Function at 0x280047ae
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
xor eax, eax
mov dword [ebp - 0xc], 0x4e52454b
mov byte [ebp - 4], al
mov byte [ebp - 0x92], al
mov byte [ebp - 0xae], al
mov byte [ebp - 0x78], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x20], al
lea eax, [ebp - 0xc]
push edi
push eax
mov dword [ebp - 8], 0x32334c45
mov dword [ebp - 0xac], 0x6c6c6946
mov dword [ebp - 0xa8], 0x736e6f43
mov dword [ebp - 0xa4], 0x4f656c6f
mov dword [ebp - 0xa0], 0x75707475
mov dword [ebp - 0x9c], 0x74744174
mov dword [ebp - 0x98], 0x75626972
mov word [ebp - 0x94], 0x6574
mov dword [ebp - 0xe4], 0x6c6c6946
mov dword [ebp - 0xe0], 0x736e6f43
mov dword [ebp - 0xdc], 0x4f656c6f
mov dword [ebp - 0xd8], 0x75707475
mov dword [ebp - 0xd4], 0x61684374
mov dword [ebp - 0xd0], 0x74636172
mov dword [ebp - 0xcc], 0x417265
mov dword [ebp - 0xc8], 0x43746547
mov dword [ebp - 0xc4], 0x6f736e6f
mov dword [ebp - 0xc0], 0x6353656c
mov dword [ebp - 0xbc], 0x6e656572
mov dword [ebp - 0xb8], 0x66667542
mov dword [ebp - 0xb4], 0x6e497265
mov word [ebp - 0xb0], 0x6f66
mov dword [ebp - 0x5c], 0x43746547
mov dword [ebp - 0x58], 0x65727275
mov dword [ebp - 0x54], 0x6f43746e
mov dword [ebp - 0x50], 0x6c6f736e
mov dword [ebp - 0x4c], 0x6e6f4665
mov dword [ebp - 0x48], 0x784574
mov dword [ebp - 0x104], 0x4e746547
mov dword [ebp - 0x100], 0x65626d75
mov dword [ebp - 0xfc], 0x43664f72
mov dword [ebp - 0xf8], 0x6f736e6f
mov dword [ebp - 0xf4], 0x6e49656c
mov dword [ebp - 0xf0], 0x45747570
mov dword [ebp - 0xec], 0x746e6576
mov word [ebp - 0xe8], 0x73
mov dword [ebp - 0x44], 0x6b656550
mov dword [ebp - 0x40], 0x736e6f43
mov dword [ebp - 0x3c], 0x49656c6f
mov dword [ebp - 0x38], 0x7475706e
mov word [ebp - 0x34], 0x41
mov dword [ebp - 0x90], 0x43746553
mov dword [ebp - 0x8c], 0x6f736e6f
mov dword [ebp - 0x88], 0x7543656c
mov dword [ebp - 0x84], 0x726f7372
mov dword [ebp - 0x80], 0x69736f50
mov dword [ebp - 0x7c], 0x6e6f6974
mov dword [ebp - 0x1c], 0x43746553
mov dword [ebp - 0x18], 0x6f736e6f
mov dword [ebp - 0x14], 0x6f4d656c
mov word [ebp - 0x10], 0x6564
mov dword [ebp - 0x30], 0x43746553
mov dword [ebp - 0x2c], 0x6f736e6f
mov dword [ebp - 0x28], 0x6954656c
mov dword [ebp - 0x24], 0x41656c74
mov dword [ebp - 0x74], 0x43746553
mov dword [ebp - 0x70], 0x65727275
mov dword [ebp - 0x6c], 0x6f43746e
mov dword [ebp - 0x68], 0x6c6f736e
mov dword [ebp - 0x64], 0x6e6f4665
mov dword [ebp - 0x60], 0x784574
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
test edi, edi
jne 0x280049fa
or eax, 0xffffffff
jmp 0x28004a9a
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea eax, [ebp - 0xac]
push eax
push edi
call esi
mov dword [0x2800cb60], eax
lea eax, [ebp - 0xe4]
push eax
push edi
call esi
mov dword [0x2800cb64], eax
lea eax, [ebp - 0xc8]
push eax
push edi
call esi
mov dword [0x2800cb68], eax
lea eax, [ebp - 0x5c]
push eax
push edi
call esi
mov dword [0x2800cb6c], eax
lea eax, [ebp - 0x104]
push eax
push edi
call esi
mov dword [0x2800cb70], eax
lea eax, [ebp - 0x90]
push eax
push edi
call esi
mov dword [0x2800cb78], eax
lea eax, [ebp - 0x44]
push eax
push edi
call esi
mov dword [0x2800cb74], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call esi
mov dword [0x2800cb7c], eax
lea eax, [ebp - 0x30]
push eax
push edi
call esi
mov dword [0x2800cb80], eax
lea eax, [ebp - 0x74]
push eax
push edi
call esi
mov dword [0x2800cb84], eax
or eax, 0xffffffff
push eax
push eax
push eax
push eax
call fcn.28004f9e
add esp, 0x10
xor eax, eax
pop esi
pop edi
leave
ret