Function at 0x1004ba55
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x38
mov eax, 0x100ac844
call fcn.100a4ea8
mov edi, ecx
mov dword [ebp - 0x28], edi
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], eax
mov dword [edi], 0x1002084c
mov dword [edi + 8], 9
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], eax
inc eax
lea ecx, [ebp - 0x14]
push 0x1000b840
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], al
call fcn.1006f372
mov ebx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push ebx
push ebx
push ecx
mov ecx, esp
mov byte [ebp - 4], 2
push eax
lea esi, [ebp - 0x14]
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x20]
call fcn.100339bf
lea ecx, [edi + 0x18]
mov byte [ebp - 4], 3
push eax
call fcn.1003d3f8
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x1004bae2
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000b8dc
lea ecx, [ebp - 0x10]
call fcn.1006f372
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 7
mov ecx, esp
lea esi, [ebp - 0x10]
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x1c]
call fcn.100339bf
lea ecx, [edi + 0x28]
mov byte [ebp - 4], 8
push eax
call fcn.1003d4d6
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x1004bb45
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000d3d0
lea ecx, [ebp - 0x14]
call fcn.1006f372
push ebx
push ebx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xc
mov ecx, esp
lea esi, [ebp - 0x14]
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x20]
call fcn.100339bf
lea ecx, [edi + 0x38]
mov byte [ebp - 4], 0xd
push eax
call fcn.100430ae
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x1004bba8
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.1008e3f5
push ebx
push ecx
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.1006e371
lea ecx, [edi + 0x6c]
call fcn.10042742
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x14]
push 0x1000cd8c
mov dword [edi], 0x1002043c
mov dword [edi + 0x18], 0x10020430
mov dword [edi + 0x28], 0x10020424
mov dword [edi + 0x38], 0x10020418
mov dword [edi + 0x6c], 0x10020410
call fcn.1006f372
push 1
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x12
mov ecx, esp
lea esi, [ebp - 0x14]
push eax
call fcn.1006e371
mov edx, ebx
mov ecx, esi
call fcn.10034c9a
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0x78], eax
mov dword [edi + 0x7c], edx
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000a378
lea ecx, [ebp - 0x10]
call fcn.1006f372
push 0x1000ee58
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x13
call fcn.1006f372
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
lea ecx, [edi + 0x80]
lea edx, [ebp + 8]
call fcn.1004c5ce
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
mov esi, 0x1000a228
lea ecx, [ebp - 0x1c]
push esi
call fcn.1006f372
push 0x1000ee70
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.1006f372
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
lea ecx, [edi + 0x8c]
lea edx, [ebp + 8]
call fcn.1004c5ce
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push esi
lea ecx, [ebp - 0x10]
call fcn.1006f372
push 0x1000ee98
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1d
call fcn.1006f372
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
lea ecx, [edi + 0x98]
lea edx, [ebp + 8]
call fcn.1004c5ce
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
xor eax, eax
mov dword [edi + 0xa4], eax
mov dword [edi + 0xa8], eax
mov dword [edi + 0xac], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1c]
push 0x10009148
mov byte [edi + 0xb0], al
call fcn.1006f372
push ecx
push ecx
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x23
mov ecx, esp
lea esi, [ebp - 0x1c]
push eax
call fcn.1006e371
lea ecx, [edi + 0xb4]
mov edx, esi
call fcn.10034437
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000eeb8
lea ecx, [ebp - 0x18]
call fcn.1006f372
sub esp, 0xc
mov byte [ebp - 4], 0x26
lea esi, [ebp - 0x18]
push ecx
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.1006e371
mov edx, esi
lea ecx, [ebp - 0x20]
call fcn.10034437
