Function at 0x900c91e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x44
mov eax, 0x90cf216
call fcn.09002329
mov esi, ecx
mov dword [ebp - 0x50], esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0907af86
mov eax, dword [ebp + 0x10]
and dword [esi + 0x2c], 0
mov dword [esi + 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x30], eax
mov eax, dword [ebp + 0x18]
mov dword [esi + 0x34], eax
mov al, byte [ebp + 0x1c]
mov byte [esi + 0x38], al
mov al, byte [ebp + 0x20]
mov byte [esi + 0x39], al
mov al, byte [ebp + 0x24]
mov byte [esi + 0x3a], al
lea eax, [esi + 0x58]
push eax
mov dword [esi], vtable.ACETransform.0
mov word [esi + 0x50], 0x100
mov byte [esi + 0x52], 1
mov dword [esi + 0x54], 1
call dword [sym.imp.kernel32.dll_InitializeCriticalSection]
mov ecx, dword [esi + 0x30]
mov edi, 0x37434c52
mov dword [ebp - 0x10], 0x35636c72
mov edx, 0x4731354b
mov dword [ebp - 0x14], 0x61626364
mov eax, 0x67386b30
mov dword [ebp - 0x18], 0x32636c72
mov ebx, 0x36434c52
mov dword [ebp - 0x1c], 0x36636c72
mov dword [ebp - 0x20], 0x41636c72
mov dword [ebp - 0x24], 0x39636c72
mov dword [ebp - 0x28], 0x38636c72
mov dword [ebp - 0x2c], 0x37636c72
mov dword [ebp - 0x30], 0x42636c72
mov dword [ebp - 0x34], 0x46636c72
mov dword [ebp - 0x38], 0x45636c72
mov dword [ebp - 0x3c], 0x44636c72
mov dword [ebp - 0x40], 0x636d796b
mov dword [ebp - 0x44], 0x43636c72
mov dword [ebp - 0x48], 0x70616263
mov dword [ebp - 0x4c], 0x70726762
mov dword [ebp - 0x50], 0x706c6162
cmp ecx, 0x42434c52
jg 0x900cb11
je 0x900caff
cmp ecx, ebx
jg 0x900ca9f
je 0x900ca90
test ecx, ecx
je 0x900ca86
cmp ecx, 0x32434c52
je 0x900ca74
cmp ecx, 0x33434c52
je 0x900cbc6
cmp ecx, 0x34434c52
je 0x900ca62
cmp ecx, 0x35434c52
jne 0x900cbc1
cmp byte [esi + 0x3a], 0
cmovne ecx, dword [ebp - 0x10]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x41424344
cmovne ecx, dword [ebp - 0x14]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x32434c52
cmovne ecx, dword [ebp - 0x18]
jmp 0x900cbf8
mov ecx, 0x6e756c6c
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, ebx
cmovne ecx, dword [ebp - 0x1c]
jmp 0x900cbf8
cmp ecx, edi
je 0x900caf0
cmp ecx, 0x38434c52
je 0x900cade
cmp ecx, 0x39434c52
je 0x900cacc
cmp ecx, 0x41434c52
jne 0x900cbc1
cmp byte [esi + 0x3a], 0
cmovne ecx, dword [ebp - 0x20]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x39434c52
cmovne ecx, dword [ebp - 0x24]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x38434c52
cmovne ecx, dword [ebp - 0x28]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, edi
cmovne ecx, dword [ebp - 0x2c]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x42434c52
cmovne ecx, dword [ebp - 0x30]
jmp 0x900cbf8
cmp ecx, 0x47524159
jg 0x900cba1
je 0x900cb96
cmp ecx, 0x43434c52
je 0x900cb87
cmp ecx, 0x434d594b
je 0x900cb78
cmp ecx, 0x44434c52
je 0x900cb66
cmp ecx, 0x45434c52
je 0x900cb54
cmp ecx, 0x46434c52
jne 0x900cbc1
cmp byte [esi + 0x3a], 0
cmovne ecx, dword [ebp - 0x34]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x45434c52
cmovne ecx, dword [ebp - 0x38]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x44434c52
cmovne ecx, dword [ebp - 0x3c]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x434d594b
cmovne ecx, dword [ebp - 0x40]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x43434c52
cmovne ecx, dword [ebp - 0x44]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, edx
cmovne ecx, eax
jmp 0x900cbf8
cmp ecx, 0x4c616220
je 0x900cbeb
cmp ecx, 0x52474220
je 0x900cbdc
cmp ecx, 0x58595a20
je 0x900cbd5
cmp ecx, 0x59436272
je 0x900cbc6
or ecx, 0xffffffff
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x70414243
cmovne ecx, dword [ebp - 0x48]
jmp 0x900cbf8
mov ecx, 0x5058595a
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x50524742
cmovne ecx, dword [ebp - 0x4c]
jmp 0x900cbf8
cmp byte [esi + 0x3a], 0
mov ecx, 0x504c4142
cmovne ecx, dword [ebp - 0x50]
mov dword [esi + 0x3c], ecx
or dword [esi + 0x40], 0xffffffff
or dword [esi + 0x44], 0xffffffff
cmp dword [esi + 0x28], 1
je 0x900cd9d
mov ecx, dword [esi + 0x34]
cmp ecx, 0x43434c52
jg 0x900ccf2
mov eax, 0x43434c52
cmp ecx, eax
je 0x900cce8
cmp ecx, edi
jg 0x900cc98
je 0x900cc8c
mov eax, 0x32434c52
cmp ecx, eax
je 0x900cc82
cmp ecx, 0x33434c52
je 0x900cd6d
cmp ecx, 0x34434c52
je 0x900cc73
mov eax, 0x35434c52
cmp ecx, eax
je 0x900cc69
cmp ecx, ebx
jne 0x900cd68
mov eax, ebx
mov ecx, 0x36636c72
jmp 0x900cd96
mov ecx, 0x35636c72
jmp 0x900cd96
mov eax, 0x41424344
mov ecx, 0x61626364
jmp 0x900cd96
mov ecx, 0x32636c72
jmp 0x900cd96
mov eax, edi
mov ecx, 0x37636c72
jmp 0x900cd96
mov eax, 0x38434c52
cmp ecx, eax
je 0x900ccde
mov eax, 0x39434c52
cmp ecx, eax
je 0x900ccd4
mov eax, 0x41434c52
cmp ecx, eax
je 0x900ccca
mov eax, 0x42434c52
cmp ecx, eax
jne 0x900cd68
mov ecx, 0x42636c72
jmp 0x900cd96
mov ecx, 0x41636c72
jmp 0x900cd96
mov ecx, 0x39636c72
jmp 0x900cd96
mov ecx, 0x38636c72
jmp 0x900cd96
mov ecx, 0x43636c72
jmp 0x900cd96
mov ebx, 0x47524159
cmp ecx, ebx
jg 0x900cd48
je 0x900cd3d
mov eax, 0x434d594b
cmp ecx, eax
je 0x900cd36
mov eax, 0x44434c52
cmp ecx, eax
je 0x900cd2f
mov eax, 0x45434c52
cmp ecx, eax
je 0x900cd28
mov eax, 0x46434c52
cmp ecx, eax
jne 0x900cd68
mov ecx, 0x46636c72
jmp 0x900cd96
mov ecx, 0x45636c72
jmp 0x900cd96
mov ecx, 0x44636c72
jmp 0x900cd96
mov ecx, 0x636d796b
jmp 0x900cd96
cmp byte [esi + 0x3a], 0
cmovne edx, eax
mov eax, edx
jmp 0x900cd9d
cmp ecx, 0x4c616220
je 0x900cd8c
cmp ecx, 0x52474220
je 0x900cd80
cmp ecx, 0x58595a20
je 0x900cd79
cmp ecx, 0x59436272
je 0x900cd6d
or eax, 0xffffffff
jmp 0x900cd9d
mov eax, 0x70414243
mov ecx, 0x70616263
jmp 0x900cd96
mov eax, 0x5058595a
jmp 0x900cd9d
mov eax, 0x50524742
mov ecx, 0x70726762
jmp 0x900cd96
mov eax, 0x504c4142
mov ecx, 0x706c6162
cmp byte [esi + 0x3a], 0
cmovne eax, ecx
mov dword [esi + 0x48], eax
mov eax, esi
or dword [esi + 0x4c], 0xffffffff
call fcn.0900244f
ret 0x20