Function at 0x1000a6d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x47c
mov eax, dword [0x10084044]
xor eax, esp
mov dword [esp + 0x478], eax
mov eax, dword [esp + 0x48c]
mov dword [0x1008a260], eax
mov eax, dword [esp + 0x488]
mov dword [0x1008a264], eax
mov eax, dword [esp + 0x484]
push 0x400
mov dword [0x1008a268], eax
lea eax, [esp + 0x7c]
push 0
push eax
call fcn.10015420
lea eax, [esp + 0x84]
push eax
call fcn.10007940
lea eax, [esp + 0x88]
push eax
call fcn.1000d4a0
add esp, 0x14
test eax, eax
je 0x1000a971
push ebp
push esi
lea eax, [esp + 0x80]
push edi
push eax
call fcn.1000d530
add esp, 4
lea ecx, [esp + 0xc]
push eax
call fcn.10002170
lea eax, [esp + 0x58]
mov dword [esp + 0x58], 0x776c6853
push eax
mov word [esp + 0x64], 0x6c64
mov word [esp + 0x61], 0x6970
mov byte [esp + 0x63], 0x2e
mov word [esp + 0x66], 0x6c
mov byte [esp + 0x60], 0x61
call fcn.1000d1c0
mov ebp, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
add esp, 4
test esi, esi
je 0x1000a810
lea eax, [esp + 0x40]
mov dword [esp + 0x46], 0x65766f6d
push eax
push esi
mov dword [esp + 0x53], 0x6e657478
mov word [esp + 0x48], 0x6150
mov word [esp + 0x4b], 0x5268
mov word [esp + 0x57], 0x6973
mov word [esp + 0x5a], 0x416e
mov byte [esp + 0x5c], 0
mov byte [esp + 0x59], 0x6f
mov byte [esp + 0x52], 0x45
mov byte [esp + 0x4a], 0x74
mov byte [esp + 0x4d], 0x65
call ebp
mov edi, eax
test edi, edi
je 0x1000a807
push 0xffffffffffffffff
lea ecx, [esp + 0x10]
call fcn.10001310
push eax
call edi
push 0xffffffffffffffff
lea ecx, [esp + 0x10]
call fcn.10002450
push esi
call fcn.1000c9c0
add esp, 4
lea eax, [esp + 0x64]
mov dword [esp + 0x67], 0x33697061
push ebx
push eax
mov dword [esp + 0x73], 0x6c642e32
mov word [esp + 0x6c], 0x6441
mov word [esp + 0x77], 0x6c
mov byte [esp + 0x6e], 0x76
call fcn.1000d1c0
mov esi, eax
add esp, 4
test esi, esi
je 0x1000a964
lea eax, [esp + 0x78]
mov dword [esp + 0x78], 0x72617453
push eax
push esi
mov dword [esp + 0x85], 0x76726553
mov word [esp + 0x8c], 0x41
mov word [esp + 0x89], 0x6369
mov byte [esp + 0x8b], 0x65
mov byte [esp + 0x84], 0x74
call ebp
mov ebx, eax
mov dword [esp + 0x47], 0x65537972
lea eax, [esp + 0x44]
mov word [esp + 0x44], 0x7551
push eax
push esi
mov dword [esp + 0x55], 0x53656369
mov word [esp + 0x5d], 0x73
mov word [esp + 0x53], 0x7672
mov word [esp + 0x5a], 0x7461
mov byte [esp + 0x4e], 0x65
mov byte [esp + 0x5c], 0x75
mov byte [esp + 0x59], 0x74
call ebp
mov esi, eax
test ebx, ebx
je 0x1000a964
test esi, esi
je 0x1000a964
push 0xf003f
push 0
push 0
call fcn.1000d370
mov ebp, eax
add esp, 0xc
test ebp, ebp
je 0x1000a964
cmp dword [esp + 0x24], 0x10
lea ecx, [esp + 0x10]
push 0x14
cmovae ecx, dword [esp + 0x14]
push ecx
push ebp
call fcn.1000d410
mov edi, eax
add esp, 0xc
test edi, edi
je 0x1000a95b
lea eax, [esp + 0x28]
push eax
push edi
call esi
test eax, eax
je 0x1000a952
cmp dword [esp + 0x2c], 1
jne 0x1000a952
mov esi, 0x1388
push esi
call fcn.1000dd20
add esp, 4
push 0
push 0
push edi
call ebx
test eax, eax
jne 0x1000a952
add esi, 0x1388
cmp esi, 0x61a8
jl 0x1000a930
push edi
call fcn.1000c6d0
add esp, 4
push ebp
call fcn.1000c6d0
add esp, 4
lea ecx, [esp + 0x10]
call fcn.100026c0
pop ebx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x478]
xor ecx, esp
call fcn.10013577
add esp, 0x47c
ret