Function at 0x10069893
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x188
mov eax, 0x102639e6
call fcn.10054407
mov edi, dword [ebp + 8]
xor ebx, ebx
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], ebx
call fcn.10055653
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 1
call fcn.10055653
push esi
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 2
call fcn.10057da6
test al, al
je 0x1006a233
xor ecx, ecx
mov dword [edi], ebx
inc ecx
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov dword [edi + 0x48], ecx
lea ecx, [edi + 0x10]
mov dword [edi + 0x40], 0x1e
mov byte [edi + 0x44], bl
cmp dword [edi + 0x24], 8
mov dword [edi + 0x20], ebx
jb 0x10069913
mov ecx, dword [edi + 0x10]
xor eax, eax
lea esi, [edi + 0x64]
mov word [ecx], ax
mov eax, esi
cmp dword [esi + 0x14], 0x10
mov dword [esi + 0x10], ebx
jb 0x10069928
mov eax, dword [esi]
mov byte [eax], bl
lea ecx, [edi + 0x28]
cmp dword [edi + 0x3c], 8
mov dword [edi + 0x38], ebx
jb 0x10069939
mov ecx, dword [edi + 0x28]
xor eax, eax
mov word [ecx], ax
lea ecx, [edi + 0x7c]
cmp dword [edi + 0x90], 0x10
mov dword [edi + 0x8c], ebx
jb 0x10069953
mov ecx, dword [edi + 0x7c]
lea eax, [edi + 0xac]
mov byte [ecx], bl
cmp dword [eax + 0x14], 0x10
mov ecx, eax
mov dword [eax + 0x10], ebx
jb 0x10069968
mov ecx, dword [eax]
mov byte [ecx], bl
lea ecx, [ebp - 0x28]
push 2
push 0x1026eb60
mov dword [edi + 0x10c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
push edi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0xb0]
call fcn.100575d5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.100068e0
push 2
push 0x102dde4c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 4]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.100575d5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.100068e0
push 4
push str.land
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 8]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.100575d5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.100068e0
push 6
push str.module
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 0xc]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.100575d5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.100068e0
push 3
push 0x102ddb18
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.100068e0
push 0x3a8
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
push eax
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.10004bc0
lea eax, [ebp - 0x28]
push eax
call fcn.1005c0fc
add esp, 0x20
lea ecx, [edi + 0x10]
push eax
call fcn.10005380
lea ecx, [ebp - 0x28]
call fcn.100042b0
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push 3
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x30], ebx
push 0x1026eb6c
mov dword [ebp - 0x18], ebx
mov byte [eax], bl
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.100068e0
push 0x3a8
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
push eax
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.10004bc0
lea eax, [ebp - 0x28]
push eax
call fcn.1005c0fc
add esp, 0x20
lea ecx, [edi + 0x28]
push eax
call fcn.10005380
lea ecx, [ebp - 0x28]
call fcn.100042b0
lea ecx, [ebp - 0x78]
call fcn.10055653
push 6
push str.config
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.1005772d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
mov bl, al
call fcn.100068e0
test bl, bl
je 0x1006a215
push 6
xor ebx, ebx
mov dword [ebp - 0x14], 0xf
push str.intert
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 0x40]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100575d5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
push 5
push str.param
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 0xac]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
push 7
push str.dllmain
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 0x7c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
push 7
push str.exename
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 0x94]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
push 0xa
push str.returnbool
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 0x44]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100578f6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
push 7
push str.funtype
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x78]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
push 5
push str.admin
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 0x4c]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
push 4
push str.land
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 8]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100575d5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
push 0xd
push str.firstdlldelay
