Function at 0x10001ac1
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea eax, [ebp - 0x4c]
push edi
push eax
lea eax, [ebp - 0x3c]
xor ebx, ebx
push eax
mov dword [ebp - 0x3c], 0x72657375
mov dword [ebp - 0x38], 0x642e3233
mov dword [ebp - 0x34], 0x6c6c
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x4c], 0x646e6553
mov dword [ebp - 0x48], 0x75706e49
mov dword [ebp - 0x44], 0x74
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x60], 0x6f686e55
mov dword [ebp - 0x5c], 0x69576b6f
mov dword [ebp - 0x58], 0x6576456e
mov dword [ebp - 0x54], 0x746e
mov dword [ebp - 0x50], ebx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov dword [0x10005514], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x3c]
push eax
call esi
push eax
call edi
add eax, 0x28
push ebx
mov dword [0x100053fc], eax
mov dword [ebp - 4], ebx
call fcn.10002e40
mov esi, eax
push esi
call fcn.10002e88
pop ecx
cmp esi, ebx
pop ecx
mov edi, eax
je 0x10001cc2
cmp edi, ebx
je 0x10001cc2
push ebx
lea eax, [ebp - 0x2c]
push 8
push eax
push edi
push esi
mov byte [ebp - 0x2c], 0x83
mov byte [ebp - 0x2b], 0xe1
mov byte [ebp - 0x2a], 3
mov byte [ebp - 0x29], 0xf3
mov byte [ebp - 0x28], 0xa4
mov byte [ebp - 0x27], 0x8d
mov byte [ebp - 0x26], 0xc
mov byte [ebp - 0x25], 0x80
call fcn.10002ef7
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001bb4
lea eax, [eax + esi - 0xc]
mov dword [0x100052f8], eax
jmp 0x10001bc1
mov dword [ebp - 4], 1
mov dword [0x100052f8], ebx
or byte [ebp - 0x13], 0xff
push ebx
lea eax, [ebp - 0x14]
push 6
push eax
push edi
push esi
mov byte [ebp - 0x14], 0x6a
mov byte [ebp - 0x12], 0x6a
mov byte [ebp - 0x11], 0x50
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0xf], bl
call fcn.10002ef7
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001bf7
add eax, esi
mov dword [0x10005528], eax
jmp 0x10001c00
inc dword [ebp - 4]
mov dword [0x10005528], ebx
push ebx
lea eax, [ebp - 0x1c]
push 7
push eax
push edi
push esi
mov byte [ebp - 0x1c], 0xb8
mov byte [ebp - 0x1b], 0x2a
mov byte [ebp - 0x1a], 0x2a
mov byte [ebp - 0x19], 0x2a
mov byte [ebp - 0x18], 0x2a
mov byte [ebp - 0x17], 0x8b
mov byte [ebp - 0x16], 0xf1
call fcn.10002ef7
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001c3b
add eax, esi
mov dword [0x1000540c], eax
jmp 0x10001c44
inc dword [ebp - 4]
mov dword [0x1000540c], ebx
push ebx
lea eax, [ebp - 0x24]
push 7
push eax
push edi
push esi
mov byte [ebp - 0x24], 0xb9
mov byte [ebp - 0x23], 0x12
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], 0x8b
mov byte [ebp - 0x1e], 0xf8
call fcn.10002ef7
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001c7c
add eax, esi
mov dword [0x100052c0], eax
jmp 0x10001c85
inc dword [ebp - 4]
mov dword [0x100052c0], ebx
push 2
lea eax, [ebp - 0xc]
push 5
push eax
push edi
push esi
mov byte [ebp - 0xc], 0x66
mov byte [ebp - 0xb], 0x8b
mov byte [ebp - 0xa], 0x53
mov byte [ebp - 9], 0xe
mov byte [ebp - 8], 0x56
call fcn.10002ef7
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001cb9
add eax, esi
mov dword [0x100052f4], eax
jmp 0x10001cc2
inc dword [ebp - 4]
mov dword [0x100052f4], ebx
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret