Function at 0x1000e800
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x30
mov eax, dword [0x100290dc]
xor eax, esp
mov dword [esp + 0x2c], eax
mov dword [esp + 4], ecx
mov ecx, 0x6ed526a0
jmp 0x1000e830
mov ecx, 0x669b0369
nop word cs:[eax + eax]
cmp ecx, 0x1fda404
jle 0x1000e8f0
cmp ecx, 0x49be483e
jg 0x1000e940
cmp ecx, 0x3a72d6c9
jg 0x1000e9ea
cmp ecx, 0x1fda405
je 0x1000eafc
cmp ecx, 0xac72ef2
je 0x1000eb06
cmp ecx, 0x1063ca80
jne 0x1000e830
mov word [esp + 0x1c], 0x68
mov dword [esp + 0x18], 0x67627c74
mov dword [esp + 0x14], 0x5c746b62
mov dword [esp + 0x10], 0x5c7d6547
mov eax, dword [esp + 4]
lea eax, [esp + 0x10]
push eax
call fcn.1000dea0
mov ecx, dword [0x100299c4]
mov eax, dword [0x100299c8]
lea edx, [ecx + 1]
imul edx, ecx
mov ebp, edx
xor ebp, 0xfffffffe
test ebp, edx
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0xf069d6ca
mov edi, 0xf069d6ca
jne 0x1000e8d5
mov edi, 0xec191445
test ebp, edx
cmovne ecx, edi
cmp eax, 0xa
cmovge ecx, edi
test esi, esi
setne byte [esp + 3]
jmp 0x1000e830
cmp ecx, 0xd705c044
jle 0x1000e9b0
cmp ecx, 0xf069d6c9
jg 0x1000ea18
cmp ecx, 0xd705c045
je 0x1000eb5d
cmp ecx, 0xec191445
je 0x1000eb67
cmp ecx, 0xed1c3a3f
jne 0x1000e830
mov ecx, 0xf5aa5e5f
jmp 0x1000e830
cmp ecx, 0x722867ec
jle 0x1000ea52
cmp ecx, 0x722867ed
je 0x1000e81d
cmp ecx, 0x75800e52
je 0x1000eb9e
cmp ecx, 0x7652ec43
jne 0x1000e830
mov ecx, dword [0x100299c4]
mov eax, dword [0x100299c8]
lea edx, [ecx + 1]
imul edx, ecx
mov ebp, edx
xor ebp, 0xfffffffe
test ebp, edx
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0x938bc19d
mov edi, 0x938bc19d
jne 0x1000ecd2
mov edi, 0x43bd764c
jmp 0x1000ecd2
cmp ecx, 0x94c42587
jle 0x1000eaa2
cmp ecx, 0x94c42588
je 0x1000ebdb
cmp ecx, 0x9d1fb504
je 0x1000ebe9
cmp ecx, 0xb0400636
jne 0x1000e830
mov ecx, 0x9d1fb504
jmp 0x1000e830
cmp ecx, 0x3a72d6ca
je 0x1000ebf3
cmp ecx, 0x3b6e3bfb
je 0x1000ebff
cmp ecx, 0x43bd764c
jne 0x1000e830
mov ecx, 0x938bc19d
jmp 0x1000e830
cmp ecx, 0xf069d6ca
je 0x1000ec3c
cmp ecx, 0xf5aa5e5f
je 0x1000ec56
cmp ecx, 0xfc95df85
jne 0x1000e830
lea eax, [esp + 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, 0xac72ef2
jmp 0x1000e830
cmp ecx, 0x669b0369
je 0x1000ec64
cmp ecx, 0x6ed526a0
jne 0x1000ece2
mov word [esp + 0x28], 0x7d
mov dword [esp + 0x24], 0x7d75237d
mov dword [esp + 0x20], 0x7d756563
mov eax, dword [esp + 4]
lea esi, [esp + 0x20]
push esi
call fcn.1000dea0
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
mov ecx, 0x3b6e3bfb
jmp 0x1000e830
cmp ecx, 0x86da1f14
je 0x1000ec9e
cmp ecx, 0x938bc19d
jne 0x1000e830
