Function at 0x1004a480
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x30
mov dword [ebp - 0x34], ecx
mov eax, dword [0x10070264]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0x3aabccdd
jmp 0x1004a4b7
cmove eax, esi
cmp dword [0x10070b84], 0xa
mov edx, 0xe55598ce
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, esi
cmp eax, 0x8f384d0
jle 0x1004a520
cmp eax, 0x2be22228
jle 0x1004a570
cmp eax, 0x6bce7d21
jg 0x1004a606
cmp eax, 0x3aabccdc
jg 0x1004a709
cmp eax, 0x2be22229
je 0x1004a7fc
cmp eax, 0x2fb9c1bb
jne 0x1004a4b7
mov eax, dword [0x10070b80]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xe55598ce
mov esi, 0x94fa5058
jmp 0x1004a49d
cmp eax, 0xacb659bf
jg 0x1004a5d0
cmp eax, 0x90437c08
jle 0x1004a631
cmp eax, 0x9af89af2
jg 0x1004a72b
cmp eax, 0x90437c09
je 0x1004a806
cmp eax, 0x94fa5058
jne 0x1004a4b7
mov eax, 0x852124e3
jmp 0x1004a4b7
cmp eax, 0x11980eeb
jle 0x1004a693
cmp eax, 0x1cbd56c4
jg 0x1004a74b
cmp eax, 0x11980eec
je 0x1004a810
cmp eax, 0x154a14d8
jne 0x1004a4b7
mov edx, dword [0x10070b80]
mov ecx, dword [0x10070b84]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xacb659c0
mov esi, 0x11980eec
jmp 0x1004aa46
cmp eax, 0xd7d87dc5
jle 0x1004a6db
cmp eax, 0xe55598cd
jg 0x1004a79e
cmp eax, 0xd7d87dc6
je 0x1004a860
cmp eax, 0xe1f873b5
jne 0x1004a4b7
mov eax, 0x103529eb
jmp 0x1004a4b7
cmp eax, 0x72768c01
jg 0x1004a7e7
cmp eax, 0x6bce7d22
je 0x1004a86a
cmp eax, 0x72312064
jne 0x1004a4b7
mov eax, 0x6bce7d22
jmp 0x1004a4b7
cmp eax, 0x84085ae2
je 0x1004a89e
cmp eax, 0x852124e3
je 0x1004a8d2
cmp eax, 0x8663f642
jne 0x1004a4b7
mov eax, dword [0x10070b80]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x5a8963d1
mov esi, 0xa66d4678
cmove eax, esi
cmp dword [0x10070b84], 0xa
setl dl
mov ebx, 0x5a8963d1
cmovge eax, ebx
xor dl, cl
cmovne eax, esi
xor ebx, ebx
jmp 0x1004a4b7
cmp eax, 0x8f384d1
je 0x1004a8df
cmp eax, 0xad6e7c6
je 0x1004a915
cmp eax, 0x103529eb
jne 0x1004a4b7
mov eax, dword [ebp - 0x24]
mov eax, dword [0x10070b80]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xe55598ce
mov esi, 0x2fb9c1bb
jmp 0x1004a49d
cmp eax, 0xacb659c0
je 0x1004a949
cmp eax, 0xd338144b
je 0x1004a970
cmp eax, 0xd78b645e
jne 0x1004a4b7
mov eax, dword [ebp - 0x28]
mov eax, 0x154a14d8
jmp 0x1004a4b7
cmp eax, 0x3aabccdd
je 0x1004a9c0
cmp eax, 0x5a8963d1
jne 0x1004a4b7
mov eax, 0x8663f642
xor ebx, ebx
jmp 0x1004a4b7
cmp eax, 0x9af89af3
je 0x1004aa04
cmp eax, 0xa66d4678
jne 0x1004a4b7
mov eax, 0x84085ae2
jmp 0x1004a4b7
cmp eax, 0x1cbd56c5
je 0x1004aa17
cmp eax, 0x25846043
jne 0x1004a4b7
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov edx, dword [0x10070b80]
mov ecx, dword [0x10070b84]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9af89af3
mov esi, 0xd7d87dc6
jmp 0x1004aa46
cmp eax, 0xe55598ce
je 0x1004aa5c
cmp eax, 0xf298a606
jne 0x1004a4b7
mov eax, dword [0x10070b80]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x5a8963d1
mov esi, 0x8663f642
cmove eax, esi
cmp dword [0x10070b84], 0xa
mov edx, 0x5a8963d1
jmp 0x1004a4ac
cmp eax, 0x764c0ac2
jne 0x1004aa66
mov eax, 0x8f384d1
jmp 0x1004a4b7
mov eax, 0x1cbd56c5
jmp 0x1004a4b7
mov eax, 0x103529eb
jmp 0x1004a4b7
push dword [ebp - 0x24]
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov ebx, dword [eax]
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, dword [0x10070b80]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xacb659c0
mov esi, 0x764c0ac2
cmove eax, esi
cmp dword [0x10070b84], 0xa
mov edx, 0xacb659c0
jmp 0x1004a4ac
mov eax, 0xad6e7c6
jmp 0x1004a4b7
mov eax, dword [0x10070b80]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x72312064
mov esi, 0x90437c09
cmove eax, esi
cmp dword [0x10070b84], 0xa
mov edx, 0x72312064
jmp 0x1004a4ac
mov eax, dword [0x10070b80]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x9af89af3
mov esi, 0x25846043
cmove eax, esi
cmp dword [0x10070b84], 0xa
mov edx, 0x9af89af3
jmp 0x1004a4ac
mov dword [ebp - 0x3c], ebx
mov eax, 0x72768c02
jmp 0x1004a4b7
mov eax, dword [ebp - 0x28]
mov eax, dword [0x10070b80]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x2be22229
mov esi, 0x1cbd56c5
cmove eax, esi
cmp dword [0x10070b84], 0xa
mov edx, 0x2be22229
jmp 0x1004a4ac
mov edx, dword [0x10070b80]
mov ecx, dword [0x10070b84]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x72312064
mov esi, 0x6bce7d22
jmp 0x1004aa46
push dword [ebp - 0x24]
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov ebx, dword [eax]
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, 0x11980eec
jmp 0x1004a4b7
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x38]
call fcn.1004a030
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x65797a55
mov dword [eax + 4], 0x78775e73
mov dword [eax + 8], 0x737a72
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x24]
call fcn.1004a030
test edi, edi
mov eax, 0xd78b645e
mov ecx, 0xf298a606
cmove eax, ecx
jmp 0x1004a4b7
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x18], 0x7a7a7238
mov dword [ebp - 0x1c], 0x24257a73
mov dword [ebp - 0x20], 0x7864737d
lea eax, [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov eax, 0xd338144b
jmp 0x1004a4b7
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, 0x25846043
jmp 0x1004a4b7
mov edx, dword [0x10070b80]
mov ecx, dword [0x10070b84]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2be22229
mov esi, 0xe1f873b5
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x1004a4b7
mov eax, 0x2fb9c1bb
jmp 0x1004a4b7
cmp eax, 0x72768c02
jne 0x1004a4b7
mov esi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005429d
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret