Function at 0x1001e5d0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1009cbfd
mov eax, dword fs:[0]
push eax
sub esp, 0x3c8
mov eax, dword [0x100c34c0]
xor eax, esp
mov dword [esp + 0x3c0], eax
push ebx
push esi
push edi
mov eax, dword [0x100c34c0]
xor eax, esp
push eax
lea eax, [esp + 0x3d8]
mov dword fs:[0], eax
mov ecx, dword [0x100c75a4]
mov eax, dword [0x100c7598]
cmp ecx, dword [0x100c75a8]
je 0x1001e62f
cmp eax, dword [0x100c759c]
jne 0x1001f25e
mov dword [esp + 0x4c], 0x69652a6b
mov dword [esp + 0x50], 0x76524930
mov dword [esp + 0x54], 0x46446719
mov dword [esp + 0x58], 0x3b665e19
mov dword [esp + 0x5c], 0x63573461
mov dword [esp + 0x60], 0x7978127c
mov dword [esp + 0x64], 0x4e78123f
mov dword [esp + 0x68], 0x6b3e3d5e
mov dword [esp + 0x6c], 0x465b231d
mov dword [esp + 0x70], 0x34313d7e
mov dword [esp + 0x74], 0x7e50054b
mov dword [esp + 0x78], 0x41591e18
mov dword [esp + 0x7c], 0x491f4b62
mov dword [esp + 0x80], 0x1f404a29
mov dword [esp + 0x84], 0x27361647
mov dword [esp + 0x88], 0x10572f36
mov dword [esp + 0x8c], 0x357c306b
mov dword [esp + 0x90], 0x5c55733a
mov dword [esp + 0x94], 0x6278723e
mov dword [esp + 0x98], 0x483f3d79
mov dword [esp + 0x9c], 0x1c6f232d
mov dword [esp + 0xa0], 0x360b4f32
mov dword [esp + 0xa4], 0x180a3438
mov dword [esp + 0xa8], 0x5418321d
mov dword [esp + 0xac], 0x650f1b2a
mov dword [esp + 0xb0], 0x61773e40
mov dword [esp + 0xb4], 0x206f7c18
mov dword [esp + 0xb8], 0x4f654b58
mov dword [esp + 0xbc], 0x405a5f6e
mov dword [esp + 0xc0], 0x24433f05
mov dword [esp + 0xc4], 0x57416540
mov dword [esp + 0xc8], 0x105c3947
mov dword [esp + 0xcc], 0xb00523c
mov dword [esp + 0xd0], 0x53354278
mov dword [esp + 0xd4], 0x1551056e
mov dword [esp + 0xd8], 0x78163c0d
mov dword [esp + 0xdc], 0x67a0d7c
mov dword [esp + 0xe0], 0x72a7c44
mov dword [esp + 0xe4], 0x7b49463f
mov dword [esp + 0xe8], 0x621a6616
mov dword [esp + 0xec], 0x437e1d61
mov dword [esp + 0xf0], 0x6a64113f
mov dword [esp + 0xf4], 0x663c4011
mov dword [esp + 0xf8], 0x7577280c
mov dword [esp + 0xfc], 0x3573686d
mov dword [esp + 0x100], 0x75517111
mov dword [esp + 0x104], 0x635f014f
mov dword [esp + 0x108], 0x744e1e1d
mov dword [esp + 0x10c], 0x35425039
mov dword [esp + 0x110], 0x65454e2e
mov dword [esp + 0x114], 0xb3f5104
mov dword [esp + 0x118], 0x7b5f312e
mov dword [esp + 0x11c], 0x3f7a1325
mov dword [esp + 0x120], 0xa6c1718
mov dword [esp + 0x124], 0xf39381a
mov dword [esp + 0x128], 0x1e3a253f
mov dword [esp + 0x12c], 0x6d5d3667
mov dword [esp + 0x130], 0x7b2c1f2e
mov dword [esp + 0x134], 0x40442238
mov dword [esp + 0x138], 0xf5a701d
mov dword [esp + 0x13c], 0x14197122
mov dword [esp + 0x140], 0x27125844
mov dword [esp + 0x144], 0x2a381f3a
mov dword [esp + 0x148], 0x13535702
mov dword [esp + 0x14c], 0x2564661d
mov dword [esp + 0x150], 0x7f432a4f
mov dword [esp + 0x154], 0x5713596c
mov dword [esp + 0x158], 0x46a5339
mov dword [esp + 0x15c], 0x41643926
mov dword [esp + 0x160], 0x2378566e
mov dword [esp + 0x164], 0x4f520516
mov dword [esp + 0x168], 0x36695b43
mov dword [esp + 0x16c], 0x4a3a005d
mov dword [esp + 0x170], 0x46627225
mov dword [esp + 0x174], 0x69475912
mov dword [esp + 0x178], 0xf1f0119
mov dword [esp + 0x17c], 0x657d1310
mov dword [esp + 0x180], 0x7e502b35
mov dword [esp + 0x184], 0x526b7748
mov dword [esp + 0x188], 0xb78064b
mov dword [esp + 0x18c], 0xd533817
mov dword [esp + 0x190], 0x60692363
mov dword [esp + 0x194], 0x7d142621
mov dword [esp + 0x198], 0x5a433416
mov dword [esp + 0x19c], 0x28443215
mov dword [esp + 0x1a0], 0x79331917
mov dword [esp + 0x1a4], 0xb31710d
mov dword [esp + 0x1a8], 0x644e1018
mov dword [esp + 0x1ac], 0x55163332
mov dword [esp + 0x1b0], 0x6f253a30
mov dword [esp + 0x1b4], 0x6031504f
mov dword [esp + 0x1b8], 0x51d215b
mov dword [esp + 0x1bc], 0x485f703a
mov dword [esp + 0x1c0], 0x3632277c
mov dword [esp + 0x1c4], 0x4d6d741e
mov dword [esp + 0x1c8], 0x100f136f
mov dword [esp + 0x1cc], 0x4a360701
mov dword [esp + 0x1d0], 0x6e521834
mov dword [esp + 0x1d4], 0x3b6f0644
mov dword [esp + 0x1d8], 0x3e2b1969
mov dword [esp + 0x1dc], 0x1e566969
mov dword [esp + 0x1e0], 0x184a4b15
mov dword [esp + 0x1e4], 0x6d463c46
mov dword [esp + 0x1e8], 0x32682f14
mov dword [esp + 0x1ec], 0x6c467e7f
mov dword [esp + 0x1f0], 0x6a711663
mov dword [esp + 0x1f4], 0x83e065f
mov dword [esp + 0x1f8], 0x3e393370
mov dword [esp + 0x1fc], 0x28285c6e
mov dword [esp + 0x200], 0x6b55342f
mov dword [esp + 0x204], 0x13076c2f
mov dword [esp + 0x208], 0xb741a7a
mov dword [esp + 0x20c], 0x6c251217
mov dword [esp + 0x210], 0x65041f6e
mov dword [esp + 0x214], 0x12d610b
mov dword [esp + 0x218], 0x75455474
mov dword [esp + 0x21c], 0x692d7848
mov dword [esp + 0x220], 0x64417e00
mov dword [esp + 0x224], 0x4502491a
mov dword [esp + 0x228], 0x56566a68
mov dword [esp + 0x22c], 0x71752c53
mov dword [esp + 0x230], 0x46b1468
mov dword [esp + 0x234], 0x54050964
mov dword [esp + 0x238], 0x2d0c1a65
mov dword [esp + 0x23c], 0x281a2736
mov dword [esp + 0x240], 0x4108184e
mov dword [esp + 0x244], 0x44482531
mov dword [esp + 0x248], 0x5627734c
mov dword [esp + 0x24c], 0x180c557e
mov dword [esp + 0x250], 0x7441473d
mov dword [esp + 0x254], 0x27322b65
mov dword [esp + 0x258], 0x361d4c5d
mov dword [esp + 0x25c], 0x76016212
mov dword [esp + 0x260], 0x532c0164
mov dword [esp + 0x264], 0x3b281f68
mov dword [esp + 0x268], 0xc38795b
mov dword [esp + 0x26c], 0x29574056
mov dword [esp + 0x270], 0x75545c49
mov dword [esp + 0x274], 0x3b554f55
mov dword [esp + 0x278], 0xd033649
mov dword [esp + 0x27c], 0x7053572b
mov dword [esp + 0x280], 0x3f17621f
mov dword [esp + 0x284], 0x2b1d4540
mov dword [esp + 0x288], 0x6d5f512f
mov dword [esp + 0x28c], 0x28526101
mov dword [esp + 0x290], 0x7e7d2966
mov dword [esp + 0x294], 0xc307c49
mov dword [esp + 0x298], 0x51254360
mov dword [esp + 0x29c], 0x1a7d5b23
mov dword [esp + 0x2a0], 0x1245371
mov dword [esp + 0x2a4], 0x2530630a
mov dword [esp + 0x2a8], 0x46261707
mov dword [esp + 0x2ac], 0x64740937
mov dword [esp + 0x2b0], 0x226d5938
mov dword [esp + 0x2b4], 0x41520259
mov dword [esp + 0x2b8], 0x22293a77
mov dword [esp + 0x2bc], 0x64603547
mov dword [esp + 0x2c0], 0x227d3a3b
