Function at 0x10004300
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x28
mov eax, dword [0x1007a6b4]
xor eax, esp
mov dword [esp + 0x24], eax
xor al, al
mov cl, 0x66
mov byte [esp + 0x10], cl
mov byte [esp + 0x12], cl
mov cl, 0x75
mov byte [esp + 0x13], cl
mov byte [esp + 0x1a], cl
mov cl, 0x63
mov byte [esp + 1], al
mov byte [esp + 3], al
mov byte [esp + 4], al
mov byte [esp + 5], al
mov byte [esp + 0x1e], al
mov byte [esp + 0x21], al
mov byte [esp + 0x23], al
mov al, byte [0x1007efb4]
mov byte [esp + 0x1c], cl
mov byte [esp + 0x1d], cl
mov dl, 0x6e
push 0x24
lea ecx, [esp + 4]
add al, 0x30
push ecx
mov byte [esp + 8], 5
mov byte [esp + 0xa], 9
mov byte [esp + 0xe], 0x43
mov byte [esp + 0xf], 0x58
mov byte [esp + 0x10], 0x57
mov byte [esp + 0x11], 0x5f
mov byte [esp + 0x12], 0x54
mov byte [esp + 0x13], 0x69
mov byte [esp + 0x14], 0x73
mov byte [esp + 0x15], 0x68
mov byte [esp + 0x16], 0x65
mov byte [esp + 0x17], dl
mov byte [esp + 0x19], 0x61
mov byte [esp + 0x1c], 0x5f
mov byte [esp + 0x1d], 0x4c
mov byte [esp + 0x1e], 0x69
mov byte [esp + 0x1f], dl
mov byte [esp + 0x20], 0x67
mov byte [esp + 0x21], 0x71
mov byte [esp + 0x23], 0x41
mov byte [esp + 0x27], 1
mov byte [esp + 0x28], 0x31
mov byte [esp + 0x2a], al
call fcn.10001270
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.1002e6c3
add esp, 0x28
ret
sub esp, 8
push esi
xor esi, esi
cmp dword [0x1007efb0], esi
je case.default.0x100048e1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10073034]
mov edx, dword [0x1007bb48]
add ecx, edx
cmp ecx, eax
jae case.default.0x100048e1
mov dword [0x1007bb48], eax
mov eax, dword [0x1007f0ac]
cmp eax, 4
ja case.default.0x100048e1
jmp dword [eax*4 + 0x10004b34]
push 0x10042450
call fcn.100045a0
test eax, eax
je case.default.0x100048e1
push 0x64
push 0x16e
push 0x1da
mov dword [0x10073034], 0x7d0
call fcn.10019ec0
test eax, eax
je 0x10004b1f
push 0xa
push 0x16e
push 0x1da
call fcn.10019ec0
test eax, eax
je 0x10004b0b
mov dword [0x10073034], 0x32
pop esi
add esp, 8
jmp 0x10004300
mov esi, 0x7d0
push 0x10042434
mov dword [0x10073034], esi
call fcn.100045a0
test eax, eax
je case.default.0x100048e1
mov dword [0x10073034], esi
pop esi
add esp, 8
ret
push 0x1007f0b4
mov dword [0x10073034], 0x7d0
call fcn.100045a0
test eax, eax
je case.default.0x100048e1
push 4
push 0x482a10
mov dword [0x10073034], 0xbb8
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 0x482a10
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100049cf
mov eax, dword [esp + 8]
mov esi, dword ds:[eax]
mov eax, dword ds:[esi]
mov ecx, dword ds:[eax + 0x5c]
mov edx, dword ds:[ecx + 0x14]
add edx, esi
mov ecx, dword ds:[edx]
mov dword [esp + 4], ecx
mov ecx, dword [0x1007f0d4]
mov eax, dword [0x1007f0d0]
lea edx, [ecx + eax]
mov dword [0x1007f0e0], edx
mov edx, dword [esp + 4]
sub eax, ecx
add eax, edx
cmp dword [0x1007efb4], 1
mov dword [0x1007f0e4], eax
jbe 0x10004a16
mov ecx, dword [0x1007f0dc]
mov eax, dword [0x1007f0d8]
lea esi, [ecx + eax]
sub eax, ecx
add eax, edx
mov dword [0x1007f0e8], esi
mov dword [0x1007f0ec], eax
mov dword [0x1007f0ac], 3
pop esi
add esp, 8
ret
mov eax, dword [0x1007f0b0]
mov ecx, dword [eax*8 + 0x1007f0e4]
mov edx, dword [eax*8 + 0x1007f0e0]
push 0x64
push ecx
push edx
call fcn.10019ec0
test eax, eax
mov eax, dword [0x1007f0b0]
je 0x10004a9f
mov ecx, dword [eax*8 + 0x1007f0e4]
mov edx, dword [eax*8 + 0x1007f0e0]
push 0xa
push ecx
push edx
call fcn.10019ec0
test eax, eax
je 0x10004a80
cmp dword [0x1007e794], esi
jne case.default.0x100048e1
mov dword [0x1007e794], 1
pop esi
add esp, 8
ret
mov eax, dword [0x1007f0b0]
mov ecx, dword [eax*8 + 0x1007f0e4]
mov edx, dword [eax*8 + 0x1007f0e0]
push ecx
push edx
call fcn.1002c540
pop esi
add esp, 8
ret
mov ecx, dword [eax*8 + 0x1007f0d4]
mov edx, dword [eax*8 + 0x1007f0d0]
push ecx
push edx
call fcn.10019f30
pop esi
add esp, 8
ret
push 0x10042450
call fcn.100045a0
test eax, eax
je case.default.0x100048e1
push 0x64
push 0x16e
push 0x1da
mov dword [0x10073034], 0x7d0
call fcn.10019ec0
test eax, eax
je 0x10004b1f
push 0xa
push 0x16e
push 0x1da
call fcn.10019ec0
test eax, eax
je 0x10004b0b
call fcn.100043e0
mov dword [0x1007f0ac], esi
pop esi
add esp, 8
ret
push 0x16e
push 0x1da
call fcn.1002c540
pop esi
add esp, 8
ret
push 0x13d
push 0x9d
call fcn.10019f30
pop esi
add esp, 8
ret