Function at 0x1000a910
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov eax, dword [0x101252d0]
xor eax, esp
mov dword [esp + 0x18], eax
mov ecx, dword [0x1022089c]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 8]
push eax
push 4
push 0xf
mov bl, 0x72
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x1022089c]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0xf
push eax
call esi
mov eax, dword [0x10220874]
lea edx, [esp + 8]
push edx
push 4
push 0x11
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220874]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x11
push eax
call esi
mov ecx, dword [0x10220a84]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220a84]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10220740]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220740]
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
mov edx, dword [esp + 8]
push 0
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10220a3c]
lea eax, [esp + 8]
push eax
push 4
push 0x11
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220a3c]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x11
push eax
call esi
mov eax, dword [0x102208fc]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102208fc]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10220a68]
lea eax, [esp + 8]
push eax
push 4
push 0x11
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220a68]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x11
push eax
call esi
mov eax, dword [0x102209ac]
lea edx, [esp + 8]
push edx
push 4
push 0xf
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102209ac]
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
mov edx, dword [esp + 8]
push 0
push edx
push 0xf
push eax
call esi
mov ecx, dword [0x102209a4]
lea eax, [esp + 8]
push eax
push 4
push 0x10
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102209a4]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x10
push eax
call esi
mov eax, dword [0x10220a70]
lea edx, [esp + 8]
push edx
push 4
push 0x10
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220a70]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x10
push eax
call esi
mov ecx, dword [0x10220aac]
lea eax, [esp + 8]
push eax
push 4
push 0x10
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220aac]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x10
push eax
call esi
mov eax, dword [0x102209e0]
lea edx, [esp + 8]
push edx
push 4
push 0x10
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102209e0]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x10
push eax
call esi
mov ecx, dword [0x10220738]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220738]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x102208ac]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102208ac]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10220924]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220924]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x10220914]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220914]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10220a90]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220a90]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x102209d8]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102209d8]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x102209f8]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102209f8]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x102207e0]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102207e0]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov byte [esp + 0xc], 0x53
mov ecx, dword [0x102208f0]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102208f0]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x102209fc]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102209fc]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x102207b8]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102207b8]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x102208d4]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov ecx, dword [0x102208ac]
mov edx, dword [esp + 0xc]
mov dword [ecx], edx
mov eax, dword [esp + 8]
mov ecx, dword [0x102208d4]
push 0
push eax
push 0x12
push ecx
call esi
mov byte [esp + 0xc], 0x53
mov eax, dword [0x102209dc]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102209dc]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x1022074c]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x1022074c]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
mov eax, dword [0x102207e4]
lea edx, [esp + 8]
push edx
push 4
push 0x12
push eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x102207e4]
mov ecx, dword [esp + 0xc]
push 0
mov dword [eax], ecx
mov edx, dword [esp + 0xc]
push edx
push 0x12
push eax
call esi
mov ecx, dword [0x10220a78]
lea eax, [esp + 8]
push eax
push 4
push 0x12
push ecx
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x74
mov byte [esp + 0x1e], 0x61
mov byte [esp + 0x1f], bl
call esi
mov eax, dword [0x10220a78]
mov edx, dword [esp + 0xc]
push 0
mov dword [eax], edx
mov ecx, dword [esp + 0xc]
push ecx
push 0x12
push eax
call esi
pop esi
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10091714
add esp, 0x1c
ret