Function at 0x71a08bdf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov al, 0xff
push 0
mov byte [ebp - 8], 0x56
mov byte [ebp - 7], al
mov byte [ebp - 6], 0x75
mov byte [ebp - 5], 8
mov byte [ebp - 4], 0x8d
mov byte [ebp - 3], 0x88
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x75
mov byte [ebp - 0xe], 0xf0
mov byte [ebp - 0xd], 0x8d
mov byte [ebp - 0xc], 0x4d
mov byte [ebp - 0xb], 0xd0
mov byte [ebp - 2], 0x81
mov byte [ebp - 1], 0x3d
mov byte [ebp - 0x20], 0x8b
mov byte [ebp - 0x1f], 0x44
mov byte [ebp - 0x1e], 0x24
mov byte [ebp - 0x1d], 0x18
mov byte [ebp - 0x1c], 0xc7
mov byte [ebp - 0x1b], 0x44
mov byte [ebp - 0x1a], 0x24
mov byte [ebp - 0x19], 0x2c
mov byte [ebp - 0x18], al
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], al
mov byte [ebp - 0x15], al
mov byte [ebp - 0x14], 0x3b
mov byte [ebp - 0x13], 0xc6
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0x30], 0x8b
mov byte [ebp - 0x2f], 0x44
mov byte [ebp - 0x2e], 0x24
mov byte [ebp - 0x2d], 0x14
mov byte [ebp - 0x2c], 0xc7
mov byte [ebp - 0x2b], 0x44
mov byte [ebp - 0x2a], 0x24
mov byte [ebp - 0x29], 0x28
mov byte [ebp - 0x28], al
mov byte [ebp - 0x27], al
mov byte [ebp - 0x26], al
mov byte [ebp - 0x25], al
mov byte [ebp - 0x24], 0x3b
mov byte [ebp - 0x23], 0xc7
mov byte [ebp - 0x22], 0x74
mov byte [ebp - 0x21], 0xe
call edi
mov esi, 0x400000
mov ebx, eax
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
test eax, eax
mov dword [0x71a173e0], eax
je 0x71a08e46
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push esi
push dword [0x71a173e0]
push ebx
push dword [0x71a17388]
call fcn.71a0c8e1
add esp, 0x10
test eax, eax
je 0x71a08db7
lea eax, [ebp - 8]
push 6
push eax
push esi
push dword [0x71a173e0]
call fcn.71a08b8f
mov edx, dword [0x71a173e0]
add esp, 0x10
test eax, eax
je 0x71a08d2c
cmp word [eax + edx - 0x14], 0xd8b
lea ecx, [eax + edx]
jne 0x71a08d2c
add eax, 0x3fffec
mov dword [0x71a173ac], eax
add eax, 6
mov dword [0x71a173c0], eax
lea eax, [ecx - 0x12]
mov dword [0x71a173cc], eax
mov eax, dword [eax]
mov dword [0x71a173cc], eax
lea eax, [ebp - 0x20]
push 0xf
push eax
push esi
push edx
call fcn.71a08b8f
add esp, 0x10
test eax, eax
je 0x71a08d4a
add eax, 0x400000
mov dword [0x71a173d4], eax
lea eax, [ebp - 0x30]
push 0x10
push eax
push esi
push dword [0x71a173e0]
call fcn.71a08b8f
add esp, 0x10
test eax, eax
je 0x71a08d6d
add eax, 0x400000
mov dword [0x71a173d8], eax
lea eax, [ebp - 0x10]
push 6
push eax
push esi
push dword [0x71a173e0]
call fcn.71a0c89b
add esp, 0x10
test eax, eax
je 0x71a08db7
mov ecx, dword [0x71a173e0]
add ecx, eax
cmp word [ecx + 0xb], 0xd8b
jne 0x71a08db7
add eax, 0x40000b
mov dword [0x71a173c4], eax
add eax, 6
mov dword [0x71a173c8], eax
lea eax, [ecx + 0xd]
mov dword [0x71a173d0], eax
mov eax, dword [eax]
mov dword [0x71a173d0], eax
mov esi, 0x71a01684
push esi
call edi
test eax, eax
jne 0x71a08dca
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x71a01d4c
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x20
mov esi, eax
push dword [0x71a173e0]
push esi
push dword [0x71a17388]
call fcn.71a0c8e1
add esp, 0x10
test eax, eax
je 0x71a08e2e
lea eax, [ebp - 2]
push 2
push eax
push 0x20
push dword [0x71a173e0]
call fcn.71a0c89b
add esp, 0x10
test eax, eax
je 0x71a08e2e
add eax, esi
mov dword [0x71a173b0], eax
mov ecx, dword [eax + 2]
add eax, 0xa
mov dword [0x71a173b8], ecx
mov ecx, dword [eax - 4]
mov dword [0x71a173bc], ecx
mov dword [0x71a173b4], eax
push dword [0x71a173e0]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push dword [0x71a173e0]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
pop edi
cmp dword [0x71a173b0], eax
pop esi
pop ebx
setne al
leave
ret