Function at 0x1004ae70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x38
mov eax, dword [0x10070264]
xor eax, esp
mov dword [esp + 0x34], eax
mov dword [esp + 4], ecx
mov word [esp + 0x30], 0x7a
mov dword [esp + 0x2c], 0x7a72387a
mov dword [esp + 0x28], 0x7a726278
mov eax, dword [esp + 4]
lea esi, [esp + 0x28]
push esi
call fcn.1004a030
mov dword [esp + 0x10], esi
mov ebp, 0x4a514853
jmp 0x1004aed0
test edx, ecx
cmovne ebp, edi
cmp eax, 0xa
cmovge ebp, edi
nop word cs:[eax + eax]
cmp ebp, 0x329f324
jg 0x1004af20
cmp ebp, 0xdc522d1c
jg 0x1004af70
cmp ebp, 0xba07503b
jle 0x1004b07b
cmp ebp, 0xba07503c
je 0x1004b153
cmp ebp, 0xd310bfee
je 0x1004b15d
cmp ebp, 0xd48df9e2
jne 0x1004aed0
mov ebp, 0x5c718bd1
jmp 0x1004aed0
cmp ebp, 0x347a7a82
jle 0x1004b020
cmp ebp, 0x525db6d2
jle 0x1004b09f
cmp ebp, 0x525db6d3
je 0x1004b16b
cmp ebp, 0x5c718bd1
je 0x1004b185
cmp ebp, 0x7dbbbbc1
jne 0x1004aed0
mov ebp, 0x5c718bd1
jmp 0x1004aed0
cmp ebp, 0xec3fe892
jle 0x1004b0cf
cmp ebp, 0xec3fe893
je 0x1004b18f
cmp ebp, 0xf010be74
je 0x1004b1ac
cmp ebp, 0xf53473f9
jne 0x1004aed0
mov word [esp + 0x24], 0x6f
mov dword [esp + 0x20], 0x64797b73
mov dword [esp + 0x1c], 0x5b736079
mov dword [esp + 0x18], 0x5b7a6244
mov eax, dword [esp + 4]
lea eax, [esp + 0x18]
push eax
call fcn.1004a030
cmp dword [esp + 8], 0
setne byte [esp + 3]
mov eax, dword [0x10070b88]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
mov eax, 0x525db6d3
mov ebp, 0x1b420ee0
mov edx, 0x525db6d3
cmp ecx, 0xffffffff
sete cl
je 0x1004b003
mov edx, 0x1b420ee0
cmp dword [0x10070b8c], 0xa
cmovl ebp, edx
setl dl
xor dl, cl
cmovne ebp, eax
jmp 0x1004aed0
cmp ebp, 0x2e3b2343
jg 0x1004b12d
cmp ebp, 0x329f325
je 0x1004b1b6
cmp ebp, 0x1b420ee0
jne 0x1004b2bf
mov word [esp + 0x24], 0x6f
mov dword [esp + 0x20], 0x64797b73
mov dword [esp + 0x1c], 0x5b736079
mov dword [esp + 0x18], 0x5b7a6244
mov eax, dword [esp + 4]
lea eax, [esp + 0x18]
push eax
call fcn.1004a030
mov ebp, 0xf53473f9
jmp 0x1004aed0
cmp ebp, 0x8c853c7b
je 0x1004b1f3
cmp ebp, 0xa0fd95f0
jne 0x1004aed0
mov ebp, 0xf010be74
xor esi, esi
jmp 0x1004aed0
cmp ebp, 0x347a7a83
je 0x1004b230
cmp ebp, 0x4a514853
jne 0x1004aed0
mov ebp, 0x347a7a83
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 8], eax
jmp 0x1004aed0
cmp ebp, 0xdc522d1d
je 0x1004b26d
cmp ebp, 0xdc9c0749
jne 0x1004aed0
mov edx, dword [0x10070b88]
mov eax, dword [0x10070b8c]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov ebp, 0x8c853c7b
mov edx, 0x8c853c7b
jne 0x1004b11c
mov edx, 0xba07503c
cmp ecx, 0xffffffff
cmovne ebp, edx
cmp eax, 0xa
cmovge ebp, edx
jmp 0x1004aed0
cmp ebp, 0x2e3b2344
je 0x1004b277
cmp ebp, 0x3006ade5
jne 0x1004aed0
mov ebp, 0x2e3b2344
mov esi, dword [esp + 0xc]
jmp 0x1004aed0
mov ebp, 0x8c853c7b
jmp 0x1004aed0
mov dword [esp + 0x14], esi
mov ebp, 0xff8e91b
jmp 0x1004aed0
cmp byte [esp + 3], 0
mov ebp, 0xec3fe893
jne 0x1004aed0
mov ebp, 0xa0fd95f0
jmp 0x1004aed0
mov ebp, 0xd310bfee
jmp 0x1004aed0
lea eax, [esp + 0x18]
push eax
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0xc], eax
mov ebp, 0x329f325
jmp 0x1004aed0
mov ebp, 0xdc9c0749
jmp 0x1004aed0
mov edx, dword [0x10070b88]
mov eax, dword [0x10070b8c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebp, 0x2e3b2344
mov edi, 0x2e3b2344
jne 0x1004aeb6
mov edi, 0x3006ade5
jmp 0x1004aeb6
mov edx, dword [0x10070b88]
mov eax, dword [0x10070b8c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebp, 0xd48df9e2
mov edi, 0xd48df9e2
jne 0x1004aeb6
mov edi, 0xba07503c
jmp 0x1004aeb6
mov edx, dword [0x10070b88]
mov eax, dword [0x10070b8c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebp, 0xf53473f9
mov edi, 0xf53473f9
jne 0x1004aeb6
mov edi, 0x1b420ee0
jmp 0x1004aeb6
mov ebp, 0x7dbbbbc1
jmp 0x1004aed0
mov edx, dword [0x10070b88]
mov eax, dword [0x10070b8c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebp, 0xdc522d1d
mov edi, 0xdc522d1d
jne 0x1004b2ab
mov edi, 0x3006ade5
test edx, ecx
cmovne ebp, edi
cmp eax, 0xa
mov esi, dword [esp + 0xc]
cmovge ebp, edi
jmp 0x1004aed0
cmp ebp, 0xff8e91b
jne 0x1004aed0
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.1005429d
mov eax, esi
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret