Function at 0x10064850
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x30
push ebx
mov byte [esp + 0xc], 0xe
mov al, 0x6a
xor al, byte [esp + 0xc]
mov bl, 0x7a
push esi
mov esi, ecx
mov byte [esp + 0x12], al
mov al, byte [esp + 0x10]
mov bh, 0x6b
xor bh, byte [esp + 0x10]
mov dh, bl
mov dl, 0x67
mov byte [esp + 0x19], 0
mov ah, 0x51
mov byte [esp + 0x11], bh
mov cl, 0x6f
mov byte [esp + 0x19], 0
mov ch, 0x69
mov dword [esp + 0x34], 0xf
xor dl, al
mov dword [esp + 0x30], 0
xor bl, al
mov byte [esp + 0x13], dl
xor ah, al
mov byte [esp + 0x14], bl
xor dh, al
mov byte [esp + 0x15], ah
xor cl, al
mov byte [esp + 0x16], dh
xor ch, al
mov byte [esp + 0x17], cl
mov byte [esp + 0x18], ch
mov byte [esp + 0x20], 0
test bh, bh
jne 0x100648d1
xor ecx, ecx
jmp 0x100648e1
lea ecx, [esp + 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100648d8
sub ecx, edx
push ecx
lea eax, [esp + 0x15]
push eax
lea ecx, [esp + 0x28]
call fcn.10002840
mov ecx, dword [esi]
lea edx, [esp + 0x20]
call fcn.1001b7d0
mov dword [esi + 4], eax
mov eax, dword [esp + 0x34]
cmp eax, 0x10
jb 0x10064916
inc eax
lea ecx, [esp + 0x20]
push eax
push dword [esp + 0x24]
call fcn.10002720
mov cl, 0x3b
mov dword [esp + 0x10], 0x554f593b
mov dword [esp + 0x14], 0x55545864
xor eax, eax
mov dword [esp + 0x18], 0x5649525d
mov byte [esp + 0x1c], 0
xor byte [esp + eax + 0x11], cl
inc eax
cmp eax, 0xb
jae 0x10064947
mov cl, byte [esp + 0x10]
jmp 0x10064937
cmp byte [esp + 0x11], 0
mov byte [esp + 0x1c], 0
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
jne 0x1006496c
xor ecx, ecx
jmp 0x1006497c
lea ecx, [esp + 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10064973
sub ecx, edx
push ecx
lea eax, [esp + 0x15]
push eax
lea ecx, [esp + 0x28]
call fcn.10002840
mov ecx, dword [esi]
lea edx, [esp + 0x20]
call fcn.1001b7d0
mov dword [esi + 8], eax
mov eax, dword [esp + 0x34]
cmp eax, 0x10
jb 0x100649b1
inc eax
lea ecx, [esp + 0x20]
push eax
push dword [esp + 0x24]
call fcn.10002720
mov al, 0x1a
mov byte [esp + 0x10], 0x6e
mov bh, al
mov byte [esp + 0xd], 0xc
xor al, byte [esp + 0x10]
mov ah, 0xb
mov byte [esp + 0xe], bh
xor cl, cl
mov bh, byte [esp + 0xd]
mov dh, ah
xor bh, byte [esp + 0x10]
mov dl, 0x31
mov byte [esp + 0xd], bh
mov bl, 0xa
mov byte [esp + 0x12], al
mov ch, 2
mov al, byte [esp + 0x10]
mov byte [esp + 0x11], bh
xor dl, al
mov bh, byte [esp + 0xe]
xor bl, al
xor ch, al
mov byte [esp + 0xf], ah
xor ah, al
mov byte [esp + 0x1b], cl
xor cl, al
mov byte [esp + 0x14], dl
xor dh, al
mov byte [esp + 0x13], cl
xor bh, al
mov byte [esp + 0x15], bl
mov al, byte [esp + 0xf]
xor al, byte [esp + 0x10]
cmp byte [esp + 0xd], 0
mov byte [esp + 0x16], ah
mov byte [esp + 0x17], ch
mov byte [esp + 0x18], dh
mov byte [esp + 0x19], bh
mov byte [esp + 0x1a], al
mov byte [esp + 0x1b], 0
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
jne 0x10064a52
xor ecx, ecx
jmp 0x10064a69
lea ecx, [esp + 0x11]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10064a60
sub ecx, edx
push ecx
lea eax, [esp + 0x15]
push eax
lea ecx, [esp + 0x28]
call fcn.10002840
mov ecx, dword [esi]
lea edx, [esp + 0x20]
call fcn.1001b7d0
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x34]
cmp eax, 0x10
jb 0x10064a9e
inc eax
lea ecx, [esp + 0x20]
push eax
push dword [esp + 0x24]
call fcn.10002720
mov bh, 0x74
mov byte [esp + 0x10], 0x11
mov byte [esp + 0xf], bh
mov al, 0x65
xor al, byte [esp + 0x10]
mov cl, 0x7f
mov byte [esp + 0xd], 0x73
mov bl, 0x72
mov bh, byte [esp + 0xd]
mov ch, cl
xor bh, byte [esp + 0x10]
mov dh, bl
mov byte [esp + 0xd], bh
mov dl, 0x4e
mov byte [esp + 0x12], al
mov ah, 0x70
mov al, byte [esp + 0x10]
mov byte [esp + 0x11], bh
xor cl, al
mov bh, byte [esp + 0xf]
xor dl, al
xor bl, al
mov byte [esp + 0xe], 0x7d
xor ah, al
mov byte [esp + 0x1b], 0
xor ch, al
mov byte [esp + 0x13], cl
xor dh, al
mov byte [esp + 0x14], dl
xor bh, al
mov byte [esp + 0x15], bl
mov al, byte [esp + 0xe]
xor al, byte [esp + 0x10]
cmp byte [esp + 0xd], 0
mov byte [esp + 0x16], ah
mov byte [esp + 0x17], ch
mov byte [esp + 0x18], dh
mov byte [esp + 0x19], bh
mov byte [esp + 0x1a], al
mov byte [esp + 0x1b], 0
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
jne 0x10064b41
xor ecx, ecx
jmp 0x10064b51
lea ecx, [esp + 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10064b48
sub ecx, edx
push ecx
lea eax, [esp + 0x15]
push eax
lea ecx, [esp + 0x28]
call fcn.10002840
mov ecx, dword [esi]
lea edx, [esp + 0x20]
call fcn.1001b7d0
mov dword [esi + 0x10], eax
mov eax, dword [esp + 0x34]
cmp eax, 0x10
jb 0x10064b86
inc eax
lea ecx, [esp + 0x20]
push eax
push dword [esp + 0x24]
call fcn.10002720
mov cl, 0x74
mov dword [esp + 0x10], 0x13191d74
mov dword [esp + 0x14], 0x1815042b
xor eax, eax
mov dword [esp + 0x18], 0x11000011
mov byte [esp + 0x1c], 0
xor byte [esp + eax + 0x11], cl
inc eax
cmp eax, 0xb
jae 0x10064bb7
mov cl, byte [esp + 0x10]
jmp 0x10064ba7
cmp byte [esp + 0x11], 0
mov byte [esp + 0x1c], 0
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
jne 0x10064bdc
xor ecx, ecx
jmp 0x10064bec
lea ecx, [esp + 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10064be3
sub ecx, edx
push ecx
lea eax, [esp + 0x15]
push eax
lea ecx, [esp + 0x28]
call fcn.10002840
mov ecx, dword [esi]
lea edx, [esp + 0x20]
call fcn.1001b7d0
mov dword [esi + 0x14], eax
mov eax, dword [esp + 0x34]
cmp eax, 0x10
jb 0x10064c21
inc eax
lea ecx, [esp + 0x20]
push eax
push dword [esp + 0x24]
call fcn.10002720
pop esi
pop ebx
mov esp, ebp
pop ebp
ret