Function at 0x1000988e
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x60
mov ebp, dword [esp + 0x90]
mov edi, dword [esp + 0x7c]
mov ebx, 0xf030
push ebx
call fcn.1008fed9
add esp, 4
mov dword [esp + 0x18], eax
xor esi, esi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
push ebx
push esi
push dword [esp + 0x20]
call fcn.10090dd0
add esp, 0xc
push 0xffffff
call fcn.1004f4fc
add esp, 4
mov ecx, dword [esp + 0x1c]
cmp dword [esp + 0x74], 0
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x34]
mov dword [ecx], eax
mov ecx, 0xd023f7e
mov eax, dword [esp + 0x14]
mov dword [eax + 4], edi
mov edi, 0x3e5a3e51
mov eax, dword [esp + 0x14]
mov dword [eax + 0xc], esi
mov eax, 0x67e058c2
cmove ecx, eax
cmp dword [esp + 0x88], 1
mov eax, 0x22755985
mov dword [esp + 0x4c], ecx
mov ecx, 0x6501b8e2
cmove edi, eax
cmp dword [esp + 0x78], 0
mov eax, 0x42c0403a
cmove ecx, eax
lea eax, [ebp + 0x20]
mov dword [esp + 0x44], eax
mov eax, 0xf8505b07
mov dword [esp + 0x48], ecx
mov ecx, eax
cmp eax, 0x161bdc47
jle 0x100099b1
cmp ecx, 0x521ec952
jg 0x10009a18
cmp ecx, 0x3e5a3e50
jle 0x10009a8a
cmp ecx, 0x439568bc
jg 0x10009b92
cmp ecx, 0x3e5a3e51
je 0x10009bb1
cmp ecx, 0x42c0403a
mov eax, ecx
jne 0x10009948
mov eax, dword [esp + 0x1c]
xor ecx, ecx
mov ebx, 2
add eax, 0x10
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov byte [eax], cl
mov eax, dword [esp + 0x2c]
mov byte [eax + 1], cl
mov eax, 0xf7d0aced
jmp 0x10009948
cmp ecx, 0xed466938
jg 0x10009a4f
cmp ecx, 0xc63538dc
jg 0x10009ad8
cmp ecx, 0x820dabcc
mov eax, edi
je 0x10009948
cmp ecx, 0x8ce6783f
je 0x10009bf2
cmp ecx, 0xb9c3620e
mov eax, ecx
jne 0x10009948
push 0xff
call fcn.1004f4fc
add esp, 4
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov byte [ecx + edx], al
mov eax, 0xf7d0aced
mov ebx, dword [esp + 0x30]
inc ebx
jmp 0x10009948
cmp ecx, 0x6501b8e1
jg 0x10009b1e
cmp ecx, 0x521ec953
je 0x10009c09
cmp ecx, 0x5504b4d5
je 0x10009c2f
cmp ecx, 0x5a32470a
mov eax, ecx
jne 0x10009948
jmp 0x10009c46
cmp ecx, 0xfe99d04d
jg 0x10009b67
cmp ecx, 0xed466939
je 0x10009c39
cmp ecx, 0xf7d0aced
je 0x10009c50
cmp ecx, 0xf8505b07
mov eax, ecx
jne 0x10009948
mov eax, dword [esp + 0x48]
jmp 0x10009948
cmp ecx, 0x161bdc48
je 0x10009c6d
cmp ecx, 0x22755985
je 0x10009c83
cmp ecx, 0x35307c60
mov eax, ecx
jne 0x10009948
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x8c]
mov al, byte [ecx + eax]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
mov byte [ecx + edx], al
mov eax, 0xc63538dd
mov esi, dword [esp + 0x24]
inc esi
jmp 0x10009948
cmp ecx, 0xc63538dd
je 0x10009cd7
cmp ecx, 0xd068ea94
je 0x10009cf8
cmp ecx, 0xda838b39
mov eax, ecx
jne 0x10009948
mov dword [esp + 0x28], ebp
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
cmp ecx, dword [eax]
mov eax, 0xed466939
mov ecx, 0x521ec953
cmovl eax, ecx
jmp 0x10009948
cmp ecx, 0x6501b8e2
je 0x10009d67
cmp ecx, 0x67e058c2
je 0x10009db0
cmp ecx, 0x7ec2a88f
mov eax, ecx
jne 0x10009948
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
push dword [eax]
