Function at 0x100048a3
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
jae 0x10004849
jmp 0x10004844
call fcn.1000484b
jae 0x10004844
add esp, 4
jmp 0x10004850
dec dword [esp]
jno 0x10004855
jns 0x10004840
jp 0x10004859
add esp, 4
popf
jmp 0x10004860
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10004879
jne 0x10004879
call 0x1fc07bcd
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.10004d70
clc
jae 0x10004894
cmpsb byte [esi], byte es:[edi]
movsd dword es:[edi], dword [esi]
pushf
push 0xa
jae 0x100048a1
jmp 0x1000489c
call 0x100048a3
jae 0x1000489c
add esp, 4
jmp 0x100048a8
dec dword [esp]
jno 0x100048ad
jns 0x10004898
jp 0x100048b1
add esp, 4
popf
jmp 0x100048b8
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x2b1
xor edx, eax
add eax, edx
sub edx, 0x2b1
push eax
pop edx
xor edx, 0x813
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x2b1
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1000490c
jmp 0x1000490e
je 0x10004909
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10004928
jne 0x10004927
call 0x930439af
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10004936
jne 0x10004936
call 0x106a49a4
push 0
push 0
push 0
push 0x100038b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x10004a29
mov byte [ebp - 0x34], 0x45
mov byte [ebp - 0x33], 0x52
mov byte [ebp - 0x32], 0x52
mov byte [ebp - 0x31], 0x4f
mov byte [ebp - 0x30], 0x52
mov byte [ebp - 0x2f], 0x21
mov byte [ebp - 0x2e], 0x20
mov byte [ebp - 0x2d], 0x54
mov byte [ebp - 0x2c], 0x68
mov byte [ebp - 0x2b], 0x72
mov byte [ebp - 0x2a], 0x65
mov byte [ebp - 0x29], 0x61
mov byte [ebp - 0x28], 0x64
mov byte [ebp - 0x27], 0x20
mov byte [ebp - 0x26], 0x63
mov byte [ebp - 0x25], 0x72
mov byte [ebp - 0x24], 0x65
mov byte [ebp - 0x23], 0x61
mov byte [ebp - 0x22], 0x74
mov byte [ebp - 0x21], 0x69
mov byte [ebp - 0x20], 0x6f
mov byte [ebp - 0x1f], 0x6e
mov byte [ebp - 0x1e], 0x20
mov byte [ebp - 0x1d], 0x66
mov byte [ebp - 0x1c], 0x61
mov byte [ebp - 0x1b], 0x69
mov byte [ebp - 0x1a], 0x6c
mov byte [ebp - 0x19], 0x65
mov byte [ebp - 0x18], 0x64
mov byte [ebp - 0x17], 0x2c
mov byte [ebp - 0x16], 0x20
mov byte [ebp - 0x15], 0x54
mov byte [ebp - 0x14], 0x68
mov byte [ebp - 0x13], 0x72
mov byte [ebp - 0x12], 0x65
mov byte [ebp - 0x11], 0x61
mov byte [ebp - 0x10], 0x64
mov byte [ebp - 0xf], 0x20
mov byte [ebp - 0xe], 0x43
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 0xc], 0x64
mov byte [ebp - 0xb], 0x65
mov byte [ebp - 0xa], 0x20
mov byte [ebp - 9], 0x30
mov byte [ebp - 8], 0x78
mov byte [ebp - 7], 0x32
mov byte [ebp - 6], 0x21
mov byte [ebp - 5], 0
lea eax, [ebp - 0x34]
push eax
call fcn.10032ab0
add esp, 4
call fcn.10023ce0
xor eax, eax
test eax, eax
je 0x10004a32
jne 0x10004a31
call 0x93043ab9
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10004a40
jmp 0x10004a42
je 0x10004a3d
clc
jae 0x10004a47
sbb eax, dword [ebp + esi + 0x2ba]
xor eax, 0x2ba
xor edx, eax
add eax, edx
sub edx, 0x2ba
push eax
pop edx
xor edx, 0x82e
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x2ba
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10004a8f
jmp 0x10004a8a
call 0x10004a91
jae 0x10004a8a
add esp, 4
jmp 0x10004a96
dec dword [esp]
jno 0x10004a9b
jns 0x10004a86
jp 0x10004a9f
add esp, 4
popf
jmp 0x10004aa6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10004abf
jne 0x10004abf
call 0x1fc07e13
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ce42
mov esp, ebp
pop ebp
ret