Function at 0x900be5d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x2c
mov eax, 0x90a0db8
call fcn.09004275
mov esi, ecx
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.09018e9f
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp + 0x18]
mov dword [esi + 0x30], eax
mov al, byte [ebp + 0x1c]
mov byte [esi + 0x34], al
mov al, byte [ebp + 0x20]
mov byte [esi + 0x35], al
mov al, byte [ebp + 0x24]
mov byte [esi + 0x36], al
lea eax, [esi + 0x50]
push eax
mov dword [esi], vtable.ACETransform.0
mov word [esi + 0x4c], 0x100
mov byte [esi + 0x4e], 1
call dword [sym.imp.kernel32.dll_InitializeCriticalSection]
mov eax, dword [esi + 0x2c]
mov ebx, 0x42434c52
mov dword [ebp + 0x1c], 0x35636c72
mov ecx, 0x37434c52
mov dword [ebp + 0x20], 0x61626364
mov edi, 0x43434c52
mov dword [ebp + 0x24], 0x32636c72
mov edx, 0x36434c52
mov dword [ebp + 0xc], 0x36636c72
mov dword [ebp + 8], 0x41636c72
mov dword [ebp + 0x10], 0x39636c72
mov dword [ebp + 0x14], 0x38636c72
mov dword [ebp + 0x18], 0x37636c72
mov dword [ebp - 0x10], 0x42636c72
mov dword [ebp - 0x14], 0x46636c72
mov dword [ebp - 0x18], 0x45636c72
mov dword [ebp - 0x1c], 0x44636c72
mov dword [ebp - 0x20], 0x636d796b
mov dword [ebp - 0x24], 0x43636c72
mov dword [ebp - 0x28], 0x67386b30
mov dword [ebp - 0x2c], 0x70616263
mov dword [ebp - 0x30], 0x70726762
mov dword [ebp - 0x34], 0x706c6162
cmp eax, ebx
jg 0x900c03d
je 0x900c02e
cmp eax, edx
jg 0x900bfd1
je 0x900bfc2
test eax, eax
je 0x900bfb6
cmp eax, 0x32434c52
je 0x900bfa4
cmp eax, 0x33434c52
je 0x900c0e3
cmp eax, 0x34434c52
je 0x900bf92
cmp eax, 0x35434c52
jne 0x900c0dd
cmp byte [esi + 0x36], 0
cmovne eax, dword [ebp + 0x1c]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x41424344
cmovne eax, dword [ebp + 0x20]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x32434c52
cmovne eax, dword [ebp + 0x24]
jmp 0x900c117
mov dword [esi + 0x38], 0x6e756c6c
jmp 0x900c11a
cmp byte [esi + 0x36], 0
mov eax, edx
cmovne eax, dword [ebp + 0xc]
jmp 0x900c117
cmp eax, ecx
je 0x900c01f
cmp eax, 0x38434c52
je 0x900c00d
cmp eax, 0x39434c52
je 0x900bffb
cmp eax, 0x41434c52
jne 0x900c0dd
cmp byte [esi + 0x36], 0
cmovne eax, dword [ebp + 8]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x39434c52
cmovne eax, dword [ebp + 0x10]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x38434c52
cmovne eax, dword [ebp + 0x14]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, ecx
cmovne eax, dword [ebp + 0x18]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, ebx
cmovne eax, dword [ebp - 0x10]
jmp 0x900c117
cmp eax, 0x47524159
jg 0x900c0c1
je 0x900c0b2
cmp eax, edi
je 0x900c0a6
cmp eax, 0x434d594b
je 0x900c097
cmp eax, 0x44434c52
je 0x900c085
cmp eax, 0x45434c52
je 0x900c073
cmp eax, 0x46434c52
jne 0x900c0dd
cmp byte [esi + 0x36], 0
cmovne eax, dword [ebp - 0x14]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x45434c52
cmovne eax, dword [ebp - 0x18]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x44434c52
cmovne eax, dword [ebp - 0x1c]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x434d594b
cmovne eax, dword [ebp - 0x20]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, edi
cmovne eax, dword [ebp - 0x24]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x4731354b
cmovne eax, dword [ebp - 0x28]
jmp 0x900c117
cmp eax, 0x4c616220
je 0x900c10a
cmp eax, 0x52474220
je 0x900c0fb
cmp eax, 0x58595a20
je 0x900c0f2
cmp eax, 0x59436272
je 0x900c0e3
or dword [esi + 0x38], 0xffffffff
jmp 0x900c11a
cmp byte [esi + 0x36], 0
mov eax, 0x70414243
cmovne eax, dword [ebp - 0x2c]
jmp 0x900c117
mov dword [esi + 0x38], 0x5058595a
jmp 0x900c11a
cmp byte [esi + 0x36], 0
mov eax, 0x50524742
cmovne eax, dword [ebp - 0x30]
jmp 0x900c117
cmp byte [esi + 0x36], 0
mov eax, 0x504c4142
cmovne eax, dword [ebp - 0x34]
mov dword [esi + 0x38], eax
or dword [esi + 0x3c], 0xffffffff
or dword [esi + 0x40], 0xffffffff
cmp dword [esi + 0x28], 1
jne 0x900c132
mov eax, 0x67386b30
jmp 0x900c2cb
mov eax, dword [esi + 0x30]
cmp eax, edi
jg 0x900c216
je 0x900c202
cmp eax, ecx
jg 0x900c1b6
je 0x900c1ac
mov ecx, 0x32434c52
cmp eax, ecx
je 0x900c1a2
cmp eax, 0x33434c52
je 0x900c299
cmp eax, 0x34434c52
je 0x900c193
mov ecx, 0x35434c52
cmp eax, ecx
je 0x900c189
cmp eax, edx
jne 0x900c293
cmp byte [esi + 0x36], 0
mov eax, 0x36636c72
cmovne edx, eax
mov dword [esi + 0x44], edx
jmp 0x900c2ce
mov eax, 0x35636c72
jmp 0x900c25f
mov eax, 0x41424344
mov ecx, 0x61626364
jmp 0x900c2c4
mov eax, 0x32636c72
jmp 0x900c25f
mov eax, 0x37636c72
jmp 0x900c25f
mov ecx, 0x38434c52
cmp eax, ecx
je 0x900c1fb
mov ecx, 0x39434c52
cmp eax, ecx
je 0x900c1f4
mov ecx, 0x41434c52
cmp eax, ecx
je 0x900c1ed
cmp eax, ebx
jne 0x900c293
cmp byte [esi + 0x36], 0
mov eax, 0x42636c72
cmovne ebx, eax
mov dword [esi + 0x44], ebx
jmp 0x900c2ce
mov eax, 0x41636c72
jmp 0x900c25f
mov eax, 0x39636c72
jmp 0x900c25f
mov eax, 0x38636c72
jmp 0x900c25f
cmp byte [esi + 0x36], 0
mov eax, 0x43636c72
cmovne edi, eax
mov dword [esi + 0x44], edi
jmp 0x900c2ce
mov ecx, 0x47524159
cmp eax, ecx
jg 0x900c277
je 0x900c26b
mov ecx, 0x434d594b
cmp eax, ecx
je 0x900c25a
mov ecx, 0x44434c52
cmp eax, ecx
je 0x900c253
mov ecx, 0x45434c52
cmp eax, ecx
je 0x900c24c
mov ecx, 0x46434c52
cmp eax, ecx
jne 0x900c293
mov eax, 0x46636c72
jmp 0x900c25f
mov eax, 0x45636c72
jmp 0x900c25f
mov eax, 0x44636c72
jmp 0x900c25f
mov eax, 0x636d796b
cmp byte [esi + 0x36], 0
cmovne ecx, eax
mov dword [esi + 0x44], ecx
jmp 0x900c2ce
mov eax, 0x4731354b
mov ecx, 0x67386b30
jmp 0x900c2c4
cmp eax, 0x4c616220
je 0x900c2ba
cmp eax, 0x52474220
je 0x900c2ae
cmp eax, 0x58595a20
je 0x900c2a5
cmp eax, 0x59436272
je 0x900c299
or dword [esi + 0x44], 0xffffffff
jmp 0x900c2ce
mov eax, 0x70414243
mov ecx, 0x70616263
jmp 0x900c2c4
mov dword [esi + 0x44], 0x5058595a
jmp 0x900c2ce
mov eax, 0x50524742
mov ecx, 0x70726762
jmp 0x900c2c4
mov eax, 0x504c4142
mov ecx, 0x706c6162
cmp byte [esi + 0x36], 0
cmovne eax, ecx
mov dword [esi + 0x44], eax
or dword [esi + 0x48], 0xffffffff
mov eax, esi
call fcn.09002a23
ret 0x20