Function at 0x10002e94
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov word [ebp + 0x1d90], 0x2020
mov byte [ebp + 0x1d92], 0x20
mov byte [ebp + 0x1d93], 0x30
mov byte [ebp + 0x1d94], 0x30
mov byte [ebp + 0x1d95], 0x20
mov byte [ebp + 0x1d96], 0x20
mov word [ebp + 0x1d97], 0x2020
mov byte [ebp + 0x1d99], 0x20
mov word [ebp + 0x1d9a], 0x3030
mov byte [ebp + 0x1d9c], 0x20
mov byte [ebp + 0x1d9d], 0x30
mov byte [ebp + 0x1d9e], 0x20
mov byte [ebp + 0x1d9f], 0x30
mov byte [ebp + 0x1da0], 0x30
mov word [ebp + 0x1da1], 0x3030
mov byte [ebp + 0x1da3], 0x20
mov dword [ebp + 0x1da4], 0x30303030
mov dword [ebp + 0x1da8], 0x30303030
mov byte [ebp + 0x1dac], 0x20
mov word [ebp + 0x1dad], 0x2020
mov byte [ebp + 0x1daf], 0x20
mov byte [ebp + 0x1db0], 0x30
mov byte [ebp + 0x1db1], 0x20
mov eax, 0x20202020
mov word [ebp + 0x1db2], ax
lea edi, [ebp + 0x1db4]
mov ecx, 0xe
rep stosd dword es:[edi], eax
mov word [ebp + 0x1dec], ax
mov byte [ebp + 0x1dee], 0x20
mov eax, 0x20202020
mov byte [ebp + 0x1def], al
mov dword [ebp + 0x1df0], eax
mov dword [ebp + 0x1df4], eax
mov dword [ebp + 0x1df8], eax
mov byte [ebp + 0x1dfc], al
mov ax, word [ebp + 0x18a1]
mov word [ebp + 0x1d90], ax
lea esi, [ebp + 0x18a9]
lea edi, [ebp + 0x1d93]
mov bl, 1
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_UNPK2
mov ax, word [ebp + 0x1c3f]
mov word [ebp + 0x1d96], ax
mov al, byte [ebp + 0x1c41]
mov byte [ebp + 0x1d98], al
mov ax, word [ebp + 0x18ac]
mov word [ebp + 0x1d9a], ax
mov al, byte [ebp + 0x18a0]
and al, 0xf0
shr al, 4
or al, 0x30
mov byte [ebp + 0x1d9d], al
lea esi, [ebp + 0x18ea]
lea edi, [ebp + 0x1d9f]
mov bl, 1
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_UNPK3
lea esi, [ebp + 0x1896]
lea edi, [ebp + 0x1da4]
mov bl, 1
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_UNPK5
mov al, byte [ebp + 0x18b0]
and al, 0xf0
shr al, 4
or al, 0x30
mov byte [ebp + 0x1db0], al
lea esi, [ebp + 0x1d8c]
lea edi, [ebp + 0x8ea5]
mov edx, 0x40000204
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_58
lea esi, [ebp + 0x18ef]
lea edi, [ebp - 0x40]
mov edx, 0x60a0a
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_R3
lea esi, [ebp - 0x40]
lea edi, [ebp + 0x8ea9]
mov bl, 1
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_UNPK10
mov al, byte [ebp + 0x8ea9]
mov byte [ebp + 0x8ecd], al
mov ax, word [ebp + 0x8eaa]
mov word [ebp + 0x8ece], ax
mov eax, dword [ebp + 0x8eac]
mov ecx, dword [ebp + 0x8eb0]
mov dword [ebp + 0x8ed0], eax
mov eax, dword [ebp + 0x8eb4]
mov dword [ebp + 0x8ed4], ecx
mov dword [ebp + 0x8ed8], eax
mov al, byte [ebp + 0x8eb8]
mov byte [ebp + 0x8edc], al
mov ax, word [ebp + 0x8eb9]
mov word [ebp + 0x8edd], ax
call fcn.10005a66
lea esi, [ebp + 0x18f9]
lea edi, [ebp - 0x40]
mov edx, 0x60a0a
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_R3
lea esi, [ebp - 0x40]
lea edi, [ebp + 0x8ea9]
mov bl, 1
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_UNPK10
mov al, byte [ebp + 0x8ea9]
mov byte [ebp + 0x8ecd], al
mov ax, word [ebp + 0x8eaa]
mov word [ebp + 0x8ece], ax
mov eax, dword [ebp + 0x8eac]
mov ecx, dword [ebp + 0x8eb0]
mov dword [ebp + 0x8ed0], eax
mov eax, dword [ebp + 0x8eb4]
mov dword [ebp + 0x8ed4], ecx
mov dword [ebp + 0x8ed8], eax
mov al, byte [ebp + 0x8eb8]
mov byte [ebp + 0x8edc], al
mov ax, word [ebp + 0x8eb9]
mov word [ebp + 0x8edd], ax
call fcn.10005a66
mov byte [ebp - 0x40], 0x30
lea esi, [ebp + 0x1903]
lea edi, [ebp - 0x3f]
mov bl, 2
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_UNPK9
mov al, byte [ebp + 0x190c]
or al, 0xf0
add al, 1
sbb al, 1
shl al, 1
and al, 2
add al, 0x2b
