Function at 0x100884ab
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call fcn.10070392
test al, al
pop ecx
je 0x100886cb
push esi
call fcn.1008844b
mov dword [esp], str.Macromedia
push esi
call fcn.100883b3
push str.Flash_Player
push esi
call fcn.100883b3
xor ebx, ebx
add esp, 0x10
cmp byte [ebp + 0xc], bl
je 0x100886cb
push str.SharedObjects
push esi
call fcn.100883b3
push esi
call fcn.100883eb
push dword [esi]
call fcn.10070152
add esp, 0x10
test al, al
jne 0x1008851d
mov ecx, esi
call fcn.10016966
jmp 0x100886cb
push esi
call fcn.1008844b
pop ecx
push esi
lea ecx, [ebp - 0x14]
call fcn.10016981
lea eax, [ebp - 0x14]
push 0x100c4ba4
push eax
call fcn.100883b3
lea eax, [ebp - 0x14]
push eax
call fcn.100883eb
lea eax, [ebp - 0x30]
mov dword [ebp - 0x2c], ebx
push eax
mov dword [ebp - 0x28], ebx
push dword [ebp - 0x14]
mov dword [ebp - 0x24], ebx
mov byte [ebp + 0xf], 1
mov byte [ebp + 0xb], bl
call fcn.10070412
add esp, 0x14
cmp eax, ebx
mov dword [ebp - 4], eax
mov edi, 0x100cf2e0
je 0x100885b4
cmp byte [ebp + 0xf], bl
je 0x100885a2
cmp dword [ebp - 0x30], 1
jne 0x1008858f
cmp dword [ebp - 0x28], 8
jne 0x1008858f
push dword [ebp - 0x2c]
mov byte [ebp + 0xb], 1
push esi
call fcn.100883b3
pop ecx
pop ecx
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 4]
call fcn.100704d0
pop ecx
mov byte [ebp + 0xf], al
pop ecx
jmp 0x1008856f
push dword [ebp - 4]
call fcn.10070592
cmp byte [ebp + 0xb], bl
pop ecx
jne 0x100886b7
lea eax, [ebp - 8]
push 8
push eax
mov byte [ebp - 0x50], 0x41
mov byte [ebp - 0x4f], 0x42
mov byte [ebp - 0x4e], 0x43
mov byte [ebp - 0x4d], 0x44
mov byte [ebp - 0x4c], 0x45
mov byte [ebp - 0x4b], 0x46
mov byte [ebp - 0x4a], 0x47
mov byte [ebp - 0x49], 0x48
mov byte [ebp - 0x48], 0x4a
mov byte [ebp - 0x47], 0x4b
mov byte [ebp - 0x46], 0x4c
mov byte [ebp - 0x45], 0x4d
mov byte [ebp - 0x44], 0x4e
mov byte [ebp - 0x43], 0x50
mov byte [ebp - 0x42], 0x51
mov byte [ebp - 0x41], 0x52
mov byte [ebp - 0x40], 0x53
mov byte [ebp - 0x3f], 0x54
mov byte [ebp - 0x3e], 0x55
mov byte [ebp - 0x3d], 0x56
mov byte [ebp - 0x3c], 0x57
mov byte [ebp - 0x3b], 0x58
mov byte [ebp - 0x3a], 0x59
mov byte [ebp - 0x39], 0x5a
mov byte [ebp - 0x38], 0x32
mov byte [ebp - 0x37], 0x33
mov byte [ebp - 0x36], 0x34
mov byte [ebp - 0x35], 0x35
mov byte [ebp - 0x34], 0x36
mov byte [ebp - 0x33], 0x37
mov byte [ebp - 0x32], 0x38
mov byte [ebp - 0x31], 0x39
call fcn.1007298e
pop ecx
test al, al
pop ecx
jne 0x10088656
mov ecx, esi
call fcn.10016966
push dword [ebp - 0x2c]
mov edi, 0x100cf2e0
jmp 0x100886ba
push 0x100cf29c
push esi
call fcn.100883b3
pop ecx
pop ecx
mov al, byte [ebp + ebx - 8]
mov ecx, esi
and eax, 0x1f
mov al, byte [ebp + eax - 0x50]
push eax
call fcn.10016ac3
inc ebx
cmp ebx, 8
jl 0x10088663
push esi
lea ecx, [ebp - 0x20]
call fcn.10016981
lea eax, [ebp - 0x20]
push eax
call fcn.100883eb
push dword [ebp - 0x20]
call fcn.10070152
pop ecx
test al, al
pop ecx
jne 0x100886ad
mov ecx, esi
call fcn.10016966
push dword [ebp - 0x20]
mov edi, 0x100cf2e0
jmp 0x100886b0
push dword [ebp - 0x20]
mov ecx, edi
call fcn.10018e64
push dword [ebp - 0x2c]
mov ecx, edi
call fcn.10018e64
push dword [ebp - 0x14]
mov ecx, edi
call fcn.10018e64
pop edi
pop esi
pop ebx
leave
ret