Function at 0x100068c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x1005f004]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x10054810]
push ebx
push esi
push edi
mov dword [ebp - 0x14], 0x6e72654b
mov dword [ebp - 0x10], 0x32336c65
mov dword [ebp - 0xc], 0x6c6c642e
mov byte [ebp - 8], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0x64496e6f
mov byte [ebp - 0x50], 0
push ebx
xor ebx, edx
add ebx, esp
mov ebx, 0xf29438dd
mov ebx, 0x69801ab5
nop
pop ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x14]
push eax
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov esi, eax
test esi, esi
jne 0x10006952
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x10006952
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x14]
push eax
call ebx
push eax
call edi
mov esi, eax
mov dword [0x1005fb00], esi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x84], 0
push ebx
add ebx, edx
xor ebx, esp
add ebx, esi
add ebx, eax
nop
pop ebx
call fcn.1001c67b
cmp dword [0x1005fb00], 0
jne 0x10006988
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [0x1005fb00]
mov eax, dword [ebp - 0x84]
push 0
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x24], 0x61737477
mov dword [ebp - 0x20], 0x32336970
mov dword [ebp - 0x1c], 0x6c6c642e
mov byte [ebp - 0x18], 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movaps xmm0, xmmword [0x10054770]
movups xmmword [ebp - 0x78], xmm0
mov word [ebp - 0x68], 0x6e
push eax
add eax, esi
sbb eax, edx
sbb eax, esi
add eax, edx
sbb eax, esi
pop eax
push ebp
mov ebp, 0x35547598
add ebp, esp
add ebp, esp
xor ebp, esp
add ebp, esp
add ebp, esp
pop ebp
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x24]
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov ebx, eax
test ebx, ebx
jne 0x10006a33
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x10006a33
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x24]
push eax
call esi
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x88]
call ebx
cmp dword [ebp - 0x80], 0
jne 0x10006a58
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10010ee3
mov esp, ebp
pop ebp
ret
call fcn.1001c67b
cmp eax, 0xfffffffb
jne 0x10006a6a
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
xorps xmm0, xmm0
mov dword [ebp - 0x2b], 0
movq qword [ebp - 0x33], xmm0
lea eax, [ebp - 0x4c]
movaps xmm0, xmmword [0x10054760]
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x61766441
push eax
mov dword [ebp - 0x30], 0x32336970
mov dword [ebp - 0x2c], 0x6c6c642e
mov byte [ebp - 0x28], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0x556e4f64
mov dword [ebp - 0x38], 0x726573
call fcn.1000a920
add esp, 8
push dword [ebp - 0x80]
call eax
test eax, eax
setne byte [ebp - 0x79]
cmp dword [ebp - 0x80], 0
je 0x10006ad8
lea eax, [ebp - 0x80]
push eax
call fcn.1000bc10
add esp, 4
push edx
mov edx, 0xe51f5a97
add edx, edx
xor edx, esp
add edx, esi
nop
pop edx
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0x79]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.10010ee3
mov esp, ebp
pop ebp
ret