push dword [esp + 0x24]
call fcn.100051d0
mov eax, 0x5504b4d5
jmp 0x10009948
cmp ecx, 0xfe99d04e
je 0x10009db6
cmp ecx, 0xd023f7e
je 0x10009e0c
cmp ecx, 0x1230dc20
mov eax, ecx
jne 0x10009948
jmp 0x1000a03b
cmp ecx, 0x4a5b281d
je 0x10009e33
cmp ecx, 0x439568bd
mov eax, ecx
jne 0x10009948
jmp 0x1000a06a
lea ebp, [esp + 0x50]
mov dword [esp + 0x3c], ebp
mov ecx, ebp
mov eax, dword [esp + 0x3c]
push 0x1000
call fcn.10004a48
push ebp
call fcn.1000a074
add esp, 4
mov dword [esp + 0x40], ebp
xor ebp, ebp
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
add eax, 0x20
mov dword [ecx + 8], eax
mov eax, 0xda838b39
jmp 0x10009948
cmp dword [esp + 0x20], 0
mov eax, 0xfe99d04e
mov ecx, 0x439568bd
cmove eax, ecx
jmp 0x10009948
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x28]
mov al, byte [eax + ecx]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x28]
mov byte [ecx + edx + 0x30], al
mov eax, 0xda838b39
mov ebp, dword [esp + 0x28]
inc ebp
jmp 0x10009948
mov eax, 0x161bdc48
jmp 0x10009948
lea ecx, [esp + 0x50]
call fcn.10004df6
mov eax, dword [esp + 0x3c]
mov eax, 0xd068ea94
jmp 0x10009948
mov dword [esp + 0x30], ebx
mov ecx, 0xb9c3620e
mov eax, dword [esp + 0x30]
cmp eax, 0x20
mov eax, 0x1230dc20
cmovl eax, ecx
jmp 0x10009948
push dword [esp + 0x18]
call fcn.1008ff09
add esp, 4
mov eax, 0x4a5b281d
jmp 0x10009948
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea eax, [esp + 0xb]
mov ecx, 0xfcaac6fa
mov dword [esp + 4], 0x706f646d
mov word [esp + 8], 0x7161
mov dword [esp], eax
lea eax, [esp + 0xa]
cmp ecx, 0xece48a4b
je 0x10009e3d
cmp ecx, 0xfcaac6fa
jne 0x10009cad
mov byte [eax], 0
inc eax
mov ecx, 0xfcaac6fa
mov edx, 0xece48a4b
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10009cad
mov dword [esp + 0x24], esi
mov ecx, 0x35307c60
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x90]
mov eax, 0x5a32470a
cmovl eax, ecx
jmp 0x10009948
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 8]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [esp + 0x84]
add ecx, 0x10
mov dword [eax], ecx
lea eax, [esp + 0x11]
mov ecx, 0x7371f918
mov dword [esp + 4], 0x77706856
mov dword [esp + 8], 0x466a6471
mov dword [esp + 0xc], 0x68656564
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0x741a295e
je 0x10009e98
cmp ecx, 0x7371f918
jne 0x10009d3d
mov byte [eax], 0
inc eax
mov ecx, 0x7371f918
mov edx, 0x741a295e
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10009d3d
lea eax, [esp + 0xb]
mov ecx, 0xfcaac6fa
mov dword [esp + 4], 0x606f646d
mov word [esp + 8], 0x7c74
mov dword [esp], eax
lea eax, [esp + 0xa]
cmp ecx, 0xece48a4b
je 0x10009ef3
cmp ecx, 0xfcaac6fa
jne 0x10009d86
mov byte [eax], 0
inc eax
mov ecx, 0xfcaac6fa
mov edx, 0xece48a4b
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10009d86
push dword [esp + 0x34]
jmp 0x10009e10
lea eax, [esp + 0x10]
mov ecx, 0x47c7a77e
mov dword [esp + 4], 0x77706856
mov dword [esp + 8], 0x416a6471
mov word [esp + 0xc], 0x6c7a
mov byte [esp + 0xe], 0x6f
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x86774c74
je 0x10009f4e
cmp ecx, 0x47c7a77e
jne 0x10009de2
mov byte [eax], 0
inc eax
mov ecx, 0x47c7a77e
mov edx, 0x86774c74
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10009de2
push dword [esp + 0x74]
push dword [esp + 0x24]
mov eax, dword [esp + 0x8c]
push dword [eax]
push dword [esp + 0x24]
call fcn.1008ecb8
add esp, 0x10
mov eax, 0x7ec2a88f
jmp 0x10009948
mov eax, 0x8ce6783f
jmp 0x10009948
xor eax, eax
mov ecx, 0x52d4eb05
cmp ecx, 0x84a55528
je 0x10009fb6
cmp ecx, 0xac4cf4e0
je 0x10009e78
cmp ecx, 0x52d4eb05
jne 0x10009e44
mov dword [esp], eax
mov edx, 0xac4cf4e0
mov ecx, dword [esp]
cmp ecx, 6
mov ecx, 0x84a55528
cmovb ecx, edx
jmp 0x10009e44
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, dword [esp]
mov dh, dl
not dh
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10009e3f
xor eax, eax
mov ecx, 0x23aa364b
cmp ecx, 0xade85fba
je 0x10009ed3
cmp ecx, 0xfdcc9849
je 0x10009feb
cmp ecx, 0x23aa364b
jne 0x10009e9f
mov dword [esp], eax
mov edx, 0xade85fba
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0xfdcc9849
cmovb ecx, edx
jmp 0x10009e9f
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, dword [esp]
mov dh, dl
not dh
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10009e9a
xor eax, eax
mov ecx, 0x52d4eb05
cmp ecx, 0x84a55528
je 0x1000a01a
cmp ecx, 0xac4cf4e0
je 0x10009f2e
cmp ecx, 0x52d4eb05
jne 0x10009efa
mov dword [esp], eax
mov edx, 0xac4cf4e0
mov ecx, dword [esp]
cmp ecx, 6
mov ecx, 0x84a55528
cmovb ecx, edx
jmp 0x10009efa
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, dword [esp]
mov dh, dl
not dh
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10009ef5
xor eax, eax
mov ecx, 0x4365cb22
cmp ecx, 0x389d28ca
je 0x10009f89
cmp ecx, 0x78c8d1d2
je 0x1000a045
cmp ecx, 0x4365cb22
jne 0x10009f55
mov dword [esp], eax
mov edx, 0x389d28ca
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x78c8d1d2
cmovb ecx, edx
jmp 0x10009f55
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, dword [esp]
mov dh, dl
and dl, 8
not dh
and dh, 0xf7
or dl, dh
mov dh, al
and al, 8
not dh
and dh, 0xf7
or al, dh
xor al, dl
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10009f50
lea ecx, [esp + 4]
mov byte [esp + 0xa], 0
call fcn.100068cd
mov ecx, dword [esp + 0x1c]
add ecx, 0x30
mov dword [esp + 0x38], ecx
push 0xf000
push 0
push dword [esp + 0x40]
call eax
add esp, 0xc
mov eax, 0xc63538dd
xor esi, esi
jmp 0x10009948
lea ecx, [esp + 4]
mov byte [esp + 0x10], 0
call fcn.100068cd
push 4
push 0x1000
mov ecx, dword [esp + 0x8c]
push dword [ecx]
push 0
call eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x4c]
jmp 0x10009948
lea ecx, [esp + 4]
mov byte [esp + 0xa], 0
call fcn.100068cd
mov ecx, dword [esp + 0x1c]
add ecx, 0x10
push 0x20
push dword [esp + 0x7c]
push ecx
call eax
add esp, 0xc
mov eax, 0x820dabcc
jmp 0x10009948
lea ecx, [esp + 4]
mov byte [esp + 0xf], 0
call fcn.100068cd
push 0x8000
push 0
push dword [esp + 0x28]
call eax
mov eax, 0x439568bd
jmp 0x10009948
xor eax, eax
add esp, 0x60
pop esi
pop edi
pop ebx
pop ebp
ret