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x27
push 0x1000eeb8
call fcn.1006f372
mov edx, esi
mov cl, 1
call fcn.10035035
mov ecx, dword [ebp - 0x20]
mov byte [edi + 0xb8], al
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
xor eax, eax
mov dword [edi + 0xbc], eax
mov dword [edi + 0xc0], eax
mov dword [edi + 0xc4], eax
push 0x1000ef00
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x28
call fcn.1006f372
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x29
mov ecx, esp
lea esi, [ebp - 0x1c]
push eax
call fcn.1006e371
mov edx, ebx
mov ecx, esi
call fcn.100335cd
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
push 0x1000dd14
lea ecx, [ebp - 0x20]
call fcn.1006f372
xor eax, eax
mov byte [ebp - 4], 0x2a
inc eax
lea esi, [ebp - 0x20]
push ecx
mov dword [ebp - 0x10], eax
mov ecx, esp
mov dword [ebp - 0x14], eax
lea eax, [ebp + 8]
push eax
call fcn.1006e371
mov ecx, esi
call fcn.10033e32
test al, al
jne 0x1004beda
push 0x1000cbe4
lea ecx, [ebp - 0x18]
call fcn.1006f372
push 3
pop eax
mov dword [ebp - 4], 0x2b
lea esi, [ebp - 0x18]
push ecx
mov dword [ebp - 0x10], eax
mov ecx, esp
mov dword [ebp - 0x14], eax
lea eax, [ebp + 8]
push eax
call fcn.1006e371
mov ecx, esi
call fcn.10033e32
test al, al
jne 0x1004beda
push 0x1000cbbc
lea ecx, [ebp - 0x1c]
call fcn.1006f372
push 7
pop eax
mov dword [ebp - 4], 0x2c
lea esi, [ebp - 0x1c]
push ecx
mov dword [ebp - 0x10], eax
mov ecx, esp
mov dword [ebp - 0x14], eax
lea eax, [ebp + 8]
push eax
call fcn.1006e371
mov ecx, esi
call fcn.10033e32
test al, al
jne 0x1004beda
mov byte [ebp - 0x24], al
mov eax, dword [ebp - 0x10]
test al, 4
je 0x1004bef5
mov ecx, dword [ebp - 0x1c]
and eax, 0xfffffffb
mov dword [ebp - 0x10], eax
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
mov eax, dword [ebp - 0x10]
test al, 2
je 0x1004bf04
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
mov dword [ebp - 4], 0x28
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.1008e3f5
cmp byte [ebp - 0x24], 0
je 0x1004bf79
push 0x1000ef20
lea ecx, [ebp - 0x24]
call fcn.1006f372
push 0x100093a4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x2d
call fcn.1006f372
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x38]
call fcn.10032eb6
lea ecx, [ebp - 0x20]
call fcn.1002dff0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x24]
call fcn.1002dff0
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
call fcn.10035100
push 0x100c4d74
lea eax, [ebp - 0x44]
push eax
call fcn.1009378c
lea esi, [edi + 0xb4]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x1004bf9e
mov ecx, 0x1000ef00
call fcn.1008dd1a
push eax
push 0x1000ef00
mov ecx, esi
call fcn.1008dc8f
mov eax, dword [edi + 0x9c]
add eax, dword [edi + 0x90]
add eax, dword [edi + 0x84]
jne 0x1004c02c
push 0x1000efc8
lea ecx, [ebp - 0x24]
call fcn.1006f372
push 0x100093a4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x32
call fcn.1006f372
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x38]
call fcn.10032eb6
lea ecx, [ebp - 0x20]
call fcn.1002dff0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x36
call fcn.1002dff0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x38]
call fcn.10032f40
mov byte [ebp - 4], 0x37
mov ecx, eax
mov edx, dword [ebx]
call fcn.1006e348
mov esi, dword [edx + 4]
mov ecx, esi
push eax
push 0
call dword [0x100cf608]
mov ecx, ebx
call esi
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1c]
jmp 0x1004bf5a
mov eax, dword [edi + 0x40]
mov dword [ebp - 0x24], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004c7ba
mov eax, dword [edi + 0x60]
mov dword [ebp - 0x24], eax
mov eax, dword [edi + 0x5c]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004c7ba
mov eax, dword [edi + 0x50]
mov dword [ebp - 0x24], eax
mov eax, dword [edi + 0x4c]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004c7ba
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
test eax, eax
je 0x1004c092
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100cf608]
call esi
mov eax, edi
call fcn.100a4e71
ret 8