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [edi + 0xc4]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push 0xa
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x30], ebx
push str.usercfgtag
mov dword [ebp - 0x18], ebx
mov byte [eax], bl
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
mov bl, al
call fcn.100068e0
test bl, bl
je 0x10069e3a
xor eax, eax
cmp eax, dword [ebp - 0x30]
sbb eax, eax
neg eax
mov dword [edi + 0x48], eax
push 0xb
xor ebx, ebx
mov dword [ebp - 0x14], 0xf
push str.dlldelayqid
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.1005772d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
lea ecx, [ebp - 0x190]
call fcn.10057c47
test eax, eax
jle 0x10069ef3
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x16
push eax
push esi
lea ecx, [ebp - 0x190]
call fcn.10057b08
test al, al
je 0x10069ed4
lea ecx, [edi + 0xdc]
mov eax, dword [ecx + 4]
cmp dword [ecx + 8], eax
je 0x10069eca
lea eax, [ebp - 0x28]
push eax
call fcn.10018840
jmp 0x10069ed4
lea edx, [ebp - 0x28]
push edx
push eax
call fcn.10034be0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100068e0
lea ecx, [ebp - 0x190]
inc esi
call fcn.10057c47
cmp esi, eax
jl 0x10069e8c
lea esi, [edi + 0x64]
lea ecx, [ebp - 0x158]
call fcn.10055653
push 7
push str.onlyqid
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.1005772d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.100068e0
lea ecx, [ebp - 0x158]
call fcn.10057c47
test eax, eax
jle 0x10069fb9
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x19
push eax
push esi
lea ecx, [ebp - 0x158]
call fcn.10057b08
test al, al
je 0x10069f9a
lea ecx, [edi + 0xe8]
mov eax, dword [ecx + 4]
cmp dword [ecx + 8], eax
je 0x10069f90
lea eax, [ebp - 0x28]
push eax
call fcn.10018840
jmp 0x10069f9a
lea edx, [ebp - 0x28]
push edx
push eax
call fcn.10034be0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.100068e0
lea ecx, [ebp - 0x158]
inc esi
call fcn.10057c47
cmp esi, eax
jl 0x10069f52
lea esi, [edi + 0x64]
cmp dword [esi + 0x10], 0
jbe 0x10069fec
sub esp, 0x18
mov ecx, esp
push esi
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.10004bc0
lea eax, [ebp - 0x28]
push eax
call fcn.1005be78
add esp, 0x1c
mov ecx, esi
push eax
call fcn.10022680
lea ecx, [ebp - 0x28]
call fcn.100068e0
lea ecx, [ebp - 0xe8]
call fcn.10055653
push 0xb
push str.localbinary
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.1005772d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
mov bl, al
call fcn.100068e0
test bl, bl
je 0x1006a1ff
push 0x54
call fcn.10053ab3
mov esi, eax
xor ebx, ebx
pop ecx
test esi, esi
je 0x1006a069
push 0x54
push ebx
push esi
call fcn.100cd120
add esp, 0xc
mov ecx, esi
call fcn.100697fa
jmp 0x1006a06b
mov eax, ebx
push 4
push str.name
lea ecx, [ebp - 0x28]
mov dword [edi + 0x10c], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
push dword [edi + 0x10c]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0xe8]
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
call fcn.100068e0
push 7
push str.lbparam
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
mov eax, dword [edi + 0x10c]
lea ecx, [ebp - 0xe8]
add eax, 0x30
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
call fcn.100068e0
push 9
push str.lbdllmain
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
mov eax, dword [edi + 0x10c]
lea ecx, [ebp - 0xe8]
add eax, 0x18
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100577de
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
call fcn.100068e0
lea ecx, [ebp - 0x120]
call fcn.10055653
push 8
push str.lbrunver
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.10006d00
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xe8]
call fcn.1005772d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
call fcn.100068e0
lea ecx, [ebp - 0x120]
mov esi, ebx
call fcn.10057c47
test eax, eax
jle 0x1006a1f4
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x120]
cmovae eax, dword [ebp - 0x40]
mov byte [eax], bl
lea eax, [ebp - 0x40]
push eax
push esi
call fcn.10057b08
mov ecx, dword [edi + 0x10c]
add ecx, 0x48
mov eax, dword [ecx + 4]
cmp dword [ecx + 8], eax
je 0x1006a1da
lea eax, [ebp - 0x40]
push eax
call fcn.10018840
jmp 0x1006a1e4
lea edx, [ebp - 0x40]
push edx
push eax
call fcn.10034be0
lea ecx, [ebp - 0x120]
inc esi
call fcn.10057c47
cmp esi, eax
jl 0x1006a19e
lea ecx, [ebp - 0x120]
call fcn.1005570e
lea ecx, [ebp - 0xe8]
call fcn.1005570e
lea ecx, [ebp - 0x158]
call fcn.1005570e
xor ebx, ebx
cmp dword [edi + 0x20], ebx
je 0x1006a22b
cmp dword [edi + 0x8c], ebx
je 0x1006a22b
cmp dword [edi + 0x38], ebx
je 0x1006a22b
mov bl, 1
lea ecx, [ebp - 0x78]
call fcn.1005570e
lea ecx, [ebp - 0x190]
call fcn.1005570e
lea ecx, [ebp - 0xb0]
call fcn.1005570e
lea ecx, [ebp - 0x40]
call fcn.100068e0
mov al, bl
call fcn.100543b1
ret