Function at 0x660d7a20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x8c
mov eax, dword [ebp + 8]
cmp byte [0x66238042], 0
mov dword [ebp - 0x58], 0x61642f2e
mov dword [ebp - 0x54], 0x6d5f6174
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
lea eax, [ebp - 0x58]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x50], 0x2f73646f
mov dword [ebp - 0x5c], 0xc
mov byte [ebp - 0x4c], 0
jne 0x660d7baa
cmp byte [0x66238041], 0
jne 0x660d7c08
mov eax, dword [0x6623833c]
mov edi, dword [0x66238338]
mov dword [ebp - 0x80], eax
cmp eax, edi
je 0x660d7b8e
xor eax, eax
xor ebx, ebx
jmp 0x660d7b00
lea eax, [ebx + 8]
mov esi, dword [edi + 4]
mov dword [ebx], eax
mov ecx, dword [edi]
mov edx, ecx
mov dword [ebp - 0x7c], ecx
add edx, esi
je 0x660d7abb
test ecx, ecx
je 0x660d8062
mov dword [ebp - 0x30], esi
cmp esi, 0xf
ja 0x660d7bc8
cmp esi, 1
jne 0x660d7bb8
mov ecx, dword [ebp - 0x7c]
movzx edx, byte [ecx]
mov byte [ebx + 8], dl
mov dword [ebx + 4], esi
add edi, 0x30
mov byte [eax + esi], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
lea ebx, [eax + 0x18]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 8]
mov dword [eax + 4], ebx
mov eax, dword [ebp + 8]
cmp dword [ebp - 0x80], edi
je 0x660d7b27
mov eax, dword [eax + 8]
cmp ebx, eax
jne 0x660d7aa0
mov dword [esp + 4], edi
mov ecx, dword [ebp + 8]
mov dword [esp], ebx
call fcn.661ab840
mov eax, dword [ebp + 8]
sub esp, 8
add edi, 0x30
mov ebx, dword [eax + 4]
mov eax, dword [ebp + 8]
cmp dword [ebp - 0x80], edi
jne 0x660d7afd
mov edi, dword [eax]
cmp edi, ebx
je 0x660d7b8e
mov esi, ebx
mov ecx, 0x1f
mov byte [esp], 0
mov edx, ebx
sub esi, edi
mov eax, esi
sar eax, 3
imul eax, eax, 0xaaaaaaab
bsr eax, eax
xor eax, 0x1f
sub ecx, eax
mov eax, edi
add ecx, ecx
call fcn.660d6d30
cmp esi, 0x180
jle 0x660d7ce0
lea esi, [edi + 0x180]
mov eax, edi
mov edx, esi
call fcn.660d5250
cmp esi, ebx
je 0x660d7b8e
lea esi, [esi]
nop
mov eax, esi
call fcn.660d5070
add esi, 0x18
cmp ebx, esi
jne 0x660d7b80
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 0x58]
cmp edx, eax
je 0x660d7baa
mov eax, dword [ebp - 0x58]
mov dword [esp], edx
add eax, 1
mov dword [esp + 4], eax
call fcn.661cddb0
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
test esi, esi
je 0x660d7ad9
jmp 0x660d7be8
lea eax, [ebp - 0x30]
mov dword [esp + 4], 0
mov ecx, ebx
mov dword [esp], eax
call fcn.661b02e0
mov edx, dword [ebp - 0x30]
mov dword [ebx], eax
sub esp, 8
mov dword [ebx + 8], edx
mov edx, dword [ebp - 0x7c]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
mov esi, dword [ebp - 0x30]
mov eax, dword [ebx]
jmp 0x660d7ad9
lea eax, [ebp - 0x6c]
mov dword [esp + 4], str.._data_mods
mov dword [esp], eax
call fcn.660e5d80
mov esi, dword [ebp - 0x68]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x80], esi
cmp eax, esi
je 0x660d7db7
mov dword [ebp - 0x7c], eax
nop
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x7c]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
mov eax, esi
add eax, ebx
je 0x660d7c4c
test esi, esi
je 0x660d806e
mov dword [ebp - 0x30], ebx
cmp ebx, 0xf
ja 0x660d7f20
cmp ebx, 1
jne 0x660d7f10
movzx eax, byte [esi]
mov byte [ebp - 0x40], al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x44], ebx
mov esi, dword [sym.imp.msvcrt.dll__stricmp]
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str._cache
mov dword [esp], eax
call esi
test eax, eax
je 0x660d7d4a
mov eax, dword [0x6623805c]
test eax, eax
je 0x660d7de8
mov ebx, dword [0x66238050]
test ebx, ebx
je 0x660d7f81
mov edi, 0x6623804c
nop
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x10]
mov dword [esp], eax
call esi
mov edx, eax
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
test edx, edx
js 0x660d7cf0
test eax, eax
je 0x660d7f62
mov edi, ebx
mov ebx, eax
jmp 0x660d7cb0
mov edx, ebx
mov eax, edi
call fcn.660d5250
jmp 0x660d7b8e
test ecx, ecx
je 0x660d7f60
mov eax, ecx
mov ebx, eax
jmp 0x660d7cb0
mov ebx, edi
cmp ebx, 0x66238064
je 0x660d7e58
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call esi
test eax, eax
js 0x660d7e58
cmp byte [0x661dc040], 0
je 0x660d7d4a
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.Ignoring_blocklisted_mod__s
mov dword [esp], 0x661e0634
mov dword [esp + 8], eax
call dword [0x661dc030]
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x40]
cmp eax, edx
je 0x660d7d66
mov esi, dword [ebp - 0x40]
mov dword [esp], eax
lea edx, [esi + 1]
mov dword [esp + 4], edx
call fcn.661cddb0
add dword [ebp - 0x7c], 0x18
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x80], eax
jne 0x660d7c30
mov eax, dword [ebp - 0x6c]
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x80], eax
cmp ebx, eax
je 0x660d7db7
mov edi, eax
lea esi, [esi]
mov eax, dword [edi]
lea edx, [edi + 8]
cmp eax, edx
je 0x660d7e40
mov esi, dword [edi + 8]
mov dword [esp], eax
add edi, 0x18
lea edx, [esi + 1]
mov dword [ebp - 0x7c], esi
mov dword [esp + 4], edx
call fcn.661cddb0
cmp ebx, edi
jne 0x660d7d88
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x80], eax
mov edx, dword [ebp - 0x80]
test edx, edx
je 0x660d7dcf
mov eax, dword [ebp - 0x64]
mov dword [esp], edx
sub eax, edx
mov dword [esp + 4], eax
call fcn.661cddb0
mov eax, dword [ebp + 8]
mov byte [0x661dc040], 0
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x660d7b29
mov ebx, dword [0x66238068]
test ebx, ebx
je 0x660d7e58
mov edi, 0x66238064
lea esi, [esi]
nop
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x10]
mov dword [esp], eax
call esi
mov edx, eax
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
test edx, edx
js 0x660d7e30
test eax, eax
je 0x660d7d02
mov edi, ebx
mov ebx, eax
jmp 0x660d7e00
test ecx, ecx
je 0x660d7d00
mov eax, ecx
mov ebx, eax
jmp 0x660d7e00
mov eax, edi
add eax, 0x18
mov edi, eax
cmp ebx, eax
jne 0x660d7d88
jmp 0x660d7db1
mov esi, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x5c]
lea edi, [ebp - 0x28]
mov dword [ebp - 0x30], edi
mov eax, esi
add eax, ebx
jne 0x660d7fb0
mov dword [ebp - 0x70], ebx
cmp ebx, 0xf
ja 0x660d7fed
cmp ebx, 1
jne 0x660d7fc8
movzx eax, byte [esi]
mov byte [ebp - 0x28], al
mov eax, edi
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x30]
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.661b0180
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
sub esp, 8
mov eax, dword [eax + 4]
cmp eax, dword [ecx + 8]
je 0x660d8011
lea edx, [eax + 8]
mov dword [eax], edx
mov edx, dword [ebp - 0x30]
cmp edx, edi
je 0x660d8045
mov dword [eax], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax + 4], edx
mov eax, dword [ebp + 8]
add dword [eax + 4], 0x18
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x40]
cmp eax, edx
je 0x660d7d66
mov ecx, dword [ebp - 0x40]
mov dword [esp], eax
lea edx, [ecx + 1]
mov dword [esp + 4], edx
call fcn.661cddb0
jmp 0x660d7d66
lea eax, [ebp - 0x40]
test ebx, ebx
je 0x660d7c6a
jmp 0x660d7f42
lea eax, [ebp - 0x30]
mov dword [esp + 4], 0
lea ecx, [ebp - 0x48]
mov dword [esp], eax
call fcn.661b02e0
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x48], eax
sub esp, 8
mov dword [ebp - 0x40], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
jmp 0x660d7c6a
mov ebx, edi
cmp ebx, 0x6623804c
je 0x660d7f81
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call esi
test eax, eax
jns 0x660d7de8
cmp byte [0x661dc040], 0
je 0x660d7d4a
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.Ignoring_non_allowlisted_mod__s
mov dword [esp], 0x661e0634
mov dword [esp + 8], eax
call dword [0x661dc030]
jmp 0x660d7d4a
test esi, esi
jne 0x660d7e6e
mov dword [esp], 0x661e0554
call fcn.661d32b0
lea esi, [esi]
mov eax, edi
test ebx, ebx
je 0x660d7e8b
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x30]
jmp 0x660d7e8b
lea eax, [ebp - 0x70]
mov dword [esp + 4], 0
lea ecx, [ebp - 0x30]
mov dword [esp], eax
call fcn.661b02e0
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x30], eax
sub esp, 8
mov dword [ebp - 0x28], edx
jmp 0x660d7fd2
lea esi, [ebp - 0x30]
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.661abb50
mov edx, dword [ebp - 0x30]
sub esp, 8
cmp edx, edi
je 0x660d7ee1
mov eax, dword [ebp - 0x28]
mov dword [esp], edx
add eax, 1
mov dword [esp + 4], eax
call fcn.661cddb0
jmp 0x660d7ee1
mov edx, dword [ebp - 0x28]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x24]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x14], edx
jmp 0x660d7ed4
mov dword [esp], 0x661e0554
call fcn.661d32b0
mov dword [esp], 0x661e0554
call fcn.661d32b0
mov ebx, eax
jmp 0x661d09cc
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 0x40]
cmp edx, eax
je 0x661d09c4
mov eax, dword [ebp - 0x40]
mov dword [esp], edx
add eax, 1
mov dword [esp + 4], eax
call fcn.661cddb0
lea ecx, [ebp - 0x6c]
call fcn.661abef0
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 0x58]
cmp edx, eax
je 0x661d09e8
mov eax, dword [ebp - 0x58]
mov dword [esp], edx
add eax, 1
mov dword [esp + 4], eax
call fcn.661cddb0
mov ecx, dword [ebp + 8]
call fcn.661abef0
mov dword [esp], ebx
call fcn.66116c90
mov edx, dword [ebp - 0x30]
cmp edx, edi
je 0x661d09a8
mov eax, dword [ebp - 0x28]
mov dword [esp], edx
add eax, 1
mov dword [esp + 4], eax
call fcn.661cddb0
jmp 0x661d09a8