Function at 0x1003bde0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x1320
call fcn.100f5ae0
mov eax, dword [0x101a53c4]
xor eax, esp
mov dword [esp + 0x131c], eax
push ebx
push esi
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov esi, eax
xchg ebx, eax
xchg ebx, eax
mov esi, esi
xor ebx, ebx
push 0x7fe
lea eax, [esp + 0xb2a]
push ebx
push eax
mov word [esp + 0xb30], bx
call fcn.100f5b10
add esp, 0xc
mov edx, edx
mov ecx, ecx
xchg ebx, eax
xchg ebx, eax
xchg ebx, eax
xchg ebx, eax
mov edx, dword [esp + 0x1330]
lea ecx, [esp + 0x1334]
push ecx
push edx
lea eax, [esp + 0x12c]
push eax
call fcn.100f78ab
add esp, 0xc
mov bl, bl
mov eax, eax
cmp esi, ebx
je 0x1003bf16
cmp esi, 0x459
je 0x1003bf16
mov dh, dh
push ebx
push ebx
lea ecx, [esp + 0x10]
push ecx
push 0x400
push esi
push ebx
push 0x1300
call dword [sym.imp.KERNEL32.DLL_FormatMessageA]
push ebx
pop ebx
mov byte [esp + 0x10], 0x25
mov byte [esp + 0x11], 0x73
mov byte [esp + 0x12], 0x20
mov byte [esp + 0x13], 0x3c
mov byte [esp + 0x14], 0xb4
mov byte [esp + 0x15], 0xed
mov byte [esp + 0x16], 0xce
mov byte [esp + 0x17], 0xf3
mov byte [esp + 0x18], 0xd0
mov byte [esp + 0x19], 0xc5
mov byte [esp + 0x1a], 0xcf
mov byte [esp + 0x1b], 0xa2
mov byte [esp + 0x1c], 0x20
mov byte [esp + 0x1d], 0x3d
mov byte [esp + 0x1e], 0x20
mov byte [esp + 0x1f], 0x25
mov byte [esp + 0x20], 0x73
mov byte [esp + 0x21], 0x3e
mov byte [esp + 0x22], bl
xchg ebx, eax
xchg ebx, eax
mov edx, dword [esp + 8]
push edx
lea eax, [esp + 0x128]
push eax
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x530]
push edx
call fcn.100f68f0
add esp, 0x10
mov dl, dl
mov eax, dword [esp + 8]
push eax
call dword [sym.imp.KERNEL32.DLL_LocalFree]
mov ebp, ebp
jmp 0x1003bf35
lea ecx, [esp + 0x124]
push ecx
lea edx, [esp + 0x528]
push 0x1015a700
push edx
call fcn.100f68f0
add esp, 0xc
mov al, al
mov ah, ah
mov eax, dword [esp + 0x132c]
cmp dword [eax + 0x25f8], ebx
je 0x1003c046
mov esi, dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
push pe_nt_image_headers32
lea ecx, [esp + 0xb28]
push ecx
push 0xffffffffffffffff
lea edx, [esp + 0x530]
push edx
push ebx
push ebx
call esi
mov eax, eax
mov ch, ch
mov esi, esi
mov byte [esp + 0x10], 0x3c
mov byte [esp + 0x11], 0xb4
mov byte [esp + 0x12], 0xed
mov byte [esp + 0x13], 0xce
mov byte [esp + 0x14], 0xf3
mov byte [esp + 0x15], 0x3e
mov byte [esp + 0x16], 0x20
mov byte [esp + 0x17], 0xb2
mov byte [esp + 0x18], 0xe5
mov byte [esp + 0x19], 0xbc
mov byte [esp + 0x1a], 0xfe
mov byte [esp + 0x1b], 0xb0
mov byte [esp + 0x1c], 0xe6
mov byte [esp + 0x1d], 0xb1
mov byte [esp + 0x1e], 0xbe
mov byte [esp + 0x1f], 0x3a
mov byte [esp + 0x20], 0x25
mov byte [esp + 0x21], 0x73
mov byte [esp + 0x22], bl
push edx
pop edx
mov cl, 0x32
mov al, 0x34
mov byte [esp + 8], 0x37
mov byte [esp + 9], 0x2e
mov byte [esp + 0xa], cl
mov byte [esp + 0xb], al
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], al
mov byte [esp + 0xe], bl
mov ebp, ebp
lea eax, [esp + 8]
push eax
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x2c]
push edx
call fcn.100f68f0
add esp, 0xc
mov edi, edi
push pe_nt_image_headers32
lea eax, [esp + 0x928]
push eax
push 0xffffffffffffffff
lea ecx, [esp + 0x30]
push ecx
push ebx
push ebx
call esi
push eax
pop eax
push 0x10010
lea edx, [esp + 0x928]
push edx
lea eax, [esp + 0xb2c]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ebx, ebx
mov ecx, dword [esp + 0x1324]
pop esi
pop ebx
xor ecx, esp
call fcn.100f5016
add esp, 0x1320
ret