Function at 0x10001c6c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov eax, 0x6c6c64
push ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x58], eax
push esi
lea eax, [ebp - 0x3c]
push edi
xor ebx, ebx
mov edx, 0x6c6c
mov ecx, 0x2e746e65
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x3c], 0x746e6f43
mov dword [ebp - 0x38], 0x6c6c6f72
mov dword [ebp - 0x34], 0x642e7265
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x50], 0x64617254
mov dword [ebp - 0x4c], 0x696c4365
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x64], 0x6e696854
mov dword [ebp - 0x60], 0x696c4367
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x28], 0x4d646e57
mov dword [ebp - 0x24], 0x642e7267
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ebx
call fcn.10002d59
mov esi, eax
push esi
call fcn.10002da4
pop ecx
cmp esi, ebx
pop ecx
mov edi, eax
je 0x10001d9e
cmp edi, ebx
je 0x10001d9e
or byte [ebp - 0x12], 0xff
or byte [ebp - 0x11], 0xff
or byte [ebp - 0x10], 0xff
push ebx
lea eax, [ebp - 0x18]
push 9
push eax
push edi
push esi
mov byte [ebp - 0x18], 0x83
mov byte [ebp - 0x17], 0xc4
mov byte [ebp - 0x16], 0xc
mov byte [ebp - 0x15], 0x89
mov byte [ebp - 0x14], 0x85
mov byte [ebp - 0x13], 0x18
call fcn.10002e2d
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001d4e
add eax, esi
mov dword [0x10005234], eax
jmp 0x10001d5b
mov dword [ebp - 4], 1
mov dword [0x10005234], ebx
push ebx
lea eax, [ebp - 0xc]
push 7
push eax
push edi
push esi
mov byte [ebp - 0xc], 0x83
mov byte [ebp - 0xb], 0xc4
mov byte [ebp - 0xa], 0x20
mov byte [ebp - 9], 0x83
mov byte [ebp - 8], 0x7d
mov byte [ebp - 7], 0xec
mov byte [ebp - 6], bl
call fcn.10002e2d
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001d95
add eax, esi
mov dword [0x10005244], eax
jmp 0x10001d9e
inc dword [ebp - 4]
mov dword [0x10005244], ebx
lea eax, [ebp - 0x50]
push eax
call fcn.10002d59
mov esi, eax
push esi
call fcn.10002da4
pop ecx
cmp esi, ebx
pop ecx
je 0x10001df8
cmp eax, ebx
je 0x10001df8
push ebx
lea ecx, [ebp - 0xc]
push 6
push ecx
push eax
push esi
mov byte [ebp - 0xc], 3
mov byte [ebp - 0xb], 0x4d
mov byte [ebp - 0xa], 0xc8
mov byte [ebp - 9], 0xc6
mov byte [ebp - 8], 1
mov byte [ebp - 7], bl
call fcn.10002e2d
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001def
add eax, esi
mov dword [0x10005240], eax
jmp 0x10001df8
inc dword [ebp - 4]
mov dword [0x10005240], ebx
lea eax, [ebp - 0x64]
push eax
call fcn.10002d59
mov esi, eax
push esi
call fcn.10002da4
pop ecx
cmp esi, ebx
pop ecx
je 0x10001e60
cmp eax, ebx
je 0x10001e60
push ebx
lea ecx, [ebp - 0x18]
push 9
push ecx
push eax
push esi
mov byte [ebp - 0x18], 0x8b
mov byte [ebp - 0x17], 0x4d
mov byte [ebp - 0x16], 0xcc
mov byte [ebp - 0x15], 0x89
mov byte [ebp - 0x14], 0x88
mov byte [ebp - 0x13], 0x88
mov byte [ebp - 0x12], 2
mov byte [ebp - 0x11], bl
mov byte [ebp - 0x10], bl
call fcn.10002e2d
add eax, 3
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001e57
add eax, esi
mov dword [0x100052ec], eax
jmp 0x10001e60
inc dword [ebp - 4]
mov dword [0x100052ec], ebx
lea eax, [ebp - 0x28]
push eax
call fcn.10002d59
mov esi, eax
push esi
call fcn.10002da4
pop ecx
cmp esi, ebx
pop ecx
mov edi, eax
je 0x10001f09
cmp edi, ebx
je 0x10001f09
push ebx
lea eax, [ebp - 0x18]
push 9
push eax
push edi
push esi
mov byte [ebp - 0x18], 0x8b
mov byte [ebp - 0x17], 0x4d
mov byte [ebp - 0x16], 0x88
mov byte [ebp - 0x15], 0x8b
mov byte [ebp - 0x14], 0x89
mov byte [ebp - 0x13], 0x88
mov byte [ebp - 0x12], bl
mov byte [ebp - 0x11], bl
mov byte [ebp - 0x10], bl
call fcn.10002e2d
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001ec5
add eax, esi
mov dword [0x100051fc], eax
jmp 0x10001ece
inc dword [ebp - 4]
mov dword [0x100051fc], ebx
push ebx
lea eax, [ebp - 0xc]
push 5
push eax
push edi
push esi
mov byte [ebp - 0xc], 0x50
mov byte [ebp - 0xb], 0x6a
mov byte [ebp - 0xa], bl
mov byte [ebp - 9], 0x6a
mov byte [ebp - 8], 0x32
call fcn.10002e2d
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001f00
add eax, esi
mov dword [0x10005248], eax
jmp 0x10001f09
inc dword [ebp - 4]
mov dword [0x10005248], ebx
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret