Function at 0x10074024
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x180
mov eax, dword [0x100c51b8]
xor eax, esp
mov dword [esp + 0x17c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
push 0x104
push 0
push dword [esp + 0x14]
call fcn.1008c000
add esp, 0xc
lea eax, [esp + 0x60]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
lea ebp, [esp + 0x3e]
mov byte [ebp - 2], 1
mov byte [ebp - 1], 4
mov al, 0x49
mov byte [ebp], al
mov cl, 0x56
mov byte [ebp + 1], cl
mov byte [ebp + 2], 0x5e
mov byte [ebp + 3], 0x4b
mov byte [ebp + 4], al
mov al, 0x5c
mov byte [ebp + 5], al
mov dl, 0x4e
mov byte [ebp + 6], dl
mov byte [ebp + 7], cl
mov byte [ebp + 8], dl
mov byte [ebp + 9], al
mov byte [ebp + 0xa], 0x79
mov al, 0x74
mov byte [ebp + 0xb], al
mov cl, 0x64
mov byte [ebp + 0xc], cl
mov byte [ebp + 0xd], 0x7a
mov byte [ebp + 0xe], 0x67
mov byte [ebp + 0xf], cl
mov byte [ebp + 0x10], 0x6c
mov cl, 0x7d
mov byte [ebp + 0x11], cl
mov byte [ebp + 0x12], 0x54
mov byte [ebp + 0x13], 0x4c
mov dl, 0x7c
mov byte [ebp + 0x14], dl
mov byte [ebp + 0x15], al
mov byte [ebp + 0x16], dl
mov byte [ebp + 0x17], 0x77
mov al, 0x6d
mov byte [ebp + 0x18], al
mov dl, 0x66
mov byte [ebp + 0x19], dl
mov byte [ebp + 0x1a], 0x72
mov byte [ebp + 0x1b], dl
mov byte [ebp + 0x1c], 0x76
mov byte [ebp + 0x1d], al
mov byte [ebp + 0x1e], cl
lea eax, [esp + 0x5d]
lea ecx, [esp + 0x5f]
mov dword [esp + 4], ecx
mov edx, 0xe9faae9a
mov ecx, 0xfbc90e9a
cmp edx, 0xfbc90e9a
je 0x10074127
cmp edx, 0xe9faae9a
jne 0x10074105
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 4]
mov edx, 0xe9faae9a
cmove edx, ecx
jmp 0x10074105
lea esi, [esp + 0x3c]
mov dword [esp + 8], esi
mov eax, dword [esp + 8]
mov al, byte [eax]
mov byte [esp + 3], al
mov edx, 0x4024427b
mov eax, 0x8e23a911
mov ecx, 0x462ef049
cmp edx, 0x462ef048
jg 0x1007417b
cmp edx, 0x8e23a911
je 0x10074210
cmp edx, 0xfbb268c9
je 0x100741ae
cmp edx, 0x4024427b
jne 0x10074148
test byte [esp + 3], 1
mov edx, 0x6301d662
cmove edx, eax
jmp 0x10074148
cmp edx, 0x462ef049
je 0x100741cd
cmp edx, 0x575df3fe
je 0x100741fc
cmp edx, 0x6301d662
jne 0x10074148
lea edx, [esp + 0x20]
mov dword [esp + 4], edx
mov edx, dword [esp + 4]
mov dword [esp + 0x20], 0
mov edx, 0x575df3fe
jmp 0x10074148
mov edx, dword [esp + 4]
mov byte [esp + 0x5d], 0
mov byte [esp + 0x5e], 0
mov edx, dword [esp + 8]
mov byte [edx], 0
mov edx, 0x8e23a911
jmp 0x10074148
mov edx, dword [esp + 0x20]
mov bl, byte [esp + edx + 0x3e]
mov edx, dword [esp + 0x20]
mov bh, byte [esp + 0x3d]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x1f
mov edi, dword [esp + 0x20]
mov byte [esp + edi + 0x3e], dl
inc dword [esp + 0x20]
mov edx, 0x575df3fe
jmp 0x10074148
mov edx, dword [esp + 0x20]
cmp edx, 0x1f
mov edx, 0xfbb268c9
cmovb edx, ecx
jmp 0x10074148
xor eax, eax
lea edi, [esp + 0x60]
mov dword [edi], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebp
call fcn.1009ee80
add esp, 4
mov ecx, edi
push eax
push ebp
