Function at 0x1000a380
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov eax, dword [0x1012c310]
xor eax, esp
mov dword [esp + 0x18], eax
mov ecx, dword [0x10227b5c]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 8]
push eax
push 4
push 0xf
mov bl, 0x72
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227b5c]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0xf
push eax
call esi
mov eax, dword [0x10227b34]
lea edx, [esp + 8]
push edx
push 4
push 0x11
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227b34]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x11
push eax
call esi
mov ecx, dword [0x10227d44]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227d44]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x102279f4]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102279f4]
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
mov edx, dword [esp + 8]
push 0
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10227cf4]
lea eax, [esp + 8]
push eax
push 4
push 0x11
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227cf4]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x11
push eax
call esi
mov eax, dword [0x10227bb8]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227bb8]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10227d24]
lea eax, [esp + 8]
push eax
push 4
push 0x11
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227d24]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x11
push eax
call esi
mov eax, dword [0x10227c6c]
lea edx, [esp + 8]
push edx
push 4
push 0xf
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227c6c]
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
mov edx, dword [esp + 8]
push 0
push edx
push 0xf
push eax
call esi
mov ecx, dword [0x10227c64]
lea eax, [esp + 8]
push eax
push 4
push 0x10
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227c64]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x10
push eax
call esi
mov eax, dword [0x10227d30]
lea edx, [esp + 8]
push edx
push 4
push 0x10
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227d30]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x10
push eax
call esi
mov ecx, dword [0x10227d70]
lea eax, [esp + 8]
push eax
push 4
push 0x10
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227d70]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x10
push eax
call esi
mov eax, dword [0x10227c98]
lea edx, [esp + 8]
push edx
push 4
push 0x10
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227c98]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x10
push eax
call esi
mov ecx, dword [0x102279ec]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102279ec]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10227b6c]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227b6c]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10227be0]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227be0]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10227bd0]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227bd0]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10227d50]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227d50]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10227c90]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227c90]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10227cb0]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227cb0]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10227a9c]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227a9c]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov byte [esp + 0xc], 0x53
mov ecx, dword [0x10227ba8]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227ba8]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10227cb4]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227cb4]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10227a74]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227a74]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10227b90]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [0x10227b6c]
mov edx, dword [esp + 0xc]
mov dword [ecx], edx
mov eax, dword [esp + 8]
mov ecx, dword [0x10227b90]
push 0
push eax
push 0x12
push ecx
call esi
mov byte [esp + 0xc], 0x53
mov eax, dword [0x10227c94]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227c94]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10227a00]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227a00]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10227b28]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227b28]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10227d38]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10227d38]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
pop esi
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10096904
add esp, 0x1c
ret