Function at 0x1000bbf0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x504
push ebx
push ebp
push esi
push edi
push 0x42
lea eax, [esp + 0x94]
mov dword [esp + 0x8c], ecx
push 0
push eax
mov dword [esp + 0x24], 0
call fcn.1000d390
add esp, 0xc
mov edx, 0x14
push 0x18b6
push 0xe81c6e52
lea ecx, [edx - 8]
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0x90]
push ecx
push 0
lea ecx, [esp + 0x20]
push ecx
call eax
test eax, eax
jne 0x1000c28e
mov esi, dword [esp + 0x18]
lea edx, [eax + 0x66]
push 0xe282
push 0x47352
lea ecx, [eax + 0xc]
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0x88]
push 0
push 0
push 0
push 0
push ecx
push 1
push esi
call eax
test eax, eax
jne 0x1000c28e
mov esi, dword [esp + 0x18]
lea ecx, [eax + 0xc]
push 0xf31e
mov ebp, 1
mov dword [esp + 0x80], eax
push 0x93667452
mov edx, ebp
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0x7c]
push ecx
push 0
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push esi
call eax
cmp eax, 0xea
jne 0x1000c26e
mov eax, dword [esp + 0x20]
test eax, eax
je 0x1000c26e
xor ecx, ecx
mov edx, 0x29c
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1000b130
mov esi, dword [esp + 0x1c]
mov ebx, eax
add esp, 4
mov dword [esp + 0x2c], ebx
test ebx, ebx
je 0x1000c272
mov eax, dword [esp + 0x20]
lea ecx, [ebp + 0xb]
push 0xf31e
push 0x93667452
mov edx, ebp
mov dword [esp + 0x2c], eax
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0x7c]
push ecx
push ebx
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push esi
call eax
test eax, eax
jne 0x1000c29b
cmp dword [esp + 0x20], eax
je 0x1000c29b
mov eax, dword fs:[0x18]
lea edi, [ebp + 0x7e]
mov ebx, dword [eax + 0x20]
mov byte [esp + 0x61], 0x67
mov byte [esp + 0x62], 0x5f
mov byte [esp + 0x63], 0x13
mov byte [esp + 0x64], 0x5f
mov byte [esp + 0x65], 0x29
mov byte [esp + 0x66], 0x5f
mov byte [esp + 0x67], 0x34
mov byte [esp + 0x68], 0x5f
mov byte [esp + 0x69], 0xc
mov byte [esp + 0x6a], 0x5f
mov byte [esp + 0x6b], 0x63
mov byte [esp + 0x6c], 0x5f
mov byte [esp + 0x6d], 0x67
mov byte [esp + 0x6e], 0x5f
mov byte [esp + 0x6f], 0x63
mov byte [esp + 0x70], 0x5f
mov byte [esp + 0x71], 0x20
mov byte [esp + 0x72], 0x5f
mov byte [esp + 0x73], 0x67
mov byte [esp + 0x74], 0x5f
mov byte [esp + 0x75], 0x13
mov byte [esp + 0x76], 0x5f
mov byte [esp + 0x77], 0x67
mov byte [esp + 0x78], 0x5f
mov byte [esp + 0x79], 0x5f
mov byte [esp + 0x7a], 0x5f
mov al, byte [esp + 0x61]
mov byte [esp + 0x7b], 0
cmp byte [esp + 0x7b], 0
mov dword [esp + 0x80], ebx
jne 0x1000be24
xor esi, esi
nop dword [eax]
mov al, byte [esp + esi + 0x61]
mov ecx, 0x5f
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x23
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [esp + esi + 0x61], dl
inc esi
cmp esi, 0x1a
jb 0x1000be00
push 0x22c
lea eax, [esp + 0xdc]
push 0
push eax
call fcn.1000d390
add esp, 0xc
mov edx, 0x86
mov ecx, ebp
push 0xe42a
push 0xaabf7443
call fcn.100027f0
add esp, 8
push 0
push 2
call eax
mov esi, eax
cmp esi, 0xffffffff
jne 0x1000be68
xor edi, edi
jmp 0x1000bf1e
push 0x8410
mov dword [esp + 0xdc], 0x22c
mov edx, 0x67
push 0xbff25750
mov ecx, ebp
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0xd8]
push ecx
push esi
call eax
mov ecx, ebp
test eax, eax
jne 0x1000bec0
push 0x8f51
push 0xcec26543
lea edx, [eax + 0x5a]
call fcn.100027f0
add esp, 8
push esi
call eax
xor edi, edi
jmp 0x1000bf1e
push 0xa304
push 0x12fc576c
mov edx, 0x77
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0xfc]
push ecx
lea ecx, [esp + 0x65]
push ecx
call eax
mov ecx, ebp
test eax, eax
je 0x1000befd
push 0xca8a
push 0xa2dc5750
mov edx, 0x84
jmp 0x1000be84
push 0x8f51
push 0xcec26543
mov edx, 0x5a
call fcn.100027f0
add esp, 8
push esi
call eax
mov edi, dword [esp + 0xe0]
push 0x208
lea eax, [esp + 0x30c]
mov dword [esp + 0x2c], edi
push 0
push eax
call fcn.1000d390
add esp, 0xc
mov byte [esp + 0x17], 0
mov ecx, ebx
call fcn.1000bb40
mov esi, eax
test esi, esi
je 0x1000bf6d
push 0x102
push esi
lea eax, [esp + 0x310]
mov byte [esp + 0x1f], 1
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push esi
call fcn.1000b150
add esp, 4
mov eax, dword [esp + 0x24]
xor ebx, ebx
xor esi, esi
mov dword [esp + 0x84], ebx
test eax, eax
je 0x1000c1ff
mov ebp, dword [esp + 0x2c]
mov edx, dword [esp + 0x80]
nop
mov ecx, dword [ebp]
cmp ecx, edx
je 0x1000c262
cmp ecx, edi
je 0x1000c262
cmp esi, ecx
je 0x1000c1e9
mov esi, ecx
mov dword [esp + 0x8c], esi
call fcn.1000bb40
mov edi, eax
test edi, edi
je 0x1000c1da
mov byte [esp + 0x33], 0x59
mov ebx, 0x7f
mov byte [esp + 0x34], 0x50
mov byte [esp + 0x35], 0x18
mov byte [esp + 0x36], 0x50
mov byte [esp + 0x37], 0x35
mov byte [esp + 0x38], 0x50
mov byte [esp + 0x39], 0x58
mov byte [esp + 0x3a], 0x50
mov byte [esp + 0x3b], 0x12
mov byte [esp + 0x3c], 0x50
mov byte [esp + 0x3d], 0x5f
mov byte [esp + 0x3e], 0x50
mov byte [esp + 0x3f], 0x18
mov byte [esp + 0x40], 0x50
mov byte [esp + 0x41], 0x7b
mov byte [esp + 0x42], 0x50
mov byte [esp + 0x43], 0x59
mov byte [esp + 0x44], 0x50
mov byte [esp + 0x45], 0x50
mov byte [esp + 0x46], 0x50
mov al, byte [esp + 0x33]
mov byte [esp + 0x47], 0
cmp byte [esp + 0x47], 0
jne 0x1000c066
xor esi, esi
nop
mov al, byte [esp + esi + 0x33]
mov ecx, 0x50
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*8]
add eax, eax
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [esp + esi + 0x33], dl
inc esi
cmp esi, 0x14
jb 0x1000c040
mov edx, 0x1c
push 0x45eb
push 0xc8a95753
lea ecx, [edx - 0x12]
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0x33]
push ecx
push edi
call eax
mov byte [esp + 0x48], 0x21
test eax, eax
mov byte [esp + 0x49], 0x75
mov byte [esp + 0x4a], 0x36
setne byte [esp + 0x1f]
mov byte [esp + 0x4b], 0x75
mov byte [esp + 0x4c], 0x30
mov byte [esp + 0x4d], 0x75
mov byte [esp + 0x4e], 0x53
mov byte [esp + 0x4f], 0x75
mov byte [esp + 0x50], 5
mov byte [esp + 0x51], 0x75
mov byte [esp + 0x52], 0x21
mov byte [esp + 0x53], 0x75
mov byte [esp + 0x54], 0x28
mov byte [esp + 0x55], 0x75
mov byte [esp + 0x56], 0x3a
mov byte [esp + 0x57], 0x75
mov byte [esp + 0x58], 0x3e
mov byte [esp + 0x59], 0x75
mov byte [esp + 0x5a], 0x44
mov byte [esp + 0x5b], 0x75
mov byte [esp + 0x5c], 0x3e
mov byte [esp + 0x5d], 0x75
mov byte [esp + 0x5e], 0x75
mov byte [esp + 0x5f], 0x75
mov al, byte [esp + 0x48]
mov byte [esp + 0x60], 0
cmp byte [esp + 0x60], 0
jne 0x1000c146
xor esi, esi
nop dword [eax]
mov al, byte [esp + esi + 0x48]
mov ecx, 0x75
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*8]
add eax, eax
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [esp + esi + 0x48], dl
inc esi
cmp esi, 0x18
jb 0x1000c120
mov edx, 0x1c
push 0x45eb
push 0xc8a95753
lea ecx, [edx - 0x12]
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0x48]
push ecx
push edi
call eax
test eax, eax
setne byte [esp + 0x1e]
xor bl, bl
cmp byte [esp + 0x17], 1
jne 0x1000c1a9
push 0xa304
mov esi, 1
mov edx, 0x77
push 0x12fc576c
mov ecx, esi
call fcn.100027f0
add esp, 8
lea ecx, [esp + 0x308]
push edi
push ecx
call eax
test eax, eax
movzx ebx, bl
cmove ebx, esi
push edi
call fcn.1000b150
add esp, 4
cmp byte [esp + 0x1e], 0
jne 0x1000c1ff
cmp byte [esp + 0x1f], 0
jne 0x1000c262
test bl, bl
jne 0x1000c262
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0x8c]
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x80]
inc ebx
add ebp, 0x29c
mov dword [esp + 0x84], ebx
cmp ebx, eax
jb 0x1000bf90
mov esi, dword [esp + 0x18]
mov edx, 0xe
push 0xec6
push 0x869c6e52
lea ecx, [edx - 2]
call fcn.100027f0
add esp, 8
push 0
push 1
push esi
call eax
push dword [esp + 0x2c]
mov edi, eax
call fcn.1000b150
mov esi, dword [esp + 0x1c]
add esp, 4
mov edx, 0xc
mov ecx, edx
push 0x6704
push 0x685d6e52
call fcn.100027f0
add esp, 8
push esi
call eax
test edi, edi
sete al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x504
ret
push dword [esp + 0x2c]
call fcn.1000b150
add esp, 4
mov esi, dword [esp + 0x18]
mov edx, 0xc
push 0x6704
push 0x685d6e52
mov ecx, edx
call fcn.100027f0
add esp, 8
push esi
call eax
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x504
ret
push ebx
jmp 0x1000c266