Function at 0x1000d8a0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa6c
mov eax, dword [0x1001a050]
xor eax, esp
mov dword [esp + 0xa68], eax
push ebx
push esi
push edi
mov ebx, 1
mov dword [esp + 0xc], 0x10001
mov dword [esp + 0x10], 0x64c6029d
mov dword [esp + 0x14], 0xea9b28f9
mov dword [esp + 0x18], 0x805e3c95
mov dword [esp + 0x1c], 0xc3235f7c
mov dword [esp + 0x20], 0x2ddb1261
mov dword [esp + 0x24], 0xbb026ca2
mov dword [esp + 0x28], 0xedb48347
mov dword [esp + 0x2c], 0x5105c698
mov dword [esp + 0x30], 0xd914e435
mov dword [esp + 0x34], 0x14d7d6e2
mov dword [esp + 0x38], 0x4782f66d
mov dword [esp + 0x3c], 0x6424bae0
mov dword [esp + 0x40], 0xab6d183a
mov dword [esp + 0x44], 0x1904a53d
mov dword [esp + 0x48], 0x1985d3b6
mov dword [esp + 0x4c], 0x10b35b8d
mov dword [esp + 0x50], 0x125f1463
mov dword [esp + 0x54], 0xb7894cfc
mov dword [esp + 0x58], 0x4d9f98fb
mov dword [esp + 0x5c], 0xc0d6ad7e
mov dword [esp + 0x60], 0xe04adcac
mov dword [esp + 0x64], 0xa139ffea
mov dword [esp + 0x68], 0x8a9ce59d
mov dword [esp + 0x6c], 0x8cca4a8a
mov dword [esp + 0x70], 0x8cd5f0bc
mov dword [esp + 0x74], 0xb2199c99
mov dword [esp + 0x78], 0xdaa00634
mov dword [esp + 0x7c], 0x57d29580
mov dword [esp + 0x80], 0x60fa941d
mov dword [esp + 0x84], 0x2b46eaab
mov dword [esp + 0x88], 0x1ff1281d
mov dword [esp + 0x8c], 0x79cf3ccb
mov dword [esp + 0x90], 0x8b796c51
mov dword [esp + 0x94], 0x73c73f70
mov dword [esp + 0x98], 0xa5d2b219
mov dword [esp + 0x9c], 0x4f3a8cd8
mov dword [esp + 0xa0], 0xdaefb541
mov dword [esp + 0xa4], 0x4da7144
mov dword [esp + 0xa8], 0x3a689a8b
mov dword [esp + 0xac], 0x4639d370
mov dword [esp + 0xb0], 0xa835d928
mov dword [esp + 0xb4], 0x40e910bf
mov dword [esp + 0xb8], 0xcce2120b
mov dword [esp + 0xbc], 0xcb5c8028
mov dword [esp + 0xc0], 0x87f79488
mov dword [esp + 0xc4], 0x5e4db668
mov dword [esp + 0xc8], 0x3997f764
mov dword [esp + 0xcc], 0x8ce7d58a
mov dword [esp + 0xd0], 0x868c5f24
mov dword [esp + 0xd4], 0x810e7cf6
mov dword [esp + 0xd8], 0xdbc9e649
mov dword [esp + 0xdc], 0x7fba6dde
mov dword [esp + 0xe0], 0x986477ec
mov dword [esp + 0xe4], 0x32beeda
mov dword [esp + 0xe8], 0xf69cad6c
mov dword [esp + 0xec], 0x697a207
mov dword [esp + 0xf0], 0xe3a503e8
mov dword [esp + 0xf4], 0x7d52c6f0
mov dword [esp + 0xf8], 0x4df85cde
mov dword [esp + 0xfc], 0xfa0c4f64
mov dword [esp + 0x100], 0x8aa33950
mov dword [esp + 0x104], 0xb68262b5
mov dword [esp + 0x108], 0x62254b23
mov dword [esp + 0x10c], 0xad81e109
mov dword [esp + 0x110], 0xc70b2b39
mov dword [esp + 0x114], 0x88e8cc7f
mov dword [esp + 0x118], 0x3eee3a01
mov dword [esp + 0x11c], 0x11569d89
mov dword [esp + 0x120], 0xac5675e4
mov dword [esp + 0x124], 0x96b5d4db
mov dword [esp + 0x128], 0x256902ca
mov dword [esp + 0x12c], 0xfffb2236
mov dword [esp + 0x130], 0x89dc2787
mov dword [esp + 0x134], 0x90a10275
mov dword [esp + 0x138], 0xe8bf8d57
mov dword [esp + 0x13c], 0xfe6ba8ab
mov dword [esp + 0x140], 0xa73c4148
mov dword [esp + 0x144], 0xe573a339
mov dword [esp + 0x148], 0xd60d7c93
mov dword [esp + 0x14c], 0x8fb6cfb3
mov dword [esp + 0x150], 0xfd9340bd
mov dword [esp + 0x154], 0x1357c298
mov dword [esp + 0x158], 0x3cd7f4e3
mov dword [esp + 0x15c], 0x47819be7
mov dword [esp + 0x160], 0xda4d2068
mov dword [esp + 0x164], 0x43f38c43
mov dword [esp + 0x168], 0x3993353f
mov dword [esp + 0x16c], 0x7a51166f
mov dword [esp + 0x170], 0x71779417
mov dword [esp + 0x174], 0xb89f8468
mov dword [esp + 0x178], 0x63dbba19
mov dword [esp + 0x17c], 0x2e1d7a67
mov dword [esp + 0x180], 0x85c701b3
mov dword [esp + 0x184], 0x3497e452
mov dword [esp + 0x188], 0xb22a8f42
mov dword [esp + 0x18c], 0x370800fb
mov dword [esp + 0x190], 0xf966d439
mov dword [esp + 0x194], 0x5e92c2e2
mov dword [esp + 0x198], 0xb5fb7296
mov dword [esp + 0x19c], 0xa4b8c34c
mov dword [esp + 0x1a0], 0x3ef83ffb
mov dword [esp + 0x1a4], 0xd23019de
mov dword [esp + 0x1a8], 0x196d697b
mov dword [esp + 0x1ac], 0xb352869e
mov dword [esp + 0x1b0], 0x3e9d661b
mov dword [esp + 0x1b4], 0x7a7038fb
mov dword [esp + 0x1b8], 0xc52a22ca
mov dword [esp + 0x1bc], 0x60fb939f
mov dword [esp + 0x1c0], 0xa31ef46
mov dword [esp + 0x1c4], 0xc6946114
mov dword [esp + 0x1c8], 0xba5a2596
mov dword [esp + 0x1cc], 0x75dbcc35
mov dword [esp + 0x1d0], 0xaa258d0a
mov dword [esp + 0x1d4], 0xde43d60a
mov dword [esp + 0x1d8], 0x5e7bce72
mov dword [esp + 0x1dc], 0xd7ab9746
mov dword [esp + 0x1e0], 0x1609adb2
mov dword [esp + 0x1e4], 0xb6f4caf4
mov dword [esp + 0x1e8], 0xc0a7108e
mov dword [esp + 0x1ec], 0x7a933781
mov dword [esp + 0x1f0], 0xd14a5ec9
mov dword [esp + 0x1f4], 0xa4e48438
mov dword [esp + 0x1f8], 0xcec65f57
mov dword [esp + 0x1fc], 0x9148bfa4
mov dword [esp + 0x200], 0xf02f8bd6
mov dword [esp + 0x204], 0x87aca76f
mov dword [esp + 0x208], 0x8a4d9ebd
mov dword [esp + 0x20c], 0x920f9de3
mov dword [esp + 0x750], 0x33221100
mov dword [esp + 0x754], 0x77665544
mov dword [esp + 0x758], 0xbbaa9988
mov dword [esp + 0x75c], 0xffeeddcc
mov dword [esp + 0x760], 0xccddeeff
mov dword [esp + 0x764], 0x8899aabb
mov dword [esp + 0x768], 0x44556677
mov dword [esp + 0x76c], 0x112233
mov dword [esp + 0x770], 0x8fb6f245
mov dword [esp + 0x774], 0x54282078
mov dword [esp + 0x778], 0xb286513a
mov dword [esp + 0x77c], 0x150acd89
mov dword [esp + 0x780], 0xaa1c13cd
mov dword [esp + 0x784], 0x12aec58c
mov dword [esp + 0x788], 0xc99c1aee
mov dword [esp + 0x78c], 0x345985c6
mov dword [esp + 0x790], 0x1f575f69
mov dword [esp + 0x794], 0xce33834f
mov dword [esp + 0x798], 0x6aa3939a
mov dword [esp + 0x79c], 0xeb30178
mov dword [esp + 0x7a0], 0xd9233d26
mov dword [esp + 0x7a4], 0x37126e30
mov dword [esp + 0x7a8], 0xbed9a1b6
mov dword [esp + 0x7ac], 0xe1ec1687
mov dword [esp + 0x7b0], 0xdd8550ce
mov dword [esp + 0x7b4], 0xeaff8df5
mov dword [esp + 0x7b8], 0x27b0aff7
mov dword [esp + 0x7bc], 0x79a7208b
mov dword [esp + 0x7c0], 0xed168016
mov dword [esp + 0x7c4], 0xaad9b35c
mov dword [esp + 0x7c8], 0xaf0cb53f
mov dword [esp + 0x7cc], 0xfa37142c
mov dword [esp + 0x7d0], 0x499d38d0
mov dword [esp + 0x7d4], 0xbc1b8ce5
mov dword [esp + 0x7d8], 0x8ce1822e
mov dword [esp + 0x7dc], 0x175b73ba
mov dword [esp + 0x7e0], 0x1afb8b7e
mov dword [esp + 0x7e4], 0x17ca931d
mov dword [esp + 0x7e8], 0x16b9954
mov dword [esp + 0x7ec], 0xbd4e0e09
mov dword [esp + 0x7f0], 0x9a8e6df8
mov dword [esp + 0x7f4], 0x30d0c816
mov dword [esp + 0x7f8], 0xec076c37
mov dword [esp + 0x7fc], 0x85e4fb9a
mov dword [esp + 0x800], 0x42b835ff
mov dword [esp + 0x804], 0x72c2ad81
mov dword [esp + 0x808], 0x4c678cc9
mov dword [esp + 0x80c], 0xb303bfd
mov dword [esp + 0x810], 0x53bee43d
mov dword [esp + 0x814], 0x74f54e7d
mov dword [esp + 0x818], 0x80e375eb
mov dword [esp + 0x81c], 0x955aa2cd
mov dword [esp + 0x820], 0x660e9100
mov dword [esp + 0x824], 0x8050253e
mov dword [esp + 0x828], 0xce47a4b3
mov dword [esp + 0x82c], 0x13e04bc
mov dword [esp + 0x830], 0xa1e51447
mov dword [esp + 0x834], 0x96b4b335
mov dword [esp + 0x838], 0x58374d01
mov dword [esp + 0x83c], 0x4b2ca863
mov dword [esp + 0x840], 0xb402735c
mov dword [esp + 0x844], 0x7c5d65ab
mov dword [esp + 0x848], 0x9cf3bc0b
mov dword [esp + 0x84c], 0x5be3bd08
mov dword [esp + 0x850], 0xda0d1fd0
mov dword [esp + 0x854], 0x16bccb98
mov dword [esp + 0x858], 0x1348998d
mov dword [esp + 0x85c], 0xf2897e87
mov dword [esp + 0x860], 0x68344ebf
mov dword [esp + 0x864], 0x5c7b6fac
mov dword [esp + 0x868], 0x80e24d7c
mov dword [esp + 0x86c], 0x67f965fc
mov dword [esp + 0x870], 0x90e97566
mov dword [esp + 0x874], 0x997e743b
mov dword [esp + 0x878], 0x7bd6ef53
mov dword [esp + 0x87c], 0x18e0aa3
mov dword [esp + 0x880], 0xc624d6e2
mov dword [esp + 0x884], 0xf956d2a2
mov dword [esp + 0x888], 0xd767269e
mov dword [esp + 0x88c], 0xe8c638b3
mov dword [esp + 0x890], 0x29e0192b
mov dword [esp + 0x894], 0x6057274c
mov dword [esp + 0x898], 0xc9b5af59
mov dword [esp + 0x89c], 0xee76cd9f
mov dword [esp + 0x8a0], 0xcf678cce
mov dword [esp + 0x8a4], 0xae53626c
mov dword [esp + 0x8a8], 0xb431a942
mov dword [esp + 0x8ac], 0x8606cff0
mov dword [esp + 0x8b0], 0xf0424dcb
mov dword [esp + 0x8b4], 0xf1300aee
mov dword [esp + 0x8b8], 0xa0590a87
mov dword [esp + 0x8bc], 0x17f9a0a7
mov dword [esp + 0x8c0], 0xddd070b0
mov dword [esp + 0x8c4], 0x9dc315fe
mov dword [esp + 0x8c8], 0x50a33608
mov dword [esp + 0x8cc], 0x7e01648f
mov dword [esp + 0x8d0], 0x977efbbf
mov dword [esp + 0x8d4], 0xb6b4a177
mov dword [esp + 0x8d8], 0x732ddc33
mov dword [esp + 0x8dc], 0x3d2bf760
mov dword [esp + 0x8e0], 0x79f82bee
mov dword [esp + 0x8e4], 0xb622cda6
mov dword [esp + 0x8e8], 0xebb356b3
mov dword [esp + 0x8ec], 0xb7efd24e
mov dword [esp + 0x8f0], 0x6079efe4
mov dword [esp + 0x8f4], 0x7ed7fa89
mov dword [esp + 0x8f8], 0xb336ec7d
mov dword [esp + 0x8fc], 0x6a029f03
mov dword [esp + 0x900], 0x7e641222
mov dword [esp + 0x904], 0x9f4d46e3
push 0xff
lea eax, [esp + 0x975]
push 0
push eax
mov dword [esp + 0x914], 0x205c5c72
mov dword [esp + 0x918], 0xda0be721
mov dword [esp + 0x91c], 0xb22a71a1
mov dword [esp + 0x920], 0x9986e0f6
mov dword [esp + 0x924], 0xe1042178
mov dword [esp + 0x928], 0x5da318e1
mov dword [esp + 0x92c], 0xb3016cc0
mov dword [esp + 0x930], 0xcf73af67
mov dword [esp + 0x934], 0xeadc89b1
mov dword [esp + 0x938], 0xdf0a84ce
mov dword [esp + 0x93c], 0xb7098d1d
mov dword [esp + 0x940], 0x281a56c9
mov dword [esp + 0x944], 0x6cb3ccc0
mov dword [esp + 0x948], 0x53bd59dc
mov dword [esp + 0x94c], 0x2e9123b0
mov dword [esp + 0x950], 0x3dc87079
mov dword [esp + 0x954], 0x79e370dc
mov dword [esp + 0x958], 0xffa5e0f9
mov dword [esp + 0x95c], 0x8ec72317
mov dword [esp + 0x960], 0x2834d1f3
mov dword [esp + 0x964], 0xc0e61fde
mov dword [esp + 0x968], 0x5b1fd515
mov dword [esp + 0x96c], 0x262466e6
mov dword [esp + 0x970], 0x53e74036
mov dword [esp + 0x974], 0xcd42d570
mov dword [esp + 0x978], 0x90f04eb9
mov byte [esp + 0x97c], 0
call fcn.10012fe0
add esp, 0xc
push 0x214
lea ecx, [esp + 0x21c]
push 0
push ecx
call fcn.10012fe0
mov edx, dword [esp + 0x18]
add esp, 0xc
push 0x31c
lea eax, [esp + 0x434]
push 0
mov dword [esp + 0x32c], edx
mov ecx, 0x40
lea esi, [esp + 0x18]
lea edi, [esp + 0x224]
mov dword [esp + 0x220], 0x800
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.10012fe0
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x548], ecx
mov dword [esp + 0x43c], 0x800
mov ecx, 0x40
lea esi, [esp + 0x1c]
lea edi, [esp + 0x440]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x40
lea esi, [esp + 0x11c]
lea edi, [esp + 0x650]
rep movsd dword es:[edi], dword [esi]
lea edx, [esp + 0x77c]
add esp, 0xc
xor edi, edi
mov dword [esp + 0x214], edx
lea esi, [esp + 0x750]
push ebx
lea eax, [esp + 0x434]
push eax
lea ecx, [esp + 0x978]
push ecx
push 0x10
lea ecx, [esp + 0x1c]
mov edx, esi
mov dword [esp + 0x1c], 0x100
call fcn.1000a380
add esp, 0x10
test eax, eax
jne 0x1000e5ac
mov edx, dword [esp + 0xc]
push edx
lea eax, [esp + 0x974]
push eax
push 0x10
push esi
lea ecx, [esp + 0x228]
call fcn.1000a9f0
add esp, 0x10
test eax, eax
jne 0x1000e5ac
mov ecx, dword [esp + 0x214]
lea edx, [esp + 0x970]
mov eax, 0x100
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xc]
mov edx, dword [edx]
cmp edx, dword [ecx]
jne 0x1000e522
add dword [esp + 0xc], 4
sub eax, 4
add ecx, 4
cmp eax, 4
jae 0x1000e506
jmp 0x1000e565
mov eax, dword [esp + 0xc]
movzx edx, byte [ecx]
movzx eax, byte [eax]
sub eax, edx
jne 0x1000e55e
mov edx, dword [esp + 0xc]
movzx eax, byte [edx + 1]
movzx edx, byte [ecx + 1]
sub eax, edx
jne 0x1000e55e
mov eax, dword [esp + 0xc]
movzx eax, byte [eax + 2]
movzx edx, byte [ecx + 2]
sub eax, edx
jne 0x1000e55e
mov eax, dword [esp + 0xc]
movzx eax, byte [eax + 3]
movzx ecx, byte [ecx + 3]
sub eax, ecx
sar eax, 0x1f
or eax, ebx
jne 0x1000e5ac
push 0x100
lea edx, [esp + 0x974]
push 0
push edx
call fcn.10012fe0
add dword [esp + 0x220], 0x100
add edi, ebx
add esp, 0xc
add esi, 0x10
cmp edi, 2
jb 0x1000e497
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa68]
xor ecx, esp
call fcn.1000f5b7
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0xa74]
pop edi
pop esi
pop ebx
xor ecx, esp
mov eax, 0x87
call fcn.1000f5b7
mov esp, ebp
pop ebp
ret