Function at 0x10004890
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x28
mov eax, dword [0x1007d664]
xor eax, esp
mov dword [esp + 0x24], eax
xor al, al
mov cl, 0x66
mov byte [esp + 0x10], cl
mov byte [esp + 0x12], cl
mov cl, 0x75
mov byte [esp + 0x13], cl
mov byte [esp + 0x1a], cl
mov cl, 0x63
mov byte [esp + 1], al
mov byte [esp + 3], al
mov byte [esp + 4], al
mov byte [esp + 5], al
mov byte [esp + 0x1e], al
mov byte [esp + 0x21], al
mov byte [esp + 0x23], al
mov al, byte [0x10081ff4]
mov byte [esp + 0x1c], cl
mov byte [esp + 0x1d], cl
mov dl, 0x6e
push 0x24
lea ecx, [esp + 4]
add al, 0x30
push ecx
mov byte [esp + 8], 5
mov byte [esp + 0xa], 9
mov byte [esp + 0xe], 0x43
mov byte [esp + 0xf], 0x58
mov byte [esp + 0x10], 0x57
mov byte [esp + 0x11], 0x5f
mov byte [esp + 0x12], 0x54
mov byte [esp + 0x13], 0x69
mov byte [esp + 0x14], 0x73
mov byte [esp + 0x15], 0x68
mov byte [esp + 0x16], 0x65
mov byte [esp + 0x17], dl
mov byte [esp + 0x19], 0x61
mov byte [esp + 0x1c], 0x5f
mov byte [esp + 0x1d], 0x4c
mov byte [esp + 0x1e], 0x69
mov byte [esp + 0x1f], dl
mov byte [esp + 0x20], 0x67
mov byte [esp + 0x21], 0x71
mov byte [esp + 0x23], 0x41
mov byte [esp + 0x27], 1
mov byte [esp + 0x28], 0x31
mov byte [esp + 0x2a], al
call fcn.10001270
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.1002e913
add esp, 0x28
ret
sub esp, 8
push esi
xor esi, esi
cmp dword [0x10081ff0], esi
je case.default.0x10004cd1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10076034]
mov edx, dword [0x1007eb00]
add ecx, edx
cmp ecx, eax
jae case.default.0x10004cd1
mov dword [0x1007eb00], eax
mov eax, dword [0x100820ec]
cmp eax, 4
ja case.default.0x10004cd1
jmp dword [eax*4 + 0x10004f24]
push 0x10042450
call fcn.10004b30
test eax, eax
je case.default.0x10004cd1
push 0x64
push 0x16e
push 0x1da
mov dword [0x10076034], 0x7d0
call fcn.10019580
test eax, eax
je 0x10004f0f
push 0xa
push 0x16e
push 0x1da
call fcn.10019580
test eax, eax
je 0x10004efb
mov dword [0x10076034], 0x32
pop esi
add esp, 8
jmp 0x10004890
mov esi, 0x7d0
push 0x10042434
mov dword [0x10076034], esi
call fcn.10004b30
test eax, eax
je case.default.0x10004cd1
mov dword [0x10076034], esi
pop esi
add esp, 8
ret
push 0x100820f4
mov dword [0x10076034], 0x7d0
call fcn.10004b30
test eax, eax
je case.default.0x10004cd1
push 4
push 0x47a7f0
mov dword [0x10076034], 0xbb8
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 0x47a7f0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10004dbf
mov eax, dword [esp + 8]
mov esi, dword ds:[eax]
mov eax, dword ds:[esi]
mov ecx, dword ds:[eax + 0x5c]
mov edx, dword ds:[ecx + 0x14]
add edx, esi
mov ecx, dword ds:[edx]
mov dword [esp + 4], ecx
mov ecx, dword [0x10082114]
mov eax, dword [0x10082110]
lea edx, [ecx + eax]
mov dword [0x10082120], edx
mov edx, dword [esp + 4]
sub eax, ecx
add eax, edx
cmp dword [0x10081ff4], 1
mov dword [0x10082124], eax
jbe 0x10004e06
mov ecx, dword [0x1008211c]
mov eax, dword [0x10082118]
lea esi, [ecx + eax]
sub eax, ecx
add eax, edx
mov dword [0x10082128], esi
mov dword [0x1008212c], eax
mov dword [0x100820ec], 3
pop esi
add esp, 8
ret
mov eax, dword [0x100820f0]
mov ecx, dword [eax*8 + 0x10082124]
mov edx, dword [eax*8 + 0x10082120]
push 0x64
push ecx
push edx
call fcn.10019580
test eax, eax
mov eax, dword [0x100820f0]
je 0x10004e8f
mov ecx, dword [eax*8 + 0x10082124]
mov edx, dword [eax*8 + 0x10082120]
push 0xa
push ecx
push edx
call fcn.10019580
test eax, eax
je 0x10004e70
cmp dword [0x1008173c], esi
jne case.default.0x10004cd1
mov dword [0x1008173c], 1
pop esi
add esp, 8
ret
mov eax, dword [0x100820f0]
mov ecx, dword [eax*8 + 0x10082124]
mov edx, dword [eax*8 + 0x10082120]
push ecx
push edx
call fcn.1002c7d0
pop esi
add esp, 8
ret
mov ecx, dword [eax*8 + 0x10082114]
mov edx, dword [eax*8 + 0x10082110]
push ecx
push edx
call fcn.10019810
pop esi
add esp, 8
ret
push 0x10042450
call fcn.10004b30
test eax, eax
je case.default.0x10004cd1
push 0x64
push 0x16e
push 0x1da
mov dword [0x10076034], 0x7d0
call fcn.10019580
test eax, eax
je 0x10004f0f
push 0xa
push 0x16e
push 0x1da
call fcn.10019580
test eax, eax
je 0x10004efb
call fcn.10004970
mov dword [0x100820ec], esi
pop esi
add esp, 8
ret
push 0x16e
push 0x1da
call fcn.1002c7d0
pop esi
add esp, 8
ret
push 0x13d
push 0x9d
call fcn.10019810
pop esi
add esp, 8
ret
jmp 0x10004c90