mov byte [ebp - 0x2f], al
lea esi, [ebp - 0x40]
lea edi, [ebp + 0x8ebb]
call fcn.1002cf2d
mov al, byte [ebp + 0x8ebb]
mov byte [ebp + 0x8ecd], al
mov ax, word [ebp + 0x8ebc]
mov word [ebp + 0x8ece], ax
mov eax, dword [ebp + 0x8ebe]
mov ecx, dword [ebp + 0x8ec2]
mov dword [ebp + 0x8ed0], eax
mov eax, dword [ebp + 0x8ec6]
mov dword [ebp + 0x8ed4], ecx
mov dword [ebp + 0x8ed8], eax
mov al, byte [ebp + 0x8eca]
mov byte [ebp + 0x8edc], al
mov ax, word [ebp + 0x8ecb]
mov word [ebp + 0x8edd], ax
call fcn.10005a66
mov byte [ebp - 0x40], 0x30
lea esi, [ebp + 0x190d]
lea edi, [ebp - 0x3f]
mov bl, 2
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_UNPK9
mov al, byte [ebp + 0x1916]
or al, 0xf0
add al, 1
sbb al, 1
shl al, 1
and al, 2
add al, 0x2b
mov byte [ebp - 0x2f], al
lea esi, [ebp - 0x40]
lea edi, [ebp + 0x8ebb]
call fcn.1002cf2d
mov al, byte [ebp + 0x8ebb]
mov byte [ebp + 0x8ecd], al
mov ax, word [ebp + 0x8ebc]
mov word [ebp + 0x8ece], ax
mov eax, dword [ebp + 0x8ebe]
mov ecx, dword [ebp + 0x8ec2]
mov dword [ebp + 0x8ed0], eax
mov eax, dword [ebp + 0x8ec6]
mov dword [ebp + 0x8ed4], ecx
mov dword [ebp + 0x8ed8], eax
mov al, byte [ebp + 0x8eca]
mov byte [ebp + 0x8edc], al
mov ax, word [ebp + 0x8ecb]
mov word [ebp + 0x8edd], ax
call fcn.10005a66
mov eax, dword [ebp + 0x8ea5]
mov dword [ebp - 0x40], eax
mov edi, dword [ebp - 0x4c]
lea esi, [edi + 0x34]
lea edi, [ebp - 0x3d]
mov edx, 0x104
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_S8
mov al, byte [ebp - 0x40]
mov byte [ebp + 0x2752c], al
mov ax, word [ebp - 0x3f]
mov word [ebp + 0x2752d], ax
mov al, byte [ebp - 0x3d]
or al, 0x30
mov byte [ebp + 0x2752f], al
mov eax, dword [ebp + 0x2752c]
mov dword [ebp + 0x8ea5], eax
lea esi, [ebp + 0x8ea5]
lea edi, [ebp - 0x40]
mov edx, 0x80000404
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_85
mov edi, dword [ebp - 0x40]
lea edi, [ebp + edi + 0x1d8f]
mov byte [edi], 0x20
lea esi, [ebp + 0x8ea5]
lea edi, [ebp + 0x2776]
mov edx, 0x80000402
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_85
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1d92], al
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1d95], al
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1d99], al
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1d9c], al
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1d9e], al
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1da3], al
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1dac], al
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1daf], al
mov al, byte [ebp + 0x114fa]
mov byte [ebp + 0x1db1], al
lea esi, [ebp + 0x1903]
lea edi, [ebp + 0x2752c]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edi], eax
mov dword [edi + 4], ecx
mov ax, word [esi + 8]
mov word [edi + 8], ax
lea esi, [ebp + 0x8a86]
lea edi, [ebp + 0x27535]
mov edx, 0xa0a
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_A3
lea esi, [ebp + 0x2752c]
lea edi, [ebp + 0x8a7d]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edi], eax
mov dword [edi + 4], ecx
mov ax, word [esi + 8]
mov word [edi + 8], ax
lea esi, [ebp + 0x190d]
lea edi, [ebp + 0x2752c]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edi], eax
mov dword [edi + 4], ecx
mov ax, word [esi + 8]
mov word [edi + 8], ax
lea esi, [ebp + 0x8a90]
lea edi, [ebp + 0x27535]
mov edx, 0xa0a
mov dword [ebp + 0x9c], esp
call sub.carclw60.dll_GOL_A3
lea esi, [ebp + 0x2752c]
lea edi, [ebp + 0x8a87]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edi], eax
mov dword [edi + 4], ecx
mov ax, word [esi + 8]
mov word [edi + 8], ax
ret