Function at 0x10005a0c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x10018154
call fcn.1000dc34
sub esp, 0x17c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
push 0x49
pop ecx
xor eax, eax
lea edi, [ebp - 0x184]
mov dword [ebp - 0x188], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0x14], ebx
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 4], ebx
mov byte [ebp - 0x60], 0x43
mov byte [ebp - 0x5f], 0x72
mov byte [ebp - 0x5e], 0x65
mov byte [ebp - 0x5d], 0x61
mov byte [ebp - 0x5c], 0x74
mov byte [ebp - 0x5b], 0x65
mov byte [ebp - 0x5a], 0x54
mov byte [ebp - 0x59], 0x6f
mov byte [ebp - 0x58], 0x6f
mov byte [ebp - 0x57], 0x6c
mov byte [ebp - 0x56], 0x68
mov byte [ebp - 0x55], 0x65
mov byte [ebp - 0x54], 0x6c
mov byte [ebp - 0x53], 0x70
mov byte [ebp - 0x52], 0x33
mov byte [ebp - 0x51], 0x32
mov byte [ebp - 0x50], 0x53
mov byte [ebp - 0x4f], 0x6e
mov byte [ebp - 0x4e], 0x61
mov byte [ebp - 0x4d], 0x70
mov byte [ebp - 0x4c], 0x73
mov byte [ebp - 0x4b], 0x68
mov byte [ebp - 0x4a], 0x6f
mov byte [ebp - 0x49], 0x74
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x24], 0x4b
mov byte [ebp - 0x23], 0x65
mov byte [ebp - 0x22], 0x72
mov byte [ebp - 0x21], 0x6e
mov byte [ebp - 0x20], 0x65
mov byte [ebp - 0x1f], 0x6c
mov byte [ebp - 0x1e], 0x33
mov byte [ebp - 0x1d], 0x32
mov byte [ebp - 0x1c], 0x2e
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], 0x6c
mov byte [ebp - 0x19], 0x6c
mov byte [ebp - 0x18], bl
call fcn.10002820
pop ecx
pop ecx
push edi
sbb edi, edx
sbb edi, eax
add edi, esi
sbb edi, esp
or edi, ebx
sub edi, ecx
pop edi
cmp eax, ebx
je 0x10005bdd
push ebx
push 2
call eax
cmp eax, 0xffffffff
mov dword [ebp - 0x14], eax
je 0x10005bdd
lea eax, [ebp - 0x44]
mov dword [ebp - 0x188], 0x128
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x44], 0x50
mov byte [ebp - 0x43], 0x72
mov byte [ebp - 0x42], 0x6f
mov byte [ebp - 0x41], 0x63
mov byte [ebp - 0x40], 0x65
mov byte [ebp - 0x3f], 0x73
mov byte [ebp - 0x3e], 0x73
mov byte [ebp - 0x3d], 0x33
mov byte [ebp - 0x3c], 0x32
mov byte [ebp - 0x3b], 0x46
mov byte [ebp - 0x3a], 0x69
mov byte [ebp - 0x39], 0x72
mov byte [ebp - 0x38], 0x73
mov byte [ebp - 0x37], 0x74
mov byte [ebp - 0x36], bl
call fcn.10002820
mov edi, eax
pop ecx
cmp edi, ebx
pop ecx
je 0x10005bdd
push edx
mov edx, 0xbfbfbfbf
and edx, edi
nop
pop edx
lea eax, [ebp - 0x34]
mov byte [ebp - 0x34], 0x50
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x33], 0x72
mov byte [ebp - 0x32], 0x6f
mov byte [ebp - 0x31], 0x63
mov byte [ebp - 0x30], 0x65
mov byte [ebp - 0x2f], 0x73
mov byte [ebp - 0x2e], 0x73
mov byte [ebp - 0x2d], 0x33
mov byte [ebp - 0x2c], 0x32
mov byte [ebp - 0x2b], 0x4e
mov byte [ebp - 0x2a], 0x65
mov byte [ebp - 0x29], 0x78
mov byte [ebp - 0x28], 0x74
mov byte [ebp - 0x27], bl
call fcn.10002820
mov esi, eax
pop ecx
cmp esi, ebx
pop ecx
je 0x10005bdd
lea eax, [ebp - 0x188]
push eax
push dword [ebp - 0x14]
call edi
cmp eax, ebx
je 0x10005bfd
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 0x180]
jne 0x10005bef
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
pop eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
lea eax, [ebp - 0x188]
push eax
push dword [ebp - 0x14]
call esi
jmp 0x10005bc5
push ebx
sbb ebx, esi
xor ebx, edx
xor ebx, esi
sbb ebx, edx
xor ebx, esi
xor ebx, edx
nop
pop ebx
lea eax, [ebp - 0x14]
push eax
call fcn.100059e2
pop ecx
xor eax, eax
jmp 0x10005be0