Function at 0x10004962
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
lea eax, [ecx + 4]
mov edi, dword [esp + 0x48]
mov esi, ecx
mov ebp, 0x19002249
mov dword [esp], eax
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
lea eax, [edi + 1]
mov dword [esp + 0x2c], eax
lea eax, [edi + 2]
mov dword [esp + 0x28], eax
mov eax, 0xa168b15
cmp eax, 0xe8389748
jg 0x100049b7
cmp eax, 0x93ec67c5
je 0x100049e4
cmp eax, 0xdcfce547
je 0x10004a07
cmp eax, 0xdf7aec5c
jne 0x10004996
jmp 0x10004cdb
cmp eax, 0xe8389749
je 0x10004a13
cmp eax, 0x72a642b4
je 0x10004a60
cmp eax, 0xa168b15
jne 0x10004996
cmp dword [esp + 0x30], 0
mov eax, 0xe8389749
mov ecx, 0x72a642b4
cmove eax, ecx
jmp 0x10004996
mov eax, dword [esp + 0x24]
xor ebx, ebx
mov dword [eax], edi
mov eax, dword [esp]
mov eax, dword [eax]
mov byte [eax + edi], bl
mov eax, dword [esp]
mov ecx, dword [esp + 0x2c]
mov eax, dword [eax]
mov byte [eax + ecx], bl
mov eax, 0xdf7aec5c
jmp 0x10004996
mov eax, 0xdf7aec5c
mov ebx, 8
jmp 0x10004996
lea eax, [esp + 0x12]
mov ecx, 0xcd6d746f
mov dword [esp + 8], 0x64616c4c
mov dword [esp + 0xc], 0x7c744168
mov byte [esp + 0x10], 0x7d
mov dword [esp + 0x18], eax
lea eax, [esp + 0x11]
cmp ecx, 0x538e5384
je 0x10004ab1
cmp ecx, 0xcd6d746f
jne 0x10004a39
mov byte [eax], 0
inc eax
mov ecx, 0xcd6d746f
mov edx, 0x538e5384
cmp eax, dword [esp + 0x18]
cmove ecx, edx
jmp 0x10004a39
lea eax, [esp + 0x22]
mov ecx, 0xcd6d746f
mov dword [esp + 0x18], 0x75636648
mov dword [esp + 0x1c], 0x766a6b45
mov byte [esp + 0x20], 0x7b
mov dword [esp + 8], eax
lea eax, [esp + 0x21]
cmp ecx, 0x538e5384
je 0x10004b19
cmp ecx, 0xcd6d746f
jne 0x10004a86
mov byte [eax], 0
inc eax
mov ecx, 0xcd6d746f
mov edx, 0x538e5384
cmp eax, dword [esp + 8]
cmove ecx, edx
jmp 0x10004a86
xor eax, eax
mov ecx, 0xad416fa6
cmp ecx, 0x19002249
je 0x10004ae9
cmp ecx, 0xd2d4a6ef
je 0x10004b7d
cmp ecx, 0xad416fa6
jne 0x10004ab8
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
cmp ecx, 9
mov ecx, 0xd2d4a6ef
cmovb ecx, ebp
jmp 0x10004ab8
mov ecx, dword [esp + 0x18]
mov dl, byte [esp + ecx + 8]
mov eax, edx
and dl, 0xf6
not al
and al, 9
or dl, al
mov eax, dword [esp + 0x18]
mov dh, dl
not dh
add al, 9
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 8], al
mov eax, dword [esp + 0x18]
inc eax
jmp 0x10004ab3
xor eax, eax
mov ecx, 0xad416fa6
cmp ecx, 0x19002249
je 0x10004b4d
cmp ecx, 0xd2d4a6ef
je 0x10004bae
cmp ecx, 0xad416fa6
jne 0x10004b20
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
cmp ecx, 9
mov ecx, 0xd2d4a6ef
cmovb ecx, ebp
jmp 0x10004b20
mov ecx, dword [esp + 8]
mov dh, 0xf6
mov dl, byte [esp + ecx + 0x18]
mov eax, edx
and dl, 0xf6
not al
and al, 9
or dl, al
mov eax, dword [esp + 8]
sub dh, al
add al, 9
and dh, dl
not dl
and dl, al
or dh, dl
mov byte [esp + ecx + 0x18], dh
mov eax, dword [esp + 8]
inc eax
jmp 0x10004b1b
lea ecx, [esp + 8]
mov byte [esp + 0x11], 0
call fcn.10004e1f
mov ecx, dword [esp]
push dword [ecx]
call eax
mov eax, dword [esp]
xor ecx, ecx
mov dword [eax], ecx
mov dword [esi + 0xc], ecx
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov eax, 0x72a642b4
jmp 0x10004996
lea ecx, [esp + 0x18]
mov byte [esp + 0x21], 0
call fcn.10004e1f
mov ebp, eax
lea eax, [esp + 0x17]
mov ecx, 0x363e9a9c
mov dword [esp + 8], 0x55766647
mov dword [esp + 0xc], 0x7c656876
mov dword [esp + 0x10], 0x7852686b
mov word [esp + 0x14], 0x6f7d
mov dword [esp + 4], eax
lea eax, [esp + 0x16]
cmp ecx, 0x5c2d439a
je 0x10004c15
cmp ecx, 0x363e9a9c
jne 0x10004bee
mov byte [eax], 0
inc eax
mov ecx, 0x363e9a9c
mov edx, 0x5c2d439a
cmp eax, dword [esp + 4]
cmove ecx, edx
jmp 0x10004bee
xor eax, eax
mov ecx, 0xbf043783
cmp ecx, 0x5e7c8a3
je 0x10004c4e
cmp ecx, 0xddd62914
je 0x10004c82
cmp ecx, 0xbf043783
jne 0x10004c1c
mov dword [esp + 4], eax
mov edx, 0x5e7c8a3
mov ecx, dword [esp + 4]
cmp ecx, 0xe
mov ecx, 0xddd62914
cmovb ecx, edx
jmp 0x10004c1c
mov ecx, dword [esp + 4]
mov dl, byte [esp + ecx + 8]
mov eax, edx
and dl, 0xe4
not al
and al, 0x1b
or dl, al
mov eax, dword [esp + 4]
mov dh, dl
xor dl, 0xed
xor dh, 0x12
add al, 9
and dl, al
not al
and al, dh
or al, dl
mov byte [esp + ecx + 8], al
mov eax, dword [esp + 4]
inc eax
jmp 0x10004c17
lea ecx, [esp + 8]
mov byte [esp + 0x16], 0
call fcn.10004e1f
call eax
push dword [esp + 0x28]
push 8
push eax
call ebp
mov ecx, dword [esp]
mov ebp, 0x19002249
mov dword [ecx], eax
mov ecx, 0xdcfce547
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 0xc], eax
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov dword [esp + 0x24], esi
mov eax, dword [esp + 0x24]
mov dword [eax], 0
mov eax, dword [esp]
cmp dword [eax], 0
mov eax, 0x93ec67c5
cmove eax, ecx
jmp 0x10004996
mov eax, ebx
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret 4