Function at 0x10009f20
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x890
mov eax, dword [0x10084044]
xor eax, esp
mov dword [esp + 0x88c], eax
mov eax, dword [esp + 0x8a0]
lea ecx, [esp + 0x14]
mov dword [0x1008a260], eax
mov eax, dword [esp + 0x89c]
push 0
mov dword [0x1008a264], eax
mov eax, dword [esp + 0x89c]
push 0x400
mov dword [0x1008a268], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0xf
call fcn.100022c0
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x28], 0x10
lea eax, [esp + 0x14]
push esi
cmovae eax, dword [esp + 0x18]
push edi
push eax
call fcn.10007940
mov esi, dword [esp + 0x34]
lea ecx, [esp + 0x20]
mov edx, dword [esp + 0x20]
add esp, 4
cmp esi, 0x10
jb 0x10009fb4
mov ecx, edx
test ecx, ecx
je 0x10009fc8
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10009fb7
mov eax, dword [esp + 0x2c]
sub ecx, edi
cmp ecx, eax
ja 0x10009fdc
cmp esi, 0x10
mov dword [esp + 0x2c], ecx
lea eax, [esp + 0x1c]
cmovae eax, edx
mov byte [eax + ecx], 0
jmp 0x10009fea
sub ecx, eax
push 0
push ecx
lea ecx, [esp + 0x24]
call fcn.100022c0
push ebx
call fcn.10005bd0
test eax, eax
mov dword [esp + 0x38], 0
mov dword [esp + 0x48], 0
setne bl
mov dword [esp + 0x4c], 0xf
mov byte [esp + 0x1c], bl
xor bh, bh
mov edi, dword [esp + 0x1c]
xor esi, esi
nop dword [eax]
lea eax, [esp + 0x1c]
mov dword [esp + 0x50], 0
push eax
lea eax, [esp + 0x3c]
mov dword [esp + 0x64], 0
push eax
lea eax, [esp + 0x58]
mov dword [esp + 0x6c], 0xf
push eax
lea eax, [esp + 0x1b]
push eax
push edi
call fcn.100073d0
add esp, 0x14
test al, al
jne 0x1000a0a8
push 0x3e8
call fcn.1000dd20
mov edx, dword [esp + 0x68]
add esp, 4
cmp edx, 0x10
jb 0x1000a09c
mov ecx, dword [esp + 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a092
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a2d8
push edx
push ecx
call fcn.1001305c
add esp, 8
inc esi
cmp esi, 5
jl 0x1000a020
jmp 0x1000a0e4
mov edx, dword [esp + 0x64]
mov bh, 1
mov bl, byte [esp + 0xf]
cmp edx, 0x10
jb 0x1000a0e4
mov ecx, dword [esp + 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a0da
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a2d8
push edx
push ecx
call fcn.1001305c
add esp, 8
mov ecx, 0x10080910
mov word [esp + 0x92], 0x4f53
test bh, bh
mov word [esp + 0x8b], 0x7774
mov eax, 0x10071398
mov dword [esp + 0x8d], 0x5c657261
cmove eax, ecx
mov byte [esp + 0x94], 0
push eax
lea ecx, [esp + 0x6c]
mov word [esp + 0x8c], 0x6f53
mov byte [esp + 0x95], 0x53
mov byte [esp + 0x8e], 0x66
call fcn.10002170
push dword [esp + 0x78]
cmp dword [esp + 0x80], 0x10
lea eax, [esp + 0x6c]
mov dword [esp + 0x84], 0x69726863
cmovae eax, dword [esp + 0x6c]
push eax
push 1
lea eax, [esp + 0x8c]
mov dword [esp + 0x90], 0x74736e
push eax
lea eax, [esp + 0x98]
push eax
push reloc.WS2_32.dll_bind
call fcn.1000dbf0
push 0x400
lea eax, [esp + 0xb4]
mov dword [esp + 0x30], 0x343678
push 0
push eax
mov word [esp + 0x3d], 0x3233
mov byte [esp + 0x3c], 0x78
mov byte [esp + 0x3f], 0
call fcn.10015420
lea ecx, [esp + 0x3c]
mov word [esp + 0x35], 0x73
test bl, bl
mov byte [esp + 0x34], 0x25
lea eax, [esp + 0x38]
cmove eax, ecx
push eax
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0xc4]
push 0x400
push eax
call fcn.1000b550
lea eax, [esp + 0xcc]
push eax
call fcn.10007990
push 0x400
lea eax, [esp + 0x4d4]
push 0
push eax
call fcn.10015420
add esp, 0x44
lea eax, [esp + 0x38]
cmp dword [esp + 0x4c], 0x10
cmovae eax, dword [esp + 0x38]
push eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x4a0]
push 0x400
push eax
call fcn.1000b550
lea eax, [esp + 0x4a8]
push eax
call fcn.10007990
add esp, 0x14
lea ecx, [esp + 0x68]
call fcn.100026c0
mov edx, dword [esp + 0x4c]
cmp edx, 0x10
jb 0x1000a279
mov ecx, dword [esp + 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a26f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a2dd
push edx
push ecx
call fcn.1001305c
add esp, 8
mov edx, dword [esp + 0x34]
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0xf
mov byte [esp + 0x38], 0
cmp edx, 0x10
jb 0x1000a2c0
mov ecx, dword [esp + 0x20]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a2b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a2dd
push edx
push ecx
call fcn.1001305c
add esp, 8
mov ecx, dword [esp + 0x898]
pop ebx
pop edi
pop esi
xor ecx, esp
call fcn.10013577
add esp, 0x890
ret
call fcn.1001811f
call fcn.1001811f
int3