Function at 0x1004aa90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x30
mov dword [ebp - 0x34], ecx
mov eax, dword [0x10070264]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0x32625f29
jmp 0x1004ab00
cmp eax, 0x9c1ee53d
je 0x1004acb7
cmp eax, 0xa59d58d3
jne 0x1004ab00
mov eax, dword [0x10071600]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x53abe493
mov ebx, 0x1832c2b4
cmove eax, ebx
cmp dword [0x10071604], 0xa
mov edx, 0x53abe493
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, ebx
nop dword [eax + eax]
cmp eax, 0xf2b6474a
jg 0x1004ab40
cmp eax, 0xd00fc7b3
jg 0x1004aba0
cmp eax, 0xb23b025b
jle 0x1004aaad
cmp eax, 0xb23b025c
je 0x1004ad0c
cmp eax, 0xc879153b
je 0x1004ad54
cmp eax, 0xc925e811
jne 0x1004ab00
mov eax, 0x56758701
jmp 0x1004ab00
cmp eax, 0x44e15d71
jg 0x1004ac00
cmp eax, 0x32625f28
jle 0x1004ac2d
cmp eax, 0x32625f29
je 0x1004ad80
cmp eax, 0x389b0b6d
je 0x1004adbe
cmp eax, 0x395ec70b
jne 0x1004ab00
mov eax, dword [ebp - 0x28]
mov eax, dword [0x10071600]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x53abe493
mov ebx, 0xa59d58d3
jmp 0x1004aade
cmp eax, 0xd86066c7
jle 0x1004ac4d
cmp eax, 0xd86066c8
je 0x1004adc8
cmp eax, 0xe114e9ba
je 0x1004add2
cmp eax, 0xe7c10230
jne 0x1004ab00
mov eax, dword [0x10071600]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xc925e811
mov ebx, 0x56758701
cmove eax, ebx
cmp dword [0x10071604], 0xa
mov edx, 0xc925e811
jmp 0x1004aaed
cmp eax, 0x56758700
jle 0x1004ac97
cmp eax, 0x56758701
je 0x1004addc
cmp eax, 0x796f7b9e
jne 0x1004ae49
mov eax, 0xd00fc7b4
xor esi, esi
jmp 0x1004ab00
cmp eax, 0xf2b6474b
je 0x1004ae1f
cmp eax, 0x1832c2b4
jne 0x1004ab00
mov eax, 0xf2b6474b
jmp 0x1004ab00
cmp eax, 0xd00fc7b4
je 0x1004ae29
cmp eax, 0xd2850dac
jne 0x1004ab00
mov eax, dword [0x10071600]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xd86066c8
mov ebx, 0xe114e9ba
cmove eax, ebx
cmp dword [0x10071604], 0xa
mov edx, 0xd86066c8
jmp 0x1004aaed
cmp eax, 0x44e15d72
je 0x1004ae3c
cmp eax, 0x53abe493
jne 0x1004ab00
mov eax, 0xa59d58d3
jmp 0x1004ab00
mov eax, dword [ebp - 0x30]
lea edi, [ebp - 0x20]
push edi
call fcn.1004a030
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x62647f40
mov dword [eax + 4], 0x577a7763
mov dword [eax + 8], 0x75797a7a
mov byte [eax + 0xc], 0
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x24]
call fcn.1004a030
mov dword [ebp - 0x38], edi
test edi, edi
mov eax, 0x395ec70b
mov ecx, 0x796f7b9e
cmove eax, ecx
jmp 0x1004ab00
mov edx, dword [0x10071600]
mov ecx, dword [0x10071604]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd86066c8
mov ebx, 0xd2850dac
cmovne edx, ebx
cmp eax, 0xffffffff
mov eax, edx
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x24]
cmovge eax, edx
jmp 0x1004ab00
push dword [ebp - 0x24]
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov esi, dword [eax]
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, dword [ebp - 0x28]
mov eax, 0xb23b025c
jmp 0x1004ab00
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x18], 0x7a7a7238
mov dword [ebp - 0x1c], 0x24257a73
mov dword [ebp - 0x20], 0x7864737d
mov eax, 0x9c1ee53d
jmp 0x1004ab00
mov eax, 0xb23b025c
jmp 0x1004ab00
mov eax, 0xd2850dac
jmp 0x1004ab00
mov eax, 0x44e15d72
jmp 0x1004ab00
mov edx, dword [0x10071600]
mov ecx, dword [0x10071604]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc925e811
mov edi, 0x63dc5ef6
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x1004ab00
mov eax, 0xc879153b
jmp 0x1004ab00
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, 0x389b0b6d
jmp 0x1004ab00
mov dword [ebp - 0x3c], esi
mov eax, 0xe7c10230
jmp 0x1004ab00
cmp eax, 0x63dc5ef6
jne 0x1004ab00
mov esi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005429d
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret