Function at 0x10006760
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001ed90
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x9cc
push ebx
push esi
push edi
mov al, 0x65
mov bl, 0x72
mov dl, 0x6e
mov cl, 0x6c
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov dword [ebp - 0xc4], 0x94
mov byte [ebp - 0x20], 0x4b
mov byte [ebp - 0x1f], al
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x1d], dl
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x1b], cl
mov byte [ebp - 0x1a], 0x33
mov byte [ebp - 0x19], 0x32
mov byte [ebp - 0x18], 0x2e
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], cl
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x14], 0
mov byte [ebp - 0x30], 0x47
mov byte [ebp - 0x2f], al
mov byte [ebp - 0x2e], 0x74
mov byte [ebp - 0x2d], 0x56
mov byte [ebp - 0x2c], al
mov byte [ebp - 0x2b], bl
mov byte [ebp - 0x2a], 0x73
mov byte [ebp - 0x29], 0x69
mov byte [ebp - 0x28], 0x6f
mov byte [ebp - 0x27], dl
mov byte [ebp - 0x26], 0x45
mov byte [ebp - 0x25], 0x78
mov byte [ebp - 0x24], 0x41
mov byte [ebp - 0x23], 0
push ecx
mov ecx, 0x4746474a
mov ecx, 0x6a5f564f
nop
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x20]
push eax
push ecx
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebx
mov esi, eax
test esi, esi
jne 0x10006847
lea edx, [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x10006847
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x20]
push eax
push ecx
call edi
push eax
call ebx
mov esi, eax
push ebp
mov ebp, 0xc12e9c0d
mov ebp, 0xc12488ee
or ebp, ebx
pop ebp
lea edx, [ebp - 0xc4]
push edx
call esi
test eax, eax
je 0x1000687d
cmp dword [ebp - 0xb4], 2
jb 0x1000687d
cmp dword [ebp - 0xc0], 5
jb 0x1000687d
mov al, 1
mov byte [0x10027eac], al
jmp 0x1000688e
mov cl, byte [0x10027eac]
mov al, 1
test cl, cl
mov byte [0x10027986], al
je 0x100068bb
cmp dword [ebp - 0xc0], 6
jb 0x1000689c
mov byte [0x10027984], al
push esi
add esi, eax
sbb esi, eax
sbb esi, eax
add esi, eax
sbb esi, eax
sbb esi, eax
sub esi, ecx
nop
pop esi
cmp dword [ebp - 0xc0], 0xa
jb 0x100068bb
mov byte [0x10027987], al
mov byte [0x10027988], al
call fcn.100115c0
test eax, eax
jl 0x1000699f
cmp eax, 0xfffffffc
jge 0x1000699f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
push ebx
xor ebx, esp
add ebx, esp
add ebx, esp
xor ebx, esp
pop ebx
lea eax, [ebp - 0x1c8]
push 0x10025224
push eax
call fcn.10011d6b
mov edi, eax
add esp, 8
test edi, edi
je 0x1000699f
lea ebx, [esi + 1]
cmp ebx, edi
jge 0x10006996
lea ecx, [ebp - 0x1c8]
push 0x10025224
push ecx
call fcn.10011d6b
mov esi, eax
add esp, 8
test esi, esi
jne 0x10006938
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.GDI32.dll_SetRectRgn]
jmp 0x1000698d
push esi
mov esi, 0xe6ee7906
mov esi, 0x5ad859db
add esi, edx
pop esi
push ebx
add ebx, edx
add ebx, edx
mov ebx, 0x2589ef58
pop ebx
push 0x1000
call fcn.100127fc
add esp, 4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
push esi
call fcn.100127f1
add esp, 4
cmp eax, 0xffffffff
je 0x10006984
push esi
call fcn.100127f1
add esp, 4
cmp eax, 0xffffffff
jne 0x10006976
push esi
call fcn.10012288
add esp, 4
inc ebx
cmp ebx, edi
jl 0x10006911
push edi
call fcn.10012288
add esp, 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret