Function at 0x100480c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x77c
mov eax, dword [0x10269114]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x770], 0
mov dword [ebp - 0x758], 0
mov dword [ebp - 0x758], 0
jmp 0x10048102
mov eax, dword [ebp - 0x758]
add eax, 1
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 0x10
jge 0x10048384
mov dword [ebp - 0x764], 0
mov byte [ebp - 0x20], 0x5c
mov byte [ebp - 0x1f], 0x5c
mov byte [ebp - 0x1e], 0x5c
mov byte [ebp - 0x1d], 0x5c
mov byte [ebp - 0x1c], 0x2e
mov byte [ebp - 0x1b], 0x5c
mov byte [ebp - 0x1a], 0x5c
mov byte [ebp - 0x19], 0x53
mov byte [ebp - 0x18], 0x63
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x16], 0x69
mov byte [ebp - 0x15], 0x25
mov byte [ebp - 0x14], 0x64
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], 0
mov ecx, dword [ebp - 0x758]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x350]
push eax
call fcn.10033ac0
add esp, 0xc
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
lea ecx, [ebp - 0x350]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 0xffffffff
je 0x1004837f
mov dword [ebp - 0x760], 0
mov dword [ebp - 0x760], 0
jmp 0x100481c3
mov edx, dword [ebp - 0x760]
add edx, 1
mov dword [ebp - 0x760], edx
cmp dword [ebp - 0x760], 2
jge 0x10048372
lea eax, [ebp - 0x250]
mov dword [ebp - 0x75c], eax
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x768], ecx
push 0x22d
push 0
lea edx, [ebp - 0x250]
push edx
call fcn.1004e550
add esp, 0xc
mov eax, dword [ebp - 0x75c]
mov dword [eax], 0x1c
mov ecx, dword [ebp - 0x75c]
mov dword [ecx + 0xc], 0x2710
mov edx, dword [ebp - 0x75c]
mov dword [edx + 0x18], 0x211
mov eax, dword [ebp - 0x75c]
mov dword [eax + 0x10], 0x1b0501
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xf], 0x43
mov byte [ebp - 0xe], 0x53
mov byte [ebp - 0xd], 0x49
mov byte [ebp - 0xc], 0x44
mov byte [ebp - 0xb], 0x49
mov byte [ebp - 0xa], 0x53
mov byte [ebp - 9], 0x4b
mov byte [ebp - 8], 0
push 8
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x75c]
add edx, 4
push edx
call fcn.1005e4c0
add esp, 0xc
mov eax, dword [ebp - 0x768]
mov byte [eax + 0xa], 0xec
mov ecx, dword [ebp - 0x768]
mov dl, byte [ebp - 0x760]
mov byte [ecx + 0xc], dl
push 0
lea eax, [ebp - 0x77c]
push eax
push 0x22d
lea ecx, [ebp - 0x250]
push ecx
push 0x3c
lea edx, [ebp - 0x250]
push edx
push 0x4d008
mov eax, dword [ebp - 0x764]
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1004836d
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x774], ecx
mov edx, dword [ebp - 0x774]
add edx, 0x10
mov dword [ebp - 0x76c], edx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x76c]
movsx eax, byte [edx + ecx + 0x36]
test eax, eax
je 0x1004836d
mov ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x778], ecx
mov dword [ebp - 0x754], 0
mov dword [ebp - 0x754], 0
jmp 0x10048321
mov edx, dword [ebp - 0x754]
add edx, 1
mov dword [ebp - 0x754], edx
cmp dword [ebp - 0x754], 0x100
jge 0x1004834c
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x778]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x754]
mov dword [ebp + eax*4 - 0x750], edx
jmp 0x10048312
mov ecx, dword [ebp + 8]
push ecx
push 0x13
push 0xa
lea edx, [ebp - 0x750]
push edx
call fcn.10047f20
add esp, 0x10
mov dword [ebp - 0x770], 1
jmp 0x100481b4
mov eax, dword [ebp - 0x764]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100480f3
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100499a5
mov esp, ebp
pop ebp
ret