Function at 0x900c011
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x44
mov eax, 0x90a5ebe
call fcn.09004296
mov esi, ecx
mov dword [ebp - 0x50], esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.09095b17
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp + 0x18]
mov dword [esi + 0x30], eax
mov al, byte [ebp + 0x1c]
mov byte [esi + 0x34], al
mov al, byte [ebp + 0x20]
mov byte [esi + 0x35], al
mov al, byte [ebp + 0x24]
mov byte [esi + 0x36], al
lea eax, [esi + 0x50]
push eax
mov dword [esi], vtable.ACETransform.0
mov word [esi + 0x4c], 0x100
mov byte [esi + 0x4e], 1
call dword [sym.imp.kernel32.dll_InitializeCriticalSection]
mov ecx, dword [esi + 0x2c]
mov edi, 0x37434c52
mov dword [ebp - 0x10], 0x35636c72
mov edx, 0x4731354b
mov dword [ebp - 0x14], 0x61626364
mov eax, 0x67386b30
mov dword [ebp - 0x18], 0x32636c72
mov ebx, 0x36434c52
mov dword [ebp - 0x1c], 0x36636c72
mov dword [ebp - 0x20], 0x41636c72
mov dword [ebp - 0x24], 0x39636c72
mov dword [ebp - 0x28], 0x38636c72
mov dword [ebp - 0x2c], 0x37636c72
mov dword [ebp - 0x30], 0x42636c72
mov dword [ebp - 0x34], 0x46636c72
mov dword [ebp - 0x38], 0x45636c72
mov dword [ebp - 0x3c], 0x44636c72
mov dword [ebp - 0x40], 0x636d796b
mov dword [ebp - 0x44], 0x43636c72
mov dword [ebp - 0x48], 0x70616263
mov dword [ebp - 0x4c], 0x70726762
mov dword [ebp - 0x50], 0x706c6162
cmp ecx, 0x42434c52
jg 0x900c1f9
je 0x900c1e7
cmp ecx, ebx
jg 0x900c187
je 0x900c178
test ecx, ecx
je 0x900c16e
cmp ecx, 0x32434c52
je 0x900c15c
cmp ecx, 0x33434c52
je 0x900c2ae
cmp ecx, 0x34434c52
je 0x900c14a
cmp ecx, 0x35434c52
jne 0x900c2a9
cmp byte [esi + 0x36], 0
cmovne ecx, dword [ebp - 0x10]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x41424344
cmovne ecx, dword [ebp - 0x14]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x32434c52
cmovne ecx, dword [ebp - 0x18]
jmp 0x900c2e0
mov ecx, 0x6e756c6c
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, ebx
cmovne ecx, dword [ebp - 0x1c]
jmp 0x900c2e0
cmp ecx, edi
je 0x900c1d8
cmp ecx, 0x38434c52
je 0x900c1c6
cmp ecx, 0x39434c52
je 0x900c1b4
cmp ecx, 0x41434c52
jne 0x900c2a9
cmp byte [esi + 0x36], 0
cmovne ecx, dword [ebp - 0x20]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x39434c52
cmovne ecx, dword [ebp - 0x24]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x38434c52
cmovne ecx, dword [ebp - 0x28]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, edi
cmovne ecx, dword [ebp - 0x2c]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x42434c52
cmovne ecx, dword [ebp - 0x30]
jmp 0x900c2e0
cmp ecx, 0x47524159
jg 0x900c289
je 0x900c27e
cmp ecx, 0x43434c52
je 0x900c26f
cmp ecx, 0x434d594b
je 0x900c260
cmp ecx, 0x44434c52
je 0x900c24e
cmp ecx, 0x45434c52
je 0x900c23c
cmp ecx, 0x46434c52
jne 0x900c2a9
cmp byte [esi + 0x36], 0
cmovne ecx, dword [ebp - 0x34]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x45434c52
cmovne ecx, dword [ebp - 0x38]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x44434c52
cmovne ecx, dword [ebp - 0x3c]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x434d594b
cmovne ecx, dword [ebp - 0x40]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x43434c52
cmovne ecx, dword [ebp - 0x44]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, edx
cmovne ecx, eax
jmp 0x900c2e0
cmp ecx, 0x4c616220
je 0x900c2d3
cmp ecx, 0x52474220
je 0x900c2c4
cmp ecx, 0x58595a20
je 0x900c2bd
cmp ecx, 0x59436272
je 0x900c2ae
or ecx, 0xffffffff
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x70414243
cmovne ecx, dword [ebp - 0x48]
jmp 0x900c2e0
mov ecx, 0x5058595a
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x50524742
cmovne ecx, dword [ebp - 0x4c]
jmp 0x900c2e0
cmp byte [esi + 0x36], 0
mov ecx, 0x504c4142
cmovne ecx, dword [ebp - 0x50]
mov dword [esi + 0x38], ecx
or dword [esi + 0x3c], 0xffffffff
or dword [esi + 0x40], 0xffffffff
cmp dword [esi + 0x28], 1
je 0x900c485
mov ecx, dword [esi + 0x30]
cmp ecx, 0x43434c52
jg 0x900c3da
mov eax, 0x43434c52
cmp ecx, eax
je 0x900c3d0
cmp ecx, edi
jg 0x900c380
je 0x900c374
mov eax, 0x32434c52
cmp ecx, eax
je 0x900c36a
cmp ecx, 0x33434c52
je 0x900c455
cmp ecx, 0x34434c52
je 0x900c35b
mov eax, 0x35434c52
cmp ecx, eax
je 0x900c351
cmp ecx, ebx
jne 0x900c450
mov eax, ebx
mov ecx, 0x36636c72
jmp 0x900c47e
mov ecx, 0x35636c72
jmp 0x900c47e
mov eax, 0x41424344
mov ecx, 0x61626364
jmp 0x900c47e
mov ecx, 0x32636c72
jmp 0x900c47e
mov eax, edi
mov ecx, 0x37636c72
jmp 0x900c47e
mov eax, 0x38434c52
cmp ecx, eax
je 0x900c3c6
mov eax, 0x39434c52
cmp ecx, eax
je 0x900c3bc
mov eax, 0x41434c52
cmp ecx, eax
je 0x900c3b2
mov eax, 0x42434c52
cmp ecx, eax
jne 0x900c450
mov ecx, 0x42636c72
jmp 0x900c47e
mov ecx, 0x41636c72
jmp 0x900c47e
mov ecx, 0x39636c72
jmp 0x900c47e
mov ecx, 0x38636c72
jmp 0x900c47e
mov ecx, 0x43636c72
jmp 0x900c47e
mov ebx, 0x47524159
cmp ecx, ebx
jg 0x900c430
je 0x900c425
mov eax, 0x434d594b
cmp ecx, eax
je 0x900c41e
mov eax, 0x44434c52
cmp ecx, eax
je 0x900c417
mov eax, 0x45434c52
cmp ecx, eax
je 0x900c410
mov eax, 0x46434c52
cmp ecx, eax
jne 0x900c450
mov ecx, 0x46636c72
jmp 0x900c47e
mov ecx, 0x45636c72
jmp 0x900c47e
mov ecx, 0x44636c72
jmp 0x900c47e
mov ecx, 0x636d796b
jmp 0x900c47e
cmp byte [esi + 0x36], 0
cmovne edx, eax
mov eax, edx
jmp 0x900c485
cmp ecx, 0x4c616220
je 0x900c474
cmp ecx, 0x52474220
je 0x900c468
cmp ecx, 0x58595a20
je 0x900c461
cmp ecx, 0x59436272
je 0x900c455
or eax, 0xffffffff
jmp 0x900c485
mov eax, 0x70414243
mov ecx, 0x70616263
jmp 0x900c47e
mov eax, 0x5058595a
jmp 0x900c485
mov eax, 0x50524742
mov ecx, 0x70726762
jmp 0x900c47e
mov eax, 0x504c4142
mov ecx, 0x706c6162
cmp byte [esi + 0x36], 0
cmovne eax, ecx
mov dword [esi + 0x44], eax
mov eax, esi
or dword [esi + 0x48], 0xffffffff
call fcn.09002a02
ret 0x20