Function at 0x1000ac20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov eax, dword [0x101222d0]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 8]
push eax
push 4
push 0xf
mov bl, 0x72
push 0xacaf48
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacaf48], ecx
mov edx, dword [esp + 0xc]
push edx
push 0xf
push 0xacaf48
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x11
push 0xacaf58
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacaf58], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x11
push 0xacaf58
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacaf6c
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacaf6c], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacaf6c
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacaf80
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacaf80], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacaf80
call esi
mov byte [esp + 0xc], 0x53
mov byte [esp + 0xd], 0x74
mov byte [esp + 0xe], 0x61
mov byte [esp + 0xf], bl
lea eax, [esp + 8]
push eax
push 4
push 0x11
push 0xacaf94
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacaf94], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x11
push 0xacaf94
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacafa8
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacafa8], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacafa8
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x11
push 0xacafbc
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacafbc], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x11
push 0xacafbc
call esi
lea eax, [esp + 8]
push eax
push 4
push 0xf
push 0xacafd0
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacafd0], ecx
mov edx, dword [esp + 0xc]
push edx
push 0xf
push 0xacafd0
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x10
push 0xacafe0
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
mov dword [0xacafe0], ecx
mov edx, dword [esp + 8]
push 0
push edx
push 0x10
push 0xacafe0
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x10
push 0xacaff0
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacaff0], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x10
push 0xacaff0
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x10
push 0xacb000
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacb000], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x10
push 0xacb000
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x10
push 0xacb010
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacb010], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x10
push 0xacb010
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacb054
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacb054], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacb054
call esi
mov byte [esp + 0xc], 0x53
mov byte [esp + 0xd], 0x74
mov byte [esp + 0xe], 0x61
mov byte [esp + 0xf], bl
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacb0a0
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacb0a0], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacb0a0
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacadb4
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacadb4], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacadb4
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacadc8
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacadc8], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacadc8
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacaddc
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacaddc], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacaddc
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacadf0
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
mov dword [0xacadf0], ecx
mov edx, dword [esp + 8]
push 0
push edx
push 0x12
push 0xacadf0
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacae04
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacae04], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacae04
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacae18
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacae18], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacae18
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacae2c
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacae2c], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacae2c
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacae40
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacae40], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacae40
call esi
mov byte [esp + 0xc], 0x53
mov byte [esp + 0xd], 0x74
mov byte [esp + 0xe], 0x61
mov byte [esp + 0xf], bl
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacae54
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacae54], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacae54
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacae68
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacb0a0], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacae68
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacae7c
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacae7c], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacae7c
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacae90
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacae90], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacae90
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacaea4
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
mov dword [0xacaea4], ecx
mov edx, dword [esp + 8]
push 0
push edx
push 0x12
push 0xacaea4
call esi
lea eax, [esp + 8]
push eax
push 4
push 0x12
push 0xacaeb8
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [esp + 0xc]
push 0
mov dword [0xacaeb8], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push 0xacaeb8
call esi
mov ecx, dword [esp + 0x20]
pop esi
pop ebx
xor ecx, esp
call fcn.10091e94
add esp, 0x1c
ret