call fcn.10007b00
lea eax, [esp + 0x24]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
lea eax, [esp + 0x49]
mov byte [eax - 0xd], 1
mov byte [eax - 0xc], 4
mov byte [eax - 0xb], 0x43
mov cl, 0x6c
mov byte [eax - 0xa], cl
mov byte [eax - 9], 0x6f
mov dl, 0x63
mov byte [eax - 8], dl
mov byte [eax - 7], dl
mov byte [eax - 6], 0x67
mov byte [eax - 5], 0x6d
mov byte [eax - 4], 0x40
mov byte [eax - 3], 0x73
mov byte [eax - 2], cl
mov byte [eax - 1], 0x60
lea ecx, [esp + 0x4b]
mov dword [esp + 4], ecx
mov edx, 0x4d427452
mov ecx, 0xc089622e
cmp edx, 0xc089622e
je 0x100742af
cmp edx, 0x4d427452
jne 0x1007428d
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 4]
mov edx, 0x4d427452
cmove edx, ecx
jmp 0x1007428d
mov dword [esp + 8], esi
mov eax, dword [esp + 8]
mov al, byte [eax]
mov byte [esp + 3], al
mov edx, 0x561f144f
mov eax, 0x513a0b93
mov ecx, 0x844423e9
cmp edx, 0x1ff73fd7
jg 0x1007430c
cmp edx, 0x844423e9
je 0x10074391
cmp edx, 0x8de0d095
je 0x10074333
cmp edx, 0xa624d094
jne 0x100742cc
mov edx, dword [esp + 4]
mov byte [esp + 0x49], 0
mov byte [esp + 0x4a], 0
mov edx, dword [esp + 8]
mov byte [edx], 0
mov edx, 0x844423e9
jmp 0x100742cc
cmp edx, 0x1ff73fd8
je 0x10074344
cmp edx, 0x513a0b93
je 0x10074362
cmp edx, 0x561f144f
jne 0x100742cc
test byte [esp + 3], 1
mov edx, 0x1ff73fd8
cmove edx, ecx
jmp 0x100742cc
mov edx, dword [esp + 0x20]
cmp edx, 0xb
mov edx, 0xa624d094
cmovb edx, eax
jmp 0x100742cc
lea edx, [esp + 0x20]
mov dword [esp + 4], edx
mov edx, dword [esp + 4]
mov dword [esp + 0x20], 0
mov edx, 0x8de0d095
jmp 0x100742cc
mov edx, dword [esp + 0x20]
mov bl, byte [esp + edx + 0x3e]
mov edx, dword [esp + 0x20]
mov bh, byte [esp + 0x3d]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0xb
mov esi, dword [esp + 0x20]
mov byte [esp + esi + 0x3e], dl
inc dword [esp + 0x20]
mov edx, 0x8de0d095
jmp 0x100742cc
xor eax, eax
lea edi, [esp + 0x24]
mov dword [edi], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
push ebp
call fcn.1009ee80
add esp, 4
mov ecx, edi
push eax
push ebp
call fcn.10007b00
lea eax, [esp + 0x78]
mov dword [esp + 0x18], eax
mov ecx, edi
call fcn.10007bca
mov edi, eax
lea ecx, [esp + 0x60]
call fcn.10007bca
push 0x104
push dword [esp + 0x1c]
push edi
push eax
call fcn.1005b834
add esp, 0x10
mov dword [esp + 0x1c], eax
mov eax, 0xfe24d29
mov esi, 0x98b57455
cmp eax, 0x98b57455
je 0x10074417
cmp eax, 0x673c6358
je 0x10074439
cmp eax, 0xfe24d29
jne 0x100743f3
cmp dword [esp + 0x1c], 0
mov eax, 0x673c6358
cmove eax, esi
jmp 0x100743f3
mov edi, dword [esp + 0x18]
push edi
call fcn.1009ee80
add esp, 4
mov ecx, dword [esp + 0x194]
push eax
push edi
call fcn.10007b00
mov eax, 0x673c6358
jmp 0x100743f3
lea ecx, [esp + 0x24]
call fcn.100087f0
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x60]
call fcn.100087f0
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x17c]
xor ecx, esp
call fcn.100879aa
mov eax, esi
add esp, 0x180
pop esi
pop edi
pop ebx
pop ebp
ret