mov dword [esp + 0x2c4], 0x111e672f
mov dword [esp + 0x2c8], 0x3574402e
mov dword [esp + 0x2cc], 0x3d535018
mov dword [esp + 0x2d0], 0x22471c20
xor edx, edx
xor esi, esi
mov dword [0x100c75a8], ecx
mov dword [esp + 0x1c], edx
xor ecx, ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0x2d4], 0x8233f
mov dword [esp + 0x2d8], 0x30485809
mov dword [esp + 0x2dc], 0x691b033d
mov dword [esp + 0x2e0], 0x84c6a3e
mov dword [esp + 0x2e4], 0x1e047324
mov dword [esp + 0x2e8], 0x2642b1e
mov dword [esp + 0x2ec], 0x2d65440e
mov dword [esp + 0x2f0], 0x547e5157
mov dword [esp + 0x2f4], 0x52272d7a
mov dword [esp + 0x2f8], 0x356a4906
mov dword [esp + 0x2fc], 0x2b3b4f3a
mov dword [esp + 0x300], 0x772c0442
mov dword [esp + 0x304], 0x7001a49
mov dword [esp + 0x308], 0x7d6e7d69
mov dword [esp + 0x30c], 0x372d7d28
mov dword [esp + 0x310], 0x8520433
mov dword [esp + 0x314], 0x3a2a4d1d
mov dword [esp + 0x318], 0x4647b02
mov dword [esp + 0x31c], 0x47691416
mov dword [esp + 0x320], 0x56181a30
mov dword [esp + 0x324], 0x4d417e2d
mov dword [esp + 0x328], 0x336d7f38
mov dword [esp + 0x32c], 0x68193934
mov dword [esp + 0x330], 0x2d1f066a
mov dword [esp + 0x334], 0x6461701f
mov dword [esp + 0x338], 0x662780f
mov dword [esp + 0x33c], 0x11221a1c
mov dword [esp + 0x340], 0x7e485934
mov dword [esp + 0x344], 0x743c3401
mov dword [esp + 0x348], 0x20001336
mov dword [esp + 0x34c], 0x21c124f
mov dword [esp + 0x350], 0x6b61715b
mov dword [esp + 0x354], 0x24590a3b
mov dword [esp + 0x358], 0x674d5958
mov dword [esp + 0x35c], 0x5d2e5877
mov dword [esp + 0x360], 0xc4a2004
mov dword [esp + 0x364], 0x7e306944
mov dword [esp + 0x368], 0x75214c76
mov dword [esp + 0x36c], 0x4c5d6410
mov dword [esp + 0x370], 0x48652350
mov dword [esp + 0x374], 0x48771346
mov dword [esp + 0x378], 0x24572843
mov dword [esp + 0x37c], 0x6125551f
mov dword [esp + 0x380], 0x3129080b
mov dword [esp + 0x384], 0x4c70686a
mov dword [esp + 0x388], 0x4f0a7844
mov dword [esp + 0x38c], 0x5a5f7f7b
mov dword [esp + 0x390], 0x7f5d5e33
mov dword [esp + 0x394], 0x400a3b2c
mov dword [esp + 0x398], 0x4d53131c
mov dword [esp + 0x39c], 0x4f3a526f
mov dword [esp + 0x3a0], 0x5c6f3169
mov dword [esp + 0x3a4], 0x180f0873
mov dword [esp + 0x3a8], 0x441b3c58
mov dword [esp + 0x3ac], 0x32124f6d
mov dword [esp + 0x3b0], 0x5272685d
mov dword [esp + 0x3b4], 0x7220320b
mov dword [esp + 0x3b8], 0x18342960
mov dword [esp + 0x3bc], 0x4b196f79
mov dword [esp + 0x3c0], 0x2878402d
mov dword [esp + 0x3c4], 0x7659030e
mov dword [esp + 0x3c8], 0x34336213
mov dword [0x100c759c], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x3e0], ecx
mov edi, 0x80
lea ebx, [esp + 0x52]
mov dword [esp + 0x18], edi
lea esp, [esp]
movzx eax, byte [ebx - 6]
mov byte [esp + 0x15], al
movzx eax, byte [ebx]
mov byte [esp + 0x14], al
lea eax, [esp + 0x14]
cmp eax, esi
jae 0x1001f04b
cmp edx, eax
ja 0x1001f04b
mov edi, eax
sub edi, edx
sar edi, 1
cmp esi, ecx
jne 0x1001f01b
push ecx
lea ecx, [esp + 0x20]
call fcn.1001f710
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x30], esi