mov eax, dword [0x100299c4]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov eax, 0x1fda405
mov ecx, 0x43bd764c
mov edi, 0x1fda405
test ebp, edx
sete dl
je 0x1000eae5
mov edi, 0x43bd764c
cmp dword [0x100299c8], 0xa
cmovl ecx, edi
setl dh
xor dl, dh
cmovne ecx, eax
jmp 0x1000e830
mov ecx, 0x86da1f14
jmp 0x1000e830
lea eax, [esp + 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x100299c4]
mov edx, dword [0x100299c8]
lea ebp, [ecx - 1]
imul ebp, ecx
not ebp
or ebp, 0xfffffffe
cmp ebp, 0xffffffff
sete cl
cmp edx, 0xa
setl ch
xor ch, cl
mov ecx, 0xed1c3a3f
mov edi, 0xed1c3a3f
jne 0x1000eb48
mov edi, 0xfc95df85
cmp ebp, 0xffffffff
cmovne ecx, edi
cmp edx, 0xa
mov dword [esp + 8], eax
cmovge ecx, edi
jmp 0x1000e830
mov ecx, 0xb0400636
jmp 0x1000e830
mov word [esp + 0x1c], 0x68
mov dword [esp + 0x18], 0x67627c74
mov dword [esp + 0x14], 0x5c746b62
mov dword [esp + 0x10], 0x5c7d6547
mov eax, dword [esp + 4]
lea eax, [esp + 0x10]
push eax
call fcn.1000dea0
mov ecx, 0x1063ca80
jmp 0x1000e830
mov ecx, dword [0x100299c4]
mov eax, dword [0x100299c8]
lea edx, [ecx + 1]
imul edx, ecx
mov ebp, edx
xor ebp, 0xfffffffe
test ebp, edx
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0x669b0369
mov edi, 0x669b0369
jne 0x1000ecd2
mov edi, 0x722867ed
jmp 0x1000ecd2
mov dword [esp + 0xc], ebx
mov ecx, 0x49be483f
jmp 0x1000e830
mov ecx, 0x94c42588
jmp 0x1000e830
mov ecx, 0x75800e52
xor ebx, ebx
jmp 0x1000e830
mov ecx, dword [0x100299c4]
mov eax, dword [0x100299c8]
lea edx, [ecx + 1]
imul edx, ecx
mov ebp, edx
xor ebp, 0xfffffffe
test ebp, edx
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0x1063ca80
mov edi, 0x1063ca80
jne 0x1000ecd2
mov edi, 0xec191445
jmp 0x1000ecd2
cmp byte [esp + 3], 0
mov ecx, 0x7652ec43
jne 0x1000e830
mov ecx, 0x3a72d6ca
jmp 0x1000e830
mov ecx, 0x9d1fb504
mov ebx, dword [esp + 8]
jmp 0x1000e830
mov ecx, dword [0x100299c4]
mov eax, dword [0x100299c8]
lea edx, [ecx + 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0xd705c045
mov edi, 0xd705c045
jne 0x1000ec99
mov edi, 0x722867ed
cmp edx, 0xffffffff
jmp 0x1000ecd4
mov ecx, dword [0x100299c4]
mov eax, dword [0x100299c8]
lea edx, [ecx + 1]
imul edx, ecx
mov ebp, edx
xor ebp, 0xfffffffe
test ebp, edx
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0xac72ef2
mov edi, 0xac72ef2
jne 0x1000ecd2
mov edi, 0xfc95df85
test ebp, edx
cmovne ecx, edi
cmp eax, 0xa
cmovge ecx, edi
jmp 0x1000e830
cmp ecx, 0x49be483f
jne 0x1000e830
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x2c]
xor ecx, esp
call fcn.100151d1
mov eax, esi
add esp, 0x30
pop esi
pop edi
pop ebx
pop ebp
ret