Function at 0x1da90
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x60], ecx
add ebp, dword [ecx + 0x60]
mov dword [esp + 0x64], 0xe5a09e49
mov dword [esp + 0x68], 0x1ae6ddd7
mov dword [esp + 0x6c], 0xdee6ecc0
mov dword [esp + 0x70], 0xe9d91b22
mov dword [esp + 0x74], 0xc9dbdce8
mov dword [esp + 0x78], 0xf1ccc4cf
mov dword [esp + 0x7c], 0xf809ff35
mov dword [esp + 0x80], 0xc8cdc1ca
mov dword [esp + 0x84], 0x5e6460f8
mov dword [esp + 0x88], 0x535a
mov byte [esp + 0x8c], 0
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0xc]
cmp eax, 0x28
ja 0x1db4b
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xc]
movzx eax, byte [esp + eax + 0x64]
push dword [esp + 0xc]
push eax
call fcn.0001e770
add esp, 8
mov ecx, dword [esp + 0xc]
mov byte [esp + ecx + 0x64], al
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp eax, 0x29
jb 0x1db20
mov dword [esp + 4], 0x79040862
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0xc]
cmp eax, 7
ja 0x1db9b
nop
nop
nop
nop
mov eax, dword [esp + 0xc]
movzx eax, byte [esp + eax + 4]
push dword [esp + 0xc]
push eax
call fcn.0001e6e0
add esp, 8
mov ecx, dword [esp + 0xc]
mov byte [esp + ecx + 4], al
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp eax, 8
jb 0x1db70
mov dword [esp + 0xc], 0xd6ac6063
mov dword [esp + 0x10], 0xd2d62428
mov dword [esp + 0x14], 0xdde6dc23
mov dword [esp + 0x18], 0xdad1dee9
mov dword [esp + 0x1c], 0x32d9edee
mov dword [esp + 0x20], 0xf427696f
mov dword [esp + 0x24], 0xc7c1f3ca
mov dword [esp + 0x28], 0xc62e04fc
mov dword [esp + 0x2c], 0xc4fffff9
mov dword [esp + 0x30], 0xc4f9c7fb
mov dword [esp + 0x34], 0xff360dfa
mov dword [esp + 0x38], 0x32f5c9c9
mov dword [esp + 0x3c], 0xe2cafcf8
mov dword [esp + 0x40], 0xe6ec231d
mov dword [esp + 0x44], 0x2b19e0eb
mov dword [esp + 0x48], 0xeae6e0ee
mov dword [esp + 0x4c], 0x172e122e
mov dword [esp + 0x50], 0x1b151f1b
mov dword [esp + 0x54], 0xe6111817
mov word [esp + 0x58], 0xbbda
mov byte [esp + 0x5e], 0
mov dword [esp + 0x5a], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x52
ja 0x1dc86
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0xc]
push dword [esp]
push eax
call fcn.0001e640
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x53
jb 0x1dc60
mov eax, dword [esp + 0xa8]
movzx ecx, byte [esp + 0xc]
mov ebx, ebp
test cl, cl
je 0x1dcab
lea edx, [esp + 0xd]
mov ebx, ebp
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x1dca0
mov byte [ebx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x1dccb
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x1dcc0
mov byte [ebx], 0
movzx eax, byte [esp + 4]
test al, al
je 0x1dceb
lea ecx, [esp + 5]
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x1dce0
mov esi, dword [esp + 0xac]
mov byte [ebx], 0
movzx eax, byte [esp + 0x64]
test al, al
je 0x1dd1b
lea ecx, [esp + 0x65]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x1dd10
mov byte [ebx], 0
mov edx, dword [esp + 0xb0]
mov ecx, edx
shr ecx, 2
mov eax, esi
mov edi, ebx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov ecx, esi
mov esi, edx
and esi, 0xfffffffc
lea eax, [ebx + esi]
add esi, ecx
mov ecx, edx
shr ecx, 1
and ecx, 1
mov edx, esi
mov edi, eax
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov ecx, dword [esp + 0xb0]
test cl, 1
je 0x1dd66
and ecx, 2
movzx edx, byte [esi + ecx]
mov byte [eax + ecx], dl
mov dword [esp + 0xc], 0x9ea18583
mov dword [esp + 0x10], 0x626a5452
mov dword [esp + 0x14], 0x52615050
mov dword [esp + 0x18], 0x582b5f28
mov dword [esp + 0x1c], 0x332c5857
mov dword [esp + 0x20], 0xafad7047
mov dword [esp + 0x24], 0xa6adab
mov dword [esp + 0x64], 0
mov eax, dword [esp + 0x64]
cmp eax, 0x1b
ja 0x1dddb
nop
mov eax, dword [esp + 0x64]
movzx eax, byte [esp + eax + 0xc]
push dword [esp + 0x64]
push eax
call fcn.0001e7d0
add esp, 8
mov ecx, dword [esp + 0x64]
mov byte [esp + ecx + 0xc], al
inc dword [esp + 0x64]
mov eax, dword [esp + 0x64]
cmp eax, 0x1c
jb 0x1ddb0
add ebx, dword [esp + 0xb0]
movzx eax, byte [esp + 0xc]
test al, al
je 0x1ddfb
lea ecx, [esp + 0xd]
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x1ddf0
mov byte [ebx], 0
mov eax, ebx
xor eax, ebp
not ebp
and ebp, ebx
add ebp, ebp
sub ebp, eax
mov eax, dword [esp + 0x60]
add dword [eax + 0x60], ebp
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret 0x10