mov dword [esp + 0x28], esi
mov byte [esp + 0x3e0], 1
test esi, esi
je 0x1001f036
mov ax, word [edx + edi*2]
mov word [esi], ax
mov byte [esp + 0x3e0], 0
add esi, 2
mov dword [esp + 0x20], esi
mov edi, dword [esp + 0x18]
jmp 0x1001f078
cmp esi, ecx
jne 0x1001f065
push ecx
lea ecx, [esp + 0x20]
call fcn.1001f710
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
test esi, esi
je 0x1001f071
mov ax, word [esp + 0x14]
mov word [esi], ax
add esi, 2
mov dword [esp + 0x20], esi
add ebx, 7
dec edi
mov dword [esp + 0x18], edi
jne 0x1001efe0
sub esi, edx
sar esi, 1
push esi
mov ecx, 0x100c75a4
mov dword [esp + 0x34], esi
call fcn.1001f590
mov bl, byte [0x100c69ac]
mov edx, dword [0x100c4a14]
mov esi, dword [esp + 0x1c]
xor edi, edi
mov dword [esp + 0x28], edi
nop
movzx ecx, byte [esi + edi*2 + 1]
mov eax, dword [0x100c75a4]
lea ecx, [eax + ecx*8]
mov al, byte [esi + edi*2]
mov dword [esp + 0x18], ecx
mov edi, dword [esp + 0x18]
mov byte [ecx + 7], al
xor ecx, ecx
mov dword [esp + 0x2c], ecx
test bl, bl
jne 0x1001f17c
push 0xc
xor eax, eax
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
push str.Kernel32.dll
lea ecx, [esp + 0x3c]
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], 0
mov word [esp + 0x3c], ax
call fcn.10012a10
mov byte [esp + 0x3e0], 2
lea ecx, [esp + 0x34]
call fcn.10023030
mov edx, 0x100ad6f4
mov ecx, eax
call fcn.10023ba0
mov edi, eax
mov byte [esp + 0x3e0], bl
cmp dword [esp + 0x48], 8
jb 0x1001f149
push dword [esp + 0x34]
call fcn.10076e4c
add esp, 4
xor eax, eax
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
test edi, edi
jne 0x1001f168
xor edx, edx
jmp 0x1001f16c
call edi
mov edx, eax
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x18]
mov bl, 1
mov byte [0x100c69ac], bl
imul edx, edx, 0x3539d
add edx, 0x269f09
mov eax, edx
shr eax, 0x10
and al, 0x7f
mov byte [ecx + edi], al
inc ecx
mov dword [0x100c4a14], edx
mov dword [esp + 0x2c], ecx
cmp ecx, 7
jb 0x1001f0d1
mov edi, dword [esp + 0x28]
inc edi
mov dword [esp + 0x28], edi
cmp edi, 0x80
jl 0x1001f0b0
mov esi, dword [esp + 0x30]
push esi
mov ecx, 0x100c7598
call fcn.1001f590
xor ebx, ebx
test esi, esi
jle 0x1001f22a
mov edx, dword [0x100c75a4]
mov dword [esp + 0x18], edx
lea ebx, [ebx]
xor edi, edi
lea ecx, [edx + 7]
movzx eax, byte [ecx]
cmp eax, ebx
je 0x1001f1f6
inc edi
add ecx, 8
cmp edi, esi
jl 0x1001f1e5
jmp 0x1001f225
movzx edx, byte [edx + ebx*8 + 7]
mov ecx, dword [esp + 0x18]
mov eax, dword [0x100c7598]
mov ecx, dword [ecx + edi*8]
mov dword [eax + edx*8], ecx
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + edi*8 + 4]
mov eax, dword [0x100c7598]
mov dword [eax + edx*8 + 4], ecx
mov edx, dword [0x100c75a4]
mov dword [esp + 0x18], edx
inc ebx
cmp ebx, esi
jl 0x1001f1e0
mov dword [esp + 0x3e0], 0xffffffff
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x1001f25e
push eax
call fcn.10076e4c
add esp, 4
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov ecx, dword [esp + 0x3d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c0]
xor ecx, esp
call fcn.10076e3d
mov esp, ebp
pop ebp
ret