dword [ecx + 4], 0x165800
mov edx, dword [ebp - 0x1fc]
mov dword [ecx + 8], edx
mov edx, dword [0x1020a52c]
add edx, 0xffffddba
mov dword [0x1020a52c], edx
mov dword [ecx + 0xc], 0x20c0
add esp, 0x200
pop esi
pop edi
pop ebx
pop ebp
ret