Function at 0x3aaa9b3b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x5c
mov eax, 0x3ab4ac8e
call fcn.3ab359d8
mov eax, dword [ebp + 0xc]
mov esi, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x14]
xor ebx, ebx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], eax
mov edi, edx
cmp esi, ebx
je 0x3aaa9dab
cmp eax, ebx
je 0x3aaa9dab
mov dword [esi], ebx
mov dword [eax], ebx
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x20], ebx
call fcn.3aaa9435
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], ebx
call fcn.3aaa9493
test al, al
jne 0x3aaa9bd0
push dword [ebp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov edi, eax
cmp edi, ebx
jne 0x3aaa9ba1
mov ebx, 0x8007000e
jmp 0x3aaa9bba
push dword [ebp + 0x10]
push dword [ebp - 0x34]
push edi
call fcn.3ab3c1f6
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x38]
mov dword [esi], edi
add esp, 0xc
mov dword [ecx], eax
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], 0x3aa6ecd0
call fcn.3aa987fc
mov eax, ebx
jmp 0x3aaa9dae
push ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0x28]
push eax
call dword [ebp - 0x40]
mov esi, dword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x3aaa9c0d
call esi
cmp eax, 0x80090016
jne 0x3aaa9c00
push 8
push 1
push ebx
push ebx
lea eax, [ebp - 0x28]
push eax
call dword [ebp - 0x40]
test eax, eax
jne 0x3aaa9c0d
call esi
mov dword [ebp - 0x20], eax
cmp eax, ebx
jne 0x3aaa9d97
lea eax, [ebp - 0x30]
push eax
push ebx
push ebx
push 0x8003
push dword [ebp - 0x28]
call dword [ebp - 0x44]
test eax, eax
jne 0x3aaa9c2c
call esi
mov dword [ebp - 0x20], eax
jmp 0x3aaa9d8b
cmp edi, ebx
je 0x3aaa9c51
cmp word [edi], bx
je 0x3aaa9c51
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x3aaa9c3a
sub eax, edx
sar eax, 1
push ebx
lea eax, [eax + eax + 2]
push eax
push edi
jmp 0x3aaa9c87
xor eax, eax
lea edi, [ebp - 0x1b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
push ebx
push 0xa
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x17], 0x4a
mov byte [ebp - 0x1b], 0x72
mov byte [ebp - 0x19], 0x74
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x1c], 0x71
mov byte [ebp - 0x14], 0x67
mov byte [ebp - 0x18], 0x64
mov byte [ebp - 0x15], 0x75
mov byte [ebp - 0x1a], 0x62
mov byte [ebp - 0x16], 0x65
push eax
push dword [ebp - 0x30]
call dword [ebp - 0x48]
test eax, eax
jne 0x3aaa9c9e
call esi
mov dword [ebp - 0x20], eax
cmp eax, ebx
jne 0x3aaa9d80
lea eax, [ebp - 0x2c]
push eax
push ebx
push dword [ebp - 0x30]
push 0x6801
push dword [ebp - 0x28]
call dword [ebp - 0x4c]
test eax, eax
jne 0x3aaa9cbf
call esi
mov dword [ebp - 0x20], eax
jmp 0x3aaa9d80
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x24], eax
cmp dword [ebp + 8], ebx
je 0x3aaa9cda
push eax
lea eax, [ebp - 0x24]
push eax
push ebx
push ebx
push 1
push ebx
push dword [ebp - 0x2c]
call dword [ebp - 0x50]
push dword [ebp - 0x24]
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov edi, eax
cmp edi, ebx
jne 0x3aaa9cf5
mov dword [ebp - 0x20], 0x8007000e
jmp 0x3aaa9d75
push dword [ebp + 0x10]
push dword [ebp - 0x34]
push edi
call fcn.3ab3c1f6
add esp, 0xc
lea eax, [ebp - 0x24]
cmp dword [ebp + 8], ebx
je 0x3aaa9d1d
push dword [ebp + 0x10]
push eax
push edi
push ebx
push 1
push ebx
push dword [ebp - 0x2c]
call dword [ebp - 0x50]
jmp 0x3aaa9d29
push eax
push edi
push ebx
push 1
push ebx
push dword [ebp - 0x2c]
call dword [ebp - 0x54]
cmp eax, ebx
jne 0x3aaa9d50
call esi
mov dword [ebp - 0x20], eax
cmp eax, 0x80090010
jne 0x3aaa9d4b
push dword [ebp + 0x10]
push dword [ebp - 0x34]
push edi
call fcn.3ab3c1f6
add esp, 0xc
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jne 0x3aaa9d5f
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov dword [eax], edi
mov eax, dword [ebp - 0x24]
mov dword [ecx], eax
jmp 0x3aaa9d75
mov ecx, dword [ebp - 0x24]
mov eax, edi
cmp ecx, ebx
je 0x3aaa9d6e
mov byte [eax], bl
inc eax
dec ecx
jne 0x3aaa9d68
push edi
call dword [sym.imp.ole32.dll_CoTaskMemFree]
cmp dword [ebp - 0x2c], ebx
je 0x3aaa9d80
push dword [ebp - 0x2c]
call dword [ebp - 0x58]
cmp dword [ebp - 0x30], ebx
je 0x3aaa9d8b
push dword [ebp - 0x30]
call dword [ebp - 0x5c]
cmp dword [ebp - 0x28], ebx
je 0x3aaa9d97
push ebx
push dword [ebp - 0x28]
call dword [ebp - 0x60]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], 0x3aa6ecd0
call fcn.3aa987fc
mov eax, dword [ebp - 0x20]
jmp 0x3aaa9dae
push 0x57
pop eax
call fcn.3ab35a6a
ret 0x10